+ iHjx#Rt^RIHt^RIHtHtR'tRRltRRltRRlt R R lt R R lt R(t ] !R 04tRRltR)RRlltR*tRRltRRltRRltRRltRRltRRltRR ltR!R"ltR#R$ltR%R&ltR#)+aEndpoint-family detection for Anthropic-compatible base URLs. A dozen services speak the Anthropic Messages API but differ in auth style, accepted beta headers, and request quirks (MiniMax, Kimi/Moonshot, DeepSeek, OpenCode, Azure AI Foundry, Nous Portal, Bedrock). Every such difference is decided from the configured base URL, so the predicates live together here as pure functions (no I/O, SDK or credentials) that both ``agent/anthropic_adapter.py`` and ``agent/anthropic_message_convert.py`` can import without a cycle. )urlparse)base_url_host_matchesbase_url_hostnamec$V^8dQhR\/#returnstr)formats">/home/ubuntu/.hermes/hermes-agent/agent/anthropic_endpoints.py __annotate__r s55#5cHV'd\V4P4#R#)zMCoerce a base URL (str or ``httpx.URL``) to a stripped string; "" when falsy.)r stripbase_urls&r _normalize_base_url_textrs$,3x=   4"4rc$V^8dQhR\/#rr )r s"r r r sBB3BrcR\V4PR4P4#)zY``_normalize_base_url_text`` + rstrip("/") + lower(), the shape most predicates match on./)rrstriplowerrs&r _normalized_lowerrs! #H - 4 4S 9 ? ? AArc>V^8dQhR\R,R\/#rrNrr bool)r s"r r r s"BBtBBrcH\V4p\V4;'dRV9#)znAny non-anthropic.com endpoint (own x-api-key keys; skip OAuth detection). No base_url = direct Anthropic API.z anthropic.com)rrr normalizeds& r "_is_third_party_anthropic_endpointr"s&#8,J   A Az AArc>V^8dQhR\R,R\/#rr)r s"r r r #s"QQsTzQdQrc6\V4PR4#)zAKimi's /coding endpoint, which requires a claude-code User-Agent.zhttps://api.kimi.com/coding)r startswithrs&r _is_kimi_coding_endpointr&#s X & 1 12O PPrc>V^8dQhR\R,R\/#rr)r s"r r r (s"@@C$J@4@rc.\T;'gRR4#)z&OpenCode's Zen/Go relay (opencode.ai).rz opencode.airrs&r _is_opencode_endpointr*(s R ??rk3c>V^8dQhR\R,R\/#rmodelNrr)r s"r r r 8s"ddcDjdTdrc\V\4'gR#VP4P4P R^4R,p\ V4;'d'V\ 9;'gVP\4#)Fr) isinstancer rrrsplitr_KIMI_FAMILY_EXACT_SLUGSr%_KIMI_FAMILY_MODEL_PREFIXES)r.ms& r _model_name_is_kimi_familyr68sb eS ! ! $$S!,R0A 7 c c55bbFa9bcrNcXV^8dQhR\R,R\R,R\/#)rrNr.rr)r s"r r r ?s*  sTz #* PT rca\S4;'gN\;QJdV3RlR4F 'gK RM RM!V3RlR44;'g \V4#)unAny Kimi / Moonshot Anthropic-Messages endpoint: the /coding endpoint, any api.kimi.com / moonshot.ai / moonshot.cn host, or any endpoint (e.g. a private gateway) whose *model* is in the Kimi family — the upstream enforces Kimi's thinking semantics regardless of hostname. Decides whether unsigned reasoning_content-derived thinking blocks are preserved on replay.c3P<"TFp\S;'gRV4xK R#5i)rNr)).0drs& r +_is_kimi_family_endpoint..Fs$pAoA$X^^Q77Aos&&TF)z api.kimi.comz moonshot.aiz moonshot.cn)r&anyr6)rr.sf&r _is_kimi_family_endpointr??sN !* - - 3pAop333pAop p - - %e ,rc>V^8dQhR\R,R\/#r-r)r s"r r r Rs" M MC$J M4 Mrc\V\4'gR#VP4P4P R^4R,p\ V4;'dVP \4#)zKnown DeepSeek thinking families behind an Anthropic-compatible relay. Strip vendor namespaces, but do not treat arbitrary DeepSeek chat/distill names as evidence of the thinking replay contract. Frr0)r1r rrr2rr%!_DEEPSEEK_THINKING_MODEL_PREFIXES)r.names& r _model_name_is_deepseek_thinkingrDRsV eS ! ! ;;=   ' 'Q / 3D : L L$//*KLLrc>V^8dQhR\R,R\/#rr)r s"r r r ^s" u ucDj uT urcZ\T;'gRR4;'dR\V49#)apDeepSeek's ``/anthropic`` route. In thinking mode DeepSeek requires prior-turn ``thinking`` blocks to round-trip while the generic third-party path strips them; its blocks are unsigned, so it gets the same strip-signed / keep-unsigned policy as Kimi. Pinned to the ``/anthropic`` path so the OpenAI-compatible base URL is not misclassified. Per DeepSeek's published compatibility matrix the blocks are unsigned (no Anthropic-proprietary signature, no ``redacted_thinking`` support), so this endpoint is handled with the same strip-signed / keep-unsigned policy used for Kimi's ``/coding`` endpoint. See hermes-agent#16748. rzapi.deepseek.com /anthropic)rrrs&r _is_deepseek_anthropic_endpointrH^s, !R1C D t tYjksYtIttrc>V^8dQhR\R,R\/#rr)r s"r r r ks" V VsTz Vd Vrc\T;'gRR4'dR#^RIHpV!4pT'd \ T4MRp\ T4;'d\ T;'gR4T8H# \dR#i;i)a>Nous Portal's Anthropic Messages route (Bearer JWT, verbatim catalog ids, native thinking-signature replay). Trusted hosts only: prod ``inference-api.nousresearch.com`` or the operator-set ``NOUS_INFERENCE_BASE_URL`` host (exact hostname equality, so neither lookalike domains nor sibling hosts of the override match).rzinference-api.nousresearch.comT)_nous_inference_env_overrideF)rhermes_cli.authrK Exceptionrr)rrKoverride override_hosts& r _is_nous_portal_endpointrPkst X^^-MNN@/14<%h/M   U U#4X^^#D #UU s A-- A<;A<c>V^8dQhR\R,R\/#rr)r s"r r r {s  C$J 4 rc\V4p\V4;'gKVP\4;'g.RV9;'g!\ VR4;'g \ VR4#)a Providers needing ``Authorization: Bearer`` instead of ``x-api-key``: MiniMax, Azure AI Foundry, Palantir Foundry's LLM proxy, CommandCode, Nous Portal. Palantir/CommandCode use hostname matching (not substring) so ``evil.com/palantirfoundry`` paths don't trigger it. azure.comzpalantirfoundry.comzapi.commandcode.ai)rrPr%_MINIMAX_ANTHROPIC_PREFIXESrr s& r _requires_bearer_authrU{s|#8,J * C C  !< = C C * $ C C !-B C C C !-A B rc>V^8dQhR\R,R\/#rr)r s"r r r s"EEcDjETErc:R\V4P49#)z;Endpoints that still gate 1M context behind a beta (Azure).rS)rrrs&r _base_url_needs_context_1m_betarXs 28<BBD DDrc>V^8dQhR\R,R\/#rr)r s"r r r s"OOS4ZODOrc>\V4P\4#)zMiniMax's Anthropic-compatible endpoints, which reject the fine-grained-tool-streaming and context-1m betas (stripped even though MiniMax also uses Bearer auth).)rr%rTrs&r _is_minimax_anthropic_endpointr[s X & 1 12M NNrc>V^8dQhR\R,R\/#rr)r s"r r r s" I I3: I$ Irc6\V4pV'gR#\V4pRVP;'gRP4P R4 R2pRV9;'gRV9pT;'d(RVP ;'gRP49#)aAzure-hosted Anthropic Messages endpoints serving ``/anthropic``: modern Foundry (``*.services.ai.azure.*``) and legacy Azure OpenAI (``*.openai.azure.*``) hosts; opts them into ``api-version`` query plumbing. Deliberately no finite TLD allow-list, so sovereign/private clouds work.F.rz.services.ai.azure.z.openai.azure.rG)rrhostnamerrpath)rr!parsed host_padded is_azure_hosts& r _is_azure_anthropic_endpointrds *(3J  j !Fv,,"335<V^8dQhR\R,R\/#rr)r s"r r r s3:$rc \T;'gR4p\;QJd+RVPR44F 'gK RM RM!RVPR444;'d!\VR4;'g \VR4#)zAmazon Bedrock's runtime host (``bedrock-runtime[-fips]..amazonaws.com[.cn]``, and VPC endpoint names carrying the same label), which the AnthropicBedrock SDK path binds as its base URL.rc3B"TFqPR4xK R#5i)zbedrock-runtimeN)r%)r:labels& r r</_is_bedrock_runtime_endpoint..sPu 122sr^TFz amazonaws.comzamazonaws.com.cn)rr>splitrrhosts& r _is_bedrock_runtime_endpointrmsl X^^ ,D 3P 3P333P 3P P  dO4gg8MdTf8grc>V^8dQhR\R,R\/#rr)r s"r r r s"^^S4Z^D^rch\T;'gR4pVR8H;'gVPR4#)zjVertex AI hosts: global ``aiplatform.googleapis.com`` and regional ``-aiplatform.googleapis.com``.rzaiplatform.googleapis.comz-aiplatform.googleapis.com)rendswithrks& r _is_vertex_ai_endpointrqs0 X^^ ,D . . ] ]$--@\2]]rc>V^8dQhR\R,R\/#rr)r s"r r r s3:$rcd\V4;'g\V4;'g \V4#)aCloud platforms serving Claude under Anthropic's own thinking signatures: Bedrock, Vertex AI and Azure AI Foundry ``/anthropic``. Anthropic documents ``signature`` values as compatible across the Claude API, Bedrock and Google Cloud, so these replay signed thinking like the direct API.)rmrqrdrs&r _is_claude_platform_endpointrts5 %X. 2 2 !( + 2 2 ' 1r)z https://api.minimax.io/anthropicz"https://api.minimaxi.com/anthropic) zkimi-kimi_z moonshot- moonshot_zk1.zk1-zk2.zk2-k25zk2.5zk3.zk3-)N)z deepseek-rz deepseek-v4 deepseek_v4z deepseek-pro deepseek_prozdeepseek-flashdeepseek_flash)__doc__ urllib.parserutilsrrrTrrr"r&r*r4 frozensetr3r6r?rBrDrHrPrUrXr[rdrmrqrtrr rs":h5 B BQ @ %dV,d %! M u V E O I^ r