JjmUdZddlmZddlZddlZddlmZddlmZm Z m Z m Z ddl m Z mZmZmZmZmZddlmZddlmZmZmZmZmZed d hZd ed <ejeZ ddZ!ddZ"dZ#ej$dej%Z&ddZ'ddZ(Gdde Z)ide)dd d!e)dd"d#e)dd$d%e)dd%d&e)d'd(d)e)d'd)d*e)d'd*d+e)d'd+d,e)d'd,d-e)d.d-d/e)d/d0d1e)d2d1d3e)d4d3d5e)d5d5d6e)d6d6d7e)d8d7d9e)d:d9e)d;d<e)d=d>e)d?d@e)dAdBdCZ*dDedE<GdFdGe Z+iZ,dHedI<iZ-dHedJ<ddKZ.ddMZ/eGdNdOZ0ddRZ1ddUZ2ddYZ3dd]Z4 dddcZ5 dddfZ6 dddpZ7ddtZ8 dddyZ9ddl:Z;e;j<Z=dd{Z>dd}Z? ddudd^dud~dddZ@dddZA dddZBdS)uShared model-switching logic for CLI and gateway /model commands. Both the CLI (cli.py) and gateway (gateway/run.py) /model handlers share the same core pipeline: parse flags -> alias resolution -> provider resolution -> credential resolution -> normalize model name -> metadata lookup -> build result This module ties together the foundation layers: - ``agent.models_dev`` -- models.dev catalog, ModelInfo, ProviderInfo - ``hermes_cli.providers`` -- canonical provider identity + overlays - ``hermes_cli.model_normalize`` -- per-provider name formatting Provider switching uses the ``--provider`` flag exclusively. No colon-based ``provider:model`` syntax — colons are reserved for OpenRouter variant suffixes (``:free``, ``:extended``, ``:fast``). ) annotationsN) dataclass)AnyList NamedTupleOptional) ProviderDefcustom_provider_slugdetermine_api_mode get_label is_aggregatorresolve_provider_full)normalize_model_for_provider)ModelCapabilities ModelInfoget_model_capabilitiesget_model_infolist_provider_models opencode-zen opencode-gozfrozenset[str]_UNCAPPED_PICKER_PROVIDERSvaluerreturn list[str]c8gtdfd }t|tr ||St|tr|D] }||St|tt fr|D]}t|tr ||#t|tr^|d}t|tr|s|d}||SS) zReturn configured model IDs from supported config shapes. Accepts: - ``{"model-id": {...}}`` - ``["model-a", "model-b"]`` - ``[{"id": "model-a"}, {"name": "model-b"}]`` - ``"model-a"`` candidaterrNonect|tsdS|}|sdS|}|vrdS||dSN) isinstancestrstriploweraddappend)rmodel_idloweredidsseens =/home/rurouni/.hermes/hermes-agent/hermes_cli/model_switch.py_addz!_declared_model_ids.._addCs})S))  F??$$  F.."" d?? F  8idname)rrrr)setr r!dictlisttuplegetr")rr+r&itemr(r)s @@r*_declared_model_idsr57sFCUUD       % U  %  H DNNNN %$''   D$$$ T $%% 88D>>!(C0008H8H0#xx//HX Jr,current_base_urlr!Optional[ProviderDef]c ~t|pd}|sdStdddd|ddd S) z=ProviderDef for a direct ``model.provider: custom`` endpoint.NcustomCustom endpoint openai_chatFapi_key model-config)r-r. transportapi_key_env_varsbase_urlr auth_typesource)r!r"r )r6rBs r*_bare_custom_provider_defrEgs]#)r**0022H t       r,zNous Research Hermes 3 & 4 models are NOT agentic and are not designed for use with Hermes Agent. They lack the tool-calling capabilities required for agent workflows. Consider using an agentic model instead (Claude, GPT, Gemini, DeepSeek, etc.).z&(?:^|[/:])hermes[-_ ]?[34](?:[-_.:]|$) model_nameboolcX|sdStt|S)zReturn True if *model_name* is a real Nous Hermes 3/4 chat model. Used to decide whether to surface the non-agentic warning at startup. Callers in :mod:`cli.py` and here should go through this single helper so the two sites don't drift. F)rG_NOUS_HERMES_NON_AGENTIC_REsearchrFs r*is_nous_hermes_non_agenticrLs. u +22:>> ? ??r,c2t|rtSdS)zHReturn a warning string if *model_name* is a Nous Hermes 3/4 chat model.r9)rL_HERMES_MODEL_WARNINGrKs r*_check_hermes_model_warningrOs!*--%$$ 2r,c(eZdZUdZded<ded<dS) ModelIdentityz:Vendor slug and family prefix used for catalog resolution.r!vendorfamilyN__name__ __module__ __qualname____doc____annotations__r=r,r*rQrQs(DDKKKKKKKKr,rQsonnet anthropicz claude-sonnetopusz claude-opushaikuz claude-haikuclaudegpt5openaizgpt-5gptcodexo3o4geminigoogledeepseekz deepseek-chatgrokzx-aillamaz meta-llamaqwenminimaxnemotronnvidiakimi moonshotaizz-aiglmstepfunstepxiaomimimozarcee-aitrinity)rprrrtruzdict[str, ModelIdentity] MODEL_ALIASESc2eZdZUdZded<ded<ded<dS) DirectAliasz5Exact model mapping that bypasses catalog resolution.r!modelproviderrBNrTr=r,r*rxrxs1??JJJMMMMMMMMr,rxdict[str, DirectAlias]_BUILTIN_DIRECT_ALIASESDIRECT_ALIASESctt} ddlm}|}|d}t |tr|D]\}}t |ts|dd}|dd}|dd}|r9t||| || <|di} t | tr | d } t | tr| dd} | D]\}} t | tr| s/| } | |vrZ| }d |vr| d d \}}n| }|}t||p| d || <n#t$rYnwxYw|S) aLoad direct aliases from config.yaml ``model_aliases:`` section. Config format:: model_aliases: qwen: model: "qwen3.5:397b" provider: custom base_url: "https://ollama.com/v1" minimax: model: "minimax-m2.7" provider: custom base_url: "https://ollama.com/v1" Also reads ``model.aliases`` (set by ``hermes config set model.aliases.xxx``) and converts simple string entries (``ds-flash: deepseek/deepseek-v4-flash``) into DirectAlias objects. The provider is parsed from the ``provider/`` prefix in the value; if no slash, the current provider is used. r load_config model_aliasesryr9rzr:rB)ryrzrBaliases/) r0r|hermes_cli.configrr3r itemsrxr"r#r!split Exception)mergedrcfg user_aliasesr.entryryrzrB model_sectionsimple_aliasescurrent_providerrkeyvals r*_load_direct_aliasesrsi() * *F* 111111kmmww// lD ) ) +1133   e!%.. '2.. 99Z:: 99Z443>#h444F4::<<--//0 ,, mT * * *..y99N.$// #0#4#4Z#D#D #1#7#7#9#9KD%%eS11!! **,,,,..Cf}} ++--Cczz*-))C*;*;%%#3 #"-#kkmm!)!1!1!E5E!####F3KK      MsH3I IIrcdts(ttdSdS)u5Lazy-load direct aliases on first use. Mutates the existing DIRECT_ALIASES dict in place rather than rebinding the module attribute. This keeps `from hermes_cli.model_switch import DIRECT_ALIASES` references valid in callers — rebinding would leave them pointing at a stale empty dict. N)r}updaterr=r,r*_ensure_direct_aliasesr=s7 62445555566r,ceZdZUdZded<dZded<dZded<dZded <dZded <dZ ded <dZ ded <dZ ded <dZ ded<dZ ded<dZded<dZded<dZded<dZded<dS)ModelSwitchResultz!Result of a model switch attempt.rGsuccessr9r! new_modeltarget_providerFprovider_changedr>rBapi_mode error_messagewarning_messageprovider_labelresolved_via_aliasNzOptional[ModelCapabilities] capabilitiesOptional[ModelInfo] model_info is_global)rUrVrWrXrYrrrr>rBrrrrrrrrr=r,r*rrMs++MMMIO"""""GHHMON     04L4444&*J****Ir,rraw_args!tuple[str, str, bool, bool, bool]cd}d}d}d}ddl}|dd|}d|vr*d}|dd}d |vr*d}|d d}d |vr*d}|d d}|}d}g}|t |krf||d kr'|d zt |kr||d z}|d z }n ||||d z }|t |kfd|} | ||||fS)aParse --provider, --global, --session, and --refresh flags from /model command args. Returns ``(model_input, explicit_provider, is_global, force_refresh, is_session)``. ``is_global`` and ``is_session`` are independent flag presences; the *effective* persistence decision is resolved by :func:`resolve_persist_behavior` so the config-gated default (``model.persist_switch_by_default``) is applied in one place. Examples:: "sonnet" -> ("sonnet", "", False, False, False) "sonnet --global" -> ("sonnet", "", True, False, False) "sonnet --session" -> ("sonnet", "", False, False, True) "sonnet --provider anthropic" -> ("sonnet", "anthropic", False, False, False) "--provider my-ollama" -> ("", "my-ollama", False, False, False) "--refresh" -> ("", "", False, True, False) "sonnet --provider anthropic --global" -> ("sonnet", "anthropic", True, False, False) Fr9rNz;[\u2012\u2013\u2014\u2015](provider|global|session|refresh)z--\1z--globalTz --sessionz --refreshz --providerr )resubreplacer"rlenr%join) rrexplicit_provider force_refresh is_session_repartsifiltered model_inputs r*parse_model_flagsrcs(IMJwwUW^`hiiHX ##J3399;;h ##K44::<<h ##K44::<< NN  E AH c%jj.. 8| # #AE (:(: %a!e  FAA OOE!H % % % FA c%jj..((8$$**,,K *I}j QQr,rrc|rdS|rdS ddlm}|d}t|tr#t |ddSn#t $rYnwxYwdS)uWDecide whether a ``/model`` switch should persist to ``config.yaml``. Resolution order: 1. ``--session`` explicitly opts out → ``False`` (this session only). 2. ``--global`` explicitly opts in → ``True``. 3. Otherwise defer to ``model.persist_switch_by_default`` in ``config.yaml`` (defaults to ``True``, so a plain ``/model `` survives across sessions — the behavior users expect). The config read is defensive: on a fresh install ``model`` may be a flat string rather than a dict, in which case the built-in default (``True``) applies. FTrrrypersist_switch_by_default)rrr3r r0rGr)rrr model_cfgs r*resolve_persist_behaviorrsut 111111KMM%%g.. i & & J &A4HHII I J      4sAA&& A32A3r&prefixr2c|t|d}|dr |dd}|d}g}d}d}d}|D]}|dkr0|dvrd}|rd}||z },|d vr1d }||z }9|dkr|r||z }Z|d krTd |vrJ |t |d n#t$rYnwxYwd}||z }|d vrO|rI |t |d n#t$rYnwxYwd}d }|rI |t |d n#t$rYnwxYwd}d }||z }[|d kr1|rd}|}{|dvrd}|d vrd }||z }|d kr||z }|rM|dkrG |t |d n#t$rYnwxYw| d }|}td |D} ddddd} | |d} | | |fzS)uSSort key for model version preference. Extracts version numbers after the family prefix and returns a sort key that prefers higher versions. Suffix tokens (``pro``, ``omni``, etc.) are used as tiebreakers, with common quality indicators ranked. Examples (with prefix ``"mimo"``):: mimo-v2.5-pro → (-2.5, 0, 'pro') # highest version wins mimo-v2.5 → (-2.5, 1, '') # no suffix = lower than pro mimo-v2-pro → (-2.0, 0, 'pro') mimo-v2-omni → (-2.0, 1, 'omni') mimo-v2-flash → (-2.0, 1, 'flash') Nrr-r9startvV in_versionz-_. in_suffix.betweenc3K|]}| VdSrr=).0ns r* z"_model_sort_key..#s$))q))))))r,r)promaxplusturbo) r startswithlstripr"isdigitr%floatrstrip ValueErrorr#r2r3) r&rrestnums suffix_bufstatenum_bufchsuffix version_key _SUFFIX_RANK suffix_ranks r*_model_sort_keyrs CKKLL !D sABBx ;;s   ! ! # #D DJ EG66 G  Tzz$ !$2 u#b l " "zz|| !2 s'>> E'..*=*=$>$>????% GGrMGGu! E'..*=*=$>$>????% G!! E'..*=*=$>$>????% G#b i  zz|| !$t$u#b k ! ! " J5L((  KKgnnS1122 3 3 3 3    D      % %e , ,F \\^^F))D)))))KQA>>L""61--K +v. ..sH 5D DD#5E E&%E&25F(( F54F55I II raw_inputrOptional[tuple[str, str, str]]c|}tt|}||j|j|fStD]3\}}|j|kr|j|j|fcS4t|}|dS|\}}t|} ddl m } | |g} | rz resolve_alias..Zs ///!AGGII///r,rcbg|]+}|)|,Sr=r#r)rmidrs r* z!resolve_alias..fsE   yy{{%%f--    r,cbg|]+}|)|,Sr=r)rr family_lowers r*rz!resolve_alias..lsE   yy{{%%l33    r,c$t|Sr)r)rprefix_for_sorts r*zresolve_alias..vsq/BBr,r)r"r#rr}r3rzryrrvrhermes_cli.modelsrr%rr sort)rrrdirect alias_namedaidentityrRrScatalogrstaticr)r aggregatormatchesrrrs @@@r* resolve_aliasr-sz //   ! ! # #C    $ $F s33 )..0077 B 8>>  s " "K:6 6 6 6 #  %%HtNFF ##344G  666666!%%&6;;  &//w///D & &7799D((NN1%%%      /00J  %%V%%++--    "    ||~~     "    t/9D**&***fO LLBBBBLCCC gaj# ..s#AD>> E  E r9user_providersr0custom_providers list | Nonecf t|||d}d|DS#t$rgcYSwxYw)uReturn slugs of providers that have credentials. Uses ``list_authenticated_providers()`` which is backed by the models.dev in-memory cache (1 hr TTL) — no extra network cost. r)rrr max_modelscg|] }|d S)slugr=rps r*rz4get_authenticated_provider_slugs..s---a& ---r,)list_authenticated_providersr)rrr providerss r* get_authenticated_provider_slugsrzsa 0-)-    .-9----  s ! 00r=authenticated_providerscD|pd}|D]}t||}||cSdS)zTry to resolve an alias on the user's authenticated providers. Falls back to ``("openrouter", "nous")`` only when no authenticated providers are supplied (backwards compat for non-interactive callers). ) openrouternousN)r)rrrrzresults r*_resolve_alias_fallbackr sF(A+AIy(33  MMM  4r,ryrzrBr>rrconfig_context_length int | None Optional[int]c ddlm}|||pd|pd|pd||}|rt|Sn#t$rYnwxYw||jrt|jSdS)u Resolve the context length to show in /model output. models.dev reports per-vendor context (e.g. gpt-5.5 = 1.05M on openai) but provider-enforced limits can be lower (e.g. Codex OAuth caps the same slug at 272k). The authoritative source is ``agent.model_metadata.get_model_context_length`` which already knows about Codex OAuth, Copilot, Nous, and falls back to models.dev for the rest. When ``custom_providers`` is provided, per-model ``context_length`` overrides from ``custom_providers[].models..context_length`` are honored — this closes #15779 where ``/model`` switch ignored user-set overrides. Prefer the provider-aware value; fall back to ``model_info.context_window`` only if the resolver returns nothing. r)get_model_context_lengthr9N)rBr>rzrr )agent.model_metadatarintrcontext_window) ryrzrBr>rrr rctxs r*resolve_display_context_lengthrs4  AAAAAA&& ^Mr%-"7      s88O       *";:,--- 4s -1 >>Optional[dict]Optional[list]dict[str, str]c |r|siS| d fd }i}t|trq|D]\\}}t|t rt|ts0dD])}|||}|r|||<n*]t|tr|D]} t| ts| d} t| t r| sWd| }||vradD])}|| |}|r|||<n*|S)uReturn ``{provider_slug: canonical_model_id}`` for every configured provider whose declared models contain an exact (case-insensitive) match for ``model_name``. Used by :func:`switch_model` to route a *typed* model name to the provider that actually declares it in user/custom provider config, instead of leaving it on the current provider. Without this, a model declared under ``providers.`` / ``custom_providers`` but typed while the current provider is ``openai-codex`` stays on Codex and is soft-accepted as an unknown hidden Codex model (#45006). Matching is exact (case-insensitive); the configured spelling is returned so the downstream validation/override path sees the canonical id. Only the explicitly-declared model collections are scanned (``models``, the singular ``model``, and ``default_model``) — never fuzzy/family matching. r Optional[str]cdt|D]}|kr|cSdS)z`Canonical id if ``value`` (a model collection or scalar) declares ``target``, else None.N)r5r#)rr&targets r*_matchz,_configured_provider_matches.._matchsD,E22  H~~6))*tr,)modelsry default_modelr.custom:)rr)r"r#r r0rr!r3r1) rFrrrrrrrhitrr.rs @r*_configured_provider_matchesr"s* Z--//      % % ' 'F!G.$'''--//  ID#dC((  30E0E ;  fSWWS\\**$'GDME"D))%  EeT** 99V$$DdC((   #T##Dw;  fUYYs^^,,$'GDME Nr,F current_modelcurrent_api_keyrc Vddlm} m} m} m} ddlm} d}|}|}d}|r]t|||}|9| dkrt|}|[d|d } dd l m }|}|r|d z }|dd D]}|d |j z }n#t$rYnwxYwtd||S|j}|dkrP|sN ddl m}ddlm}||dpid}n#t$rd}YnwxYwddlm}ddlm}| V|V}|r||krz|Vkrt||vrpt1|||}||vrZVfd|D}|rdd|dnd}td||j|dVdt7|d|S|sr|jrGddlm}||j} | r| }nPtd||j|d |jd!|jd"|Std||j|d|jd#|St=||}!|!|!\}"}}n ddl m}dd$lm}#m}||dpi}$|#|$|}%|%r d}|%}d}d%}d}!nt=||}!n #t$rt=||}!YnwxYw|rnu|!%|!\}}}t@!d&|||nN| }&|&tDvr{t1|||}'tG||'}(|($|(\}}}t@!d'|||ntD|&})td|d(|&d)|)j$d*|)j%d+S|s|&d,}*|*dkrd*|vrtO|rt|d|* }+||*d-zd},|+r%|,r#|+d*|,}t@!d.||d}-tO|r|stQ|}.|.rw| }/|.D] }0|0 |/kr|0}d%}-nA!|.D]=}0d*|0vr7|0)d*d-\}"}1|1 |/kr|0}d%}-n>d}2|s|-s||krtU|||}3|3r||3vr |3|}d%}2ntW|3}4tY|4d-kr,td|d/|d0d|4d1S|4d}|3|}d%}2t@!d2||t[|t\r||vr|}|pd}5|d3vp|/d4pd5|5vpd6|5v}6||kr|6s|s|-s|2s| ||} | r| \}}||k}7t7|}8|dkr|rd7}8|/d4rt|||}9|9|9j}8|}:|};d}<|7s|rddl0}=d}>|rF|rDdd8lm1}?|?| |}>|> |?||}>|>|>jr|pi| p|pi|pi}@te|@d9dpd}A|A/d:rJ|A3d;r5|=j4|Addpd}B|Br-|=j4|Bd}A | ||Apd|>j|?}C|Cd9dp|A}:|Cd@dp|>j};|CdAd}<n#t$r|A}:|>j};d}tmtn|}E|E|Ejr |Ej};d}<|:sdE}:tq||} | |||:|;| fallback c. On aggregator, try vendor/model slug conversion d. Aggregator catalog search e. detect_provider_for_model() as last resort f. Resolve credentials g. Normalize model name for target provider Finally: h. Get full model metadata from models.dev i. Build result Args: raw_input: The model name (after flag parsing). current_provider: The currently active provider. current_model: The currently active model name. current_base_url: The currently active base URL. current_api_key: The currently active API key. is_global: Whether to persist the switch. explicit_provider: From --provider flag (empty = no explicit provider). user_providers: The ``providers:`` dict from config.yaml (for user endpoints). custom_providers: The ``custom_providers:`` list from config.yaml. Returns: ModelSwitchResult with all information the caller needs. r)copilot_model_api_modedetect_provider_for_modelvalidate_requested_modelopencode_model_api_mode)resolve_runtime_providerr9FNr:zUnknown provider 'z`'. Check 'hermes model' for available providers, or define it in config.yaml under 'providers:'.)validate_config_structureu1 Run 'hermes doctor' — config issues detected:u • )rrrmoar)normalize_moa_configdefault_presetdefault_AGGREGATOR_PROVIDERSALIASES)rrrcJg|]}|r|k| Sr=)r)rs_explicit_norms r*rz switch_model..sB   ||N33 89^8K8K8K8K8Kr,z Did you mean: z, ?z Provider 'z"' is an alias that routes through z&, which has no credentials configured.)rrrrr)_auto_detect_local_modelzNo model detected on z (z@). Specify the model explicitly: /model --provider zN' has no base URL configured. Specify a model: /model --provider )exact_moa_preset_namer.TzAlias '%s' resolved to %s on %sz,Alias '%s' resolved via fallback to %s on %szAlias 'z ' maps to rz] but no matching model was found in any provider catalog. Try specifying the full model name.:rz3Converted vendor:model '%s' to aggregator slug '%s''z0' is declared by multiple configured providers (z<). Re-run with --provider to choose which one to use.z/Configured-provider detection routed '%s' to %s>localr:r  localhostz 127.0.0.1r;)resolve_user_providerr>z${}rkey_env) requestedexplicit_api_keyexplicit_base_url target_modelrBr)rCrFz,Could not resolve credentials for provider 'z': zno-key-required)r>rBrzCould not validate `z`: )acceptedpersist recognizedmessagerGrr.ryrJz Invalid model)rrrrrrcorrected_model>github-copilotcopilot)r>>opencoderr>rr)normalize_opencode_base_urlz | ) rrrrr>rBrrrrrrr)Arr&r'r(r)hermes_cli.runtime_providerr*r"rr#rErr+rJrrr-rhermes_cli.moa_configr.r3r2hermes_cli.providersr4rrr.r rBr9rr:loggerdebugrvr rRrSfindr rrr"sortedrr r0rosr?r!endswithenvironr rr}rrr5r1rOrrr%rO)Wrrr#r6r$rrrrr&r'r(r)r*resolved_aliasrrresolved_moa_presetpdef _switch_errr+ _cfg_issues_cirr._AGG_PROVIDERS_PROVIDER_ALIAS_TABLE _alias_target_authed _suggestions_hintr9detected alias_result_r:_moa_cfg _moa_matchrauthedfallback_resultr colon_posleftrightresolved_in_current_catalogrnew_model_lowerrbare config_routed cfg_matches match_slugs_base is_customrr custom_pdefr>rBrrW _user_pdef_ruser_ucfg_ukey_kenvruntimee_da validationoverriderrr entry_name entry_slug entry_url entry_model entry_modelsmsgrOrrwarnings hermes_warnr7sW @r* switch_modelrs` EDDDDDN!!I&O _6$      <-3355;;==II,-=>>D <6%6666   GGGGGG7799 @#XXK*2A2@@#'?#+'?'??     $#)  ' e # #I # &999999FFFFFF001B1B51I1I1ORPPQab  & & &%  & NMMMMMIIIIII*002288::-11.AA  00>11>116!1-!1G g--    &    $,@dii &=&=@@@@)+)!$3#'9'A^AA#,_#=#=AA9>AA     } PPPPPP33DMBB  (II, %(7'+y"+pDIpppp\mpp    )!$3#'9'_TY__K\__    %Y@@  #+7 (Ay.  F 5 5 5 5 5 5 Y Y Y Y Y Y Y Y++KKMM,=,=e,D,D,JKKH..xCCJ J"'& !#&*## ,Y8HII  F F F(4DEELLL F 2    %9E 6OY LL1 ?     //##))++Cm##9%5#1%5 #:)V"L"L".AP>OYLLF& ? -S1H, %"+CcCCX_CCxCCC )  &NN3// q==S %9%9mL\>]>]%9$ZiZ06688>>@@D%i!mnn5;;==E'+$5$5e$5$5  Q%y',#  ) ) &. &*?;;G &"+//"3"3" & &Cyy{{o55$' 6:36 '&&#::&)iiQ&7&7GAt#zz||>>,/ >B ; % ( </( < #3336>+;K <#{22 +,< =I$(MM"("5"5K;''!++0$)&/!QI!Q!Q.2ii .D.D!Q!Q!Q    '2!nO +O **955 >u$< u(<  / / / 0" 00 0" 0 10RRJ!#VO^DD  !j&9 !#)r../@/F/F/H/H/N/N/P/PQQE"(b--o>>EBD  )R006B77==??E%% @%..*=*= @ uQrT{B77==?? >EIIi44:;;AACC>JNN5"55;;==E 22-%*]d&0&9!*  "++i44=";;z266M*:M";;z266   %.  ( (-= (%G'H)/8DDHH 22-!*"++i44";;z266";;z266   (!$3#1'3*33/033           ..*&Gkk)R00G{{:r22H{{:r22HH    D ,     00 ?s|?|HH ,+-YHHI --  %        ?i??A??     >>* % %(  +1133   c?** $7"8M8M$N$NNN#' , W>W9AAAAAA..(SS*/9EEL ;;JH~~i  / 9-...-i88K% $$$ ')08@ 8,,,b%)!   s1B88 CC*:D%% D43D4AK//L  L 3A!bb/.b/Ad e*e e eAf"" f/.f/h h7 h22h7rcxt|tsiSddlm}||dS)Nr)normalize_extra_headers extra_headers)r r0rrr3)rrs r*_extra_headers_from_configrpsH eT " " 999999 " "599_#=#= > >>r,Optional['_threading.Thread']ctrdStdd}tj|dd}||S) uWarm the provider-models disk cache in a background daemon thread. The no-args ``/model`` picker calls ``list_authenticated_providers()``, which fetches each authenticated provider's live ``/v1/models`` list on a cold/stale cache. Those fetches are independent HTTP round-trips but run serially, so the first ``/model`` open in a session (or any open after the 1h cache TTL expires) blocks ~1-2s on the user's critical path. This pre-warms that exact path off-thread during idle session time: it runs ``list_authenticated_providers()`` once, which populates ``provider_models_cache.json`` for every authed provider. By the time the user types ``/model``, the picker hits the warm disk cache and renders in ~100ms. Fire-and-forget. Process-level Event guard ensures it runs at most once. Fully exception-isolated — a slow or offline provider can never affect the session. Returns the spawned thread (for tests) or None if already warmed. Nrrc ddlm}|}t|j|j|j|j|jdS#t$r t ddYdSwxYw)Nr)load_picker_context)rr6r#rrzpicker cache prewarm failedT)exc_info) hermes_cli.inventoryrrrr6r#rrrrSrT)rrs r*_warmz)prewarm_picker_cache_async.._warms G @ @ @ @ @ @%%''C )!$!5!$!5!/"1!$!5        G G G LL6L F F F F F F Gs=A&A+*A+Tzpicker-cache-prewarm)rdaemonr.rr)_picker_prewarm_doneis_setr/ _threadingThreadr)rts r*prewarm_picker_cache_asyncrxss&""$$tGGGG& t:PQQQAGGIII Hr,T)force_fresh_nous_tierrr#refreshprobe_custom_providersrrrr List[dict]c F/|}~ddlddlm} m} m} ddlm} ddlm} m }m }m }m }m }m}|r |n#t$rYnwxYwg}t!}t!}t!|ddd de|fd }dffd ~dg~fd }| }t#|}d| D|d<||d<d|vrddlm}||d<d|vrjdsDjds*dkrddlm}ddlm}dk}jdp |rrndpd} |jdd|d} n #|$rg} YnwxYw| s|r|r|g} | |d<ddlm}!ddlm}"| D]\}#}$|"|#}%|%r |%|#kr|%|!vr(|$|vr-||$}&t;|&t"sX| |#}'|'r |'jd kr{|'r|'jrtA|'j}(n,|&d!g}(t;|(t@stCfd"|(D})|)sO dd#lm"}*|*}+|+r+|+d$i|#rd%})n#t$rYnwxYw|)s5||#},|,s&||#g},|#|vr ||#|,},tG|,}-|#tHvr|,}.n| |,d|n|,}.|#}/| |$}0|0r|0j%n|$}1|&|/|1|/kp|$kd&|.|-d'd(|'|/|'|$||/dd)lm(}2ddlm}3d*| D}4|2D]~\}5}6|5|vr|4|5|5}7|7|vrJd&})|6jd+kr ||7})n'|6j)r tCfd,|6j)D})|)sT|6jd krI|5|7fD]D}8|3|8}9|9r+|9jr$tCfd-|9jDrd%})nE|)sg dd#lm"}*|*}+|+d.i}:|+r |5|:vs|7|:vrd%})n3#t$r&};tT+d/|5|;Yd};~;nd};~;wwxYw|)s\ dd0l,m-}<|<|7}=|=.rd%})n3#t$r&};tT+d1|7|;Yd};~;nd};~;wwxYw|)s|7d2kr dd3l/m0}>m1}?|?}@|>}A|@r|@d4s|Ar|Ad4rd%})n2#t$r%};tT+d5|;Yd};~;nd};~;wwxYw|)s3|7d6vr ||7},n|6jd+kr{ ||7}B|Br|Bn+||7gp||5g},n;#t$r0||7gp||5g},YnwxYw|7dkr|dg}, dd7lm2}Cm3}Dm4}Em5}Fdd8lm6}G|Cdpi}Hd}I |Gdpi}J|Jd9dpd}In#t$rd}IYnwxYw|D|:r|E|,|H|I\},}Kn|F|,|H|I\},}KnY#t$rYnMwxYw||7},|,s<||7gp||5g},|7|vr ||7|,},tG|,}-|7tHvr|,}.n| |,d|n|,}.|&|7to|7|7kp|5kd&|.|-d;d(|'|5|'|7||7 dd dd0l,m-}<|<|Mj:}R|R.rd%}On#t$rYnwxYw|Os'|Nr%tw|Nd>dd+kr||Mj:}O|Os|Nrqtw|Nd>dd+kr\ ||Mj:}B|Br|Bn||Mj:g}SnX#t$r||Mj:g}SYn1wxYw||Mj:}S|Ss||Mj:g}StG|S}T| |Sd|n|S}U|&|Mj:|Mj<|Mj:kd&|U|Td?d(|'|Mj:||Mj:Ct!}V|rt;|t"r|D]\}W}Xt;|Xt"s|W|vr3|Xd@dp|W}1|XdAdp-|XdBdp|Xddpd}Y|XdCdp|XdDd}Zg}[|Zr|[&|Zt{|XdEgD]}\|\|[vr|[&|\|[s_t}|Y}]dF|]vr(|dGpg}^|^rtA|^}[t}|Xd dpd}_|_sht}|XdHdpd}`|`r-j|`dnd}_|XdId%}at;|at|r|adJv}at|[}b|o"t|Yo|aot|_p|b }c|cr9 ddKlm@}d|d|_|Yt|XpdL}e|er|e}[n#t$rYnwxYw|&|W|1|Wkd%|[|[rtG|[nddM|YdN|'|W|'t|1t}|1t}|YCdOf}f|fdr|fdPr|V'|ft}pd}g|gdQkrrdQ|vrtCfdR|pgDs|r|gng}h|&dQdSd%d%| |hd|n|htG|hdTt}CdOdN|'dQ|rt;|t@rddUlDmE}i|i}j|D]j}kt;|kt"s|kd@pd}l|kdAdp-|kddp|kdBdpdCdO}Y|lr|Ys|kd pd}m|kdHpd}`|mp0|`r-j|`dnd}_t}|kdVp|kdWpd}n|mr|mn|`rdX|`nd}o|kdId%}at;|at|r|adJv}at|k}ptt|p}q|Y|o|n|qf}r|r|jvr[|l}1dYD]5}s|s|1vr/|1H|sd}1n6|1s|l}1t|1}/|/|1|Y|_g|a|pdZ|j|r<n5|_r&|j|rd s |_|j|rd <|as d&|j|rdI<|kdDpd}Z|Zr1|Z|j|rdEvr!|j|rdE&|Zt{|kdEiD]3}\|\|j|rdEvr!|j|rdE&|\4lt!}tt}pdCdO}t}fd[|jJD}u|jJD]}v|vd\}Y|vd d}_|vd }/|/|vr|/|tvrV|/|tvrK|/}wd]}x|wd^|x|vr |xdPz }x|wd^|x|v |wd^|x}/|/|vd <t}|vd@t}|vd\CdOf}y|ydr|ydPr|y|VvrR|ydP}z|zr|z|vrb|o._norm_urls839"~~##%%,,S1177999r,rrcH ddlm}n#t$rYdSwxYw||}|sdSd}t |ddr"j|jdpd}|st |ddpd}|}|r|dSdS)a Record the effective base URL for a built-in provider row. Prefers the live env-override (e.g. DASHSCOPE_BASE_URL) over the static inference_base_url so the dedup matches what a user typing that URL into custom_providers would actually hit.rrNr9base_url_env_varinference_base_url)hermes_cli.authrrr3getattrrYrr$)r_regpcfgrnormed_builtin_endpointsrrWs r*_record_builtin_endpointz>list_authenticated_providers.._record_builtin_endpoints   A A A A A A A    FF xx~~  F 4+R 0 0 B*..!6;;ArC @$ 4b99?RC3  +  " "6 * * * * * + +s  rGcPjddrdSjddr/jddrdStfddDS)aTReturn True when explicit AWS auth config is present. This intentionally avoids botocore's full credential chain. Provider picker/model-switch discovery can run for non-Bedrock providers, and botocore may otherwise probe EC2 IMDS (169.254.169.254) on local machines before returning no credentials. AWS_BEARER_TOKEN_BEDROCKr9TAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYc3rK|]1}j|dV2dS)r9N)rYr3r")rr.rWs r*rzQlist_authenticated_providers.._has_fast_aws_sdk_signal..sS   JNN4 $ $ * * , ,      r,) AWS_PROFILE&AWS_CONTAINER_CREDENTIALS_RELATIVE_URI"AWS_CONTAINER_CREDENTIALS_FULL_URIAWS_WEB_IDENTITY_TOKEN_FILE)rYr3r"any)rWsr*_has_fast_aws_sdk_signalz>list_authenticated_providers.._has_fast_aws_sdk_signals :>>4b 9 9 ? ? A A 4 JNN. 3 3 9 9 ; ;  6;;AACC 4          r,c^t|pd}tpd}rdS||krdS ddlm}t |S#t $rYdSwxYw)z@Credential check for AWS SDK providers in non-runtime discovery.r9TFr)has_aws_credentials)r!r"r#agent.bedrock_adapterrrGr)r slug_norm current_normrrrs r*_has_aws_sdk_creds_for_listingzDlist_authenticated_providers.._has_aws_sdk_creds_for_listing's OO))++1133 +1r2288::@@BB # # % % 4  $ $5  A A A A A A++--.. .   55 sB B,+B,cg|]\}}|Sr=r=rrrhs r*rz0list_authenticated_providers..9sAAAVS!SAAAr,rr z ollama-cloud)fetch_ollama_cloud_modelslmstudio LM_API_KEY LM_BASE_URL)fetch_lmstudio_models) AuthErrorzhttp://127.0.0.1:1234/v1r9g?)r>rBtimeoutr1r3r>envc3LK|]}j|VdSrrYr3revrWs r*rz/list_authenticated_providers..s1>>r r**>>>>>>r,)_load_auth_storecredential_poolTFzbuilt-in)rr. is_currentis_user_definedr total_modelsrD)HERMES_OVERLAYSci|]\}}|| Sr=r=)rkvs r* z0list_authenticated_providers..sGGG1q!GGGr,aws_sdkc3LK|]}j|VdSrrrs r*rz/list_authenticated_providers..s1PP2BJNN2..PPPPPPr,c3LK|]}j|VdSrrrs r*rz/list_authenticated_providers..s1NN"2:>>"--NNNNNNr,rz"Auth store check failed for %s: %s) load_poolz'Credential pool check failed for %s: %sr[)read_claude_code_credentialsread_hermes_oauth_credentials accessTokenz)Anthropic external creds check failed: %s> copilot-acp openai-codexrM)get_pricing_for_providercheck_nous_free_tier&union_with_portal_free_recommendations&union_with_portal_paid_recommendations)get_provider_auth_stateportal_base_url) force_freshhermes)CANONICAL_PROVIDERSc3LK|]}j|VdSrrrs r*rz/list_authenticated_providers..ls1YYr r 2 2YYYYYYr,rC canonicalr.rBapirryrzapi.openai.comr`rBdiscover_models>0nofalse)fetch_api_models)headersz user-config)rr.rrrrrDapi_urlrrr:c3K|]}t|tot|ddp+|ddp|dddtdkVdS)rBr9rrrN)r r0r!r3r"rr#)r_cpr6s r*rz/list_authenticated_providers..s    sD ! ! A B''&775"%%&775"%%eggffSkk%%''#$$**,,33C88>>@@ A       r,r;r?) OrderedDictrr@zenv:)u—z - )rr.rr>rrrc3K|]X}rTt|ddkTdVYdS)rrrNr)r_grp_current_base_url_norms r*rz/list_authenticated_providers..sz, , %, DO$$**,,33C88>>@@DZZZ [ZZZ , , r,rrrrrrc&|d |d fS)Nrrr=)rs r*rz.list_authenticated_providers.. sAlO 3a6G5GHr,r)rr!rr!)rr!rr)rrG)rr!rrG)LrWagent.models_devrrrrrrrrrrrrrrr/r0rrYr3r"r#rrr2rRr4rr rCrAr1rrrrr.r%r$rextra_env_varsrSrTagent.credential_poolrhas_credentialsagent.anthropic_adapterrrrrrrrr r ImportErrorrrlabelr5r!rGrrr r collectionsrr2rVrsumvaluesr)rr6rrrrr#rrrr _mdev_pinforrrrrrrrresults seen_slugs seen_mdev_idsrrdatacuratedrrris_current_lmstudiolm_baseliver`ra hermes_idmdev_idrbpdatapconfigenv_vars has_credsrstore model_idstotaltoprpinfo display_namer_auth_registry_mdev_to_hermespidoverlay hermes_slug_keyrproviders_storeexcrpoolrr hermes_credscc_creds_ids _nous_pricing _nous_free _union_free _union_paid _nous_state_pricing_portal_strh _canon_provsr _cp_config _cp_has_creds _cp_store_cp_providers_store_cp_pool _cp_model_ids _cp_total_cp_top_section3_emitted_pairsep_nameep_cfgrr models_listr& url_lowerfbr>rBdiscoverhas_explicit_models should_prober live_models_pair_current_provider_norm_modelsrgroupsrraw_nameinline_api_keyrcredential_identityentry_extra_headersheaders_identity group_keysep_section4_emitted_slugs_current_base_url_group_countgrp base_slugr _pair_key _grp_url_norm_rowrrrrrWs`` @@@@@r*rrsVIII 211111  ' ' ) ) ) )    D GeeJM "ee::::++++++++,      2           D%))9$:$:GAA/@AAAGL 1022GFOW$$??????";";"="=   |$$!(* }(E(E!IYI_I_IaIaIgIgIiIimwIwIw;;;;;;------.4466<<>>*L JNN= ) ) *$7V>>>X>>>>>   <<<<<<((**%UYY'8"==AA)LL% $I       .-i88  I Ir22I111229iHH I 2 2 2CC,6,B)KZK(( C G$$%*7uzz  "22QgAQ6Q$!       tzz||$$$'"""  &&&&544444CCCCCC HG(>(D(D(F(FGGGO'--//W.W. W 99;;* $ $ &))#s33     * , ,    ) )66{CCII  # QPPPP9OPPPPPI W.);;k*  %))$//D1NNNN8MNNNNN$(   M M<<<<<<((**"'))K"<"<%c_44 8V8V $I M M M A3LLLLLLLL M  Z Z;;;;;; y--''))% $I Z Z Z F UXYYYYYYYY Z O[K77 O =<>> 7799 %\%5%5m%D%D%%!)m!>II ) + + Q00==$(dDDw{{;/K/K/cw{{[^`bOcOc  Q Q Q#KK R88PGKKR>I O#KK R88PGKKR>  z ) ) $''11   Z*5 ZYYYYZ=XYYYYYM  <<<<<<,,.. &/mmK&D&D#)-@!@!@$(M      ;;;;;;$9SX..++--)$(M      E E KQS0T0TXa0a0a::38DDM    :'*k2>>)KK :00::(, K'++ch2K2K  : : : ' CHb 9 9  :65ch??M  : ' CHb 9 9  && 0:0F-  ,,MHI(&66$%!      sx~~''(((  ****$'55\3*^T::\3-3355[ 3[ 3OGVfd++ }}*,,!::fb11>DDFFAHP"*.."55;;===bzz"3T::H(C(( H#>>++3GG"&{"3"3 1d7mmW 8%8!8   BBBBBB"2"2 :6 B B Jd###K #2&1  D NN$%)99#'%4? FK 0 0 0Q'"      NN7==?? + + + NN/ ==CCEE F F FL!!''))//11G ""$$++C006688EQx 3E!H 3'++E222!!1!7R88>>@@FFHH(**  + J & &     ).B       '&3:=//%#.8.Dgkzk**'LL$+,,2244;;C@@    x   Q6J'7>>Q6++++++.9[]]%Y AY AEeT**  &))/R6688H *b))99UB''99UB''eggffSkk   7 #ii 228b??AANyy++1r88::G$7>F w++11333B  *%%99[))eggeegg ";*19&W&&&r yy!2D99H(C(( H#>>++3GG#=U"C"C $V,?,E,E,G,G%H%HII  "5xAQRI&& ( )Cl**'3'9'9#'>'>q'A'G'G'I'I +$,#+L+L99 (&& '/%8%%y!!;6)#4#8#8#C#C;3:F9%i0  A;@F9%&78#YYw//52<<>>M BfY6G6Q!Q!Qy!(+22=AAA/ (B0G0GHH A A6)#4X#>>>9%h/66x@@@ A(+uu!$%5%;!>FA#((Q((..00J>>#))a))"F CK  &&((..00C N##))++22377==??I|  !  >U1U1U&aLM 2D!D!D6'5MM5']]7#h-&75GG-t44    BBBBBB"2"2 # 8 8 @D###K #?(3H .1+.>.>N+ D NNF "&66$0;344;%)??;6:#'h- #CM 2 2'y>    NN4::<< ( ( ( # ' ' 5 5 5 5  D88L)) hhx((.BGG++"/!:'!:X'+xxG 'M'MPQ'Q^$  LLHHLIII Ns7 < A A 'GG  G  =L L+*L+72U** V4VV 'W W8W33W8A Y ZY;;Z$;[!!6\\;!_%^_ ^_^0_ __c c+*c+3f  ff,g  gg /i%i87i8;'x## x0/x0XAAYY AY&Y%AY&rcr ddlm}||}||S|gd|DzS#t$r|cYSwxYw)aAdd the virtual MoA provider row used by interactive model pickers. ``list_authenticated_providers()`` only returns real/auth-backed providers. The CLI model inventory adds MoA separately so named presets appear next to normal providers; gateway pickers call ``list_picker_providers()`` directly, so they need the same virtual row here. Reuse the inventory's single row builder so the row shape stays defined in one place. r)_moa_provider_rowNcg|]=}t|dddk;|>S)rr9r-)r!r3r#rs r*rz0_prepend_moa_picker_provider..3 sE\\\!Cfb8I8I4J4J4P4P4R4RV[4[4[A4[4[4[r,)rrcr)rrrcmoa_rows r*_prepend_moa_picker_providerrf$ sx::::::##$455 ? y\\y\\\\\ s'' 66 include_moacddlm}t||||||}|rt||}g} |D]<} t | dd} | dkr} |} d| D} n3#t$r&t| d g} YnwxYwt| } | | d |n| | d <t| | d <t| d }t| d o!t| d }|s|s'| | >| S)aInteractive-picker variant of :func:`list_authenticated_providers`. Post-processes the base list so the ``/model`` picker (Telegram/Discord inline keyboards) only surfaces models that are actually callable in the current install: - OpenRouter's model list is replaced with the output of :func:`hermes_cli.models.fetch_openrouter_models`, which filters the curated ``OPENROUTER_MODELS`` snapshot against the live OpenRouter catalog. IDs the live catalog no longer carries drop out, so the picker never offers a model the user can't call. - Provider rows whose model list ends up empty are dropped, except custom endpoints (``is_user_defined=True`` with an ``api_url``) where the user may supply their own model set through config. All other providers and metadata fields are passed through unchanged. The typed ``/model `` path is unaffected -- only the interactive picker payload is narrowed. r)fetch_openrouter_models)rr6rrrr#)rrr9rcg|]\}}|Sr=r=rs r*rz)list_picker_providers..g s333FCC333r,rNrrr) rrirrfr!r3r#rr1r0rrGr%)rr6rrrr#rgrirrrrrlive_ids has_modelsis_custom_endpoints r*list_picker_providersrn8 s8:99999,))%)# I_0M]^^^ H 155$$%%++-- <   5..0033d333 5 5 5h 3 344 5QA3=3I(;J;//xAhK #H An !%%//** !!%%(9":":;;VQUU9EUEU@V@V "4   Os2B  -B98B9)rrrr)r6r!rr7)rFr!rrG)rFr!rr!)rr{r)rr!rr)rrGrrGrrG)r&r!rr!rr2)rr!rr!rr)r9NN)rr!rr0rrrr)r=)rr!rrrr)r9r9NNN)ryr!rzr!rBr!r>r!rrrrr r rr)rFr!rrrrrr)r9r9Fr9NN)rr!rr!r#r!r6r!r$r!rrGrr!rr0rrrr)rrrr)rr)r9r9NN)rr!r6r!rr0rrrrGrr r#r!rrGrrGrr)r9)rrrr!rr)r9r9NNNr9F)rr!r6r!rr0rrrr r#r!rgrGrr)CrX __future__rloggingr dataclassesrtypingrrrrrRr r r r r rhermes_cli.model_normalizerr rrrrr frozensetrrY getLoggerrUrSr5rErNcompile IGNORECASErIrLrOrQrvrxr|r}rrrrrrrrr rr"r threadingrEventrrrrrfrnr=r,r*rzs(#""""" !!!!!!222222222222.7Y 7V-W-WWWWW  8 $ $----`,- )bj-M @ @ @ @J 1+ {O<<1+ {M::1+ {N;; 1+  {H55 1+ x111+ x//1+ x111+ x..1+ x..1+ x221+$z?;;%1+* vv..+1+0 |W5511+6 vv..71+<y)44=1+Bx44C1+H |V44I1+Nvu--y&11x00z955a1+1+1+ 1111x*354444*,++++@@@@F 6 6 6 6   *:R:R:R:RzDh/h/h/h/VJ/J/J/J/\$(0*,(&*$((,*****d====P$(J J J J J h'z'))????, , , , `$( z  #(!#'z z z z z z z*$(!<<<<<<<r,