iu f UdZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddZ de ddfdZ eejjZejde edd Zedd lmZdd lmZeed z  dejvrddlZedz Zereed5Zej epi!diZ"dddn #1swxYwYe#e"e$rde?fd!Z@d"eAde e fd#ZBdd$e de e fd%ZCdd'eAd(e d)e?fd*ZDd+e$d,eAfd-ZEd.e de e fd/ZFd0e e de e fd1ZGdd2e e d3e e ddfd4ZHeId5hZJd6ede?fd7ZKd8ede efd9ZLd8ede?fd:ZMd8ede?fd;ZNdd<ZOd8ed=e?dePeAe effd>ZQd?eRdeAe fd@ZS ddAe e d=e?dBe e dCe e d?eRf dDZTdEZUdFZVdGZWdHZXdIZYddJZZdKZ[gdLZ\eAePe e e fe]dM<dNe$de fdOZ^dPdPdPdQdRe dCe dBe dSe dTe ddf dUZ_de`fdVZaddWZbdRe ddfdXZc ddRe dYe dZeAd[e ddf d\ZddRe dNe$ddfd]Zedd^d_Zfdd`ZgddaZhddbZiddcZjdddegZkddfZlddgZmddhZndiZodSe de fdjZpddkZq ddlZrddmZsdnZtdoZuddplvmwZwde fdqZxdre ddfdsZyddtZzdduZ{ddvZ|ddwZ}dSe de fdxZ~dye de fdzZdd{Zdd|Zdd}Zdd~ZdZddZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZd6ede`fdZdde de dede fdZdede?fdZdddde dedePe dfde?dejf dZd&ddede?de?fdZdeAe`fdZddZ dde ddfdZeZdZdeAe dede e fdZdeAe dede de e fdZ dde de e ddfdZ ddeAe dede de?de?f dZhdZdZdZdeAe dede e fdZde e de?fdZdeAe dede?fdZdeAe dede?fdZdeAe dede de de`f dZde?fdZdZdeAe dede?fdZdeAe deddfdZd„ZdeAe fdÄZddĜdeAe de$e e fdzddfdDŽZddȄZGdɄdʦZdde?fd̄Zd̈́Zd΄ZddτZddЄZdфZde?fd҄ZdeAdeAfdԄZdՄZde`fdքZdׄZdd؄ZdلZdڄZe # Map current directory to a session name hermes honcho peer # Show peer names and dialectic settings hermes honcho peer --user NAME # Set user peer name hermes honcho peer --ai NAME # Set AI peer name hermes honcho peer --reasoning LEVEL # Set dialectic reasoning level hermes honcho mode # Show current memory mode hermes honcho mode [hybrid|honcho|local] # Set memory mode hermes honcho tokens # Show token budget settings hermes honcho tokens --context N # Set session.context() token cap hermes honcho tokens --dialectic N # Set dialectic result char cap hermes honcho identity # Show AI peer identity representation hermes honcho identity # Seed AI peer identity from a file (SOUL.md etc.) hermes honcho migrate # Step-by-step migration guide: OpenClaw native → Hermes + Honcho hermes version Show version hermes update Update to latest version hermes uninstall Uninstall Hermes Agent hermes acp Run as an ACP server for editor integration hermes sessions browse Interactive session picker with search hermes claw migrate --dry-run # Preview migration without changes N)Path)OptionalreturncL|ddtjddS)zzAttach the ``--accept-hooks`` flag. Shared across every agent subparser so the flag works regardless of CLI position.z--accept-hooks store_truezuAuto-approve unseen shell hooks without a TTY prompt (equivalent to HERMES_ACCEPT_HOOKS=1 / hooks_auto_accept: true).actiondefaulthelpN) add_argumentargparseSUPPRESS)parsers 4/home/ubuntu/.hermes/hermes-agent/hermes_cli/main.py_add_accept_hooks_flagr7s= ! O  command_namectjs5td|dtjtjddSdS)aExit with a clear error if stdin is not a terminal. Interactive TUI commands (hermes tools, hermes setup, hermes model) use curses or input() prompts that spin at 100% CPU when stdin is a pipe. This guard prevents accidental non-interactive invocation. zError: 'hermes z' requires an interactive terminal. It cannot be run through a pipe or non-interactive subprocess. Run it directly in your terminal instead.fileN)sysstdinisattyprintstderrexit)rs r _require_ttyrEsk 9      9l 9 9 9      rctjdd}d}d}t|D]c\}}|dvr%|dzt|kr||dz}d}n6|dr |ddd}d}nd|!t jdrdS|r dd l m }|d z }| r2| }|r |d kr|}d}n#ttf$rYnwxYw|T dd lm}||} n#t$t&f$r<} t)d | tjtjdYd} ~ n:d} ~ wt.$r*} t)d| dtjYd} ~ dSd} ~ wwxYw| t jd<|dkrt|D]\}}|dvr>|dz} tjd| tj| |zdzt_dS|dr>|dz} tjd| tj| dzdzt_dSdSdSdS)zAPre-parse --profile/-p and set HERMES_HOME before module imports.rNr)z --profilez-pz --profile== HERMES_HOMEget_default_hermes_rootactive_profiler )resolve_profile_envError: rz"Warning: profile override failed (z), using default)rargv enumeratelen startswithsplitosenvirongethermes_constantsr$exists read_textstripUnicodeDecodeErrorOSErrorhermes_cli.profilesr& ValueErrorFileNotFoundErrorrrr Exception) r( profile_nameconsumeiargr$ active_pathnamer& hermes_homeexcstarts r_apply_profile_overriderCds! 8ABBOPENAI_API_KEYANTHROPIC_TOKENOPENAI_BASE_URLANTHROPIC_API_KEYOPENROUTER_API_KEYapi_keyc3>K|]}tj|VdSN)r-getenv).0vs r z/_has_any_provider_configured..s* 3 3A29Q<< 3 3 3 3 3 3rTrJrK#r!z'" logged_inz auth.jsonNactive_providerproviderbase_url)read_claude_code_credentialsis_claude_code_token_valid refreshTokenF)hermes_cli.configrjrErShermes_cli.authrkrlr/ isinstancedictr3strrovalues auth_typeupdateapi_key_env_varsanyr1r2 splitlinesr+ partitionr9itemsjsonloadsagent.anthropic_adapterrr)rjrErSrkrl_DEFAULT_MODELcfg model_cfg _model_name_has_hermes_configroprovider_env_varspconfigenv_filelinekey_val provider_idstatus auth_filerauthactive cfg_provider cfg_base_url cfg_api_keyrrcredss r_has_any_provider_configuredrsLLLLLLLLLL////// 100000#''44N +--C  I)T"" }}Y//52<<>> Is # #oo''  $F)F 211111%++--??   ) )  $ $W%= > > > 3 3!2 3 3 333t|~~H   **G*<<GGII  zz||??3''3d??"nnS11 Qiikk''..99;;"333344     D  $5$;$;$=$=   K I--$_[11Fzz+&& tt          !!K/I   KKK4:i113344DXX/00F (00::k** 4    D )T""! j117R>>@@ ! j117R>>@@  }}Y//52<<>>  < ; 4            1022E **511 5:YY~5N5N t    D  5sW?B1G42G44 HHAI I IIAK!! K.-K. 4O OOsessionsc  stddS ddl dgd d fd} |dS#t$rYnwxYwtdt D]\}}|dpd }|d pd }|p |p|d }t|d kr |dd dz}t|d}|dd dd}td|dzdd|dd|dd| tdtd} | r| dvrdSt| dz } d| cxkrtkrnn| d Stdtdn@#t$rtdYn%ttf$rtYdSwxYw)aInteractive curses-based session browser with live search filtering. Returns the selected session ID, or None if cancelled. Uses curses (not simple_term_menu) to avoid the ghost-duplication rendering bug in tmux/iTerm when arrow keys are used. No sessions found.Nrc|dpd}|dpd}|dddd}t|d}|ddd }d }td ||z }|r |d|} n|r |d|} n|} | d |d |dd |dd|S)z!Format a session row for display.titlernpreviewsourceN last_activeid-< <10<5 )r/r3rhmax) smax_xrrrrsid fixed_cols name_widthr?s r _format_rowz+_session_browse_picker.._format_rowzsUU7^^)r0022EuuY''-24466GUU8R((!,F(})=)=>>KD'#2#,C-JR!344J [j[) { {+PZPPPPKPPPvPPP3PP Prc|}||dpdvp||dpdvpT||ddvp*||dpdvS)z?Check if a session matches the search query (case-insensitive).rrnrrr)lowerr/)rqueryqs r_matchz&_session_browse_picker.._matchs AaeeGnn*113338y))/R668888dB--///8x.B55777  rc  drdjddjddjddddd}d}dt} | | \}}|d ks|d krS | ddd n#j $rYnwxYw| |dSr:d d}j}r|dz}n5d}j}r|dz} |dd||dz |n#j $rYnwxYwd}t%d||z } ddd| dddddddd} rdnj} |dd| |dz | n#j $rYnwxYw|dz } | dkrd} |s7 d} |dd| |dz jn:#j $rYn-wxYw|t)|krt)|dz }|dkrd}||kr|}n||| zkr|| z dz}t+t-|t/t)||| zD]\}}|dz}||dz krn||}||krdnd}|||dz z}j}||kr3j}r|dz} ||d||dz |#j $rYwxYw|dz }|rPd|dzdt)|d}t)|t)kr|d t)d!z }nd"t)d} ||d||dz rdnjn#j $rYnwxYw| |}|jfvr|r|dz t)|z}n|jfvr|r|dzt)|z}n|jd#d$fvr|r||d%d<dS|d&krrdt}d}d}ndS|jd'dfvr2r/ddrfd(D}nt}d}d}nL|t;d)krsdSd*|cxkrd+kr(nn%t=|z fd,D}d}d})-Nrrr rnT(zTerminal too smallu Browse sessions — filter: u█uM Browse sessions — ↑↓ navigate Enter select Type to filter Esc quitrrz zTitle / PreviewrrActiverSrcrrIDz No sessions match the filter. → / sessionsz (filtered from )z 0/ rc,g|]}||Srryrr search_texts r zB_session_browse_picker.._curses_browse..,s*'V'V'Vavva?U?U'V'V'V'Vrr ~c,g|]}||Srrrs rrzB_session_browse_picker.._curses_browse..6s*NNNavva7M7MNNNNr)curs_set has_colors start_coloruse_default_colors init_pair COLOR_GREEN COLOR_YELLOW COLOR_CYANlistcleargetmaxyxaddstrerrorrefreshgetchA_BOLD color_pairaddnstrrA_DIMr*r)rangeminA_NORMALKEY_UPKEY_DOWN KEY_ENTER KEY_BACKSPACEordchr)stdscrcursor scroll_offsetfilteredmax_yrheader header_attrrr col_headerdim_attr visible_rowsmsgdraw_ir<yrarrowrowattrfooter_yfooterrrrrcurses result_holderrs @r_curses_browsez._session_browse_picker.._curses_browses OOA     "" +""$$$))+++  F$6;;;  F$7<<<  F$5r:::  Ar***FMKH~~HO & %00 u199  a,@AAAA!<NN$$$LLNNNF <NkNNNF"(-K((**<#v'8'8';';; lF"(-K((**<#v'8'8';';; NN1aKHHHH|D1  UZ%788 g#4gzgggghgggV[gggaegg 060A0A0C0CU))!,,,NN1aUQYIIII|D %qy !###$L $!?q!S%!)V\JJJJ!<X..!$X!2zz!" --(. =<#???(.(=(A %.)H }|/KLL&&!!  #QJ >>!E$QK+,;;E#kk!UQY&?&??%;;#)=D%0022= $(9(9!(<(< <!"NN1aeaiFFFF%|!!! D!!19=G&1*GGs8}}GGGF8}}s8}}44"ES]]"E"E"EE"(1*H !=V_...>"(1*H !=V-r2666B+3F+;D+A a(FBYY"&( #'>>!"() V13:::"*&1#2#&6 &6'V'V'V'V'V8'V'V'VHH'+H~~H!"() CHH__[_F3%%%%#%%%%%3s88+KNNNNN8NNNHF$%M_O &sn D%% D21D2G.. G;:G;(A I55 JJ#J:: KKO$$ O10O1A R** R76R7z: Browse sessions (enter number to resume, q to cancel) rrnrr2/...rrrrrz>3. <50rTz Select [1-]: )rquitrz Invalid selection. Enter 1-z or q to cancel.z/ Invalid input. Enter a number or q to cancel.)rrwrapperr9r)r/r3r*rhinputrrcr7KeyboardInterruptEOFError)rrr<rrrlabelrsrcridxrrrrs` @@@@r_session_browse_pickerr!is  "###tI    Q Q Q,   ^ &^ &^ &^ &^ &^ &^ &^ &^ &@ ~&&&Q       HIII(##FF1w%2,,..55##)r0022++AdG u::??#2#J&E$QUU=%9%9:: eeHb!!"1"% D1q5DDDuDDDKDDDsDDEEEE  ;X;;;<<BBDDC #))++)>>>tc((Q,CC''''#h--'''''}T** Q#h--QQQ R R R R E E E C D D D D D!8,    GGG44  s62A AA"A H .#t$rYn2wxYwn-#|& |w#t$rYwwxYwwxYwdS)z7Look up the most recently-used session ID for a source.Nr SessionDBr)rlimitr) hermes_stater$search_sessionscloser9)rdbr$rs r_resolve_last_sessionr*\sE B ****** Y[[%%V1%==$,6x{4  $6 >              >       2>        4sk8A&A A"!A"& A30B 2A33B :B BB C $B98C 9 CC CC Fcmdbackendvia_sudoc tj|dddS#tj$rC|rd|n|}td|d|dtjt jd Yd SwxYw) zRun a container inspect probe, returning the CompletedProcess. Catches TimeoutExpired specifically for a human-readable message; all other exceptions propagate naturally. Tcapture_outputtexttimeoutzsudo zError: timed out waiting for z to respond. The z+ daemon may be unresponsive or starting up.rrN) subprocessrunTimeoutExpiredrrrr)r+r,r-rs r_probe_containerr7ps ~c$T2NNNN  $%-:!!!!7  HE H H H H H     sAA,+A,container_infocli_argscL|d}|d}|d}|d}tj|}|s3td|dtjtjdd }t |d d d |g|}|jd krtjd}|rt |d|d d d |g|d} | jd krjtd|d|d|d|dtj ddd|dd |tjtjdnKtd|d|dd |tjtjdtj } | rdgndg} g} dD]?} tj | }|r| d | d!|g@|r|d|gn|g}|d"gz| zd#|gz| z||gz|z}tj|d |d S)$aReplace the current process with a command inside the managed container. Probes whether sudo is needed (rootful containers), then os.execvp into the container. On success the Python process is replaced entirely and the container's exit code becomes the process exit code (OS semantics). On failure, OSError propagates naturally. Args: container_info: dict with backend, container_name, exec_user, hermes_bin cli_args: the original CLI arguments (everything after 'hermes') r,container_name exec_user hermes_binr'z. not found on PATH. Cannot route to container.rrNinspectz--formatokrsudo-nT)r-zError: container 'z' not found via zL. The container is likely running as root. Your user cannot see it because z7 uses per-user namespaces. Grant passwordless sudo for u — the -n (non-interactive) flag is required because a password prompt would hang or break piped commands. On NixOS: security.sudo.extraRules = [{ users = [ "USERz your-userz"" ]; commands = [{ command = "z<"; options = [ "NOPASSWD" ]; }]; }]; Or run: sudo hermes rz<. The container may be running under root. Try: sudo hermes z-it-i)TERM COLORTERMLANGLC_ALL-er!execz-u)shutilwhichrrrrr7 returncoder-rxjoinrrr.r/extendexecvp)r8r9r,r;r<r=runtime sudo_pathprobeprobe2is_tty tty_flags env_flagsvarr cmd_prefixexec_cmds r_exec_in_containerrZs'Y'G#$45N{+I -Jl7##G  Mg M M M      I  )Z~>  E 1L((  %D'9j$WF  A%%@@@@@ '@@!( @@')i &D&D@@6=@@,/88H+=+=@@!$ b^bbWbbMPXXV^M_M_bbZ     HQKKK Y    F!-vII655jnnS!!  5   dsNNSNN3 4 4 4/8G)T7++wiJ (          : &  '    Ihqk8$$$$$r name_or_idc8 ddlm}|}||}d}|r |d}n||}|r) ||p|}n#t $rYnwxYw||S#t $rYnwxYwdS)aXResolve a session name (title) or ID to a session ID. - If it looks like a session ID (contains underscore + hex), try direct lookup first. - Otherwise, treat it as a title and use resolve_session_by_title (auto-latest). - Falls back to the other method if the first doesn't match. - If the resolved session is a compression root, follow the chain forward to the latest continuation. Users who remember the old root ID (e.g. from an exit summary printed before the bug fix, or from notes) get resumed at the live tip instead of a stale parent with no messages. rr#Nr)r&r$ get_sessionresolve_session_by_titleget_compression_tipr9r()r[r$r)session resolved_ids r_resolve_session_by_name_or_idrbs ****** Y[[..,,%)  B!$-KK55jAAK    44[AAP[             4s6A B A$#B $ A1.B 0A11B BBpathc |sdS tjt|d}t |dpd}|pdS#t$rYdSwxYw)NrJrK session_idrn)rrrr2rr/r3r9)rcdatars r_read_tui_active_session_filergs tz$t**...@@AA$((<((.B//5577{d ttsA.A55 BBreactive_session_filec &t|p|ptd}|sdSd} ddlm}|}||}|s ||dSdS||}t|dpd}|dkr ||dSdSt|dpd}t|dpd} t|d pd} t|d pd} t|d pd} || z| z| z| z} n)#t$rY||dSdSwxYw ||n#||wwxYwttd td ||rtd|dttd||rtd|td|td| d|d| d| | zd| d dS)z/Print a shell-visible epilogue after TUI exits.tuirNrr# message_count input_tokens output_tokenscache_read_tokenscache_write_tokensreasoning_tokenszResume this session with:z hermes --tui --resume z hermes --tui -c ""zSession: zTitle: zMessages: zTokens: z (in z, out z, cache z , reasoning r) rgr*r&r$r]r(get_session_titlercr/r9r)rerhtargetr)r$r`rrlrmrnrorprq total_tokenss r_print_tui_exit_summaryrvsZ *+> ? ? t: tQfnsQtQtQtF  B****** Y[[..((  * > HHJJJJJ >'$$V,,GKK88=A>> A    > HHJJJJJ >7;;~66;!<< GKK88=A>>  ,? @ @ EAFF -A!B!B!GaHHw{{+=>>C!DD   ! !      > HHJJJJJ >  > HHJJJ > HHJJJJ  GGG %&&& -V - -... . ,E,,,--- GGG %V % %&&& * ((())) ,] , ,---  Y  Y Y* Y Y2? Y Y"%77 Y YEU Y Y Ys6'F+?FCFG  F.G -F..G G" ideallyInertrootc|dz dz dz dz }|sdS|dz }|sdS|dz dz }|sdS tj|d d pi}tj|d d pi}nV#t t tjf$r7|j |j kcYSwxYwd td tfd}| D]\}}|st|ts||vr.|ds|drMdSt||tr!|||||krdSdS)uTrue when @hermes/ink is missing or node_modules is behind package-lock.json. Compares ``package-lock.json`` against ``node_modules/.package-lock.json`` (npm's hidden lockfile) by **content**, not mtime: git checkouts and npm rewrites can bump the root lockfile's timestamp even when installed deps already match, which used to trigger a spurious "Installing TUI dependencies" on every launch. For each entry in the root lock's ``packages`` map: - missing from hidden lock → reinstall (unless the entry is marked ``optional`` or ``peer``, which npm may intentionally skip per platform) - present but with differing fields (excluding npm-written runtime annotations like ``ideallyInert``) → reinstall Extra entries that exist only in the hidden lock are ignored — stale transitives left over from a removed dependency don't break runtime and we'd rather not force a reinstall for them. Falls back to mtime comparison if either lockfile is unparseable. node_modulesz@hermesink package.jsonTpackage-lock.jsonFz.package-lock.jsonrJrKpackagespkgrc>d|DS)Nc,i|]\}}|tv||Sr)_NPM_LOCK_RUNTIME_KEYSrykrzs r z=_tui_need_npm_install..comparable..ss)PPPA9O0O0O10O0O0Or)r)rs r comparablez)_tui_need_npm_install..comparablersPPPPPProptionalpeer) is_filerrr2r/r5r4JSONDecodeErrorstatst_mtimerrr) rxr{lockmarkerwanted installedrr?rs r_tui_need_npm_installrKs(  ) +e 3n DC ;;==t % %D <<>>u N "%9 9F >>  t =DNNGN<<==AA*MMSQSJv///AABBFFzRRXVX ')= >===yy{{#fkkmm&<<<<<=QQQQQQ\\^^   c  #t$$   y wwz"" cggfoo 44 iot , , CJJyY]D_D_1_1_44 5sA:CAD-,D-tui_dirctjd}|r:t|}|dz dz rt |s|S|dz dz rt |s|SdS)zTDirectory whose dist/entry.js we should run: HERMES_TUI_DIR first, else repo ui-tui.HERMES_TUI_DIRdistentry.jsN)r-r.r/rr1r)renvps r_find_bundled_tuirs *..) * *C  II J # + + - - 6KA6N6N H&:%--//8Mg8V8V 4rcT t|rdS|dz dz }|sdS|j}t ddh t j|dD]x\}}} fd|D|dd<|D]\}|drEt j t j |||krdS]ydD];}||z }|r |j|krdS.<<>t ZZ\\ "F nf- . .D(*(F(F(F  $9<<<<(<<<   B{{?++ 7##BGLL"$=$=>>GG444  t^ 99;; 27799-6644 5rc6 |dz dz }|dz dz }|sdS|j}tddh t j|dD]x\}}} fd|D|dd<|D]\}|d rEtjtj |||krdS]y|d z }|r|j|krdSd S) Nr~z hermes-inkrz ink-bundle.jsTrzrcg|]}|v| Srrrs rrz,_hermes_ink_bundle_stale..rrrr|F) r1rrrr-rrrcrrM) rink_rootbundlebmrrrrrrs @rrrs6#l2H   0F ==??t  B nf- . .D(*$(G(G(G  $9<<<<(<<<   B{{?++ 7##BGLL"$=$=>>CC444  N "B yy{{rwwyy)B..t 5rctjdrtjdrdStjdrdSt dz dz dz }|sdStjdp"ttj d z } tj d d d |d gitjd|iddd}n#ttj f$rYdSwxYwtjddtj}g}|jpd}|r9|t|j|t|dz dz tj dz dz g|D]?}t|}|r||vr|d|@tj|tjd<dS)uzMake sure `node` + `npm` are on PATH for the TUI. If either is missing and scripts/lib/node-bootstrap.sh is available, source it and call `ensure_node` (fnm/nvm/proto/brew/bundled cascade). After install, capture the resolved node binary path from the bash subprocess and prepend its directory to os.environ["PATH"] so shutil.which finds the new binaries in this Python process — regardless of which version manager was used (nvm, fnm, proto, brew, or the bundled fallback). Idempotent no-op when node+npm are already discoverable. Set ``HERMES_SKIP_NODE_BOOTSTRAP=1`` to disable auto-install. nodenpmNHERMES_SKIP_NODE_BOOTSTRAPscriptslibznode-bootstrap.shr"z.hermesbash-czsource "z+" >&2 && ensure_node >&2 && command -v nodeTF)rr1r2checkPATHrnbinz.localr)rJrKr-r.r/ PROJECT_ROOTrrrhomer4r5r5SubprocessErrorr,pathsepstdoutr3appendresolveparentrNis_dirinsertrM)helperr@resultpartsextrasresolvedextrars r_ensure_tui_noders6|F U 3 3 z~~233 I % -0C CF >>  *..//O3ty{{Y7N3O3OKN6NNN  ;2::}k::     Z/ 0 JNN62 & & , ,RZ 8 8EF #**,,H7 d8nn,,..5666 MM4 $$v-5ty{{X7MPU7UVWWW JJ <<>> aunn LLA   //BJvs50C&&D?Dtui_devc tdtdtfd}|s}tjd}|r\t |}|dz dz r3t|s$|d}|t|dz dz g|fS|d}t|rtjd std tj |d d d ddgt|tj tj ditjddi}|j dkr~|jpd}d|dd} td| rt| t%jd|rt)|rtj |ddddgt|dd}|j dkr|jpd|jpd} d| dd} td | rt| t%jd|d!z d"z d#z } | rt| d$g|fS|d%g|fSt-|rtj |ddgt|dd}|j dkr|jpd|jpd} d| dd} td&| rt| t%jdt/|} | s#td't%jd|d}|t| dz dz g| fS)(uTTUI: --dev → tsx src; else node dist (HERMES_TUI_DIR or ui-tui, build when stale).rrcL|dkratjd}|r@tj|r!tj|tjr|Stj|}|s&t|dtj d|S)Nr HERMES_NODEu. not found — install Node.js to use the TUI.r) r-r.r/rcisfileaccessX_OKrJrKrrr)renv_nodercs r _node_binz!_make_tui_argv.._node_bins &==z~~m44H BGNN844 8RW9U9U |C    SHHH I I I HQKKK rrrrrr HERMES_QUIETuInstalling TUI dependencies…install--silent --no-fund --no-audit--progress=falseTCI1)cwdrrr2rrrn Nznpm install failed.rr5buildz--prefixzpackages/hermes-inkrr1r2z@hermes/ink build failed.rzz.bintsxz src/entry.tsxrBzTUI build failed.z'TUI build did not produce dist/entry.js)rrr-r.r/rr1rrr4r5DEVNULLPIPErLrr3rMrrrrrrr) rrrext_dirrrrrerrrcombinedrrxs r_make_tui_argvrs# s s     ?*..!122  ?W AF Z'//11 ?:OPQ:R:R ? y((c!f*z"9::;Q>> )E  CW%%z~~n-- 4 2 3 3 3 )ZlDV WG %?)2:)tS))       ! !=&B--//Cii 0 0 677G ' ( ( ( g HQKKK' #G , , ^eWj2GHLL# F  A%%$m1rH6=3FBHHNNPP))H$7$7$9$9#$$$?@@1222#'NNN &/%7 ::<< 8HHo.7 7W~w&&!!  % !G        ! ! --2Dv}/BDDJJLLHii 3 3 5 5cdd ;<K|]}|VdSrw)r3)ryparts rr{z*_normalize_tui_toolsets..bs*!K!K4$**,,!K!K!K!K!K!Kr,cg|]}||Srrryitems rrz+_normalize_tui_toolsets..fs444t4444r) hermes_cli.oneshotrAttributeError ImportErrorrrrtuplerNr,rr3)rr raw_items normalizedrs r_normalize_tui_toolsetsrQs.5::::::""8,,22 K (555 III",Xs";";IXJJ )dE]33 $" I "  5 5D$$$ 5!!!K!K4::c??!K!K!KKKKK!!#d))//"3"34444444444445sC7CC76C7resume_session_idrmrctdz }ddl}tj}|dd\}} tj|| |d<tjdtt|d<| d tj | d tj | d |rd nd |r ||d<||d<|r ||d<||d<t|} | rd| |d<|dd} t!d| Ds| dd| vr| dd| |d<|r||d<t%||\} } d} t'j| t| |}n#t*$rd}YnwxYw|dvrt-||  tj| n:#t0$rYn.wxYw# tj| w#t0$rYwwxYwxYwtj|dS)z%Replace current process with the TUI.ui-tuirNzhermes-tui-active-session-z.json)prefixsuffixHERMES_TUI_ACTIVE_SESSION_FILEHERMES_PYTHON_SRC_ROOT HERMES_PYTHON HERMES_CWDNODE_ENV development production HERMES_MODELHERMES_INFERENCE_MODELHERMES_TUI_PROVIDERHERMES_INFERENCE_PROVIDERrHERMES_TUI_TOOLSETS NODE_OPTIONSrnc3@K|]}|dVdS)z--max-old-space-size=Nr+)ryts rr{z_launch_tui..s/FFq||344FFFFFFrz--max-old-space-size=8192z --expose-gcrHERMES_TUI_RESUME)rr)rr)rtempfiler-r.copymkstempr(r/r setdefaultr executablegetcwdrrMr,rrrr4callrrvunlinkr5r)rrrmrrrrractive_session_fdrh tui_toolsets_tokensr(rcodes r _launch_tuir$isX%GOOO *//  C-5-=-=+G.>..**H ,?C()$&JNN #l"3"3%%C !NN?CN333NN<---NN:I}}\JJJ .#N(- $%4%- !"+3 '(*844L<%(XXl%;%; !" ggnb))//11G FFgFFF F F42333G##}%%%((7++C5#4  w00ID#D  ?4SXX3???DD    DDD  8   #$57J K K K  I) * * * *    D   I) * * * *    D HTNNNNNs`$HI  H I HI (H== I  I  I4I$#I4$ I1.I40I11I4c t|ddp"tjddk}t|dd}|rt|ddst |t rPt |}|r||_ntd|d td tj d ne|rdnd }t| }|s|dkrtd }|r||_n-|rdnd}td|dtj d t|dd}|rt |}|r||_ts ttdttdtddl m}m} |s| dtj d  t!d} n#t&t(f$rd} YnwxYw| dvrt+|dSttdtj d  ddlm} | n#t0$rYnwxYw ddlm} | dn#t0$rYnwxYwt|ddrdtjd <t|d!drdtjd"<t|d#drdtjd$<t|d%dr|jtjd&<|r_t9t|ddt|d'dt|d(dt|d)dt|d*d+dd,lm} |jt|d)d|j t|d-d|j!t|d.d|j"t|d/dt|ddt|d0dt|d1dt|d2dt|d3dt|d#dt|d!dd4}d5|#D} | d7i|dS#tH$r1}td6|tj d Yd}~dSd}~wwxYw)8zRun interactive chat CLI.rjF HERMES_TUIr continue_lastNresumezNo session found matching ''.z5Use 'hermes sessions list' to see available sessions.rrPrkTUICLIz No previous z session found to continue.zLIt looks like Hermes isn't configured yet -- no API keys or providers found.z Run: hermes setupr)is_interactive_stdin#print_noninteractive_setup_guidancez;No interactive TTY detected for the first-run setup prompt.zRun setup now? [Y/n] nrnr yesz4You can run 'hermes setup' at any time to configure.)prefetch_update_check sync_skillsTquietyoloHERMES_YOLO_MODEignore_user_configHERMES_IGNORE_USER_CONFIG ignore_rulesHERMES_IGNORE_RULESrHERMES_SESSION_SOURCErrmrr)rrmrrmainskillsr5imageworktree checkpointspass_session_id max_turns)rmrrr?verboser5rr@r(rArBrCrDr:r8ci|] \}}||| Srwrrs rrzcmd_chat..6s ? ? ?tq!arr'r)%getattrr-r.r/rrrbr(rrrr*rhermes_cli.setupr,r-rr3rrr cmd_setuphermes_cli.bannerr1r9tools.skills_syncr3rr$rPr>rmrrErrr7)argsuse_tui continue_valrrlast_idkind resume_valr,r-replyr1r3cli_mainkwargses rcmd_chatrVsdE5))PRZ^^L-I-IS-PG4$77LGD(D99 lC ( ( 5lCCH & DLDDDEEEMNNN &0UU5F+6:::G >v/u=== % '2uuUFTFFFGGG x..J#1*==  #"DK ( ) )  Z     $%%%         $#%%  / /M    HQKKK 12288::@@BBEE+,   EEE  $ $ $ dOOO F  DEEE   ;;;;;;       111111 $      tVU##-), %&t)511625 ./ t^U++0,/ ()tXt$$:.2k *+  D(D ) )D)U33$..T:t44T:t44     %$$$$$D*d33M$$//<w..w--$$//D*e44t]E::"4):EBBT;55ne<<%d,@%HHF$@ ?v||~~ ? ? ?F6  mmm  sN3H H! H!+I<< J J  J J-,J-R S &SS c(ddlm}||dS)zGateway management commands.r)gateway_commandN)hermes_cli.gatewayrX)rLrXs r cmd_gatewayrZ?*222222ODrc Btdddlm}m}t t dt d|dpd}|st t dt t d t d t d t t d t d t dt  t d}n'#ttf$rt dYdSwxYw|dkr|ddd}t dt t dt dt dt dt dt dt dt dt dt dt dt dn<|dd d }t d!n|}|dkrd"nd#}t d$|t |d%}|r(| d&krt d'n|d%d&t d(|d)pd}|rt d*| t d+} n#ttf$rd,} YnwxYw| d-vr}|dkr"t d.} n!t d/} | r2|d)| d0dt d1| nt |dkr1t d2t d3} n!t d/} | r3|d)| d0dt d4| nt d5tt jd6} | d7z d8z } | d9z } | st d:| dS| d;z s t d<t!jd=}|st d>dS t%j|d?d@dAdBgt)| t$jt$jdCD}n #t$rt dEYdSwxYw|jdkrn|jpd}|r/dF|dGdndH}t dIt |dSt dJnt dKt7dz dLz }|dCdCM|dNz rt dO t dP} n#ttf$rd,} YnwxYw| d-vr=t!j|dCQ|dCdCMt dRn t dSt dTdSt t dU|dkrt dVt dWnt dXt t dYt dUt  t%jdZt)| d[d\t)|gt)| ]n#t$rYnwxYwt |dNz rt d^t |dkrZt d_t d`t dat dbt t dcnht d_t d`t ddt det t dct dft t dgdSt dhdS)izESet up WhatsApp: choose mode, configure, install bridge, pair via QR.whatsappr get_env_valuesave_env_valueu⚕ WhatsApp Setup2================================================== WHATSAPP_MODErnz&How will you use WhatsApp with Hermes?z& 1. Separate bot number (recommended)uF People message the bot's number directly — cleanest experience.zH Requires a second phone number with WhatsApp installed on a device.z 2. Personal number (self-chat)z/ You message yourself to talk to the agent.z3 Quick to set up, but the UX is less intuitive.z Choose [1/2]: z Setup cancelled.Nrbotu ✓ Mode: separate bot numberu ┌─────────────────────────────────────────────────┐u9 │ Getting a second number for the bot: │u9 │ │u9 │ Easiest: Install WhatsApp Business (free app) │u9 │ on your phone with a second number: │u; │ • Dual-SIM: use your 2nd SIM slot │u< │ • Google Voice: free US number (voice.google) │u; │ • Prepaid SIM: $3-10, verify once │u9 │ WhatsApp Business runs alongside your personal │u; │ WhatsApp — no second phone needed. │u └─────────────────────────────────────────────────┘z self-chatu' ✓ Mode: personal number (self-chat)zseparate bot numberzpersonal number (self-chat)u ✓ Mode: WHATSAPP_ENABLEDtrueu✓ WhatsApp is already enabledu✓ WhatsApp enabledWHATSAPP_ALLOWED_USERSu✓ Allowed users: z Update allowed users? [y/N] r.r r0z< Phone numbers that can message the bot (comma-separated): z( Your phone number (e.g. 15551234567): ru ✓ Updated to: z+ Who should be allowed to message the bot?z4 Phone numbers (comma-separated, or * for anyone): u ✓ Allowed users set: uF ⚠ No allowlist — the agent will respond to ALL incoming messagesrrzwhatsapp-bridgez bridge.jsu ✗ Bridge script not found at rzuM → Installing WhatsApp bridge dependencies (this can take a few minutes)...ru5 ✗ npm not found on PATH — install Node.js firstrrrrT)rrrr2u ✗ Install cancelledrrz (no output)u ✗ npm install failed:u ✓ Dependencies installedu)✓ Bridge dependencies already installedr`parentsexist_okz creds.jsonu#✓ Existing WhatsApp session foundz8 Re-pair? This will clear the existing session. [y/N]  ignore_errorsu ✓ Session clearedu' ✓ WhatsApp is configured and paired!z( Start the gateway with: hermes gatewayu──────────────────────────────────────────────────u0📱 Open WhatsApp (or WhatsApp Business) on thez* phone with the BOT's number, then scan:u,📱 Open WhatsApp on your phone, then scan:u0 Settings → Linked Devices → Link a Devicerz --pair-only --session)ru!✓ WhatsApp paired successfully!z Next steps:z) 1. Start the gateway: hermes gatewayz2 2. Send a message to the bot's WhatsApp numberz) 3. The agent will reply automaticallyu; Tip: Agent responses are prefixed with '⚕ Hermes Agent'u) 2. Open WhatsApp → Message Yourselfu. 3. Type a message — the agent will replyz4 so you can tell them apart from your own messages.z1 Or install as a service: hermes gateway installuG⚠ Pairing may not have completed. Run 'hermes whatsapp' to try again.)rrr_r`rrr3rrrreplacer__file__rrir1rJrKr4r5rrrrLrrMrrEmkdirrmtree)rLr_r` current_modechoicewa_mode mode_labelcurrent current_usersresponsephone project_root bridge_dir bridge_scriptrrrr session_dirs r cmd_whatsappr~Fs ???????? GGG  (OOO!=117RL .+  6777  6777 VWWW V     0111 ?@@@ CDDD  -..4466FF+,    & ' ' ' FF  S== N?E 2 2 2G 3 4 4 4 GGG p q q q M N N N M N N N M N N N M N N N O P P P P Q Q Q O P P P M N N N M N N N O P P P p q q q q N?K 8 8 8!G ; < < < <%,%5%5 ! !;X  )Z))*** GGGm.//G&7==??f,, /0000)6222 $%%%"M":;;ArM\ 3M33444 ?@@FFHHHH+,   HHH  >>  | + +%R%''HIIOOQQ 47sB9O9OPPP2522333  e   ? @ @ @Fegg EDEEKKMME  \ N3U]]35K5K L L L 5e55 6 6 6 6 Z [ [ [>>))++3A6L ),==J,M    ! ! A-AABBB  ' / / 1 1; ^___l5!!  I J J J F ^ilQdii 0 0 6777MG - . . . 'NNN F ,---- 9:::"##j09>  | + + M+T : : : :   dT  : : : ) * * * * < = = = < = = = F GGG *% @AAA :;;;; <=== GGG <=== * GGG  S'' SEUEU VJ            GGGl"**,,Y 1222  e   / " " " = > > > F G G G = > > > GGG O P P P P / " " " = > > > = > > > B C C C GGG O P P P H I I I  ABBBBB WXXXXXs[6!D D<;D<!!LLL?UU,+U,!Y;;ZZA_ _#"_#c(ddlm}||dS)zInteractive setup wizard.r)run_setup_wizardN)rHr)rLrs rrIrIs+111111TrcDtdt|dS)uKSelect default model — starts with provider selection, then model picker.rmrLN)rselect_provider_and_modelrs r cmd_modelrs'4((((((rc  #$%ddlm%m#m}ddlm$m}m}ddlm }|}| d}t|tr| dd}|pd}d }| d}t|tr| d }|ptjd pd } $|} d } | d krC|| | d | } | | j} nd| d} t!d| d| E %d } n8##$r0}| d kr||} t!d| dd } Yd }~nd }~wwxYw| dkr |drd} ddlm}m}t|}| r| | | nd}t!t!d|t!d|t!d|D}dtt(tt(t(fff#$%fd }||}|D]\}}|d}|d}|ddddd }| dd}|rd!|nd}|||d"|d#|fg}d}|D]Q\}}| r3|| kr-|||d$ft3|d%z }:|||fR|d&t| d't4o!t7| d'} | r|d(|d)|d*t9d+|D|,}!|!||!dd-krt!d.d S||!d}"|"d/krt;d S|"dkrt=||n|"d0krt?||n|"d1krtA|||2n|"d3krtC||n|"d4krtE||nz|"d5krtG|||2n`|"d6krtI||nH|"d7krtK||n0|"d8krtM||n|"dkrtO|n|"(d9s|"|vrJ|| |"}|t!d:d StS||n|"d;krtU|n|"dkrt[||nC|"d?krt]||n,|"d@krt_||n|"dAvrta||"||"dBvr%|"(d9stcd Sd Sd S)CaCore provider selection + model picking logic. Shared by ``cmd_model`` (``hermes model``) and the setup wizard (``setup_model_provider`` in setup.py). Handles the full flow: provider picker, credential prompting, model selection, and config persistence. r)resolve_provider AuthErrorformat_auth_error)get_compatible_custom_providersrSr_)resolve_provider_fullrmr rnz (not set)Nrrauto providerszUnknown provider 'zb'. Check 'hermes model' for available providers, or run 'hermes doctor' to diagnose config issues.z Warning: z) Falling back to auto provider detection. openrouterrrcustom)CANONICAL_PROVIDERS_PROVIDER_LABELSnonez Current model: z Active provider: c*g|]}|j|jfSr)slugtui_desc)ryrs rrz-select_provider_and_model..ms!GGGaafaj)GGGrrcTddlm}i|}dtdtdtdtddf fd }|d }t |t r{|D]x}t |t s||dd d |dd p|d d |dd y|d }t |t r|D]}\}}t |t s||dd p|||dd p|d d |dd ~dtdtdtdtffd }i} |D]]} t | t s| dpd } | dpd } | r| spd| ddz} | dpd }|r |n #$r|} YnwxYw| | | dd | dd | dd | dd ||| || dd d| | <_| S)Nr)read_raw_configr? provider_keyrmrurct|pd}d|vrdSt|pd}t|pd}t|pd}|rS|f|||f||rU|f|||f|dSdS)Nrn${)rr3rr)r?rrmrutemplateraw_api_key_refss r _record_rawzRselect_provider_and_model.._named_custom_provider_map.._record_raw}sE 7=b))//11H8##tzr??((**D|1r2288::L $$**,,E  M ++TZZ\\OXFFF ++TZZ\\5,A8LLL  ++\-?-?-A-A,CXNNN ++!''))518  rcustom_providersrn default_modelrclt|pd}t|pd}t|pd}||f|f||f|ffD]}|dr|vr |cSdS)Nrnrrr3r)r?rrmname_lcpkey_lcidentityrs r _lookup_refzRselect_provider_and_model.._named_custom_provider_map.._lookup_refs$*"oo++--3355G,,"--3355;;==G $$**,,E%  %   6 6 A;68/?#?#?+H55552rrcustom:r-key_envapi_mode)r?rrurrmrr api_key_ref) rrrr/rrrrr3rrn)rrraw_cfgrraw_list raw_entry raw_providersraw_keyrcustom_provider_maprr?rrrrrrrs @r_named_custom_provider_mapz=select_provider_and_model.._named_custom_provider_mapos555555.0!/##              2;;122 h % % %   !)T22 MM&"--MM'2..: }}_b99MM)R00  K00 mT * * &3&9&9&;&;  "!)T22 MM&"--8MM'2..: }}_b99MM)R00  c  S S      !44S99  EeT** IIf%%+2244D *--3::<(>   ( (  $ $#"s JJ&%J&r?rhttps://http://r —  (r ← currently activer)rz$Custom endpoint (enter URL manually)r) remove-customzRemove a saved custom provider) aux-configzConfigure auxiliary models...)cancelzLeave unchangedcg|]\}}|Srrryrrs rrz-select_provider_and_model..s'''81e'''rr r No change.r ai-gatewaynousr openai-codex qwen-oauth minimax-oauthgoogle-gemini-cli copilot-acpcopilotrzyWarning: the selected saved custom provider is no longer available. It may have been removed from config.yaml. No change.r anthropic kimi-codingstepfunbedrock azure-foundry)geminideepseekxaizaizkimi-coding-cnminimaxz minimax-cnkilocode opencode-zen opencode-goalibaba huggingfacexiaomiarceegminvidia ollama-cloudztencent-tokenhublmstudio)rrr)2rrrrrrrSr_hermes_cli.providersrr/rrr-rxrrhermes_cli.modelsrrrrrnrstriprr*rbool_prompt_provider_choice_aux_config_menu_model_flow_openrouter_model_flow_ai_gateway_model_flow_nous_model_flow_openai_codex_model_flow_qwen_oauth_model_flow_minimax_oauth_model_flow_google_gemini_cli_model_flow_copilot_acp_model_flow_copilot_model_flow_customr+_model_flow_named_custom_remove_custom_provider_model_flow_anthropic_model_flow_kimi_model_flow_stepfun_model_flow_bedrock_model_flow_azure_foundry_model_flow_api_key_provider_clear_stale_openai_base_url)&rLrrSr_rconfig current_modelconfig_providerreffective_providercompatible_custom_providersr active_defwarningrArrprovider_labels active_label all_providersr_custom_provider_mapr provider_infor?r short_url saved_model model_hintordered default_idxr_has_saved_custom_list provider_idxselected_providerrrrs& @@@rrr s  ;::::: []]FJJw''M-&&9%)))R88 !0[MO 7##I)T""4#-- 33 K29%@AAKV#B"A&"I"I FV##**  JJ{ # # '   !]FF%7  PgPPP Q Q Q ~ %%f--FF   !V++++C00T'TTTUUUFFFFFF  --0A"B"BGGGGGGGG+,,O:@L?&&vv666fL GGG 0 0 0111 / / /000 GGGHG3FGGGMi#4T#s(^0C+Di#i#i#i#i#i#i#i#X65388::II]V$ ,$$Z44< NNN ! **955  %&&&&& s D**E/&EEcddlm}m}m}|}|di}t |t r<|dpd}nd}|dks|sdS|d}|rB|ddtt|d krd |dd d nd |d dSdS) aQRemove OPENAI_BASE_URL from ~/.hermes/.env if the active provider is not 'custom'. After a provider switch, a leftover OPENAI_BASE_URL causes auxiliary clients (compression, vision, delegation) with provider:auto to route requests to the old custom endpoint instead of the newly selected provider. See issue #5161. r)r_r`rSrmrrnrNrrrz.Cleared stale OPENAI_BASE_URL from .env (was: z...)r) rr_r`rSr/rrr3rrr*)r_r`rSrrr stale_urls rrrWs)MLLLLLLLLL +--C$$I)T""MM*--3::<<BBDD88 /00I ("--- 9~~"" RYss^ Q Q Q QN)NNN       r) )visionVisionzimage/screenshot analysis) compression Compressionzcontext summarization) web_extractz Web extractzweb page summarization)session_searchzSession searchzpast-conversation recall)approvalApprovalzsmart command approval)mcpMCPzMCP tool reasoning)title_generationzTitle generationzsession titles) skills_hubz Skills hubzskills search/install)curatorCuratorzskill-usage review pass _AUX_TASKStask_cfgcPt|tsdSt|dpd}t|dpdpd}t|dpd}|rM|ddddd}d |d |rd |ndzS|dkr d|rd |ndzS|r|d |S|S) z;Render the current aux config for display in the task menu.rrrnrrmrrrzcustom (r · )rrrr/r3rnr)rrrrmshorts r_format_aux_currentrsC h % %v8<< ++1r2288::H8<< ++5v66<<>>H&H  W%%+ , , 2 2 4 4EG  R0088BGGNNsSS"%"""&EnUnnn2FF658b99 (''''' Orrnrmrrutaskrruc<ddlm}m}|}|di}t |t si}||d<||i} t | t si} | ||<|| d<|pd| d<|pd| d<|pd| d<||d S) uPersist an auxiliary task's provider/model to config.yaml. Only writes the four routing fields — timeout, download_timeout, and any other task-specific settings are preserved untouched. The main model config (``model.default``/``model.provider``) is never modified. rrS save_config auxiliaryrrnrmrruN)rrSr!rrr) rrrmrrurSr!rauxrs r_save_aux_choicer$s;::::::: +--C ..b ) )C c4 K NN4 $ $E eT " "D  E*[bE'N BE*}"E)Krcddlm}m}|}|di}t |t si}||d<d}t D]\}}}||i}t |t si}|||<d} |ddvrd|d<d} d D]} || rd || <d} | r|d z }|||S) zDReset every known aux task back to auto/empty. Returns number reset.rr r"Fr)NrnrrTrrnr)rrSr!rrrrr/) rSr!rr#countr_name_descrchangedfields r_reset_aux_to_autor+s,:::::::: +--C ..b ) )C c4 K E(eUtR((%&& ECI 99Z (: : : &E* G5  Eyy !e    QJEK Lrcddlm} |}t|dtr|dini}t t dt t dt dt dt d t d t t d tDd z}t d tDdz}g}tD]\}}}t||tr||ini} t| } | |d|zdz || } | || f| d| dtd|Dd} | dS|| d} | dkrdS| dkrCt}|rt d|dnt dt ct| s)uTop-level auxiliary-model picker — choose a task to configure. Loops until the user picks "Back" so multiple tasks can be configured without returning to the main provider menu. rrRTr"u( Auxiliary models — side-task routingz@ Side tasks (vision, compression, web extraction, etc.) defaultu@ to your main chat model. "auto" means "use my main model" —z> Hermes only falls back to a lightweight backend (OpenRouter,z< Nous Portal) if the main model is unavailable. Override az@ task below if you want it pinned to a specific provider/model.c3<K|]\}}}t|VdSrwr*)ryrr?s rr{z#_aux_config_menu..s.>>ZQas4yy>>>>>>rr c3<K|]\}}}t|VdSrwr.)ryrdescs rr{z#_aux_config_menu..s.>>ZQ4s4yy>>>>>>rr(r) __reset__zReset all to auto)__back__Backcg|]\}}|Srrrs rrz$_aux_config_menu..s + + +xq%U + + +rrNr3r2zReset z auxiliary task(s) to auto.z-All auxiliary tasks were already set to auto.)rrSrr/rrrrrljustrrr+_aux_select_for_task)rSrr#name_coldesc_colentriestask_keyr?r0rrvrr rr.s rrrs .-----+"kmm*4SWW[5I5I4*P*PXcggk2&&&VX  8999  PQQQ TUUU NOOO LMMM PQQQ >>:>>>>>B>>:>>>>>B)+$. . . HdD0:3778;L;Ld0S0S[swwx,,,Y[H)(33Gzz(++ZcDj3.>-E-Eh-O-OZQXZZE NNHe, - - - -9:::,---% + +7 + + +Q    ; Fcl1o *   F +  "$$A G=q===>>>>EFFF GGG S!!!W+"rcddlm}ddlm}|}t |dt r|dini}t |t r|ini}t|dpdpd}t|dpd}t|d pd}tfd tD} |||| } n+#t$r} td | g} Yd } ~ nd } ~ wwxYwg} |dkr|sdnd} | dd| gf| D]}|dd}|dp|}|dd}|dpg}|rd|dnd}||kr|sdnd}| ||||t|f|rdnd}| dd|gf| ddgfttd| dt|tt!d| Dd}|d S| |\}}}|dkrd S|dkr(t#ddddt| d d S|dkrt%|d St'|||d S)!uiPick a provider + model for a single auxiliary task and persist it. Uses ``list_authenticated_providers()`` to only show providers the user has already configured. This avoids re-running OAuth/credential flows inside the aux picker — users set up new providers through the normal ``hermes model`` flow, then route aux tasks to them here. rrR)list_authenticated_providersr"rrrmrnrc30K|]\}}}|k |VdSrwrryrr?rrs rr{z'_aux_select_for_task..'-LL,#tQt  LLr)current_providerrcurrent_base_urlz*Could not detect authenticated providers: Nu ← current__auto__zauto (recommended)rr? total_modelsmodelsrz models __custom__zCustom endpoint (direct URL)r3r4z Configure u — current: cg|]\}}}| Srrrs rrz(_aux_select_for_task..Ks"D"D"D[Qq5"D"D"Drrrrmrruz: reset to auto.)rrShermes_cli.model_switchr=rr/rrr3nextrr9rrrrrr$_aux_flow_custom_endpoint_aux_flow_provider_model)rrSr=rr#rrArrB display_namerrAr: auto_markerrrr?totalrErr custom_markerr _labels` rr7r7s.-----DDDDDD +--C&01E1Et&L&L T#''+r " " "RTC$.swwt}}d$C$CKswwtR   H8<< 33=v>>DDFFP& W--344::<.jr@rzNo curated model list for .z;Enter a model slug manually (blank = use provider default):zModel: NrnrpricingrrH: rz (provider default model))rrUrrVrJrr9rrrr3rrr$) rrRrSrrUrVrMrZ model_listrselecteds ` rrLrL`s877777::::::LLLL*LLLdSSLG**=99?R n%%J  ;=;;;<<< KLLL  ""((**CC!8,    GGG FF 9"** mW      ,    FTMR "....K >>>>H>>????? IIIIIJJJJJs# A AA!B((C  C cddl}tfdtD}t|dpd}t|dpd}t t d|t dt  |rd |d nd }t|}n&#ttf$rt YdSwxYw|p|}|st d dS |rd |d nd}t|} n&#ttf$rt YdSwxYw| p|} |d} n&#ttf$rt YdSwxYwtd| || | dd dd d} t |d| d| rd| ndzdS)zHPrompt for a direct OpenAI-compatible base_url + optional api_key/model.rNc30K|]\}}}|k |VdSrwrr?s rr{z,_aux_flow_custom_endpoint..r@rrrnrmz Custom endpoint for zH Provide an OpenAI-compatible base URL (e.g. http://localhost:11434/v1) Base URL [rz Base URL: zNo URL provided. No change.zModel slug (optional) [zModel slug (optional): z0API key (optional, blank = use OPENAI_API_KEY): rrHrrrz : custom (rr) getpassrJrrr/r3rrrrr$rnr) rrrarMrBr url_prompturl model_promptrmrurs ` rrKrKsNNNLLLL*LLLdSSL8<< 339r::@@BB W--344::<E E c^ddlm}m}m}ddlm}m}|d}|stdtdt ddl}|d } n&#ttf$rtYdSwxYw| std dS|d| td tdd l m } m} | d } | dd } || || }|r||ddlm}m}|}|d}t%|t&s |rd|ini}||d<d|d<t(|d<d|d<|||td|ddStddS)z5OpenRouter provider: ensure API key, then pick model.rrU_save_model_choicedeactivate_providerr^rtz!No OpenRouter API key configured.z&Get one at: https://openrouter.ai/keysNz)OpenRouter API key (or Enter to cancel): Cancelled.API key saved.) model_idsrVT force_refreshrrYr rmr rrchat_completionsrDefault model set to: z (via OpenRouter)r)rrUrorprr_r`rrar3rrrrsrVrSr!r/rrr\)rrrUrorpr_r`rurarrsrVopenrouter_modelsrZr]rSr!rrms rrrs @???????m011G  1222 6777   NNN//"MNNTTVVCC!8,    GGG FF   ,    F+S111  EEEEEEEE! 555'&|4HHHG&&H8$$$ ?>>>>>>>kmm  %&& !*/7Y&&RE CL(j/j.j C BxBBBCCCCC ls +A99BBc|ddlm}m}m}ddlm}m}|d}|stdtdtdt ddl}|d  } n&#ttf$rtYdSwxYw| std dS|d| td tdd l m } m} | d } | dd } || || }|r||ddlm}m}|}|d}t%|t&s |rd|ini}||d<d|d<t(|d<d|d<|||td|ddStddS)zIVercel AI Gateway provider: ensure API key, then pick model with pricing.rrnr^AI_GATEWAY_API_KEYz(No Vercel AI Gateway API key configured.z^Create API key here: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai-gateway&title=AI+Gatewayz/Add a payment method to get $5 in free credits.Nz)AI Gateway API key (or Enter to cancel): rqrr)ai_gateway_model_idsrVTrtrrYr rmr rrrvrrwz (via Vercel AI Gateway)r)rrUrorprr_r`rrar3rrrr{rVrSr!r/rrr[)rrrUrorpr_r`rurarr{rV models_listrZr]rSr!rrms rrr s @???????m011G  8999 nooo ?@@@   NNN//"MNNTTVVCC!8,    GGG FF   ,    F+S111  PPPPPPPP&&T:::K&&|4HHHG&&='H8$$$>>>>>>>>kmm  %&& !*/7Y&&RE CL(j/j.j C IxIIIJJJJJ ls+BB+*B+c ddlm}m}m}m}m}m}m} m} m } ddl m } m } m }m}ddlm}|d}|r|dsQt%dt% t'jt+|dd t+|d d t+|d d t+|d d t-t+|d dt+|dd pdt+|dd t-t+|dd}| || d | pi}||n#t.$rYnwxYwnE#t0$rt%dYd St.$r}t%d|Yd }~d Sd }~wwxYwd Sddlm}m}m}m}|}|st%dd S |d}n#t.$r}t=||o|j}t=||r | |ntA|}|rt%d|t%d t'jd d d d ddd d}| || dn)#t.$r}t%d|Yd }~nd }~wwxYwYd }~d St%d|Yd }~d Sd }~wwxYw|d}|}g} |r|||d\}} |s| st%d d Sd!}! |d}"|"r|"d"d!}!n#t.$rYnwxYw|rE|sCt%d#| r0dd$lm!}#|!p|#"d%}$t%d&|$d'd St%d(tG|d)||||| |!*}%|%rK||%|d+d!}&|d|&|d,}'t=|'tHrtI|'}(nBt=|'t@r+|'%rd-|'%i}(ni}(d|(d.<|%|(d-<|&r-|&%r|&"d%|(d+<n|(&d+d |(|d,<| d/r|d/d!|d0d!||t%d1|%d2||d St%d3d S)4z8Nous Portal provider: ensure logged in, then pick model.r) get_provider_auth_staterUro_update_config_for_provider resolve_nous_runtime_credentialsrr _login_nousro)r_rSr!r`)prompt_enable_tool_gatewayr access_tokenz.Not logged into Nous Portal. Starting login... portal_urlN inference_url client_idscope no_browserFr3.@ ca_bundleinsecure)rrrrrr3rrLogin cancelled or failed.Login failed: )get_curated_nous_model_idsrVcheck_nous_free_tierpartition_nous_models_by_tierz,No curated models available for Nous Portal.i,)min_key_ttl_secondszSession expired: z&Re-authenticating with Nous Portal... zRe-login failed: zCould not verify credentials: T) free_tierz4No models available for Nous Portal after filtering.rnportal_base_urlz#No free models currently available.)DEFAULT_NOUS_PORTAL_URLrz Upgrade at z to access paid models.zShowing = curated models — use "Enter custom model name" for others.)rrZunavailable_modelsrrrmr rrrrprwz (via Nous Portal)r)'rr~rUrorrrrrrorr_rSr!r`hermes_cli.nous_subscriptionrr/rr NamespacerGrr9 SystemExitrrrVrrrrelogin_requiredrrrr*rr3pop))rrrLr~rUrorrrrrror_rSr!r`rstate mock_args _refreshedrArrVrrrsrreloginr login_excrZrr_nous_portal_url _nous_stater_urlr]rcurrent_model_cfgrs) rrrV s                       HGGGGG # #F + +E  .11 >???   *"4t<<%dOTBB!$ T::dGT22lE B BCCi66>$!$ T::gdJ>>??   I K #4V#< = = = ([]]0b **:6666        . / / / FF    (3(( ) ) ) FFFFF   +*,,I  <===00VLLL S),,E1E(23 (B(BP$$$C   +c++ , , , ; < < < 7$.#"&"$ ""     I'8'@AAAA 7 7 75)5566666666 7 FFFFF 4s44555-2'&v..G%$&&I%' (E(E w$) ) ) % % / DEEE --f55  F*/@"EE        3444  ? ? ? ? ? ? ?$?(?GGLLD ==== > > > `3y>>```'&#-# H8$$$ *b11 ##FM:::"JJw// ' . . .//II )3 / / 4E4K4K4M4M "$5$;$;$=$=>III & *' )  ,]0022 ,$1$8$8$=$=Ij ! ! MM*d + + +#w =* + + 1 N,b 1 1 1 N+R 0 0 0 F CxCCCDDD""6***** ls*CE-EE EEEEF2 F;FF G J>A$J9.I21J92 J<JJ9JJ9!J99J>#L'' L43L4cddlm}m}m}m}m}m}m}ddlm } |} | dr_tdttdtdtdt td  } n#ttf$rd } YnwxYw| d krtd t t!j} || |d dnE#t$$rtdYdSt&$r} td| Yd} ~ dSd} ~ wwxYw|} | dstddSn| dkrdSntdt t!j} || |d nE#t$$rtdYdSt&$r} td| Yd} ~ dSd} ~ wwxYwd} |}| dr| d}n#t&$rYnwxYw|s7 ddlm}|}| d}n#t&$rYnwxYw| |}|||}|r,|||d |td|ddStddS)z9OpenAI Codex provider: ensure logged in, then pick model.r)get_codex_auth_statusrUror_login_openai_codexroDEFAULT_CODEX_BASE_URL)get_codex_model_idsr}u OpenAI Codex credentials: ✓ 1. Use existing credentials' 2. Reauthenticate (new OAuth login) 3. Cancel Choice [1/2/3]: r2z&Starting a fresh OpenAI Codex login...rT)force_new_loginrNrz Login failed.3z/Not logged into OpenAI Codex. Starting login...ru)!resolve_codex_runtime_credentials)rrrwz (via OpenAI Codex)r)rrrUrorrrorhermes_cli.codex_modelsrr/rrr3rrr rrr9r)rrrrUrorrrorrrrsrrA _codex_token _codex_statusr _codex_creds codex_modelsr]s rrr sO<;;;;; " " $ $F zz+- /000  /000 7888 o  /006688FF!8,   FFF  S== : ; ; ; GGG $.00 ##%n5$(    2333   ,s,,--- +*,,F::k** o&&& s]] F ?@@@   *,,I   +<^+L M M M M    . / / / FF    (3(( ) ) ) FFFFF L --//   [ ) ) 8(,,Y77L        I I I I I I<<>>L'++I66LL    D '&LAAAL&&|=QQQH8$$$##N4JKKK DxDDDEEEEE lsr!B44C  C 1'DE5 E>EE6%GH8 HHH$4I I&%I&,%J JJqwen3-coder-plusz qwen3-codercddlm}m}m}m}m}m}ddlm}|} | dstdtd| d} | rtd| | d r%td | d d Sd } |d } || d| d} n#t$rYnwxYw| stt} |p | r| dnd} || | }|r,|||d|td|dd Stdd S)zAQwen OAuth provider: reuse local Qwen CLI login, then pick model.r)get_qwen_auth_status resolve_qwen_runtime_credentialsrUrorDEFAULT_QWEN_BASE_URLfetch_api_modelsr}zNot logged into Qwen CLI OAuth.zRun: qwen auth qwen-oauthrzExpected credentials file: rr'NT)refresh_if_expiringrurrrrrwz (via Qwen OAuth)r)rrrrUrorrrrr/rr9r_DEFAULT_QWEN_PORTAL_MODELS)_configrrrrUrorrrrrrErr r]s rrrb s322222 ! ! # #F ::k " " /000 )***JJ{++  = ; ;; < < < ::g   3 1FJJw//11 2 2 2F 00TJJJ!!% "2E*4EFF      3122LV Kq 9KG&&vWEEEH8$$$##L2GHHH BxBBBCCCCC ls<$C!! C.-C.c &ddlm}m}m}m}m}m}m} m} m } |d} | r| dstdt tj t|ddpdtt|d d t|d dpd } | | | dnE#t $rtdYdSt"$r}td|Yd}~dSd}~wwxYw |}n+#|$r#}t| |Yd}~dSd}~wwxYwddlm}|j dg}|||}|sdS|||d|dtd|dS)z:MiniMax OAuth provider: ensure logged in, then pick model.r) r~rUror)resolve_minimax_oauth_runtime_credentialsrr_login_minimax_oauthrorrz0Not logged into MiniMax. Starting OAuth login...regionNglobalrFr3r)rrr3rr_PROVIDER_MODELSru✓ Using MiniMax model: )rr~rUrorrrrrror/rr rrGrrr9rr)rrrLr~rUrorrrrrrorrrArrrsr]s rrr s                       $ #O 4 4E  .11 @AAA   *tXt44@lE B BCCi66>$I ! ,=o,N O O O O    . / / / FF    (3(( ) ) ) FFFFF 99;;  $$%%%322222$ $_b99I&&y-@@H x   z1BCCC 3 3 344444s7A'B??D D$C<<D DD8D33D8cjddlm}m}m}m}m}m}ddlm}ttdtdtdtdt td } n'#ttf$rtd Yd SwxYw| d vrtd d S|} | d sK dd lm} m} | } | d| n*#t&$r}td|Yd }~d Sd }~wwxYw |d}|dd}|rtd|ntdn*#t&$r}td|Yd }~d Sd }~wwxYwt)|jdpg}|p |r|dnd}|||}|r,|||d|td|dd Stdd S)uGoogle Gemini OAuth (PKCE) via Cloud Code Assist — supports free AND paid tiers. Flow: 1. Show upfront warning about Google's ToS stance (per opencode-gemini-auth). 2. If creds missing, run PKCE browser OAuth via agent.google_oauth. 3. Resolve project context (env -> config -> auto-discover -> free tier). 4. Prompt user to pick a model. 5. Save to ~/.hermes/config.yaml. r)!DEFAULT_GEMINI_CLOUDCODE_BASE_URLget_gemini_oauth_auth_status(resolve_gemini_oauth_runtime_credentialsrUrorruH⚠ Google considers using the Gemini CLI OAuth client with third-partyz@ software a policy violation. Some users have reported accountzC restrictions. You can use your own API key via 'gemini' providerz" for the lowest-risk experience.z"Continue with OAuth login? [y/N]: rqN>r r0r})resolve_project_id_from_envstart_oauth_flowT) force_relogin project_idzOAuth login failed: Frtrrnz Using GCP project: uT No GCP project configured — free tier will be auto-provisioned on first request.z&Failed to resolve Gemini credentials: rzgemini-3-flash-previewrrwz( (via Google Gemini OAuth / Code Assist)r)rrrrrUrorrrrrr3rrrr/agent.google_oauthrrr9r)rrrrrrUrorrproceedrrr env_projectrArrrEr r]s rrr sO322222 GGG TUUU LMMM OPPP ./// GGG<==CCEEKKMM ' ( ll"" l ) ) + +F ::k " "  X X X X X X X X5577K  4K H H H H H    ... / / / FFFFF  88uMMMYY|R00   6*66 7 7 7 7 f     d?d>}|dkrd }n%#t6$rtd@|dAd }YnwxYw|r|||}|dB}t9|t:s |rdC|ini}||dB<dD|dE<| |dF<| r| |dG<|dHd |||t;||dB<tdI|dJ| dKn{|s| r ||dB}t9|t:s|rdC|ini}dD|dE<| |dF<| r| |dG<|dHd ||dB<tdLt?| | |pd||Md S)NzCustom endpoint: collect URL, API key, and model name. Automatically saves the endpoint to ``custom_providers`` in config.yaml so it appears in the provider menu on subsequent runs. rrorp)r_rSr!rrrnrpz0Custom OpenAI-compatible endpoint configuration:z Current URL: z Current key: NrrzAPI base URL [ze.g. https://api.example.com/v1r API key [r Cancelled.zNo URL provided. Cancelled.rr Invalid URL: & (must start with http:// or https://)rc3 K|]}|vV dSrwr)ryh _url_lowers rr{z%_model_flow_custom..7 s;  Zr) localhost 127.0.0.1z0.0.0.0z:11434z:8080z:5000z/v1z+ Hint: Did you mean to add /v1 at the end?z@ Most local model servers (Ollama, vLLM, llama.cpp) require it.z e.g. z Add /v1? [Y/n]: r.r/z Updated URL: )probe_api_models used_fallbackresolved_base_urlz)Warning: endpoint verification worked at zL/models, not the exact URL you entered. Saving the working base URL instead.rEzVerified endpoint via probed_urlrz model(s) visible)z,Warning: could not verify this endpoint via z. Hermes will still save it.suggested_base_urlz8 If this server expects /v1 in the path, try base URL: z- If /v1 should not be in the base URL, try: rz Detected model: z Use this model? [Y/n]: z&Model name (e.g. gpt-4, llama-3-70b): z Available models: rz Select model [1-z] or type name: z8Context length in tokens [leave blank for auto-detect]: zDisplay name [rr000KzInvalid context length: u — will auto-detect.rmr rrrrurrw (via rzFEndpoint saved. Use `/model` in chat or `hermes model` to set a model.)context_lengthr?) rrorprr_rSr!rrr3rarrr+rrrrrrr/r*r)isdigitrc_auto_provider_namernr7rrr_save_custom_provider) rrorpr_rSr! current_url current_keyrraru effective_url effective_key _looks_local_add_v1rrR suggested model_namedetected_modelsconfirmr<mpickcontext_length_str default_namerMrrrm _caller_modelrs @rrr s HGGGGGGGIIIIIIIIII- 1228bK- 0117RK <===/ - --...6 4 BQB444555 GGG  R[M,M R R R  %''  // S;N BQB%//J S S S  %''  x ( n K +,,,+ M  # #$; < < SmSSSTTT*{M %%c**0022JRLJ//66  <=== QRRR 6 ,,S11666777 0117799??AAGG!8,   GGG  & & &)0055=M )( 3M33 4 4 4 222222  ]M : :E yy!!Seii0C&D&DS  S>Q8R S S S   12  %$H 8   (  CUYY|%<%< C CEIIh''-2.. C C C     *599\;R;R * * *    99) * * S23I!!%(( SZyZZQiQQRRRJii))/RO   1 $ $ ;q'9;; < < <788>>@@FFHHG***,Q/ "#KLLRRTT  ! !A % % ' ( ( (!/155 ' '1oQoo!oo&&&&KS%9%9KKKegg ||~~ "!s4yy"H"H"H"HC4H4H"H"H"H"H"H,SYY];  "! GHHNNPPJ" F  %''  +=99 ?l???@@FFHHXL x ( nN " " "**333e$$e$$N ""!% " " " W-?WWW X X X!NNN "&X:&&&kmm  %&& !*/7Y&&RE CL$j)j  -,E)  *d### C u++w IzIIIIIJJJJ  "w "   ! ! ! 7++ -.. P:GOY 66RM$, j!$1 j!  5'4M) $*d+++'w VWWWb%  sK=A%C## DD=3H11II$G!W W*)W*2AYY('Y(clddl}|ddddd}|dd|}|dd}d|vsd |vrd |d }n1d |vrd |d }n|}|S)zGenerate a display name from a custom endpoint URL. Returns a human-friendly label like "Local (localhost:11434)" or "RunPod (xyz.runpod.io)". Used as the default when prompting the user for a display name during custom endpoint setup. rNrrnrrz/v1/?$rrzLocal (rrunpodzRunPod ()rernrsubr,r capitalize)rrcleanr?s rrr sIII   Z , , 4 4Y C C J J3 O OE FF9b% ( (E ;;s  A DdkT11     TZZ\\ ! !!$!!!   Krct|ddpd}|r|St|ddpd}|r=t|ddpdsd|dSt|pdS)zDReturn the value that should be persisted for a custom provider key.rrnrrur})rr/r3)rresolved_api_keyrrs r%_custom_provider_api_key_config_valuer sm'' r::@bAAGGIIK-##Ir228b99??AAG!s=,,Y;;ArBBHHJJ! W    %2 & & , , . ..rcddlm}m}|}|dpg}t |t sg}|D]} t | t r| ddd|dkrxd} |r | d|kr|| d<d } |r=|r;| d i} t | t si} d |i| |<| | d <d } | r||d<||d S|st|}||d } |r|| d<|r|| d<|r |r |d |ii| d <| | ||d<||td|dd S)uSave a custom endpoint to custom_providers in config.yaml. Deduplicates by base_url — if the URL already exists, updates the model name and context_length but doesn't add a duplicate entry. Uses *name* when provided, otherwise auto-generates from the URL. rr rrrnrFrmTrErN)r?rruu% 💾 Saved to custom providers as "z" (edit in config.yaml)) rrSr!r/rrrrrrr) rrurmrr?rSr!rrrr) models_cfgs rrr s#;::::::: +--C*++1rI i & &  eT " " uyyR'@'@'G'G ( ( __S ! !("("G 7++u44!&g  "YYx44 !*d33$!#J%5~$F 5!",h !*3&' C   FF -"8,,x 0 0E#"i g FF #3^"DEh U'CK O$ O O OPPPPPrcddlm}m}ddlm}m}m}m}ddlm }ddl } | di} t| trd| ddkrKt| d d pd } t| d d pd } nd } d } |d pd } ttd tdttdtdtdtdt| rtd| | r| dkrdnd}td|| rtd| dddt t!d| pdd}n'#t$t&f$rtdYdSwxYw|p| d}|std dS|d!std"|d#dSt | d$| r | dddznd%d}n'#t$t&f$rtdYdSwxYw|p| }|std&dSttd'|||}t/|j}|jpd }|r^|dkrdnd}td(||jrtd)|jd*|r td+t7|d,ntd-|jttd.td/td0td1td2 | d3krd4nd5}t!d6|d7p|}n'#t$t&f$rtdYdSwxYw|d4krd3nd}td }|rStd8t9|dd9d:;D]\}}td<|d=d>|t7|d9kr#td?t7|d9z d@t t!dA|p|dd}n'#t$t&f$rtdYdSwxYw|s |p|d}n|rQd:t=|cxkr!t?t7|d9krnn|t=|d:z }nW|}nT t!dB|pdCd}n'#t$t&f$rtdYdSwxYw|p|}|stdDdS| |||}|d ||}| d} t| ts | rdE| ini} | |d<d| d<|| d <|| d <|| dE<|r|| dF<|||t| |d<|dGr |dGd |dHr |dHd |dkrdnd}ttdItdJ|tdK|tdL||rtdM|dNdOntdPtdS)Qu.Azure Foundry provider: configure endpoint, API mode, API key, and model. Azure Foundry supports both OpenAI-style (``/v1/chat/completions``) and Anthropic-style (``/v1/messages``) endpoints. The wizard auto-detects the transport and available models when possible: * URLs ending in ``/anthropic`` → Anthropic Messages API. * Successful ``GET /models`` probe → OpenAI-style + populates a picker with the returned deployment / model IDs. * Anthropic Messages probe fallback when ``/models`` fails. * Manual entry when every probe fails (private endpoints, etc.). Context lengths for the chosen model are resolved via the standard :func:`agent.model_metadata.get_model_context_length` chain (models.dev, provider metadata, hardcoded family fallbacks). rrr_r`rSr!) azure_detectNrmrrrrnrAZURE_FOUNDRY_API_KEYzAzure Foundry Configurationraz9Azure Foundry can host models with either OpenAI-style orz6Anthropic-style API endpoints. Hermes will probe yourz6endpoint to auto-detect the transport and the deployedzmodels when possible.z Current endpoint: rvz OpenAI-stylezAnthropic-stylez Current API mode: z Current API key: rrzAPI endpoint URL [z5e.g. https://your-resource.openai.azure.com/openai/v1rrrz$No endpoint URL provided. Cancelled.rrrrrequiredzNo API key provided. Cancelled.u;◐ Probing endpoint to auto-detect transport and models...u✓ Detected API transport: z (ru ✓ Found z# deployed model(s) on this endpointu⚠ Auto-detection incomplete: z7Select the API format your Azure Foundry endpoint uses:z. 1. OpenAI-style (POST /v1/chat/completions)z: For: GPT models, Llama, Mistral, and most open modelsz) 2. Anthropic-style (POST /v1/messages)z9 For: Claude models deployed via Anthropic API formatanthropic_messagesrrzAPI format [1/2] (rhz"Available models on this endpoint:r)rBrz>2rz ... and z' more (type name manually if not shown)z+Pick by number, or type a deployment name [zModel / deployment name [ze.g. gpt-5.4, claude-sonnet-4-6z"No model name provided. Cancelled.r rrrrpu✓ Azure Foundry configured:z Endpoint: z API mode: z Model: z Context length: rz tokenszA Context length: not auto-detected (will fall back at runtime))!rrorprr_r`rSr! hermes_clir rar/rrrrrr3rrrr+detectrrErreasonr*r)rrcrlookup_context_length)!rrrorpr_r`rSr!r rarrBcurrent_api_modecurrent_api_key_lblrrrur detectiondiscovered_modelsrrudefault_choice mode_choiceeffective_modelr<midrrctx_lenrrms! rrr& s "HGGGGGGGYYYYYYYYYYYY''''''NNN 7B''I)T""y}}Z'@'@O'S'Sy}}Z<<BCCy}}Z<<BCC#m$;<<BO GGG '((( (OOO GGG EFFF BCCC BCCC !""" GGG9 7%577888-!15G!G!G~~M^ +T++,,,? =_RaR%8===>>> GGG q!1!l5l q q q  %''  x ( n1!199#>>M  4555  # #$; < < SmSSSTTT GGG// [V+e33J [ [ [  %''  x ( n.M  /000 GGG GHHH##M=AAI#' (8#9#9&,"HV'/3E'E'E^^K\  9Z99:::   / -)*--- . . .  \ Zs#455ZZZ [ [ [ B 0@BBCCC  GHHH >??? JKKK 9::: IJJJ $48L$L$LSSRUN H^ H H HIIOOQQcUcKK!8,    . ! ! ! FF ,7#+=+=''CU GGGO6 2333 1#2# 6a@@@ & &FAs $q$$$s$$ % % % %  ! !B & & cs#455:ccc d d d  hm>cO`abOchhhegg D"8,    . ! ! ! FF  #+C/@/COO \\^^ #SYY Q Q Q Q#c:K6L6Lb2Q2Q Q Q Q Q Q/D A >OO"OO cM,^=^cccegg J"8,    . ! ! ! FF %5   233300 G N*M::: +--C GGG  E eT " "&+3E""G 'E*%E* E*&E)*")K5kkF7O}&''.("---}%&&-',,,#+/A#A#AGXJ GGG )*** 0 0 0111 - - -... 2 2 2333S 7W77778888 QRRR GGGGGsZ!'G G-,G-:J J21J2-1P QQ,-T T>=T>7'W XXc ddlm}m}|}|dpg}t |t r|st ddSt dg}|D]}t |tr|dd}|d d }|d d d d  d } | |d| d| t|| d ddl m } | d|Dddddddd} | } ddlm} | t n#t"t$t&t(jf$rt-|dD]\}}t d|d|t  t/dt1|d}|rt5|dz nd} n#t6t8t:f$rd} YnwxYwYnwxYw| | t1|krt d dS|| }||d<||t |tr|ddnt|}t d!|d"dS)#z=Let the user remove a saved custom provider from config.yaml.rr rzNo custom providers configured.NzRemove a custom provider: r?unnamedrrnrrrrrCancel TerminalMenucg|]}d|Srr)ryrls rrz+_remove_custom_provider.. s ' ' '!X!XX ' ' 'r-> )fg_redbold)r%TFzSelect provider to remove: cursor_index menu_cursormenu_cursor_stylemenu_highlight_style cycle_cursor clear_screenr flush_stdinrrrrgrru ✅ Removed "z" from custom providers.)rrSr!r/rrrrrnrrrsimple_term_menur!showhermes_cli.curses_uir/rNotImplementedErrorr5r4rr)rr*r3rcr7rrr)rrSr!rrrkrr?rcrr!menur r/r<rlrremoved removed_names rrr s^:::::::: +--C*++1rI i & &i /000 '(((G'' eT " " '99VY//D))J++C J33;;IrJJQQRUVVI NNd22i222 3 3 3 3 NN3u:: & & & & NN8111111| ' 'w ' ' '0!,.    iikk444444   ,gz7Q Rgq)) ! !DAq -q--A--   6S\\66677==??C"%/#c((Q,,4CC-x8   CCC  {cS^^++ lmmC  G'CK*4Wd*C*CU FI&&&W @, @ @ @AAAAAs9:AFAI,AH54I5IIIIIc x "ddlm}m}ddlm}m}ddlm}|d}|d}|dd} |d d} |d d} |d d"|d pd } | s"| r tj | d} t|| } td |td|"rtd"ttd|| |d| pd}|rd}"r"|vr|"}tdt|d ddlm}"fd|Ddgz}|||dddddd|d }|}dd!lm}|t||t|krtd"dS||}n#t*t,t.t0jf$r)t5|d#D]&\}}|"krd$nd}td%|d&||'td%t|d#zd't t7d(t|d#zd) }|std"YdSt9|d#z }|dks|t|krtd"YdS||}n.#t:t<t>f$rtd*YYdSwxYwYnwxYw"r_td+ t7d,"d) p"}n#t<t>f$rtd*YdSwxYwtd- t7d. }n'#t<t>f$rtd*YdSwxYw|std/dS|||}|d }tA|tBs |rd0|ini}||d <| r2| |d1<|"dd|"d dnd2|d1<||d<| r| |d <|dd}|r||d<n|"dd|||| rs|}|d3}tA|tBr=|| }tA|tBr||d4<tG|d5dpd }tG|d dpd } tI|p| }!|!r>| r.X sGIJa;&6&6"Q""""HHHrz Cancelr$fg_greenr&r;TFzSelect model from :r'r.rqrr9rrz. Cancelrgrrz%Could not fetch models from endpoint.z Model name [z@Could not fetch models from endpoint. Enter model name manually. Model name: zNo model specified. Cancelled.r rrrrru ✅ Model set to: z Provider: rr)&rrorprrSr!rrr/r3r-r.rrindexr*r0r!r1r2r/rr3r5r4rr)rrcr7rrrrrrrr)#rrrorprSr!rr?rrrurrconfig_api_keyrErr! menu_itemsr4r r/rr<rrrrrmcustom_api_mode providers_cfgprovider_entryoriginal_api_key_reforiginal_api_keyhad_inline_api_keyrs# @rrr+ sbHGGGGGGG::::::::222222  DZ(H  R00H 2..G 2..G##GR00K!%%n55;BBDDL .w.*.."--:='RRN       # # #$$$, *[**+++ GGG ()))  3!TF B  4;&00 ,,{33K 0s6{{000111+  5 5 5 5 5 5NT J <(!"6%2!"24222   D))++C 8 8 8 8 8 8 KMMM GGG{cS[[00l###JJ0':;UV   !&!,, - -1)*k)9)9r+1+++6++,,,, 0s6{{Q000 1 1 1 GGG =Vq===>>DDFF,'''FF#hhl77cS[[00,'''FF#C[  18<   n%%%   &  5666 >k>>>??EEGGV;JJ!8,    . ! ! ! FF  PQQQ ~..4466JJ!8,    . ! ! ! FF   2 3 3 3 Fz""" +--C GGG  E eT " "&+3E""G .(j *d### )T""""$j$j  .-E) #'' B77O$+j *d###K"Dkmm ,, mT * * !*..|<B((%''%$'!%%i44:$$%''!&**>*RBR%S%S"&?&?  2 29b A A GRHHNNPP? 1?N9-83~'9'9)R'H'H'NB#O#O#U#U#W#W807N9-#0K  C    h CCC - - -... -$ - -( - - -.....soBH HB M!!AL0*:L0'L0/M!0&MM!MM! M!6'N OO!O77 PPrc|d}t|trHt|dpdSdS)Nagentreasoning_effortrn)r/rrrr3r)r agent_cfgs r_current_reasoning_effortrL sc 7##I)T""L9==!344:;;AACCIIKKK 2reffortcr|d}t|tsi}||d<||d<dS)NrIrJ)r/rr)rrMrKs r_set_reasoning_effortrO sD 7##I i & &$ #w$*I !!!rc ttd|DdfdD}|fdD|sdSfdd}d}d krt |}n6|vr|}nd |vr|d }nd } d d lm}fd |D}|d||d||||dddddd}| } d dl m } | | dSt| t |kr|| S| t |krd SdS#tttt jf$rYnwxYwtdt%|dD]#\} } td| d| $t |} td| dzd|td| dzd|t t'd| dzd}|sdSt+|} d| cxkr| krnn || dz S| | dzkrd S| | dzkrdStd| dzn2#t,$rtdYnt.t0f$rYdSwxYw)zOPrompt for a reasoning effort. Returns effort, 'none', or None to keep current.c3K|]X}t|#t|VYdSrwr)ryrMs rr{z5_prompt_reasoning_effort_selection.. sk  ,2VARARATAT KK     % % ' '      r)minimallowmediumhighxhighcg|]}|v| Srr)ryrMdedupeds rrz6_prompt_reasoning_effort_selection.. s#III&v7H7Hv7H7H7Hrc3$K|] }|v|V dSrwr)ryrMcanonical_orders rr{z5_prompt_reasoning_effort_selection.. s-QQf63P3P63P3P3P3PQQrNc|kr|dS|S)Nu ← currently in user)rMcurrent_efforts rrQz2_prompt_reasoning_effort_selection.._label s" ^ # #444 4 rzDisable reasoningzSkip (keep current)rrTrr c,g|]}d|Sr#r)ryrMrQs rrz6_prompt_reasoning_effort_selection.. s*???V(v((???rrr$r:r<TFzSelect reasoning effort:r'r.rrr rgz] (default: keep current): rirj)rrfromkeysrNr*r?r0r!rr1r2r/rrr3r5r4rr)rr3rcr7rr)effortsr\r disable_label skip_labelrr!rkr4r r/r<rMr.rsrQrZrXs ` @@@r"_prompt_reasoning_effort_selectionrb s   6=     G DOIIIIOIIIG NNQQQQQQQQQQ t (M&J'll 7 " "mmN33 W  mmH--   111111????w???+M++,,,(J(()))| $2!.,    iikk444444 ;4  W  3<  #g,,  6t ,gz7Q R      $%%%w**** 6 (1((v(()))) G A 'q1u ' ' ' '((( $q1u $ $ $ $%%% GGG JAJJJKKQQSSF tf++CC}}}}1}}}}}sQw''a!e||va!e||t +AE++ , , , , + + + ) * * * * *!8,   44 sOA=F(F)F"F%$F%:*J<&)J< J< J<&J<<K+K+*K+c@ ddlm}m}m}m}m}ddlm}m}m } ddl m } m } m } m} m}d}||}||}|dd}|dd}|st#d t#t#d t#d t#d t#d t#dt#t#dt#dt#dt#dt# t%d}n&#t(t*f$rt#YdSwxYw|dkrz ddlm}|}|r*|d|t#dt#nt#ddSn #t0$r}t#d|Yd}~dSd}~wwxYw|dkr ddl}|d}n&#t(t*f$rt#YdSwxYw|st#ddS ddlm}||\}}|st#d|dSn#t6$rYnwxYw|d|t#d t#nt#ddS||}|dd}|dd}nV|d!vrt#d"|dd#d$|d%n%|d&krt#d'nt#d(t#|j}| |}|r d)|Dn | ||}||||*p|} |r-d+|D}!t#d,t;|!d-n5t=j|g}!|!rt#d.t#d/|!r||!| 0}"n< t%d1}"n#t(t*f$rd}"YnwxYw|"r;||"||*p|"}"|}#t?|#}$| |"||*}%d}&|%r$t#d2|"d3tA|%|$4}&||"|}'|'d5}(tC|(tDs |(rd6|(ini}(|(|'d5<||(d7<||(d8<| |"||*|(d9<|&tG|'|&| |'|t#d:|"d;|j$d%|%r-|&d|&dSdSdSt#d?dS)@zAGitHub Copilot flow using env vars, gh CLI, or OAuth device code.r)rorUrorp$resolve_api_key_provider_credentials)r`rSr!)rfetch_github_model_cataloggithub_model_reasoning_effortscopilot_model_api_modenormalize_copilot_model_idrrurnrz.No GitHub token configured for GitHub Copilot.z Supported token types:uL → OAuth token (gho_*) via `copilot login` or device code flowuI → Fine-grained PAT (github_pat_*) with Copilot Requests permissionu= → GitHub App token (ghu_*) via environment variableuA ✗ Classic PAT (ghp_*) NOT supported by Copilot APIz Options:z1 1. Login with GitHub (OAuth device code flow)z 2. Enter a token manuallyrz Choice [1-3]: Nr)copilot_device_code_loginCOPILOT_GITHUB_TOKENz Copilot token saved.z Login cancelled or failed.z Login failed: rz Token (COPILOT_GITHUB_TOKEN): Cancelled.)validate_copilot_token ✗ z Token saved.) GITHUB_TOKENGH_TOKENz GitHub token: ru ... ✓ (rz gh auth tokenu* GitHub token: ✓ (from `gh auth token`)u GitHub token: ✓cdg|]-}|d|dd.Srrnr/rs rrz'_model_flow_copilot..s5BBB488D>>B$  BBBrcatalogrucg|]}||Srr)rymodel_ids rrz'_model_flow_copilot..sGGG8hGhGGGr Found  model(s) from GitHub CopilotL ⚠ Could not auto-detect models from GitHub Copilot — showing defaults.? Use "Enter custom model name" if you do not see your model.rr>rz supports reasoning controls.)r\rmr rrrrwrrz"Reasoning disabled for this model.zReasoning effort set to: r)%rrorUrorprdrr`rSr!rrrerfrgrhr/rrr3rrhermes_cli.copilot_authrir9rarlrinference_base_urlr*rrLrbrrrOr?))rrrorUrorprdr`rSr!rrerfrgrhrrrrurrsritokenrAranew_keyrlvalidreffective_basert live_modelsnormalized_current_modelr\r] initial_cfgr\reasoning_effortsselected_effortrrms) rrrAs8KJJJJJJJJJK ,G 0 0 = =Eii 2&&G YYx $ $F K >???  ())) Z    YZZZ MNNN QRRR  l ABBB -... o  -..4466FF!8,    GGG FF  S== MMMMMM1133"N#95AAA2333GGGG8999F   .../// s]] !//*LMMSSUU%x0     n%%% JJJJJJ33G<< s.3..)))F     N17 ; ; ; " # # # GGGG . ! ! ! F44[AA))Ir**8R(( 1 1 1 DWRaR[DD6DDD E E E E  & & > ? ? ? ? ' ( ( ( /N((11G  7BBBBBB  g~ 6 6 #"        UGG{GGG  GZGGGHHHH%)+r::  U ^    S T T T** &>    ^,,2244HH!8,   HHH 1 & &      "kmm 2;??::        >x>>> ? ? ?@!.O 8$$$kmm  %&& !*/7Y&&RE CL'j*j22    j  & !# 7 7 7 C FxFFw|FFFGGG  E&((:;;;;;  EC/CCDDDDD  E E E E lsa,!EE10E1;A G G1G,,G1;+H''I  I !(J JJ!P88Q Qcddlm}m}m}m}m}m}m}ddlm } m } ddl m } m } ~d} || }|| }|dp|dpd}|d p|j}t!d t!d t!d t!d |t!d|t! || }n9#t"$r,}t!d|t!dYd}~dSd}~wwxYw|d p|}d} |d}|dd}n#t"$rYnwxYw| |}| |||p|}|r-d|D}t!dt%|dn5t'jdg}|rt!dt!d|r|||}n< t)d}n#t,t.f$rd}YnwxYw|st!ddS| |||p|}||| }|d}t1|t2s |rd|ini}||d<| |d<||d <d |d!<| ||t!d"|d#|jd$dS)%z4GitHub Copilot ACP flow using the local Copilot CLI.r)rorUrorp$get_external_process_provider_statusrd-resolve_external_process_provider_credentials)rerhr rresolved_commandcommandrrz? GitHub Copilot ACP delegates Hermes turns to `copilot --acp`.zB Hermes currently starts its own ACP subprocess for each request.zH Hermes uses your selected model as a hint for the Copilot ACP session.z Command: z Backend marker:  ⚠ z[ Set HERMES_COPILOT_ACP_COMMAND or COPILOT_CLI_PATH if Copilot CLI is installed elsewhere.Nrnrurscdg|]-}|d|dd.Srqrrrs rrz+_model_flow_copilot_acp..@s5OOOTOdhhtR((OOOrrwrxryrzrr>rrmr rrvrrwrr)rrorUrorprrdrrrerhrrSr!r/r|rr9r*rrr3rrrrr?)rrrorUrorprrdrrerhrSr!rrrrrrrAcatalog_api_key catalog_credsrtrr\r]rrms rrrs;:::::::K ,G 1 1+ > >F %&&L&**Y*?*?L9ZZ ++Iw/IN KLLL NOOO TUUU *( * *+++ /~ / /000 GGG==kJJ  nsnn i     YYz**Infer the current StepFun region from the configured endpoint.rnzapi.stepfun.comchina international)r3r)rrs r_infer_stepfun_regionrs8.b''))//11JJ&&w ?rrc&ddlm}m}|dkr|n|S)Nr)STEPFUN_STEP_PLAN_CN_BASE_URLSTEPFUN_STEP_PLAN_INTL_BASE_URLr)rrr)rrrs r_stepfun_base_url_for_regionrsG W   &% ,rcddlm}m}m}m}ddlm}m}m}m } ddl m } d} || } | j r | j dnd} | j pd}d}| j D]&}||ptj|d}|rn'|st!d| jd| r dd l}|| d }n&#t(t*f$rt!Yd SwxYw|st!d d S|| ||}t!d t!n1t!d | jd|d ddt!d}|r ||ptj|d}|s`|d}t/|t0r6t3|dpd}t5|p| j}ddt9ddfddt9ddfg}g}|D]>\}}||kr|d||df'|||f?|dt?d|D}|||ddkrt!dd S||d}t9|}|r |||| ||}|r+|}t!dtA|d| jdn/tCj| g}|rt!d | jd!|r|||"}n< tEd#}n#t(t*f$rd }YnwxYw|r|||} | d}!t/|!t0s |!rd$|!ini}!|!| d<| |!d%<||!d<|!#d&d | | |t1|!|d<t!d'|d(| jdd St!dd S))z6StepFun Step Plan flow with region-specific endpoints.r)rorUrorpr rrrnrrNrrqrrrrrrrmrrzInternational (rrzChina (r)rrcg|]\}}|Srrrs rrz'_model_flow_stepfun..4s)P)P)PHAu%)P)P)Prrrrw model(s) from  APIz$ Could not auto-detect models from u, API — showing Step Plan fallback catalog.rr>r rrrwr)$rrorUrorprr_r`rSr!rrrrr-rxrr?rar3rrr/rrrrr|rrrrr*rrr)"rrrorUrorpr_r`rSr!rrrrrrrrar~ current_basercurrent_regionregion_choicesordered_regions region_keyr region_idxselected_regionrrr\r]rrms" rrrs ZYYYYYYYYYYY222222K ,G-4-EMg&q))2G+1rLL&$}R((=BIb",=,=   E   6GL666777   !//W*M*M*MNNTTVV%x0     l### N7G , , ,"L " # # # GGG D7<DD<+;DDDEEE LR$}\22Qbi b6Q6Q HJJw'' i & & Hy}}Z88>B??EEGGL*<+U7;UVVN \,H,Y,Y\\\] D8AADDDENO+88 E  ' '  " "1ze3S3S3S&T U U U U  " "J#6 7 7 7 7/000()P)P)P)P)PQQJ_Z8;xGG l%j1!4O1/BBN5|^444""<@@K   KZKKKKKLLLL%)+r::   6w|666    **:]SSS ^,,2244HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL'j*j *d### Cu++w FxFFw|FFFGGGGG ls$.CC'&C'!M<<NNcddlm}m}m}ddlm}m}m}m} ddl m } d|d} |dpd} | rtd | d d d ntd | t dd l } | d  }n&#ttf$rtYd SwxYw|stdd S| d||} tdt| jdg}tdt#|d|r|||}n< t%d }n#ttf$rd }YnwxYw|r|||}|d}t'|t(s |rd|ini}||d<d|d<| |d<|dd |di}t'|t(si}||d<||d<| d| | d| |||td|d|d td | d Std!d S)"uBedrock API Key mode — uses the OpenAI-compatible bedrock-mantle endpoint. For developers who don't have an AWS account but received a Bedrock API Key from their AWS admin. Works like any OpenAI-compatible endpoint. rrn)rSr!r_r`rzhttps://bedrock-mantle.z .api.aws/v1AWS_BEARER_TOKEN_BEDROCKrnz Bedrock API Key: N rz Endpoint: rk ✓ API key saved.r Showing z curated modelsr Model ID: rmr rrrrrrprr Default model set to: z (via Bedrock API Key, r No change.)rrUrorprrSr!r_r`rrrrar3rrr/r*rrrr)rrrrUrorprSr!r_r`rmantle_base_urlrrarur\r]rrm bedrock_cfgs r_model_flow_bedrock_api_keyrfs   322222CCCCO!=!;<<BL& >L"$5>>>???? ._..///   NNNoo&;<<BBDDGG!8,    GGG FF   . ! ! ! F17;;;  $%%% GGG&!%i44J 7s: 7 7 7888**:]SSS ^,,2244HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL$j+j *d###ggi,, +t,, K & H$I '666(/::: C SSS&SSSTTT ._..///// ns$/+BB>=B>!E##E98E9c  ddlm}m}m}ddlm}m}ddlm} ddl m }m } m } m } n=#t$r0tdtdtYdSwxYw|s,td td t| } | rtd | d ntd t| } t!d| d}n&#t$t&f$rtYdSwxYw|p| }tdttdtdtdtdtdt t!d}n&#t$t&f$rtYdSwxYw|dkrt)|||dStd|d| |}|rid}d}g}|D]W}|d t+ fd|Dr&t+ fd|DrB||Xt/}|D]^}|d dr?d d!dvr d d"d"n }||_g}|D]9}|d ds |vr$||:gd#fd$}||%d&|D}td't9|d(t9|d)nE|jd*g}|r!td+t9|d,ntd-dS|r|||.}n< t!d/}n#t$t&f$rd}YnwxYw|r|||}|d0}t=|t>s |rd1|ini}||d0<d*|d2<d3|d4|d5<| d6d|d*i}t=|t>si}||d7<||d*<|||td8|d9|d:dStd;dS).s/@@3>>!$$@@@@@@rc3DK|]}|vVdSrwr)ryrrs rr{z&_model_flow_bedrock..s0AA1 #AAAAAAr)zus.global.rXrr) zus.anthropic.claude-sonnet-4-6zus.anthropic.claude-opus-4-6zus.anthropic.claude-haiku-4-5zus.amazon.nova-prozus.amazon.nova-litezus.amazon.nova-microz deepseek.v3zus.meta.llama4-maverickzus.meta.llama4-scoutc|d}tD]!\}}||rd||fcS"|drdd|fSdd|fS)Nrrrrr )r)r+)rrr<rec _RECOMMENDEDs r _sort_keyz&_model_flow_bedrock.._sort_key8s~D'C#L11 ' '3>>#&&'q#;&&&'~~i(( #1c{"q#; r)rcg|] }|d S)rrryrs rrz'_model_flow_bedrock..Bs///!ag///rrwz text model(s) (filtered from z total)rz Using z, curated models (live discovery unavailable)zJ No models found. Check IAM permissions for bedrock:ListFoundationModels.rrrmr rzhttps://bedrock-runtime.z.amazonaws.comrrrrz (via AWS Bedrock, rr)!rrUrorprrSr!rragent.bedrock_adapterrrrrrrrr3rrrrrsetr+r,addsortr*r/rrr)!rrrUrorprSr!rrrrrauth_varr region_inputr auth_choicer_EXCLUDE_PREFIXES_EXCLUDE_SUBSTRINGSrrprofile_base_idsbaserXrr\r]rrmrrrs! @@rrrs ;:::::::222222               >??? %&&&      LMMM UVVV ''))HN 2H2223333 LMMM GGG,+--NAnAAABBHHJJ x (  +^F +,,, GGG 5666 NOOO "### HIII ABBB GGG,--3355 x ( c#FFMBBB 0V 0 0 0111))&11KI  I  AD'C@@@@.?@@@@@ AAAA-@AAAAA  OOA    55 + +AD'C~~011 +/2c!""g~~syya((++3 $$T***  AD'C>>"455 #AQ:Q:Q NN1                ###//w///  _s: _ _c+FVFV _ _ _    *%))R88   X3z??XXX     \    F**:]SSS ^,,2244HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL%jMvMMMj *d###ggi,, +t,, K & H$I C OOOfOOOPPPPP nsE )6A#"A#$%D D-,D-+!G G0/G0,!PP$#P$cD-ddlm}m}m}m}m}ddlm}m} m } m } ddl m } m } m-|}|jr |jdnd}|jpd}d}|jD]&}||pt#j|d}|rn'|st'd|jd|r ddl}d kr |d |d }n|d }||}n&#t.t0f$rt'YdSwxYw|sd kr|}nt'd dS| |||}t'dt'n1t'd|jd|dddt'dkrS|rP ddlm}n#t6$rd}YnwxYw|3t'd|r ||ndpt#j|pddp|j}|||}|dkrt't'dt'dt'dt'dt't'dt'dt't'dt't'ddS|dkrt'd nt'd!t'd}|r ||pt#j|d}|s | d"pi}t=|d#pdkr6t=|d$pd}n#t6$rYnwxYw|p|j} tAd%|d&}n'#t.t0f$rt'd}YnwxYw|r5|r3|!d'st'd(n| |||}d krdd)lm"}dd*l m#}|p|r ||nd} |||+} n5#|$r-}!t'd,|!t'd-g} Yd}!~!nd}!~!wwxYw| r t'd.tI| d/nd0krIdd1l m%}"|p|r ||nd}|"||d23} | r t'd.tI| d4ntMjg}#g}$ dd5l'm(}%|%}$n#t6$rYnwxYw|$r|#rud6|$D}&tS|$}'|#D]T}(|(|&vr<|'*|(|&+|(U|'} n|$} t'd.tI| d7n|#r6tI|#dkr#|#} t'd8tI| d9n|p|r ||nd}| ||})|)rKtI|)tI|#kr+|)} t'd.tI| d:|jd;n$|#} | r t'd8tI| d9d| D} | r|| |?}*n< tAd@}*n#t.t0f$rd}*YnwxYw|*r‰dz/_model_flow_api_key_provider..=s 777a 777rz" model(s) from models.dev registryrrrr>rrc(g|]}|Srr)ryrrrs rrz0_model_flow_api_key_provider..^s4   >A ' ' S 9 9   rc3K|]}||V dSrwr)ryrs rr{z/_model_flow_api_key_provider..bs''I'IS'I'I'I'I'I'I'Irrr>r rrwrrr)0rrrorUrorprr_r`rSr!rrrrrrr-rxrr?rar3rragent.gemini_native_adapterrr9r|r/rrrr+rrr*rragent.models_devrrrrrr^rr).rrrrrorUrorpr_r`rSr!rrrrrrrrapromptr~r probe_basetierr_mroverriderrapi_key_for_prober\rArcurated mdev_modelsrseenmergedrrr]rrmrs. ` @rrrus    ,G-4-EMg&q))2G+1rLL&$}R((=BIb",=,=   E   6GL666777   *,, 'ggE`gggFF '@@@F!//&117799%x0     *,,9GG,'''F N7G , , ,"L " # # # GGG D7<DD<+;DDDEEE  h< % E E E E E E E % % % $    %  ( 1 2 2 20<D|,,,".9\/R44.-  %$\:>>Dv~~B;2,---:9<BCCCv~~.//// KLLL GGGLR$}\22Qbi b6Q6Q  ""7++1rB266*%%+,,2244::<< KK"266*#5#5#;<<BBDD     D !?W%?N9n999::@@BB x ( &L&""#:;; & _     N< 2 2 2%Nj  ------;;;;;;(Ww-V]]7-C-C-CTV ..7HSabbbJJ    =C>F FF;B!N N*)N*7%O!PP Q--R2#RR-T?? U  U !\44]  ] c ddlm}mmddlm}m dtf fd } ttdtdt|}|r*|rdS|| td dSttd t dd l }| d  }n&#ttf$rtYdSwxYw|r|| tddStddS#t$r7ttdttdttdtdtdtdttdt dd l }| d }n'#ttf$rtYYdSwxYw|r|| tdYdStdYdSwxYw)zNRun the Claude OAuth setup-token flow. Returns True if credentials were saved.r)run_oauth_setup_tokenrr)save_anthropic_oauth_token%use_anthropic_claude_code_credentialsrc }n#t$rd}YnwxYw|rk|s"t|dr>tdddlm}td|ddSd S) Nrsave_fnu% ✓ Claude Code credentials linked.rdisplay_hermes_homez] Hermes will use Claude's credential store directly instead of copying a setup-token into z/.env.TF)r9rr/rr0r)r_dhh_fnrrr`rs r._activate_claude_code_credentials_if_availablezQ_run_anthropic_oauth_flow.._activate_claude_code_credentials_if_availables 0022EE   EEE    & &u - - 15eii6O6O1P1P  2 1. I I I I 9 : : : G G G G G G BpwpwpypyBBB   4us  u< Running 'claude setup-token' — follow the prompts below.z9 A browser window will open for you to authorize access.Tru ✓ OAuth credentials saved.z8 If the setup-token was displayed above, paste it here:Nz* Paste setup-token (or Enter to cancel): Fu ✓ Setup-token saved.u) ⚠ Could not detect saved credentials.z/ The 'claude' CLI is required for OAuth login.z To install and authenticate:zE 1. Install Claude Code: npm install -g @anthropic-ai/claude-codez/ 2. Run: claude setup-tokenz. 3. Follow the browser prompts to authorizez) 4. Re-run: hermes modelz8 Or paste an existing setup-token now (sk-ant-oat-...):z$ Setup-token (or Enter to cancel): u2 Cancelled — install Claude Code and try again.)rrrrrrrrrrar3rrr8) r`rrrr}ra manual_tokenrrrs ` @@@r_run_anthropic_oauth_flowrsK  D$<  LMMM IJJJ %%''  ==?? t & &un E E E E 2 3 3 34  HIII   NNN"??<egg L"8,    GGG55    & &|^ L L L L , - - -4 9:::u   ?@@@  .///  UVVV ?@@@ >??? 9:::  HIII   NNNOO$JKKQQSSEE!8,    GGG555    & &un E E E E , - - -44 BCCCuu5ssAE:E+E+C0/E0DED!E6EB:J +H.-J .I J I!J 6J J cddlm}m}m}ddlm}m}m}m}ddl m } ddlm } | } d} ddl m } m}m}| }|r ||rd} n#t $rYnwxYwd}| r|| r| sd}t#| r| p| }| }|r| rt%d | d d d n| rt%d t%t%dt%dt%dt% t'd}n#t*t,f$rd}YnwxYw|dkrd}n|dkrd S|rt%t%dt%t%dt%dt%dt% t'd}n&#t*t,f$rt%Yd SwxYw|dkrt/|sd Sn|dkrt%t%dt% dd l}|d}n&#t*t,f$rt%Yd SwxYw|st%dd S|||t%dnt%dd St%| jdg}|r|||}n< t'd }n#t*t,f$rd }YnwxYw|r|||}|d!}t5|t6s |rd"|ini}||d!<d|d#<|d$d |||t%d%|d&d St%d'd S)(uRFlow for Anthropic provider — OAuth subscription, API key, or Claude Code creds.rrn)r`rSr!save_anthropic_api_keyr)get_anthropic_keyF)rr_is_oauth_tokenTz Anthropic credentials: Nrru. Claude Code credentials: ✓ (auto-detected)rrrrrrrrz0 1. Claude Pro/Max subscription (OAuth login)z( 2. Anthropic API key (pay-per-token)z> Get an API key at: https://platform.claude.com/settings/keysz API key (sk-ant-...): rkrrrrrz-Model name (e.g., claude-sonnet-4-20250514): rmr rrrwz (via Anthropic)r)rrUrorprr`rSr!rrrrrrrrr9rrrr3rrrrar/rrr)rrrUrorpr`rSr!rrrr cc_availablerrrcc_credsexisting_is_stale_oauth has_creds needs_authrsrarur\r]rrms rrrs  322222211111$$&&LL            0/11  228<< L      $' 55'l'"&l##C,C(CT IJ  D Hl3B3.?HHH I I I I  D B C C C  /000 7888 o  /006688FF!8,   FFF  S==JJ s]] F&  /000  @AAA 8999 o  /006688FF!8,    GGG FF  S==,^<<  s]] GGG R S S S GGG !//*DEEKKMM%x0     n%%% " "7N C C C C ( ) ) ) ) . ! ! ! F GGG&!%k266J**:]SSS LMMSSUUHH!8,   HHH 8$$$ kmm  %&& !*/7Y&&RE CL'j *d### C AxAAABBBBB lsY#A A! A! !D++EE?!G!!HH+I==J J !L66M  M c(ddlm}||dS)z(Authenticate Hermes CLI with a provider.r) login_commandN)rr )rLr s r cmd_loginr ms*------M$rc(ddlm}||dS)zClear provider authentication.r)logout_commandN)rr )rLr s r cmd_logoutrts*......N4rc(ddlm}||dS)zManage pooled credentials.r) auth_commandN)hermes_cli.auth_commandsr)rLrs rcmd_authr{s*555555Lrc(ddlm}||dS)zShow status of all components.r) show_statusN)hermes_cli.statusr)rLrs r cmd_statusrs*------Krc(ddlm}||dS)zCron job management.r) cron_commandN)hermes_cli.cronr)rLrs rcmd_cronrs*,,,,,,Lrc(ddlm}||dS)z Webhook subscription management.r)webhook_commandN)hermes_cli.webhookr)rLrs r cmd_webhookrr[rct|dd}|dvrtdtjdS|dkrdd lm}||Std |tjdS) uSlack integration helpers. Dispatches ``hermes slack ``. Currently supports: manifest — print or write a Slack app manifest with every gateway command registered as a first-class slash. slack_commandN)Nrnzusage: hermes slack subcommands: manifest Generate a Slack app manifest with every gateway command registered as a native slash Run `hermes slack manifest -h` for details.rrmanifestr)slack_manifest_commandzUnknown slack subcommand: )rGrrrhermes_cli.slack_clir")rLrr"s r cmd_slackr$s $ . .C j  : q j??????%%d+++ ,s , ,3:>>>> 1rc$ddlm}||S)z"Multi-profile collaboration board.r)kanban_command)hermes_cli.kanbanr&)rLr&s r cmd_kanbanr(s$000000 >$  rc(ddlm}||dS)z%Shell-hook inspection and management.r) hooks_commandN)hermes_cli.hooksr*)rLr*s r cmd_hooksr,s*......M$rc(ddlm}||dS)z%Check configuration and dependencies.r) run_doctorN)hermes_cli.doctorr.)rLr.s r cmd_doctorr0*,,,,,,Jtrc(ddlm}||dS)z)Dump setup summary for support/debugging.r)run_dumpN)hermes_cli.dumpr3)rLr3s rcmd_dumpr5s%(((((( HTNNNNNrc(ddlm}||dS)z!Debug tools (share report, etc.).r) run_debugN)hermes_cli.debugr7)rLr7s r cmd_debugr9s%****** IdOOOOOrc(ddlm}||dS)zConfiguration management.r)config_commandN)rr;)rLr;s r cmd_configr<s*000000N4rcpt|ddrddlm}||dSddlm}||dS)z,Back up Hermes home directory to a zip file.quickFr)run_quick_backup) run_backupN)rGhermes_cli.backupr?r@)rLr?r@s r cmd_backuprBsgtWe$$666666000000 4rc(ddlm}||dS)z(Restore a Hermes backup from a zip file.r) run_importN)rArD)rLrDs r cmd_importrEr1rc <tdtdtdtdttdtjd ddl}td|jn#t$rtd YnwxYw dd l m }dd l m }|}|r3|dkr-|d krd nd}td|d|d|ddS|dkrtddSdS#t$rYdSwxYw)z Show version.zHermes Agent vrrz Project: zPython: rNz OpenAI SDK: zOpenAI SDK: Not installed)check_for_updatesrecommended_update_commandrcommitcommitszUpdate available: ru behind — run ''z Up to date)rrYrZrrversionr,openairrJrGrrIr9)rLrNrGrIbehind commits_words r cmd_versionrQs =; = =*: = = =>>> $l $ $%%% -S[&&((+ - -...+  1V/112222 +++ )*****+ 777777@@@@@@""$$  fqjj'-{{88 L 8V88l882244888     q[[ ,     [      s+-B B%$B%)A D 4D DDcFtdddlm}||dS)zUninstall Hermes Agent. uninstallr) run_uninstallN)rhermes_cli.uninstallrT)rLrTs r cmd_uninstallrVs8222222M$rc&d}tj|D]y\}}}d|D|dd<tj|dkr? t j||dz }n#t $rYnwxYw|z|S)a~Remove all __pycache__ directories under *root*. Stale .pyc files can cause ImportError after code updates when Python loads a cached bytecode file that references names that no longer exist (or don't yet exist) in the updated source. Clearing them forces Python to recompile from the .py source on next import. Returns the number of directories removed. rcg|]}|dv| S))venvz.venvrz.gitz .worktreesr)ryrs rrz)_clear_bytecode_cache..)s.   OOO OOOrN __pycache__r)r-rrcbasenamerJrqr5r)rxr5rrrs r_clear_bytecode_cacher]sG "  1      7  G $ $ 5 5  g&&&1      NN    NsA,, A98A9r@ prompt_textr r3cddl}ddl}ddlm}|}|dz }|dz }|d||t |d} |d } | | | | |tj |z} tj | kr| rp |} |d|d| r| n|S#t t"f$rYnwxYwtjd tj | k|d|dt'd t)|d |d |S)awFile-based IPC prompt for gateway mode. Writes a prompt marker file so the gateway can forward the question to the user, then polls for a response file. Falls back to *default* on timeout. Used by ``hermes update --gateway`` so interactive prompts (stash restore, config migration) are forwarded to the messenger instead of being silently skipped. rNrDz.update_prompt.jsonz.update_responseT) missing_ok)rr rz.tmp?z (no response after zs, using default: r)ruuidr0rErruuid4 with_suffix write_textdumpsrnra monotonicr1r2r3r5r7sleeprrc) r_r r3_json_uuidrEr prompt_path response_pathpayloadtmpdeadlineanswers r_gateway_promptrr8s000000 ?  D..K--MD)))%++--  G  ! !& ) )CNN5;;w''(((KK   7*H /  h & &    ! !  &002288::$$$555""d"333!'4vvW4Z(     C /  h & &$'''D))) N#g,, N N' N N NOOO Ns2AE EEweb_dirc~ |jdz dz }|dz dz }|s|dz }|sdS|j}t ddh t j|d D]x\}}} fd |D|d d <|D]\}|d rEt j t j |||krdS]yd D];}||z } | r | j|krdS.|rrN)rrz.jsz.jsxz.cssz.htmlz.vue)r|r}z yarn.lockzpnpm-lock.yamlzvite.config.tszvite.config.jsF) rr1rrrr-rrrcrrM) rsdist_dirsentinel dist_mtimerrrrrrrs @r_web_ui_build_neededrzjsl~ ,z9H'!O3H ??  +l* ??  t)J nf- . .D(*(F(F(F  $9<<<<(<<<   B{{RSS 7##BGLL"$=$=>>KK444   t^ 99;; 27799- ::44 5rr) extra_argsr1rrr{.r1c|dz }|r,|dg|}tj|||dd}|jdkr|S|dg|}tj|||ddS)uRun a deterministic npm install that does not mutate ``package-lock.json``. Prefers ``npm ci`` (strict, lockfile-preserving) when a lockfile is present; falls back to ``npm install`` only if ``npm ci`` fails (e.g. lockfile out of sync on a WIP checkout). Without this, ``npm install`` on npm ≥ 10 silently rewrites committed lockfiles (stripping ``"peer": true`` etc.), which leaves the working tree dirty and causes the next ``hermes update`` to stash the lockfile — repeatedly. r}ciTFrr1r2rrr)r1r4r5rL)rrr{r1lockfileci_cmd ci_result install_cmds r_run_npm_install_deterministicrs ((H t)j)N )      1 $ $  /J/K > %     rfatalrcP|dz sdSt|sdStjd}|s#|rt dt d| St dt ||d}|jd kr1t d |rd nd d |rdndz|rt ddStj|ddg|d}|jd kr1t d |rd nd d|rdndz|rt ddSt ddS)aMBuild the web UI frontend if npm is available. Args: web_dir: Path to the ``web/`` source directory. fatal: If True, print error guidance and return False on failure instead of a soft warning (used by ``hermes web``). Returns True if the build succeeded or was skipped (no package.json). r|Trz3Web UI frontend not built and npm is not available.zBInstall Node.js, then run: cd web && npm install && npm run buildu→ Building web UI...)rr{rru✗u⚠z Web UI npm install failedrnz# (hermes web will not be available)z7 Run manually: cd web && npm install && npm run buildFr5rrr1z Web UI build failedu ✓ Web UI built) r1rzrJrKrrrLr4r5)rsrrr1r2s r _build_web_uirs n $ , , . .t  ( (t ,u  C   X G H H H V W W Wy "### 'W O O OB } F%*U F F FErr E G     M K L L Lu eW-74 P P PB } @%*U @ @ @Err E G     M K L L Lu  4rc gd}tj}g} tjdkrt jgdddddd}|jd ks|jgSd |jd D]}| }| d r|td d  C| dry|tdd }t fd|DrGt||kr4 |t|#t$rYwxYwnt jgdddd}|jd krt!|dd d D]}| }|rd|vr|d d}t|dkrG t|d }n#t$rYjwxYw|d t fd|Dr||kr||n$#t"tjt&f$rgcYSwxYw|S)u]Return PIDs of ``hermes dashboard`` processes other than ourselves. ``hermes dashboard`` is a long-lived server process commonly started and forgotten. When ``hermes update`` replaces files on disk, the running process keeps the old Python backend in memory while the JS bundle on disk is updated, causing a silent frontend/backend mismatch (e.g. new auth headers the old backend doesn't recognise → every API call 401s). The dashboard has no service manager (systemd / launchd), no PID file, and we can't know the original launch args — so the only sane action after an update is to kill the stale process and let the user restart it. This helper is just the detection step; see ``_kill_stale_dashboard_processes`` for the kill. Returns an empty list on any scan error (missing ps/wmic, timeout, etc.). )zhermes dashboardzhermes_cli.main dashboardzhermes_cli/main.py dashboardwin32)wmicprocessr/zProcessId,CommandLinez /FORMAT:LISTTrrJignore)r1r2r3rLerrorsrNrnrz CommandLine=z ProcessId=c3 K|]}|vV dSrwr)ryr current_cmds rr{z-_find_stale_dashboard_pids..s(??A,??????r)psz-A-oz pid=,command=r0rgreprr c3 K|]}|vV dSrwr)ryrrs rr{z-_find_stale_dashboard_pids..3s';;QAL;;;;;;r)r-getpidrplatformr4r5rLrr,r3r+r*rrcrr7rGr8r6r5) patternsself_piddashboard_pidsrrpid_strstrippedrpidrrs @@r_find_stale_dashboard_pidsrs"H y{{H "N: <7 " " ^!!!#$  F  A%%)> K ++D11 ! !zz||??>22 !"&s>':':';';"IHAII%$I%c ddlm}n#t$rYdSwxYw |sdS|}n#t$rYdSwxYw|drdS |}n#t$rd}YnwxYwtd|dz}ttdtd |d td td td dS)aPrint a short heads-up about the skill curator after `hermes update`. Only fires when the curator is enabled AND has no recorded run yet, which is exactly the window where the gateway ticker used to fire Curator against a fresh skill library immediately after an update. We defer the first real pass by one ``interval_hours``; this notice tells the user how to preview or disable before then. Silent on steady state. r)rN last_run_atruℹ Skill curatorzC Background skill maintenance is enabled. First pass is deferred ~zwd after installation; only agent-created skills are in scope and nothing is ever auto-deleted (archive is recoverable).z, Preview now: hermes curator run --dry-runz$ Pause it: hermes curator pausezV Docs: https://hermes-agent.nousresearch.com/docs/user-guide/features/curator) rIrr9 is_enabled load_stater/get_interval_hoursrr)rrhoursdayss r_print_curator_first_run_noticer<ss!!!!!!! !!##  F""$$  yy**,,  q%2+  D GGG   L  L L L  8999 0111 bcccccs4 AA AA/B BB:the running backend no longer matches the updated frontendrc t}|sdSttdt|d|dg g tjdkr|D]} t jddt|dgd d d }|jd kr |n7 ||j p|j pd f#tt jtf$r.} |t|fYd}~d}~wwxYwnd dl}d dl}|D]} t%j||j#t*$r |Y?t,tf$r.} |t|fYd}~xd}~wwxYw|jdz} fd|D}|r|j|kr|jdg} |D]y} t%j|d | |.#t*$r |YOt,tf$r| |YvwxYw| }|r|j|k|D]} t%j||j |3#t*$r |YTt,tf$r.} |t|fYd}~d}~wwxYw D]}td| D]\}}td|d| r tdtddSdS)uKill running ``hermes dashboard`` processes. Called at the end of ``hermes update`` (default ``reason``) and also from ``hermes dashboard --stop`` (which overrides ``reason``). The dashboard has no service manager, so after a code update the running process is guaranteed to be serving stale Python against a freshly-updated JS bundle. Leaving it alive produces silent frontend/backend mismatches (new auth headers the old backend doesn't recognise → every API call 401s). POSIX: SIGTERM, wait up to ~3s for graceful exit, SIGKILL any survivors. Windows: ``taskkill /PID /F`` since there's no clean SIGTERM equivalent for background console apps. The dashboard isn't auto-restarted because we don't know the original launch args (--host, --port, --insecure, --tui, --no-open). The user restarts it manually; a hint is printed. Nu ⟲ Stopping z dashboard process(es) (rrtaskkillz/PIDz/FTrr0rrn@c8g|]}|vr|dDv|S)ch|] }|d S)rr)ryfs rrz=_kill_stale_dashboard_processes...s 6 6 6!1 6 6 6rr)ryrfailedkilleds rrz3_kill_stale_dashboard_processes..sD888avoo 6 6v 6 6 666666rg?u ✓ stopped PID u ✗ failed to stop PID r[z* Restart the dashboard when you're ready:z" hermes dashboard --port )rrr*rrr4r5rrLrrrr3r8r6r5signalrbr-killSIGTERMProcessLookupErrorPermissionErrorrhriSIGKILL) rpidsrrrU_signalrarppending still_pendingrrs @@r_kill_stale_dashboard_processesrcs* & ' 'D  GGG F#d)) F FV F F FGGGF$&F |w - -C -#S48#'dB$))MM#&&&&MM3)M&-)M2(T(T(V(V"WXXX%z'@'J - - - sCFFm,,,,,,,, - - !    - -C -W_----% # # # c"""""#W- - - - sCFFm,,,,,,,, -#5?$$s*88888d888 $/%/++h66 EK   M . ..GCOOO"((---- *'''MM#&&&&&'1...!((-----. $G $/%/++h66  - -C -W_--- c""""% # # # c"""""#W- - - - sCFFm,,,,,,,, -,, *S**++++== V ;C;;6;;<<<< 4 :;;; 23333344smBC!!D+=$D&&D+=EF79F7 $F22F7H22I;%I;:I;/K  L)+L);$L$$L)c $ ddl}ddl}ddlm}d}d|d}t d |d }t j|d |d}|||t d | |d 5}t j |} | D]} t j t j|| j } | | t jzs| | krtd | j d||dddn #1swxYwYt j|d |} t j| s`t j|D]K} t j|| }t j|r | dkr|} nLhd}d}t j| D]}||vrt j| |}t jt't(|}t j|rIt j|rt-j|t-j||nt-j|||dz }t d|dt-j|dn=#t4$r0}t d|t7jdYd}~nd}~wwxYwt;t(}|rt d|d|dkrdndt dt-jd}|r;it jdt't(dz i}tA|dg| nt6j!d!dg} tEj#|d"gzt(dd#n@#tDj$$r.tEj#t6j!d!d$d%d&gt(d'YnwxYwtA|tKtMt(d(z  dd)l'm(}t d*|d+}|d,rAt d-tS|d,d.d/|d,|*d0rAt d1tS|d0d2d/|d0|*d3r&t d4tS|d3d5|*d6r&t d7tS|d6d8|d,s$|*d0st d9n#t4$rYnwxYwt t d: tWn2#t4$r%}tX-d;|Yd}~nd}~wwxYwt]dS)z@https://github.com/NousResearch/hermes-agent/archive/refs/heads/z.zipu!→ Downloading latest version...zhermes-update-)rz hermes-agent-u→ Extracting...rzZip-slip detected: z escapes extraction directory__MACOSX>rYrzrGrZru ✓ Updated z items from ZIPTrku✗ ZIP update failed:  ✓ Cleared  stale __pycache__ directorr ies#→ Updating Python dependencies...uv VIRTUAL_ENVrYpipr-m --versionrrr1 ensurepip --upgrade --default-piprrwebr2→ Syncing bundled skills...r4copied +  new: , updated ↑ updated: user_modified ~  user-modified (kept)cleaned −  removed from manifest ✓ Skills are up to date✓ Update complete!#Curator first-run notice failed: %s)/rzipfileurllib.requestrrmkdtempr-rcrMZipFilerealpathinfolistfilenamer+sepr7 extractallisdirlistdirrrr1rJrqcopytreecopy2r9rrr]rKr.3_install_python_dependencies_with_optional_fallbackrr4r5CalledProcessError_update_node_dependenciesrrKr3r*r/rloggerdebugr)rLrrrbranchzip_urltmp_dirzip_pathzf tmp_dir_realmember member_path extractedr candidatepreserve update_countrrdstrUr5uv_binuv_envpip_cmdr3rs r_update_via_ziprsU OOONNN****** FW6WWW  -...5""*:";;7<<)E)E)E)EFF GX&&& !""" __Xs + + #r7++G44L++--   g..rw||GV_/U/UVV #..|bf/DEE#|33$\fo\\\ MM' " " " # # # # # # # # # # # # # # #GLL*B&*B*BCC w}}Y'' Z((  GLL!44 7==++Z )IE<;; Jy))  Dx',,y$//C',,s<00$77Cw}}S!! '7>>#&&'M#&&&S)))) S#&&& A LL :\:::;;;  gT22222  +++,,,   $L11G  aW a aST Z_ a a    /000 \$  F EJBJJ s<&3H/I/IJJ;VUOQWXXXXX >4/  N;-' #       ,    N{KQ         >>>>>>>?#%%%%%s{A+L9CE, L9,E00L93E04GL99 M3&M..M3!P;;:Q87Q80E"X X X Y Y?Y::Y?git_cmdc^tj|ddgz|ddd}|jsdStj|ddgz|dd}|jr*t dtj|d gz|d d d lm}m}|j|j d }t dtj|dddd|gz|dtj|gdz|dddj}|S)Nrz --porcelainTr~zls-filesz --unmergedru?→ Clearing unmerged index entries from a previous conflict...resetrr)rXtimezonez%hermes-update-autostash-%Y%m%d-%H%M%Su8→ Local changes detected — stashing before update...stashpushz--include-untrackedrr) rev-parsez--verifyz refs/stash) r4r5rr3rrXr nowutcre)rrrunmergedrXr  stash_name stash_refs r_stash_local_changes_if_neededrWs ^8]++   F =   t ~:|,,   H J OPPPw'*DIIII++++++++hl++44/J DEEEN7F$94LL  9999     UUWW  rrctj|gdz|ddd}|jD]I}|d\}}}||kr|cSJdS)N)r rz--format=%gd %HTr~r)r4r5rrrr3)rrr stash_listrselectorrrJs r_resolve_stash_selectorrs6666   J!,,..$$"nnS11!V <<>>Y & &>>## # # # ' 4rstash_selectorctdtd|rtd|dStd|ddS)NzS Check `git status` first so you don't accidentally reapply the same change twice.z@ Find the saved entry with: git stash list --format='%gd %H %s'z! Remove it with: git stash drop z Look for commit z7, then drop its selector with: git stash drop stash@{N})r)rrs r_print_stash_cleanup_guidancersy ] LMMM  B.BBCCCCC e e e e     r prompt_usercp|rttdtdtdtd| |dd}n2t}|dvr2tdtdtd |d Std t j|d d |gz|dd}t j|gdz|dd}t |j}|jdks|r@td|jr&t|j|j r&t|j |j} | r8td| D]} td| tdtd|t j|gdz|dtdtd|d St|||} | .tdtdt|nt j|d d| gz|dd} | jdkrtd| jr&t| j| j r&t| j tdt|| tdtd dS)!Nu/⚠ Local changes were stashed before updating.zL Restoring them may reapply local customizations onto the updated codebase.z= Review the result afterward if Hermes behaves unexpectedly.z Restore local changes now? [Y/n]r r/z Skipped restoring local changes.z.Your changes are still preserved in git stash.z'Restore manually with: git stash apply Fu→ Restoring local changes...r applyTr)diffz --name-onlyz--diff-filter=UruF✗ Update pulled new code, but restoring local changes hit conflicts.z Conflicted files:u • u8 Your stashed changes are preserved — nothing is lost.z Stash ref: )r --hardHEADrz"Working tree reset to clean state.z1Restore your changes later with: git stash apply uR⚠ Local changes were restored, but Hermes couldn't find the stash entry to drop.zT The stash was left in place. You can remove it manually after checking the result.dropuP⚠ Local changes were restored, but Hermes couldn't drop the saved stash entry.u?⚠ Local changes were restored on top of the updated codebase.zB Review `git diff` / `git status` if Hermes behaves unexpectedly.) rrr3rr4r5rrrLrrrr) rrrrinput_fnrxrestorer has_conflictsconflicted_filesrrr!s r_restore_stashed_changesr&s"  ?@@@ Z    MNNN 0111  x BCHHHHww}},,..H + + + 4 5 5 5 B C C C GIGG H H H5 *+++n7GY//   G~<<<<   H ..0011MQ- VWWW >   ! ! * '.&&(( ) ) ) >   ! ! * '.&&(( ) ) )$?0022  $ ' ( ( (%0022 $ $lqll#### IJJJ )i))***  111 1    2333 M)MMNNNu,Wc9EEN `     b    &i0000~ w7 7     ?a   b   {  "" +dk''))***{  "" +dk''))*** f    *)^ D D D KLLL NOOO 4r>(git@github.com:NousResearch/hermes-agent,git@github.com:NousResearch/hermes-agent.git,https://github.com/NousResearch/hermes-agent0https://github.com/NousResearch/hermes-agent.gitr*z.skip_upstream_promptc tj|gdz|dd}|jdkr|jSn#t $rYnwxYwdS)z5Get the URL of the origin remote, or None if not set.)remoteget-urloriginTrrN)r4r5rLrr3r9rrrs r_get_origin_urlr0s   555 5       ! !=&&(( ( "      4sAA AA origin_urlc|sdS|d}|dr |dd}tD]?}|d}|dr |dd}||krdS@dS)zDCheck if the origin remote points to a fork (not the official repo).FrrZNT)rrOFFICIAL_REPO_URLS)r1rofficialofficial_normalizeds r_is_forkr7/s u""3''J6""%_ &&ooc22  ' ' / / ;"5crc":  , , ,55 - 4rcv tj|gdz|dd}|jdkS#t$rYdSwxYw)z-Check if an 'upstream' remote already exists.)r,r-upstreamTrrFr4r5rLr9r/s r_has_upstream_remoter;@sg  777 7      A%% uu '* 88c tj|dddtgz|dd}|jdkS#t$rYdSwxYw)zHAdd the official repo as the 'upstream' remote. Returns True on success.r,rr9TrrF)r4r5OFFICIAL_REPO_URLrLr9r/s r_add_upstream_remoter?Nsj  x 4EF F      A%% uus .1 ??rheadc tj|dd|d|gz|dd}|jdkr&t|jSn#t $rYnwxYwdS)zDCount commits on `head` that are not on `base`. Returns -1 on error.rev-list--countz..Trrr)r4r5rLrcrr3r9)rrrr@rs r_count_commits_betweenrD\s   z9.?.?.?.?@ @       ! !v}**,,-- - "      2sAA A$#A$cVddlm}|tz S)z2Check if user previously declined to add upstream.rrD)r0rESKIP_UPSTREAM_PROMPT_FILEr1rDs r_should_skip_upstream_promptrGls4000000 O   9 9 A A C CCrc~ ddlm}|tz dS#t$rYdSwxYw)z3Create marker file to skip future upstream prompts.rrDN)r0rErFtouchr9rDs r_mark_skip_upstream_promptrJssa 444444   6 6==?????      s *. <<cv tj|gdz|dd}|jdkS#t$rYdSwxYw)znAttempt to push updated main to origin (sync fork). Returns True if push succeeded, False otherwise. )r r.r>z--force-with-leaseTrrFr:r/s r_sync_fork_with_upstreamrL}sg  FFF F      A%% uur<ct||}|s trdSttdtdt td}n'#t tf$rtd}YnwxYw|dvrBtdt||rtdd }n0td dStd tdSttd  tj |gd z|d d n%#tj $rtdYdSwxYwt||dd}t||dd}|dks|dkrtddS|dkrPttd|dtdtdtddS|dkrtddSttd|dtd tj |gdz|d n%#tj $rtdYdSwxYwtd td!t||rtd"dStd#td$dS)%a[Check if fork is behind upstream and sync if safe. This implements the fork upstream sync logic: - If upstream remote doesn't exist, ask user if they want to add it - Compare origin/main with upstream/main - If origin/main is strictly behind upstream/main, pull from upstream - Try to sync fork back to origin if possible Nu=ℹ Your fork is not tracking the official Hermes repository.zA This means you may miss updates from NousResearch/hermes-agent.z/Add official repo as 'upstream' remote? [Y/n]: r.r/u→ Adding upstream remote...uF ✓ Added upstream: https://github.com/NousResearch/hermes-agent.gitTu< ✗ Failed to add upstream remote. Skipping upstream sync.zg Skipped. Run 'git remote add upstream https://github.com/NousResearch/hermes-agent.git' to add later.u→ Fetching upstream...)fetchr9--quiet)rr1ru7 ✗ Failed to fetch upstream. Skipping upstream sync.z upstream/mainz origin/mainru9 ✗ Could not compare branches. Skipping upstream sync.uℹ Your fork has z commit(s) not on upstream.z2 Skipping upstream sync to preserve your changes.z- If you want to merge upstream changes, run:z git pull upstream mainu& ✓ Fork is up to date with upstreamu → Fork is z commit(s) behind upstreamu→ Pulling from upstream...)pull --ff-onlyr9r>ruO ✗ Failed to pull from upstream. You may need to resolve conflicts manually.u ✓ Updated from upstreamu→ Syncing fork...u ✓ Fork synced with upstreamuL ℹ Got updates from upstream but couldn't push to fork (no write access?)zF Your local repo is updated, but your fork on GitHub may be behind.)r;rGrrr3rrrr?rJr4r5rrDrL)rr has_upstreamrx origin_aheadupstream_aheads r_sync_with_upstream_if_neededrUs(55L ! ' ) )  F  MNNN QRRR  GHHNNPPVVXX H+,    GGGHHH  ' ' ' 1 2 2 2#GS11 \ $ TUUU y    ' ( ( ( F GGG $%%%  666 6       ( GHHH *'3WWL+m_Na>A-- IJJJa  L<LLLMMM BCCC =>>> *+++ 6777 GGG C C C CDDD ()))  ??? ?      ( ]       '(((    --X /00000 Z    VWWWWWs63B!B76B7=EE=<E=I<<JJcg}ddlm}|}|||dz }|r@|D]+}|r||,|D]@} |dz }|r|1#t$rY=wxYwdS)uDelete the update-check cache for ALL profiles so no banner reports a stale "commits behind" count after a successful update. The git repo is shared across profiles — when one profile runs ``hermes update``, every profile is now current. rr#profilesz .update_checkN)r0r$rriterdirr1rr9)homesr$ default_home profiles_rootrr cache_files r_invalidate_update_cacher]s E888888**,,L LL :-M$"**,, $ $E||~~ $ U### /J  "" $!!###    D  s-B44 CCc4 ddl}tdz d5}||di}dddn #1swxYwYn#t $rgcYSwxYw|di}t |tsgS|dg}g}|D]Y}d|vrSd |vrO|dd d d d d}||vr| |Z|S) u7Return the optional extras referenced by the ``all`` group. Only extras that ``[all]`` actually pulls in are retried individually. Extras outside ``[all]`` (e.g. ``rl``, ``yc-bench``) are intentionally excluded — they have heavy or platform-specific deps that most users never installed. rNzpyproject.tomlrbprojectzoptional-dependenciesall[]r) tomllibropenloadr/r9rrr,r)rdhandler` optional_depsall_refs referencedrefr?s r!_load_installable_optional_extrasrls~-- 3 3D 9 9 >Vll6**..y"==G > > > > > > > > > > > > > > >  KK 7<>>>    "M"$244 ( ( ( N"i}E}}}i%PP        # #E * * * *, ( ( (   ' ' ' ' ' (  \tyyIY?Z?Z \ \     Z -@X@X Z Z       s!"&AA=B??$C&%C&ctjd}|sdSdtfdtdz ff}td|DsdSt d|D]\}}|dz st ||d}|jd krt d |Mt d ||jpd }|r*t d | ddS)Nrz repo rootrc3JK|]\}}|dz VdS)r|Nr1)ryrrcs rr{z,_update_node_dependencies..xs7EEGAt~%--//EEEEEEru$→ Updating Node.js dependencies...r|)rrrrrr ✓ u ⚠ npm install failed in rnrr) rJrKrrrr1rrLrr3r)rpathsrrcrrs rrrosQ ,u  C  l# <(*+ E EEuEEE E E 011144 t~%--//  /  R      ! ! "5"" # # #  4U44555-%2,,..  4 2**,,R022 3 3 3!44rc6eZdZdZdZdZdZdZdZdZ dS) _UpdateOutputStreamuStream wrapper used during ``hermes update`` to survive terminal loss. Wraps the process's original stdout/stderr so that: * Every write is also mirrored to an append-only log file (``~/.hermes/logs/update.log``) that users can inspect after the terminal disconnects. * Writes to the original stream that fail with ``BrokenPipeError`` / ``OSError`` / ``ValueError`` (closed file) no longer cascade into process exit — the update keeps going, only the on-screen output stops. Combined with ``SIGHUP -> SIG_IGN`` installed by ``_install_hangup_protection``, this makes ``hermes update`` safe to run in a plain SSH session that might disconnect mid-install. c0||_||_d|_dSNF) _original_log_original_broken)selforiginallog_files r__init__z_UpdateOutputStream.__init__s! %rc|j, |j|n#t$rYnwxYw|jr-t |t t frt|ndS |j|S#tttf$r7d|_t |t t frt|ndcYSwxYw)NrT) r{writer9r|rrbytesr*rzBrokenPipeErrorr5r7)r}rfs rrz_UpdateOutputStream.writes 9   %%%%       F *4#u > >E3t999A E F>''-- -*5 F F F%)D ! *4#u > >E3t999A E E E  Fs$ 11)BA CCc|j+ |jn#t$rYnwxYw|jrdS |jdS#t t tf$r d|_YdSwxYw)NT)r{flushr9r|rzrr5r7r}s rrz_UpdateOutputStream.flushs 9   !!!!        F ) N " " " " "*5 ) ) )$(D ! ! ! ! )s# 00AA:9A:cj|jrdS |jS#t$rYdSwxYwry)r|rzrr9rs rrz_UpdateOutputStream.isattysM   5 >((** *   55 s $ 22c4|jSrw)rzfilenors rrz_UpdateOutputStream.filenos~$$&&&rc,t|j|Srw)rGrz)r}r?s r __getattr__z_UpdateOutputStream.__getattr__st~t,,,rN) __name__ __module__ __qualname____doc__rrrrrrrrrrwrws{"&&& FFF( ) ) )''' -----rrw gateway_modectjtjddd}|r|Sddl}t |dr9 ||j|jn#ttf$rYnwxYw ddl m }|dz }| dd |d z }t|d d d }ddl }|d|j dd||d<t#|d|t_t#|d|t_d|d<n#t$$rd|d<YnwxYw|S)u$Protect ``cmd_update`` from SIGHUP and broken terminal pipes. Users commonly run ``hermes update`` in an SSH session or a terminal that may close mid-install. Without protection, ``SIGHUP`` from the terminal kills the Python process during ``pip install`` and leaves the venv half-installed; the documented workaround ("use screen / tmux") shouldn't be required for something as routine as an update. Protections installed: 1. ``SIGHUP`` is set to ``SIG_IGN``. POSIX preserves ``SIG_IGN`` across ``exec()``, so pip and git subprocesses also stop dying on hangup. 2. ``sys.stdout`` / ``sys.stderr`` are wrapped to mirror output to ``~/.hermes/logs/update.log`` and to silently absorb ``BrokenPipeError`` when the terminal vanishes. ``SIGINT`` (Ctrl-C) and ``SIGTERM`` (systemd shutdown) are **intentionally left alone** — those are legitimate cancellation signals the user or OS sent on purpose. In gateway mode (``hermes update --gateway``) the update is already spawned detached from a terminal, so this function is a no-op. Returns a dict that ``cmd_update`` can pass to ``_finalize_update_output`` on exit. Returning a dict rather than a tuple keeps the call site forward-compatible with future additions. NF) prev_stdout prev_stderrrrrSIGHUPrDlogsTrhz update.logarrJ) bufferingrLz === hermes update started seconds)timespecz === rrrr)rrrrhasattrrSIG_IGNr7r5rrErprerXrr isoformatrwr9)rrr_get_hermes_homelogs_dirlog_pathr_dts r_install_hangup_protectionrs<zz   E w!!  NN7>7? ; ; ; ;G$    D ! JIIIII##%%.td333l*#WEEE H|!!++Y+?? H H H   %j(})=xHH (})=xHH !k !!!!j! Ls$ AA*)A*.CEEEc|sdS|drx |dtjt_n#t$rYnwxYw |dtjt_n#t$rYnwxYw|d}|< ||dS#t$rYdSwxYwdS)zWRestore stdio and close the update.log handle opened by ``_install_hangup_protection``.Nrrrr)r/rrr9rrr()rrs r_finalize_update_outputr)s   yy =#*==CJJ    D  =#*==CJJ    D yy$$H  NN    NN         DD  s5*A AA*B BB*(C C"!C"ctdz }|s#tdtjddg}tjdkrgd}tdt j|dd gztd d }|jd kr|j }d |vsd|vrtdnSd|vsd|vrtdn;td|r*td| d tjdt j|gdztd d d }t|j }|d krtdd S|dkrdnd}td|d|dd dlm}td|dd S)!zIImplement ``hermes update --check``: fetch and report without installing.rZu6✗ Not a git repository — cannot check for updates.rgitrrrwindows.appendAtomically=falseu→ Fetching from origin...rNr.TrrCould not resolve hostunable to access9✗ Network error — cannot reach the remote repository.Authentication failedcould not read UsernameD✗ Authentication failed — check your git credentials or SSH key.u ✗ Failed to fetch from origin.r)rBzHEAD..origin/mainrCr~u✓ Already up to date.rJrKu⚕ Update available: rz behind origin/main.rHz Run 'z ' to install.N)rr1rrrrr4r5rLrr3rrcrrrI)git_dirr fetch_resultr rev_resultrOrPrIs r_cmd_update_checkr?s0V#G >>   FGGG  gG |wAAA '(((>7H%%   L !##$**,, #v - -1Cv1M1M M N N N N $ . .2Kv2U2U X Y Y Y Y 4 5 5 5 536,,..q133444  >>>>   J"((** + +F {{ '(((((#)Q;;xxI  RvRR RRRSSS@@@@@@ C2244CCCDDDDDrc ttjdkrdS tjdkrdSn#t$rYdSwxYwt d}|s|sdStj dpd} tj ddd |d tj d d d dddgddd}n#ttj f$rYdSwxYw|jdkrdSd}d}d}dD]}t ||z }|s* |d}n#t"$rYNwxYwt%d|D} | r |dd5} | d|zdz|zdzdddn #1swxYwYn,#t"$r} t-d|d| Yd} ~ d} ~ wwxYwt-d |d}|rt-d!dSdS)"aHEnsure /usr/local/bin is on PATH for RHEL-family root non-login shells. Mirrors the post-symlink probe added to ``scripts/install.sh`` so that existing FHS-layout root installs on RHEL/CentOS/Rocky/Alma 8+ get repaired on ``hermes update`` without requiring a reinstall. The installer's assumption that ``/usr/local/bin`` is on PATH for every standard shell breaks on those distros in non-login interactive shells (su, sudo -s, tmux panes, some web terminals): /etc/bashrc doesn't add /usr/local/bin and /root/.bash_profile doesn't either. Symptom: ``hermes`` prints ``command not found`` even though the symlink lives at /usr/local/bin/hermes. Silent no-op on: non-Linux, non-root, non-FHS installs, and any system where ``bash -i -c 'command -v hermes'`` already resolves. Idempotent. linuxNrz/usr/local/bin/hermesHOMEz/rootrrCzHOME=zTERM=rDdumbrrzcommand -v hermesTrr0z"export PATH="/usr/local/bin:$PATH"uK# Hermes Agent — ensure /usr/local/bin is on PATH (RHEL non-login shells)F)z.bashrcz .bash_profilernrc3vK|]4}d|vo+d|vo'|d V5dS)z/usr/local/binrr|N)lstripr+)ryrs rr{z)_ensure_fhs_path_guard..sj    $ 2$ 2KKMM,,S111      rrrJrKru ⚠ Could not update r[u& ✓ Added /usr/local/bin to PATH in z? (reload your shell or run 'source ~/.bashrc' to pick it up))rrr-geteuidrr is_symlinkr1r.r/r4r5r8r6rLrr2r5rrrerr) fhs_linkrrR path_line path_comment wrote_anyrrexistingalready_guardedrrUs r_ensure_fhs_path_guardrosJ  |w :<<1   F  +,,H    ):): :>>& ! ! ,WD  D T^^ 5RZ^^FF33 5 5 T4!4 6 dB     z8 9 14I "I1 4jj9${{}}   }}I}66HH    H   !++--          #00 GA|+d2Y>EFFF G G G G G G G G G G G G G G G    6C66166 7 7 7 HHHH  >>>>>>  `c```aaa   -...   B++T;;;  +c++,,, )***   o"$G YZZZ ]]__,     H"..    Ed  ---t--%IIIIIIII   )1133RRh6J6J46P6PRRLL ) ) )x==LLL ) %%%8}} % D D D D DW D D D DEEE 1x 1 1222 CDDD LMMM GGGGGsA!! B$+/BB$D E!D??E*F G/GGH H,+H,J%""JJ%J!J% J!!J%%KKc2ddlm}m}|r |ddSt|ddrt dSt|dd}t |} t ||t|dS#t|wxYw) zUpdate Hermes Agent to the latest version. Thin wrapper around ``_cmd_update_impl``: installs hangup protection, runs the update, then restores stdio on the way out (even on ``sys.exit`` or unhandled exceptions). r) is_managed managed_errorzupdate Hermes AgentNrFgateway)r)rrrrGrr_cmd_update_implr)rLrrr_update_io_states r cmd_updaters<;;;;;;;z|| +,,,tWe$$4E22L 2|LLL2L9999 011111 01111s #BBc 1mno|rddnd}tt|dd}tdtt|d}tdz }|sEt jdkrd }n2td td t jd t jdkr3|rtj gd tdd dg}t jdkrgd}t|t}t|}|r/tdtd|t|rt|dS tdtj |ddgztd d } | jdkr| j} d| vsd| vr>tdt| rd| dndnSd| vsd| vrtdn;td| r*td| dt jd tj |gdztd d d } | j} d!} | d!krZ| d"krd#nd$| d%}td&|d't'|t}tj |d(d!gztd d d nt'|t}|duo@| o=|p;t jot j}tj |d)d*| d+gztd d d } t-| j}|dkrat/|t1|t|||,| d-vr#tj |d(| gztd d d td.dStd/|d0 dd1lm}|d23}|rtd4|n2#t6$r%}t8d5|Yd}~nd}~wwxYwtd6d} tj |d7d8d| gztd d }|jdkrtd9tj |d:d;d<| gztd d }|jdkrxtd=| d>|jr)td|jtd?t jd d }|>|s#td@|dAtdBn`t1|t|||,nF#|?|s#td@|dAtdBwt1|t|||,wwxYwt/t=t}|rtdC|dD|d krdEndF|r| d!krt?|ttdGtAj!dH}|r;itDj#dItItdJz i}tK|dKg|Lnt j&dMdKg} tj |dNgztd d n@#tj'$r.tj t j&dMdOdPdQgtd RYnwxYwtK|tQtStdSz ttdT ddl*}ddl+}|,|n#t6$rYnwxYw ddUl-m.}ttdV|d W} | dXrAtdYt_| dXdZd[0| dX| 1d\rAtd]t_| d\d^d[0| d\| 1d_r&td`t_| d_da| 1dbr&tdct_| dbdd| dXs$| 1d\stden2#t6$r%}t8df|Yd}~nd}~wwxYw ddgl2m3} m4}!m5}"|!mmfdh| D}#|#r^ttdi|#D]=}$ |"|$j6d W}%|%rt_|%1dXg}&t_|%1d\g}'t_|%1d_g}(g})|&r|)7dj|&dk|'r|)7dl|'dm|(r|)7dn|(do|)rd[0|)ndp}*ndq}*td|$j8dr|* #t6$r&}+td|$j8ds|+dAYd}+~+7d}+~+wwxYwn#t6$rYnwxYw ddtl9m:},|,}-|-rtdu|-dvn#t6$rYnwxYwttdwddxl;m<}.m=}/m>}0m?}1|.d y}2|/}3|0\}4}5|2p|3p|4|5k}6|6rt|2r tdzt_|2d{|3r td|t_|3d}t|rtd~dE}7n|r5tddA}7nt jrt js!tdtdd}7nG tdA}7n#t$rd}7YnwxYw|7dvrat|1|p| d}8|8ds|8drttd|s|r|2rtdn-ttdntdttd tn2#t6$r%}t8d|Yd}~nd}~wwxYw tn2#t6$r%}t8d|Yd}~nd}~wwxYw|r8tdz }9 |9Gdn#t$rYnwxYw ddlImJ}:mK};mL}mO}?mP}@mQ}AddlR}B ddtdtHdtdtfd}C ddtdtHdtdtfd}D ddl+mU}En#t6$rd}EYnwxYwd}F ddl;mV}G|G1dpi}H|H1d}Fn#t6$rYnwxYw |Ft|Fnt|E}In&#ttf$rt|E}IYnwxYwt|Iddz}Ig}Jtng}K|;r) |<n#t6$rYnwxYwdddgfddgffD]\}L}M tj |Mgdzd d d} | jD]}N|N[})|)s|)d}O|O\ds8|O]d}Ptj |Md|Pgzd d d}Q|Qjdkrd}R tj |Md|Pddgzd d d}St-|Sjpdpd}Rn$#ttj^tf$rd}RYnwxYwd}T|Rdkr0td|Pdt-|Id|A|R|I}T|TrY|D|M|Pd}Utd|Udz}V|C|M|P|Vr|J7|Pytd|Pdtj |Md|Pgzd d d}W|Wjdkr|C|M|Pdr|J7|Ptd|Pdtj |Md|Pgzd d d|C|M|Pdr*|J7|Ptd|PdAtd|Pd|Pd|Ldkrdndd|Pftd|Pdr|Wj#ttj^f$rYwxYw|:r ddlIm`}Xma}Ymb}Z|Z}[|[rtj dd|Ygd d d}Q|Qjdkr| |X|J7|YnS#tj'$rA}t|ddpd} td| Yd}~nd}~wwxYwn"#ttj^tf$rYnwxYw|@}\|=|\d ȦoofdɄ|>|\ʦD}]|]dD]\}^}_|?|_je|^s|A|^|I}`|`s3 tEjf|^|Bjgn#ttf$rYnwxYwnj|^|K7|_jeoD]N}^|^|]vr tEjf|^|Bjgnj|^8#ttf$rYKwxYw|Jsnrt|JD]}atd|a|Kr'd[0|K}btd|bt_nt_|Kz }c|cr7td|cdΝtdϦ|cd krtdЦ|Jsns tjldѦ|@}d|=|dd Ȧ}enfd҄|eD}f|fryttdt_|fdӝ|fD]4}^ tEjf|^|Bjm#ttf$rY1wxYwtjldԦn2#t6$r%}gt8d|gYd}g~gnd}g~gwwxYwn2#t6$r%}t8d|Yd}~nd}~wwxYw ddlImn}hmo}imK};|;r|hrttdئ|iD]"\}j}k}l|lrdnd}Ltd|kd|Ld۝#ttdܦtdݦtdަttdߦttdn2#t6$r%}t8d|Yd}~nd}~wwxYwtttdtddS#tj'$r}t jdkr?td|tdtt|n,td|t jd Yd}~dSYd}~dSd}~wwxYw)ujBody of ``cmd_update`` — kept separate so the wrapper can always restore stdio even on ``sys.exit``.rnc"t||Srw)rr)rr s rz"_cmd_update_impl..=sOFG$D$DrNr0Fu⚕ Updating Hermes Agent...rZrTu+✗ Not a git repository. Please reinstall:zg curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bashr)rrrrzwindows.appendAtomicallyfalserrru⚠ Updating from fork:ru→ Fetching updates...rNr.rrrrrrrru(✗ Failed to fetch updates from origin.)r z --abbrev-refr r~r>r z detached HEADzbranch 'rLu ⚠ Currently on u$ — switching to main for update...checkoutrBz HEAD..origin/rC)rr")r>r u✓ Already up to date!u → Found z new commit(s))create_quick_snapshotz pre-update)ru ✓ Pre-update snapshot: zPre-update snapshot failed: %su→ Pulling updates...rPrQuP ⚠ Fast-forward not possible (history diverged), resetting to match remote...r rzorigin/u✗ Failed to reset to origin/rXz@ Try manually: git fetch origin && git reset --hard origin/mainu1 ℹ️ Local changes preserved in stash (ref: rz( Restore manually with: git stash applyrrr rrrrrYrrrrrrrrru✓ Code updated!r2rr4rrrrrrrrrrrrrrz$Skills sync during update failed: %s) list_profilesget_active_profile_nameseed_profile_skillsc*g|]}|jk |Srr?)ryrrs rrz$_cmd_update_impl..s%MMMAAFf Honcho: synced z profile(s)u-→ Checking configuration for new options...)get_missing_env_varsget_missing_config_fieldscheck_config_versionmigrate_config) required_onlyu ⚠️ z+ new required setting(s) need configurationu ℹ️ z new config option(s) availableuG ℹ --yes: auto-applying config migration (skipping API-key prompts).z2Would you like to configure new options now? [Y/n]r.uC ℹ Non-interactive session — skipping config migration prompt.zJ Run 'hermes config migrate' later to apply any new config/env options.z-Would you like to configure them now? [Y/n]: r/) interactiver5 env_added config_addedu✓ Configuration updated!u: ℹ API keys require manual entry: hermes config migratez8Skipped. Run 'hermes config migrate' later to configure.u! ✓ Configuration is up to daterrzFHS PATH guard check failed: %sz.update_exit_code0)is_macossupports_systemd_services_ensure_user_systemd_envfind_gateway_pidsfind_profile_gateway_processes'launch_detached_profile_gateway_restart_get_service_pids_graceful_restart_via_sigusr1$@ scope_cmd_ svc_name_r3rc\tjt|dz} tj|d|gzddd}|jdkrdSn#ttjf$rYnwxYwtj|krdStj d)azPoll ``systemctl is-active`` until the unit reports active. systemd's Stopped -> Started transition after a graceful exit (or a hard restart) is not instantaneous; a one-shot check races that window and falsely reports the unit as down. Poll every 0.5s up to ``timeout`` seconds before giving up. rbT is-activerr0rF) rarhrr4r5rr3r8r6ri)rrr3rp_verifys r_wait_for_service_activez2_cmd_update_impl.._wait_for_service_active*s!?,,s7C/@/@@ %",.&+y)AA+/dA####>//11X==#'4>-z/HI((H44$uK$$$ %s:A$$A=<A=r c  tj|d|ddgzddd}n#ttjf$r|cYSwxYw|jpd}|r|dkr|Sd }d }|D]`}d D][\}} ||rA |t|d t| | zz }d}n#t$rYnwxYwn\a|r|n|S) aRead the unit's ``RestartUSec`` (RestartSec) in seconds. After a graceful exit-75, systemd waits ``RestartSec`` before respawning the unit. Callers that poll for ``is-active`` must use a timeout >= ``RestartSec`` + transition slack, or they'll give up *during* the cooldown window and wrongly conclude the unit didn't relaunch. r1z--property=RestartUSec--valueTrr0rninfinityr F))msgMbP?)usgư>)rN@)rg?N) r4r5r8r6rr3r,rfloatr*r7) rrr _showrawrOmatchedr_suf_mults r_service_restart_secz._cmd_update_impl.._service_restart_secCsZ #&N""I4i&(,$ EE*:+DE###"NNN#|)r0022#cZ//"NIIKK " "D( " " e  ==.."% %tLs4yyjL/A)B)BU)J J*.#-%%% $%!E "!(4uuW4s"==-C  CC)%DEFAULT_GATEWAY_RESTART_DRAIN_TIMEOUTrrRrIrestart_drain_timeoutg>@ruser systemctlz--usersystem)z list-unitszhermes-gateway*z--plainz --no-legendz --no-pagerrr0z.servicer rrr1z--property=MainPIDru → z: draining (up to zs)...) drain_timeoutr)r3ru0 drained but didn't relaunch — forcing restartrestartr/z died after restart, retrying...rtz recovered on retryrmzL failed to stay running after restart. Check logs: journalctl --user -u z5 --since '2 min ago' Restart manually: systemctl z--user zrestart u ⚠ Failed to restart )launchd_restartget_launchd_labelget_launchd_plist_path launchctlrru ⚠ Gateway restart failed: ) exclude_pids all_profilesc2i|]}|jv |j|Sr)r)ryproc manual_pidss rrz$_cmd_update_impl..Js4!!!8{**$***r)r%u ✓ Restarted u, ✓ Restarting manual gateway profile(s): u → Stopped z manual gateway process(es)z( Restart manually: hermes gateway runz; (or: hermes -p gateway run for each profile)rcg|]}|v| Srr)ryr killed_pidss rrz$_cmd_update_impl..s#JJJ#sk7I7I#7I7I7Iru6 gateway process(es) ignored SIGTERM — force-killingg?z&Post-restart survivor sweep failed: %sz(Gateway restart during update failed: %s)has_legacy_hermes_units_find_legacy_hermes_unitsru+⚠ Legacy Hermes gateway unit(s) detected:rz (z scope)z; These pre-rename units (hermes.service) fight the currentz< hermes-gateway.service for the bot token and cause SIGTERMz flap loops. Remove them with:z! hermes gateway migrate-legacyz) (add `sudo` if any are in system scope)z*Legacy unit check during update failed: %sz-Tip: You can now select a provider and model:z7 hermes model # Select provider and modelu⚠ Git update failed: u#→ Falling back to ZIP download...u✗ Update failed: rn)r)r )qrrGrrrr1rrrr4r5r0r7rrLrr3rrrrrrcr]r&rArr9rrr]rUrJrKr-r.rrrrrr importlibr0reloadrKr3r*rMr/r6rrrrcrr?plugins.memory.honcho.clirrrrrrrrrrrrrrErfr5rYrrrrrrrrrrrrrS TypeErrorr7rrr,r removesuffixr6r8r!r"r#rrprofilerrrrrrarirr,r-r)prLr gw_input_fn assume_yesuse_zip_updaterrr1is_forkrrrcurrent_branchrrauto_stash_refprompt_for_restore commit_countrsnap_idrAupdate_succeeded pull_result reset_resultr5rrrr/_hcr3rUrrrother_profilesrrrrmodifiedrrpersyncedrrrr missing_envmissing_config current_ver latest_verneeds_migrationrxresults_exit_code_pathrrrrrrrrrr r_DEFAULT_DRAIN _cfg_drainrS _cfg_agent _drain_budgetrestarted_servicesrelaunched_profilesr scope_cmdrrsvc_namer _main_pidr _graceful_ok _restart_sec_post_drain_timeoutr r!r"r# plist_path service_pidsprofile_processesrr(drainedsvcnamesunmapped_count_service_pids_after _surviving_stuck _sweep_excr,r-r?rcis_sysrr+r)sp @@@rrr8s!   D D D D  gdE51122J ())) GGG4   NV#G >>   <7 " "!NN ? @ @ @ y    HQKKK |w7>>#3#3    gG |wAAA!,77Jz""G '((( :    X  '(((!~ w) )     "a ' '!(..00F'6115G65Q5QQRRRvE36,,..q13332FFFF'6115NRX5X5XZABBB97v00221577888 HQKKK ;;; ;     ,,.. V # #"V++ 1111  SSSS T T T;G\RRN N:v.. #      ::$#'  + , , , F 7<777888 @ ? ? ? ? ? ?++,???G ?=G==>>> @ @ @ LL93 ? ? ? ? ? ? ? ? @ &''' - $.6;&AA # K %**f *~w2DF2D2DEE$#'      *a//D6DDDEEE#*0022B@<#6#<#<#>#>@@AAAZHQKKK# )( ]N]]]EFFFF,$&$6!, )( ]N]]]EFFFF,$&$6!, *" !""" ( 55   eeeGWXLLSS^cee     Av'' )'< @ @ @ 3444d##  IN NM3|f7L3M3MNNF ?V     ~tU3G {m+$#'  0   ^T; _U$  @ H H H!###lU*+++  !"""       * * * *   S ! ! ! !    D  D 5 5 5 5 5 5 GGG 1 2 2 2 [t,,,Fh YWS!122WW$))F8DT:U:UWWXXXzz)$$ ]S !233]]tyyPYIZ?[?[]]zz/** RPS!899PPPQQQzz)$$ OMs6)#455MMMNNN(# 5FJJy,A,A 53444 D D D LL? C C C C C C C C D!            -,..FMMMMMMMN ;GHHH';;A;//dCCC 3%(x)<)<%=%=F&)!%% 2*>*>&?&?G'*155"+E+E'F'FH$&E%? % -=-=-=-= > > >&F % -D7-D-D-D E E E'K % -I-I-I-I J J J9>%PTYYu%5%5%5LFF%2F51655V556666$;;;91699B999::::::::;    D   L L L L L L//11F B@V@@@AAA    D   =>>>            +*>>> 2244"6"6"8"8 Z%SS;;S 7 7 GGG ^[!1!1^^^ YW3~#6#6WWWXXX GGG #_``` ##LcUWWUWW i&&(( #SZ->->-@-@ #[\\\`#MNNH  ###"HHH#+++).%1%?Z @;'87>+B8GGG6777 XJXKXVWWWPQQQQ 5 6 6 6  $%%%  C + - - - - C C C LL> B B B B B B B B C  ? " $ $ $ $ ? ? ? LL:A > > > > > > > > ?&  -//2EEO **3////     G H                     % $ $ $DH % %  %-0 %;@ % % % % %4DG* 5* 5 * 5-0* 5;@* 5* 5* 5* 5* 5d & & & &!% &J 999999)kmm//88>B '^^,CDD      65?5Kj 1 1 1QVWeQfQf z* 6 6 6 %n 5 5  6 t44t;M!# %%K"$ )(**U ,,.... Dk845 }-)OO$E9K!+%,0!%$& " " "%+M$7$7$9$9$D$D$F$F{"{"D$(JJLLE#() (#( !$D$(==#<#<) ('+'8'8'D'DH$.N )[(,C C/3%)() %%%E %|1133x?? ()*I .(2$-(.(K_K_KaKa$c$c!"!"!"!"s{"x.z/HIxzz  "8!7!9!9J!((** Q *(&2C2C2E2EF+/!%$% !!! !+q00Q / 1 1 1 2 9 9:K:K:M:M N N N N#-#@QQQ*1!Xr*B*B*Hb)O)O)Q)Q %&Ov&O&O P P P P P P P PQ*:+DkRD-,..L++)K!!!!:: UUU!!!  /4466 9 9 T>>t|SQQ 87}W_5555.@$$$#**4<8888"  +++GC111OOC((((*O<D" [ -44C2S223333&R II&9::EPPPQQQ!$[!1!1C8K4L4L!L!V>VVVWWWDEEE%))Y& k  S C   &7&7&9&9#..!44 KJJJJJJ %GGGdVddd &!!!GC9999 2OD!!! D!K$$$ S S S EzRRRRRRRR S H H H LLCQ G G G G G G G G H J           )(** C/F/F/H/H CCDDD*C*C*E*E::&D$(.:HHFE888%8889999STTTTUUU78889:::ABBB J J J LLEq I I I I I I I I J ()))  =>>> GHHHHH  ( <7 " " /A// 0 0 0 7 8 8 8 GGG D ! ! ! ! +++ , , , HQKKKKKKKKK " ! ! ! ! ! s>J,A_2,A_2&Q'&A_2' R1R A_2RA_2+C)WAA_2AXCA_2)!\ A_2 :]A_2]AA_2^;:A_2; _A_2_A_2 E0d=<A_2= e,e'"A_2'e,,A_20Ak<Dkk< k8k3-k<3k88k<;A_2< l A_2l  A_2 %l32A_23 m=A_2?mE$A_2%3sA_2 s(%A_2's((B2A_2v*)A_2* w4wA_2wA_2w,+A_2, x6xA_2xA_22yA_2 yA_2yA_2AAY36z=<AY3= {  AY3 {  AY3:| AY3 |AY3|AY3 |?>AY3? }"AY3!}""3AY3 ~! AY3! ~.+AY3-~..AY3CAJ!BA AC CAJ!C ADC>AJ!DADDFAJ!JAY3J!AJ;J7AY3J:AJ;J; AY3K AANL 'AMMANMANM7ANNANNANNANNAY3NAN;N8AY3N:AN;N;A,AY3P(AQQAY3QAQQAY3QAQQ#acprrchatclawcrondumprrloginrmsetuptoolsrrdoctorhonchoimportlogoutmemoryr?rrrpairingpluginsr4rMwebhookinsightsrr] dashboardrS completion>-r --continuer--resumerrrr)r*rr+rM)r( _SUBCOMMANDS_SESSION_FLAGSrr<r}rs r_coalesce_session_name_argsr~sY$$$LJ<;;N F A c$ii--Q N " " MM% FAECII Q**3//G<// T!W%%%Q CII Q**3//G<// / chhuoo... MM% FA% c$ii--& Mrc ddlm}m}m}m}m}m}m}m}m } m } m } ddl m } t|dd} | |}| }td|td||}|D]}|j|ks |dkr|jr|jr,td |j|jr d |jd nd ztd |jrdndtd|jd|jrtd|jd|jntdS| dkr|}|}|stddStdddddddddddtddd d!d d"d d#|D]y}|j|ks |dkr |jrd$nd%}|j}|jpd&dd'}|jrdnd}|jr|jnd&}|jrd&}t||d(d|dd|dd|ztdS| d)kr|j} |||dkrtd*ntd+|dSdS#t0t2f$r1}td,|t5jd-Yd}~dSd}~wwxYw| d.kra|j}t|d/d0}t|d1d0}t|d2d0} t|d3d}||||||4}td5|d6||s|rDt|d3dp |}|rtd7|d8ntd9|d8|s|r6 dd:lm}||rtd;|d n#t<$rYnwxYw|se||} | r6t?| d!||s||}"|"rz$ Or access via flag: hermes -p z chatzWrapper created: u ⚠ z is not in your PATH.z3 Add to your shell config (~/.bashrc or ~/.zshrc):z( export PATH="$HOME/.local/bin:$PATH"z~/z Next steps:z0 setup Configure API keys and modelz" chat Start chattingz/ gateway start Start the messaging gatewayz Edit z/.env for different API keysz Edit z"/SOUL.md for different personalityu. ⚠ This profile has no API keys yet. Run 'z setup' first,z8 or it will inherit keys from your shell environment.z!/SOUL.md to customize personalitydeleter0)r0r1)get_profile_dirprofile_exists_read_config_model_check_gateway_running _count_skillszError: Profile 'z' does not exist.z Profile: z Path: z Model: z Gateway: z Skills: z .env: rGr1znot configuredz SOUL.md: zSOUL.mdz Alias: aliasremove alias_name)ru✓ Removed alias 'rLz No alias 'z' found to remove.z#!/bin/sh exec hermes -p z "$@" u✓ Alias created: u⚠ rename)rename_profilez Profile renamed: rzPath: rexport)export_profilez.tar.gzu✓ Exported 'z' to rp)import_profile import_nameru✓ Imported profile 'z' at z Wrapper created: )5r6rrrrrrrrrrrr0rrGrr? is_defaultrmrgateway_running skill_count alias_pathr:r7r8rrr1rr9r*r/formatrrrrFileExistsErrorrrrrrr1rfrold_namenew_nameroutputrarchive)7rLrrrrrrrrrrrrr r:dhhrWrrrr?rmgwrrUrrrr profile_dir source_labelrrr collision wrapper_pathprofile_dir_displayr0rrrrrrr?rr custom_namerrnew_dirrr result_pathrs7 r cmd_profiler#s{                          544444 T+T 2 2F ~..00 !!## 1<11222 &&&''' =??  Av%%,)*C*C *C74174412C- ----EVA4E'Tyy9VVBBBBCCC<NLQVLLAFLLMMM   =??((**  & ' ' ' F KIKKKGKKK)KKK'KKLLL N*NN*NN*NN*NNOOO F FAFf$$9)<)<)<  6DW%ss+E/>YBl5AFFE|  VDTDDDDDDBDDDUDD E E E E  5    t $ $ $y  9::::,d,,-----;:-.    -A-- HQKKKKKKKKK  8   gu--D+u55 4U33X  |T::J(.%#"! K @@@;@@ A A A \  \D,55R9P9P9R9R\;L;;;<<<<Z<ZZZ[[[   RRRRRR//55FDTDDDEEE D ,,[99 Hb!9!9::FV<<<====SZZ  O11$77 OOOOIOOPPP`$```LLLLMMMM#8#8#>#>L#O@,@@AAA6688O!"T+;+;+=+="T"T"TUUU! V""MNNN 7&*S1H1H1U1U-V-V&V## 7 7 7&)+&6&6### 7 " # # # MtMMM N N N ?t??? @ @ @ LtLLL M M M X  XS"5SSSTTTW 3WWWXXXXZdZZZQRRRV 3VVVWWW GGGGGO->?    -A-- HQKKKKKKKKK  8   dE5))  N4S ) ) ) ) ) )-.    -A-- HQKKKKKKKKK  6                 ~d##  >   ) 'g'' ( ( (  7   x//dL$77 666666~d##  ?    -A-- HQKKKKKKKKK  8  666666 04 0 0 0 (.v66K ;4;;k;; < < < < <-.    -A-- HQKKKKKKKKK  8  666666 (. 74#E#EK#D C4CCkCC D D D.-d33I @44T:: @> >>??? GGGGGO->?    -A-- HQKKKKKKKKK #  s13I((J*9&J%%J*/BW 2$NW  N$!W #N$$DW <6S32W 3T W TB9W X!&X  X4 YZ&ZZAfg#2&gg#!h))i+:&i&&i+;A7k44l< &l77l<ct}|stddStt|d|D]}d} tjdkrd|d}t j|rwt|d5}| d d  d d  }dddn #1swxYwYn#ttf$rYnwxYw|rtd|d|td|t|S)a:Print ``hermes dashboard`` PIDs and return the count. Uses the same detection logic as ``_find_stale_dashboard_pids`` (the current process is excluded, but since ``hermes dashboard --status`` runs in a short-lived CLI process that never matches the pattern, the exclusion is irrelevant here). &No hermes dashboard processes running.rz& hermes dashboard process(es) running:rnrz/proc/z/cmdliner_ rJrnrNz PID r[)rrr*rrr-rcr1rereadrndecoder3r5r7)rrcmdline cmdline_pathrs r_report_dashboard_statusrOs & ' 'D  6777q SYY > > >???$$ |w&&5555 7>>,//?lD11?Q"#&&(("2"27D"A"A"H"H#I#I#7#77>>  HQKKK222222HM /E F F# MML Y Y%T:u55# s7C D. AD))D.cddlm}m}m}t |dd}|dkrt ||dS|dkrt ||dSt ||dS)zPrint shell completion script.r) generate_bash generate_zsh generate_fishshellrzshfishN)hermes_cli.completionrrrrGr)rLrrrrrs rcmd_completionrsPPPPPPPPPP D'6 * *E ~~ ll6""##### & mmF##$$$$$ mmF##$$$$$rc 8ddlm}m}t|ddpd}|dkr |dS||t|ddt|d d t|d dt|d dt|d dt|dddS)z!View and filter Hermes log files.r)tail_log list_logslog_namerIrNlinesrfollowFlevelr`since component) num_linesrrr`rr)hermes_cli.logsrrrG)rLrrrs rcmd_logsrs33333333tZ11dd?t| t||d@dA } | dBddC| dDddE|dFdG } | dBddC| dDddH|dIdJ } | dBddC| dDddK|dLdM } | dNddO| dPdQddR| dBddC|dSdT }|dUddV|dBddW|dXdYdZ[|d\d] }|dBddC|d^d_ |d`dadb}|dcddddef|dgdhdiddjf|t|d^dkdl}|dmdngdoddpq|drdds|dtddu|dvddw|dxddy|t|dzd{d|}|t|d}d~d}| d$}|ddd}|ddndddd|ddd|ddd|ddd|t|ddd}|dddgdd|dd |d d |d dd|ddd|ddd|dt dd|dd |ddd|t |ddd}|dgddd|t"|dd }| d$}|d)d }|dd |ddgdd|dd |dd |dd |d d |d d |dd |ddd|dt d|ddd|dd |d%d }|ddnd|d+d }|dd |dd¬ |ddĬ }|dd |dLdŬ }|dd |ddƬ }|dd |ddȬ } | ddngdʢd˦| d d̬ | ddά | ddϬ | ddd| dt dЬ|t$|dLddҬ}!|!dDddӬ|!dNddԬ|!t&|ddd׬}"|" dج$}#|#d%d٬ }$|$dDddڬ|#dd)gdܬ(}%|%ddެ |%ddndା|%dd |%dd |%dt(d嬹|%ddddf|%dd |%dd |#dd }&|&dd |&dd |&dd |&dd |&dd |&dt(d|&ddddf|&ddddf|&ddddf|&ddd|&dd |&dd |#dd }'|'dd |#dd }(|(dd |#d4d })|)dd t|)|#d+d,d gd (}*|*dd |#dLd |#dd }+t|+t|"|"t*|ddd},|, d$}-|-dd)gd(}.|.dd |.ddd|.ddd|.ddd|.ddd |.dd!d"|.d#dd$|.d%dd&|.d'dd(|-d%d&gd)(|-d+d,gd*(}/|/dd+ |-d,d- }0|0dd. |0d/dd0|,t,dd1lm}1|1|}2|2t2|d2d3d4}3|3 d5$}4|4d%d&gd6(|4d,d7 }5|5d8d9 |5d:d;dd<=|5d>d?dd@=|4dAd+d,gdB(}6|6dCdD |4dEdF |3t4|dEdGdH}7|7dIddJ|7t6|dKdLdM}8|8dNddO|8t8|dPdQdRt:jdST}9|9 dU$}:|:dVdW };|;dXt(dYdZ|;d[t(d\d]|;d^dd_|:d d` }<|<dadbgdcd|9t>|dedfdg}=|=dhdidj |=d;dxddk|=dPddl |=t@|dmdndo}>|>dpdq |>dUdrdds|>tB|dtdudv}?|? dw$}@|@dxdy |@ddz |@d{d| }A|Ad}dnd~|Addnd|@dd |@dd |@dd |@dd |?tD|ddd}B|B d$}C|Cd%d |Cdd }D|Ddd |Ddd |CdAd }E|Edd |Edd |Cdd d}F|B|F|ddd}G|G d$}H|Hdd }I|Idt(dd|Idt(dd|Iddgdd|Hdd }J|Jdd |Jddgd|Jdt(dd|HdSd }K|Kdd |Kddd|Kddd|KdUdd|Kdhdgdd|Hdd }L|Ldd |Hd%d }M|Mddgd|Mddd|Hdd¬ }N|Nddndì|HdĐdŬ }O|OddndƬ|HdǐdȬ }P|Pddndɬ|Hd\dʬ }Q|Qddˬ |HdÐd̐dͬ}R|Rddά |RdddЬ|RdhdgddѬ|HdҐdӬ }S|SdԐdլ |Sd֐dאdאdgdِ|Sdڐdd۬|Hdܐdݬ }T|T dެ$}U|Udߐd }V|Vdd |Udmd }W|Wdd |WdUdd|Hdd }X|X d$}Y|Yd%d |Yd)d }Z|Zdd |Yd+d }[|[dd |Hdtd d}\|G|\|ddd}]|] d$}^|^dSd }_|_dd |_dUdrdd|_#}`|`ddd|`ddd|^dĐd }a|add |^d+d,d\gd(}b|bdd |^d%d&gd(|^dd }c|cdd |^dd }d|ddd d}e|]|e dd l$m%}f|fD]e}g||gd|gd |g&d dtOd j }h|gd|hfnE#tP$r8}itSj*tV,d|iYd}i~ind}i~iwwxYw|ddd}j ddl-m.}k|k|jnE#tP$r8}itSj*tV,d|iYd}i~ind}i~iwwxYw|ddd}l|l d$}m|md^d |mdLd |mdd |mdÐd }n|ndhdgdd|ndgd dd!d"}o|l|o|d#d$d%}p|pd&dd'|p d($}q|qd%d) }r|rd*d+d,|qdd- }s|sd.d/d0d12|sd*d+d3|qdd4 }t|td.d/d0d52|td*d+d3d6}u|p|u|d7d8d9}v|v d:$}w|wd;d< }x|xd6d7dd=t|x|wd)d> }y|ydd? |yd@dA |ydBdC |ydDdbgdEd|ydFdGdHgdIJ|ydKdL |ydMdbgdNd|wd+d,gdO(}z|zddP |wd%d&gdQ(|wd,dR }{|{ddS |wdTdtgdU(}|||ddV |wddW }}|}ddX t|vdY}~|v|~|dZd[d\ d]$}|d%d^ }|dd_ |dt(dd`|dߐda }|ddb |ddc |ddde |d df }|dgdh |dhdgddi|djdk }|dlt(dmdn|ddo |dhdgddi|dpdq |drds }|dgdt |dud/dv|ddw }|dd_ |dt(dxdydt^dzt`fd{fd|}||d}d~d}|dt(dd|dd d}|||ddd}| d$}|ddd}|dd |dcdd|dKddgdd|ddd|ddd|ddd|dd |dgddd|dhdgdd|ddgdd}|dd |dcdd|dhdgddd}|||dd }|tb|dĐdd}|dddd:|dddd:|dddd:|dddd:|dhdgddd:|td|d\dd}|dQdd|dhdgdd|tf|ddd}t|d}|||dd }| d$}|d%d |dd }|dd |dېd }|dd¬ |dddĬ|dddƬ|dǐdȐdɐʦ|ddd̬|d dͬ }|ddά |dgdhdd|dxdϬ }|ddЬ |dѐdҬ }|ddӬ |dddլ|dd֐d0dאئ|drd٬ }|dڐd۬ |dܐdݬ |dߐdެ }|dd߬ |dhdidd|dmd }|dd |ddd0dئ|th|dd }|ddndgdd|fd|ddd}|dt(dd|ddd|ddd|ddd|ddd|ddd|ddd|tj|dddt:jdT}|ddnddd|ddXt(dd |drd dd |d d dʦ|dddʦ|dddʦ|dd0dʦ|tlddl7m8}|}|r8ts|ttj;ddtuj<dt{ttj;dd}ddl>}t|dr&t|jABn ttfd|D}|rd|_DttjE} |Ftt_EG|}|tt_Eni#t$r?}|tt_E|jIdkrd|_DG|}Yd}~n%d}~wwxYwd|_DG|}|jJrtc|dShd}dd4dhfd3d4hfd:d;hfd}|&|jKd\}}|jK|vs|r t||d|vrtat|dd} ddlMmN}|n.#tP$r!t,dd YnwxYw dd!lPmQ}|n.#tP$r!t,d"d YnwxYw dd#l7mR}dd$lSmT}|||%n.#tP$r!t,d&d YnwxYwt|d'dr\dd(lUmV}tuj<||jWt|ddt|ddt|d)d*|jXs|jYrJ|jKCd+|_Kd,D]&\}}t||st|||'t|dS|jK;d-D]&\}}t||st|||'t|dSt|d.r|[|dS\dS(/z Main entry point for hermes CLI.r)build_top_level_parser)funcrmz!Select default model and providerz>Interactively select your inference provider and default model)r descriptionz --portal-urlz;Portal base URL for Nous login (default: production portal))r z--inference-urlzIInference API base URL for Nous login (default: production inference API)z --client-idNz;OAuth client id to use for Nous login (default: hermes-cli))r r z--scopez%OAuth scope to request for Nous loginz --no-browserrzBDo not attempt to open the browser automatically during Nous login)r r z --timeoutrzManage fallback providers (tried when the primary model fails)zManage the fallback provider chain. Fallback providers are tried in order when the primary model fails with rate-limit, overload, or connection errors. See: https://hermes-agent.nousresearch.com/docs/user-guide/features/fallback-providersfallback_command)destrlsz.service) and unrelated third-party services are never touched.z --dry-rundry_runz+List what would be removed without doing it)rr r z-yz--yesr0zSkip the confirmation promptzInteractive setup wizardz~Configure Hermes Agent with an interactive wizard. Run a specific section: hermes setup model|tts|terminal|gateway|tools|agentsectionr^)rmttsterminalrrmrIz7Run a specific setup section instead of the full wizard)nargsrkr r z--non-interactivez,Non-interactive mode (use defaults/env vars)z--resetzReset configuration to defaultsz --reconfigureu(Default on existing installs.) Re-run the full wizard, showing current values as defaults. Kept for backwards compatibility — a bare 'hermes setup' now does this.z--quickzvOn existing installs: only prompt for items that are missing or unset, instead of running the full reconfigure wizard.r]zSet up WhatsApp integrationz'Configure WhatsApp and pair via QR codeslackz5Slack integration helpers (manifest generation, etc.)z%Slack integration helpers for Hermes.r r!zvPrint or write a Slack app manifest with every gateway command registered as a native slash (/btw, /stop, /model, ...)u(Generate a Slack app manifest that registers every gateway command in COMMAND_REGISTRY as a first-class Slack slash command (matching Discord and Telegram parity). Paste the output into Slack app config → Features → App Manifest → Edit, then Save. Reinstall the app if Slack prompts for it.z--writeTrzdWrite manifest to a file instead of stdout. With no PATH writes to $HERMES_HOME/slack-manifest.json.)rconstr metavarr z--namez$Bot display name (default: "Hermes")z --descriptionz/Bot description shown in Slack's app directory.z--slashes-onlyz]Emit only the features.slash_commands array (for merging into an existing manifest manually).rkz'Authenticate with an inference providerz2Run OAuth device authorization flow for Hermes CLIz --providerrrz-Provider to authenticate with (default: nous))rkr r z,Portal base URL (default: production portal)z:Inference API base URL (default: production inference API)z,OAuth client id to use (default: hermes-cli)zOAuth scope to requestz0Do not attempt to open the browser automaticallyz-HTTP request timeout in seconds (default: 15)z/Path to CA bundle PEM file for TLS verificationz'Disable TLS verification (testing only)rqz.Clear authentication for an inference providerz3Remove stored credentials and reset provider config)rrspotifyz3Provider to log out from (default: active provider)rz"Manage pooled provider credentials auth_actionzAdd a pooled credentialrz>Provider id (for example: anthropic, openai-codex, openrouter)z--typer)oauthzapi-keyruzCredential type to add)rrkr z--labelzOptional display labelz --api-keyz+API key value (otherwise prompted securely)zNous portal base URLzNous inference base URLzOAuth client idzOAuth scope overridez*Do not auto-open a browser for OAuth loginz OAuth/network timeout in seconds)rr z(Disable TLS verification for OAuth loginz Custom CA bundle for OAuth loginzList pooled credentialszOptional provider filter)rr z1Remove a pooled credential by index, id, or labelz Provider idrtz*Credential index, entry id, or exact labelr z:Clear exhaustion status for all credentials for a providerzShow auth status for a providerz.Log out a provider and clear stored auth staterz)Authenticate Hermes with Spotify via PKCEspotify_action)rkrrq)rrkr z7Spotify app client_id (or set HERMES_SPOTIFY_CLIENT_ID)z--redirect-uriz8Allow-listed localhost redirect URI for your Spotify appz!Override requested Spotify scopesz*Callback/token exchange timeout in secondszShow status of all componentsz)Display status of Hermes Agent componentsz'Show all details (redacted for sharing)z!Run deep checks (may take longer)rizCron job managementzManage scheduled tasksrzList scheduled jobszInclude disabled jobsrzCreate a scheduled jobschedulez/Schedule like '30m', 'every 2h', or '0 9 * * *'rz2Optional self-contained prompt or task instructionz Optional human-friendly job namez --deliverzNDelivery target: origin, local, telegram, discord, signal, or platform:chat_idz--repeatzOptional repeat countz--skillr?rz.Attach a skill. Repeat to add multiple skills.z--scriptzIPath to a Python script whose stdout is injected into the prompt each runz --workdirzAbsolute path for the job to run from. Injects AGENTS.md / CLAUDE.md / .cursorrules from that directory and uses it as the cwd for terminal/file/code_exec tools. Omit to preserve old behaviour (no project context files).editzEdit an existing scheduled jobjob_idzJob ID to editz --schedulez New schedulez--promptzNew prompt/task instructionz New job namezNew delivery targetzNew repeat countzIReplace the job's skills with this set. Repeat to attach multiple skills.z --add-skill add_skillsz?Append a skill without replacing the existing list. Repeatable.z--remove-skill remove_skillsz-Remove a specific attached skill. Repeatable.z--clear-skillsz'Remove all attached skills from the jobzfPath to a Python script whose stdout is injected into the prompt each run. Pass empty string to clear.zqAbsolute path for the job to run from (injects AGENTS.md etc. and sets terminal cwd). Pass empty string to clear.pausezPause a scheduled jobzJob ID to pauser(zResume a paused jobzJob ID to resumez$Run a job on the next scheduler tickzJob ID to triggerrzRemove a scheduled jobzJob ID to removez"Check if cron scheduler is runningtickzRun due jobs once and exitruz$Manage dynamic webhook subscriptionszPCreate, list, and remove webhook subscriptions for event-driven agent activationwebhook_action subscribezCreate a webhook subscriptionr?z*Route name (used in URL: /webhooks/)rnz0Prompt template with {dot.notation} payload refsz--eventsz%Comma-separated event types to acceptzWhat this subscription doesz--skillsz#Comma-separated skill names to loadlogz4Delivery target: log, telegram, discord, slack, etc.z--deliver-chat-idz*Target chat ID for cross-platform deliveryz--secretz'HMAC secret (auto-generated if omitted)z--deliver-onlyuSkip the agent — deliver the rendered prompt directly as the message. Zero LLM cost. Requires --deliver to be a real target (not 'log').zList all dynamic subscriptionszRemove a subscriptionzSubscription name to removetestz#Send a test POST to a webhook routezSubscription name to testz --payloadz,JSON payload to send (default: test payload)) build_parserhooksz%Inspect and manage shell-script hookszInspect shell-script hooks declared in ~/.hermes/config.yaml, test them against synthetic payloads, and manage the first-use consent allowlist at ~/.hermes/shell-hooks-allowlist.json. hooks_actionz?List configured hooks with matcher, timeout, and consent statusz against a synthetic payloadeventzAHook event name (e.g. pre_tool_call, pre_llm_call, subagent_stop)z --for-toolfor_toolz^Only fire hooks whose matcher matches this tool name (used for pre_tool_call / post_tool_call))rr r z--payload-file payload_filezYPath to a JSON file whose contents are merged into the synthetic payload before executionrevokezCRemove a command's allowlist entries (takes effect on next restart)rz?The exact command string to revoke (as declared in config.yaml)rnzeCheck each configured hook: exec bit, allowlist, mtime drift, JSON validity, and synthetic run timingz$Check configuration and dependenciesz'Diagnose issues with Hermes Agent setupz--fixz#Attempt to fix issues automaticallyrjz(Dump setup summary for support/debuggingzyOutput a compact, plain-text summary of your Hermes setup that can be copy-pasted into Discord/GitHub for support contextz --show-keyszOShow redacted API key prefixes (first/last 4 chars) instead of just set/not setru7Debug tools — upload logs and system info for supportzDebug utilities for Hermes Agent. Use 'hermes debug share' to upload a debug report (system info + recent logs) to a paste service and get a shareable URL.aRExamples: hermes debug share Upload debug report and print URL hermes debug share --lines 500 Include more log lines hermes debug share --expire 30 Keep paste for 30 days hermes debug share --local Print report locally (no upload) hermes debug delete Delete a previously uploaded paste )r rformatter_classepilog debug_commandsharez@Upload debug report to a paste service and print a shareable URLz--linesz:Number of log lines to include per log file (default: 200)z--expirez!Paste expiry in days (default: 7)z--localz-Print the report locally instead of uploadingz/Delete a paste uploaded by 'hermes debug share'urls*z?One or more paste URLs to delete (e.g. https://paste.rs/abc123))rr r rz+Back up Hermes home directory to a zip filezCreate a zip archive of your entire Hermes configuration, skills, sessions, and data (excludes the hermes-agent codebase). Use --quick for a fast snapshot of just critical state files.rz--outputzGOutput path for the zip file (default: ~/hermes-backup-.zip)zNQuick snapshot: only critical state files (config, state.db, .env, auth, cron)z/Label for the snapshot (only used with --quick)rpz'Restore a Hermes backup from a zip filezExtract a previously created Hermes backup into your Hermes home directory, restoring configuration, skills, sessions, and datarzPath to the backup zip filez-fz-Overwrite existing files without confirmationrzView and edit configurationz!Manage Hermes Agent configurationr;r1zShow current configurationzOpen config file in editorrzSet a configuration valuerz1Configuration key (e.g., model, terminal.backend)valuez Value to setrczPrint config file pathzenv-pathzPrint .env file pathrz!Check for missing/outdated configmigratezUpdate config with new optionsrsz.Manage DM pairing codes for user authorizationz/Approve or revoke user access via pairing codespairing_actionzShow pending + approved usersapprovezApprove a pairing coderz2Platform name (telegram, discord, slack, whatsapp)r#zPairing code to approvezRevoke user accessz Platform nameuser_idzUser ID to revokez clear-pendingzClear all pending codesc(ddlm}||dS)Nr)pairing_command)hermes_cli.pairingr$)rLr$s r cmd_pairingzmain..cmd_pairingO#s*666666rz-Search, install, configure, and manage skillszSearch, install, inspect, audit, configure, and manage skills from skills.sh, well-known agent skill endpoints, GitHub, ClawHub, and other registries. skills_actionbrowsez'Browse all available skills (paginated)z--pagerzPage number (default: 1)z--sizerzResults per page (default: 20)z--sourcera)rar5z skills-shz well-knowngithubclawhublobehubzFilter by source (default: all))r rkr searchzSearch skill registriesrz Search query)r rkz--limitrz Max resultszInstall a skill identifierz^Skill identifier (e.g. openai/skills/skill-creator) or a direct HTTP(S) URL to a SKILL.md filez --categoryzCategory folder to install intozeOverride the skill name (useful when installing from a URL whose SKILL.md has no `name:` frontmatter)z$Install despite blocked scan verdictz-Skip confirmation prompt (needed in TUI mode)r>z"Preview a skill without installingzSkill identifierzList installed skills)rahubbuiltinlocalz--enabled-onlyzcHide disabled skills. Use with -p to see exactly which skills will load for that profile.z&Check installed hub skills for updatesz&Specific skill to check (default: all)rzUpdate installed hub skillsz7Specific skill to update (default: all outdated skills)auditzRe-scan installed hub skillsz&Specific skill to audit (default: all)zRemove a hub-installed skillzSkill name to removeuOReset a bundled skill — clears 'user-modified' tracking so updates work againzClear a bundled skill's entry from the sync manifest (~/.hermes/skills/.bundled_manifest) so future 'hermes update' runs stop marking it as user-modified. Pass --restore to also replace the current copy with the bundled version.z+Skill name to reset (e.g. google-workspace)z --restorez.cmd_skills$sx 4$ / /8 ; ;  ) ) ) X X X X X X ! !$ ' ' ' ' ' < < < < < < N4 rrtu0Manage plugins — install, update, remove, listzDInstall plugins from Git repositories, update, remove, or list them.plugins_actionz-Install a plugin from a Git URL or owner/repozNGit URL or owner/repo shorthand (e.g. anpicasso/hermes-plugin-chrome-profiles)z$Remove existing plugin and reinstallz--enablez?Auto-enable the plugin after install (skip confirmation prompt)z --no-enablez]Install disabled (skip confirmation prompt); enable later with `hermes plugins enable `z+Pull latest changes for an installed pluginzPlugin name to updatezRemove an installed pluginzPlugin directory name to removezList installed pluginsenablezEnable a disabled pluginzPlugin name to enabledisablez$Disable a plugin without removing itzPlugin name to disablec(ddlm}||dS)Nr)plugins_command)hermes_cli.plugins_cmdrC)rLrCs r cmd_pluginszmain..cmd_pluginsV$s*::::::r)discover_plugin_cli_commandsr rr )r rrsetup_fnzPlugin CLI discovery failed: %sruBBackground skill maintenance (curator) — status, run, pause, pinaThe curator is an auxiliary-model background task that periodically reviews agent-created skills, prunes stale ones, consolidates overlaps, and archives obsolete skills. Bundled and hub-installed skills are never touched. Archives are recoverable; auto-deletion never happens.) register_clizcurator CLI wiring failed: %srrz"Configure external memory providerzSet up and manage external memory provider plugins. Available providers: honcho, openviking, mem0, hindsight, holographic, retaindb, byterover. Only one external provider can be active at a time. Built-in memory (MEMORY.md/USER.md) is always active.memory_commandz0Interactive provider selection and configurationz#Show current memory provider configoffz)Disable external provider (built-in only)z1Erase all built-in memory (MEMORY.md and USER.md)zSkip confirmation promptz--target)rarrrz:Which store to reset: 'all' (default), 'memory', or 'user'c t|dd}|dkruddlm}m}|}t |dt si|d<d|dd<||tdtd dS|d krdd lm }m }|d z t|d d}g}|dvr| d|dvr| dfd|D} | std|ddStd| D]=\} } | z } | j } td| d| d| dd>t|ddss td}n'#t"t$f$rtdYdSwxYw|dkrtd dS| D]2\} } | z td!| d| d"3td#td$|ddSdd%lm}||dS)&NrIrJrr rrrnru% ✓ Memory provider: built-in onlyz Saved to config.yaml r rmemoriesrtra)rarr)z MEMORY.mdz agent notes)rar)zUSER.mdz user profilecLg|] \}}|z ||f!Srrs)ryrr0mem_dirs rrz,main..cmd_memory..$sF%aGaK;O;O;Q;QD ru1 Nothing to reset — no memory files found in z /memories/ z: This will permanently erase the following memory files:u ◆ ru) — rz bytesr0Fz Type 'yes' to confirm: z Cancelled. z Cancelled. u ✓ Deleted rzE Memory reset complete. New sessions will start with a blank slate.z Files were in: )rI)rGrrSr!rr/rrr0rErrrrrr3rrrrhermes_cli.memory_setuprI)rLrrSr!rrErrtfiles_to_resetrrr0rcsizerqrIrNs @r cmd_memoryzmain..cmd_memory$sTd,d33 %<< B B B B B B B B []]Ffjj22D99 &#%x +-F8 Z ( K    : ; ; ; , - - - - - G^^ M M M M M M M M%o''*4GT8U33FN***%%&BCCC((%%&ABBB)7H lI\I\I^I^lll P Q Q Q# B B4{yy{{*@@@d@@$@@@@AAAA4.. "#@AAGGIIOOQQFF "34,---FFU??*+++F# 5 541$$&&&3q33D3334444 Y    I&9&9&;&;III J J J J J > > > > > > N4 s=3F11 GGrmz.Configure which tools are enabled per platformaEnable, disable, or list tools for CLI, Telegram, Discord, etc. Built-in toolsets use plain names (e.g. web, memory). MCP tools use server:tool notation (e.g. github:create_issue). Run 'hermes tools' with no subcommand for the interactive configuration UI.z --summaryz6Print a summary of enabled tools per platform and exit tools_actionz0Show all tools and their enabled/disabled statusz --platformrPzPlatform to show (default: cli)zDisable toolsets or MCP toolsr^rNAMEz7Toolset name (e.g. web) or MCP tool in server:tool form)rrr z#Platform to apply to (default: cli)zEnable toolsets or MCP toolsz,Toolset name or MCP tool in server:tool formct|dd}|dvrddlm}||dStdddlm}||dS)NrS)rrAr@r)tools_disable_enable_commandrm) tools_command)rGhermes_cli.tools_configrVrrW)rLr rVrWs r cmd_toolszmain..cmd_tools*%s~~t44 2 2 2 L L L L L L ( ( . . . . .  ! ! ! = = = = = = M$     rrz2Manage MCP servers and run Hermes as an MCP serverzManage MCP server connections and run Hermes as an MCP server. MCP servers provide additional tools via the Model Context Protocol. Use 'hermes mcp add' to connect to a new server, or 'hermes mcp serve' to expose Hermes conversations over MCP. mcp_actionservezBRun Hermes as an MCP server (expose conversations to other agents)z Enable verbose logging on stderrz+Add an MCP server (discovery-first install)z Server name (used as config key)z--urlzHTTP/SSE endpoint URLz --commandzStdio command (e.g. npx)z--argszArguments for stdio commandz--authrrz Auth method)rkr z--presetzKnown MCP preset namez--envz3Environment variables for stdio servers (KEY=VALUE)zRemove an MCP serverzServer name to removezList configured MCP serverszTest MCP server connectionzServer name to test configurezToggle tool selectionzServer name to configurez5Force re-authentication for an OAuth-based MCP serverzServer name to re-authenticatec(ddlm}||dS)Nr) mcp_command)hermes_cli.mcp_configr^)rLr^s rcmd_mcpzmain..cmd_mcpy%s*555555 Drrz._confirm_prompt%sX ==&&((..00L@ @+,   55 s47A  A c ~ddl} ddlm}|}n*#t$r}t d|Yd}~dSd}~wwxYw|j}t |dd}|rdndg}|dkr||j||j }|st ddStd |D} | r-t d d d d dd ddd dt dn,t d dd ddd ddd dt d|D]} t| d} | r| ddddn| dddd} | rE| dpddd} | d}t | d d | dd | dd || d}t | dd | dd | ddd |Րn|d kr|j r ||j }|st d!|j d"dS||}|st d!|j d"dS||d#$d%z}|jd&kr!t$j|nt+|jd'd()5}||dddn #1swxYwYt d*|jn||j+}|jd&kr>|D]9} t$j|| d#$d%z:nBt+|jd'd()5}|D]/} ||| d#$d%z0 dddn #1swxYwYt d,t/|d-|jn|d.kr||j }|st d!|j d"dS|js "d/|d0st d1dSt3d2z }|||3rt d4|d5nt d!|j d"n|d6kr|j}|jr d7|jd8nd}|js#"d9|d:|d;st d1dSt3d2z }|||j|<}t d=|d>no|d?kr||j }|st d!|j d"dSd |j} ||| rt d!|d@| nt d!|j d"n#t@$r}t dA|Yd}~nd}~wwxYw|dBkrt |dCdDpdD}t |dd}|rdndg}||||}|!|st ddStE|}|st d1dSt dE|ddFl#m$}|dG|gdS|dHkr|%}|&}t dI|t dJ|dKD]4}|%|+}|dkrt dL|dM|dN5|j'} | (r6tRj*+| dOz }!t dP|!dQdRn#,|!dS)SNrr#z(Error: Could not open session database: rtoolr)rexclude_sourcesr%rc3@K|]}|dVdS)rNrr)ryrs rr{z-main..cmd_sessions..%s,>>QUU7^^>>>>>>rTitlez<32rPreviewz<40z Last Activez<13ruJ──────────────────────────────────────────────────────────────────────────────────────────────────────────────rrz<6u───────────────────────────────────────────────────────────────────────────────────────────────rrrn&0rrrrrz Session 'z ' not found.F) ensure_asciirrwrJrKzExported 1 session to rkz Exported z sessions to rzDelete session 'z' and all its messages? [y/N] rqr) sessions_dirzDeleted session 'r)rbz from 'rLz%Delete all ended sessions older than z daysz? [y/N] )older_than_daysrrrzPruned z session(s).rz' renamed to: r'r(r%rezResuming session: )relaunchr{rdzTotal sessions: zTotal messages: )rPtelegramdiscordr]rrr[rizDatabase size: rz MB)-rr&r$r9rrarGlist_sessions_richrr%rrhr/reresolve_session_idexport_sessionrgrrrrre export_allr*r0rEdelete_session older_thanprune_sessionsrMrset_session_titler7r(r!hermes_cli.relaunchrt session_countrldb_pathr1r-rcgetsize print_help)$rLrjr$r)rUr _source_excluder has_titlesrrrrrresolved_session_idrfrrrrr source_msgr&r%r_browse_exclude selected_idrtrOmsgsrrlrsize_mbrgsessions_parsers$ r cmd_sessionszmain..cmd_sessions%sU   . . . . . .BB    @Q@@ A A A FFFFF %$$//"044 V  ,,{HDJ-H *+++>>X>>>>>J "QQQyQQQ}QQQ4QQRRRk""""NNNNNNUNNNNNOOOj!!! U U,QUU=-A-ABB "3AEE)R(("--y"--crc2 UUU7^^4ucrc:ED'CUNNNNNN{NNNNNOOOOD'CWSSS;SSSQx[SSScSSTTTT Ux   Q&(&;&;DO&L&L#*CdoCCCDDDF(()<==CdoCCCDDDF{{4e{<3N>>OOAW W>!W99W>rvz!Show usage insights and analyticszVAnalyze session history to show token usage, costs, tool patterns, and activity trendsz--daysrz'Number of days to analyze (default: 30)z1Filter by platform (cli, telegram, discord, etc.)cL ddlm}ddlm}|}||}||j|j}t||| dS#t$r}td|Yd}~dSd}~wwxYw)Nrr#)InsightsEngine)rrzError generating insights: ) r&r$agent.insightsrgeneraterrrformat_terminalr(r9)rLr$rr)enginereportrUs r cmd_insightszmain..cmd_insights}&s 5 . . . . . . 5 5 5 5 5 5B#^B''F__$)DK_HHF &((00 1 1 1 HHJJJJJ 5 5 5 333 4 4 4 4 4 4 4 4 4 5sA8A<< B#BB#rhzOpenClaw migration toolszHMigrate settings, memories, skills, and API keys from OpenClaw to Hermes claw_actionzMigrate from OpenClaw to Hermesz|Import settings, memories, skills, and API keys from an OpenClaw installation. Always shows a preview before making changes.z1Path to OpenClaw directory (default: ~/.openclaw)u:Preview only — stop after showing what would be migratedz user-datafullupMigration preset (default: full). Neither preset imports secrets — pass --migrate-secrets to include API keys.z --overwritezOOverwrite existing files (default: refuse to apply when the plan has conflicts)z--migrate-secretszdInclude allowlisted secrets (TELEGRAM_BOT_TOKEN, API keys, etc.). Required even under --preset full.z --no-backupzSkip the pre-migration zip snapshot of ~/.hermes/ (by default a single restore-point archive is written to ~/.hermes/backups/ before apply; restorable with 'hermes import').z--workspace-targetz1Absolute path to copy workspace instructions intoz--skill-conflict)r overwriterrz2How to handle skill name conflicts (default: skip)zSkip confirmation promptscleanuprz5Archive leftover OpenClaw directories after migrationzQScan for and archive leftover OpenClaw directories to prevent state fragmentation)rr rz1Path to a specific OpenClaw directory to clean upz5Preview what would be archived without making changesc(ddlm}||dS)Nr) claw_command)hermes_cli.clawr)rLrs rcmd_clawzmain..cmd_claw&s*000000 TrrMzShow version informationz)Update Hermes Agent to the latest versionz;Pull the latest changes from git and reinstall dependenciesz --gatewayFzZGateway mode: use file-based IPC for prompts instead of stdin (used internally by /update)z--checkz@Check whether an update is available without installing anythingzMSkip the pre-update backup for this run (overrides updates.pre_update_backup)z--backupz\Force a pre-update backup for this run (off by default; overrides updates.pre_update_backup)zAssume yes for interactive prompts (config migration, stash restore). API-key entry is skipped; run 'hermes config migrate' separately for those.zUninstall Hermes AgentzJRemove Hermes Agent from your system. Can keep configs/data for reinstall.z=Full uninstall - remove everything including configs and datarfz9Run Hermes Agent as an ACP (Agent Client Protocol) serverzOStart Hermes Agent in ACP mode for editor integration (VS Code, Zed, JetBrains)c ddlm}|dS#t$r6tdtdt jdYdSwxYw)z%Launch Hermes Agent as an ACP server.rr=zACP dependencies not installed.z+Install them with: pip install -e '.[acp]'rN)acp_adapter.entryr>rrrr)rLacp_mains rcmd_acpzmain..cmd_acp0'st  : : : : : : HJJJJJ    3 4 4 4 ? @ @ @ HQKKKKKK s.tar.gz)zImport a profile from archiverzPath to .tar.gz archiverz-Profile name (default: inferred from archive)rxz2Print shell completion script (bash, zsh, or fish)rr)rrrzShell type (default: bash))rr rkr c$t|Srw)r)rLrs rrzmain..'s^D&5Q5QrrwzStart the web UI dashboardzQLaunch the Hermes Agent web dashboard for managing config, API keys, and sessionsz--porti#zPort (default 9119)z--hostrzHost (default 127.0.0.1)z --no-openz Don't open browser automaticallyzKAllow binding to non-localhost (DANGEROUS: exposes API keys on the network)z--tuizuExpose the in-browser Chat tab (embedded `hermes --tui` via PTY/WebSocket). Alternatively set HERMES_DASHBOARD_TUI=1.z--stopz4Stop all running hermes dashboard processes and exitz--statusz0List running hermes dashboard processes and exitrz View and filter Hermes log filesz;View, tail, and filter agent.log / errors.log / gateway.logaExamples: hermes logs Show last 50 lines of agent.log hermes logs -f Follow agent.log in real time hermes logs errors Show last 50 lines of errors.log hermes logs gateway -n 100 Show last 100 lines of gateway.log hermes logs --level WARNING Only show WARNING and above hermes logs --session abc123 Filter by session ID hermes logs --component tools Only show tool-related lines hermes logs --since 1h Lines from the last hour hermes logs --since 30m -f Follow, starting from 30 min ago hermes logs list List available log files with sizes rrIzPLog to view: agent (default), errors, gateway, or 'list' to show available filesrArz%Number of lines to show (default: 50)z--followz*Follow the log in real time (like tail -f)z--levelLEVELz7Minimum log level to show (DEBUG, INFO, WARNING, ERROR)rmrz1Filter lines containing this session ID substringz--sinceTIMEz,Show lines since TIME ago (e.g. 1h, 30m, 2d)z --componentz5Filter by component: gateway, agent, tools, cli, cron)get_container_exec_inforkc3JK|]}|d|vVdS)rNr)ryr _known_cmdss rr{zmain..9(sMc9J9J [r>Nrlrfrg)rirr)NN accept_hooks)discover_pluginsz&plugin discovery failed at CLI startup)exc_info)discover_mcp_toolsz(MCP tool discovery failed at CLI startuprR)register_from_config)rz-shell-hook registration failed at CLI startuponeshot) run_oneshotr)rmrrrg)rNrmNrNrNrEFrAF)rrrrr)r(N)r'Nrr)]hermes_cli._parserr set_defaultsrV add_parserr rrhermes_cli.fallback_cmdradd_subparsersrrZrIr~r$r rrrrcrrr'rr(r,r0r5r RawDescriptionHelpFormatterr9rBrEr<add_mutually_exclusive_groupplugins.memoryrFr/ __import__r9rrrrhermes_cli.curatorrHrrrQrrVrrrrrrZrr(rr~iorrrkkeysrr rStringIO parse_argsrr#rMrrGhermes_cli.pluginsrrtools.mcp_toolrrSagent.shell_hooksrrrrr(r'setattrrr)r subparsers chat_parser model_parserrfallback_parserfallback_subparsersgateway_parsergateway_subparsers gateway_run gateway_start gateway_stopgateway_restartgateway_statusgateway_installgateway_uninstallgateway_migrate_legacy setup_parserwhatsapp_parser slack_parser slack_subslack_manifest login_parser logout_parser auth_parserauth_subparsersauth_add auth_list auth_remove auth_reset auth_status auth_logout auth_spotify status_parser cron_parsercron_subparsers cron_list cron_create cron_edit cron_pause cron_resumecron_run cron_remove cron_tickwebhook_parserwebhook_subparserswh_subwh_rmwh_test_build_kanban_parser kanban_parser hooks_parserhooks_subparsers_hk_test _hk_revoke doctor_parser dump_parser debug_parser debug_sub share_parser delete_parser backup_parser import_parser config_parserconfig_subparsers config_setpairing_parser pairing_subpairing_approve_parserpairing_revoke_parserr& skills_parserskills_subparsers skills_browse skills_searchskills_installskills_inspect skills_list skills_check skills_update skills_auditskills_uninstall skills_resetskills_publishskills_snapshotsnapshot_subparsers snap_export snap_import skills_taptap_subparserstap_addtap_rmr>plugins_parserplugins_subparsersplugins_install_install_enable_groupplugins_updateplugins_removeplugins_enableplugins_disablerErFcmd_info plugin_parser_exccurator_parser_register_curator_cli memory_parser memory_sub _reset_parserrR tools_parser tools_sub tools_list_ptools_disable_ptools_enable_prY mcp_parsermcp_sub mcp_serve_p mcp_add_pmcp_rm_p mcp_test_p mcp_cfg_p mcp_login_pr`sessions_subparsers sessions_listsessions_exportsessions_deletesessions_prunesessions_renamesessions_browserinsights_parserr claw_parserclaw_subparsers claw_migrate claw_cleanuprversion_parser update_parseruninstall_parser acp_parserrprofile_parserprofile_subparsers profile_useprofile_createprofile_delete profile_show profile_aliasprofile_renameprofile_exportprofile_importcompletion_parserdashboard_parser logs_parserrr8_processed_argv_io_has_cmd_token _saved_stderrrLrA_AGENT_COMMANDS_AGENT_SUBCOMMANDS _sub_attr_sub_set _accept_hooksrrrSrrr r rgrrrs @@@@rr>r>seE999999&<&<&>&>#FJ (+++ (( 0T)L  J X J 4&M Q   K  R E 9--- 544444 ++ M ` ,  O*88>P8QQ"" K# "" ^#"" 5# "" *#  l 333  ** +P+N (66***'11N2M <  S&00>T0UUL <  =)3314O   <!    O!(228BW2XXNDWXXX  H    < )33Q4O    4  9--- (( 6H)L ( <  K It*Xii-jjL.cC`C`C`jqrrrm2klll.5opppi.QRRRn\Hz{{{kUVVV",,5'(@-KJ"VX,NOOO ]Zc8OPPP  =   Xl  **5+I8*:;;; ???)) :*H ()<===8$$$!,,4*1I-KX,>???x.RSSS **68T*UUI9%%%;'''(+++  ** 3f+N (66 *  E v$ABBB ++:,G &ABBB R&T[111 GFFFFF((44MJ/// (( 4 I )L$222GG N   ** K+H  P :t 8 ~t 1",,8T* R-J N  6 9--- )) 3=*M  +PJ/// '' 7J(K  ^ (+++ (( F+!<)L +++AAI'' O(L  I    0   < (( >)M N  9--- )) :H*M  V   ]   iOJ/// )) 6*My/LMMM  <  J/// )) *7*M &44:J4KK  .J KKK  .J KKK#--e:U-VVJ SRG3^DDD  .F GGG  2H III  /R SSS  1Q RRRJ///  ** =E+N !//5E/FFK6(GHHH(3304''M(''5N'OOO'228BV2WW&&z&HHH&&y7J&KKK?1JKKK [111 )) <m*M &44/4JJ%00@1MsA,FsB-M   /   &0001Mw^<<<      ysB]SSS&11)BS1TTN m b'H  t  ,-S   <  '11<2N 3EFFF#..v0Lc H&0041M F %//40Lc H)3384!!&/E!FFF$// ^ A 0LB K   < '1172N 3LMMM8Y*?FW "#L (22=3O*88>O8PP%00:1KX,VWWW%00>1KW+ABBB,-T#--e:P-QQJ..L.AANf+ABBB''4W'XXG &EFFF  & &xn & E EF %9:::   S! ! ! !J///  ** ?Z+N (664O  .F GGG [111 S??????4466 0 0H&11 f%$LL;; *: 6 6 R 2M !HZ  / / / / 0 SSS(##))*KTRRRRRRRRS  ** Q E +  NQLLLLLLn---- QQQ(##))*I4PPPPPPPPQ )) 1 D *  M--3C-DDJH()NOOO%&QRRR)) @*M  '  ))) I <!<!<!|J/// (( = Z )  L E +++@@I'' ?(L . ** ,+O   F !    2!)) +*N ;    2     9---&& A J '  J''\'::G$$ Q%K  /  ;'''"" A#I6(JKKK 7)@AAA ;-GHHH R.K8gx-@}UUU :,CDDD  B !!(TFAW!XXH &'>??? vv4QRRR##F1M#NNJF)>???""hZ.E#I6(BCCC$$ D%KV*JKKK:&&& ))) !++ K>,O *88>O8PP'226@V2WWMJR.D*4485O  B!  2D EEE  6Q RRR)4425O  4J KKK  l1D!)33GBW3XXN  >    1WXXXl1D ""71P"QQQ)4485O  4J KKK  :U VVV)44 Q5O  J!  S/T!aaaaaaF  l 333 !++ 0l,O   sB-V!  L! 5 5 5  l 333 '' '^(K "00m0DDO#-- .8.L L I f%6  ^ - :#V/// A  l1L #-- Dg .L L D l1L (+++  **9;U*VVN[111 )) 8Q*M  i   O   \   k   a J/// ",, %`- !! L" !!l1L"!!}!555 && He'J :&&&   )))  ** E+N(66T0UULn3DEEE&11.2M~NCCC<.I  8 (228BT2UUN 1GHHH 1CDDD'2243N5HIII j$-S (2263N 0IJJJ  <  [111 #-- A.""''' ) #""(Q(Q(Q(Q"RRR ",, )g- !!sD/D"!!+,F"!!L/Q"!! Z" !! 8 "!! C" !! ?" !!}!555 '' /Q <  (K& _     4   9   F  @  ;  D (+++:99999,,..N>38ABB<888  1#(122,??O+2*i*H*HSJ  # # % %&&&cee"1N2"   6CJ$$_55D&CJJ 6 6 6&CJx1}}#(J $$_55DDDDDD 6$   11 |D211O"v7%w/ y1 -00|LLIx ''  (!$ 488HDDWT>5AABB   ; ; ; ; ; ;          LL84         : 9 9 9 9 9       LL:T         5 5 5 5 5 5 > > > > > > ] K K K K K    LL?       tY%% 222222  L$..T:t44T:t44        t) t|/C  - -MD'4&& -dG,,, |  - -MD'4&& -dG,,,tV $sx>A7Az6z6 A{8{.A{3{3A{8|A|*|* A},|4.A}'}'A},B?CCC CDC5CD D CDGCGG(CG=G<CG=HCHH(CH>H=CH>I$CI'I'(CJJCJ__main__)rN)rP)Frw)NFNNNr.)rnN)rnrnNN)rnr^)r)FN)rr rr-rJr4rpathlibrtypingrrrrrorrrrcrrCrrEhermes_cli.env_loaderrFr.yaml _yaml_early _cfg_pathr1re_f safe_loadr/_early_sec_cfgrr _early_redactrr9hermes_loggingrO_setup_loggingrS_load_config_earlyr0rT _apply_ipv4 _early_cfg_netrrbrarXrrYrZr[r\rrrrhrrrr!r*r7rZrbrgrvrrrrrrrrrobjectrr$rVrZr~rIrrrr__annotations__rr$rcr+rr7rLrKrrrrrrrrrrrrrrrrrrrLrOrbrrrrrrrrrrrr rrrrrr$r(r,r0r5r9r<rBrErQrVr]rrrrzCompletedProcessrrrrr_warn_stale_dashboard_processesrrrrr&r4r>rFr0r7r;r?rDrGrJrLrUr]rlrrrwrrrrrrrr~rrrrrr>rrrr{ s***X      st$tH~~$+3355 33|$$%%%@@@@F.-----444444|f45555 bj00""""#O%% 5      i'222 Wb"7+"7";";"Ar!F!FzSU!V!V W W W W W W W W W W W W W W Wz.$// U . 2 23C D D  ,:=#m:L:L:R:R:T:TBJ67    D  >>>>>>N   D   CCCCCCEEEEEE##%%J >>)R ( (Dz$ $((<"8"8  $DD   D 44444444EEEEEEEE  8 $ $;#;;;;$odoooodpTphsmppppf#(3-($$Z%tZ%tZ%Z%Z%Z%z%s%x}%%%%P (3-33 3HUXM3ei3333l#N#344999999x t     t4dt&60606060rU9DU94U9E$s)T/4JU9U9U9U9p5f5c55552(," ??}? ? C=?sm ?  ????DQQQhJYJYJYZ))) t't't't'n    X * * * DsC}% &   $3*         @C<3"3"3"3"lH@sH@tH@H@H@H@^ .K.K .K.K.K .K  .K.K.K.Kb'WC'W4'WD'W'W'W'WT12$$$$$N8888v6666riiiiXWWWWv ((((V,5,5,5,5^HHHHVCCCL##* / / / /?C4Q4Q4Q4QnB B B B J=B=B=B@h/h/h/X/.....+#+$++++UUUUp||||~nDnDnDnDbllll^CC      nnnnbUUUUpttttnNNNNbZZZzGGGGT   >          D8///s/%/TW////d"$"4""""R#% %%% % %c3h %  %  %%%%P38***4*4*D****ZUDIUUUUp$d$d$d$dPO_4_4 _4 _4_4_4_4H#BJ&J&J&Z+DI+D+Xc]++++\ #Y!.1 c]$59     $,SM        &  ii #Yi ii i  iiii` G3 T#Y T hsm     #4" $s) $ 4     $s) $ 4     DI D  3 SV     DdDDDD   d3idt"oX49oX4oXDoXoXoXoXd849H"&/ / / S /  c3h$ /  / / / / d4444@F-F-F-F-F-F-F-F-RNNTNNNNb,-E-E-E`OQOQOQOQdW W W W t222:^^^^^BGdGtGGGGTiiiX #B///d % % % %*t#t#t#nG zDFFFFFs\);E-$'D E-DE-DA E--E54E59F FFAG44G<;G<