`gjnUdZddlmZddlZddlmZddlmZmZm Z m Z m Z ddl m Z mZejeZedGd d Zid ed d dded ddded dddeddddeddddedddd !d"ed dd#d$!d%ed d&d'd(d)*d+edd,d-d.!d/ed d01d2ed3d41d5ed d6d78d9ed d:;d<ed d=d>d?@dAed3dB;dCed3ddDdEed3dF;idGed dH;dIed dJ;dKed dL;dMed ddNdOed ddPdQed ddRdSed ddTdUed ddVdWeddd dXed dYdZd[ed d\;d]ed d^;d_ed d`dadbed dcddde@dfed dgdhidjed dkdldm@dned dodped dq;edrdstduZdvedw<eGdxdyZidzdd{d5d|d5d}d5d~d5ddWddWddWddddddddddXddXddXddXdd9idd9dd9dd9dd<dd<ddEddEdd2dd2dd/dd/dd+ddMddMddOddOddQiddQddQddGddIddIddIddIddKddKddKddSddSddSddUddUdd[dd[idd]dd]dd]dd]dddddddddd_dd_ddbddbddfddfddjd%d%dd%d%ddddddZded<dddddddddddddddМZded<dd3ddrdӜZded<ddՄZddքZddׄZdd؄ZedOdMhZded<ddۄZddd܄Z ddd݄Z!ddބZ"dd߄Z# ddZ$ d ddZ%y)u Single source of truth for provider identity in Hermes Agent. Two data sources, merged at runtime: 1. **models.dev catalog** — 109+ providers with base URLs, env vars, display names, and full model metadata (context, cost, capabilities). This is the primary database. 2. **Hermes overlays** — transport type, auth patterns, aggregator flags, and additional env vars that models.dev doesn't track. Small dict, maintained here. 3. **User config** (``providers:`` section in config.yaml) — user-defined endpoints and overrides. Merged on top of everything else. Other modules import from this file. No parallel registries. ) annotationsN) dataclass)AnyDictListOptionalTuple)base_url_host_matchesbase_url_hostnameT)frozencfeZdZUdZdZded<dZded<dZded <d Zd ed <d Z ded<d Z ded<y) HermesOverlayz?Hermes-specific provider metadata layered on top of models.dev. openai_chatstr transportFbool is_aggregatorapi_key auth_typeTuple[str, ...]extra_env_varsbase_url_overridebase_url_env_varN) __name__ __module__ __qualname____doc__r__annotations__rrrrrrG/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/providers.pyrr"sCI"Is"M4Is&(NO(scr!rmoarvirtualz moa://local)rrr openrouterOPENROUTER_BASE_URL)rrrnousoauth_device_codez)https://inference-api.nousresearch.com/v1 openai-codexcodex_responsesoauth_externalz%https://chatgpt.com/backend-api/codexz openai-apizhttps://api.openai.com/v1OPENAI_BASE_URL)rrr xai-oauthzhttps://api.x.ai/v1 XAI_BASE_URL)rrrrz qwen-oauthzhttps://portal.qwen.ai/v1HERMES_QWEN_BASE_URLlmstudior) LM_API_KEYzhttp://127.0.0.1:1234/v1 LM_BASE_URL)rrrrr copilot-acpexternal_processz acp://copilotCOPILOT_ACP_BASE_URLzgithub-copilot)COPILOT_GITHUB_TOKENGH_TOKEN)rr anthropicanthropic_messages)ANTHROPIC_TOKENCLAUDE_CODE_OAUTH_TOKENzai) GLM_API_KEY ZAI_API_KEY Z_AI_API_KEY GLM_BASE_URL)rrrzkimi-for-coding KIMI_BASE_URL)rrstepfun)STEPFUN_API_KEYz#https://api.stepfun.ai/step_plan/v1STEPFUN_BASE_URL)rrrrminimaxMINIMAX_BASE_URLz minimax-oauthz https://api.minimax.io/anthropicz minimax-cnMINIMAX_CN_BASE_URLdeepseekDEEPSEEK_BASE_URLalibabaDASHSCOPE_BASE_URLzalibaba-coding-planALIBABA_CODING_PLAN_BASE_URLopencodeOPENCODE_ZEN_BASE_URLz opencode-goOPENCODE_GO_BASE_URLkiloKILOCODE_BASE_URL huggingface HF_BASE_URLnovitaNOVITA_BASE_URLxainvidiaz#https://integrate.api.nvidia.com/v1NVIDIA_BASE_URLxiaomiXIAOMI_BASE_URLtencent-tokenhubTOKENHUB_BASE_URLarceezhttps://api.arcee.ai/api/v1ARCEE_BASE_URLgmi) GMI_API_KEYzhttps://api.gmi-serving.com/v1 GMI_BASE_URL fireworks)FIREWORKS_API_KEYz%https://api.fireworks.ai/inference/v1)rrrupstage)UPSTAGE_API_KEYzhttps://api.upstage.ai/v1UPSTAGE_BASE_URL ollama-cloudzhttps://ollama.com/v1OLLAMA_BASE_URLAZURE_FOUNDRY_BASE_URLbedrock_converseaws_sdk)rr)z azure-foundrybedrockzDict[str, HermesOverlay]HERMES_OVERLAYSceZdZUdZded<ded<ded<ded<dZded <dZded <d Zd ed <dZded<dZ ded<dZ ded<y) ProviderDefu9Complete provider definition — merged from all sources.ridnamerrapi_key_env_varsrbase_urlrFrrrrdocsourceN) rrrrr rsrrrrtrurr!r"rorosVC G IN%%HccM4IsCMFCr!roopenaiglmzz-aizz.aizhipuzx-aizx.aigrokz grok-oauthz x-ai-oauthzxai-grok-oauthnimz nvidia-nimz build-nvidianemotronkimiz kimi-codingzkimi-coding-cnmoonshotstepzstepfun-coding-planz minimax-china minimax_cnclaudez claude-codecopilotgithubzgithub-copilot-acpz opencode-zenzengozopencode-go-subkilocodez kilo-codez kilo-gatewayz deep-seek dashscopealiyunqwenz alibaba-cloudalibaba_codingzalibaba-codingalibaba_coding_planhfz hugging-facezhuggingface-hubz novita-ainovitaaimimoz xiaomi-mimotencenttokenhubz tencent-cloud tencentmaasawsrlz aws-bedrockzamazon-bedrockamazonzarcee-aiarceeaiz gmi-cloudgmicloudz fireworks-aifwsolarz lm-studiocustomlocal) lm_studioollamavllmllamacppz llama.cppz llama-cppzDict[str, str]ALIASESzMixture of Agentsz Nous Portalz OpenAI CodexzGitHub Copilot ACPzStepFun Step Planz Xiaomi MiMoz GMI Cloudz Upstage SolarzTencent TokenHubz LM StudiozLocal endpointz AWS Bedrockz Ollama Cloudz%xAI Grok OAuth (SuperGrok / Premium+))r#r'r)r3rBrYr_rdr[r0rrlrgr-_LABEL_OVERRIDESchat_completions)rr9r*rjTRANSPORT_TO_API_MODEcj|jj}tj||S)zResolve aliases and normalise casing to a canonical provider id. Returns the canonical id string. Does *not* validate that the id corresponds to a known provider. )striplowerrget)rqkeys r"normalize_providerrs) **,   C ;;sC  r!c  t|} ddlm}||}tj |}||r |j nd}|r |jnd}|r |jnd}|r |jnd}|r |jnd} t|j} |r3|jr'|jD]} | | vs| j| t||j |t#| | xs |j$||||j&d S|dt|t(j |||j |j|j|j|j|jd Sy#t$rd}YfwxYw) aALook up a built-in provider by id or alias. Resolution order: 1. Hermes overlays (for providers not in models.dev: nous, openai-codex, etc.) 2. models.dev catalog + Hermes overlay User-defined providers from config.yaml (``providers:`` / ``custom_providers:``) are resolved by :func:`resolve_provider_full`, which layers ``resolve_user_provider`` and ``resolve_custom_provider`` on top of this function. Callers that need user-config support should use ``resolve_provider_full`` instead. Returns a fully-resolved ProviderDef or None. rget_provider_infoNrFrr models.dev) rprqrrrrsrrrrtruhermes) rprqrrrrsrrrru)ragent.models_devr Exceptionrmrrrrrrlistenvrappendrorqtupleapirtr) rq canonical_mdev_provider mdev_infooverlayris_aggauth base_url_envrenv_varsevs r" get_providerrs#4(IH"9- !!),G)0G%%m *1&&u$+w  3:w// 9@G55b & w--,, (X%OOB' ("8_&7)--)    !%%i;''$33..$55!//''   _  sE33 FFcpt|}|tvr t|St|}|r |jS|S)z1Get a human-readable display name for a provider.)rrrrq) provider_idrpdefs r" get_labelrsA";/I$$ **  "D yy r!czt|xsd}|jdryt|}|r |jSdS)z:Return True when the provider is a multi-model aggregator.rcustom:TF)r startswithrr)provider provider_normrs r"rrs>&x~26M *  &D!%4  050r!zfrozenset[str]_FLAT_NAMESPACE_RESELLERScHt|xsd}|tvryt|S)uxReturn True only for TRUE routing aggregators (e.g. OpenRouter, named ``custom:*`` proxies) — those that route bare/vendor-slugged model names to *other* providers' endpoints. Distinct from :func:`is_aggregator`, which also reports True for flat-namespace resellers (opencode-go/zen) whose catalog is entirely first-party. Use this gate when the question is "would selecting this model silently re-route the call away from the user's intended provider?" — i.e. the picker dedup. Resellers answer no: their listed models are their own, so their rows must not be deduped against user proxies. rF)rrr)rrs r"is_routing_aggregatorrs)'x~26M11  ''r!c|sy|jdj}t|}|dk(rd|vry|dk(s|jdry|dk(ry |j d r t |d ry y) u;Return the wire protocol a specific endpoint *requires*, or None. Some hosts only accept one API mode and reject the others outright: - api.openai.com only accepts the Responses API for its (reasoning) models when tools + reasoning are in play (chat/completions 400s). - api.anthropic.com / ``…/anthropic`` suffixes speak native Messages. - Kimi's ``/coding`` endpoint speaks native Messages. - AWS Bedrock runtime hosts speak Converse. These are *mandatory* — a session carrying a stale api_mode (e.g. a /model switch that kept the previous provider's ``chat_completions``) must be overridden to the host's required mode, not merely filled in when empty. Generic / unknown endpoints return None so an explicitly configured api_mode on them is never clobbered. N/z api.kimi.comz/codingr9zapi.anthropic.comz /anthropiczapi.openai.comr*zbedrock-runtime.z amazonaws.comrj)rstriprr endswithrr )rs url_lowerhostnames r"host_mandated_api_moder(s $**,I *H>!i9&<#&&)*<*<\*J### -.3HSb3c! r!ct|}||St|}| tj|jdS|dk(ryy)u<Determine the API mode (wire protocol) for a provider/endpoint. Resolution order: 1. Host-mandated mode (special endpoints that only accept one protocol). 2. Known provider → transport → TRANSPORT_TO_API_MODE. 3. Direct provider checks (bedrock). 4. Default: 'chat_completions'. rrlrj)rrrrr)rrsmandatedrs r"determine_api_moderJsQ&h/H  !D $((9KLL9! r!c |rt|tsy|j|}t|tsy|jddxs|}|jddxs*|jddxs|jddxsd}|jddxsd}|jdd xsd }g}|r|j|t |||t ||d d d S)zResolve a provider from the user's config.yaml ``providers:`` section. Args: name: Provider name as given by the user. user_config: The ``providers:`` dict from config.yaml. Returns: ProviderDef if found, else None. Nrqrrurlrskey_envrrFr user-configrprqrrrrsrrru) isinstancedictrrror)rq user_configentry display_nameapi_urlrrrs r"resolve_user_providerrds jd; OOD !E eT "99VR(0DLiir"]eiir&:]eii TV>W][]Gii 2&,"G +}5FIH   x  r!cdd|jjjddzS)zBuild a canonical slug for a custom_providers entry. Matches the convention used by runtime_provider and credential_pool (``custom:``). Centralised here so all call-sites produce identical slugs. r -)rrreplace)rs r"custom_provider_slugrs. |))+113;;CE EEr!c |rt|tsy|xsdjj}|sy|dk(}d}|D] }t|ts|j dxsdj}|j ddxs*|j ddxs|j ddxsdj}|r|s|j dxsdj}g} |r| j ||||t| f}t|} ||j| hvrt| |d t| |d d d cS|r&|r$|\} } } t| } t| | d | | d d d Sy)zIResolve a provider from the user's config.yaml ``custom_providers`` list.NrrrqrsrrrrFrrr) rrrrrrrrrro)rqcustom_providers requestedbare_custom_fallback first_validrrrrrslugdnameaurldenvs r"resolve_custom_providerrs :.>#E""$**,I  %0>BK!$ %&  &)/R668 IIj" % yy# yy#  %'  7 99Y'-2446   OOG $  '%/BK#L1 \//148 8 #"8_   7$ N 'tT#E*#!    r!c t|}|jj}|rt||}||S||k7r ddlm}|j |}|u|Dcgc]}t||k(r|} }t| dkDrJt|j|jdt|jxsd|jxsdd St|} | | S|r t||}||St||}||St!||} | | S dd lm} | |} | /t|| jd| j&| j(d S ycc}w#t$rYwxYw#t$rYywxYw) uFull resolution chain: built-in → models.dev → user config. This is the main entry point for --provider flag resolution. Args: name: Provider name or alias. user_providers: The ``providers:`` dict from config.yaml (optional). custom_providers: The ``custom_providers:`` list from config.yaml (optional). Returns: ProviderDef if found, else None. Nr)PROVIDER_REGISTRYrrrzhermes-auth-registry)rprqrrrrsrurr)rrrrhermes_cli.authrrlenrorprqrrrinference_base_urlrrrrrrr)rquser_providersrrraw user_pdef_AUTH_PROVIDER_REGISTRY_pcfg_rid_collapsed_siblingsr custom_pdefrrs r"resolve_provider_fullrs"#4(I **,   C)#~>   C  T+//4E !8')$/9<'#' *+a/& 88"ZZ"/).u/E/E/K)L!&!9!9!?R5   "D  ))^D   )#~>   *$0@AK  H"9-  ^^'!*"#   ! m'   J    s7EE6AE>E'E E$#E$' E32E3)rqrreturnr)rqrrOptional[ProviderDef])rrrr)rrrr)r)rsrrz Optional[str])rrrsrrr)rqrrzDict[str, Any]rr)rrrr)rqrrOptional[List[Dict[str, Any]]]rr)NN)rqrrzOptional[Dict[str, Any]]rrrr)&r __future__rlogging dataclassesrtypingrrrrr utilsr r getLoggerrloggerrrmr rorrrrrrr frozensetrrrrrrrrrr!r"rsv &#!33:   8 $  $s- =' s- -. s- M%E s- M#"A!s-*-#5*+s-4#"/' 5s-@-"5/ As-L &4& Ms-Z=#$)/ [s-fm;gs-n&Eos-v =E' ws-@}(As-H}+?+ Is-T}&+Us-\]&"<]s-f-&.gs-n ,os-v}-ws-~=7s-F 0Gs-P=/Qs-Z M, [s-d=&es-n m*os-x =#/' ys-B m?*Cs-L m*Ms-T ,Us-\ ]7)]s-f =':'  gs-r-Ass-|}+5+ }s-HM1*Is-V#1$_s-)sr     &z lz  5 z  E z Ez Uz Ez Ez Ez+zz +!z"k#z( 8)z*(+z,H-z./z4 5z6$7z8'9z:!;z@ IAzB9CzH\IzJ,KzP kQzR;SzXYzZ [z\-]zbJczd :ezj -kzl}mzrsztuzvFwz|}zBCzD iEzF IGzHYIzJ+KzL+MzN0OzT -UzVMWzX}Yz^_z`azf Hgzh8izn!ozp"qzr'szt%uzz 9{z|9}z~iz@ iAzFGzHwIzNOzPQzVKWzX +Yz^ Y_zd ezfgzh szzD  "'" * "8$.*&.(* )~!CL $1&-67->($D4$NFG G4GGX047;d d,d5d dr!