߲j UdZddlmZeddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlZddlZddlZddlmZddlmZddlmZmZddlmZddlmZmZmZm Z m!Z!m"Z"ddl#Z#dd l$m%Z%dd l&m'Z'm(Z(dd l)m*Z*dd l+m,Z,m-Z-dd l.m/Z/ddl0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9ddl0m:Z:m;Z;ddlZ>m?Z?ejeAZBeCZDeCeEd<iZFeGeEd<GddeHZIddddZJdZKdZLdeMdeNfdZOdeMdeNfdZPdd d!edeMd"eNdeNfd#ZQdd d!edeMd"eNddfd$ZRdeeNfd%ZSejd&k(ZUe jd'ZWd(ZXeYeNd)feEd*<eZhd+Z[eZeNeEd,<dd-d.eNd/ee\deNfd0Z]d.eNddfd1Z^ejZ`iZaeeNefeEd2<iZbeeNe!ecd)ffeEd3<iZdeeNe!ecd)ffeEd4<eZhd5Zed6d7hZfed8Zgde\fd9Zhd:ZideeNfd;ZjeZhd<Zkd=edeeNfd>Zldd?eedeNfd@Zmde\fdAZndBeNde\fdCZodDdEdFZpdBeNdeNfdGZqdeNfdHZrdIZsdeNfdJZtddKeNdeNfdLZuddKeNfdMZvdeeGfdNZwdefdOZxdPdQdRe\ddfdSZydefdTZzdefdUZ{dVZ|dWZ}dXeddfdYZ~eCZeCeEdZ<d[Zd\Zdd]lmZmZdd^lmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZdd_lmZmZmZmZgd`dadbggdcddgdegdfZeece eNfeEdg<iZddhe\de eeNeffdiZd.eNdeeNfdjZdkeGdledee!eNecffdmZdkeGdneNdeeNfdoZdpeNfdqZdrdrdPdsdteeNefdue\dve\dwe\deeNeff dxZeZdlefdyZdpeNfdzZdpeNde\fd{ZeZhd|Zd.eNde\fd}Zd~e\deNfdZde eeNeffdZde eeNeffdZdedecfdZdPdde\de!ececffdZhdZeZejezZhdZhdZeGddZde ddeNdeNdeNddf dZ dde ddeeNefdeNde!e!eNeNfd)fdeNddf dZdZdZdZdeeNefde eddfdZdeeNefde eddfdZdedeNde ede!eNeNeNfddf dZdZdede eddfdZdede eddfdZdeeNefde eddfdZdeeNeNffdZdeeNefde eddfdZҐddeeeNefde dfdZӐddeeeNefddfdZԐddZdeeNefddfdZdeNdeeNefdeNdeeNefde\f dZdeNde\fdZؐdde\de\deeNeffdZdeeNefde\ddfdZdeeNefde\ddfdZdeNde eNdeNde\fdZdecdecdeeNefddfdZde eeNefdeeNefddfdZdeGdeGdeGfdZdeGdeGdeGfdÄZdeGdeCde!eGeCffdƄZe jdǫZdeNdeeNfdȄZde jdeNfdʄZdeNde\fd̄ZdeNdeeNfd̈́Zd΄ZddτZdЄZddфZdeeNefde"e!eNd)ffd҄ZedfdeeNefdeeNefdee"e!eNd)fdeeNeffdԄZdedeYeNeNffdքZdeeNefdeeNeffdׄZdeeNefdeeNeffd؄ZdeeNefdeeNeffdلZejZeZhdڣZefdedecdecfd܄ZddݜdeeeNefdeNdedefd߄ZdeNde!ed)fdeeeNeffdZde\deeNeffdZdeeNeffdZdd!eedeeNeffdZdeeNeffdZd!edeNdeMdeNdeHf dZdeNfdZdZdZdd!eedeeNeffdZddd!edeeNefdeeNddfdZdeeNeffdZdeeNeffdZdeeNefd.eNdeeNeffdZdPddeNdeNdede\ddf dZddidDcic]}|d|j c}ZdedeNfdZd.eNdede\fdZ dede"eNfdZ d.eNdeeNfdZ deNdeNde\fdZ dddddeeeNeNfdeeeNefdee\deeNeNffdZ d!ede!ee!ececececfee!ecd)fffd Zd!edeNdeMdeeeNeffd Zd eeNefde!eeNefeffd ZdeNd edeeeNeffdZde\deeNeffdZdZdZdeeNefdeeNeffdZdeeNefdeeNfdZdrddPddeeNefde\dee"e!eNd)fde\fdZdeeNeNffdZddZdedefdZdecfdZdedefdZdeded e\ddfd!Zd.eNdeNdeNfd"ZdeNdeNfd#Zdd-d$eNd.eNd/ee\de\fd%Z d.eNdeeNddfd&Z!d.eNdKeNde\fd'Z"d(eNfd)Z#d.eNdeNfd*Z$d+eNdeNfd,Z%d.eNde\fd-Z&ddrd.d/eNd0eNd1e\fd2Z'ddeNfd3Z(dd4Z)ddeNfd5Z*d.eNdeNdeeNeffd6Z+decfd7Z,d.eNdeeNfd8Z-d.eNdeeNfd9Z.d.eNdeeNfd:Z/d.eNdeNfd;Z0eZhd<Z1d=Z2d>Z3e jd?Z4d.eNde\fd@Z5ddedAecdefdBZ6dCeNddfdDZ7ddEZ8dFZ9deeNefddfdGZ:deeNefddfdHZ;deeNefddfdIZddLZ?dMZ@dNZAdpeNfdOZBeZhdPZCeZhdQZDeZdRhZEeZdShZFeCeEzeDzZGdeCeNfdTZHdd.eNdUeCeNdVeIdeeNfdWZJd.eNdeYe\eeNffdXZKd.eNdYeeNde\fdZZLdeNde\fd[ZMdeNfd\ZNdeNfd]ZOdrdrdrdPdPdPdddd^ ZPd.eNdeNdefd_ZQd`dadadad`d`d`dbZReZdcddhZSd.eNdeeeNefdeeNfdfZTd.eNdedeeeNefdge\def dhZUd.eNdeYeNeeNffdiZVdjeNdeeNfdkZWd.eNdKeNddfdlZXd.eNdedeeeNefdge\deNf dmZYd.eNdeddfdnZZdoeNddfdpZ[d!edeeeNefddfdqZ\d.eNdYeeNddfdrZ]d.eNdYeeNdeNfdsZ^dd.eNdeNdge\fdtZ_dPdPdud.eNd~e\de\fdvZ`d.eNfdwZaddxeNdye eNdzee eNddfd{Zbdd|Zcd}gd~dfZddgdgdfZedgddfZfdZgdZhdZideeNefdeNdeNfdZjdeNddfdZkdZldZmdddegeheiddelemd ZndZodZpddZqeqdZrddZsesdd?eedefdZtddBeNd?eeddfdZuddiZvdZwycc}w(zConfiguration management for Hermes Agent: config.yaml / .env loading, saving, validation, migration, and the ``hermes config`` command.)drop_stale_root_modulesN)suppress) dataclass)DecimalInvalidOperation)Path)DictAnyOptionalListTupleSet) line_input)Colorscolor) managed_scope)DEFAULT_SOUL_MDis_legacy_template_soul)masked_secret_prompt) _IGNORED_MANAGED_VALUES_LEGACY_MANAGED_SYSTEM_MANAGED_FALSE_VALUES_MANAGED_TRUE_VALUES_chown_to_hermes_uid_container_or_chmod_skipped_resolve_hermes_uid_gidapply_secure_dir_policyget_managed_system)get_hermes_homeget_process_hermes_home)atomic_replacefast_safe_loadfile_signature_CONFIG_PARSE_WARNED_CONFIG_PARSE_FAILURESceZdZdZy)InvalidUserConfigErrorzDRaised when a run that cannot repair config finds invalid user YAML.N)__name__ __module__ __qualname____doc__6/home/ubuntu/.hermes/hermes-agent/hermes_cli/config.pyr'r'@sNr-r'zqHermes is running on the settings it loaded before the edit until it is fixed, so recent changes are not applied.zbHermes is running on your last good settings until it is fixed, so recent changes are not applied.z7Nothing was written, so the existing file is preserved.)last-known-goodlast-known-good-backup refuse-writezdHermes is running on default settings until it is fixed, so none of your saved settings are applied.zOOpen it with `hermes config edit`, fix {where}, then run `hermes config check`.excreturnct|ddxs t|dd}t|dd}t|trd|dzSdS)z@``"line 12"`` from a PyYAML problem mark (1-based), else ``""``. problem_markN context_marklinezline )getattr isinstanceint)r2markr7s r._yaml_error_locationr>MsK 3 - Snd1SD 4 &D!+D#!6U4!8* >B>r-ct|dd}|r|nt|j}dj|j S)zQSingle-line ``Details:`` text: the PyYAML problem, or the exception's first line.problemN )r:strstripjoinsplit)r2r@texts r._yaml_error_detailsrGTs;c9d+G"gYC(8D 88DJJL !!r-defaultsfallback config_pathrJct|}|rd|nd}tj|t}tj |xsd}d|d|d|d|S) zUser copy for an unparseable config.yaml: what happened, what Hermes is doing, how to fix. Only the problem line/column is printed; the raw PyYAML text goes to a ``Details:`` line. at r9z the problem)whereYour settings file () has a formatting error. rA)r>_PARSE_FAILURE_FALLBACK_MSGget_PARSE_FAILURE_DEFAULTS_MSG_PARSE_FAILURE_REPAIR_MSGformat)rKr2rJrNat fallback_msgrepairs r.format_config_parse_failurerZ[sk ! %E 4wbB.228=XYL & - -E4J] - KF !+.Frd"\NZ[\b[c ddr-c^ |j}t|}t|g|}g|t|tt|<|t vryt j |ddlm}||d}t|||}| |d|dz }tjd|t| tjjd |d t|d tjj!y#t$rt|ddddf}YwxYw#t"$rYywxYw) uSurface a config.yaml parse failure to log and stderr (once per file signature). Silent fallback to ``DEFAULT_CONFIG`` drops every user override, so this must be loud. ``fallback`` selects the message wording: ``"defaults"`` (fresh process, nothing else to serve) or ``"last-known-good"`` (in-process retention of the previously loaded config — see the codex#31188 port in ``_load_config_impl``). rN backup_configcorruptrIz( A copy of the broken file was saved to .z%s Details: %su⚠️ hermes config: z Details:  )statr#rBr%OSErrorr$addhermes_cli.config_backupsr]rZloggerwarningrGsysstderrwriteflush Exception) rKr2rJstsigkeyr] backup_pathmsgs r._warn_config_parse_failurerqes2-    R ;&#&3CS3C#c(3Cs;/0 ""S!7 Y7K %k3 JC 9+aHH NN#S*=c*BC  23%GZ[^G_F``bcd  -;Aq!,-    s%A D3A D DD D,+D,c tttx}}|j}t ||ddk(r|dSdS#t $rYywxYw)zReturn the recorded parse error while the ACTIVE config.yaml is still byte-identical (mtime_ns + size + ino + ctime_ns) to the file that failed to parse; else None.N)r%rBget_config_pathrar#rk)pathrecordrls r.get_active_config_parse_failurerws\'O4E,ED(FG YY[*2.&!*LENVPATHPAGERSHELLEDITOREXINITVISUALBROWSERGIT_DIRGIT_SSHGOFLAGSPERLLIBRUBYLIBRUBYOPTVIMINITZDOTDIRBASH_ENVLD_AUDITLD_DEBUGMANPAGERPERL5LIBPERL5OPT CLASSPATH GIT_PAGER GIT_SHELL NODE_PATH RUSTFLAGS GIT_EDITOR HERMES_ENV LD_PRELOAD PYTHONHOME PYTHONPATH GIT_ASKPASS HERMES_HOME SSH_ASKPASS NODE_OPTIONS PYTHONCASEOK SUDO_ASKPASS GIT_EXEC_PATH HERMES_CONFIG PYTHONSTARTUP _JAVA_OPTIONSHERMES_PROFILEPROMPT_COMMANDPYTHONUSERBASEGIT_SSH_COMMANDHERMES_ENV_PATHHERMES_EXEC_ASKLD_LIBRARY_PATHGIT_TEMPLATE_DIRHERMES_YOLO_MODEJDK_JAVA_OPTIONSPYTHONBREAKPOINTPYTHONEXECUTABLEPYTHONNOUSERSITEDYLD_LIBRARY_PATHGIT_EXTERNAL_DIFFGIT_PROXY_COMMANDJAVA_TOOL_OPTIONSHERMES_CONFIG_PATHHERMES_INTERACTIVEHERMES_SESSION_KEYDYLD_FRAMEWORK_PATHGIT_SEQUENCE_EDITORHERMES_ACCEPT_HOOKSHERMES_CRON_SESSIONHERMES_OPTIONAL_MCPSDYLD_INSERT_LIBRARIESHERMES_REDACT_SECRETSHERMES_GATEWAY_SESSIONHERMES_COPILOT_ACP_ARGSHERMES_SESSION_PLATFORMDYLD_FALLBACK_LIBRARY_PATHHERMES_COPILOT_ACP_COMMANDHERMES_SINGLE_QUERY_SESSIONDYLD_FALLBACK_FRAMEWORK_PATH_ENV_VAR_NAME_DENYLIST is_windowsrnrc>|tn|}|r|jS|S)zName used for env policy comparisons: Windows env names are case-insensitive, POSIX not. The override keeps both semantics testable on any host.) _IS_WINDOWSupper)rnrwindowss r._env_var_policy_namers#(/kZG!399;*s*r-ctj|std|t|}|tvs|j t rtd|dy)zTValidate an env name before a generic persistence write (exposed for batch callers).#Invalid environment variable name: zEnvironment variable a$ is on the writer denylist. Names that influence subprocess execution (LD_PRELOAD, PYTHONPATH, PATH, EDITOR, ...) or Hermes runtime location and security policy (HERMES_HOME, HERMES_YOLO_MODE, ...) cannot be persisted via the env writer. If you really need this, edit ~/.hermes/.env directly.N)_ENV_VAR_NAME_REmatch ValueErrorrr startswithr|)rn policy_names r.validate_env_var_name_for_writersh  ! !# &>sgFGG&s+K,, 0F0FGb0c#C7+  1dr-_LAST_EXPANDED_CONFIG_BY_PATH_LOAD_CONFIG_CACHE_RAW_CONFIG_CACHE>mIRC_PORT QQ_APP_ID IRC_SERVER IRC_CHANNEL IRC_USE_TLS IRC_NICKNAME QQ_STT_MODEL TERMINAL_ENV WECOM_BOT_ID WECOM_SECRET WEIXIN_TOKEN FEISHU_APP_ID WHATSAPP_MODEOPENAI_API_KEYQQ_STT_API_KEYSIGNAL_ACCOUNTANTHROPIC_TOKENMATRIX_PASSWORDOPENAI_BASE_URLQQ_HOME_CHANNELQQ_STT_BASE_URLSIGNAL_HTTP_URLWEIXIN_BASE_URLCOPILOT_CLI_PATHMATRIX_DEVICE_IDMATRIX_HOME_ROOMQQ_ALLOWED_USERSQQ_CLIENT_SECRETSMS_HOME_CHANNELTERMINAL_SSH_KEYWEIXIN_DM_POLICYWHATSAPP_ENABLEDANTHROPIC_API_KEYFEISHU_APP_SECRETLANGFUSE_BASE_URLMATRIX_ENCRYPTIONTERMINAL_SSH_PORTWEIXIN_ACCOUNT_IDDINGTALK_CLIENT_IDFEISHU_ENCRYPT_KEYMATRIX_AUTO_THREADQQBOT_HOME_CHANNELQQ_ALLOW_ALL_USERSSLACK_HOME_CHANNELWECOM_HOME_CHANNELFEISHU_HOME_CHANNELHERMES_LANGFUSE_ENVIRC_SERVER_PASSWORDLANGFUSE_PUBLIC_KEYLANGFUSE_SECRET_KEYMATRIX_RECOVERY_KEYQQ_MARKDOWN_SUPPORTSIGNAL_HOME_CHANNELWECOM_CALLBACK_HOSTWECOM_CALLBACK_PORTWEIXIN_CDN_BASE_URLWEIXIN_GROUP_POLICYWEIXIN_HOME_CHANNELBLUEBUBBLES_PASSWORDCOPILOT_ACP_BASE_URLDISCORD_HOME_CHANNELQQ_HOME_CHANNEL_NAMESIGNAL_ALLOWED_USERSWECOM_CALLBACK_TOKENWEIXIN_ALLOWED_USERSYUANBAO_HOME_CHANNELDINGTALK_HOME_CHANNELHERMES_LANGFUSE_DEBUGIRC_NICKSERV_PASSWORDMATRIX_DM_AUTO_THREADMATTERMOST_REPLY_MODESMS_HOME_CHANNEL_NAMETELEGRAM_HOME_CHANNELBLUEBUBBLES_SERVER_URLDINGTALK_CLIENT_SECRETHERMES_ACP_AUTH_METHODMATRIX_REQUIRE_MENTIONQQ_GROUP_ALLOWED_USERSWECOM_CALLBACK_CORP_IDWEIXIN_ALLOW_ALL_USERSHERMES_ACP_AUTO_APPROVErHERMES_LANGFUSE_CAPTUREHERMES_LANGFUSE_RELEASEMATTERMOST_HOME_CHANNELQQBOT_HOME_CHANNEL_NAMESLACK_HOME_CHANNEL_NAMEWECOM_CALLBACK_AGENT_IDWECOM_HOME_CHANNEL_NAMEBLUEBUBBLES_HOME_CHANNELFEISHU_HOME_CHANNEL_NAMESIGNAL_HOME_CHANNEL_NAMEWEIXIN_HOME_CHANNEL_NAMEDISCORD_HOME_CHANNEL_NAMEFEISHU_VERIFICATION_TOKENHERMES_LANGFUSE_MAX_CHARSHERMES_TOOL_PROGRESS_MODEYUANBAO_HOME_CHANNEL_NAMEDINGTALK_HOME_CHANNEL_NAMErMATRIX_FREE_RESPONSE_ROOMSSIGNAL_GROUP_ALLOWED_USERSTELEGRAM_HOME_CHANNEL_NAMEWECOM_CALLBACK_CORP_SECRETWEIXIN_GROUP_ALLOWED_USERSHERMES_LANGFUSE_SAMPLE_RATEMATTERMOST_HOME_CHANNEL_NAMEBLUEBUBBLES_HOME_CHANNEL_NAMEWECOM_CALLBACK_ENCODING_AES_KEYnixos home-managerz /nix/storectduS)z;Check if Hermes is running in package-manager-managed mode.Nrr,r-r. is_managedrK.s  t ++r-zUpdate Hermes through the Nix source that installed it (e.g. nix profile upgrade, or update your flake input and rebuild with nixos-rebuild or home-manager switch)c2ttvrtSdS)z;Return the preferred upgrade command for a managed install.N)r_NIX_MANAGED_SYSTEMS_NIX_UPDATE_MSGr,r-r.get_managed_update_commandrO;s026JJ?TPTTr->aptgitnixrGdockerunknownrHruc |jdjj}|tvr|SdS#t$rYywxYwNutf-8encoding) read_textrClowerrb_SUPPORTED_INSTALL_METHODS)rumethods r._install_method_stampr^FsR1779??A996CtC s.< AA project_rootc||n t}t|dz }|r|Sttdz }|r|dk(r tr|St }|r |j j ddS |j}|tk7rt|jvry|dz } |js/|jdjjd ry y #t$rYSwxYw#t$rYy wxYw) auDetect how Hermes was installed: apt/docker/nix/nixos/home-manager/git/unknown. Order: code-scoped ``/.install_method`` stamp (authoritative) -> legacy ``$HERMES_HOME/.install_method`` -> managed marker -> /nix/store path -> .git dir -> unknown. The stamp lives next to the code because HERMES_HOME is shared data: a container and a host install can bind-mount the same home, so a home-scoped ``docker`` stamp would make the host ``hermes update`` refuse to run. A legacy ``docker`` value is therefore ignored unless we are really inside a container, and being in a container alone never implies 'docker'. The supported installs self-identify via the code-scoped stamp: - the curl installer (scripts/install.sh, the README/website install command) git-clones the repo and stamps ``git`` next to the code; - the published ``nousresearch/hermes-agent`` image bakes a ``docker`` stamp into ``/opt/hermes`` at build time. An unsupported manual install dropped into a container (no stamp) falls through to the ``.git`` checks and behaves like any off-path install. See issue #34397. .install_methodrSrA-rRz.gitrWrXzgitdir:rQrT)get_project_rootr^r_running_in_containerrr[replaceresolve _NIX_STOREparentsrbis_dirrZrCr)r_rootr]managedresolvedgit_paths r.detect_install_methodrnNs"(3<9I9KD "4*;#;  z !jH4D4D&D f}H ??  2 2G 2 D J J L W WXa b!c         s$7+C+)?C:+ C76C7: DDc< ddlm}|S#t$rYywxYw)z=Import-safe wrapper around ``hermes_constants.is_container``.r is_containerF)hermes_constantsrqrkrps r.rdrd~s$1~ s  r]c |dk(xs|tvS)zHTrue for every install method Nix owns ("nix", "nixos", "home-manager").rR)rMr]s r.is_nix_install_methodrus U? BRSC CDr-cLtt|tjy)z+Print user-friendly error for managed mode.fileN)printrrgrh)r~s r. managed_errorrs  (szz:r-c<tjjddk(ryddlm}|ry i}t t dz dd 5}|D]_}|j}d |vs|jd r*|jd \}}}|j||j<a ddd|jd d |jdd|jdd|jdddS#1swYPxYw#t$rYywxYw)aRead container mode metadata from HERMES_HOME/.container-mode. Written by the NixOS activation script when container.enable = true; tells the host CLI to exec into the container instead of running locally. None when container mode is off, when already inside the container, or when HERMES_DEV=1 is set. Only FileNotFoundError is swallowed; other errors (permissions, malformed data) propagate. HERMES_DEV1Nrrpz.container-moderrWrX=#backendrScontainer_namez hermes-agent exec_userhermes hermes_binz /data/current-package/bin/hermes)rrrr) osenvironrSrrrqopenrrCr partitionFileNotFoundError)rqinfofr7rn_values r.get_container_exec_infors  zz~~l#s*-~  /#&77w O 6ST 6zz|$;ts';$(NN3$7MCE(- D%  6 688Ix0((#3^DXXk84hh|-OP  RR 6 6 s5DD)D;8D4DD D DDctdz S)zGet the main config file path. config.yamlrr,r-r.rtrts  } ,,r-F)ignore_user_configrc6|s"tjjddk(ryt} t |d5}t |}dddt |trytdt|j}ddl m}||d }t|}d |d |rd |nd d} | | d|dz } | dt!|z } t"j%| t'| |#1swYxYw#t$rYyt$r }|}Yd}~d}~wwxYw)aReject an existing invalid config before a non-interactive agent run. Interactive surfaces keep ``load_config()``'s recovery behavior so the operator can repair the file; a one-shot run has no such chance, and defaults there could silently pick a hosted provider and spend against ``.env`` credentials. Missing/empty files stay valid first-run states; ``--ignore-user-config`` / HERMES_IGNORE_USER_CONFIG=1 remain authoritative.HERMES_IGNORE_USER_CONFIGrNrWrXz,top-level YAML value must be a mapping, got rr\r^z+Hermes stopped because your settings file (rPrMr9z. Fix it with `hermes config edit` and check with `hermes config check`, or add --ignore-user-config to run once with default settings.z! A copy of the broken file is at r_ Details: )rrrSrtrr"r;dict TypeErrortyper(rrkrdr]r>rGreerrorr') rrKrdata parse_errorr2r]rorNmessages r.require_parseable_user_configrs9 RZZ^^,GHCO!#K f + 0 %A!!$D % <:dD1 "NtTXzObObNc de 7 Y7K  -E 5k]BZ"T%> +,` ` 6{m1EE / <=>>G LL  ){:- % %   s4 C9 C- C9-C62C99 DD DDctdz S)z&Get the .env file path (for API keys)..envrr,r-r. get_env_pathrs  v %%r-cdttjjjS)z'Get the project installation directory.r__file__parentrfr,r-r.rcrc!s! > ' ' / / 11r-ct|S)uchmod a directory owner-only (0700) and apply HERMES_UID/GID ownership. No-op when managed; in a container only an explicit HERMES_HOME_MODE is applied. HERMES_HOME_MODE (e.g. 0701) overrides the mode so a web server can traverse HERMES_HOME to a served subdirectory without directory listings. Also applies ``HERMES_UID``/``HERMES_GID``-based ownership when those env vars are set (#34107 — Docker deployments need this so profile subdirs created at runtime by kanban workers don't land as root:root and block subsequent uid-mapped workers). Delegates to the canonical import-safe primitive ``hermes_constants.apply_secure_dir_policy`` so callers outside this package (``get_scratch_dir``) share one implementation (#117347). )rrus r. _secure_dirr&s #4 ((r-cts try tjj t |rtj |dyy#ttf$rYywxYw)zchmod a file 0600. Skipped when managed (activation sets 0640 group-readable) or in a container (mounts often need broader permissions).Ni) rKrrruexistsrBchmodrbNotImplementedErrorrs r. _secure_filer6sV|24 77>>#d) $ HHT5 ! % ( )   s>AA)(A)homec|dz }|jr |jd}t |sy |j t dt#|y#ttf$rYywxYw#t$r|jstjddt|\}} tj|dd5}|jt dddn #1swYnxYwtj||nG#t$r;tt5tj |ddd#1swYxYwwxYwYwxYw) zSeed DEFAULT_SOUL_MD on first run; upgrade a legacy comment-only scaffold in place. A SOUL.md the user actually customized is never touched.zSOUL.mdrWrXNz .SOUL.md.z.seed)prefixsuffixdirw)rrZrbUnicodeDecodeErrorr write_textr is_symlinktempfilemkstemprBrfdopenrirerunlinkr)r soul_pathexistingfdtmp_namehandles r._ensure_default_soul_mdrBs?y I  **G*E-DC$ D$C- )DEE D>5 E >E E  EE_HERMES_HOME_ENSURED) cronsessionslogsz logs/curatormemoriespairinghooks image_cache audio_cacheskillsct}t|}ddlm}|||tvr|j ryddlm}||tty)zEnsure the ~/.hermes directory skeleton exists with secure permissions. Memoized per home path: this runs on EVERY ``load_config()`` and the ~14 mkdir/chmod syscalls made repeated loads the dominant cost of hot read paths.r)assert_named_profile_home_liveN)initialize_home) rrBrrrrrihermes_cli.config_homer_HERMES_HOME_SUBDIRS)rrnrrs r.ensure_hermes_homerlsH  D d)C@"4( ""t{{}6D.0DEr-)DEFAULT_CONFIGOPTIONAL_ENV_VARS)_API_MODE_ALIASES_CAMEL_ALIASES_KNOWN_PROVIDER_KEYS_PROVIDER_NORMALIZE_WARNED_canonical_api_mode_coerce_ssl_verify)_custom_provider_entry_to_provider_config_entries_for_route _normalize_custom_provider_entry_normalize_provider_models_pick_provider_base_url_route_model_cfg_warn_once_per_provider4apply_custom_provider_extra_headers_to_client_kwargs*apply_custom_provider_tls_to_client_kwargscoerce_provider_idfind_provider_entryget_compatible_custom_providersget_custom_provider_api_mode"get_custom_provider_context_length!get_custom_provider_extra_headers$get_custom_provider_model_capability+get_custom_provider_session_affinity_header get_custom_provider_tls_settingsis_provider_enablednormalize_extra_headers"providers_dict_to_custom_providersstringify_provider_map)NEUTRAL_PERSONALITY_NAMES prompt_textrender_personality_promptresolve_ephemeral_system_prompt)FIRECRAWL_API_KEYBROWSERBASE_API_KEYBROWSERBASE_PROJECT_IDFAL_KEYVOICE_TOOLS_OPENAI_KEYELEVENLABS_API_KEY)rrWHATSAPP_ALLOWED_USERSSLACK_BOT_TOKENSLACK_APP_TOKENSLACK_ALLOWED_USERSTAVILY_API_KEYTERMINAL_MODAL_MODE)rs ENV_VARS_BY_VERSION required_onlyc tdfg}|s|jtdf|Dcgc]2\}}|jD]\}}t |s d|i|d|i4c}}}}Scc}}}}w)z.Check which environment variables are missing.TFname is_required)REQUIRED_ENV_VARSappendritems get_env_value)rgroupstablervar_namers r.get_missing_env_varsrs $' (F  (%01#) ( ( E;#kkm ( HdX& >T>=+> (> (( (s7A' cfg}g}d}|t|kr|||}|dk(r%||dz|dzdk(r|jd|dz }=|dk(r#|jdj|g}n|j||dz }|t|kr||jdj||S)a|Split a dotted config-key path, honoring backslash-escaped dots (``a\.b`` -> ``a.b``). Backslashes before any other character are preserved verbatim. ``hermes config set`` uses ``.`` as the nesting separator, so a key that itself contains a literal dot (e.g. provider names like ``qwen3.5-397b-wafer``) was silently split into bogus nested segments (#84064). r\r8r_r9)lenrrD)rnpartscurrentichs r._split_key_pathr%sEG A c#h, V :#a!eAE*c1 NN3  FA  9 LL) *G NN2  Q c#h, LL!" Lr- containerr!cttrsytfdtt ddDdS)uReturn ``(literal_key, n_consumed)`` for the longest dotted literal key present in *container*, or None. With no multi-segment literal this is the historic plain-split walk. Dots in config key names are the norm, not the exception — model IDs (``grok-4.6``, ``glm-5.3``), Matrix room IDs (``!room:chat.example.cc``), and versioned provider names all embed dots. Users typing ``providers.myprov.models.grok-4.6.context_length`` do not know the escape syntax exists, so when navigating an EXISTING mapping we prefer an existing literal key equal to the dot-join of the next N path segments (longest match wins) over blindly splitting. See #84064 / #80006 / 91095 / #91607 / #99124. Nc3xK|]1}djd|vsdjd||f3yw)r_N)rD).0nr&r!s r. z(_greedy_literal_match..s@hasxxPUVXWXPYGZ^gGg#((5!9 q !hs::r)r;rnextranger )r&r!s``r._greedy_literal_matchr/s9 i &e h5UQ+Ch  r-partcZt|tsy|dztfd|DdS)uOExisting literal dotted key that creating an intermediate mapping ``part`` would shadow (``grok-4`` beside ``grok-4.5``) — the write would produce a phantom sibling the runtime never reads, so callers fail loudly instead. Called when a write is about to CREATE a new intermediate mapping named ``part``. See #84064. Nr_c3hK|])}t|ts|js&|+ywN)r;rBr)r)krs r.r+z#_phantom_sibling..s%UqAs); V@TUs 222)r;rr-)r&r0rs @r._phantom_siblingr5s/ i & CZF UIUW[ \\r- dotted_keyc (t|}|}d}|t|krO||d}t|dk(}t|tr+|d}|r||t |<y |t |}|dz }nt|trt||} | Q| \} } || zt|k(r||| <yt|j| ttfsi|| <|| }|| z }|d}|r|||<yt||} | *| jdd} t d |d |d | d | d |j|i}|dz }n$t dt|jd||t|krNyy#t t f$rt d|d|dwxYw)aSet a value at a dotted key path, creating intermediate dicts on demand. Numeric segments index lists; the index must already exist (lists are never grown). Guards against #17876: before this fix the code unconditionally replaced any non-dict value (including lists) with ``{}``, silently destroying list-typed config like ``custom_providers`` whenever a caller used an indexed path. Dotted key names (#84064 family): when navigating an existing mapping, an existing literal key equal to the dot-join of the next N segments is preferred over blind splitting (see ``_greedy_literal_match``), so ``models.grok-4.6.supports_vision`` lands on the real ``grok-4.6`` entry. And when a write WOULD create a new intermediate mapping that shadows an existing dotted sibling (``grok-4`` beside ``grok-4.5``), it raises ``ValueError`` instead of silently writing a phantom the runtime never reads. rNr8z!Cannot navigate into list at key z : segment z is not a numeric indexr_z\.zRefusing to create nested key  in z-: the mapping already contains a literal key zT that contains a dot. If you meant that key, escape its dots with a backslash (e.g. z).zCannot navigate into z at key )r%r r;listr<rrrr/rSr5re setdefaultrr()configr6rr!r"r# remainingat_leafr0rrnconsumedshadowedescapeds r. _set_nestedrAs J 'EG A c%j.!"I i.A% gt $Q\BNNUYVXZ[[((r2G FA3DM4J4J3K8T^Sabc cU c%j.z* @7 ~F#h&=?@@ @s E//"FT) clear_api_keyclear_api_modeclear_base_url model_cfgrBrCrDct|ts|S|rH|jdd|jdd|jdd|jdd|r|jdd|r|jdd|S)a%Remove stale inline endpoint credentials from a model config. ``model.api_key`` is valid only for explicit custom endpoints; built-in providers resolve credentials from env/auth.json/the pool. Leftovers keep secrets in config.yaml and can contaminate later custom resolution paths.api_keyNapikey_env api_key_envapi_modebase_url)r;rpop)rErBrCrDs r. clear_model_endpoint_credentialsrN'sy i & i& eT"  i& mT* j$' j$' r-cJg}|}d} ||d}t|tr t|d}||d}n&t|t rt||}|y|\}}ny||z }|t|k(r|||fS|j||f||}#ttt f$rYywxYw)azWalk *parts* through nested dicts/lists (escape-aware, greedy-literal like ``_set_nested``). Returns ``(parents, container, key)`` where ``container[key]`` is the addressed leaf and ``parents`` lists the ``(container, key)`` hops above it, or ``None`` when any hop is missing, a list index is non-numeric/out of range, or a scalar is hit before the path is consumed.rNr8) r;r9r<rr IndexErrorrr/r r) r;r!rhr"r#r<rnr>rs r._locate_nestedrQDs GG A !"I gt $ )A,' H  &)'9=E}!MC X  E ?GS( (~&#,)  z:6  sB B"!B"cRt|t|}|tS|\}}}||S)aReturn a dotted-path value (``_MISSING`` when absent); same navigation as ``_set_nested`` so ``models.grok-4.6.context_length`` reads the real ``grok-4.6`` entry. Mirrors ``_set_nested``'s navigation: honors backslash-escaped dots and prefers an existing literal dotted key over blind splitting, so ``config get providers.p.models.grok-4.6.context_length`` reads the real ``grok-4.6`` entry instead of reporting the key unset (#84064). )rQr%_MISSING)r;r6locrr&rns r. _get_nestedrUcs5 !< =C {Ay# S>r-ct|t|}|y|\}}}||=t|D]\}}|ik7ry||=|}y)azRemove a dotted-path value; True if it existed. Empty dict containers left behind are dropped, while user-authored empty lists and non-empty sibling branches are preserved. Same escape-aware, greedy-literal navigation as ``_set_nested`` / ``_get_nested`` (#84064): unsetting an unescaped dotted key removes the real literal entry rather than a phantom sibling. FT)rQr%reversed)r;r6rTrhr"rnrr0s r. _unset_nestedrXrsj !< =C {GWc  )  b=   4L  r->r EXA_API_KEY GITHUB_TOKEN SUDO_PASSWORDAPI_SERVER_KEYHONCHO_API_KEYrr rrPARALLEL_API_KEYrTOOL_GATEWAY_URLrDISCORD_BOT_TOKENrFIRECRAWL_API_URLTERMINAL_SSH_HOSTTERMINAL_SSH_USEROPENROUTER_API_KEYPERPLEXITY_API_KEYTELEGRAM_BOT_TOKENrBROWSER_USE_API_KEYTOOL_GATEWAY_DOMAINTOOL_GATEWAY_SCHEMECONNECTOR_GATEWAY_URLFIRECRAWL_GATEWAY_URLrrTOOL_GATEWAY_USER_TOKENcd|vry|j}|tvxs$|jdxs|jdS)aReturn whether `hermes config set` routes this credential-shaped key to .env through the provider credential lifecycle. Non-secret env settings (``*_HOME_CHANNEL``, ``*_ALLOWED_USERS``) are ``config_env_routing.is_env_setting_key`` and take the plain ``.env`` path.r_F)_API_KEY_TOKEN_SECRET TERMINAL_SSH)r_ENV_CONFIG_KEYSendswithr)rn key_uppers r._is_env_config_keyrusN cz I%% 0   ? @ 0    /1r-as_jsonc|rtj|dSt|tr|rdSdS|yt|tt fr%t j|djSt|S)z.Format a config value for command-line output.F) ensure_asciitruefalsenull) sort_keys) jsondumpsr;boolrr9yaml safe_dumprstriprB)rrvs r._format_config_get_valuersgzz%e44%v+G+ }%$&~~eu5<<>> u:r-clgddtdtdtffd ttS)z>Check which config fields are missing or outdated (recursive).rHr"rc&|jD]}\}}|jdr|s|n|d|}||vrj||d|d@t|tsQt|j |tsq||||y)Nrr_zNew config option: )rndefault description)rrrr;rrS)rHr"rrn default_valuefull_key_checkmissings r.rz)get_missing_config_fields.._checks"*.."2 > C~~c""(s#.?H'!xM1DXJ/O QRM40Z C@PRV5W}gclH= >r-r9)rrBr load_config)rrs@@r.get_missing_config_fieldsrs5G > > >c > >;=) Nr-cX ddlm}m |}|sgSt fd|D}|Dcgc]+\}}|"t|ts|jr*|-c}}S#t$rgcYSwxYw#t$r"}tj d|gcYd}~Sd}~wwxYwcc}}w)zVReturn skill-declared config vars (``skills.config.``) that are missing or empty.r)discover_all_skill_config_varsSKILL_CONFIG_PREFIXz)discover_all_skill_config_vars failed: %sNc 3hK|])}|tgd|djdf+yw)r_rnN)cfg_getrE)r)varrr;s r.r+z0get_missing_skill_config_vars..s> l\_sGFV(;'"? @& HH+ ' ' ";2 (!+.OPQsRST v~ s6 C B<C<CC D$C;5D;D>signalpluginstimeouts image_gen platforms video_gen mcp_serversfallback_modelprofile_routesreset_triggersallow_all_usersrequire_mentionalways_log_localcustom_providersplatform_toolsetsmultiplex_profilessmart_model_routingstt_echo_transcriptsknown_plugin_toolsetsknown_builtin_toolsetsgroup_sessions_per_userfilter_silence_narrationthread_sessions_per_userunauthorized_dm_behaviortool_gateway_declined_tools> rmodelmodelsrGrIrKrL extra_body ssl_verify ssl_ca_certcontext_lengthcatalog_providerrate_limit_delay>rGrKrLrc0eZdZUdZeed<eed<eed<y) ConfigIssuez$A detected config structure problem.severityrhintN)r(r)r*r+rB__annotations__r,r-r.rr,s.M L Ir-rissuesrrrc<|jt|||yr3)rr)rrrrs r._issuer4s MM+h67r-entrylabelfieldsrc h|D]-\}}|j|rt|d|d|d||/y)zdAppend a warning for every falsy ``field`` of *entry* (message: ``