+
jHj P R t ^ RIt^ RIt^ RIt^ RIt^ RIt^ RIt^ RIt^ RI t ^ RI
H t ^ RI H
t
Ht ^ RIHt ^ RIHt ^ RI
HtHt ^ RIHtHtHtHtHtHtH t H t H t ^ RI H t ^ R I!H"t" ^ R
I#H$t$H%t% ^ R I&H't' ^ R I(H)t)H*t* ^ R
I+H,t,H-t-H.t.H/t/ ^ RI0H1t1H2t2H3t3 ^ RI4H5t5 ^ RI6H7t7H8t8H9t9 ]Pt ! R4 t;] ! 4 t<] ! 4 t=]! RR4 t>]! RR4 t?]! RR4 t@]! RR4 tA]! RR4 tB]! R4 tC]! RR4 tD]! R R 4 tE]! R R4 tF]! R 4 tG]
! R 4 tH]! R!R"4 tI]! R#R"4 tJ]! R$R4 tK]! R%4 tL]! R&R'4 tM]! R(R'4 tN]! R)R*4 tO]! R+R"4 tP]! R,R'4 tQ]! R-R.4 tRR/tSR0tT0 RmtUR1 R2 ltVR3 R4 ltWR5 R6 ltX] l4 t\]
s "r? r@ r@ N s s rA c < a ^ RI Hp \ V ! 4 4 P 4 ' g ^ # \ RRR7 p VP ^2RR7 p\ P ! 4 o\ V3R lV 4 4 VP 4 # TP 4 i ; i)zBest-effort status garnish. Opens read-only (via the shared stale-schema heal) so
/api/status never routinely writes to state.db while another Hermes process uses it.)_default_db_pathNT) read_only)limit compact_rowsc 3 <" T FK qP R 4 e K SVP RVP R^ 4 4 ,
R8 g KG ^x KM R# 5i)ended_atN last_active
started_ati, get).0snows & r? 0_count_status_active_sessions..Z sG Sh%%
*;1aeeM155 q3I JJcQ 1hs A+A
A) hermes_staterQ r existsr8 list_sessions_richtimesumclose)rQ dbsessionsr] s @r? _count_status_active_sessionsrh N s . " # * * , , %dd ;B((r(Eiik Sh S S
s s "r? r@ r@ ` s
s
rA c " \ P ! \ \ 4 \ R 7 G Rj xL
# L \
d \ P R\ 4 ^ # \ d" p \ P RT 4 Rp ? ^ # Rp ? ii ; i5i)timeoutNz s "r? r@ r@ n s 4 4W 4rA c z " ^ RI Hp \ V 4 V' g \ RRR7 hRRRVR^R \ 4 /# 5i)
)_SSH_OWNER_NONCE zSSH ownership is not active status_codedetailokT
sshOwnerNonceprotocolVersion
runtimeIntact)hermes_cli.web_serverr{ r) r r- )rw r{ s & r? get_ssh_ownershipr m sC 67 4QRR $)9;La 0 2 4 4s 9;z /api/healthc " \ 4 p RRRV P RV P RV P R\ \ \ P RR4 4 /# 5i)a> Lightweight process liveness for desktop/backend readiness probes.
``commit`` is the code this process BOOTED from (``get_version_info`` is cached at
``web_server`` import): Desktop refuses to attach to a backend whose commit differs from
its checkout, so a serve that outlived ``hermes update`` is never re-adopted.
r TversiondisplayVersioncommit
auth_requiredF)r base_versiondisplay_versionr boolrD r. state)infos r?
get_healthr w sU D $ 4#4#46FH\H\ dkk T'#))_e"L M O Os AAz/api/host/identityc $ V ^8 d QhR\ /# rv rx )r> s "r? r@ r@ s H HW HrA c " \ V 4 RRR^R\ P ! 4 R\ \ P
RR4 ;' g RR \
\ \ P
R
R 4 4 /# 5i) a Prove to an attaching `hermes serve`/`dashboard` WHO owns this port.
The host rendezvous record names a (pid, port) owner, but a record cannot say whether that
owner still holds the port: a graceful-shutdown window or an unrelated listener that
inherited the port both look identical on disk. The attaching side dials this endpoint with
the owner's 0600 token and attaches only when pid+role match. ``servesSpa`` is false for
headless ``serve``, so a `hermes dashboard` user is never routed to a backend with no UI.
r Tr pidrole host_roleNserve servesSpa
serves_spaF)r) osgetpidrD r. r r )rw s &r? get_host_identityr sb 7
$)1eRYY[ GCII{D9DDW gcii u EF H Hs A0A2z/api/health/idlec $ V ^8 d QhR\ /# rv rx )r> s "r? r@ r@ s ( (7 (rA c B " ^ RI Hp \ V 4 RR/V! 4 C# 5i)zYToken-gated diagnostic snapshot; never a retirement permit. None means cannot prove idle.)
idle_proofr T) hermes_cli.web_server_idle_proofr r) )rw r s & r? get_health_idler s$ <7 $ '*, ''s z/api/health/retirementc $ V ^8 d QhR\ /# rv rx )r> s "r? r@ r@ s . .' .rA c " ^ RI Hp \ V 4 V P 4 G Rj xL
p\
T\ 4 ' d TP R4 R 9 d \ RRR7 hTR, pTR8X d \ TP 4 G Rj xL
# TP R 4 p\
T\ 4 ' d T' g \ RR
R7 h\ Y4 ! T4 # L \ d \ RRR7 hi ; i Lo5i) rz )
retirementN zJSON body requiredr} actionpreparez)action must be prepare, commit, or canceltokenztoken required)r r cancel)
hermes_cli.backend_retirementr r) json
ValueErrorr
isinstancedictrZ r r r= rD )rw r bodyr r s & r? post_health_retirementr s 87J \\^# dD ! !TXXh%7?^%^4_``
(^F
&z'9'9::: HHW E eS ! !4DEE : &u -- $ J4HIIJ ;s> D C" C C" A!D C>2D D C" "C;;D z3^[a-z0-9][a-z0-9_-]{0,63}:[a-z0-9][a-z0-9_-]{0,63}$c 0 V ^8 d QhR\ R\ /# )r: keyrM )objectr )r> s "r? r@ r@ s Y Y YD YrA c n \ V \ 4 ;' d \ \ P V 4 4 # )zEAccept only the runner's public ``:`` key grammar.)r r= r _PROFILE_PLATFORM_STATUS_KEY_RE fullmatch)r s &r? _is_profile_platform_status_keyr s) c3 X XD)H)R)RSV)W$XXrA c ` V ^8 d QhR\ R\ \ , R, R\ /# )r: r
configuredNrM )r setr= r )r> s "r? r@ r@ s)
3
3f
3#c(T/
3d
3rA c v \ V \ 4 ' g R# RV 9 d \ V 4 # VRJ ;' g W9 # )af Whether a runtime-status platform key may appear publicly: namespaced
``:`` keys are validated against the grammar *unconditionally* (a
failed config-set load must not fail open into projecting arbitrary keys from a
process-local JSON file); plain keys are checked against the configured set when it
loaded, passed through when it did not.F:N)r r= r )r r s &&r? _status_platform_key_allowedr s< c3
cz.s33 2 2!22rA
writer_pidwriter_start_timec 0 V ^8 d QhR\ R\ /# )r: valuerM )r! )r> s "r? r@ r@ s U U# U# UrA c \ V \ 4 ' g V # V P 4 UUu/ uF w rV\ 9 g K WbK upp# u uppi )zEStrip writer-identity stamps from a platform entry before projection.)r r items _PRIVATE_PLATFORM_ENTRY_KEYS)r kvs & r? _public_platform_entryr s@ eT " " "[[] T]TQa7S.SDAD] TT Ts A
A
c < V ^8 d QhR\ R\ R\ /# )r: gateway_platformsprofile_platformsrM )r )r> s "r? r@ r@ s# QU Z^ rA c ^ RI Hp V! 4 p\ V 4 pT;' g / P 4 F w rVWS8X g \ V\ 4 ' g K# VP 4 Fo w rx\ V\ 4 ' d RV9 g \ V\ 4 ' g K: V RV 2p \ V 4 ' g KT VP V \ V4 4 Kq K V# \ d Rp Li ; i)a Merge independent per-profile gateway platform states: hosts running separate gateway
services per profile (``gateway_mode == "multiple"``) persist each profile's platform
failures in its own ``gateway_state.json``, invisible to the machine-level probe NAS
reads unless folded in under the validated ``:`` grammar. The active
profile's own map is skipped (already present); existing keys are never overwritten.)get_active_profile_namerH r )
hermes_cli.profilesr rF r r r r= r
setdefaultr )
r r r activemergedprofplatsr r
namespaceds
&& r? _merge_profile_gateway_platformsr s ?(* #
$F)//R668 >E4!8!8 ++-JC c3''3#:Zt=T=T 63% J2:>> j*@*G H
( 9 M s
C
C0/C0c \ P P ^R7 ;_uu_ 4 p V P \ 4 p VP \ R7 uuRRR4 # \ P P d* \ P R\ 4 Ru uuRRR4 # \ d Ru uuRRR4 # i ; i + ' g i R# ; i)zHealth probe with the route's blocking-call budget preserved. The resolver only
reaches this rung when the local PID probe came up empty, so the timeout is paid at
most once per request and only in the cross-container case that needs it.) max_workersrk NzC/api/status gateway health probe exceeded %.2fs; using local status)FN)
concurrentfuturesThreadPoolExecutorsubmitr( result _GATEWAY_HEALTH_ROUTE_TIMEOUTrp rq warningrF )poolfutures r? _bounded_health_prober s
. .1 . = = 23 ==)F=G
> = !!.. LL^6
8
> =
> =
> = =s; C A ;C C'C 0C 3C?C C C c l V ^8 d QhR\ R\ \ , R, R\ R\ /# )r: r r Ngateway_runningrM )r r r= r )r> s "r? r@ r@ s2 $ CHtO 04HLrA c h V P 4 UUu/ uF$ w rE\ WA4 ' g K V\ V4 bK& pppV' d V# VR8X dU VP 4 UUu/ uF7 w rE\ V\ 4 ' g K VP R4 R8X g K5 WEbK9 upp# / # u uppi u uppi )u Public projection of a runtime's platform map (see ``_status_platform_key_allowed``
for the key rules). A cleanly stopped gateway's platform states are stale noise and are
cleared so a dead process can't report "connected"; a startup_failed gateway's FATAL
entries are the diagnosis (credential collisions, auth failures) that the single
exit_reason string can't express, so they are kept — upstream writer-identity/freshness
filtering already dropped other processes' entries.startup_failedr fatal)r r r r r rZ )r r r
gateway_stater r platformss &&&& r? _project_gateway_platformsr s GXF]F]F_ CF_
0A 4,U33F_I C((-6__-> N->zs eT* /4yy/AW/L
-> N N
IC
Ns B(B(%B.B. B.c h V ^8 d QhR\ \ , R\ \ \ 3, /# )r: profile_dirrM )r# r r r= r! )r> s "r? r@ r@ s1 _i _ix~ _idSVX[S[n _irA c a aa" S ' d \ S R, R7 M \ 4 o\ VVV 3R l4 G Rj xL
pVP pVP p \ \ 4 G Rj xL
pSpVf" V' d VP
R4 ' d TpS ;' g \ 4 pVP e= \ V4 p/ VP CR\ VP T;' g R4 /CpM<\ V4 e0 \ \ VS\ V4 R7 G Rj xL
;' g TpRp / p
Rp Rp Rp
V' d VP
R4 p V' g
\ V4 p M1Ve V R9 d R
p M#V R9 d \! V4 ' d \# V4 p
\% VP
R4 ;' g / WSV 4 p
V R 8X d RMVP
R4 p \' VP
R4 4 p V' d V f Ve R
p V' d T;' g / P
R4 MRpRTRTRVP( RT RT
RT RT RT
R\+ V\, 4 ' d V Uu. uF p\/ V4 NK up/ # R/ # EL? EL \
d Rp EL i ; i ELr \
d \ P R R
R 7 ELi ; iu upi 5i)aw Liveness + runtime-state readout (running/pid/state/platforms/exit_reason/updated_at
plus the raw ``runtime`` document).
Liveness is delegated to the shared ladder in gateway.status so this endpoint and
/api/messaging/platforms can never disagree. With ``?profile=`` PID/state reads are
scoped to that profile's directory (gateway identity files live in the per-profile
home); plain /api/status keeps the exact zero-arg call so its cache signature is
unchanged. The module-level probe references are handed to the resolver so the
``monkeypatch.setattr(gateway.status, "get_running_pid_cached", ...)`` seam still intercepts.
zgateway_state.json)pathc Z < \ SSS ' d \ MR \ \ \ R7 # )N)r runtime health_probe pid_proberuntime_readerruntime_pid_probe)r r r3 r7 r4 )
health_url
local_runtimer s r? )_resolve_gateway_status..* s! /G .8*d(9L8 0:rA Nr r ) gateway_pidz,/api/status multiplexer record lookup failedT)exc_infostoppedrunning exit_reason
updated_atserved_profilesr r r r gateway_exit_reasongateway_updated_atgateway_heartbeat_stale_sgateway_shared_with> Nr > r degradedstarting)r7 r r health_bodyr' rF rZ r r r r
r r5 rq r r r r r r r r listr= )r r livenessr remote_health_bodyr r own_home served_namer r r r r shared_withpr s ff @r? _resolve_gateway_statusr s $ )k & (: ; ;H
&&O&.&:&:,-OPP
G-2D2H2H 2Y2Y$77 5 7H#
,H5 iX%% i B8CSCSU`UfUfdf gi H % 1 X -&-M_`hMi k k v vnu
M $ O4
37 ;M
+
AR0R &M
A
AF]^eFfFf )Gw(O % 6 KK $ * *J X&3y&@dgkkR_F` 2'++l2K L =05G5S!
=L7==b%%&78QUK7 -
x|| (;=N 24HJ\#%>
;X\@]@] < 1A < i i
dh i i[; Q
2k X LLGRVL W XZ =s :K I> K J /J0J 4
K K
K $A
K /K J &J'
J 2J 5K K AK :AK ?K K A K #K&7K J
JK JK J "K=K KK c F V ^8 d QhR\ \ \ 3, /# rL r r= r! )r> s "r? r@ r@ s & &4S> &rA c L \ \ \ P RR4 4 p . p. p ^ RIHpHp V! 4 Uu. uF qUP NK ppV ' d0 VP R4 V! 4 ' d VP R4 RT RTRT/# u upi \ d Li ; i)u Dashboard auth gate readout: gate engaged, registered providers, and the RFC 8252
native-app capability advertisement ``auth_flows`` the desktop reads to pick the
system-browser + loopback + PKCE flow over the embedded-webview cookie flow. "cookie" is
always available in gated mode; "native_pkce" when at least one interactive session
provider is registered (token-only credentials such as drain don't count). Missing
"native_pkce" ⇒ older gateway ⇒ desktop falls back automatically.r F)list_providerslist_session_providerscookie native_pkceauth_providers
auth_flows)
r rD r. r hermes_cli.dashboard_authr r nameappendrF )r r r _list_providers_list_session_providersr s r? _auth_gate_statusr s OUCDM "N J
b*9*;<*;Q&&*;< h '&((!!-0
], s "r? r@ r@ s rA c B ^ RI Hp V ! 4 # \ d R# i ; i)aB Nous bootstrap-session validity for the NAS health sweep: a hosted agent whose Nous
auth dies terminally looks HEALTHY to every liveness probe yet every inference turn
fails, and this is the ONLY signal that surfaces it (local auth-store state, no token
needed). Best-effort: never let auth classification break the probe.get_nous_session_validityunknown)hermes_cli.authr rF r s r? _nous_session_validityr" s%
=(** s c t V ^8 d QhR\ \ \ 3, R\ \ \ 3, /# )r: gatewayrM r )r> s "r? r@ r@ s* T#s(^ S#X rA c l " ^ RI Hp V R, V R, r2V R, pRRV' d
VR9 d RMR R
T;' g
V' d RMR /R VP 4 /p ^ R
IHp \ V\
4 4 G Rj xL
pRVP RR 4 /VR& VP R4 R8X d
RVR, R& TP 4 Uu. uFf p\ T\ 4 ' g K \ TP R
4 ;' g TP R4 ;' g R4 P 4 NKh p pT U
u. uF
qR8w g K T
NK p p
\ R T 4 4 p RT \ T 4 8X d RMR R\ T 4 RT /TR& T# EL \ d RR /TR& Li ; iu upi u up
i 5i)u Component-level health rollup: counts and status enums only (public payload — no
messages, paths or other detail that could carry secrets). The storage probe reuses the
gateway readiness state_db check (read-only, 1s-bounded) off-loop.)DASHBOARD_HEALTHr r r r$ statusr r r r r dashboard)_probe_state_dbNstorager corruptreasonr disabledc 3 > " T F q\ 9 g K ^x K R# 5i) N)_HEALTHY_PLATFORM_STATES)r[ r s & r? r^ $_component_health.. s X?%?W6WAA?s
r connectedr > r draining)r r& snapshotgateway.readinessr) r r0 rZ rF valuesr r r= lowerrd len) r$ r& r r r
componentsr)
storage_checkr platform_statesr r2 s & r? _component_healthr< s 7%,->%? AY] 34 o-CZ2Zd`j ]SSOyU %..0 "2J
75 / AR SS
!)=+<+[$>5*UTXBY Ts599W-JJ81DJJKQQS$> [*9Q/j=Puu/OQX?XXI 'c/>R1RXb +S -A;PY [J{ T
7!): 6
9 7[Qsw >F4F4
F4! F >F?=F <F4F*+ F*F*!F*:F4 F/
F/ s "r? r@ r@ s)
T#s(^
4
D
rA c " R
F< w r#p \ \ P ! V4 V4 p\ WQ4 G Rj xL
W& K> ^ RIHp ^ RIHp V! 4 R, pVP 4 ' d8 V! VRR7 p V P 4 p
V P 4 V
e WR & R# R# R# Lt \ d RR/Y& K i ; i T P 4 i ; i \ d R# i ; i5i) aU Memory / disk pressure rollups + deferred FTS rebuild progress (coarse numbers/enums
only; public payload). Deliberately NOT folded into components/overall: pressure is
advisory, not a liveness verdict, and flipping ``overall`` on it would page NAS's
availability sweep for a condition the valve is already handling. Read-only, never raise.
Npressurer ) SessionDB)r0 zstate.dbT)db_pathrR fts_rebuild))memoryzgateway.memory_statuscollect_memory_status)diskzgateway.disk_statuscollect_disk_status) rD importlib
import_moduler rF r` rA hermes_constantsr0 ra fts_rebuild_statusre ) r' r> r mod_namer; collect_SDB_ghh_db_path_sdb_rebuilds && r? _advisory_pressurerS s #[ w 2 i 5 5h ?IG 1' @@FK #[
2<6J& ?? D9D
224
#(0}% $
A 2%y1FK 2
sz C0.B1B/B1C0/C 6
C C C )C0/B11CC0CC0 CC C-)C0,C--C0z /api/statusc : V ^8 d QhR\ \ , /# r: profiler# r= )r> s "r? r@ r@ s c3 c3hsm c3rA c " ^ RI Hp RpT ;' g RP 4 pRpV' d< VP 4 R8w d' \ V4 p\ V4 pVP
4 \ 4 w rV\ WA4 G Rj xL
pVR, VR, r\ \ 4 G Rj xL
p
V' g0 \ VR, V
P R4 ;' g / 4 VR& \ 4 G Rj xL
p \ VR , ;' g / P R
^ 4 4 p \ \ 4 G Rj xL
p
\! 4 p/ R \# 4 P$ bR \& bR
VbRVbR\) 4 ' * bRVbRV bRVR, bRVR, bRVR, bRVR, bRVR, bR
V bR\+ WV R7 bR\- WR7 bRV
bRV bVCR\/ 4 /Cp\ \0 4 G Rj xL
pV' d VVR& ^ R IHp \7 \ V4 G Rj xL
4 VR & \9 V4 G Rj xL
pVVR & \: ;QJ d* R VP= 4 4 F ' d K R M R!M! R VP= 4 4 4 ' d R"MR#VR$& \? Y' d TM \A 4 4 G Rj xL
V
R%, VR%& V
P R&. 4 VR&& V
R', VR'& V
P R(4 VR(& VR), ' g_ VPC R*\E \A 4 4 R+\E \G 4 4 R,\E \I 4 4 R-VR-, R.VR/V
R/, /4 TVe% VPJ ! \L PN ! 4 ! # # EL EL EL ELq EL EL ELv L Te% TPJ ! \L PN ! 4 ! i i ; i5i)0u Public machine-level liveness probe (``PUBLIC_API_PATHS``): version, gateway state,
active session count and the auth-gate shape — no bodies, no session content, no secrets.
``?profile=`` (dashboard management switcher) uses the config-only contextvar scope, NOT
_profile_scope: this handler awaits the remote health probe, and _profile_scope swaps
process-global skills-module attributes a concurrent request would cross-restore.
)_GATEWAY_HEALTH_URLNr currentr r r r r
active_agentsr release_dateconfig_versionlatest_config_versioncan_update_hermesr r r r gateway_busy)r r r[ gateway_drainable)r r restart_drain_timeoutactive_sessionsnous_session_valid
install_id)shared_profile_warningrf r9 c 3 H " T F qP R 4 R8H x K R# 5i)r' r NrY )r[ items & r? r^ get_status... s (dPc();t)CPcs "FTr r overallprofilesparked_profiles gateway_modemultiplex_standalone_reasonr hermes_home config_pathenv_pathr gateway_health_urlgateways)(r rY stripr7 r* r% __enter__r/ r r r$ r rZ rt r r+ r r r r r& r r
r" r2 !hermes_cli.shared_profile_warningrf r r< allr6 rS r0 updater= r r __exit__sysr )rV rY status_scoperequested_profiler current_ver
latest_verr$ r r topologyrc r[ rb authr' re rf r9 s & r?
get_statusr s* :L B--/"&K . 4 4 6) C*+<= ,->? R3"6"8 / QQ)01B)CW_E]
++STT +K+,hll;N.O.U.USU,WG' ( !8 99
,WY-?-E-E2,J,J?\],^_
'88V&W W "D ')66D8FHXD kD+BJD
%O%Q!QD
D 1@ D
)"?D
(1L)MD
"7+@#AD
]D
/ / + - D"
!9 /"N#D&
$%:'D& =N'D( )D( )*@*B)D0 -^<<
#-F< M+/6GH^6_0_+`'(,W55
)| %(S(dPZPaPaPc(dSSS(dPZPaPaPc(d%d%dT", y IZ[[[
&j 1z$,LL1BB$G !!).!9~ 08 =Z0[,-
O$$ MM s?#4 5}c/J[F\C /
@V$&9:xPZG[]
^
# ! !3<<> 2 $_ R U
: !X6 = 1`5 \* # ! !3<<> 2 $s ,O%;O%+N8 N!'N8 -N$. N8 :$N8 N8 6N'7N8 )N8 9N*:B>N8 8N-9 N8 N8 #N0$N8 =N3>N8 N8 4(N8 'N8 N6AN8 A N8 8)O%!N8 $N8 'N8 *N8 -N8 0N8 3N8 6N8 8*O""O%z/api/system/statsc F aa" ^ RI p / \ V P 4 V P 4 V P 4 V P 4 R7 CRV P 4 RV P
4 RV P 4 RV P 4 R\ 4 P R\ P ! 4 /CoVV3R lpVV3R
lpVV3R lpVV3R lp ^ RI
oSP 4 pR
VP RVP RVP" RVP$ /SR& WW43 F p V! 4 K
RSR& S# \& d K$ i ; i \& dE RSR& \) \ P* ! 4 4 SR& S# \, \. 3 d S# i ; ii ; i5i)zHost + process system stats for the System page (stdlib identity; psutil CPU/memory/
disk/uptime when available). Non-sensitive: no env values, no paths beyond hermes home.N)systemreleaser platform_labelarchhostnamepython_version python_implhermes_version cpu_countc < SP \ \ 4 4 4 p R V P RV P RV P
RV P /SR& R# )totalusedfreepercentrF N)
disk_usager= r0 r r r r )dur psutils r? _disk get_system_stats.._diskX sH
s?#4 5
6 6277FBGGYXZXbXbcV rA c < SP R R7 SR& \ SRR4 p V ' d \ V ! 4 4 SR& R# R# )g?)interval cpu_percent
getloadavgNload_avg)r rD r )lar r s r? _cpu get_system_stats.._cpu\ sA $ 0 0# 0 >]
V\4
0
#BDzD rA c t < \ \ P ! 4 SP 4 ,
4 S R & R# )uptime_secondsN)rO rc boot_time)r r s r? _uptime!get_system_stats.._uptimeb s' !$TYY[63C3C3E%E!F
rA c < SP 4 p R V P RV P 4 P R\ V P 4 4 RV P
4 /SR& R# )r rss create_time num_threadsprocessN)Processr memory_infor rO r r )procr r s r? _process"get_system_stats.._processe sW ~~ $((E43C3C3E3I3I(#d.>.>.@*A($*:*:*<>YrA r availabler r rD Tr Fr )platformr r r r machinenoder python_implementationr r r r r virtual_memoryr r r r rF r r OSErrorAttributeError) _platformr r r r vmfillr r s @@r? get_system_statsr I s ! X
" ##%y/@/@/BIL]L]L_$--/ 1 X !!#Z 1A)224y668*,99; XDd* G>
"
"
$!288[",,PRPWPW#RZZ1X'4D
5
X K
X #BMMO 4D K ( K sm CF!AE +D=2 E ;F!= E E E E F !FF!FF F!FF F!z /api/curatorc : V ^8 d QhR\ \ , /# rU rW )r> s "r? r@ r@ s 8 8hsm 8rA c a" ^ RI Ho T3R lp\ Y4 G Rj xL
# \ d p\ RRT 2R7 hRp?ii ; i L'5i)rz curator zCurator unavailable: r} Nc
< \ SR / 4 p R\ SRR4 R\ SRR4 R\ SRR 4 R
V P R
4 /R Uu/ uF pV\ SR V 2R 4 bK upC# u upi )
load_stateenabled
is_enabledTpaused is_pausedFinterval_hoursget_interval_hoursN last_run_atget_)min_idle_hoursstale_after_daysarchive_after_days)rJ rZ )r r r s r? _run get_curator_status.._run s 7L"5 z'<> j+u= j2F M 599]3 Y WXV3 Jw$se d;;VX Y Y
Xs A*)agentr rF r r )rV rs r r s & @r? get_curator_statusr sS S!Y )7 77 S6KC54QRRS 8s, A $ A AA A?AA z/api/curator/pausedc F V ^8 d QhR\ R\ \ , /# r: r rV )r r# r= )r> s "r? r@ r@ s 5 5< 5(3- 5rA c a a" ^ RI Ho \ VV V3R l4 G Rj xL
RRR\ S P 4 /# L 5i)rz r c L < SP \ S P 4 4 # rC )
set_pausedr r )r r s r? r $set_curator_paused.. s 73E3Ed4;;FW3XrA Nr Tr )r r r r r )r rV r s f&@r? set_curator_pausedr s: "'+X
YYY $$t{{"3 44 Zs ?= ?c
j V ^8 d QhR\ R\ R\ R\ \ , R\ /# )r: argvr prefixrV rM )r r= r# r )r> s "r? r@ r@ s4 7 7 7C 7 7x} 7X\ 7rA c \ \ V4 V , V4 pRRRTP RT/# \ d p\ RT RT 2R7 hRp?ii ; i) zgSpawn a background ``hermes -p `` action; a spawn failure is
``500 ": "``.r z: r} Nr Tr r )r, r1 rF r r )r r r rV r rs s &&&& r?
_spawn_actionr sd H#$5g$>$EtL
$txx 66 Hvhb4FGGHs 0 AA
Az/api/curator/runc : V ^8 d QhR\ \ , /# rU rW )r> s "r? r@ r@ s P Px} PrA c > " \ RR.RR\ V R4 4 # 5i)zTrigger a curator review now (backgrounded; tail via action status). The curator
archives and rewrites skills, so an unnamed target is refused while this backend
serves several profiles.r runz curator-runzFailed to run curatorzPOST /api/curator/run)r r rV s &r? run_curatorr s-
)U+] s "r? r@ r@ s V Vhsm VrA c " R p \ W4 G Rj xL
# L \ d h \ d$ \ P R4 \ RRR7 hi ; i5i)zTLearning graph for the desktop panel: profile-scoped learned skills + memory chunks.c ^ RI Hp V ! 4 # )rz build_learning_graph)agent.learning_graphr r s r? r get_learning_graph.._run s =#%%rA Nz GET /api/learning/graph failedr z Failed to build learning graphr} )r r rF rq exception)rV r s & r? get_learning_graphr sY &V &g4444
V 784TUUVs* A A A$AAc R V ^8 d QhR\ \ , R\ R\ /# )r: rV r' fallback)r# r= rO )r> s "r? r@ r@ s& hsm PS rA c " \ W4 G Rj xL
pVP R4 ' g \ W$P RV4 R7 hV# L95i)z|Run a learning_mutations call under ``_profile_scope`` off-loop; a non-ok result
becomes ``HTTPException(status, message)``.Nr messager} )r rZ r )rV rI r' r ress &&&& r? _learning_mutationr sA !-
-C 774==wwy(7STT J .s A
A A
A
z/api/learning/nodec F V ^8 d QhR\ R\ \ , /# )r: idrV )r= r# )r> s "r? r@ r@ s" X X Xhsm XrA c T a a" ^ RI Ho \ VV V3R lRR4 G Rj xL
# L5i)zXCurrent content of a journey node (skill SKILL.md or memory chunk), for an edit prefill.) node_detailc < S! S 4 # rC )r r s r? r #get_learning_node.. s [_rA r| z not foundN)agent.learning_mutationsr r )r rV r s f&@r? get_learning_noder s# 5#G-Dc;W WW Ws (&(c F V ^8 d QhR\ R\ \ , /# r )r r# r= )r> s "r? r@ r@ s" U U_ Ux} UrA c | a a" ^ RI Ho \ S P ;' g TV V3R lRR4 G Rj xL
# L5i)u Delete a journey node — skills are archived (restorable), memories removed.
``?profile=`` is honoured too: a shared-backend Desktop scopes this call by query only, and
ignoring it archived the same-named skill of the launch profile instead.) delete_nodec ( < S! S P 4 # rC )r )r r s r? r &delete_learning_node.. s TWW)=rA r z
delete failedN)r r r rV )r rV r s f&@r? delete_learning_noder s< 5# !=sOU U U U 1<:<c F V ^8 d QhR\ R\ \ , /# r )r r# r= )r> s "r? r@ r@ s# _ _%5 _
_rA c | a a" ^ RI Ho \ S P ;' g TV V3R lRR4 G Rj xL
# L5i)zSRewrite a journey node's content (SKILL.md or memory chunk); profile as for DELETE.) edit_nodec > < S! S P S P 4 # rC )r content)r r s r? r &update_learning_node.. s 477DLL)IrA r z edit failedN)r r r rV )r rV r s f&@r? update_learning_noder s= 3# !I3P]_ _ _ _r z /api/portalc : V ^8 d QhR\ \ , /# rU rW )r> s "r? r@ r@ s K KXc] KrA c > " \ V \ 4 G R j xL
# L5irC )r _get_portal_status_syncr s &r? get_portal_statusr s )2IJ JJ Js c $ V ^8 d QhR\ /# rL r< )r> s "r? r@ r@ s C rA c \ V R R4 ' d R# \ V RR4 ' d \ V RR4 ;' g R# R# )managed_by_nousFzvia Nous Portalr current_providerNznot configured)rD )feats &r? _feature_stater s? t&.. tXu%%t /6BB(B rA c \ 4 ;' g / p / p ^ RIHp V! 4 ;' g / p. p ^ RIHp V! V 4 pVe8 VP
4 Uu. uF pR\ VRR4 R\ V4 /NK pp\ T P R4 \ 4 ' d T P R4 M/ pR\ TP R4 4 R TP R
4 R TP R 4 R
\ T;' g / P R
4 ;' g R4 R\ TP R4 4 RTP R4 RRRT/# \ d / p EL/i ; iu upi \ d \ P R4 ELi ; i)rz )get_nous_auth_status_local) get_nous_subscription_featureslabelr r zportal features failedmodel logged_in
portal_urlportal_base_url
inference_urlinference_base_urlprovider free_tier account_tiersubscription_urlz3https://portal.nousresearch.com/manage-subscriptionfeatures)r6 r! r rF hermes_cli.nous_subscriptionr r rD r rq r r rZ r r r= )cfgr r r r featsr model_cfgs r? r r sr
-
2C D>)+11r H1O.s3 $)KKM3$1D !'$"BZ QH 3 1 /01s9 E E $E' #E"9E'
E E "E' ' F
F z/api/ops/prompt-sizec : V ^8 d QhR\ \ , /# rU rW )r> s "r? r@ r@ s L L8C= LrA c ( " \ R .R RV 4 # 5i)z prompt-sizeFailedr r s &r? run_prompt_sizer' s - -7 KK z
/api/ops/dumpc : V ^8 d QhR\ \ , /# rU rW )r> s "r? r@ r@ % s > >HSM >rA c ( " \ R .R RV 4 # 5i)dumpr% r& r s &r? run_dumpr, $ s &68W ==r( z/api/ops/config-migratec : V ^8 d QhR\ \ , /# rU rW )r> s "r? r@ r@ * s U Uhsm UrA c * " \ R R.RRV 4 # 5i)configmigratezconfig-migrater% r& r s &r? run_config_migrater1 ) s (I.0@(G TTs z/api/ops/debug-sharec T V ^8 d QhR\ R, R\ \ , /# )r: r NrV )r r# r= )r> s "r? r@ r@ / s) \ \):T)A \,4SM\rA c
aa" ^ RI Ho ^ RIHp T ;' g \ 4 o \ VVV3R l4 G Rj xL
pR R R
TP RTP RTP RTP /# L8 \ d h \ d pT! T4 p\
RRT 2R7 hRp?i\ d3 p\ P R4 T! T4 p\
R R
T 2R7 hRp?ii ; i5i)zUpload a redacted debug report + full logs and return the paste URLs. Synchronous,
unlike the other diagnostics actions: the point is the shareable URLs, returned as a
structured payload the dashboard renders as copyable links.)build_debug_share)redact_debug_support_textc
< S ! \ ^\ \ SP 4 R4 4 \ SP
4 R7 # )r/ i ) log_linesredact)maxminrO linesr r8 )r4 reqs r? r *run_debug_share_endpoint..8 s1 @Q!SSYY 67SZZ@PARrA Ni zUpload failed: r} zdebug share failedr zFailed: r Turlsfailuresredactedauto_delete_seconds)hermes_cli.debugr4 hermes_cli.debug_redactionr5 r r r RuntimeErrorrF rq r r> r? r@ rA )r rV r5 r rs errorr4 r< s && @@r? run_debug_share_endpointrF . s 3D
%
%#%C H.w 9R S S
$ Z )>@Z@Z \ \S
O)#.oeW4MNN H +,)#.hug4FGGHsO !C&A5 A3A5 4C&3A5 5C#
C# B## C#0C#1-C C##C&z /api/logsc
V ^8 d QhR\ R\ R\ \ , R\ \ , R\ \ , R\ \ , /# )r: filer; level componentsearchrV )r= rO r# )r> s "r? r@ r@ J sN '+ '+
'+ #'+2:3-'+}'+-5c]'+ c]'+rA c aaa a a
a" ^ RI Ho Hp VP V 4 pV' g \ RRV 2R7 h\ V4 ;_uu_ 4 \
4 R, V, o
RRR4 S
P 4 ' g RV R. /# ^ R IH p V' d VP 4 R
8w d TMRoRo V' dV VP 4 R 8w dA VP V4 o S f, \ RR V R
RP \ V4 4 2R7 hV V VV
VV3R lp \ P ! V 4 G Rj xL
p
RV RV
/# + ' g i L; i \ d / p Li ; i L05i)rz )
_read_tail LOG_FILESr zUnknown log file: r} logsNrH r; )COMPONENT_PREFIXESALLrw zUnknown component: z
. Available: z, c * < S! SS' g
\ SR 4 MR\ S;' g
S;' g S4 SSR7 p S' dG SP 4 pV Uu. uF q!VP 4 9 g K VNK up\ SR 4 ) R p V # u upi )r i ) has_filters min_levelcomponent_prefixesN)r: r r7 ) r needlelinerM
comp_prefixesr; log_pathrT rK s r?
_load_logs get_logs.._load_logsd s Vc%o Y A A- A A6B MC \\^F'-Hvt4::<1GddvH#eUX/IYIZ[F
Is B7B)hermes_cli.logsrM rN rZ r r% r0 ra hermes_loggingrP ImportErrorupperr7 joinsortedrm to_thread)rH r; rI rJ rK rV rN log_namerP rZ r rM rX rY rT s &f&&f& @@@@r? get_logsrd I sF
6}}T"H 6H4OPP w ' '"$v-8
( ?? gr** 5
5;;=E#9tIMY__&%/*..y9
C:Mi[ Y..2ii?Q8R.S-T9V W
W
$$Z0
0F D'6 **?
( ' . 1sa AE(
E & E(E( E E("E( r r r2 rC )NN)r d NNNN)__doc__concurrent.futuresr rH loggingrerm r rz rc fastapir hermes_cli.web_depsr r hermes_cli.web_server_gatewayr starlette.concurrencyr r r gateway.statusr r
r r r
r r r r gateway.status_servedr
hermes_clir hermes_cli.configr r hermes_cli.version_infor rJ r r hermes_cli.web_modelsr r r r hermes_cli.web_routers._commonr r r pathlibr typingr! r" r# getLoggerrq router logs_routerr$ r% r& r' r( r) r* r+ r, r- r. r/ r0 r1 r2 r3 r4 r5 r6 r7 r8 ro r r0 rJ rh rt rZ r r r r postr compiler r r frozensetr r r r r r r r" r< rS r r r putr r r r r r deleter r r r r r' r, r1 rF rd r rA r? r s
/ B 3 *= = =
5 ' ; 4 K d d i i & &01 k ,00Z\{+| ( 46VW -12^`}-~ *%)*NPo%p " 46UV &' 24TU !%&FHi!j 24ST 01 24GH (*=>,.NO &' 68HI !%&FHX!Y 68OP ="56 02BC #$BDd e #' # 9 $
!4 "4 M
O
O !H "H$ ( (
%&. '., #%**-c"d Y
3 ),8K)L M UD
$_iD&2 @
< Mc3 c3L 5 !5v N8 8& !"5 #57
P !P !"V #V" !X "X #$U %U !_ "_ MK K F
#$L %L _ > >
&'U (U
#$\ %\4
'+ '+rA