+ jHj1xa0t$Rt^RIHt^RIt^RIt^RIt^RIt^RI t ^RI H t H t ^RIHtHtHt^RIHtHt^RIHtHtHt^RIHt]P6!R4t]!0Rm4tR ]R &R RR RR R/RRllt RRlt!!RR]"]#,4t$RRR/RRlllt%] PL!4t'RRRR/RRllt(RRlt)RR lt*]PVPX3R!R"llt-R#R$lt.R%R&lt/R'R(lt0RR/R)R*llt1RR/R+R,llt2R-R.lt3]PVPX3R/R0llt4R1R2lt5R3R4lt6R5R6lt7R7RR8R/R9R:llt8R;R<lt9R8R/R=R>llt:R?R@lt;RARBltRHRIlt?RJRKlt@RLRMltARRNROlltBRPRQltCRRRSltDRTRUltERVRWltFRXRYltGRZR[ltHR\R]ltI] !R^R_44tJR`RaltKRbRcltLRdReltMRfRgltNRhRiltORjRkltPRlRmltQRnRoltRRRpRqlltSRRrRRsRRtRCRuRRvRRwRRRRxRRyRRzR/ R{R|llltTR}R~ltURRRlltVRRRlltWRRltXR#)aZPicker provider listing: credential discovery, curated/live model lists, row builders for list_authenticated_providers / list_picker_providers, and the parallel cache prefetch. Split out of ``hermes_cli/model_switch.py``; every moved name is re-imported there so ``hermes_cli.model_switch.`` keeps resolving (and monkeypatching) as before.) annotationsN) dataclassfield)AnyListOptional)build_command_token_providermaterialize_probe_api_key)custom_provider_aliasescustom_provider_slug get_label)base_url_host_matcheszhermes_cli.model_switchzfrozenset[str]_UNCAPPED_PICKER_PROVIDERSapi_modeheaderscredential_identityc 0V^8dQhRRRRRRRRR R R R /#) api_urlstr model_ids list[str]rz Optional[str]rzOptional[dict[str, str]]r str | NonereturnNone)formats"F/home/ubuntu/.hermes/hermes-agent/hermes_cli/model_switch_providers.py __annotate__rs<' ' ' &' 5B' %' CM' Y]' cX^RIHpV'd V'gR#^RIHpHpV!4pVP R4;'g.p \ V \4'gR#VP4PR4P4p Rp V Fp \ V \4'gKV P RR4;'gV P R R4P4p V PR4P4V 8wg\V 4V8wdKVeV!V 4V8wdKVe\V R R 4^,V8wdK\W4'gKVUu/uFq/bK upV R &R V R&R p K V 'dWR&V!V4R#R#uupi \dR#i;i)uPersist a successful ``/v1/models`` probe into the matching ``custom_providers`` entry. Matches by base_url (slash-normalised), api_mode and headers. A failed config write is swallowed — the picker still shows the live models for this session.)_extra_headers_from_configN) load_config save_configcustom_providers/Fbase_urlurlkey_env api_key_envmodelsTmodels_discovered)hermes_cli.model_switchr!hermes_cli.configr"r#get isinstanceliststriprstriplowerdict_entry_api_mode_entry_credentials_discovered_catalog_stale Exception)rrrrrr!r"r#cfg providersnorm_urlchangedentry entry_urlmodel_ids&&$$$ r!_save_discovered_models_to_configrAsC ) >mGG./552 )T** ==?))#.446EeT**:r2JJeiir6JQQSI$**,8OE>r5rrrboolr)rs"rrrGs!TiDrcVPR4p\V\4;'dVPR4RJpVPR4RJ;'gTp\V\4'd#T;'dT;'g\V4V8g#\V\4'dF\;QJdRV4F 'gK RM RM !RV44'*;'dW!8g#R#)ulWhether a live probe may overwrite ``entry["models"]``. A ``models`` mapping or list of dicts is user-curated per-model metadata — never replaced. A mapping Hermes itself discovered (entry flag or legacy in-mapping sentinel) is ours to refresh, but only when stale; a legacy-shape entry is always rewritten so the save migrates it to the clean entry-level flag.r+__discovered_model_catalog__Tr,c3B"TFp\V\4xK R#5iN)r0r5).0ms& r ,_discovered_catalog_stale..Ts=Hqz!T**HsF)r/r0r5r1any)r>rexistinglegacy_discoveredentry_discovereds&& rr8r8Gsyy"H"8T2kkx||Db7cgk7kyy!45=RRAR(D!!VV%6%U%U$x.I:UV(D!!3=H=333=H===WW(BWW rc]tRt^XtRtRtR#)_NativePickerModelListzBA successful native catalog, including an authoritative empty one.rN)__name__ __module__ __qualname____firstlineno____doc____static_attributes__rrrrQrQXsLrrQcacheTc<V^8dQhRRRRRRRRRR R R R R RRRR/ #)rapi_keyrrrnative_catalog_providerpreserve_native_modelsrCrzdict[str, str] | NonetimeoutfloatrrrXrzlist[str] | Noner)rs"rrr\sqDDDD DDDD9<DDVZDD "DD49DDDD,0DDSUu0uFpVP4kK upoV!V3R l4SPS4S'dV'gV!R 4R S 2SR&T !SSS;'gRR7pV'd S;'gRMSoV'dCS'dR#RVVVV3RllpV'dV !SSSSSVV R7MV!4pVeV#V !S4oV'dT MT !SSSSSR7pV'g V'dV#R#uupi)zDFetch picker models with native Ollama and cached generic discovery.)_get_ollama_native_headerscached_fetch_api_modelsfetch_api_models)_OLLAMA_LOCAL_MODELS_CACHE_TTL_normalize_openai_base_urlfetch_ollama_local_models should_use_ollama_native_catalogc <<\\S4SSSSSSRR7#)F)rX)_fetch_picker_live_modelsr )rZrrrr[r\r]sr+_fetch_picker_live_models..ms$!:)'2G=T&(%"Qr)r]rr fetch_models)rZcV^8dQhRR/#rrrr)rs"rr/_fetch_picker_live_models..__annotate__ss++t+rcn<\S4F$pV!VP44'gK!SVK& R#rG)tupler4)predkeycandidate_headerss& r_drop(_fetch_picker_live_models.._dropss,*+CCIIK  %c*,rc3F"TFqP4R8HxK R#5i) authorizationNr4)rHrrs& rrJ,_fetch_picker_live_models..xs"]mc99;/#Ams!TFc<VS9#rGr)klowereds&rrirj{s W rc VR8H#)rwr)r{s&rrirj~s _,rzBearer AuthorizationN)rcV^8dQhRR/#)rrz_NativePickerModelList | Noner)rs"rrrns N N'D Nrc<<S!SSSR7pVfR#\V4#))r]rN)rQ)r+rreresolved_headersr]s r_probe_native_catalog8_fetch_picker_live_models.._probe_native_catalogs'.wQabF!>4 M/Ef/M Mr)r]rrrk ttl_seconds)r]rr) hermes_cli.modelsr`rarbhermes_cli.models_localrcrdrerfcallablerLr4update)rZrr[r\rr]rrXr`rarbrcrdrfrtcaller_has_authorizationrM use_nativer native_modelsgeneric_modelsrsrer|rsfffffff$ @@@@rrhrh\s hg& WgwQQR R 37GL++ #s"]gmmY[m"]sss"]gmmY[m"]]4;>#G< $%  )/ ,-/6wi-@/*12C2K2KtMJ4>(00DG ! N N" $'7X2@^ `01   $ ,W516-CtCM=s2F,raw_pool_presentF for_pickerc(V^8dQhRRRRRRRR/#)rproviderrrrCrrr)rs"rrrs*4]anrrc^RIHpV!V4pVP4'dT;'gVP4#V# \dT#i;i)uWhether *provider* has a credential that can be selected now. Legacy opaque ``auth.json`` pool values that do not deserialize into ``PooledCredential`` stay visible (``raw_pool_present``); a real pool's availability is authoritative — an all-exhausted/dead pool is not authenticated. ``for_picker`` (human-facing pickers) also accepts a pool whose entries are all in cooldown: a rate-limited provider is not a signed-out one, and limits are per-model for many providers, so another model may still work.) load_pool)agent.credential_poolrhas_credentials has_availabler9)rrrrpools&$$ r_credential_pool_is_usablersa 3"    ! !55!3!3!5 5 "     s#AAA AAcV^8dQhRR/#)rrzOptional[_threading.Thread]r)rs"rrrs  $? rca^RIHo\P4'dR#\P 4RV3Rllp\ P !VRRR7pVP4V#)aOWarm ``provider_models_cache.json`` in a daemon thread by running the picker path once. The first ``/model`` open (or the first after the 1h TTL) otherwise blocks ~1-2s on serial live ``/v1/models`` fetches. Fire-and-forget, at most once per process, fully exception-isolated. Returns the thread (for tests) or None if already warmed.list_authenticated_providersNcV^8dQhRR/#rmr)rs"rr0prewarm_picker_cache_async..__annotate__s G G4 Grc <^RIHpV!4pS!VPVPVPVP VP VP;'g.R7R# \d\PRRR7R#i;i))load_picker_context)current_providercurrent_base_url current_modeluser_providersr$excluded_providerszpicker cache prewarm failedTexc_infoN) hermes_cli.inventoryrrrrrr$rr9loggerdebug)rctxrs r_warm)prewarm_picker_cache_async.._warms} G @%'C (!$!5!5H\H\!//@R@R!$!5!5# #9#?#?R  A  G LL6L F GsAA&A&&"B  B Tzpicker-cache-prewarm)targetdaemonname)r-r_picker_prewarm_doneis_setset _threadingThreadstart)rtrs @rprewarm_picker_cache_asyncrsX E""$$ G G t:PQAGGI Hrc V^8dQhRRRR/#)rprovider_slugsrrrr)rs"rrrs(4(4y(4T(4rca ^RIHpHpHpHpHo \ P !4p.pV!4pVFOpV!V4p V 'gKV!VPV 4V!V 4VV R8HR7eK>VPV 4KQ V'gR#^RI p RV 3Rllp V PP\^\V44RR7;_uu_4p \V PW44RRR4R# +'giR#;i) uIFetch the provider catalogs the serial picker loop would block on, in parallel. Only providers the serial call cannot serve from disk are fetched — missing, fingerprint-mismatched, or hard-expired entries. TTL-expired non-empty rows are served inside the stale-serve window while revalidating off-thread, and an empty local-ollama catalog is authoritative inside its own short native TTL, so prefetching either trades a non-blocking serial read for a parallel fetch the picker waits on. Persistence is ``cached_provider_model_ids``'s own locked write; workers add none of their own.)_credential_fingerprint_disk_serve_tier_load_provider_models_cache_normalized_cache_slugcached_provider_model_idsollama) is_ollamaNc V^8dQhRRRR/#rslugrrrr)rs"rr8_prefetch_provider_models_parallel..__annotate__srcB<S!VRR7R# \dR#i;i)T) force_refreshN)r9)rrs&r _fetch_one6_prefetch_provider_models_parallel.._fetch_ones$  %d$ ?   s  zmodel-cache-prefetch) max_workersthread_name_prefix)rrrrrrtimer/appendconcurrent.futuresfuturesThreadPoolExecutorminlenr1map)rrrrrnow stale_slugsrXrrr concurrentrexecutorrs& @r"_prefetch_provider_models_parallelrs;; ))+C  K ' )E$T* 3#EIIcN4KC4PRU.1Xo?BFG   s #      . .3{+,AW /    X\\* 23    s C77 D cV^8dQhRR/#rrrCr)rs"rrrs0040rcxa\;QJdV3RlV4F 'gK R# R#!V3RlV44#)c34<"TF pS!V4xK R#5irGr)rHevread_envs& rrJ_any_env..s/hx||hTFrL)env_varsrs&fr_any_envrs, 3/h/33/3/3/h/ //rc(V^8dQhRRRRRRRR/#)rseenrexcludedkeysrrrCr)rs"rrrs.RRRsR3R4RrcDaaVUu.uFq3P4NK pp\;QJdV3RlV4F 'gK RM RM!V3RlV44;'g;\;QJdV3RlV4F 'gK R# R#!V3RlV44#uupi)zDTrue when any of *keys* (lowercased) is already emitted or excluded.c3,<"TF qS9xK R#5irGr)rHr{rs& rrJ_skip.. s*'QDy'TFc3,<"TF qS9xK R#5irGr)rHr{rs& rrJr s1QAx-r)r4rL)rrrr{r|sff* r_skiprsl"&'$Qwwy$G' 3*'*333*'* * Q Qcc1Q1QccQcQc1Q1Q.QQ(sBc$V^8dQhRRRRRR/#)rmodels_dev_datar5rrrr)rs"rrr s!"8"8d"8c"8"8rc#B"^RIHp^RIHpHp^RIHp^RIHpVP4EFYwrVPV4p V 'dW8wd W9dK-^RI H p V !V4p V eV PV8wdKSTP4T9dKjTP4T9gT P4T9dKTPT 4p \!T \"4'gKTPT4pT'dTP$R8wgT!T4'gKT'd(TP&'d\)TP&4MT PR.4p\!T\(4'gEKSYY3xEK\ R# \dELi;i5i) aYield ``(hermes_id, mdev_id, pconfig, env_vars)`` for section-1 rows. Skips vendor names that alias through an aggregator (bare "openai" -> "openrouter" would silently switch a user onto an endpoint they may have no key for), aliases of another canonical profile ("kimi" -> "kimi-coding"), non-api_key auth types (section 2 handles them) and unroutable providers. PROVIDER_REGISTRY env var names win over models.dev's.PROVIDER_TO_MODELS_DEV)PROVIDER_REGISTRYis_runtime_provider_routable)_AGGREGATOR_PROVIDERS)ALIASES)get_provider_profileNrZenv)agent.models_devrhermes_cli.authrrrrhermes_cli.providersritemsr/r;rrr9r4r0r5 auth_typeapi_key_env_varsr1)rrrrrrrr hermes_idmdev_id alias_targetrprofpdatapconfigrs&&& r_iter_builtin_candidatesr sI8O7,4::< {{9- L5,:_   6' 2DDII$: ??  $  ??  (GMMOx,G ##G,%&& #'' 2 ))Y6?[\e?f?f 5<AYAYAY4001_d_h_hinpr_s h % %g7 7/=   sIAF#F >BFF$ F.F:F F FFFFc V^8dQhRRRR/#)rrrrrCr)rs"rrr1s  C D rcpa^RIHpV!4pVPR/4o\T;'dC\;QJd'V3RlV4F'gK R4# R4#!V3RlV444# \ d4p\ PRT'd T^,MRT4Rp?R#Rp?ii;i) zFTrue when ``auth.json`` has a ``providers`` entry under any of *keys*._load_auth_storer;c3,<"TF qS9xK R#5irGr)rHr{providers_stores& rrJ+_auth_store_has_provider..7s!E1"6rTFz"Auth store check failed for %s: %sr'N)rr r/rCrLr9rr)rr storeexcr s* @r_auth_store_has_providerr1s4 "))K4EEEcc!E!EccFFcFFc!E!EEFF  9d47PRTWXs3,A7 A7A7A7A7"A77 B5(B00B5c$V^8dQhRRRRRR/#)rrrrrCrr)rs"rrr=s!   D T rc^RIHpV!4pV'd6VPR/4PV4'd\VRVR7#R# \dR#i;i)zMSection-1 pool check: only consult the pool when auth.json lists a raw entry.r credential_poolT)rrF)rr r/rr9)rrr rs&$ r_raw_pool_usabler=s] 4 " UYY0"599)DD-i$[ef f     sA&A A AAc$V^8dQhRRRRRR/#)rrrrrCrr)rs"rrrIs!s4Drcz\WR7# \d"p\PRY4Rp?R#Rp?ii;i)r'Credential pool check failed for %s: %sNF)rr9rr)rrrs&$ r _pool_usablerIs4)$FF  >Js  :5:c$V^8dQhRRRRRR/#)rpidr hermes_slugrrCr)rs"rrrQs!#Trc^RIHpRpVPR8Xd^RIHpV!4pM(VP'd\VPV4pV'gjVPR8XdYW3FQpVPV4p V 'gKV P'gK2\V PV4'gKPR# V'gVR 8Xd \V4pV# \ d!p\ PRT4Rp?LRp?ii;i) aSection-2 env/SDK credential check shared by the picker and the prefetch scan. Vertex authenticates via OAuth2 (service-account JSON / ADC), not an API key, so it gets its own probe; otherwise the provider is hidden from the picker even when fully configured.rFvertex)has_vertex_credentialsz"Vertex credential check failed: %sNrZT azure-foundry) rrragent.vertex_adapterr r9rrextra_env_varsrr/r_azure_entra_configured) rroverlayrr has_credsr rrrpcfgs &&&& r_overlay_has_env_credsr(Qs 2IH$ D C.0I    W33X> **i7%C$((-Dt---(4;P;PRZ2[2[& 7+H5  D LL=s C C Ds C D )DD cV^8dQhRR/#rr)rs"rrrjs d d drc^RIHpV!4p\VPR4;'gR4P 4P 4R8wgF\VPR4;'gR4P 4P 4R8wdR#\ \VPR4;'gR4P 4;'g V!R 44#) aAzure Foundry under ``model.auth_mode: entra_id`` mints a per-request bearer, so no ``AZURE_FOUNDRY_API_KEY`` ever exists; the row is configured once the runtime resolver's own inputs are (provider + auth_mode + an endpoint). No token is minted here (#27989).)_get_model_config_dictrr'r! auth_modeentra_idFr&AZURE_FOUNDRY_BASE_URL)rr+rr/r2r4rC)rr+ model_cfgs& rr$r$js9&(I IMM* % + +,224::<O9==-334::<BBD R IMM*-334::<bbIa@b ccrcV^8dQhRR/#rr)rs"rrrvs S S$ SrcaRRloS!R4;'g[S!R4;'dS!R4;'g;\;QJdV3RlR 4F 'gK R# R#!V3RlR 44#) zTrue when explicit AWS auth config is present in the environment. Deliberately avoids botocore's full credential chain: picker discovery runs for non-Bedrock providers too, and botocore may probe EC2 IMDS (169.254.169.254) before giving up.c V^8dQhRRRR/#)rrrrrCr)rs"rr._has_fast_aws_sdk_signal..__annotate__{s663646rcp\\PPVR4P 44#r')rCosenvironr/r2rs&r_set&_has_fast_aws_sdk_signal.._set{s%BJJNN4,22455rAWS_BEARER_TOKEN_BEDROCKAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYc34<"TF pS!V4xK R#5irGr)rHrr9s& rrJ+_has_fast_aws_sdk_signal..s"R'QdtDzz'QrTF) AWS_PROFILE&AWS_CONTAINER_CREDENTIALS_RELATIVE_URI"AWS_CONTAINER_CREDENTIALS_FULL_URIAWS_WEB_IDENTITY_TOKEN_FILEr)r9s@r_has_fast_aws_sdk_signalrDvs 6 '( R R $ % G G$/F*G R R 3R'QR33S S R'QR RSrc$V^8dQhRRRRRR/#)rrrrrrCr)rs"rrrs!     rcF\4'dR#\T;'gR4P4P4\T;'gR4P4P48wdR#^RIHp\ V!44# \dR#i;i)z\AWS SDK credential check; the full boto3 chain is only consulted for the *current* provider.Tr'F)has_aws_credentials)rDrr2r4agent.bedrock_adapterrGrCr9)rrrGs&& r_has_aws_sdk_creds_for_listingrIs~!! 4::2$$&#.>.D.D"*E*K*K*M*S*S*UU=')** s;B B B cV^8dQhRR/#rr)rs"rrrsLLDLrcH\V4;'d\VRR4R8H#)rr'aws_sdk)rCgetattr)rs&r _is_aws_sdkrNs" = K KWWk2>)KKrmerge_models_dev non_blockingc 0V^8dQhRRRRRRRRRRR R /#) rrrcuratedr5 fallback_keysrOrCrPrr1r)rs"rrrs900s0T030Z^0'+08<0rc^RIHpHpHp^RIHpV!WR7p V 'g-\ Y;'gV34p V'dW9d V!W 4p V!V 4#)ud``cached_provider_model_ids`` (the SAME disk-cached list ``hermes model`` builds), falling back to the curated list (merged with models.dev for preferred providers) when live is empty. ``non_blocking`` (GUI read path) reads the disk cache only — a provider that is slow or down contributes its curated list instead of stalling the whole picker (#114215).)_MODELS_DEV_PREFERRED_merge_with_models_devr)without_generation_modelsrP)rrUrVrhermes_cli.chat_catalogrW_first_curated) rrRrOrPrSrUrVrrWrs &&$$* r_live_or_curated_idsr[sL kjA)$JI "7,D,DdWE  =.t?I $Y //rc V^8dQhRRRR/#)rrRr5rr1r)rs"rrrsD4rcV.pVF pVPV.4pV'gKV# V#)z[First non-empty curated list under *keys*; the last key's (possibly empty) value otherwise.r/)rRrrrrs&& rrZrZs7IKKR( 9    rc ,V^8dQhRRRRRRRRRR /#) rrrrRr5rSrPrCrr1r)rs"rrrs8GG3GGsG+/G<@Grc\W.VO5RRRV/;'g.# \d$\Y;'gT34;'g.u#i;i)zBedrock: live discovery reflects the active region (eu.*, ap.*) rather than the static us.* list; any failure falls back to the curated list.rOFrP)r[r9rZ)rrRrPrSs&&$*r_aws_live_or_curated_idsraslG#D?M?TY?1=?EEBD E Gg'?'?@FFBFGsA A A  A c$V^8dQhRRRRRR/#)rrRr5force_fresh_nous_tierrCrr1r)rs"rrrs!..D..$.rczVPR.4p^RIHp^RIHpHpHpHp^RIH pV!RRR7;'g/p V!R4;'g/PRR4;'gRp V!VR 7'd V!W)V 4wr+MV!W)V 4wr+V!W)4p^R IH p H p V !W,!4RR 7p^RIHpHpV!RR7pVeV!VVP$4pV# \dRp Li;i \dLci;i \d\PR RR 7Lsi;i \dT#i;i)aDNous serves a huge live catalog; the picker shows ONLY the curated agentic list, augmented with the Portal's free/paid recommendations and paid-tier sale models, then narrowed by org policy. Mirrors ``_model_flow_nous`` so GUI pickers match the CLI. A failed recommendation fetch still yields a policy-filtered curated list.nous)get_pricing_for_provider)check_nous_free_tierunion_with_nous_on_sale_models&union_with_portal_free_recommendations&union_with_portal_paid_recommendations)get_provider_auth_stateT) cached_onlyportal_base_urlr') force_fresh)nous_policy_allowed_idsrestrict_to_nous_policy) rescue_emptyzNous model policy filter failedr)featured_firstnous_picker_usageany_age)r/hermes_cli.models_pricingrfrrgrhrirjrrkr9rorprrhermes_cli.model_picker_usagerrrsfeatured_model_ids)rRrcrrfrgrhrirjrkpricingportal_rorprrrsusages&& r_nous_picker_model_idsr}s^  FB'I F  < +6tDJJ -f5;;@@ARTVW]][]F ,A B BA)V\]LIqA)V\]LI6yJIG^+I7N7P_cd    T!$/  &y%2J2JKI 1 F     G 6 FG    sv(C2C2CC*C-C2< C2C2D5(D+ C/,C2.C//C22 D?D"D('D(+ D:9D:c V^8dQhRRRR/#)rrowr5r dict | Noner)rs"rrrsTkrc ^RIHpVP4'gV#VP4'gR#VP 4'gV#\ V4pVP VR&VP.VR&^VR&RVR&V#)uVThe one free-tier rule for a Nous picker row, shared by every row builder. ``row`` carries at least ``name`` and ``models``. A guest identity carrying inference turns it into "Nous · free tier" with the single model ``nous/welcome`` (the welcome host serves nothing else). A guest that ``nous.guest: false`` has switched off yields ``None``: no Nous row at all, since there is nothing selectable. A real account (or no Nous state) passes the row through untouched. Builders that compute the full catalog lazily should pass ``models=[]`` and only compute when the returned row still has no models.) anon_authNrr+ total_modelsT free_tier_row) hermes_clir has_guest guest_allowedfree_inference_activer5FREE_TIER_LABEL GUEST_MODEL)rrouts& r_free_tier_nous_rowrs%      " " $ $  * * , , s)C++CK**+CMC C Jrr'c(V^8dQhRRRRRRRR/#)rrr1 max_models int | Nonerrrr)rs"rrrs(""4"Z"s"D"rc>VeV'dV\9dV#VRV#)zvApply ``max_models``; rows in ``_UNCAPPED_PICKER_PROVIDERS`` show everything (``0`` still means slug-only: no models).N)r)rrrs&&&r _cap_modelsrs'jT5O-O [j !!rc(V^8dQhRRRRRRRR/#)rgrpr5r> active_modelrrrr)rs"rrrs( ( (d (4 (s (t (rc^RIHpHpHp\ VR,V.4VP R4pV!Wd!V44'dRVR&\ VR,V!V44\ VR,4R#)a6Fold one config entry's models into its group: the active selection first, then the declared ``models:`` ids. The active selection alone never suppresses discovery, and a dict-shaped ``models:`` is metadata rather than an allowlist (see ``_models_config_is_allowlist``), so only list/string shapes pin the row.)_declared_model_ids_entry_models_discovered_models_config_is_allowlistr+Thas_explicit_modelsN)r-rrr_extend_uniquer/_split_chain_entries)rr>rrrr models_fields&&& r_absorb_entry_modelsrsg sr3x=<.199X&L"<1I%1PQQ%) !"3x="5l"CDX'rc V^8dQhRRRR/#)rr+r1rrr)rs"rrrsPPP$Prc \V4F[p\V\4'gKRV9gK$\YP R4Uu.uFq"P 4NK up4K] R#uupi)uSplit comma-separated fallback chains (``default_model: a,b,c`` — e.g. the volcengine agent plans) into individually selectable ids. The raw chain stays first so the server-side fallback behaviour itself remains the default pick; the split ids follow it. Fixes #50557.,N)r1r0rrsplitr2)r+modelparts& rrrsNf eS ! !cUl 6[[=M#N=MTJJL=M#N O#NsA- c V^8dQhRRRR/#)rrr1rrr)rs"rrr's  4 4 rc^VF&pV'gK W 9gKVPV4K( R#)zMAppend each truthy item of *items* not already in *target* (order preserved).N)r)rritems&& rrr's" 4D& MM$ rc V^8dQhRRRR/#)rr(rrrr)rs"rrr.s663636rc\T;'gR4P4PR4P4#)r'r%)rr2r3r4)r(s&r _norm_urlr.s1 syyb>   ! ( ( - 3 3 55rc$V^8dQhRRRRRR/#)rr>r5rrprrr)rs"rrr6s&PP4PuPcPrc0a\V3RlV4R4#)c3|<"TF1pSPVR4'gKSPVR4xK3 R#5i)r'Nr^)rHrrr>s& rrJ"_entry_base_url..7s/Jtuyyb7I#3##ts<<r'next)r>rsf&r_entry_base_urlr6s JtJB OOrc V^8dQhRRRR/#)rr>r5rrr)rs"rrr:s^^4^J^rc\VPR4;'gVPR4;'gR4P4P4;'gR#)r transportr'N)rr/r2r4)r>s&rr6r6:sJ uyy$DD +(>DD" E K K M S S U ] ]Y]]rc$V^8dQhRRRRRR/#)rr>r5 key_env_keysrrztuple[Any, str, str]r)rs"rrr>s'\\d\3\;O\rca\\V3RlV4R44P4p\SP RR4SP R4;'gR4pVeW2VP 3#\SP RR4;'gR4P4pYBT;'gV'dRV 23#R3#)z@Unminted credential, env fallback, and stable grouping identity.c3x<"TF/pSPV4'gKSPV4xK1 R#5irGr^)rHr{r>s& rrJ%_entry_credentials..@s'Kleiil  ! ls::r'key_cmdrcustomrZzenv:)rrr2rr/cache_identity)r>rr)sourceinline_api_keysf* rr7r7>s$KlKRPQWWYG )%))Ir*BEIIfDUDaDaYa bF  5 5559b177R8>>@N N$[$[7gY7G [[XZ [[rcV^8dQhRR/#)rr>r5r)rs"rrrHs$rc|VPRR4p\V\4'dVP4R9pV#)zL``discover_models`` (default True); ``"false"/"no"/"0"`` strings mean False.discover_modelsT>0nofalse)r/r0rr4)r>discovers& r_discover_flagrHs7yy*D1H(C  >>#+?? Orc V^8dQhRRRR/#)rrrrr)rs"rrrPs]]#]#]rc0a\V3RlR4S4#)uMText before the per-model separator Hermes's own writer uses ("—" / " - ").c3<"TF3qS9gK SPV4^,P4xK5 R#5i)rN)rr2)rHseprs& rrJ"_display_prefix..Rs2U~PT+C#))++~s>.>)u—z - rr8sfr_display_prefixrPs U~UW[ \\rc V^8dQhRRRR/#)r display_namerrr)rs"rrrUs ' 'c 'c 'rc\V4pVP4p\R\V44R4pVe*V^8d#RP VRV4P 4pT;'gT#)uSection-3 row label: strip the per-model suffix and trailing version tokens ("Palantir Claude 4.7 Opus" -> "Palantir Claude") — cut at the first token containing a digit, only when >= 2 words remain (avoids over-trimming).c3"TFcwr\;QJd+RVPR44F 'gK RM RM!RVPR444'gK_VxKe R#5i)c3@"TFqP4xK R#5irG)isdigit)rHcs& rrJ0_group_display_name...[s7]_ _z.,()TFN)rLr2)rHirs& rrJ&_group_display_name..[sC^CC7]QWWU[_7]CCC7]QWWU[_7]4]11s2A-'A-# A-N )rrr enumeratejoinr2)r grp_displaytokscut_ats& r_group_display_namerUsj",/K    D ^4^`d eF fkhhtGV}-335  & &,&rc@V^8dQhRRRRRRRRRR R R R RR RRRRR/ #)rrZrrrr[rrCrrrr probe_livediscovery_allowedfast_custom_proberztuple[list | None, bool]r)rs"rrras`)) ))9<)SW) )$.)<@)UY))!9)rc V'dRMRp V'dc\WW#WIVR7p \V \4p V 'd V'dR#V e+V 'gV'd V 'dY;'dV '*3#R#V'dv^RIHp V !WRWVR7p V'd\V \4'dR#V 'g\V \4'd"T \V \4;'dV '*3#R#R# \dR#i;i \ \\\\\\PP3dR#i;i)uReturn ``(models, native_catalog_empty)`` for a custom endpoint row. ``probe_live`` runs the native-aware picker fetch; otherwise, when discovery is allowed, a warm same-fingerprint cache entry still serves the full catalog with no round-trip. ``has_explicit_models`` gates the *probe* (a network-cost guard for keyless endpoints that declare a catalog), never the cache read — applying it to the read re-pins the endpoint to its declared subset. Returns ``(None, False)`` when nothing usable was found. ``fast_custom_probe`` picks the discovery budget (1.5s fast / 5s full) independently of the caller's exhausted-pool visibility flag: a picker that keeps cooldown providers visible still deserves the full budget when it is the one surface that live-probes the current custom endpoint.?@)rr]r)raT) cache_onlyr]rr)NF)rhr0rQr9rra ImportErrorOSError RuntimeError TimeoutError TypeError ValueErrorhttpclient HTTPException)rZrr[rrrrrrr] live_models is_nativera cached_modelss&&&&$$$$$ r_discover_endpoint_modelsras; 'cCG 3"98EK#;0FGI0""&K?RV_"%B%B{?CC    A3T7^fM#z-AW'X'X"" =:P Q Q$j@V&W&m&m`m\mmm!R ;    WlL)ZY]YdYdYrYrs    sY.C6C6 C6C6C6#C6,C61D2D:-D(D6 DD>E  E c(V^8dQhRRRRRRRR/#)rrr5rRdict[str, list[str]]rrrr)rs"rrrs,.-.-.-$8.-DM.-R[.-rcaa^RIHp^RIHp^RIHp^RIHp^RIH pVUu0uF3q'gK \V4P4P4kK5 p p.o\4oRVV3Rllp \W S4F2wrr\W4'g\!V 4'gK*V !W4K4 VP#4UUu/uF wppVVbK pppVP#4FwppVP%VV4p\'SV VV4'gVP(R8XdK?\+VVVV4'g&\-VV4'g\/V4'gKxV !VVV4K VFp\'SV VP04'dK"VP%VP04p\3T;'d+VP4;'d\VP4V44pV'g9\-VP04'g\/VP04'gKV !VP0VP04K SUu.uFpVR 8wgK VNK up#uupiuuppiuupi) auQuick-scan which providers have credentials, without fetching model lists. Mirrors the credential checks of sections 1, 2 and 2b of :func:`list_authenticated_providers` but never calls ``cached_provider_model_ids``; feeds :func:`_prefetch_provider_models_parallel`. Env vars are read through the per-profile secret scope. AWS SDK providers are skipped (heavier detection)._scoped_key_envrrHERMES_OVERLAYSCANONICAL_PROVIDERSc$V^8dQhRRRRRR/#)rrrrrrr)rs"rr4_collect_authed_provider_slugs..__annotate__s!--C---rcZ<SPV4SPRV44R#)c3@"TFqP4xK R#5irGrx)rHr{s& rrJ@_collect_authed_provider_slugs.._emit..s,t!GGIItrN)rr)rrrslugss&*r_emit-_collect_authed_provider_slugs.._emits! T ,t,,rrLre)r-rrrrrrrrrrr2r4rrrrrr/rrr(rrrrCr)rrRrrrrrrp excluded_setrr_mdev_id_pconfigrr{vmdev_to_hermesrr%rcp cp_configr&srrs&&& @@r_collect_authed_provider_slugsr s871454<BHq*CFLLN((*HLBEUD--4LOko3p/ X H . .2B92M2M ) '4q(>'C'C'EF'Etq!ad'ENF'--/ W$((c2 |S+ 6 6':K:Ky:X  "3 Wo N N'[99\+=V=V +sK 00" |RWW - - %))"''2   n n)44 n n)B\B\^m9np 099\"''=R=R "''277 #" ,u!V AAu ,,CCG* -s I++I+ I0 I6"I6c]tRtRt$RtR]R&R]R&R]R&R]R&R ]R &R ]R &R ]R &R ]R &R ]R&R]R&R]R&RtR]R&RtR ]R&]!] R7t R]R&]!] R7t R]R&]!] R7t R]R&]!] R7tR]R&]RRl4t]R R!l4t]R"R#l4tR$R%ltR&R'ltR(R)/R*R+lltR,R-R.R/R/R0lltR1R2ltR3R)/R4R5lltR6R7ltR8tR#)9 _PickerBuildiacState threaded through the ``list_authenticated_providers`` sections: 1 built-ins mapped to models.dev, 2 Hermes-only overlays, 2b canonical providers missed by 1/2, 3 ``providers:`` entries + 3b the bare active custom endpoint, 4 ``custom_providers:`` entries. Row-builder imports of ``hermes_cli.auth/models`` stay lazy so tests can patch those modules.rrrrrrrCrrcprobe_custom_providersprobe_current_custom_providerrefreshrrr5rRN bool | NonerFnon_blocking_catalogs)default_factoryr1results seen_slugsbuiltin_endpointssection3_pairscV^8dQhRR/#rrrr)rs"rr_PickerBuild.__annotate__s--s-rc 6VPP4#rG)rr4selfs&rcurrent_provider_norm"_PickerBuild.current_provider_norms$$**,,rcV^8dQhRR/#rr)rs"rrrs99s9rc TVPPR4P4#)r%)rr3r4rs&rcurrent_base_url_norm"_PickerBuild.current_base_url_norms"$$++C06688rcV^8dQhRR/#rr)rs"rrrs]]D]rc NVPf VP#VP#)zENone defers to for_picker so pre-existing callers keep their timeout.)rrrs&rresolved_fast_custom_probe'_PickerBuild.resolved_fast_custom_probes$#'"8"8"@t\dF\F\\rc V^8dQhRRRR/#)rrow_is_currentrCrr)rs"rrrsll$l4lrc h\VP;'gVP;'dT4#rG)rCrr)rr+s&$rcan_probe_custom_PickerBuild.can_probe_customs*D//jjD4V4V4i4i[ikkrc V^8dQhRRRR/#rr)rs"rrrs / /C /D /rc d^RIHpVPV4pV'gR#\VRR4'd+\P PVP R4MRp\T;'g\VRR4;'gR4pV'dVPPV4R#R#)zPrefer the live env override (e.g. DASHSCOPE_BASE_URL) over the static inference_base_url so dedup matches what a user typing that URL into custom_providers would actually hit.rNbase_url_env_varr'inference_base_url) rrr/rMr6r7r1rradd)rrrr'r(normeds&& rrecord_builtin_endpoint$_PickerBuild.record_builtin_endpoints 6 $$T* ;B4I[]_;`;`bjjnnT22B7fh3OO'$0Db"IOORP   " " & &v . r uncapped_okTc4V^8dQhRRRRRRRRRRR RR R /#) rrrr is_currentrCrr1rr7rrr)rs"rrrsD+++"+04+AE+OR+dh+ +rc JRTRTRTRRR\Y@PV'dTMR4R\V4RV/pVR 8Xd \V4pVeVPP V4VP PVP44VPV4R #) rrr9is_user_definedFr+r'rrreN) rrrrrrrr3r4r5)rrrr9rrr7rs&&&&&&$ radd_builtin_row_PickerBuild.add_builtin_rows D&$ jBSUZ k)__kdWYZ C NHf> 6>&c*C ? LL   $ DJJL) $$T*rrz user-configshownc<V^8dQhRRRRRRRRRRR RR RR R R R/ #)rrrrrr+r1r9rCnative_catalog_emptyrr> list | Nonerrr)rs"rrrsT***"*-0*:>*LP*hl**/:*FJ*rc VPPRTRTRTRRRVfTMTR\V4R VR VR V/ 4VPP VP 44R#) z7Append a user-defined endpoint row (sections 3, 3b, 4).rrr9r;Tr+Nrrrr@)rrrrr3r4) rrrrr+r9r@rr>s &&&&&&&$$radd_endpoint_row_PickerBuild.add_endpoint_rowsn  D&$ jBSUY  f5.#f+W_ag w 68LN O DJJL)rc$V^8dQhRRRRRR/#)rrrurl_normrrCr)rs"rrrs!rc \V4P4P4V3pV^,'dV^,'gR#VPP V4R#)zYRemember a (display_name, base_url) pair for section-4 dedup; False when either is blank.FT)rr2r4rr3)rrrFpairs&&& rrecord_section3_pair!_PickerBuild.record_section3_pairsKD !'')84QDGG %r url_match_okc ,V^8dQhRRRRRRRRRR/#) rrraliasesrrFrKrCrr)rs"rrrs8NNNcNSN[_NkoNrc @\V4P4P4VP8H;'gdVPV9;'gMVPR8H;'d6\ VP 4;'dW0P 8H;'dT#)zQRow is current by slug/alias, or (bare ``custom`` provider) by matching base_url.r)rr2r4r rCr$)rrrMrFrKs&&&&$rendpoint_is_current _PickerBuild.endpoint_is_currents IOO  # # %)C)C C M M))W4 M M**h6LL4@Z@Z;[LL : ::LL?K  Nrc<V^8dQhRRRRRRRRRR R R R RR RRR/ #)rrZrrrnative_providerrrCrrrrrr9rztuple[list | None, bool, bool]r)rs"rrr#sV<<<%(<;>RVP9gRVP9dR#VPR4p\V\4'd\ VR4'dR#VP R8HpV'g\V\4'gR#^RIHp\V\4'dV!VPR44M.p\\P.VOVPPR.4O44pVPR\R4W6R4R#)uSection 0: the active / ``providers:``-configured LM Studio row from the live catalog. LM Studio has no models.dev mapping and its overlay row (section 2) needs a credential, so a hand-written ``model.provider: lmstudio`` left the slug unclaimed until section 3, where a bare ``providers.lmstudio: {request_timeout_seconds: ...}`` block (no ``base_url``/``models``) cannot discover anything and rendered a one-model ``user-config`` row — discarding the catalog ``_build_curated_lists`` had already live-probed into ``b.curated["lmstudio"]``. A block that points the slug at an endpoint of its own stays with section 3's custom-endpoint handling.lmstudioNrr+hermesr&apir()rrr/r0r5rr r-rr1fromkeysrRr<r )r\r configuredr9rconfigured_modelsrs&& r_lap_lmstudio_rowrf6sQZZ:#=##J/J*d## D^(_(_((J6J *Z66;IST^`dIeIe+JNN8,DEkmT]]#W%6#WzSU9V#WXYIj)J"7PXYrc(V^8dQhRRRRRRRR/#rr\rdatar5rrrr)rs"rrrMs.hhhTh4hDhrc^RIHpHp^RIHp\ WP VP4EF7wrgr\W4'g\W`PR7'gK6\W`PVPR7p \V\4'dVP!V4MRp \V \4'dV!V P!R44M.p \#\P%.V OV O44p V!V4p V'dVP&'d VP&MV 'd V P&MTpVP)WnVP*Wg39V R4EK: R#)z9Section 1: models.dev-mapped providers with api_key auth.)rr)get_provider_inforrXNr+zbuilt-in)r-rrrrkrrrrrrr[rRrr0r5r/r1rcrr<r)r\rirrrrkrrrrrrdrepinfors&&& r_lap_builtin_rowsrmMsL21I$PZPZ\]\h\h1i- G337G ^j^j7k7k (IIALcLcd 7AQU6V6V^'' 2\` MWXbdhMiMi/ x0HIoq'G):'GY'GHI !'*'.7<<FF! G ,GG c(V^8dQhRRRRRRRR/#rhr)rs"rrrs('&'&'&T'&4'&D'&rc ^RIHp^RIHp^RIHpVP 4UUu/uFwrgWvbK pppVP 4EFwrVPW4p \VPVPW4'dK@\W W4'gKTV R 9d$\WPRVPR7p MV PR8Xd$\!WPWVPR7p MV R8Xd^\#R \%V 4R ./4p V R J;'dV R ,'*pV'd!\'VPVP(4M.p M"\WPWVPR7p \+V\,4'd+VPV 4;'gVPV 4MR p\+V\,4'd8\/\,P1.V!VPR 44OV O44p VP3V \%V 4VP4W39V R 4VPP7V P944EK R #uuppi)zQSection 2: Hermes-only providers (nous, openai-codex, copilot, opencode-go, ...).rr_rFrOrPrLrXrerr+Nr`>copilot copilot-acp openai-codex)rrr-rrrrr/rrrr|r[rRrrrarr r}rcr0r5r1rcr<rr3r4)r\rirrrrr{rr rr%rrtier_row real_accountrds&&& r_lap_overlay_rowsrs7;4(>'C'C'EF'Etqad'ENF'--/ $((2 qzz3 < < !!+??  D D-[))V[:;:Q:QSI   ) +0ii>?>U>UWI F "+FIk4JHVX+YZH#4/JJ8J4JLVb.qyy!:Q:QRhjI,[))[:;:Q:QSIT^^lnrSsSs^'' 4OO8J8J38Oy} j$ ' 'T]]+g-@PXAY-Z+g]f+ghiI  ;/1C1C GY1Y[dfn p %=0Gs I)c V^8dQhRRRR/#)rr\rrrr)rs"rrrs%i%i<%iD%irc ^RIHp^RIHpVEFp\ VP VP VP4'dK7VPVP4pRpV'EdVP'EdVPUu0uF,p\PPV4'gK*VkK. pp\V4pVPPR4'dVPVPRR4MRpV'd\VP4M \4p V'dCYyu;8:d\VP48d"MMVPVP8wdEKoT;'gz\!VP4;'g]\#VPVP$R7;'g4\'V4;'d!\)VPVP4pV'gGVeCVP*R8Xd2^RIHp \V !VP4PR 44pV'gEKK\'V4'd.\5VPVP6VP8R 7p M-\;VPVP6RVP8R 7p VP=VPVP>VPVP8HV R RR7EK R#uupi \.d,p \0P3R TPT 4Rp ? LRp ? ii;i)z7Section 2b: CANONICAL_PROVIDERS missed by sections 1/2.rrFz-cnNrrp)$get_external_process_provider_statusrdrsrXr canonical)r7) rrrrrrrrr/rr6r7rCendswithrrrrrrNrIrrr9rrrarRrr[r<label) r\rrr r r&rlitsibsib_varsrrrs & r_lap_canonical_rowsrsv15! qzz277 3 3 %))"''2  9333 ) : :Q :"bjjnnR>P22 :CQS I:<9I9I%9P9P#'' 5VZC47s3//0SUHsHY-G-G)HHRWWXYXjXjMjdd!9"''!BddlSUSZSZghgsgsFtdd  " b b'EbggqOaOa'b Y2y7J7JN`7` WP !Ebgg!N!R!RS_!`a   y ! !0!))RSRiRijI,RWWaiiRW:;:Q:QSI  GGRXXrww!*<*<PR4;'g.4p\V 4pVR,Uu0uFp\5V4P4kK ppVPAVVV4pTPCVR ,T \5V4P=4P4R9dTMRVR ,VR ,;'gRVR ,VR,VR7wpppVeTpVPEWyV VVV4VPP1V4VR,;'gV .FOpVPGVV4'gKVPPI\KV4P44KQ VPGV V4EK R#uupi)aVSection 3: ``providers:`` dict entries, grouped by (api_url, credential, api_mode, extra_headers) so keyed providers on one endpoint with the same wire protocol collapse into one row (two Palantir Claude entries -> one "Palantir Claude" row); a different key_env/api_mode/headers keeps distinct rows since the wire protocol or tenant differs.r!r)coerce_provider_idis_provider_enabledrr)r*rrr+rFrZrrr raw_namesrM default_modelr'rzapi.openai.comopenairNrrrr9ra>r custom:ollama)&r-r!rr.rrrr0r5r4rr/rr7rr6rpsortedrrCrrrrrr rvaluesr1r r2rRrOrVrCrIr3r )r\rr!rrr ep_groupsep_nameep_cfgrrrr) cred_identityr group_keyr models_list ep_url_normalias ep_aliasesr9rUr@r{raw_names&& r_lap_user_provider_rowsrs TI#%I)//1&$''/B6/J/JgmmoabamamNm )&**V*<=HH !&*DE1CFIWd1e.,V4w'8OQVW]^e^k^k^mWnQop  %)<\)JIW^`hjl%u>EE_W-E7J :0F#T']%M%M~f7M{\^`iknkp $rI "S&**_b*I*d*dVZZX_acMde K - I5lCLQR-20!),Vc&k3y>w3x=) 4S\5G5G5I5O5O5QScddqyy}}X6<<"=K( 69)nEnUc%j&&(n E**7J L ./.A.A  NG7|))+1137RRGX` % &I0F0F$QTU_Q`!"56: /B/O+ (!  !$K 7'; Thi J'K(::\N:H%%h <<   !5h!?!E!E!GH; |[93"Fs "Pc$V^8dQhRRRRRR/#)rr\rr$rArrr)rs"rrrs&2H2HL2HK2HD2Hrc Ta RVP9dR#R;o pVPR8Xd,VP'dVPo VPpM^RIHpV!4P R4p\V\4'gR#\VP R4;'gR4P4o \VP R4;'gR4P4P4R8wg S 'gR#\VP RVP R R44;'gR4P4p\;QJd)V 3R lT;'g.4F 'gK R M R M!V 3R lT;'g.44'dR#S P4PR 4pVPR8H;'dVP\!V48HpV'dV.M.pR p\#RTRR RR\%VP&;'gVP(;'dT4R VP*R7 wrV eT pTP-RRYWYhR\/YpP04R7R# \dRpEL#i;i \dLMi;i)u\Section 3b: ``model.provider: custom`` + ``model.base_url`` with no named providers:/custom_providers row — surface it so /model does not look like it ignored config.yaml. The endpoint comes from the caller's current-provider slice when the session is on it, and otherwise from the static config.yaml ``model:`` block: the row used to appear only while it happened to be the active provider, so switching away made it vanish and the unconfigured-canonical fallback substituted a misleading 0-model placeholder (#59702). ``is_current`` is then true only when the caller's slice points back at this URL.rNr')r"rr&rdefaultrc3<"TF=p\V\4;'d!\\V44\S48HxK? R#5irG)r0r5rr)rHr r&s& rrJ'_lap_bare_custom_row..;s> ,)B 2tVV?2+>!?9XCV!VV)s A)ATFr%rTzCustom endpointz model-config)rr>)rr rrr.r"r/r9r0r5rr2r4rLr3r$rrrCrrr(rCrr) r\r$rr" cfg_modelrr9r+r@rUr&s && @r_lap_bare_custom_rowrsP1<<!!H}(*q/A/A/A%%   5# ))'2I )T** y}}Z066B7==? y}}Z(..B / 5 5 7 = = ?8 KS[ IMM)Y]]625NOUUSUV\\^  s ,#))r) ,sss ,#))r) ,,, nn%%c*G((H4ff9P9PT]^eTf9fJ -m_2F   +D 5$AIIYY!*I*I*X*XjZ":: ,<(  !F#Wj[%FH9 I 4    s0J"J%J9 J JJ J'&J'c$V^8dQhRRRRRR/#)rr\rr$r1rrr)rs"rrrRs&N)N)N)N)$N)rc a^RIHpHp^RIHp/pVEFp\ V\ 4'gKV!VPR44p\\V4;'gR4P4PR4pV'd V'gK\VR4wrp T ;'g V!V 4p \V4p \V4pV!V4p\V4p\VPR4;'gR4P4pWV \!\#VP%444VP'43pT;'gTpVP)VR\+VV4RVR VR RR V R .R RRRRV RVR\-4/ 4pVR ,;'gT VR &VR,;'dTVR&VR,P/\1VV44\3TYfPR4;'gRP44EK \-4p\5V3RlVP7444pVP74EFpVR ,VPR R4VR,prVP'4SP89dVP'4V9dK]VP'4V9d@T^ppV RV 2P'4SP89d V^, pK/V RV 2pVVR&\;V4p\VR,4P4P'4V3pV^,'d$V^,'dVSP<9dEKV'dVSP>9dEK:SPATVR,Uu0uFp\V4P'4kK upVV^8HR7pSPCYR\V4P4P'4\VPR4;'gR4P4P'409dRMR\EVPR 44VPR4;'gRVPR4\EV4;'dVPRR4VR7wppp VeNVVR &V 'dA\GTTVPR4VPR4;'gRVR ,R7SPKVVR,VR ,VR ,VV4VPMVP'44EK R#uupi \HdLci;i)uSection 4: ``custom_providers:`` entries (one model each) grouped into one row per (endpoint, credential identity, api_mode, extra_headers, display prefix). Four "Ollama — X" entries on one host become one "Ollama" row; distinct prefixes sharing a proxy URL keep their own rows.r)rrr'r%r) provider_keyrrrZrr+rFrTr extra_headersrMrc3<"TF>pSP'gK\VR,4SP8XgK:^xK@ R#5i)rN)r$r)rHrr\s& rrJ,_lap_custom_provider_rows..vs?"]$c " " '0Y'@AD[D['[ _sA A  A -)rKrrNr)rrr)'r-r!rr.rr0r5r/rrr2r3r7r6rrrprrr4 setdefaultr rrr rsumrrrrrrOrVrCrAr9rCr3)!r\r$r!rrgroupsr>rrrr)rrZrrentry_extra_headersprefixrrrrsection4_slugscurrent_url_group_countr base_slugn grp_url_normpair_keyrr9rUr@rs!f& r_lap_custom_provider_rowsrRs T4 "F!%&& %eii&78oe,22399;BB3Gw 1CE91U. < )qIKq$**, <Q[!%DCK ) F $**,224lC A;;8A;;8q7G7G+G  LA,?,?? ** 3y>B>%3u:##%>BL0A5+7 897J7J  SY__%6%<%<%>CGGFODYDYWY@Z@`@`@b@h@h@j$kkHqy ./ 0#''/:R:Z:ZVZWWZ(DM QK  QK =H QK T^ QKrc Z^RIHp^RIHpHp\ V 4p V'dRp ^RIHpV!4V!V4p\T;'gR4P4p\T;'gR4P4pV!V4pV!4p\YTYZTYY{;'g.Uu0uF4pV'gK \V4P4P4kK6 upW\WVV R7R7 pV'g V 'd.M \TVPT ;'g.4p\!V4^8d \#V4\%T\'V\(4'dTM/4\+VVV4\-VVV4\/V4V'd#\'V\(4'd \1VV4\3VV4V'd#\'V\44'd \7VV4\9VP:W&4# \dELi;iuupi \dLi;i)uDetect which providers have credentials and list their curated (not full models.dev) models. Returns dicts with ``slug`` (the --provider value), ``name``, ``is_current``, ``is_user_defined``, ``models`` (up to max_models), ``total_models``, ``source`` ("built-in", "hermes", "canonical", "user-config", "model-config"). ``force_fresh_nous_tier`` bypasses the short Nous tier cache (account-sensitive flows only); ``refresh`` busts the model-id disk cache up front (explicit user action only); ``probe_custom_providers`` enables live ``/models`` discovery for saved custom endpoints (CLI true, GUI false); ``probe_current_custom_provider`` probes only the selected custom endpoint. ``non_blocking_catalogs`` is the GUI read path (``model.options``): provider catalogs come from the disk cache only and stale/missing ones warm in the background, so a degraded provider never stalls the picker (#114215). ``fast_custom_probe`` overrides the custom-endpoint discovery budget ``for_picker`` otherwise implies (1.5s vs 5s) — ``None`` keeps the historical coupling, ``False`` retains the full 5s budget for callers that only want exhausted-pool visibility (#103843).)fetch_models_dev)rstringify_provider_mapF)clear_provider_models_cacher'rX) rrrrrrcrrrrrrrR)rrr.rrrCrrr9rr2rr4rr rRrrrfr0r5rmrrrrr1r_finalize_picker_rowsr)rrrr$rcrrrrrrrrrrrrrrirr\prefetch_slugss&&&&$$$$$$$$$$ rrrs.2L !67  %  E ' ) **:;+11r288: ++,224M+N;N  D )\iLa5D\D\Z\D\"cD\aab#93q6<<>#7#7#9D\"c3$%52GI  JA%(=b9$ K]KcKcacd >Q  .~ >a:nd+K+KQSTa~.a~.*^T::>2,-J'7>>!!%56 N JJ[   "#d   s/ H' H6+H; H HH H*)H*c$V^8dQhRRRRRR/#)rrr1rrrr)rs"rrr"s"%%4%%PT%rc ^RIHp\V\4'EdVP 4UUu0uFTwrE\V\4'gKV!V4'dK-\ V4P 4P4kKV pppV'dVUu.uFp\ VPRR44P 4P4V9gKA\ VPRR44P 4P4V9gKVNK ppT'dTFpTPR4'dTPR4'dK3TPR4;'g.p Y)9dT^RI H p T !TPR4T4'dM1T.T OTR&TPR \T 44^,TR &M TPR R 7T#uuppiuupi \dLi;i) z[Post-passes: drop ``providers..enabled: false`` rows, inject the current model, sort.)r provider_idr'rr9r@r+)!_model_requires_account_discoveryrc2VR,'*VR,)3#)r9rr)rs&rri'_finalize_picker_rows..FsAlO 3a6G5GHr)rr)r.rr0r5rrr2r4r/r9rrrsort) rrrrrr:disabledrrr+rs &&& rrr"s  9 nd + +;I;O;O;QK;Qidc4(*1DS1I*D !'');Q K&P&!15534::<BBDHTAEE&"-.446<<>hNAwPC77<((CGG4J,K,KWWX&,,"F*O4SWWV_mTT!. 8 8H &)ggnc&k&JQ&NN#  LLHLI N=KP    sF0G9G. G.!+G. G9>G49G4G4"G9. G99 HHc$V^8dQhRRRRRR/#)rr;rrrrr)rs"rrrJs"  J # Wa rc ^RIHpV!V4pVfV#V.VUu.uF5p\VPRR44P 4R8wgK3VNK7 up,#uupi \ dTu#i;i)aAAdd the virtual MoA provider row used by interactive model pickers. ``list_authenticated_providers()`` only returns real/auth-backed providers; the CLI inventory adds MoA separately, so gateway pickers need the same virtual row here. Reuses the inventory's single row builder so the row shape stays defined in one place.)_moa_provider_rowrr'moa)rrrr/r4r9)r;rrmoa_rowrs&& r_prepend_moa_picker_providerrJsw :#$45 ? yy\y!Cfb8I4J4P4P4RV[4[AAy\\\\ s-A%A%0A A A% A%% A54A5cHV^8dQhRRRRRRRRRR R RR R R RRR RR RR RR/ #)rrrrrrr$rArrr include_moarCrrrrrrr)rs"rrrZsz***25*LW*!*6@*X[**4?* *BF * $( * 5? *rc ^RIHp ^RIHp V !WW#VVRVWV R7 p V'd \ WR7p .pV Fp\ VP RR44P4R8XdHV !VR 7UUu.uFwppVNK ppp\V4p\VVR4VR &\V4VR &\VP R 44;'d\VP R 44pVP R 4'g V'gKVPV4K ^RIHpV!V4\#V4V#uuppi \d\TP R .44pLi;i)uInteractive-picker variant of :func:`list_authenticated_providers`. OpenRouter's list is replaced with :func:`hermes_cli.models.fetch_openrouter_models` (curated snapshot filtered against the live catalog) and rows left with no models are dropped — except custom endpoints, where the user may supply their own model set through config. ``non_blocking_catalogs`` makes every catalog read cache-only: provider catalogs warm in the background, OpenRouter's stale disk copy is served as-is; the ``probe_*`` flags are forwarded.r)fetch_openrouter_modelsT) rrrr$rrrrrrr)rrr'rrr+rr;r)drop_unofferable_model_ids)r-rrrrrr/r4r9r1r5rrrCrhermes_cli.models_validater_attach_window_model_notes)rrrr$rrrrrrrrrr;filteredrrr{live_idsis_custom_endpointrs&&&&&&&&&&& rlist_picker_providersrZsKE9,)%U_#I[3&C EI 0^ H  quuVR ! ' ' )\ 9 5.EQf.gh.gFCC.ghQA%h LIAhK #H An !!%%(9":;VVQUU9EU@V 55??00 OOA Fx(x( Oi 5h 34 5s$' E3D:E:E&E)(E)c V^8dQhRRRR/#)rr;rrrr)rs"rrrsAA*AArc:\RV4R4pVfR#^RIHpHpHpV!4pT;'g V!RR7pVfR#^RIHpV!4pVPR.4U u.uFp \V 4NK p p V!W4P4U U u/uFwrV!V 4;p 'gKWbK p p p V 'dWR&VfR#VP4pV'dWR &R#R#uup iuup p i \d\PR RR 7R#i;i) uNous on a usage-window plan, for the messaging pickers (same words as the CLI/TUI/desktop pickers): ``model_labels`` {id: "Large" | "Free"} (plan shape, any-age snapshot; other levels carry no tag), and from a fresh snapshot only (a stale percent would mislabel it) ``plan_line`` (the limit line: "Weekly limit reached · resets in 21h · paid models now use your credits (pay as you go)"). Every field is omitted when empty and for any account not on a window plan. Never raises.c3"TF7p\VPRR44P4R8XgK3VxK9 R#5i)rr'reN)rr/r4)rHrs& rrJ-_attach_window_model_notes..s2V 1Svr1B-C-I-I-Kv-UQQ s 0A AN)rsusage_level_label usage_levelsTrt)cached_pricingr+ model_labels plan_linezwindow model notes failedr)rrwrsrragent.plan_limitsrr/rr limit_liner9rr)r;rersrrfreshr|rryrIr+lvrlabelslines& rrrs AV VX\] < dd!#88*48 = 4 ""&((8R"89"8Q#a&"89(4V(E(K(K(Mr(Muq[lmo[pRpRWRp(!((Mr #) = !  $  :r A 04 @AsQC4C4C4!C4&C):C4C..C.4C4 C4!C4) C44"DD>rer opencode-go opencode-zen)NrNr5))r&r(rb)F)r'r'NN) r'r'NNNr'FNFTF)Y__conditional_annotations__rV __future__rlogging http.clientrr6r threadingr dataclassesrrtypingrrragent.command_token_sourcerr rr r r utilsr getLoggerr frozensetrrXrAr8r1rrQrhEventrrrrr7r/rrrrrrr(r$rDrIrNr[rZrar}rrrrrrrr6r7rrrrr rrfrmr|rrrrrrrrrrr)r s@rrsV # (&&^YY'   4 5 .77l-mNm' EI' (,' PT' T"MT#YMDD37DDDDR"'')%di$ :(4V!# 0R "8J  5 %2&(ZZ^^ d S L0ae0.30"G27G.b6" (P 6P^\] ')X.-b t<t< t