+ jHjYa0t$Rt^RIHt^RIt^RIHt^RIHtH t H t H t H t ^RI HtHt]P !]4t]!RR7!RR 44t/R ]!R R R 7bR]!RRR7bR]!RRR 7bR]!RRRR7bR]!RRRR7bR]!RRRRR 7bR!]!RR"R#R$7bR%]!RR&R'R(7bR)]!RR*R+R,R 7bR-]!RR.7bR/]!R0RR17bR2]!RR3R47bR5]!R6R77bR8]!RR9R:R(7bR;]!R0R]!R0RR?R7bR@]!R0RAR=7b/RB]!RCR77bRD]!RER77bRF]!RGR77bRH]!RRI7bRJ]!RRKR7bRL]!RRMR7bRN]!RROR7bRP]!RRQR7bRR]!RRSR7bRT]!RRRR7bRU]!RVRWRX7bRY]!RZR77bR[]!R\R77bR]]!R0R^R_R7bR`]!RaRbRX7bRc]!RRdReR(7bRf]!RRgRhR(7bCRi]!RRjRk7Rl]!RmRRnRoRp7Rq]!RRrRsR(7Rt]!RRuRvR(7Rw]!RxRyRX7Rz]!R{R77R|]!R}R~R7R]!RR7/CtR]R&]!RR44t/RRbR2RbRTRbRRbRURbR5RbR8RbR@RbR/RbR-RbR)RbRRbRHRbRJRbRLRbRNRbRBRb/RDRbRFRbRPRbRRRbRYRbR[RbR]RbR|RbR`RbRfRbRiRbRqERbRlERbRtERbR%ERbRERbCtR]R&]P14UUUu/uFwrVFq"VbK K uppptR]R&/R RbRRbRRbR)RbR8RbRYRbRfRbRqRbRlRbR[RbRtRbR]RbR%RbRRbR|RbRRbRwRbRR/CtR]R&RRmR0R0RRR}R}/tR]R&RRltERRRlltERRRlltRRltRR/RRllt RRlt!RRlt"RRlt#]$!RLRJ04t%R]R&RRlt&RRlt']$!RR04t(R]R&ERRRllt)ERRRllt*RRlt+ERRRllt,ERRRllt-RRlt.ERRRllt/ERRRllt0RRlt1RRlt2Rt3]3RR3t4R]R&RRlt5RRlt6ER RRllt7R#uupppi( z=Single source of truth for provider identity in Hermes Agent.) annotationsN) dataclass)AnyDictListOptionalTuple)base_url_host_matchesbase_url_hostnameT)frozencp]tRt^t$RtRtR]R&RtR]R&RtR]R &Rt R ]R &R t R]R &R t R]R&Rt R#) HermesOverlayz?Hermes-specific provider metadata layered on top of models.dev. openai_chatstr transportFbool is_aggregatorapi_key auth_typetuple[str, ...]extra_env_varsbase_url_overridebase_url_env_varN) __name__ __module__ __qualname____firstlineno____doc__r__annotations__rrrrr__static_attributes__r9/home/ubuntu/.hermes/hermes-agent/hermes_cli/providers.pyr r sCI"Is"M4Is&(NO(scr"r moavirtualz moa://local)rr openrouterOPENROUTER_BASE_URL)rrnousoauth_device_codez)https://inference-api.nousresearch.com/v1z openai-codexcodex_responsesoauth_externalz%https://chatgpt.com/backend-api/codex)rrrz openai-apizhttps://api.openai.com/v1OPENAI_BASE_URL)rrr xai-oauthzhttps://api.x.ai/v1 XAI_BASE_URL)rrrrz qwen-oauthzhttps://portal.qwen.ai/v1HERMES_QWEN_BASE_URL)rrrlmstudiozhttp://127.0.0.1:1234/v1 LM_BASE_URL)rrrz copilot-acpexternal_processz acp://copilotCOPILOT_ACP_BASE_URLzgithub-copilot)r anthropicanthropic_messages)rrzai GLM_BASE_URL)rrzkimi-for-coding KIMI_BASE_URL)rstepfunz#https://api.stepfun.ai/step_plan/v1STEPFUN_BASE_URLminimaxMINIMAX_BASE_URL)rrz minimax-oauthz https://api.minimax.io/anthropicz minimax-cnMINIMAX_CN_BASE_URLdeepseekDEEPSEEK_BASE_URLalibabaDASHSCOPE_BASE_URLzalibaba-coding-planALIBABA_CODING_PLAN_BASE_URLvercel)ropencodeOPENCODE_ZEN_BASE_URLz opencode-goOPENCODE_GO_BASE_URLkiloKILOCODE_BASE_URL huggingface HF_BASE_URLnovitaNOVITA_BASE_URLxainvidiaz#https://integrate.api.nvidia.com/v1NVIDIA_BASE_URL)rrxiaomiXIAOMI_BASE_URLztencent-tokenhubTOKENHUB_BASE_URLztencent-tokenplanz2https://api.lkeap.cloud.tencent.com/plan/anthropicTOKENPLAN_BASE_URLarceezhttps://api.arcee.ai/api/v1ARCEE_BASE_URL commandcodez&https://api.commandcode.ai/provider/v1COMMANDCODE_BASE_URLgmizhttps://api.gmi-serving.com/v1 GMI_BASE_URL fireworksz%https://api.fireworks.ai/inference/v1)rractualchat_completionszhttps://api.actual.inc/v1ACTUAL_BASE_URL)rrrrupstagezhttps://api.upstage.ai/v1UPSTAGE_BASE_URLznebius-token-factoryz&https://api.tokenfactory.nebius.com/v1NEBIUS_BASE_URLz ollama-cloudzhttps://ollama.com/v1OLLAMA_BASE_URLz azure-foundryAZURE_FOUNDRY_BASE_URLbedrockbedrock_converseaws_sdk)rrvertex)rzdict[str, HermesOverlay]HERMES_OVERLAYSc]tRt^et$RtR]R&R]R&R]R&R]R&RtR]R &RtR]R &R tR ]R &Rt R]R&Rt R]R&Rt R]R&Rt R#) ProviderDefuPComplete provider definition — merged from models.dev + overlay + user config.ridnamerrapi_key_env_varsrbase_urlrFrrrrdocsourcerN) rrrrrr rmrrrrnror!rr"r#ririesVZ G IN%%HccM4IsCMFCr"ricustomllamacpp llama.cpp llama-cppzdict[str, tuple[str, ...]] _ALIAS_GROUPSzdict[str, str]ALIASESzMixture of Agentsz Nous PortalzChatGPT or Codex SubscriptionzGitHub Copilot ACPzStepFun Step Planz Xiaomi MiMoz GMI Cloudz Upstage SolarzActual ComputerzTencent TokenHubzNebius Token FactoryzTencent TokenPlanz LM StudiozCustom endpointz AWS BedrockzGoogle Vertex AIz Ollama Cloudz%xAI Grok OAuth (SuperGrok / Premium+)_LABEL_OVERRIDESrTRANSPORT_TO_API_MODEc V^8dQhRRRR/#)rkrreturnr)formats"r# __annotate__r|s!!S!S!r"chVP4P4p\PW4#)z@Resolve aliases and normalise casing to a canonical provider id.)striplowerruget)rkkeys& r#normalize_providerrs% **,   C ;;s  r"c$V^8dQhRRRRRR/#)ryproviderrrmrzrr)r{s"r#r|r|s!c#tr"c^\T;'gR4R8H;'g\V4R8H#)zRIdentify Actual by provider/alias or its hosted endpoint, including custom routes.rr[api.actual.inc)rr )rrms&&r#is_actual_routers4 8>>r*h6 ; ; X &*: :r"c V^8dQhRRRR/#)ry canonicalr allow_networkrr)r{s"r#r|r|sDr"ch^RIHpV'd V!V4#V!VRR7# \dR#i;i)zmodels.dev entry or None. Single-arg call on the default path: test sites monkeypatch ``get_provider_info`` with single-arg lambdas.)get_provider_infoF)rN)agent.models_devr Exception)rr_mdev_providers&& r#_models_dev_infors6H,9~i(m~igl?mm s "" " 11c V^8dQhRRRR/#)ryovr rzrir)r{s"r#r|r|s&&&Ze&r"c x\WVPW4VPVPVPVVR7 #)) rjrkrrlrmrrrrnro)rirrrr)rrrkenv_varsrmrnros&&&&&&&r# _overlay_pdefrs: )",,Ya(*(;(;2K[K[gigsgsy|$ &&r"rc$V^8dQhRRRRRR/#)ryrkrrrrzOptional[ProviderDef]r)r{s"r#r|r|s"sd>Sr"c \V4p\W!4p\PV4pVeT;'g \ 4p\ VP 4pVPFpWv9gK VPV4K \Y%VP\V4VP;'g VPVPR4#Ve8\W$\PW"4VPVPRR4#\!V4pVeHVP"'g8VP$R8Xd%VP&'dVP('gR#V#)uLook up a built-in provider by id or alias: models.dev catalog merged with the Hermes overlay; Hermes-only overlay (nous, openai-codex, …); plugin provider profiles with a concrete endpoint.N models.devrhermesr)rrrgrr listenvrappendrrktuplerapirnrv_plugin_profile_pdefrmrrlr) rkrr mdev_infooverlayrrevpdefs &$ r# get_providerrs(#4(I :I!!),G  ' '  &##B!#$YINNE(ORMaMaMrMrenerer&]]L: :Y1A1E1Ei1[]d]s]s$66HF F *D |DMMMdnn .IdNcNcNchlh}h}h} Kr"c V^8dQhRRRR/#)ryrkrrzrr)r{s"r#r|r|sWWsW'<Wr"c :a ^RIHpV!V4pTfR#\TP;'gR 4p\;QJd.RT4FNK 5M !RT44o \;QJd.T 3RlT4FNK 5M!T 3RlT44p\ P 4UUu/uFwrVYebK pppTP;'gRP4p\TPTP;'gTP;'gTTPY;'gR4YBP;'gRP4\\S 4R4TP ;'gRRR 7# \dR#i;iuuppi) aThe registered ``ProviderProfile`` for *name* (or one of its aliases) as a ProviderDef; the id is the profile's canonical name so an alias switch persists and resolves credentials under the same identity as the profile itself. URL-shaped env vars are the endpoint, not the key.)get_provider_profileNc3V"TFqPR4'gKVxK! R#5i) _BASE_URLN)r_URL)endswith).0vs& r# '_plugin_profile_pdef..sN1JJ7L,MQQs) )c38<"TFqS9gK VxK R#5i)Nr)rrurl_varss& r#rrs>1X,=QQs rrrplugin-profile)rjrkrrlrmrrror) providersrrrrrwitemsapi_moder~rirk display_namerrmnextiterr) rk_profileprofrkey_varskrapi_mode_to_transportmoders & @r#rrsH>~ |T]]((b)HuNNuuNNNHu>>uu>>>H.C.I.I.KL.KdaQT.KL MM  R & & (D $))$*;*;*P*Ptyy*P*PD!6!:!:4AVAV!W(0MM!i9&<#&&)*<*<\*J*J#x((H8O,O!-..3HSb3c3c! r"c V^8dQhRRRR/#)rymodelrrzr)r{s"r#r|r|Xscr"c\T;'gR4P4P4PR4'd\ 4R8XdR#R#R#)aWire protocol for a Nous Portal model. Portal serves its ``anthropic/*`` catalog on a native Messages route alongside OpenAI-compatible chat/completions for everything else. ``anthropic/*`` rides chat/completions by default for now (``nous.anthropic_wire``). Measured 2026-09-06, 20 concurrent sessions x 6 tool calls on Fable 5.1, same account and hour: the native route re-wrote the previous turn on 14-20% of consecutive calls (4 runs; the cache read stopped at the prior breakpoint with byte-identical prefixes), chat/completions 0 of 320 pairs. That is 15-20% of a fan-out's cache-write bill. The cause is inside the portal's native route (NousResearch/api#227 carries the diagnostics); flip the default back to ``native`` when it is fixed. Cost of ``chat``: prior-turn thinking travels as OpenAI-style reasoning fields instead of signed native blocks, and cache_control scopes are translated by the portal's adapter. Empty/unknown model defaults to ``chat_completions`` (the historical Nous transport).rz anthropic/nativer5r\)rr~rr_nous_anthropic_wire)rs&r# nous_api_moderXsN 5;;B%%'22<@@(<'='I#aOaa r"cV^8dQhRR/#)ryrzrr)r{s"r#r|r|ls<>BCCDTU``Z`aggiooq//5;V; s'A1A1#A11 B?Bc(V^8dQhRRRRRRRR/#)ryrrrmrrzr)r{s"r#r|r|ws(cr"c\W4'dR#\V4pVeV#T;'gRP4P4R9d \ V4#\ V4pVeWVP \9d\VP ,#^RIH pVP V!49d VP #R#VR8XdR#R#)uAPI mode (wire protocol) for a provider/endpoint: host-mandated mode, then Nous dual-wire (model-derived — the overlay alone says openai_chat and would pin Claude on the wrong wire), then the known provider's transport, then bedrock, else ``chat_completions``.r\r)registered_api_modesrcrd>r( nousresearch nous-portal) rrr~rrrrrwagent.transportsr)rrmrmandatedrrs&&& r#determine_api_moderwsx**!%h/HB%%'+RRU##  !D  >>2 2(8 89!%3G3I!It~~aOaa9! r"c 0V^8dQhRRRRRRRRRRRR/#) rypidrrkrmkey_envrrzrir)r{s"r#r|r|s?jjCjsjcjCjCjdojr"c :\YYC'dV3MRVRRRR7#)z```source="user-config"`` ProviderDef shared by ``providers:`` and ``custom_providers:`` entries.Frz user-config)rjrkrrlrmrrror)ri)rrkrmrrs&&&&&r# _user_pdefrs+ #I^eQXPZkm ([h jjr"c$V^8dQhRRRRRR/#)ryrkr user_configzdict[str, Any]rzrr)r{s"r#r|r|s'NNN.NEZNr"c 0\V\4'dV'dVPV4MRp\V\4'gR#VPRR4;'g7VPRR4;'gVPRR4;'gRpV'gR#\YPRR4;'gTTVPR4;'gVPR4;'gRVPR R 4;'gR 4#) ugResolve a provider from the user's config.yaml ``providers:`` section. A ``providers.`` block that carries no endpoint (``api``/``url``/``base_url``) is not a custom-endpoint definition — it is tuning for a BUILT-IN provider of the same name (e.g. ``providers.bedrock: {stale_timeout_seconds: 600}``, the documented path in ``agent/turn_recovery.py`` / ``thinking_timeout_guidance.py``). Resolving it here would shadow the built-in's real transport/base_url/auth_type with an empty ``openai_chat``/``api_key`` stub, routing e.g. AWS Bedrock through the generic custom-endpoint ``/models`` probe (#110402). Nrrurlrmrkr api_key_envrr) isinstancedictrr)rkrentryrms&& r#resolve_user_providerrs&0 T%B%B{KOOD !X\E eT " "yy#^^uyy';^^uyyUW?X^^\^H  dIIfb199T8ii *LLeii .FLL"ii ];LL} NNr"c$V^8dQhRRRRRR/#)ryrr provider_keyrzr)r{s"r#r|r|s&VVsV#VsVr"c\T;'gR4P4;'g$\T;'gR4P4pVP4PRR4pVP R4'dV#RV 2#)zStable ``custom:`` identity for a configured provider: keyed ``providers:`` entries use their config key (survives display-name changes); legacy ``custom_providers:`` entries have no key, so their normalized display name is the identity.r -r)rr~rreplacer)rridentity normalizeds&& r#custom_provider_slugrsx<%%2&,,.QQ#l6H6Hb2I2O2O2QH!))#s3J#..y99:U ?UUr"c$V^8dQhRRRRRR/#)ryrrrrzrr)r{s"r#r|r|s!  # S . r"c\4pW3Fp\T;'gR4P4P4pV'gK>VP RR4pVP WE\ V404VPR4'gKVPR^4^,pV'gKVP VRV 204K \V4#)zCReturn every current and legacy identity accepted for one endpoint.rrrr:) setrr~rrupdaterrsplit frozenset)rraliasesrrawrsuffixs&& r#custom_provider_aliasesrsG-%++2$$&,,. [[c* )=j)IJK   + +%%c1-a0Fv'*(>?@. W r"c$V^8dQhRRRRRR/#)ryrkrcustom_providersOptional[list[dict[str, Any]]]rzrr)r{s"r#r|r|s##9W\qr"c DT;'gRP4P4pV'dV'd\V\4'gR#RpVEF5p\V\4'gKVP R4;'gRP4pVP RR4;'g7VP RR4;'gVP RR4;'gRP4pV'd V'gKVP R4;'gRP4p\ \WW4YVVP R4;'gRP44pVfTpV\WW49gEK4Vu# VR 8Xd V'dV#R#) zResolve a provider from the user's config.yaml ``custom_providers`` list. A stored bare ``"custom"`` (corrupt state from a prior model-switch bug) falls back to the first valid entry so existing configs self-heal.rNrkrmrrrrrp) r~rrrrrrrr) rkr requested first_validrrapi_urlrrs && r#resolve_custom_providerrsN""$**,I ,J?OQU4V4V)-K"%&&  &)//R668 99Z,bb %0Dbb RWY[H\bb`biik7  .177R>>@ .|JL 99Y/552<<>@  K / K KK"H r"c$V^8dQhRRRRRR/#)ryrrrrzrr)r{s"r#r|r|s"CC "github-copilot") are correct routing and keep resolving through the built-in chain so overlay transports apply.)PROVIDER_REGISTRYNc3L<"TFp\V4S8XgK^xK R#5i)N)r)r_ridrs& r#r-_lossy_alias_registry_pdef..s#^4T8J48PT]8]qq4s$ $rrzhermes-auth-registryrjrkrrlrmror) hermes_cli.authrrsumrirjrkrrlinference_base_urlr)rr_AUTH_PROVIDER_REGISTRY_pcfgs&f r#_lossy_alias_registry_pdefr(s  P'++C0 = ^4^ ^ab b%((}05e6L6L6R6RPR0S^c^v^v^|^|z|&<> > c     s#BA B.BB B"!B"rLLAMACPP_ALIASEScV^8dQhRR/#)ryrzrr)r{s"r#r|r|s$r"cT^RIHp\V!44# \dR#i;i)uTrue when GGUFs are staged under the Hermes home's ``models/`` — the model the picker's Local row offers, which the runtime seam serves by booting/attaching a server on selection.staged_model_idsF)"hermes_cli.local_runtime.bootstrapr-rrr,s r#_has_staged_local_modelsr/s+G$&'' s  ''cV^8dQhRR/#)ryrzrr)r{s"r#r|r|s^^-^r"c ^RIHp^RIHpV!V!4^R7pV'g\ 4'gR#\ \RRR T;'g/PRR4R R 7# \dRpLXi;i) u?The llamacpp aliases are a real provider whenever the managed server (or a detected external one) resolves — reachability is the credential — OR a model is staged for the runtime to serve. The picker's Local row is built from staged GGUFs and is deliberately offline-first (selection starts the server through the runtime seam), so requiring a live endpoint before admitting the id made that row offer a provider the resolver rejected ("Unknown provider 'llamacpp'"). Without this rung model-switch rejected the very provider the Local Models 'Use' flow writes to config.r)resolve_llamacpp_endpoint)configwait_for_boot_sNLocalrrmrz local-runtimer"r) rr!hermes_cli.local_runtime.endpointr2rr/riLLAMACPP_PROVIDER_IDr)rr2endpoints r#_llamacpp_pdefr9sv:O,4H4J\]^ 466 .W hj!)R 4 4Z D_ ^^ sA&& A65A6c(V^8dQhRRRRRRRR/#) ryrkruser_providerszOptional[dict[str, Any]]rrrzrr)r{s"r#r|r|s11F1F1F5M1F,J1FVk1Fr"c \V4pVP4P4pV'd\WA4pVeV#W48wd\ WC4pVeV#\ V4pVe8VP R8Xd%V'd\VPV4pVeV#V#V'dW43Fp\Wq4pVfKVu# \W4pVeV#V\9d\4pVeV#\V4p V e/\W9PRV PV PRR7#\#V4pVeVPR8wdV#R# \ dL1i;i)aFull resolution chain: user ``providers.`` -> lossy-alias registry id -> built-in (models.dev + overlays) -> user providers (canonical, then raw) -> ``custom_providers`` -> managed llamacpp -> models.dev directly. User-defined ``providers.`` is tried FIRST on the raw (pre-alias) name: a configured ``providers.openai`` pointing at api.openai.com must not be hijacked by the legacy "openai" -> "openrouter" alias.Nrrrr"rp)rr~rrr(rrorjrr)r9rrirkrrrr) rkr;rrr user_pdefr candidate custom_pdefrs &&& r#resolve_provider_fullr@sn#4(I **,   C)#>   )#9  K  "D  ;;* *~-dgg~FI$   #)I-iHI$  **$AK   K $Y/  )..Mlulyly(1 lL L ! *D#8(;4EE    s2rs3C"!33:   8 $  $D- =9 ND--dEZ[D- M$7Kv wD-M,=IY4[] D- -*;Oj1BD D-):FV1FYgiD--*:Ni1GID- _Pj/<>D-=+Qfg5D-6 /BC7D-8}.BC9D-:=:XY;D-< m$/=D-> DCZ[?D-@=tF\]AD-B M?R SCD-D=tmTED-F m$ARSGD-H =#4H]p~ ID-J m.SfwxKD-L m->?MD-N 7JKOD-P1E9m8LNQD-V ]-J]m nWD-Z=0H3[2HJ[D-` =(8Ll*8 :aD-d.D1XZ m&8I\.I\mo },@To.@BM9k] - * - -=>S -*--;-'-*78Q-TZ\E--!*+[-V-<-?GHa- %-(:;r-7-A-DKLc-  $!- '23I!- LUV`!-" :#-$k%-&6'-, O-- )0?L>Q>Q>Si>SNEahX]%Sii $ $ & $7EGf$'$)24G$IQS`$bgit$$!)*;$>PQc$2 $5HI\ $_iju $   $ "+M $ P)~! & T>W2,1-6}j6Q,R>R( =$+4]DT4U*VV@(<2jj N*VV   :."%9; $T/T^&1F1FU jsP