+ lHjŏa0t$Rt^RIHt^RIt^RIt^RIHtHtH t H t H t ^RI H t Ht^RIHt]P"!R4tRt^ tRt^t^tRtRtR ]R &R R ltR RltRRltRtRRltRRlt RRlt!RRlt"RRlt#RRlt$RRlt%R R!lt&R"R#lt'R$R%lt(R&R'lt)R(R)lt*R*R+lt+R,R-lt,R.R/lt-R0R1lt.R2R3lt/RMR4R5llt0R6t1]2!0RNm4t3]2!0ROm4t4R7R8lt5R9R:lt6R;R<lt7R=R>lt8R?R@lt9RARBlt:RPt;]2!0RQm4tRGRHlt?RIRRJR/RKRLllt@R#)RzUDelegation config knobs (delegation.* keys) and child credential/provider resolution.) annotationsN)AnyDictList NamedTupleOptional)base_url_hostnameis_truthy_value)scoped_fallback_chainztools.delegate_toolcustomFOptional[float]DEFAULT_CHILD_TIMEOUTcV^8dQhRR/#returndict)formats"?/home/ubuntu/.hermes/hermes-agent/tools/delegate_tool_config.py __annotate__rsdc^RIHpV!4#)zJThe ``delegation`` section, read through the origin so tests can patch it. _load_config)tools.delegate_toolrrs r_cfgrs 0 >rc$V^8dQhRRRRRR/#rcommandstr descriptionrr)rs"rrr*s!3Src 2\PRW4R#)zQAuto-deny (safe default): returns 'deny' so the child sees a recoverable refusal.zeSubagent auto-denied dangerous command: %s (%s). Set delegation.subagent_auto_approve: true to allow.denyloggerwarningrr!kwargss&&,r_subagent_auto_denyr)*s NNo rc$V^8dQhRRRRRR/#rr)rs"rrr2s!Ccrc 2\PRW4R#)zPAuto-approve (opt-in YOLO via delegation.subagent_auto_approve): returns 'once'.z1Subagent auto-approved dangerous command: %s (%s)oncer$r's&&,r_subagent_auto_approver-2s NNF] rcl\\4PRR44'd\#\#)zZCallback for subagent worker threads per delegation.subagent_auto_approve (default False).subagent_auto_approveF)r rgetr-r)rrr_get_subagent_approval_callbackr17s'tvzz"95ABB%% rc$V^8dQhRRRRRR/#)rkeyr env_var Optional[str] invalid_msgr)rs"rrr=s!s]rc@\4PV4pVe V!V4#V'd\ P!V4MRpV'd V!V4#V# \\3d\P YE4Tu#i;i \\3dT#i;i)zdelegation. > > default. A config value that fails ``parse`` logs ``invalid_msg`` (``%r`` = the value) and yields the default; an env value that fails is silently ignored.N)rr0 TypeError ValueErrorr%r&osgetenv)r3r4parsedefaultr6valenv_vals&&&&& r_knobr@=s &**S/C  : %,bii G > ! N:&  NN; ,N :&   N s#AB(BBBBc(V^8dQhRRRRRRRR/#)r flag_namer messageargsrrNoner)rs"rrrOs(''#''C'D'rc\4V,'g(R\4V&\P!V.VO5!R#R#)zKModule-global one-shot warning (``flag_name`` is the ``_*_WARNED`` global).TN)globalsr%r&)rBrCrDs&&*r _warn_oncerHOs1 9Y  # )w&& rcV^8dQhRR/#rrintr)rs"rrrUs3rc"\RRR^R4#)z\delegation.oneshot_max_children (total children per finite one-shot session; 0 = unlimited).oneshot_max_childrenNc,\^\V44#)maxrKvs&r+_get_oneshot_max_children..XsAs1vrzJdelegation.oneshot_max_children=%r is not a valid integer; using default 2)r@rrr_get_oneshot_max_childrenrVUs &>T rcV^8dQhRR/#rJr)rs"rrr]scrc\RRR\R\ 24pV^ 8d)\4PR4e\ RRV4V#)zdelegation.max_concurrent_children > DELEGATION_MAX_CONCURRENT_CHILDREN env > 10. Floor of 1 is the only bound enforced; there is no ceiling. max_concurrent_children"DELEGATION_MAX_CONCURRENT_CHILDRENc,\^\V44#)rPrRs&rrT._get_max_concurrent_children..csSVWXZ]^_Z`SarzLdelegation.max_concurrent_children=%r is not a valid integer; using default _HIGH_CONCURRENCY_WARNEDzxdelegation.max_concurrent_children=%d: each child consumes API tokens independently. High values multiply cost linearly.)r@ _DEFAULT_MAX_CONCURRENT_CHILDRENrr0rH)results r_get_max_concurrent_childrenra]s[ !#GIa( VWwVxyF {tvzz";<H &)ABH  MrcV^8dQhRR/#rrboolr)rs"rrrnsIIdIrcH\\4PRR44#)zdelegation.independent_completions (bool, default False): split a background call into per-task / per-group completion messages that land as each finishes. Off = one consolidated message when the whole call is done.independent_completionsFr rr0rrr_get_independent_completionsrhns 46::&?G HHrcV^8dQhRR/#rcr)rs"rrrss999rcH\\4PRR44#)zdelegation.worktree_isolation (bool, default False): each child gets its own git worktree off the parent's HEAD so parallel children never contend for one working copy. Git-only and local-backend-only; otherwise silently ignored.worktree_isolationF)rdrr0rrr_get_worktree_isolationrlss  /7 88rcV^8dQhRR/#rJr)rs"rrrys * * *rcj^RIHp\4PR4e \ RR4V!4#)a@Concurrency cap for background delegations == delegation.max_concurrent_children. At capacity a new async dispatch is REJECTED (not queued) so a runaway model can't pile up unbounded background work; the caller then runs synchronously. A leftover ``delegation.max_async_children`` key is ignored with a one-time warning.ramax_async_children_LEGACY_MAX_ASYNC_WARNEDzdelegation.max_async_children is deprecated and ignored; delegation.max_concurrent_children now caps background delegations too. Remove the stale key from config.yaml.)rrarr0rHros r_get_max_async_childrenrrys6A vzz&'3 &)F ( ))rc V^8dQhRRRR/#)rrawrrr r)rs"rrrs6666rcB\V4pV^8:dR#\RV4#)uJSeconds → None (<= 0 disables) or max(30, value). Raises on non-numeric.Ng>@)floatrQ)rtparseds& r_parse_timeoutrxs# 3ZFQ;45Cf$55rcV^8dQhRR/#)rrr r)rs"rrrs  O rc0\RR\\R4#)uInactivity cap for one child (seconds of NO progress), or None (default: no cap). Failures should come from what the child does (API/tool errors, iteration budget), not a stopwatch: the cap restarts on every sign of progress — a completed call, a tool change, an activity-clock tick — so a slow provider serving multi-minute completions never loses a live child, and a child frozen for the whole window is still caught. A configured value pre-empts nothing the heartbeat staleness monitor would not also catch. delegation.child_timeout_seconds > 0 opts in (floor 30 s); 0 or negative disables. Env fallback: DELEGATION_CHILD_TIMEOUT_SECONDS.child_timeout_seconds DELEGATION_CHILD_TIMEOUT_SECONDSzUdelegation.child_timeout_seconds=%r is not a valid number; using default (no timeout))r@rxr rrr_get_child_timeoutr}s !C^Uj_ rcV^8dQhRR/#rJr)rs"rrrs  c rc<Rp\RRV\R\ 24#)zdelegation.max_spawn_depth floored at 1 (no ceiling). Depth 0 is the parent; agents at depths 0..N-1 may spawn, depth N is the leaf floor. Default 1 is flat. Each extra level multiplies API cost.c\V4pV\8d!\PRV\\4\ \V4#)z6delegation.max_spawn_depth=%d below floor %d; using %d)rK_MIN_SPAWN_DEPTHr%r&rQ)rSivals& r_floored&_get_max_spawn_depth.._flooreds81v " " NNSUY[km} ~#T**rmax_spawn_depthNzDdelegation.max_spawn_depth=%r is not a valid integer; using default )r@ MAX_DEPTH)rs r_get_max_spawn_depthrs)+ 49 NykZ rcV^8dQhRR/#rcr)rs"rrrs4rc\4PRR4p\V\4'dV#\V\4'd"VP 4P 4R9#R#)z]delegation.orchestrator_enabled kill switch (default True): False forces every child to leaf.orchestrator_enabledT>1onyestrue)rr0 isinstancerdr striplower)r>s r_get_orchestrator_enabledrsR &**+T 2C#t #syy{  "&@@@ rcV^8dQhRR/#rcr)rs"rrrsMM4MrcJ\\4PR4RR7#)zFWhether narrowed child toolsets should keep the parent's MCP toolsets.inherit_mcp_toolsetsT)r=rgrrr_get_inherit_mcp_toolsetsrs 46::&<=t LLrc V^8dQhRRRR/#)rvaluerrr r)rs"rrrs003030rcf\T;'gR4P4PR4#)/)r rrstrip)rs&r_normalized_runtime_urlrs' u{{  ! ! # * *3 //rcV^8dQhRR/#)rrOptional[dict]r)rs"rrrs r rXf rrc$V'g V'dR#\VRR4p\V\4'gR#VP4UUu/uF7wrE\V\4'gK\V\ 4'gK5WEbK9 upp#uuppi)a5Parent's endpoint-trust capability map for a child, or None. ``agent.capabilities`` is a trust decision scoped to one provider+endpoint: inherited ONLY when the child runs the parent's exact route; any provider or base_url override stays DEFAULT-DENY (matches the /model switch posture). See #94036, #97292. N capabilities)getattrrritemsr rd) parent_agentoverride_provideroverride_base_url parent_capsr3rs&&& r_inherit_parent_capabilitiesrsl-,=K k4 ( ()4):):)< q)<:3 3PS@TJYcdikoYpJCJ)< qq qs B *B B c$V^8dQhRRRRRR/#)rsurface_base_urlr5surface_api_keyrrtupler)rs"rrrs#77]7]`7ej7rc\VRR4p\VRR4p\V\4'd#VPR4VPR43MRVe\VRR4\VRR43MR3pVF@wrg\ V4pV'gKVP R4'gK3Y;'gT3u# T;'gRV3#) uO``(base_url, api_key)`` the parent is actually calling, taken from ONE source. ``parent_agent.base_url`` / ``api_key`` can lag the live client (old OpenRouter URL vs local Ollama; a fallback runtime the surface attributes have not caught up with), and pairing the live endpoint with the surface key hands the child a (base_url, key) pair that was never valid anywhere — an instant, non-retryable 401 (#90009). The live client's key travels with its URL; the surface attributes are used only when there is no live OpenAI-wire client (native Anthropic/Bedrock runtimes keep ``client=None``)._client_kwargsNclientbase_urlapi_keyrNN)zhttp://zhttps://)rrrr0r startswith) rrr client_kwargsrlive_candidatesraw_urllive_keyurls &&& r_inherit_parent_endpointrsL*:DAM \8T 2FISTacgIhIh  : & (9(9)(DEnzOUOaR ('&)T*JKgsO -%g. 33>>"9::44_5 5-  $ $ 66rcV^8dQhRR/#)rr3rr)rs"rrrsIIcIrcZ^RIHpV!V4pVeVP4'dV#R#)z8``load_pool(key)`` when it holds credentials, else None.) load_poolN)agent.credential_poolrhas_credentials)r3rpools& r _loaded_poolrs,/ S>D#(<(<(>(>4HDHrc(V^8dQhRRRRRRRR/#)rrrproviderr5rrrdr)rs"rrrs/ n n n} n nZ^ nrc:aa^RIHoHpV!WSR7'gR#\VRR4p\ V4'gR#V!4p\ V\ 4'*;'g=\;QJd VV3RlV4F 'gK R# R#!VV3RlV44#)zeProvider identity AND at least one entry for the child's endpoint; pools without entry metadata pass.)%credential_pool_entry_serves_endpoint credential_pool_matches_provider)rFentriesNTc36<"TFpS!VS4xK R#5i)Nr).0entry_entry_serves_endpointrs& r (_pool_serves_endpoint..s/mel\a0Fuh0W0Wels)rrrrcallablerlistany)rrrr entries_fnrrs&&f @r_pool_serves_endpointrsz ,DX N Ny$/J J  lG'4( ( m mCC/mel/mCCmCmC/mel/m,mmrc$V^8dQhRRRRRR/#)reffective_providerr5effective_base_urleffective_requested_providerr)rs"rrrs$;;%;IV;"/;rc\VRR4pV'gV#\VRR4;'gRpVR8Xd^RIHpV!W#R7pVfR#V!\VRR4\VR R4R7pVeVR8Xd Ve W8XdV#^R IHp Hp V !W#4p T !\ V4Y{'dV ^,4#R4#W8Xd9VfR#V'd\W@V4'dV#\PR W4\ V4p V eV'd\WV4'gR#V # \dEp TR8Xd\PR Y-4Rp ? R#\PR Y 4Rp ? R#Rp ? ii;i)uCredential pool for the child: parent's pool (same provider), that provider's own pool, or None (child keeps its fixed credential). Custom endpoints all collapse to ``provider="custom"``, so they are matched by endpoint identity (the ``custom:`` pool key) — sharing the parent's pool across different custom endpoints would overwrite the child's delegated base_url on lease; an unregistered custom endpoint (no custom_providers entry) keeps the child's fixed credential rather than inherit the parent's. Custom endpoints are a special case: every direct ``delegation.base_url`` runtime collapses to ``provider="custom"``, so bare provider equality would treat two *different* custom endpoints as interchangeable and let the child inherit the parent's pool. We therefore resolve custom runtimes by endpoint identity (the ``custom:`` pool key derived from the base_url) and only share the parent's pool when both resolve to the *same* custom endpoint. See #7833. Named custom providers may share one gateway URL with different credentials, so the inherited ``requested_provider`` identity takes precedence over URL-only matching (#45763): the child must not lease the first pool registered for the shared endpoint. _credential_poolNrrr )get_custom_provider_pool_key) provider_namerrequested_provider)custom_entry_for_endpointentry_scoped_poolzAParent %s pool has no entry for child endpoint %s; not sharing itzDCould not resolve custom credential pool for child endpoint '%s': %sz:Could not load credential pool for child provider '%s': %s) rrragent.custom_entry_poolrrrrr%debug Exception)rrrr parent_poolparent_providerr child_key parent_keyrrownerrexcs&&&& r_resolve_child_credential_poolrs(,(:DAK lJ=CCO"p  ) J45GtI 5 j$7w|]qswGxJ&?h+F:Kafpf}"" ]-.@_E$\)%{`r)s)s"" LL\+ A./   2;PQUk};~;~ p  ) LL_as y y  LLUWi o o  psSD% 6D%0D%4D%: D%D%D%",D%D%#D%% E40E/E//E4c^RIp\V\4'dTMRp\V\4'dTMRpV'g V'gR#V'dVPV4M/pV'dVPV4M/pVP R4pVP RR4pVP V4\V\4'd-\V\4'dVP V4WSR&MVeWcR&T;'gR#)aMerge explicit ``delegation.request_overrides`` OVER runtime-derived ones. Explicit top-level keys win; ``extra_body`` is deep-merged ONE level so provider personality (e.g. ``thinking: {type: disabled}``) survives unless the explicit dict redefines that exact key. Both sides are deep-copied so transport-side mutation can't leak into the config/runtime cache. None when both are empty.N extra_body)copyrrdeepcopyr0popupdate)runtime_overridesexplicit_overrides_copymergedexplicit runtime_extraexplicit_extras&& r_merge_request_overridesr(s -78I4-P-P)VZ/9:Ld/S/S+Y] %72CU^^- .F5Gu~~01RHJJ|,M\\,5N MM(-&&:nd+K+K^,,|  #-| >>Trc$V^8dQhRRRRRR/#)rrr5rCr rrEr)rs"rrrCs!""]"S"T"rcf^RIpV'd%VPV4'g \V4hR#R#)uA pinned ACP transport command must exist on PATH — refuse loudly rather than let the child silently fall back to another transport.N)shutilwhichr9)rrC_shutils&& r_require_pinned_commandrCs*w}}W--!!.wrcV^8dQhRR/#rr)rs"rrrJsdhrc "RVRVRVRVRVRV/VC#)zVThe child credential dict every branch of ``_resolve_delegation_credentials`` returns.modelrrrapi_moderequest_overridesr)rrrrrrextras&&&&&&,r_credential_bundlerJs3  Hj(IwXbdl. 27 rc V^8dQhRRRR/#rrSrrr)rs"rrrQs((D((rc ^RIHpVR,P4p\VR,4pRpV!VR,4;'gRpVR8Xd RV9dRRreMVR 8XdR R reM R V9dR p^R IHpVR,\ 9g#VR,'dVR,V!49d VR,pRpVR,'dN^RIHp V !VR,VR,R7p \V PR4;'g/4;'gRp\VR,WPR,VR,V\W44# \d)p \PRTR,T 4Rp ? L[Rp ? ii;i)zF``delegation.base_url`` branch: provider/api_mode from URL heuristics.)_detect_api_mode_for_urlrr chat_completionsz chatgpt.comz/backend-api/codexz openai-codexcodex_responseszapi.anthropic.com anthropicanthropic_messageszapi.kimi.com/coding)registered_api_modesrNrresolve_runtime_providerr requested target_modelrzjdelegation.base_url: runtime resolution for provider '%s' failed; proceeding without request_overrides: %sr)hermes_cli.runtime_providerrrragent.transportsr _EXPLICIT_API_MODESr rr0rr%rrr) rSexplicit_request_overridesr base_lowerhostrrr rr runtimers && r_direct_endpoint_credentialsrQs^ E:$$&J Qz] +DH'* 6LL:LH }!5!C+->( $ $(*>( * ,'6}++* !J-SgSiBiZ=}}  L.:UVW^U_`G $W[[1D%E%K%K L T TPT   ' H mQy\8 !2O    LL|* s   s$:D? D?D?? E2 E--E2c V^8dQhRRRR/#rr)rs"rrr{s,,T,$,rcfVR,p^RIHpV!W R,R7pTP R R 4pT'g\R T R 24hTP R 4p\ TR T RT R24TP R4'g?T'g7TP 4P4\9d\R T R24h\TR,;'gTP R4;'gRTP R4\8XdTMTP R4TP R4YdP R4\TP R4T4;'g/T\TP R4;'g.4R7# \dp\RT RT R24ThRp?ii;i)zL``delegation.provider`` branch: full bundle via the runtime provider system.rr rr z$Cannot resolve delegation provider 'z': z. Check that the provider is configured (API key set, valid provider name), or set delegation.base_url/delegation.api_key for a direct endpoint. Available providers: openrouter, nous, zai, kimi-coding, minimax.NrrzDelegation provider 'z]' resolved but has no API key. Set the appropriate environment variable or run 'hermes auth'.rz' is pinned to the 'z]' command, which was not found on PATH. Install it or choose a different delegation provider.ru' resolved without a base_url. Refusing to build a subagent with an incomplete credential bundle — check the provider's configuration / auth, or set delegation.base_url for a direct endpoint.rrrD)rrD) rr rr9r0rrr_NATIVE_SDK_PROVIDERSr_RUNTIME_PROVIDER_CUSTOMrr)rSrconfigured_providerr rrrpinned_commands&& r_runtime_provider_credentialsr{sJ- H*5HY`Wabkk)R(G #$7#89M N  [[+N/0C/DE  @A KK # #N#))+113;PP#$7#89V W   ' 22gkk'*22d&{{:6:RRX_XcXcdnXo J++j*A -@!AC]^ddbdT'++f*=*C*C%D  A 23F2Gs3%PP Q   sF F0F++F0c V^8dQhRRRR/#)rcfgrrr)rs"rrrsMMMMrcRUu/uF?q"\VPV4;'gR4P4;'gRbKA pp\VPR4;'gR4P4P4;'gRVR&\ VPR4\ 4'dVPR4MRpVR,;'gRP4P4\ 9pVR,'dV'g \W44#VR,'g-\VR,RRRR\\VRR4V44#\W44#uupi) uChild credential bundle from the ``delegation`` config section. Three branches: ``base_url`` set → direct endpoint (``api_key`` None means inherit the parent's key, so providers keyed outside OPENAI_API_KEY work); ``provider`` set → full bundle via the runtime provider system (same path as CLI/gateway startup); neither → None values, child inherits everything. ``request_overrides`` is honored on every branch. Raises ValueError with a user-facing message.rrrrNrr)rrrr) r r0rrrrrrrrrr)r rkvaluesris_native_sdk_providers&& r_resolve_delegation_credentialsr%s= Am m@l1SWWQZ%%2&,,.66$6@lF mSWWZ066B7==?EEGOO4F:AKCGGTgLhjnAoAo)&(,,\:@@bC#t$$ %"nn\*00b d++s33      s5"B! B!&B2B2B2! B/.B/2 CCc$V^8dQhRRRRRR/#)r routing_cfgrpinnedrdrzOptional[list[dict[str, Any]]]r)rs"rrrs" + +S +$ +Sq +rc\\VRR4\V\4'dVP R4MRVRR7#)aFallback chain for a child, owned by the same config block as its route. Pinned children (provider, endpoint or model override) never borrow the parent chain; unpinned children inherit it when ``fallback_providers`` is absent/null. An explicit ``[]`` disables fallback either way. Malformed entries are dropped by the canonical normalizer. Same rule as a pinned cron job (``cron/scheduler.py::_job_fallback_chain``). _fallback_chainNfallback_providersr*)r1r)r rrrr0)rr0r1s&&&r_resolve_child_fallback_chainr5s? ! /61;K1N1N ,-TX\ ++rc&]tRtRt$RtR]R&RtR#)ResolvedReasoningia"A route's FINAL reasoning config, used as-is (``None`` included = the route's own default): a profile route resolves its profile's ``agent.reasoning_effort`` / ``reasoning_overrides``, so neither the launching profile's ``delegation.reasoning_effort`` nor the parent's level may fill it in.rconfigrN)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__rrrr7r7sN rr7c$V^8dQhRRRRRR/#)rdelegation_cfgr route_effortrrr)rs"rrrs!4ssrc.\V\4'd VP#\VRR4pTpV'g"VRJgT;'g/P R4pV'gVRJd-^RIHpV!V4pVf\PRV4V#TpV#)uChild reasoning config: a :class:`ResolvedReasoning` route value as-is, else the route's raw effort > ``delegation.reasoning_effort`` > the parent's level. Keep the raw value — a YAML ``false`` must disable thinking, not coerce to "" and inherit.reasoning_configNFreasoning_effort)parse_reasoning_effortzAUnknown delegation.reasoning_effort '%s', inheriting parent level) rr7r8rr0hermes_constantsrFr%r&)rrArBchild_reasoningdelegation_effortrFrws&&& r_child_reasoningrJs, 122"""l,>EO$ !2e!;+11r667IJ-6;'(9: > NN^`q r %O rr0override_reasoning_effortcHV^8dQhRRRRRRRRRRR RR RR RR R RRRRRR/ #)rrArparent_api_keyrrr5rroverride_api_keyoverride_api_modeoverride_acp_commandoverride_acp_argszOptional[list[str]]r0zOptional[dict[str, Any]]rKrzdict[str, Any]r)rs"rrrsgg"&g8;gGTgivg$g8EgZgg(g=Pg* gNQ g  grc $T;'g VPp V'dTp TpM=V'd\VRR4p TpM%\VRR4p \WPV4wr\VRR4;'gRpVeTpMVT ;'gRP 4P 4\ 9d^RIHpV!V 4pMW8wdRpM \VRR4p\VRV R24T;'g\VRR4p\V eT M\VR .4;'g.4pV'd V'gR.ppV'd2^R I H pT!T ;'gR4pVeVPR 8wdR R pp T pV'g(V'g V'g\VRR4;'gT p\WV 4pRTRT;'gTRT RT RTR\WV4RTRTR TRTR\!Y fTMT \#T;'g T;'gT4R7R\VRR4/ \$UUu/uFwppTV'dTM \VVV4bK uppCpV'gVR,;'gRVR&\VRR4p\'V\(4'dVVR&V#uuppi)aChild credentials, transport and routing (config override > parent inherit) as ``AIAgent`` kwargs. Rules that are easy to break: api_mode is re-derived (not inherited) when the child's provider differs from the parent's or is Nous Portal (dual-wire); a pinned ``delegation.command`` must exist on PATH or the spawn fails loudly; ``override_provider`` clears the parent's ACP transport, fallback chain and OpenRouter routing filters so the pinned provider is actually honoured.rNr) nous_api_moderzPinned delegation command 'zR' was not found on PATH. Install it or remove delegation.command from config.yaml. acp_commandacp_args)get_provider_profileexternal_processz copilot-acprrrrrrrDfallback_model)r1openrouter_min_coding_scoreprovider_data_collection max_tokens)rrrrrr_NOUS_PROVIDERShermes_cli.providersrSrr providersrV auth_typerJrr5rd_ROUTING_FILTER_DEFAULTSrrK)rrArMrrrrNrOrPrQr0rKeffective_modelrr_parent_providereffective_api_moderSeffective_acp_commandeffective_acp_argsrVprofilerrHadr(child_max_tokenss&&&$$$$$$$$$ r_resolve_child_runtimerjs11|11O .. $\:tD.$\:tD-ElTiTiky-z*|Z>DD"$.  " " ) ) + 1 1 3 F6*?;  /!$\:tD ;Z4\Vgh& 7LjZlO 7 ,?.[)GG->GG%HJ &w|=Z\`'aSk kRj$!Q1$a',1*E ERj kF -34N-O-U-USU)*|\4@"C((/| M ls J ,J r>googlevertexbedrock google-genai>rrr ))providers_allowedN)providers_ignoredN)providers_orderN) provider_sortN)provider_require_parametersF)rZr>nous nousresearch nous-portal)A__conditional_annotations__r= __future__rloggingr:typingrrrrrutilsrr hermes_cli.fallback_configr getLoggerr%rr_r^rrrqr r>rr)r-r1r@rHrVrarhrlrrrxr}rrrrrrrrrr frozensetrrrrrrr%rr`r\r5r7rJrj)rws@rrsf[" 884<   0 1$#% !  *.-  $' "I 9 *6  M0 r7(I n;z0""QR ]^"(T,\M*. CD + (g-1 gTX ggr