epjz.UdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZddlmZddlmZmZmZmZmZmZddlmZddlmZejeZe Z!e e"d<d ed eefd Z#d d d ede$de%d dfdZ&ej'dkZ(ej)dZ*e+hdZ,e+e%e"d<de%d dfdZ-iZ.ee%efe"d<iZ/ee%ee0e0e0e0ee%efee%ee%fffe"d<iZ1ee%ee0e0ee%efffe"d<e j2Z3e+hdZ4ddl5Z5ddl6m7Z7m8Z8ddl9m:Z:m;Z;dZe+d!d"hZ?d ee%fd#Z@d eAfd$ZBd%ZCd ee%fd&ZDd(d'eed efd(ZEd(d'eed e%fd)ZFd eAfd*ZGd(d+e%d'eed dfd,ZHd+e%d e%fd-ZId e%fd.ZJd/ZKd e%fd0ZLd)d2e%d e%fd3ZMd*d2e%fd5ZNd eeOfd6ZPdd7lQmRZRmSZSdd8lTmUZUmVZVd efd9ZWd efd:ZXd efd;ZYd eZee0ee0ffd<Z[d+d=Z\d>Z]d eAfd?Z^d@Z_dAed dfdBZ`e Zae e"dC<dDZbdAefdEZcddFldmeZemfZfgdGdHdIggdJdKgdLgdMZgee0ee%fe"dN<iZhd,dPeAd eee%effdQZidRe%fdSZjdTdTdOdUdVee%efdWeAdXeAdYeAd ee%eff dZZkelZmdRe%fd[ZndRe%d eAfd\Zode%d eAfd]Zpd^eAd e%fd_Zqd eee%effd`Zrd eee%effdaZse Zte e"db<dce%dde%dee%dfed df dgZudhdidjedce%d eee%effdkZvdhdidjedce%d eee%effdlZwdmed eee%effdnZx d(doeee%efd eee%effdpZydqed eeAfdrZz d-dse%dteeee%efdoeee%efd ee%effduZ{ d-dvee%efdse%dteeee%efdoeee%efd df dwZ|dxed ee%e%ffdyZ} d-dse%dteeee%efdoeee%efd ee%e%ffdzZ~ d-dvee%efdse%dteeee%efdoeee%efd df d{Z d-d|e%dse%dteeee%efdoeee%efd ee0f d}Zdqed e0fd~Zd eAfdZd ee0e0ffdZhdZe+eejezZhdZhdZeGddZd(doeee%efd edfdZd(doeee%efd dfdZd(doeee%efd dfdZdoee%efd dfdZd.deAdeAd ee%effdZdeOdeOd eOfdZdeOdeOd eOfdZdeOde d eeOe ffdZdejd e%fdZde%d ee%fdZdZd(dZdZd(dZdoee%efd eee%dffdZeedfdoee%efd ee%efdeeee%dfd ee%effdZdoee%efd ee%effdZdoee%efd ee%effdZdeee%efd eAfdZdddeee%efde%ded efdZd ee%effdZd(d eed ee%effdZd ee%effdZd(d eed dfdZd ededed dfdZd ee%effdZd ee%effdZdOdde%de%dqedeAd df dZiddddLdddddddddd“ddēddƓddȓddʓdd̓ddΓddГddғddԓdd֓dddddddddddddd Zdqed e%fdZde%d ee%fdZdddddeee%e%fdoeee%efdeeAd ee%e%ffdZdeAd ee%effdZdZdZdZdTddOddoee%efdeAdeeee%dfdeAfdZde%d e%fdZd ee%e%ffdZdaeeee%eeee0fee%e%ffe"d<d+dZded efdZd e0fdZde%dqe%d e%fdZdqe%d e%fdZde%de%d eAfdZde%dqe%fdZde%d e%fdZde%d eAfdZd(dqe%fdZd(dZd(dqe%fdZde%dqe%d ee%effdZd e0fdZde%d ee%fdZde%d ee%fd Zde%d e%fd Ze+hd ZƐd/dqed e0d efd ZǐdZȐdZde%d ee%fdZ d(doeee%efd eAfdZ d(de%doeee%efd eAfdZd eee%effdZ d(de%dqedoeee%efd dfdZdRe%fdZe+hdZe+hdZe+dthZe+dhZd e e%fdZԐd0de%de e%ded ee%fdZde%d eZeAee%ffdZ֐d,de%dqe%d eAfd!ZdOd"de%d^eAfd#Zde%fd$Zِd%ZdOaېd+d&ZeܦdOaݐd+d'ZeަdS(1a8 Configuration management for Hermes Agent. Config files are stored in ~/.hermes/ for easy access: - ~/.hermes/config.yaml - All settings (model, toolsets, terminal, etc.) - ~/.hermes/.env - API keys and secrets This module provides: - hermes config - Show current configuration - hermes config edit - Open config in editor - hermes config get - Print a resolved configuration value - hermes config set - Set a specific value - hermes config unset - Remove a user configuration value - hermes config wizard - Re-run setup wizard N) dataclass)Path)DictAnyOptionalListTupleSet)normalize_route_base_url)masked_secret_prompt_CONFIG_PARSE_WARNED config_pathreturnc* |rdS|}|jdkrdStjd}||jd|d}t|j |jd}|D]8} |j|jkrdS)#t$rY5wxYw| rdStj |||S#t$rYdSwxYw)uPreserve a corrupted ``config.yaml`` by copying it to a timestamped ``.bak``. When the YAML can't be parsed, ``load_config()`` silently falls back to ``DEFAULT_CONFIG`` and the user's broken file stays on disk untouched. That file is still the user's only copy of their intended overrides — if they re-run the setup wizard or ``hermes config set`` (which rewrites ``config.yaml``), the broken-but-recoverable content is gone for good. This snapshots the corrupted file to ``config.yaml.corrupt..bak`` so the user can diff/repair it. Unlike Gemini CLI's policy-file recovery (which resets the live file to a clean state), we deliberately leave ``config.yaml`` in place: hermes never silently mutates the user's config, and leaving it means a hand-fixed file is re-read on the next load. The backup is best-effort — any failure (permissions, symlink, disk full) is swallowed so config loading is never blocked by backup problems. Returns the backup path on success, else ``None``. Symlinks are not followed/copied (mirrors the Gemini #21541 lstat guard) to avoid clobbering whatever a malicious/misconfigured symlink points at. Nrz %Y%m%d-%H%M%Sz .corrupt.z.bakz.corrupt.*.bak) is_symlinkstatst_sizetimestrftime with_namenamelistparentglobOSErrorexistsshutilcopy2 Exception)rstts backup_path sibling_baksexistings 7/home/thesage/.hermes/hermes-agent/hermes_cli/config.py_backup_corrupt_configr&-s[*  ! ! # # 4      :??4 ]? + +!++{/?,R,R",R,R,RSS    # #{'7$G$G$G H H  %  H ==??*bj88 449          4 [+... ttsLDDA'D!"CDD CDCD-D DDdefaultsfallbackexcr)c8 |}t||j|jf}n"#t$rt|ddf}YnwxYw|t vrdSt |t|}|dkr d|d|d}n d|d|d}| |d|d z }t | tj d |d tj dS#t$rYdSwxYw) uSurface a config.yaml parse failure to user, log, and stderr. A YAML parse error in ``~/.hermes/config.yaml`` causes ``load_config()`` to silently fall back to ``DEFAULT_CONFIG``, which means every user override (auxiliary providers, fallback chain, model overrides, etc.) is dropped. Before this helper that was a one-line ``print(...)`` that scrolled off-screen on the first invocation and was never seen again. Now: warn once per (path, mtime_ns, size) on stderr **and** in ``agent.log`` / ``errors.log`` at WARNING level so ``hermes logs`` surfaces it. Re-warns automatically if the file changes (different mtime/size), so users editing the config see the next failure. On the first warning for a given broken file we also snapshot it to a timestamped ``.bak`` (best-effort) so the user's recoverable content survives any later rewrite of ``config.yaml`` by the setup wizard or ``hermes config set``. ``fallback`` selects the message wording: ``"defaults"`` (fresh process, nothing else to serve) or ``"last-known-good"`` (in-process retention of the previously loaded config — see the codex#31188 port in ``_load_config_impl``). rNlast-known-goodzFailed to parse : u{. Keeping the previously loaded config for this process — edits to config.yaml are being IGNORED until the YAML is fixed.u. Falling back to default config — every user override (auxiliary providers, fallback chain, model settings) is being IGNORED. Fix the YAML and restart.z+ A copy of the corrupted file was saved to .u⚠️ hermes config:  )rstr st_mtime_nsrrr addr&loggerwarningsysstderrwriteflushr)rr*r)r keyr"msgs r%_warn_config_parse_failurer;cs2'     ;< ''';A&' """S!!!(55K$$$ O{ O Oc O O O  ){ ) )c ) ) )  K[KKKK NN3  :3:::;;;       s"03AAAD DDWindowsz^[A-Za-z_][A-Za-z0-9_]*$>PATHPAGERSHELLEDITORVISUALBROWSERLD_AUDITLD_DEBUG GIT_SHELL NODE_PATH HERMES_ENV LD_PRELOAD PYTHONHOME PYTHONPATH HERMES_HOME NODE_OPTIONS GIT_EXEC_PATH HERMES_CONFIG PYTHONSTARTUPHERMES_PROFILEPYTHONUSERBASEGIT_SSH_COMMANDLD_LIBRARY_PATHPYTHONEXECUTABLEPYTHONNOUSERSITEDYLD_LIBRARY_PATHDYLD_FRAMEWORK_PATHDYLD_INSERT_LIBRARIESDYLD_FALLBACK_LIBRARY_PATHDYLD_FALLBACK_FRAMEWORK_PATH_ENV_VAR_NAME_DENYLISTr9c>|tvrtd|ddS)zRaise if ``key`` is in :data:`_ENV_VAR_NAME_DENYLIST`. Centralised so both the regular and "secure" env writers share the same gate, and so the message is consistent for callers. zEnvironment variable a is on the writer denylist. Names that influence subprocess execution (LD_PRELOAD, PYTHONPATH, PATH, EDITOR, ...) or Hermes runtime location (HERMES_HOME, HERMES_PROFILE, ...) cannot be persisted via the env writer. If you really need this, edit ~/.hermes/.env directly.N)r[ ValueError)r9s r%_reject_denylisted_env_varr^s@  $$$ 'C ' ' '   %$_LAST_EXPANDED_CONFIG_BY_PATH_LOAD_CONFIG_CACHE_RAW_CONFIG_CACHE>lIRC_PORT QQ_APP_ID IRC_SERVER IRC_CHANNEL IRC_USE_TLS IRC_NICKNAME QQ_STT_MODEL TERMINAL_ENV WECOM_BOT_ID WECOM_SECRET WEIXIN_TOKEN FEISHU_APP_ID WHATSAPP_MODEOPENAI_API_KEYQQ_STT_API_KEYSIGNAL_ACCOUNTANTHROPIC_TOKENMATRIX_PASSWORDOPENAI_BASE_URLQQ_HOME_CHANNELQQ_STT_BASE_URLSIGNAL_HTTP_URLWEIXIN_BASE_URLCOPILOT_CLI_PATHMATRIX_DEVICE_IDMATRIX_HOME_ROOMQQ_ALLOWED_USERSQQ_CLIENT_SECRETSMS_HOME_CHANNELTERMINAL_SSH_KEYWEIXIN_DM_POLICYWHATSAPP_ENABLEDANTHROPIC_API_KEYFEISHU_APP_SECRETLANGFUSE_BASE_URLMATRIX_ENCRYPTIONTERMINAL_SSH_PORTWEIXIN_ACCOUNT_IDDINGTALK_CLIENT_IDFEISHU_ENCRYPT_KEYMATRIX_AUTO_THREADQQBOT_HOME_CHANNELQQ_ALLOW_ALL_USERSSLACK_HOME_CHANNELWECOM_HOME_CHANNELFEISHU_HOME_CHANNELHERMES_LANGFUSE_ENVIRC_SERVER_PASSWORDLANGFUSE_PUBLIC_KEYLANGFUSE_SECRET_KEYMATRIX_RECOVERY_KEYQQ_MARKDOWN_SUPPORTSIGNAL_HOME_CHANNELWECOM_CALLBACK_HOSTWECOM_CALLBACK_PORTWEIXIN_CDN_BASE_URLWEIXIN_GROUP_POLICYWEIXIN_HOME_CHANNELBLUEBUBBLES_PASSWORDCOPILOT_ACP_BASE_URLDISCORD_HOME_CHANNELQQ_HOME_CHANNEL_NAMESIGNAL_ALLOWED_USERSWECOM_CALLBACK_TOKENWEIXIN_ALLOWED_USERSYUANBAO_HOME_CHANNELDINGTALK_HOME_CHANNELHERMES_LANGFUSE_DEBUGIRC_NICKSERV_PASSWORDMATRIX_DM_AUTO_THREADMATTERMOST_REPLY_MODESMS_HOME_CHANNEL_NAMETELEGRAM_HOME_CHANNELBLUEBUBBLES_SERVER_URLDINGTALK_CLIENT_SECRETHERMES_ACP_AUTH_METHODMATRIX_REQUIRE_MENTIONQQ_GROUP_ALLOWED_USERSWECOM_CALLBACK_CORP_IDWEIXIN_ALLOW_ALL_USERSHERMES_ACP_AUTO_APPROVEHERMES_COPILOT_ACP_ARGSHERMES_LANGFUSE_RELEASEMATTERMOST_HOME_CHANNELQQBOT_HOME_CHANNEL_NAMESLACK_HOME_CHANNEL_NAMEWECOM_CALLBACK_AGENT_IDWECOM_HOME_CHANNEL_NAMEBLUEBUBBLES_HOME_CHANNELFEISHU_HOME_CHANNEL_NAMESIGNAL_HOME_CHANNEL_NAMEWEIXIN_HOME_CHANNEL_NAMEDISCORD_HOME_CHANNEL_NAMEFEISHU_VERIFICATION_TOKENHERMES_LANGFUSE_MAX_CHARSHERMES_TOOL_PROGRESS_MODEYUANBAO_HOME_CHANNEL_NAMEDINGTALK_HOME_CHANNEL_NAMEHERMES_COPILOT_ACP_COMMANDMATRIX_FREE_RESPONSE_ROOMSSIGNAL_GROUP_ALLOWED_USERSTELEGRAM_HOME_CHANNEL_NAMEWECOM_CALLBACK_CORP_SECRETWEIXIN_GROUP_ALLOWED_USERSHERMES_LANGFUSE_SAMPLE_RATEMATTERMOST_HOME_CHANNEL_NAMEBLUEBUBBLES_HOME_CHANNEL_NAMEWECOM_CALLBACK_ENCODING_AES_KEY)Colorscolor)DEFAULT_SOUL_MDis_legacy_template_soul)true1yesNixOS)nixnixosz /nix/storebrewhomebrewc0tjdd}|rE|}|tvrdS|t vrdSt ||Stdz }| rdSdS)z7Return the package manager owning this install, if any.HERMES_MANAGEDNrz.managed) osgetenvstriplower_IGNORED_MANAGED_VALUES_MANAGED_TRUE_VALUES_MANAGED_SYSTEM_NAMESgetget_hermes_homer)raw normalizedmanaged_markers r%get_managed_systemrcs )$b ) ) / / 1 1C :YY[[ 0 0 04 - - -7$((S999$&&3Nw 4r_c"tduS)aCheck if Hermes is running in package-manager-managed mode. Two signals: the HERMES_MANAGED env var (set by the systemd service), or a .managed marker file in HERMES_HOME (set by the NixOS activation script, so interactive shells also see it). N)rr_r% is_managedrts   t ++r_zUpdate Hermes through the Nix source that installed it (e.g. nix profile upgrade, or update your flake input and rebuild with nixos-rebuild or home-manager switch)c<t}|dkrtSdS)z;Return the preferred upgrade command for a managed install.rN)r_NIX_UPDATE_MSG)managed_systems r%get_managed_update_commandrs#'))N   4r_ project_rootcj||SttjjS)uResolve the directory that holds the *running code* (the install tree). This is the parent of ``hermes_cli/`` — i.e. the git checkout for source installs, ``/opt/hermes`` inside the published image. It is a property of the running interpreter, NOT of ``$HERMES_HOME``, which is why a code-scoped stamp here is immune to two installs sharing one data directory. r__file__rresolve)rs r%_install_method_project_rootrs. >> ' / / 1 11r_ct|}hd} |dz d}||vr|Sn#t$rYnwxYw t dz d}||vr|dkrt r|Sn#t$rYnwxYwt}|r(|ddS | }|tkrt|j vrdSn#t$rYnwxYw|d z }| rd S| rQ |d}|d rd Sn#t$rYnwxYwd S) u Detect how Hermes was installed: 'docker', 'nix', 'nixos', 'git', or 'unknown'. Resolution order: 1. Code-scoped stamp ``/.install_method`` (next to the running code) — the authoritative marker. 2. Legacy home-scoped stamp ``$HERMES_HOME/.install_method`` — read for backward compatibility, but a ``docker`` value is IGNORED when we are not actually running inside a container (see below). 3. HERMES_MANAGED env / .managed marker (NixOS managed mode) 4. /nix/store/ path detection -> 'nix' (nix run / nix profile install) 5. .git directory presence -> 'git' 6. Fallback -> 'unknown' Why the stamp is code-scoped, not home-scoped (issue: shared ``~/.hermes``) -------------------------------------------------------------------------- The install method describes *the binary that is running*, but ``$HERMES_HOME`` is a shared DATA directory — the Docker docs deliberately bind-mount it (``~/.hermes:/opt/data``) so config/sessions/memory persist and can be shared with a host-side Desktop/CLI install. When a containerised gateway and a host install share one ``$HERMES_HOME``, a home-scoped stamp is a single slot describing two different installs: the container stamps ``docker`` on every boot, the host install then reads ``docker`` and ``hermes update`` refuses to run ("doesn't apply inside the Docker container") even though the host binary is a perfectly updatable git/pip install. Scoping the stamp to the install tree gives each install its own truthful marker. Self-healing for already-poisoned homes: a legacy ``docker`` value in the home-scoped stamp is only honoured when we are genuinely in a container. On a host install that read a contaminating ``docker`` stamp, we fall through to managed/.git detection instead — so existing shared-home setups recover without the user touching anything. Note: running inside a container is NOT treated as "docker" on its own. The supported installs self-identify via the code-scoped stamp: - the curl installer (scripts/install.sh, the README/website install command) git-clones the repo and stamps ``git`` next to the code; - the published ``nousresearch/hermes-agent`` image bakes a ``docker`` stamp into ``/opt/hermes`` at build time. An unsupported manual install dropped into a container (no stamp) falls through to the ``.git`` checks and behaves like any off-path install. See issue #34397. >gitrrdockerunknown.install_methodutf-8encodingr -rz.gitrzgitdir:r)r read_textrrrr_running_in_containerrreplacer _NIX_STOREparentsis_diris_file startswith)rrootsupported_methodsmethodmanagedresolvedgit_pathcontents r%detect_install_methodrs8X ( 5 5DDDD **55w5GGMMOOUUWW & & &M '          !2 2 YY ( ( UWW UWW  & & &(0B0BK`KbKb0BM      !""G1}}&&sC000  <<>> z ! !jH4D&D&D5      f}Hu (('(::@@BBG!!),, u     D  9sIAA A&%A&*A"C CC-E EE=G GGcF ddlm}|S#t$rYdSwxYw)zDThin wrapper around ``hermes_constants.is_container`` (import-safe).r is_containerF)hermes_constantsrrrs r%rrsG111111|~~ uu   r ct|} |dd|dz |dzddS#t$rYdSwxYw)a<Write the install method next to the running code (code-scoped stamp). The stamp lives in the install tree (``/.install_method``), not in ``$HERMES_HOME``, so that two installs sharing one data directory do not overwrite each other's marker. See ``detect_install_method`` for the full rationale. Best-effort: if the install tree is read-only (e.g. the immutable ``/opt/hermes`` in the published image, which instead bakes the stamp at build time) the write silently no-ops and detection falls back to its other signals. Trexist_okrr/rrN)rmkdir write_textr)r rr s r%stamp_install_methodr sw ( 5 5D  4$ /// ! !--ftmg-NNNNN      s4A AAc,|dvrtS|dkrdSdS)zAReturn the update command or guidance for a given install method.>rrrz,docker pull nousresearch/hermes-agent:latestz hermes update)r)r s r%%recommended_update_command_for_methodrs* !!! == ?r_czt}|r|Stt}t|S)z C C Cr_modify configurationcVtt|tjdS)z+Print user-friendly error for managed mode.fileN)printr*r5r6)r's r% managed_errorr0xs&  ( (sz::::::r_ctjddkrdSddlm}|rdSt dz } i}t |dd 5}|D]q}|}d |vrW|d sB| d \}}}|||<r dddn #1swxYwYn#t$rYdSwxYw|d d }|dd} |dd} |dd} || | | dS)aRead container mode metadata from HERMES_HOME/.container-mode. Returns a dict with keys: backend, container_name, exec_user, hermes_bin or None if container mode is not active, we're already inside the container, or HERMES_DEV=1 is set. The .container-mode file is written by the NixOS activation script when container.enable = true. It tells the host CLI to exec into the container instead of running locally. HERMES_DEVrNrrz.container-moderrr=#backendrcontainer_namez hermes-agent exec_userhermes hermes_binz /data/current-package/bin/hermes)r6r7r8r:) renvironrrrropenrr  partitionFileNotFoundError) rcontainer_mode_fileinfofliner9_valuer6r7r8r:s r%get_container_exec_inforEs z~~l##s**t------|~~t)++.??  %sW = = = 6 6 6zz||$;;ts';';;$(NN3$7$7MCE(- D%  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 tthhy(++GXX.??Nh//I,(JKKJ(   s7 C,A5C  C, C$$C,'C$(C,, C:9C:)rget_process_hermes_home)atomic_replacefast_safe_loadc$tdz S)zGet the main config file path. config.yamlrrr_r%get_config_pathrLs   } ,,r_c$tdz S)z&Get the .env file path (for API keys)..envrKrr_r% get_env_pathrOs   v %%r_cbttjjS)z'Get the project installation directory.rrr_r%r r s >> ' / / 1 11r_ctjdkrdStjdd}tjdd} |rt |nd}n#t$rd}YnwxYw |rt |nd}n#t$rd}YnwxYw||fS)aRead the HERMES_UID / HERMES_GID env vars set by Docker deployments. Docker containers running Hermes commonly set these to map the in-container user to a host user so volume-mounted state files end up with the right ownership. The entrypoint chowns the top-level HERMES_HOME once, but subdirectories created at runtime by ``ensure_hermes_home()`` (especially for profile namespaces under ``profiles//``) need the same chown or they land as ``root:root`` and block subsequent uid-mapped workers with ``PermissionError [Errno 13]``. See #34107. Returns ``(uid, gid)`` parsed from the env vars, or ``(None, None)`` when either is missing/invalid. Returns ``(None, None)`` on Windows too (where chown is a no-op anyway). win32NN HERMES_UIDr HERMES_GIDN)r5platformrr;rrintr])uid_strgid_struidgids r%_resolve_hermes_uid_gidr\s |wzjnn\2..4466Gjnn\2..4466G%/c'lll4 %/c'lll4  8Os$8B BBB33 CCct\}}||dS tj|||nd||nddS#ttt f$rYdSwxYw)uChown ``path`` to ``HERMES_UID:HERMES_GID`` if those env vars are set. No-op when: - Either env var is unset/invalid - The current process isn't root (chown will EPERM — silently ignored) - On Windows (chown semantics don't apply) Used by :func:`_secure_dir` to keep ownership consistent across all directories created by :func:`ensure_hermes_home` on Docker deployments. See #34107. N)r\rchownrAttributeErrorNotImplementedError)pathrZr[s r%_chown_to_hermes_uidrcs'((HC {s{    ?CC?CC     ^%8 9      s9AAcTtrdS tjdd}|rt |dnd}n#t $rd}YnwxYw tj||n#ttf$rYnwxYwt|dS)uXSet directory to owner-only access (0700 by default). No-op on Windows. Skipped in managed mode — the NixOS module sets group-readable permissions (0750) so interactive users in the hermes group can share state with the gateway service. The mode can be overridden via the HERMES_HOME_MODE environment variable (e.g. HERMES_HOME_MODE=0701) for deployments where a web server (nginx, caddy, etc.) needs to traverse HERMES_HOME to reach a served subdirectory. The execute-only bit on a directory permits cd-through without exposing directory listings. Also applies ``HERMES_UID``/``HERMES_GID``-based ownership when those env vars are set (#34107 — Docker deployments need this so profile subdirs created at runtime by kanban workers don't land as root:root and block subsequent uid-mapped workers). NHERMES_HOME_MODEri) rrr;rrrWr]chmodrrarc)rbmode_strmodes r% _secure_dirrjs$||:>>"4b99??AA#+6s8Q   t ( )     s$AA A('A(,BBBctjdstjdrdStjdrdS t ddd5}|}d d d n #1swxYwYd |vsd |vsd |vrdSn#ttf$rYnwxYwd S)a3Detect if we're running inside a Docker/Podman/LXC container. When Hermes runs in a container with volume-mounted config files, forcing 0o600 permissions breaks multi-process setups where the gateway and dashboard run as different UIDs or the volume mount requires broader permissions. HERMES_CONTAINERHERMES_SKIP_CHMODTz /.dockerenvz/proc/1/cgroupr3rrNrlxckubepodsF) rr;rrbrr<readrIOError)rAcgroup_contents r% _is_containerrss! z~~())RZ^^>#d)) $ $ " HT5 ! ! ! ! ! " " ( )     sAA%%A:9A:homec|dz }|rA |d}n#ttf$rYdSwxYwt |sdS|t dt|dS)aSeed a default SOUL.md into HERMES_HOME, upgrading legacy empty templates. First run: write DEFAULT_SOUL_MD. Existing installs whose SOUL.md is still the old comment-only scaffold (seeded by older install.sh / install.ps1 / docker images, which shadowed the runtime default) get upgraded in place to DEFAULT_SOUL_MD. A SOUL.md the user actually customized is never touched. zSOUL.mdrrN)rrrUnicodeDecodeErrorrrrru)rv soul_pathr$s r%_ensure_default_soul_mdrzHsy I  **G*<rrumask_ensure_hermes_home_managedrrjrzr2)rvr9 old_umasksubdirds r%ensure_hermes_homercsa   D d))C """t{{}}"  {:%%dkkmm% =$ = = =   ||&HUOO  ' - - - HY    BHY     4$ ///D   Fv A GGD4G 0 0 0 NNNN%%%S!!!!!s B;;Cc |std|ddD]-}||z }|st|d.|dz dz ddt|dS) zPManaged-mode variant: verify dirs exist (activation creates them), seed SOUL.md.z HERMES_HOME z7 does not exist. Run 'sudo nixos-rebuild switch' first.)rrrrrcuratorTrN)r RuntimeErrorrrz)rvrrs r%rrs ;;==  54 5 5 5   ; 6Mxxzz 999   F]Y%%dT%BBBD!!!!!r_)DEFAULT_CONFIGOPTIONAL_ENV_VARS)FIRECRAWL_API_KEYBROWSERBASE_API_KEYBROWSERBASE_PROJECT_IDFAL_KEYVOICE_TOOLS_OPENAI_KEYELEVENLABS_API_KEY)rroWHATSAPP_ALLOWED_USERSSLACK_BOT_TOKENSLACK_APP_TOKENSLACK_ALLOWED_USERSTAVILY_API_KEYTERMINAL_MODAL_MODE) ENV_VARS_BY_VERSIONF required_onlyc.g}tD]1\}}t|s|d|i|ddi2|sEt jD]1\}}t|s|d|i|ddi2|S)z| Check which environment variables are missing. Returns list of dicts with var info for missing variables. r is_requiredTF)REQUIRED_ENV_VARSitems get_env_valueappendr)rmissingvar_namer@s r%get_missing_env_varsrs G,1133LL$X&& L NNFHJJmTJJ K K K Q/577 Q QNHd ** QODO-OOPPP Nr_ dotted_keyc j|d}|}|ddD]}t|trE t|}n+#tt f$rt d|d|dwxYw||}\t|t rC||}||vst|t tfsi||<||}t dt|j d||d}t|tr||t|<dS|||<dS) uSet a value at an arbitrarily nested dotted key path. Supports both dict and list navigation: _set_nested(c, "a.b.c", 1) → c["a"]["b"]["c"] = 1 _set_nested(c, "a.0.b", 1) → c["a"][0]["b"] = 1 _set_nested(c, "providers.1", "x") → c["providers"][1] = "x" Intermediate dicts are created on demand. List indices are parsed from numeric path segments; the referenced index must already exist (we do not grow lists — the user is navigating into structure they wrote themselves). If a segment targets a non-container leaf (scalar), the leaf is replaced with a fresh dict so the write can proceed — this preserves the pre-existing behavior for bare scalar overrides (e.g. setting ``a.b.c`` where ``a.b`` was previously a string). Guards against #17876: before this fix the code unconditionally replaced any non-dict value (including lists) with ``{}``, silently destroying list-typed config like ``custom_providers`` whenever a caller used an indexed path. r.Nr^z!Cannot navigate into list at key z : segment z is not a numeric indexzCannot navigate into z at key ) split isinstancerrW TypeErrorr]dictrtype__name__) configrrDpartscurrentpartidxr$lasts r% _set_nestedrs|,   S ! !EGcrc  gt $ $  $iiz*   ? ??#???  clGG  & & {{4((H7""*Xd|*L*L" " dmGGVW (>VV VV  9D'4  "D  s A  (A2T) clear_api_keyclear_api_modeclear_base_url model_cfgrrrct|ts|S|r,|dd|dd|r|dd|r|dd|S)aRemove stale inline endpoint credentials from a model config. ``model.api_key`` is valid only for explicit custom endpoint assignments. Built-in providers resolve credentials from env vars, auth.json, or the credential pool. When switching away from a custom endpoint, leaving these fields behind keeps secrets in config.yaml and can contaminate later custom resolution paths. api_keyNapiapi_modebase_url)rrpop)rrrrs r% clear_model_endpoint_credentialsrs i & &# i&&& eT"""( j$'''( j$''' r_cD|}|dD]}t|tr= |t|}.#tt t f$r tcYcSwxYwt|tr||vr tcS||}tcS|S)z=Return a dotted-path value from nested dict/list config data.r.) rrrrWrr] IndexError_MISSINGr)rrrrs r% _get_nestedr1sG  %%   gt $ $  !#d)),z:6     & & 7""dmGGOOO NsAA)(A)c|d}|sdSg}|}|ddD]}|||ft|tr6 |t |}E#t t tf$rYdSwxYwt|tr||vrdS||}dS|d}d}t|trD | t |d}nA#t t tf$rYdSwxYwt|tr ||vrdS||=d}ndSt|D]\}}|ikrnt|trk t |} n#t t f$rYn{wxYwd| cxkrt|kr'nnY|| ikr| | |}n4t|tr| |ikr||=|}|S)z=Remove a dotted-path value from nested dict/list config data.r.FNr^Tr) rrrrrWrr]rrrreversedlenr) rrrrrrrremovedrrs r% _unset_nestedrCs   S ! !E uGGcrc  ''' gt $ $  !#d)),z:6   uuu   & & 7""uudmGG55 9DG'4    KKD " " "GG:z2   55  GT " " w  5 DMu!))  b== E fd # #  $iiz*    C%%%%#f++%%%%%&+*;*; 3   % % &**T*:*:b*@*@t G  Ns6A--B B $C99DD,E<<FFcd|vrdS|}gd}||vp)|dp|dS)z;Return whether `hermes config set` routes this key to .env.r.F)OPENROUTER_API_KEYrprr EXA_API_KEYPARALLEL_API_KEYrFIRECRAWL_API_URLFIRECRAWL_GATEWAY_URLTOOL_GATEWAY_DOMAINTOOL_GATEWAY_SCHEMETOOL_GATEWAY_USER_TOKENrrrBROWSER_USE_API_KEYrTELEGRAM_BOT_TOKENDISCORD_BOT_TOKENTERMINAL_SSH_HOSTTERMINAL_SSH_USERr SUDO_PASSWORDrr GITHUB_TOKENHONCHO_API_KEY)_API_KEY_TOKEN_SECRET TERMINAL_SSH)upperendswithr )r9 key_upperapi_keyss r%_is_env_config_keyrsj czzu I   H X 0   ? @ @ 0    / /r_as_jsonc|rddl}|j|dSt|tr|rdndS|dSt|tt fr(t j|dSt|S) z.Format a config value for command-line output.rNF) ensure_asciirfalsenull sort_keys) jsondumpsrboolrryaml safe_dumprstripr0)rDrrs r%_format_config_get_valuers5 tz%e4444%,+vvG+ }v%$&&?~eu555<<>>> u::r_ct}gddtdtdtffd t|S)z Check which config fields are missing or outdated (recursive). Walks the DEFAULT_CONFIG tree at arbitrary depth and reports any keys present in defaults but absent from the user's loaded config. rr'rprefixc`|D]\}}|dr|s|n|d|}||vr||d|dGt|tr;t||tr||||dS)NrCr.zNew config option: )r9default description)rr rrrr)r'rrr9 default_valuefull_key_checkrs r%rz)get_missing_config_fields.._checks"*.."2"2 > > C~~c"" "(?ss.?.?#.?.?H'!!#,#C#C#C   M400 >Z C@P@PRV5W5W >}gclH=== > >r_)r) load_configrr0r)rrrs @@r%get_missing_config_fieldsrsj]]FG > > > >c > > > > > > > F>6""" Nr_c6 ddlm}m}n#t$rgcYSwxYw |}nF#t$r9}ddl}|jt d|gcYd}~Sd}~wwxYw|sgSt}g}|D]}|d|d}| d} |} d} | D](} t| tr| | vr | | } | } &d} | )t| tr)| s|||S)a3Return skill-declared config vars that are missing or empty in config.yaml. Scans all enabled skills for ``metadata.hermes.config`` entries, then checks which ones are absent or empty under ``skills.config.`` in the user's config.yaml. Returns a list of dicts suitable for prompting. r)discover_all_skill_config_varsSKILL_CONFIG_PREFIXNz)discover_all_skill_config_vars failed: %sr.r9)agent.skill_utilsrrrlogging getLoggerrdebugrrrrr0rr) rrall_varserrrvar storage_keyrrrDrs r%get_missing_skill_config_varsrsYYYYYYYYY   1133  (##)) 7      ]]F$&G  ,;;s5z;; !!#&&  D'4(( TW__!$- =Zs33=EKKMM= NN3    Ns&  ) A,.A'!A,'A,_PROVIDER_NORMALIZE_WARNED provider_key signaturer:argsc|pd|f}|tvrdSt|tj|g|RdS)zKEmit ``logger.warning(msg, *args)`` at most once per (provider, signature).?N)rr2r3r4)rrr:r dedup_keys r%_warn_once_per_providerrsV$i0I...""9--- N3r_rrentryc t|tsdSt|}ddddddddd }d |vrd|vr |d |d<hd }|D]1\}}||vr(||vr$t|d |d |pd||||||<2t ||z t |z }|rXt|ddt|zd|pddt|ddlm }d}dD]} | | } t| tr}| ri| } tjd| r| }n=|| } | jr | jr| }n t"d|pd| | |sdSd} | d}t|tr)| r| } n(| r| } | sdS| |d}| }|r||d<| d}t|tr+| r| |d<| d}t|tr+| r| |d<| dp| d}t|tr+| r| |d<| dp| d}t|tr+| r| |d<| d}t|tr|rt||d<n2t|t&r|ri}|D] }t|tr,| ri|| <Dt|tsZ| d}t|tr| s| d}t|tr| sd |D}||| <|r||d<| d}t|t(r |dkr||d<| d}t|t(t*fr |dkr||d<| d!}t|t,r||d!<| d"}t|trt||d"<t/| d#}|r||d#<| d$}t|tr+| r| |d$<| d%}t|t,r||d%<n@t|tr+| r| |d%<|S)&z>Return a runtime-compatible custom provider entry or ``None``.Nrrrkey_env default_modelcontext_lengthrate_limit_delay)apiKeybaseUrlapiModekeyEnv apiKeyEnv defaultModel contextLengthrateLimitDelay api_key_env>rurlrmodelmodelsrrrrprovider transport extra_body ssl_verifyr' ssl_ca_certr extra_headersrdiscover_modelsrstale_timeout_secondsrequest_timeout_secondszcamel:z[providers.%s: camelCase key '%s' auto-mapped to '%s' (use snake_case to avoid this warning)rzunknown:,z-providers.%s: unknown config keys ignored: %s, r)urlparser)rr(rz \{[^}]+\}uPproviders.%s: '%s' value '%s' is not a valid URL (no scheme or host) — skippedr)rrrr,r)r*idc"i|] \}}|dv || S)>r7rr.0kvs r% z4_normalize_custom_provider_entry..s/A.1H1H11H1H1Hr_r1r-r0r/r.)rrrrsetkeysjoinsorted urllib.parser6rr0rresearchschemenetlocr3r4rrWfloatrnormalize_extra_headers) rr_CAMEL_ALIASES _KNOWN_KEYScamelsnakerr6rurl_keyraw_url candidateparsedrraw_namerrrr model_namer*normalized_modelsitemmodel_id model_metarrr1r-normalized_headersr/r.s r% _normalize_custom_provider_entryrXs eT " "t KKE'), & &N)5"8"8 /i   K',,..(( u E>>e500 #.u..9#UE     !"ii ""G'30GMMOO0 '  9ii ""G'30GMMOO0 '  9yy$$> +(>(>H(C  2X^^%5%52!)!1!1 :7##Auyy'A'AJ*c""1z'7'7'9'91(..00 7 YYx F&$5F5 $F|| 8 FD ! !5f5 -/ = =D$$$  24!$**,,/dD)) xx~~Hh,, ,HNN4D4D ,88F++h,, HNN4D4D !%J3= hnn.. / /  5#4Jx YY/00N.#&&6>A+=+='5 #$yy!344"S%L11:6F!6K6K)9 %&ii 122O/4((8(7 $%<((J*d##4#' #3#3 < 1?1K1KLL9&8 ?#))M**K+s##8 (9(9(;(;8$/$5$5$7$7 =!<((J*d##6#- <  J $ $6)9)9););6#-#3#3#5#5 < r_ctt|trt|n||}|dSd|di}dD]}||vr ||||<d|vr |d|d<d|vr |d|d <|S) zDTranslate a legacy custom provider entry to the v12 providers shape.rNrr) rrrr*rrr1r-r0r/r.r)rrr,)rXrr)rrrprovider_entryfields r%)_custom_provider_entry_to_provider_configr\s 2!%..9U E!Jt&+Z -C%DN 66 J  $.u$5N5 !**4W*='Z&0&<{# r_providers_dictc t|tsgSg}|D]_\}}t|trt|s*t |t |}|||`|S)zMNormalize ``providers`` config entries into the legacy custom-provider shape.r)rrris_provider_enabledrXr0r)r]custom_providersr9rrs r%"providers_dict_to_custom_providersras nd + + -/$**,,00 U eT " " +>u+E+E  5e#c((SSS  !  # #J / / / r_rc|t}gttdtttt fddffd }|d}|4t|tsgS|D]}|t|t|dD] }||S)ayReturn a deduplicated custom-provider view across legacy and v12+ config. ``custom_providers`` remains the on-disk legacy format, while ``providers`` is the newer keyed schema. Runtime and picker flows still need a single list-shaped view, but we should not materialise that compatibility layer back into config.yaml because it duplicates entries in UIs. Nrrc>|dSt|ddpd}t|ddpd}t|ddpdd}t|ddpd}|||f}|r|vrdS|r|r|vrdS||r||r|r|dSdSdS)Nrrrr/r))r0rrrrrr2) rrrrr)pair compatibleseen_name_url_pairsseen_provider_keyss r%_append_if_newz7get_compatible_custom_providers.._append_if_new s = F599^R88>B??EEGGMMOO 599VR((.B//5577==??uyyR006B77==??FFsKKQQSSEIIgr**0b117799??AAh&  L,>>> F  H )rrr0rrrrrXra)rrir`rrfrgrhs @@@r%get_compatible_custom_providersrks ~')J!ee"uu*htCH~6*4********(zz"455#*D11 I% D DE N;EBB C C C C3FJJ{4K4KLLu r_rDc|dSt|tr|St|tr2|}|dvrdS|dvrdSdS)N>0nooffrF>ronrrT)rrr0rr)rDlowereds r%_coerce_ssl_verifyrr.su }t% %++--%%'' 1 1 15 0 0 04 4r_rr`c2|# t|}n#t$rg}YnwxYw|rt|tsiSt |}|D]}t|t st |d}|r||krCi}|d}t|tr+|r||d<t|d}|||d<|cSiS)zOReturn TLS settings from a matching ``custom_providers`` / ``providers`` entry.Nrr/r.) rkrrrr rrr0rrr) rr`r target_urlr entry_urloutcaverifys r% get_custom_provider_tls_settingsry<sE  ">vFF   " " "!    " :&6== )(33J!  %&&  ,UYYz-B-BCC  I33   YY} % % b#   ,288:: ,!#C #EIIl$;$;<<   &C  I  ## client_kwargsct|||}|dr |d|d<d|vr |d|d<dSdS)zCAttach per-provider TLS knobs to OpenAI client kwargs when matched.r/r.N)ryr)r{rr`rtlss r%*apply_custom_provider_tls_to_client_kwargsr~\sa +85Ev N NC ww}:'*='9 m$s&),&7 l###r_r0cpt|tr|siSd|DS)a.Normalize a raw ``extra_headers`` value into a ``dict[str, str]``. Stringifies keys and values and drops entries whose value is ``None``. Returns ``{}`` for non-dict or empty inputs. This is the single shared normalizer for per-provider ``extra_headers`` across config normalization, runtime resolution, client construction, and live ``/models`` discovery. SECURITY: header values routinely carry credentials (Cloudflare Access service tokens, proxy auth, custom bearer schemes). Callers must never log the returned values. cRi|]$\}}|t|t|%SN)r0r9s r%r=z+normalize_extra_headers..xs+ N N Ntq! CFFCFF r_)rrr)r0s r%rHrHjsB mT * *- N N}':':'<'< N N NNr_c||# t|}n#t$rg}YnwxYw|rt|tsiSt |}|D]k}t|t st |d}|r||krCt|d}|r|cSliS)aReturn ``extra_headers`` from a matching ``providers`` / ``custom_providers`` entry. Matches the entry whose normalized route identity equals *base_url*, mirroring :func:`get_custom_provider_tls_settings`, and returns its ``extra_headers`` dict, or ``{}`` when no entry matches or declares none. SECURITY: header values routinely carry credentials (Cloudflare Access service tokens, proxy auth, custom bearer schemes). Callers must never log the returned values. Nrr0)rkrrrr rrrH)rr`rrtrruheaderss r%!get_custom_provider_extra_headersr{s ">vFF   " " "!    " :&6== )(33J!%&&  ,UYYz-B-BCC  I33 )%))O*D*DEE  NNN  Irzct|||}|sdSt|dpi}||||d<dS)uMerge per-provider ``extra_headers`` onto OpenAI client ``default_headers``. Provider-specific headers win over provider/SDK defaults already present in ``client_kwargs`` — they are the most specific configuration level. No-op when the base_url matches no ``providers`` / ``custom_providers`` entry or the entry declares no headers. SECURITY: values may carry credentials — never log them. Ndefault_headers)rrrupdate)r{rr`rr0mergeds r%4apply_custom_provider_extra_headers_to_client_kwargsrsh6h@PRXYYM  -##$566<" = =F MM-   '-M#$$$r_r)c|r|sdS|T t|}nC#t$r6|YdS|d}t|tr|ng}YnwxYwt|tsdSt |}|sdS|D]}t|t st |d}|r||krC|d}t|t sn||} t| t s| d} |  t| } n#ttf$rYwxYw| dkr| cSdS)aLook up a per-model ``context_length`` override from ``custom_providers``. Matches any entry whose normalized route identity equals ``base_url`` and returns ``custom_providers[i].models..context_length`` if present and valid. Returns ``None`` when no override applies. This is the single source of truth for custom-provider context overrides, used by: * ``AIAgent.__init__`` (startup resolution) * ``AIAgent.switch_model`` (mid-session ``/model`` switch) * ``hermes_cli.model_switch.resolve_display_context_length`` (``/model`` confirmation display) * ``gateway.run._format_session_info`` (``/info`` display) * ``agent.model_metadata.get_model_context_length`` (when custom_providers is threaded through) Before this helper existed, the lookup was duplicated in ``run_agent.py``'s startup path only; every other path (notably ``/model`` switch) fell back to the 128K default. See #15779. Nr`rr*rr) rkrrrrr rrWrr]) r)rr`rrrtrrur*rraw_ctxctxs r%"get_custom_provider_context_lengthrs0 t D>vFF   D D D~tt**/00C&0d&;&;Css     D & - -t)(33J t!%&&  ,UYYz-B-BCC  I33 8$$&$''  JJu%% )T**  -- 011 ?  g,,CC:&    H  77JJJ  4s& A.AA;E  EEct|trdS t|}n#ttf$rYdSwxYwt |dS)zHReturn a safe integer config version, treating invalid values as legacy.r)rrrWrr]max)rDversions r%_coerce_config_versionrs`%qe** z "qq w??s )>>ct}|sdS t|d5}t|pi}dddn #1swxYwYn#t$rYdSwxYwt |t od|vS)uyTrue when config.yaml exists, parses, and carries a ``_config_version`` key. Distinguishes an ANCIENT config (explicit old version → refused by the v12 support floor) from a fresh minimal/hand-written/cloned config with no version key at all (→ migrated + stamped normally). Missing or unparseable files return False so they never trip the floor gate. FrrN_config_version)rLrr<rHrrr)rrArs r% _raw_config_has_explicit_versionrs"##K     u + 0 0 0 *A ##)rC * * * * * * * * * * * * * * * uu c4 =%6#%==s4A!A A!AA!AA!! A/.A/cttjddpd}t}|s||fS t |d5}t |pi}dddn #1swxYwYn+#t$r}t||||fcYd}~Sd}~wwxYwt|tsi}t|d}||fS)a Check the raw on-disk config schema version. ``load_config()`` deliberately starts from ``DEFAULT_CONFIG`` and deep-merges the user's file, which is correct for runtime reads but wrong for deciding whether the user's persisted schema has been migrated. A config file with no raw ``_config_version`` must remain visible as legacy instead of inheriting the latest default version in memory. Returns (current_version, latest_version). rrrN) rrrrLrr<rHrr;rr)latestrrArr rs r%check_config_versionrsR$N$67H!$L$L M M RQRF!##K     v~ + 0 0 0 -A#A&&,"F - - - - - - - - - - - - - - -  #;222v~  fd # #$VZZ0A%B%BCCG F?sB BA;/ B;A??BA?B B/B*$B/*B/>signalplugins image_gen platforms video_gen mcp_servers session_resetfallback_modelprofile_routesreset_triggersrequire_mentionalways_log_localr`platform_toolsetsmultiplex_profilessmart_model_routingstt_echo_transcriptsknown_plugin_toolsetsknown_builtin_toolsetsgroup_sessions_per_userfilter_silence_narrationthread_sessions_per_userunauthorized_dm_behavior> rr)r*rrrrr-r.r/rr>rrrrc2eZdZUdZeed<eed<eed<dS) ConfigIssuez$A detected config structure problem.severitymessagehintN)r __module__ __qualname____doc__r0__annotations__rr_r%rris1..MMM LLL IIIIIr_rc d |2 t}n"#t$rtdddgcYSwxYwg}|d}|t |t r|tdddt |t r!t|n t}|tz}|r5|tdd t|d d nt |trt|D]\}}t |t s>|tdd |d t|jddX|ds(|tdd |dd|ds(|tdd |dd|d}|t |trt|D]\}}t |t s=|tdd|dt|jdW|ds(|tdd|dd|ds(|tdd|ddnt |t s:|tdd t|jd!nt|rr|ds$|tdd"d|ds$|tdd#d$t |t r.d|vr*d|pivr$|tdd%d&|d}|r&|s$|tdd'd(|D]V} | d)r| t vr5| tvr,|tdd*| d+d,| d-W|S).a"Validate config.yaml structure and return a list of detected issues. Catches common YAML formatting mistakes that produce confusing runtime errors (like "Unknown provider") instead of clear diagnostics. Can be called with a pre-loaded config dict, or will load from disk. NerrorzCould not load config.yamlz+Run 'hermes setup' to create a valid configr`uOcustom_providers is a dict — it must be a YAML list (items prefixed with '-')zeChange to: custom_providers: - name: my-provider base_url: https://... api_key: ...r4zRoot-level keys z( look like custom_providers entry fieldszLThese should be indented under a '- name: ...' list entry, not at root levelzcustom_providers[z] is not a dict (got )z1Each entry should have at minimum: name, base_urlrz] is missing 'name' fieldz#Add a name, e.g.: name: my-providerrz] is missing 'base_url' fieldzDAdd the API endpoint URL, e.g.: base_url: https://api.example.com/v1rzfallback_model[z] should be a dict, got z!Each entry needs provider + modelr+z] is missing 'provider' fieldz/Add: provider: openrouter (or another provider)r)z] is missing 'model' fieldzAdd: model: zAfallback_model should be a dict with 'provider' and 'model', got zZChange to: fallback_model: provider: openrouter model: anthropic/claude-sonnet-4uHfallback_model is missing 'provider' field — fallback will be disableduEfallback_model is missing 'model' field — fallback will be disabledz8Add: model: anthropic/claude-sonnet-4 (or another model)zGfallback_model appears inside custom_providers instead of at root levelzDMove fallback_model to the top level of config.yaml (no indentation)u[custom_providers defined but no 'model' section — Hermes won't know which provider to useziAdd a model section: model: provider: custom default: your-model-name base_url: https://...rCzRoot-level key 'uW' looks misplaced — should it be under 'model:' or inside a 'custom_providers' entry?zMove 'z' under the appropriate section)rrrrrrrr>r?_CUSTOM_PROVIDER_LIKE_FIELDSrAr enumeraterrr _KNOWN_ROOT_KEYS) rissuescpcp_keys suspiciousirfbrr9s r%validate_config_structurerrs~ w ]]FF w w w)EGtuuv v v v w!#F & ' 'B ~ b$  (  MM+a%   )32t(<(<Gc"''))nnn#%%G #??J  kcvj'9'9cccb D ! ! %bMM  5!%..MM+![A[[DKKDX[[[K## yy((MM+!HAHHH=## yy,,MM+!LALLL^## $ % %B ~ b$  + %bMM  5!%..MM+[![[T%[[EY[[;## !99Z00 k%NaNNNM'' !99W-- k%KaKKK6'' (B%%  MM+gTXY[T\T\Tegg7     66*%%  k^E 66'??  k[N"d 0 > >CSXZX`^`CaCa k  U R      7##I  )   k  i (      >>#     & & &32N+N+N MM+3====    Ms 22cT t|}n#t$rYdSwxYw|sdSdg}|D]1}|jdkrdnd}|d|d|j2|dt jd |d zdS) zPrint config structure warnings to stderr at startup. Called early in CLI and gateway init so users see problems before they hit cryptic "Unknown provider" errors. Prints nothing if config is healthy. Nu3⚠ Config issues detected in config.yaml:ru ✗u ⚠ rz2 Run 'hermes doctor' for fix suggestions.r/ ) rrrrrr5r6r7r@)rrlinescimarkers r%print_config_warningsrs*622   H IE11)+)?)?%%EY /&//2://0000 LLKLLLJTYYu%%./////rctjd}tjd}|! t}n#t$rYdSwxYw|di}t |t r|ddnd}|dv}g}|r|d|d |r|s|d |d |rd d lm }|}| d d |d|d|dtj d|dzdSdS)uWarn if MESSAGING_CWD or TERMINAL_CWD is set in .env instead of config.yaml. These env vars are deprecated — the canonical setting is terminal.cwd in config.yaml. Prints a migration hint to stderr. MESSAGING_CWD TERMINAL_CWDNterminalcwdr.>rrautor.u ⚠ MESSAGING_CWD=u& found in .env — this is deprecated.u ⚠ TERMINAL_CWD=r)display_hermes_homeu/⚠ Deprecated .env settings detected:zN Move to config.yaml instead: terminal:\n cwd: /your/project/pathz' Then remove the old entries from z /.envr/r)rr;rrrrrrrrinsertr5r6r7r@) r messaging_cwdterminal_cwd_env terminal_cfg config_cwdconfig_has_explicit_cwdrr hint_paths r%warn_deprecated_cwd_env_varsrs JNN?33Mz~~n55 ~  ]]FF    FF ::j"--L1;L$1O1OX!!%---UXJ(0HHE   #- # # #    7   #1A # # #    4888888''))  QOPPP  =     P P P P    5))F233333 4 4sA AAc$t|dS)uTPersist a migrated config under the migration write invariant. THE INVARIANT (single source of truth for the whole migration pipeline): a migration may only persist values that DIFFER from the current schema default, plus explicit removals/renames of user data. Pure schema defaults are never materialised to disk — ``load_config()``'s deep-merge supplies them at read time, so writing them adds nothing and actively shadows future default changes (see ``save_config``'s docstring). Materialising defaults on every version bump is what rewrote hand-curated configs into full DEFAULT_CONFIG dumps (the "hermes update / hermes -p blows up my config" reports). Every migration step MUST route its write through this helper instead of calling ``save_config`` directly. It is a thin wrapper over ``save_config(config)`` (default-stripping ON, no ``merge_existing``); centralising the call makes the invariant impossible to regress one migration at a time. Callers must pass the full raw config returned by ``read_raw_config()`` after in-place mutations (including key removals); deep-merging the on-disk file back in would resurrect keys the migration just deleted. Partial-save preservation for unrelated top-level sections belongs on ``save_config(..., merge_existing=True)``, not here. N) save_config)rs r%_persist_migrationrLs.r_ interactivequietc *gggd} t}|r|std|dn#t$rYnwxYwt\}}ddlm}m}m}t} | o ||ko||k} | r]|} |d | tj d| d|std | n ||||t} | d } t| t r dd lm}n#t$rd }YnwxYw|rd }| D]|\}}t|t s|||}|s*d |d<d}|d d|d|s*|D]}td |td|d}|r| | d <t)|  ddlm}ddlm}|td|}|D]1}|d ||std |2n2#t$r%}t2d|Yd }~nd }~wwxYw||kr|s| std|d|t7d}|r7|s5td|D]#}td|dd|d$|r%|r"td |D]}|d!rtd"|d!|d#rt9d$|d%d}n+t;d$|d%d}|rPt?|d||d& |dtd'|dn%|d d(|dd)tt7d }|r d*|Dn tA**fd+|D}tA}tC|d,z|d,zD]0}|"tF|g1|r9|r6|s3d-tI|D}|rtd.tK|d/|D].\} }!td0| d1|!dd2/t t;d3&}"n#tNtPf$rd4}"YnwxYw|"d5vrVt|D]C\} }!|!d!r?td$|!d| td"|!d!n&td$|!d| |!d#r(t9d$|!d%| d6}n9t;d$|!d%| d6}|r=t?| ||d& | td'| tEntd7tS}#|#r%|d8*d9|#D||kr$| s"t} || d:<t)| tW}$|$r*|r'|s$td.tK|$d;|$D]=}|dd1|dd?|%d@>t t;dA&}"n#tNtPf$rd4}"YnwxYw|"d5vrTtt} ddBl,m-}&n#t$rdC}&YnwxYw|$D] }|dDd2}'|'rdE|'d@nd2}(t;d$|d%|(d}|s|'rt]|'}|r[|&dF|d>})t_| |)||d8 |d>td'|d>dG|n<|d d(|d>dH|dz!migrate_config.. s555Aai555r_cRg|]#}|dv |d!|$S)radvancedr)r:r<required_namess r% z"migrate_config.. sC V9N * *1553D3D * * * *r_rc\g|])}t|s|tv|t|f*Sr)rr)r:rs r%rz"migrate_config.. sK    && ,03D+D+D$T* ++D+D+Dr_ z$ new optional key(s) in this update:u • u — rz Configure new keys? [y/N]: n>yrz (Enter to skip): z1 Set later with: hermes config set rc3&K|] }|dV dS)r9Nr)r:r[s r% z!migrate_config..; s&&P&PuU|&P&P&P&P&P&Pr_rz! skill setting(s) not configured:skillrr9z (from skill: rz# Configure skill settings? [y/N]: )rz skills.configrz (default: r. = u — skill 'rz' may ask for it later)0sanitize_env_filer/rrhermes_cli.config_migrationsrrrrrr5r6r7read_raw_configrrrhermes_cli.mcp_securityrrrtoolsetsrhermes_cli.toolset_validationrr3r rr inputrsave_env_valuer>rangerrrArrEOFErrorKeyboardInterruptrextendrrrr0r)+rrresultsfixes current_ver latest_verrrr_explicit_version floor_refusedr:rraw_mcp_servers_validate_mcp_server_entry mcp_touched server_namerrissuerr ts_warningsw _ts_val_err missing_envr rDmissing_optional new_var_namesver new_and_unsetrr@answermissing_configmissing_skill_config skill_namerr default_hintrrs+ @r%migrate_configr$fsJ CCG !##  V V TETTT U U U      344K$ 9:: % / / % * $ 4##%% ""3''' 6s666777 " .3.. ! ! ! {GU333   Fjj//O/4((+ . g g g g g g g . . .)- & & & . % +K&5&;&;&=&= W W" U!%..33KGG#(i "  #**E{EEEW!'00.u..////U UUUVVV +(7}%"6*** N------LLLLLL00    ! !"5 6 68H   $ $A J  & &q ) ) ) $lqll### $ NNN ?MMMMMMMMNZm ???:??@@@'T:::KA5A ABBB A AC ?CK??3}+=?? @ @ @ @{ -...  Cwwu~~ :8CJ88999wwz"" >,-C#h--C-C-CDD43x=44455;;== bs6{E222 $++CK8882S[223333 #**+`c&k+`+`+`aaa GGGG,%@@@9DO555555#%%N# EEM[1_j1n55??044S"==>>>>$K$KU$K  }--    K Q]++QQQ R R R+ K K dIIIDHH]B,G,GIIJJJJ GGG >??EEGGMMOO/0    %%"/JD$xxDB488M4#@#@BBCCCADKAABBBBB488M4#@#@BBCCCxx ++a 4M(D!9!9MMM!!!&&W488Hd+C+C&W&W&W X X ^ ^ ` `5&tU333 ,33D9993T33444GGGG!$IJJJ/00NQ&&&P&P&P&P&PPPPZ  ""$. !6""" 9::$G $GE$G QS-..QQQRRR' _ _C)44J ]SZ]]c-.@]]PZ]]] ^ ^ ^ ^  @AAGGIIOOQQFF+,   FFF  \ ! ! GGG$&&F 6AAAAAAA 6 6 6&5### 6+  '')R00;BJ7W7777 B3x=B,BBBCCIIKK))LLE%8"G"G3u:"G"GK U;;;N+223u:>>>?U????@@@@J'..h3u:hh3777C;P;Phhh v & & & & E F F F Nsm%/ <<D"" D10D1 A+I I;I66I;"3UU,+U,>3_22``-`44 aaroverridecFtj|}|D]w\}}||vrtj|||<!t||t r.t|t rt |||||<x|S)uMerge *override* over *raw* for partial ``save_config`` writes. Top-level sections omitted from *override* are preserved from *raw*. Shared top-level dict sections are deep-merged so a caller can update one nested key without dropping sibling keys from disk. Intentional key removals within a section are not supported here — migration writes must route through ``_persist_migration`` with a full ``read_raw_config()`` dict instead. )copydeepcopyrrrr _deep_merge)rr%resultr9rDs r%_merge_partial_saver+p s]8 $ $Fiikk:: U f  -..F3KK  3 . . ::eT3J3J :%eVC[99F3K Mr_basecL|}|D]z\}}||vrJt||tr/t|trt |||||<S||vrt||tr|u|||<{|S)utRecursively merge *override* into *base*, preserving nested defaults. Keys in *override* take precedence. If both values are dicts the merge recurses, so a user who overrides only ``tts.elevenlabs.voice_id`` will keep the default ``tts.elevenlabs.model_id`` intact. An empty section key in config.yaml (``terminal:`` with no value) parses as YAML ``None``; treating that as an override would replace the entire default dict with ``None`` and crash every downstream consumer that expects a mapping (#58277). A ``None`` override of a dict default is ignored — same as the key being absent. )r'rrrr))r,r%r*r9rDs r%r)r) sYY[[Fnn&&   U 6MM6#;-- 5$'' &fSk599F3KK F]]z&+t<<] F3KK Mr_cfg dotted_keysc<t}|D]}|d}|}|ddD]'}t|tr||vrd}n ||}(t|tr(|d|vr||d=||||fS)a}Remove the given dotted leaf keys from a nested config dict. Returns ``(pruned_cfg, set_of_stripped_keys_that_were_present)``. Used by ``save_config`` to drop managed-scope leaves before persisting, so a bulk write never writes a user value that would lose to the managed layer on the next load. Only keys actually present in ``cfg`` are reported as stripped. r.Nr^)r>rrrr2)r.r/strippeddottedrnodeps r%_strip_dotted_keysr5 sEEH ! ! S!!ss  AdD)) Qd]]7DD dD ! ! !eBi4&7&7U2Y LL =r_mcb|d}|d}|drn|tdd}|s|Stj|}||Std|||Sd|vrMtj d|r8td|| ddd|Stj||S) u4Expand one ``${...}`` config reference. Two accepted shapes, matching what MCP server config already resolves (``tools/mcp_tool.py::_env_ref_name``): * ``${VAR}`` — legacy bare name, resolved via ``os.environ``. * ``${env:VAR}`` — Cursor-style SecretRef, same resolution after the ``env:`` prefix is stripped. Before this, the prefixed form worked in MCP config but stayed a literal string in config.yaml — a confusing half-support. Other SecretRef sources (``file:``, ``bitwarden:``, ``vault:``, ...) are NOT resolved here — external secret backends inject their values into the environment at startup (the ``secrets:`` block), so a config ref only ever needs the env shape. Unknown prefixes warn once and stay verbatim so callers can detect them. rrenv:NzTConfig ref %r: %s is not set (check ~/.hermes/.env); keeping the literal placeholder:^[a-z][a-z0-9_-]*:uConfig ref %r uses source %r which is not resolvable in config.yaml — external secret sources inject env vars at startup, so reference the variable as ${env:NAME} instead) grouprr rrr;rr3r4rCmatchr)r6rinnerrvals r%_env_expand_matchr? s$$ ''!**C GGAJJ    E  S[[\\"((** JjnnT"" ?J ./2D     e||!6>>|  H S!$$Q'     :>>% % %%r_refc|}|dr-|tdd}|pdSd|vrtjd|rdS|S)zNormalize a ``${...}`` body to the env-var name it reads, or None when the ref uses a non-env source and never touches the environment.r8Nr9r:)rr rrCr<)r@rs r%_env_ref_var_namerB ss ))++C ~~f3v;;<< &&((|t czzbh4c::zt Jr_ct|trtjdt|St|t rd|DSt|tr d|DS|S)a$Recursively expand ``${VAR}`` / ``${env:VAR}`` references in config values. Only string values are processed; dict keys, numbers, booleans, and None are left untouched. Unresolved references (variable not in ``os.environ``) are kept verbatim so callers can detect them. \${([^}]+)}c4i|]\}}|t|Sr_expand_env_varsr9s r%r=z$_expand_env_vars.. s'???41a#A&&???r_c,g|]}t|SrrF)r:rTs r%rz$_expand_env_vars.. s!7774 &&777r_)rr0rCsubr?rrr)objs r%rGrG s#s>vn&7===#t@??399;;????#t87737777 Jr_c|i}t|trLtjd|D]5}t |}|"t j|||<6ngt|tr(| D]}t||n*t|tr|D]}t|||S)uMap every ``${VAR}`` / ``${env:VAR}`` name referenced in config values to its current ``os.environ`` value (``None`` when unset). Stored alongside cached ``load_config()`` results so a cache hit can detect that the cached expansion was made against a *different* environment — e.g. a ``load_config()`` that ran before ``load_hermes_dotenv()`` populated the process env, or an env var rotated in-process after the first load. File mtime/size alone cannot see either case (#58514). ``${env:VAR}`` refs are tracked under the real variable name; refs with a non-env source prefix never read the environment, so they are excluded from the snapshot. NrD) rr0rCfindallrBrr;rrvalues_env_ref_snapshotr)rJsnapshotrrrDrTs r%rNrN s#s .:nc22 6 6C$S))D!#!5!5 6 C  .ZZ\\ / /E eX . . . . / C  . . .D dH - - - - Or_ct|tsdSi}|D]V}t|tr(t|dtsdS|d}||vrdS|||<W|S)zHReturn a name-indexed dict only when all items have unique string names.Nr)rrrrr0)rindexedrTrs r%_items_by_unique_namerR" s eT " "tG$%% Z8H8H#-N-N 44F| 7??44 Nr_ct|trfttrQtjdr<|krSttr|krSt |krS|St|t r6tt r!fd|DSt|trqttr\t|}tt|fd|DSfdt|DS|S)aRestore raw ``${VAR}`` templates when a value is otherwise unchanged. ``load_config()`` expands env refs for runtime use. When a caller later persists that config after modifying some unrelated setting, keep the original on-disk template instead of writing the expanded plaintext secret back to ``config.yaml``. Prefer preserving the raw template when ``current`` still matches either the value previously returned by ``load_config()`` for this config path or the current environment expansion of ``raw``. This handles env-var rotation between load and save while still treating mixed literal/template string edits as caller-owned once their rendered value diverges. z \${[^}]+}c i|]T\}}|t||ttr|ndUSr)_preserve_env_ref_templatesrrr)r:r9rDloaded_expandedrs r%r=z/_preserve_env_ref_templates..I sr   U , ,6,M,MW##C(((SW   r_Nc g|]c}t||d(|dnddS)rN)rUr)r:rTloaded_by_name raw_by_names r%rz/_preserve_env_ref_templates..[ s{  ,OODHHV$4$455.c s    t (#c#hh..E Dot449>_AUAU9U9U &&       r_) rr0rCrDrGrrrrRr)rrrVcurrent_by_namerXrYs `` @@r%rUrU1 s'3JsC$8$8RY|UX=Y=Y c>>J os + + ?0J0JJ C G + +J'4   ZT%:%:      &mmoo     '4   ZT%:%: 088+C00 .??  &;+B $         )11     Nr_.ctdtdttdfddffd |dS)aReturn leaf paths explicitly present in a raw config dict. Computed on the **raw** (un-normalized, un-expanded) config so that values injected by normalisation (e.g. ``agent.max_turns`` from ``DEFAULT_CONFIG``) are not mistakenly treated as user-set. Used by ``save_config`` to build the *preserve* set passed to ``_strip_default_values`` so only user-authored keys survive the defaults-strip pass. rDrb.rNct|tr,|D]\}}|||fzdS|r|dSdSr)rrrr2)rDrbr9child_walkpathss r%r`z%_explicit_config_paths.._walk~ su eT " " #kkmm , , UeTSF]++++ F   IIdOOOOO  r_r)r>rr r0)rr`ras @@r%_explicit_config_pathsrbq sh#&%%ESc3hD E&" Lr_ preserve_keyscdhtpdzdtdtdttdfdtffd i}|D]-\}}||||f}||||<.|S) aReturn *config* without keys whose values match *defaults*. Keys in *preserve_keys* (explicitly present in the user's raw config, before any normalisation) are always kept even when they equal the default, so user-set values such as ``memory.user_char_limit: 2200`` survive a ``save_config`` round-trip. Nested dicts whose every child is stripped are removed entirely so default-only subtrees (e.g. ``gateway``) never bloat ``config.yaml`` when the user has nothing to say about them. rrrDrrb.rcj| vrtj|St|trj|rht|tr|ni}i}|D]2\}}||} ||||fz}||||<3|r|SdS||krdStj|Sr)r'r(rrrr) rDrrb default_dictr1r9r_ child_defaultstripped_child_striprcs r%rjz%_strip_default_values.._strip s = ='' ' eT " " u &0$&?&?G77RL')H#kkmm 3 3 U , 0 0 5 5 !'}dcVm!L!L!-$2HSM 4 G  4}U###r_)r>rr r0rr)rr'rcr*r9rDr1rjs ` @r%_strip_default_valuesrk s **S1D"-E-EEM$c$C$uS#X$3$$$$$$$, Fllnn## U6%c!2!2SF;;  "F3K Mr_cd}t|to|d}t|to)|dp|d}tfddD}|s|s|sStd}t|ts |rd|ini}nt|}|d<dD]I}|}|r||s|||<|dJd|dfD]}|r|d s||d <dd|dd|ds2 |dp|d} | r| |d<|dr,|dd|ddS) uMove stale root-level provider/base_url/context_length into model section. Some users (or older code) placed ``provider:``, ``base_url:``, or ``context_length:`` at the config root instead of inside ``model:``. These root-level keys are only used as a fallback when the corresponding ``model.*`` key is empty — they never override an existing value. After migration the root-level keys are removed so they can't cause confusion on subsequent loads. Also aliases ``api_base`` → ``base_url`` (issue #8919). ``api_base`` is the intuitive name OpenAI-SDK / LiteLLM users reach for, and ``hermes config set`` blindly accepts any dotted key — so ``model.api_base`` got written, confirmed, and then silently ignored by the runtime resolver (which reads only ``model.base_url``), causing requests to fall back to OpenRouter. We migrate the alias to the canonical key (fallback-only — never override an explicit ``base_url``) and drop the alias so it can't confuse later loads. Finally, canonicalizes the model-id key to ``model.default`` (issue #34500). The runtime resolver and ~14 other readers select the chat model via ``model.default``; ``model.model`` was already aliased inline at some sites but ``model.name`` was not, so a custom-provider config like ``model: {name: , provider: }`` resolved to an empty model and the API request went out with ``model=`` (HTTP 400 from OpenAI-compatible backends) — while display paths (``hermes status``/``dump``) read ``name`` and *showed* the model, making the failure silent. Normalizing here (the single load/save chokepoint) means every reader, present and future, sees a populated ``default`` and the stale alias is migrated out of config.yaml on the next save. Precedence: ``default`` > ``model`` > ``name`` (never overrides an explicit ``default``, so existing configs are unaffected). r)api_baserc3BK|]}|VdSrr)r:r;rs r%rz-_normalize_root_model_keys.. s> 1 r_)r+rrrmr)r+rrNr)rrranyr) rmodel_inmodel_has_aliasmodel_needs_canonhas_rootr)r9root_val alias_valaliass ` r%_normalize_root_model_keysrw sBzz'""H 400MX\\*5M5MO #8T22 W5f!5!5UH O4E &\\F JJw  E eT " "&+3E""U F7O9::c??  "EIIcNN "!E#J 3jj,,eii .C.CD**  *UYYz22 * )E*  JJz4    IIj$ IIi %% '""7eii&7&7  %$E)  yy  '4    &$ Mr_ct|}t|dpi}d|v}d|v}|r |s |d|d<|s|snd|vrtdd|d<||d<|dd|S)uNormalize legacy root-level max_turns into agent.max_turns. Only injects the schema default when the user actually set max_turns somewhere (root level or under ``agent``). A bare ``load_config()`` call that passes the result straight to ``save_config()`` should not materialise ``agent.max_turns`` in config.yaml when the user never set it — that makes the default sticky and blocks future schema changes. agent max_turnsN)rrrr)r agent_confighad_root had_agents r%_normalize_max_turns_configr~ s&\\F 7++1r22Lf$H|+I8 8$*;$7 [! III L ( ($27$;K$H [!"F7O JJ{D!!! Mr_ provider_cfgc"t|tsdS|dd}t|tr|St|tr(|dvSt|S)u8Return whether a ``providers.`` config block is enabled. A provider is enabled by default. Only an explicit ``enabled: false`` in the block hides it from the model picker, ``/models`` listings, the runtime resolver and the doctor / status output. Backward-compat: configs without the ``enabled`` key keep working as before — the default is ``True``. Pass any non-dict (None, list, string) and you get ``True`` too, so malformed entries don't disappear silently; they'll still be flagged by the existing validation paths. Tr>rmrnror)rrrrr0rr)rflags r%r_r_- s lD ) )t   It , ,D$ $Gzz||!!##+FFF ::r_)rr?rct|ts|S|}|D]+}t|ts|cS||vr|cS||},|S)u%Traverse nested dict keys safely, returning ``default`` on any miss. Canonical helper for the ``cfg.get("X", {}).get("Y", default)`` pattern that appears 50+ times across the codebase. Handles three common gotchas in one place: 1. Missing intermediate keys (returns ``default``, no KeyError). 2. An intermediate value that's not a dict (e.g. a user wrote a string where a section was expected). Returns ``default`` instead of AttributeError on ``.get()``. 3. ``cfg is None`` (callers sometimes pass ``load_config() or None``). Named ``cfg_get`` rather than ``cfg_path`` to avoid shadowing the ubiquitous ``cfg_path = _hermes_home / "config.yaml"`` local variable that appears in gateway/run.py, cron/scheduler.py, main.py, etc. Explicit ``None`` values are returned as-is (matches ``dict.get(key, default)`` semantics — ``default`` is only returned when the key is *absent*, not when it's present but set to ``None``). Examples: >>> cfg_get({"agent": {"reasoning_effort": "high"}}, "agent", "reasoning_effort") 'high' >>> cfg_get({}, "agent", "reasoning_effort", default="medium") 'medium' >>> cfg_get({"agent": "oops_a_string"}, "agent", "reasoning_effort", default="low") 'low' >>> cfg_get(None, "anything", default=42) 42 >>> cfg_get({"a": {"b": None}}, "a", "b", default="def") # explicit None preserved >>> cfg_get({"a": {"b": False}}, "a", "b", default=True) # falsy values preserved False )rr)r.rr?r3r9s r%cfg_getrF smD c4 D$%% NNN d??NNNCy Kr_ct5 t}|}|j|jf}n%#t t f$ricYcdddSwxYwt|}t |}|4|dd|kr&tj |dcdddS t|d5}t|pi}dddn #1swxYwYn5#t$r(}t||icYd}~cdddSd}~wwxYwt!|t"si}|d|dtj |ft|<|cdddS#1swxYwYdS)uRead ~/.hermes/config.yaml as-is, without merging defaults or migrating. Returns the raw YAML dict, or ``{}`` if the file doesn't exist or can't be parsed. Use this for lightweight config reads where you just need a single value and don't want the overhead of ``load_config()``'s deep-merge + migration pipeline. Cached on the config file's (mtime_ns, size) — same strategy as ``load_config()``. Returns a deepcopy on every call since some callers mutate the result before passing to ``save_config()``. Nrrrr) _CONFIG_LOCKrLrr1rr>rr0rbrr'r(r<rHrr;rr)rr cache_keypath_keycachedrAdatar s r%rru s  )++K!!##B4II!7+   II   {##"&&x00  &!* "9"9=++ kG444 /%a((.B / / / / / / / / / / / / / / /    &{A 6 6 6IIIII%  $%% D'0|Yq\4=QUCVCV&W(#/sF0;FAFAAFC;C/# C;/C3 3C;6C3 7C;:F; D-D(D-F(D--AFFFc|t} t|d5}t|pi}dddn #1swxYwYn#t$ricYSwxYwt |t r|niS)uoRead a user ``config.yaml`` EXACTLY as written on disk. No DEFAULT_CONFIG merge, no managed-scope overlay, no ``${ENV_VAR}`` expansion, no migration, no root-model normalization, no caching. ONLY legal for write-back round-trips and raw-file diagnostics — behavioral reads must use load_config()/load_config_readonly(). Legal call sites, exhaustively: * WRITE-BACK ROUND-TRIPS (read → mutate one key → save): merging defaults or the managed overlay here would persist hundreds of default keys (or administrator-pinned values) into the user's file on the next save. Raw is *correct*, not an optimization. * RAW-FILE DIAGNOSTICS (doctor, deprecation sweeps): these inspect what the user actually wrote — stale root keys, drift against .env — and merged defaults would produce false positives. * PRESENCE-SENSITIVE ENV BRIDGES (gateway/send bridges that only export a key when the user explicitly set it): a defaults merge would make every key "present" and bridge the entire DEFAULT_CONFIG into the environment. These sites must still apply ``managed_scope.apply_managed_overlay`` + ``_expand_env_vars`` inline, which they do. Semantics (deliberately mirrors the bare ``open()+yaml.safe_load()`` pattern this replaces, so migrated sites keep their exact failure behavior): * missing file → ``{}`` * unparseable YAML / other I/O errors → raises (callers that want fail-open already wrap in try/except; callers with last-known-good or warn semantics rely on the exception) * non-dict YAML root → ``{}`` ``config_path`` defaults to :func:`get_config_path` (profile-aware). Pass an explicit path when the caller resolves its own home (gateway ``_hermes_home``, tui profile override, multi-profile probes). Nrr)rLr<rHr>rr)rrArs r%read_user_config_rawr sN%''  + 0 0 0 +A!!$$*D + + + + + + + + + + + + + + +  dD)) 144r1s3A A A AA A A AAct5 t}|}|j|jf}n%#t t f$ricYcdddSwxYwt|}t |}|"|dd|kr|dcdddS t|d5}t|pi}dddn #1swxYwYn5#t$r(}t||icYd}~cdddSd}~wwxYwt|tsi}t!j|}|d|d|ft|<|cdddS#1swxYwYdS)uFast-path variant of ``read_raw_config()`` for callers that ONLY READ. Returns the cached raw-config dict directly, skipping the per-call ``copy.deepcopy`` that ``read_raw_config()`` performs (needed there because some callers mutate the result before ``save_config``). **Mutating the returned dict corrupts the in-process cache for every subsequent caller.** Only use on read-only paths — e.g. per-turn policy checks like the shared-metrics gate, which runs 2-3x per agent turn and was paying a full config deepcopy each time. Same (mtime_ns, size) freshness key as ``read_raw_config()`` — an edited config.yaml is picked up on the next call. Nrrrrr)rrLrr1rr>rr0rbrr<rHrr;rrr'r() rr rrrrArr  cached_copys r%read_raw_config_readonlyr s  )++K!!##B4II!7+   II   {##"&&x00  &!* "9"9!9 kG444 /%a((.B / / / / / / / / / / / / / / /    &{A 6 6 6IIIII%  $%% DmD)) '0|Yq\;&O(#7sE00;E0AE0AAE0.C)?C C)C! !C)$C! %C)(E0) D3DDE0DAE00E47E4c|t} |n5#t$rYdSt$r}t d|d|d|d}~wwxYw t |d5}|dddddS#1swxYwYdS#t$r}t d|d|d|d}~wwxYw)z>Refuse to replace an existing config.yaml that cannot be read.NzRefusing to overwrite z+: existing config.yaml cannot be accessed (z3). Fix the file permissions or move it aside first.rbrz': existing config.yaml cannot be read ()rLrr>rrr<rp)rr*rAs r%$require_readable_config_before_writer s%''    I[ I I I I I     +t $ $  FF1III                    I[ I I I I I   sU' A AAAB-B BBBBB C'B>>Crkwargsc Dddlm}t||||fi|dS)a*Fail-closed atomic write for ``config.yaml``. The single chokepoint every config-update path should use instead of calling :func:`utils.atomic_yaml_write` directly. It runs :func:`require_readable_config_before_write` first, so a full-file replacement can never silently clobber an existing ``config.yaml`` that degraded to an empty dict on read (permission error, broken mount, transient I/O). New-file creation still works when the path is absent. Root cause this guards: ``read_raw_config()`` returns ``{}`` for BOTH an absent file and an unreadable-but-present file. Callers that read then overwrite can't tell the two apart, so an unreadable config would be replaced with only defaults or the single edited section. Routing every write through this helper enforces the invariant in one place rather than relying on each of ~15 independent write sites to remember the guard. ``kwargs`` are forwarded verbatim to ``atomic_yaml_write`` (``sort_keys``, ``default_flow_style``, ``extra_content``, ...). ratomic_yaml_writeN)utilsrr)rrrrs r%atomic_config_writer sE(('''''(555k422622222r_c"tdS)uLoad configuration from ~/.hermes/config.yaml. Cached on the config file's (mtime_ns, size). Returns a deepcopy of the cached value when unchanged, since most call sites mutate the result (e.g. ``cfg["model"]["default"] = ...`` before ``save_config``). The cache is keyed on ``str(config_path)`` so profile switches (which change ``HERMES_HOME`` and therefore ``get_config_path()``) don't collide. Read-only callers should use ``load_config_readonly()`` to skip the defensive deepcopy — that path matters in agent-loop hot spots like ``get_provider_request_timeout`` which is called once per API turn. T want_deepcopy_load_config_implrr_r%rr+ s 4 0 0 00r_c"tdS)uFast-path variant of ``load_config()`` for callers that ONLY READ. Returns the cached config dict directly without the defensive deepcopy that ``load_config()`` applies. **Mutating the returned dict (or any nested structure) corrupts the in-process cache for every subsequent caller** — only use this when you are absolutely sure your code path will not write to the result. If you need to mutate or pass to ``save_config``, call ``load_config()`` instead. Why this exists: ``load_config()`` cache-hit cost is ~265us per call, half of which (~135us) is the defensive deepcopy. The agent loop calls into config reads (timeouts, thresholds, feature flags) ~20-50x per conversation; skipping deepcopy here removes a measurable allocation source and the GC pressure that comes with it. Note: this returns a plain ``dict`` (not ``MappingProxyType``) so existing ``isinstance(x, dict)`` guards downstream keep working. The safety guarantee is purely documented, not enforced — be careful. Frrrr_r%load_config_readonlyr< s( 5 1 1 11r_)r platform_key field_keyc2|rtn t}|di}t|tsi}||d<||i}t|tsi}|||<|||<t |dS)a)Persist one scalar field under ``platforms.``. ``raw=True`` preserves CLI setup flows that intentionally edit only the user's raw config file. Dashboard routes use the default loaded-config path so they retain their existing profile-scoped ``load_config`` behavior. rN)rr setdefaultrrr)rrrDrrrplatform_configs r%write_platform_config_fieldrS s#& 8_   ;==F!!+r22I i & &( '{**<<>& ! !t " & &s3v;;<<'8 9 99r_)envrr%rc| tjn|}t}|d}t |t }|si}||n|}||n t }t |t r|dini} t | t s|S|| n|} t D]\} } | | vr | | } | dkr\t| pd }|dvr@t | trtj | } |r| | vs| |vrt| || <|S)agBridge ``terminal.*`` config into the env vars terminal tools read. ``tools.terminal_tool`` is intentionally environment-driven because it also runs in child processes (TUI, dashboard PTY, gateway workers). This helper gives those child-process launch paths the same config bridge as classic CLI without importing ``cli.py`` and paying for its startup side effects. Explicit keys in the user config's ``terminal`` section are authoritative and override their matching env values. Merged defaults only backfill missing env vars; they never replace unrelated exported/.env values. Nrrr>rrr.)rr;rrrrrr?rrr0rrb expanduserr)rrr%target raw_configraw_terminal_cfgfile_has_terminal_configshould_overrider.r explicit_keyscfg_keyenv_varrDraw_cwds r%apply_terminal_config_to_envr s";RZZCF ""J!~~j11)*:DAA #2:2B..O&&&,@,B,BC.8d.C.CK377:r***L lD ) ) ,2+=L%%'''CSCXCXCZCZM399;; 9 9 , & & W% e  %+2&&,,..G...%%% 2**511  9= 8 8WF=R=R1%88F7O Mr_rc t5tt}t|} |}|j|jf}n#t$rd}YnwxYwddlm }| }|r|dz nd} |r|nd}|r|j|jfnd} n#t$rd} YnwxYw||d|d| d| df} n| dkrdd| d| df} nd} t |} | | | dd| krxt| dkr| dni} td| Dr0|rt#j| dn| dcdddSt#jt&} | t)|d 5}t+|pi}dddn #1swxYwYd |vr_t-| d pi}| d  |d |d <||d <|d dt1| |} n#t2$r}t4 |}t7|||d nd|ddlm}|t<tt>ftAt#j|}| *i}| d| d| d| d||ft|<|rt#j|n|cYd}~cdddSYd}~nd}~wwxYwtCtE| }tA|}|#}|rtA|}t1||}t#j|t4|<| Wt#j|}tI|} |rtI|| g| || Rt|<|s|cdddSnt|d|cdddS#1swxYwYdS)Nr managed_scoperJ)rrrrrc3bK|]*\}}tj||kV+dSr)rr;rr9s r%rz$_load_config_impl.. s9KKda2:>>!$$)KKKKKKr_rrrzryr,r'r(castrr)%rrrLr0rr1rr> hermes_clirget_managed_dirrrarrallrr'r(rr<rHrrr)rr`r;typingrrrrGrwr~load_managed_configrN)rrrr user_sigr managed_dirmanaged_cfg_pathmst managed_sig cache_sigr env_snapshotrrA user_configagent_user_configr lkg_castlkg_copy _empty_envrexpandedmanaged_configmanaged_expandedrs r%rr s> OO%'' {## !!##B35>2:2NHH    HHH  -,,,,,#3355 II F " "A{1~{1~>III#''11  )"7F2A2J)>H26-2I2I%h/  -11K,Z88L @!.,???+RY+R +R\+R+R x (! #"OOOOOOOOOL #  " "8T 2 2 2 _OOOOOOOOOOOOOOOOOOs,Q"AQ A'$Q&A''&Q*B98Q9 CQCCQ+QI6G7+ I67G; ;I6>G; ?A6I65Q6 MB=M=M>QQMC Q0QQ!Qu- # ── Security ────────────────────────────────────────────────────────── # Secret redaction is ON by default — strings that look like API keys, # tokens, and passwords are masked in tool output, logs, and chat # responses before the model or user ever sees them. Set redact_secrets # to false to disable (e.g. when developing the redactor itself). # tirith pre-exec scanning is enabled by default when the tirith binary # is available. Configure via security.tirith_* keys or env vars # (TIRITH_ENABLED, TIRITH_BIN, TIRITH_TIMEOUT, TIRITH_FAIL_OPEN). # # security: # redact_secrets: true # tirith_enabled: true # tirith_path: "tirith" # tirith_timeout: 5 # tirith_fail_open: true u@ # ── Fallback Model ──────────────────────────────────────────────────── # Automatic provider failover when primary is unavailable. # Uncomment and configure to enable. Triggers on rate limits (429), # overload (529), service errors (503), or connection failures. # # Supported providers: # openrouter (OPENROUTER_API_KEY) — routes to any model # openai-codex (OAuth — hermes auth) — OpenAI Codex # nous (OAuth — hermes auth) — Nous Portal # zai (ZAI_API_KEY) — Z.AI / GLM # kimi-coding (KIMI_API_KEY) — Kimi / Moonshot # kimi-coding-cn (KIMI_CN_API_KEY) — Kimi / Moonshot (China) # minimax (MINIMAX_API_KEY) — MiniMax # minimax-cn (MINIMAX_CN_API_KEY) — MiniMax (China) # bedrock (AWS IAM / boto3) — AWS Bedrock (Converse API) # # For custom OpenAI-compatible endpoints, add base_url and key_env. # # fallback_model: # provider: openrouter # model: anthropic/claude-sonnet-4 u # ── Security ────────────────────────────────────────────────────────── # Secret redaction is ON by default. Set to false to pass tool output, # logs, and chat responses through unmodified (e.g. for redactor dev). # # security: # redact_secrets: true # ── Fallback Model ──────────────────────────────────────────────────── # Automatic provider failover when primary is unavailable. # Uncomment and configure to enable. Triggers on rate limits (429), # overload (529), service errors (503), or connection failures. # # Supported providers: # openrouter (OPENROUTER_API_KEY) — routes to any model # openai-codex (OAuth — hermes auth) — OpenAI Codex # nous (OAuth — hermes auth) — Nous Portal # zai (ZAI_API_KEY) — Z.AI / GLM # kimi-coding (KIMI_API_KEY) — Kimi / Moonshot # kimi-coding-cn (KIMI_CN_API_KEY) — Kimi / Moonshot (China) # minimax (MINIMAX_API_KEY) — MiniMax # minimax-cn (MINIMAX_CN_API_KEY) — MiniMax (China) # bedrock (AWS IAM / boto3) — AWS Bedrock (Converse API) # # For custom OpenAI-compatible endpoints, add base_url and key_env. # # fallback_model: # provider: openrouter # model: anthropic/claude-sonnet-4 )strip_defaultsrcmerge_existingrrc Zt5trtd ddddSddlm}|}|rut tj||\}}|rNtdt|dd t|tjdd lm}t#t%}t'|t)} | rt+| nd} |r| rt-| |}t/t1|} | } | rt/t1| ni} | r6t3| | t4t9|} d h}| r|| |r|||rB|r@dd lm}|t@t8tBf| } tE| tF| } g}| d i}|r|d|$tJ| di}d}tM|tNrtQd|D}nLtM|tRr7tU|do|d}|s|$tV||| |rd |ndtY|tZ.t9|dtj| t4t9|<ddddS#1swxYwYdS)aSave configuration to ~/.hermes/config.yaml. Default values from ``DEFAULT_CONFIG`` are not written to disk unless the user explicitly set them (i.e. the path exists in the raw config before any normalisation). This prevents config.yaml from being contaminated with schema defaults on every save, which makes future default changes invisible to users. When ``merge_existing`` is True, the on-disk raw config is deep-merged under *config* before writing so partial callers (migration steps via ``_persist_migration``) cannot drop unrelated sections the caller omitted. Full-document replacement callers (dashboard raw YAML editor, callers that already deep-merge) must leave this False so intentional deletions survive. zsave configurationNrrzNote: zD managed setting(s) were not saved (managed by your administrator): r5r-rrer)rcsecurityredact_secretsrFc3K|]C}t|to)|do|dVDdS)r+r)N)rrr)r:r s r%rzsave_config..sNgg_`jD11ZaeeJ6G6GZAEERYNNggggggr_r+r)r) extra_content)/rrr0rrmanaged_config_keysr5r'r(r/rr@rAr5r6rrrrLrrrbr+rwr~rUr`rr0rrrrrrkrr_SECURITY_COMMENTrrrorr_FALLBACK_COMMENTrurbr)rrrcrr managed_keys _strippedrr_raw_for_pathsexplicit_raw_pathscurrent_normalizedr raw_existingeffective_preserve_keysrrsecr fb_is_valids r%rr s* \\\\ <<  . / / / \\\\\\\\\\\\\\\\ -,,,,,$88::   24=3H3H, W W FI WS^^WW8< &BSBS8T8TWW ,+++++%'' ,[999 )**6D N "> 2 2 2$   An A(@@F88STZ8[8[\\'   &'B>'R'R S S S   4-11#k2B2BCCJ:N8N  ? # * *+= > > >  : # * *= 9 9 9  5  , , , , , ,tCH~z::J.5JnnZ,, ,cgg.//7 LL* + + + ^^,b 1 1 b$   GggdfgggggKK D ! ! Grvvj11EbffWooFFK , LL* + + +  ,1;"''%...t    [!!!c+..555:>-HZ:[:[%c+&6&67y\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\sN MN  N$'N$ raw_valuec`|}t|dkr|d|dcxkrdkrnn|dd}g}d}|t|kr{||}|dkr@|dzt|kr*||dz}|dvr|||dz }a|||dz }|t|k{d|St|dkr&|d|dcxkrd kr nn |ddS|S) z7Parse the small .env value subset Hermes writes itself.rrr^"r\>rrrr)rrrr@)rrDquotedrPrchnext_chs r%_parse_env_valuer %sT OO  E 5zzQ58uRy7777C77777qt #f++ooBTzza!ec&kk11 Q-k))MM'***FA MM"    FA#f++oowwv 5zzQ58uRy7777C77777QrT{ Lr_cht} |j}|j}t |||f}n/#t $rt |ddf}Ynt $rd}YnwxYw|&tt\}}||krt|Si}| rddd}t|fi|5}| } dddn #1swxYwYt| } | D]} | } | ru| ds`d| vr\| dr | dd} | d\} } }t!||| <||t|fa|S) aLoad environment variables from ~/.hermes/.env. Normalizes line endings before parsing while treating each assignment's value as opaque data for boundary discovery. The parsed dict is memoised keyed on the .env file mtime, because ``get_env_value()`` is called dozens-to-hundreds of times per interactive menu render (`hermes tools`, `hermes setup`, status panels). Sanitisation is O(lines), so re-parsing the same file on every call was burning ~300ms of CPU per `hermes tools` menu paint on top of the OAuth-refresh slowness. The mtime check invalidates the cache when the user edits .env mid-process. N utf-8-sigrrerrorsr5r4export r~)rOrst_mtimerr0r>r _env_cacherrr< readlines_sanitize_env_linesrr r=r )env_pathmtimesizer cached_key cached_varsenv_varsopen_kwrA raw_linesrrBr9rCrDs r%load_envr2<s ~~H (}}&]]E40 000]]D$/  !7", K  " " $$ $!H@ +i@@ ( & &g & & &! I & & & & & & & & & & & & & & &$I.. @ @D::<.s*KK$!QAFFAFFFFKKr_.tmp.env_dirsuffixrr)rOrr<r(r)absrsumziptempfilemkstempr0rrfdopen writelinesr8fsyncfilenorG BaseExceptionunlinkrrur4) r*read_kwwrite_kwrAoriginal_linesr6r fdtmp_paths r%rrs ~~H ??  q&)<AF" F>"F&&F>)F&*F>> G0 GG0 G+(G0*G++G0c  |d|S#t$rYnwxYwg}t|D]E\}}t|dkr-|d|d|dt|ddF|dd d}t d |d d d |ddDzt|dkrdndzdztj |S)u1Warn and strip non-ASCII characters from credential values. API keys and tokens must be pure ASCII — they are sent as HTTP header values which httpx/httpcore encode as ASCII. Non-ASCII characters (commonly introduced by copy-pasting from rich-text editors or PDFs that substitute lookalike Unicode glyphs for ASCII letters) cause ``UnicodeEncodeError: 'ascii' codec can't encode character`` at request time. Returns the sanitized (ASCII-only) value. Prints a warning if any non-ASCII characters were found and removed. asciiz position r-z (U+04Xrignore)r$z Warning: z contains non-ASCII characters that will break API requests. This usually happens when copy-pasting from a PDF, rich-text editor, or web page that substitutes lookalike Unicode glyphs for ASCII letters. r/c3 K|] }d|V dS)rNr)r:rBs r%rz._check_non_ascii_credential..s(::DKKK::::::r_Nrz ... and morerz The non-ASCII characters have been stripped automatically. If authentication fails, re-copy the key from the provider's dashboard. r-) encodeUnicodeEncodeErrorrordrdecoder/r@rr5r6)r9rD bad_charsrrr6s r%_check_non_ascii_credentialr[sc  W      I5!!JJ2 r77S==   H1HHHH#b''HHHH I I I WX 66==gFFI      ))::IbqbM::: : :  ; "%Y!!3!3    =  V  VZ     s  &&c|dkr|Sd|vp8d|vp4d|vp0||kptd|D}|s|S|dddd}d|dS) zDQuote .env values containing characters with special dotenv meaning.rr5rrc3>K|]}|VdSr)isspace)r:cs r%rz#_quote_env_value..s***qqyy{{******r_rz\\z\")rror)rD needs_quotingescapeds r%_quote_env_valuerbs {{ u  + %< + %< + EKKMM ! + **E*** * *   mmD&))11#u==G w>>>r_rBc|}|dr|dd}||dS)uxTrue when a .env line assigns ``key`` — plain or ``export``-prefixed. ``load_env()`` accepts the bash-compatible ``export KEY=value`` form (#6659), so the writers must recognise the same shape. Otherwise a hand-added ``export`` line is invisible to save (duplicate appended) and remove (line survives → the value resurrects on the next load, #40041). r%r~Nr4)rr lstrip)rBr9r1s r%_env_line_defines_keyre sZzz||H9%%)ABB<&&((   #yyy ) ))r_c:trtd|dSddlm}||rA|}|r|dz nd}t d|d|d tj dSt |std |t|| d d  dd }t||}tt!}ddd}ddi}g}|rHt%|fi|5} | }dddn #1swxYwYt)|}t+|} d} t-|D]$\} } t/| |r|d| d || <d} n%| sH|r+|dd s|dxxd z cc<||d| d t5jt9|jdd\}}d}|r= t=j|j }n#tB$rYnwxYw tEj#|dfi|5} | $|| %tEj&| 'dddn #1swxYwYtQ|||' tEj)||n#tB$rYnwxYwtU|n5#tV$r( tEj,|n#tB$rYnwxYwwxYw|tDj-|<t]dS)z)Save or update a value in ~/.hermes/.env.zset NrrrNthe managed scopez Cannot set ': it is managed by your administrator () and cannot be changed.r-#Invalid environment variable name: r/r r"rr#rrFr4Tr^r;r<r=r)/rr0rris_env_managedrr/r5r6_ENV_VAR_NAME_REr<r]r^rr[rrOrr<r(r)rbrrerrrCrDr0rrS_IMODEst_moderrrErFr8rGrHrGrgrurIrJr;r4)r9rDrrsrcr*rKrLrrAserialized_valuefoundrrBrNrO original_modes r%rrs||lSll###)(((((##C((#3355 (3L{V##9L  &# & &c & & &      ! !# & &HFsFFGGGs### MM$ # # + +D" 5 5E 'U 3 3E~~H')<.s)PPP$/DT3/O/OPPPPr_r;r<r=r)(rr0rrrlrr/r5r6rmr<r]rOrrr;rr<r(r)rrCrDr0rrrnrorrErFr8rGrHrGrgrurIrJr4)r9rrrpr*rKrLrAr new_linesrrrNrOrss` r%remove_env_valuer}s ||ooo&&&u((((((##C((#3355 (3L{V##9L  &S & & & & &    u  ! !# & &HFsFFGGG~~H ??   sD!!!u&)<rr?_EXTRA_ENV_KEYSrrr;r)r/ known_keyscountr9rDs r% reload_envrszzH&+--..@J Enn&& U :>>#  % ' '#BJsO QJE h  3"*#4#4 3 QJE Lr_c ddlm}m}nS#t$rF|tjvrtj|cYSt |cYSwxYw ||}n4#|$rt$r"tj|}YnwxYw||St }||S)uGet a value from ``os.environ`` or ``~/.hermes/.env``, scope-aware. The ``os.environ`` read routes through ``agent.secret_scope.get_secret`` so that, under an active profile scope (multiplexed gateway turn), this is scope-checked rather than leaking another profile's raw ``os.environ`` value. ``get_secret`` encodes the whole policy: global vars pass through; scope is authoritative under multiplexing (miss -> None, no environ fallthrough); when multiplexing is off it behaves exactly like the legacy ``os.environ`` read. Its siblings ``get_env_value_prefer_dotenv`` and ``gateway.config._getenv`` already work this way — this was the last scope-blind reader of the trio (#67027). rUnscopedSecretError get_secret)agent.secret_scoperrrrr;r2r)r9r _get_secretr>r/s r%rr s#          ### "*  :c? " " "zz~~c"""""# "k#  """jnnS!!"  zzH <<  s& *A!AA A++.BBcBt}||}|r|S ddlm}m}n/#t $r"t j|cYSwxYw ||S#|$rt $r"t j|cYSwxYw)uResolve a credential env value, preferring ``~/.hermes/.env`` over ``os.environ``. Used for Hermes-managed credentials where a deliberate edit to ``.env`` must take precedence over a stale value inherited from the parent shell (Codex CLI, test scripts, login profile exports). Without this, rotating a key in ``.env`` mid-session leaves callers serving the stale shell value and produces persistent 401s. The ``os.environ`` fallback routes through ``secret_scope.get_secret`` so that, under an active profile scope (multiplexed gateway turn), this read is scope-checked rather than leaking another profile's raw ``os.environ`` value — matching the credential-pool seeding path's behaviour. rr)r2rrrrrrr;)r9r/r>rrs r%get_env_value_prefer_dotenvr2szzH ,,s  C  #          ###z~~c"""""##{3  ###z~~c"""""#s!2)AA" A--.BBcXddlm}||tdtjS)uRedact an API key for display. Thin wrapper over :func:`agent.redact.mask_secret` — preserves the "(not set)" placeholder in dim color for the empty case. r mask_secret (not set))empty) agent.redactrrrDIM)r9rs r% redact_keyrXs7 )((((( ;s% VZ"@"@ A A AAr_>jwtr9authtokenapikeybearerpasswdsecretrid_tokenr private_key access_token authorization client_secret refresh_token_depthcddlm}dkr|St|tri}|D]q\}}t|t rA|tvr&t|t r|r||||<[t|dz||<r|St|trfd|DS|S)ufReturn a copy of ``value`` with credential-shaped keys masked for display. Recursively walks dicts/lists and replaces the value of any key in ``_SECRET_CONFIG_KEYS`` (case-insensitive) with a masked form via :func:`agent.redact.mask_secret`. Non-secret keys and scalar values pass through unchanged. Use this before ``print``-ing any config sub-tree that might carry a custom-provider ``api_key`` — ``print`` bypasses the logging redactor, and opaque tokens (e.g. Cloudflare ``cfut_...``) don't match the vendor-prefix regexes either, so structural key-name masking is required. rrrc6g|]}t|dzS)r)redact_config_value)r:r<rs r%rz'redact_config_value..s(BBBq#Avz22BBBr_) rrrrrr0r_SECRET_CONFIG_KEYSrr)rDrrrvr;r<s ` r%rr{s)((((({{ %KKMM < d?d@|d8dAkr(tdB|dCdDn|d8dEkr(tdF|dGdHn|d8dIkrMtdJ|dKdDt#dL}tdM|rdNndOnT|d8dPkrLtdQ|dRdDt#dS}tdT|rdNndOn|d8dUkrwtdV|dWdXtdYt#dZs-t#d[r t#d\rt#d]rdNndOn_|d8d^krFt#d_}t#d`}tda|pdOtdb|pdOtttdctjtj |ddde}|rtdf|n*tdftdgtjtttdhtjtj |dii}|djd(}tdk|rdlndm|rtdn|dodpdqzdrds|dt}|B t?|}|dkrtdu|dvdwn#t@tBf$rYnwxYwtdx|dydzdqzdrd{td||d}d~dtd|ddd|didii}|ddepd}td||dd}|r|dkrtd||di}|di|did}tEd|#D}|rtttdtjtj |$D]\} }!|!dd}"|!dde}#|"dks|#rId|"g}$|#r|$%d|#td| ddd |$tttdtjtj t#d}%t#d}&td|%rdNntdtjtd|&rdNntdtj ddl&m'}'m(}(|'})|)r|(|)}*tttdtjtj |)D]}+|+d},|*|,de}|+dde}-|rt3|ntdOtj}.td|,dd|.dtd|-dtjn#t6$rYnwxYwtttdtjttdtjttdtjttdtjtdS)zDisplay current configuration.u┌─────────────────────────────────────────────────────────┐u@│ ⚕ Hermes Configuration │u└─────────────────────────────────────────────────────────┘rru7 ⚷ Some settings are managed by your administrator (z) and cannot be changedz Managed config keys: r5z Managed env keys: u ◆ Pathsz Config: z Secrets: z Install: u ◆ API Keys) )r OpenRouter)rzOpenAI (STT/TTS))rExa)rParallel)r Firecrawl)rTavily)r Browserbase)rz Browser Use)rFALrz<14r)get_anthropic_key Anthropicu ◆ Modelz Model: r)znot setryrzz Max turns: HERMES_MAX_ITERATIONSNu9 ⚠ .env has stale HERMES_MAX_ITERATIONS=z& (run 'hermes doctor --fix' to remove)u ◆ Displaydisplayz Personality: personalitynonez Reasoning: show_reasoningTrproz Bell: bell_on_completeFuser_message_preview first_linesr last_linesz User preview: first z line(s), last z line(s)u ◆ Terminalrz Backend: r6localz Working dir: rr.z Timeout: r<srz Docker image: rz*nikolaik/python-nodejs:python3.11-nodejs20 singularityz Image: rz3docker://nikolaik/python-nodejs:python3.11-nodejs20modalz Modal image: rMODAL_TOKEN_IDz Modal token: configuredrdaytonaz Daytona image: rDAYTONA_API_KEYz API key: vercel_sandboxz Vercel runtime: rnode24z Vercel auth: VERCEL_OIDC_TOKEN VERCEL_TOKENVERCEL_PROJECT_IDVERCEL_TEAM_IDsshrrz SSH host: z SSH user: u ◆ Timezonetimezonerz Timezone: z(server-local)u◆ Context Compression compressionrz Enabled: rrnz Threshold: thresholdg?dz.0f%threshold_tokensz Token cap: r4z* tokens (takes lower of ratio vs absolute)z Target ratio: target_ratiog?z% of threshold preservedz Protect last: protect_last_nrz messagesz Protect first: protect_first_nrz non-system head messages auxiliaryz(auto)r+rz Provider: vision web_extract)Visionz Web extractc3vK|]4}|dddkp|ddV5dS)r+rr)rNr)r:ts r%rzshow_config..?s\  j&!!V+AquuWb/A/Ar_u ◆ Auxiliary Models (overrides)z provider=zmodel=12su◆ Messaging Platformsrrz Telegram: znot configuredz Discord: )rresolve_skill_config_valuesu◆ Skill Settingsr9rz<20s[]u────────────────────────────────────────────────────────────z+ hermes config edit # Edit config filez! hermes config set z+ hermes setup # Run setup wizard))rr/rrCYANrrr load_managed_envrYELLOWBOLDr@rArLrOr rrhermes_cli.authrrrrr2r0rrrrrrWrr]rorMrrrrr)/rr _managed_keys _managed_env _managed_dirr?env_keyrrDranthropic_value_cfg_max_turns _env_ghostrump ump_firstump_lastr modal_token daytona_keyrrtzrr_tt _aux_comp_sm comp_providerr aux_tasks has_overrideslabeltask_cfgprovmdlrtelegram_token discord_tokenrr skill_varsrr r9r" display_vals/ r% show_configrsk ]]F GGG %DFLFQ R RSSS %RTZT_ ` `aaa %DFLFQ R RSSS)(((((!5577M 1133L $4466   e %l % % % M K        %NDIIf]6K6K,L,LNN       %J6,3G3G)H)HJJ      GGG % V[&+ 6 6777 0_.. 0 0111 -\^^ - -... 1-// 1 1222 GGG % V[ 9 9:::   D33 g&& 14111j//112222111111''))O >{ > > >O! >??? GGG % V[&+ 6 6777 R0GY1O1OPP R RSSSZZ,,00nW>UVa>bccN -^ - -...  ZZ^^$;<<  !c*oo&;&;&=&=^ATATAZAZA\A\&\&\ %9J999           GGG % v{FK 8 8999jjB''G CW[[77A6 C CDDD UW[[1A4%H%HSTTe U UVVV XW[[1CU%K%KVTTQV X XYYY5? Lbdf@g@gim5n5n v'++,b 1 1 1tvC q))Iww|Q''H O9 O OX O O OPPP GGG % V[ 9 9:::zz*b))H ?X\\)W== ? ?@@@ 7X\\%55 7 7888 ;X\\)R88 ; ; ;<<<||I(** mn>j!k!kmmnnnn i M 1 1 {.ACx!y!y{{|||| i G + + lm=i!j!jllmmm#$455  O!M+OOPPPP i I - - o(,,@l"m"mooppp#$566  O!M+OOPPPP i $4 4 4 M8<<0@(#K#KMMNNN W=AT3U3U$UZghvZwZw$U}JK^}_}_$UdqrBdCdC$U<<JUWW X X X X i E ) ) !455 !455 :!8[::;;; :!8[::;;; GGG % V[ 9 9::: J # #B H %%%&&&& F'7!D!DFFGGG GGG %)6; D DEEE**]B//Kooi..G 9g7UU4 9 9:::6 Pd!C!Cc!IPPPPQQQoo011 ? #hh77^S^^^^___z*     j!F!F!Ljjjjkkk Q1A2!F!FQQQRRR b+//2CQ"G"GbbbcccJJ{B//33M2FF mmGR((4H &&&'''! j&99  6]f44 4]44 5 5 5 ;++I }}Xr22 }}]B77I!!##M <  e6 V[QQRRR(00 < >H GGG %,fk6;GG H H H! ] ]%j S"-- WWWb11 ,1Uc%jjju[&*7U7U [3[[[k[[U;Lz;L;L;Lfj5Y5Y[[\\\\       GGG % FJ ' '((( %=vz J JKKK %3VZ @ @AAA %=vz J JKKK GGGGGs8BQ Q Q )iiiC8y yycRtrtddSt}|s(t t dt d|tjdptjd}|s5ddl }ddl }|j d krgd }ngd }|D]}|j |r|}n|s#t d t d |dSt d|d|dtj|t|gdS)z"Open config file in user's editor.zedit configurationNF)rzCreated r@rArrR)notepadcodevimvinano)rrrrrz#No editor found. Config file is at:rzOpening  in z...)rr0rLrrrr/rrrr5rVwhich subprocessrunr0)reditorr_sys candidatescmds r% edit_configrrs}||*+++!##K     (N59999 &&&'''Yx 7BIh$7$7F    =G # #AAAJJAAAJ  Cv|C      3444  ;  !!! 1[ 1 1f 1 1 1222NFC ,,-.....r_ct|pd}|dvrdS|dvrdSdS)zBReturn the cron drift guard axis affected by a config key, if any.r> model.name model.modelr) model.defaultr)>model.providerr+r+N)r0rr)r9rs r%%_cron_model_drift_axis_for_config_keyr#sPSYB%%''--//JLLLw333z 4r_c|! t}n#t$rYdSwxYwt|tsdS|d}t|tsdS|ddduS)abReturn whether cron must fail closed on unpinned inference drift. Only the literal YAML boolean ``false`` disables this spend-safety guard. Missing, malformed, or non-boolean values stay fail-closed. When *config* is omitted, load the active merged configuration so CLI warnings honor the same user/managed setting as the scheduler. NTrmodel_drift_guardF)rrrrr)r cron_configs r%cron_model_drift_guard_enabledr's~  ]]FF   44  fd # #t**V$$K k4 ( (t ??. 5 5U BB  !!axiscx|! t}n#t$rYdSwxYwt|tsdS|d}t|tsdS|dkrdnd}||}t|t o t |S)aTrue when cron.model / cron.model_provider covers *axis*. An axis covered by the explicit cron-fleet default no longer follows the global model/provider at fire time, so the drift guard never engages for it and switch-time warnings would be false alarms. NFrr)model_provider)rrrrrr0rr)r)rr&r9rDs r%_cron_fleet_default_covers_axisr,s~  ]]FF   55  fd # #u**V$$K k4 ( (uW__''*:C OOC E eS ! ! 9d5;;==&9&99r(cH ddlm}|S#t$rgcYSwxYw)a!Best-effort read of the active profile's cron jobs database. Delegates to ``cron.jobs.load_jobs`` to reuse its BOM handling, corruption repair, and context-local store resolution (tests, embedders). Falls back to an empty list on any failure so config writes never break. r load_jobs) cron.jobsr/rr.s r%"_load_cron_jobs_for_config_warningr1sI''''''y{{  s  !!c t|}|dSt|sdSt||rdSt|pd}|sdS|}|d}d}t D]}|dds|dr/t||pdrft||pd} | r | |kr|dz }|dkrdS|dkrd nd } |dkrd nd } td |d| d| d|d|d dS)a]Warn when a global model/provider change will trip cron's drift guard. Cron intentionally fails closed when an unpinned agent job's current global model/provider differs from its creation-time snapshot. Surface that outcome when the operator changes the global axis instead of letting the next tick be the first visible signal. Nr _snapshotrrTno_agentrjobjobshashaveu⚠️ z enabled unpinned cron rz stored z( values that differ from the new global z. They will fail closed on their next run instead of silently using the changed model/provider. Inspect with `hermes cron list`, then pin the intended values with `cronjob action=update job_id= provider= model=`.) r#r'r,r0rrr1rr/) r9rDrr) new_value pinned_fieldsnapshot_fieldaffectedr5rOnounverbs r%1warn_unpinned_cron_jobs_after_model_config_changer?s 1 5 5D | )& 1 1 'tV44EKR  &&((..00I L'''NH133  wwy$''   77:     sww|$$* + + 1 1 3 3  sww~..4"55;;==CCEE  I-- MH1}}MM55vDMM55vD  .8 . .D . .4 . .  . .CG . . .r_ct}|dD]&}t|tr||vrdS||}'t|ts|ndS)zReturn the leaf value declared for *dotted_key* in ``DEFAULT_CONFIG``. Unknown keys and non-leaf paths return ``None`` so they retain the legacy best-effort coercion used by ``config set``. r.N)rrrr)rr3rs r%_default_value_for_keyrAsm D  %%$%% T)9)944Dz!$-- 74447r_> goalsrsecretsrjr model_catalog personalitiesquick_commandsserver_actionschannel_promptscommand_allowlistcredential_pool_strategies>smsemailqqbotslackwecomfeishumatrixrweixindiscordyuanbaodingtalkrtelegramwhatsapp mattermost bluebubbles checkpointsrcttj}|t|t |t |S)a.Return the union of known top-level config keys for validation. Combines :data:`DEFAULT_CONFIG` with the dynamic categories that accept user-supplied child keys. Used by :func:`_validate_config_key` to decide whether a ``hermes config set`` invocation is targeting a known shape. )r>rr?r_OPEN_DICT_TOP_LEVEL_KEYS_DYNAMIC_TOP_LEVEL_KEYS_SCHEMA_DEFINED_DICT_KEYS)r?s r%_known_top_level_keysr_ZsX ~"$$ % %DKK)***KK'(((KK)*** Kr_333333?rcutoffcnddl}||t|d|}|r|dndS)uReturn the closest valid key name from ``candidates`` if any are similar enough to ``key``, else None. Used by ``hermes config set`` to point users at the right path when they've typo'd a top-level key. Uses :func:`difflib.get_close_matches` with a conservative cutoff so we only suggest when there's a strong match — we'd rather say nothing than mislead a user toward a wrong-but-similar key. rNr)rra)difflibget_close_matchesrA)r9rrarcmatchess r%_suggest_closest_keyrfisDNNN''VJ-?-?1V'TTG *71::d*r_c|sdS|d}|d}|drdSt}|tvrdS||vr@t ||}|,d|dd}|r|d|n|}d|fSdS|t vs|tvs |tvrdStj |}|g}|ddD]} | tvrdSt|tsdS| |vrSt | t|} | d|| gz} d| fcSdS|| || }dS) aValidate a dotted config-key path against the known schema. Returns ``(is_known, suggested_alternative_or_None)``. Known keys return ``(True, None)``. Unknown keys return ``(False, )`` where ```` may be ``None`` if no close match was found. Validates as deep as DEFAULT_CONFIG can be safely walked, then stops at any segment that hits an open-dict container (mcp_servers, providers, hooks, etc.) where users define the inner keys themselves. Headline case from #34067: ``gateway.discord.gateway_restart_notification`` was silently written, even though ``gateway`` only has 4 known sub-keys (``strict``, ``media_delivery_allow_dirs``, ``trust_recent_files``, ``trust_recent_files_seconds``). The correct path is ``discord.gateway_restart_notification`` (platform configs live at the top level, not under a ``platforms`` namespace). )FNr.rrC)TNNrF)rr r__PLATFORM_CONTAINER_KEYSrfr@r\r]r^rrrrr>r?r) r9segmentstopknown suggestionrestsuggested_fullr3consumedsegsibling_suggestion fixed_paths r%_validate_config_keyrsws$ {yy~~H 1+C ~~cz ! # #E  &&&z %)#u55  !88HQRRL))D7;K 33T333N.( ({ '''32I+I+ISTmMmMmz"3''DuH| * * *::$%%  :: d??!5c3tyy{{;K;K!L!L !- XXh2D1E&EFF j((((;;Cy :r_forcec  trtddSddlm}||rS|}|r|dz nd}t d|d|d tj tj d t|rGdd l m }|| |t d |dtdSt|\}}t!} t#| i} | r t'| d5} t)| pi} dddn #1swxYwYnM#t*$r@} t d| d| dtj tj d Yd} ~ nd} ~ wwxYw|} t-t/|t0s|dvrd} nu|dvrd} n\|rt7|} n8|ddd rt;|} | }|}|dr3| d}t-|t0r |rd|i| d<d|vr| |}t-|tBr|dkrH|r"t dtE|dnnd}t d tE|d!nJ|sGd"|D}t d#|d$|d%tE|d&tj |r}d'#|dd(}t d)|tj tE|d(kr/t d*tE|d(z d+tj t d,tj t d-|d.tj t d/tj t d0|d1|tj tj d tI| |||}|d2vr tK| } d3}t d4tMdd5l'm(}|| | d6tS|}|r#|d7krtU|tW||d8krht-|t0rS|rQ tYd9z |d:z }|r|-n#t*$rYnwxYw|.dd d;}|t^vr)t-|t0r|rdd|d?thj5|r*t tgd@|thj5t tgdAthj6dSdSdS)BuSet a configuration value. Args: key: Dotted config path (e.g. ``terminal.backend``). value: String value (auto-coerced to bool/int/float when matching). force: When True, skip the unknown-key warning — useful for scripted writes of keys the running version doesn't recognize yet — AND authorize destructive replacement of a mapping section by a scalar (e.g. ``--force model gpt-x`` replaces the whole ``model:`` mapping). Without --force, scalar writes over mapping sections are refused (bare ``model`` is redirected to ``model.default``). The CLI exposes this via ``hermes config set --force``. zset configuration valuesNrrrJrgz Cannot set '(': it is managed by your administrator (A) and cannot be changed. Contact your administrator to modify it.r-rru✓ Set rrr✗ Cannot parse r- The file contains a YAML syntax error. Fix the error in your config file first, then retry. (hermes config edit will open it in your editor.)>rprrT>rnrorFr.rzmodel.r)ru?⚠ Replacing entire 'model' section with a scalar (discarding z existing sub-key(s))r!u<✓ Redirecting bare 'model' to 'model.default' (preserving z existing model sub-key(s))c<g|]}t|t|Sr)rr0)r:r;s r%rz$set_config_value..Ws'CCCa 1c0B0BCCCCr_u✗ Cannot set 'u' to a scalar — 'z"' is a configuration section with z sub-key(s).r5rfz Sub-keys: z ... and z morez/ Use a dotted path to set a specific leaf key:z hermes config set z. z/ Or use --force to replace the entire section:z hermes config set --force r)zmodel.api_basermzmodel.base_urlu< (note: 'api_base' is an alias — saved as model.base_url)rr terminal.cwdz display.skinskinsz.yamlr^rru⚠ 'uU' is not a recognized config key — it was saved anyway, but Hermes may not read it.z Did you mean: z (Custom top-level keys are supported and bridged to the environment for skills/external tools. Use --force to skip this notice.))7rr0rris_key_managedrr/r5r6exitrrrrrOrsrLrrr<rHrrrAr0risdigitrWrrGrr rrrr@rrwrrrrrrrtouchrsplitrrrr?rrrr)r9rDrtrrrpris_knownrlrrrAr* coerced_value _model_key _model_val _existing_sub _sub_list _alias_normrr skin_file _leaf_keyr_display_values r%set_config_valuers||0111 )(((((##C((#3355 /:S{]**@S  O3 O O O O O     # QPPPPP$$SYY[[%888 222,..22333044Hj "##K(555K  kG444 6,Q//52  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6    GKGG3GGGZ      HQKKKKKKKK $M ,S113 7 7) ;;==1 1 1 MM [[]]4 4 4!MM ]]__ )JJMM ]]3A & & . . 0 0 )!%LLM E ""$$JX&&; __W-- j# & & ;: ;$-z#:K  #~~OOC(( i & &0 g~~ M'*9~~MMM*CS'*9~~SSS  CC9CCCJsJJsJJ25d))JJJ  $ $rr( 3 3I4443:FFFF4yy1}}=TQ===!$EDSDDDEDSDD5DD  S%((( ))++##%%K4440==  LMMM''''''k;%@@@@.c22G<3.((w 3E : :;;; nE3!7!7E '))G3oooEI!! "!!!    D  3""2&,,..I'''Juc,B,B'u',,,,,,$U++ >S > >^ > > > >???5c5+NNN   E   e *C * * * M      I %7:77GG H H H e  J             sN*E%;E E%EE% E!E%% F//6F**F/+?V++ V87V8rcht|r-t|}|tn|}nt t |}|tur2t d|tjtj dt t||dS)z%Print a resolved configuration value.NConfig key not set: r-rr) rrrrrrr/r5r6r~r)r9r env_valuerDs r%get_config_valuers#0!#))++.. %-9KMM3//  *S**<<<<   "5' : : :;;;;;r_ctrtddSddlm}||rS|}|r|dz nd}t d|d|d tj tj d t|rdd l m }|| d s2t d|tj tj d t d|dtdSt!}t#|i}|r t'|d5}t)|pi}dddn #1swxYwYnM#t*$r@}t d|d|dtj tj d Yd}~nd}~wwxYwt-||} t/|} | r|dkrt1| p| } | s2t d|tj tj d t3ddlm} | ||dt d|d|dS)z.Remove a user-set configuration or .env value.zunset configuration valuesNrrrJrgzCannot unset 'rvrwr-r)remove_provider_env_credentialrrru ✓ Unset z from rrrxr-ryr{rFr)rr0rrr}rr/r5r6r~rrrrrrOrLrrr<rHrrrr}rrr) r9rrrprrrrAr*rrrs r%unset_config_valuerse||2333)(((((##C((#3355 /:S{]**@S  OS O O# O O O     #  SRRRRR--ciikk::>>wGG  ...SZ @ @ @ @ HQKKK 6366lnn66777!##K(555K  kG444 6,Q//52  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6    GKGG3GGGZ      HQKKKKKKKK K--G.c22G73.(("7++6w  *S**<<<<  ''''''k;%@@@@ /s / /+ / /00000s<F-F ? F FFFF G!!6GG!c Bt|dd}||dkrtdS|dkrtdS|dkrt|dd}|smtdttdtd td td t jd t |t|d ddS|dkrt|dd}t|dd}tt|dd}|r|tdttdtdtdtdttdtdt jd t|||dS|dkrt|dd}|smtdttdtdtdtdt jd t|dS|dkrttdS|d krttdS|d!krtttd"tjtjtt!d#}t#}t%\}}|s?|s=||kr7ttd$tjtdS||krtd%|d&||r td't)|d(d)|D} d*|D} | r=td+t)| d,| D]} td-| d.| rztd/t)| d0| D]W} | d1g} | r!d2d3| dd4d5nd6} td-| d.| Xtt/d7d8}t|d9s|d:r'ttd;tj|d<rCt|d<D],}ttd=|tj-tdS|d>kr~tttd?tjtjtt%\}}||krtd%|d@n.ttd%|d&|dAtjtttdBtjt2D]O}t5|rtdC|$ttdD|dEtjPtttdFtjt9jD]\}}t5|rtdC|'|d1g} | r d&d3| dd4nd6} ttdG|| tjt#}|rUtttdHt)|dItjtdJtdStdK|ttdLtdMtdNtdOtdPtdQtdRtdStdTtdUt jd dS)VzHandle config subcommands.config_commandNshoweditrr9z'Usage: hermes config get [--json]z Examples:z hermes config get modelz$ hermes config get terminal.backendz( hermes config get skills.config --jsonrrFrr>rDrtz0Usage: hermes config set [--force] z3 hermes config set model anthropic/claude-sonnet-4z+ hermes config set terminal.backend dockerz0 hermes config set OPENROUTER_API_KEY sk-or-...z= --force: skip the unknown-key notice for unrecognized keys,z@ and allow a scalar to replace a whole mapping section)rtunsetz Usage: hermes config unset z hermes config unset modelz& hermes config unset terminal.backendz( hermes config unset OPENROUTER_API_KEYrbzenv-pathmigrateu*🔄 Checking configuration for updates...ru ✓ Configuration is up to date!z Config version: rrz1 new config option(s) will be added with defaultsc<g|]}|d|S)rrrs r%rz"config_command..Zs)KKK!aeeM6J6JKAKKKr_cfg|].}|d|d,|/S)rrrrs r%rz"config_command..[sN   55'' 01j0A0A    r_u ⚠️ z required API key(s) missing:u • ru ℹ️ z$ optional API key(s) not configured:toolsz (enables: r5rrrT)rrrru✓ Configuration updated!ru ⚠️ checku📋 Configuration Statusu ✓z (update available)z Required:u ✓ u ✗ z (missing)z Optional:u ○ rz new config option(s) availablez+ Run 'hermes config migrate' to add themzUnknown config command: zAvailable commands:z4 hermes config Show current configurationz/ hermes config edit Open config in editorz@ hermes config get Print a resolved config valuez6 hermes config set Set a config valuez8 hermes config unset Remove a config valuez; hermes config check Check for missing/outdated configz8 hermes config migrate Update config with new optionsz/ hermes config path Show config file pathz- hermes config env-path Show .env file path)getattrrrr/r5r~rrrrrLrOrrrrrrrGREENrrr@r$rrrREDrrr)rsubcmdr9rDrtrr rrrequired_missingoptional_missingr r tools_strr r4rr@s r%rr s T+T 2 2F ~6)) 6   5dE4((  ; < < < GGG +    - . . . 8 9 9 9 < = = = HQKKKgdFE&B&BCCCCCC 5dE4((gt,,WT7E2233 em D E E E GGG +    G H H H ? @ @ @ D E E E GGG Q R R R T U U U HQKKKe5111111 7  dE4((  4 5 5 5 GGG +    / 0 0 0 : ; ; ; < = = = HQKKK3 6   o     :   lnn 9    e@&+v{[[\\\ +??? 244"6"8"8 Z > kZ6O6O %:FLII J J J GGG F  # # E{EEEE F F F  a _^,,___ ` ` `KK{KKK  "     1 U%5!6!6UUU V V V' 1 1/#f+//0000  < \%5!6!6\\\ ] ] ]' < <,,EJRA$))E"1"I*>*>AAAAPR :#f+:y::;;;; !T???  ;  E7>#: E %4flCC D D D :  D GGG":. D De222FMBBCCCC  7    e/fkJJKKK "6"8"8 Z * $ $ 8{888 9 9 9 9 %^[^^z^^^`f`mnn o o o  eM6;//000) J JHX&& J+++,,,,e;x;;;VZHHIIII  eM6;//000/577 K KNHdX&& K+++,,,,"-->CK:DIIeBQBi$8$8::: e>>  r_c ~trdSda ddlm}|D]}|jdvr |jD]z}|t vr |d o|d }|jp|jd|rd nd |jp|jd|rd nd |j pd|d dd t |<{dS#t$rYdSwxYw)uPopulate OPTIONAL_ENV_VARS from provider profiles not already listed. Called once at module load time. Idempotent — repeated calls are no-ops. NTr)list_providers>r _BASE_URL_URLrzAPI keyzbase URL overridez"base URL (leave empty for default)r+)rrr(rcategoryr) _profile_env_vars_injectedrjr auth_typer/rr display_namer signup_urlr)r_pp_var_is_keys r%_inject_profile_env_varsrsO "!% ,,,,,,!>##  C}L00  ,,,"mmK888VvAVAV=V&)&6&B#(#t#tRYErYY_r#t#t!$!1!=SXAAW@~ Z~AA>1T ' * $ ++!$''         sBB.. B<;B<c  trdSda ddl}ttjd}|dz dz }|sdS|D]^}|s|dz }|s|dz }|sK t|d d 5}t|pi}dddn #1swxYwYn#t$rYwxYw| d p| d p|j }t| dpg}|| dpg|D]C} t!| t"r| } i} n6t!| t$r | d r | d } | } nS| t&vr]|  t+| dp| d} | s2| ddurt- fddD} | dp|d| dp| | dpd| | dpddt&| <E`dS#t$rYdSwxYw)uPopulate OPTIONAL_ENV_VARS from bundled platform plugin manifests. Called once at module load time. Idempotent — repeated calls are no-ops. Failures are swallowed so a malformed plugin.yaml can't break CLI import. NTrrrrz plugin.yamlz plugin.ymlr3rrrr requires_env optional_envrrFc3BK|]}|VdSr)r)r:suf name_uppers r%rz3_inject_platform_plugin_env_vars..'sE$$#++C00$$$$$$r_)rr_KEY _PASSWORD_JSONrz configurationrr(r messaging)rrr(rr)"_platform_plugin_env_vars_injectedrrrrrriterdirrr<rHrrrrr rr0rrrrro)r repo_root platforms_dirr_ manifest_pathrAmanifestrentriesrrmeta is_secretrs @r% _inject_platform_plugin_env_varsrs*)-&9  NN**,,4Q7 !I- ; ##%%  F"**,,. . E<<>> !M1M '')) 5 % 4  ''))  -w???71-a006BH777777777777777    LL))OX\\&-A-AOUZE8<<77=2>>G NN8<<77=2 > > >   eS)) D!#DDt,,61B1B =D DD,,,"ZZ\\  *!5!5!K(9K9KLL  *)=)=)F)F #$$$$#V$$$!!I //4#333"hhx008D88E??2d ) $ 4 4 C  + +!$'') #. . ^      sbAK!AKC=C1% C=1C5 5C=8C5 9C=<K= D K D  G K K%$K%r)r&)r+)rN)FrS)TF)r)r`)rr'rrrrVrCrrrr5rC threadingr dataclassesrpathlibrrrrrrr r hermes_cli.route_identityr hermes_cli.secret_promptr r rr3r>r rr&rr0r;system _IS_WINDOWScompilerm frozensetr[r^r`rarWrbRLockrrrhermes_cli.colorsrrhermes_cli.default_soulrrrrrrrrrrrrrrrrr"r$r%r*r0rrErrrFrrGrHrLrOr tupler\rcrjrsrurzr{rrhermes_cli.config_defaultsrrrrrrrobjectrrrrrrrrrrXr\rarkrrryr~rHrrrrrr_EXTRA_KNOWN_ROOT_KEYSr?r_VALID_CUSTOM_PROVIDER_FIELDSrrrrrrr$r+r)r5Matchr?rBrGrNrRrUrbrkrwr~r_rrrrrrrrrrrrrrrr_COMMENTED_SECTIONSrr r2r'rGr4rr)rr[rbrerryr}rrrrrrrrrrrrr#r'r,r1r?rAr\r^r]rhr_rfrsrrrrrrrrrr_r%rs      !!!!!!8888888888888888>>>>>>999999  8 $ $  CEEc!!!33$3333n;E8 8 8 8 %8 478  8 8 8 8 tho9, 2:9::P*3444** #* C D    13tCH~222fhDeCc3S#XSRZ[^R_M_H`$`aabgggAC4U3T#s(^#;<<=BBBy  )@@@@@B ++++++++LLLLLLLL,  T,   $)VZ$899HSM",D,,,,s HSM 2 2x~ 2 2 2 2 2ccc#ccccLt   HTN d    *##9C99990K6"c""""3s&;;#;;;;*$****dFEEEEEEE00000000-----&d&&&&2$2222x}hsm'C!D<    :@t2   $$40 CEEc!!!/"/"/"d"d""""4IHHHHHHHYXX "67EEE   --T#tCy.) d38n9M,0C0000l CH~     #s(^ 6 688C$:c:d::::zCD.      4S#X#78,tDcN';,,,,j#&#%%C'''"%,/8; ~~~ ~~d38n ~~~~H$$$ $$d38n $$$$N s tDcN?S    "(,// T#s(^ $/ $sCx.////d c htn     8<'+tDcN34 T#s(^ $ #s(^ F8<'+ 8 8S> 8 8tDcN34 8 T#s(^ $ 8  8 8 8 8O3O4S>OOOO&8<'+!!!tDcN34! T#s(^ $! #s(^ !!!!N8<'+ ..S>..tDcN34. T#s(^ $ .  ....48<'+ >> >>tDcN34> T#s(^ $ > c] >>>>B##>$>>>>&eCHoR690^022336LL!!! WVV  RRhtCH~&>R$}J]RRRRj00(4S>":0d0000,,4,4$sCx.)A,4T,4,4,4,4^tCH~$4GGGDGT#s(^GGGGTTTd&ddt8DsuT3Y7G.-&-&c-&-&-&-&` 3 8C=    ">   ====@4S>c%S/6J6 .48-- cN-38n-Cc3h01- #s(^ ----`QtCH~Q$sCx.QQQQhS#X4S>>htCH~&>42GK+++$sCx.)+#++s++++^#c3h####L.2.2htn.2S#X.2.2.2.2b*$sCx.****ZhtnPT03T333333341T#s(^1111"2d38n22228      8 ~' >!  3  + 75)-/###! -!"3#$0;/'%M/51A'Q;)3=Dss ::#::::%)'+# 111 $sCx. !1 T#s(^ $1tn 1  #s(^ 1111hPPc3hPPPPf$2F 48 q\q\q\ cNq\q\Cc3h01 q\  q\q\q\q\h.8$sCx.8888@[_ HU5huox}!DEtCQTH~UV W^^^    t,*3****Z%S%%%%%%PCC* * *# *$ * * * *[[C[[[[|PcPcPPPP&F#F$FFFFR$$c$$$$$$$$""#"""" s 3 4S>    C,"s"x}""""J#S#Xc]####LBCBCBBBB i!!!(sC:W W W t%/%/%/Psx}(,CC T#s(^ $C CCCC2(,:: : T#s(^ $: ::::2 Dc3h,@    "(,66 6 6 T#s(^ $6 6666r 8s 8 8 8 8&&I ' ' '  &&I'''$)%%9k]33 s3x     + +c +s3x + +QYZ]Q^ + + + +]c]eD(3-,?&@]]]]@] ] #] c] $] ] ] ] @38 < < <# <4 < < < <>1C>1>1>1>1JdddX#    >.&+"C C C C N! """""r_