+ jHjVa0t$Rt^RIHt^RIt^RIHt^RIHt^RI H t H t ^RI H t ]P!R4tRR ltR R ltR R /RRlltRRlt]!RRR7!RR44tRR3RR3RR3RR3RR33tR ]R!&R R R"R/R#R$lltR R R%R /R&R'lltR(R)ltR#)*a#The desktop's welcome trial: free inference on ``nous/welcome`` for a first install, once per OS user. Only the backend the desktop spawned on this machine can claim it, only when this OS user has never used Hermes here (``install_state``), and only with no provider and no Nous identity yet. The claim mints a guest stamped with ``WELCOME_CLAIM_FLAG`` in the mint's own write and writes the OS user's marker, so the trial is never claimed twice for that user. Another OS account on the same computer is a separate first install. A claim that is lost later (the guest is reaped, ``auth.json`` is deleted, the user signs in) is never made again: that user lands on provider setup and sign-in like anyone else. Enforcement is client-side; the account service's own entitlement check follows separately. ) annotationsN) dataclass)Callable)AnyOptional) anon_authzhermes_cli.authcV^8dQhRR/#returnbool)formats"=/home/ubuntu/.hermes/hermes-agent/hermes_cli/welcome_trial.py __annotate__rs__D_c^^RIHp\P!4RJ;'g V!4RJ#)_read_shared_nous_stateN)hermes_cli.auth_nousrrcurrent_nous_staters r_has_nous_identityrs+<  ' ' ) 5 ^ ^9P9RZ^9^^rcV^8dQhRR/#r r )rs"rrr s ; ;T ;rc^RIHp^RIHpV!RRR7pTR8g;'g\P !4'*# TdR#i;i)zSomething besides the welcome trial carries inference: a key, a config pin, a sign-in, a host credential. The resolver itself answers, with the free-tier rung hidden.)resolve_provider) AuthErrorautoT)skip_free_tierFnous)hermes_cli.authrhermes_cli.auth_constantsrr has_guest)rrproviders rprovider_configuredr$ sP13#F4@ v  : :Y%8%8%:!:: s ?A  A  assume_freshFc V^8dQhRRRR/#r r%r r r )rs"rrr-saaa$arc\P!4'dR#\4pT;'g\WR7RJ#)zSomething can carry a first chat on this backend: the trial (claimed, or claimable now) or a configured provider. One walk of the provider ladder answers both halves.Tr% configuredN)rfree_inference_activer$ claim_blockerr)s$ rinference_availabler--s7&&(($&J  ` `LX\```rc V^8dQhRRRR/#r'r )rs"rrr6sJJ4JDJrcz^RIHpHpV'*;'d&V!4P;'d V!4'*#)r)probetrial_reserved)hermes_cli.install_stater0r1existing)r%r0r1s& r_machine_is_usedr46s,>  I I 0 0 I I9I5IIrT)frozenslotsc,]tRt^rEDs9[9[9]5]rzguests are switched offc6\P!4'*#rA)r guest_allowedrCs&rrErEEs1H1H1J-Jrza Nous identity existsc\4#rA)rrCs&rrErEFs,>,@rza provider is configuredcJVPf \4#VP#rA)r*r$asks&rrErEHs#..*@$&TcnnTrzHermes was used on this machinec,\VP4#rA)r4r%rJs&rrErEIs4DSEUEU4Vrz.tuple[tuple[str, Callable[[_Ask], bool]], ...]_CLAIM_BLOCKERSr*c$V^8dQhRRRRRR/#)r r%r r*r9r z Optional[str]r )rs"rrrMs'UU4U^UWdUrcNa\W4o\V3Rl\4R4#)aWhy the trial cannot be claimed here, or None when it can. *assume_fresh* is the unpackaged desktop's ``--fresh-install`` switch: it skips only the machine check. *configured* is a ``provider_configured()`` answer the caller already has, so the ladder is not walked twice.c3L<"TFwrV!S4'gKVxK R#5irAr ).0reasonblocksrKs& r claim_blocker..RsMoNFos$ $N)r8nextrM)r%r*rKs$$@rr,r,Ms" | (C MoMt TTrforcec$V^8dQhRRRRRR/#)r r%r rWr zOptional[dict[str, Any]]r )rs"rrrUs"T$Skrc (^RIHpVP4;_uu_4VPP 4\ 4\ VR7;p'd"\PRV4RRR4R#\P!RVRR7pVf\P!4;'g/p\P!\VPR4;'g&\P\P ,4\VPR4;'g\P 4VPR 4R 7hVP#4RRR4\P%R 4X# +'giL';i) aClaim the trial when nothing blocks it: mint the guest, stamp the claim, mark the machine. Returns the claimed state, or None when the trial is not available here. A failed mint raises the coded ``AuthError`` from :func:`anon_auth.ensure_portal_identity` (memoised with its cooldown; *force* is the user's own retry). Held under the OS user's claim lock from the checks to the marker write, so two installs starting together claim once.) install_state)r%zwelcome trial not claimed: %sNT)explicitrW welcome_claimerror error_code retry_after)r_z5Nous free tier: welcome trial claimed on this machine) hermes_clirZ claim_lockr0 cache_clearsettle_interrupted_claimr,loggerdebugrensure_portal_identitylast_mint_failure _anon_errstrgetANON_FAILURE_COPYANON_SERVER_ERRORmark_machine_usedinfo)r%rWrZrRstatefailures$$ rclaim_desktop_free_tierrqUs" )  ! ! # #'') "" = =6 = LL8& A $ # 00$e[_` =11399rG%%GKK(ddI,G,G HcHc,deGKK -LL1L1LM#KK 68 8 '') $ KKGH L $ #s%AF98F2/F"AF(:F F cV^8dQhRR/#r r )rs"rrros$rc(^RIHp^RIHpHpV!4'gR#\ P !4V!43p\;QJdRV4F 'gK RM RM !RV44'gR#V!4\PR4R#)a!A claim cut off between its guest write and its marker write leaves the reservation behind. The stamped guest is the claim, so the reservation goes: kept, it would let a second trial through once that guest is reaped or deleted. Runs before every claim and at serve boot; True when it did.r)rmr1Fc3"TFDp\P!V4;'d"VP\P4RJxKF R#5i)TN)ris_guest_staterjWELCOME_CLAIM_FLAG)rQss& rrT+settle_interrupted_claim..ys>kdj_`y''*ZZquuY5Q5Q/RVZ/ZZdjs !A*ATz>Nous free tier: an interrupted welcome-trial claim was settled) rrr2rmr1rranyrdrn)rrmr1storess rrcrcosi=J   **,.E.G HF 3kdjk333kdjk k k KKPQ r)__conditional_annotations____doc__ __future__rlogging dataclassesrcollections.abcrtypingrrr`r getLoggerrdrr$r-r4r8rMr>r,rqrc)r{s@rrs #!$   , -_ ;aaJ  $d#$'(]^ JK@ATV&(VW C?U%UdUE4r