+ kHjSRt^RIHt^RIt^RIHtHt^RIHtH t H t ]'d^RI H t ]P!]4t]!4tRRlt]!RR 44tR#) uProvider profile base class. A ProviderProfile declares everything about an inference provider in one place: auth, endpoints, client quirks, request-time quirks. The transport reads this instead of receiving 20+ boolean flags. Provider profiles are DECLARATIVE — they describe the provider's behavior. They do NOT own client construction, credential rotation, or streaming. Those stay on AIAgent. ) annotationsN) dataclassfield) TYPE_CHECKINGAnyCallable)AccountUsageSnapshotcV^8dQhRR/#returnstr)formats"3/home/ubuntu/.hermes/hermes-agent/providers/base.py __annotate__rs  S c\^RIHpRV!4P 2# \dR#i;i)u Return a ``hermes-cli/`` UA string, with a stable fallback. Used by ``ProviderProfile.fetch_models`` so the catalog probe is not served the default ``Python-urllib/`` UA — some providers (OpenCode Zen, etc.) sit behind a WAF that returns 403 for that. get_version_infoz hermes-cli/z hermes-cli)hermes_cli.version_infor base_version Exceptionrs r_profile_user_agentrs4<-/<<=>> s  ++c>]tRt^)t$RtR]R&RtR]R&RbtR]R&RtR]R &Rt R]R &Rt R]R &R t R ]R&Rbt R]R&Rt R]R&RtR]R&RtR]R&]!RRR7tR]R&RtR ]R&RtR ]R&RtR]R&RtR]R&RtR]R &R tR ]R!&RtR ]R"&R tR ]R#&RtR$]R%&RtR]R&&RbtR]R'&RbtR]R(&RtR]R)&RbtR]R*&]!] R+7t!R,]R-&Rt"R]R.&]!] R+7t#R/]R0&Rt$R1]R2&Rt%R3]R4&Rbt&R]R5&Rt'R]R6&]!] R+7t(R7]R8&RRRR/R9R:llt)R;R /R<R=llt*R>R?lt+R@RAlt,RBR/RCRDllt-RcRERFllt.RGR/RHRIllt/RJRKlt0RLRMlt1RNROlt2RPRQlt3RRRSlt4RTRUlt5RVRWlt6RXRYlt7RZR[lt8R\R]lt9RRRRR^R_/R`Rallt:Rbt;R#)dProviderProfileuABase provider profile — subclass or instantiate with overrides.r namechat_completionsapi_modetuplealiases display_name description signup_urlFboolhiddenenv_varsbase_url models_urlapi_key auth_typeNT)defaultkw_onlyz bool | Nonesupports_streamingsupports_health_checksupports_model_listingz Callable[[str, Any], Any] | None auth_handlerzCallable[[Any], Any] | Nonerefresh_credentialzCallable[..., Any] | Noneclassify_api_errorsupports_visionsupports_vision_tool_messagessupports_prompt_cache_key str | Nonenative_reasoning_details_typeprocess_command process_argsprocess_command_env_varsprocess_args_env_varfallback_models)default_factorydict model_aliaseshostnamezdict[str, str]default_headersrfixed_temperature int | Nonedefault_max_tokensunsupported_response_formatsdefault_aux_modelzdict[str, dict[str, Any]]model_capabilitiesc$V^8dQhRRRRRR/#)r r(r7r*r zAccountUsageSnapshot | Noner)rs"rrProviderProfile.__annotate__s$  % 7A  $ rc R#)aGReturn an account-usage snapshot for this provider, if available. The ``/usage`` command invokes this only when no built-in account usage fetcher owns the provider. Implementations may make their provider-specific request and must return an ``AccountUsageSnapshot`` or ``None``; exceptions fail open at the dispatch boundary. Nr)selfr(r*s&$$rfetch_account_usage#ProviderProfile.fetch_account_usagesrvisionc V^8dQhRRRR/#)r rOr%r r r)rs"rrrJs4Crc R#)uyReturn a LIVE cheap-model id for auxiliary tasks, or "". ``default_aux_model`` is a hardcoded id in source, so it rots: when the provider retires that model every auxiliary call spends a round-trip 404ing before the retry net catches it. Providers that publish a machine-readable recommendation should override this and query it, so the cheap tier tracks the upstream catalog instead of a constant a human has to remember to bump. Contract: cheap to call (implementations must cache — this runs on client-resolution paths), never raises, and returns "" when it has no answer so the caller falls through to ``default_aux_model``. r!r)rLrOs&$rresolve_aux_model!ProviderProfile.resolve_aux_modelsrcV^8dQhRR/#r r)rs"rrrJs  c rc VP'd VP#VP'd-^RIHpV!VP4P;'gR#R#)uReturn the provider's base hostname for URL-based detection. Uses self.hostname if set explicitly, otherwise derives it from base_url. e.g. 'https://api.gmi-serving.com/v1' → 'api.gmi-serving.com' )urlparser!)rAr( urllib.parserV)rLrVs& r get_hostnameProviderProfile.get_hostnamesC ===== === -DMM*3399r 9rc V^8dQhRRRR/#)r messageszlist[dict[str, Any]]r r)rs"rrrJs)=BVrc V#)zProvider-specific message preprocessing. Called AFTER codex field sanitization, BEFORE developer role swap. Default: pass-through. r)rLr[s&&rprepare_messages ProviderProfile.prepare_messagess r session_idc$V^8dQhRRRRRR/#)r r_r7contextrr dict[str, Any]r)rs"rrrJs$';> rc /#)zbProvider-specific extra_body fields. Merged into the API kwargs extra_body. Default: empty dict. r)rLr_ras&$,rbuild_extra_body ProviderProfile.build_extra_bodys  rc V^8dQhRRRR/#)r modelr7r dict | Noner)rs"rrrJsjKrc R#)aReasoning config the main loop sends when ``agent.reasoning_effort`` is unset. None (default) hands the unset state to ``build_api_kwargs_extras`` as ``reasoning_config=None``, where each profile already decides (Nous/OpenRouter fill medium; Anthropic omits). A profile that would otherwise leave the route's own default in charge returns the config here so the agent records it as what went on the wire (the reasoning-rejection ladder reads that). NrrLrgs&&rdefault_reasoning_config(ProviderProfile.default_reasoning_configsrreasoning_configc$V^8dQhRRRRRR/#)r rmrhrarr z%tuple[dict[str, Any], dict[str, Any]]r)rs"rrrJs*&  / rc //3#)aProvider-specific kwargs split between extra_body and top-level api_kwargs. Returns (extra_body_additions, top_level_kwargs). The transport merges extra_body_additions into extra_body, and top_level_kwargs directly into api_kwargs. This split exists because some providers put reasoning config in extra_body (OpenRouter: extra_body.reasoning) while others put it as top-level api_kwargs (Kimi: api_kwargs.reasoning_effort). Default: ({}, {}). r)rLrmras&$,rbuild_api_kwargs_extras'ProviderProfile.build_api_kwargs_extrass $2v rc V^8dQhRRRR/#)r rarr rbr)rs"rrrJsCNrc /#)zProvider-specific OpenAI client keyword arguments. Values are defaults: explicit runtime/custom-provider settings win. The returned mapping must be cheap to build and must not perform I/O. r)rLras&,rbuild_client_kwargs_extras*ProviderProfile.build_client_kwargs_extrass  rcV^8dQhRR/#)r r r7r)rs"rrrJs  j rc R#)uReturn a default vision model id for this provider, or None. Overrideable hook for providers that discover their vision default at runtime (e.g. from a live catalog) rather than pinning one in code. Keeps provider-specific vision discovery inside the provider's plugin instead of a name-check branch in shared vision resolution. Default: None (no provider-specific vision model — the caller falls back to the user's chat model or the aggregator chain). Nr)rLs&rdefault_vision_model$ProviderProfile.default_vision_modelsrc V^8dQhRRRR/#)r rgr r rDr)rs"rrrJ scjrc R#)zJProvider-qualified context bound; explicit user overrides take precedence.Nrrjs&&rget_model_context_length(ProviderProfile.get_model_context_length rc$V^8dQhRRRRRR/#)r rgr usagerr Any | Noner)rs"rrrJs!C rc R#)zNOptional CostResult from canonical usage; distinguish estimates from invoices.Nr)rLrgrs&&&rget_usage_costProviderProfile.get_usage_costr~rc V^8dQhRRRR/#)r rgr7r rDr)rs"rrrJs ' 'J ': 'rc VP#)uReturn the default max_tokens cap for *model*. Overrideable hook for providers that need per-model output caps — e.g. a relay that fronts several upstream backends, each with a different completion-token limit. The transport calls this when the user hasn't set an explicit max_tokens. Default: return self.default_max_tokens (the static profile field), ignoring the model name. Override in a subclass to vary the cap per-model. )rErjs&&rget_max_tokensProviderProfile.get_max_tokenss&&&rc V^8dQhRRRR/#)r rgr7r ztuple[str, ...] | Noner)rs"rrrJ s rc R#)uDeclared reasoning-effort vocabulary for *model* on this provider. Overrideable hook for providers whose gateway validates ``reasoning.effort`` per model instead of ignoring or clamping unknown levels server-side (Ramp Router derives this from its live ``/v1/models`` catalog). The Responses transport consults it before falling back to its built-in per-backend vocabularies; it is the profile-declared analog of the OpenRouter catalog clamp on the chat-completions path (``openrouter_model_reasoning_capabilities``). Tri-state contract: - ``None`` — unknown/undeclared: the transport keeps its default vocabulary for the wire (this base implementation). - ``()`` — the model accepts NO reasoning parameters at all; the transport must omit reasoning fields entirely (some gateways return HTTP 400 rather than ignoring them). - non-empty tuple — clamp the requested effort onto these levels (``agent.reasoning_effort.clamp_effort`` semantics: nearest weaker supported level, never escalate). Implementations are called on the per-request hot path and must not block on network I/O — answer from a cache and return None while cold. Nrrjs&&rsupported_reasoning_efforts+ProviderProfile.supported_reasoning_efforts s6rcV^8dQhRR/#)r r r%r)rs"rrrJ=s 5 5 5rc lVP'gR#^RIHp\V!VP44#)a:Whether discovery surfaces may offer this provider. Every non-``hidden`` profile is listed. A ``hidden`` (pre-release) one surfaces once the user opted in by name (``hermes auth add `` put a row in its credential pool), so the pickers can then offer it. Reads auth.json only: it runs on every picker build. T)read_credential_pool)r&hermes_cli.authrr%r)rLrs& rlistedProviderProfile.listed=s({{{8(344rc V^8dQhRRRR/#)r client_kwargsrr rr)rs"rrrJIsSZrc R#)uBReturn a provider-specific client, or ``None`` for the standard one. Most providers speak OpenAI-compatible HTTP and want the shared ``openai.OpenAI`` client the core builds — they inherit this and return ``None``. A provider whose wire protocol is not HTTP at all (the ACP subprocess shims) or which needs a native SDK overrides this and returns its own client object. ``client_kwargs`` is the same mapping the core would have passed to ``openai.OpenAI`` (``api_key``, ``base_url``, ``command``, ``args``, timeouts, headers…). Unknown keys must be tolerated: the core adds to this mapping over time, so an override should accept ``**kwargs`` and pick what it needs rather than enumerate. Returning ``None`` (the default) is always safe — the caller falls through to its existing construction path. This is the hook that lets a provider ship *outside* this tree: with it, a profile registered from ``~/.hermes/plugins/model-providers/`` or a pip entry point can supply its own transport without any core edit. See ``plugins/model-providers/copilot-acp/`` for the in-tree example. Nr)rLrs&,r create_clientProviderProfile.create_clientIs.rc V^8dQhRRRR/#)r kwargsrr zdict[str, Any] | Noner)rs"rrrJbsS-Brc R#)zExternal-process providers: ``{available, logged_in, plan, detail, login_command}`` from the CLI itself so setup can gate on login. ``None`` = nothing to report beyond executable presence.NrrLrs&,r setup_statusProviderProfile.setup_statusbrc V^8dQhRRRR/#)r rrr zlist[dict[str, Any]] | Noner)rs"rrrJgs0Krc R#)zExternal-process providers: the account's live picker as ``[{id, label, note}]`` without any inference request; ``None`` falls back to ``fallback_models``.Nrrs&,rdiscover_modelsProviderProfile.discover_modelsgrrtimeoutg @c(V^8dQhRRRRRRRR/#)r r*r7r(rfloatr zlist[str] | Noner)rs"rrrJls:JJJ J  J  Jrc VP'gR#T;'gRP4pT;'g VPp\V4;'d8VP R4VP;'gRP R48gpV'dVP R4R,pMNVP ;'gRP4pV'g#V'gR#VP R4R,p^RIp^RIp ^RIH p V PPV4p V'dV PRRV 24V PRR 4V PR \44VPP4FwrV PW4K V !WR 7;_uu_4pVP!VP#4P%44pRRR4\'X\(4'dTMVP+R .4p^R IHpV!V4# +'giLH;i \0d-p\2P5RTP6T4Rp?R#Rp?ii;i)uFetch the live model list from the provider's models endpoint. Returns a list of model ID strings, or None if the fetch failed or the provider does not support live model listing. Resolution order for the endpoint URL: 1. base_url + "/models", but ONLY when the caller passed a base_url that differs from this profile's default (a user-configured model.base_url pointing at a proxy/custom endpoint). Callers pass base_url unconditionally — falling back to the profile default when the user configured nothing — so equality with self.base_url means "not customised" and must not shadow models_url. 2. self.models_url (explicit override — use when the models endpoint differs from the inference base URL, e.g. OpenRouter exposes a public catalog at /api/v1/models while inference is at /api/v1) 3. self.base_url + "/models" (standard OpenAI-compat fallback) The default implementation sends Bearer auth when api_key is given and forwards self.default_headers. Override to customise auth, path, response shape, or to return None for providers with no REST catalog. Callers must always fall back to the static _PROVIDER_MODELS list when this returns None. Nr!/z/models)open_credentialed_url AuthorizationzBearer Acceptzapplication/jsonz User-Agent)rdata)chat_catalog_idszfetch_models(%s): %s)r0stripr(r%rstripr)jsonurllib.requesthermes_cli.urllib_securityrrequestRequest add_headerrrBitemsloadsreaddecode isinstancelistgethermes_cli.chat_catalogrrloggerdebugr)rLr*r(r caller_baseeffective_base custom_baseurlrurllibrreqkvresprrrexcs&$$$ r fetch_modelsProviderProfile.fetch_modelslsB***~~2,,. $55 ;'    s # (;(;'C'CC'H H  $$S)I5C??((b//1C%$++C09<Dnn$$S)  NN?ggY,? @ x!34 |%8%:;((..0DA NN1 1 &s<<zz$))+"4"4"67=&tT22D8LE @#E* * =<   LL/C @ s0%H76.H$$?H7$ H4 /H77 I.!I))I.r)N)<__name__ __module__ __qualname____firstlineno____doc____annotations__rr r"r#r$r&r'r(r)r+rr.r/r0r1r2r3r4r5r6r8r9r:r;r<r=r?r@rArBrCrErFrGrHrMrRrXr]rdrkrprtrxr|rrrrrrrr__static_attributes__rrrrr)sNK I&Hc&GUL#KJ FDHeHcJIs',D$&G G"&4&#'D'6:L296:3:4818"OT!+/!4. ',t+ 15!:4OSL%&(e( "#"  OU 5M45Hc',D&AO^A"s!%) )*, %, s5:$4O1O (, DH % *.)-(  ': 52  J#J $ J  JJrr)r __future__rlogging dataclassesrrtypingrrragent.account_usager getLoggerrrobjectOMIT_TEMPERATURErrrrrrs\ #(//8   8 $8  LL Lr