߲j \UdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z m Z ddlmZmZddlmZddlmZmZddlmZdd lmZmZmZmZmZmZmZmZdd l m!Z!dd l"m#Z#m$Z$m%Z%dd l&m'Z'dd l(m)Z)m*Z*m+Z+m,Z,ddl-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3ddl4m5Z5m6Z6ddl7m8Z8m9Z9m:Z:m;Z;mZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEddlFmGZGmHZHmIZImJZJmKZKmLZLddlMmNZNmOZOmPZPmQZQmRZRmSZSmTZTmUZUmVZVmWZWmXZXmYZYmZZZm[Z[m\Z\m]Z]m^Z^m_Z_m`Z`maZambZbmcZcmdZdmeZemfZfmgZgmhZhmiZimjZjmkZkmlZlmmZmmnZnmoZompZpmqZqmrZrmsZsmtZtddlumvZvmwZwmxZxmyZymzZzm{Z{m|Z|m}Z}m~Z~mZmZmZmZddlmZmZmZmZmZmZmZmZmZmZmZmZmZmZddlmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZddlmZmZmZmZddlmZddlmZmZmZmZmZmZmZddlmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZejeZ ddlZ ddlZddZddZeGddZ d ddZgedd d!eeee"ed#d$d%e&d'ed(d)d%e&ed*d+d%eɬ&d,d-d.ed/d0fed1d2d3ed45d6d7d8d9d:d;edd?d@dAedBdCfdDedEdFdGeeeedHeedIJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[ed\d]fd^d_d`Zdaedb<dceDDcic]}|j|c}Zddede<eeZddflmZmZmZmZmZddglmZmZmZeddhZhdiZdjZddkZdldmddnZdodpiZdqedr<ddsZddtZdduZddvZddwZdxdydzZ ee hd{zZ dd|Z dd}Z dd~Z ddZddZiZded<ej"ZddZddZddZddZddZe ddZe efdd ddZddZdddZddddZdddZddZddZ ddZ ddZ!e ef ddZ"dd ddZ#ddZ$ddZ%dd ddZ& ddZ'ddZ(ddZ)ddZ*ddZ+dddZ,dZ- ddZ.ddZ/ddd ddZ0ddZ1ddZ2ddZ3ddZ4ddZ5ddZ6ddZ7ddZ8ddZ9ddZ:ddZ;edhZ<ehdZ=dZ>ddZ?ddZ@ddZAddZBe8dfe:dfe@dfe;dfeBdffZCded<ddZDdddZEddZFddZGddZHiddddddddddƓddƓddƓddʓddʓddʓd(d(dd(dd(dd(ddѓddѓddѓiddՓddՓdd:dd:ddړddړddݓddݓdd@dd@dd@ddddddEddEddEddidddddddddd-dd-dd-dd-dd1dd1dddddddddddd*dd*id*d*ddddddddddddddddd dd d d d d ddddddddddddddddd#d#ddZdddddZIded<dߐdZJddZKddZLddddZMddZNed-dhZO dd ZP ddddd! dd"ZQdd#ZRdd$ZSdd%ZTdd&ZUdd' dd(ZVd)ZWdd*ZXdd+ZYdd,ZZehd-Z[d.ed/<ej"Z\iZ]d0ed1<d2Z^dd3Z_d4dded5 dd6Z`d4Zadabd7ed8<dacd9ed:<dd;Zddݐd<Zedd=Zfed>Gd?d@ZgehdAZhehdBZiegddCdDeheizdEegd#dFdGehdHdIhzdEegd(dJdKedLdMhdEegd*dNdOegdEdPdQdRZjdSedT<ddUZkeekdVZleekd(VZmeekd#VZnddWZoddXZpddYZqddZZrdd[Zsdd\Ztdd]Zu dd^Zvdd_Zwdd`ZxddΐdaZyiejjDcic]\}}||jc}}dbdcddZ|dede<dfdgdhdididjZ}dedk<ddlZ~ddmZddnZe1e1e2edodpdqZdreds<ddtZdduZ dddv ddwZdאdxZdܐdyZdאdzZdd{Zdݐd|Zdd}Zdݐd~ZddlmZddlmZddlmZddlZddlZddl mZddlZddlZddlZddl mZiddddddddddddddddddddddddddddddddddZdZy#e$rdZYqwxYw#e$rdZYzwxYwcc}wcc}}w(aMulti-provider authentication system for Hermes Agent. - ``ProviderConfig`` / ``PROVIDER_REGISTRY`` describe every known inference provider. - The auth store (``~/.hermes/auth.json``) holds per-provider state, the credential pool and suppression markers; ``_auth_store_lock`` / ``_load_auth_store`` / ``_save_auth_store`` are the only I/O primitives (cross-process flock, atomic 0o600 writes). - ``resolve_provider()`` picks the active provider via the documented priority chain. - ``OAUTH_PROVIDER_FLOWS`` maps each OAuth provider to its resolver/status builder; the flows live in ``auth_nous``/``auth_codex``/``auth_xai``/``auth_qwen``/``auth_minimax``/``auth_spotify``/``auth_openrouter`` and are re-imported here so ``hermes_cli.auth.`` stays the public/patchable surface.) annotationsN) ExitStackcontextmanager) dataclassfield)partial)datetimetimezone)Path)AnyCallableDict FrozenSetIterableListOptionalTuple)urlparse)OPENROUTER_BASE_URLhermes_home_keysecure_parent_dir)$sanitize_borrowed_credential_payload)atomic_json_write env_floatfile_signatureis_truthy_value)KIMI_CODE_BASE_URL ZAI_ENDPOINTS$_normalize_lmstudio_runtime_base_url_resolve_kimi_base_url_resolve_zai_base_urldetect_zai_endpoint)_prompt_model_selection_save_model_choice)_can_open_graphical_browser_default_verify_is_remote_session!_nous_device_auth_timeout_message!_offer_existing_oauth_credentials_poll_device_token_generic_poll_for_token_print_device_code_instructions_print_login_success_print_loopback_ssh_hint_prompt_yes_no_request_device_code_resolve_verify_ssh_user_at_host)!SINGLE_USE_REFRESH_POOL_PROVIDERS_oauth_heal_clean_marks_oauth_heal_noticesconsume_oauth_heal_notices#heal_forked_single_use_oauth_grants$strip_cloned_single_use_oauth_grants)'NOUS_SESSION_TERMINALNOUS_SESSION_UNKNOWNNOUS_SESSION_VALID_ALLOWED_NOUS_INFERENCE_HOSTS_agent_key_is_usable_apply_nous_refreshed_tokens!_assert_nous_inference_jwt_usable_compute_nous_auth_status#_format_nous_entitlement_auth_error_healed_nous_inference_url _login_nous_merge_shared_nous_oauth_state_migrate_stale_nous_portal_url_nous_device_code_login_nous_inference_env_override_nous_invoke_jwt_is_usable_nous_invoke_jwt_status_nous_portal_env_override_nous_shared_store_lock_nous_shared_store_path_pool_first_oauth_status_quarantine_nous_oauth_state_quarantine_nous_pool_entries_read_shared_nous_state_refresh_access_token_refresh_nous_or_quarantine_select_nous_invoke_jwt_sync_nous_pool_from_auth_store_token_fingerprint_try_import_shared_nous_state)_validate_nous_inference_url_from_network_write_shared_nous_statefetch_nous_modelsget_nous_auth_status_localget_nous_session_validitypersist_nous_credentialsrefresh_nous_oauth_from_state resolve_nous_runtime_credentialsstep_up_nous_billing_scope) _MINIMAX_OAUTH_ERROR_BODY_LIMIT_login_minimax_oauth_minimax_oauth_login_minimax_pkce_pair_minimax_poll_token_minimax_post_form_minimax_request_user_code"_minimax_resolve_token_expiry_unix_minimax_response_error_text_minimax_save_auth_state_refresh_minimax_oauth_state"build_minimax_oauth_token_provider)resolve_minimax_oauth_runtime_credentials)_login_xai_oauth_read_xai_oauth_tokens_refresh_xai_oauth_tokens_save_xai_oauth_tokens'_write_through_xai_oauth_to_global_root_xai_access_token_is_expiring_xai_oauth_device_code_login_xai_oauth_discovery_xai_oauth_poll_device_token_xai_oauth_request_device_code#_xai_proactive_refresh_skew_seconds _xai_validate_inference_base_urlrefresh_xai_oauth_pure%resolve_xai_oauth_runtime_credentials)_codex_access_token_is_expiring_codex_device_code_login_codex_http_client_codex_pool_rate_limit_status_codex_quota_probe_cache_codex_usage_probe_url_import_codex_cli_tokens_is_codex_rate_limit_shaped_login_openai_codex_probe_codex_quota_restored_read_codex_tokens_refresh_codex_auth_tokens"_refresh_expired_codex_probe_token_save_codex_tokens clear_codex_pool_quota_cooldownsrefresh_codex_oauth_pure!resolve_codex_runtime_credentials)_refresh_spotify_oauth_stateget_spotify_auth_statuslogin_spotify_command#resolve_spotify_runtime_credentials)_openrouter_pkce_login)_qwen_access_token_is_expiring_qwen_cli_auth_path_read_qwen_cli_tokens_refresh_qwen_cli_tokens_save_qwen_cli_tokensget_qwen_auth_status resolve_qwen_runtime_credentials)/_decode_jwt_claimsAUTH_STORE_VERSIONAUTH_LOCK_TIMEOUT_SECONDSDEFAULT_NOUS_PORTAL_URLDEFAULT_NOUS_INFERENCE_URLDEFAULT_NOUS_CLIENT_IDNOUS_BILLING_MANAGE_SCOPEDEFAULT_NOUS_SCOPENOUS_DEVICE_CODE_SOURCENOUS_AUTH_PATH_INVOKE_JWT!ACCESS_TOKEN_REFRESH_SKEW_SECONDSNOUS_INVOKE_JWT_MIN_TTL_SECONDSDEFAULT_CODEX_BASE_URLDEFAULT_XAI_OAUTH_BASE_URLMINIMAX_OAUTH_CLIENT_IDMINIMAX_OAUTH_SCOPEMINIMAX_OAUTH_GLOBAL_BASEMINIMAX_OAUTH_CN_BASEMINIMAX_OAUTH_GLOBAL_INFERENCEMINIMAX_OAUTH_CN_INFERENCE"MINIMAX_OAUTH_REFRESH_SKEW_SECONDSDEFAULT_QWEN_BASE_URLDEFAULT_GITHUB_MODELS_BASE_URLDEFAULT_COPILOT_ACP_BASE_URLDEFAULT_OLLAMA_CLOUD_BASE_URLDEFAULT_ACTUAL_BASE_URLDEFAULT_ACTUAL_LOCAL_BASE_URLSTEPFUN_STEP_PLAN_INTL_BASE_URLSTEPFUN_STEP_PLAN_CN_BASE_URLCODEX_OAUTH_CLIENT_IDCODEX_OAUTH_TOKEN_URL'CODEX_ACCESS_TOKEN_REFRESH_SKEW_SECONDSXAI_OAUTH_CLIENT_IDXAI_OAUTH_SCOPE%XAI_ACCESS_TOKEN_REFRESH_SKEW_SECONDS&QWEN_ACCESS_TOKEN_REFRESH_SKEW_SECONDS!DEFAULT_SPOTIFY_ACCOUNTS_BASE_URLDEFAULT_SPOTIFY_API_BASE_URLSPOTIFY_DOCS_URLDEFAULT_SPOTIFY_SCOPESERVICE_PROVIDER_NAMESLMSTUDIO_NOAUTH_PLACEHOLDERACTUAL_LOCAL_NOAUTH_PLACEHOLDERCODEX_RATE_LIMITED_CODE AuthError _nous_errhttpxc t|xsdjxsdjjd}|dvS#t$rYywxYw)z5Return True for Actual's loopback local API endpoint..F>::10.0.0.0 localhost 127.0.0.1)rhostnamelowerrstrip Exception)base_urlhosts 4/home/ubuntu/.hermes/hermes-agent/hermes_cli/auth.pyis_actual_local_base_urlrvsVR(117R>>@GGL ? ?? s:A A  A cjt|xsdjjd}|stS t |}|j xsdj jd}|jjd}|dvr|dk(s t|r|dzS|S#t$r|cYSwxYw)zReturn Actual's OpenAI-compatible base URL (hosted api.actual.inc or the loopback local server; both expose a /v1 surface for the selected OpenAI-compatible transport).r/r>rrzapi.actual.incz/v1) strstriprrrrrpathrr)rurlparsedrrs rnormalize_actual_base_urlrs hn"  # # % , ,S 1C &&#%2,,.55c:{{!!#& yd&66:RSV:WU{ J  sAB$$ B21B2ceZdZUdZded<ded<ded<dZded<dZded<dZded <dZded <e e Z d ed <dZ ded<dZ ded<y)ProviderConfigz%Describes a known inference provider.ridname auth_typerportal_base_urlinference_base_url client_idscope)default_factoryDict[str, Any]extratupleapi_key_env_varsbase_url_env_varN)__name__ __module__ __qualname____doc____annotations__rrrrrdictrrrrrrrsa/ G INOS  IsE3O!$7E>7 e crrc$t||||||S)z@Compact constructor for the common env-var-keyed provider shape.)rrrrrr)r)rrrrrrs r_api_key_providerrs#  DIBT)rps&lXY:a8a>OQR>SSls$&zDict[str, ProviderConfig]PROVIDER_REGISTRY)atomic_config_writeget_hermes_homeget_config_pathread_raw_config$require_readable_config_before_write)get_plugin_oauth_auth_statusregistry_lookupsync_plugin_provider_registrycnddlmtdj}t dfd|DDdS)uFirst usable Anthropic credential (``.env`` preferred over a stale shell export), or ``""``. Order mirrors ``PROVIDER_REGISTRY["anthropic"].api_key_env_vars``. Checks both the ``.env`` file and the process environment, preferring ``~/.hermes/.env`` so a deliberate key rotation isn't shadowed by a stale shell export (matches the api-key resolution path — see #20591). rget_env_value_prefer_dotenvr/c3&K|] }|s| ywrlrrnvs rrpz$get_anthropic_key..s^q\]^c36K|]}|xsdywrNr)rnvarr|s rrpz$get_anthropic_key..sX8=CCXr)hermes_cli.configr|rqrnext)env_varsr|s @rget_anthropic_keyr s2> ->>H ^XxX^`b ccr> ***** your-api-key*nonenulldummyexamplechangeme placeholder your_api_keyyour_api_key_here)zsk-ghp_hf_c|j}|jdr|jdrytD]9}|j|s|t |d}|s&t d|Ds9y|j ddj ddj d d}t|xrt d |DS) zETrue for the placeholder shapes shipped in .env.example and the docs.your__hereTNc3&K|] }|dk( ywxNrrncs rrpz(_is_placeholder_shape../s3AH3 r-_c3&K|] }|dk( ywrrrs rrpz(_is_placeholder_shape..2s!=q!s(!=r)r startswithendswith_PLACEHOLDER_KEY_PREFIXESlenallreplacebool)valueloweredprefixtailstrippeds r_is_placeholder_shaper'skkmG'"w'7'7'@+   f %3v;<(D3d33  sB'//R8@@bIH > =c!=H!===r) min_lengthct|tsy|j}t||k\xr$|j t vxr t | S)zIReturn True when a configured secret looks usable, not empty/placeholder.F)rmrrrr_PLACEHOLDER_SECRET_VALUESr)rrcleaneds rhas_usable_secretr5sO eS !kkmG LJ & 3 'AA 3)'224r openrouter)zsk-or-zDict[str, tuple]KNOWN_PROVIDER_KEY_PREFIXESct|xsdjtsytj |}|r.Ps@!CNN1-@zIgnoring %s for provider %r: value does not match the expected key prefix (%s). Falling back to the next credential source. Fix or remove the malformed key to silence this warning.z or ) rrrrgetanyloggerwarningjoin) provider_idrsourceprefixesrs @r_usable_declared_secretrHsu ekr  "C S !*..{;H@x@@ @ KX!6  8  Jrc~ ddlm}|xsijd}t |t syt |jdxsdjj|k7ryt |jdxs|jdxsdjS#t$rYywxYw)uA``model.key_env`` when config.yaml's main model targets *provider_id*, else ``""``. The Desktop settings UI saves registry-provider keys as a credential pointer (``model.key_env`` → ``$HERMES_HOME/.env``) instead of the registry's canonical env var, so credential resolution must consult it (#106336). r load_configmodelrproviderkey_env api_key_env) rrrrrmrrrr)rr model_cfgs r_model_level_key_envrZs1 ](b--g6  i & 9== $ *+11399;{J y}}Y'M9==+GM2 N T T VV s B00 B<;B<c|dk(r& ddlm}m}|\}}|r||\}}||fS yddlm} t|} | rt|| | | } | r| | fS|jD]} t|| | | } | s| | fcSd|} dd l m }||}|r|jr|j}||gng} |j!D]+t#fd |Ds|j%- |D]3}t'|d d xs t'|d d }t||| } | s/| | fcSy#t$r }tj d|Yd}~yd}~wt $rYywxYw#t $rYzwxYw#t $rYywxYw)zDResolve an API-key provider's token and indicate where it came from.rrresolve_copilot_tokenget_copilot_api_tokenz#Copilot token validation failed: %sN)rrr{zcredential_pool: load_poolc3&K|]}|u ywrlr)rnrrs rrpz3_resolve_api_key_provider_secret..s0TAa0Ts access_tokenrruntime_api_key)hermes_cli.copilot_authrr ValueErrorrrrrr|rrragent.credential_poolrhas_credentialspeekentriesrappendgetattr)rpconfigrrtokenr api_token _base_urlexcr|rrenv_var pool_sourcerpoolentry candidateskeyrs @r _resolve_api_key_provider_secretrmsi  \13ME6' #;/G%k3Nw3WY`a < ++ %k3Nw3WY`a <   %[M2K 3% D((*IIKE$)$5%2J !\\^1E(S0T0T-T"))%01 $ ,e^R8aGEK\^`account_missingno_usable_creditssubscription_expiredmember_spend_cap_exceededcht|tr t|r t|S|jrddlm}|d|dS|jtvr=|jdk(r t|Stj|j}|r|S|jdk(r|dSt|S)z2Map auth failures to concise user-facing guidance.r)profile_cli_selectorz Run `hermes zmodel` to re-authenticate.rtemporarily_unavailablez Please retry in a few seconds.) rmrrrrhermes_constantsrr_ENTITLEMENT_ERROR_CODESrrA_GENERIC_ENTITLEMENT_MESSAGESr)rrgenerics rformat_auth_errorrs eY '+Ee+L5z 9 &:&<%==WXX zz-- >>V #6u= =/33EJJ? N zz..788 u:rcXt|txrt|jSrl)rmrrr)rs r _nonempty_strrs eS ! 9d5;;=&99rctdz }tjjdr3t |t j dz dz rtd|d|S)N auth.jsonPYTEST_CURRENT_TEST.hermesz8Refusing to touch real user auth store during test run: zq. Set HERMES_HOME to a tmp_path in your test fixture, or run via scripts/run_tests.sh for hermetic CI-parity env.)rsosenvironr _same_pathr home RuntimeErrorrs r_auth_file_pathrsf  { *D ,-4y!8;!FGFtfMC CD D Krcr ddlm}|}tt |rdS|dz S#t$rYywxYw)zGlobal-root auth.json in profile mode; None when profile and global root are the same dir. Read-only fallback path, so no pytest seat belt here (it lives on ``_auth_file_path()``).r)get_default_hermes_rootNr)rrrr rs)r global_roots r_global_auth_file_pathrsE<-/ o/=4\;Q\C\\ s * 66ct}||jsdaiS t|j dt |j f}t}|| |dd|k(r|dStjjdrltjjdrMttjddz dz } |j d|j dk(rdaiS t|}|g||a|S#t$rd}YwxYw#t$rY3wxYw#t$rdaicYSwxYw) uLoad the global-root auth store (read-only fallback, mtime-memoised); ``{}`` when absent or unreadable — a malformed global store must never break profile reads.NFstrictrHOMErr) rexists_global_auth_store_cacherresolverstatrr r rr _load_auth_store) global_path cache_keycached real_rootstores r_load_global_auth_storer#sl)*K+"4"4"6#'    ##5#1 2N;CSCSCU4VFX &F!3r i8Oay zz~~+,1GF+,y8;F  ""%"0I4E4EU4E4SS+/( T  -#6Y#6#6 L)      #'  s54D(D 9 D/ DD D,+D,/ D?>D?zDict[str, threading.local]_auth_target_lock_holderscv |jd|jdk(S#t$r||k(cYSwxYw)NFr)rrleftrights rr r  sA||5|)U]]%]-HHH u}s $'88c^t||ry |j|S#t$rYywxYw)a4True when two auth paths name ONE store rather than two copies. ``_same_path`` resolves symlinks and ``..``; ``samefile`` adds hardlinks and bind-mounts (same inode under two resolved names). Used by the forked-grant heal: a shared store has no "other side" to consolidate. See #101356. TF)r samefileOSErrorr&s r_is_same_auth_storer,'s7$}}U## s  ,,cn t|jdS#t$rt|cYSwxYw)zWCanonical string for *path* (resolved when possible) used as a cache / lock-holder key.Fr)rrrrs r _resolved_keyr.7s64<!Ei.8E8PVW]34VX B#%BI-66B B<@B B  O   4   &  #!,,_=  ( LLL 1I (I LLUWc"&  ( (  M s+4 ':\    !""!#sA%E*G0+G+=FG+#F<9G+;F<<)G+%G0+G0F fsync_dirc jddlm}||jt|t ||fd|d|y)z0600 credential JSON under a 0700 parent (``secure_parent_dir`` refuses ``/``, top-level dirs and the install tree). ``atomic_json_write`` creates the temp file 0600 before any byte lands.r)mkdir_under_hermes_homei)moder}N)rrrOrr)targetdatar} dump_kwargsrs r_save_private_jsonrs19FMM*ffdS)S{Src||n t}t|d<tjtj j |d<t||d|da|S)zAtomically persist *auth_store* (0o600, parent tightened to 0o700) to the active store, or to an explicit *target_path* (e.g. the global-root write-through for rotating xAI OAuth grants).Nri updated_atTr|) rrr nowr utc isoformatrr) auth_storer5rxs r_save_auth_storers] +6 O shared lock order. ``timeout_seconds`` applies to BOTH locks: a transaction that spans a network call must let waiters outlive that call.Nr4)rgrrr rr)rr_rr source_paths r_provider_state_transactionrs / *j%' =j+V{  *[/:K"Le[0 0  jj o; G j01A+1NP[\^ii i j jj  j j jjs@ B 8B B  BB7B? B B BBB T set_activec2|t|d|<|r||d<yy)Nrjrq)r)rrrrs r_store_provider_staters)>@,7J( ) Z ( )))s >AAct|xsdjj}t|duxs|tvSNr)rr_registry_lookuprr normalizeds ris_known_auth_providerrKs9#**,224J J 't 3 [zE[7[[rc|xsdjj}|tvrt|jSt j ||Sr)rrrqrrrrs rget_auth_provider_display_namerPsK#**,224J&& ,111 ! % %j+ >>rc|xsdjj}|sy|dvs|jdry t|y#t$rYywxYw)zWhether runtime resolution recognizes a provider identity (a capability check, not a credential check): ``resolve_provider`` normalization plus the special runtime identities outside the registry.rF>moaautocustomrcustom:T)rrrresolve_providerrrs ris_runtime_provider_routablerWsf#**,224J << @U@UV_@`$  s A AAcFtjd}t|tr|ni}t jd}t|tr|ni}|jt|}|j D]J\}}|j|}t|t r|s*t|t r|r=t |||<L|S|j|}t|t r |r t |S|j|}t|t r t |SgS)aReturn the persisted credential pool, or one provider slice. In profile mode the global-root ``auth.json`` is a read-only fallback applied per provider ONLY when the profile has zero entries for it (``hermes auth add`` in the profile shadows global).rn)rrrmrr#itemslist) rr global_poolmergedgp_key gp_entriesexistingprovider_entriesglobal_entriess rread_credential_poolrfs   ! !"3 4DdD)4rD)+//0ABK!+K!>+BKd"-"3"3"5 2 FJzz&)Hz40Zx.8!%j!1v  2  xx ,"D).>$%% __[1N#-nd#C4 KKr) last_statuslast_status_atlast_error_codelast_error_reasonlast_error_messagelast_error_reset_atstatus_cleared_atc0t|ts|S ddlm}m}m}m}m}ddlm }||jd|jd} | ri|d| in|} tD cic]} | |j| } } ||jdxsd} ||jdxsd}|jd||fvr || kDri| | S|jd}|||fvr| S|jd xsd }|jd xsd }|r |r||k7r|S||jdxsd}|| kr| S||k(r3||j||}||tjkr| Si| | Scc} w#t$r|cYSwxYw) acKeep a newer on-disk cooldown/quarantine over a stale in-memory one. ``write_credential_pool`` persists an in-memory snapshot that may predate another process marking the same credential exhausted/dead; without this merge the later rewrite resurrects a rate-limited key as healthy and both processes resume hammering it. The mirror image is a ``hermes auth reset`` that postdates the snapshot's cooldown (``status_cleared_at`` newer than its ``last_status_at``): the disk row wins there too, or a live session's next ordinary flush would write the reset cooldown straight back (#89415).r)PooledCredential STATUS_DEADSTATUS_EXHAUSTED_exhausted_until_parse_absolute_timestamp)merge_model_cooldownsmodel_cooldownsrgrrrr)rmrrrrrrr%agent.credential_pool_model_cooldownsrr_POOL_STATUS_FIELDS from_dictrVr)r disk_entryrrrrrrrmerged_cooldownsrfdisk_status_fieldsmem_ts cleared_ts disk_status mem_access disk_accessdisk_tsuntils r_merge_disk_cooldown_staters j$ ' "  P0@Q1RTYT]T]^oTpqCS?E?,.>?Y^Q/RSZWZ 99] # 5E'F F:X^K^3f3 23 3 nn]3 {,<= =MYY~.4"  nn^4: +* *CL+JNN;K,LMTQT f M * *$%5%?%? Z%XYE} 4 /&/.//-Q.  sCAF#F epoch 0) as a stale snapshot and copy a still-binding cooldown back.rrnrN) rgrrrmrrrrrsetrrr)rrrrridremovedrrr sanitized existing_listexisting_by_idnew_idscidstatus_clearedrrdisk_ids rwrite_credential_poolrs +0b9sSs9G9  ,%' j*;<EOqRVDW 0K @]^ ^ - )3M4)H b #M2j+,*<*BK#s#KK  ( !T" '155;.84n>P>PQRQVQVW[Q\>]_j )* *( ( ( ]J.8T.JjnnT*PTG7'1gW6L B:{[\ ]#[ +-,,:L( ,,sXFFF%F !AF/F7F;FAF,FF F,F FF$c|j|}t|tr|St|tr!|Dcgc] }t |c}||<||Sycc}w)zCanonical (list-form) suppressed sources for *provider_id*; a legacy mapping (keys = source names) is migrated to the list form in place.N)rrmrrr) suppressedr raw_sourcesrs r_suppressed_source_listrsY..-K+t$+t$9D"E3t9"E ;+&& #FsAct5t}t|d}t||}|gx}||<||vr|j |t |dddy#1swYyxYw)z@Mark a credential source as suppressed so it won't be re-seeded.suppressed_sourcesN)rgrrrrrrrrr provider_lists rsuppress_credential_sourcersq  %%' #J0DE / KH  68 8MJ{3  &   ($%%%s A A  A)cz |tjdij|gvS#t$rYywxYw)z=Check if a credential source has been suppressed by the user.rF)rrr)rrs ris_source_suppressedrsD)+//0DbIMMk[]^^^ s +. ::cnt5t}|jd}t|ts dddyt ||}|||vr dddy|j ||s|j|d|s|jddt| dddy#1swYyxYw)zLClear a suppression marker so the source will be re-seeded on the next load.rNFT) rgrrrmrrremovepoprrs runsuppress_credential_sourcers  %' ^^$89 *d+  0 KH  F-$? V$ NN; - NN/ 6$s-B+B+AB++B4c*tt|S)zSPersisted auth state for a provider (profile first, global-root fallback), or None.)rr)rs rget_provider_auth_staters  0 2K @@rc tdxsi}|jd}t|tsyt |j vS#t$rYywxYw)aReturn True if the currently-held Nous token carries ``billing:manage``. Reads the persisted ``scope`` string saved at login (``_save_provider_state`` stores ``token_data.get("scope") or scope``). A space-delimited match. Used by the lazy step-up: if False, the first billing call will 403 ``insufficient_scope`` anyway, but checking up front lets a surface skip a doomed round-trip. rFr)rrrrmrrsplit)rrs rnous_token_has_billing_scopersX'/52 IIg E eS ! $ 55 sA AAc4tjdS)z8Return the currently active provider ID from auth store.rq)rrrrrget_active_providerr.s   ! !"3 44rctjdxsdjj}t |xr||k(S)Nrqr)rrrrr)ractives r_active_provider_isr 3sA $$%67=2 D D F L L NF < 0Fj00rct|txr4|jdxsdjj |k(S)Nrr)rmrrrr)slotrs r _slot_selectsr8s: dD ! `txx ';'Ar&H&H&J&P&P&RV`&``rcddlm}|}t|jdry|jd}t |t r#t fd|jDryd fd |jd}t |t sy |jd }t |t r|jnd }|xst fd |DS)aconfig.yaml ``model.provider``, or a MoA advisor/aggregator slot naming the provider. MoA presets are explicit model selections too: ``provider: anthropic`` in a MoA slot opts into Anthropic credentials for that slot even when the main model is another provider; otherwise Claude Code OAuth entries get pruned by ``load_pool("anthropic")`` and MoA advisors fail with "no ANTHROPIC_API_KEY" while the picker says Anthropic is logged in.rrrT auxiliaryc36K|]}t|ywrlrrnsrs rrpz+_config_selects_provider..Js(`!q*)E(`rct|txrDtfd|jdxsgDxst |jdS)Nc36K|]}t|ywrlrrs rrpzG_config_selects_provider.._moa_block_matches..OsZ a,Zrreference_models aggregator)rmrrrr)blockrs r_moa_block_matchesz4_config_selects_provider.._moa_block_matchesMsP%&C Zeii@R6S6YWYZ Z BUYY|4jA CrrFpresetsrc3.K|] }|ywrlr)rnrrs rrpz+_config_selects_provider..Ws-U.@.C-Us)rr returnr)rrrrrmrrvalues)rrcfgaux_cfgmoa_cfgrrs` @r_config_selects_providerr"<s. -CSWWW%z2ggk"G'4 S(`w~~O_(`%`C ggenG gt $kk)$G",Wd";gnnG g & U#-UW-U*UUrc8tdt|DS)zPool rows from EXPLICIT Hermes flows (manual add / device-code / PKCE) or live env keys; ambient borrowed sources (gh_cli / claude_code / qwen-cli) are deliberately excluded.c32K|]}t|ywrl)_pool_entry_is_explicit)rnrs rrpz/_explicit_pool_entry_present..]s\%&u-\s)rr)rs r_explicit_pool_entry_presentr&Zs \;OPZ;[\ \\rr3>manual device_code hermes_pkce loopback_pkce)rfz google-vertexz vertex-aiz gcp-vertexvertexaic8ddlm}t||xsdS)uTrue when *name* resolves to a usable secret in the active profile scope. Must not read raw ``os.getenv``: under ``hermes serve`` / Desktop multiplex the process environ is the *launch* profile, so a DeepSeek key pasted into another profile's ``.env`` would be invisible to ``explicit_only`` Settings → Model until a Bot-chat Refresh ran against that profile's own backend. Same reader as the credential resolver (``get_env_value_prefer_dotenv``: the current HERMES_HOME ``.env`` first, then the scope-checked environ) so the gate and the key that actually authenticates never disagree — an empty ``DEEPSEEK_API_KEY=`` export in the parent shell must not hide a real key in ``.env`` (#77007). rr{r)rr|r)rr|s r _env_secretr-fs> 8>D" EErctj|}|ddlm}||}|sy|jdk(rt d|j DS|jdk(r%tdxstdxr td Sy) uKTrue when the user has pasted an explicit credential env var for *normalized*. Falls back to the models.dev ``ProviderDef`` (same shape) for non-registry providers such as openrouter. AWS SDK providers are checked via explicit env vars only — NOT boto3's chain, so ambient EC2 IMDS / SSO profiles never auto-surface.r) get_providerFapi_keyc3DK|]}|tvs t|ywrl)_IMPLICIT_ENV_VARSr-r~s rrpz4_explicit_env_credentials_present..scaqPbGb;q>cs  reAWS_BEARER_TOKEN_BEDROCKAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEY)rqrhermes_cli.providersr/rrrr-)rrr/s r!_explicit_env_credentials_presentr7vs  ##J/G5z*I%c7+C+CcccI%56W + , U=T1U W rct|tsyt|jdxsdj j }|j drK|jddjdddj }t|xr t|St|xr|tvxs|j dS)zZTrue for pool rows the user created via an explicit Hermes flow (or a still-live env key).Frrzenv::r8zmanual:) rmrrrrrrrrr-_EXPLICIT_POOL_SOURCES)rrrs rr%r%s eT " 8$* + 1 1 3 9 9 ;F  ))Hb)//Q7:@@BG4 G 455 < ^V'==]ARARS\A]^rc|tvrddlm}t|S|dk(rcddlm}|j d}t|txr5tt|j dxsdjSy)axVertex / Bedrock count as explicit when Hermes-scoped routing config is present. Uses has_explicit_vertex_config(), NOT has_vertex_credentials(): the latter also counts an ambient GOOGLE_APPLICATION_CREDENTIALS path (commonly set for unrelated GCP work). Only Hermes-scoped signals (VERTEX_PROJECT_ID / vertex.project_id / VERTEX_CREDENTIALS_PATH) count here.r)has_explicit_vertex_configrcrr,rF) _VERTEX_PROVIDER_IDSagent.vertex_adapterr<rrrrrmrrr)rr<r bedrock_cfgs r%_keyless_provider_has_explicit_configr@ss))C.011Y1!m'' 2 +t,cc+//(:S:YWY6Z6`6`6b1cc rz.Tuple[Tuple[Callable[[str], bool], bool], ...]_EXPLICIT_CONFIG_CHECKSc|xsdjj}tD]\}} ||ryy#t$r/}|stj d|j ||Yd}~Gd}~wwxYw)arTrue only if the user explicitly configured this provider: auth.json ``active_provider``, config.yaml ``model.provider`` / MoA slots, a pasted provider env var, a pool entry from a Hermes-initiated flow, or Hermes-scoped routing config for keyless cloud-SDK providers. Ambient borrowed credentials (gh CLI, qwen-cli, ~/.claude/.credentials.json) never count.rTz*explicit-config check %s failed for %s: %sNF)rrrArrrwr)rrcheck best_effortrs r!is_provider_explicitly_configuredrEs #**,224J5i{ iZ !i   i LLEu~~Wbdg h h is= A5%A00A5c*t5t}|xs|jd}|s dddyd}dD]}t||}||vs||=d}|jd|k(rd|d<d}|r t ||cdddS#1swYyxYw)zClear auth state for a provider (the active one when *provider_id* is None). Used by ``hermes logout``. Returns True if something was cleared.rqNF)rjrnT)rgrrrr)rrrclearedrrs rclear_provider_authrHs  %' A /@ A  7 G$Z9G FO   >>+ , 6,0J( )G  Z (!s#B B 0B  Bcvt5t}d|d<t|dddy#1swYyxYw)zClear active_provider without deleting credentials: used when the user switches to a non-OAuth provider (OpenRouter, custom) so auto-resolution doesn't keep picking the OAuth provider.Nrq)rgrr)rs rdeactivate_providerrJs:  %%' (, $%$%%%s/8ct|xsdjjdvry ddlm}|}|sydg}|D]}|j d|j dk(rd nd d |j|jsB|jjds`|j d |jjdd j|S#t$rYywxYw)z opencode-freefree opencode_freea'OpenCode discontinued anonymous free-tier access outside its own client (relay 403s FreeTierError), so the keyless 'opencode-free' provider was removed. Switch to 'opencode-zen' (pay-as-you-go, OPENCODE_ZEN_API_KEY) or 'opencode-go' ($10/mo subscription, OPENCODE_GO_API_KEY) via 'hermes model'.r)validate_config_structureuCConfig issue detected — run 'hermes doctor' for full diagnostics:z [rERRORWARNINGz] u →  ) rrrrrOrseveritymessagehint splitlinesrr) provider_namerOissueslinescis r%_get_config_hint_for_unknown_providerr[s = B%%'--/3]]Q ?*,VW CB LL3"++*@wiPPRSUS]S]R^_ `ww277--/2 x(:(:(/.r)list_providers)rrrjraliasesr1rr)r_lp_pp_aliass r_plugin_aliasesr;sm$%G 35 5C++ 5""63884 5 5 N   N s?A A A cd ddlm}|S#t$rtj dddcYSwxYw)a,Scope-aware key reader for provider auto-detection. Under multiplex a secondary profile's keys live only in its secret scope, not os.environ. Catch ONLY ImportError: any other auxiliary_client failure must propagate rather than silently falling back to os.getenv (a traceless fail-open).r_scoped_key_envuagent.auxiliary_client unavailable (%s); provider auto-detection will read keys from the process environment only — under multiplex, secondary profiles may report 'No LLM provider'.z import failedc4tj|xsdSr)r getenv)rs rz(_scoped_key_env_reader..ZsBIIdO1rr)agent.auxiliary_clientr ImportErrorrrrs r_scoped_key_env_readerrHs@ 2 ; 2 J    21 2s  "//ctfddDry ddlm}t|dj S#t $r }t jd|Yd}~y d}~wwxYw) zTrue when an OpenRouter credential exists via env key or the credential pool (a key added via `hermes auth add openrouter` has no env var; without the pool check it is invisible to auto-detection and requests go out with no Authorization header).c3@K|]}t|ywrl)r)rnrscoped_key_envs rrpz,_openrouter_auto_detected..as bA ^A. / br)rOPENROUTER_API_KEYTrrrz.Could not check OpenRouter credential pool: %sNF)rrrrrrrrw)r _load_poolrs` r_openrouter_auto_detectedr]s] b9a bb  BJ|,<<>??  EqIs$= A&A!!A&skip_free_tierc tjd}|dk(rddlm}m}|r |s|sy|r$|t vrt |jdr|Sy#t$r }tjd|Yd}~yd}~wwxYw)zTauth.json ``active_provider`` when it is a registry provider that reports logged in.rqrr guest_enabled has_guestN logged_inz+Could not pre-read active auth provider: %s) rrhermes_cli.anon_authrrrqget_auth_statusrrrw)r_mayberrrs r _logged_in_oauth_active_providerrps G!#''(9: V  E{mo f 11of6M6Q6QR]6^M  G BAFF Gs6A %A B )BB c ddlm}|xsijd}t|tr|jdnd}t|t r|j jnd}tj||}|dk(s|jdr|dfS|d k(s|tvr||fS|rdd l m }||r|dfSt|tr,t |jd xsdj nd}|rdd l m}|||r|dfS|dfS#t$r }t j#d |Yd}~yd}~wwxYw)a``(model_cfg, provider)`` from config.yaml when ``model.provider`` names a registry provider or a custom OpenAI-compatible endpoint (``custom``, ``custom:``, ``vllm``/``ollama``/...). A ``model.provider: openrouter`` pin and a bare ``providers:`` entry name are explicit intent too. The normal chat/gateway path resolves config.provider upstream in resolve_requested_provider(); this is the safety net for the direct ``resolve_provider("auto")`` callers. A configured custom endpoint is explicit intent like any registry pin: without this rung the boot inventory (``free_tier_bootstrap``) read a llama.cpp/vLLM install as "nothing configured" and the dashboard's Ink chat parked every session on Setup Required while ``hermes chat`` worked (#108383).rrrrNrrrr)has_named_custom_providerr),_config_base_url_trustworthy_for_bare_customzACould not read config.yaml model.provider for auto-resolution: %sr)rrrrmrrrrrrrq"hermes_cli.runtime_provider_customrhermes_cli.runtime_providerrrrrw)rrrrrrrs r_config_model_providerrsB1 ](b--g6 0:9d0K9==,QU/9(C/H8>>#))+b"$((8< x 8#6#6y#Ah& & | #x3D'Dh& &  T(2 (**DNiY]C^3y}}Z06B7==?df  `;HhO (**$  XZ[\s1B&D%)D%:D%AD%!D%% E.E  Ec tjD]e\}}|jdk7s|tvr|jD]9}t ||s|r||k7rt jd|||||ccSgy)zFirst registry api_key provider (registry order) with a usable env key, warning when it preempts a logged-in OAuth provider so a stale key in ~/.hermes/.env never switches silently.r0zProvider resolved to %r via %s, preempting your logged-in OAuth provider %r. If you meant to use the OAuth login, unset %s or set `model.provider` explicitly.N)rqrr_NO_AUTO_DETECT_PROVIDERSrrrr)r oauth_activepidrrs r_env_key_auto_detectedrs*//1 W    )S4M-M // G !89LC$7NN&WlG=   r)explicit_api_keyexplicit_base_urlrc|xsdjj}tj||}|dvs t ||S|dk7r(t |}|rd|nd}t d|d|zd |s|ry t\}}|r|St} t| r ty t| } t| | } | r| S| r;t|tr)|r'|jd stj!d | | S|s ddlm} m} | r| ry ddlm}|ry ddlm}t d|dd #t($r }tj+d|Yd}~Pd}~wwxYw#t0$rYSwxYw)aMDetermine which inference provider to use. "auto" priority (explicit intent beats a stale OAuth login): 1. CLI api_key/base_url -> "openrouter"; 2. config.yaml ``model.provider``; 3. OPENAI_API_KEY / OPENROUTER_API_KEY -> "openrouter"; 4. OpenRouter pool; 5. provider env keys; 6. auth.json ``active_provider``; 7. Nous free tier when it is on and its identity exists (never created here); 8. AWS Bedrock chain; 9. AuthError(no_provider_configured). ``skip_free_tier`` hides rungs 6-for-a-free-tier-identity and 7: the boot bootstrap asks "what would carry inference if the free tier did not exist?" to decide whether a fresh identity may become ``active_provider``. 1. 3. 4. 5. Provider-specific API keys (GLM, Kimi, MiniMax, ...) -> that provider 7. 8. Error (no provider configured) See #29285. r)rrNz z` Check 'hermes model' for available providers, or run 'hermes doctor' to diagnose config issues.zUnknown provider 'z'.invalid_providerr_rrrzProvider resolved to logged-in OAuth provider %r because config.yaml `model` has no `provider` key. If you meant a different provider, set `model.provider` explicitly.rrrz6free tier check during provider resolution skipped: %shas_aws_credentialsrc)display_hermes_homezHermes is not connected to any AI provider yet. Run `hermes model` to pick one (the free Nous tier needs no API key), type `/login` in chat, or add a key with `hermes auth add `. (Advanced: put an API key such as OPENROUTER_API_KEY in z/.env.)no_provider_configured)rrrrrr[rrrrrarrrmrrrrrrrrwagent.bedrock_adapterrrrr) requestedrrrrrUr _model_cfg cfg_providerr _oauth_activeenv_pidrrrrrs rrrs*%v,,.446J "&&z:>J--1A*1M1YV4Z@!%$tf ,D,ZL;dBI[\\,57J ,.O 1.05NSM$_mDG  j$ 'Jz~~j?Y NNG     X E9;  =   !5  a  ! *&  '' X LLQSV W W X    s* E% E< E9E44E9< FFctjtjj j ddS)zQCurrent UTC time as an ISO-8601 string with a ``Z`` suffix (last_refresh format).+00:00Z)r rr rrrrrr _utc_now_zr's+ << % / / 1 9 9(C HHrc@t|tr|jnd}|sy|jdr|dddz} t j |}|j |jtj}|jS#t $rYywxYw)Nrrr)tzinfo) rmrrrr fromisoformatrrrr r timestamp)rtextrs r_parse_iso_timestampr,s&uc25;;=D  }}SCRy8#''-}}x||4     sB BBcXt|}|duxs|tj|zkSrl)rrV)expires_at_iso skew_seconds expires_epochs r _is_expiringr;s,(8M D QMdiikL6P$QQrc8|dut|tr|dSddS)zAPersistable ``tls`` block derived from an httpx ``verify`` value.FN)insecure ca_bundle)rmr)verifys r_tls_state_from_verifyr@s$% 6SV@Wf bb]a bbr) default_codec|t||d| |jn|jxs|tjtj j dS)zQThe ``last_auth_error`` record persisted when dead OAuth material is quarantined.T)rrTreasonrrat)rrr rr rr)rrrrs r_last_auth_error_markerrEsL Uv[_*2 9S|ll8<<(224 66r)r refresh_token expires_at expires_in obtained_atcbtD]}|j|dt||dd|d<y)zStrip dead tokens from a flat OAuth state after a terminal runtime refresh failure so subsequent calls fail fast without a network retry (mirrors the Nous / xAI / Codex pattern).Nruntime_refresh_failurerefresh_failed)rrlast_auth_error)_FLAT_OAUTH_TOKEN_KEYSrr)rrr_ks r_quarantine_flat_oauth_staterRs=% "d6#7FV XE rcL tdt|S#t$rYywxYw)Nr)rXintr)rs r_coerce_ttl_secondsr[s*1c*o&& s  ##cpt|tr|jjdnd}|xsdS)Nrr)rmrrr)rrs r_optional_base_urlrbs-+5eS+Aekkm""3'rG ?dr>portal.nousresearch.comrrFrozenSet[str]_NOUS_PORTAL_ALLOWED_HOSTSz'dict[str, tuple[float, str]]'_RESOLVE_TOKEN_CACHE@ct}|r|jdSt|jdxst}|jd}t |j }|r%|tvrtjd||tS|S)aHERMES_PORTAL_BASE_URL / NOUS_PORTAL_BASE_URL is the trusted operator override and wins OUTRIGHT, bypassing the host allowlist (which exists to reject an untrusted network-provided value, not one the operator configured). Otherwise the stored/default value, allowlist-gated.rrzSauth: ignoring invalid portal_base_url %r (host %r not in allowlist), using default) rJrrrrrrrrr)renv_portal_overriderrs r_nous_portal_base_urlrws45"))#..(3D)EFaJaO%,,S1O O $ - -D 66 a T #'& r.@)r_rrrefresh_skew_secondsc | xr|dutrLt5tj}ddd&t j |dz t kr|dSdfd }td5\stddd t}tjd xst}t|| }fd } t|d zt} t| 5ddlm} m} | rʉjd} t'| tr7| r5t)jd|s|| cdddcdddSt+j,t+j.|xsdddi|5}| |ddd| t1|dcdddcdddSt3}jd} jd}t'| tr| stddd t)jd|s#|r| || cdddcdddSt'|tr|stddd t+j,t+j.|xsdddi|5}t5||||d| }dddt7||d<|d <t9|d<| t1|dcdddcdddS#1swYxYw#1swYxYw#1swYwxYw#1swYnxYw dddy#1swYyxYw) zKResolve a refresh-aware Nous Portal access token for managed tool gateways.Nrr8cr.t5tj|ft<ddd|S|S#1swY|SxYwrl)_RESOLVE_TOKEN_CACHE_LOCKrVrWr)rrmemoables r_memoz(resolve_nous_access_token.._memosA * L37>>3CU2K$Y/ L u  L s4>rz&Hermes is not logged into Nous Portal.nous_auth_missingT)reloginr)rr auth_statec tdS)Nr)r)rrstate_source_pathsrrz+resolve_nous_access_token..s8 '8:rr)r_)is_guest_staterefresh_guest_staterrrAcceptzapplication/json)timeoutheadersrrz,No access token found for Nous Portal login.nous_auth_missing_access_tokenz2Session expired and no refresh token is available.nous_auth_missing_refresh_token$managed_access_token_refresh_failure)clientrrrrrrpersistrtls)rrrr)rrrrrVrW_RESOLVE_TOKEN_CACHE_TTL_Srrrrrr1rXrrKrrrrmrrClientTimeoutrXrDrRr>r)r_rrrr rrrrr  lock_timeoutrrrr  merged_sharedr refreshedrrrrrs @@@@@rresolve_nous_access_tokenrsi|1 T 1H!I & 9)--i8F 9  4>>#3fQi#?C]"]!9  %V ,;00VUDUDFYcgh h/6 +.H2HI  (iTYZ:?S02KL $\ B1 0 Pe$ %yy8 lC0\, ,/1EKG .1 01 0;0;0&\\%--8O4*P+35G*HQWY7\b'v67 (/U>231 01 0;0;04;5AM 99^4L!IIo6MlC0 BDdnrtt  , 79MN I\*;1 01 0;0;0RmS1HJk ""emmO4Kt&L'/1C&DVU TX^7!jWf'}A7T  T ) = I'6E# $!*E+ 1&9E%L I $U +~./c1 01 0;0;0 9 9<776 T TI1 01 01 0;0;0;0sL9A6M/AL< M1L< L#$L<7 M A8L< MAL<&L0:A L< ML #L- (L<0L9 5L<<M MMz invalid_grant invalid_tokenrefresh_token_reused>rrrr^r)r%r&rget_codex_auth_statuscodex_refresh_failed codex_auth_missing_refresh_tokenrzget_xai_oauth_auth_statusxai_refresh_failedxai_auth_missing_refresh_tokenrrrlget_minimax_oauth_auth_status)rrrrr)zDict[str, OAuthProviderFlow]OAUTH_PROVIDER_FLOWSc2t|j|S)zDTrue when retrying the same *provider* refresh token cannot succeed.)r:r-)rrs r_is_terminal_refresh_errorr<>s  ) C CC HHr)rc t}|sydtt|jddd|jdxsddt|jdxsd|jd d S) NT last_refreshrzpool:labelunknownrTzCCodex provider quota exhausted; retry after the usage limit resets.reset_at) rrr> auth_moder rate_limited error_coderrA)r~rrrr) rate_limits r_codex_pool_rate_limited_statusrFIsu.0J _->)?"~6Y*..1>Y?@RV-..+[ZNN:. 00rc4tdtddtS)zStatus snapshot for Codex auth (pool first, then legacy provider state). Read-only by contract: status/doctor must never adopt, refresh or persist a credential (#68004).rrctdS)NT) read_only)rrrrrz'get_codex_auth_status..]s 9DIr) is_expiringrBr on_pool_miss)rMr{rFrrrr3r3Ws $$CyI4 66rc*tdtddS)NrrctdS)NF)refresh_if_expiring)rzrrrrz+get_xai_oauth_auth_status..fs =RWXr)rJrBr)rMrrrrrr6r6as $!>J]X ZZrc|jdk(rddlm}tj d}t |t rW|t|j dxsddk(r0t|j dxsdj}|r|S|jr.tj|jdjSdS)Nr"r)normalize_providerrrrr) rr6rPrurrmrrrrr r)rrPrconfigured_urls r_provider_env_base_urlrRiszzX;!%%g. eT "'9#eii >S>YWY:Z'[_g'g :!6!<"=CCEN%%>E>V>V299W--r 2 8 8 :^\^^rcft|}|r|jdk7rddiSt||\}}t|}|dvrt ||j |}n|xs |j }d}|dk(rt |}| xr t|}t|xs|}|||j|xs|rdnd||dS) zrrr" local-offliner)rTrr key_sourcerr) rrrrRr rrrrr)rrr0rVenv_urlractual_local_noauthrTs rget_api_key_provider_statusrYus{+G g''94e$$:;PGZ$W-G77)'73M3MwW8g88h,X6")kP.Fx.Pg5"5J k7<< T8K_QS: 77rc6|dk(r tS|rdd|fSdS)a[Best-effort POSITIVE evidence ``(verified, source)`` that an external-process CLI is authed. False means "not verifiable from here", NOT "signed out". Subprocess-free (spawning the CLI from status endpoints/pickers re-creates the cold-start stall copilot_auth.py avoids). Generic evidence for any external-process profile is its binary resolving: the subprocess owns real auth and Hermes has nothing else to inspect, so out-of-tree ACP rows pass credential-gated surfaces (Desktop ``explicit_only`` picker) like the bundled one, whose CLI additionally exposes readable token stores.rTz command: FN)_copilot_acp_auth_evidence)rresolved_commands r_external_process_auth_evidencer^s0m#)++5EDI./0 1X=XrcF ddlm}m}|D]=}tj|dj }|s*||ds6dd|fcS tjjd}tjj|rt|d d d 5}d jd|jjD}dddj rt!j"|nij%d}t'|t(r!t+d|j-DrydD]i} tjj| } tjj| r(tjj/| dkDrd| fcSky#t $r!}tjd|Yd}~d}~wwxYw#1swY xYw#t $r }tjd|Yd}~d}~wwxYw#t0$rYwxYw)zaCopilot CLI token stores readable without spawning it (env tokens, plaintext config, hosts.json).r)COPILOT_ENV_VARSvalidate_copilot_tokenrTzenv: z/copilot-acp env token evidence check failed: %sN~/.copilot/config.jsonrorLignore)rNerrorsrRc3`K|]&}|jjdr#|(yw)z//N)lstripr)rnlines rrpz-_copilot_acp_auth_evidence..s+ c!4;;=C[C[\`CaD cs$.. copilotTokensc3`K|]&}t|txr|j(ywrl)rmrrr~s rrpz-_copilot_acp_auth_evidence..s,0K56 1c"0qwwy00Ks,.)Trbz0copilot-acp CLI config evidence check failed: %s)z#~/.config/github-copilot/hosts.jsonz"~/.config/github-copilot/apps.jsonrr[)rr`rar rrrrrwr expanduserisfilerUrreadrVrrrsrrmrrrgetsizer+) r`rarrr cli_configfhrytokens cred_pathexpandeds rr\r\sMT' /G))GR(..0C-c215uWI... / NWW''(@A 77>>* %j#I cRii c%'WWY%9%9%; cc c*-djjo"AA/RF&$'C0K:@--/0K-K5c  ww)))4Hww~~h'BGGOOH,E,IY&  1 M FLLM c c N GMMN   sm3F. F.F. F.A G(5GA.G(A#H. G7GGG% G(( H1H  H H H cNt|xs |j} ddlm}||j}t t|ddxsd}tt|ddxsd}tdd |DDdxstt|d dxsd}|r$tj|djnd}|rtj|ntt|d dxsg}||||rt!j"||fSd|fS#t $rd}YwxYw) a``(command, args, base_url, resolved_command, command_env_vars)`` for an ACP provider. Launch details come from the provider's own profile (copilot-acp: HERMES_COPILOT_ACP_COMMAND / COPILOT_CLI_PATH / HERMES_COPILOT_ACP_ARGS), so out-of-tree providers describe their binary.r)get_provider_profileNprocess_command_env_varsrprocess_args_env_varrc3&K|] }|s| ywrlrr~s rrpz)_external_process_spec..s^1\]Q^rc3dK|](}tj|dj*ywr)r rr)rnrs rrpz)_external_process_spec..s$ X3!3!9!9!; Xs.0process_command process_args)rRrrjrtrrrrrrr rrshlexrrruwhich) rr_get_provider_profileprofilecommand_env_vars args_env_varcommandraw_argsargss r_external_process_specrs! &g.L'2L2LHK' 3WW.H"MSQSTww(>CIrJL^ XGW X^`bcEgg'8"=CD 6Bryyr*002H$,5;;x $wwXZ7[7a_a2bD D(WFLL$9P` ``$P` `` sD D$#D$c t|}|r|jdk7rddiSt|\}}}}}t|xs|j d}t ||\}} |||j ||||||| d S)zStatus snapshot for providers that run a local subprocess. ``configured``/``logged_in`` are structural (executable resolves or TCP endpoint set): the subprocess owns real auth. ``auth_verified``/``auth_source`` carry positive evidence only.rrTF acp+tcp://) rTrrrrr]rr auth_verified auth_source)rrrrrr^r) rrrrrr]r availablerrs r$get_external_process_provider_statusrs {+G g''+==e$$3I'3R0GT8-q%J)<)<\)JKI!@N^!_M;[',,[b*:{ \\rcN ddlm}||dS#t$r d|ddcYSwxYw)uAAWS SDK providers (Bedrock) — check via boto3 credential chain.rrrrFzboto3 not installed)rrr)rrr)rrs r_get_aws_sdk_auth_statusrs8X=02GG X"AVWWXs $$cJ|xstxsdjj}|sddiStj |}|rt |St |}|r6|jtvr$t t|j|SddiS)afGeneric auth status dispatcher: bespoke builders (``OAUTH_PROVIDER_FLOWS`` plus Spotify / Azure Foundry) first, then the registry ``auth_type`` so a whole provider class (e.g. every external-process ACP backend) gets a real status. Builders are looked up by NAME at call time so tests that patch ``hermes_cli.auth.get_*_auth_status`` still apply.rrF) rrr_BESPOKE_STATUS_FUNCTIONSrr(rr_STATUS_BY_AUTH_TYPE)rrstatus_fn_namers rrrs 8028b ? ? A G G IF U##.226:N(wy(**v&G7$$(<<Awy-g.?.?@A&II  rr_get_azure_foundry_auth_status)spotifyrgrrrYrrw)rr0rerrrc hddi} ddlm}m}|}t |t r|j dnd}t |t si}t|j dxsdjjxsd}||d<t|j d xsd j|d <|d k(r{ dd l m }m }m }|} t |j d t r|d ni} |j| |} |j| | j ddt#| | rdnd|S dxsd } t)| |d<|S#t$ri}YRwxYw#t$r} d|d<d| |d<Yd} ~ |Sd} ~ wwxYw#t$rt%j&dd } YgwxYw)u Structural auth status for Azure Foundry. ``entra_id``: ``azure-identity`` importable — never invokes the Entra credential chain (keeps CLI startup flat; ``hermes doctor`` runs the live probe). ``api_key`` (default): usable ``AZURE_FOUNDRY_API_KEY``.rrgr)rr|rNrBr0rrentra_id)EntraIdentityConfigSCOPE_AI_AZURE_DEFAULThas_azure_identity_installedentra) default_scopenot_runFzyazure-identity is installed; live credential validation is skipped here. Run `hermes doctor` to verify token acquisition.zwazure-identity not installed. Install with: pip install azure-identity (or rely on Hermes' lazy-install at first use).)azure_identity_installedrcredential_probecredential_verifiedrrUrzazure-identity check failed: rrh)rrr|rrmrrrrragent.azure_identity_adapterrrrrupdaterrr rr)inforr|rrrBrrr installed entra_cfgidentity_configrr0s rrr s '8DNm%/sD$9 tI i & IMM+.;)<BBDJJLYPYI!D9==4:;AACDJ B [ [46I.8w9OQU.V '*\^I1;;IUk;lO KK)2/:O:Obk$)T)_X2  4 9-.EFL"*'2D KI 4 B %D ;C5ADM  B 9))3R89s<EA8E+= F E('E(+ F 4 FF F10F1c,|r|jdS|S)Nr)r)r0defaultrWs r_default_api_key_base_urlr<s")7>># 6w6rct|||} ddlm}m}|\}}|r!||dxsdj }|r|}|S#t $r!} t jd| Yd} ~ |Sd} ~ wwxYw)zCopilot's API base comes from the token-exchange response (endpoints.api, proxy-ep fallback), authoritative for Enterprise / proxied accounts; falls back to the registry default.rrr8rz4Copilot base URL resolution fell back to default: %sN)rrrrrrrrw) r0rrWrrr raw_tokenrresolvedrs r_copilot_runtime_base_urlr@s)'7CHRX,. 1 -i8;ArHHJH# O R KSQQ ORs5A A0A++A0c$tt|Srl)rras rrrWs?@Y[\@]^rc$tt|Srl)rrrs rrrXs23La3PQr)rrrrrr"z)Dict[str, Callable[[str, str, str], str]]_API_KEY_BASE_URL_RESOLVERSct|}|r|jdk7rtd|d|dt||\}}|s|dk(r t}|xsd}t |}t j|t}|||j|}t|s |j}|s|dk(rt|r t}|xsd }|||jd |xsdd S) z5Resolve API key and base URL for an API-key provider.r0 Provider 'z' is not an API-key provider.rrrrrr"rUr)rr0rr)rrrrrrRrrrrrrrr)rrr0rVrW resolve_urlrs r$resolve_api_key_provider_credentialsr[s{+G g''94 %B C '9; ;;;PGZ {j0-,9 $W-G-11+?XYK7G$>$>HH  "-- {h.3KH3U12? GQTAU)  ++rc bt|}|r|jdk7rtd|d|dt|\}}}}}|sE|j ds4|rddj |znd }td |d |xsd d |d|d||j xs||jd|xs||ddS)z>Resolve runtime details for local subprocess-backed providers.rrz&' is not an external-process provider.rrrz or set rrzCould not find the 'z' CLI command 'z(none configured)z '. Install itrmissing_external_process_cliprocess)rr0rrrr)rrrrrrrr)rrrrrr]r_hints r-resolve_external_process_provider_credentialsrzs{+G g''+== %K L '9; ;CYY`Ba?GT8-/? H$7$7 $E;K SXX&677QS";-0../}UG1 F / 1 1 GJJ,E+OOC(5E5PZ^ r) clear_defaultct5t}||d<t|dddt}|jj ddt |t}|jd}t|tr t|}nt|rd|jini}||d<|r%|jr|jd|d <n|jd dd d lm} | ||r|jdd } | rd| vr||d<n|r|jdd||d<t#|||S#1swY%xYw) a Update config.yaml and auth.json to reflect the active provider. *default_model*, when given, is written as ``model.default`` in the same step so the gateway (which re-reads config per message) can't pick up the new provider before model selection finishes and send an OpenRouter-style ``vendor/model`` name to a direct API. *clear_default* removes ``model.default`` in that same write, for a caller that has no model to offer and must not leave the previous provider's model paired with the new host.rqNTrIrrrrrr) clear_model_endpoint_credentialsr)rgrrrtrOrPrvrurrmrrrrrrrrr) rr default_modelrr config_pathconfig current_modelrr cur_defaults r_update_config_for_providerrsJ  %%' (3 $%$% "#KTD9(5  FJJw'M-&' :G :VY 3 3 56\^ 'Ij0668 2 9 9# > * j$'C$Y/mmIr2 c[0#0Ii  i&F7O V, G%%s E  Ec t}|r|jdnd}t|tr|jdnd}t|t r"|j jxsdSdS#t$rYywxYw)z?Return model.provider from config.yaml, normalized, if present.Nrr)rurrrmrrrr)rrrs r_get_config_providerrsz "$*FJJw tE(25$(?uyy$TH1;Hc1JHNN  " " $ ,TPTT s A88 BBct|xsdjj}|tvxr t|k(S)zWTrue when logout should reset model.provider (a registry provider config.yaml selects).r)rrrqrrs r'_should_reset_config_provider_on_logoutrs8#**,224J * * S/C/E/SSrclt}tj|xsd}|r|jr|SdS)uFallback logout target when auth.json has no active provider but config.yaml still selects an OAuth provider (e.g. openai-codex) — otherwise logout said "No provider is currently logged in" and never reset model.provider.rN)rr:rr&)rflows r$_logout_default_provider_from_configrs5$%H  # #HN 3D 7 78ATArct}|js|St|t}|s|S|j d}t |t rd|d<d|vr t|d<t|||S)z5Reset config.yaml provider back to auto after logout.rrrr) rtrrvrurrmrrrr)rrrs r_reset_config_providerrsy!#K    (5  F  JJw E%"j   3E*  V, rc.tdtd)z9Deprecated: use 'hermes model' or 'hermes setup' instead.zThe 'hermes login' command has been removed. Use 'hermes auth' to manage credentials, 'hermes model' to select a provider, or 'hermes setup' for full setup.r)print SystemExit)rs r login_commandrs  ST Q-rcHtd}|r|jdsdddS tj|jddj t j kD}|d|jdd |jdd S#t $rd}Y3wxYw) z3Return auth status dict for MiniMax OAuth provider.r)rFrrrTr,r+)rrr,r)rrr rrrVr)r token_valids rr9r9s #O 4E  .1"@@,,UYY|R-HISSUX\XaXaXcc !o))Hh/uyy?V XX  sAB B! B!cDt|dd}|r$t|std|td|xst xs t }|s tdy|dk(r%ddlm}m}|tdr t|yt|}t|}t|s|std |d y|dk(rdd l m}|d |r ttd |d |s tdyt!j"dr tdytdy)z Clear auth state for a provider.rNzUnknown provider: r8z#No provider is currently logged in.rr)FREE_TIER_NOT_SIGNED_INrzNo auth state found for r)_clear_shared_nous_statelogoutzLogged out of z+Model provider configuration was unchanged.rz)Hermes will use OpenRouter for inference.z9Run `hermes model` or configure an API key to use Hermes.)rrrrrrrrrrrrrHhermes_cli.auth_nousrrr r)rrrrrshould_reset_configrWrs rlogout_commandr s $ D1K1+> ";-01m  [/1 [5Y5[F  34 P 1&9 : ) * A&I26:M  '+> (q9: A *  N=/ +,  ;< ' ( 9: IJr)BaseHTTPRequestHandler) HTTPServer) TYPE_CHECKING)parse_qs) urlencodeCODEX_OAUTH_USER_AGENT)hermes_cli.auth_constantsr&CODEX_QUOTA_PROBE_MIN_INTERVAL_SECONDS)zhermes_cli.auth_codexrDEFAULT_SPOTIFY_REDIRECT_URI)rr%DEVICE_AUTH_POLL_INTERVAL_CAP_SECONDS)rrMINIMAX_OAUTH_GRANT_TYPE)rrNOUS_INFERENCE_INVOKE_SCOPE)rrNOUS_SHARED_STORE_FILENAME)hermes_cli.auth_nousrOAUTH_OVER_SSH_DOCS_URL)rrQWEN_OAUTH_CLIENT_ID)rrQWEN_OAUTH_TOKEN_URL)rr SINGLE_USE_OAUTH_SINGLETON_FILES)zhermes_cli.auth_oauth_grantsr)SPOTIFY_ACCESS_TOKEN_REFRESH_SKEW_SECONDS)rrSPOTIFY_DASHBOARD_URL)rrXAI_OAUTH_DEVICE_CODE_URL)rrXAI_OAUTH_DISCOVERY_URL)rrXAI_OAUTH_ISSUER)rrrefresh_nous_oauth_pure)rrctj|}|tdtd|ddl}ddlm}|t|g|t|j|d|dS)Nzmodule z has no attribute r) warn_oncer8) _PLUGIN_COMPAT_LAZYrAttributeErrorr importlibhermes_cli.plugin_compatrr import_module)rrrrs r __getattr__rN se $ $T *F ~wxl2DTHMNN2 h&v& 9**6!95vay AAr)rrrr)rrrr)rr0)rrrrrrrrrrrrrr)rr)rrrr)rr rrrr)rrrr rrr Optional[str])rrrr)rrrrrtuple[str, str])rrrr)rrrr)rrrr)rr rr)rr )rOptional[Path]r.)r'r r(r rr)rr rr)r5r rthreading.local)rDr rErrNone)r]r r^rr_floatr`r)r_rr5rrl)rxrrr) rr rr r}rrr rr)rrr5rrr )rrrrrr)r"rrrrOptional[Dict[str, Any]])rrrrrz/tuple[Optional[Dict[str, Any]], Optional[Path]])rrrrrr)rrr_r) rrrrrrrrrr)rrrrrrrr)rrrrrr ) rrrrr5r rrrr ) rrrrrrrrrr)rrrr)rrrr)rrrr)rrrrrrrr)rz Iterable[Any]rzDict[str, Dict[str, Any]]) rrrzList[Dict[str, Any]]rOptional[Iterable[str]]rrrr )rrrrrzOptional[List[str]])rrrrrr)rrrrrr)rrrr)rr)rr)rrrr)r r rrrr)rrrr)rr rr)rrrr)rr)rWrrr)rr)rCallable[[str], str])rrrr)rrrr)rzTuple[Any, Optional[str]])rrrrrr) rrrrrrrrrr)rr rzOptional[float])rr rrrr)rr rr) rrr 'AuthError'rrrrrr)rrrrrrrr)rr rr)rr rr)rrrr) r_rrzOptional[bool]rrrrrr)rzTuple[str, Optional[float]])rrrrrr)rr)rrrr)rrrr)rrr]rrtuple[bool, Optional[str]])rr)rrrz:tuple[str, List[str], str, Optional[str], tuple[str, ...]])rrrr)r0rrrrWrrr) rrrrrrrrrr (r __future__rrrloggingr rur{r2rV webbrowser contextlibrr dataclassesrr functoolsrr r pathlibr typingr r rrrrrr urllib.parserrrrragent.credential_persistencerutilsrrrrhermes_cli.auth_zai_kimirrrr r!r"hermes_cli.auth_model_pickerr#r$hermes_cli.auth_device_flowr%r&r'r(r)r*r+r,r-r.r/r0r1r2hermes_cli.auth_oauth_grantsr3r4r5r6r7r8rr9r:r;r<r=r>r?r@rArBrCrDrErFrGrHrIrJrKrLrMrNrOrPrQrRrSrTrUrVrWrXrYrZr[r\r]r^r_hermes_cli.auth_minimaxr`rarbrcrdrerfrgrhrirjrkrlhermes_cli.auth_xairmrnrorprqrrrsrtrurvrwrxryrzhermes_cli.auth_codexr{r|r}r~rrrrrrrrrrrrrhermes_cli.auth_spotifyrrrrhermes_cli.auth_openrouterrhermes_cli.auth_qwenrrrrrrrhermes_cli.auth_constantsrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr getLoggerrrr9rr@rrrrrjrrrqr/BUILTIN_PROVIDER_IDSrrrrsrtrurv hermes_cli.auth_plugin_providersrwrxrryrrrrrrrrrrrrrrrrrr#r$Lockr0r r,r.r6rFrcrgrkrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rr"r&r2r:r=r-r7r%r@rArErHrJr[rarrrrrrrrrrrrrrrrrrrrrr rrrrrrrrr"_OAUTH_GRANT_DEAD_CODES_NOUS_AUTH_MISSING_CODESr:r<_is_terminal_nous_refresh_error$_is_terminal_xai_oauth_refresh_error&_is_terminal_codex_oauth_refresh_errorrFr3r6rRrYr^r\rrrrrr$rrrrrrrrrrrrrrr9r http.serverrrrbase64hashlibrssl subprocesssysrrr)rrrs000rr*s X#   0('RRR!TTMOO001(((( ** B B B B B B B B B B B//// eeee AAAAA))>&&&[[[[[[[[[[[[["   8 $@&      2;N NN,/NCHNN+.N?MNJ#b 2D[5AW "J#b >>3CXno J#b f J#b<>N57J#b</?TijJ#bZJ#b "@9;QSJ#b+-?7J`bJ#b">#J#b&E'J#b.?/J#b2f3J#b4#%DFZ\no5J#b6a7J#b8]9J#b: "9;NPab;J#b<i=J#b>894+1- $W&;@70wc!e%%BCGaa*:  ]D9;5:"0).."2  c _00,0?D0WZ00f6 Y]  HV  <-`FKT < b b-0 b4 bH 3Ljj+0jj$`d44-049G4X\4 4K ,W\EE+E:>EOSE E \ \-0 \9G \Vd \  \)\ ? L60 / /'?/NQ//dT ,026$,$,3$,($,0$, $,N  %&A 6$5 1 aV<] 9:;"#\]Y F ( _*$":D!A&.1Mt0T*D1K3G3 ",%,2$%2 5$%2%$%2!'$%207$%2 h$%2'$%23Ex$%2 E$%25$%2#)%$%2 $%2+K $%2 + $%2 0 $%2  M $%2 -m $%2 >H $%2$%2"/0@$%2 I$%2-i$%2$%2#G$%2$%2#E$%2x$%2"28$%2>CH$%2\$%2$0$%2o$%2(8$%2KZ[j$%2+$%2.>?T$%20$%2  k!$%2 )+!$%2" i#$%2"*9#$%2$Y%$%2$!/ %$%2&-'$%2&*=m'$%2()$%2( ()$%2(8KL)$%2*+$%2*!&~+$%2,<-$%2,",\-$%2,$2N 2*&@E  '\&y*&=>(8EJW0 $[''+'+ ['['$['% ['  [' &) ['@I R c VZ66%6256ER66fX.789.:N:+INN,7949 ("## A Q0Q0Q0 Q0  Q0 GJ Q0t#X\U\GKCJ.#" $XXX2$$^_%&^_ 24J69QQfj l&;=T6:PRt9uu!#<>Y(*>@`)ab!$8:PR&DFeg62&I #**Dv"V'./IT_'`$)0*9& 06Z _7, Y!Ha a Za*\"X  &-7,@,F,F,HIysDsDNNI-7(5-7>7 ?,)74 (6n6.b7 &*, (^Q JSFS+>6OS-"--*-->K--'+-`UT B$ X!KP/."" !!  ""U,.q#$a,-s   Y  "#_ !"XWQQ'(l01{S ![W I!"R#*BF E FJ0N8Js0j!j j#j(jjj j