+ lHjӎN aER7tp0tRt^RIt^RIt^RIHt^RIHtHt]!4t ] Pt ] Pt RER8RRRRR RR R /R R llt ER9R R /RRllltER9R R /RRllltER:RRlltRRltRRltRtRtR]33tR]3R]33t]3RRlltRtRtR R!ltR"tR#R$ltR%R&ltR'tR(R)ltR*R+lt R,R-lt!R.R/lt"R0R R1R/R2R3llt#R4R5lt$R6R7lt%R8R9lt&] !R:4R;R<l4t'R=R>R?3R@RARB3RCRDRE3RFRGRH3RIRDRJ3RKRLRM3/t(](PS4Fwt*wt+t,]!]*]+4!]*3RNl4K A*A+A,]!ROR>RRP7!RQ4]!RRRR>RS7RTRUl4t'RVRWlt-ER;RXR RYR/RZR[lllt.R\R]lt/]!R^RA4R_R`l4t']!RaRb4RcRdl4t'] !Re4RfRgl4t']!RhRi4RjRkl4t'Rlt0RmRnlt1ERER9RRllt?]?!RR4t@]?!RR4tARtBRtCRtDRtERtFRtGRtHRtIRRltJRtKRtLRtMRtNRtORRltPRRltQRtRRtS/R]>bR]>bR]@bR]AbR]BbR]CbR]DbR]EbR]FbR]GbR]HbR]IbR]KbR]KbR]LbR]LbR]RbR]S/CtT] !R4RRl4t'] !R4RRl4t']!RR4RRl4t']!RRRbRS7RRl4t']!RRRRS7RRl4t']!RRRRS7RRl4t'RRltU] !R4] RRl44t']!RR4RRl4t']!RR4RRl4t']!RR4RRl4t'RRltV]!RR4RRl4t']!RRR4RRl4t'RRltWER>F%wt*tXtY]!R]* 2RR]* R24!]W!]X]Y44K' A*AXAYRtZRt[Rt\RRR]ZR][R]\RR/t]RRlt^]!R4RRl4t']!RR4RRl4t']!R4RRl4t']!RER8R7RRl4t']!RER8R7RRl4t']!R4ERERl4t']!ER.]OER]3N54ERERl4t']!ER4ERERl4t']!ER 4ER ER l4t']!ER 4ER ERl4t']!ER]4ERERl4t']!ER]4ERERl4t']!ER]4ERERl4t'ERERlt_/t`]^k]a!4tb]^kERERltcERERltdERteERtfER tgER!thER"tiER#tjER$ER%ltkER&tlER'tmR]eER(]lER)]mER*]fR]gER+]hER ]iER,]j/tn]!ER-ER.R ER/7ER0ER1l4t'] !ER24ER3ER4l4t'ER5ER6ltoR#(?afTools & system / slash / insights / rollback / plugins / cron / skills / MCP JSON-RPC handlers. Rebound onto server.py's globals at install time (``method_ctx.bind_module``), so bodies reference server globals bare (``_ok``, ``_err``, ``_sessions``, ...). Helper names must not collide with server.py's own (``_cmd_`` / ``_toolset_`` / ``_mcp_`` prefixes). N)Path)HandlerRegistry bind_modulerequired catch_resolveTprefixscoped live_sessionFc TV^8dQhR\R\R\R\R\/#) fail_coderrr r )intboolstr)formats">/home/ubuntu/.hermes/hermes-agent/tui_gateway/methods_tools.py __annotate__rs4777377HK7 7'+7c(aaaaaaVVVVVV3RlpV#)uWWrap a handler body with the optional ``profile`` runtime scope. Order: ``required`` params (4063 `` required``) → ``live_session`` resolution via ``_sess`` (waits for the agent build; body gets ``session`` as 3rd arg) → profile (4064 when its dir is missing) → body; body exceptions become ``fail_code`` (``prefix`` + message). ``catch_resolve`` also maps resolve-time exceptions to ``fail_code``; mcp.servers.* let them propagate to dispatch(). ``scoped=False`` ignores ``profile``. The scope is the same home + secret + terminal composition a turn binds (``_session_profile_runtime_scope``), not HERMES_HOME alone: these bodies read config.yaml, whose ``${VAR}`` refs (``config._env_ref_lookup``) and the MCP probe's own header/env interpolation resolve through ``get_secret`` — with only the home bound they read plain ``os.environ``, i.e. the launch profile's values, so ``mcp.servers.test`` for a secondary reported green against the default profile's token (or the literal placeholder). External sources are hydrated first (the requested profile may never have been served in this process).cJ<aRVVVVVVV3RllpSPVnV#)c0V^8dQhR\R\/#r paramsreturndict)rs"rr7_profile_scoped_rpc..deco..__annotate__(s < < <$ .deco..handler(sZ ( vzz#//TcU)+<==!)=D$V1 JW-**,E#695 8Q,W5;NY]CPTIcg;hiE  <U;U3Q#C7);/OPPQ!8(YA778 UU*  <CvhqcN;; 8E>EE2E2E-'E2-E2)__doc__)r7r8rr r rrr sf rdeco!_profile_scoped_rpc..deco's  < s&##H Krc<V^8dQhR\R\R\/#)r r rr )rrr)rs"rrrNs&bbbSbbrc\WRVR7#)uBody exceptions → ``_err(rid, fail_code, prefix + str(e))``; no profile scope. ``live_session`` resolves the session first and calls ``body(rid, params, session)``.F)rr r )r>)r rr s&&$r_guardedrANs yT` aarcHV^8dQhR\R\R\R\/#)r namer rr )rrr)rs"rrrTs.ccscscCctcrcaaaaVVVV3Rl#)z!``@method(name)`` + ``_guarded``.cJ<\S4!\SSSR7!V44#)r )methodrA)r7r r rCrs&r_rpc..Vst Xil%[\`%abrr=)rCr rr sfffdr_rpcrJTs bbrc0V^8dQhR\R\/#)r rCr )rr)rs"rrrYsQQcQcQrc aaaVVV3Rl#)zU``@method(name)`` + ``_profile_scoped_rpc`` (optional ``profile`` HERMES_HOME scope).cF<\S4!\S3/SB!V44#N)rGr>)r7r kwrCs&rrH_scoped_rpc..[st %8%Ib%I$%OPrr=)rCr rOsfflr _scoped_rpcrQYs PPrc<V^8dQhR\R\R\/#)r rr/rrr)rs"rrr^s!..T...rcf\VPV4;'gR4P4#r)rr$strip)rr/s&&rr)r)^s& vzz#$$" % + + --rc$V^8dQhR\/#)r moduler)rs"rrrbs++s+rc,^RIpVPV4#)zSDeferred module import for one-liner bodies (startup budget: never import at load).N) importlib import_module)rXr[s& r _tools_modr]bs  " "6 **rcZ\\T;'gR4P44#rU)rrrVvs&rrHrHhsd3qwwB<--/0rc@VRJ;'g\V4R8H'*#NrrYr_s&rrHrHis1944A" 5rrC session_idc$V^8dQhR\/#r rCrY)rs"rrrnsVV3Vrc$\RV 2VRR7#)umcp.servers.* contract: profile scope, ``required`` params (default ``name``), body errors → 5024, profile-resolve errors propagate to dispatch().z mcp.servers.F)rr)rQ)rCrs&&r_mcp_rpcrgns dV,xu UUrch\R4P4p\R4PV4#)hermes_cli.mcp_configtui_gateway.mcp_rpc_helpers)r]_get_mcp_serversserver_configs_with_sources)config_serverss r_mcp_server_rowsrnts. 78IIKN 3 4 P PQ_ ``rc r\VR4\4^,r2Y#W#9dR3#\VRRV R243#)zP(name, servers, None) for a configured server, else (name, servers, 4064 error).rCNr!server 'r")r)rnr%)r.rrCserverss&& r_mcp_named_serverrrysEVV,.>.@.C' $/$ ddtCRVQWWbGc7d ddrc0V^8dQhR\R\/#)r rCpluginsrr)rs"rrrssTrc XVPV4pVe\VRRV RV R24#R#)Nrpz' is provided by plugin 'z' and cannot be modifiedr$r%)r.rCrtplugins&&& r_mcp_plugin_write_errorrzs9 [[ F C$/HPhijj rcp\W4wr#pV'dW#V3#W#\W\4^,43#)rrrzrn)r.rrCrqr3s&& r_mcp_config_server_or_errorr~s<*37D3 c!! 1#=M=OPQ=RS SSrc$V^8dQhR\/#)r cmdrY)rs"rrrs3rc VPR4'd0\VR\V\VPR4444#R#)running_manual_compress_activeN)r$r% busy_messager)r.r2rs&&&r _busy_errorrs9{{9C|CgkkB[6\1]^__ rc0V^8dQhR\R\/#)r rXlabelrY)rs"rrrs J Jc J# Jrc V'gRR\VRR43#VPR4;'gR;p'gRR\VRR43#V\V4R3# \d pRR\TRT RT 243uRp?#Rp?ii;i) z(session_key, module, None) for the /goal and /loop managers, else (None, None, error): 4001 without a session/key, 5030 when ``module`` fails to import.Nno active session session_keyrzno session keyz unavailable: )r%r$r]r-)r.r2rXrsid_keyexcs&&&& r_session_key_or_errrs T4T+>???{{=177R 7G 7T4T+;<<<J 6*D00 JT4TeWN3%+HIIIJs A B&B:BBc\R4Pp\VPR.44pT\ V4UUu.uFwr4V!V4fKVNK upp3#uuppi)za(history, indices of user-originated turns) minus ephemeral scaffolding. Call under history_lock.agent.context_compressorhistory)r]user_originated_turn_view&_history_without_ephemeral_scaffoldingr$ enumerate)r2is_userrims& r_user_turn_indicesrsV34NNG4W[[B5OPG 9W#5P#541QQ#5P PPPs AAc0V^8dQhR\R\/#)r r empty_msgrY)rs"rrrs''s's'rc\WV4;p'dRRV3#\V4wrVV'gRR\VRV43#WVR3#)z]Under history_lock: re-check busy, then (history, user_indices, None) or (None, None, error).N)rrr%)r.r2rrbusyr user_indicess&&&& r_rewind_preludersR3--t-T4.w7G T4T9555 $ &&rc<V^8dQhR\R\R\/#)r keep value_err fail_prefix)rtupler)rs"rrrs!< , ,c ,e ,X[ , ,-1D[ ,DH ,rc  V!\P!V3R\P4RVRV/\ V4B4# \P d\ T.TO5!u#\d p\ Y\T44uRp?#Rp?ii;i)uRun ``cmd`` captured (see ``_capture_run_kwargs``) and hand the CompletedProcess to ``on_result``; TimeoutExpired → ``timeout_err`` (code, message), other errors → ``fail_code``.cwdrrN) rrunosgetcwdrTimeoutExpiredr%r-r) r.rr on_resultrr rrr6s &&&$$$$$ r_captured_execrs{,ssEsssVijqVrstt  $ $'C&+&& ,CCF++,s)=A"B $B -B .BB B c$V^8dQhR\/#r rrY)rs"rrrsOOOrcRPRVP;'gRVP;'gR344P4#)zYstdout + stderr of a CompletedProcess, non-empty parts only, newline-joined and stripped. c38"TFq'gK VxK R#5irNr=).0ps& r !_joined_output..sF @1AQQ @s  r)joinstdoutstderrrV)rs&r_joined_outputrs9 99FRR @F F L L NNrc$V^8dQhR\/#r)r)rs"rrrs t t% trc :V'dVPR4MRpVe\VRR4\VRR43#\T;'g/4;_uu_4\\ \ V444\ 43uuRRR4# +'giR#;i)u``(enabled, disabled)`` a session's read-back RPCs must reflect: the live agent's sets once built, else what that session's profile would build with — ``_load_enabled_toolsets`` under the session's profile scope, the same read ``_build_agent``/``_refresh_live_sessions`` make and the key ``profiles.configure`` pins. A session whose agent is not built yet (``session.create`` with no prompt) otherwise read back as "everything enabled" (#117977). ``None`` = all toolsets. No session → the launch profile's config.agentNenabled_toolsetsdisabled_toolsets)r$getattrr,_load_enabled_toolsets_resolve_agent_platform_session_source_load_disabled_toolsets)r2rs& r_session_toolsetsrsx%,GKK E u0$7H[]a9bbb ' 2 6 6%&=og>V&WXZqZss 7 6 6 6s 'B  B cRV^8dQhR\R\R\\,/#)r r with_toolsr)rrlist)rs"rrrs%  $ t T rc \R4p\PVPRR44p\\ V4^,;'g.4p.p\ VP 4P44FgpVPV4;p'gKRTRVR,RVR,RV'dWd9MR/pV'd VR,VR &VPV4Ki V#) toolsetsrcrrC description tool_countenabledTresolved_toolstools) r] _sessionsr$setrsortedget_all_toolsetskeysget_toolset_infoappend) rrrr2ritemsrCinforows &$ r _toolset_rowsrs*%HmmFJJ|R89G#G,Q/5526G Ex002779:,,T2 24 2 2mT--@,PTUaPbg4?4AC#$45G LL ; Lrzsystem.batteryc0V^8dQhR\R\/#rr)rs"rrrs c c4 cD crc \R4pVP4p\VRVPRVPRVP RVP V4/4# \d\TRRRRRRRR/4u#i;i) zcHost battery for the status bar. Always resolves; ``available: false`` = no battery or read failed.z agent.battery availablepercentpluggedcategoryFNdim)r] read_batteryrrrrbattery_categoryr-)r.rbatterybatts&& r_rsc_-##%3 DLL)T\\ 00689 9 c3eYiz[`abbcsAAB?B process.stopicPR\R4PPRR7/#)killedtools.process_registryr)source)r]process_registrykill_allrs&rrHrH s.8Z@X5Y5j5j5s5s|J5s6K+Lrz reload.envicJR\\R4P44/#)updatedhermes_cli.config)rr] reload_envrs&rrHrH sC CV8W8b8b8d4e(frz plugins.listicR\R4P4PP4UUu.uF#wrRVR\ VRR4R\ VRR4/NK% upp/#uuppi)rthermes_cli.pluginsrCversion?rT)r]get_plugin_manager_pluginsrr)rnrs& rrHrH sn934GGIRRXXZ7\ZDA Iwq)S99gaQZ\`FabZ7\+]7\s)A$z tools.listc R\VRR7/#)rTrrrs&rrHrHs]6VZ5[(\rz toolsets.listc R\VRR7/#)rFrrrs&rrHrHsJ fY^8_+`rz agents.listic R\R4PP4Uu.uF0pRVR,RVR,R,RVR,RVR,/NK2 up/#uupi) processesr rccommandNPNstatusuptimeuptime_seconds)r]r  list_sessions)rrs& rrHrHso+45FFTTV8XVA q 1Y<3DhPQRZP[]eghiygz{V8X*Y8Xs6A!cJ\V\V,^,!V44#r|)r _SIMPLE_RPCS)r.r_ns&&&rrHrHsSl2>Nq>QRX>Y5Zrz process.listrFc0\VR\V4/4#)r!)r_session_processes)r.rr2s&&&rrHrHsS;8J78S*T!Urz process.kill)r r c0V^8dQhR\R\/#rr)rs"rrrs 4 44 4T 4rc\VPR4;'gR4pV'g\VRR4#\R4PpVPV4pVeH\\ VRR4;'gR4\VPR4;'gR48wd\VRRV 24#\ WPV44#) z]Kill ONE background process, scoped to the caller's session (unlike process.stop's kill_all). process_idrizprocess_id requiredr rizno such process: )rr$r%r]r rr kill_process)r.rr2proc_idregistryprocs&&& rrrs&**\*00b1G C45523DDH << D |s74;AArBc'++VcJdJjJjhjFkkC!27)<== s))'2 33rc$V^8dQhR\/#r)r)rs"rrr*sdrc\R4P4p\V\4'dVP R4MRp\V\4'd\ VP RR44#R# \ dR#i;i)zN``approvals.mcp_reload_confirm`` from disk config; True (safe) on any failure.r approvalsNmcp_reload_confirmT)r] load_config isinstancerr$rr-)cfgr7s r_mcp_reload_confirm_requiredr<*ss,-99;,6sD,A,ACGGK(t BLYX\B]B]tIMM"6=>gcgg sA2A75A77 BBpreserve_prefix plugin_notecdV^8dQhR\R\\\3,R,RR/#)r r=r>Nr)rrr)rs"rrr4s0 ? ?$ ?(-c3h$(> ?JN ?rc f^RIHp^RIHpVe V!V4MRp\;_uu_4\ P 4UUu.uFQwrgVPR4fKVe1T!VPR4;'g \44V8XgKNWg3NKS pppRRR4\R4Pp XFwrgVR,p \V4;_uu_4V!\\V RR44V 4p \4p V !WV RVR 7RRR4T'd\R 4P$!T .TO5!\'R T\)Y44K R#uuppi +'giL;i +'giLj;i \d!p \ P#R Ym4Rp ? LRp ? ii;i) u\Rebuild live sessions' cached tool snapshots from the registry and push session.info (agents never re-read the registry). The MCP pool is process-global, so refreshing only the requester would leave sibling sessions on stale tools until /new — and a request without a resolvable session_id (desktop passes ``activeSessionId ?? undefined``) would refresh nothing while still answering "reloaded". ``enabled_override`` re-resolves toolsets so a server enabled this session (config or a just-installed plugin) is in the session's ``tool_call`` scope. ``home``: only sessions of that profile home (a session with no ``profile_home`` belongs to the launch home). ``preserve_prefix``: append-only rebuild inside a live conversation. ``plugin_note``: ``(plugin_key, text)`` queued once per session for its next tool result or turn (``agent/plugin_live_notes.py``).)carry_onboarding_toolset)hermes_home_keyNrr#tools.mcp_tool_agentplatformT)enabled_overridedisabled_override quiet_moder=z5Failed to refresh cached agent tools (session %s): %szagent.plugin_live_notesz session.info)agent.onboarding_sessionrAhermes_constantsrB_sessions_lockrrr$get_process_hermes_homer]refresh_agent_mcp_toolsr,rrrr-loggerwarningqueue_plugin_notice_emit _session_info)r5r=r>rArBwantsidsessliverefreshrrdisabled_excs&$$ r_refresh_live_sessionsrY4siB0$($4?4 $D -6__->m-> $((7BS LODHH^,D,a,aH_Habfjj ->m /0HHG W  _/5523I'RWYceiJj3kmrs248#'J6  0 1 E Ee Zk Z nc=#=>m 65  _ NNRTW ^ ^ _seEE E ;E E E F4E2FE E/ 2 F =FF F0F++F0c4V^8dQhR\R\RR/#)r plugin_keynoterNrY)rs"rrrWs&iiciiirc8\TRV'dW3MRR7R#)aBA plugin just went live in ``home``: append its MCP tools to that profile's open chats (deferred behind tool_search, so the model-facing tool array is unchanged) and queue ``note``, replacing an older one for ``plugin_key``, for their next tool result or turn. Called by ``hermes_cli.plugins_activation.load_and_go_live``.TN)r=r>rY)r5r[r\s&&&rrefresh_plugin_sessionsr_Ws 4Y]JCUcghrz reload.mcpc0V^8dQhR\R\/#rr)rs"rrr`sK<K<4K.__annotate__xs!!D!rc\4R#)z\Runs under _mcp_reload_lock so a concurrent reload can't tear the registry down mid-refresh.Nr^r=rr_refresh_session_agent!_.._refresh_session_agentxs rcV^8dQhRR/#rmr=)rs"rrrn|s  T rc`<\RR/4;_uu_4\4p\\4FGpS P 4SP 4SP 4\4pW 8XdMTpKI RRR4\;_uu_4\P4Uu0uF(q3PR4fKVPR4kK* ppRRR4\XR0, 4F2p\RV/4;_uu_4SP 4RRR4K4 S !4Xs\ ^, sR# +'giL;iuupi +'giL;i +'giK;i \d"p\PRYV4Rp?KRp?ii;i)zshutdown+discover+refresh under the lock, then mark a completed generation. Config can change WHILE discover connects: re-hash and repeat until stable so the marked generation matches what loaded.r#Nrz)MCP rediscovery failed for profile %s: %s)r,_compute_mcp_revrange_MCP_RELOAD_MAX_PASSESshutdown_mcp_serversreprobe_tool_availabilitydiscover_mcp_toolsrJrvaluesr$rr-rMrN_mcp_reload_loaded_rev_mcp_reload_gen) loadedrafterrThomesr5rX _mcp_agent_mcp_discovery_mcp_lifecyclerps r_do_full_reload_.._do_full_reload|sN,^T,B C C%'F12335446113(*?3D^:C:J:J:Ln:L$PXPXY`Pa-TXXn-:LEn5D6>*D X3^T4JKK"557LK+  !'1/D Co^LKK XJDWW XsfA%EE)EEE8F E-F E E E* - E> 8F>F F- F((F-)blocking) coalesced)rr$rr<r_session_uses_compute_host_get_compute_host_supervisor reload_mcprr-r%r]_mcp_reload_lockacquirerelease_finish_reloadr|r{)r.rr2rdackrreq_revr gen_beforerrrrrps&& @@@@rrr_smmFJJ|R89G  9e, - -2N2P2P / 3#5y'JKK-g66 M.0;;FJJ|,223+cU@S<UC3:/?zSVWXX)*J7Q,RT^_yTz/J &**U#))r*G!  J// '    $ $ &cU;; J  #j0gg'k6f6fWPfEf $- ?3D  # ;;{ MT%EcU#KL L Mn  $ $ &  sH/G7GH H *H <H  H*G?9H?HH H0 zcommands.catalogic0V^8dQhR\R\/#rr)rs"rrrs ` `4 `D `rc ^RIHp\\P VP RR44\ V4VP R4R7p\ W!\\VR74#)u$Registry-backed slash metadata, categorized, no aliases (shared builder in command_discovery). Skill discovery is bound to the calling session's profile and workspace (``_completion_cwd``: its record, else the cwd a new session would be seeded with) so project-local skills register for the repo the session is actually in (#114359); a session-less draft is bound to ``params['profile']`` (#124651) and an unknown profile is 4064 like ``complete.slash`` — never a launch-profile palette. Every loader (quick, plugin, skill) runs inside the scope.)command_catalogrcrr rr )load_cfg module_loaderr4) tui_gateway.command_discoveryr_session_home_scoperr$_completion_cwdr _load_cfgr])r.rrr4s&& rrrsS>  fjjr.J KQ`agQh(. 9(= ?E sOYjX]^ __rzcli.execc0V^8dQhR\R\/#rr)rs"rrrsaa4aDarcaVPR.4p\V\4'd;\;QJdRV4F 'dK RM RM !RV44'g\ SRR4#\ V4pV'd\ SRRRVR RR R /4#\R 4p\S\PR R.VO\\VPR^44R4V3RlRRVP\RR74R7#)zXRun `python -m hermes_cli.main` with argv; capture stdout/stderr (non-interactive only).argvc3B"TFp\V\4xK R#5irN)r:r)rxs& rr_..s,NAZ3-?-?sFTizargv must be list[str]blockedhintcoderrrz-mzhermes_cli.mainriXc p<\SRRRVPR\V4;'gRR,/4#)rFrr (no output):NiN)r returncoder)rr.s&rrH_..s8C ufallH~a?P?a?aTacj>k&mnr)inherit_credentials)rrr r)izcli.exec: timeout)r$r:rallr%_cli_exec_blockedrr]rsys executableminrrestore_ambient_pythonpathhermes_subprocess_env)r.rrr_compatsf& rrrs ::fb !D dD ! !,N,N,N,N)N)NC788 T "D 3D&$HbQRR89G  cnnd$5 = =s3vzzR[]`GaCbdg?hn/4  . ./DY]/^ _  aarzcommand.resolveic0V^8dQhR\R\/#rr)rs"rrrsEE4EDErc  \R4PVPRR44pV'd5\VRVPRVP 4RVP /4#\VRRVPR4 24#)hermes_cli.commandsrCr canonicalrrizunknown command: )r]resolve_commandr$rrCdescriberr%)r.rrs&& rrrsr()99&**VR:PQA3affmQZZ\:WXWaWabcc T.vzz&/A.BC DDrc \4PR/4PV4pVfR#VPR4R8Xd\R4P4p\P !VPRR43RRR V/\ ^4Bp\V4R ,pV'd\R 4PV4MTpVP^8wd%\TR T;'gR VP 24#\W4#VPR4R8Xd!\VRRRVPRR4/4#R#)quick_commandsNrrtools.environments.localr"rrTrNiN agent.redactrz$quick command failed with exit code aliastarget) rr$r]build_subprocess_envrrrrredact_sensitive_textrr%rr) r.rr2rCargqcrrrs &&&&& r_dispatch_quickrs )2 . 2 24 8B z vvf~34IIK NN266)R0 a a# aI\]_I` a"5)MSN+AA&IY_ <<1 T6#b#b/STUT`T`Sa-bc c%%JL&&QW.\cJc3sVWhx0DE Fmimmrc$V^8dQhR\/#rerY)rs"rrrs#rc\\R4PV4# \dR#i;i)rN)r]get_plugin_command_handlerr-rCs&r_plugin_command_handlerrs0./JJ4PP s  ++c<V^8dQhR\R\R\/#)r rrSrrY)rs"rrrs!''c'c'3'rc a\R4p\R4PpV'd%\VPR4;'gR4MRpV'd0\ T\VPR4;'gR4R7M.pRRRTR \ V4R V'd'\ VPR 4R R4;'gTMR/p\R 4p V PV PV3R l44;_uu_4\VPV!W3/VB4;'gR4uuRRR4\V4# +'giM;i\T4R# \T4i;i)aRun a plugin slash-command handler under the session's ``HERMES_SESSION_*`` binding. Plugin handlers read ``get_session_env()`` for the chat/session they serve; these RPCs run on the socket/worker thread where nothing upstream binds it (only the turn path does), so a handler saw ``""`` or the launch process's inherited values. Same class as the messaging gateway's #108698; ``_set_session_context`` is the turn path's own seam.rz"hermes_cli.plugin_command_dispatchrrrrr NrDrcrzhermes_cli.plugin_choicesc<\SV4#rN)_clarify_block) questionsrSs&rrH%_run_plugin_command..sWZ\eHfr) r]invoke_plugin_commandrr$_set_session_contextrr bind_asker clarify_askerresolve_plugin_command_result_clear_session_context) r8rr2rSrtinvoker/tokenscontextchoicess &&&f r_run_plugin_commandrs3-.G < = S SF3:#gkk-(..B /CMT !#3w{{5/A/G/GR+H IZ\F}c:w?WY`WW[[%9<NUURUfhjG45G'    5 56f g h hw<D=D=,D=D=D .D= -D::D=cJV^8dQhR\R\R\R,/#)r r2baserN)rrr)rs"rrr's%  D  t rc\V4;_uu_4RV 2\R4P49uuRRR4# +'giR#;i \dR#i;i)uTrue when ``/base`` is a skill of the session profile. False when the scan succeeded and it is not. None when the scan raised — callers must not treat that as "not a skill". Fail-open sends the command to the slash worker, which ok-replies the loading banner and drops the prompt. /agent.skill_commandsN)rr]get_interactive_skill_commandsr-)r2rs&&r_profile_skill_commandr'sO  ) )tf:,B!C!b!b!dd* ) ) ) s+A? A A AA A"!A"z'skill command refused before process: /c \R,!VRVRVRV/4pRV9g1VPR4;'g/PR4'dV#\VRR V 24#) zIReturn command.dispatch's directive, or a hard error. Never an ok banner.command.dispatchrCrrcerrorresultrr)skill command: use command.dispatch for /)_methodsr$r%)r.rSrr dispatcheds&&&& r_skill_dispatch_or_refuser8sh,-cFD%l\_3`aJ*!9!?!?R D DV L L TFtfM NNrc0V^8dQhR\R\/#)r rr) BaseExceptionr)rs"rrr@s--}--rc&\\V49#rN)_SKILL_WORKER_REFUSEDr)rs&r_worker_refused_skillr@s CH ,,rc0V^8dQhR\R\/#)r rrrr)rs"rrrDs  s t rc`\R4PV4RJ# \dR#i;i)zTrue when ``base`` is a built-in the slash worker may still run. Skill auto-registration skips names that collide with the registry, so a built-in cannot be the skill whose prompt the worker would drop. rNF)r]rr-)rs&r_is_registry_commandrDs5 /0@@FdRR s  --c\V4;p'dX\P!\4;_uu_4\ VRRR\ WTW!P RR44/4uuRRR4#R# +'giR#;i)rryrrcrN)rr'suppressr-rrr$)r.rr2rCrr8s&&&&& r_dispatch_pluginrPsn)$//w/   + +sVXx9Lgzz,'C:EFG, + , + s *A-- A> c$V^8dQhR\/#rerY)rs"rrrXs#rc\R4PV4f\R4PV4#R# \dR#i;i)z]Skill-bundle key for ``name`` when it is NOT a registry command; None otherwise / on failure.rNagent.skill_bundles)r]rresolve_bundle_command_keyr-rs&r_bundle_key_forrXsK + , < ?PRRF sVVYXvyRlmpRqr ss AC!9#?@@As6D D(D#D(#D(c\P!\4;_uu_4\R4pVP 4RV 2P 4rvWv9EdPVP VRR7wrV'dTPV.VOT V'dVPRR4MRR7p V 'dV wrp R\V 4 RR PV 4 2pV 'dVR R PV 4 2, p\VR R R V RWg,PRV4RVR\V 4/4uuRRR4#TPYyV'dVPRR4MRR7p V 'd>\VR R R V RWg,PRV4R\V 4/4uuRRR4#RRR4R# +'giR#;i)rrT) interactiverr)ru ⚡ Loading z stacked skills: r r rskillrdrCr r N)r'rr-r]rlowersplit_stacked_skill_commands&build_stacked_skill_invocation_messager$rrrrbuild_skill_invocation_message)r.rr2rCrsccmdsr/ extra_keysuser_instructionstackedrrrr s&&&&& r_dispatch_skillr(ws   Y ' ' . /5571TF9I9I9Kc ;,.+J+J3\`+J+a (JCC&:&(8>EGKK r:2DO18.Cw+C ,=+>>OPTPYPYZfPgOhiF$>tyy?Q>R"SSsCvW[A\ &)5OPS5T%VW# ( '(33:A M26r4KC3GYVTY]]6SW=X9#>!@A1 ( ' '6 7 ( '6 s%A)F1 F1.A)rr%r.rr2rCrs&&&&&r _cmd_queuer,s)9<3sVVY4 5k$sDRjBkkrc<V^8dQhR\R\R\/#)r rXfnrOrY)rs"rrrs!CScrcaaaVVV3RlpV#)z`/learn, /plan, /init: submit ``module.fn(arg)`` as a normal turn (the live agent does the work).c <\\S4S4p\TRRRS'dV!R/SV/B/4#V!V4/4#)rr rdr=rr]r) r.rr2rCrbuildr.rOrXs &&&&& rr_prompt_builtin..cmdsJ 6*B/3"E4FRI4F]^^RWX[R\]^^rr=)rXr.rOrsfff r_prompt_builtinr4s_ Jrzagent.learn_promptbuild_learn_promptzagent.plan_promptbuild_plan_promptc ^RIHp^RIHpV'dVP R4MRpRp\ P !\4;_uu_4V'd V!V4MRpRRR4V'd&\PPV4'gV'd \V4MRp\VRRRV!WHVR7/4# +'giLj;i) aH/init: build the AGENTS.md prompt against the SESSION's active directory, then submit it as a normal turn (the live agent does the scan and the write). The desktop app launches the backend from the home directory, so a process-cwd fallback scans and updates the HOME's AGENTS.md instead of the workspace attached to the session.)build_init_prompt_for_cwd)get_session_cwdrNrr rd)extrarr) hermes_cli.init_commandr8tools.terminal_toolr9r$r'rr-rpathisdir _session_cwdr) r.rr2rCrr8r9skeyrs &&&&& r _cmd_initrAs B3)07;;} %dD C   Y ' ''+od# ( BGGMM#&&'.l7#D sVVY0I1./ 00 ( 's C C c \R4pV'g\VRVP44#V'g\VRR4#TP\ 4P R4;'g/4R,pVP R4pRVP R4R \ VR R 4R \ VR R 4/VR &Ve'\VP R R4W& R2RRRRR7MR RR VRRRRRR/VR&RV R2p\VRRRVRV/4# \dTPR R 4hi;i \dp \TRR T 24uR p ? #R p ? ii;i)!zhermes_cli.moa_configr*rrmoadefault_presetroverridemodel_overridemodelNprovidermoa_one_shot_restorercrz --provider moaFT)confirm_expensive_modelpin_session_overridepersist_override count_switchbase_urlz moa://localapi_keyzmoa-virtual-providerapi_modechat_completionsz MoA one-shot queued with preset z2; previous model will be restored after this turn.rr r rdrzmoa unavailable: ) r]r% moa_usagenormalize_moa_configrr$r_apply_model_switchr-popr) r.rr2rCrrCpresetrr rs &&&&& r_cmd_moarWs:01T3==?3 3T#67 7)))+//%*@*F*FBGHXY G$  $45wwX\@] z48+:&'   #JJ|R0'X_;U,1_d!&(E7FJ 1:?Q)SG$ %4F8;mn369cJKK  2D9  :C!23%899:sL-D2D2 D2*D20AD2$D('D2D//D22 E=E EEc \R4p\4PR4p\V\4'dTM/pVP V\ VPRR44;p4wrVR8Xd\VRR4#VR8Xd>VPR4;'g \4p \WPWz44#\R ,!TR R R V 'dR MRRVPRR4/4p RV 9dV #V PR4;'g/PR4;'gRp \WP\ V 4V 44#)zhermes_cli.focus_viewr  focus_viewFusager*zusage: /focus [on|off|status]r%focus_saved_tool_progressz config.setr/focusvalueonoffrcrrr tool_progressr) r]rr$r:rresolve_focus_argrr%_load_tool_progress_moderformat_focus_statusrformat_focus_toggle_message) r.rr2rCrfvr curactionrsavedresr`s &&&&& r _cmd_focusrjs2 + ,Bkooi(G#GT22gG))#d7;;|UZ;[6\/\s]NF C>??  78VVr#z...rrrr rdr z%No agent running; sent as next turn: rsteeru7⏩ Steer queued — arrives after the next tool call: N) r%rr$rhasattrr'rr-rzr)r.rr2rCrshownrs&&&&& r _cmd_steerr}s C7883xj#c(R-R8 9E  I..3CEjkpjqCrstt KK E ((   + +{{3 (_`e_f&gh, +, sVVY4 55, +s 6&D D c L\T;'g/4;_uu_4\WRR4wrVpV'd VuuRRR4#\\4P R4;'g/P R^4;'g^4pTP WXR7p ^RIHp V !WRVPV4R7p V P'd"\VRV P4uuRRR4#V P'g \W P4uuRRR4#R R R V PR V P/p V P'gV R ;;,R , uu&RV R&\!W 4uuRRR4# \ d^pELi;i +'giR#;i)zhermes_cli.goalsgoalsN max_turns)rcdefault_max_turns)dispatch_goal_commandcR#rNr=r=rrrH_cmd_goal..,sTr)authorize_gatelast_user_messager*rr r rdu) Continuing now — taking the next step.z /goal resumer )r,rrrr$r- GoalManagerhermes_cli.goal_commandrlast_user_message_from_dbrr%rpromptrkickoffr) r.rr2rCrrrr3rmgrrrpayloads &&&&& r _cmd_goalr sW ' 2 6 61#@RT[\  7 6 Y[__W5;;@@bQWWUWXI7PA& \#==gF  <<<T6==1 7 6 }}}S--0# 7 6$68V]]Iv}}U~~~ H !M M !/GI 3 - 7 6  I  7 6 6sTF$E>)E>E> AF0FF!-F$F> F FFF F# c\WRR4wrVpV'dV#VPVPVR7V4pVPR4;'gRp VPR4'dL\P !\ 4;_uu_4VPV4'd V R, p RRR4\W 4# +'giL;i)zhermes_cli.loopsloops)rcrrcreatedup Note: an active /goal is driving this session — loop wakeups defer until the goal finishes, pauses, or parks.N) rdispatch_loop_command LoopManagerr$r'rr-goal_blocks_loop_tickr) r.rr2rCrrrr3rrs &&&&& r _cmd_loopr:s-c.hs7BdNNNr';';r(<(NNrcL<\SR4;'dSP4#)_invalidate_system_prompt)r{r)rsrrHrjs!GE#>?eeEDcDcDeercX<\SR4;'d\SR\S44#)_last_flushed_db_idx)r{setattrr)activersrrHrks)GE#9:rrwuNdfijpfq?rrrturnturnsu ↶ Undid  rz7 message(s)). Edit and resubmit, or send a new message.rprefillrdr )r*r)r%rr$rVmaxrsplitr IndexErrorrrrrr]flatten_message_textrr'rr-r,rsr)r.rr2rCrrarg_strr_historyrr3 turns_undonerwrv rewound_count target_textstep turn_wordr rrrrs&&&&& @@@@r _cmd_undorHs9  C:;;300t0 ";;}b9 9K 9C899yyb!G\/6CGMMOA&' +A  &5cFLf&g#  ! 1c,/0 %cC 4E 4TVfhpq   ! ,3(  !89NNy}}]fOgh  ! KK E  U-t 4 N e r  D$$Y//1OPW1X1X2Y// 6&!+I,q 2m_D{ |F sVY ;&Q RR;  #\C!5g[@YZ[[\ ,2Y1X///sT2H:,H7I>I%.I5I* I I*#II I  I'"I** I; c0V^8dQhR\R\/#)r rrr)rs"rrrvsVVcVdVrcjV'd(VP^R7^,P4MRR9#)r}maxsplitr>rewindrestore)rr)rs&r_is_snapshot_restorervs+03CIIqI !! $ * * ,@U UUrc@\V4'gR#\VR4#)Nz/snapshot restore is blocked in the TUI because it changes config/state on disk while the live agent has cached settings. Run it in the classic CLI, then restart the TUI.)rrr+s&&&&&r _cmd_snapshotrzs(  $ $  e ffrc V'g\VRR4#\WR4;p'dV#VPRR4p\V4'dl\ YbRRV 2V'dRV 2MR,4wrxVR9d\YR8XdRV4#R V4#VR 8Xd\ VR R R R RV/4#\ W4#\WbVR,VRR7p \ W 4# \d!p \TR \T 44uRp ? #Rp ? i\d>p \R4PTR,RR7\TRRT 24uRp ? #Rp ? ii;i)rzno active session to compresscompressrcrrrfailedrfrpendingrrr%rrT)snapshot_kwargsNzagent.conversation_compressionF) committedizcompress failed: >rrejected) r%rr$r_compute_host_slashrr_compress_live_with_feedbackCompressionBusyrr-r]0finalize_context_engine_compression_notification) r.rr2rCrrrSr%rrrs &&&&& r _cmd_compressrsS C>??344t4 **\2 &C!'***3qZ`cUVWZV[S\ikElm  + +x%7T4H HT4H H Y sVVXy(DQR R##:-cGG, reject , approval .zUnknown /skills subcommand here. Use: pending, approve , reject , diff , approval . (Search/install/browse are terminal-side.)cV'dY\P!\4;_uu_4\VP R4RR4pVe VuuRRR4#RRR4\P!\4;_uu_4\ R4P 4uuRRR4# +'giLV;i +'giR#;i)urMemory store for the session's own profile: the live agent's store when there is one, else a freshly loaded on-disk store — mirroring cli.py's /memory handler and the gateway's (Desktop/TUI sessions have no long-lived agent store). ``None`` when even that fails, which the shared handler reports as "memory store unavailable" instead of claiming the write was applied.r _memory_storeNztools.memory_tool)r'rr-rr$r]load_on_disk_store)r2stores& r_pending_subcommand_storers    + +GKK0/4HE , + ,   Y ' '-.AAC ( ' , + ( ' s"B'B:' B7 : C c$V^8dQhR\/#)r subsystemrY)rs"rrrs[[3[rcaV3Rl#)zPersist ``.write_approval`` into the SESSION's profile config (this runs inside ``_session_home_scope``, so ``_write_config_key`` writes the right profile's config.yaml).c4<\S R2\V44#)z.write_approval)_write_config_keyr)rrs&rrH-_write_approval_mode_setter..s, {/-JDQXMZrr=)rsfr_write_approval_mode_setterrs  [Zrc<V^8dQhR\R\R\/#)r rrunknownrY)rs"rrrs!???#?C?rc^RIHp^RIHpT!Y;'gRP 4WP 8Xd \ V4MR\V4R7p\YeV4#T4#))handle_pending_subcommandwrite_approvalrN) memory_store set_mode_fn) "hermes_cli.write_approval_commandsrrrrMEMORYrrr)r.rrr2rrwaouts&&&&$ r_run_pending_reviewrsZL* #II2$$&;D ;Q.w7W[/ : >g >>rc(\VRWB\R7#)uN/memory — review staged memory writes, approve/reject them, toggle the gate.memoryr)r _MEMORY_USAGEr+s&&&&&r _cmd_memoryrs sHcM RRrcT;'gRP4p\R4p\VPR4RR4;'gR pV'dV^,P 4V9dR#^RIHpV^,P 4R 9dNVPVP4'g-VPVP4^8Xd \VR4#\VRWB\R7#) u/skills write-approval subcommands only; the hub subcommands stay with the slash worker. Returns None (falls through to the routing refusal, unchanged behaviour) for anything outside the review surface — ``search``/``install``/``browse``/``inspect`` are the CLI skills hub's, never a staged-write review. The allowlist mirrors the registry-declared review slice (``CommandDef("skills", desktop_subcommands=...)`` in hermes_cli/commands.py).rrskillsdesktop_subcommandsNrzSkill write approval is off (skills.write_approval). Enable it with /skills approval on, then review staged writes with /skills pending.rr=>modeapproval) rr]rrrrrwrite_approval_enabledSKILLS pending_countrr _SKILLS_USAGE) r.rr2rCrsubcommandsallowedrs &&&&& r _cmd_skillsrs 99"   C/0Hh..x8:OQUV\\Z\G #a&,,./* A 222;T;TUWU^U^;_;_  +q067 7 sHcM RRrqueueqlearnplaninitrCr\rlrzgoallooprsnapshotsnaprcompactrrrc0V^8dQhR\R\/#rr)rs"rrrsOO4ODOrc N\VPRR4PR44VPRR4r2\PVPRR44p\\ \ \\PV43p\V4;_uu_4\RV4FMpV!WWBV4pVfKV\9d$RV9d\VPRR4V4VuuuRRR4# RRR4\VRRV 24# +'giL ;i) rCrrrrcNrrz)not a quick/plugin/bundle/skill command: ) _resolve_namer$rrrrrr(_SLASH_BUILTINSrfilter_SESSION_CONTROL_SLASHES!_publish_session_control_snapshotr%)r.rrCrr2stagesstageris&& rrrsfjj4;;C@A6::eUWCX#mmFJJ|R89G /1A?TcTgTghlTm nF W % %D&)EWC8C33s8J5fjjr6RT[\ & %) & TFtfM NN & %sD>1D:D D$ z slash.execc0V^8dQhR\R\/#rr)rs"rrrsN'N'4N'DN'rc  \W4wr#V'dV#VPRR4P4pV'g\VRR4#VP R4P ^R7pV'd V^,MRP 4p\V4^8d V^,MRpVPRR4p\WWg4p V e\TRT ;'gR /4#V\9d\V4'd\VR R 4#\V4;_uu_4V\9dTM \V4p RRR4X e*\R ,!VR V P R4RVRV/4#\!W&4p V RJd\VR RV 24#V fP\#WWg4p V PR4;'g/PR4'g\%V4'gV #V'd \'V4MR;p 'd4\TR\)WW!PRR44;'gR /4#VPR4pV'g\,;_uu_4VP/R\0P344pRRR4X;_uu_4VPR4pV'gy\5VR,\7VPR4R\944VPR4\7VPR4RR4;'gRR7p\;WV4RRR4VP=V4p\?VR4'dVPA4MR;p'd\VRRR V/4#RT;'gR /p\CWV4;p'dVVR!&V\D9d \GW4\VV4# +'giEL;i \*dp\TRRT 2/4uRp?#Rp?ii;i +'giEL;i \*d%p\TRRT 24uRp?uuRRR4#Rp?ii;i +'giEL+;i \*dp\IT4'd\#YYg4uRp?#\JPL!\*4;_uu_4TPO4RRR4M +'giM;iRTR&\TR\QT44uRp?#Rp?ii;i)"r"rr* empty commandrrrcNrrrzVsnapshot restore mutates live config/state; use command.dispatch for /snapshot restorerrCrTrrrzPlugin command error: slash_worker_slash_spawn_lockrrrGr#rH)r#rHrzslash worker start failed: pop_seedr rdrN)) _sess_nowaitr$rVr%rrrr_live_slash_command_outputr_WORKER_BLOCKED_COMMANDSrr_PENDING_INPUT_COMMANDSrrrrrrrr-rJ setdefault threadingLock _SlashWorkerr_resolve_model_attach_workerrr{r_mirror_slash_side_effectsrrrr'rcloser)r.rr2r3rpartsrrrS live_outputr skill_hitrplugin_handlerr6worker spawn_lockrseedrrNs&& rrrsK,LG  **Y # ) ) +C C// JJsO ! !1 ! -EE!H2 , , .D%j1n%("C **\2 &C,S4EK3;#?#?-@AA '',@,E,ECwxx W % %!88od>S & *+C&&--:LeUXZfhk1lmm'w5IDC!J4&QRR.sC  NN8 $ * * / / 7 7?STX?Y?Y :>06DH~H FsX':>PWYcYcdprtYu'v(.(. -/0 0[[ (F ^ ++,?AQRJ Z[[0FN) . G8LgWeWg0h%,[[%@!(W)=z4!P!X!XTXZF#38'C)0)D)DFOO%" M4 MsVVY=> >V44}50sC C7 C!(GI  + + -c ;3  e & % %( FsX)?s'CDE E F ^^!NT-H+LMMZNZZ. '  # #,StA A   + + LLN, + + +"&Cs1v&&'s O1O%O>Q+A7P+Q O  O; O60O;6O;> P  QP<,Q-Q<QQ Q  S9#S4?S9"S4'S8 S4 S "S4.S94S9z insights.getrc0V^8dQhR\R\/#rr)rs"rrrWs u u4 uD urc VPR^4p\V4;_uu_4pVf\VRR7uuRRR4#\P4VR,, pVP RRR7Uu.uF&qUPR4;'g^V8gK$VNK( ppRRR4\ VRVR \ X4R \R V44/4#uupi +'giL@;i) daysNr)riQT)limit compact_rows started_atsessionsmessagesc3D"TFqPR^4xK R#5i) message_countNr$)rss& rrr`s!Irmqhi%%P_abJcJcmqs )r$ _profile_db_db_unavailable_errortimelist_sessions_richrrsum)r.rr%dbcutoffr/rowss&& rrrVs ::fb !D V   :(48  te|+00s0NwNaSXSXYeSfSkSkjkpvRvNw  sVT:s4y*cIrmqIrFrs ttx  s/C7C9CCC%CC C/ z rollback.listc0V^8dQhR\R\/#rr)rs"rrrds**4*T*rc&aV3Rlp\W#4#)c <VP'g\SRRR./4#VPV4Uu.uF;pRVPRR4RVPRR4RVPRR4/NK= pp\SRRRV/4#uupi) rF checkpointshashr timestamprdreasonT)rrlist_checkpointsr$)rrcr7r.s&& rgo _..goes{{{sY}bAB B--c242Avr*K{B9OQZ\]\a\abjln\op2 43D->??4sAB )_with_checkpoints)r.rr2rAsf&& rrrcs@ W ))rzrollback.restoreic0V^8dQhR\R\/#rr)rs"rrrps4444T4rc aaaaSPRR4SPRR4uooS'g\VRR4#SPR4e3\SR,\4'g\VRRRRR RR R /R 7#S'gGSPR 4'd0\VR\ R\SPR4444#VVVV3Rlp\ V\ SV44#)r<r file_path hash requiredrrinvalid_paramsr>fielddetailzmust be a booleandatarrzrollback restorerc(<\S W4;p'dRRRV/#TPT\WS 4S;'gRS'*;'dS PR4RJR7pVPR4'dbS'gZ^pS R,;_uu_4\ S 4wrVV'd%\ S \ V4^, 4^,pRRR4WCR &V# \dp\RT 24ThRp?ii;i +'giL8;i) successFrNrT)rFsafermz8checkpoint restored, but session history rewind failed: history_removed) _container_checkpoint_refusalr_resolve_checkpoint_hashr$rrrr- RuntimeError) rrr>rremovedrrrrFrr2rs && rrArB|s 27CE E6 Eugv6 6S":3V"LXaXiXiei&/-"Q"QFJJu4ET4QS ::i G(();G)D&v"@#lJ[^_J_"`ab"c ))0$ % %v*-efiej+klruuv )(s*D.#C C>*C99C>>D D )r$r%r:rrrrC)r.rr2rArFrs&ff @@rrros 62. ;0KFI C// zz%$Zu t-L-LC/"$4guhPcdf f Y//C|,>W[[QjEk@lmnn" s%gr2 33rz rollback.diffc0V^8dQhR\R\/#rr)rs"rrrs**4*T*rc~aaaVPRR4;o'g\SRR4#VVV3Rlp\SV4#)r<rrGrHcD<\SW4;p'd\SRV4#VPV\WS 44pVP RR4R,pRVP RR4RV/p\ VSP R^P44;p'dWeR&\ SV4#)rVdiffrrstatcolsrendered)rRr%rZrSr$ render_diffr) rrr>rrawrr]r.r2rs && rrArBs27CE E6 ET6* * HHS23VD EeeFB&155,fc:"3 FB(?@ @8 @"*J 3  r)r$r%rC)r.rr2rArsf&f @rrrs<jj, ,F ,C// ! Wb ))rc2V^8dQhR\R,/#rmrY)rs"rrrs ' 'd 'rc(VPR4;'gRp\W2R7p\V4;_uu_4VPV4uuRRR4\ V4# +'giM;i\ T4R# \ T4i;i)aWhy host checkpoints are off limits for a container-backed session, else ``None``. Classifies with the identity and scopes a turn binds (prompt_turn.py): the session key is the tool-call task id, the session context drives the terminal registry lookup, and the profile scope supplies the terminal policy; otherwise a cached launch-profile environment or the launch config would answer for another profile's session.rdefaultrN)r$rr,unsupported_backend_reasonr)r2rrrrs&&& rrRrRstkk-(55IG !' 3F' +G 4 411':5 4 v&5 4 4 v&v&s"BA# B# A3 .B Bzbrowser.managec0V^8dQhR\R\/#rr)rs"rrrs 8 84 8D 8rc BVPRR4pVR9dT^RIHpHpVR8XdV!VPRR4RJ4\ 4p\ VR\ V4RVR V!4/4#VR 8Xd \V4#VR 8Xd \W4#\VR R V 24#)rgr%use)is_browser_use_cli_modeset_browser_use_moderTF connectedurl browser_use disconnectconnectizunknown action: >rfr%) r$tools.browser_use_clirgrh_resolve_browser_cdp_urlrr_browser_disconnect_browser_connectr%)r.rrgrgrhrjs&& rrrsZZ( +F ""W U? It! "KF+R0KKCGGJ4KH '6 n& '*h6M6M+)NQZ\bPc$e f '6 #nS#67 8 377+=r#BCLLu M CGGIu56 7$9 : -="))+*FX[\o\qXrHs)tuH sZ* ++rz tools.showic0V^8dQhR\R\/#rr)rs"rrrsEE4EDErc \R4p\PVPRR44p\V4wrEVP WERRR7p/p\ VRR7FpVR,R,p \ VR,PR R4;'gR4PR 4^,p R V 9dV R V PR 4^,p TPVPV 4;'gR .4PRV R V /4K \ VP44U U u.uF wrRV RV /NK p p p \VRV R\V4/4#uup p i) model_toolsrcrT)rrrGskip_tool_search_assemblyc"VR,R,#)functionrCr=)ts&rrHrs AjM&,Ar)r/rrCrrz. Nrrr~total)r]rr$rget_tool_definitionsrrrindexrget_toolset_for_toolrrrr)r.rmtr2rrWrr~toolrCdescrr7 sections_outs&& rrrsX M "BmmFJJ|R89G)'2G  # #Wei>B $ DEHu"ABJ'4 #'' r:@@bAGGMaP 4<.$**T*Q./DB33D9FFYKRRTZ\`boquSvw C ?EX^^EU>VW>V71VQ.>VLW sZwE C DDXs7E$ztools.configureic0V^8dQhR\R\/#rr)rs"rrrs . .4 .D .rc,VPRR4pRpV'd,\W4wr4V'g\WR4;p'dV#T;'g/PR4p\V4p\ WW#4\ V4# \ T4i;i)rcrNrr#)r$rr_bind_build_profile_scopes_configure_session_tools_release_build_profile_scopes)r.rrSr2r3r5scopess&& rrrs **\2 &CG #F0  +cG<<3<J MMr  ~ .D ' -F.'SB%f-%f-s / B Bc<V^8dQhR\R\R\/#)r rrSrrS)rs"rrrs&aa$aSadarc\VPRR4;'gR4P4P4pVPR.4;'g.Uu.uF=p\V4P4'gK$\V4P4NK? ppVR9d\ VRRV 24#V'g\ VRR4#\ R4\ R4rVP 4p VPU U u0uFwp qkK up p VP4,p VUu.uFpR V9gK VNK p pVUu.uFpR V9gK W\9gKVNK ppVUu.uFpR V9gK W\9gKVNK ppV'dVPV R W4\4^,pV F5pVPR ^4^,p\VVV4;p'gK3Vu# V 'dVPWV4M \4pVPV 4V'd \!W#4MR p\#VP%VP 4R R R 74pVUu.uF4pW^9gK R V9g!VPR ^4^,V9gK2VNK6 pp\'VRVRVRVR\#V4R\)V4RV/4#uupiuup p iuupiuupiuupiuupi)rgrnameszunknown tools action: rznames requiredrzhermes_cli.tools_config:cliNF)include_default_mcp_serverschangedrrmissing_serversrr>enabledisable)rr$rVrr%r]r9CONFIGURABLE_TOOLSETS_get_plugin_toolset_keys_apply_toolset_changernrrz_apply_mcp_changer save_config_reset_session_agentr_get_platform_toolsrr)r.rrSr2rgrCtargetsrtcr;ts_keyrvalid_toolsets mcp_targetsrtoolset_targetsrtr server_namer3rrrrs&&&& rrrs Hb)//R 0 6 6 8 > > @F-3ZZ-D-J-J-J`-JTcRViooN_ s4y -JG` **C!7x@AA C/00 + ,j9R.S .. C131I1IJ1IAf1IJRMhMhMjjN$+;GDsd{44GK; 'Z3d?tt?YttGZ(/^3d?ttG]ttO^   e_E #Gll3*1- )#{GD D3 D DJITb**3VDY\Y^ONN318  -dDR++BNN,K K K  K , K%:K%K%*K*7"K*K*z cron.manageic0V^8dQhR\R\/#rr)rs"rrrs==4=D=rc x\R4PpVPRR4VPRR4rCVR8Xd\\VPRR44p\P V!RVR74p\ VR 4;p'dWvR &\W4#VR 8XdT!R YAPR R4VPRR4\VPRR44P4P4'd\VR,4MRVPR4e\VPR44MR\ VR4;'gRR7p\V\P V44#VR9d'\V\P V!W4R744#\VRRV 24#)zPcronjob() keys off HERMES_HOME, so ``profile`` reaches a per-profile cron store.ztools.cronjob_toolsrgrrCrinclude_disabledF)rgrr r addcreateschedulerrepeatN continuitydeliver)rgrCrrrrr)rgjob_idizunknown cron action: >pauseremoveresume) r]cronjobr$is_truthy_valuejsonloadsr)rrrVisdigitrr%) r.rrrgjidrrr r_s && rrrs~./77G**Xv. 620FC *6::6H%+PQG6DTUVvy1 17 1&8 3 # :r0JSYS]S]^fhjSk,/ 8R0H,I,O,O,Q,Y,Y,[,[3vh'(aeDJJJ|D\Dhvzz,'?@nrVY/774 9 3 3(( ..3 7&#EFGG T26(; <(*str(params[k]) for k in arg_keys)``.c0V^8dQhR\R\/#rr)rs"rr(_learning_mutation..__annotate__GsII$I4Ircb<a\\R4S4p\W!V3RlS4!4#)zagent.learning_mutationsc3Z<"TF p\SPVR44xK" R#5irNrr$rrrs& rr3_learning_mutation..body..Is$FXSAr!233Xs(+r1)r.rr.rrs&f rr7 _learning_mutation..bodyGs- Z :;W E3FXFGHHrr=)rrr7sff r_learning_mutationrDsII Krz learning.z failed: c  \R4\R4rCVPW#PVP44R^R7;'g.p\ TRVUu.uF!pRVP RVP 4/NK# up/4#uupi)ztools.skills_hub_searchztools.skills_hub_githubr) source_filterr'resultsrCr)r]unified_searchcreate_source_router GitHubAuthrrCr)r.rquerysearchghr_rs&&& r_skills_searchrVs56 C\8]B   'B'B2==?'Schpr  s y ywyC sYX[ \X[ST&!&&-!NX[ \] ^^ \s'B c !RR4pV!4p\R4PVRVR7p\R4PpVRJ;'gVRJ;'d\V!V44pV'gkRP VP RR4P 4p\TR V'dVP4R,MR R R R TRT;'gR/R7#\VR RR V/4#)aMInstall via `do_install(skip_confirm=True)`; the profile-scoped console is a sink, so the RPC must carry the outcome itself. The install path prints a full scan report before the gate (skills_hub._scan_quarantined); a blocked or failed install returned `installed: True` before, which read as success to every caller (#63307 Part B).c0a]tRtRtoRtRtRtRtVtR#)!_skills_install.._CaptureiazIConsole stand-in: collect lines so the verdict travels with the response.c.VnR#rNlines)selfs&r__init__*_skills_install.._Capture.__init__ds DJrchVPPRPRV444R#)rc38"TFp\V4xK R#5irNrY)ras& rr:_skills_install.._Capture.print..hs&._Capture.printgs# JJ  chh& >rrhermes_cli.skills_hubT) skip_confirmconsoleztools.skills_sync_bundled_opsNrrzskill install failed installedFrClogrLir) r] do_installbundled_skill_for_installrrrrVr% splitlinesr) r.rrrcapturedverdictbundledrrs &&& r_skills_installr \s >>zH01< >F sFc&**["2M.NO PPrrcL\VR\R4P4/4#)rzhermes_cli.banner)rr]get_available_skillsr.rrs&&&rrHrH~ss3:FY;Z;o;o;q0r'srrinstallrinspectcb\TR\R4PV4;'g//4#)rr)rr] inspect_skillrs&&&rrHrHs.# fj!89GGNTTRT U+WrcHV^8dQhR\R\R\R\/#)r rtablerrrS)rs"rrrs(((T($(s(t(rcVPRR4pVPV4pVf\VRRV RV 24#V!W.VO5!#)uUDispatch ``params['action']`` (default ``list``) through ``table``; unknown → 4017.rgrrzunknown z action: rx)r.rrrr:rgr8s&&&&* r _run_actionrsQ ZZ& )FiiGC% &BCC 3 ' ''rz skills.managec0V^8dQhR\R\/#rr)rs"rrrsXX4XDXrc F\W\RVPRR44#)z[list/install use the scoped profile's skills dir; search/browse/inspect hit the shared hub.rrr)r_SKILLS_ACTIONSr$r.rs&&rrrs! sOXvzz'SU?V WWrz skills.reloadic0V^8dQhR\R\/#rr)rs"rrrs D D4 DD Drc\\PVPRR44\V4VPR4R7;_uu_4\ R4P 4pRRR4XPR4;'g.VPR4;'g.rCR.V'g V'd.MR .,pR V3R V33F8wrgV'gKVP V4VPR V44K: TP \VPR 4;'g^4 R24\VRRPV4RV/4# +'giL;i)rcrr rrNaddedrUzReloading skills...zNo new skills detected.z Added skills:zRemoved skills:c3L"TFpRVPRR4 2xK R#5i)z - rCrNr.)ritems& rrrs#I544 4565s"$rz skill(s) availablerrr) rrr$rr] reload_skillsrextendrrr)r.rrr%rUrrrs&& rrrs- Y]]6::lB+GHo^dNe%+ZZ %: < <23AAC <ZZ(..B 90E0K0K7 " #UgrD]C^ _E)514Ew3OP  5 LL  LLI5I IQ LLC 7+00q122EFG sXtyy/6B CC < ?X WY;SSySSGT V W , sY$ %%R H s'D*D*D%D*%D** D:9D:)rc0V^8dQhR\R\/#rr)rs"rrrs4Drc\4wr#\TR\VP44UUu.uFwrE\ WEW4,4NK upp/4#uuppi)zs``{servers: [{name, transport, url, command, args, env (key names), auth, oauth_tokens_present, enabled, tools}]}``rq)rnrrr_mcp_summarize_server)r.rrqrtrCr;s&& rrrs]()G sYIOPWP]P]P_I`!I`IDd7I`! !sAr%c0V^8dQhR\R\/#rr)rs"rrrs//4/D/rc8^RIp\R4p\4wrE\R4P4;'g1VP 4VP VP 448HpR p\R4P WFR7p\TRVU U u.uFLp /VU u/uFqV 9gK WV ,bK up CRWYR,,eR MR R WYR,,/CNKN up p R \VP4R ,4/4#uup iuup p i)a``{servers: [{name, transport, tools, connected, disabled, status}], checked_at}`` from cached runtime state; never connects, probes, or starts auth. Under a multiplexer the runtime view is the scoped profile's; otherwise it is shown only when ``profile`` is the launch profile.NrIrtrCrj)include_runtimerqr ryconfig checked_ati)rCr.rrirWr%) r2r]rnis_multiplex_activerBrKget_mcp_statusrr) r.rr2r configuredrtr=rPrqr6rs && rrrs  & 'B*,J!"67KKMcc,,."2D2DRE_E_Ea2bb LD34CCJCpG sY07!071 'T ,T!VGAtGT , 'hGfIDVDbhp 7V9% '07!St+,. // ,!s D D- D:.DDrc0V^8dQhR\R\/#rr)rs"rrrs'^'^4'^D'^rc \R4p\VR4\VR4rC\4wrV\WV4;p'dV#W59d\ VRRV R24#VP R4p\ V\4'd \V4M/p \R4p R p V'dV P R 4'gV P R 4'gV PV4p V e=V PV R R 7P4FwrV PW4K MWTPY4V P R 4V P R 4\V P R 4;'g.4V R7V P R 4'g%V P R 4'g\ VRR4#VP R4;p'dVPV\!V44V R&VP#W94p\R4P%WV4V'g\ VRRV R24#VP'4P W94p\)VRRRVR\+VV4/4# \d\ TRRT 24u#i;i)uAdd ``name`` from ``preset`` (catalog id) and/or ``config`` (url/command/args/env/headers/auth/ tools); ``bearer_token`` goes to the profile's .env (only the header template persists). Dup → 4090.rirCrVrwrpz' already existsr>r,Nrjr") install_dirr1) preset_namerjr"cmd_args server_configrz%Unknown MCP catalog entry or preset: zLconfig must specify a 'url' (http) or 'command' (stdio), or a valid 'preset' bearer_tokenheadersrjrz1' rejected: suspicious command/args configurationokTserver)r]r)rnrzr%r$r:r get_entry_build_server_configrr_apply_mcp_presetrr_save_bearer_auth_tokenr_save_mcp_serverrecord_mcp_addrkrr:)r.rmcrCrVrqrtr3raw_cfgrHcatalogr7r/r]rIsaved_okrhs&& rrrsj + ,BFF+Xfh-G&')G%c99s9  C$/?@AAjj"G+5gt+D+D$w-"M12G E }((//=3D3DY3O3O!!&)  %::5d:SYY[ ((4\ Y$$-2C2CE2J)--i8!-"3"3F";"A"ArBR_%a   U # #M,=,=i,H,HCmnnzz.11|1#%#=#=dC DU#V i ""47H,-<_API_KEY``); config.yaml gets only a ``${ENV}`` reference (Bearer header for http, ``env`` entry for stdio).rrir]env_varrzmalformed server configrjbearerrzvalue is not a valid credential Authorizationz Bearer ${}rJrz${ mcp_serversrKTrCrL)r]r~r$r)_env_key_for_serverr:rr%_strip_bearer_prefixrrsave_env_value_bearer_auth_headersr9rrrr:)r.rrrSrCrqr3r]rZr7 normalized is_default env_blockr;s&& rrrs+ ,j9P.Q4SAD3  JJw Evy)IIR-C-CD-IG ME eT " "C899 yy,,SZ8 Z--/8;T#DE E '. 6 6t << -7B # #D )oQ[\c[ddfOg=h i '3u:.IIe$ $.y$$?$?yRe "%gYb 1e W .. C.3NN="%d+NN3 sT4y'8MbcgMop qqrtestc0V^8dQhR\R\/#rr)rs"rrr#sii4iDircla\R4p\SV4wr4pV'dV#WC,pVPR4R8Hp/pRV3Rllp VPW6VR7p V'dVP V4MRp T 'g T !R RR 4#\SR RR T U Uu.uF wrR T RT/NK upp RTPR^4RTPR^4RTRT'dR/4#R/4# \ d6p T !\ T 4Yw'dTP T4MR4uRp ? #Rp ? ii;iuupp i)uConnect, list tools, disconnect → ``{ok, tools, prompts, resources, oauth_needed, oauth_tokens_present}`` (``{ok: false, error, tools: []...}`` on failure). RPC pool: cold npx blocks.riauthoauthc<V^8dQhR\R\R\/#)r r oauth_neededr)rrr)rs"rrrn0s&BBsB$B4Brc 0<\SRRRVR.RVRV/4#)rKFrrrloauth_tokens_presentr)rrltokens_presentr.s&&&rfailure_..failure0s03ugugr>S_/AB Br)detailsTNu1OAuth authentication required — no token found.FrKrrCrprompts resourcesrlrn)r]rrr$_probe_single_server_oauth_tokens_presentr-rr)r.rrSrCrqr3r;needs_oauth_tokenrrrpr token_presentrrrsf& rrr"s[ + ,B*37D3  -C72GBBs''7'C:K006QU  JDRWXX s dGNvq-;N7;;y!,k7;;{TU;V)+AK\4h iicgh ii ss3x!2VgB4L4LT4Rmqrrs Os$.C-D0- D-8*D("D-(D-rc0V^8dQhR\R\/#rr)rs"rrrAs3343D3rc\VR4p\W\4^,4;p'dV#\R4P V4'g\ VRRV R24#\ VRRRR/4#) uQRemove a server from the profile's config.yaml → ``{ok: true, removed: true}``.rCrir!rpr"rKTrU)r)rzrnr]_remove_mcp_serverr%r)r.rrCr3s&& rrr@su FF #D%c1A1CA1FGGsG - . A A$ G GC${;<< sT4D1 22rz oauth.startc0V^8dQhR\R\/#rr)rs"rrrLs``4`D`rc \VR4;'gRp\W4wr4pV'dV#\WC,4pVPR4'g\ VRR4#VPR4'd$VPR4R8wd\ VRR 4#RVR&\ \ R 4P4P4PR R 74p\ R 4PWsWbR7p\TRR/RU u/uF qY,bK up C4# \d!p \ TR\ T 44uRp ? #Rp ? ii;iuup i)u]Begin a session-backed OAuth flow → ``{ok, session_id, auth_url, flow: "pkce"}``; the client opens ``auth_url`` and polls ``mcp.servers.oauth.poll``. With ``client_redirect_uri`` the CLIENT hosts the loopback and relays the code via ``mcp.servers.oauth.callback`` (desktop and gateway on different machines). Runs on the RPC pool (_LONG_HANDLERS).client_redirect_uriNrjrz2stdio servers authenticate via env keys, not OAuthrJrirjz/this server uses header/API-key auth, not OAuthrIFstricttui_gateway.mcp_oauth_sessions)r~rKT)rcauth_urlflow) r)r~rr$r%rr]get_hermes_home expanduserresolve start_flowrr) r.rr~rCrqr3r; hermes_homerr6rs && rrrKs? #6+@AIIT'8Es J7=!wwu~~T#WX X 779  #''&/W"<T#TU UF *%78HHJUUW__gl_mn <=HH sIM sT4^:\#]:\QvyL:\#]^ __ 'Cs1v&&'#]s;D&4D&%D&<"D&A!D& E & E1E E Ez oauth.pollc0V^8dQhR\R\/#rr)rs"rrresdd4dDdrc \R4Pp\VRR/V!\VR4\VR44C4#)uhPoll a flow → ``{ok, status: pending|approved|error, ...}``; ``approved`` persists tokens per profile.rrKTrcrC)r] poll_flowrr))r.rpolls&& rrrdsC 6 7 A AD sT4b4(FQWY_H`#ab ccrz oauth.cancelc0V^8dQhR\R\/#rr)rs"rrrls\\4\D\rc \\R4P4P4P RR74p\R4P p\ W!\VR4\VR4V44#)zHCancel a flow owned by the resolved profile, waking its callback worker.rIFrrrcrC)rr]rrr cancel_flowrr))r.rr5cancels&& rrrksk z,-==?JJLTT\aTb cD 8 9 E EF sF8FL98FF;SUYZ [[rzoauth.callbackc0V^8dQhR\R\/#rr)rs"rrrts4Drc aV3RlR4wr#rE\R4Pp\W!\SR4\SR4W#VVR74#)zlRelay a client-captured redirect (``code``/``state``/``error``/``iss``) into a ``client_redirect_uri`` flow.c3<"TF3p\SPV4;'gR4;'gRxK5 R#5irrrs& rrrvs3kIjAs6::a=#6#6B7??4?Ijs !> > >rrcrC)rstateriss)r]deliver_callback_flowrr))r.rrrrrrs&f rrrssXlIjkD9:PPG sG&(@t`e  rc:V^8dQhR\\,/#r)rr)rs"rrr~s""d4j"rc\R4p\R4pVP4VP4r2VP4wrEpVP 4p\R4P V4p.p VP 4p \VP44EF^wrrppVPWVVWV R7pV'd\\V44MRpVPV4pT PRT RTR\T ;'gR4R T ;'gRR TR TR TR V'd \V4MRR\T;'dVR, R, P44R\R4P!VV4R\#VVVVR7/ VP%WV4CV'd*VP'VP(4;p'dRRRV/M/CVP+W4;p'dRV/M/C4EKa V #)hermes_cli.plugins_cmdzhermes_cli.plugins_cmd_catalogzhermes_cli.plugins_cadence)r/r dir_pathrNrCr/rrrr r%portablerEhas_desktop_halfdesktopz plugin.jssettings_schemahermes_cli.plugins_settingsrq)rcatalog_titlesupdate_availableT update_target pinned_sha)r]_get_enabled_set_get_disabled_setcatalog_rows_maps_read_install_metadatacached_git_updates_category_active_namesr_discover_all_plugins_plugin_statusrr_is_portable_plugin_dirrris_fileplugin_settings_fields_plugin_server_rowscatalog_row_fieldsr$rCpinned_revision)pccatrrWpinsversionstitlesref_pins git_updatesrrrCrrr _dirr/r% _dir_pathrrshas r _plugin_rowsr~s , -B 5 6C++-r/C/C/EX!224DF((*H9:MMhWK C  & & (F289Q9Q9S2T.tT3""4(Fjp"q(,DTO --d3 D%iW]]1C]TXT^T^\^ fh H Y3y>B Y%b%bI 4IK4W3`3`3b c z*GH__`ceno *9cH]cd \$$T: \;??9>>+J!J!J#D/6BQS \/1.@.@.P'Ps'P c"WY \ ]3U* JrcV^8dQhRR/#rmr=)rs"rrrs ) )D )rc^RIHpV!4pVP\9dR#\P VP4RRlpVP V4R#)r)rNcV^8dQhRR/#rmr=)rs"rr8_ensure_plugin_activation_listener..__annotate__s666rcXVF#pV\VR,&V\VR,&K% R#)rCr/N)_plugin_activations) summariesr7s& r _on_loaded6_ensure_plugin_activation_listener.._on_loadeds*E16 f .05 e -r)hermes_cli.pluginsr scope_key_plugin_activation_subscribedron_plugin_loaded)rmanagerrs r"_ensure_plugin_activation_listenerrsH5 "G99!%%g&7&786 Z(rc<V^8dQhR\R\R\/#)r rrCrrS)rs"rrrs!  T   rcVPR4'dV#WPR4VPR43F+pV'gK V\9gK\V,VR&V# V#)zFill ``activation`` from this process's listener when the core returned none (the core's own copy carries ``live_now``, which the listener's load-time summary cannot). activation plugin_namerC)r$r)rrCr/s&& r_with_activationrsezz, jj/F1CD 33--#6s#;F<  M E Mrc ~\4p\RV44p\VRVRVR\V4V, /4#)c3D"TFqR,R8wgK^xK R#5i)r r Nr=)rrs& rr _plugins_list..sA1( y(@QQs  rt user_count bundled_count)rr4rr)r.rr7rs&& r _plugins_listrs@ >DAAAJ sYlJQTUYQZ]gQgh iircaVPR4;'gVPR4;'gRP4pV'g\VRR4#\4\ R4P pV!V\ VPR44R7pVPR4'g'\TR VPR 4;'gR 4#VPR4;'gTo\V3R l\44R 4p\V\RRR\ VPR44R\ VPR44R\ VPR44RVPR4RSRV/S44#)r/rCrz)plugins.toggle requires a 'key' or 'name'rr)rrKrz toggle failedc3Z<"TF pSVR,VR,39gKVxK" R#5i)r/rCNr=)rrr/s& rr"_plugins_toggle..s'J>aSQuXqy4I-I>s+ +NT unchangedrestart_requiredgateway_reloadedrry) r$rVr%rr]"dashboard_set_agent_plugin_enabledrnextrrr)r.ridenttogglerrr/s&& @r_plugins_togglersJ ZZ  : :&**V"4 : : A A CE CJKK&( 0 1 T TF E4 8(<#= >F ::d  Cvzz'2EEoFF **V  % %C J<>JD QC s$ dKfjj&=!>D,>!?@D,>!?@,PVPZPZ[gPhXs &$&) * ++rc pVPR4;'gVPR4;'gRP4p\VPR4;'gR4P4pV'gV'g\VRR4#\ 4\ R4P T\VPR44VPRR 4T;'gR \VPR 4;'gR4P4;'gR R 7pVPR 4'g'\TRVPR4;'gR4#\YPR4'd3\T\VPR4;'gR444#T4#) identifierrepor catalog_namerz@plugins.install requires 'identifier', 'repo', or 'catalog_name'rforcerTNref)rrrrrKrrzinstall failedrr) r$rVrr%rr]dashboard_install_pluginrrr)r.rrrrs&& r_plugins_installrsZZZ % A AF); A Ar H H JEvzz.177R8>>@L Cabb&( 0 1 J J T&**W-.vzz(D7Q`l`t`tpt  5!''R ( . . 0 8 8DK:F ::d  Cvzz'2FF6FGG sV`V`ajVkVk$VSM1J1P1Pb-QR xxqw xxrc VPR4;'gRP4pV'g\VRR4#\4\ R4P V\ VPR44\ VPR44R7pVPR 4'gVPR 4'd-Rp\YUu/uFqUV9gK WSV,bK up4#VPR 4'g'\TR VPR 4;'gR4#R RR\ VPR44RVPR4;'gTR\VPR4;'g.4/RUu/uFqUV9gK WSV,bK upCpVPR4'd \W4#\V\WfR,44#uupiuupi)aThe same update as the dashboard and ``hermes plugins update``: a catalog install re-pins to the current catalog SHA, a git install pulls. Every update is scanned. A refusal changes nothing and answers ``ok: false`` with what the client must show before retrying: ``consent_required`` + ``delta``/``delta_lines`` for a re-pin that widens the plugin (retry with ``accept_capabilities``), or ``scan_blocked`` + ``scan_verdict``/``scan_findings`` for a scan block (retry a caution verdict with ``force``).rCrrz plugins.update requires a 'name'raccept_capabilitiesr)rrconsent_required scan_blockedrKrz update failedTrwarnings) rKrCrrrdelta delta_linesr scan_verdict scan_findings)rrrr) r$rVr%rr]dashboard_update_user_pluginrrrr)r.rrCrrrrs&& r_plugins_updaters JJv  $ $" + + -D CABB&( 0 1 N N $vzz2G'H"IQUV\V`V`ahViQjOlF zz$%%N)C)CA3tCt!F{1ItCDD ::d  Cvzz'2EEoFFT;VZZ -D(EvvzzZ`OaOiOiei4 : 6 < <"=w(eu(e1ntit,!AY,(euwGzz+3  s$Wfo> ??D vsG)  G) G. G.cBVPR4;'gRP4pV'g\VRR4#\R4P V4pVPR4'd \ W4#\TRVPR4;'gR 4#) uUninstall a user install (``/plugins/``) — the same core as ``hermes plugins remove`` and the dashboard; bundled plugins and paths outside the plugins dir are refused there.rCrrz plugins.remove requires a 'name'rrKrrz remove failed)r$rVr%r]dashboard_remove_user_pluginr)r.rrCrs&& r_plugins_removers JJv  $ $" + + -D CABB 0 1 N Nt TF%zz$//3s lT#tVZZPWEXEkEk\k5llrc *aVPR4;'gVPR4;'gRP4pVPR4pV'd\V\4'g\ VRR4#\ R4pVP V4pVf\ VR R V R 24#Vwrgrp o\ R 4PSV 'd\\V 44MRV4p \T3Rl\44R4p \ R4pTPPS4'dTP!SRRT /4T 'dvTP#T 4'd_\%\\T 44S4pT'd9^RIHp\ R4pT!TP*T3RS 2R7P-4\/TRRRSRT RT /4# \\3d!p \ TR \T 44uRp ? #Rp ? ii;i)zWrite manifest-declared settings (``values`` = ``{key: value}``) through the same writer as ``ctx.set_config``; secrets are refused here (the client stores them via the ``.env`` route).r/rCrrzrz8plugins.settings requires a 'key' and a 'values' mappingrNizplugin 'r"rrc3F<"TFqR,S8XgKVxK R#5i)r/Nr=)rrrs& rr$_plugins_settings..#sC>auX-B>s! !zhermes_cli.plugin_eventszsettings.changedwritten)spawn_context_threadrjzplugin-settings-mcp-)r1rCrKTry)r$rVr:rr%r]_find_plugin_entrysave_plugin_settingsrrrPermissionErrorrr _PLUGIN_ID_REmatchbroadcast_plugin_eventr_portable_server_namesagent.memory_providerr#restart_mcp_servers_with_new_inputsstartr)r.rr/rzrfound_name_version_desc_source plugin_dirrr6reventsrqr discoveryrs&& @r_plugins_settingsrs ::e  8 8 6 2 8 8b ? ? AC ZZ !F j..CYZZ , -B  ! !# &E }C#k:;;=B:EUZ':;PP  tC O,fN C<>CT JC 2 3F !!),,%%i1CiQXEYZb00<<(c*o)> J  B"#=>I !N!NV]U_(.donecs}N+AA ++4PTUV[V\] ++4PTUV[V\]368VVVEVEVWXXrrTi)rrr rr)izcommand timed out (30s))r$r%r]detect_hardline_commanddetect_dangerous_command ImportErrorrr) r.rrr is_hardline hardline_desc is_dangerousrrr,rs f& rrrSs **Y #C C// `89%-%E%Ec%J" T%9-Ho#pq q ( A A# F  TYtf4[#\] ]  Y / 0 E E GC  S"DcT5 GG `C^__`s6C!,CCCcV^8dQhRR/#rmr=)rs"rrrts000rc2\\4VRR7R#)zRRebind this module's helpers + handlers onto ``server`` and register the handlers.)skipN)r)rglobals)rLs&rregisterr8ts 6/rchV^8dQh/^\9d \;R&^\9d \;R&#)r rr)__conditional_annotations__rr)rs"rrrs4H5TI5J5+*s*K5rr=rU)irNrb)NN))rK node_detailid)delete delete_noder<)edit edit_node)r=ro)qr:r:r'rpathlibr method_ctxrr _registryrGprofile_scoped_profile_scopedr>rArJrQr)r] _stripped _nonempty_NAME _NAME_SESSIONrgrnrrrzr~rrrrrrrrrrrrr*rr _code_buildr<rYr_rrrcontextmanagerrrrrrrrrrr(r,r4 _cmd_learn _cmd_planrArWrjrxr}rrrrrrrrrrrrrrrRrr_fn_keysrr rr!rrrrrrrrrrrrrrrr!r&r8r)r:s@rrRs 4     **7 "7:>7NP77.37tbubb cecc QQ .+ 1 5 ) )$|Y&?@ "'V a e T JQ'<8 r ,!& ,;? ,O t " c cTLM4fgT]^4\]d`aDYZ  +002E?E6eZ[3 5&^T-UWn448 49 4 ? ?AE ? ?FilDK<K<^$ `  ` aa&EE n '', 118 BO- t*Fl13G H /1D E 0$!:HW&:8 6 !4 "+S\Vf:HO > [ ?S S.2 Z2j2*1:2?Ey2RXZc2 82j2*1:2?F 2TZ\e2 I2y2+5m2FL]2 2 )- 2  k 2 $[ 2OO& N'N'd ^T" u# uoDD9*:*tt<4=4@oDD9*:*" '  8 8 ]D!,",&lDEE$ . . aB ]D!="=49: a; aE3 9UG diwi$@ABTUXZ_B`a 3_ 86Q s ni(N WX( _XX ot D D& ]&&& &2 (R /!/" %'^'^T -7577I"678r9r> &ii: (33 -``0 , &d'd  .-(\)\ M*+"N%(U* ) j +( y @6mXDE k | M<9LjZkoy:Jox*Vgi  t59A:A GG@00r