)jP^UdZddlmZddlZddlZddlmZddlmZm Z m Z ddl m Z m Z mZmZmZddlmZddlmZmZmZmZmZejeZd Zejd ejZdudZ dvdZ!Gdde Z"ide"ddde"ddde"ddde"ddde"ddde"ddde"ddd e"dd d!e"dd!d"e"d#d"d$e"d$d%d&e"d'd&d(e"d)d(d*e"d*d*d+e"d+d+d,e"d-d,d.e"d/d.e"d0d1e"d2d3e"d4d5e"d6d7d8Z#d9e$d:<Gd;d<iZ'd=e$d?<dwd@Z(dxdBZ)eGdCdDZ*dydGZ+dzdKZ,d{dOZ- d|d}dVZ. d~ddYZ/ dddcZ0 dddjZ1ddl2Z3e3j4Z5ddlZ6 ddddmdPdnddsZ7 dddtZ8dS)uShared model-switching logic for CLI and gateway /model commands. Both the CLI (cli.py) and gateway (gateway/run.py) /model handlers share the same core pipeline: parse flags -> alias resolution -> provider resolution -> credential resolution -> normalize model name -> metadata lookup -> build result This module ties together the foundation layers: - ``agent.models_dev`` -- models.dev catalog, ModelInfo, ProviderInfo - ``hermes_cli.providers`` -- canonical provider identity + overlays - ``hermes_cli.model_normalize`` -- per-provider name formatting Provider switching uses the ``--provider`` flag exclusively. No colon-based ``provider:model`` syntax — colons are reserved for OpenRouter variant suffixes (``:free``, ``:extended``, ``:fast``). ) annotationsN) dataclass)List NamedTupleOptional)custom_provider_slugdetermine_api_mode get_label is_aggregatorresolve_provider_full)normalize_model_for_provider)ModelCapabilities ModelInfoget_model_capabilitiesget_model_infolist_provider_modelszNous Research Hermes 3 & 4 models are NOT agentic and are not designed for use with Hermes Agent. They lack the tool-calling capabilities required for agent workflows. Consider using an agentic model instead (Claude, GPT, Gemini, DeepSeek, etc.).z&(?:^|[/:])hermes[-_ ]?[34](?:[-_.:]|$) model_namestrreturnboolcX|sdStt|S)zReturn True if *model_name* is a real Nous Hermes 3/4 chat model. Used to decide whether to surface the non-agentic warning at startup. Callers in :mod:`cli.py` and here should go through this single helper so the two sites don't drift. F)r_NOUS_HERMES_NON_AGENTIC_REsearchrs >/home/wildlama/.hermes/hermes-agent/hermes_cli/model_switch.pyis_nous_hermes_non_agenticrKs. u +22:>> ? ??c2t|rtSdS)zHReturn a warning string if *model_name* is a Nous Hermes 3/4 chat model.)r_HERMES_MODEL_WARNINGrs r_check_hermes_model_warningr!Ws!*--%$$ 2rc(eZdZUdZded<ded<dS) ModelIdentityz:Vendor slug and family prefix used for catalog resolution.rvendorfamilyN__name__ __module__ __qualname____doc____annotations__rrr#r#cs(DDKKKKKKKKrr#sonnet anthropicz claude-sonnetopusz claude-opushaikuz claude-haikuclaudegpt5openaizgpt-5gptcodexo3o4geminigoogledeepseekz deepseek-chatgrokzx-aillamaz meta-llamaqwenminimaxnemotronnvidiakimi moonshotaizz-aiglmstepfunstepxiaomimimozarcee-aitrinity)rCrErGrHzdict[str, ModelIdentity] MODEL_ALIASESc2eZdZUdZded<ded<ded<dS) DirectAliasz5Exact model mapping that bypasses catalog resolution.rmodelproviderbase_urlNr&r,rrrKrKs1??JJJMMMMMMMMrrKdict[str, DirectAlias]_BUILTIN_DIRECT_ALIASESDIRECT_ALIASESctt} ddlm}|}|d}t |tr|D]\}}t |ts|dd}|dd}|dd}|r9t||| || <|di} t | tr | d } t | tr| dd} | D]\}} t | tr| s/| } | |vrZ| }d |vr| d d \}}n| }|}t||p| d || <n#t$rYnwxYw|S) aLoad direct aliases from config.yaml ``model_aliases:`` section. Config format:: model_aliases: qwen: model: "qwen3.5:397b" provider: custom base_url: "https://ollama.com/v1" minimax: model: "minimax-m2.7" provider: custom base_url: "https://ollama.com/v1" Also reads ``model.aliases`` (set by ``hermes config set model.aliases.xxx``) and converts simple string entries (``ds-flash: deepseek/deepseek-v4-flash``) into DirectAlias objects. The provider is parsed from the ``provider/`` prefix in the value; if no slash, the current provider is used. r) load_config model_aliasesrLrrMcustomrN)rLrMrNaliases/) dictrPhermes_cli.configrSget isinstanceitemsrKstriplowerrsplit Exception)mergedrScfg user_aliasesnameentryrLrMrN model_sectionsimple_aliasescurrent_providervaluekeyvals r_load_direct_aliasesrmsi() * *F* 111111kmmww// lD ) ) +1133   e!%.. '2.. 99Z:: 99Z443>#h444F4::<<--//0 ,, mT * * *..y99N.$// #0#4#4Z#D#D #1#7#7#9#9KD%%eS11!! **,,,,..Cf}} ++--Cczz*-))C*;*;%%#3 #"-#kkmm!)!1!1!E5E!####F3KK      MsH3I IINonecdts(ttdSdS)u5Lazy-load direct aliases on first use. Mutates the existing DIRECT_ALIASES dict in place rather than rebinding the module attribute. This keeps `from hermes_cli.model_switch import DIRECT_ALIASES` references valid in callers — rebinding would leave them pointing at a stale empty dict. N)rQupdatermr,rr_ensure_direct_aliasesrqs7 62445555566rceZdZUdZded<dZded<dZded<dZded <dZded <dZ ded <dZ ded <dZ ded <dZ ded<dZ ded<dZded<dZded<dZded<dZded<dS)ModelSwitchResultz!Result of a model switch attempt.rsuccessrr new_modeltarget_providerFprovider_changedapi_keyrNapi_mode error_messagewarning_messageprovider_labelresolved_via_aliasNzOptional[ModelCapabilities] capabilitiesOptional[ModelInfo] model_info is_global)r'r(r)r*r+rurvrwrxrNryrzr{r|r}r~rrr,rrrsrss++MMMIO"""""GHHMON     04L4444&*J****Irrsraw_argstuple[str, str, bool, bool]cxd}d}d}ddl}|dd|}d|vr*d}|dd}d |vr*d}|d d}|}d}g}|t |krf||d kr'|d zt |kr||d z}|d z }n ||||d z }|t |kfd |}||||fS)apParse --provider, --global, and --refresh flags from /model command args. Returns (model_input, explicit_provider, is_global, force_refresh). Examples:: "sonnet" -> ("sonnet", "", False, False) "sonnet --global" -> ("sonnet", "", True, False) "sonnet --provider anthropic" -> ("sonnet", "anthropic", False, False) "--provider my-ollama" -> ("", "my-ollama", False, False) "--refresh" -> ("", "", False, True) "sonnet --provider anthropic --global" -> ("sonnet", "anthropic", True, False) FrrNz3[\u2012\u2013\u2014\u2015](provider|global|refresh)z--\1z--globalTz --refreshz --providerrX )resubreplacer^r`lenappendjoin) rrexplicit_provider force_refresh_repartsifiltered model_inputs rparse_model_flagsrsdIMwwMwX`aaHX ##J3399;;h ##K44::<< NN  E AH c%jj.. 8| # #AE (:(: %a!e  FAA OOE!H % % % FA c%jj..((8$$**,,K *I} EErmodel_idprefixtuplec|t|d}|dr |dd}|d}g}d}d}d}|D]}|dkr0|dvrd}|rd}||z },|d vr1d }||z }9|dkr|r||z }Z|d krTd |vrJ |t |d n#t$rYnwxYwd}||z }|d vrO|rI |t |d n#t$rYnwxYwd}d }|rI |t |d n#t$rYnwxYwd}d }||z }[|d kr1|rd}|}{|dvrd}|d vrd }||z }|d kr||z }|rM|dkrG |t |d n#t$rYnwxYw| d }|}td |D} ddddd} | |d} | | |fzS)uSSort key for model version preference. Extracts version numbers after the family prefix and returns a sort key that prefers higher versions. Suffix tokens (``pro``, ``omni``, etc.) are used as tiebreakers, with common quality indicators ranked. Examples (with prefix ``"mimo"``):: mimo-v2.5-pro → (-2.5, 0, 'pro') # highest version wins mimo-v2.5 → (-2.5, 1, '') # no suffix = lower than pro mimo-v2-pro → (-2.0, 0, 'pro') mimo-v2-omni → (-2.0, 1, 'omni') mimo-v2-flash → (-2.0, 1, 'flash') NrWrX-rstartvV in_versionz-_. in_suffix.betweenc3K|]}| VdSNr,).0ns r z"_model_sort_key..s$))q))))))rr)promaxplusturbo) r startswithlstripr^isdigitrfloatrstrip ValueErrorr_rr[) rrrestnums suffix_bufstatenum_bufchsuffix version_key _SUFFIX_RANK suffix_ranks r_model_sort_keyrQs CKKLL !D sABBx ;;s   ! ! # #D DJ EG66 G  Tzz$ !$2 u#b l " "zz|| !2 s'>> E'..*=*=$>$>????% GGrMGGu! E'..*=*=$>$>????% G!! E'..*=*=$>$>????% G#b i  zz|| !$t$u#b k ! ! " J5L((  KKgnnS1122 3 3 3 3    D      % %e , ,F \\^^F))D)))))KQA>>L""61--K +v. ..sH 5D DD#5E E&%E&25F(( F54F55I II raw_inputriOptional[tuple[str, str, str]]c|}tt|}||j|j|fStD]3\}}|j|kr|j|j|fcS4t|}|dS|\}}t|} ddl m } | |g} | rz resolve_alias..s ///!AGGII///rrWcbg|]+}|)|,Sr,r_r)rmidrs r z!resolve_alias..sE   yy{{%%f--    rcbg|]+}|)|,Sr,r)rr family_lowers rrz!resolve_alias..sE   yy{{%%l33    rc$t|Sr)r)rprefix_for_sorts rzresolve_alias..sq/BBrrk)r^r_rqrQr[rMrLr]rIrhermes_cli.modelsrrrar sort)rrirkdirect alias_namedaidentityr$r%catalogrstaticseenr aggregatormatchesrrrs @@@r resolve_aliasrsz //   ! ! # #C    $ $F s33 )..0077 B 8>>  s " "K:6 6 6 6 #  %%HtNFF ##344G  666666!%%&6;;  &//w///D & &7799D((NN1%%%      /00J  %%V%%++--    "    ||~~     "    t/9D**&***fO LLBBBBLCCC gaj# ..s#AD>> E  E ruser_providersrYcustom_providers list | None list[str]cf t|||d}d|DS#t$rgcYSwxYw)uReturn slugs of providers that have credentials. Uses ``list_authenticated_providers()`` which is backed by the models.dev in-memory cache (1 hr TTL) — no extra network cost. r)rirr max_modelscg|] }|d S)slugr,)rps rrz4get_authenticated_provider_slugs..s---a& ---r)list_authenticated_providersra)rirr providerss r get_authenticated_provider_slugsr sa 0-)-    .-9----  s ! 00r,authenticated_providerscD|pd}|D]}t||}||cSdS)zTry to resolve an alias on the user's authenticated providers. Falls back to ``("openrouter", "nous")`` only when no authenticated providers are supplied (backwards compat for non-interactive callers). ) openrouternousN)r)rrrrMresults r_resolve_alias_fallbackrsF(A+AIy(33  MMM  4rrLrMrNrxrrconfig_context_length int | None Optional[int]c ddlm}|||pd|pd|pd||}|rt|Sn#t$rYnwxYw||jrt|jSdS)u Resolve the context length to show in /model output. models.dev reports per-vendor context (e.g. gpt-5.5 = 1.05M on openai) but provider-enforced limits can be lower (e.g. Codex OAuth caps the same slug at 272k). The authoritative source is ``agent.model_metadata.get_model_context_length`` which already knows about Codex OAuth, Copilot, Nous, and falls back to models.dev for the rest. When ``custom_providers`` is provided, per-model ``context_length`` overrides from ``custom_providers[].models..context_length`` are honored — this closes #15779 where ``/model`` switch ignored user-set overrides. Prefer the provider-aware value; fall back to ``model_info.context_window`` only if the resolver returns nothing. r)get_model_context_lengthrN)rNrxrMrr)agent.model_metadatarintracontext_window) rLrMrNrxrrrrctxs rresolve_display_context_lengthr0s4  AAAAAA&& ^Mr%-"7      s88O       *";:,--- 4s -1 >>F current_modelcurrent_base_urlcurrent_api_keyrrc LMddlm} m} m} m} ddlm} d}|M|}|rt|||}|[d|d} ddl m }|}|r|d z }|dd D]}|d |j z }n#t$rYnwxYwtd || S|j}ddlm}ddlm}|L|L}|r||krz|Lkrt||vrpt)|||}||vrZLfd|D}|rdd|dnd}td ||j|dLdt/|d|SMsr|jrGddlm}||j}|r|MnPtd ||j|d|jd|jd|Std ||j|d|jd|St5M|}||\}M}nMt5||}|%|\}M}t6d|M|nL|}|t:vr{t)|||} t=|| }!|!$|!\}M}t6d|M|nt:|}"td |d |d!|"jd"|"j d# S|!d$}#|#dkrd"|vrtE|rt|d|#}$||#d%zd}%|$r%|%r#|$d"|%Mt6d&|Md }&tE|r|stG|}'|'rwM}(|'D] })|)|(kr|)Md'}&nA!|'D]=})d"|)vr7|)$d"d%\}}*|*|(kr|)Md'}&n>|pd}+|d(vpd)|+vpd*|+v},||kr|,s|s|&s| M|}|r|\}M||k}-t/|}.|%d+rt|||}/|/|/j}.|}0|}1d}2|-s|rddl&}3d}4|rF|rDdd,lm'}5|5||}4|4 |5||}4|4|4jr|pi|p|pi|pi}6tQ|6d-dpd}7|7%d.rJ|7)d/r5|3j*|7d0d1d}7|7sftQ|6d2dpd}8|8r-|3j*|8d}7 | ||7pd|4jM3}9|9d-dp|7}0|9d4dp|4j}1|9d5d}2n#t$r|7}0|4j}1d}2YnwxYw | |M6}9|9d-d}0|9d4d}1|9d5d}2n#t$r$}:td ||.|d7|.d8|:cYd}:~:Sd}:~:wwxYw | |M6}9|9d-d}0|9d4d}1|9d5d}2n#t$rYnwxYw|r>tWtX|};|;|;jr |;j}1d}2|0sd9}0t[M|M | M||0|1|2pd:}sd }=|rr|.D]]\}>}?|>|krR|?d?i}@M|@vrd'}=n5t_|@t`rtcMfd@|@Drd'}=n^|=s|rt_|t`r|D]}At_|Atds|AdAd}B|Brd+|Bnd}C|Ad4d}D|C|ks|D|1krS|AdBd}E|Ad?i}FM|Ekrd'}=nt_|FtdrM|Fvrd'}=n|=rd'd'd |<dCdd=} fallback c. On aggregator, try vendor/model slug conversion d. Aggregator catalog search e. detect_provider_for_model() as last resort f. Resolve credentials g. Normalize model name for target provider Finally: h. Get full model metadata from models.dev i. Build result Args: raw_input: The model name (after flag parsing). current_provider: The currently active provider. current_model: The currently active model name. current_base_url: The currently active base URL. current_api_key: The currently active API key. is_global: Whether to persist the switch. explicit_provider: From --provider flag (empty = no explicit provider). user_providers: The ``providers:`` dict from config.yaml (for user endpoints). custom_providers: The ``custom_providers:`` list from config.yaml. Returns: ModelSwitchResult with all information the caller needs. r)copilot_model_api_modedetect_provider_for_modelvalidate_requested_modelopencode_model_api_mode)resolve_runtime_providerrNzUnknown provider 'z`'. Check 'hermes model' for available providers, or define it in config.yaml under 'providers:'.)validate_config_structureu1 Run 'hermes doctor' — config issues detected:u • F)rtrrz_AGGREGATOR_PROVIDERSALIASES)rirrcJg|]}|r|k| Sr,)r)rs_explicit_norms rrz switch_model..sB   ||N33 89^8K8K8K8K8Krz Did you mean: z, ?z Provider 'z"' is an alias that routes through z&, which has no credentials configured.)rtrvr|rrz)_auto_detect_local_modelzNo model detected on z (z@). Specify the model explicitly: /model --provider zN' has no base URL configured. Specify a model: /model --provider zAlias '%s' resolved to %s on %sz,Alias '%s' resolved via fallback to %s on %szAlias 'z ' maps to rWz] but no matching model was found in any provider catalog. Try specifying the full model name.:rXz3Converted vendor:model '%s' to aggregator slug '%s'T>localrU localhostz 127.0.0.1zcustom:)resolve_user_providerrxz${}rkey_env) requestedexplicit_api_keyexplicit_base_url target_modelrNry)rrz,Could not resolve credentials for provider 'z': zno-key-required)rxrNryzCould not validate `z`: )acceptedpersist recognizedmessagermodelsc3tK|]2}t|t|dkV3dS)reN)r\rYr[)rrrus rrzswitch_model..sDeeaQ[\]_cQdQdequuV}} 9eeeeeerrerLrz Invalid model)rtrurvr|rrzcorrected_model>github-copilotcopilot)rx>opencode opencode-go opencode-zenanthropic_messages>rrz/v1/?$z | ) rtrurvrwrxrNryr{r|r}r~rr):rrrrrhermes_cli.runtime_providerrr^r rZrrrarsidrhermes_cli.providersrr_r[rrrer rNrrloggerdebugrIrr$r%findr rr`rosr rendswithenvironrqrQr r]r\listanyrYr rrrrrr!)Nrrirrrrrrrrrrrrresolved_aliasrvpdef _switch_errr _cfg_issues_ci_AGG_PROVIDERS_PROVIDER_ALIAS_TABLE _alias_target_authed _suggestions_hintrdetected alias_result_rkauthedfallback_resultr colon_posleftrightresolved_in_current_catalogrnew_model_lowerrbare_base is_customrwr| custom_pdefrxrNryr% _user_pdef_ruser_ucfg_ukey_kenvruntimee_da validationoverriderrc cfg_modelsrf entry_name entry_slug entry_url entry_model entry_modelsmsgr~rwarnings hermes_warnrrusN @@r switch_modelrVas` EDDDDDN!!I&O L6$      <6%6666   GGGGGG7799 @#XXK*2A2@@#'?#+'?'??     $#)  ' NMMMMMIIIIII*002288::-11.AA  00>11>116!1-!1G g--    &    $,@dii &=&=@@@@)+)!$3#'9'A^AA#,_#=#=AA9>AA     } PPPPPP33DMBB  (II, %(7'+y"+pDIpppp\mpp    )!$3#'9'_TY__K\__    %Y@@  #+7 (Ay.%Y0@AA  #9E 6OY LL1 ?     //##))++Cm##9%5#1%5 #:)V"L"L".AP>OYLLF& ? -S1H, %"+CcCCX_CCxCCC &NN3// q==S %9%9mL\>]>]%9$ZiZ06688>>@@D%i!mnn5;;==E'+$5$5e$5$5  Q%y',#  ) ) &. &*?;;G &"+//"3"3" & &Cyy{{o55$' 6:36 '&&#::&)iiQ&7&7GAt#zz||>>,/ >B ; %!&B$(;; 5 8K5$8  / / / 0" 00 0 10RRJ!#VO^DD  !j&9 !#)r../@/F/F/H/H/N/N/P/PQQE"(b--o>>EBD  )R006B77==??E%% @%..*=*= @ uQrT{B77==?? >EIIi44:;;AACC>JNN5"55;;==E 22-%*]d&0&9!*  "++i44=";;z266M*:M";;z266   %.   22-!*"++i44";;z266";;z266   (!$3#1'3*33/033           ..*&Gkk)R00G{{:r22H{{:r22HH    D ,     00 ?s|?|HH ,+-YHHI --  %        ?i??A??     >>* % %/  "+1133 " " c?**!$2!6!6J J..#'!*d33"eeee:eeeee"'+H!E ,  > > x % % ?  ?6)R22*/9EEL ;;JH~~i  / 9-...-i88K% $$$ ')08@ 8,,,b%)!   so 1A<< B B A!Z&&Z>=Z>A\ ]\;5];]A^ ^! ^!5` `) `$$`)Optional['_threading.Thread']ctrdStdd}tj|dd}||S) uWarm the provider-models disk cache in a background daemon thread. The no-args ``/model`` picker calls ``list_authenticated_providers()``, which fetches each authenticated provider's live ``/v1/models`` list on a cold/stale cache. Those fetches are independent HTTP round-trips but run serially, so the first ``/model`` open in a session (or any open after the 1h cache TTL expires) blocks ~1-2s on the user's critical path. This pre-warms that exact path off-thread during idle session time: it runs ``list_authenticated_providers()`` once, which populates ``provider_models_cache.json`` for every authed provider. By the time the user types ``/model``, the picker hits the warm disk cache and renders in ~100ms. Fire-and-forget. Process-level Event guard ensures it runs at most once. Fully exception-isolated — a slow or offline provider can never affect the session. Returns the spawned thread (for tests) or None if already warmed. Nrrnc ddlm}|}t|j|j|j|j|jddS#t$r t ddYdSwxYw)Nr)load_picker_context2)rirrrrrzpicker cache prewarm failedT)exc_info) hermes_cli.inventoryrZrrirrrrrar"r#)rZrs r_warmz)prewarm_picker_cache_async.._warms G @ @ @ @ @ @%%''C )!$!5!$!5!/"1!$!5        G G G LL6L F F F F F F Gs>A&A,+A,Tzpicker-cache-prewarm)targetdaemonrerrn)_picker_prewarm_doneis_setset _threadingThreadr)r^ts rprewarm_picker_cache_asyncrhhss&""$$tGGGG( t:PQQQAGGIII Hr)force_fresh_nous_tierrrrjrr List[dict]c ,,tuvwxddlxddlm}m}m} ddlm} ddlm} m } m } m }m }m }g}t}t}ttd^d wd_twxfd }d`xfd vdavfd }|}t| }d| D|d<||d<d|vrddlm}||d<d|vrxjdsDxjds*dkrddlm}ddlm}dk}xjdp |r|r|ndpd} |xjdd|d}n #|$rg}YnwxYw|s|r|r|g}||d<ddlm}ddlm}|D]\} }!|| }"|"r |"| kr|"|vr(|!|vr-||!}#t7|#tsX| | }$|$r |$jd kr{|$r|$jrt=|$j}%n,|#d!g}%t7|%t<st?xfd"|%D}&|&sO dd#lm }'|'}(|(r+|(d$i| rd%}&n#tB$rYnwxYw|&s5|| })|)s&|| g})| | vr || |)})tE|)}*|)d|}+| },| |!}-|-r|-j#n|!}.|$|,|.|,kp|!kd&|+|*d'd(|%|,|%|!||, dd)lm&}/ddlm}0d*|D}1|/D]n\}2}3|2|vr|1|2|2}4|4|vrJd&}&|3jd+kr ||4}&n'|3j'r t?xfd,|3j'D}&|&sT|3jd krI|2|4fD]D}5|0|5}6|6r+|6jr$t?xfd-|6jDrd%}&nE|&sg dd#lm }'|'}(|(d.i}7|(r |2|7vs|4|7vrd%}&n3#tB$r&}8tP)d/|2|8Yd}8~8nd}8~8wwxYw|&s\ dd0l*m+}9|9|4}:|:,rd%}&n3#tB$r&}8tP)d1|4|8Yd}8~8nd}8~8wwxYw|&s|4d2kr dd3l-m.};m/}<|<}=|;}>|=r|=d4s|>r|>d4rd%}&n2#tB$r%}8tP)d5|8Yd}8~8nd}8~8wwxYw|&s3|4d6vr ||4})n|3jd+kr{ ||4}?|?r|?n+||4gp||2g})n;#tB$r0||4gp||2g})YnwxYw|4dkr|dg}) dd7lm0}@m1}Am2}Bm3}Cdd8lm4}D|@dpi}Ed}F |Ddpi}G|Gd9dpd}Fn#tB$rd}FYnwxYw|A|:r|B|)|E|F\})}Hn|C|)|E|F\})}HnY#tB$rYnMwxYw||4})|)s<||4gp||2g})|4| vr ||4|)})tE|)}*|)d|}+|$|4tk|4|4kp|2kd&|+|*d;d(|%|2|%|4||4p dd dd0l*m+}9|9|Jj8}O|O,rd%}Ln#tB$rYnwxYw|Ls'|Kr%ts|Kd>dd+kr||Jj8}L|Ls|Krqts|Kd>dd+kr\ ||Jj8}?|?r|?n||Jj8g}PnX#tB$r||Jj8g}PYn1wxYw||Jj8}P|Ps||Jj8g}PtE|P}Q|Pd|}R|$|Jj8|Jj:|Jj8kd&|R|Qd?d(|%|Jj8||Jj8?t}S|rt7|tr|D]\}T}Ut7|Uts|T|vr3|Ud@dp|T}.|UdAdp-|UdBdp|Uddpd}V|UdCdp|UdDd}Wg}X|Wr|X$|W|UdEg}Yt7|Ytr!|YD]}Z|Zr|Z|Xvr|X$|Zn5t7|Yt<r |YD]}Z|Zr|Z|Xvr|X$|Z|Xs_tw|V}[dF|[vr(|dGpg}\|\rt=|\}Xtw|Ud dpd}]|]shtw|UdHdpd}^|^r-xj|^dnd}]|UdId%}_t7|_tvr|_dJv}_|Vr,|]r*|_r( ddKlm<}`|`|]|V}a|ar|a}Xn#tB$rYnwxYw|$|T|.|Tkd%|X|XrtE|XnddL|VdM|%|T|%t{|.tw|.tw|V>dNf}b|bdr|bdOr|S%|b|rt7|t<rddPl?m@}c|c}d|D]}et7|ets|ed@pd}f|edAdp-|eddp|edBdpd>dN}V|fr|Vs|ed pd}g|edHpd}^|gp0|^r-xj|^dnd}]tw|edQp|edRpd}h|gr|gn|^rdS|^nd}i|edId%}_t7|_tvr|_dJv}_|V|i|hf}j|j|dvrZ|f}.dTD]5}k|k|.vr/|.A|kd}.n6|.s|f}.t{|.},|,|.|V|]g|_dU|d|j<n5|]r&|d|jd s |]|d|jd <|_s d&|d|jdI<|edDpd}W|Wr1|W|d|jdEvr!|d|jdE$|W|edEi}Yt7|Ytr:|YD]5}Z|Zr1|Z|d|jdEvr!|d|jdE$|Z69t7|Yt<r8|YD]5}Z|Zr1|Z|d|jdEvr!|d|jdE$|Z6t}ltw|pd>dNutufdV|dCD}m|dCD]}n|ndW}V|nd d}]|nd },|,|vr|,|lvrV|,|lvrK|,}odX}p|odY|p|vr |pdOz }p|odY|p|v |odY|p},|,|nd <tw|nd@tw|ndW>dNf}q|qdr|qdOr|q|SvrR|qdO}r|rr|rtvrbt|Vo-t|]p|ndE o|ndId%}s|sr= ddKlm<}`|`|]|V}a|ar|a|ndE<tE|a|ndZ<n#tB$rYnwxYw|$|,|nd@|,kp d[kotuo |ruko|mdOkd%|ndEtE|ndEdL|ndWdM|%|,|l%|,|Ed\]|S)buDetect which providers have credentials and list their curated models. Uses the curated model lists from hermes_cli/models.py (OPENROUTER_MODELS, _PROVIDER_MODELS) — NOT the full models.dev catalog. These are hand-picked agentic models that work well as agent backends. Returns a list of dicts, each with: - slug: str — the --provider value to use - name: str — display name - is_current: bool - is_user_defined: bool - models: list[str] — curated model IDs (up to max_models) - total_models: int — total curated count - source: str — "built-in", "models.dev", "user-config" Only includes providers that have API keys set or are user-defined endpoints. ``force_fresh_nous_tier`` bypasses the short Nous tier cache for explicit account-sensitive flows. UI picker opens should leave it false so they do not block on fresh Portal/account checks every time. rN)PROVIDER_TO_MODELS_DEVfetch_models_devget_provider_infoPROVIDER_REGISTRY)OPENROUTER_MODELSr_MODELS_DEV_PREFERRED_merge_with_models_devcached_provider_model_idsget_curated_nous_model_idsurlrrct|pddS)NrrWrr^rr_)rws r _norm_urlz/list_authenticated_providers.._norm_urls839"~~##%%,,S1177999rrrncH ddlm}n#t$rYdSwxYw||}|sdSd}t |ddr"j|jdpd}|st |ddpd}|}|r|dSdS)a Record the effective base URL for a built-in provider row. Prefers the live env-override (e.g. DASHSCOPE_BASE_URL) over the static inference_base_url so the dedup matches what a user typing that URL into custom_providers would actually hit.rrpNrbase_url_env_varinference_base_url)hermes_cli.authrqrar[getattrr'r|add)r_regpcfgrwnormed_builtin_endpointsrzr%s r_record_builtin_endpointz>list_authenticated_providers.._record_builtin_endpoints   A A A A A A A    FF xx~~  F 4+R 0 0 B*..!6;;ArC @$ 4b99?RC3  +  " "6 * * * * * + +s  rcPjddrdSjddr/jddrdStfddDS)aTReturn True when explicit AWS auth config is present. This intentionally avoids botocore's full credential chain. Provider picker/model-switch discovery can run for non-Bedrock providers, and botocore may otherwise probe EC2 IMDS (169.254.169.254) on local machines before returning no credentials. AWS_BEARER_TOKEN_BEDROCKrTAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYc3rK|]1}j|dV2dS)rN)r'r[r^)rrer%s rrzQlist_authenticated_providers.._has_fast_aws_sdk_signal..sS   JNN4 $ $ * * , ,      r) AWS_PROFILE&AWS_CONTAINER_CREDENTIALS_RELATIVE_URI"AWS_CONTAINER_CREDENTIALS_FULL_URIAWS_WEB_IDENTITY_TOKEN_FILE)r'r[r^r))r%sr_has_fast_aws_sdk_signalz>list_authenticated_providers.._has_fast_aws_sdk_signals :>>4b 9 9 ? ? A A 4 JNN. 3 3 9 9 ; ;  6;;AACC 4          rc^t|pd}tpd}rdS||krdS ddlm}t |S#t $rYdSwxYw)z@Credential check for AWS SDK providers in non-runtime discovery.rTFr)has_aws_credentials)rr^r_agent.bedrock_adapterrrra)r slug_norm current_normrrris r_has_aws_sdk_creds_for_listingzDlist_authenticated_providers.._has_aws_sdk_creds_for_listings OO))++1133 +1r2288::@@BB # # % % 4  $ $5  A A A A A A++--.. .   55 sB B,+B,cg|]\}}|Sr,r,rrr7s rrz0list_authenticated_providers..sAAAVS!SAAArrrz ollama-cloud)fetch_ollama_cloud_modelslmstudio LM_API_KEY LM_BASE_URL)fetch_lmstudio_models) AuthErrorzhttp://127.0.0.1:1234/v1rg?)rxrNtimeoutrrrxenvc3LK|]}j|VdSrr'r[revr%s rrz/list_authenticated_providers..es1>>r r**>>>>>>r)_load_auth_storecredential_poolTFzbuilt-in)rre is_currentis_user_definedr total_modelssource)HERMES_OVERLAYSci|]\}}|| Sr,r,)rkvs r z0list_authenticated_providers..sGGG1q!GGGraws_sdkc3LK|]}j|VdSrrrs rrz/list_authenticated_providers..s1PP2BJNN2..PPPPPPrc3LK|]}j|VdSrrrs rrz/list_authenticated_providers..s1NN"2:>>"--NNNNNNrrz"Auth store check failed for %s: %s) load_poolz'Credential pool check failed for %s: %sr.)read_claude_code_credentialsread_hermes_oauth_credentials accessTokenz)Anthropic external creds check failed: %s> copilot-acp openai-codexr)get_pricing_for_providercheck_nous_free_tier&union_with_portal_free_recommendations&union_with_portal_paid_recommendations)get_provider_auth_stateportal_base_url) force_freshhermes)CANONICAL_PROVIDERSc3LK|]}j|VdSrrrs rrz/list_authenticated_providers..>s1YYr r 2 2YYYYYYr auth_type canonicalrerNapi default_modelrLrzapi.openai.comr3r discover_models>0nofalse)fetch_api_modelsz user-config)rrerrrrrapi_urlrWrX) OrderedDictry transportzenv:)u—z - )rrerrxrrc3K|]X}rTt|ddkTdVYdS)rrWrXNry)r_grp_current_base_url_norms rrz/list_authenticated_providers..@sz, , %, DO$$**,,33C88>>@@DZZZ [ZZZ , , rrrrrrUc&|d |d fS)Nrrr,)rs rrz.list_authenticated_providers..sAlO 3a6G5GHrr)rwrrr)rrrrn)rr)rrrr)Fr%agent.models_devrmrnror~rqrrrrrsrtrurvrdrYrr'r[r^r_rrrr!rr]r\rapi_key_env_varsr(r)rrarrerrrextra_env_varsr"r#agent.credential_poolrhas_credentialsagent.anthropic_adapterrrrrrrrr r ImportErrorrrlabelrrrr collectionsrr`sumvaluesrr)yrirrrrjrrrmrn _mdev_pinforqrrrrsrtrurvresults seen_slugs seen_mdev_idsrrdatacuratedrrris_current_lmstudiolm_baseliver/r0 hermes_idmdev_idr1pdatapconfigenv_vars has_credsrstore model_idstotaltoprpinfo display_namer_auth_registry_mdev_to_hermespidoverlay hermes_slug_keyrproviders_storeexcrpoolrr hermes_credscc_creds_ids _nous_pricing _nous_free _union_free _union_paid _nous_state_pricing_portal_str7 _canon_provs_cp _cp_config _cp_has_creds _cp_store_cp_providers_store_cp_pool _cp_model_ids _cp_total_cp_top_section3_emitted_pairsep_nameep_cfgrr models_listrMr url_lowerfbrxr discoverr live_models_pairrgroupsrfraw_nameinline_api_keyrycredential_identity group_keysep_section4_emitted_slugs_current_base_url_group_countgrp base_slugr _pair_key _grp_url_norm should_proberrrrzr%sy` @@@@@rrrs<III 211111 GeeJM "ee::::++++++++,      2           D%))9$:$:GAA/@AAAGL 1022GFOW$$??????";";"="=   |$$!(* }(E(E!IYI_I_IaIaIgIgIiIimwIwIw;;;;;;------.4466<<>>*L JNN= ) ) *$7V>>>X>>>>>   <<<<<<((**%UYY'8"==AA)LL% $I       .-i88  I Ir22I111229iHH I  $ G$$%*7uzz  "22QgAQ6Q$!       tzz||$$$'"""  &&&&544444CCCCCC HG(>(D(D(F(FGGGO'--//T.T. W 99;;* $ $ &))#s33     * , ,    ) )66{CCII  # QPPPP9OPPPPPI W.);;k*  %))$//D1NNNN8MNNNNN$(   M M<<<<<<((**"'))K"<"<%c_44 8V8V $I M M M A3LLLLLLLL M  Z Z;;;;;; y--''))% $I Z Z Z F UXYYYYYYYY Z O[K77 O =<>> 7799 %\%5%5m%D%D%%!)m!>II ) + + Q00==$(dDDw{{;/K/K/cw{{[^`bOcOc  Q Q Q#KK R88PGKKR>I O#KK R88PGKKR>  z ) ) $''11   Z*5 ZYYYYZ=XYYYYYM  <<<<<<,,.. &/mmK&D&D#)-@!@!@$(M      ;;;;;;$9SX..++--)$(M      E E KQS0T0TXa0a0a::38DDM    :'*k2>>)KK :00::(, K'++ch2K2K  : : : ' CHb 9 9  :65ch??M  : ' CHb 9 9  &&   ,HI(&66$%!      sx~~''(((  ****$'55V3*^T::V3-3355U 3U 3OGVfd++ }}*,,!::fb11>DDFFAHP"*.."55;;===bzz"3T::H(C(( H#>>++3GG 7 x BBBBBB"2"27G"D"DK"2&1  D NN$%)99#'%4? FK 0 0 0Q'"      NN7==?? + + + NN/ ==CCEE F F FL!!''))//11G ""$$++C006688EQx 3E!H 3'++E222F6J'7>>F6++++++.9[]]%S >S >EeT**  &))/R6688H *b))99UB''99UB''eggffSkk   7 #ii 228b??AANyy++1r88::G$7>F w++11333B  *%%99[))eggeegg ";*19&W&&&r yy!2D99H(C(( H#>>++3GG "5x@I&& ( )Cl**'3'9'9#'>'>q'A'G'G'I'I +$,#+L+L99 (&& '/ %%y!!;6)#4#8#8#C#C;3:F9%i0 A;@F9%&78#YYw//52<<>>M BfY6G6Q!Q!Qy!(+22=AAA8R00J*d++ >#>>A>QfY&7&AAAy)(3::1===>J-- >#>>A>QfY&7&AAAy)(3::1==='*uu!$%5%;!>FA#((Q((..00J>>#))a))"F CK  &&((..00C N##))++22377==??I|  !  >U1U1U&aLM 2D!D!D6W 5']]7#h-&75GG-t44   BBBBBB"2"27G"D"DK"?(3H .1+.>.>N+ D NNF "&66$0;344;%)??;6:#'h- #CM 2 2'y>    NN4::<< ( ( ( # ' ' 5 5 5 5 LLHHLIII Ns'9'F!!F+*F+?=K== L  L 2T99 U)U$$U)/'V W!WWA X  Y*Y  Y3;Z006[*)[* !^,%]^ ]!^ ]!!0^ ^^b b*)b*3e  ee,f  ff/h%h76h7w w,+w,T +AT5T5 AUUAUcddlm}t||||||}g}|D]8} t| dd} | dkry |} d| D} n3#t $r&t| dg} YnwxYwt| } | d || d<t| | d <t| d} t| d o!t| d }| s|s#| | :|S) aInteractive-picker variant of :func:`list_authenticated_providers`. Post-processes the base list so the ``/model`` picker (Telegram/Discord inline keyboards) only surfaces models that are actually callable in the current install: - OpenRouter's model list is replaced with the output of :func:`hermes_cli.models.fetch_openrouter_models`, which filters the curated ``OPENROUTER_MODELS`` snapshot against the live OpenRouter catalog. IDs the live catalog no longer carries drop out, so the picker never offers a model the user can't call. - Provider rows whose model list ends up empty are dropped, except custom endpoints (``is_user_defined=True`` with an ``api_url``) where the user may supply their own model set through config. All other providers and metadata fields are passed through unchanged. The typed ``/model `` path is unaffected -- only the interactive picker payload is narrowed. r)fetch_openrouter_models)rirrrrrrrrcg|]\}}|Sr,r,rs rrz)list_picker_providers..s333FCC333rrNrrr) rr(rrr[r_rar(rYrrr)rirrrrrr(rrrrrlive_ids has_modelsis_custom_endpoints rlist_picker_providersr-s6:99999,))%)# IH 155$$%%++-- <   5..0033d333 5 5 5h 3 344 5QA";J;/AhK #H An !%%//** !!%%(9":":;;VQUU9EUEU@V@V "4   OsA66-B&%B&)rrrr)rrrr)rrOra)rrrr)rrrrrr)rrrirrr)rNN)rirrrYrrrr)r,)rrrrrr)rrNNN)rLrrMrrNrrxrrrrrrrrr)rrFrNN)rrrirrrrrrrrrrrrrYrrrrs)rrW)rrNN)rirrrrrYrrrjrrrrrrrk)rrNNrir)rirrrrrYrrrrrrrrk)9r* __future__rloggingr dataclassesrtypingrrrr!rr r r r hermes_cli.model_normalizer rrrrrr getLoggerr'r"r compile IGNORECASErrr!r#rIr+rKrPrQrmrqrsrrrrrrrV threadingreEventrbrhrr-r,rrr8s(#""""" !!!!!!----------  8 $ $- )bj-M @ @ @ @J 1+ {O<<1+ {M::1+ {N;; 1+  {H55 1+ x111+ x//1+ x111+ x..1+ x..1+ x221+$z?;;%1+* vv..+1+0 |W5511+6 vv..71+<y)44=1+Bx44C1+H |V44I1+Nvu--y&11x00z955a1+1+1+ 1111x*354444*,++++@@@@F 6 6 6 6   *.F.F.F.Fjh/h/h/h/VJ/J/J/J/\$(0*,(&*$((,*****j$(xxxxxD'z'))- - - - b$( S  #(S S S S S S n$( 9999999r