+ jHj^paERtN0tRt^RIt^RIt^RIHt^RIHt^RIH t H t H t H t H t Ht^RIHt^RIHtHtHtHtHt^RIHt^RIHt^R IHt]'d^R IHt]P>!R 4t R R lt!RRlt"RRlt#/R]#!R.]"!4O5RRRR/bR]#!R.]!!4O5!bRRRRRRR/bR RR!RR"RR/bR#]#!R$R%R&R'R(R)R*4bR+RRRR,/bR-]#!R.R/R0R1RR27bR3]#!R4R5R64bR7RR8RR9RR:/bR;]#!RR:R?7bR@RR8RRARR:/bRBRR8RRCRR:/bRD]#!RERF.]O5!bRG]#!RHRIRJRKRLRMRNRORPRQRR4 bRS]#!RTR%RURKRNRLRJRV4bRW]#!RX.]R%,O5!bRY]#!RZ.]RU,O5!b/R[]#!R\.]RK,O5!bR]]#!R^R_R`RaRb4bRc]#!Rd.]RN,O5!bRe]#!Rf.]RL,O5!bRg]#!Rh.]RJ,O5!bRi]#!RjRkRlRmRn4bRo]#!RpRkRqRrRmRsRt4bRu]#!RvRwRxRy4bRz]#!R{R|R}R~4bR]#!RRRRy4bR]#!RRkR4bR]#!RRyRR4bR]#!RRRRR4bR]#!RRRRRFR4bR]#!RRRwRRRRRR4 bR]#!RRR4bRRR8RR/bCRRR8RR/RRR!RR/RRR!RR//Ct$]^k/RR:bRRbRRbRRbRRbRRbRRbRR:bRRbRRbRRbRRbRRbRRbRRbRRbRRbRRRRRR:RRRRRRRRRRRRRR:RR/ Ct%]^k]&R83]'R!3](R!3])R3]*R33t+RRlt,ERRRllt-RRlt.].!4t/RRlt0RRlt1RRlt2RRlt3RRlt4RRlt5ER RRllt6ERRRllt7RRlt8ER t9]^kRRlt:RRlt;RRltRRlt?RRlt@RRltARRltBRRltCRRltDER RRlltE]F!4tG]^kRRltHRRltI]G3RERlltJR]GR3ERERlltKERERltLERERltMR#( zDashboard config schema and model-assignment logic: CONFIG_SCHEMA construction, dynamic provider options, web<->config normalisation, main/aux model assignment. N)replace) HTTPException)AnyDictListOptionalTuple TYPE_CHECKING)is_local_endpoint)DEFAULT_CONFIGcfg_get clear_model_endpoint_credentialsfind_provider_entryread_raw_config)_normalize_memory_provider_name)STT_MODEL_CATALOG)_PROVIDER_PREFERENCE)ModelSwitchResultzhermes_cli.web_serverc:V^8dQhR\\,/#returnliststr)formats"A/home/ubuntu/.hermes/hermes-agent/hermes_cli/web_server_config.py __annotate__r s(($s)(cR.p^RIHpVPV!44\ \PV44# \d\P RRR7LBi;i)uDiscovered memory providers for the ``memory.provider`` select. Directory-scan only (no provider imports), so safe at module import time. ``""`` (built-in only) is always first; a discovery failure leaves only that. The literal ``builtin`` alias is deliberately NOT offered — built-in memory is not a provider plugin; ``_normalize_memory_provider_name`` maps legacy aliases back to ``""``. See #49513. )list_memory_provider_namesz memory provider discovery failedTexc_info) plugins.memoryr!extend Exception_logdebugrdictfromkeys)optionsr!s r_memory_provider_optionsr, s^dGF=134  g& '' F 5 EFs?"A$#A$c:V^8dQhR\\,/#rr)rs"rrr4s49rc|^RIp\VP44;'gR.# \dR.u#i;i)z?Return sorted IANA timezone identifiers, cached at import time.NUTC)zoneinfosortedavailable_timezonesr&)r0s r_timezone_optionsr34s>h2245@@%@ ws#**;;c jV^8dQhR\R\R\R\\\3,/#)r descriptionr+extrar)rrr))rs"rrr=s6]]]]c]d38n]rc(RRRVR\V4/VC#)typeselectr5r+)r)r5r+r6s&*,r_selectr:=s Hm[)T'] \V[ \\rtimezonezFIANA timezone (e.g. America/New_York). Blank uses the system timezone. searchableT clearablememory.providerzMemory provider pluginmodelr8stringr5z0Default model (e.g. anthropic/claude-sonnet-4.6)categorygeneralmodel_context_lengthnumberz=Context window override (0 = auto-detect from model metadata)terminal.backendzTerminal execution backendlocaldockersshmodaldaytonavercel_sandboxzterminal.vercel_imagezhVercel Sandbox image: a Vercel managed image (vercel/sandbox/universal:latest) or a VCR repository[:tag]zterminal.vercel_runtimezrLegacy Vercel Sandbox runtime (deprecated by Vercel; a pinned runtime overrides the image; clear to use the image)node24node22z python3.13)r=zterminal.modal_modezModal sandbox modesandboxfunctionz proxy.enabledbooleanzDocker-only egress credential firewall. Requires `hermes egress setup` and `hermes egress start`; Modal/SSH/Daytona are not wired yet.securityzproxy.credential_sourcez:Where iron-proxy loads real upstream secrets at start timeenv bitwarden)rAzproxy.enforce_on_dockerzIRefuse Docker sandboxes when egress is enabled but not configured/runningzauth.adopt_external_loginszBorrow and refresh the Codex CLI / Claude Code logins when Hermes has no usable login of its own. Off: Hermes uses only its own logins (`hermes auth add `).zwake_word.providerz_Wake engine. Auto selects a platform-supported engine; Porcupine requires PORCUPINE_ACCESS_KEY.autoz tts.providerzText-to-speech provideredge elevenlabsopenaixaiminimaxmistralgeminineutts kittenttspiperz stt.providerzSpeech-to-text providergroq deepinfrazstt.local.modelzLocal faster-whisper model sizezstt.groq.modelzGroq Whisper modelzstt.openai.modelzOpenAI transcription modelzstt.openai.streaming_modelz/OpenAI live transcription model (stt.streaming)zgpt-live-transcribezgpt-transcribezgpt-4o-transcribezgpt-4o-mini-transcribezstt.mistral.modelz#Mistral Voxtral transcription modelz stt.xai.modelzxAI transcription modelzstt.elevenlabs.model_idzElevenLabs Scribe modelz display.skinzCLI visual themedefaultaresmonoslatezdashboard.themezWeb dashboard visual thememidnightember cyberpunkrosezdisplay.resume_displayz$How resumed sessions display historyminimalfulloffzdisplay.busy_input_modez%Input behavior while agent is running interruptqueuesteerzapprovals.modezDangerous command approval modemanualsmartzcontext.enginezContext management enginecustomzhuman_delay.modezSimulated typing delay modetypingfixedz logging.levelzLog level for agent.logDEBUGINFOWARNINGERRORzagent.service_tierzUFast mode: fast = always, auto = first N seconds of each turn, cold = first turn onlyr normalfastcoldzdelegation.reasoning_effortz(Reasoning effort for delegated subagentslowmediumhighxhighmaxultraz%updates.non_interactive_local_changeszWhen the chat app / gateway updates Hermes (no terminal prompt), what to do with uncommitted local source edits. 'stash' keeps them and re-applies them after the update; 'discard' throws them away. Terminal updates always ask, regardless of this setting.stashdiscardzupdates.refresh_cua_driverzRefresh an already-installed cua-driver during hermes update. Disable this on non-admin macOS accounts where /Applications is not writable.zbrowser.headedzRun the local browser in headed mode (visible window). Also keeps the window open between turns; idle sessions are still reaped after browser.inactivity_timeout.zplugins.hook_callback_timeouta#Wall-clock cap (seconds) for timeout-bounded in-process Python plugin hook callbacks (hot-path observers + pre_tool_call). Timed-out pre_tool_call fails closed. 0 disables the cap; values above 600 are clamped. Caller-thread hooks such as subagent_stop are never moved onto a timeout worker.zplugins.load_timeout_secondszDeadline (seconds) for one plugin's import + register() at load. A plugin that overruns it is skipped with the reason 'load timed out' and the rest keep loading. 0 disables the deadline; values above 600 are clamped.privacycontextagentskillscronnetwork models_dev checkpoints approvals human_delaydisplay dashboardcode_executionprompt_cachingbot_modegoalsupdates onboardingtelegramdiscordmcp computer_use telemetrypluginsdoctorruntimesessionnous connectionsauthfallbackrobjectc0V^8dQhR\R\/#rvaluer)rr)rs"rrrsQQsQsQrc8a\V3Rl\4R4#)z*Infer a UI field type from a Python value.c3T<"TFwr\SV4'gKVxK R#5iN) isinstance).0pyuirs& r _infer_type..sE)z%/D)s( (r@)next _UI_TYPES)rsfr _infer_typers E)Ex PPrc V^8dQhR\\\3,R\R\\\\\3,3,/#)rconfigprefixrr)rr)rs"rrrsAd38nc4PSUYZ]_bZbUcPcKdrc 6/pVP4EFwr4V'dV RV 2MTpVR8XdK \V\4'dVP\ WE44KRR\ V4RVP RR4P RR4P4RV'dVPR4^,MR /pVP\PV/44\PVR,VR,4VR&WbV&EK V#) uFWalk DEFAULT_CONFIG and produce a flat dot-path → field schema dict.._config_versionr8r5u → _ rArB) itemsrr)update_build_schema_from_configrrtitlesplit_SCHEMA_OVERRIDESget_CATEGORY_MERGE)rrschemakeyrfull_keyentrys&& rrrs(*Flln (.fXQse$C ( (  eT " " MM3ED E  K& 8++C9AA#sKQQS  S)!,I!   &**8R89+//j0A5CTUj x% MrchV^8dQhR\\\\\3,3,/#rr)rs"rrrs%Dd38n1D,Erc/p\\4P4F"wrW V&VR8XgK\R,VR&K$ V#)zDEFAULT_CONFIG schema plus the virtual ``model_context_length`` field, inserted right after ``model`` so it renders adjacent in the frontend.r?rC)rr rr)orderedrrs r"_config_schema_with_virtual_fieldsrsJ*,G/?EEG  '>.?@V.WG* +H Nrc0V^8dQhR\R\/#rrbool)rs"rrrs>>c>d>rcX\V\4'gR#\VPR4;'gR4P 4P 4pV'd VR8wdR#VPR4p\V\4;'d\ VP 44#)aTrue when *value* declares a command-type voice provider. Mirrors the runtime discriminators (``tools.tts_command_provider._is_command_provider_config`` / ``tools.transcription_command._is_command_stt_provider_config``) and the desktop's ``isCommandProvider``: ``type`` is OPTIONAL and case/space-insensitive (absent or normalizing to ``"command"``); ``command`` MUST be a non-empty string. Fr8r command)rr)rrstriplowerr)rptypers& r_is_command_provider_blockrs| eT " "  &!''R ( . . 0 6 6 8E )#ii "G gs # = =W]]_(==rc V^8dQhR\R\\,R\\\3,R\\,/#)rkind builtin_namescfgr)rrr)r)rs"rrr%s<5535tCy5tCQTH~5Z^_bZc5rcaaVUu.uFp\V4NK upoSUu0uF q3P4P4kK" upoVR8Xd^RIHpM^RIHpRVV3RllpVPV4p\V\4'g/pVPR4p\V\4'dV.M.pTPVP4U U u/uFwrV R8wgKWbK up p 4VFtp V P4F]wr\V \4'gKV P4P4V9gKB\V 4'gKUV!V 4K_ Kv VR8Xd^RI HpM^RIHpV!4FpV!\!VRR 44K V!\%W R 44S#uupiuupiuup p i \"dL1i;i) uBMerged ``tts``/``stt`` provider options without hard-coding vendor names. Built-in display names first (original order), then, deduped case-insensitively: 1. Command-type providers from canonical ``.providers.`` and the legacy top-level ``.`` — the runtime's dual resolution order. Names colliding with a RUNTIME built-in are excluded (the runtime rejects them before config lookup); the runtime sets are used rather than the display shortlist, which drifts. 2. Plugin-registered names from the tts/transcription registries — opportunistic: this process may never call ``discover_plugins()``, so the registry may be empty. 3. The current ``.provider`` value, so a custom active name stays selectable. Guard semantics mirror the desktop's ``commandProviderNames`` so both surfaces agree. tts)BUILTIN_TTS_PROVIDERS)BUILTIN_STT_PROVIDERSc(V^8dQhR\RR/#)rnamerN)r)rs"rr._custom_provider_options..__annotate__9s''3'4'rc<\V\4'dVP4MRpV'dJVP4S9d3SP V4SP VP44R#R#R#)r N)rrrrappendadd)rstrippednamesseens& r_add&_custom_provider_options.._add9sS#-dC#8#84::&G G ,G 55G GGchV^8dQhR\\\3,R\\,/#rrr)r)rrr)rs"rrr]s&c3hDIrc\4pVPR4p\\V\4'dVPR4MR4pV'd W19d.VOVNpV#)zDiscovered memory providers plus the currently-configured one, so a value that is no longer discoverable (e.g. plugin removed from disk) never vanishes from the dropdown.memoryrN)r,rrrr))rr+rcurrents& r_memory_provider_schema_optionsr]sZ'(G WWX F- SY[_H`H`fjj.DfjkG7)%G%W% Nrc\V^8dQhR\R\\\,,/#)rrr)rrr)rs"rrrhs#:::c(;:rc\PV4p\V\4'dVPR4MRp\V\4'dV#R#)r+N) CONFIG_SCHEMArrr)r)rrr+s& r_schema_select_optionsrhsE   c "E&0&=&=eii "4G $//79T9rchV^8dQhR\\\\\3,3,/#rr)rs"rrrns(&F&FtCc3h4G/H&Frc $a ^RIHp^RIHpV!4p/o RT 3RllpR F7p\ T R24pTfKT!T R2\T\T4T44K9 T!R\T44\ R4pTeM\T!4Uu0uF qwR,kK up\T4, 4pT'dT!R.TOTO4S 'd /\ CS C#\ # \d \ u#i;iuupi \d.pLXi;i) aCONFIG_SCHEMA with per-request discovery-driven ``*.provider`` options merged. ``_SCHEMA_OVERRIDES`` freezes option lists at import time, so a provider installed after the server started never appears. Recomputing at request time reflects the CURRENT (possibly profile-scoped) config.yaml and mid-session plugin installs for every surface that reads the schema. ``CONFIG_SCHEMA`` is never mutated; changed entries are shallow-copied onto a copied mapping. )_plugin_terminal_backend_rows load_configcJV^8dQhR\R\\,RR/#)rrr+rN)rr)rs"rr;_schema_with_dynamic_provider_options..__annotate__s*FF3FcFtFrc<\V4e4V\V,R,8wd/\V,CRV/CSV&R#R#R#)Nr+)rr)rr+overlays&&rmerge4_schema_with_dynamic_provider_options..mergesD !# & 2w-PSBTU^B_7_EmC0E)WEGCL8` 2rz .providerr>rEr)rstt) hermes_cli.web_server_profilesrhermes_cli.configrr&rrrrrr1set) rrrr rexisting tb_optionsrow plugin_namesr s @r%_schema_with_dynamic_provider_optionsrns)M-m*,GFF)TF)*<=   TF)$&>tT(^UX&Y Z  ``) are excluded — ``_KNOWN_PROVIDER_NAMES`` lists only the bare ``custom`` bucket, so without this a LiteLLM proxy serving ``ollama/glm-5.2`` would be silently reassigned to openrouter. Matching only that syntax (not ``startswith("custom")``) avoids swallowing unconfigured vendors like ``customproxy``. 2. Model-format normalization for the resolved provider via ``normalize_model_for_provider`` (custom/user providers keep the model verbatim). rget_compatible_custom_providers)_AGGREGATOR_PROVIDERS_KNOWN_PROVIDER_NAMESnormalize_provider)normalize_model_for_provider)resolve_custom_providerresolve_user_providerr rrqzcustom:/r?rprovider_has_credentials openrouterz$model normalization failed for %s/%sTr")rrrhermes_cli.modelsrrr hermes_cli.model_normalizer!hermes_cli.providersr"r#rr&rr)rid startswithrrhermes_cli.models_detectr&r'r()rr?rrrrr r!r"r#prov_inmodel_in canonicalruser_providersdeclaredis_custom_provider_slugcur_cfg cur_providerr&s&& r _normalize_main_model_assignmentr6s'&.AbbGS~~2$$&G ""$H"7+Im c4 WW[)N$:nd#C#CPP *I#*N O {{H$$'83VVy7K7KI7V-6MRUYaRa gggr*GJTU\^bJcJcGKK B/5526<<>DDFik  .|<@UU*<8I"G I( 55&22 ))2F2Fx2P2P a3HHTTHH  7 K $ L   a JJ=w[_J `   asC"G'AG;%G;HH' G87G8; H  H #H65H6c XV^8dQhR\R\R\R\R\RR/#)rrrr?base_urlapi_keyrrr)r)rs"rrrs<     %( 47 GJ  rcf^RIHp^RIHp\ VP R4\ 4'dVP R4M/pVP4P4R9pT!Y!R\VP R4;'gR4\VP R4;'gR4V'dTM#\VP R4;'gR4V'dTMR\ VP R 4\ 4'dVP R 4M/V!V4R 7 p V P'g"\R V P;'gR R 7hV'dKVP4'd5^RI Hp VP4p \WV !V P V 4R7p V #)abRoute a dashboard main-slot pick through ``switch_model`` (catalog/alias/credential validation) seeded with the configured route, exactly like a ``/model --provider --global``. A bare ``custom`` target carries the submitted endpoint as the current one, which is how ``switch_model`` binds a custom base_url/key. Rejections become 400s.r) switch_modelr?Trr rar8r) raw_inputexplicit_provider is_globalcurrent_provider current_modelcurrent_base_urlcurrent_api_keyr1custom_providerszmodel switch rejected status_codedetail)determine_api_mode)r8api_mode>rFrq)rrhermes_cli.model_switchr<rrr)rrrsuccessr error_messager*rIrtarget_provider) rrr?r8r9rr< model_cfgis_bare_customresultrIurls &&&&& r_validated_main_model_selectionrSsKB4$.swww/?$F$F BI^^%++-1DDN tY]]:6<<"=SQZQ^Q^_hQiQoQomoMp%3Y]]:=V=\=\Z\9]#1r/9#''+:NPT/U/Usww{+[]8= ?F >>>F4H4H4c4cLcdd(..** <nn"4V5K5KS"QS Mrc@V^8dQhR\RRR\R\/#)rrOrQrr9r)rrr))rs"rrrs+  C 9L WZ dh rc^RIHpV!W4pVP4'd&VP4VR&VPRR4V#)aQApply a main-slot selection to a ``model`` config dict via the canonical /model shape (``hermes_cli.model_switch.apply_model_selection``). An explicit key for a custom endpoint is the one inline credential the runtime reads (``model.api_key``); the legacy ``api`` alias is dropped so a stale secret cannot shadow it. Returns a new dict.)apply_model_selectionr9apiN)rKrVrpop)rOrQr9rVs&&& r_apply_main_model_assignmentrYs@>%i8I}}&}} ) eT" rctV^8dQhR\\\3,R\\\3,/#rrrr)rs"rrrs*  d38n c3h rc \V4pVPR4p\V\4'dWVPR^4pVPRVPRR44VR&\V\4'dTM^VR&V#^VR&V#)zFlatten a dict-form ``model`` to its string form (the schema is built from DEFAULT_CONFIG where ``model`` is a string) and surface ``model_context_length`` as a top-level field (0 = auto-detect).r?context_lengthrarr rC)r)rrint)r model_valctx_lens& r_normalize_config_for_webras&\F 7#I)T""-- 0!4#-- 9==3LMw4>w4L4LRS%& M*+%& Mrc\V^8dQhR\\\\3,,/#r)rr)rr)rs"rrr-s 4S#X/rc^RIHpV!4Uu.uF;pVPR4'gKVR,\9gK0\ V4NK= up#uupi \ d\ PRRR7.u#i;i)aAuxiliary tasks registered by plugins (``PluginContext.register_auxiliary_task``) for the Hermes home active in this context. Callers run inside ``_profile_scope`` / ``_config_profile_scope``, and ``get_plugin_manager()`` keys its manager on the same context-local home, so a request for profile B enumerates B's plugins even though this process was started for profile A. Discovery failure is fail-soft: the built-in slots must keep working without plugins. )get_plugin_auxiliary_tasksrz#plugin auxiliary task lookup failedTr")hermes_cli.pluginsrdr_AUX_TASK_SLOTSr)r&r'r()rdrs r_plugin_aux_tasksrg-s~A)C)EM)E99U#(-e O(KU )EM MM  84 H s-AAAAAA$BBc>V^8dQhR\\R3,/#)rr.)rr)rs"rrr?sRRsCxRrc\\;QJd".R\44FNK 5,#!R\444,#)aEvery auxiliary slot the dashboard may read or assign: built-ins first (UI order), then plugin-registered keys. The picker in ``hermes model`` (``main_provider_setup._all_aux_tasks``) folds plugin tasks in the same way; the dashboard must not disagree with it.c32"TF qR,xK R#5i)rN)rrs& rr"_aux_task_slots..Cs"Q=PE<<=Ps)rfrrgrkrr_aux_task_slotsrm?s6 UU"Q=N=P"QU QQU"Q=N=P"QQ QQrc:V^8dQhR\\,/#rrr)rs"rrrFsHSMrc^^RIHpV!4pV'gR#Vwr#RV RV R\4 2#)aReturn a "restart required" message when this process runs stale code, else None. Long-lived dashboard / Desktop-owned ``hermes serve`` processes freeze ``sys.modules`` at boot; after ``hermes update`` replaces the checkout, a first-time lazy import can resolve a fresh consumer module against a stale cached dependency -> ImportError. Mirrors the gateway's ``_model_switch_skew_guard``: refuse the risky call with an actionable message. Never a false positive (non-git installs return None). ``/api/model/options`` 500 after the update added ``agent.model_metadata.is_grok_46_family`` while the running process kept serving the pre-update module (#86207). )detect_code_skewNz"This process is running code from z! but the checkout on disk is now u7. The model picker would risk a stale-module crash — )gateway.code_skewrq_dashboard_skew_restart_hint)rqskewboot_revdisk_revs r_dashboard_code_skew_guardrwFsF3  D H ,XJ7j!134 6rc$V^8dQhR\/#rr)rs"rrr_scrcV\PPR4R8XdR#R#)uRestart advice matching how this process is owned — the same app backs the browser dashboard and Desktop-owned ``hermes serve``; naming a systemd unit would mislead macOS/launchd hosts and Desktop SSH backends. See #97046. HERMES_SERVE_HEADLESS1zzrestart the Desktop-owned backend to load the new code (use Restart backend in Hermes Desktop, or quit and reopen the app)zrestart this Hermes process to load the new code (hermes dashboard --port , or the equivalent service restart for this install))osenvironrrkrrrsrs_s0 zz~~-.#5 R  _rc@V^8dQhR\R\R\RR/#)rrOrprovider_entryrNr)rs"rrrqs0||t|s|TW|\`|rc\\4PR4V4wr4\ V\ 4'g/p\ VPR4;'gR4P4pV'dWPR&VPRR4R#\ V\ 4'dVPR4'dq\ VPR4;'gR4P4pVPR4'dVPR4'dTMVR,VR&R#R#R# \dRpELi;i)aCarry the provider's credential POINTER (``key_env`` / raw ``${VAR}``) onto ``model_cfg``. ``provider_entry`` comes from ``load_config()``, which expands ``${VAR}`` to plaintext; copying that into ``model.api_key`` would write the SECRET into config.yaml (and recreate it on every re-apply). Prefer the raw template; fall back to the expanded value only when the raw yaml itself stores the key as a literal (no new exposure). rNkey_envr r9z${}) rrrr&rr)rrrXr,endswith)rOrr_stored raw_entryrraw_keys&&& r_resolve_assignment_credentialsrqs 01B1F1F{1SU]^ i & & )-- *00b1779G&) i& ND ) )n.@.@.K.KimmI.44"5;;=*1*<*`` entry, or a ``custom_providers`` row. Comparison is trailing-slash and case insensitive (``_save_custom_provider`` dedups the same way).r r$Fc0V^8dQhR\R\/#rr)rs"rr/_endpoint_known_to_config..__annotate__sFFFFrc<\T;'gR4P4PR4P4S8H#)r r$)rrrstripr)rwanteds&r_matches+_endpoint_known_to_config.._matchess65;;B%%'..s399;vEErr?r8TrRrW)rrD) rrrrrrr)rvalues) rr8rrO section_keyrentriesrrs && @r_endpoint_known_to_configrsR & & ( / / 4 : : `` row on every dashboard re-save is what let the picker rewrite the CLI's shape into ``custom:`` + ``base_url: ''``. Only a GENUINELY new endpoint gets a named row. )_auto_provider_name_save_custom_provider)rz%custom_providers registration skippedTr"N)hermes_cli.main_provider_setuprrr&r'r()r8r9r?rrs&&& r_register_custom_endpointrs@K]h=PQY=Z[ K :T JKs"AAc<V^8dQhR\R\R\/#)rr new_providerr)r)rr)rs"rrrs!STrc.pVPR/4p\V\4'gV#\4EFpVPV4p\V\4'gK-\ VPRR4;'gR4P 4pV'gKjVP 4R9gKVP 4V8wgK\\ VPRR4;'gR44'dKTPRTRTR\ VPRR4;'gR4/4EK V#)ukAux slots still pinned to a *different* provider than the new main one. Switching main never touches aux pins (independent, sticky per-task overrides) — a user leaving a now-unpaid provider keeps paying 402s on background calls until they reset them. We never auto-clear (pinning aux is legitimate) but report them so the UI can offer a "reset to main" nudge. auxiliaryrr r8taskr?>r rTmain) rrr)rmrrrr r)rr stale_auxaux_cfgslotslot_cfg slot_providers&& r_stale_aux_pinsrsIggk2&G gt $ $!;;t$(D)) HLLR8>>B?EEG  =]002:NNS`SfSfShlxSx!X\\*b%A%G%GR!HII   j-#hllSZ\^F_FeFeceBf " rc<V^8dQhR\R\R\/#)rrrrr)rs"rrrs&TTTTTrcvVPR4p\V\4'dVPV4#R#)rNrrr))rr providers_cfgs&& r_provider_entryrs2GGK(M*4]D*I*I=  X &StSrc XV^8dQhR\R\R\R\R\RR/#)rrrr?r8r9rztuple[str, ModelSwitchResult]r:)rs"rrrsD ^ ^$ ^# ^c ^S ^[^ ^dC ^rcXV'd V'g\RRR7h\W4wr\W4pV'g`\V\4'dJVP R4'd3\ VP R4;'gR4P4pV\WW#V43#)zValidation half of a main-slot assignment: ``(effective base_url, switch result)``. ``switch_model`` fetches catalogs / probes endpoints, so callers run this BEFORE taking ``_CONFIG_MUTATION_LOCK``; it writes nothing.rEz$provider and model required for mainrFr8r ) rr6rrr)rrrrS)rrr?r8r9rs&&&&& r_prepare_main_assignmentrs 54Z[[6xGOH$S3N  >488^=O=OPZ=[=[~))*5;;<BBD 4SEU\] ]]rcdV^8dQhR\R\R\R\R\RRR\/#) rrrr?r8r9prepared'Optional[tuple[str, ModelSwitchResult]]rr:)rs"rrrsA$$T$S$$PS$^a$*S$_c$rc^RIHp^RIHpT;'g\ WW#V4wr8VP VP r!\W4p VP4P4p V R9;'d\V4;'d \W4p \VPR/4W4p \WV 4WR&VP4P4p V R8Xd \V4M.pV!V4V R9dV'dV 'g \!W4V4V!4RRRRR VRVR V PR R 4R VR \#W 4/\%VRR 4'dRVP&/C#/C#) save_config)reconcile_recordr?rokTscoperrr8r gateway_toolsr usage_noticenotice>rFrq)rrhermes_cli.free_tier_bootstraprrrN new_modelrrrrrrYrrrrrrr)rrr?r8r9rrrrQr provider_lcendpoint_already_knownrOrrs&&&&&& r_apply_main_assignment_syncrsk-?dd#;C5\c#dH,,f.>.>e$S3N .."((*K**jjtH~jjB[\_Bj,SWWWb-A6SI#IHL>>#))+L9E9O05UWM**x@V!(U; dHIMM*b1_S7 /6fnb.Q.QHf)) *  XZ  rc\V^8dQhR\\,R\\,/#rro)rs"rrrs& J J8C= JXc] JrcVfR#^RIHpV!V4pVf&^RIHp\RRRP V4 2R7hVP R4R JdR #VR ,#) z``auxiliary..reasoning_effort`` value for an assignment: None clears (inherit), else the canonical level (``none`` for a disable), 400 on an unknown level.N)parse_reasoning_effort)VALID_REASONING_EFFORTSrEz'reasoning_effort must be one of: none, z, rFrFnoneeffort)hermes_constantsrrrjoinr)rrparsedrs& r_normalize_aux_reasoning_effortrsg }7 #E *F ~<%LTYYWnMoLp#qs sZZ *e36I9IIrc0V^8dQhR\R\/#rrrry)rs"rrr,sWWcWcWrc^RIHpVP!R4;'g/PV4p\V\4'd%\ VPR4;'gR4#R#)r)r rreasoning_effortr )hermes_cli.config_defaultsr rrr)r)rr rs& r_aux_default_effortr,sW9    , 2 2 7 7 =E7A%7N7N3uyy+,22 3VTVVrcV^8dQhR\R\R\R\R\R\R\\,R\/#) rrrr?rr8r9rr)r)rr)rs"rrr2sVFFDFCFF3FZ]FhkF19#FLPFrc `a^RIHpVPR4o\S\4'g/oRV3RllpV\ Jd \ V4M\ p \4p VR8XdeV FIp V!V 4p RV R&RV R &V PR R 4V PR R 4\V 4V SV &KK SVR&V!V4R RRRRR/#V'g\RRR7hV'dV.M \V 4p VP4P4pV Fp W9d\RRV 2R7hV!V 4p \V PR4;'gR4P4P4pWR&W,R &V'dWLR &V'dW\R&M*W8wd%VR8wdV PR R 4\V 4V f+\V 4'dRV R &M!V PR R 4MV \ JdWR &V SV &K SVR&V!V4R RRRRV RVR V/pV \ JdV VR &V#)rrrc0V^8dQhR\R\/#r)rr))rs"rr0_apply_aux_assignment_sync..__annotate__9s>>C>D>rcZ<SPV4p\V\4'dV#/#rr)rrauxs& r_slot)_apply_aux_assignment_sync.._slot9s'774=%h55x=2=r __reset__rTrr r?rNr8rTrresetrEzprovider required for auxiliaryrFzunknown auxiliary task: r9rqtasks)rrrrr)_UNSETrrmrXr rrrrrr)rrr?rr8r9rrrrslotsrrtargetsr prev_providerrQrs&&&&&&& @r_apply_aux_assignment_syncr2sD- ''+ C c4 >>CSZ`B` ,-= >flF  E {DT{H#)HZ "HW  LL+T 2 LLT * ,X 6 CIKCdG['4@@ 4UVVtf$u+G>>#))+L  C:RSWRX8YZ Z;HLL4::;AACIIK '! $,Z &-#  *|x/G LLT * ,X 6 >#4((/1+, /6 6 !+1' (D =@C D';*hX_af gF V%+!" MrcV^8dQhR\R\R\R\R\R\R\\,RR /#) rrrr?rr8r9rrr)rr)rs"rrr{sZgg gg&)g14g@CgNQgsmg8agrc `^RIHpV!4p VR8Xd\WW$WW4#\WW#WEV4#)aSynchronous body of POST /api/model/set. Runs inside ``_profile_scope`` (worker thread) so every load_config/save_config lands in the requested profile. Raises HTTPException for validation errors. ``prepared`` is a ``_prepare_main_assignment`` result computed outside the config lock. rr)rrrr) rrr?rr8r9rrrrs &&&&&&&& r_apply_model_assignment_syncr{s6. -C *3%7]] %cU(Ue ffrc^V^8dQhR\R\R\\\3,/#)rr_rrr)rs"rrrs,##s#3#5QTVYQY?#rcT;'gRP4pV'gRV3#^RIHpHpHpT!Y!4pT'dT^,T^,3#RT9d1^RIHpT!T4T9pT'gT!R4'dRT3#RT3#RT3# \ dRT3u#i;i \ dRpLyi;i \ dRT3#i;i)u Infer which provider serves ``model_val`` when the flat Config-page Model field changes. Returns ``(provider, model)``; ``provider`` is empty when no switch is warranted. Signals, in order: curated-catalog detection (``detect_provider_for_model``), then the vendor-slug heuristic — a ``vendor/model`` slug cannot belong to a non-aggregator provider (e.g. ``ollama-local``), so return the sentinel ``"openrouter"``; the caller's ``_normalize_main_model_assignment`` resolves the real aggregator (keeps the current one). r )rdetect_provider_for_modelr Nr$r%r')rr(rrr r&r-r&) r_rrrrr detectedr&cur_is_aggregators && r_infer_provider_on_model_changers OO " " $D 4xjj,TA{HQK'' d{  I 2= AEZ Z %)A,)O)O#T)) t8O2t8O+ 4x    t8O s@ BB%B86 B8B8B"!B"% B54B58 C C ctV^8dQhR\\\3,R\\\3,/#r[r)rs"rrrs.@@c3h@DcN@rc^RIHp\V4pVPRR4RV9pVPR^4p\ V\ 4'g \ V4pVPR4p\ V\4;'d \V4pV'g V'gV#V!4pTPR4p\ T\4'Ed!T'd\TPR4;'gR4P4p\TPR4;'gR4P4p YH8wdT 'dw\YI4wrT 'dbT P4P4T P48wd1\Y4wr\!YlT 4p\#Y~4pTP$pYGR&T'dT^8dY7R &MTPR R4YpR&T#T'd?T^8d8T'dTpM#\ T\4'd T'dTpMRpRTR T/TR&T# \ \3d^pELi;i \dTu#i;i) uReverse ``_normalize_config_for_web`` before saving. Reconstructs ``model`` as a dict from the on-disk config to recover subkeys (provider, base_url, api_mode, ...) the GET response stripped. When the model name actually changed, re-detects the serving provider and routes through the assignment chokepoints (a user picking an OpenRouter model while on ``ollama-local`` would otherwise keep the stale provider and 404); saving unrelated fields never overwrites an explicit provider. ``model_context_length`` is written back as ``context_length`` (0 = auto-detect, key removed). A partial update (Settings autosave diff) that OMITS the key means "unchanged" and must leave the on-disk override alone — not be treated as an explicit 0. r _model_metaNrCr?rar rr])rrr)rXrr^ TypeError ValueErrorrrrr&rrrr6rSrYr)rrctx_sent ctx_overrider_ has_modeldisk_cfg disk_model prev_defaultrrresolved_model norm_provider norm_modelrQras& r_denormalize_config_from_webrs. &\F JJ}d#%/H::4a8L lC ( ( |,L 7#I9c*>>tII  = g&J*d## z~~i8>>B?EEGL z : @ @bAGGIM(]/Ny/h, L$6$6$8$>$>$@MDWDWDY$Y0PQ]0n-Mrsh !BB2I80901((] ~0P  )-9=~0 w7U:R:TU ~0  II ~0VI~0 $5'96F!~0*B+~02w|(LD :3~087#7JO9~0:  N J ;~0JwDe[cm K~0P bJ Q~0Z!  S J #[~0j'i%k~0rG! hy)XxYdfms~0zG!7FHiP\^ik{~0~w@^CTU\C]^~0@g2O5Fv5NOA~0B <[?PQY?Z[C~0D!'*[]r*:"5p: &FRDN  F   ,$ $R2$|0 0K&<T ^$$Ph JWBHFFTUW&,dhgg"#L@@r