+ iHjRt^RIHt^RIHtHtHtRtRtRRlt RRlt RR lt RR R llt RR Rllt RRltRRltRRltRRRlltR #)aCredential ownership for ``providers:`` entries whose pool slug is also a built-in's pool id. ``providers.deepseek`` pools under the slug ``deepseek``, which ``load_pool`` also seeds from the built-in DeepSeek provider's env vars and auth files. Those rows are the built-in's accounts. Every acquisition of a pool for the custom entry's runtime (main, frozen and auxiliary resolution, a URL-matched bare ``custom`` route, restoring the primary after a fallback, a delegated child's pool) takes the entry-scoped view from here, so the built-in's account never stands in for the entry's declared credential. The built-in provider itself still loads, and persists, the whole pool. ) annotations)AnyCallableOptional custom_entryc V^8dQhRRRR/#)entryrreturnbool)formats",entry_declares_credential..s4*nTmq3uyy|/A/Ar+B+H+H+J+JTm !AATF) isinstancedictr any_DECLARED_CREDENTIAL_KEYS)r sfrentry_declares_credentialr$se%#8E#AE/011 eT " n nss*nTm*nssnsns*nTm*n'nnrc$V^8dQhRRRRRR/#)rrowrr r r r )r s"rrrs!::C:::rca^RIHp\\VRR4;'gR4P 4pV3RlR4Uu0uFqD'gK RV 2kK ppV!V4;'gW59#uupi)zOwnership by provenance: ``hermes auth add`` (manual) rows, and rows seeded from the entry's own ``key_env``. Rows the built-in seeded from its registry env vars or auth files are foreign.)_is_manual_sourcesourcerc3<"TF7p\SPV4;'gR4P4xK9 R#5irrrs& rr%row_owned_by_entry..!s4)nSma#eiil.@.@b*A*G*G*I*ISmrzenv:)key_env api_key_env)agent.credential_poolr(rgetattrr)r&r r(r)nameown_envs&f rrow_owned_by_entryr2so8 h+11r 2 8 8 :F)nSm)nw)nrv}dV})nGw V $ 9 9(99xs  A1 A1c(V^8dQhRRRRRRRR/#)rpoolrpool_keyrr Optional[dict[str, Any]]r r )r s"rrr%s*C37OTWrc^RIHpHpVe<\T;'gR4P V4'g\ V4'gV#VP 4pVUu.uFp\Wb4'gKVNK pp\V4\V48XdV#V'gR#V!VPV4pVPVn V#uupi)aThe rows of ``pool`` the custom ``entry`` owns: the pool itself when it owns them all, else a view of them, or None when it owns none. ``custom:`` pools are seeded from the entry's own config and stay whole; so does any pool for an entry that declares no credential (as before). The view shares the loaded rows and token baselines, so persisting it merges into the stored pool under its lock and leaves the built-in's omitted rows on disk. )CUSTOM_POOL_PREFIXCredentialPoolNr) r.r8r9r startswithr$entriesr2lenprovider_persisted_token_pairs) r4r5r r8r9rowsr&ownedviews &&& rentry_scoped_poolrB%sI |s8>>r*556HIIQjkpQqQq <<>D CDS$6s$BSSDE C 5zSY  $-- /D"&"="=D K Ds C 6C Nc(V^8dQhRRRRRRRR/#)rbase_url Optional[str] provider_nameconfigOptional[dict]r $Optional[tuple[str, dict[str, Any]]]r )r s"rrr;s2 @ @ @,9 @JX @) @rc&aa^RIHoV'gR#SPV4o\W4;pe;SPV^,P R44pV'd VS8wdR#T#\ VV3RlSP V44R4#)z``(normalized_name, entry)`` of the configured custom entry that owns ``base_url``: by name first (a named entry's pool never serves another URL), else by URL. ``config`` is a frozen route's config, whose entry owns the endpoint even after a live edit.credential_poolNrDc3<"TF;wrS'gKSPVPR44S8XgK6W3xK= R#5i)rDN) _norm_urlr)rnecpurls& rr,custom_entry_for_endpoint..Hs>x$EDAQSQ]Q]^_^c^cdn^oQptwQw!$Es A"A A)agentrLrNnamed_custom_entryrnext_iter_custom_providers)rDrFrGnamed entry_urlrQrRs&&& @@rcustom_entry_for_endpointrZ;sz ,  ,,x C#M::GLLqj!9:  Y#%5t@5@ xB$=$=f$Exz~ rc$V^8dQhRRRRRR/#)rrFrErGrHr rIr )r s"rrrKs'TTmT^TW{Trcaa^RIHoV'dSPV4M \4oS'd'\ VV3RlSP V44R4#R#)z_``(normalized_name, entry)`` of the configured custom entry ``provider_name`` names, else None.rKc3n<"TF*wrSSPW4,'gK%W3xK, R#5iN)_custom_entry_name_aliases)rrOrPaliasesrQs& rr%named_custom_entry..Os0w$EDASUSpSpqrSvIvIv!$Es"5 5N)rTrL_requested_custom_name_aliasessetrVrW)rFrGr`rQs&&@@rrUrUKsS+BOb// >UXUZGCJ4wB$=$=f$Ewy} ~TPTTrc(V^8dQhRRRRRRRR/#) rr=rEr5rloadzCallable[[str], Any]r rr )r s"rrrRs0JJMJSJH\JadJrcV!V4pVeG\T;'gR4P4P4PR4'gV#\ V4p\ Y1V'dV^,4#R4#)a ``load(pool_key)`` for an auxiliary pool read (the key peek, credential recovery). A pinned ``custom:`` normalizes to its entry's slug, which may also be a same-named built-in's pool, so it gets the entry-scoped view; a bare built-in name keeps its whole pool.Nrzcustom:)rrlowerr:rUrB)r=r5rer4matchs&&& rpool_for_aux_providerriRsi >D |3x~~2.446<<>II)TT x (E TU1X IID IIrc$V^8dQhRRRRRR/#)rr=rErequested_providerr ztuple[bool, Optional[str]]r )r s"rrr]s'[[}[-[Tn[rc@a^RIHoW3Uu.uF4p\T;'gR4P4P 4NK6 pp\ ;QJdV3RlV4F 'gK RM RM!V3RlV44pV\ V3RlV4R43#uupi)zZ``(is_custom, custom: or None)`` for a runtime's provider / requested_provider pair.)r8rc3^<"TF"qR8H;'gVPS4xK$ R#5i)customNr:rvr8s& rr#_custom_identity..as(WJqhBB!,,/A"BBJs--TFc3X<"TFqPS4'gKVxK! R#5ir^rorps& rrrrbsSJq,,?Q2RJs* *N)r.r8rrrgr"rV)r=rkrq identitiesrnr8s&& @r_custom_identityru]sz89A8VW8V1#agg2,$$&,,.8VJW SWJWSSSWJW WF 4SJSUYZ ZZXs B'Bc(V^8dQhRRRRRRRR/#)rr=rErkrDr r6r )r s"rrres4 f f- f] f^k fqI frc\W4wr4V'd\W$4;pfR#VwrgRUu/uFqVPV4bK p pRV/V CR\V4/C#uupi)aCredential provenance of the entry that owns a custom runtime, for its ``_primary_runtime`` snapshot: matched in the config the route runs on (the frozen scope, else the profile's), the way resolution matched it. Names only, never a secret. None for a built-in or an unowned endpoint.Nr0r) provider_keyrDr,r-)rurZrr$) r=rkrDrnr0rh norm_namer r provenances &&& rruntime_entry_ownerr{ess$HALF 8HHeQI+ab+aaUYYq\/+aJb I e e-BD]^cDd eecsAc ,V^8dQhRRRRRRRRRR/#) rr=rErDrksnapshotr6r rr )r s"rrrqs=```'4`JW`&` `rc^RIHpHpHp\ W4wrxV'gV!W4p V 'd V!V 4#R#T;'g/P \ 4p VeV'd V 'gR#V 'd V R,V 3M \W4p V 'd)V'g V 'dV!V !;'gR.^,MV!W4p V 'd(\V!V 4Y'dV ^,4#R4#R#)aThe pool for a runtime snapshot's identity. A custom runtime (``custom`` or ``custom:``) is the entry's, so it gets the entry-scoped view; a built-in identity loads its whole pool. Ownership and the pool key come from the runtime identity, never from the pool slug, which both share: a ``custom:`` identity keys on its own entry, not the first entry on its URL. ``snapshot`` is the ``_primary_runtime`` being restored: the owner it recorded wins over live config, so an edit can't reassign the endpoint or drop the entry's declared credential. A named identity whose snapshot recorded no owner gets None and keeps the snapshot's own credential.)_pool_keys_for_custom_entry load_poolresolve_runtime_pool_keyNr0r) r.rrrrurSNAPSHOT_OWNER_KEYrZrB) r=rDrkr}rrrrnr0keyownerrhs &&&& rload_runtime_poolrqsgf#HALF &x:!$y~.$. ^^ !3 4EU&+U6]E "1J81ZE>CQV & . 6 62$ :]uv~^JCRU Ys^Se%( N_ N_[__r)api_keyr,r-key_cmd)NNr^)__doc__ __future__rtypingrrrr#rr$r2rBrZrUrirur{rr rrrs[#**L#o:, @ TJ[ f``r