+ jHj[ aR9t>0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t H t ^RI H t ^RI Ht^RIHtHtHtHtHt^RIHtHt^RIHt^RIHt^R IHt]P<!R 4tR R lt R Rlt!] RRl4t"RRlt#RRlt$RRlt%RRlt&R:t'RRlt(RRlt)RRlt*RR lt+R!R"lt,R#R$lt-]P\!4t/] R%R&l4t0] R'R(l4t1R;Uu.uFp]2!]3!RR7R8llt=R#uupi)?zProfile-scoped helpers: profile discovery fallback, profile dir/MCP-server writes, the profile/config scope context managers, skills-hub and tools/analytics catalog helpers. N)contextmanager nullcontext) HTTPException)Path)AnyCallableDictListOptional)DEFAULT_CONFIGget_process_hermes_home)MCPServerCreate)_ACTION_LOG_FILES)_normalize_mcp_server_createzhermes_cli.web_servercVV^8dQhR\.\3,R\R\/#) callable_defaultreturn)rr)formats"C/home/ubuntu/.hermes/hermes-agent/hermes_cli/web_server_profiles.py __annotate__rs*Xb#g&c8V!4# \dTu#i;iN) Exception)rrs&&r_safers#{ s  cFV^8dQhR\\,R\/#rprofilerr strbool)rs"rrrs;;#;4;rczT;'gRP4pV'*;'gVP4R8H#)z7None/""/"current" all mean the dashboard's own profile.current)striplower)r requesteds& r_is_current_profiler)s2B%%'I= : :IOO-::rc$V^8dQhR\/#rr)r)rs"rrr&s***rc#t"^RIHpHpV!\V44pRxV!V4R# T!T4i;i5i)zScope ``load_config``/``save_config`` (anything resolving ``get_hermes_home()`` at call time) to ``path`` for the block via the context-local HERMES_HOME override.)set_hermes_home_overridereset_hermes_home_overrideN)hermes_constantsr-r.r!)pathr-r.tokens& r_hermes_home_scoper2%s2V $SY /E* "5)"5)s8+ 8 58c$V^8dQhR\/#r+r!)rs"rrr1scrc^RIHpVP4;'gRP4pV'dVR8XdR#VP V\ 44'dV#R# \ dR#i;i)uzThis process's OWN profile name — but only when that name provably resolves back to the process home. The dashboard SPA needs an explicit scope for requests it fires before the profile switcher has resolved: a destructive route now 400s on an unnamed profile as soon as the host serves more than one, and "" would otherwise mean "whichever home this process launched with" anyway. Naming it is only safe if the name cannot resolve ELSEWHERE, so a custom HERMES_HOME outside ``profiles/`` (``get_active_profile_name()`` answers ``"custom"``) returns "" and keeps the old unnamed behaviour rather than risking a wrong-profile write. profilesr$custom) hermes_clir7get_active_profile_namer&profile_matches_homer r) profiles_modnames rserving_profile_namer>1sl4446<<"CCEtx'#88?V?XYYta_aa s'A%A%A%!A%#A%% A43A4cFV^8dQhR\\,R\/#rr )rs"rrrGs"CCx}CCrc\V4'dR#\VP44pTP 4\ 4P 48g# \dR#i;i)zDTrue when ``profile`` names a profile other than this process's own.FT)r)_resolve_profile_dirr&rresolver )rtargets& r_is_other_profilerDGsZ7##%gmmo6 >> 68@@B BB sA A&%A&cRV^8dQhR\\\3,R\/#)rconfigrdictr!r)rs"rrrRs" * *d38n * *rc^RIHpVPR4p\P!R4;'g/PRR4p\ V\ 4'dVPRV4MTpV!V4#)aKNormalize approvals.mode from an in-memory config document. Both sides of the broadcast comparison use in-memory documents: re-reading through the config cache after a save can serve the pre-save document when the replacement file collides on the (mtime_ns, size) cache key, suppressing the broadcast exactly when the mode changed.)_normalize_approval_mode approvalsmodemanual)tools.approval_contextrJgetr isinstancerH)rFrJrK default_moderLs& r_approval_mode_ofrRRse @ ;'I"&&{399r>>vxPL2)_fallback_profile_entry..sL$C$CD$IrNc.<aa\VVVV3RlS4#)cF<SPS4PSS4#r)read_profile_metarO)rrtrmr<srr|;_fallback_profile_entry....s ..t488gFr)r)rmrrtr<sffrr|r}sF!Qrr=r0rumodelproviderrv skill_countc&<SPS4#r)_cached_skill_countr{srr|r}s\%E%Ed%KrrwF descriptionr$description_auto bot_titledistribution_namedistribution_versiondistribution_source has_alias)NN)rr!) r<r=rtrurvrwrrmetas f&f$$$ r_fallback_profile_entryrsI<XOE QD fc$iz7EHiuKQO5%8tM2.0BDI[]bDcT+r*T#94AVX\U rc\V^8dQhR\\\\3,,/#r+r`rHr!r)rs"rrrs T$sCx.-Arc aaa.pSP4oSP4'd;VP\SRSRSR, P 4VV3RlR74SP 4pVP4'd\ P!V4;_uu_4p\VRR7pRRR4XFp\VP4oVP4'd,SPPVP4'gK[VP\SVPSR\V3R lR4SVP3V3R llR74K V# +'giL;i) rT.envc&<SPS4#r)_check_gateway_running) default_homer<srr|)_fallback_profile_dicts..sL$G$G $Ur)rurvrwcVP#r)r=)es&rr|rsr)rmNFc2<SR, P4#)r)exists)rtsrr|rstf}&<&<&>rcX<SPV4;'gSPV4#r)r_served_by_running_multiplexer)rtr=r<s&&rr|rs1 77=II#BB4HIr)_get_default_hermes_homeis_dirrgrr_get_profiles_rootosscandirsortedrr0_PROFILE_ID_REmatchr=r)r<r7 profiles_rootscanrirlrrtsf @@r_fallback_profile_dictsrs)%'H88:L/ )\d!F*224UW X !335MZZ & &$T'78G'E #D<<>>)D)D)J)J5::)V)V OO3ejj$5>F,0uzz!JK L  O' &s *E.. E> c0V^8dQhR\R\/#)rr=r)r!r)rs"rrrs . .s .t .rc^RIHpVPV4TP T4'g\ RRT R2R7hTPT4# \dp\ R\ T4R7hRp?ii;i)zIValidate ``name`` and resolve to its directory or raise an HTTPException.r6i) status_codedetailNiz Profile 'z' does not exist.)r9r7validate_profile_name ValueErrorrr!profile_existsget_profile_dir)r=r<rs& rrArAsv3<**40  & &t , ,ivEV4WXX  ' ' -- <CF;;z,Profile-create: skipping MCP server '%s': %sNheaders)hermes_cli.configrrhermes_cli.mcp_configrr2 setdefaultrrr=r&rYwarningpop)rrrrrwrittencfgmcpr[r=rl bearer_tokenexc display_names&& r_write_profile_mcp_serversrs ;=G K ( (mnn]B/F ,H,P)\ '#:4#Ni I qLG    GGM4 (  ' )( N  & 1 1r88:IIk  K\_  ) (( NsGD B/'D :D  D / D :*D %D >D D D  D c:V^8dQhR\\,/#rrr r!)rs"rrrsCCHSMCrc #B"^RIHp^RIHp^RIHp\ V4;_uu_4pVfV!4MTpW#3p\ ;_uu_4VUu.uFqwPVP3NK ppVFpWUR, uVnVnK Vx\Wh4FwpwrWuVnVnK RRR4RRR4R#uupi \Yh4FwpwrYuTnTnK i;i +'giLI;i +'giR#;i5i)aScope config + skill-directory resolution to ``profile`` for one request. Two seams: (1) ``load_config``/``save_config`` resolve ``get_hermes_home()`` at call time, so the contextvar override reaches them; (2) ``tools.skills_tool`` / ``tools.skill_manager_tool`` bind ``SKILLS_DIR`` at import time, so both are retargeted under a lock and restored after. For the dashboard's own profile config resolution is untouched, but the skill-module globals are still retargeted to the *current* ``get_hermes_home()`` so writes land in the live home even when the import-time binding is stale (test isolation, late HERMES_HOME override). Yields the profile dir for a named profile, None for the current one. ``tools.skills_sync`` (reset/diff/list-modified/opt-in/opt-out/ repair-official) needs NO retargeting: since #65828 its directory lookups resolve at call time through the same contextvar override set in step 1. )get_hermes_home) skills_tool)skill_manager_toolNskills) r/rtoolsrr_config_profile_scope_SKILLS_PROFILE_LOCK HERMES_HOME SKILLS_DIRzip) rr _skills_tool _skill_mgrscopedrrWmsavedrt skills_dirs & r_profile_scopers"116 w ' '6+1>o'v , ! !&(H  VX]]%8%8%:%@%@%BGXMbMb*H,@,@BC) K        sF A:BAB 4B: BB BBBB B-,B-cRV^8dQhR\\\3,R\/#)rrowrrG)rs"rrrss&LLtCH~L#LrcxVPR4;'g^VPR4;'g^,#) input_tokens output_tokens)rO)rs&r _token_volumerss/ GGN # ( (qSWW_-E-J-J KKrchV^8dQhR\R\\\\3,,/#)rcutoffr)floatr`rHr!r)rs"rrrws'$tCH~*>rcVPPRV34pVP4Uu.uFp\V4NK up#uupi \d.u#i;i)zPer-(model, task) auxiliary usage within the window: the task-dimension rows (task != '') record_auxiliary_usage writes into session_model_usage. [] when the table predates the task column (older DB opened read-only by newer code). See #23270. ai SELECT u.model, u.task, u.billing_provider, SUM(u.input_tokens) as input_tokens, SUM(u.output_tokens) as output_tokens, SUM(u.cache_read_tokens) as cache_read_tokens, SUM(u.reasoning_tokens) as reasoning_tokens, COALESCE(SUM(u.estimated_cost_usd), 0) as estimated_cost, COUNT(DISTINCT u.session_id) as sessions, SUM(COALESCE(u.api_call_count, 0)) as api_calls, MAX(u.last_seen) as last_used_at FROM session_model_usage u JOIN sessions s ON s.id = u.session_id WHERE s.started_at > ? AND u.task != '' GROUP BY u.model, u.task, u.billing_provider ORDER BY SUM(u.input_tokens) + SUM(u.output_tokens) DESC )_connexecutefetchallrHr)dbrcurrs&& r_aux_usage_rowsrws_hh "Y#$"%0AQ000  s"/A AA A AAc V^8dQhR\\\\3,,R\\\\3,,R\\\\3,,/#)rby_modelaux_rowsrr)rs"rrrsSDD4S>"D.24S>.BDGKDQTVYQYNG[DrcV'gV#VUu/uFq"PR4;'gRVbK ppVFpVPR4;'gRpVPVRVR^R^R^R^R^/4p\F@pVPV4;'g^VPV4;'g^,Wg&KB VPR.4PR VPR 4;'gR /\Uu/uFqwVPV4;'g^bK upC4K \ VP 4\ R R 7#uupiuupi) zFold aux usage rows into the sessions-derived per-model list. Aux usage lives only in session_model_usage (never in the sessions counters), so this cannot double-count; models that ONLY appear via aux calls (e.g. a vision model) get their own entry.runknownrrestimated_costsessions api_calls aux_taskstaskr$TrmreverserOr _AUX_COUNTERSrgrvaluesr)rrrmergedauxrrCrms&& r_merge_aux_into_by_modelrsB W_(`W_PS)9)F)FY)KW_F(` --I""57E>1o_`+;Q A{\]+_` C!::c?//aCGGCL4E4EAFFK!+r*11 SWWV_** `Q^._Q^#CGGCL4E4EA/EQ^._ ` b  &--/}d CC)a/`sE E <E E cV^8dQhR\\\\3,,R\\\\3,,/#)rrrr)rs"rrrs8 E ET#s(^ 4 Ed38n9M Erc/pVFpVPR4;'gRpVPVRVR^R^R^R^R./4p\F0pYE;;,VPV4;'g^, uu&K2 VPR4;'gR pWdR,9gKVR,PV4K \ VP 4\ R R 7#) z?Aggregate aux usage rows across models into a per-task summary.rr$rrr r modelsrr Trr)rby_taskrrdrmrs& r_aux_task_summaryrs)+Gwwv$$"   tfdNAXY&6;8UW&Y Z C Fcggcl''a 'F! --I ( # hK  u % '.." t DDrc\V^8dQhR\\,R\\,/#r)r r!r`)rs"rrrs& B Bx} Bc BrcT;'gRP4pV'dVP4R8Xd.#^RIHp\ V4RVP V4.#)u``["-p", ]`` for a validated named profile, else ``[]``. Hub actions run in a fresh ``hermes`` subprocess whose ``_apply_profile_override()`` reads ``-p`` from argv — the only mechanism that reaches import-time-bound globals like ``skills_hub.SKILLS_DIR``. ``default`` is a real named target, not an alias for the dashboard's own profile: selector-less argv would make the child resolve the ambient ``HERMES_HOME`` (the launch profile under a pooled ``-p X serve``), not the default home.r$r%r6z-p)r&r'r9r7rAnormalize_profile_name)rr(r<s& r_profile_cli_argsr sOB%%'I  )Y6 3# ,55i@ AArc<V^8dQhR\R\R\/#)rverbrmrr4)rs"rrrs!3SSrcP\P!RRVP44PR4R,;'gRp\P !VP 44P4R,pRV RV RV 2p\P!VRV R24V#) zUnique per-skill hub action name (+ registered log file): ``_spawn_hermes_action`` tracks one process/log per name, so a shared "skills-install" would make concurrent row-level actions overwrite each other. Slug (readable) + hash (collision-proof).z [^a-z0-9]+-:N0Nskill:NNzskills-zaction-z.log) resubr'r&hashlibsha1encode hexdigestrr)r"rmslugdigestr=s&& r_hub_action_namer0s 66-ciik 2 8 8 =c B M MgD \\#**, ' 1 1 3B 7F TF!D66( +D  d';< KrcFV^8dQhR\\,R\/#r)r r!rH)rs"rrrs rc ^RIHp\V4'd V!4pM6\VP 44pV!VR, R, R, 4pRpVP 4UUu/uFDqUP R4'gKVR,VUu/uFqfVP V4bK upbKF upp#uupiuuppi \dh\d/u#i;i)uidentifier -> installed lock entry for hub-installed skills (UI marks installed search results). Scoped to ``profile``'s skills/.hub/lock.json when given — HubLockFile takes an explicit path, sidestepping the import-time LOCK_FILE binding. {} when unreadable.) HubLockFilerz.hubz lock.json identifier)r= trust_level scan_verdict) tools.skills_hubr3r)rAr&list_installedrOrr)rr3lockrkeysrlks& r_installed_hub_identifiersr<s 0 w ' '=D.w}}?K{X5>LMD6!002O2Eii 6MEl#t%Dt!1ot%DD2O O%DO   sBA*C,B? B?B:/B?6C:B??CC C C cxV^8dQh/^\9d&\\\\3,,;R&#)r_TERMINAL_BACKENDS)__conditional_annotations__r`rHr!)rs"rrrs4^ DDDc3h(D_ r)canonical_modelreasoning_effort))localLocalz4Run commands directly on this machine. No isolation.)dockerzDocker / PodmanzSRun commands in an isolated Docker or Podman container with a persistent workspace.)modalModalz&Run commands in a Modal cloud sandbox.)daytonaDaytonaz(Run commands in a Daytona cloud sandbox.)sshSSHz'Run commands on a remote host over SSH.)r=rr)rrr r r)?r?__doc__loggingr*rr(rV threading contextlibrrfastapirpathlibrtypingrrrr r rr r hermes_cli.web_modelsr hermes_cli.web_server_gatewayrhermes_cli.web_server_mcpr getLoggerrYrr)r2r>rDrRr\rfrorrrrrArRLockrrrrHrr>rrrrrrr r0r<r)rr?s0@rrWsa 2!66E1;B01; **,C * J@>A  : .J!(CCB/&/&xAC,DACD -s 34AC,DD,Q L>D& E BE,Ds/E