+ jHj|^a0t$Rt^RIHt^RIt^RIHtHtHtH t H t H t H t H t HtHtRRltRAtR]R&RBtR]R &R R ltR R ltRRltRCRRllt]!R4RRl4tRRltRRlt]!R4RRl4t]!4RRl4tRRlt0RDmtR R!ltR"R#lt R$R%lt!]!4R&R'l4t"R(R)lt#R*R+lt$R,R-lt%R.R/lt&R0R1lt'R2R3lt(R4R5lt)]#]$]%]&]'])3t*R6R7lt+]!4R8R9l4t,]!R:R;4R<R=l4t-]!R>R;4R?R@l4t.R#)EzConfiguration-file checks for hermes doctor: .env, config.yaml validation, drift, deprecations. Split out of ``hermes_cli/doctor.py``.) annotationsN) Finding_fail_and_issue_section check_bool check_fail check_infocheck_ok check_warn doctor_check warn_on_errorc V^8dQhRRRR/#)contentstrreturnbool)formats"=/home/ubuntu/.hermes/hermes-agent/hermes_cli/doctor_config.py __annotate__r s>>c>d>ca^RIHp\;QJdV3RlV4F 'gK R# R#!V3RlV44#)zIReturn True when ~/.hermes/.env contains provider auth/base URL settings.)_PROVIDER_ENV_HINTSc3,<"TF qS9xK R#5iNr).0keyrs& r +_has_provider_env_config..s=)<#g~)r+r,r-osenvironrr5) r&r2r;r<r=r>findingsr?r effective_envr6s && r%collect_relay_plugin_cutover_findingsrF9slmm&(H+5j$+G+GjnnY'TG'4   8Y9O PR P*#/2455X2Z[ PR RB'MM2M4LMD(RZZ^^D-A-M&(jj&6 #N }  !92> ? E E G G!A-!PR!P`ay`z{eef!PR R ORRs (E)E c$V^8dQhRRRRRR/#r9r)rs"rrrQs"kezrcJ\V4\V4,p\W4pW#,pV'g\R4V#VF*wrV\ RV 2RV R24\ RV RV R24K, VF)wrV\ RV 2R V R 24\ R V R V 24K+ V#) zEmit non-failing doctor warnings for deprecated config keys and env vars; returns the findings reported. Does not mutate config/env and does not append to the blocking ``issues`` list.z%No deprecated config keys or env varsz Deprecated: z(use z instead)zReplace u → z$ (warn-only; not auto-migrated here)zBreaking Relay migration: ()zMigrate z: )r0r7rFr r r)r&r2 deprecated relay_cutoverrDlegacyr/s&& r report_deprecated_config_and_envrNQs0 ;>YZa>bbJ9*NM)H 89)\&*eK= ,JKXfXU;-7[\] * -/x8Ak]!:LMXfXR }56 - OrzRelay plugin check failed: {e}c$V^8dQhRRRRRR/#r should_fixrfrrNoner)rs"rrrds&SSTSgS$Src^RIHpV!4pTP'g\ R 4R#TP'd)\ R R4TPPR4MBTP'd\ M\pTP'd T!R R 4MT!R 4\.TPOTPOTPO54R# \d)pTPR8wdh\ R4Rp?R#Rp?i\ dPp\ RR4\RYDP344TPPR4Rp?R#Rp?ii;i)z\Name the plugins.toml files Relay applies to Hermes, including ones outside the Hermes home.)resolve_plugin_sources nemo_relayz,NeMo Relay is not available on this platformNz,Relay plugin configuration could not be readz#(Hermes runs without Relay plugins)c30"TF qfKVxK R#5irr)rcauses& rr'_check_relay_plugins..psW-AE%%-As zBFix the Relay plugin configuration shown under NeMo Relay Plugins.zNo Relay plugin files foundz+Relay will reject this plugin configurationzRelay plugins enabledz1(applies to every profile a Hermes process hosts)z)Relay plugin files found, nothing enabled)agent.relay_runtimerUModuleNotFoundErrorr6r Exceptionr _relay_info_lines __cause__ manual_issuesappend config_pathserrorswarningsr@)rQrRrUsourcesexcreports&& r_check_relay_pluginsrgcs; (*    ./~~~@Bgh cd '///X ??? *,_ ` > ?Q,,Qw~~Q@P@PQR/  88| # ?@ AChiWc==-AWW cd s*C E''D  E'E'AE""E'cV^8dQhRR/#rrrSr)rs"rrrseeerc VFIp\RPR\V4P4P 4444KK R#)z`Print Relay paths and messages as doctor detail rows, keeping multi-line parser errors indented.z c3T"TFqP4'gKVxK R#5ir)r5)rparts& rr$_relay_info_lines..s"c4RDV`V`Vb444Rs( (N)rjoinrr5 splitlines)lineslines& rr]r]s7:??"cCIOO4E4P4P4R"ccdrcV^8dQhRR/#rir)rs"rrrs L LT LrcRp\R4;_uu_4^RIHpVP4pRRR4VfR#\ XP 44\ VP 44r2\RV RV RV 24\PPRR4P4'd\RV 24R#R# +'giL;i) uReport the active managed scope (resolved dir + pinned key counts); silent when none. A HERMES_MANAGED_DIR override is surfaced too — a redirected scope is the documented foot-gun (docs/design/managed-scope.md §7).Nr4) managed_scopezManaged scope active: z config key(s), z env key(s) pinned by HERMES_MANAGED_DIRz'managed dir set via HERMES_MANAGED_DIR=) r hermes_clirtget_managed_dirlenmanaged_config_keysload_managed_envr rBrCr-r5r) managed_dirrtn_cfgn_envs rmanaged_scope_checkr~sK r  ,#335  }88:;SA_A_Aa=b5 %eW,G27;=dh|~B}CCHgIJJ HHOOF GJ   ' ' ) ):;dV-./  OO ! !$ ! > NN r""X.# ~dV51 2 A B GGqLG 9 : HHOO? @'" =(()(F;:F;> G c V^8dQhRRRR/#)rcfgr,rz(tuple[set, list, object, object, object]r)rs"rrrsJJTJ&NJrc a \4pR;p;p;rE.p\R4;_uu_4^RIHpHp\VP 440R m,pRRR4\R4;_uu_4^RIHp^RIH pH pH p\R4;_uu_4V!V4pRRR4RRR4VPR4p \V \4'd0^RIHo VP!V 3RlV P#444VeTMR Fp \V \4'd3\%V PR 4;'gR4P'4MRp V 'gKWTP!T!T \%V PR 4;'gR4P'444K WW#V3# +'giELg;i +'giEL3;i +'giEL?;i) zReturn (known ids, custom providers, resolve_auth, normalize, resolve_full); any import failure leaves the matching resolver as None so validation degrades to "unavailable" rather than crashing doctor.Nr4)PROVIDER_REGISTRYresolve_provider)get_compatible_custom_providers)custom_provider_aliasesnormalize_providerresolve_provider_full providers)is_provider_enabledc3<"TF_wr\V4P4'gK&S!V4'gK6\V4P4P4xKa R#5ir)rr5lower)rr6prov_cfgrs& rr&_known_provider_ids..sOME[>4D )/.A(.K/SY__&,,..E[s#A* A*/A*r6 provider_key>moaautocustom openrouterr)setr hermes_cli.authrrkeysrrhermes_cli.providersrrrr-r+r,rupdaterrr5) rknown resolve_auth normalize resolve_fullaliasescustom_providersrruser_providersrr6rs & @r_known_provider_idsrsE8<sC   WW[)N.$''9 M^EYEYE[M M%,%8!b@7A%7N7Ns599V$**+113TV 4 LLs599^+D+J+J'K'Q'Q'ST UA L\ II#         s/+F1.$G G G1 G  G  G G* c V^8dQhRRRR/#)rruntime_providerrrrr)rs"rrrs    rcaVR8XdA^RIHo\;QJdV3RlR 4F 'gK R# R#!V3RlR 44#^RIHpHpVP V4pV'dq\VRR4R 8Xd_V!V4;'g/p\VP R 4;'g+VP R 4;'gVP R 44#R#) uOnly API-key providers in PROVIDER_REGISTRY are checked — OAuth/SDK/custom providers have their own checks elsewhere, and get_auth_status() returns a bare {logged_in: False} for anything it doesn't dispatch.r) get_env_valuec3v<"TF.p\S!V4;'gR4P4xK0 R#5ir4N)rr5)rkrs& rr,_provider_has_credentials..s1i@h13}Q'--2.4466@hs99TF)rget_auth_status auth_typer4api_key configured logged_in)OPENROUTER_API_KEYOPENAI_API_KEY) rrr!rrrr-getattrr)rrrpconfigstatusrs& @r_provider_has_credentialsrs<'3si@hissisisi@hiiiB##$45G77K4 A !1288bFJJ|,`` ;0G``6::V_K`aa rc V^8dQhRRRR/#rrlistrrSr)rs"rrrs6G6G6G6Grc "^RIHpV!V4pVPR4;'g/pVPR4;'gRP4pVP 4pVPR4;'gVPR4;'gRP4p\ V4wrrp \ V4p V'dV0M \ 4pV eTMR%FpV PV !V44K T;ppV'dnVR&9dgV eV !V4pVPV4V eEV !WcPR 4V 4pVe VPMRpVPV0R0, 4V'dcVR8wd\VeV'dPW,'gBV'dR P\V44MR p\R V R 2RV R2R V RV R2V4\T;'g T;'gR4P4P 4pV\9;'gVR8H;'gVP!R4p\VPR4;'gR4P4pVR8Xd'V'd^RIHpT;'gV!VR4'*pV'dCRV9d<V'd4V'g,\'RV RV R2R4VP)RV RV R24V'd\VR'9dS^RIHp\/R4;_uu_4\1V4'g\R V R2R V R!2R"V R#V R$2V4RRR4R#R#R# \dEKi;i \dTpELMi;i +'giR#;i)(zQValidate model.provider / model.default against the provider registry (raw file).read_user_config_rawmodelproviderr4defaultNrrr, z (unavailable)zmodel.provider 'z' is not a recognised providerz(known: rJz' is unknown. Valid providers: z>. Fix: run 'hermes config set model.provider 'zcustom:base_urlz openai-api)base_url_host_matcheszapi.openai.com/zmodel.default 'z,' uses a vendor/model slug but provider is ''z=(vendor-prefixed slugs belong to aggregators like openrouter)z,' is vendor-prefixed but model.provider is 'zH'. Either set model.provider to 'openrouter', or drop the vendor prefix.rz%' is set but no API key is configuredz (add it to z/.env or run 'hermes setup')z#No credentials found for provider 'z7'. Run 'hermes setup' or set the provider's API key in zI/.env, or switch providers with 'hermes config set model.provider 'r>rr)rr)rrr-r5rrraddr\idrrnrrr_VENDOR_SLUG_PROVIDERS startswithutilsrr r`r rr r) config_pathrrr model_section provider_rawr default_modelknown_providersrrrrvalid_provider_idsacceptknown_providerrcatalog_provider provider_def known_list policy_idaccepts_vendor_slugmodel_base_urlrrs&& r_validate_model_configrs7 { +CGGG$**M!%%j177R>>@L!!#H"&&y1UU]5F5Fw5OUUSU\\^MObcfOgLO| _-#hZF-6-B/J   " "9^#< =K +32'H$66  # ,#/#9  +,  #'''+2FHXYL2>2J|PT  MM+,v5 6H&,<,Dbhb}b};JTYYvo67P_ *<.8VW[cdncoopYq*<.8WXbWcdWXY_ a$>>(8>>B?EEGMMOI#'==yyhAVyyZcZnZnoxZy**:6<<"=CCENL ^/1pp9N~_o9p5p -)DW_]O3_`l_mmnoR T  6bcobpq^^ _,4FF* 2  ,-=>>"23C2DDi j"-dV3O P"EFVEWX..2V3|!~@FG GA    ,#+  ,4  s0 MM)/M= M&%M&) M:9M:= N c V^8dQhRRRR/#rr)rs"rrr4sFFDFTFrca^RIHp^RIHp^RIHpV!V4P R4p\V\4'dVP4MRUUu/uFfwrg\V\4'gK\VP R4;'gR4P4P4R9gKdWgbKh ppp.p \VP44Fwp oV3RlR4wrrV!WWR 7pTP R 4'gRTP R4'g;\#R T R T R2RTP R4 RTP R4 R24KT P%T RTP R4 RT!\TP R4;'gR44;'gR 24K V 'd$\'RRP)V 4,4R#R#uuppi \dop\R T R T R 2R\T4P!4^, R2R T R T R\T4P!4^, RT R2 T4Rp?EKRp?ii;i)uResolve every routed ``auxiliary.`` block through the real entry point the tasks use and report the ones that fail — an unresolvable block otherwise silently runs the task on the main model (#116055).r)resolve_runtime_provider)base_url_hostname auxiliaryrr4c3<"TFAp\SPV4;'gR4P4;'gRxKC R#5ir)rr-r5)rrblocks& rr-_validate_auxiliary_config..?sI.M`LZ[c%))A,2D2D".E.K.K.M.U.UQU.U`Ls!A A  A rr) requested target_modelexplicit_api_keyexplicit_base_urlz auxiliary.z .provider 'z' does not resolverIrJz' cannot be resolved (z\); the task silently runs on the main model. Fix the provider name/credentials in auxiliary.r*Ncommandz' resolved without credentialsz @ u→@?z!auxiliary task routing resolves: rr)r4r)rrrr)rrhermes_cli.runtime_providerrrrr-r+r,rrr5rrr\rror r`r rn)rrrrrauxr6rroutedoktaskrrrrruntimeres&& ` r_validate_auxiliary_configr4s7D' { + / / \]abcjcncnoyczb{{~@G@K@KLV@WXXY`Z [  TF#gkk*56a8I#gkkZdNeNkNkikJl8m8t8tqt7uvw. 4tyy}DE !s  jk(CUVZ[\_`c\d\o\o\qrs\t[uuvXw(k(CYZ]^aZbZmZmZopqZrYstoosnttuwx~ @   s1G35G3%G3<G36 G99 I2A"I--I2c$V^8dQhRRRRRR/#rPr)rs"rrrPs&@@4@G@@rc^RIHpHpHpVR, pVP 4'ds\ V R24\ R4;_uu_4\WQP4RRR4\ R4;_uu_4\WQP4RRR4R#VR, P 4'd\ R4R#V'dL^R I H pV!WSR , 4p\ R T R V'dR MR 24V;P^, un R#\RR4R# +'giL;i +'giR#;i)zVconfig.yaml presence (project cli-config.yaml as fallback); model/provider validation.r config.yamlz/config.yaml existsz(Could not validate model/provider configNz)Could not validate auxiliary task routingzcli-config.yamlz-cli-config.yaml exists (in project directory))seed_config_filezcli-config.yaml.examplezCreated z/config.yaml from defaultszconfig.yaml not foundz(using defaults))r rrrrr r rrrrrrr )rQrRrrrrr from_templates&& r_check_config_filerOsBA -KD6,-. E F F "; 9G F G G &{HH =H G * * 2 2 4 4@A 6(E^6^_ 8D6!3Q^4Mdn3opq 1 *,>?G F G G Gs D'<D:' D7 : E c$V^8dQhRRRRRR/#rrRrrQrrrSr)rs"rrres&@@W@$@@rc^RIHpHpV!4wrVRV RV R2R3p\WV8RV R2V4'dR#V'gVPP R4R#V!R R R 7\ R 4V;P^, unR# \d5p\R T 24TPP R 4Rp?R#Rp?ii;i))check_config_versionmigrate_configzConfig version outdated (vu → vrJz(new settings available)zConfig version up to date (vNz=Run 'hermes doctor --fix' or 'hermes setup' to migrate configF) interactivequietz!Config migrated to latest versionzAuto-migration failed: z$Run 'hermes setup' to migrate config) rrrrrr`r rr\r ) rRrQrrr current_ver latest_veroutdatedmig_errs &&& r_drift_config_versionr"esF24K,[M |1MOijH++/KK=XY-Z\dee  WX@5645 1  @,WI67 >??@s.B C )CC c$V^8dQhRRRRRR/#rr)rs"rrrws!g4rc^RIHpHpV!V4pR Uu.uF+qfV9gK \WV,\4'gK)VNK- ppV'gR#\ RRP V4 2R4V'gVPPR4R#VPR4p\V\4'gE\V\4'd)VP4'dRVP4/M/;qR&VF1pVPV4p VPV4'dK-WV&K3 V!W%4\R 4V;P^, unR#uupi) zSRoot-level ``provider``/``base_url`` belong under ``model:`` (raw-file diagnostic).)atomic_config_replacerNzStale root-level config keys: rz"(should be under 'model:' section)uOStale root-level provider/base_url in config.yaml — run 'hermes doctor --fix'rrz1Migrated stale root-level keys into model section)rr)rr%rr+rr rnrr`r-r,r5popr r) rRrQrr%rr&rstale_root_keys raw_modelvalues &&& r_drift_stale_root_keysr*ws%M%k2J":q":Q:oqR\]g]jloRpqq":Oq / /0J/KLNrs  ijw'I i & &LVW`beLfLfktkzkzk|k|9ioo6G*HCE E w' q!}}Q aL+2 @AGGqLG#rsE%E%E%c$V^8dQhRRRRRR/#rr)rs"rrrs& U U7 U Ud Urc^RIHp^RIHpHpHpV!V4pVP R4p\V\4'dVP R4MRp V fVP R4p V!4P R4p V e:V e6\V 4P4\V 4P48XdR#\RV RV R 2R 4V'gVPPR 4R#V!R4'd+\R V R 24V;P^, unR#\R4VP PRV R24R#)aA stale HERMES_MAX_ITERATIONS in .env shadows agent.max_turns in config.yaml. The setup wizard used to dual-write the budget. The gateway bridge derives HERMES_MAX_ITERATIONS from agent.max_turns, but if it bails on an earlier config-parse error the .env value silently wins. Read the .env FILE (load_env), not get_env_value/os.environ, which the bridge may have overridden already. r)load_envrremove_env_valueagent max_turnsNHERMES_MAX_ITERATIONSzHERMES_MAX_ITERATIONS=z! in .env shadows agent.max_turns=z in config.yamlz0(stale ghost from an earlier `hermes setup` run)uUStale HERMES_MAX_ITERATIONS in .env shadows config.yaml — run 'hermes doctor --fix'zKRemoved stale HERMES_MAX_ITERATIONS from .env (config.yaml agent.max_turns=z is now authoritative)z0Could not remove HERMES_MAX_ITERATIONS from .envz4Manually delete the HERMES_MAX_ITERATIONS line from u7/.env — config.yaml agent.max_turns is authoritative.)r rrr-rr.r-r+r,rr5r rr`r rr_) rRrQrrr-rr.r& agent_cfg cfg_max_turns env_ghosts &&& r_drift_max_iterations_ghostr5s='SR%k2Jw'I2>  " "3 ' - - //rc$V^8dQhRRRRRR/#rr)rs"rrrs'}}g}4}QU}rc ^RIHpV!V4pVPR4p\V\4'gR#VPR4p\V\ 4'dVP 4MR Uu0uF&p\V\ 4'gK\V4kK( ppVFp \V \ 4'd"\V 4'd\V 4V9dK<\V PR4;'gR4P4;'g \V 4p \RV R2R 4VPPR V R \V 4 R 24K R#uupi)uLegacy ``custom_providers`` list entries with no ``providers:`` twin (raw-file diagnostic). The v11→v12 migration (config_migrations._migrate_to_12) moves the list into ``providers:`` ONCE, at the version bump; an entry hand-written afterwards lives on in the retired list store (dual-read by the picker and the Custom Endpoints page) instead of the ``providers:`` map every other surface edits. rrNrr6r4zLegacy custom_providers entry 'z' has no providers: twinzN(still read from the retired list store; every other surface edits providers:)zMove custom_providers entry 'z7' into config.yaml providers: as `providers..api: uV` and delete it from the list — the v12 list migration ran once and does not re-firer) rrr-r+rr,valuesrKrr5r r_r`) rRrQrrr&rMretwinsrlabels &&& r_drift_legacy_custom_providersrRs77%k2J ^^. /F fd # #{+I>HTX>Y>Y (8(8(:_a(a z(a!fpqrtxfy ]1 (aE z%&&mE.B.BmTYFZ^cFc EIIf%++,224LL e8L4UG;STc e +E72iU#$$z | }  {s 3E%E%cV^8dQhRR/#rir)rs"rrrs==t=rcp^RIHp^RIHpT!V!4;'g/4pT'gR#TFXwrEpTP R4;'gRpTR 8XdR T R 2pMTR 8Xd R T RT R2pM RT RT R2p\ RT 2T4KZ R# \dp\ RRT R24Rp?R#Rp?ii;i)aStale per-install channel records (``update.installs.``). Same report-don't-delete posture as the state sweep. Three shapes (hermes_cli.update_channel.stale_channel_records): a record whose path holds a DIFFERENT install now (``replaced``), a record whose path is gone (``missing``), and a record no live install-state folder claims (``unclaimed``). Keep-on-doubt: doctor names the config key, the user removes it. r)stale_channel_recordsz!Channel-record hygiene unreadablerIrJNpathz replacedz(the install at u4 is a different install now — stale channel entry)missingz (nothing at u$ — safe to remove update.installs.z(no live install claims zStale channel record: )rrhermes_cli.update_channelrUr\r r-) rrUstaleresha16recordreasonrecordeddetails r_check_channel_record_hygiener`s1C%km&9&9r: !&v::f%44 Z 'z1efF y #H:-QRWQXXYZF/w6Z[`ZaabcF+E73V<"' 6!C5 CsBB B5B00B5c$V^8dQhRRRRRR/#rPr)rs"rrrs!$$D$W$$rc^RIHpVR, pVP4'gRpV'd\M\3F(p\ R4;_uu_4V!WV4RRR4K* \ 4R# +'giKI;i)zConfig version, stale root keys, HERMES_MAX_ITERATIONS ghost, deprecations, structure. Each step is independent and best-effort: a failure in one never hides the next. )rrNr4)r rr_CONFIG_DRIFT_STEPSr:r r`)rQrRrrsteps&& r_check_config_driftresm . -K      '2#9L8NN 2    , O "#   s  A55 B zxAI retirement check skippedz({e})c$V^8dQhRRRRRR/#rPr)rs"rrr!s& F Fd Fw F4 Frc^RIHp^RIHpHpHpV!V!44pV'g\ R4R#VFp\V!V44K \RV 24VPPR\V4 RV 24R#)rr)MIGRATION_GUIDE_URLfind_retired_xai_refs format_issuezNo retired xAI models in configNzMigration guide: zUpdate u7 retired xAI model reference(s) in config.yaml — see ) rrhermes_cli.xai_retirementrhrirjr r rr_r`rx)rQrRrrhrirj retired_refsrefs&& r_check_xai_retirementrn s-bb(7L 23<$%"#6"789OOWS%6$77npCoDEFrzSession reset check skippedc$V^8dQhRRRRRR/#rPr)rs"rrr/s! 6 6T 6g 6$ 6rc^RIHp^RIHpHpHpV!V!44pVf\ R4R#V!4'd"\ V^, RV^, R24R#\V!V!4VPPV!V!4R#)r)load_user_config_effective) format_noticereset_plugin_enabledretired_reset_policyNz-No idle/daily session_reset policy configuredz.mode: z' is applied by the session reset plugin) hermes_cli.config_effectiverq#hermes_cli.session_reset_retirementrrrsrtr r r_r`)rQrRrqrrrsrtfounds&& r_check_retired_session_resetrx.srFmm !;!= >E }@A   E!H:WU1XJ.UVW=%() }e45r))displaytool_progress_overrideszdisplay.platforms) delegationmax_async_childrenz"delegation.max_concurrent_children) compression summary_modelauxiliary.compression)r}summary_providerr)r}summary_base_urlr))HERMES_TOOL_PROGRESSuSdisplay.tool_progress in config.yaml — ignored/unsupported since config floor v12)HERMES_TOOL_PROGRESS_MODEz$display.tool_progress in config.yaml) TERMINAL_CWDterminal.cwd in config.yaml) MESSAGING_CWDr)QQ_HOME_CHANNELQQBOT_HOME_CHANNEL)QQ_HOME_CHANNEL_NAMEQQBOT_HOME_CHANNEL_NAME)NN> rnousnvidiakilocodelmstudio deepinfra fireworksr huggingface ai-gateway opencode-zen)/__conditional_annotations____doc__ __future__rrBhermes_cli.doctor_reportrrrrrrr r r r r"r#__annotations__r$r0r7rFrNrgr]r~rrrrrrrrr"r*r5r:rErKrRrcr`rernrx)rs@rrs*#  >=951YS0$./S0S>e L./505"AA@J8 6GrF6@@*@$0 UF/ $0 }413NPceu" =>$$",g6 F7 F+W5 66 6r