epj UdZddlmZddlZddlZddlmZddlmZm Z m Z m Z ddl m Z mZmZmZmZmZmZmZddlmZddlmZmZmZmZmZed d hZd ed <ej e!Z"ddZ#ddZ$ddZ%dZ&ej'dej(Z)dZ*ded<dd Z+dd"Z,dd#Z-Gd$d%e Z.id&e.d'd(d)e.d'd*d+e.d'd,d-e.d'd-d.e.d/d0d1e.d/d1d2e.d/d2d3e.d/d3d4e.d/d4d5e.d6d5d7e.d7d8d9e.d:d9d;e.de.d>d>d?e.d@d?dAe.dBdAe.dCdDe.dEdFe.dGdHe.dIdJdKZ/dLedM<GdNdOe Z0iZ1dPedQ<iZ2dPedR<ddSZ3ddTZ4eGdUdVZ5edWXGdYdZZ6dd\Z7dd^Z8 dddeZ9dfZ:dgZ;e:dhe;diiZ<edWXGdjdkZ=ddmZ>ddnZ? dddrZ@ddvZAddzZB dddZC dddZD dddZE dddZFddZGddZH dddZIddlJZKeKjLZMd_dddZNddZOddZP dd_dd`d_dWd_d_ddddZQdddZR dddZSdS)uShared model-switching logic for CLI and gateway /model commands. Both the CLI (cli.py) and gateway (gateway/run.py) /model handlers share the same core pipeline: parse flags -> alias resolution -> provider resolution -> credential resolution -> normalize model name -> metadata lookup -> build result This module ties together the foundation layers: - ``agent.models_dev`` -- models.dev catalog, ModelInfo, ProviderInfo - ``hermes_cli.providers`` -- canonical provider identity + overlays - ``hermes_cli.model_normalize`` -- per-provider name formatting Provider switching uses the ``--provider`` flag exclusively. No colon-based ``provider:model`` syntax — colons are reserved for OpenRouter variant suffixes (``:free``, ``:extended``, ``:fast``). ) annotationsN) dataclass)AnyList NamedTupleOptional) ProviderDefcustom_provider_aliasescustom_provider_slugdetermine_api_mode get_labelhost_mandated_api_mode is_aggregatorresolve_provider_full)normalize_model_for_provider)ModelCapabilities ModelInfoget_model_capabilitiesget_model_infolist_provider_models opencode-zen opencode-gozfrozenset[str]_UNCAPPED_PICKER_PROVIDERSvaluerreturn list[str]c8gtdfd }t|tr ||St|tr|D] }||St|tt fr|D]}t|tr ||#t|tr^|d}t|tr|s|d}||SS) zReturn configured model IDs from supported config shapes. Accepts: - ``{"model-id": {...}}`` - ``["model-a", "model-b"]`` - ``[{"id": "model-a"}, {"name": "model-b"}]`` - ``"model-a"`` candidaterrNonect|tsdS|}|sdS|}|vrdS||dSN) isinstancestrstriploweraddappend)rmodel_idloweredidsseens =/home/thesage/.hermes/hermes-agent/hermes_cli/model_switch.py_addz!_declared_model_ids.._addEs})S))  F??$$  F.."" d?? F  8idname)rrrr)setr"r#dictlisttuplegetr$)rr-r(itemr*r+s @@r,_declared_model_idsr79sFCUUD       % U  %  H DNNNN %$''   D$$$ T $%% 88D>>!(C0008H8H0#xx//HX Jr.api_urlr# model_idsrc`|r|sdS ddlm}m}|}|dpg}t |t sdS|d}d}|D]}t |ts|ddp|d dpd} | d|kr|d } t | trt | t rtd | Drt | t r| |kr||d <d }|r||d<||dSdS#t$rYdSwxYw) uPersist discovered models into ``custom_providers`` in config.yaml. Called after a successful ``/v1/models`` probe so that the next read with ``discover_models: false`` uses the cached list instead of a stale or minimal manually-configured subset. Matches entries by ``base_url`` (trailing-slash-normalised). A failed config write is swallowed — the picker still shows the live models for this session. Nr) load_config save_configcustom_providers/Fbase_urlurlmodelsc3@K|]}t|tVdSr!)r"r2.0ms r, z4_save_discovered_models_to_config..s=22() 1d##222222r.T) hermes_cli.configr;r<r5r"r3r$rstripr%r2any Exception) r8r9r;r<cfg providersnorm_urlchangedentry entry_urlexistings r,!_save_discovered_models_to_configrSis )& >>>>>>>>kmmGG.//52 )T**  F==??))#..4466  EeT** :r22Peiir6J6JPbWWYYI$$**,,88yy**H (D)) (D)) c22-5222// (D)) h).C.C'E(OGG  &/C" # K             s>FEF F-,F-current_base_urlOptional[ProviderDef]c ~t|pd}|sdStdddd|ddd S) z=ProviderDef for a direct ``model.provider: custom`` endpoint.r@NcustomCustom endpoint openai_chatFapi_key model-config)r/r0 transportapi_key_env_varsr?r auth_typesource)r#r$r )rTr?s r,_bare_custom_provider_defras]#)r**0022H t       r.zNous Research Hermes 3 & 4 models are NOT agentic and are not designed for use with Hermes Agent. They lack the tool-calling capabilities required for agent workflows. Consider using an agentic model instead (Claude, GPT, Gemini, DeepSeek, etc.).z&(?:^|[/:])hermes[-_ ]?[34](?:[-_.:]|$))z*ri.language-model-service..language-model.ztuple[str, ...]_OPAQUE_MODEL_PREFIXES model_namec|s|StD]6}||r|t|d}|r|n|cS7|S)u\Return a human-friendly form of *model_name* for CLI status output. Strips known opaque proxy prefixes (Palantir Foundry's ``ri.language-model-service..language-model.*``) and returns the trailing slug. Falls through to the original string for everything else, so real model IDs (``claude-4-7-opus-20260101``, ``gpt-5-4``, ``meta-llama/Llama-3.3-70B-Instruct``) are untouched. This is a DISPLAY-ONLY helper. Do NOT use the return value for any wire-side operation — the proxy expects the full opaque ID, and callers that compare or persist must keep the original. N)rb startswithlen)rcprefixtails r,format_model_for_displayrism (00   ( ( 0c&kkll+D/44Z / / / 0 r.boolcX|sdStt|S)zReturn True if *model_name* is a real Nous Hermes 3/4 chat model. Used to decide whether to surface the non-agentic warning at startup. Callers in :mod:`cli.py` and here should go through this single helper so the two sites don't drift. F)rj_NOUS_HERMES_NON_AGENTIC_REsearchrcs r,is_nous_hermes_non_agenticros. u +22:>> ? ??r.c2t|rtSdS)zHReturn a warning string if *model_name* is a Nous Hermes 3/4 chat model.r@)ro_HERMES_MODEL_WARNINGrns r,_check_hermes_model_warningrrs!*--%$$ 2r.c(eZdZUdZded<ded<dS) ModelIdentityz:Vendor slug and family prefix used for catalog resolution.r#vendorfamilyN__name__ __module__ __qualname____doc____annotations__rZr.r,rtrts(DDKKKKKKKKr.rtsonnet anthropicz claude-sonnetopusz claude-opushaikuz claude-haikuclaudegpt5openaizgpt-5gptcodexo3o4geminigoogledeepseekz deepseek-chatgrokzx-aillamaz meta-llamaqwenminimaxnemotronnvidiakimi moonshotaizz-aiglmstepfunstepxiaomimimozarcee-aitrinity)rrrrzdict[str, ModelIdentity] MODEL_ALIASESc2eZdZUdZded<ded<ded<dS) DirectAliasz5Exact model mapping that bypasses catalog resolution.r#modelproviderr?NrwrZr.r,rrSs1??JJJMMMMMMMMr.rdict[str, DirectAlias]_BUILTIN_DIRECT_ALIASESDIRECT_ALIASESctt} ddlm}|}|d}t |tr|D]\}}t |ts|dd}|dd}|dd}|r9t||| || <|di} t | tr | d } t | tr| dd} | D]\}} t | tr| s/| } | |vrZ| }d |vr| d d \}}n| }|}t||p| d || <n#t$rYnwxYw|S) aLoad direct aliases from config.yaml ``model_aliases:`` section. Config format:: model_aliases: qwen: model: "qwen3.5:397b" provider: custom base_url: "https://ollama.com/v1" minimax: model: "minimax-m2.7" provider: custom base_url: "https://ollama.com/v1" Also reads ``model.aliases`` (set by ``hermes config set model.aliases.xxx``) and converts simple string entries (``ds-flash: deepseek/deepseek-v4-flash``) into DirectAlias objects. The provider is parsed from the ``provider/`` prefix in the value; if no slash, the current provider is used. rr; model_aliasesrr@rrWr?)rrr?aliasesr>) r2rrHr;r5r"itemsrr$r%r#splitrK)mergedr;rL user_aliasesr0rPrrr? model_sectionsimple_aliasescurrent_providerrkeyvals r,_load_direct_aliasesrasi() * *F* 111111kmmww// lD ) ) +1133   e!%.. '2.. 99Z:: 99Z443>#h444F4::<<--//0 ,, mT * * *..y99N.$// #0#4#4Z#D#D #1#7#7#9#9KD%%eS11!! **,,,,..Cf}} ++--Cczz*-))C*;*;%%#3 #"-#kkmm!)!1!1!E5E!####F3KK      MsH3I IIcdts(ttdSdS)u5Lazy-load direct aliases on first use. Mutates the existing DIRECT_ALIASES dict in place rather than rebinding the module attribute. This keeps `from hermes_cli.model_switch import DIRECT_ALIASES` references valid in callers — rebinding would leave them pointing at a stale empty dict. N)rupdaterrZr.r,_ensure_direct_aliasesrs7 62445555566r.ceZdZUdZded<dZded<dZded<dZded <dZded <dZ ded <dZ ded <dZ ded <dZ ded<dZ ded<dZded<dZded<dZded<dZded<dS)ModelSwitchResultz!Result of a model switch attempt.rjsuccessr@r# new_modeltarget_providerFprovider_changedr[r?api_mode error_messagewarning_messageprovider_labelresolved_via_aliasNzOptional[ModelCapabilities] capabilitiesOptional[ModelInfo] model_info is_global)rxryrzr{r|rrrr[r?rrrrrrrrrZr.r,rrs++MMMIO"""""GHHMON     04L4444&*J****Ir.rT)frozencdeZdZUdZded<dZded<dZded<dZded <dZded <dZ ded <d S) ModelFlagParseResultz"Parsed flags for a /model command.r# model_inputr@explicit_providerFrjr force_refresh is_sessionis_onceN) rxryrzr{r|rrrrrrZr.r,rrsz,,IMJGr.rraw_argscd}d}d}d}d}ddl}|dd|}|}d}g} |t|kr||dkrd}|d z }n||d krd}|d z }n{||d krd}|d z }ng||d krd}|d z }nS||d kr'|d zt|kr||d z}|dz }n | |||d z }|t|kd| } t| |||||S)aqParse flags from /model command args. Returns a :class:`ModelFlagParseResult`. ``--once`` is intentionally parsed here but interpreted by each caller because each frontend has its own live-session restore hook. ``is_global`` and ``is_session`` are independent flag presences; the *effective* persistence decision is resolved by :func:`resolve_persist_behavior` so the config-gated default (``model.persist_switch_by_default``) is applied in one place. Examples:: "sonnet" -> ("sonnet", "", False, False, False) "sonnet --global" -> ("sonnet", "", True, False, False) "sonnet --session" -> ("sonnet", "", False, False, True) "sonnet --once" -> is_once=True "sonnet --provider anthropic" -> ("sonnet", "anthropic", False, False, False) "--provider my-ollama" -> ("", "my-ollama", False, False, False) "--refresh" -> ("", "", False, True, False) "sonnet --provider anthropic --global" -> ("sonnet", "anthropic", True, False, False) Fr@rNz@[\u2012\u2013\u2014\u2015](provider|global|session|refresh|once)z--\1z--globalTrz --sessionz --refreshz--oncez --provider rrrrrr)resubrrfr'joinr$r) rrrrrr_repartsifilteredrs r,parse_model_flags_detailedrs.IMJGwwZ\cemnnH NN  E AH c%jj.. 8z ! !I FAA 1X $ $J FAA 1X $ $ M FAA 1X ! !G FAA 1X % %!a%#e***<*< %a!e  FAA OOE!H % % % FA% c%jj..(((8$$**,,K +#    r.!tuple[str, str, bool, bool, bool]c`t|}|j|j|j|j|jfS)zParse legacy /model flags and return the historical 5-tuple. New call sites that care about ``--once`` should use :func:`parse_model_flags_detailed`. )rrrrrr)rparseds r,parse_model_flagsrs9 ( 1 1F   r.Fr@rrrrc|rdS|rdS|rdS|rdS ddlm}|d}t|tr#t |ddSn#t $rYnwxYwdS)u2Decide whether a ``/model`` switch should persist to ``config.yaml``. Resolution order: 1. ``--once`` explicitly opts out → ``False`` (next turn only). 2. ``--session`` explicitly opts out → ``False`` (this session only). 3. ``--global`` explicitly opts in → ``True``. 4. ``--provider`` given without an explicit persist flag → ``False`` (session only). Provider switches are typically exploratory — the user is trying a different backend for this conversation, not reconfiguring the default. ``--global`` can still force persist. 5. Otherwise defer to ``model.persist_switch_by_default`` in ``config.yaml`` (defaults to ``False``: a plain ``/model `` affects only the current session). Users who want the old persist-by-default behavior can set the key to ``true``; a one-off ``--global`` always persists. The config read is defensive: on a fresh install ``model`` may be a flat string rather than a dict, in which case the built-in default (``False``) applies. FTrrrpersist_switch_by_default)rHr;r5r"r2rjrK)rrrrr; model_cfgs r,resolve_persist_behaviorr,s6uutu 111111KMM%%g.. i & & K &A5IIJJ J K      5sAA.. A;:A;once_with_globalonce_requires_targetz./model --once cannot be combined with --globalz+/model --once requires a model or provider.ceZdZUdZded<ded<dZded<dZded <dZded <dZded <dZ ded <d Z ded<dZ ded<e ddZ e ddZddZdS)ModelSwitchRequestaA fully parsed /model command request. ``scope`` is the *requested* persistence scope derived purely from the flags: ``"once"`` | ``"session"`` | ``"global"`` | ``"default"`` (no explicit scope flag; the effective decision then belongs to :func:`resolve_persist_behavior`, which also reads config). ``errors`` carries error *codes* (see ``MODEL_SWITCH_ERR_*``); surfaces render them via :data:`MODEL_SWITCH_ERROR_TEXT` plus their own prefix. r#rawtargetr@rFrjrrrrdefaultscoperZr4errorsrc|jSr!)rselfs r,rzModelSwitchRequest.model_inputs {r.'ModelFlagParseResult'cht|j|j|j|j|j|jS)Nr)rrrrrrrrs r,flagszModelSwitchRequest.flagss9# "4n,L     r.r3c$d|jDS)z8Canonical (undercorated) error strings for this request.c(g|]}t|SrZ)MODEL_SWITCH_ERROR_TEXT)rEcodes r, z5ModelSwitchRequest.error_messages..sFFF$'-FFFr.)rrs r,error_messagesz!ModelSwitchRequest.error_messagessFF$+FFFFr.N)rr#)rr)rr3)rxryrzr{r|rrrrrrrpropertyrrrrZr.r,rrts   HHHKKKIJGMEFX   X GGGGGGr.rrc t|pd}t|}g}|jr!|jr|t |jr(|js!|js|t|jrd}n|j rd}n |jrd}nd}t||j|j|j|j |j|j |t| S)u2Parse a raw /model argument string into a :class:`ModelSwitchRequest`. The ONE parser for every /model surface. Wraps :func:`parse_model_flags_detailed` (tokenization + Unicode-dash normalization) and layers on the flag-conflict validation that cli.py, gateway/slash_commands.py, and tui_gateway/server.py each used to re-implement: * ``--once`` + ``--global`` → ``MODEL_SWITCH_ERR_ONCE_WITH_GLOBAL`` * ``--once`` with no model and no ``--provider`` → ``MODEL_SWITCH_ERR_ONCE_REQUIRES_TARGET`` Model targets pass through untouched: bare names (``sonnet``), aggregator slugs (``vendor/model``), and colon forms (``vendor:model``) are all resolved later by :func:`switch_model` (aggregator-aware — bare names resolve WITHIN the current aggregator first). r@oncesessionglobalr) rrrrrrrrr) r#rrrr'!MODEL_SWITCH_ERR_ONCE_WITH_GLOBALrr%MODEL_SWITCH_ERR_ONCE_REQUIRES_TARGETrrrr4)rrrrs r,parse_model_switch_argsrs$ ciR..C ' , ,FF ~9&*9 7888 ~=f0=9Q= ;<<< ~      ! 2"$*V}}    r.cb|dSt|tr|St|tr6t|dpdSt |dd}|#t|pdSdS)z?Extract a model-name candidate from a str / dict / attr-object.Nr@r)r"r#r$r2r5getattr)r model_attrs r,_effective_model_candidaters }r%{{}}%5599W%%+,,22444..J:#$$**,,, 2r.session_overrideschannel_config global_configc@|||fD]}t|}|r|cSdS)u.Resolve the effective model: session override > channel > global. The single owner of the precedence rule that gateway/run.py (``_resolve_model_for_channel`` / ``_apply_session_model_override``) and gateway/platforms/api_server.py (``_create_agent``'s session-override / session-persisted-model branches) each encoded independently — the divergence commit 7dd00bb47d had to close. A user-issued ``/model`` (session override) always wins over per-channel/session-persisted configuration, which wins over the global default. Each argument may be a plain model string, a dict with a ``"model"`` key (a gateway ``_session_model_overrides`` entry), or an object with a ``.model`` attribute (a ``ChannelOverride``). Empty/None entries fall through to the next tier. r@)r)rrrtierrs r,resolve_effective_modelrsE(#NMB.t44       2r.r(rgr4c|t|d}|dr |dd}|d}g}d}d}d}|D]}|dkr0|dvrd}|rd}||z },|d vr1d }||z }9|dkr|r||z }Z|d krTd |vrJ |t |d n#t$rYnwxYwd}||z }|d vrO|rI |t |d n#t$rYnwxYwd}d }|rI |t |d n#t$rYnwxYwd}d }||z }[|d kr1|rd}|}{|dvrd}|d vrd }||z }|d kr||z }|rM|dkrG |t |d n#t$rYnwxYw| d }|}td |D} dddddd} | |d} | | |fzS)uSSort key for model version preference. Extracts version numbers after the family prefix and returns a sort key that prefers higher versions. Suffix tokens (``pro``, ``omni``, etc.) are used as tiebreakers, with common quality indicators ranked. Examples (with prefix ``"mimo"``):: mimo-v2.5-pro → (-2.5, 0, 'pro') # highest version wins mimo-v2.5 → (-2.5, 1, '') # no suffix = lower than pro mimo-v2-pro → (-2.0, 0, 'pro') mimo-v2-omni → (-2.0, 1, 'omni') mimo-v2-flash → (-2.0, 1, 'flash') Nr>r-r@startvV in_versionz-_. in_suffix.betweenc3K|]}| VdSr!rZ)rEns r,rGz"_model_sort_key..`s$))q))))))r.r)promaxplusturbosol) rfrelstripr$isdigitr'floatrI ValueErrorr%r4r5) r(rgrestnums suffix_bufstatenum_bufchsuffix version_key _SUFFIX_RANK suffix_ranks r,_model_sort_keyr#s CKKLL !D sABBx ;;s   ! ! # #D DJ EG66 G  Tzz$ !$2 u#b l " "zz|| !2 s'>> E'..*=*=$>$>????% GGrMGGu! E'..*=*=$>$>????% G!! E'..*=*=$>$>????% G#b i  zz|| !$t$u#b k ! ! " J5L((  KKgnnS1122 3 3 3 3    D      % %e , ,F \\^^F))D)))))KQAaHHL""61--K +v. ..sH 5D DD#5E E&%E&25F(( F54F55I II raw_inputrOptional[tuple[str, str, str]]c|}tt|}||j|j|fStD]3\}}|j|kr|j|j|fcS4t|}|dS|\}}t|} ddl m } | |g} | rz resolve_alias..s ///!AGGII///r.r>cbg|]+}|)|,SrZr%re)rEmidrgs r,rz!resolve_alias..sE   yy{{%%f--    r.cbg|]+}|)|,SrZr+)rEr, family_lowers r,rz!resolve_alias..sE   yy{{%%l33    r.c$t|Sr!)r#)rFprefix_for_sorts r,zresolve_alias..sq/BBr.r)r$r%rrr5rrrrrhermes_cli.modelsr'r'rKrsort)r$rrdirect alias_namedaidentityrurvcatalogr'staticr+rF aggregatormatchesr.rgr0s @@@r, resolve_aliasr=osz //   ! ! # #C    $ $F s33 )..0077 B 8>>  s " "K:6 6 6 6 #  %%HtNFF ##344G  666666!%%&6;;  &//w///D & &7799D((NN1%%%      /00J  %%V%%++--    "    ||~~     "    t/9D**&***fO LLBBBBLCCC gaj# ..s#AD>> E  E user_providersr2r= list | Nonecf t|||d}d|DS#t$rgcYSwxYw)uReturn slugs of providers that have credentials. Uses ``list_authenticated_providers()`` which is backed by the models.dev in-memory cache (1 hr TTL) — no extra network cost. r)rr>r= max_modelscg|] }|d S)slugrZrEps r,rz4get_authenticated_provider_slugs..s---a& ---r.)list_authenticated_providersrK)rr>r=rMs r, get_authenticated_provider_slugsrGsa 0-)-    .-9----  s ! 00rZauthenticated_providerscD|pd}|D]}t||}||cSdS)zTry to resolve an alias on the user's authenticated providers. Falls back to ``("openrouter", "nous")`` only when no authenticated providers are supplied (backwards compat for non-interactive callers). ) openrouternousN)r=)r$rHrMrresults r,_resolve_alias_fallbackrMsF(A+AIy(33  MMM  4r.rrr?r[rrconfig_context_length int | Noneconfigured_model str | Noneconfigured_providerconfigured_base_url Optional[int]c (|2|s|s| r, ddlm} | ||| |||rd}n#t$rd}YnwxYw ddlm} | ||pd|pd|pd||} | rt | Sn#t$rYnwxYw||jrt |jSdS)u Resolve the context length to show in /model output. models.dev reports per-vendor context (e.g. gpt-5.5 = 1.05M on openai) but provider-enforced limits can be lower (e.g. Codex OAuth caps the same slug at 272k). The authoritative source is ``agent.model_metadata.get_model_context_length`` which already knows about Codex OAuth, Copilot, Nous, and falls back to models.dev for the rest. When ``custom_providers`` is provided, per-model ``context_length`` overrides from ``custom_providers[].models..context_length`` are honored — this closes #15779 where ``/model`` switch ignored user-set overrides. Prefer the provider-aware value; fall back to ``model_info.context_window`` only if the resolver returns nothing. Nr)should_clear_context_pin)get_model_context_lengthr@)r?r[rr=rN)hermes_cli.route_identityrVrKagent.model_metadatarWintcontext_window) rrr?r[rr=rNrPrRrSrVrWctxs r,resolve_display_context_lengthr]s;:()/)3F) ) J J J J J J'' ##  -)-% ) ) )$( ! ! ! )  AAAAAA&& ^Mr%-"7      s88O       *";:,--- 4s# 22-A%% A21A2c dKddl} | t||||||||||  d{VS)uAsync variant of :func:`resolve_display_context_length`. The sync version runs two blocking chains: the route comparison in ``should_clear_context_pin`` and the full provider probe ladder in ``get_model_context_length`` (blocking ``requests`` calls to Anthropic ``/v1/models``, Copilot, Nous, Codex, GMI, Ollama, models.dev and OpenRouter). Async gateway handlers must not run either on the event loop — see ``agent.model_metadata.get_model_context_length_async`` and ``hermes_cli.route_identity.should_clear_context_pin_async``, which offload the same chains for the message path. Shares all logic with the sync version — no code duplication. rN)r?r[rr=rNrPrRrS)asyncio to_threadr]) rrr?r[rr=rNrPrRrSr_s r,$resolve_display_context_length_asyncra%sm2NNN""& )3)//#         r.Optional[dict]Optional[list]dict[str, str]c |r|siS| d fd }i}t|trq|D]\\}}t|t rt|ts0dD])}|||}|r|||<n*]t|tr|D]} t| ts| d} t| t r| sWd| }||vradD])}|| |}|r|||<n*|S)uReturn ``{provider_slug: canonical_model_id}`` for every configured provider whose declared models contain an exact (case-insensitive) match for ``model_name``. Used by :func:`switch_model` to route a *typed* model name to the provider that actually declares it in user/custom provider config, instead of leaving it on the current provider. Without this, a model declared under ``providers.`` / ``custom_providers`` but typed while the current provider is ``openai-codex`` stays on Codex and is soft-accepted as an unknown hidden Codex model (#45006). Matching is exact (case-insensitive); the configured spelling is returned so the downstream validation/override path sees the canonical id. Only the explicitly-declared model collections are scanned (``models``, the singular ``model``, and ``default_model``) — never fuzzy/family matching. r Optional[str]cdt|D]}|kr|cSdS)z`Canonical id if ``value`` (a model collection or scalar) declares ``target``, else None.N)r7r%)rr(rs r,_matchz,_configured_provider_matches.._matchmsD,E22  H~~6))*tr.)rBr default_modelr0custom:)rrf)r$r%r"r2rr#r5r3) rcr>r=rhr<rCrLrhitrPr0rs @r,_configured_provider_matchesrlTs* Z--//      % % ' 'F!G.$'''--//  ID#dC((  30E0E ;  fSWWS\\**$'GDME"D))%  EeT** 99V$$DdC((   #T##Dw;  fUYYs^^,,$'GDME Nr.rc t|pd}|drd|vr|S|dd\}}|}|}|r|s|S|pgD]}t |t stt|dpdt|dpd}||vsd||vrxt|dD]2}||kr|ccS3|S)zBMap a picker-prefixed custom model selection to its configured ID.r@rjr>rr0 provider_keyrB) r#r$r%rerr"r2r r5r7) rcrr=rrgrrP entry_slugsr(s r,_resolve_named_custom_model_idrps ?(b))//117799H   y ) )S -B-B"((a00FI \\^^ ! ! # #F!!I !'R   %&&  -  &!!'R ( (  .))/R 0 0   ; & &*d}2|s|-s||krtU|||}3|3r||3vr |3|}d%}2ntW|3}4tY|4d-kr,td|d/|d0d|4d1S|4d}|3|}d%}2t@!d2||t[|t\r||vr|}|pd}5|d3vp|/d4pd5|5vpd6|5v}6||kr|6s|s|-s|2s| ||} | r| \}}||k}7t7|}8|dkr|rd7}8|/d4rt|||}9|9|9j}8|}:|};d}<|7s|rddl0}=d}>|rF|rDdd8lm1}?|?| |}>|> |?||}>|>|>jr|pi| p|pi|pi}@te|@d9dpd}A|A/d:rJ|A3d;r5|=j4|Addpd}B|Br-|=j4|Bd}A | ||Apd|>j|?}C|Cd9dp|A}:|Cd@dp|>j};|CdAd}<n#t$r|A}:|>j};d}tmtn|}E|E|Ejr |Ej};d}<|:sdE}:tq|;}F|F|F} fallback c. On aggregator, try vendor/model slug conversion d. Aggregator catalog search e. detect_provider_for_model() as last resort f. Resolve credentials g. Normalize model name for target provider Finally: h. Get full model metadata from models.dev i. Build result Args: raw_input: The model name (after flag parsing). current_provider: The currently active provider. current_model: The currently active model name. current_base_url: The currently active base URL. current_api_key: The currently active API key. is_global: Whether to persist the switch. explicit_provider: From --provider flag (empty = no explicit provider). user_providers: The ``providers:`` dict from config.yaml (for user endpoints). custom_providers: The ``custom_providers:`` list from config.yaml. Returns: ModelSwitchResult with all information the caller needs. r)copilot_model_api_modedetect_provider_for_modelvalidate_requested_modelopencode_model_api_mode)resolve_runtime_providerr@FNrWzUnknown provider 'z`'. Check 'hermes model' for available providers, or define it in config.yaml under 'providers:'.)validate_config_structureu1 Run 'hermes doctor' — config issues detected:u • )rrrmoar)normalize_moa_configdefault_presetr_AGGREGATOR_PROVIDERSALIASES)rr>r=cJg|]}|r|k| SrZ)re)rEs_explicit_norms r,rz switch_model..6sB   ||N33 89^8K8K8K8K8Kr.z Did you mean: z, ?z Provider 'z"' is an alias that routes through z&, which has no credentials configured.)rrrrr)_auto_detect_local_modelzNo model detected on z (z@). Specify the model explicitly: /model --provider zN' has no base URL configured. Specify a model: /model --provider )exact_moa_preset_namer|TzAlias '%s' resolved to %s on %sz,Alias '%s' resolved via fallback to %s on %szAlias 'z ' maps to r>z] but no matching model was found in any provider catalog. Try specifying the full model name.:rz3Converted vendor:model '%s' to aggregator slug '%s''z0' is declared by multiple configured providers (z<). Re-run with --provider to choose which one to use.z/Configured-provider detection routed '%s' to %s>localrWrj localhostz 127.0.0.1rX)resolve_user_providerr[z${}rkey_env) requestedexplicit_api_keyexplicit_base_url target_modelr?r)rrz,Could not resolve credentials for provider 'z': zno-key-required)r[r?rzCould not validate `z`: )acceptedpersist recognizedmessageris_provider_enabledrBr0rnrrz Invalid model)rrrrrrcorrected_model>github-copilotcopilot)r[>opencoderr> nous-portalrK nousresearch) nous_api_mode)r>rr)normalize_opencode_base_urlz | ) rrrrr[r?rrrrrrr)Fr3rtrurvrwhermes_cli.runtime_providerrxr$rr%rarHryrrKrr/r;hermes_cli.moa_configr|r5rhermes_cli.providersrrGrr0r r?rr=rloggerdebugrrMrurvfindrrrrlsortedrfr"r2reosrr#endswithenvironr rrrrprrrr7r3r rrrrr'rr)Zr$rrqrTrrrrr>r=rtrurvrwrxresolved_aliasrrresolved_moa_presetpdef _switch_errry _cfg_issues_cir;r|_AGG_PROVIDERS_PROVIDER_ALIAS_TABLE _alias_target_authed _suggestions_hintrdetected alias_result_r_moa_cfg _moa_matchrauthedfallback_resultr8 colon_posleftrightresolved_in_current_catalogr9new_model_lowerr,bare config_routed cfg_matches match_slugs_base is_customrr custom_pdefr[r?rr _user_pdef_ruser_ucfg_ukey_kenvruntimee_da_mandated_mode validationoverriderrCrLrP entry_name entry_aliasesrQ entry_model entry_modelsmsgrrrrwarnings hermes_warnrsZ @r, switch_modelrs` EDDDDDN!!I&O _6$      <-3355;;==II,-=>>D <6%6666   GGGGGG7799 @#XXK*2A2@@#'?#+'?'??     $#)  ' e # #I # &999999FFFFFF001B1B51I1I1ORPPQab  & & &%  & NMMMMMIIIIII*002288::-11.AA  00>11>116!1-!1G g--    &    $,@dii &=&=@@@@)+)!$3#'9'A^AA#,_#=#=AA9>AA     } PPPPPP33DMBB  (II, %(7'+y"+pDIpppp\mpp    )!$3#'9'_TY__K\__    %Y@@  #+7 (Ay.  F 5 5 5 5 5 5 Y Y Y Y Y Y Y Y++KKMM,=,=e,D,D,JKKH..xCCJ J"'& !#&*## ,Y8HII  F F F(4DEELLL F 2    %9E 6OY LL1 ?     //##))++Cm##9%5#1%5 #:)V"L"L".AP>OYLLF& ? -S1H, %"+CcCCX_CCxCCC )  &NN3// q==S %9%9mL\>]>]%9$ZiZ06688>>@@D%i!mnn5;;==E'+$5$5e$5$5  Q%y',#  ) ) &. &*?;;G &"+//"3"3" & &Cyy{{o55$' 6:36 '&&#::&)iiQ&7&7GAt#zz||>>,/ >B ; % ( </( < #3336>+;K <#{22 +,< =I$(MM"("5"5K;''!++0$)&/!QI!Q!Q.2ii .D.D!Q!Q!Q    '2!nO +O **955 >u$< u(<  / / / 0" 00 0" 0 10RRJ!#VO^DD  !j&9 !#)r../@/F/F/H/H/N/N/P/PQQE"(b--o>>EBD  )R006B77==??E%% @%..*=*= @ uQrT{B77==?? >EIIi44:;;AACC>JNN5"55;;==E 22-%*]d&0&9!*  "++i44=";;z266M*:M";;z266   %.  ( (-= (%G'H)/8DDHH 22-!*"++i44";;z266";;z266   (!$3#1'3*33/033           ..*&Gkk)R00G{{:r22H{{:r22HH    D ,     00 ?s|?|HH ,+,H55N!! A%ox@@/?$4I-YHHI --  %        ?i??A??     >>* % %.   = = = = = =+1133   c**3//?** $7"8M8M$N$NNN#' , W>W9AAAAAA..(SS*/9EEL ;;JH~~i  / 9-...-i88K% $$$ ')08@ 8,,,b%)!   s1B88 CC*:D%% D43D4AK//L  L 3A!bb/.b/Ad e*e e eAf"" f/.f/:i i. i))i.raw_pool_presentrc ddlm}||}|r|Sn#t$rYnwxYw|S)azReturn whether *provider* has a credential that can be selected now. ``auth.json`` historically allowed opaque token-style pool values that do not deserialize into ``PooledCredential`` entries. Preserve visibility for those legacy values, but when a real pool exists its availability state is authoritative: an all-exhausted/dead pool is not authenticated. r load_pool)agent.credential_poolrhas_credentials has_availablerK)rrrpools r,_credential_pool_is_usabler4sy 333333y""    ! ! (%%'' ' (      s8< A A rPcxt|tsiSddlm}||dS)Nr)normalize_extra_headers extra_headers)r"r2rHrr5)rPrs r,_extra_headers_from_configrGsH eT " " 999999 " "599_#=#= > >>r.Optional['_threading.Thread']ctrdStdd}tj|dd}||S) uWarm the provider-models disk cache in a background daemon thread. The no-args ``/model`` picker calls ``list_authenticated_providers()``, which fetches each authenticated provider's live ``/v1/models`` list on a cold/stale cache. Those fetches are independent HTTP round-trips but run serially, so the first ``/model`` open in a session (or any open after the 1h cache TTL expires) blocks ~1-2s on the user's critical path. This pre-warms that exact path off-thread during idle session time: it runs ``list_authenticated_providers()`` once, which populates ``provider_models_cache.json`` for every authed provider. By the time the user types ``/model``, the picker hits the warm disk cache and renders in ~100ms. Fire-and-forget. Process-level Event guard ensures it runs at most once. Fully exception-isolated — a slow or offline provider can never affect the session. Returns the spawned thread (for tests) or None if already warmed. Nrrc ddlm}|}t|j|j|j|j|j|jpgdS#t$r t ddYdSwxYw)Nr)load_picker_context)rrTrqr>r=excluded_providerszpicker cache prewarm failedT)exc_info) hermes_cli.inventoryrrFrrTrqr>r=rrKrr)rr\s r,_warmz)prewarm_picker_cache_async.._warmfs G @ @ @ @ @ @%%''C )!$!5!$!5!/"1!$!5# #?R        G G G LL6L F F F F F F GsAA &A32A3Tzpicker-cache-prewarm)rdaemonr0rr)_picker_prewarm_doneis_setr1 _threadingThreadr)rts r,prewarm_picker_cache_asyncrOss&""$$tGGGG( t:PQQQAGGIII Hr.)force_fresh_nous_tierrArqrefreshprobe_custom_providersprobe_current_custom_provider for_pickerrrrArrrrr List[dict]c @ ddlddlm} m} m}ddlm}ddlm}m }m }m }m }m }m}|r |n#t$rYnwxYwg}t!}t#pd}t#pddd~ fd }d | pgD}t!dddfd }dfd dfd }| }t+|}d|D|d<||d<d|vrddlm} | |d<d|vrjdsDjds*dkrddlm}!ddlm}"dk}#jdp |#rrndpd}$ |!jdd|$d !}%n #|"$rg}%YnwxYw|%s|#r|r|g}%|%|d<dd"lm}&dd#lm}'| D]L\}(})|'|(}*|*r |*|(kr|*|&vr(|(}+ dd$lm },|,|(}-|-|-j!}+n#t$rYnwxYw|+|(kr]|(}.|.|vrv|(|vs|)|vr||)}/tE|/t*s||(}0|0r |0j#d%krdd&lm$}1|1|(s|0r|0j%rtM|0j%}2n-|/d'g}2tE|2tLsOtOfd(|2D}3|3sm dd)lm(}4|4}5tS|5o(|5d*i|(}6|6rtU|(d+,}3n#t$rYnwxYw|3s||(}7|7s&||(g}7|(|vr ||(|7}7g}8tE|t*rL||(}9tE|9t*r"tW|9d-}8tMt*,g|8|7}7t[|7}:|(t\vr|7};n| |7d|n|7};||)}<|0r|0j!r|0j!n |ddlm}?d2| D}@|>D] \}A}B|A|vr|@|A|A}C|C|vrJ|A|vs|C|vrwd.}3|Bj#d3kr ||C}3nv|Bj#d4krD dd5l2m3}D|D}3nY#t$r%}Eth5d6|EYd}E~En/d}E~EwwxYw|Bj6r tOfd7|Bj6D}3|3sT|Bj#d%krI|A|CfD]D}F|?|F}G|Gr+|Gj%r$tOfd8|Gj%Drd+}3nE|3sg dd)lm(}4|4}5|5d9i}H|5r |A|Hvs|C|Hvrd+}3n3#t$r&}Eth5d:|A|EYd}E~End}E~EwwxYw|3s tU|Crd+}3n;| r9 dd;l7m8}I|I|C}J|J9rd+}3n#t$rYnwxYwn3#t$r&}Eth5d<|C|EYd}E~End}E~EwwxYw|3s|Cd=kr dd>l:m;}Km<}L|L}M|K}N|Mr|Md?s|Nr|Nd?rd+}3n2#t$r%}Eth5d@|EYd}E~End}E~EwwxYw|3s|CdAvr ||C}7n|Bj#d3kr{ ||C}O|Or|On+||Cgp||Ag}7n;#t$r0||Cgp||Ag}7YnwxYw|Cdkr|dg}7 ddBlm=}Pm>}Qm?}Rm@}SddClmA}T|Pdpi}Ud}V |Tdpi}W|WdDdpd}Vn#t$rd}VYnwxYw|Q|Er|R|7|U|V\}7}Xn|S|7|U|V\}7}XnY#t$rYnMwxYw||C}7|7s<||Cgp||Ag}7|C|vr ||C|7}7t[|7}:|Ct\vr|7};n| |7d|n|7};|/|Ct|C|Ckp|Akd.|;|:dFd0|0|A|0|C||C" ddGlmC}Yn#t$rg}YYnwxYw|YD]G}Z|ZjE|vr|ZjE|vr;|?|ZjE}[d.}\|[r'|[j%r tOfdH|[j%D}\|\sE dd)lm(}4|4}]|]d9i}^|]r |ZjE|^vrd+}\n#t$rYnwxYw|\s( tU|ZjErd+}\n#t$rYnwxYw|\s'|[r%t|[dIdd3kr||ZjE}\|\s|[rqt|[dIdd3kr\ ||ZjE}O|Or|On||ZjEg}_nX#t$r||ZjEg}_Yn1wxYw||ZjE}_|_s||ZjEg}_t[|_}`| |_d|n|_}a|/|ZjE|ZjG|ZjEkd.|a|`dJd0|0|ZjE||ZjEIt!}b|rtE|t*rddKlHmI}cddLlJmK|c}d|D]\}e}ftE|ft*s|fs(|e|vr?|fdMdp|e}=|fdNdp-|fdOdp|fd dpd}gt#|fdPdpd}ht#|fd%dpd}it#|fdQp|fdRpd}j|ir|in|hrdS|hnd}kt#|gd}lt|f}mtt|m}n|l|k|j|nf}o|fdTdp|fdUd}pg}q|pr|q/|ptW|fd-g}r|rD]}s|s|qvr|q/|s|o|dvr|=}tdVD]5}u|u|tvr/|tO|ud}tn6|tO}vd}wt|vD]9\}x}y|ydW}z|zrtOdX|zDr|x}wn:|w5|wdYkr/dZQ|vd|w}t|e}{|{|tp|=|ggd.|fgt!d[|d|o<|qD]5}|||r1|||d|od-vr!|d|od-/||6|rr d+|d|od\<|d|od]/|=|d|od^Rt|=t#|e|dTD]}}|}d_}f|}d}e|}dM}=|}d`}gtM|}d-}~|~s_t#|g}da|vr(|dbpg}|rtM|}~t#|fd%dpd}|sht#|fdPdpd}h|hr-j|hdnd}|fdcd+}tE|t"r|ddv}tS|}d\}t#|gd}t#|e}de|}d^t!D}||kp||vp|dfkotSo|k}||go"tS|go|otS|p| }|r> ddhlmU}|||g| rd ndit|fpdj}|r|}~n#t$rYnwxYw|/|e|=|d+|~|~rt[|~nddk|gdl|0|e|R|t#|gd}|}d]p|=gD]}t#||f}|drQ|dmrI|b0||0t|t#|=|f}|dr|dmr|b0||dfkrr df|vrtOfdn|pgDs|r|gng}|s r` ddhlmU}|dt#d| rd ndio}|r|}n#t$rYnwxYw|/dfdpd+d+| |d|n|t[|dqt#ddl|0df|rtE|tLrddKlHmI}|}|D]"}tE|t*s|dMpd}|dNdp-|d dp|dOdpdd}g|r|gs|d%pd}i|dPpd}h|ip0|hr-j|hdnd}t#|dQp|dRpd}j|ir|in|hrdS|hnd}k|dcd+}tE|t"r|ddv}t|}mtt|m}n|}dVD]5}u|u|vr/|O|ud}n6|g|k|j|n|f}o|o|vrf|p|}=t#|drpd}t|=|}.|.|=|g|gd.||mt!ds ||o<n5|r&||od%s |||od%<|s d.||odc<||od^Rt|t#|drpd|dUpd}p|pr1|p||od-vr!||od-/|ptW|d-i}|r d+||od\<|D]3}s|s||od-vr!||od-/|s4$t!}tfdt|TD}|TD]}}|}d`}g|}d%d}|}d}.|.|vr|.|vrV|.|vrK|.}dY}|du||vr |dmz }|du||v |du|}.|.|}d<t#|}dMt#|}d`df}|dr|dmr||bvrR|dm}|r|vrb|.|kp-|dv|}d^t!Dvp |dfkotSo |ko|dmk}||goItS|go:tS|p|}d\ o|}dcd+}|ri ddhlmU}|||g| rd ndi|}dwpdj}|r'||}d-<t[||}dx<t|g|n#t$rYnwxYw|/|.|}dM|d+|}d-t[|}d-dk|}d`dl|0|.|0|. ddLlJmKtE|t*r0fdy|Drfdz|D}n#t$rYnwxYw|rg|D]d}|d{s|d-pg}||vr1|g||d-<|dxt[|dmz|dx<|Yd|}|S)uDetect which providers have credentials and list their curated models. Uses the curated model lists from hermes_cli/models.py (OPENROUTER_MODELS, _PROVIDER_MODELS) — NOT the full models.dev catalog. These are hand-picked agentic models that work well as agent backends. Returns a list of dicts, each with: - slug: str — the --provider value to use - name: str — display name - is_current: bool - is_user_defined: bool - models: list[str] — curated model IDs (up to max_models) - total_models: int — total curated count - source: str — "built-in", "models.dev", "user-config" Only includes providers that have API keys set or are user-defined endpoints. ``force_fresh_nous_tier`` bypasses the short Nous tier cache for explicit account-sensitive flows. UI picker opens should leave it false so they do not block on fresh Portal/account checks every time. ``refresh`` busts the per-provider model-id disk cache (``provider_models_cache.json``) up front so every row re-fetches its live catalog. Use for an explicit user-triggered "refresh models" action (e.g. the desktop picker's refresh control); leave false for normal picker opens so they stay snappy on the 1h cache. ``probe_custom_providers`` controls live ``/models`` discovery for saved custom OpenAI-compatible endpoints. Keep the default true for CLI parity; GUI picker opens can pass false to show configured models immediately without waiting on offline local endpoints. ``probe_current_custom_provider`` is the middle ground for GUI picker opens: probe only the currently-selected custom endpoint so its model list matches the active provider without blocking on every saved/offline custom endpoint. rN)PROVIDER_TO_MODELS_DEVfetch_models_devget_provider_infoPROVIDER_REGISTRY)OPENROUTER_MODELSr'_MODELS_DEV_PREFERRED_merge_with_models_devcached_provider_model_idsclear_provider_models_cacheget_curated_nous_model_idsr@r>row_is_currentrjrc*tpo|Sr!)rj)rrrs r,_can_probe_custom_providerz@list_authenticated_providers.._can_probe_custom_providers*`/L/_Q_aaar.cxh|]7}|t|8SrZ)r#r$r%rDs r,r)z/list_authenticated_providers..s8VVVTUVc!ffllnn**,,VVVr.rAr#ct|pddS)Nr@r>r#r$rIr%)rAs r, _norm_urlz/list_authenticated_providers.._norm_urls839"~~##%%,,S1177999r.rCrcH ddlm}n#t$rYdSwxYw||}|sdSd}t |ddr"j|jdpd}|st |ddpd}|}|r|dSdS)a Record the effective base URL for a built-in provider row. Prefers the live env-override (e.g. DASHSCOPE_BASE_URL) over the static inference_base_url so the dedup matches what a user typing that URL into custom_providers would actually hit.rrNr@base_url_env_varinference_base_url)hermes_cli.authrrKr5rrrr&)rC_regpcfgrAnormed_builtin_endpointsrrs r,_record_builtin_endpointz>list_authenticated_providers.._record_builtin_endpoints   A A A A A A A    FF xx~~  F 4+R 0 0 B*..!6;;ArC @$ 4b99?RC3  +  " "6 * * * * * + +s  cPjddrdSjddr/jddrdStfddDS)aTReturn True when explicit AWS auth config is present. This intentionally avoids botocore's full credential chain. Provider picker/model-switch discovery can run for non-Bedrock providers, and botocore may otherwise probe EC2 IMDS (169.254.169.254) on local machines before returning no credentials. AWS_BEARER_TOKEN_BEDROCKr@TAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYc3rK|]1}j|dV2dS)r@N)rr5r$)rEr0rs r,rGzQlist_authenticated_providers.._has_fast_aws_sdk_signal..sS   JNN4 $ $ * * , ,      r.) AWS_PROFILE&AWS_CONTAINER_CREDENTIALS_RELATIVE_URI"AWS_CONTAINER_CREDENTIALS_FULL_URIAWS_WEB_IDENTITY_TOKEN_FILE)rr5r$rJ)rsr,_has_fast_aws_sdk_signalz>list_authenticated_providers.._has_fast_aws_sdk_signals :>>4b 9 9 ? ? A A 4 JNN. 3 3 9 9 ; ;  6;;AACC 4          r.c^t|pd}tpd}rdS||krdS ddlm}t |S#t $rYdSwxYw)z@Credential check for AWS SDK providers in non-runtime discovery.r@TFr)has_aws_credentials)r#r$r%agent.bedrock_adapterr)rjrK)rC slug_norm current_normr)r'rs r,_has_aws_sdk_creds_for_listingzDlist_authenticated_providers.._has_aws_sdk_creds_for_listings OO))++1133 +1r2288::@@BB # # % % 4  $ $5  A A A A A A++--.. .   55 sB B,+B,cg|]\}}|SrZrZrEr,rs r,rz0list_authenticated_providers..#sAAAVS!SAAAr.rJrKz ollama-cloud)fetch_ollama_cloud_modelslmstudio LM_API_KEY LM_BASE_URL)fetch_lmstudio_models) AuthErrorzhttp://127.0.0.1:1234/v1g?)r[r?timeoutr~r)get_provider_profiler[)is_runtime_provider_routableenvc3LK|]}j|VdSr!rr5rEevrs r,rGz/list_authenticated_providers..s1>>r r**>>>>>>r.)_load_auth_storecredential_poolTrrBFzbuilt-in)rCr0 is_currentis_user_definedrB total_modelsr`)HERMES_OVERLAYSci|]\}}|| SrZrZ)rEkvs r, z0list_authenticated_providers..sGGG1q!GGGr.aws_sdkvertex)has_vertex_credentialsz"Vertex credential check failed: %sc3LK|]}j|VdSr!r;r<s r,rGz/list_authenticated_providers..s1PP2BJNN2..PPPPPPr.c3LK|]}j|VdSr!r;r<s r,rGz/list_authenticated_providers..s1NN"2:>>"--NNNNNNr.rMz"Auth store check failed for %s: %srz'Credential pool check failed for %s: %sr~)read_claude_code_credentialsread_hermes_oauth_credentials accessTokenz)Anthropic external creds check failed: %s> copilot-acp openai-codexr)get_pricing_for_providercheck_nous_free_tier&union_with_portal_free_recommendations&union_with_portal_paid_recommendations)get_provider_auth_stateportal_base_url) force_freshhermes)CANONICAL_PROVIDERSc3LK|]}j|VdSr!r;r<s r,rGz/list_authenticated_providers.. s1YYr r 2 2YYYYYYr.r_ canonical) OrderedDictrr0r?apirrr]zenv:rir)u—z - z.,()c3>K|]}|VdSr!)r)rEcs r,rGz/list_authenticated_providers..6 s*"<"<1199;;"<"<"<"<"<"0nofalsecPh|]#}t|$SrZr#r%rEaliass r,r)z/list_authenticated_providers..| s7',E   ""r.rW)r)fetch_api_modelsg@)r6headersz user-config)rCr0r@rArBrBr`r8rc3K|]}t|tot|ddp+|ddp|dddtdkVdS)r?r@rAr^r>N)r"r2r#r5r$rIr%)rE_cprTs r,rGz/list_authenticated_providers.. s    sD ! ! A B''&775"%%&775"%%eggffSkk%%''#$$**,,33C88>>@@ A       r.)r6rXr\rn) rCr0r8r[rBrardrrc3K|]X}rTt|ddkTdVYdS)r8r>rNr)rE_grp_current_base_url_norms r,rGz/list_authenticated_providers..j sz, , %, DO$$**,,33C88>>@@DZZZ [ZZZ , , r.rcPh|]#}t|$SrZrirjs r,r)z/list_authenticated_providers.. s:...JJ$$&&...r.rrBch|]X\}}t|t|%t|YSrZ)r"r2r#r$r%)rEr0rLrs r,r)z/list_authenticated_providers.. soD#c4((2E1DS1I1ID !!''))r.c8g|]}t|ddvrKt|ddv|S) provider_idr@rC)r#r5r$r%)rEr_disabled_slugss r,rz0list_authenticated_providers.. s1553344::<<BBDDO[[AEE&"--..4466<<>>oUUUUUr.r@c&|d |d fS)Nr@rBrZ)rws r,r1z.list_authenticated_providers.. sAlO 3a6G5GHr.r2)rrjrrj)rAr#rr#)rCr#rr)rrj)rCr#rrj)Zragent.models_devrrrrrr3rr'r r r r r rKr1r#r$r%rIr2r0rr5r4r5rrrrrMr7r0r"r_r8r^r3rJr>rjrr7fromkeysrfrr'r&rCagent.vertex_adapterrJrrextra_env_varsrrragent.anthropic_adapterrMrNrRrSrTrUrVr rZ ImportErrorrCrlabel collectionsr]rHrrr4rr enumeraterrr valuesrlr sumrSr4)rrTr>r=rrArqrrrrrrr _mdev_pinforrr'r r r r r results seen_slugs_current_provider_normr _excludedrr-datacuratedr0r4r5is_current_lmstudiolm_baseliverr hermes_idmdev_idr _canonical_gpp_profrCpdatapconfigr8env_vars has_credsr>storerr9configured_models configuredtotaltoppinfo display_namerC_auth_registry_mdev_to_hermespidoverlay hermes_slugrJexc_keyrproviders_storer_poolrMrN hermes_credscc_creds_ids _nous_pricing _nous_free _union_free _union_paid _nous_state_pricing_portal_str _canon_provsro _cp_config _cp_has_creds _cp_store_cp_providers_store _cp_model_ids _cp_total_cp_top_section3_emitted_pairs_OD3 ep_groupsep_namerbr8rinline_api_keyrcredential_identity api_url_normentry_extra_headersheaders_identity group_keyrirentry_declared_modelsr( grp_displaysep_toks_cut_at_i_t_tlgrp_slug_mgrp models_list url_lowerfbr[discoverra _ep_url_norm _ep_slug_norm _ep_aliases_ep_is_current should_proberl live_models_url_norm_for_pair _raw_name_pair_models _live_modelsr]groupsrPraw_name_display_prefixrndeclared_models_section4_emitted_slugs_current_base_url_group_count base_slugr _pair_key _grp_url_norm_grp_is_current_rowrrrrxr'rrrs`` `` @@@@@@@r,rFrFs)fIII 211111  ' ' ) ) ) )    D GeeJ !1!7R88>>@@FFHH !1!7R88>>@@GGLLRRTTbbbbbbbWV7I7ORVVVI "ee::::++++++++,      2           D%))9$:$:GAA/@AAAGL 1022GFOW$$??????";";"="=   |$$!(* }(E(E!IYI_I_IaIaIgIgIiIimwIwIw;;;;;;------.4466<<>>*L JNN= ) ) *$7V > > > > >DOOE "Z     D   " "  ::<<: % %  ??   ) )W]]__ -I-I !!%&&   $'' 22  w(I55  A@@@@@++I66    w/ G455HHyy++Hh-- >>>>X>>>>>   <<<<<<((**#'Meii(92>>BB9MM$$ $ :!D!!!I       .-i88  I Ir22I111229iHH (* nd + + R'++I66J*d++ R$7 x8P8P$Q$Q!'G):'GY'GHHII I 2 2 2CC,6,B)KZK(( C G$$'.g7<gw||TYFfejj_f  ((/ 00/..$!     tzz||$$$  &&&&544444CCCCCC HG(>(D(D(F(FGGGO'--//o.o. W 99;;* $ $ &))#s33     * , ,  99;;) # #{'8'8':':i'G'G    ) )66{CCII  ( * *  HGGGGGG2244  H H H A3GGGGGGGG H  # QPPPP9OPPPPPI W.);;k*  %))$//D1NNNN8MNNNNN$(   M M<<<<<<((**"'))K"<"<%c_44 8V8V $I M M M A3LLLLLLLL M  Z Z-k:: $II CCCCCC ) + 6 6 0022-(,I$ Z Z Z F UXYYYYYYYY Z O[K77 O =<>> 7799 %\%5%5m%D%D%%!)m!>II ) + + Q00==$(dDDw{{;/K/K/cw{{[^`bOcOc  Q Q Q#KK R88PGKKR>I O#KK R88PGKKR>  z ) )  8>>  y ( ( $''11   Z*5 ZYYYYZ=XYYYYYM  <<<<<<,,.. &/mmK&D&D#)-@!@!@$(M      -ch77)$(M      E E KQS0T0TXa0a0a::38DDM    :'*k2>>)KK :00::(, K'++ch2K2K  : : : ' CHb 9 9  :65ch??M  : ' CHb 9 9  && 0:0F-  ,,MHI(&66$%!      sx~~''(((  ****$'55\3*^T::\3 433333999999)- -3355f f OGVfd++ '&v.. }}*,,!::fb11 >>"Ii$8$BBBi(299"=== % C>B )$%:; i  - 4 4\ B B B i  + 2 2' c'llCC    ##%%a 3a 3C]F&kGv;L)nGs8}--K /LL..006688 #y00 X..4"B/&*2hh &**Y339r::@@BBG QfjjB77=2>>DDFFAHP"*.."55;;===bzz"3T::H(C(( H#>>++3GG"&sww/D'E'E"F"F w<<--//66s;;AACCLLL..006688M03 3550I0IK!77)[8+h6?344?$(>> 65^TTTY]^eYfYfksW 8%8!8   BBBBBB"2"2'1 :s :6 B B Jd ###K #2&1  D NN$,#'%4? FK 0 0 0Q'"      NN7==?? + + +   k * * * "%W!3!3!5!5!>>>>>//())//1188==#-6CC3     +*G    %#.8.Dgkzk**'LL$+,,2244;;C@@    x   r6J'7>>r6++++++.9[]]%e Ae AEeT**  &))/R6688H *b))99UB''99UB''eggffSkk   7 #ii 228b??AANyy++1r88::G$7>F w++11333B  *%%99[))eggeegg ";*19&W&&&r yy!2D99H(C(( H#>>++3GG#=U"C"C $V,?,E,E,G,G%H%HII 'O%  /))&5&;&;C&@&@&C&I&I&K&KOE*!"5xAQSbShShSjSjkI&& /:( "599^#<#<#BCCIIKK +L,GG (&& +0'/%8"uu % %y!!;6)#4#8#8#C#C;3:F9%i0  A;@F9%&78 9 i ( / /' .117R88   #YYw//52<<>>M BfY6G6Q!Q!Qy!(+22=AAA1%))Hb2I2IJJO @;?y!"78+ A A6)#4X#>>>9%h/66x@@@ A(+uu(+, , , ,  , , , ) ) % ==??u 6u 6C)nGggi,,Gv;Dzz||z))djjllBY.Y.Y zz||666 "((Q((..00J>>FA#((Q((..00J>>#))a))"F CK  &&((..00C N##))++22377==??I|  !  >U1U1U&aLM 2D!D!D: 66)..!$CEE!:!:... '(27/007!%;;72Q6 +*/JJJ5MM5']]H#''2G*H*H&H5GG-t44   BBBBBB"2"2'1 :s # 8 8 @D ###K #(3H .1+.>.>N+:#[!D NNF -#'h- #CM 2 2'y>      NN4::<< ( ( ( # ' ' 5 5 5 5 999999 nd + + !/!5!5!7!7O  &        D88L)) hhx((.BGG++"/!:'!:X'+xxG 'M'MPQ'Q^$  LLHHLIII Ns A A  A "'I II0K  KK2AQ QQ-Z>> [-[(([-02^## _-__`'.'``' `# `'"`##`'' a1aa#A b00 c:cc;e6e:9e:!h"<%g"!h"" g1.h"0g110h"" h/.h/4l;; m  m 3p ppp00 p=<p=/r55%ssR.,ASS AS(S'AS([AA\(\( A\5\4A\5y6AA{{ A{{A{}2A A~>~> A  A rMcr ddlm}||}||S|gd|DzS#t$r|cYSwxYw)aAdd the virtual MoA provider row used by interactive model pickers. ``list_authenticated_providers()`` only returns real/auth-backed providers. The CLI model inventory adds MoA separately so named presets appear next to normal providers; gateway pickers call ``list_picker_providers()`` directly, so they need the same virtual row here. Reuse the inventory's single row builder so the row shape stays defined in one place. r)_moa_provider_rowNcg|]=}t|dddk;|>S)rCr@r{)r#r5r%rDs r,rz0_prepend_moa_picker_provider..$ sE\\\!Cfb8I8I4J4J4P4P4R4RV[4[4[A4[4[4[r.)rrrK)rMrrmoa_rows r,_prepend_moa_picker_providerr sx::::::##$455 ? y\\y\\\\\ s'' 66 include_moac ddlm}t||||||d|} |rt| |} g} | D]<} t | dd} | dkr} |} d | D}n3#t$r&t| d g}YnwxYwt| } | |d |n|| d <t|| d <t| d }t| d o!t| d}|s|s'| | >| S)aInteractive-picker variant of :func:`list_authenticated_providers`. Post-processes the base list so the ``/model`` picker (Telegram/Discord inline keyboards) only surfaces models that are actually callable in the current install: - OpenRouter's model list is replaced with the output of :func:`hermes_cli.models.fetch_openrouter_models`, which filters the curated ``OPENROUTER_MODELS`` snapshot against the live OpenRouter catalog. IDs the live catalog no longer carries drop out, so the picker never offers a model the user can't call. - Provider rows whose model list ends up empty are dropped, except custom endpoints (``is_user_defined=True`` with an ``api_url``) where the user may supply their own model set through config. All other providers and metadata fields are passed through unchanged. The typed ``/model `` path is unaffected -- only the interactive picker payload is narrowed. r)fetch_openrouter_modelsT)rrTr>r=rArqrr)rrCr@rJcg|]\}}|SrZrZr/s r,rz)list_picker_providers..[ s333FCC333r.rBNrBrAr8) r3rrFrr#r5r%rKr3r2rfrjr')rrTr>r=rArqrrrrMrrErCrlive_ids has_modelsis_custom_endpoints r,list_picker_providersr) s::99999,))%)#-   I_0M]^^^ H 155$$%%++-- <   5..0033d333 5 5 5h 3 344 5QA3=3I(;J;//xAhK #H An !%%//** !!%%(9":":;;VQUU9EUEU@V@V "4   Os4B  -B;:B;)rrrr)r8r#r9rrr)rTr#rrU)rcr#rr#)rcr#rrj)rrr)rr#rr)rr#rr)Fr@) rrjrrjrrjrr#rrj)rr#rr)rrrr#)NNr@)rrrrrrrr#)r(r#rgr#rr4)r$r#rr#rr%)r@NN)rr#r>r2r=r?rr)rZ)r$r#rHrrr%)r@r@NNNNNN)rr#rr#r?r#r[r#rrr=r?rNrOrPrQrRrQrSrQrrT)rcr#r>rbr=rcrrd)rcr#rr#r=rcrr#)r@r@Fr@NN)r$r#rr#rqr#rTr#rrr#rrjrr#r>r2r=r?rr)rr#rrjrrj)rPrrrd)rr)r@r@NN)rr#rTr#r>r2r=r?rrjrArOrqr#rrjrrjrrjrrjrr?rr)r@)rMrrr#rr)r@r@NNNr@FN)rr#rTr#r>r2r=r?rArOrqr#rrjrr?rr)Tr{ __future__rloggingr dataclassesrtypingrrrrrr r r r r rrrhermes_cli.model_normalizerrzrrrrr frozensetrr| getLoggerrxrr7rSrarqcompile IGNORECASErlrbrirorrrtrrrrrrrrrrrrrrrrrrr#r=rGrMr]rarlrpr threadingrEventrrrrrFrrrZr.r,rs(#""""" !!!!!!222222222222                    .7Y 7V-W-WWWWW  8 $ $----`5 5 5 5 p,- )bj-M.+ . @ @ @ @J 1+ {O<<1+ {M::1+ {N;; 1+  {H55 1+ x111+ x//1+ x111+ x..1+ x..1+ x221+$z?;;%1+* vv..+1+0 |W5511+6 vv..71+<y)44=1+Bx44C1+H |V44I1+Nvu--y&11x00z955a1+1+1+ 1111x*354444*,++++@@@@F 6 6 6 6   & $CCCCL    & +++++x%7!(>% &'W)+X  $)G)G)G)G)G)G)G)GX....b    ">m/m/m/m/`J/J/J/J/\$(0*,(&*$((,#'&*&*?????J&*$((,#'&*&*'''''^====@N$(n n n n n p'z'))KP&????- - - - b$( S #(!#'*/&*SSSSSSl$*$(!&*???????r.