sj>dZddlmZddlmZddlZddlZddlZddlZ ddl m Z ddl m Z dZd5d Zd6dZd7dZddd8dZd9dZd:dZd;dZd:dZd:d ZduwPer-provider model-selection wizard flows for ``hermes setup`` / ``hermes model``. Extracted from ``hermes_cli/main.py`` as part of the god-file decomposition campaign (``~/.hermes/plans/god-file-decomposition.md``, Phase 2 — splitting main.py handler/flow bodies out of the module). These 18 ``_model_flow_*`` functions are the interactive provider-setup branches dispatched by ``select_provider_and_model`` (which stays in main.py). Behavior-neutral: each function is lifted verbatim. ``select_provider_and_model`` in main.py re-imports them (``from hermes_cli.model_setup_flows import *``-style explicit import) so existing call sites — and test monkeypatches that target ``hermes_cli.main._model_flow_*`` — keep resolving against main.py's namespace. main.py-internal helpers the flows call (``_prompt_api_key``, ``_save_custom_provider``, the reasoning-effort/stepfun/qwen helpers, ``_run_anthropic_oauth_flow``, …) are imported lazily inside the flows (``from hermes_cli.main import ...`` resolves at call time, when main.py is fully loaded) so this module never imports ``hermes_cli.main`` at import time -> no import cycle. ) annotations) line_inputN) clear_model_endpoint_credentials)custom_provider_slug) us.eu.ap.apac.jp.ca.sa.me.af. region_namestrreturnct|pd}dD]\}}||r|cSdS)zJMap an AWS region name to its inference-profile geo prefix ('' = unknown).))r)zus-us_gov)r)zeu-)r )zap-)r )zca-)r )zsa-)r)zme-)r)zaf-)lower startswith)rrgeoregion_prefixess @/home/agent/.hermes/hermes-agent/hermes_cli/model_setup_flows.pybedrock_region_geo_prefixr,sW  !!##A!  _ << ( ( JJJ  2model_idboolc|pdtfdtDd}|drdSt |}|sdS|dkr|dvS||kS)a-True when *model_id* can be invoked from *region_name*'s endpoint. Bare foundation-model ids and ``global.*`` profiles route from anywhere. Geo-prefixed inference profiles (``us.*``, ``eu.*``, ...) only route from endpoints in their own geography. Unknown region shapes hide nothing. rc3FK|]}||VdSNr.0pmids r z5bedrock_model_routable_from_region..Es4MMa3>>!;L;LMMMMMMMrNglobal.Tr )r r r )rnextBEDROCK_GEO_PREFIXESrr)rr matched_georr's @r"bedrock_model_routable_from_regionr-=s >r " "CMMMM#7MMMtTTKcnnY77t #K 0 0C t e||555 # r provider_idtuple[str, str]c&ddlm}|||S)zCResolve an existing wizard credential without changing its storage.r) _resolve_api_key_provider_secret)hermes_cli.authr1)r.pconfigr1s r _existing_api_key_for_model_flowr4Qs'@@@@@@ + +K A AArr provider_namebase_urlr6Nonec ddlm}m}ddlm}m}|||pd}|sdS|d}t |tsdS|D]\}} t |tr0| |r||kst | tsKg} g} d} | D]} t | trU| ddkr> ..!'400/HKG  ' 'eT**uyy/B/Bn/T/T"G$yyH:#**3x==999&&&& S%%hkRRRR) S S* s!E EC:E EEtitlec gd} ddlm}|||d}|dkrtd|Sn#t$rYnwxYwt|t |dD]'\}}|dkrdnd}td|d|d |(t t d }n#ttf$rd }YnwxYw|d krd S|dkrdSdS)zPrompt for reuse / reauthenticate / cancel with the standard radio UI. Returns one of ``"use"``, ``"reauth"``, ``"cancel"``. Falls back to a numbered prompt when curses is unavailable (piped stdin, non-TTY). )zUse existing credentialsz Reauthenticate (new OAuth login)Cancelr_curses_prompt_choice)usereauthcancel→  .  Choice [1/2/3]: 12rY3rZrX) hermes_cli.setuprWprintrI enumerateinputstripKeyboardInterruptEOFError)rSchoicesrWidxilabelmarkerchoices r_prompt_auth_credentials_choicerqs] G  ::::::##E7A66 !88 GGG.s3 3        %LLLgq))**5q&&c (6((A(((()))) GGG+,,2244 x (}}x }}x 5s!.6 AA!B>>CCcddlm}ddlm}ddlm}m}m}m}|dddd }td|\} } | std t||| d| \} } | rd Sdd l m } m }| d}|dd}||||d|| p| }|r||ddlm}m}|}|d}t%|t&s |rd|ini}||d<d|d<||d<d|d<t)|d|||td|dd Stdd S)z5OpenRouter provider: ensure API key, then pick model.r_prompt_api_key)OPENROUTER_BASE_URL)ProviderConfig_prompt_model_selection_save_model_choicedeactivate_provider openrouter OpenRouterapi_key)OPENROUTER_API_KEYr@name auth_typeapi_key_env_varsz&Get one at: https://openrouter.ai/keysr.existing_sourceN) model_idsget_pricing_for_providerT force_refresh current_modelpricingconfirm_providerconfirm_base_urlconfirm_api_key load_config save_configmodeldefaultproviderr7chat_completionsapi_modeFclear_api_modeDefault model set to: z (via OpenRouter) No change.)hermes_cli.mainrthermes_constantsrur2rvrwrxryr4rehermes_cli.modelsrrhermes_cli.configrrrGrCrDr)configrrtrurvrwrxryr3 existing_keyr _resolvedabortrropenrouter_modelsrselectedrrcfgrs r_model_flow_openrouterrsh//////444444n  0 G %E\SZ$[$[!L/  6777 & ' Iu  EEEEEEEE! 555'&|4HHHG&&#%,!1\ H8$$$ ?>>>>>>>kmm  %&& !*/7Y&&RE CL(j/j.j(uEEEE C BxBBBCCCCC lrrpresetrDc td|tdt|dpgdD]C\}}td|d|dd |d D|d pi}td |dd |d d S)zDPrint the full reference-models + aggregator breakdown for a preset.z Preset: z Reference models:reference_modelsr[start r_r:r aggregatorz Aggregator: N)rerfrG)rrrlslotaggs r_print_moa_presetrs t      vzz*<==C1MMMHH T FSFFDHHZ00FF488G3D3DFFGGGG **\ " " (bC DCGGJ// D D#'''2B2B D DEEEEErcddlm}ddlm}ddlm}m}m}m}ddl m }|d} |dpd} | s,td td t|| | d \} } | rd Sdd l m } m}| d}|dd}||||}|r||ddl m}m}|}|d}t%|t&s |rd|ini}||d<d|d<||d<d|d<|||td|dd Stdd S)zIVercel AI Gateway provider: ensure API key, then pick model with pricing.r)AI_GATEWAY_BASE_URLrsPROVIDER_REGISTRYrwrxry) get_env_valuez ai-gatewayAI_GATEWAY_API_KEYrz^Create API key here: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai-gateway&title=AI+Gatewayz/Add a payment method to get $5 in free credits.)r.N)ai_gateway_model_idsrTr)rrrrrrr7rrrz (via Vercel AI Gateway)r)rrrrtr2rrwrxryrrrerrrrrrGrCrD)rrrrtrrwrxryrr3rrrrr models_listrrrrrrs r_model_flow_ai_gatewayrsC444444////// 0///// -G =!566<"L  l    ?@@@ &w ,WWWIu PPPPPPPP&&T:::K&&|4HHHG&&='H8$$$>>>>>>>>kmm  %&& !*/7Y&&RE CL(j/j.j C IxIIIJJJJJ lrc 2ddlm}m}ddlm}m}ddlm}|t|tr| dni}| dpi}|stddSt| } | d p| d} g} | D]} ||  d pi} | r-| d d | d nd}t||  dpg}| | krdnd}| | d|d|d|| | vr| | nd} ddlm}|d| |}n#t&$rtdt)| dD]*\}}|dz |krdnd}td|d|d|+ t+dt| d}n(#t.t0f$rtdYYdSwxYw|s|}na t3dt5t| dz t7|dz }n!#t8$rtdYYdSwxYwYnwxYw||dkrtddS| |}||}|}| d }t|ts |rd|ini}||d <||d<d|d <t;|d |d!d|||||ttd"|d#t?||dS)$uMixture of Agents virtual provider: pick a preset, then persist it. Unlike the other provider flows there is no credential step — MoA is a virtual provider whose presets reference already-configured providers. We always show the preset list (even when there is only one) so the user sees what they are selecting, then print the full preset breakdown on selection. rrxryr)normalize_moa_configmoapresetszCNo MoA presets configured. Run `hermes moa configure ` first.Ndefault_presetrrrrrru ← defaultz (agg , z refs)rVz"Select a Mixture of Agents preset:r[r\r]r^r_z Choice [1-]: rrTrr7rz (via Mixture of Agents)) r2rxryrrrhermes_cli.moa_configrrCrDrGrerFkeyslenrHindexrdrWrIrfrgrhrirjmaxminint ValueErrorrpopr)rrrxryrrrrrnames default_namerowsnr agg_label ref_countsuffix default_idxrWrlrmrowroraw selected_namerrrs r_model_flow_moar:sHGGGGGGG::::::::::::::  Jvt4L4LTvzz%000RT U UCggi  &BG  STTT  E77+,,8aL D IIqz~~l++1rCFNswwz**??SWWW-=-=???B  '9::@bAA $%$5$52 qGGGGiGGvGGHHHH/;u/D/D%++l+++!K::::::##$H$P[\\  2333a(( , ,FAs 1u44UU#F *v****S** + + + + 5s4yy55566<<>>CC!8,    ,    FFF  CC !STQC1 ==>>   l### & {cAgg l#JM ] #F +--C GGG  E eT " "&+3E""G $E)E* %U4@@@@ IIj$K}%%% GGG J= J J JKKKmV,,,,,s[9FAJ($2HJ( H<7J(;H<<J(>JJ(J"J(!J""J('J(c ddlm}m}m}m}m}m}m} m} m } ddl m } m } m }m}ddlm}|d}|r|dsQt%dt% t'jt+|dd t+|d d t+|d d t+|d d t-t+|d dt+|dd pdt+|dd t-t+|dd}| || d | pi}||n#t.$rYnwxYwnE#t0$rt%dYd St.$r}t%d|Yd }~d Sd }~wwxYwd Sddlm}m}m}m}m}m}|}|st%dd S |}n#t.$r}tA||o|j!}tA||r | |ntE|}|rt%d|t%d t'jd d d d ddd d}| || dn)#t.$r}t%d|Yd }~nd }~wwxYwYd }~d St%d|Yd }~d Sd }~wwxYw|d} |d}!|!s" |d}"|"r|"}n#t.$rYnwxYwd}# |d}$|$r|$d d}#n#t.$rYnwxYwg}%d}&|!rY dd!l#m$}'m%}(|(d})|'|)d"#pd}&n#t.$rd}&YnwxYw||| |#\}} ||| d$\}}%n||| |#\}} |s|%st%d%d S|!rG|sEt%d&|%r2dd'lm&}*|#p|*'d(}+t%|&pd)|+d*d St%d+tQ|d,|||| |%|#|&d|d-d|d.d/ },|,rd||,|d-d}-|d|-| }|d0}.tA|.tRrtS|.}/nBtA|.tDr+|.*rd1|.*i}/ni}/d|/d2<|,|/d1<|-r-|-*r|-'d(|/d-<n|/+d-d tY|/|/|d0<| d3r|d3d|d4d||t%d5|,d6||d St%d7d S)8z8Nous Portal provider: ensure logged in, then pick model.r) get_provider_auth_staterwrx_update_config_for_provider resolve_nous_runtime_credentials AuthErrorformat_auth_error _login_nousr)rrrsave_env_value)prompt_enable_tool_gatewaynous access_tokenz.Not logged into Nous Portal. Starting login... portal_urlN inference_url client_idscope no_browserFtimeout.@ ca_bundleinsecure)rrrrrrrrLogin cancelled or failed.Login failed: )get_curated_nous_model_idsrcheck_nous_free_tierpartition_nous_models_by_tier&union_with_portal_free_recommendations&union_with_portal_paid_recommendationsz,No curated models available for Nous Portal.zSession expired: z&Re-authenticating with Nous Portal... zRe-login failed: zCould not verify credentials: T) force_freshrrportal_base_url)&format_nous_portal_entitlement_messageget_nous_portal_account_infozpaid Nous models) capability) free_tierz4No models available for Nous Portal after filtering.z#No free models currently available.)DEFAULT_NOUS_PORTAL_URL/z Upgrade at z to access paid models.zShowing = curated models — use "Enter custom model name" for others.r7r|)rrunavailable_modelsrunavailable_messagerrrrrrOPENAI_BASE_URLOPENAI_API_KEYrz (via Nous Portal)r)-r2rrwrxrrrrrrrrrrrhermes_cli.nous_subscriptionrrGreargparse NamespacegetattrrrI SystemExitrrrrrrrrCrelogin_requiredrhermes_cli.nous_accountrrrrstriprrDrhrr)0rrargsrrwrxrrrrrrrrrrrstate mock_args _refreshedexcrrrrrrrcredsreloginmsg login_excrrrefreshed_creds_nous_portal_url _nous_staterrrr _account_infor_urlrrcurrent_model_cfg model_cfgs0 r_model_flow_nousrs=                        HGGGGG # #F + +E  .11 >???   *"4t<<%dOTBB!$ T::dGT22lE B BCCi66>$!$ T::gdJ>>??   I K #4V#< = = = ([]]0b **:6666        . / / / FF    (3(( ) ) ) FFFFF   +*,,I  <===0022 S),,E1E(23 (B(BP$$$C   +c++ , , , ; < < < 7$.#"&"$ ""     I'8'@AAAA 7 7 75)5566666666 7 FFFFF 4s44555-2'&v..G%$666I   >>"O ('    D  --f55  F*/@"EE       %'  %         98TJJJM66!1  % % %"$    %CC w 0   7)F(E w$) ) ) % %%DC w 0   7 / DEEE 3444  V ? ? ? ? ? ?$?(?GGLLD %T)Tt)T)T)T U U U `3y>>```'&#-#/:r22 )R00   H 8$$$ *b11 ##FM:::"JJw// ' . . .//II )3 / / 4E4K4K4M4M "$5$;$;$=$=>III & *' )  ,]0022 ,$1$8$8$=$=Ij ! ! MM*d + + +(333#w =* + + 1 N,b 1 1 1 N+R 0 0 0 F CxCCCDDD""6***** ls*CE-EE EEEEF2 F;FF G K A$J;.I43J;4 J>JJ;JJ;#J;;KK.. K;:K;#L%% L21L2<#M M/.M/c,ddlm}m}m}m}m}m}m}ddlm } |} | drtdttd} | dkrtdt tj} || |d d nE#t$rtd Yd St $r} td| Yd } ~ d Sd } ~ wwxYw|} | dstdd Sn| dkrd Sntdt tj} || |d nE#t$rtd Yd St $r} td| Yd } ~ d Sd } ~ wwxYwd } |}| dr| d}n#t $rYnwxYw|s7 ddlm}|}| d}n#t $rYnwxYw| |}|||d ||pd}|r,|||d |td|dd Stdd S)z9OpenAI Codex provider: ensure logged in, then pick model.r)get_codex_auth_statusrwrxr_login_openai_codexrDEFAULT_CODEX_BASE_URL)get_codex_model_ids logged_inu OpenAI Codex credentials: ✓zOpenAI Codex credentials:rYz&Starting a fresh OpenAI Codex login...z openai-codexTforce_new_loginrNrz Login failed.rZz/Not logged into OpenAI Codex. Starting login...r|)!resolve_codex_runtime_credentials)rrrrrrrz (via OpenAI Codex)r)r2rrwrxrrrrhermes_cli.codex_modelsrrGrerqrrrrIr )rrrrwrxrrrrrstatusrpr r  _codex_token _codex_statusr  _codex_creds codex_modelsrs r_model_flow_openai_codexr(ps<;;;;; " " $ $F zz+& /000 01LMM X   : ; ; ; GGG $.00 ##%n5$(    2333   ,s,,--- +*,,F::k** o&&& x   F  ?@@@   *,,I   +<^+L M M M M    . / / / FF    (3(( ) ) ) FFFFF L --//   [ ) ) 8(,,Y77L        I I I I I I<<>>L'++I66LL    D '&LAAAL&&#'/$* H8$$$##N4JKKK DxDDDEEEEE ls`'B00C2 C2C--C2 %E33F5 F5F00F5;4G00 G=<G=%H)) H65H6)rc Jddlm}m}m}m}m}m}m} m} ddl m } |} | drtdttd} | dkrtdt tjt!t#|d d t#|d d  }||| ddn#t$$rtdYd St&$r}td|Yd }~d Sd }~wwxYw| dkrd Sntdt tjt!t#|d d t#|d d  }||| dnE#t$$rtdYd St&$r}td|Yd }~d Sd }~wwxYw| } |}| dpddp|}n#t&$rYnwxYw| d}|||p |r|dnd}|r,|||d|td|dd Stdd S)zRxAI Grok OAuth (SuperGrok / Premium+) provider: ensure logged in, then pick model.r)get_xai_oauth_auth_statusrwrxr%resolve_xai_oauth_runtime_credentials_login_xai_oauthDEFAULT_XAI_OAUTH_BASE_URLr)provider_model_idsru8 xAI Grok OAuth (SuperGrok / Premium+) credentials: ✓z2xAI Grok OAuth (SuperGrok / Premium+) credentials:rYz#Starting a fresh xAI OAuth login...rFrN)rrz xai-oauthTrrrrZzHNot logged into xAI Grok OAuth (SuperGrok / Premium+). Starting login...r7rrzgrok-4.6)rru. (via xAI Grok OAuth — SuperGrok / Premium+)r)r2r*rwrxrr+r,r-rrr.rGrerqrrrrrrIrhr)_configrrr*rwrxrr+r,r-rr.r#rpr r r7r modelsrs r_model_flow_xai_oauthr1s                    544444 & & ( (F zz+* HIII 0 @   X   7 8 8 8 GGG $.#GD,$F$FGG#D)T:: ! %k2$(    2333   ,s,,--- x   F  XYYY   *lE B BCCi66I  Y(9+(F G G G G    . / / / FF    (3(( ) ) ) FFFFF *H 5577IIj))/R6688??DDP        , ,F&&v]=s\bOrvVWyyhrtttH8$$$##K::: _x___````` lsQ AC!!D#= D#DD# AF!!G#= G#GG#)AH22 H?>H?cddlm}ddlm}m}m}m}m}m}ddl m } |} | dstdtd| d} | rtd | | d r%td | d d Sd } |d } | | d| d} n#t$rYnwxYw| st|} |p | r| dnd}|| |d|}|r,|||d|td|dd Stdd S)zAQwen OAuth provider: reuse local Qwen CLI login, then pick model.r)_DEFAULT_QWEN_PORTAL_MODELS)get_qwen_auth_status resolve_qwen_runtime_credentialsrwrxrDEFAULT_QWEN_BASE_URLfetch_api_modelsrzNot logged into Qwen CLI OAuth.zRun: qwen auth qwen-oauth auth_filezExpected credentials file: errorzError: NT)refresh_if_expiringr|r7zqwen3-coder-plusz qwen-oauthrrrrz (via Qwen OAuth)r)rr3r2r4r5rwrxrr6rr8rGrerIrF)r/rr3r4r5rwrxrr6r8r#r9r0r rrs r_model_flow_qwen_oauthr=s5;;;;;;322222 ! ! # #F ::k " " /000 )***JJ{++  = ; ;; < < < ::g   3 1FJJw//11 2 2 2F 00TJJJ!!% "2E*4EFF      3122LV Kq 9KG&&%. H 8$$$##L2GHHH BxBBBCCCCC ls$C'' C43C4c Bddlm}m}m}m}m}m}m} m} m } |d} | r| dstdt tj t|ddpdtt|d d t|d dpd } | | | dnE#t $rtdYdSt"$r}td|Yd}~dSd}~wwxYw |}n+#|$r#}t| |Yd}~dSd}~wwxYwddlm}| dg}|||d|d}|sdS|||d|dtd|dS)z:MiniMax OAuth provider: ensure logged in, then pick model.r) rrwrxr)resolve_minimax_oauth_runtime_credentialsrr_login_minimax_oauthrz minimax-oauthrz0Not logged into MiniMax. Starting OAuth login...regionNglobalrFrr)rArrrr_PROVIDER_MODELSr7)rru✓ Using MiniMax model: )r2rrwrxrr?rrr@rrGrerrrrrrIrrD)rrrrrwrxrr?rrr@rrr r r rDrrs r_model_flow_minimax_oauthrEIs                       $ #O 4 4E  .11 @AAA   *tXt44@lE B BCCi66>$I ! ,=o,N O O O O    . / / / FF    (3(( ) ) ) FFFFF 99;;  $$%%%322222 $$_b99I&&(z* H x   z1BCCC 3 3 344444s7A'B??D D$C<<D DD8D33D8c *ddlm}m}m}ddlm}m}ddlm}m }m }m } m } ddl m} |dpd} |dpd} td | rtd | | rtd | d d dt t!d| pdd}| d| r | d d dzndd}n'#t$t&f$rtdYd SwxYw|s| stdd S|p| }|dstd|dd S|p| }|d*t/*fddD}|r*dsttdtdtd|dd t3d }n#t$t&f$rd!}YnwxYw|d"vr.|ddz}|r|}td#|tdd$lm}|||}|d%r;|d&r&td'|d&d(|d&}|r|}n|d)Ltd*|d+d,t;|d)pgd-n}td.|d+d/|d0rB|d0}|drtd1|ntd2||d3}d}t=|t>r6tA|d4pd}|||5}|rtd6|ntd7d}|d)pg} t;|d8kr{td9|dt3d:}|d"vr |d}nt!d;}nt;|d8krtd<tC|d8D]\}}td=|d>|t3d?t;|d@}|"rCd8tG|cxkrt;|krnn|tG|d8z }n&|r|}n!t!d;}t!dA} ||}!t!dB|!dp|!}"n'#t$t&f$rtdYd SwxYwd }#| rz tG| $dCd$dDdE$dFdE}#|#dkrd }#n%#tJ$rtdG| dHd }#YnwxYwd}$|rdtLj'(|}%|%j)pd}&|%j*r |&dI|%j*}&||&}$| |$|tdJ|$|r|||}'|'d3}(t=|(t>s |(rdK|(ini}(|(|'d3<dL|(dM<||(dN<|$r dO|$dP|(dQ<|r||(d4<n|(+d4d | |'|t?|(|d3<tdR|dS|dTn|s|r ||d3})t=|)t>s|)rdK|)ini})dL|)dM<||)dN<|$r dO|$dP|)dQ<|r||)d4<n|)+d4d |)|d3<tdU||||pd|#|"||$VtY||"Wd S)XzCustom endpoint: collect URL, API key, and model name. Automatically saves the endpoint to ``custom_providers`` in config.yaml so it appears in the provider menu on subsequent runs. r)_auto_provider_name!_prompt_custom_api_mode_selection_save_custom_providerr)custom_endpoint_key_envrrrrmasked_secret_promptrrrz0Custom OpenAI-compatible endpoint configuration:z Current URL: z Current key: N...zAPI base URL [ze.g. https://api.example.com/v1r API key [optional Cancelled.zNo URL provided. Cancelled.zhttp://https:// Invalid URL: & (must start with http:// or https://)rc3 K|]}|vV dSr")r%h _url_lowers rr(z%_model_flow_custom..s;  Zr) localhostz 127.0.0.1z0.0.0.0z:11434z:8080z:5000z/v1z+ Hint: Did you mean to add /v1 at the end?z@ Most local model servers (Ollama, vLLM, llama.cpp) require it.z e.g. z Add /v1? [Y/n]: r>ryyesz Updated URL: )probe_api_models used_fallbackresolved_base_urlz)Warning: endpoint verification worked at zL/models, not the exact URL you entered. Saving the working base URL instead.r0zVerified endpoint via probed_url (z model(s) visible)z,Warning: could not verify this endpoint via z. Hermes will still save it.suggested_base_urlz8 If this server expects /v1 in the path, try base URL: z- If /v1 should not be in the base URL, try: rr)current_api_modez API mode: z API mode: auto-detectr[z Detected model: z Use this model? [Y/n]: z&Model name (e.g. gpt-4, llama-3-70b): z Available models:rr_z Select model [1-z] or type name: z8Context length in tokens [leave blank for auto-detect]: zDisplay name [,k000KzInvalid context length: u — will auto-detect._z API key saved to .env as rcustomrr7z${}r|r (via )zFEndpoint saved. Use `/model` in chat or `hermes model` to set a model.)context_lengthrrkey_envr5)-rrGrHrIr2rxryrrJrrrrhermes_cli.secret_promptrLrerrhrirjrrranyendswithrgrr]rGrrCrDrrfisdigitrreplacerurllibparseurlparsehostnameportrrR)+rrGrHrIrxryrJrrrrrL current_url current_keyr7r| effective_url effective_key _looks_local_add_v1r]probe suggestedrrcr model_namedetected_modelsconfirmrmmpickcontext_length_strr display_namermcustom_key_env_parsed _identityrr _caller_modelrYs+ @r_model_flow_customrs nmmmmmmmmmGGGGGGGG>=====- 1228bK- 0117RK <===/ - --...6 4 BQB444555 GGG  R[M,M R R R  %'' '& S;N BQB%//J S S S  %''  x ( n K +,,,+ M  # #$; < < SmSSSTTT*{M %%c**0022JRLJ//66  ;<<< PQQQ 6 ,,S11666777 0117799??AAGG!8,   GGG  & & &)0055=M )( 3M33 4 4 4 222222  ]M : :E yy!!Seii0C&D&DS  S>Q8R S S S   12  %$H 8   (  CUYY|%<%< C CEIIh''-2.. C C C     *599\;R;R * * *    99) * * S23I!!%(( SZyZZQiQQRRR 7++#T**P044Z@@FBGGMMOO00)H) 'X''(((( '(((Jii))/RO   1 $ $ ;q'9;; < < <788>>@@FFHHG***,Q/ '(PQQWWYY  ! !A % % ' ( ( (!/155 ' '1oQoo!oo&&&&KS%9%9KKKegg ||~~ "!s4yy"H"H"H"HC4H4H"H"H"H"H"H,SYY];  "! #$LMMSSUUJ' F  %''  +*=99 !"D<"D"D"DEEKKMM]Q] x ( nN " " "**333e$$e$$N ""!% " " " W-?WWW X X X!NNN " N>,'' 66$* < 6$55w|55I00;;~}555 Y?A[[=<[=cbddlm}m}ddlm}m}m}m}ddlm }| di} t| tr| ddkrt| dd pd } t| d d pd } t| d pd pd } | d pi} t| tr| ni}nd } d } d } i}|dpd }t!t!dt!dt!t!dt!dt!dt!dt!| rt!d| | r| dkrdnd}t!d|| dkrt!dn|rt!d|dddt! | pd }t#d!|d"}n'#t$t&f$rt!d#YdSwxYw|p| d$}|st!d%dS|d&st!d'|d(dSt!t!d)t!d*t!d+t!d,t!d- | dkrd.nd/}t-d0|d1p|}n'#t$t&f$rt!d#YdSwxYw|d.k}|rdnd }d }i}d}d }|rZ dd2lm}m}m}m}m} nJ#t:$r=}!t!t!d3|!t!d4d5}d }Yd}!~!nd}!~!wwxYw|r t!| st!d6t!d7t| d8pd }"|"p|}i}|"r|"|d8<t!t!d9||:}#||#d;<}$|$ d=rG|$ d>pg}%|%rd?|%nd@}&t!dA|&dB|dCn|$ dDpdE}'|$ dFpdG}(t!dH|'t!dI|( t-dJ})n'#t$t&f$rt!d#YdSwxYw|)r|)dKvrt!dLdS ||#M}n#t>$r}!t!dN|!d}Yd}!~!nd}!~!wwxYwt!ddOl m!}* |*dP|r |dddQzndRd"}+n'#t$t&f$rt!d#YdSwxYw|+p|}|st!dSdSt!t!dT|"|||U},tG|,j$}-|,j%pd }.|.r^|.dkrdnd}/t!dV|/|,j&rt!dW|,j&dC|-r t!dXtO|-dYnt!dZ|,j&t!t!d[t!d\t!d]t!d^t!d_ | d`krd.nd/}0t-da|0d1p|0}1n'#t$t&f$rt!d#YdSwxYw|1d.krd`nd}.t!d }2|-rSt!dbtQ|-ddcddeD]\}3}4t!df|3dgdh|4tO|-dckr#t!ditO|-dcz djt! t-dk|p|-dd"}5n'#t$t&f$rt!d#YdSwxYw|5s |p|-d}2n|5)rQddtU|5cxkr!tWtO|-dckrnn|-tU|5ddz }2nW|5}2nT t#dl|pdmd"}6n'#t$t&f$rt!d#YdSwxYw|6p|}2|2st!dndS|,|2|||U}7|s |d||}8|8 d}9t|9ts |9rdo|9ini}9|9|8d<d|9d<||9d<|.|9d <|2|9do<||9d <t[|9d5p|r3i}:d:D]};| |;}<|/models`` probe → OpenAI-style + populates a picker with the returned deployment / model IDs. * Anthropic Messages probe fallback when ``/models`` fails. * Manual entry when every probe fails (private endpoints, etc.). Context lengths for the chosen model are resolved via the standard :func:`agent.model_metadata.get_model_context_length` chain (models.dev, provider metadata, hardcoded family fallbacks). rrrrrr) azure_detectrrz azure-foundryr7rr auth_moder|entraAZURE_FOUNDRY_API_KEYzAzure Foundry Configurationz2==================================================z9Azure Foundry can host models with either OpenAI-style orz6Anthropic-style API endpoints. Hermes will probe yourz6endpoint to auto-detect the transport and the deployedzmodels when possible.z Current endpoint: rz OpenAI-stylezAnthropic-stylez Current API mode: entra_idz1 Current auth mode: Microsoft Entra ID (keyless)z Current auth mode: API key (NrMz...)zhe.g. https://.openai.azure.com/openai/v1 or https://.services.ai.azure.com/anthropiczAPI endpoint URL [rrQrz$No endpoint URL provided. Cancelled.rRrTrUzAuthentication:z= 1. API key (AZURE_FOUNDRY_API_KEY in .env)zO 2. Microsoft Entra ID (managed identity / workload identity / az login)zY Recommended by Microsoft. Works for both OpenAI-style and Anthropic-style endpoints.z? Requires the 'Azure AI User' role on the Foundry resource.rbrazAuthentication mode [1/2] (z): )EntraIdentityConfigSCOPE_AI_AZURE_DEFAULTbuild_token_providerdescribe_active_credentialhas_azure_identity_installedu-⚠ Could not import azure-identity adapter: z Falling back to API key auth.Fu6◐ The 'azure-identity' package is not installed yet.z Hermes will install it now (the preflight below triggers the lazy-install). To skip lazy installs, run: pip install azure-identityru>◐ Probing Microsoft Entra ID credential chain (up to 10s)...)rg$@)rtimeout_secondsok env_sourcesrz default chainu✓ Entra ID token acquired (z, scope=rlr:zcredential chain exhaustedhintzqRun `az login`, attach a managed identity to this VM, or set AZURE_TENANT_ID/AZURE_CLIENT_ID/AZURE_CLIENT_SECRET.u⚠ z Hint: z4Save Entra config anyway and validate later? [Y/n]: )r[r\ Cancelled.)ru0⚠ Could not build token provider for probing: rKrOrNrequiredzNo API key provided. Cancelled.u;◐ Probing endpoint to auto-detect transport and models...)r|token_provideru✓ Detected API transport: z (u ✓ Found z# deployed model(s) on this endpointu⚠ Auto-detection incomplete: z7Select the API format your Azure Foundry endpoint uses:z. 1. OpenAI-style (POST /v1/chat/completions)z: For: GPT models, Llama, Mistral, and most open modelsz) 2. Anthropic-style (POST /v1/messages)z9 For: Claude models deployed via Anthropic API formatanthropic_messageszAPI format [1/2] (z"Available models on this endpoint:r[rr^z>2r_z ... and z' more (type name manually if not shown)z+Pick by number, or type a deployment name [zModel / deployment name [ze.g. gpt-5.4, claude-sonnet-4-6z"No model name provided. Cancelled.rrrmrrzMicrosoft Entra ID (keyless)zAPI keyu✓ Azure Foundry configured:z Endpoint: z API mode: z Auth: z Model: z Context length: rdz tokenszA Context length: not auto-detected (will fall back at runtime)).r2rxryrrrrr hermes_clirrGrCrDrrhrrerrirjrrrgagent.azure_identity_adapterrrrrr ImportErrorjoinrIrorLdetectrFr0rreasonrrfrrrrlookup_context_lengthr)>rrrxryrrrrrrcurrent_base_urlrccurrent_auth_mode _cur_entra current_entracurrent_api_key_lbl _placeholderr7r{ _auth_default auth_choice use_entraauth_mode_labelr|entra_overridesr entra_scoperrrrrr _persisted_scope_overrider/infortagerrransrLr| detectiondiscovered_modelsr mode_labeldefault_choice mode_choiceeffective_modelrmr'rrctx_lenrr clean_entrakeyval auth_labels> r_model_flow_azure_foundryrrsBHGGGGGGG (''''' 7B''I)T"" y}}Z'@'@O'S'Sy}}Z<<BCCy}}Z<<BCC k : : GiHHNNPPVVXXe\e]]7++1r &0T&B&BJ  % #m$;<<BO GGG '((( (OOO GGG EFFF BCCC BCCC !""" GGG: 8&688999. #555 N" ,d,,---J&& ABBBB J Hrr/BHHHIII GGG   FF   2 2 2 2  %''  x ( n1!199#>>M  4555  # #$; < < SmSSSTTT GGG  IJJJ [\\\ efff KLLL0J>>C B BBB C C I I K K    x ( ns"I$-> ((=117RK,7L$))K(((_C M#MM{MMM N N N N((7##C'CC88F##K  ,,,    #T## $ $ $ RSSYY[[aacc%x0   n%%%  s,..l###  "11AAANN " " " JSJJ K K K!NNNNNN " AAAAAA **_?ZOBQB/%77PZ___egg G"8,    . ! ! ! FF  2?   3 4 4 4 F GGG GHHH##%$I $( (8#9#9&,"HV&*<<??? JKKK 9::: IJJJ $48L$L$LSSRUN>>>>>??EEGG"! K"8,    . ! ! ! FF ,7#+=+=''CU GGGO6 2333 1#2# 6a@@@ & &FAs $q$$$s$$ % % % %  ! !B & & aS!233b8aaa     hm>cO`abOchhhegg D"8,    . ! ! ! FF  #+C/@/COO \\^^ #SYY Q Q Q Q#c:K6L6Lb2Q2Q Q Q Q Q Q/D A >OO"OO #cM,^=^cccegg J"8,    . ! ! ! FF %5   233300% 1G ?. >>> +--C GGG  E eT " "&+3E""G 'E*%E* E*&E)(E+$U5AAAA  ' 'C!%%c**C '#& C  (E'NN   g e  g*")K5kkF7O}&''.("---}%&&-',,,#+/A#A#AGXJ*3B&& GGG )*** 0 0 0111 - - -... - - -... 2 2 2333S 7W77778888 QRRR GGGGGs1)I I?>I?01M"" NN N// O693O11O63V V21V2 W X$W==X0Y Y/.Y/,1_ ``+-c c=<c=6'f ggc ;<ddlm}m}m}ddlm}m}ddlm}m }m } ddl m } m } ddlm} m} m}m}m}|d}|d}|d d }|d d }|d d }|d d <|dpd }|s"|r t,j|d }|||}|dd}t1|t2r|dv}g}d}|di}| || |}t1|t6r d|D}nt1|t8rg}|D]}t1|t6rLt3|dp|d pd }n8t1|t2r!t3|nd }|r||t=d|t=d| tgd?<d<p<}.n#tbtdf$rt=d=Yd&SwxYwt=d@ tgdA}.n'#tbtdf$rt=d=Yd&SwxYw|.st=dBd&S||.|}3|3d }4t1|4t6s |4rdC|4ini}4|4|3d <|r@ti|||4dD<|45dd&|45d d&nd|4dD<||||4d<|r||4d <|d d }5|5r|5|4d <n|45d d&| |3||rs|}3|3dE}6t1|6t6r=|6|}7t1|7t6r|.|7dF<t3|dGd pd }8t3|d d pd }9tm|8p|9}:|:r>|r0nofalseFr0cvg|]6}|dvt|'t|7S)>__discovered_model_catalog____explicit_model_allowlist__)rrhr%rs r z,_model_flow_named_custom..sX   A   FFrr@z Provider: z URL: z Current: z2Using configured models (discover_models: false): zFetching available models...rg @ollamari extra_headers)r|c3lK|].}|kV/dSr"r)r%existingrs rr(z+_model_flow_named_custom..Fs:QQx399;;(.."2"22QQQQQQrc3FK|]}|dkVdS) authorizationNr)r%rs rr(z+_model_flow_named_custom..Is@' ' /2CIIKK? *' ' ' ' ' ' rrzBearer AuthorizationN)headers)rrr)!_save_discovered_models_to_config)rrzFound z model(s): )curses_radiolistc*g|]}|kr|dn|S) (current)rW)r%r saved_models rrz,_model_flow_named_custom..s>@AA$4$41    !rrUzSelect model from r)rcancel_returns searchablerr[rr^r_z. Cancelz Choice [1-rrQz%Could not fetch models from endpoint.z Model name [z@Could not fetch models from endpoint. Enter model name manually. Model name: zNo model specified. Cancelled.rr providers default_model api_key_ref)ru ✅ Model set to: z Provider: rarl)7rrrrIr2rxryrrrrhermes_cli.model_switchrrrr8rrrrrGrhosenvironrCrrrDrFrHrertuplerpupdaterrIrhermes_cli.curses_uirrNotImplementedErrorOSError subprocessSubprocessErrorrfrgrrrirjrrrr)=r provider_inforrrIrxryrrrrrr8rrrrrr7rr|rnrconfig_api_keydiscoverconfigured_modelsnative_catalog_empty cfg_modelsexplicit_catalog model_entryrr0 fetch_kwargsnative_catalog_providerrcandidate_headerscaller_has_authorization use_nativenative_headers_argexplicit_allowlist live_modelsrrr menu_itemsrlrrmrrrrrcustom_api_mode providers_cfgprovider_entryoriginal_api_key_reforiginal_api_keyhad_inline_api_keyrrs= @@r_model_flow_named_customrs EEEEEEEEEEGGGGGGGGSSSSSSSSSS  DZ(H  R00H 2..G 2..G##GR00K!%%n55;BBDDL .w.*.."--::='RRN  !2D99H(C  @>>##+??#% ""8R00J22,,];;*d##3      J % %3% 3 3K+t,, \{t44V 8P8PVTVWW]]__7A+s7S7S[3{++11333Y[ 3!((222       # # #$$$, *[**+++ GGG W#L 'K }}  6{{      ,---!3'  0'/L $!!##x//4::<<3E3E3G3G83S3S H 0/ 0A0A/0R0RSSYWY 66xQQQ*++ + +CQQQQ=QQQQQ +%c*  ///#&' ' 6C' ' ' $ $    E3 E.// / /99;;/11)#.1D71D1D o .55 #X7H7PD   ;Ea.6$=K`\`-  ) 1$5 1/ ',$$77. (3b'8$&"2"2228<<##!3#' ##K ,1(**+=AMK$) " 4  $42!2    21%)1T      ;  4;&00 ,,{33K 0s6{{000111$  = = = = = =EK J#",T,,,$! C GGGQww#V,,l###JJ0':;UV   !&!,, - -1)*k)9)9r+1+++6++,,,, 0s6{{Q000 1 1 1 GGG =Vq===>>DDFF,'''FF#hhl77cS[[00,'''FF#C[  18<   n%%%   & 1 5666 #$C;$C$C$CDDJJLL[P[JJ!8,    . ! ! ! FF  PQQQ #N3399;;JJ!8,    . ! ! ! FF   2 3 3 3 Fz""" +--C GGG  E eT " "&+3E""G  .0|DDj *d### )T""""$jBB 8  j  .-E) #'' B77O$+j *d###K Wkmm ,, mT * * !*..|<B((%''%$'}'8'8B'G'G'M2#N#N#T#T#V#V %)*>*RBR%S%S"&?&?  2 29b A A GRHHNNPP? 1?N9-83~'9'9)R'H'H'NB#O#O#U#U#W#W807N9-#0K  C    h XVVVV - - -... -$ - -( - - -.....sQ44 RRA"T3)T33B Y??AY:YY Y?&Y94Y?8Y99Y?>Y?'Z>> ["!["5!\ \;:\;c ddlm}m}m}ddlm}m}m}m}m } ddl m } m } m } ddlm} m}m}m}m}m}d}||}| |}|dd}|d d}|st-d t-t-d t-d t-d t-dt-dt-t-dt-dt-dt-dt- t/d}n&#t2t4f$rt-YdSwxYw|dkrz ddlm}|}|r*| d|t-dt-nt-ddSn#t:$r}t-d|Yd}~dSd}~wwxYw|dkrddlm} |d}n&#t2t4f$rt-YdSwxYw|st-ddS dd lm }||\}} |st-d!| dSn#tB$rYnwxYw| d|t-d"t-nt-ddS| |}|dd}|d d}ni|d#vr2dd$l"m#}!|!|}"t-d%|dd&d'||"d(n%|d)krt-d*nt-d+t-|j$}#||}$|$r d,|$Dn |||#}%|||$|-p|}&|%r-d.|%D}'t-d/tK|'d0n6| |g}'|'rt-d1t-d2|'r||'|&||#|3}(n< tMd4}(n#t2t4f$rd}(YnwxYw|(r@||(|$|-p|(}(| })||)}*||(|$|-}+d},|+r t-d5|(d6||+|*7},||(| }-|-d8}.tO|.tPs |.rd9|.ini}.|.|-d8<||.d:<|#|.d;<||(|$|-|.d<<tS|.d=>|, ||-|,| |-|t-d?|(d@|j*d(|+r-|,dAkrt-dBdS|,rt-dC|,dSdSdSt-dDdS)EzAGitHub Copilot flow using env vars, gh CLI, or OAuth device code.r)_current_reasoning_effort"_prompt_reasoning_effort_selection_set_reasoning_effort)rrwrxry$resolve_api_key_provider_credentials)rrr)rDr8fetch_github_model_cataloggithub_model_reasoning_effortscopilot_model_api_modenormalize_copilot_model_idcopilotr|rr>z.No GitHub token configured for GitHub Copilot.z Supported token types:uL → OAuth token (gho_*) via `copilot login` or device code flowuI → Fine-grained PAT (github_pat_*) with Copilot Requests permissionu= → GitHub App token (ghu_*) via environment variableuA ✗ Classic PAT (ghp_*) NOT supported by Copilot APIz Options:z1 1. Login with GitHub (OAuth device code flow)z 2. Enter a token manually 3. Cancelz Choice [1-3]: Nra)copilot_device_code_loginCOPILOT_GITHUB_TOKENz Copilot token saved.z Login cancelled or failed.z Login failed: rbrKz Token (COPILOT_GITHUB_TOKEN): Cancelled.)validate_copilot_tokenu ✗ z Token saved.>GH_TOKEN GITHUB_TOKENformat_secret_source_suffixz GitHub token: rMu ... ✓ (rlz gh auth tokenu* GitHub token: ✓ (from `gh auth token`)u GitHub token: ✓cdg|]-}|d|dd.Sr@rrGr%items rrz'_model_flow_copilot..vs5BBB488D>>B$  BBBrcatalogr|cg|]}||SrWrW)r%rs rrz'_model_flow_copilot..sGGG8hGhGGGr Found  model(s) from GitHub CopilotL ⚠ Could not auto-detect models from GitHub Copilot — showing defaults.? Use "Enter custom model name" if you do not see your model.r!rr^z supports reasoning controls.)current_effortrrrr7rFrrrknonez"Reasoning disabled for this model.zReasoning effort set to: r)+rrrrr2rrwrxryrrrrrrrDr8rrrrrGrergrhrirjhermes_cli.copilot_authrrIrorLr rhermes_cli.env_loaderr$inference_base_urlrrrCrDrr)/rrrrrrrwrxryrrrrrDr8rrrrr.r3r r|r>rprtokenr rLnew_keyr validrr$ bw_suffixeffective_baser+r normalized_current_model model_listr initial_cfgr1reasoning_effortsselected_effortrrs/ r_model_flow_copilotr@sttttttttttKJJJJJJJJJK ,G 0 0 = =Eii 2&&G YYx $ $F M >???  ())) Z    YZZZ MNNN QRRR  l ABBB -... o  -..4466FF!8,    GGG FF  S== MMMMMM1133"N#95AAA2333GGGG8999F   .../// s]] E E E E E E ../QRRXXZZ%x0     n%%% JJJJJJ33G<< s.3..)))F     N17 ; ; ; " # # # GGGG . ! ! ! F44[AA))Ir**8R(( 1 1 1 I I I I I I33F;;I OWRaR[OO6O9OOO P P P P  & & > ? ? ? ? ' ( ( ( /N((11G  7BBBBBB  g~ 6 6 #"        UGG{GGG  GZGGGHHHH%))+r::  U ^    S T T T ** 2(+#     !.117799HH!8,   HHH 2 & &      "kmm 22;??::        >x>>> ? ? ?@@!.O 8$$$kmm  %&& !*/7Y&&RE CL'j*j22    j )uEEEE  & ! !# 7 7 7 C FxFFw|FFFGGG  E&((:;;;;;  EC/CCDDDDD  E E E E lsa8!EE=<E=A G G= G88G= H++I I%(J JJ1!QQ)(Q)cddlm}m}m}m}m}m}m}ddlm } m } m } ddl m } m} ~d}||}||}|dp|dpd}|d p|j}t#d t#d t#d t#d |t#d|t# ||}n9#t$$r,}t#d|t#dYd}~dSd}~wwxYw|d p|}d} |d}|dd}n#t$$rYnwxYw| |}| |||p|}|r-d|D}t#dt'|dn6| dg}|rt#dt#d|r||||||}n< t)d}n#t,t.f$rd}YnwxYw|st#ddS| |||p|}||| }|d}t1|t2s |rd|ini}||d<||d<||d <d |d!<t5|d"#| ||t#d$|d%|jd&dS)'z4GitHub Copilot ACP flow using the local Copilot CLI.r)rrwrxry$get_external_process_provider_statusr-resolve_external_process_provider_credentials)rDrrrz copilot-acpresolved_commandcommandrr7z? GitHub Copilot ACP delegates Hermes turns to `copilot --acp`.zB Hermes currently starts its own ACP subprocess for each request.zH Hermes uses your selected model as a hint for the Copilot ACP session.z Command: z Backend marker: u ⚠ z[ Set HERMES_COPILOT_ACP_COMMAND or COPILOT_CLI_PATH if Copilot CLI is installed elsewhere.Nrr|r*cdg|]-}|d|dd.Sr&r'r(s rrz+_model_flow_copilot_acp..s5OOOTOdhhtR((OOOrr-r.r/r0r!rrrrrrrFrrrkrl)r2rrwrxryrBrrCrrDrrrrrrGr5rerIrrrhrirjrCrDrr)rrrrwrxryrBrrCrDrrrrr.r3r#rDr:r r catalog_api_key catalog_credsr+r;r<rrrs r_model_flow_copilot_acprIs ;:::::::K ,G 1 1+ > >F %&&L&**Y*?*?L9ZZ ++Iw/IN KLLL NOOO TUUU *( * *+++ /~ / /000 GGG==kJJ  nsnn i     YYz**\}}||kr|d||df'|||f?|d|d|D}|||ddkrt=dd S||d}||}|r | |||||} | r+| }!t=dt?|!d|j dn0||g}!|!rt=d|j d|!r||!||||}"n< tCd}"n#tDtFf$rd }"YnwxYw|"r||"| }#|#d }$t/|$t0s |$rd|$ini}$|$|#d <||$d<||$d <|$$dd tK|$d !| |#| t1|$|d <t=d"|"d#|j dd St=dd S)$z6StepFun Step Plan flow with region-specific endpoints.r)_infer_stepfun_regionrt_prompt_provider_choice_stepfun_base_url_for_regionrr)rDr8stepfunrrNrr7 internationalzInternational (rlchinazChina (u ← currently active)rZrUcg|]\}}|SrWrW)r%rhrns rrz'_model_flow_stepfun..s)P)P)PHAu%)P)P)PrrZrr- model(s) from  APIz$ Could not auto-detect models from u, API — showing Step Plan fallback catalog.r!rrrrFrrrk)&rrTrtrUrVr2rrwrxryrrrrrrrDr8rNr4rgetenvrGrCrDrrhr5insertrHrerrrrirjrr)%rrrTrtrUrVrrwrxryrrrrrDr8r.r3rOrrr current_basercurrent_regionregion_choicesordered_regions region_keyrn region_idxselected_regionr:r r<rrrs% r_model_flow_stepfunrfs(}}}}}}}}}}}}  EDDDDDDDK ,G+1rL$D[RY$Z$Z!L/)/' L%  LR$}\22Qbi b6Q6Q HJJw'' i & & Hy}}Z88>B??EEGGL**<+U7;UVVN  N::?KK N N N  D88AADDDE NO+88 E  ' '  " "1ze3S3S3S&T U U U U  " "J#6 7 7 7 7/000(()P)P)P)P)PQQJ_Z8;xGG l%j1!4O11/BBN5|^444""<@@K   KZKKKKKLLLL%))+r::   6w|666     ** '(+(     !.117799HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL'j*j *d###(uEEEE Cu++w FxFFw|FFFGGGGG ls!I;;JJcddlm}m}m}ddlm}m}m}ddlm } d|d} ddlm } m } | dd d d } | d| \}}|r1dd l m }||pd}td|ddd|ntd| tddlm} |d}n&#t$t&f$rtYdSwxYw|stddS|d||}tdt| dg}tdt+|d|r|||d| |}n< t-d}n#t$t&f$rd}YnwxYw|rE|||}|d}t/|t0s |rd|ini}||d<d|d<t3|d d !|d"}t/|t0si}||d"<|d#}t/|t0si}| |d$<d|d%<||d#<|di}t/|t0si}||d&<||d<|||td'|d(|d)td| dStd*dS)+uBedrock API Key mode — uses the OpenAI-compatible bedrock-mantle endpoint. For developers who don't have an AWS account but received a Bedrock API Key from their AWS admin. Works like any OpenAI-compatible endpoint. rrwrxry)rrrrCzhttps://bedrock-mantle.z .api.aws/v1)r1rvbedrockBedrockr|)AWS_BEARER_TOKEN_BEDROCKr~r#rkz Bedrock API Key: N ... ✓z Endpoint: rKr ✓ API key saved. Showing z curated modelsrir! Model ID: rrzcustom:bedrock-mantlerT)rclear_base_urlrzbedrock-mantler7rnrA Default model set to: z (via Bedrock API Key, rl No change.)r2rwrxryrrrrrrDr1rvr4r$rerorLrhrirjrGrrrCrDr)rrArrwrxryrrrrDmantle_base_urlr1rvbedrock_pconfigrrr$ source_suffixrLr|r<rrrr mantle_entry bedrock_cfgs r_model_flow_bedrock_api_keyry s   322222CCCCOQPPPPPPP$n  6 O %E$D?%%!L/&EEEEEE33  99   ML"$5MMmMMNNNN ._../// AAAAAA **+@AAGGIIGG!8,    GGG FF   . ! ! ! F17;;;  $%%% GGG"%%i44J 7s: 7 7 7888 ** '%,(     !.117799HH!8,   HHH *8$$$kmm  %&& !*/7Y&&RE CL3j( $t    GGK(( )T** )I(C  }}%566 ,-- L#2 Z "< Y&2 "#ggi,, +t,, K & H$I C SSS&SSSTTT ._..///// ns$!B??C"!C"-!FF%$F%c  !"ddlm}m}m}ddlm}m}ddlm} ddl m }m } m } m } n=#t$r0tdtdtYdSwxYw|s,td td t| } | rtd | d ntd t| } t!d| d}n&#t$t&f$rtYdSwxYw|p| }tdttdtdtdtdtdt t)d}n&#t$t&f$rtYdSwxYw|dkrt+|||dStd|d| |}|rd}d}g}|D]h}|d"t-"fd|Dr&t-"fd|DrBt/"|sS||it2dzt5}|D]R}|d"t7"fd Dd}|r*|"t;|dSg}|D]9}|d""s"|vr$||:gd! d@fd% ! !fd&}||'d(|D}td)t;|d*t;|d+nJ| d,g}|r!td-t;|d.ntd/dS|r|||d,d0|d12}n< t!d3}n#t$t&f$rd}YnwxYw|r|||}| d4}tC|tDs |rd5|ini}||d4<d,|d6<d0|d1|d7<|#d8dtI|d9:| d,i}tC|tDsi}||d;<||d,<|||td<|d=|d>dStd?dS)Au$AWS Bedrock provider: verify credentials, pick region, discover models. Uses the native Converse API via boto3 — not the OpenAI-compatible endpoint. Auth is handled by the AWS SDK default credential chain (env vars, profile, instance role), so no API key prompt is needed. rrhrrC)has_aws_credentialsresolve_aws_auth_env_varresolve_bedrock_regiondiscover_bedrock_modelsu. ✗ boto3 is not installed. Install it with:z pip install boto3Nu< ⚠ No AWS credentials detected via environment variables.zE Bedrock will use boto3's default credential chain (IMDS, SSO, etc.)z AWS credentials: u ✓z< AWS credentials: boto3 default chain (instance role / SSO)z AWS Region [r Choose authentication method:z) 1. IAM credential chain (recommended)zB Works with EC2 instance roles, SSO, env vars, aws configurez 2. Bedrock API Keyu< Enter your Bedrock API Key directly — also supportsz5 team scenarios where an admin distributes keysz Choice [1]: rbz Discovering models in rN)z stability.z cohere.embedz twelvelabs.z us.stability.zus.cohere.embedzus.twelvelabs.zglobal.cohere.embedzglobal.twelvelabs.) safeguardvoxtralzpalmyra-visionr@c3BK|]}|VdSr"r#r$s rr(z&_model_flow_bedrock.. s/@@3>>!$$@@@@@@rc3DK|]}|vVdSr"r)r%sr's rr(z&_model_flow_bedrock.. s0AA1 #AAAAAAr)r)c3FK|]}||VdSr"r#r$s rr(z&_model_flow_bedrock.. 4JJaq8I8IJJJJJJJr) zanthropic.claude-sonnet-4-6zanthropic.claude-opus-4-6zanthropic.claude-haiku-4-5zamazon.nova-prozamazon.nova-litezamazon.nova-microz deepseek.v3zmeta.llama4-maverickzmeta.llama4-scoutr'rrcttfdDd}|rt|dnS)Nc3FK|]}||VdSr"r#r$s rr(z8_model_flow_bedrock.._base_id.. rr)r*r)r'_pp_PROFILE_PREFIXESs` r_base_idz%_model_flow_bedrock.._base_id sFJJJJ#4JJJDQQC%(13s3xxyy>>c 1rc|d}|}tD]9\}}||rd||dsdnd|fcS:|drddd|fSddd|fS)Nr@rr)r[)rfr)rr'basermrec_RECOMMENDED_BASESrs r _sort_keyz&_model_flow_bedrock.._sort_key sD'C8C==D#$677 R R3??3''Rq3>>)+D+D"K!!!SQQQQR~~i(( &1a~%q!S> !r)rcg|] }|d S)r@rWrs rrz'_model_flow_bedrock.. s///!ag///rr-z text model(s) (filtered from z total)riz Using z, curated models (live discovery unavailable)zJ No models found. Check IAM permissions for bedrock:ListFoundationModels.zhttps://bedrock-runtime.z.amazonaws.comr<rprrrr7rFrrArrz (via AWS Bedrock, rlrs)r'rrr)%r2rwrxryrrrrrDagent.bedrock_adapterr{r|r}r~rrerrhrirjrgryrpr-rHr+setr*addrrsortrGrCrDrr)#rrrwrxryrrrDr{r|r}r~auth_varr` region_inputrArr _EXCLUDE_PREFIXES_EXCLUDE_SUBSTRINGSfilteredrprofile_base_idsrdedupedrr<rrrrxrrrr's# @@@@r_model_flow_bedrockr sm ;:::::::222222               >??? %&&&      LMMM UVVV ''))HN 2H2223333 LMMM GGG,+--N!"F>"F"F"FGGMMOO x (  +^F +,,, GGG 5666 NOOO "### HIII ABBB GGG,--3355 x ( c#FFMBBB 0V 0 0 0111))&11KZ  I  AD'C@@@@.?@@@@@ AAAA-@AAAAA 5c6BB  OOA    1<?55 5 5AD'CJJJJ#4JJJDQQC 5 $$SS^444  AD'CNN#455 +++ NN1         2 2 2 2 2 2 " " " " " "   ###//w///  _s: _ _c+FVFV _ _ _    &)))R88   X3z??XXX     \    F ** '&NNNN     !.117799HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL%jMvMMMj *d###(uEEEEggi,, +t,, K & H$I C OOOfOOOPPPPP nsE +6A%$A%&%D D/.D/-!GG21G2!P11QQchddlm}m}m}ddlm}m}m}ddlm }|dp |dpd } | rtd| d n/locations/z/endpoints/openapirSz@-aiplatform.googleapis.com/v1beta1/projects//locations/r<rrrr7rFrrrz (via Google Vertex AI, rlrs)r2rwrxryrrrrrrDrhrerGrCrDrrrirjrr)rrrwrxryrrrrDsa_pathr vertex_cfgcurrent_project project_inputrr`rrAr<base_url_previewrrvcfgs r_model_flow_vertexrR s` JIIIIIIIII222222  /00  =9 : :   egg  c KWKKKLLLL KLLL EFFF IJJJ abbb GGG +--C""J j$ ' ' *..66<"==CCEEO" K!F4F K K K  %''   x ( 1/J11=X>>DDFFR(N!"In"I"I"IJJPPRR x (  +^F"%%h33%'8J X   0 0 0 0 0000000 '&#!) H8$$$kmm  %&& !*/7Y&&RE CL$j *d### *d###(uEEEEwwx  $%% D'\XH  C TTT6TTTUUUUU ns$'D::EE%GG&%G&r_cddlm}ddlm}d|D}|pdd}d}t |D]%\}\}}||dkr|}n&|rt|}d|D} | d|| |d } | |S| t|kr td |d } n'#ttf$rt|cYSwxYw| s|S| dstd|S| dS|| ddS)aPresent a picker for Z.AI endpoint selection during setup. Offers the four official Z.AI endpoints (Global, China, Coding Plan Global, Coding Plan China) plus a custom-proxy option. The list is sourced from ``ZAI_ENDPOINTS`` in ``hermes_cli.auth`` so it stays in sync with the probe list. Returns the selected base URL. Falls back to *current_base* on cancel or error. r)rU) ZAI_ENDPOINTSc g|] \}}}}||f SrWrW)r%rhurlrns rrz(_select_zai_endpoint.. s%BBB 035s|BBBrrrc$g|] \}}|d|dS)rarlrW)r%rnrs rrz(_select_zai_endpoint.. s-<<l m0}+|+pi}*n#t.$ri}*YnwxYw|| ||*||?},n< tAd@},n#tBtDf$rd },YnwxYw|,rӉd;vr /|,},||,| }-|-d}.tc|.t\s |.rdA|.ini}.|.|-d<|.d<||.d<te|.dBCd;vr||,|.dD<n|.3dDd | |-|t'dE|,dF|j(dGd St'dHd S)IzCGeneric flow for API-key providers (z.ai, MiniMax, OpenCode, etc.).rrsrr)rDr8opencode_model_api_modenormalize_opencode_model_idr opencode-freeu< OpenCode Free is keyless — no API key or account needed.rNgemini)probe_gemini_tierz Checking Gemini API tier...freeuW❌ This Google API key is on the free tier (<= 250 requests/day for gemini-2.5-flash).z[ Hermes typically makes 3-10 API calls per user turn (tool iterations + auxiliary tasks),zO so the free tier is exhausted after a handful of messages and cannot sustainz an agent session.zX To use Gemini with Hermes, enable billing on your Google Cloud project and regeneratezK the key in a billing-enabled project: https://aistudio.google.com/apikeyzY Alternatives with workable free usage: DeepSeek, OpenRouter (free models), Groq, Nous.z*Not saving Gemini as the default provider.paidu Tier check: paid ✓z3 Tier check: could not verify (proceeding anyway).rrr7zaiz Base URL [rrRrlmstudio)r)fetch_lmstudio_models)r|r7z" LM Studio rejected the request: zC Set LM_API_KEY (or update it) to match the server's bearer token.r-z model(s) from LM Studioz ollama-cloud)fetch_ollama_cloud_modelsT)r|r7rz model(s) from Ollama Cloudnovitar7r[r\)list_agentic_modelsc6h|]}|SrWrrs r z/_model_flow_api_key_provider.. 777a 777rz" model(s) from models.dev registryroruB keyless free models — use "Enter custom model name" for others.c6h|]}|SrWrrs rrz/_model_flow_api_key_provider.. rrrM> opencode-go opencode-zenrc(g|]}|SrWrW)r%r'rr.s rrz0_model_flow_api_key_provider.. s4   >A ' ' S 9 9   rc3K|]}||V dSr"rW)r%r's rr(z/_model_flow_api_key_provider.. s''I'IS'I'I'I'I'I'I'Ir)rrrrFrrrrkrlr)4rrtr2rrwrxryrrrrrrrDr8rrrrNrer4agent.gemini_native_adapterrrIrr]r5rGrrhrrrrirjrrrrrragent.models_devrrFrHrrDfromkeysrrCrr)0rr.rrtrrwrxryrrrrrDr8rr3rnrOrrrr probe_basetierr__mr: chosen_baserrrapi_key_for_prober<r rcuratedr  mdev_modelsrseenrmergedrrrrrrs0 ` @r_model_flow_api_key_providerr sz //////   ,G-4-EMg&q))2G+1rLo%% LMMM )IV](^(^% o-o  #+     e   F h< % E E E E E E E % % % $    %  ( 1 2 2 20<D|,,,".9\/R44.-  %$\:>>Dv~~B;2,---:9<BCCCv~~.//// KLLL GGGLR$}\22Qbi b6Q6Q  ""7++1rB266*%%+,,2244::<< KK"266*#5#5#;<<BBDD     D !?W%?Ne +>::  6;.88\8 N< 5 5 5$ !"B~"B"B"BCCIIKKHH!8,    GGGHHH   *  *&&'>?? *c|X666!)j  ------;;;;;;(Ww-V]]7-C-C-CTV ..)NJJ    >      77;777!+..  ,,Awwyy,,"))!,,,+++TZTTTUUUU$ sS__sss  ' ' &))+r::   pS__ppp   #&&{B77   < < < < < <--k::KK    D  !  )77;777k** ,,Awwyy,, a(((+++# ( PS__PPP Q Q Q Q  W** J kS__kkk    !-!*19 g&&&r +*+f$rt7YdSwxYw|dkr||sdSn|dkrt7t7dt7ddl m!} |d}n&#t<t>f$rt7YdSwxYw|st7d dS| ||!t7d"nt7d#dSt7| "d g}|r|||d $}n< tGd%}n#t<t>f$rd}YnwxYw|r|||}|"d&}tI|tJs |rd'|ini}||d&<d |d(<|&d)dtO||||t7d*|d+dSt7d,dS)-uRFlow for Anthropic provider — OAuth subscription, API key, or Claude Code creds.r)_run_anthropic_oauth_flowrh)rrrsave_anthropic_api_keyrC)get_anthropic_keyF)read_claude_code_credentialsis_claude_code_token_valid_is_oauth_tokenTr#)rr anthropicz Anthropic credentials: Nrlrmu. Claude Code credentials: ✓ (auto-detected)zAnthropic credentials:rYrZrz0 1. Claude Pro/Max subscription (OAuth login)z( 2. Anthropic API key (pay-per-token)rr`rarbz> Get an API key at: https://platform.claude.com/settings/keysrKz API key (sk-ant-...): r)save_fnrnrs)rrz-Model name (e.g., claude-sonnet-4-20250514): rrrr7rz (via Anthropic)r)(rrr2rwrxryrrrrrrrDragent.anthropic_adapterrrrrIrr4r$rrrr]rhrerqrgrirjrorLrGrrCrDrr) rrrrwrxryrrrrrDrr cc_availablerrrcc_credsexisting_is_stale_oauth has_creds needs_authr$rrvvarrprLr|r<rrrs r_model_flow_anthropicr< s999999  322222211111$$&&LL            0/11  228<< L      $' 55'l'"&l##C,C(CT IJ  D I I I I I I 9 9 9 9 9 9 M(5F  9S"%%++--==$?$?$D$DM$ UL",=UUmUU     D B C C C 01IJJ X  JJ x   F&  /000  @AAA 8999 o  /006688FF!8,    GGG FF  S==,,^<<  s]] GGG R S S S GGG E E E E E E ../IJJPPRR%x0     n%%% " "7N C C C C ( ) ) ) ) . ! ! ! F GGG"%%k266J ** '(     !"QRRXXZZHH!8,   HHH 8$$$ kmm  %&& !*/7Y&&RE CL'j *d###(/// C AxAAABBBBB lsG#A A'&A'7!GG<;G< I))J  J !L((L>=L>)rrrr)rrrrrr)r.rrr/)r7rr6rrr8)rSrrr)r)rrrrDrr8)rN)r_rrr)*__doc__ __future__rhermes_cli.cli_outputrrrr urllib.parsertrrhermes_cli.providersrr+rr-r4rRrqrrrrrr(r1r=rErrrr@rIrRrfryrrrrrrWrrrs*(#""""",,,,,, >>>>>>555555 "(BBBB222222j####LDDDDNFFFF3333lR-R-R-R-j____BVVVVpOTOOOOOb....`35353535lpppfn n n n ` d/d/d/L EEEENsDsDsDsDjYYYYvnnnn`ssssjKKKK\eeeeN7,7,7,7,tGGGGR UUUUUUr