+ lHjv aRct70tRt^RIt^RIt^RIt^RIHtHt^RI H t ^RI H t H t ^RI Ht]!4t]P"t]P$t]P(P+]!^]!^] !R^444RR7t]P2!R 4]P4!4t/t]^kR tR tR tR t RRlt!Rt"]!!R4RRl4t#]!!R4RRl4t#Rt$]!!R4RRl4t#]!!R4RRl4t#RRlt%R R!lt&]'!0Rdm4t(R#t)R$t*R%t+R&t,R't-R(t.R)t//R*])bR+R,bR-]*bR"R.bR/R0bR1R2bR3R4bR5]+bR6],bR7]-bR8R9bR:R;bRR?bR@].bRARBbRCRDbRERFRGRHRIRJRK]//Ct0R*RLR:RMRr/s00eD0Qrg@g?g(@ic$V^8dQhR\/#)namestr)formats"r __annotate__rDs  C rcaV3RlpV#)z_``@method(name)`` (profile-scoped) whose body's uncaught exception becomes ``_err(rid, 5061)``.cL<aRV3Rllp\S4!\V44#)c0V^8dQhR\R\/#rparamsreturndict)rs"rr5_projects_handler..deco..__annotate__Gs / / /$ /rcr<S!W4# \d!p\TR\T44uRp?#Rp?ii;i)iN) Exception_errr)ridrefns&& rhandler0_projects_handler..deco..handlerGs5 /#& /Cs1v.. /s 6166)method_profile_scoped)r)r*rsf rdeco_projects_handler..decoFs# / / d|OG455rr)rr.sf r_projects_handlerr0Ds6 Krc>VPW\V4R7R#))preserve_unversionedN)!reconcile_discovered_repos_policy!_repo_discovery_policy_is_default)pdbconnpolicy policy_keys&&&&r_reconcile_repo_discoveryr9Ps!))$?`ag?h*jrzprojects.discover_reposc0V^8dQhR\R\/#rr!)rs"rrrVsFF4FDFrc \V4;_uu_4p^RIHp\4pVP 4;_uu_4p\ W5V\ V44VPR4'dVR,'d \WT4\W%VR,R7pRRR4\VRXRV/4uuRRR4# +'giL*;i +'giR#;i)uRepos for the desktop overview: scanned-from-disk (cached) ∪ session-derived. A profile whose session store was never initialized still answers from its scan cache (``db`` is None then). projects_dbscanenabled)r6include_cachedNreposdiscovery_policy) _profile_db hermes_clir=_repo_discovery_policyconnect_closingr9_repo_discovery_policy_keyget_scan_discovered_repos_remote_discover_repos_payload_ok)r'rdbr5r7r6rAs&& r_rMUs V  1')  " "d %c9STZ9[ \zz&!!fY&7&7-d;+B&QZJ[\E#3%);VDE  # "   s()C repo -> lane overview with counts + a few preview sessions per project, plus the flat set of session ids claimed by any project (excluded from flat Recents). Lanes carry no session rows; drill-in uses ``projects.project_sessions``.Nr]rdscoped_session_ids preview_limitF session_limitTrihydraterjinclude_discovered)rCrKreintrH)r'rrLrcrds&& rrMrMs V   :sZ[$@TVXYZ  0 c&**_*E*J*J&KUZfjj9AATBW[]3T*%5{I-t4H/IKL    sB5AB5<.B55 C zprojects.project_sessionsc0V^8dQhR\R\/#rr!)rs"rrrs i i4 iD irc a\VPR4;'gR4oS'g\VRR4#\V4;_uu_4pVf\ VRR/4uuRRR4#\ Y!^R\ VPR4;'gR 4R R 7wr4\ VR\V3R lVR ,4R4/4uuRRR4# +'giR#;i)zRFully hydrated lanes for one project, from the same grouping as ``projects.tree``. project_idizproject_id requiredNprojectTrjiFrlc3F<"TFqR,S8XgKVxK R#5i)idNr).0prrs& r _..s)_5E4T^I^!!5Es! !r])rrHr&rCrKreronext)r'rrLrc_activerrs&& @rrMrMsVZZ -334J C455 V   :sY-.  . afjj9AATBW\^ 3D)_T*5E)_ae$fgh    sC+AC C# c$V^8dQhR\/#)rr r!)rs"rrrs,,d,rcH\4PR4;'g/#)display _load_cfgrHrrr _display_rawrs ;??9 % + ++rc<V^8dQhR\R\R\/#)rkeydefaultr r)rs"rrrs!..s.S.c.rc\\4PW4;'gR4P4P 4pW29dV#T#)zNNormalised ``display.``; unknown/garbage values read back as ``default``.rs)rrrHstriplower)rrallowedraws&&& r _display_wordrsB ln  .44" 5 ; ; = C C EC.3-g-rfullc^RIHpHp\4pVP R^4pRTR\ V4^8dV!V^,4MRRV!4/#))list_available_providersnormalize_provider/modelproviderunknown providers)hermes_cli.modelsrr_resolve_modelsplitlen)rrrrpartss& r_cfg_get_providerrsQN  E KKQ E UJE UV(:58(D\e 13 55rc \VPRR4;'g>\4PR4;'g/PRR4;'gR4P4p\ RVR\ VPR44RVPR4/4pRVR\ PV4/#)cwdrsterminal cwd_explicitr^branch)rrHrr_completion_cwdrU git_prober)rrrs& r_cfg_get_projectrs fjj#__  (C(I(Ir'N'NuVX'Y__]_ ` f f hC 5#~tFJJu ,Y[9CCV DDrc\4p\PVPRR44;'g/pVPR4pV'd?\V\4'g)^RIHp\V!VPR44RR4p\V\4'dCVPR4RJpV'd%\VPR 4;'gR 4MR pMVPR4;'g/PR R4p\V\4'dA^R I H pV!V4;'g/p V PR4RJdRMV PR 4pVRJdR M\T;'gR 4pVPR4;'g/PRR4'dRMRp RVRV /#) session_idrscreate_reasoning_override)session_runtime_viewagentreasoning_configNr?Feffortmediumrreasoning_effort)parse_reasoning_effortrshow_reasoningTshowhider) r _sessionsrHrTr"agent.voice_turn_routergetattrrhermes_constantsr) rcfgsessionrrr?r raw_effortrparsedrs & r_cfg_get_reasoningrsp +CmmFJJ|R89??RG{{#>?z"2D99?"#7 G8L#MOacgh"D))"&&y1>DK%))(3??x@QWggg&,,"112DbI j$ ' ' ?+J7==2F"(**Y"75"@fjjQYFZJ%.C 8N8Nh4O+11r667GNNfTZG VY 00rc\PVPRR44;'g/pVPR4pVe\VRR4MVPR4pVf \4pRRRR R /PVR 4/#) rrsrN service_tiercreate_service_tier_overriderpriorityfast ultrafastnormal)rrHr_load_service_tier)rrrtiers& r _cfg_get_fastrsmmFJJ|R89??RG KK E494EGE>4 0;<  |!# j&+{CGGhW XXrcp\RR\4pV'g\RR\4R8XdRMRpRV/#) thinking_moders details_mode collapsedexpandedrr)r_THINKING_MODES _DETAIL_MODES)rrs& r_cfg_get_thinking_moders6 _ =C %nk=QU__fep S>rc\R, pVP4'dVP4PM^pRTR\ 4/# \dR^/u#i;i)z config.yamlmtimemcp_rev) _hermes_homeexistsstatst_mtimer%_compute_mcp_rev)rcfg_pathrs& r_cfg_get_mtimers`m+H,4OO,=,= ((1 UI'7'9 :: |sAAA! A!rr^c8R\\4R\4/#)homer)rr_display_hermes_homers&rrrsvs<'8)EYE[\rrtcR\4/#)config)rrs&rrrs Hik2rpromptc:R\4PRR4/#)r custom_promptrsrrs&rrrsh (LMrskinc:R\4PRR4/#)rrr)rrHrs&rrrsG\^%7%7 %JKr indicatorc0R\R\\4/#)rtui_status_indicator)rrrrs&rrr s57NP`a!cr personality reasoningrbusycR\4/#r)_load_busy_input_moders&rrrs G%:%<=r approval_modecR\4/#r_load_approval_moders&rrrs W.A.C$Drzapprovals.modecR\4/#rrrs&rrrs g/B/D%Errc(R\RR\4/#)rrr)rrrs&rrrsG]>;Xe-f#grrdensitycbR\\4PRR44'dR/#R/#)r tui_compactFonoff)rUrrHrs&rrrs)w\^5G5G W\5]0^0^jdijrthemec$R\RR0Rm4/#)r tui_themeauto>rdarklight)rrs&rrrsWmKIb&cdr statusbarcLR\\4PRR44/#)r tui_statusbartop)_coerce_statusbar _display_cfgrHrs&rrrs*;LN3E3ElTY3Z.[.[daf,.F.HJrmousecJR\\4PR44/#)rr)_display_mouse_trackingrrHrs&rrrsW&=ikooi>X&YZrriiz config.getc0V^8dQhR\R\/#rr!)rs"rrr!s 7 74 7D 7rc&VPRR4p\PV4pVf\VRRV 24#\W!V44# \d8pT\ 9dh\T\ T,\ T44uRp?#Rp?ii;i)rrsNizunknown config key: )rH_CONFIG_GETTERSr&rKr%_CONFIG_GET_ERRr)r'rrgetterr(s&& rrMrMs **UB C   %F ~C!5cU;<<73v'' 7 o % C-s1v667sA B,B B BcaV3RlpV#)uDone-callback for a single-flighted probe: forget the entry (the next poll re-probes — completed answers are never cached), and surface a failure nobody waited for (every caller timed out) in the log instead of dropping it.c\<\;_uu_4\PS4VJd\PSR4RRR4VP 4'g<VP 4e(\ PRSVP 44R#R#R# +'giLc;i)Nz8readiness probe %s failed after its callers returned: %s)_readiness_lock_readiness_inflightrHpop cancelled exceptionloggerdebug)futurers&r_clear"_readiness_cleared.._clear4s} _"&&s+v5#''T2!!f&6&6&8&D LLSf..0 2'E!_s 0B B+ r)rrsf r_readiness_clearedr 0s2 Mrc \;_uu_4\PV4pVRJpV'd\P V4pV\V&RRR4X'dXP \ V44\TXPV'dTM\V\4R74# +'giLg;i \PPd+\PRY4\!T\"R4u#i;i)ujRun ``run_probe`` single-flighted under ``key`` on the dedicated readiness pool. The first caller submits the probe and waits up to ``wait_seconds``; a caller that finds a still-running probe waits the short join grace for it first — the Desktop fires setup.status + setup.runtime_check from independent consumers at the same seam (boot, the post-assignment ``setup.ready`` broadcast), and answering the retryable error at once made both legs of one consumer transiently unknown, which its onboarding gate read as not-ready. Fast (config-read) probes settle well inside the grace, so an overlapping poll reads the shared result; one that outlives the grace answers a retryable error, freeing its shared RPC worker (the probe keeps running for the first caller). A probe that outlives ``wait_seconds`` answers the same retryable error while it continues in the background.N)timeoutzNreadiness probe %s exceeded its budget (%.1fs); it continues in the backgroundz5readiness check still in progress; retrying next tick)rrrHrsubmitadd_done_callbackr rKresultmin_READINESS_JOIN_GRACE_SECONDS concurrentfutures TimeoutErrorrwarningr&_READINESS_IN_PROGRESS_ERR)r'r run_probe wait_secondsrowners&&&& r_readiness_sharer0>s $((-$ $++I6F'-  $     !3C!89M3 el&),8U&V&XY Y     * *Mg *C3KM MMsAB.:3C. B> AD  D c vaaa\V\4'd3\VPR4;'gR4P 4MRoRoS'dN^RIHpVPS4'g&\VRRRVPR4RRS R 2/4#\S4oVVV3R lp\WS3Wd4#) a$Shared shell of setup.status / setup.runtime_check. ``probe(profile, scoped)`` runs inside the optional ``profile`` param's HERMES_HOME + ``.env`` secret scope (ContextVars: concurrent checks stay isolated); ``scoped`` is the ``{"profile": ...}`` payload stamp (``{}`` for the launch profile). An unknown profile answers ``ok=False`` (never a JSON-RPC error, never a quiet answer for the launch profile instead). ``probe_key`` + the profile single-flight the probe, and ``wait_seconds`` bounds how long this shared-RPC worker waits for it (#65151).r^rsN)profilesokFerrorz Profile 'z!' does not exist on this backend.c<\RSe \S4MR/4;_uu_4S!SS'dRS/M/4uuRRR4# +'giR#;i) profile_homeNr^)_session_profile_runtime_scoper)rprober^srr-#_readiness_check..run_probetsD,^$JZSY`d,e f f'9g"6rJg f f fs A A ) rTr"rrHrrDr2profile_existsrK _profile_homer0) r'rr8 probe_keyr. profiles_modr-rr^s &&f$$ @@r_readiness_checkr>as;EVT:R:Rc&**Y'--2.446XZG D7**733sT5)VZZ 5J$ ':[&\^_ _W% K CW!5y OOrz setup.statusc0V^8dQhR\R\/#rr!)rs"rrrs&'&'4&'D&'rcaaa^RIHo^RIHo^RIHoVVV3Rlp\ WVR\R7# \d!p\TR\T44uRp?#Rp?ii;i) uLoose provider check; ``profile`` (optional) scopes it to that profile's home. For the launch profile the answer is the boot bootstrap's record (``free_tier_bootstrap``): the call blocks up to ``SETUP_READY_WAIT_SECONDS`` for it, so a client's first poll lands after the free-tier identity exists (or has been refused) rather than racing the mint. A record that says ``False`` is reconciled with the config files first (``reconcile_record``): a provider added after boot — the Models page, a picker key, ``hermes setup`` from a shell — flips it without a restart. If the record is still missing after the wait, or a named profile is asked about, today's live probe answers. The record's fields ride along additively (``ready``, ``free_tier_account``, ``free_tier_route``, ``other_providers``).)free_tier_route_has_any_provider_configured)wait_for_recordc r<V'dRMS!4pVfQV'dS!4MRpR\S!\V4R74/VeRRRVPRS!4/CVC#/CVC#RVPRRRVPRVPRVPRVP /VP 4CVC#) Nprovider_configuredstrict_profile_scopereadyTfree_tier_accountrAother_providersinference_provider)rUrJrFrArKrLfailure_fields)r^scopedrecordlaunchrCrArDs&& rr8_..probes$T/*;F~ /6*4-t4Pfjkrfs4t/u"EKEW$T+>@X@X-/@B"!""]_"!"" *6+E+EwPT')A)ACTV\VlVl%v'='=(&*C*CjHNG\G\G^jcij jrstatusr<r.iN) hermes_cli.anon_authrAhermes_cli.mainrChermes_cli.free_tier_bootstraprDr>$_READINESS_STATUS_SHARE_WAIT_SECONDSr%r&r)r'rr8r(rCrArDs&& @@@rrMrM~sT'8@B j$ Uh-QS S 'Cs1v&&'s,2 AAAAzsetup.runtime_checkc0V^8dQhR\R\/#rr!)rs"rrrs8888488D88rc \aaaa^RIHo^RIHo^RIHo\ VPR4;'gR4P4;'gRoVVVV3Rlp\YTRS;'gR 2\R 7# \d$p\TR R R \ T4/4uRp?#Rp?ii;i) uReadiness probe for the session a client is about to open (setup.status is True if ANY provider auth state is discoverable): ok=False + the auth error when the model can't be served, so UIs surface onboarding before a doomed prompt. Without ``provider`` it runs the SAME resolver as session creation (``_resolve_agent_model_runtime``: startup model + provider pin, then the configured fallback chain) — a probe that ignores the chain shows onboarding for a backend whose sessions build fine. An explicit ``provider`` stays a strict single-provider check so onboarding can verify the provider just connected without another provider's fallback masking a failed connection. ``profile`` answers for THAT profile's pin and ``.env``; unknown -> ``ok=False``.)resolve_runtime_provider)has_usable_secretrBrrsNc<aaa\4wr#S'dTS!ST;'gRR7uopM\RR4wop\S!\V4R74pVPR4;'gRp\ VPR4;'gR4p\ 4PR4pS;'gUT;'gK\ V\4'd3\ VPR4;'gR4P4MRp T ;'gToVVV3Rlp V'gVR8XdVR9d V !R V4#VPR 4p \V 4'dRM"\ T ;'gR4P4p \V 4'gRV R9gKS!V 4'g=\VPR 44'gV !R S R 2VPR44#^RI H p RRRVPR4RSRVPR4RVR8H;'dV !VPR44/SC#)N) requested target_modelrGrsourcersrc  <RRRSRSRVRV/SC#)r3Frrr_r4r)r4srcblamedrrNs&&rfail_..probe..fails.eZ% #wA9?AArbedrockz!No Hermes provider is configured.api_keycommandz No usable credentials found for .)route_is_welcome_hostr3TrAnousbase_url>iam-roleaws-sdk-default-chain>aws-sdkno-key-required) _resolve_startup_runtime_resolve_agent_model_runtimerUrHrrrTr"rcallablerTri)r^rN startup_modelstartup_providerruntimerFrr_ cfg_modelpinnedrcrf api_key_textrirbrrCr[r]rZs&f @@rr8rQs.F.H +M!.0H'm6K6Kt1Mw">dD!Iw"&'CY]^eYf'g"h {{:.<<*HX.44"5F " 0Ioo#3ooJTU^`dJeJe#immJ7==2>DDFkm ''xF A(H ,A"GG?HHkk),G!)'!2!22GMMr8J8P8P8RLW%%9W)W(66$w{{9?U:V:V>vhaH'++V^J_`` B$ GKK ,CWegkk(3%x6'9'l'l>ST[T_T_`jTk>l rzruntime:rSr3Fr4) hermes_cli.runtime_providerrZhermes_cli.authr[rUrCrrHrr>_READINESS_SHARE_WAIT_SECONDSr%rK)r'rr8r(rCr[r]rZs&& @@@@rrMrMs.8H5@ :.44"5;;=EE $ $ J UVXHY>Z-JL L 83ugs1v6778s..A=A=A=.A== B+B& B+&B+c<V^8dQhR\R\R\/#)rtextcapr )rro)rs"rrrs! < .s H"x22s/ /:N@Nz..rh)joinrrRlstrip)rQsafes& r_safe_client_labelrsT 77HH H N N PQT UD $,||D#& ;;s  ! ! ##rzdiagnostics.share_nousc0V^8dQhR\R\/#rr!)rs"rrrs"N"N4"ND"Nrc ^RIHp^RIHpHp^RIHpVPR4p\V\4'd^ Tu;8:dR8:gM^pV!VRR7pVPR4p\V\4'd4VP4'd\VP4R 4VR &VPR 4p \V \4'd!\V P44R ,MRFtwr\V \4'd \!V 4MR p V 'gK2\V \4'gKJV P4'gKb\V R4VRV 2&Kv V!V!VRR74p V PR4;'gV PR4pV PR4pV'gV'g\#VRRRR/4#\#TRRRTRTRV PR4;'gV PR4/4# \$d!p\#TRRRT!T4/4uRp?#Rp?ii;i)uUpload a redacted debug bundle to Nous-internal diagnostics storage — same collection + force-redaction pipeline as ``hermes debug share --nous``; redaction is NOT client-controllable and consent lives with the CALLER (privacy notice first). Structured ``ok``/``error`` envelope so upload failures render inline. Optional: ``error_context`` (-> ``error-context.txt``), ``extra_files`` ({label -> text}), ``log_lines`` (default 200); all force-redacted.r)build_nous_bundlecollect_share_bundle) share_to_nous log_linesrkT)rredact error_contexti@zerror-context.txt extra_files:NNrsizclient/)rviewUrlview_urlrvr3Fr4z/upload succeeded but returned no view URL or id upload_id expires_at expiresAtNr)rrhermes_cli.debugrrhermes_cli.diagnostics_uploadrrHrTrorrrr"listitemsrrKr%)r'rrrrrrbundlerrrQr} safe_labelresrrr(s&& rrMrMsENL?JJ{+ )S))" 2IT2II% $G ?3 mS ) )m.A.A.C.C*=m>Q>Q>SUZ*[F& 'jj/ rr truncated)8r__doc__atexitconcurrent.futuresr( threading method_ctxrr_envrrrrrr _registryr,profile_scopedr-r)ThreadPoolExecutormaxr&rrLockrrr{r'rWr,r0r9rMrerr frozensetrrrrrrrrrrr r0r>rrr)rs@rrs"4FH     **6$$77As1g&CQGHI&8(QR..">@@ #!$(,$" j ,-F.F"*+\,\2?# L$ L./ i0 i",. >?59E 1, Y;! \ 2   M   K c'# M =DE g!"+#$j%& d'(h J Z ^14t_d