agj XUdZddlmZmZddlZddlZddlZddlZddlZ ddl Z ddl m Z ddl m Z mZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl!Z!ddl"Z#ddl$Z#ddl%Z%ddl&m'Z'm(Z(ddl)Z#ddl*m+Z+ddl,m-Z-m.Z.m/Z/m0Z0m1Z1ddl2Z2e+e3jhjhjkZ6e7e6ejpvr"ejpjsde7e6dd l:m;Z;mZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKmLZLmMZMmNZNmOZOmPZPmQZQmRZRdd lSmTZTmUZUmVZVmWZWdd lXmYZYmZZZm[Z[m\Z\m]Z]m^Z^m_Z_dd l`maZa ddlbmcZcmdZdmeZemfZfmgZgmhZhmiZimjZjddlkmlZlddlmmnZnmoZompZpmqZqddlrmsZsddltmuZumvZvddlwmxZxdejvre+ejdne+e3jhdz ZejeZddddeddfd Zdd!Zdefd"Zedd%Zdd&Zd#d$dejfd'Zd#d$dee7e+ffd(Zecd)e;e*Zdd+lmZej)eejj+d,xsej,d-Zd.Zd/ZgZe/eed0<d1Zd2Zej=eld3d4gd4g5dd6lmZd7egdefd8Zed9hZee7ed:<d7egd;e7defd<Zd7egddfd=Zehd>Zeed?<dd@e7dAedefdBZdCe7dDe7defdEZejWdFd7egfdGZejWdFd7egfdHZejWdFd7egfdIZejWdFd7egfdJZejWdFd7egfdKZde/e7fdLZidMdNdOedPdQdRdSdTdUdVdWdXdTdUdYdNdZgd[dPd\dNd]d^d_gdPd`dNdagdbdPdcdNddgdedPdfdNdgdhdigdPdjdNdkgdldPdmdNdngdodPdpdNdqgdrdPdsdNdtgdudPdvdNdwgdxdPdydNdzd{d|gdPd}dNd~gddPddNdgddPddNdgddPdNdgddPdNdddgdPdddddddZe.e7e.e7e-ffed<iddddddddddddddddddddddddddTddddddddZe.e7e7fed<gdZde-de7fdZ dde.e7e-fde7de.e7e.e7e-fffdZee?ZedVZiZe.e7e.e7e-ffed<ejuD]\ZZeee<edQk(seedV<eZde-defdZde7de/e7de.e7e-fde/e7fdZde.e7e.e7e-fffdZGddeuZGddeuZGddeuZGddeuZGddeuZGddeuZGd„deuZGdĄdeuZGdƄdeuZGdȄdeuZGdʄdeuZGd̄deuZGd΄deuZGdЄdeuZGd҄deuZGdԄdeuZGdքdeuZdddddddddddddd Ze.e7e7fed<dZde7de7fdZGddeuZGddeuZGddeuZGddeuZde7dQe7dee7e7ffdZ dddde7dQe7de7de7def dZejdZ eejddZdZdeeedzffdZdefdZdefdZdddddddddZdZdZdZe+dZe d/Gd d Zhd Zehd Zed dhZde7defdZd;e+defdZdZdZdZdZiddddddddddd d!d"d#d$dd%dd&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d+d6d7d8d9d:d;d<d=d>d?d;d@d@d9dAZidBdCdDddِdEdFddGddHddڐdIdJdKdLdMdېdNdܐdOdݐdPdQdRdSddTddސdUdߐdVdWdiZdXe7de+fdYZd;e+de7fdZZd[edefd\Zd;e+dee+ejffd]Zd^e+de7dzfd_Zde7fd`Zdae7de7fdbZdee+fdcZej+ddd;e7fdeZddfd;e+dgede+fdhZdXe7e+zde+fdiZdje+dke+defdlZdXe7dzde7fdmZd7egdefdnZdefdoZdefdpZd/dqd7egdredefdsZ ddtdXe7dzd7egduedeee+e7ffdvZ dwede.e7e-ffdxZ dwedke+de.e7e-ffdyZ dze7deee7ffd{Z dZehd|Zd}Zeeee7fd~fed<de7dzde7fdZd[ede7dzfdZdedeee7e7ffdZej)dddeΐde0e7fdZej+ddd7egd;e0e7fdZej+dd7egd;e7fdZej+d9d7egd;e7fdZej)dded7egfdZdZej)dedd~eed~eed/fd7egdehd;e7defdZej)dded7egfdZej;dded7egfdZej+dd;e7fdZej+dd;e7fdZ GddeuZ!ej)dde!fdZ"ej+dd;e7fdZ#ej+dd;e7fdZ$ej+ddZ%ddl:m&Z'dZ(d;e7de7fdZ)GddeuZ*GddeuZ+GddeuZ,GddeuZ-GddeuZ.GddeuZ/ej+dd;e7fdZ0ej+dd;e7fdZ1ej+dd;e7fdZ2ej+dd;e7fdZ3ej+ddd;e7de7de0e7fdZ4ej+d dd;e7de7de7de0e7def d„Z5ej+dëd;e7de7fdĄZ6ej+dūd;e7fdƄZ7ej+dǫdd;e7de0e7fdɄZ8ej+dʫd;e7fd˄Z9ej)d̫d͐e+fd΄Z:ej)dϫd͐e+fdЄZ;ej)dѫd͐e+fd҄Zej)d׫d͐e*fd؄Z?ej)d٫d͐e-fdڄZ@ej)d۫d͐e.fd܄ZAej)dݫd͐e/fdބZBdߐddddddddd ZCe.e7e1e7effed<ehdZDde+de0ede.e7effdZEde.e7e-ffdZFej+ddde0e7fdZGdZHde7de7de0efdZIde7de7de7de7de.e7e7ff dZJej+ddZKej+ddZLGddeuZMejdd͐eMfdZOej)ddZPej+ddde0e7fdZQGddeuZRGddeuZSej+ddde7de0e7fd ZTej;dd͐eRfd ZUejdd͐eSfd ZVd e7fd ZWej+ddZXej)ddZYej)ddZZej)ddZ[GddeuZ\ej)ddd͐e\dzfdZ]eDdz Z^e+ed<dZ_dZ`dZaidd d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@Zbe.e7e7fedA<iZce.e7ejfedB<iZee.e7e1e7d~ffedC<iZfe.e7e.e7e-ffedD<dde7dEe7dFeddfdGZgde7fdHZhdIe/e7de7dejfdJZid;e+dKede/e7fdLZjde0e7dMe7de/e7fdNZkde0e7dMe7de7fdOZlejdPZnejdQZoejdRZpdSe7dTe7de7ddfdUZqdde0e7de1ejeffdVZrdde0e7dee7e-ffdWZsej)dXdde0e7fdYZtej)dZd7egfd[Zuej)d\d]ZvddKede/e.e7e-ffd^Zwej+d_dd`efdaZxej)dbdefdcZyGdddeeuZzdfe.e7e-fde7fdgZ{da|e0e7edh<die0e7defdjZ}ej+dkdlZ~ej)dmdezfdnZej+dodde7dpefdqZdrZdse/e.e7e-fde/e.e7e-ffdtZej+du ddvedwedxedye7dze7d{e7d|e7d}e7d~ede0e7fdZej+d ddvedwedxedye7dze7de7d{e7d|e7d~efdZej+d dde7dede7dedede7f dZej+ddde7dvede0e7fdZde.e7e-fde.e7e-ffdZdeUde.e7e-ffdZeZe-ed<deUde7de-fdZdeUde-de7fdZdeTde+fdZdeTde.e7e-ffdZdeUdeؐde.e7e7fde-fdZdeUdeؐde.e7e7fdefdZdZdee.e7e-fe7e.e7e-fffdZdeTde.e7e-ffdZdeTde.e7e7fddfdZdeTde.e7e7fddfdZdeTde.e7e7fddfdZde.e7e-fde.e7e7ffdZdeTde.e7e7fddfdZde7de7fdZde-de7fdZde7fdZde7de.e7e-ffdZde-de/e7fdZde7de.e7e-ffdZde7de.e7e-ffdZdddddZde7de7fdZde7de7fdZde7defdZdde0e7dvede7fdZde.e7e7ffdZddddde7de7de7de7de0ejLde0e7de.e7e-ffdZdddde-de7d9ededejLf dZde.e7e-fdefdZde/e7de/e.e7e-ffd„Zde/e.e7e7fde/e.e7e-ffdÄZde7de.e7e-ffdĄZde7de-de/e.e7e-ffdńZd;e+de.e7e-ffdƄZde7de.e7e-ffdDŽZde0e7de7fdɄZddʜde-d{edefd˄Zde.e7e-fde-fd̄Zde.e7e-fd[e.e7e-fde-fd̈́Zde.e7e-fd[e.e7e-fdefd΄Z dde.e7e-fd[e.e7e-fde0e.e7e.e7e-ffdefdЄZde.e7e-fd[e.e7e-fde.e7e-ffdфZde7de-de.e7e-ffd҄Zde.e7e-fde-de-fdӄZde7de-de.e7e-fddfdԄZde7de-defdՄZde/e.e7e-ffdքZde7ddfdׄZde7de-de.e7e-fddfd؄Zejd٫Zde7ddfdڄZej+d۫dde7de0e7de0e7fd݄Zej)dޫde7defd߄Zejd۫ dde7deĐde0e7de0e7fdZej+ddde0e7fdZej+ddZej+ddde0e7fdZdddddidZeed<ej+ddde0e7fdZǐdZe1e7d~fed<ej+d dde0e7dededefdZej+ddde7fdZej+ddde0e7fdZej+ddde0e7fdZejdddeאde0e7fdZej)dddeԐde0e7fdZ dde7de7dQe7de7de7de7f dZϐde7de7dee7e7ffdZde.e7e-fde.e7e-ffdZejdddede0e7fdZdefdZej+ddde0e7fdZejdddede0e7fdZՐdddd d Zee7ee7e7ffed <d dde/e7fd Zאdde7de7de7fdZؐde.e7e-fde/e7fdZde.e7e-fde.e7e-ffdZde.e7e-fde7ddfdZde.e7e-fdede1e7e.e7e-fffdZej+ddZej)ddefdZej)dde7fdZej;dde7fdZej)ddefdZej)d ded7egfd!Zej;dddede0e7fd"Zej)d# dded7egde0e7fd$Zidd%d&d'd(d)d*dd+d,d-d.d/d*d0d1d2d3d4d5d*d6d7d8d9d:d;d*d<d=d>d?d@dAd*dBdCdDdEdFdGd*dHdIdJdKdLdMd*dNdOdPdQdRdRd*dSdTdUdVdWdWd*dXdYdZd[d\d\d*d]d^d_d`dadad*dbdcdddedfdgd*dhdidjdkdldmdndodpdqdrd*dsdtdudvdwdxd*dydzd{d|d}d~d*ddddddd*dddddd*ddiddddMddddVddMd*dddddMd*dZee7ee7e-ffed<dZee7d~fed<iddddEddddddddddddd/ddddd/ddddd/ddddddddddddd/ddddddddd/dddddddÐdĐddŐdƐdƐd[ddǐdȐdd/ddɐdʐdːdd̐d͐dd/ddϐdАddѐdd/ddӐdԐddՐd֐ddאdd/ddِdڐddېdd/ddݐdސddߐddddd/dddd/dddd/ddddddd/ddZee7ee7e-ffed<deee7e-fd~ffdZdee7fdZehdZdSe7dee7d~ffdZdSe7dee7d~ffdZdSe7dee7e-fde-dzdee7d~ffdZ ddSe7de-dzdee7e-ffdZdSe7dee7e-fdzfdZdTe7dee7e-ffdZdSe7fdZ ddee7e-fdee7e7fdedzdedee7e-ff dZdSe7deddfdZdZhdZe GddZiZee7efed<e jZdede7fdZde-de7fdZde-de7fdZde+fdZde-de7dzfdZd e+dee7dze7dze7dzffd Zd e+ddfd Zd e+d e7dejfdZdejdzddfdZde7dejddfdZde7d e+d e7ddfdZddZd e+ddfdZde7dedee7e-ffdZdde0e7dee7e-ffdZej)ddefdZ ej+dde7fdZ ej)d dde7deːde0e7fdZ ej;dde7fdZ d Z d!e;Ze Gd"d#ZiZee7efed$<e jZde7fd%Zde7defd&Zdd'Zde-de7dzfd(Zde7de7de7fd)Zddd*d+e7d;e7dee7e-fdzd,e7dzdee7e-ff d-Zddd*d+e7d;e7dee7e-fdzd,e7dzdee7e-ff d.Zej)d/defd0Zej+d1de7fd2Zdde0e7dee7e-ffd3Zej)d4 dde7deɐde0e7fd5Zej;d1de7fd6Zej+d7dde0e7fd8ZdSe7d9e0e7de0e7fd:Zejd; ddSe7deǐde0e7fd<Z ej)d=ddSe7de0e7fd>Z!dde0e7d?ede7fd@Z"de.e7e-ffdAZ#de.e7e-ffdBZ$de.e7e-ffdCZ%dDdEdFdGdHddIdJdKdFdLdMddIdNdOdPdQdRddIdSdTdFdUdVddIdWdXdFdYdZddId[d\dPd]d^e%dId_d`dadbdce#dIdddedPdfdge$dIfZ&ee.e7e-fd~fedh<die7de.e7e-ffdjZ'de.e7e-fde0e7fdkZ(de.e7e-fde.e7e-fde0e7fdlZ)dee.e7e-ffdmZ*ej+dndde0e7fdoZ+ej;dp ddie7d7egde0e7fdqZ,drZ-iZ.e.e7e.e7e-ffeds<e jZ/ ddtl0m1Z2m3Z4m5Z6m7Z8m9Z:m;Z<d/Z=duZ>ddvZ?de0e7de0e7fdwZ@de0e7ddfdxZA ddie7dye7de0e7dee7e.e7e-fffdzZB dd{e7de0e7de0e7fd|ZCd}e7d~e7deddfdZDdde0e7de.e7e-ffdZE dd{e7de7de0e7de.e7e-ffdZF ddie7de0e7de.e7e-ffdZGd{e7ddfdZHd{e7ddfdZId{e7ddfdZJd e-de7fdZKd e-de7fdZLd{e7ddfdZMej)d ddie7d7egde0e7fdZNGddeuZOej)d ddie7d͐eOd7egde0e7fdZPej+d ddie7d{e7de0e7fdZQej;d dd{e7d7egde0e7fdZRd{e7fdZSGddeuZTGddeuZUdZVd7egdefdZWde0e7dse/e.e7e-fde.e7e-ffdZXej)dd͐eTfdZYej)dd7egfdZZej+ddde0e7fdZ[ej;ddde0e7fdZ\ej+ddde0e7fdZ]de0e7fdZ^ej+ddd{e7de0e7fdZ_ej+d dd{e7de0e7fdZ`ej+d d d{e7de0e7dve0edwefdZaej;ddd{e7de0e7fdZbGddeuZcejdd{e7d͐ecfdZeej+ddd{e7de0e7fdZfGddeuZgd͐egfdZhej)dd͐egfdZiej+d d de7dpede0e7de0e7de0e7f dZjGddeuZkGddeuZlddde-dede0e7fdÄZmde-de0e/e7fdĄZnde-de+de0e7fdńZode.e7e-fddfdDŽZpde.e7e-fde+de.e7e-ffdȄZqde0e/e7de7ddfd˄Zrde/e.e7e-ffd̄Zsde7fd̈́Ztde0e7de1e7e+ffd΄Zude.e7e-fde7de+de.e7e-ffdЄZvde0e7de7fdӄZwde7de0e7fdՄZxd de7fdքZydׄZzej+dثd de7fdلZ{dde7de0e7fdڄZ|ej+d۫dde7de0e7fd܄Z}d de7de0e7dvefd݄Z~ej+dޫd de7de0e7dvefd߄Zdd͐ekde0e7fdZej)dثdd͐ekde0e7fdZej+ddZdde7d͐elde0e7fdZejd۫dde7d͐elde0e7fdZdde7de0e7fdZej)ddde7de0e7fdZdde7de0e7fdZej)ddde7de0e7fdZdde7de0e7fdZej)ddde7de0e7fdZdde7de0e7fdZej;d۫dde7de0e7fdZde7de7defdZej)dd7egfdZGddeuZej+ddZej)ddʐd͐ede7fdZGddeuZGddeuZd͐edee7e.e7e-fe0e7ffdZde.e7e-fde.e7e7ffdZde7de.e7e-fde.e7e-ffdZej+ddde0e7fdZej)ddd͐ede0e7fdZejddd͐ede0e7fdZej;ddde7de0e7fdZej)ddde7de0e7fdZdrZd ZiZee7d fed <e jZiZeee7e7fe jfed <e jZdd Zde7de7de7fdZd7egde7de7fdZde jfdZdeddfdZej)ddde7d7egde0e7fdZej+dde7d7egfdZej+d d de7de0e7de0e7de0e7fdZGddeuZejd dde7d͐ede0e7fdZej+d dde0e7fd!ZGd"d#euZej)d$dd͐ede0e7fd%Zde7de7fd&Zebjad'd(Gd)d*euZGd+d,euZd-Zej+d.d/Zej)d0d͐efd1Zej)d2d͐efd3Zej)d4d5ZGd6d7euZde7d8e.e7e-fde7de.e7e-ffd9Zej+d:d;Zej)d<d=Zej)d:d͐efd>Zej;d?de7fd@ZGdAdBeuZejdCde7d͐efdDZej)dEdde0e7fdFZej)dGdde0e7fdHZGdIdJeuZde-dKede.e7e-ffdLZej+dMdNZej)dMd͐efdOZej;dPde7dKefdQZGdRdSeuZGdTdUeuZej+dVdWZejdXd͐efdYZej)dZd͐efd[Zej)d\d]Zej)d^d_ZGd`daeuZde+fdbZde+fdcZej)ddd͐efdeZej+dfdge7fdhZGdidjeuZej)dkd͐efdlZԐde7dzde7fdmZej)dnedd~eedfdehd`efdoZej+dpdqZGdrdseuZej)dpd͐efdtZGdudveuZej;dpd͐efdwZej+dxdyZej)dzd{ZGd|d}euZސde0e7de/e7fd~ZߐdMe7dTe7de7fdZej)ddd͐eސde0e7fdZGddeuZej)ddd͐ede0e7fdZGddeuZej)d dde0ede0e7fdZddddddddddd ZdefdZdde0e7defdZej+ddde0e7fdZej+d dde7d{e7dvede0e7fdZej+ddde7de0e7fdZej+ddde7de0e7fdZGddeuZGddeuZGddeuZGddeuZGddeuZGddeuZGddeuZdde7d{e-de-fdZde.e7e-ffdZde/e.e7e-ffdZde7de+fdZde7de7fdZde+de7dQe7ddfdZde+de/ddefdZde+de/e7defdZej+ddZej)dd͐efdZej+ddZej)dd͐efdZej+dde7fdZej)dde7fd„Zejdëde7d͐efdĄZej;dëde7fdńZej+dƫde7fdDŽZejdƫde7d͐efdȄZejdɫde7d͐efdʄZejd˫de7d͐efd̄Zej)dͫde7d͐efd΄Ze jZ ede0e7fdτZ ede0e7fdЄZ GdфdeuZ ej+dӫdde0e7fdԄZ ejdիdd͐e de0e7fdքZGdׄdeuZGdلdeuZddۄZej+dܫdde7de0e7fd݄Zej)dӫd͐efdބZejdܫd͐efd߄Zej+ddde0e7fdZGddeuZejddde7d͐ede0e7fdZej+ddde7de0e7fdZGddeuZdddZde7dede0e7fdZde7de7fdZde7dede0e7de0efdZej+d dde7de0e7de0e7fdZGddeuZejd dde7d͐ede0e7fdZ ejd dde7d͐ede0e7fdZ!GddeuZ"ejddde7d͐e"de0e7fdZ#GddeuZ$ej)d dde7d͐e$de0e7fdZ%ddddddd dd d d dd dddddddddddgZ&e/e.e7e7fed<e&Dchc]}|d c}Z'dedTe7de7de7fdZ(defdZ)defdZ*dedefdZ+defdZ,defdZ-de7dedefdZ.ej+d dde0e7fd!Z/Gd"d#euZ0ejd$ dd͐e0de0e7fd%Z1ej+d&dde0e7fd'Z2ej)d(dde0e7fd)Z3Gd*d+euZ4ej+d,dde0e7fd-Z5ejd,dd͐e4de0e7fd.Z6d/ede/e.e7e-ffd0Z7d1e/e.e7e-fd2e/e.e7e-fde/e.e7e-ffd3Z8d2e/e.e7e-fde/e.e7e-ffd4Z9dd5ede0e7fd6Z:ej+d7dd5ede0e7fd8Z;dd5ede0e7fd9Zd?eEZCY#wxYw#ey$rdZBdZDGdAd?eEZCYDwxYw(u7 Hermes Agent — Web UI server. Provides a FastAPI backend serving the Vite/React frontend and REST API endpoints for managing configuration, environment variables, and sessions. Usage: python -m hermes_cli.main web # Start on http://127.0.0.1:9119 python -m hermes_cli.main web --port 8080 )asynccontextmanagercontextmanagerN) dataclassdatetimetimezone)windows_detach_flagswindows_hide_flags)Path)AnyDictListOptionalTuple) __version____release_date__)cfg_getDEFAULT_CONFIGOPTIONAL_ENV_VARS clear_model_endpoint_credentialsget_config_path get_env_pathget_hermes_homeget_process_hermes_home load_configload_envread_raw_config save_configsave_env_valueremove_env_valuecheck_config_versiondetect_install_methodformat_docker_update_message%recommended_update_command_for_method redact_keywrite_platform_config_field _deep_merge)ProviderConfigSchema ProviderFieldSTORAGE_HONCHO_HOST_BLOCKget_provider_config_schema)derive_gateway_busyderive_gateway_drainableget_running_pid_cachedget_running_pidget_runtime_status_running_pidparse_active_agentsread_runtime_status)env_var_enabled)FastAPIFileForm HTTPExceptionRequest UploadFile WebSocketWebSocketDisconnect)CORSMiddleware) FileResponse HTMLResponse JSONResponseResponse) StaticFiles) BaseModel SecretStr)run_in_threadpool)ensureztool.dashboardF)promptz3Web UI requires fastapi and uvicorn. Install with: z- -m pip install 'fastapi' 'uvicorn[standard]'HERMES_WEB_DISTweb_dist stop_eventzthreading.Eventintervalreturncddlm}|}tjd|j||j ||y)uTick the cron scheduler from inside the desktop dashboard backend. The scheduler tick loop normally lives in ``hermes gateway run`` — but the desktop app spawns a ``hermes dashboard`` backend, not a gateway, so a cron a user creates in the app would never fire. We run the resolved cron scheduler provider here (no live adapters; delivery falls back to the per-platform send path). Cross-process safe: the built-in provider's ``cron.scheduler.tick`` takes the ``cron/.tick.lock`` file lock, so this never double-fires alongside a real gateway on the same HERMES_HOME — whichever process grabs the lock first wins the tick. rresolve_cron_schedulerz:Desktop cron scheduler started (provider=%s, interval=%ds)rJN)cron.scheduler_providerrN_loginfonamestart)rIrJrNproviders H/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/web_server.py_start_desktop_cron_tickerrWs5?%'HIIJHMM[cd NN:N1c, ddl}y#t$rYywxYwNr)hermes_cli.gateway Exception) hermes_clis rV_warm_gateway_moduler^s !    s  cL ddlm}|S#t$r ddlm}|cYSwxYw)Nr)_get_restart_drain_timeout)%DEFAULT_GATEWAY_RESTART_DRAIN_TIMEOUT)r[r` ImportErrorgateway.restartra)r`ras rV_resolve_restart_drain_timeoutrds+5A)++ 5I445s ##appr4cDKi|j_tj|j_i|j_tj|j_tjjdtd}d}tjddk(rBtj}tjt|fdd}|j!tj"t%t&} d|j)t&j+d{||j-yy7#|j)t&j+d{7||j-wwxYww)NHERMES_DESKTOP1Tzdesktop-cron-tickertargetargsdaemonrS)stateevent_channelsasyncioLock event_lockpty_active_session_fileschat_argv_lockget_event_looprun_in_executorr^osgetenv threadingEventThreadrWrT create_task run_reaper PTY_REGISTRYcancel close_allset)re cron_stop cron_threadpty_reaper_tasks rV _lifespanrsA!CII"<<>CII)+CII& '||~CII ,,T3GH +/I-1K yy!"c)OO% &&-&  ))*\*BCO  $$&&&  MMO ! '  $$&&&  MMO !s6DF E'F EF (FFFF c: |jj|jjfS#t$rci|j_t j |j_|jj|jjfcYSwxYw)awReturn (event_channels, event_lock) from app.state. Lazily initialises the state if the lifespan hasn't run (e.g. when TestClient is constructed without a ``with`` block). The lifespan path is preferred because it guarantees the Lock is created on the correct event loop, but the lazy path lets existing non-``with`` TestClient usages keep working. )rmrnrqAttributeErrorrorpres rV_get_event_statersr>yy'')=)=== >#%  &||~ yy'')=)===>s+.A)BBc |jjS#t$r<tj|j_|jjcYSwxYw)zReturn the chat-argv resolution lock from app.state. Mirrors :func:`_get_event_state`: prefers the lifespan-initialised Lock (created on the correct event loop) but lazily initialises it for non-``with`` TestClient usages. )rmrsrrorprs rV_get_chat_argv_lockrsH(yy''' (#*<<>  yy'''(sAAAc |jjS#t$r*i|j_|jjcYSwxYw)z?Return channel -> active-session-file state for dashboard PTYs.)rmrrrrs rV_get_pty_active_session_filesrsB2yy111 2-/ *yy1112s0A  A  Hermes Agent)titleversionlifespan)routerHERMES_DASHBOARD_SESSION_TOKEN zX-Hermes-Session-TokenT_reveal_timestampsz*^https?://(localhost|127\.0\.0\.1)(:\d+)?$*)allow_origin_regex allow_methods allow_headers)PUBLIC_API_PATHSrequestcb|jjtd}|r7tj|j t j ry|jjdd}dt }tj|j |j S)a=True if the request carries a valid dashboard session token. The dedicated session header avoids collisions with reverse proxies that already use ``Authorization`` (for example Caddy ``basic_auth``). We still accept the legacy Bearer path for backward compatibility with older dashboard bundles. T authorizationBearer )headersget_SESSION_HEADER_NAMEhmaccompare_digestencode_SESSION_TOKEN)rsession_headerauthexpecteds rV_has_valid_session_tokenrFs__(()=rBN$-- ??   3D()H   t{{}hoo.? @@rXz/api/files/download_QUERY_TOKEN_API_PATHSpathc|tvry|jjdd}t|xr6t j |j tj S)NFtokenr)r query_paramsrboolrrrr)rrrs rV_has_valid_query_tokenr`sQ ))  $ $Wb 1E ; W4..u||~~?T?T?VWWrXct|jjddr%t|jddytddt |s tddy)uQAuthorize a sensitive endpoint, raising 401 if the caller isn't allowed. Two auth schemes protect the dashboard, exactly one active per bind: * **Loopback / ``--insecure`` mode** (``auth_required`` False): the ephemeral ``_SESSION_TOKEN`` is injected into the SPA HTML and echoed back via ``X-Hermes-Session-Token`` (or the legacy ``Bearer`` header). Validate it here. * **Gated / OAuth mode** (``auth_required`` True): ``_SESSION_TOKEN`` is NOT injected (the SPA authenticates with a session cookie), so there is no token to check. The ``gated_auth_middleware`` has already verified the cookie before the request reached this handler — any non-public ``/api/`` route it lets through carries a verified ``request.state.session``. The legacy ``auth_middleware`` likewise short-circuits in this mode. Requiring the (absent) token here would 401 every cookie-authenticated request, making plugin install/enable/disable and the other ``_require_token`` endpoints permanently unreachable behind the gate. Defer to the gate. auth_requiredFsessionN Unauthorized status_codedetail)getattrrermr7r)rs rV_require_tokenrgsY&w{{  /59 7==)T 2 > NCC #G ,NCC -rX> localhost::1 127.0.0.1_LOOPBACK_HOST_VALUEShost allow_publicc|tvS)uReturn True iff the dashboard auth gate must be active. Truth table: host == loopback → False (no auth — local-only, trusted operator) host != loopback → True (gate engages — OAuth or password required) "Loopback" is 127.0.0.1, localhost, ::1. RFC1918 / CGNAT / link-local are deliberately treated as PUBLIC — a hostile device on the same LAN is exactly the threat model the gate is designed for. ``allow_public`` (the legacy ``--insecure`` escape hatch) NO LONGER disables the gate. It is accepted for backward-compat with old launch scripts and desktop shells but is ignored: a non-loopback bind ALWAYS requires an auth provider (OAuth or the bundled password provider). This closes the unauthenticated-public-dashboard hole behind the June 2026 ``hermes-0day`` MCP-persistence campaign, where ``--insecure --host 0.0.0.0`` left the config/MCP/agent surface open to internet scanners. )r)rrs rVshould_require_authrs& , ,,rX host_header bound_hostc6|sy|j}|jdr.|jd}|dk7r|d|}n-|jd}nd|vr|jdddn|}|j }|d vry t j jd d jd Dchc]0}|jr|jj 2}}|j }|tvr|tvxs||vS||k(Scc}w)a#True if the Host header targets the interface we bound to. Accepts: - Exact bound host (with or without port suffix) - Loopback aliases when bound to loopback - Any host when bound to 0.0.0.0 (explicit opt-in to non-loopback, no protection possible at this layer) F[]z[]:r>::0.0.0.0THERMES_DASHBOARD_PUBLIC_HOSTSr,) strip startswithfindrsplitlowerrvenvironrsplitr)rrhclose host_only_extrabound_lcs rV_is_accepted_hostrs  A||Cs  B;!E I I+.!8AHHS!$Q' !I && ?DJJ3O 779  F !H((11HY&5HH   s45DhttpcKttjdd}|r7|jj dd}t ||st dddiS||d{S7w) uReject requests whose Host header doesn't match the bound interface. Defends against DNS rebinding: a victim browser on a localhost dashboard is tricked into fetching from an attacker hostname that TTL-flips to 127.0.0.1. CORS and same-origin checks don't help — the browser now treats the attacker origin as same-origin with the dashboard. Host-header validation at the app layer catches it. See GHSA-ppp5-vxwm-4cf7. rNrrrzVInvalid Host header. Dashboard requests must use the hostname the server was bound to.rcontent)rrermrrrr?)r call_nextrrs rVhost_header_middlewarersnL$7Joo))&"5  j9@ 7# ## #sA A)"A'#A)c K|jj}|jdrt|jddxs<t|j jddxst |xs t||}|r|jd}t|dk\r|d r dd l m }m }|}|}t} t! fd | Dd } | r| j#d nd } | d k(r |vs |vr't%dddiS| dk(r |vrt%dddiS||d {S#t$rt}t}YwxYw7'w)u"Block requests to disabled plugin API routes at request time. :func:`_mount_plugin_api_routes` gates at import time, but if a plugin is disabled *after* the dashboard is already running, its FastAPI router remains mounted until restart. This middleware enforces the enabled/ disabled policy on every request to ``/api/plugins/{name}/...`` so that runtime config changes take effect immediately. Registered BEFORE the auth middlewares (so it executes AFTER them): a request that hasn't cleared auth must get auth's 401 first, never this gate's 404 — otherwise an unauthenticated caller could fingerprint which plugins are installed/enabled by reading the status code. We only reach the enabled/disabled check for a request that auth already let through. /api/plugins/token_authenticatedFr/r_get_enabled_set_get_disabled_setc3LK|]}|jdk(s|ywrSNr.0p plugin_names rV z+_plugin_api_runtime_gate..+s LqquuV} /KL$$NsourceuserrPlugin not foundrbundled)urlrrrrmrerrrlenhermes_cli.plugins_cmdrrr\r_get_dashboard_pluginsnextrr?) rrr_authedpartsrr enabled_set disabled_setpluginspluginrrs @rV_plugin_api_runtime_gaters| ;;  D ' GMM#8% @ 5w{{((/5A 5'0 5>4  JJsOE5zQ#Ah  -'7&8 '8': 56G!LGLF62 7# ##( ( $s4#CC0CCA7CCCCCc<Kddlm}|||d{S7w)uOutermost auth seam: non-interactive bearer-token auth for opted-in routes. Registered LAST so it runs FIRST (Starlette middleware is outermost-last). A registered token route is fully owned here — authenticate by token, attach the principal + ``token_authenticated`` flag, and let the downstream cookie/session gates skip enforcement. Non-token routes pass straight through untouched. r)token_auth_middlewareN)$hermes_cli.dashboard_auth.token_authr)rrrs rV_token_auth_seamresK&w : :: :r cdg} ddlm}|j|t t j |S#t$r|jdgY;wxYw)uDiscovered memory providers for the ``memory.provider`` select. Directory-scan only (no provider imports), so it's safe at module import time. ``""`` (built-in only) is always first; discovery failures degrade to the bundled defaults rather than dropping the field. The literal ``builtin`` alias is deliberately NOT offered — built-in memory is not a provider plugin, and ``_normalize_memory_provider_name`` already maps any legacy ``builtin``/``built-in``/``none`` value back to ``""`` (#49513). rr)list_memory_provider_nameshoncho)plugins.memoryrextendr\listdictfromkeys)optionsrs rV_memory_provider_optionsrxsXdG#=134  g& '' #z"#s?AAzmemory.providerselectzMemory provider plugin)type descriptionrmodelstringz0Default model (e.g. anthropic/claude-sonnet-4.6)generalr!r"categorymodel_context_lengthnumberz=Context window override (0 = auto-detect from model metadata)zterminal.backendzTerminal execution backend)localdockersshmodaldaytona singularityzterminal.modal_modezModal sandbox modesandboxfunctionz tts.providerzText-to-speech provider) edge elevenlabsopenaixaiminimaxmistralgeminineutts kittenttspiperz stt.providerzSpeech-to-text provider)r*groqr4r5r3zstt.elevenlabs.model_idzElevenLabs Scribe model scribe_v2 scribe_v1z display.skinzCLI visual theme)defaultaresmonoslatezdashboard.themezWeb dashboard visual theme)r?midnightemberrA cyberpunkrosezdisplay.resume_displayz$How resumed sessions display history)minimalfulloffzdisplay.busy_input_modez%Input behavior while agent is running) interruptqueuesteerzapprovals.modezDangerous command approval mode)manualsmartrIzcontext.enginezContext management enginer?customzhuman_delay.modezSimulated typing delay mode)rItypingfixedz logging.levelzLog level for agent.log)DEBUGINFOWARNINGERRORzagent.service_tierz#API service tier (OpenAI/Anthropic))rautor?flexz(Reasoning effort for delegated subagents)rrGlowmediumhighxhighmaxultrazWhen the chat app / gateway updates Hermes (no terminal prompt), what to do with uncommitted local source edits. 'stash' keeps them and re-applies them after the update; 'discard' throws them away. Terminal updates always ask, regardless of this setting.stashdiscardrzRefresh an already-installed cua-driver during hermes update. Disable this on non-admin macOS accounts where /Applications is not writable.)r!r"booleanzRun the local browser in headed mode (visible window). Also keeps the window open between turns; idle sessions are still reaped after browser.inactivity_timeout.)zdelegation.reasoning_effortz%updates.non_interactive_local_changeszupdates.refresh_cua_driverzbrowser.headed_SCHEMA_OVERRIDESprivacysecuritycontextagentskillscronnetwork checkpoints approvals human_delaydisplay dashboardcode_executionprompt_cachinggoalsupdates onboardingtelegramdiscordmcp computer_use_CATEGORY_MERGE)r%reterminalrl delegationmemory compressionrcbrowservoicettssttloggingrt auxiliaryvaluect|tryt|tryt|tryt|tryt|t ryy)z*Infer a UI field type from a Python value.r`r)robjectr$) isinstancerintfloatrr)rs rV _infer_typer,sF%%%%% rXrconfigprefixc i}|jD]\}}|r|d|n|}|dvr|r|jdd}nt|tr|}nd}t|tr|j t ||nt ||jddjddj|d}|tvr|j t|tj|d |d |d <|||<|S) uFWalk DEFAULT_CONFIG and produce a flat dot-path → field schema dict..>_config_versionrr%u → _ r&r') itemsrrrupdate_build_schema_from_configrreplacerrarwr)rrschemakeyrfull_keyr'entrys rVrr;s )+Flln% U(.fXQse$C * *  ||C(+H t $H H eT " MM3E8D E$E*'//W=EEc3OUUW$%E ,, .x89 / 3 3E*4EuZGX YE* $F8 =%> MrX_ordered_schemac t|tsyt|jdxsdj j }|r|dk7ry|jd}t|txrt |j S)aWReturn True when *value* declares a command-type voice provider. Mirrors the runtime discriminators (``tools.tts_tool._is_command_provider_config`` / ``tools.transcription_tools._is_command_stt_provider_config``) and the desktop's ``isCommandProvider`` in ``apps/desktop/src/app/settings/helpers.ts``: ``type`` is OPTIONAL and case/space-insensitive (absent or normalizing to ``"command"``), and ``command`` MUST be a non-empty string. Built-in blocks (which carry ``voice``/``model`` and no ``command``) and the ``providers`` container itself are rejected. Fr!rcommand)rrstrrrrr)rptypers rV_is_command_provider_blockrqss eT "  &!'R ( . . 0 6 6 8E )#ii "G gs # =W]]_(==rXkind builtin_namescfgc|Dcgc] }t|c}Dchc] }|jj"c}|dk(rddlm}nddlm}dtddffd }|j|}t|tsi}g}|jd }t|tr|j||j|jD cic]\} } | d k7s | | c} } |D]`} | jD]K\} } t| ts| jj|vs8t| sD|| Mb |dk(rdd lm}ndd lm}|D]}|t#|dd |t'||d Scc}wcc}wcc} } w#t$$rY0wxYw) uReturn a merged provider option list without hard-coding vendor names. *kind* is ``"tts"`` or ``"stt"``. The result keeps the built-in display names first (original order — NOT re-sorted), then appends: 1. Command-type providers declared under the canonical ``.providers.`` location, plus the legacy top-level ``.`` fallback — exactly the dual resolution the runtime performs in ``_get_named_provider_config`` / ``_get_named_stt_provider_config``. Names colliding with a RUNTIME built-in are excluded case-insensitively (the runtime rejects a built-in name as a command provider before any config lookup), so a ``providers.EDGE`` command block is not offered. 2. Plugin-registered provider names from ``agent.tts_registry`` / ``agent.transcription_registry`` — opportunistic only: plugins register at runtime via ``ctx.register_tts_provider()``, and this process does not necessarily call ``discover_plugins()``, so the registry may legitimately be empty here. (There is no static ``provides: [tts]`` manifest convention to scan — real manifests only carry ``provides_tools``/``provides_hooks``.) 3. The current ``.provider`` value when not already present — a custom name that only appears as the active provider stays selectable (matches desktop ``enumOptionsFor``'s current-value preservation). Guard semantics deliberately mirror ``apps/desktop/src/app/settings/helpers.ts:commandProviderNames`` so the backend schema (web dashboard) and the desktop client agree on which names are offered. r~r)BUILTIN_TTS_PROVIDERS)BUILTIN_STT_PROVIDERSrSrKNct|tsy|j}|j}|r(|vr#j |j |yyyN)rrrrappendadd)rSstrippedrnamesseens rV_addz&_custom_provider_options.._addsN$$ ::<nn 4 LL " HHSM(8rX providerslist_providersrU)rrrtools.tts_toolrtools.transcription_toolsrr rrrrrragent.tts_registryragent.transcription_registryrr\r)rrrn_runtime_builtinsrsectioncandidate_blocks providers_mapkvblockrSr_list_voice_providers_prrs @@rV_custom_provider_optionsrsF+ +SV +E', -!AGGIOO  -D  u}MX34ggdmG gt $#%KK ,M-& .!--/>$!QQ+-=A>" ;;= KD%4%JJL&&(0AA.u5T   5= R \') ,B VT* + ,  dJ '( Lw , -> ?*    s(F&%F+ F0 ,F0 1F66 GGc t}i}dD]y}|d}tj|}t |t rt |jdt sMt|t |d|}||dk7soi|d|i||<{|stSt t}|j||S#t$r tcYSwxYw)uReturn CONFIG_SCHEMA with per-request voice provider options merged. Computed at request time (not import time) so options reflect the CURRENT config.yaml — including providers added after the server started, and the profile-scoped config when the request carries a ``profile`` param. The module-level ``CONFIG_SCHEMA`` is never mutated; entries that change are shallow-copied onto a copied mapping. )r~rz .providerr) rr\ CONFIG_SCHEMArrrrrr)roverlayrrrmergedfieldss rV#_schema_with_voice_provider_optionsrsm*,G8i !!#&%&j99Mt.T )$U95E0FL U9% %7e7Y7GCL8  - F MM' M s B66CCc,eZdZUeed<dZeeed<y) ConfigUpdaterNprofile)__name__ __module__ __qualname__r__annotations__rrrrXrVrrs L!GXc]!rXrcDeZdZUeed<eed<dZeeed<dZeed<y) EnvVarUpdaterrNrrapi_key)rrrrrrrrrrXrVrr s& H J!GXc]! GSrXrc,eZdZUeed<dZeeed<y) EnvVarDeleterNrrrrrrrrrrXrVrr H!GXc]!rXrc,eZdZUeed<dZeeed<y) EnvVarRevealrNrrrrXrVrrrrXrc&eZdZUiZeeefed<y)MemoryProviderConfigUpdatevaluesNrrrrr rr rrrXrVrr FDcNrXrc&eZdZUiZeeefed<y)MemoryProviderSetupRequestrNrrrXrVrr$rrXrc~eZdZUdZeed<eed<eed<eed<dZeeed<dZee ed<d Z e ed <d Z e ed <y) CustomEndpointUpdateridrSbase_urlr#Nrcontext_lengthTdiscover_modelsF make_default) rrrrrrrrrrrrrrrXrVrr(sJBL IM J!GXc]!$(NHSM( OT L$rXrcbeZdZUdZeeed<iZee e fed<gZ e e ed<dZ ee ed<y)MessagingPlatformUpdateNenabledenv clear_envr) rrrrrrrrr rrrrrrXrVrr3s@"GXd^"Cc3hItCy"GXc]!rXrc"eZdZUdZeeed<y)TelegramOnboardingStartNbot_name)rrrrrrrrrXrVrr<s"Hhsm"rXrc2eZdZUeeed<dZeeed<y)TelegramOnboardingApplyallowed_user_idsNrrrrrrrrrrrXrVrr@s3i!GXc]!rXrcJeZdZUdZeeed<dZeeed<dZeeed<y)WhatsAppOnboardingStartbotmoder allowed_usersNr rrrrrrrrrrrXrVrrEs,D(3-#%M8C=%!GXc]!rXrcJeZdZUdZeeed<dZeeed<dZeeed<y)WhatsAppOnboardingApplyNrrrrrrXrVrrKs,D(3-#'M8C='!GXc]!rXrc,eZdZUeed<dZeeed<y)AudioTranscriptionRequestdata_urlN mime_type)rrrrrrrrrXrVrrQsM#Ix}#rXrc0eZdZUeed<eed<dZeed<y)ManagedFileUploadrrT overwriteN)rrrrrrrrrXrVrrVs IMItrXrc,eZdZUeed<dZeeed<y)ChatImageUploadrNfilename)rrrrrrrrrXrVrr\sM"Hhsm"rXrceZdZUeed<y)ManagedDirectoryCreaterNrrrrrrrXrVrra IrXrc&eZdZUeed<dZeed<y)ManagedFileDeleterF recursiveN)rrrrrrrrrXrVrres IItrXrz.aac.flacz.m4a.mp3z.mp4.ogg.wav.webm) z audio/aac audio/flacz audio/m4az audio/mp3 audio/mp4 audio/mpeg audio/ogg audio/wavz audio/wave audio/webmz audio/x-m4az audio/x-wav video/webm_AUDIO_MIME_EXTENSIONSirc|xsdjdddjj}tj |dS)Nr;rrr )rrrrr)r normalizeds rV_audio_extension_for_mimer|sB/r((a0399;AACJ ! % %j' ::rXc|eZdZUdZeed<eed<eed<dZeed<dZeed<dZeed<d Z e ed <d Z e eed <y ) ModelAssignmentuPayload for POST /api/model/set — assign a provider/model to a slot. scope="main" → writes model.provider + model.default scope="auxiliary" → writes auxiliary..provider + auxiliary..model scope="auxiliary" with task="" → applied to every auxiliary.* slot scope="auxiliary" with task="__reset__" → resets every slot to provider="auto" scoperUr#rtaskrrFconfirm_expensive_modelNr) rrr__doc__rrrrrrrrrrrXrVrrsR JM JD#N Hc GS$)T)!GXc]!rXrc>eZdZUdZeed<dZeed<dZeeed<y) MoaModelSlotrrUr#Nreasoning_effort) rrrrUrrr#r!rrrXrVr r s&HcE3O'+hsm*rXr ceZdZUgZeeed<eZeed<dZe e ed<dZ e e ed<dZ e ed<dZe e ed<dZe eed <d Zeed <y) MoaPresetPayloadreference_models aggregatorNreference_temperatureaggregator_temperature max_tokensreference_max_tokensfanoutTr)rrrr$rr rr%r&rrr'r)rr*r+rrrrrXrVr#r#sq+-d<(-+~J -.28E?1.2HUO2J+/(3-. FHSM GTrXr#ceZdZUdZeed<dZeed<iZeee fed<gZ e e ed<e Z e ed<dZeeed <dZeeed <d Zeed <dZeeed <dZeeed<dZeed<dZeeed<y)MoaConfigPayloadr?default_presetr active_presetpresetsr$r%Nr&r'r(r)r*r+Trr)rrrr.rrr/r0rr#r$rr r%r&rrr'r)rr*r+rrrrrXrVr-r-s#NC#M3+-GT#'' (-,.d<(-+~J --18E?1.2HUO2J*.(3-. FHSM GT!GXc]!rXr-rUcddlm}ddlm}m}ddlm}ddlm}m }|xsdj}|xsdj} ||} t} t| tr| jdnd} ||t| tr| ni} ||t| tr|| ng}| | j | fS||j | fS| |vrd | vr | jd i}t|tr;t#|jd dxsdjj%nd}dd lm}|r|||vr ||} |}nd } d }| |vr#| j)ds || | }|r|} || fS|| fS#t$ri} YAwxYw#t$rd}YkwxYw#t$rt*j-d|| dY|| fSwxYw)uNormalize a main-slot (provider, model) pair before persisting. The Models page has two assignment paths and only one of them was safe: - The "Change" picker sends a real Hermes provider slug — fine. - The per-card "Use as → Main model" menu sends ``entry.provider`` from the analytics rows, falling back to the model's VENDOR prefix (``modelVendor("anthropic/claude-opus-4.6") == "anthropic"``) when the session row has no ``billing_provider`` (older sessions, NULL rows). That wrote ``provider: anthropic`` + ``default: anthropic/claude-opus-4.6`` to config — a vendor-prefixed OpenRouter slug on the NATIVE Anthropic provider. New sessions then 400 against api.anthropic.com ("model: anthropic/claude-opus-4.6 not found") and the user reads it as "changing models does nothing". Two repairs, both at this single chokepoint so every caller inherits: 1. Vendor-name → Hermes-provider mapping: when the provider string is not a known Hermes provider/alias (e.g. ``moonshotai``, ``x-ai`` is known but ``poolside`` isn't) but the model is a vendor-prefixed aggregator slug, keep the user's CURRENT aggregator if they're on one, else fall back to openrouter. 2. Model-format normalization for the resolved provider via ``normalize_model_for_provider`` (e.g. ``anthropic/claude-opus-4.6`` on native anthropic → ``claude-opus-4-6``). r)get_compatible_custom_providers)_KNOWN_PROVIDER_NAMESnormalize_provider)normalize_model_for_provider)resolve_custom_providerresolve_user_providerrrNrr#rU)_AGGREGATOR_PROVIDERS openrouterrOz$model normalization failed for %s/%sTexc_info)hermes_cli.configr2hermes_cli.modelsr3r4hermes_cli.model_normalizer5hermes_cli.providersr6r7rrr\rrrrrrr8rrQdebug)rUr#r2r3r4r5r6r7prov_inmodel_in canonicalruser_providers user_providercustom_providercur_cfg cur_providerr8normalized_models rV _normalize_main_model_assignmentrJs6BKGS~2$$&G ""$H"7+I m.8T-BSWW[)N):nd#CM.0:30E',2O ))"!!8++--#/ gggr*Ggt,GKK B/526<<>DDF24  < .|<@UU*<8I"G$I"G)))2F2Fx2P a;HiP + H 7H [ 2 L " a JJ=w[_J ` H  as7 F AF6 F. FF F+*F+."GG model_cfgr rrct|tsi}t|jdxsdj j }|j j }||d<||d<|j r|j |d<n|jdr ||k7rd|d<|j r&|j |d<|j ddn4|jds|jdr||k7r t|d ||k7r t|d |j d d|S) uApply a main-slot model assignment to a ``model`` config dict in place. Sets ``provider``/``default``, then reconciles ``base_url``: - An explicitly supplied ``base_url`` is always persisted (covers ``custom``/local endpoints and any provider whose key is bound to a non-default host). - Otherwise, a stale ``base_url`` is cleared ONLY when switching to a *different* provider — that URL belonged to the old provider. When the provider is unchanged and no new URL is supplied, the existing ``base_url`` is preserved. This keeps a user's custom endpoint (e.g. a Xiaomi MiMo Token Plan host, ``https://token-plan-*.xiaomimimo.com/v1``) alive when they merely re-pick a model under the same provider — picking a model previously wiped it, forcing the registry default and breaking Token Plan keys. The runtime resolver reads ``model.base_url`` from config (it ignores ``OPENAI_BASE_URL``) and only honors it when the configured provider matches and the pool entry is on the registry default, so preserving it here is what lets the override actually route. The hardcoded ``context_length`` override is always dropped since the new model may have a different context window. Returns the same dict (coerced to a fresh dict if the input wasn't one) so callers can assign it straight back onto the model config. rUrr?rrapiNF)clear_api_mode) clear_api_keyr)rrrrrrpopr)rKrUr#rr prev_provider new_providers rV_apply_main_model_assignmentrS s8 i &  j17R8>>@FFHM>>#))+L$Ij Ii~~ ( 0 * z "|}'D!# * }}&}} ) eT" -- "immE&: P]@] )5I}$(%H MM"D) rXGATEWAY_HEALTH_URLGATEWAY_HEALTH_TIMEOUT3u>Invalid GATEWAY_HEALTH_TIMEOUT value %r — using default 3.0sg@g?c6tsytjd}|jdr|dtd }n |jdr|dtd }|d|dfD]} tj j |d}tj j|t5}|jd k(r2tj|j}d |fcdddcS dddy#1swY xYw#t$rYwxYw) u>Probe the gateway via its HTTP health endpoint (cross-container). .. deprecated:: Driven by the deprecated ``GATEWAY_HEALTH_URL`` / ``GATEWAY_HEALTH_TIMEOUT`` env vars. Scheduled for removal alongside a move to a first-class dashboard config key. See :data:`_GATEWAY_HEALTH_URL` for context. Uses ``/health/detailed`` first (returns full state), falling back to the simpler ``/health`` endpoint. Returns ``(is_alive, body_dict)``. Accepts any of these as ``GATEWAY_HEALTH_URL``: - ``http://gateway:8642`` (base URL — recommended) - ``http://gateway:8642/health`` (explicit health path) - ``http://gateway:8642/health/detailed`` (explicit detailed path) This is a **blocking** call — run via ``run_in_executor`` from async code. )FNrz/health/detailedNz/healthGET)methodtimeoutT)_GATEWAY_HEALTH_URLrstripendswithrurllibrr8urlopen_GATEWAY_HEALTH_TIMEOUTstatusjsonloadsreadr\)baserreqrespbodys rV_probe_gateway_healthrkqs&   % %c *D }}'(.s-../ y !%s9~o&6)*tfG,<= ..((e(.sK uuZ (quu]AEE,,BCCsJ  sAA) hermes_statermrnexistslist_sessions_richtimesumr)rmrndbsessionsrys @rV_count_status_active_sessionsrsr8  ! ! # T "B ((r(Eiik     s :A00BcZKtj} tj|jdtt d{S7#tj $rtjdt Yyt$r }tjd|Yd}~yd}~wwxYww)NrZzB+B(B#B+#B((B+ image/png image/jpeg image/gif image/webp image/svg+xmlz image/bmp image/x-icon).png.jpg.jpeg.gif.webp.svg.bmp.icoHERMES_DASHBOARD_FILES_ROOTi@z /opt/data)frozenc2eZdZUeed<edzed<eed<y)ManagedFilesPolicy default_pathN locked_rootcan_change_path)rrrr rrrrXrVrrsrXr> .hg.svn.next.venv.cache.turbodistvenvbuildrj __pycache__ node_modules.git> auth.json auth.lockbws_cache.json.git-credentialsgoogle_oauth.jsongoogle_token.json.anthropic_oauth.jsongoogle_oauth_pending.jsonwebhook_subscriptions.json credentials config.yamlz mcp-tokenspairingrScj|j}|dk(s|jds|dk(ry|tvS)afReturn True for a basename the managed-files API must never expose. Covers ``.env`` / ``.env.`` / ``.envrc`` variants plus the canonical Hermes credential-store basenames (see ``_SENSITIVE_MANAGED_FILE_BASENAMES`` above). Case-insensitive so ``.ENV`` / ``.Env.local`` / ``Auth.JSON`` on case-insensitive filesystems (macOS/Windows mounts) can't slip past the guard. Basename-only: for the directory-tree credential stores (``mcp-tokens/``, ``pairing/``) that the canonical guards also deny, use :func:`_is_sensitive_path`, which the API call sites route through. .envz.env.z.envrcT)rr!_SENSITIVE_MANAGED_FILE_BASENAMES)rSlowereds rV_is_sensitive_filenamers:jjlG&G..w77h;N 7 77rXcft|jrytd|jDS)ufReturn True for any path the managed-files API must never expose. Combines the basename denylist (:func:`_is_sensitive_filename`) with a credential-directory-tree check: a path is sensitive if its own basename is sensitive OR any of its path components is a credential directory (``mcp-tokens`` / ``pairing``). The component match is case-insensitive and needs no HERMES_HOME resolution, so it blocks these trees wherever they sit under the operator-configured managed root — closing the gap the canonical guards cover as directory trees but a basename-only check would miss. Read-side only: this guards list/read/download (the #57505 exfil surface). The write endpoints (upload/mkdir/delete) are a separate threat class handled by the write-path checks; extending this guard to them is out of scope for this fix. Tc3HK|]}|jtvywr)r_SENSITIVE_MANAGED_DIR_NAMESrparts rVrz%_is_sensitive_path..AsStzz|;;S ")rrSanyrrs rV_is_sensitive_pathr.s("dii( S S SSrXiiiiz.ccz.confiniz.cppcpp.csscssz.csvcsvz.gogoz.graphqlgraphqlz.hz.hpp.htmlhtmlz.javajava.js javascript.jsonrdz.jsxjsxz.ktkotlinz.lualuaz.mdmarkdownpythonrubyrustshellsqlxmltoml typescripttsxtextyaml).mjsz.pyz.rbz.rsz.shz.sqlrz.tomlz.tsz.tsxz.txtz.xmlz.yamlz.ymlz.zshz.avizvideo/x-msvideorr rrrrz.mkvzvideo/x-matroskaz.movzvideo/quicktimerz video/mp4r.opuszaudio/ogg; codecs=opusrrrrrraw_pathczt|xsdj}|s tddd|vr tdd |jj drht j j|}|jr|jdvrtt jj|j}t|j}|jstj |z }|j#d S#t$t&tf$rtddwxYw) NrrzPath is requiredr Invalid pathzfile:>rrFstrict)rrr7rrr`parseurlparsenetloc ValueErrorr url2pathnamerr expanduser is_absolutecwdresolveOSError RuntimeError)rrawparsed candidates rV_fs_pathrs hn"  # # %C 4FGG s{NCC D 99; ! !' *\\**3/F}}6G!G  ..--fkk:CI((* $$& Y.I   .. \: .DNCCDs CD"D:c|jj}|tvr t|Stjt |\}}|xsdS)Napplication/octet-stream)suffixr_FS_MIME_TYPES mimetypes guess_typer)rrguessedrs rV _fs_mime_typersK [[   F f%%%%c$i0JGQ  000rXdatacX|syd|vrytd|D}|t|z dkDS)NFTc36K|]}|dks |dvsdyw)r> rNr)rbytes rVrz#_fs_looks_binary..sQ44"9[9PQQs gQ?)r~r)r suspiciouss rV_fs_looks_binaryr s6  }Q4QQJ D !D ((rXctt|} |j}tj|jr t ddtj|js t dd ||fS#t$rt ddt $rt ddt $rt ddt$r}t dt|xsdd}~wwxYw) NrFile not foundrFile is not readablerrPath points to a directoryzOnly regular files can be read) rrstatFileNotFoundErrorr7NotADirectoryErrorPermissionErrorrS_ISDIRst_modeS_ISREG)rrjstrs rV_fs_regular_filers c$i F P [[] ||BJJ4PQQ << #4TUU 2: F4DEE F4DEE L4JKK PCH4NOOPsBAC) C$$C)rTc|}tdD]9} |dz jr t|cS |j}||k(ry|};y#t$rYywxYw)Nrpr)ranger{rrparent)rT directoryrrs rV_fs_find_git_rootrsuI 2Y  F"**,9~%-!! Y       sA  AActjdxsi}t|jdxs#tjjdxsdj }|rJ|dvrF t |jjd}|jr t|S tt jS#ttf$rY.wxYw)Nrxr TERMINAL_CWDr>rrVrFr) rrrrvrrr rris_dirrrr) cfg_terminalrrs rV_fs_default_cwdr"s=$$Z06BL lu%M)GM2 N T T VC s.. S ,,.66e6DI!9~%" txxz?&   s2ACC&%C&rc ddddd}tjdk(r t|d<tjdd|d d gfi|}|j d k(r|j jSd S#t$rYy wxYw) NTF)capture_outputrr[checkwin32 creationflagsgit-Cbranchz--show-currentrr) sysplatformr subprocessrun returncodestdoutrr\)r run_kwargsresults rV_fs_git_branchr4s" & <<7 "*<*>J ' D#x)9 :  )/(9(9Q(>v}}""$FBF sA*A/-A// A;:A;ct}|dz |dz |dz g}g}|D]"} |j|j$|S#ttf$rY8wxYw)uDirectories ``GET /api/media`` is allowed to read from. Confined to where the agent and attach pipeline actually write media on the gateway host — its images dir and cache subtree. This stops an authenticated client from reading image-extension files anywhere on disk (e.g. a renamed key or a screenshot outside the cache) merely because the suffix passes the allowlist. images screenshotscache)rrrrr)homerootsoutroots rV_media_serve_rootsr=sp  D H_d]2D7N CEC  JJt||~ & J&   sAAAz /api/mediacK t|jjj jtvr t ddt}tfd|Ds t ddjs t d d jjtkDr t d d tj j#j%d }ddtj jd|iS#ttf$rt ddwxYww)uReturn a gateway-local image file as a base64 data URL. Lets remote clients (the desktop app over the network, or the web dashboard in a browser) display images the agent wrote to *this* machine's filesystem — they can't read the gateway's local disk directly. Auth-gated by the session token like every other /api route. Restricted to an image-extension allowlist, a size cap, AND the gateway's own media roots (resolved, symlink-safe) so it can't be used to read arbitrary files. rrrizUnsupported media typec3HK|]}|k(xs|jvywrparents)rr<rjs rVrzget_media..s&JDv~7!77Js"r zPath outside media rootsrr File too largeasciirdata:;base64,)r rrrrr7rr_MEDIA_CONTENT_TYPESr=ris_filerst_size_MEDIA_MAX_BYTESbase64 b64encode read_bytesdecode)rr:encodedrjs @rV get_mediarPs#Dd&&(002}}$884LMM  E JEJ J4NOO >> 4DEE {{}//4DEEv0023::7CG % 4V]]5H5H5J KLHU\T]^ __! \ "DNCCDsE 'D*C>E *EE require_existsrRc |jj|S#t$r|r tddtt f$rtddwxYw)NrrPath not foundrrr)rrrr7rr)rrRs rV_canonical_pathrUsbD (((??  C8HI I \ "DNCCDs "5Act|j} |jdd|j}|js t dd|S#tt f$r}t dd|d}~wwxYw)NTrAexist_okz#Managed files root is unavailable: rz%Managed files root is not a directory)r rmkdirrrrr7r )rr<resolvedrs rV_ensure_managed_rootr\*s > $ $ &Da 4$ /<<> ?? 4[\\ O \ "a6YZ]Y^4_``as#AB,A<<Br<rjc,||k(xs||jvSrr@)r<rjs rV_path_is_underr^6s T> 3TV^^33rXcbt|xsdj}d|vr tdd|S)Nrrrrr)rrr7)rrs rV _path_textr`:s2 x~2  $ $ &D ~NCC KrXct|jjddry|jjxsdj }|j r|j jndj }hd}||vxs||vS)NrFr>rr testclient testserverrr)rrermrhostnamerclientr)rr client_host local_hostss rV_local_dashboard_requestrhAsrw{{  /59 KK &B - - /D*1..7>>&&bGGIKSK ;  <+"<?Tn!tW\]] 499; 'D 4TSW XXrX for_writeryczt|}t|}|j}| |r|dvr|}n|s |j}nwt |j }|?|j s/td|jDr tdd||z }n|j s tddd|jvr tdd|r5|js%t|j}||jz }nt|| }|t||s td d ||t|fS) N>rrc3&K|] }|dk( yw)..Nrrs rVrz(_resolve_managed_path..s4UVV 8S] **rXr~ch|jt|jnd}|||jdS)N)r<rr)rrr)r~rs rV_managed_response_metars9-3-?-?-K#f(()QUK"!11 rXc8 |j}|j#t |j|s tdd |j }|j}|rdn%tj|jdxsd }|jxs|jxs t|t|||rdn |j|j|d S#ttf$rtddwxYw#t$r}tdd|d}~wwxYw) Nrrrr r}rYzCould not stat path: rr)rSr is_directorysizemtimer)rrrr7rr^rr rrrSrrIst_mtime)r~rjr[rrr rs rV_managed_file_entryrsD>>#%nV=O=OQY.Z4UVVS ]]___ FY%9%9(--%H%K%iOiI =x}}=H H BJJ   \ "DNCCD S6KC54QRRSs#CC;C8; DDDrc|xsdj}|jdrd|vr tdd|jdd\}}|ddjd dd xsd }d |vr tdd  t j |d}t|tkDr tdd||fS#t jtf$rtddwxYw)NrrErrz!Upload payload must be a data URLrrrrrr;base64z%Upload payload must be base64 encodedTvalidatez"Upload payload is not valid base64rBFile is too large) rrr7rrK b64decodebinasciiErrorrr_MANAGED_FILE_MAX_BYTES)rrheaderrOrrs rV_decode_data_urlrs N ! ! #D ??7 #s$4WXXjja(OFGqr   a(+I/II4[\\Z$7 4y**4GHH ? NNJ 'Z4XYYZs :B44'C>rrrrrr))sPNG  r)sr)sGIF87ar)sGIF89ar)sBMr._CHAT_IMAGE_MAGICrctt|xsdjj}t j dd|}|jjd}|xsdS)Nrz [\x00-\x1f]+rr pasted-image)r rrrSresub)rrs rV_sanitize_chat_image_filenamersXSR(..0166IY7I!'',I  &&rXc|dd}|jdr |dddk(rytD]\}}|j|s|cSy)NsRIFF sWEBPr)rr)rheadsigexts rV_chat_image_extensionrsR 9D wD2J'$9%S ??3 J rXpayloadc,t|j\}}|jjds t ddt |t kDrt dz}t dd|dt|}|tvr t dd |||fS) Nzimage/rzUpload payload must be an imagerrBzImage is too large; cap is z MBzUnsupported image type) rrrrr7r_CHAT_IMAGE_UPLOAD_MAX_BYTESr_CHAT_IMAGE_ALLOWED_EXTENSIONS)rrrmbrs rV_decode_chat_image_uploadrs&w'7'78OD) ??  ' ' 14UVV 4y// )k :6QRTQUUX4YZZ  %C 004LMM C rXz/api/chat/image-uploadrc FKt|\}}}t|5}|xs t}t|dz } |j ddtt|jjxsd } tjd d | jd xsd } tjj!d} |d| d t#j$dd | |z } | j'| d d d dt) | j*t-||dS#t $rt ddt$r}t dd|d }~wwxYw#t $rt ddt$r}t dd|d }~wwxYw#1swYxYww)uPersist a browser-provided chat image where the embedded TUI can read it. The dashboard /chat page runs Hermes inside an xterm.js PTY. Browser clipboard image bytes are not visible to the server-side clipboard, so the page uploads them here, then drives the TUI's ``/image `` command with the returned gateway-visible path. Files land under ``HERMES_HOME/images/`` — the same directory ``clipboard.paste`` / ``image.attach`` already use. r6TrWr zImage directory is not writablerrYz"Could not create image directory: Nrz[^A-Za-z0-9_.-]+rz._-z %Y%m%d_%H%M%S dashboard_rzCould not write image: )okrrSbytesr)r_profile_scoperr rZrr7rrrstemrrrrrystrftimesecrets token_hex write_bytesrrSr) rrrrr scoped_homer9img_dirrrtsrjs rVupload_chat_imagers5W=D)S  YK/o/t*x' d MM$M 6 1'2B2BCDII[^vv)35;;EBTn \\^ $ $_ 5Zt1W->->q-A,B!D6#OO Y   t $!Y.F  T  # [C8YZ Z dC:\]`\a8bc c d [C8YZ Z YC:QRUQV8WX X Y'YYs^F!FD)BF+E=,F!)EEEFF=F  FFFF!z /api/filesc4Kt||\}}}|js tdd|js tdd |j Dcgc]}t |s t ||}}|jd |j}d} |j|k7r|||k7rt|j} || |d t|Scc}w#t$rtddt$r}tdd |d}~wwxYww) NrrTrrzPath is not a directoryr zDirectory is not readablerYzCould not read directory: cF|d t|djfS)NrrSrritems rVz$list_managed_files..Qs%tN';#;Sf=N=T=T=V"WrXr)rrentries)rr{r7r iterdirrrrrsortrrrr) rrr~rj display_pathchildrrrrs rVlist_managed_filesr>s1#8w#G FFL ==?4DEE ==?4MNN X ) %e,  .   LLWLX$$K F }}K$76[;PV]]#  ! (   Q4OPP X6PQTPU4VWWXs=A DC" C>C"ADC""DDDDz/api/files/readcKt||\}}}|js tdd|js tddt |r tdd |j j }|tkDr td d tj|jd xsd } tj|jjd}|j|||d|d|dt#|S#t$r}tdd |d}~wwxYw#t $rtddt$r}tdd|d}~wwxYww)Nrr rrPath is not a filer (Access to sensitive files is not allowedrYCould not stat file: rBrrrrDrzCould not read file: rErF)rSrrrr)rr{r7rHrrrIrrrrrSrKrLrMrNrr) rrr~rjrrrrrOs rVread_managed_filer^sy#8w#G FFL ==?4DEE >> 4HII&!4^__S{{}$$ %%4GHH$$V[[1!4R8RIS""6#4#4#67>>wG I;hwi8   ! (   S6KC54QRRS L4JKK S6KC54QRRSsNA#E)&D> 4HII&!4^__S{{}$$ %%4GHH$$V[[1!4R8RI  [!-   S6KC54QRRSs+A#C?&CAC? C<'C77C<<C?z/api/files/uploadcKt|j|d\}}}|jr|jr t dd|jr|j s t ddt |j\}} |jjdd|j|dt|||d t|S#t$rt dd t$r}t d d |d}~wwxYww) NTrx'A directory already exists at that pathrFile already existsrWr File is not writablerYCould not write file: rrr)rrr{r r7rrrrrZrrrrr)rrr~rjrr _mime_typers rVupload_managed_filers#8wZ^#_ FFL }}6==?4]^^ }}w004IJJ'(8(89D*T D484 $VV4  ! (   L4JKK T6LSE4RSSTs*B D .C<D D 5DD  D rz/api/files/upload-streamfilercKt||d\}}}|jr|jr tdd|jr|s tdd |jj ddtjd |jd d t|j\}} t| } d} d} tj|d5} |jt d{}|sn6| t#|z } | t$kDr tdd| j'|V dddtj(| |d} | s| j+d|j-d{dt/|||dt1|S#t $rtdd t$r}td d |d}~wwxYw7#1swYxYw#t$rt $rtdd t$r}td d|d}~wwxYw7#| s| j+d|j-d{7wxYww)NTrxrrrrrWr rrYz#Could not create parent directory: r.uploadrrdirrFwbrBrr missing_okr)rr{r r7rrZrrtempfilemkstemprSrr rvfdopenrf_UPLOAD_CHUNK_BYTESrrwriterunlinkrrr)rrrrr~rjrrtmp_fdtmp_nametmp_pathtotalrenamedr;chunks rVupload_managed_file_streamrsY$9wRV#W FFL }}6==?4]^^ }}y4IJJa D48 ''6;;-q!)V]]9KFHH~H EG YYvt $ !"ii(;<<U#22'C@STT %   ! 8V$ OOtO ,jjl$VV4  ! (  S L4JKK a6YZ]Y^4_``a= ! !  L4JKK T6LSE4RSST  OOtO ,jjlsAI"F"?A I G&!G;G<=G: G&'IH%I"GGGIGG#G&&'H" HH""H'%I'(IIIIz/api/files/mkdircfKt|j|d\}}}|jr|js t dd |j dddt|||d t|S#t $rt ddt$r}t d d |d}~wwxYww) NTrxrz"A file already exists at that pathrrWr zDirectory is not writablerYzCould not create directory: r) rrr{r r7rZrrrr)rrr~rjrrs rVcreate_managed_directoryr s#8wZ^#_ FFL }}v}}4XYYZ TD 1$VV4  ! (   Q4OPP Z6RSVRW4XYYZs*A B1 A; B1;B.B))B..B1cJKt|j|\}}}|j||jk(r tdd|j|k(r tdd|j s tdd |j r3|jrtj|n!|jn|jd |d t|S#t$r5}|j r|jsdnd}t|d |d}~wwxYww) Nrz$Cannot delete the managed files rootrz!Cannot delete the filesystem rootrrTrrYzCould not delete path: Trr)rrrr7rr{r rshutilrmtreermdirrrr)rrr~rjrrrs rVdelete_managed_filer s#8w#O FFL %&F4F4F*F4Z[[ }}4WXX ==?4DEE ] ==?   f%  MMO  O0Fv0N OO ]#]]_W5F5FcC  >UVYUZ<[\\]s+A.D s)4 +>'>V @R@R@TVZ[aVb&crXrrENOENT)rerrorENOTDIREACCESstrerrorz read-error)rrvscandirrS_FS_READDIR_HIDDENrrr rrrrrr)rrjrscanrrs rVfs_listr6 s d^FX ZZ  4 ::!33!JJ 34#(<<<#F     c d7##   211 3 22 211 XZ(F(V,WWXsp D B2A B&B2%D &B/+B22DD  DD  DD  D(D;D<D DD z/api/fs/read-textc Ktt|\}}|jtkDr t ddt |jt } |jd5}|j|}dddtdd |jtj|jj!d t#|t||j%d d |jt kDdS#1swYxYw#t$rt ddt$r}t dt|xsdd}~wwxYww)NrBrCrrbr rrFile read failedr(rutf-8rerrors)binarybyteSizelanguagemimeTyperr truncated)rrrI_FS_TEXT_SOURCE_MAX_BYTESr7min_FS_TEXT_PREVIEW_MAX_BYTESopenrfrrrr _FS_PREVIEW_LANGUAGE_BY_EXTrrrrrN)rrjr bytes_to_readhandlerrs rV fs_read_textrP s#!(4.1JFB zz--4DEE $>?MT [[  .&;;}-D .#4;/JJ/33FMM4G4G4I6R!&)F  GI 6ZZ"<<   . . L4JKK TCH4R@RSSTsCAE D &D8D BE D D E *EE  E c"eZdZUeed<eed<y) FsWriteTextrrNrrrXrVrrh s I LrXrz/api/fs/write-textc.Kt|j}|jxsd}t|j dt kDr t dd |j}|,tj|jr t d d |,tj|js t d d |jj!s t d d |j#d|j$dt'j(} |j+|dt'j,||dt|t|j ddS#t$rd}Yt$rt ddt$r}t d t|xsd d}~wwxYw#t$r |j/dt ddt$r'}|j/dt dd|d}~wwxYww)aJOverwrite (or create) a UTF-8 text file for the in-app spot editor. Mirrors the local Electron ``hermes:fs:writeText`` hardening: the path is resolved + validated by ``_fs_path``, the parent directory must already exist (we never build directory trees), only regular files may be replaced, and the payload is size-capped. The write is staged to a sibling temp file and ``os.replace``-d into place so a crash mid-write can't truncate the original. Stale-on-disk detection is the client's job (re-read before save), so both transports behave identically. rrrBzContent too largerNr rrrrz!Only regular files can be writtenzParent directory does not existrz .hermes-tmp-encodingTrrYr)rrr )rrrrr_FS_TEXT_WRITE_MAX_BYTESr7rrrrrrrrrr  with_namerSrvgetpid write_textrr)rrjrrrtmps rV fs_write_textrm sgll #F ?? bD 4;;w  #;;4GHHP'-{{} ~$,,rzz24PQQ ~dll2::64WXX ==   !4UVV   Qv{{m< }E FCT tg. 3F T[[=Q9R SS3   L4JKK PCH4NOOP L d #4JKK T d #6LSE4RSSTs[AHE.'B6H)F;'H. F89H<F8F33F88H;0H+"H  HHz/api/fs/read-data-urlcKtt|\}}|jtkDr t dd t j |jjd}d d t|d |iS#t$rt ddt$r}t dt|xsdd}~wwxYww) NrBrCrrDr rrrdataUrlrErF) rrrI_FS_DATA_URL_MAX_BYTESr7rKrLrMrNrrrr)rrjrrOrs rVfs_read_data_urlr# s!(4.1JFB zz**4DEET""6#4#4#67>>wG }V45XgYG HH L4JKK TCH4R@RSSTs(8C2B-CB=B88B==Cz/api/fs/git-rootcKt|} |j}tj|jr|n |j}dt |iS#t $r|}YwxYww)Nr<)rrrrrrr)rrjrrTs rV fs_git_rootr% sa d^F [[],,rzz2  %e, -- s( A*=A A* A'$A*&A''A*z/api/fs/default-cwdc:Kt}|t|dSw)N)rr+)r"r4)rs rVfs_default_cwdr' s  C."5 66s)web_gitcKtj} |jd|g|d{S7#t$r}t dt |xsdd}~wwxYww)zIRun a (blocking) git op off the event loop; map a failed mutation to 400.Nrzgit operation failedr)rorrurr7r)fnrkrrs rV_git_opr+ sb  # # %DX)T))$:T:::: XCH4V@VWWXs0A!646A!6 AAAA!c*tt|Sr)rrrs rV _git_pathr- s x~ rXceZdZUeed<y) GitPathBodyrNrrrXrVr/r/ rrXr/c,eZdZUeed<dZeeed<y) GitFileBodyrNr)rrrrrrrrrXrVr1r1 s ID(3-rXr1c0eZdZUeed<eed<dZeed<y) GitCommitBodyrmessageFpushN)rrrrrr5rrrXrVr3r3 s I LD$rXr3cheZdZUeed<dZeeed<dZeeed<dZeeed<dZ eeed<y)GitWorktreeAddBodyrNrSr+rgexistingBranch) rrrrrrSrr+rgr8rrXrVr7r7 s? ID(3- FHSM D(3-$(NHSM(rXr7c0eZdZUeed<eed<dZeed<y)GitWorktreeRemoveBodyr worktreePathFforceNrrrrrr<rrrXrVr:r: s IE4rXr:c"eZdZUeed<eed<y)GitBranchSwitchBodyrr+NrrrXrVr?r? s I KrXr?z/api/git/statuscdKttjt|d{S7wr)r+_web_git repo_statusr-rs rVgit_status_routerC s#--y? ?? ? '0.0z/api/git/worktreeschKdttjt|d{iS7w)N worktrees)r+rA worktree_listr-rs rVgit_worktrees_routerH s( wx'='=yOO PPO (202z/api/git/brancheschKdttjt|d{iS7wNbranches)r+rA branch_listr-rs rVgit_branches_routerN s( gh&:&:IdOLL MMLrIz/api/git/base-brancheschKdttjt|d{iS7wrK)r+rAbase_branch_listr-rs rVgit_base_branches_routerQ s( gh&?&?4QQ RRQrIz/api/git/review/listrrgchKttjt|||d{S7wr)r+rA review_listr-)rrrgs rVgit_review_list_routerT s'--ytL LL Ls )202z/api/git/review/diffstagedc pKdttjt|||||d{iS7wNdiff)r+rA review_diffr-)rrrrgrUs rVgit_review_diff_routerZ s4 '("6"6 $uVZ\bcc ddcs ,646z/api/git/file-diffcjKdttjt||d{iS7wrW)r+rAfile_diff_vs_headr-)rrs rVgit_file_diff_router] s* '("<"}}d} ddl m!}!|!} idtDdtFd|d|dtI d|d| d| d| d| d|d |d!|d"|d#|d|d$|d%| i}"tjjdtJd{}#|#d&|"d&<|#d'|"d'<|sR|"jMtOtQtOtStOtU|t |#d(d)|"|"|jVtYjZSS7cc}w#t $rd}YwxYwcc}}w77cc}w#t $rYKwxYw#t $rd} YMwxYw7#|"|jVtYjZwwxYww)*NrcurrentTpidr)load_gateway_config gateway_stater exit_reason updated_at>rstartup_failedr>Nrrunning active_agents)gateway_runningrr)rrrFrr)get_nous_session_validityr release_dateconfig_versionlatest_config_versioncan_update_hermesrgateway_platformsgateway_exit_reasongateway_updated_at gateway_busygateway_drainablerestart_drain_timeoutactive_sessionsauth_providersnous_session_validrrr) hermes_home config_pathenv_path gateway_pidgateway_health_urlr).rr_config_profile_scope __enter__r!r.r]rorrurkrgateway.configrget_connected_platformsrr\r2r0rrr1r,r-rdrrrermhermes_cli.dashboard_authrrShermes_cli.authrrrrrrrrrrr__exit__r,r;)$r status_scoperequested_profile current_ver latest_verrrremote_health_bodyraliverrrrconfigured_gateway_platformsrgateway_configr- local_runtimer runtime_pidrrrrrrrrr_list_providersrrrrctopologys$ rV get_statusr s+L B--/.446)C,->?  K3"6"8 Z -. %T1*.#6++-D.2.B.B+/) %E%"&%"4"8"8"?K "$"!8<$ 0 :02N/=/U/U/W,#+, (,,-  ?16H6L6L_6](G =#<8GK&"&) #KK8M ' K 8 >B +7'8&=&=&?%"U::J%!% #*++m"< !(\!: "1>B_1_ en $&! %7%C!$55$-M }49K9W%M 7 99,W],?,?QR,ST *+'' 5+' '.&>&>&@&P&P 0' ! WSYYGH $&  S.=.?@aff@N@' + A!:!<  { ,  k  $Z  %O%Q!Q     ]  !2  "#6  !"4  ]  L  !2  $%:   ]! " n# $ !"4% B!113CC 3  &j1z!).!9~ MM"?#45"?#45 /*&9$Z0    # !L ! !3<<> 2 $})$, 0+/ ( 00%,:2! A     +!*  +P :  # !L ! !3<<> 2 $sAP AO.N(O.N'%N"8N':A5O./N9AO.N?A)O.;O<*O.'O 6O O O. OA5O.O,A)O.:%PO."N'' N62O.5N66 O.O.O OO.OO. O)%O.(O))O..&PPiUrplatform_labelc|xsd|xsdfD]7}tjd|}|s t|jdcSy#t$rYFwxYw)zAExtract the Windows NT build number from stdlib platform strings.rz%(?:^|[^\d])10\.0\.(\d{5,})(?:[^\d]|$)rN)rsearchrgroupr)rrrmatchs rV_windows_build_numberr sg-R!526 BEJ  u{{1~& &     sA AAsystemreleasec|dk(r7|dk(r2t||}|$|tk\rtjdd|d}d}||||dS) zAReturn host OS fields for display while preserving stdlib detail.Windows10z^Windows-10(?=-)z Windows-11r)count11)rv os_release os_versionr-)r_WINDOWS_11_MIN_BUILDrr)rrrrrs rV_display_system_platformr sew$%g~>  *?!?VV# N G"  rXz/api/system/statscFKddl}it|j|j|j |j|j |j |j|jttjd} ddl }|j}|j|j|j |j"d|d< |j%t't)}|j|j |j*|j"d|d< |j/d |d <t1|d d}|rt3||d < |j5}t7t9j8|z |d< |j;}|j<|j?j@t7|jC|jEd|d<d|d<|S#t,$rYwxYw#t,$rYwxYw#t,$rYwxYw#t,$rY?wxYw#t,$rAd|d< t3tjF|d <Y|S#tHtJf$rYY|SwxYwwxYww)a!Host + process system stats for the System page. OS / Python / host identity from stdlib; CPU / memory / disk / uptime from psutil when available, with graceful degradation when it isn't. Read-only and non-sensitive (no env values, no paths beyond the hermes home root). rN)rrrr)archrdpython_version python_implhermes_version cpu_count)r availableusedpercentrz)rr freer disk皙?rO cpu_percent getloadavgload_avguptime_seconds)rrss create_time num_threadsprocessTpsutilF)&r-rrrrmachinenoderpython_implementationrrvrrvirtual_memoryrr r r  disk_usagerrr r\rrr boot_timerr}Processr memory_inforrrrrr) _platformrRrvmdulabootprocs rVget_system_statsr& s!  "##%%%'%%'$--/   !!#NN$#224 668%\\^ D 2  " " $XXGGzz  X ""3'8#9:B:: DL "("4"4c"4"BD t4B#':Z  ##%D%(t);%>#Dxx'')--"4#3#3#56#//1 DOX KE              X #BMMO4D  K(   K  sB%J!(AI/AH7H'<3H60A!IIJ! H$!I#H$$I' H30I2H33I6 I?III IIIIJ# JJ!JJJ!JJJ!z /api/curatorc TK ddlm} |j }t |ddt |dd t |d d|j d t |d dt |d dt |dddS#t$r}tdd|d}~wwxYw#t$ri}YwxYww)NrcuratorrYzCurator unavailable: r is_enabledT is_pausedFget_interval_hours last_run_atget_min_idle_hoursget_stale_after_daysget_archive_after_days)rpausedinterval_hoursr-min_idle_hoursstale_after_daysarchive_after_days)rer)r\r7 load_state _safe_callr)r)rrms rVget_curator_statusr8H sS!""$g|T:Wk59$W.BDIyy/$W.BDI&w0FM(2JDQ  S6KC54QRRS sEB(A6BAB(6 B?BBB( B%"B($B%%B(ceZdZUeed<y) CuratorPauser1NrrrrrrrXrVr:r:]  LrXr:z/api/curator/pausedcKddlm}|jt|jdt|jdSw)Nrr(T)rr1)rer) set_pausedrr1)rjr)s rVset_curator_pausedr?a s4 tDKK()$t{{"3 44sAAz/api/curator/runcK tddgd}d|jdd S#t$r}tdd|d}~wwxYww) zDTrigger a curator review now (backgrounded; tail via action status).r)r/ curator-runrYzFailed to run curator: rNTrrrS_spawn_hermes_actionr\r7rr%rs rV run_curatorrFi sXU#Y$6 Ftxx ?? U6McU4STTU"A"A A;AAz/api/learning/graphcK ddlm}t|5|cdddS#1swYyxYw#t$r#tj dt ddwxYww)zLearning graph payload for the desktop panel. Profile-scoped view of learned, non-base skills plus memory chunks, with graph links derived from skill relations and memory-skill overlap. r)build_learning_graphNzGET /api/learning/graph failedrYzFailed to build learning graphr)agent.learning_graphrIrr\rQ exceptionr7)rrIs rVget_learning_graphrLs s\V= G $ *') * * * V 784TUUVs2A!2& 2A!/2A!2,AA!c,eZdZUeed<dZeeed<y)LearningNodeRefrNrrrrXrVrNrN s G!GXc]!rXrNc6eZdZUeed<eed<dZeeed<y)LearningNodeEditrrNrrrrXrVrPrP s G L!GXc]!rXrPz/api/learning/nodercKddlm}t|5||}dddjdst d|jdd|S#1swY9xYww) zXCurrent content of a journey node (skill SKILL.md or memory chunk), for an edit prefill.r) node_detailNrrr4 not foundr)agent.learning_mutationsrRrrr7)rrrRress rVget_learning_noderV sX5  "o 774=CGGI{4STT J sA! A8A!AA!cKddlm}t|j5||j}dddj dst d|j dd|S#1swY9xYww) uMDelete a journey node — skills are archived (restorable), memories removed.r) delete_nodeNrrr4z delete failedr)rTrXrrrrr7)rjrXrUs rVdelete_learning_noderY sa5  %#$''"# 774=CGGI4WXX J ##sA5A)8A5)A2.A5cKddlm}t|j5||j|j }dddj dstd|j dd|S#1swY9xYww) zC77Dcftjdk7rtjStj}|jj dr^t j jt j j|d}t j j|r|S|S)z=Prefer pythonw.exe for detached dashboard actions on Windows.r'z python.exez pythonw.exe) r,r- executablerr_rvrjoindirnameisfile)exepythonws rV_dashboard_spawn_executablerw sp ||w~~ ..C yy{L)'',,rwws3]C 77>>' "N JrX subcommandct|}tjddt|z }t|dd}|j d|dt j dd jtd d g|}itjd d i}|jddtttj|tj |d}t"j$dk(rt'|d<nd|d<tj(|fi|}|j+t,j|dt/|t0|<|t2|<|S)zSpawn ``hermes `` detached and record the Popen handle. Uses the running interpreter's ``hermes_cli.main`` module so the action inherits the same venv/PYTHONPATH the web server is using. TrWrrrrz started rr-mzhermes_cli.mainHERMES_NONINTERACTIVErh_HERMES_GATEWAYN)rstdinr1stderrrr'r(start_new_session)rrrZrrr}rrrrvrrPrrqr.DEVNULLSTDOUTr,r-r Popenrrtuplerr) rrSrrrcmd action_env popen_kwargsr%s rVrDrD sH &d+M$6.HHda0H NN i .A BC6JQQS ' ($0A OJ OC>BJJ= 7=JNN$d+< #### $L ||w(<(> _%,0 ()   C 0< 0D NNd#":.TM$ KrXrc8|dks|jsgS |jj}|dkrgSt d|t z }|}t }d}g}d} |jd5} ||kDr~||kryt|||z } || z}| j|| j| } |j| || jdz }t|dzt}||kDr||kry|dkDr(| j|dz | jddk7}ddddjt|j!d d j#} |r| r| dd} | | dS#t$rgcYSwxYw#1swYbxYw#t$rgcYSwxYw) zBReturn the last ``n`` lines of ``path`` without loading huge logs.rFrrr$rNrXrrr)r{rrIrr\_ACTION_LOG_TAIL_MAX_BYTES$_ACTION_LOG_TAIL_INITIAL_CHUNK_BYTESrrseekrfrr _ACTION_LOG_TAIL_MAX_CHUNK_BYTESrreversedrN splitlines) rrr min_offsetoffset chunk_size newline_countchunksdrop_partial_first_liner read_sizerrs rV _tail_linesr sAvT[[] yy{"" qy Q99:J F5JMF# YYt_ B:%-1*< FZ,?@ )# F# I. e$U!33  N4 :%-1*<z FQJ'*0++a.E*A' B& &!"   *  5ab  !:M   B B  sBE.F -BE?1-E?F . E<;E<?FF FFverbc"t|d|gzS)Nr)_profile_cli_argsrrs rV_gateway_subcommandr s W %D(9 99rXc>djdgt||S)Nrhermes)rrrs rV_gateway_display_commandr s! 88XC 3GT BC DDrXz\d+:[A-Za-z0-9_-]{30,}z\d+z[UW][A-Z0-9]{2,} platform_idrc|sy|dk(r|dk(r"tj|s tdd|dk(r\|jdDcgc]#}|j s|j %}}t d |Dr tdd y|d k7ry|d k(r|j d s tdd|dk(r|j ds tdd|dk(rv|jdDcgc]#}|j s|j %}}|Dcgc]}|dk7rtj|s| }}|r tddyycc}wcc}wcc}w)z@Reject platform credentials that are clearly in the wrong field.NrsTELEGRAM_BOT_TOKENruWTelegram bot token must be the complete token from @BotFather, such as 123456789:ABC…rTELEGRAM_ALLOWED_USERSrc3HK|]}tj| ywr)_TELEGRAM_USER_ID_RE fullmatch)ruser_ids rVrz0_validate_messaging_env_value.. sW7+55g>>Wrz@Telegram allowed users must be comma-separated numeric user IDs.slackSLACK_BOT_TOKENzxoxb-zTSlack Bot Token must start with xoxb-. Paste the bot token from OAuth & Permissions.SLACK_APP_TOKENzxapp-zkSlack App Token must start with xapp-. Paste the app-level token from Basic Information > App-Level Tokens.SLACK_ALLOWED_USERSrzKSlack allowed user IDs must be comma-separated member IDs like U01ABC2DEF3.)_TELEGRAM_BOT_TOKEN_RErr7rrrr_SLACK_MEMBER_ID_RE)rrrruser_idsrinvalids rV_validate_messaging_env_valuer s j & &/E/O/OPU/Vp  * *16S1ARTZZ\ RHRWhWW# #] g (8(8(Ai   (8(8(AA   ##.3[[-=NTDJJLNN$ #~&9&C&CG&L   d  $+S2O sEE6E E$#E$ct|d}tjd}|D|j4tjd}||t |k(r|dfSt dt|ddfS)aSpawn ``hermes gateway restart``, reusing an in-flight restart. Multiple dashboard paths can request a restart in quick succession (restart button double-click, or a stale cached frontend firing its own restart after the server already auto-restarted post-onboarding). Two concurrent ``hermes gateway restart`` children race each other on the manual kill-and-start path, so reuse the live one instead. Returns ``(proc, reused)``. restartrTz7gateway restart already in progress for another profileF)rrrpollrrrrD)rrexistingexisting_commands rV_spawn_gateway_restartr!s%Wi8J  !23H  7+//0AB  #'75;L'LT> !TUU  ,= > EErXc t|\}}|r tj d|j dd|j dS#t$r-}tjddt |dcYd}~Sd}~wwxYw) z@Best-effort gateway restart after enabling the webhook platform.z6Failed to auto-restart gateway after enabling webhooksFrestart_started restart_errorNz:Webhook enable: reusing in-flight gateway restart (pid %s)Trrrestart_action restart_pidrr\rQrKrrRrrr%reusedrs rV%_restart_gateway_after_webhook_enabler6s| -g6 f H HH  +xx    OP$ X   A A8 "A3-A83A8z/api/gateway/restartcK t|\}}d|j ddS#t$rt$r*}tj dtdd|d}~wwxYww) z8Kick off a ``hermes gateway restart`` in the background.zFailed to spawn gateway restartrYzFailed to restart gateway: rNTrrB)rr7r\rQrKr)rr%_reusedrs rVrestart_gatewayrLsuY.w7 gxx!   Y 896QRUQV4WXXYs$A!"A!A%AAA!z/api/gateway/drainc xKddlm}m}m} |j d{}t |xsijddjj}t|jdd}t|ddxsd}|d k(r$|}tjd ||d d |d S|dk7rtd d|d|t |t|xsijdd} tjd|| dd d| d|| ddS7#t $ri}YwxYww)uKBegin or cancel an external (NAS-driven) gateway drain. Authenticated by the non-interactive token-auth seam: the ``dashboard_auth/drain`` plugin registers this exact path as a token route and verifies the ``Authorization`` bearer secret. If that plugin isn't active (no ``HERMES_DASHBOARD_DRAIN_SECRET``), the route is NOT a token route, so on a gated bind the cookie gate handles it (a browser session can still drive it from the dashboard) and on a loopback bind the legacy session-token gate applies — either way it is never unauthenticated on a network-exposed bind. Body: ``{"action": "drain"}`` (begin) or ``{"action": "cancel"}`` (cancel). Begin writes the ``.drain_request.json`` marker the gateway's ``_drain_control_watcher`` observes (flip to ``draining`` + refuse new turns); cancel removes it (revert to ``running`` + re-accept). Idempotent on both sides. This endpoint only writes/removes the marker — the gateway process owns the actual state transition (there is no HTTP control channel into the running gateway; the marker IS the channel, decisions.md Q-B). The force-override (D6: "unless a user commands it") is NOT here — an immediate, drain-skipping action maps onto the existing ``POST /api/gateway/restart`` force path, which supersedes a drain. r)clear_drain_requestdrain_requestedwrite_drain_requestNactiondraintoken_principal principalrmr~z1Gateway drain CANCEL requested by %s (existed=%s)T)rr was_drainingrzUnknown drain action z; expected 'drain' or 'cancel'rsuppress_notificationF)r r z>Gateway drain BEGIN requested by %s (suppress_notification=%s) requested_at)rrr drainingr )gateway.drain_controlrrrrdr\rrrrrrmrQrRr7r) rrrrrjr principal_objr existedrs rV gateway_drainr]s[2 \\^#$*"!!(G4 5 ; ; = C C EFGMM+>Q I%'JJ))+ D::<ZZ'*;;Ra@E', $C&" KKr7&$bgA,     sA C A9C CCz/api/hermes/update/checkr<c>KtrdtddddddStt}t |}|tdd|dv|dd}|dk(rt |d <|S d d lm}|r td z jtj|d{}||d<|d|d <|S|d k(rd|d <|Sd|d<|dvr$tjt d{|d<|S#t$rYqwxYw7\#t$rtjd d}Y|wxYw7@w)u}Report whether a Hermes update is available, without applying it. Powers the dashboard's "check before you update" flow: the System page shows the commit-behind count and asks the user to confirm before ``POST /api/hermes/update`` actually runs ``hermes update``. Returns: install_method: 'git' | 'pip' | 'docker' | 'nixos' | 'homebrew' | ... current_version: installed Hermes version string behind: commits behind upstream (>=1), 0 if up to date, -1 if behind by an unknown count (nix/pypi), or null if the check could not run (offline, no remote, etc.) update_available: convenience bool (behind is non-zero and not null) can_apply: True when the dashboard's update button can apply it in place (git/pip); False for docker/nix/homebrew where the user must update out-of-band update_command: the recommended command for this install method message: human-readable guidance for non-applyable methods commits: for git/pip installs that are behind, a list of the commits the local checkout is behind upstream by — each {sha, summary, author, at}. Absent/empty otherwise. The desktop's remote update overlay renders this as "what's changed". Additive: existing consumers ignore it. zmanaged-runtimeNFrzPHermes updates are managed outside this dashboard in containerized environments.)rcurrent_versionbehindupdate_available can_applyrr4)r)pipr+r4r)check_for_updatesz .update_checkzUpdate check failedr&u5Couldn't reach the update source — try again later.zYou're on the latest version.Tr'commits)rrrr"rqr$r#hermes_cli.bannerr*rrrrorr\rQrKr#)r<rrrr*r&s rVcheck_hermes_updater-so423/* %9.  +<8N:>JN)&!#~5(G!9;  7   "_4<<>(():;; GH ~T  N 1<  N'+"# ^ +'.'8'89Q'R!RGI  N+  <  ,-"SsfADC5#C$>C5C3C5?DD D$ C0-C5/C00C55 DDDDz/api/audio/transcribecK|jxsdj}|jdrd|vr tdd|j dd\}}d|vr tdd |j xs|d dj d dd xsd j}|j d dd j }|jds|dk(s tdd tj|d}|s tddt|tkDr tddd} t|}tj d|d5} | j#|| j$}dddd dlm} t+j,} | j/d| |d{} |r t7j8|| j=ds td| j=dxsd dt?| j=d!xsdj| j=d"d#S#tjtf$rtddwxYw#1swYxYw7#t$rt0$r*} t2j5dtdd| d} ~ wwxYw#t:$rYwxYw#|r& t7j8|w#t:$rYwwxYwwxYww)$NrrErrzInvalid audio payloadrrrz$Audio payload must be base64 encodedrrrrzaudio/rz"Payload must be an audio recordingTrz!Audio payload is not valid base64zAudio recording is emptyrBzAudio recording is too largezhermes-desktop-voice-F)rrdelete)transcribe_audioz"Desktop voice transcription failedrYzTranscription failed: successrzTranscription failed transcriptrU)rr2rU) rrrr7rrrrKrrrrr_MAX_TRANSCRIPTION_UPLOAD_BYTESrrNamedTemporaryFilerrSrr0rorrur\rQrKrvrrrr)rrrrOrnormalized_mime_type audio_bytes temp_pathrrr0rr3rs rVtranscribe_audio_uploadr8\s  &B--/H   w '3h+>4KLLnnS!,OFG$J  HVABZ--c15a8HL eg%??3215;;=''1 < /$H  Y&&w>  4NOO ;994RSSI*95  ( (*  ! IIk "I  ! ?'')++D2BINN   )$ ::i ::g&@*@  &**\28b9??AJJz* S NNJ 'Y4WXXY ! !O  T ;<6LSE4RSST     )$   sC%K*(H7?0K*0#I/I!18I/)I-*I//K*2J.A0K*7'IK*!I*&I//J+%J&&J++J=. J:7K*9J::K*=K'KK' K# K'"K##K''K*ceZdZUeed<y)TTSSpeakRequestrNrrrXrVr:r:rrXr:r}ct|jdxs|jdxsdj}t|jdxsdj}|r|d|dS|S)NrSvoice_idVoicer'r ())rrr)r}rSr's rV_elevenlabs_voice_labelr@sl uyy DEIIj$9DW E K K MD599Z(.B/557H%-dV2hZq !747rX_voice_list_last_error signaturec&|day|tk(ry|ay)zReturn True if ``signature`` is new and should be logged now. Passing ``None`` clears the latch (call on success). Idempotent per signature: the same error logs once until it changes. NFT)rA)rBs rV_voice_list_error_logged_oncerDs(!%**& rXz/api/audio/elevenlabs/voicesc Ktjdxs#tjjdxsdj }|sdgdSt j jdd|d tj}d tttfffd }|jd |d {}t#d g}|jdxsgD]|}t/|t0st|jdxsdj }|sC|j3|t|jdxs|t5|d~|j7dd|dS7#t jj$r}|j d vr9t#d |j rt$j'd|dgddcYd }~St#d |j rt$j)d|t+ddd }~wt,$r<}t#t|rt$j)d|t+ddd }~wwxYww)zReturn ElevenLabs voices when an API key is configured. The desktop UI uses this for the ``tts.elevenlabs.voice_id`` dropdown. Only non-secret voice metadata is returned; the API key stays server-side. ELEVENLABS_API_KEYrF)r voicesz#https://api.elevenlabs.io/v1/voicesapplication/json)Acceptz xi-api-keyrrKctjjd5}tj|j j dcdddS#1swYyxYw)NrrZr)r`rrardrerfrN)responsers rV_fetchz%get_elevenlabs_voices.._fetchsR'''< Czz(--/"8"8"AB C C Cs 2AA(Nrr zhttp-u>ElevenLabs voices unavailable: %s — check ELEVENLABS_API_KEY unauthorized)r rGrz ElevenLabs voice list failed: %srz Could not load ElevenLabs voicesrrGr<rS)r<rSrgcZt|jdxsdjS)Nrgr)rrrrs rVrz'get_elevenlabs_voices..s"TXXg%6%<"!=!C!C!ErXrT)rrrvrrr`rr8rorr rr rur HTTPErrorcoderDrQrRwarningr7r\rrrr@r) rrrMrrrGr}r<rs @rVget_elevenlabs_voicesrTs&z~~23arzz~~FZ7[a_ahhjG "b11nn$$-(! %GX'') CS#X C,,T6::*"$' FX&,"  %& uyy,2399;    &)5X6,U3     KKEKF 00O; << ! !X 88z !,uSXXJ-?@ TVY"'"~N N (5 ); < LL;S A4VWW X (S 2 LL;S A4VWWXs]A8I(>E<?E>B9I(<E>>I%AHI%I(";H I%)7I  I%%I(z/api/audio/speakcK|jxsdj}|s tdd ddlm}t j }|jd||d{} t|trtj|n|}|jd s td|jd xsd|jd}|rt j"j%|s td dt j"j'|dj)}ddddddj|d} t+|d5} | j-} ddd t!j0|t3j4 j7d} dd| d| | |jddS7a#t$r*}tjdtd d |d}~wwxYw#t$rtd d wxYw#1swYxYw#t.$r}td d|d}~wwxYw#t.$rYwxYw# t!j0|w#t.$rYwwxYwxYww)aDSynthesize speech and return audio as base64 data URL. Used by the desktop voice-conversation mode to play back assistant responses without exposing the on-disk file path. Reuses the existing TTS provider chain (Edge / OpenAI / ElevenLabs / etc.) configured in ``~/.hermes/config.yaml`` under ``tts.``. rrzText is requiredrr)text_to_speech_toolNzDesktop voice TTS failedrYzSpeech synthesis failed: zInvalid TTS responser1rzSpeech synthesis failed file_pathzAudio file missingrrrrr )r r rr rrzCould not read audio: rDTrErFrU)rrrrU)rrr7rrVrorrur\rQrKrrrdrerrvrrsplitextrrrfrrrKrLrN) rrrVr result_jsonrr3rWrrfhr6rOs rV speak_textr[ si LL B % % 'D 4FGGW6'') 007JDQQ L,6{C,HK(k ::i ::g&C*C   ;'I BGGNN954HII ''  9 %a ( . . 0C   c#|   )T " $b'')K $   IIi {+227;GI;hwi8JJz*  SR W 126OPSu4UVVW L4JKKL. $ $ T6LSE4RSST      IIi    s.I;0G!G"G''G;B8I; H!H$H!-IAI;G G8%G33G88I;;HI;HH!! H?*H::H??I I I; II;I8I)(I8) I52I84I55I88I;z/api/actions/{name}/statusrc dKtj|}|tdd|t|z }t |t t |dd}tj|}|Btj|}d}|r|jdnd}|r|jd nd} nm|j}|du}|j} |K |jd || d t|<tj|dtj|d|||| |d S#t$rYKwxYww) zCTail an action log and report whether the process is still running.NrzUnknown action: rrFrrrZr)rSrrrr)rrr7rrrr\rrrrwaitr\rPr) rSrrrtailr%r3rrrs rVget_action_statusr`Ls:&))$/M6Ftf4MNN.H xS]D!9 :D   T "D | $$T*/5FJJ{+4 #)fjjtIIK t#hh    ! $3.Ws"aeeHoI|1DIrXrreverse)rrprofile_totalsrqrr)r7rzrnr]rr}r list_profilesrSrr\rQrKget_profile_dirr\rrrr}r r{rr|rrrrrre)#rqrrfrgrhrrrirHrn profiles_modtargetsrSr9infosrRrurwrv source_filterrxr per_profilerrrrryrrrr" profile_totalwindowrs# @rVget_profiles_sessionsrs0554eff ))4[\\&3&(G7e#'0 dd|$  ..0E:?@$ 499-@G@ NNI|'C'CI'NO PA|,&M9,NdM / 52< *F  ((  ]A  NNM NG P&  MMdSX> ?  F @ MMdSX> ? ? @ HHJsyJ 0JJ (J3>J3" J8-C K,6LJ J0/J08 K)K$$K), L5LLLLL1z/api/profiles/sessions/sidebarrecents_profile recents_limitrecents_exclude cron_limitmessaging_limitmessaging_excludec !ddlm}ddlm} |j }|D cgc]} | j | j f} } | s"| jd|jdf|xsdjxsd} |xsdjdD cgc]} | js| } } |xsdjdD cgc]} | js| }} tt|d d }tt|d d }tt|d d }g}g}g}d}i}g}t!j !d t"t$t&t(fd t&d t"t$t&t(ff!fd }dddd}| D]\}}t+|dz }|j-s% ||d} | dk(s|| k(rE|j/|||| |||j1| xsdd ddd}||z }|||<|j/|||d|||j/|||||||j3d t"t$t&t(fdt4d t"t$t&t(ffd} | ||||dd| ||i| ||t7|d|d Scc} w#t$rtjdg} YwxYwcc} wcc} w#t$r(}|j|t'|dYd}~d}~wwxYw#t$r(}|j|t'|dYd}~d}~wwxYw#|j3wxYw)!uBatched sidebar session slices — one profile-DB open per refresh. The desktop sidebar needs three source-scoped windows per refresh: recents (local chats, scoped to the active profile), cron sessions (all profiles), and messaging-platform sessions (all profiles). Served as three separate ``/api/profiles/sessions`` calls they reopened every profile's ``state.db`` three times and re-counted each refresh. This opens each DB once and runs the three filtered queries together, returning the three windows in one payload. Read-only and process-light, same row projection and 300s active heuristic as ``/api/profiles/sessions``. The caller passes the source taxonomy (``recents_exclude`` / ``messaging_exclude`` CSV, ``source=cron`` is implicit) so this stays taxonomy-agnostic like the per-slice endpoint. All three slices use ``min_messages=1`` / ``archived=exclude`` / recency order, matching the desktop's per-slice calls. rrrz8GET /api/profiles/sessions/sidebar: list_profiles failedr?rrrrrYr"rSrKc |D]l}||d<|dk(|d<|jdduxr(|jd|jddz dk|d <t|jd |d <n|S) Nrr?r{rtrurvrrwrzrg)rr)r"rSrxrys rV_tagz+get_profiles_sessions_sidebar.._tags 4AAiL&*i&7A" #j!T)O155lA0FGG3N kN!z!23AjM 4 rXN)rrmc >|j||xsd|dddddd S)NrrFTr)r|)rrrmcaps rV_slicez-get_profiles_sessions_sidebar.._slices9$$#Ot"!%%  rXrTrr)rmrF)rirurvrwryrg)rrrcN|jdd|d|}t||S)NcR|jdxs|jdxsdS)Nrurvrrrxs rVrz@get_profiles_sessions_sidebar.._window..s"m 4 Pl8K PqrXTr)rre)r"rwins rV_windowz.get_profiles_sessions_sidebar.._windows, PZ^ _4Cj % rX)rrrr)rr)recentsrg messagingr)rzrnr]rrrSrr\rQrKrrrrrr\r}rr rr r r{rrrrr)"rrrrrrrnrrrRr recents_scoperxrecents_exclude_listmessaging_exclude_list recents_capcron_cap messaging_cap recents_rows cron_rowsmessaging_rows recents_totalrecents_profile_totalsrrrrSr9rrrrtotalrrys" @rVget_profiles_sessions_sidebarres4'3**,NS*TdDIItyy+A*T*T  <#?#? #JKL$-446?%M(7(=2'D'DS'IW!QWWYAWW*;*Ar)H)H)M[AQRQXQXQZa[[c-+S1K3z1%s+HOQ/5M)+L&(I+-NM-/#%F ))+C 4S#X' s tDcN7K "4   dt*z)~~  7d;B %)>##,@kRTXY))$8$@D&'%*"'%) *' /5&t,   T&F"I4P Q  ! !VB(>MRTXY  HHJ=@d4S>*d38n9M k:"4 WY9: >(   k+U  QRX[X  MMdSX> ?  * @ MMdSX> ? ? @ HHJs}KKKK=-K= L L7 LBL;K K:9K: L8L33L8; M,M'!M/'M,,M//Nz/api/sessions/searchqc vK|r|jsdgiS t| tdtt |xsddidt dt ffd idt dt ffd id t d t dd ffd }j|dD]{}|jd}|jdxsdj}|xsd|}|||d |jd|jd|jdd}dd l }g} |jd|jD]J} | jds| jdr| j| 7| j| dzLdj| } tdzd} j| | } | D]p}t!k\rn`||d|jd d|jd!|jd|jd|jd"drdt#j%ij'S#j'wxYw#t($rt*$r#t,j/d#t)d$d%&wxYww)'aSSearch sessions by ID plus full-text message content using FTS5. Direct session-id matches are surfaced first, then FTS message-content matches. Results are deduped by compression lineage, not by raw ``session_id``. Auto-compression rotates a conversation onto a fresh session id (and leaves the old segment's messages in the FTS index), so one logical chat can own many ``sessions`` rows that all match the same query. Branches also use ``parent_session_id``, but they are real alternate conversations; don't collapse branch-specific hits back into the parent. resultsrd session_idrKc\|s|S| vr |Sg}|}t}|}|r||vr|j||j|| vr |}n j|}|s|}nt |t r|jdnd}|s|}nn j|}|s|}nW|jd}|jd} |jddk(xr|duxr | duxr| |k\} | s|}n |}|r||vr|D]} | | < |S#t$rd}YwxYw#t$rd}YwxYw)Nparent_session_idrtrv end_reasonr{)rrr get_sessionr\rrr)rchaincurvisitedr<rxrparent_sessionparent_ended_atrvis_compression_edgerr root_caches rVcompression_rootz)search_sessions..compression_roots!%%+%j11 %!c0KK$LL%j()#!NN3/";Ea;NQUU#67TXF!".)+)?*"&4&8&8&DO!"|!4J&**<8MI:+47:&d2:'/9 ( /" CGc0H",D'+Jt$, =%! !%.)-.s$D D DD D+*D+root_idcr|vr|S|} j|}|r|}||<|S#t$rYwxYwr)get_compression_tipr\)rtipr[r tip_caches rV lineage_tipz$search_sessions..lineage_tip6s]i'$W--!55g>H&&) '" !s * 66raw_sidrNc|sy|}|vstk\ryt|}||d<||d<||<y)Nr lineage_root)rr)rrr<rr safe_limitrs rVadd_lineage_resultz+search_sessions..add_lineage_resultIsS'04<3t9 #:w-(3D(9 %*.'$T rXT)rqrvrpreviewrz Session ID: rr#rv)snippetrolerr#session_startedrz "[^"]*"|\S+"rrrrp)queryrqrrrzGET /api/sessions/search failedrYz Search failedr)rr~r\rrrrsearch_sessions_by_idrrfindallrr_rrsearch_messagesrrrrr7r\rQrK)rrqrrrowsidrrrtermsr prefix_query fetch_limitmatchesmrrrrrrrs @@@@@@@rVsearch_sessionsrs AGGI2SE )' 2L QC $4c :;J "J/ S/ S/ b!I S S "D %C %$ %4 % %//VZ/[ ggdm779-3::<!9|C5%9"#* $"%''("3!$!1+.77<+@   $ E#NAGGI> .##C(ENN3,?LL'LL-  . 88E?Lj1nb1K((|;(OG t9 *"lO#$55B#7 !f "#%%/!"w+,551B+C   tDKKM23 HHJBHHJ  E 89ODDEs4J9 JH.I,J+J9,I>>J5J66J9ct|}|jd}t|trP|jdd}|jd|jdd|d<t|tr|nd|d<|Sd|d<|S)aNormalize config for the web UI. Hermes supports ``model`` as either a bare string (``"anthropic/claude-sonnet-4"``) or a dict (``{default: ..., provider: ..., base_url: ...}``). The schema is built from DEFAULT_CONFIG where ``model`` is a string, but user configs often have the dict form. Normalize to the string form so the frontend schema matches. Also surfaces ``model_context_length`` as a top-level field so the web UI can display and edit it. A value of 0 means "auto-detect". r#rrr?rSrr()rrrr)r model_valctx_lens rV_normalize_config_for_webrs&\F 7#I)T"-- 0!4#-- 9==3LMw4>w4LRS%& M*+%& MrXfieldc8|j|j|j|j|j|j |j |j|jDcgc]&}|j|j|jd(c}d Scc}w)zBStatic, storage-independent shape of one field for the UI payload.rrgr") rrgrr"rR placeholderinlinerr) rrgrr"rRrrrrr)ropts rV_provider_field_entryrs~yy (( ((,,}} ii#))COO T    s'+B_UNSETrc|xsdj}|j}|dk(r;|s |j}||jvrt d|j d|S|dk(rddlm}||S|dk(r1|stS t|}|jr t|S|S|d k(rO|stS tj|}t|t t"fst d|j d |S|r|StS#t$r}t d |j d|d }~wwxYw#ttf$r}t d |j d|d }~wwxYw)aCoerce a submitted non-secret value to its native JSON type. Values arrive as strings over the API; this converts them to the type the Honcho resolver expects (bool/number/list/dict), so e.g. a boolean is stored as a JSON ``false`` rather than the string ``"false"`` (which would read as truthy). Returns ``_UNSET`` when the field should be removed. Raises ``ValueError`` on malformed input. rr Invalid value for ''rris_truthy_valuer)zInvalid number for 'NrdzInvalid JSON for 'z ' must be a JSON object or array)rrr?allowed_valuesrrutilsrrr is_integerrrdrerrrr)rrrrrr)rrs rV_coerce_field_valuerstYB   E ::D xMME ,,. .2599+Q?@ @  v~)u%% xM K5\F%//1s6{=v= v~M IZZ&F&4,/q +KLM M 5%v%! K3EII;a@As J KI& I1%))A>?S H Is0 D8D3 D0D++D03E!EE!c| |jS|jdk(rddlm}||rdSdS|jdk(r6t |t t frtj|St|St|S)ueRender a stored native value as the string the generic UI edits. ``None`` (key absent) yields the field's declared default. Bools become ``"true"``/``"false"``, JSON objects/arrays are re-encoded, numbers are stringified — so the renderer's per-kind controls always get the shape they expect regardless of how the value sits on disk. rrrtruefalserd) r?rrrrrrrddumpsr)rrrs rV_serialize_field_valuersq }}} zzV)(/v=A>sourcesrc|D]4}|jg|jD]}||vs||||ccS6|jD]}|j|}|s|cSy)zReturn the stored native value from the first source holding it, or ``None``. Presence (``key in source``) decides, not truthiness, so a stored ``False`` or ``0`` survives instead of being mistaken for "unset". N)raliases env_fallbacksr)rr rr source_keyenv_keyrs rV _read_fieldrs* 995u}}5 *JV#z(:(Fj)) **&&  L rXcjgjD]}|s|j|sytfd|DS)NTc3~K|]4}jgjD]}|j|6ywr)rr r)rrrrs rVrz)_declared_field_is_set../s5XUYYLazily import the Honcho plugin's resolvers (optional plugin).r _host_blockresolve_active_hostresolve_config_path)plugins.memory.honcho.clientrrrrs rV_honcho_resolversr5scb  3[ @@rXc8t\}}}|}|}i}|jr: tj|j d}t |t r|ni}|||||fS#t$rtjd|dY/wxYw)zJReturn (root config, active host key, host block) for the current profile.rr$Failed to read Honcho config from %sTr:) rr{rdrerrrr\rQrS)rr host_block_ofrrrloadeds rV_honcho_read_sourcesr =s?P>Q;,m  D  DC {{} VZZ @AF&vt4&"C mC. .. V LL?PTL U Vs9A55!BBc g}t}|jtk(}|r"t\ } dtdt f fd }nd}t | dtdt f fd }|jD]}t|}||}|jr'd|d<t||||d<|j|It|||} |r|js|jdvr||d <t|| } |j d k(r| |j#vr |j$} | |d<|r| dun t'| |d<|j||j(|j*|j,|d S) NrrKc0|jdk(rfSfSNrr)r host_blockrs rV sources_forz/_declared_provider_payload..sources_forUs (- v(=J$ IC6 IrXrc fSrr)rrs rVr&z/_declared_provider_payload..sources_for[s 7NrXris_set>aiPeer workspacerr rSrgdocs_urlr)rstorager*r r)rr rr is_secretrrrrrrrrr?rrSrgr,)rUrr is_honchorr&rrr nativerrr%rs @@@rV_declared_provider_payloadr1Msq#%F *C  $==I 4 6T: J} J Jx( }  %e,e$ ??E'N4UGSIE(O MM% UGS1 U..599@W3W#'E- &uf5 :: !e53G3G3I&IMMEg09&,tE{h e+.MMHNNHYHYek llrXrcL|jD]}|js|j|vr||}t|||j}|tur@|j |jd|j D]}|j |d|||j<y)aApply submitted non-secret fields to their backend dict, in place. Only keys present in ``values`` are touched, so a partial save never clobbers fields owned by another surface. ``_UNSET`` clears the key (and its aliases) so it falls back to the host/default mapping. N)rr.rrrrPr )rUr target_forrrjcoercedaliass rV_apply_field_valuesr6xs ( ??eiiv5 E"%eVEII->? f  JJuyy$ ' ( 5$' (!(F599  (rXcddlm}t||jD]b}|js|j |j xsdj}|s@|jsMt|j|dt||fdt|}|jjdd||dy) Nratomic_json_writercSrr)rrs rVrz&_write_provider_flat..srXTrWr)rr9r rr.rrrrrr6rrrZ)rUrr9r submittedrrs @rV_write_provider_flatr>s'x(H9 ??EII.4";;=IU]]u}}i8 9 &*@A 8 $DKKdT2dH51rXcBddlm}m}ddlm}t \}}}|}|} || 5i| j r: tj| jd} t| tr| nijd } t| tr| nixd <} ||r#t!fd | j#D|n|} | j%| |j&D]} | j(s|j| j*xsd j-}|s@| j.rt1| j.|j| j*}t|t2r|j5|r|| j*<t7||fd | j8j;dd || ddddy#t$rtjd| dYwxYw#1swYyxYw)a+Persist submitted fields to Honcho's real config for the active host. Only keys present in ``values`` are touched, so a partial save (e.g. the inline panel) never clobbers fields owned by the full-config editor. Blank text clears a key so it falls back to the host/default mapping. r)ACCESS_TOKEN_PREFIX_config_refresh_lockr8rrrTr:hostsc32K|]\}}|us |ywrr)rrrrs rVrz)_write_provider_honcho..sFtq!X Fs rc*|jdk(rSSr#r$)rrr%s rVrz(_write_provider_honcho..s%++Y_J_JehrXrWr;r<N)plugins.memory.honcho.oauthr@rArr9rr{rdrerrrr\rQrSrrrrrr.rrrrrrr6rrZ)rUrr@rAr9rrrrrrrBhost_keyrr=storedrrr%s @@@rV_write_provider_honchorHsV'>O>Q;,m  D  D d # 1  ;;= ZDNNGN$DE *64 8fb (25$(?uRGG u d+QY4Fu{{}FM_c%%h9 __ 2E??EII.4";;=I}}u}}i8^^EII.Fvs+0A0ABU0V(1 599% 2 Hf.hi $6$%0A 1 1  Z CTTX Y Z 1 1s7H 9G-DHA H-!HHHHHc$i}|jD]z\}}|d||<t|tr|||<$t|tr |rdnd||<>t|tt frt j|||<mt|||<||S)zGThe declared-schema path edits strings; the dashboard may send natives.rrr)rrrrrrrdr)rr;rrs rV_stringify_submitted_valuesrJsClln " U =CH s #CH t $!&vGCH d| ,zz%(CH5zCH " JrXc2|jtk(r t||n t||t }|j d}t |tsi}||d<|j d|jk7r|j|d<t|yy)NrzrU) r-r*rHr>rrrrrSr)rUrr memory_configs rV_update_memory_provider_configrMs44x0Xv. ]FJJx(M mT * (x$ 5$,MM j!F6rXcb|jddjddjS)Nrr-)rrrSs rV_memory_provider_labelrQs) <<S ! ) )#s 3 9 9 ;;rXcft|xsdj}|jdvry|S)Nr>built-inrbuiltin)rrr)rSrUs rV_normalize_memory_provider_namerUs04:2$$&H~~:: OrXcn ddlm}||S#t$rtj d|dYywxYw)Nr)load_memory_providerz!Failed to load memory provider %sTr:)rrWr\rQr@)rSrWs rV_load_memory_providerrXs:7#D))  6t Ls !44cP ddlm}||}|iS|dz }|jsiS|jd5}t j |xsi}dddt tr|SiS#1swYxYw#t$rtjd|dicYSwxYw) Nr)find_provider_dirz plugin.yamlz utf-8-sigrz.Failed to read memory provider manifest for %sTr:) rrZr{rrrrrr\rQr@)rSrZ provider_dir manifest_pathrmanifests rV_memory_provider_manifestr^ s4(.  I$}4 ##%I     5 4~~f-3H 4%h5x=2= 4 4  CTTX Y s8A?A?A?A3A?1A?3A<8A??#B%$B%ct|tsgS|Dcgc]5}t|jst|j7c}Scc}wr)rrrr)rrs rV _string_listr`s= eT " */ E$3t9??3DCIOO  EE Es AAc(t|}g}|jdxsgD]}t|tst |jdxsdj t |jdxsdj t |jdxsdj d}|ds |ds|ds|j |t|jd|t|jdd S) Nexternal_dependenciesrSrinstallr&)rSrcr&pip_dependencies requires_env)rdrb required_env)r^rrrrrrr`)rSr]rbrdeps rV_memory_provider_setup_manifestrh"s(.H24||34: .#t$ -2.4463779-34::<)/R0668  v;#i.CL ! ( ( - .)6H)IJ!6$X\\.%AB rXc8t|}t||d<|S)Ndependencies_installed)rh'_memory_provider_dependencies_installed)rSsetups rV_memory_provider_setup_inform7s! +D 1E&Me&TE "# LrXrmem0hindsight_client hindsight)z honcho-aimem0aizhindsight-clientz hindsight-allrgcTtjd|ddjS)Nz [\[<>=!~;]r)maxsplitr)rrr)rgs rV#_memory_provider_dependency_packagertEs# 88M3 3A 6 < < >>rXcdt|}tj||jddS)NrOr)rt_MEMORY_PROVIDER_IMPORT_NAMESrr)rgpackages rV_memory_provider_import_namerxIs*1#6G ( , ,Wgooc36O PPrXcVt|}|sy t|y#t$rYywxYw)NFT)rx __import__rb)rg import_names rV_dependency_importabler|Ns4.s3K ; s  ((cPt|xsd}t||kr|S|d|dS)Nrz ... truncated ...)rr)rrqrs rV_trim_setup_outputr~Ys5 u{ D 4yE 6El^. //rXcRtjj}tj}|dz dz |dz dz |dz dz tdg}|j dd}tj jd|D}|r|tj z|z|d<|S) Nz.brv-clibinz.localz .npm-globalz/usr/local/binPATHrc3TK|] }|jst|"ywr)r{r)rrs rVrz-_memory_provider_setup_env..jsO4SYOs(()rvrcopyr r9rpathsepr)rr9 extra_bins existing_pathrs rV_memory_provider_setup_envr`s **// C 99;D zE! x% }u$  J GGFB'M ZZ__O:O OF rzz)M9F JrX)r completedrrcrrrc |||||dn |j|dnt|jt|xs|ddS|jdS)Nr)rrSrcrr0r1r)r0r~r1r)rrSrcrrrs rV_command_resultrpsl'/dY5I5I!)"/A)BRBR/S$U%]Y5Fr^ MVL\L\^ rX)rr[r[c Ttj|||rdndtdd|dS)Nz /bin/bashTF)rrrr%rr[r&)r.r/r)rrlrr[s rV_run_setup_commandrs4 >>"';T & (   rXrlc t|jd}|jdxsg}td|D}d}|D]}t|tst |jdxsdj }t |jdxsdj }|s|rd}s ttj||d }|jd k7sd}|xr|S#t$rd}YwxYw) Nrdrbc32K|]}t|ywr)r|)rrgs rVrz:_memory_provider_dependencies_installed..sI',IsTr&rrcFrrlr[r) r`rrrrrrrshlexrr\r0) rlrdrbpip_ok external_okrg check_cmd install_cmdrs rVrkrks #EII.@$AB!II&=>D" I8HI IFK$ #t$ (.B/557 #''),2399; #  * I&!I   1 $K' *  !k!  K  s:!C55 DD dependenciesc |Dcgc]}t|r|}}|sgS|stddj|dgStjd}|r>|dddt j dg|}d t j d d j|}n;t j d dddg|}t j d d j|} t||d }tddj||jdk(rdnd||gScc}w#t$r3}tddj|d|t|gcYd}~Sd}~wwxYw)Nr), already_installedrrSrcuvrcz--pythonz--quietzuv pip install --python rrz -m pip install rfailedrrSrcrrr installedrrSrcrr) r|rrrwhichr,rrr\rr0)rrgmissinguv_pathrrlrrs rV)_install_memory_provider_pip_dependenciesrse*Ns2H2MsNGN   TYY|-DM` a  ll4 G :s~~yc[bc,S^^,O=PQ>>4 9OwO^^$$4SXXg5F4GH  &wM  7#"+"6"6!";;   ;O$   YYw'#h      s(DDD E(E E Ec `g}|D]e}|jdxsd}|jdxsd}|jdxsd}|rw ttj||d}|jdk(r |j t d |d || |j t d ||rd nd || |s|s t||dd}|j t d||jdk(rdnd || |s|jdk(s ttj||d} |j t d || jdk(rdnd || h|S#t$r6}|j t d ||rd nd |t|Yd}~d}~wwxYw#t$r3}|j t d|d |t|Yd}~d}~wwxYw#t$r3}|j t d |d |t|Yd}~#d}~wwxYw)NrS dependencyr&rrcrrrexternal_checkrrrrrTrw)rlrr[external_installrverified) rrrrr0rrr\r) rrrgrSrrr&rrc post_checks rV._install_memory_provider_external_dependenciesrs_%'Gfwwv.,GGG$* ggi(.B $ *KK *% ##q(NN'!1!%#6$-&+ #-!,7yX )"'   ,' $ NN+*1*<*<*A;x'%  W//14!3 I. ) ""J NN'!1!%1;1F1F!1K:QY$-&0 ifP Ny #-!,7yX )!#h  V #/!' +!#h  L! NN'!1!%#+$-"%c(  sI !E0F2AG10 F/9,F**F/2 G.;(G))G.1 H-:(H((H-ct|}t|}||stdd|t|}g}|j t |d|j t |d|s|jtd|dtd |D}tDcic]}|d | }}||||j|d Scc}w) NrUnknown memory provider: rrdrbrlno_declared_stepsrc3*K|] }|ddv yw)rc>rNr)rr3s rVrz1_install_memory_provider_setup..cs FFVH Z / FsrS)rrUrrc) rXr^r7rhrrrrrr"_discover_memory_provider_statusesr)rSrUr]rlrrrstatusess rV_install_memory_provider_setuprMs$T*H(.H6OPTv4VWW +D 1EG NNrr`r?r`rrr"rgrrrrequiredFrwhenenv_var) rrgrr"rrr?rrr_env_key)hasattrrrrrr\rQrSrrrrrrrr)rSrU raw_schemarrrrr explicit_kindrrchoicerr"s rV!_normalize_memory_provider_schemarms~')J2E F ^,,.C#t$14P 5$8OeP P$&F% #''%.&B'--/ '')$@ (:@b'4(GCGGFODswwvD"EKKMSSU 778 D D 1 1Z @RTX5YDD PFKE NNUU2N O P#''-06B7  )JS[[c-B-H-H-JK&sww}5;<SWWZ78wwy"-swwu~+,'1#''&/4'HCGGFOdCGGI.4"5=  3% N MYQ ^ LLGX\L ] ^s($J*J% J%J*%J**!KKc|jsiS tj|jd}t|tr|SiS#t$rt j d|dicYSwxYw)Nrrz"Failed to read JSON config from %sTr:) r{rdrerr\rQr@rr)rrs rV_read_json_filersm ;;= zz$..'.:;dD)41r1  7 M s%A #A32A3ct}i}||dz ||z dz fD]}|jt| t}t |t r|jdni}t |t rY|j|}t |t r|j||jd}t |t ri||}t |t r|jdni}|dk(rBt |t r2|jd} t | t r|j| |S#t$ri}YwxYw)zIBest-effort read of existing provider config across legacy/native stores.rrrzprovider_configr holographiczhermes-memory-store)rrrrr\rrr) rSrrrr memory_cfg provider_cfg legacy_cfg plugins_cfgholographic_cfgs rV%_read_memory_provider_existing_valuesrs;"#KF en$d]*-  od+, - m'1d&;"J*d#!~~d+ lD ) MM, '^^$56 j$ '- -f-F)33(=#'')$2K }K!>%//*?@ ot , MM/ * M' s D?? E Erc|syt}t|j|xs#tjj|xsdSNr)rrrrvr)r env_on_disks rV _env_lookuprs: *K {w'H2::>>'+BHb IIrXr?ct|tr|S||dk(r|St|ttfr t|St |j j }|dvry|dvrytd|)Nr>rhonyesrT>rnorIrFzInvalid boolean value: )rrrrrrrr)rr?rs rV _coerce_boolrs%  } %#u&E{ u:    # # %D )) ** .ug6 77rXcT|jdd}|ddk(r t|dS|S)Nr?rrr`Fr)rr)rr?s rV_field_defaultrs0ii 2&G V} !GU33 NrXc|ddk(ry|j|d}|dvrt|jd}|dvr t|}|ddk(rG|jdgDchc]}|d  }}t|}||vr|Stt|S|dd k(r!t |t t|d  St|Scc}w) Nrrrrrrr rrr`Fr)rrrrr)rrrralloweds rV _field_valuers V}  HHU5\ "E EIIj12 u% V} +099Y+CDC3w<DDE (uHc.2G.HH V} !E<u8MW\+]^^ u: Es' Cc|ddk(r9tt|jdxs|j|dSt||}|dvS)Nrrrrr)rrrr)rrrs rV _field_is_setrsP V} K * 56P$((5<:PQQ  %E  ""rX fields_by_keyc&|jd}t|tr|sy|jD]Z\}}|xsijt |xst |dddd}t ||}t |t |k7sZyy)NrTrr)rrr?rF)rrrrrr)rrrrdep_keyr dep_fieldactuals rV_field_visibler s 99V D dD !!ZZ\ "(b--c'l; w< @ i. v;#h- '  rXc |d|d|d|d|d|d|ddk(rdn t||t|||jd g|jd d|jd d }|S) Nrrgrr"rrrrrrr) rrgrr"rrrr(rrr)rrr)rrrs rV_public_memory_provider_fieldrsU|wf ]+]+*%V}0l5$6Ot,99Y+yy# &! E LrXct|}t||Dcgc]}t||}}|t||t |dScc}w)NrSrgrrl)rrrrQrm)rSrUrrrs rV_memory_provider_payloadr/s` 0 6D7tXF  &eT2F '-,T2   sAcf|ddk(r!t|tt|dSt||ndj}|ddk(rP|stt|}|j dgDchc]}|d }}||vrt d |d d |S|xs t|Scc}w) Nrr`Frrr rrrrr)rrrrrr)rrrrrs rV_coerce_schema_fieldr=s V} !CnU6KUZ)[\\ sB / 5 5 7E V} u-.E+099Y+CDC3w<DD  25<.BC C  )N5)) Es9 B.c|Xt|drL ddlm}t|j|jur$|j |t t yt}|jd}t|tsi}||d<|j|}t|tsi}|j||||<t |y#t$r&|j |t t YywxYw)Nrr)MemoryProviderrz) ragent.memory_providerrr\rrrr!rrrrr)rSrUr_BaseMemoryProviderrrrs rV#_save_memory_provider_native_configrMs- @  S > % %-@-L-L L  _->)? @  -C"J j$ ' "H nnT"G gt $ NN6Jt#   _->)? @  sC,DDc t|t||}|Dcic]}|d| }}|Dcgc]}t||s|}}|Dcgc]}|jds|}}|syt fd|DScc}wcc}wcc}w)NrrTc36K|]}t|ywr)r)rrrs rVrz1_memory_provider_is_configured..osGe}UD)Gs)rrrrr)rSrUrrrvisible_fieldsrequired_fieldsrs @rV_memory_provider_is_configuredres 0 6D .tX >F6<=UU5\5(=M=!^E4%ON+9REIIjSs BBB B $B c i} ddlm}|D]8\}}}t|t|xsdt|dd|t|<: t}d}|jd}t|trt|jd}|r||vr |d dd d||<g}t|D]}||} | d rdn t|} t|} | d rdn t|| } | d rgn t!|| } | d rd }n3| d s| jd d sd}n| sd}n| d s| rd}n | d sd}nd}|j#|| d| d | || d|S#t$rt j dY-wxYw)Nr)discover_memory_providersrF)rSr"r rz discover_memory_providers failedrzrUz"Configured provider was not found.Trr rj unavailable needs_configreadyr")rSr"r  configuredrcrl)rrrrr\rQrKrrrrrUsortedrXrmrrr) discoveredrrSr"r rrmemrrrUrlr schema_fieldsrcs rVrrrs,.J ;<,E,G  (D+yD ";#4"5!)_ %Js4y !  -C F ''( C#t01DE & *?  6')Iz" y>4/DT/J+D1!)nU2PQUW_2` !)n2STXZb2c y>F[!%))4Ld*S"F#F[!m#F[!"FF}-[)$   % 4 W ; 9:;sAEE;:E;c |sytDcic]}|d| }}|j|}|tdd|d|ddk7r'tdd|d |djd d d ycc}w) NrSrzUnknown memory provider ''.rrcrzMemory provider 'z' is not ready (rrz'). Configure it in the dashboard first.)rrr7r)rSrrs rV_require_memory_provider_readyrs ,N,PQSF S QHQ ,,t C {.tfB7   8}#D6*M))#s344[]   Rs A3c6t|}t||}|Dcic]}|d| }}i}i}|D]}t|i|||s|ddk(rTt|j |dxsdj } | r"|j dr| |t|d<q|d|vr||dn|j |dt |} t|| ||d<t||||jD]\} } t| | ycc}w)Nrrrrr) rrrrrrrrrrr) rSrUrrrrr config_valuesrr=rrrs rV$_write_memory_provider_config_valuesrsH 5T:H .tX >F6<=UU5\5(=M=$&M GGe%B%BM%BMR  =H $FJJuU|4:;AACIUYYz22;E*-./ U|v% 5< eElN5,AB ';5#&F eEl#G"(h F(7==?(w'(/>s Dz ^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$cVtj|xsdstdd|y)a]Reject provider names that could traverse outside the plugin dirs. ``name`` is interpolated into filesystem paths by ``find_provider_dir()`` and gates which plugin manifest's setup commands run. A strict charset allowlist (no path separators, no dots) makes traversal impossible regardless of how the downstream lookup evolves. rrrrN)_MEMORY_PROVIDER_NAME_RErr7rPs rV#_require_valid_memory_provider_namers1 $ - -djb 96OPTv4VWW :rXz#/api/memory/providers/{name}/configsurfacecrKtfd}tj|d{S7w)Nct5dk(r1t}|dgdcdddSt|cdddSt}|gt dcdddSt |cdddS#1swYyxYw)Ndeclaredrr+r)rr+r1rXrmr)r rUrSrrs rV_runz(get_memory_provider_config.._runs G $ <*$5d;#%)4RSUV  < <2(; < <-T2H!%trLghlLmn < <,D(; < < ._run$s G $ 0*$5d;#'CB[\`[a@bcc.x9TU[9\]d|  0 0-T2H#>WX\W]<^__ 0x H *4 0 ]F"JJx0MmT2 " #0x (,M* %  $/) 0 0 0s;CA;CC rrz*PUT /api/memory/providers/%s/config failedrYr|) rrrorr7rrr\rQrK)rSrjrrr rrs` `` @rVupdate_memory_provider_configrs(- [[ BF0.M&&t,,,,  GCH=3F M CTJ4KLLMs:$B&A AA B&A B#A330B##B&z /api/configcKt|5tt}dddjDcic]\}}|j dr||c}}S#1swY?xYwcc}}wwNr)rrrrr)rrrrs rV get_configrFs`  :*;=9:$\\^ ETQ1<<3DAqD EE:: Fs, A2A A2A,A,A2 A)% A2z/api/config/defaultscKtSwr)rrrXrV get_defaultsrNs s z/api/config/schemacpKt|5t}dddtdS#1swYxYww)N)rcategory_order)rr_CATEGORY_ORDER)rrs rV get_schemarSs7 w '7467 @@77s 6 *636r#rUauto_context_lengthconfig_context_lengtheffective_context_length capabilities_EMPTY_MODEL_INFOz/api/model/infoc t|5t}dddjdd}t|trX|jd|jdd}|jdd}|jdd}|jd}n|r t |nd}d}d}d}|st t | S d d lm}||||d }d } t|tr|d kDr|} | d kDr| n|} i} d d l m } | ||} | E| j| j| j| j | j"| j$d} |||| | | dS#1swYDxYw#t$rd }YwxYw#t$rY2wxYw#t&$rt$r't(j+dt t cYSwxYw)a.Return resolved model metadata for the currently configured model. Calls the same context-length resolution chain the agent uses, so the frontend can display "Auto-detected: 200K" alongside the override field. Also returns model capabilities (vision, reasoning, tools) when available. Nr#rr?rSrUrrrr)get_model_context_length)r#rrUrget_model_capabilitiesrUr#supports_toolssupports_visionsupports_reasoningcontext_windowmax_output_tokens model_familyrzGET /api/model/info failed)rrrrrrr agent.model_metadatar"r\ragent.models_devr$r'r(r)r*r+r,r7rQrK)rrrK model_namerUr config_ctxr"auto_ctxconfig_ctx_int effective_ctxcapsr$mcs rVget_model_infor6gsG' G $ -C GGGR(  i &"y)--2KLJ }}Z4H }}Z4H"'78J+4Y"JHHJ)H= =  E/ !!&* H j# &:>'N+91*<(   ?'LB~&(&7&7')'9'9*,*?*?&(&7&7)+)=)=$&OO   #+%3(5   q  : H 0      ' 34%&&'sq F EB)FE'$F:AE8FE$F' E52F4E55F8 FFFF6G?G) vision web_extractr{ skills_hubapprovalrutitle_generationtriage_specifierkanban_decomposerprofile_describerr)_AUX_TASK_SLOTSz/api/model/optionsrefreshinclude_unconfigured explicit_onlycP ddlm}m}t|5||t |t |ddddt |t |t |  cdddS#1swYyxYw#t $rt $r#tjdt dd wxYw) uReturn authenticated providers + their curated model lists. REST equivalent of the ``model.options`` JSON-RPC on tui_gateway, so the dashboard Models page can render the picker without a live chat session. The response shape matches ``model.options`` 1:1 so ``ModelPickerDialog`` can share the same types. ``profile`` scopes the picker context (current model/provider, custom providers from config, per-profile .env auth state) so the Models page reads the SAME profile /api/model/set writes. ``refresh`` busts the per-provider model-id disk cache so every row re-fetches its live catalog — used by the picker's explicit "Refresh Models" control. Normal opens leave it false to stay on the 1h cache. rbuild_models_payloadload_picker_contextT) rBrA picker_hintscanonical_orderpricingrr@probe_custom_providersprobe_current_custom_providerNzGET /api/model/options failedrYzFailed to list model optionsr) hermes_cli.inventoryrErFrrr7r\rQrK)rr@rArBrErFs rVget_model_optionsrMs,TR G $ '#%"=1%)*>%?! $!W '+G}26w-.?      T 674RSSTs)A0AA$ A0$A-)A0-A005B%z/api/model/recommended-defaultc|xsdjj}|dk(r ddlm}m}m}m}m}m}m }ddl m } |} |dxsi} |d} d} | dxsi}|jddxsd} | r|| | | \} } || | d \} }n || | | \} } || d }d|t| d S ddlm}m}ddlm}||}|jdgD]i}t)|jddj|k(s0|jdxsgDcgc] }t)|}}|||| d d cS|dd d S#t$rd} YwxYw#t$rtj!d ddd d cYSwxYwcc}w#t$rtj!d|dd d cYSwxYw)aReturn the recommended default model for a freshly-authenticated provider. Mirrors the model-curation `hermes model` does so GUI onboarding lands on a sensible default instead of blindly taking the first curated entry. For Nous this honors the user's free/paid tier: free users get a free model, paid users get the full curated default. For any other provider it falls back to the first curated model (same as before). Response: {"provider": str, "model": str, "free_tier": bool | None} where free_tier is True/False for Nous and None otherwise. `model` may be empty if nothing could be resolved (caller degrades gracefully). rnousr)get_curated_nous_model_idsget_pricing_for_providercheck_nous_free_tierpartition_nous_models_by_tierpick_silent_default_model&union_with_portal_free_recommendations&union_with_portal_paid_recommendations)get_provider_auth_stateT force_freshri) free_tierr)rUr#rZz0GET /api/model/recommended-default (nous) failedNrD)rTrslugmodelsz)GET /api/model/recommended-default failed)rrr=rPrQrRrSrTrUrVrrWrr\rrQrKrLrErFr)rUr[rPrQrRrSrTrUrVrW model_idsrIrZrkrm _unavailabler#rErFrrrr\s rVget_recommended_default_modelr_s N ! ! # ) ) +D v~' H    @24I.v6<"G,>IJ /7=2"YY'8"=C %Kw &" 7+Hw$+' <&Lw &" 7.i&IE &T)_U U BR?&':'<=;;{B/ xC37762&'--/47+.778+<+BDQ#a&DD$(3LV^b3crvww x!2DAAE   " H NNM N &$G G HE B BC 2DAABsg6E7 "E&AE7AF&$F&;F! F&F&& E41E73E44E77$FF!F&&$G  G z/api/model/auxiliaryc ~ t|5t}dddjdi}t|tsi}g}t D]}t|j|tr|j|ini}|j |t|jddxsdt|jddxsdt|jddxsdd|jdi}t|trPt|jddxsdt|jd |jd dxsdd }nd|r t|ndd }||d S#1swYdxYw#t$rt$r#tjd tddwxYw)uReturn current auxiliary task assignments. Shape: { "tasks": [ {"task": "vision", "provider": "auto", "model": "", "base_url": ""}, ... ], "main": {"provider": "openrouter", "model": "anthropic/claude-opus-4.7"}, } ``profile`` scopes the read — without it, the Models page would show the dashboard profile's auxiliary pins while /api/model/set wrote the selected profile's (read/write asymmetry). NrrUrVr#rr)rrUr#rr?rSr%)tasksmainzGET /api/model/auxiliary failedrYzFailed to read auxiliary configr) rrrrrr?rrr7r\rQrK)rraux_cfgraslotslot_cfgrKrbs rVget_auxiliary_modelsrfNs"W G $ -C ''+r*'4(G# D0:7;;t;Ld0Sw{{4,Y[H LL Z @ JFKX\\'26<"= Z < BC   GGGR( i & j" = CDY]]9immFB6OPVTVWD !#yS^bQD--3  4  W 894UVVWs" F E:E!F:F?F5F<z/api/model/moac( ddlm}t|5t}|t |t r|j dnicdddS#1swYyxYw#t$rt$r#tjdtddwxYw) z=Return the configured Mixture-of-Agents provider/model slots.r)normalize_moa_configmoaNzGET /api/model/moa failedrYzFailed to read MoA configr) hermes_cli.moa_configrhrrrrrr7r\rQrK)rrhrs rVget_moa_modelsrks Q> G $ Y-C'*S$:OUWX Y Y Y  Q 234OPPQs(A3A AAAA5Bc Z ddlm}m}dtdtfd dt dtf fd }t |jxs|5t}|jrM|j|j|jjDcic]\}}|||c}}d}ni|t |j|j|j|j |j"|j$|j&|j( }||} | rt+d d d j-| z ||} | |d<t/|ddi| cdddScc}}w#1swYyxYw#t*$rt0$r#t2j5dt+dd wxYw)z3Persist the Mixture-of-Agents provider/model slots.r)rhvalidate_moa_payloadrdrKcx|jjDcic] \}}| || c}}Scc}}wr)rr)rdrrs rV _slot_dictz"set_moa_models.._slot_dicts1%)YY[%6%6%8JTQAMAqDJ JJs 66presetc |jDcgc] }| c}|j|j|j|j|j |j |jdScc}w)Nr$r%r&r'r)r*r+rrr)rprdros rV _preset_dictz$set_moa_models.._preset_dictsiBHBYBY$Z$Z%5$Z():):;)/)E)E*0*G*G$//(.(C(C --!>>  $ZsA7)r.r/r0rrzInvalid MoA config: ; rrirTNzPUT /api/model/moa failedrYzFailed to save MoA config)rjrhrmr rr#rrrr0r.r/rr$r%r&r'r)r*r+rr7rrr\rQrK) rjrrhrmrsrrSrprproblemsrros @rVset_moa_modelsrws>QT K\ Kd K !1 d DLL3G 4& .-C||&*&9&9%)%7%7OS||OaOaOcd|tVl6&: :d #$)-)>)>#'??.2.H.H/3/J/J#'??-1-F-F#{{ $   &,C0H# #1DIIh4GG .c2J#CJ  $-*-M& .& . e & .& .N  Q 234OPPQs>AE5A E)E# #B6E) E5#E))E2.E52E555F*z/api/model/setc` Kjxsdjj jxsdjjxsdjj xsdjj j xsdjjxsdj dvr tdd rIjs= ddl m }tj|d {}|d d |jd S fd }tj|d {S7B#t$rd }YMwxYw7#t$rt$r#t j#dtddwxYww)u!Assign a model to the main slot or an auxiliary task slot. Writes to ``~/.hermes/config.yaml`` — applies to **new** sessions only. The currently running chat PTY (if any) is not affected; use the ``/model`` slash command inside a chat to hot-swap that specific session. r>rbrrz#scope must be 'main' or 'auxiliary'rr)expensive_model_warning)rUrNFT)rrrUr#confirm_requiredconfirm_messagec tjxs5tcdddS#1swYyxYwr)rr_apply_model_assignment_sync)rrrjr#rrUrrsrV_apply_assignmentz/set_model_assignment.._apply_assignments> 78 38UD(G   s5>zPOST /api/model/set failedrYzFailed to save model assignment)rrrrUr#rrrr7rhermes_cli.model_cost_guardryrorr\r4rQrK) rjrryrSr~rrr#rUrrs `` @@@@@@rVset_model_assignmentrsZZ 2 $ $ & , , .E #**,H ZZ 2 $ $ &E IIO " " $ * * ,D #**,H||!r((*G ))4YZZ(W 55 O!( 1 1+%% !"" ("(,'.    &&'89991   $:  W 344UVVWslC"F.-E6<"E#E!E##E67F.8$E6E4E6 F.!E## E1.E60E11E665F++F.rc > t}|dk(r|r|s tddt||\}}|jd}t |t r|j|nd}|sMt |t r=|jdr,t |jdxsdj}t|jd i||||} |s)t |t r|jd r|d | d <| |d <g} |jjd k(r. d d l m } d dl m } | |dd} | || d}t|} t%||jjdvr|r d dlm}m}|||||||jj}g}|jdi}t |t rt,D]}|j|}t |t s%t |jddxsdj}|sU|jdvsh|j|k7s||j/||t |jd dxsdddd||| jdd| |dS|jd}t |t si}|dk(rpt,D]Q}|j|}t |t si}d |d<d|d <|j1ddt3||||<S||d<t%|dddd!S|s tdd"|r|gnt5t,}|D]}|t,vrtdd#||j|}t |t si}t |jdxsdjj}|jj}||d<||d <||k7r"|d$k7r|j1ddt3||||<||d<t%|dd|||d%S#t$rt j#ddY wxYw#t$rt j#ddYwxYw)&uSynchronous body of POST /api/model/set. Runs inside ``_profile_scope`` (in a worker thread) so every load_config/save_config lands in the requested profile. Raises HTTPException for validation errors — the async wrapper re-raises them. rbrz$provider and model required for mainrrNrrr#rrOr)apply_nous_managed_defaults)_get_platform_toolscliFinclude_default_mcp_serversT)enabled_toolsetsrYz#apply_nous_managed_defaults skippedr:>r*rO)_auto_provider_name_save_custom_providerrPz%custom_providers registration skippedrrU>rrV)rrUr#)rrrUr#r gateway_tools stale_aux __reset__rV)rrresetzprovider required for auxiliaryzunknown auxiliary task: rO)rrrarUr#)rr7rJrrrrrrSrrorhermes_cli.tools_configrrr\rQr@rhermes_cli.mainrrr?rrPrr)rrUr#rrrr providers_cfgprovider_entryrKrrrrchangedrrrRrrcrdre slot_providerauxrrQs rVr}r}s -C uC8^_ _:8UK% , 8B=RV8W**84]aJ~t<ASAST^A_>--j9?R@FFHH0 GGGR (E8W >40""9-#1)#>  ! ! #v - QTG-E6%, $ !'w C >>  ! ! #': :x SV%,X6 ( ~~'--/ " ''+r* gt $' ";;t,!(D1 #HLLR$@$FB G M M O !%++-\A%++-=$$ $$1!$X\\'2%>%D"!E& " ! j"5*"   ''+ C c4  {# !Dwwt}Hh-#)HZ "HW  LLT * ,X 6 CI !KC[4@@ 4UVVtf$"7G   &C:RSWRX8YZ Z774=(D)HHLL4:;AACIIK ~~'--/ '! = (\X-E LLT * ,X 6D  C   Y Q @4 P Q. S BT R Ss$'-QQ8 Q54Q58 RRrrQc|xsdj}|sd|fS ddlm}m}m} |||}|r |d|dfSd|vr |||v}|sd|fSd|fS#t $rd|fcYSwxYw#t $rd}YEwxYw#t $rd}Y;wxYw) uInfer which provider serves ``model_val`` when the flat Config-page Model field changes, given the previously-saved ``prev_provider``. Returns ``(provider, model)``; ``provider`` is empty when no switch is warranted (leave the existing provider untouched). Two signals, in order: 1. Curated-catalog detection (``detect_provider_for_model``) — handles the ~28 OpenRouter-curated models and direct provider-static catalogs. 2. Vendor-slug heuristic — a ``vendor/model`` slug cannot belong to a single-model / non-aggregator provider (e.g. ``ollama-local``). When the current provider is not an aggregator that serves vendor-prefixed slugs, route to an aggregator. ``_normalize_main_model_assignment`` (called by the caller) keeps the user's current aggregator when they're already on one, else falls back to openrouter — the same chokepoint logic as ``POST /api/model/set``. rr)r8detect_provider_for_modelr4NrrFr9)rr=r8rr4r\)rrQrSr8rr4detectedcur_is_aggregators rV_infer_provider_on_model_changers" O " " $D 4x  ,T=A{HQK''  d{ & 2= AEZ Z !% % t8O+ 4x  & %  &s4 A A( A9 A%$A%( A65A69 BBcxt|}|jdd|jdd}t|ts t|}|j d}t|tr$|r! t}|j d}t|trt|j dxsdj}t|j dxsdj}||k7r`|r^t||\}}|rM|jj|jk7rt||\} } t|| | }| }||d<|dkDr||d <n|jd d||d<|S|dkDr||d |d<|S|S#tt f$rd}Y\wxYw#t$rY|SwxYw) u9Reverse _normalize_config_for_web before saving. Reconstructs ``model`` as a dict by reading the current on-disk config to recover model subkeys (provider, base_url, api_mode, etc.) that were stripped from the GET response. The frontend only sees model as a flat string; the rest is preserved transparently. Also handles ``model_context_length`` — writes it back into the model dict as ``context_length``. A value of 0 or absent means "auto-detect" (omitted from the dict so get_model_context_length() uses its normal resolution). _model_metaNr(rr#r?rrUr)r?r)rrPrrrrrrrrrrrJrSr\) r ctx_overrider disk_config disk_model prev_defaultrQrRresolved_model norm_provider norm_models rV_denormalize_config_from_webrs&\F JJ}d#::4a8L lC ( |,L 7#I)S!i- %-K$1J*d+":>>)#<#BCIIK #JNN:$>$D" E K K M  ,3R!=40L.$ (:(:(<(B(B(D H[H[H](] 5U(.51 z&B& z& %/ (1 9%!#3?J/0NN#3T:",w M!(&2#w M6Mi:& L d   M s+ F2DF, F,F)(F), F98F9cHK t|jxs|5t}t|j}t t ||dddddiS#1swY xYw#t$rt$r#tjdtddwxYww)NrTzPUT /api/config failedrYr|r) rrrrrrr'r7r\rQrK)rjrrincomings rV update_configrCsM DLL3G 4 9'(H3DKK@H  Hh7 8 9d| 9 9  M /04KLLMs3B"A*5A A*B"A'#A**5BB"c  ddlm} ddlm}|j Dchc]4\}}|xsij dr|xsij ddk7r|6}}}i}|D]}|jdk7r|jD]M}||vr|j||j|j|j|jxsddd dd O|jrE|j|j|j|j|jd dd ddd |jd k(r|d D]w}|j |i} |j|j| j dxs|jd|d| j dd | j dddd ||<y|jdk(s]|j di} |j|j| j dxs|jd| j dd | j dddd |d<|S#t$ricYSwxYw#t$ri}YKwxYwcc}}w)uMap provider env vars → desktop card metadata, derived from the catalog. Returns ``{env_var: {provider, provider_label, description, url, is_password, advanced}}`` for every API-key provider in the unified ``provider_catalog()`` (i.e. the ``hermes model`` universe). This is what lets the desktop Keys tab render a card for a provider even when its env var was never hand-added to ``OPTIONAL_ENV_VARS`` — closing the drift where CLI-configurable providers (openai-api, kilocode, novita, tencent-tokenhub, copilot, …) were missing from the GUI. Hand ``OPTIONAL_ENV_VARS`` prose is layered ON TOP of this in the endpoint; this only supplies membership + grouping + sensible fallbacks. rprovider_catalog)rr'rUkeysNTF)rUprovider_labelr"r is_passwordadvancedr'z base URL overrideaws_sdk) AWS_REGION AWS_PROFILEr"r>r?rrvertexVERTEX_CREDENTIALS_PATHu+ — service account JSON path (or use ADC))hermes_cli.provider_catalogrr\r<rrrtabapi_key_env_varsrr[rgr" signup_urlbase_url_env_var auth_type) r_OPTrr_non_provider_keysmetadraws_varrs rV_catalog_provider_env_metadatarXsv@?jjla G== $!'rz)Bj)P  D  F 55F? )) G,, OO !&'gg#$==<</4#' % *     OO"" !&'gg&'ggY.@#A#( $ * $ ;;) #8 88GR0 !&'gg#+<< #>#ZQWWIRPWyXYBZ#<<.#( ( Z > *!W  $ ;;( "xx 92>HFF"#'''||M: KggYIJ||E*$$LLT:& /D* +{FN Kq   s'H;I 9I; I I  IIz/api/envc Kt|5tdddttdddtdt dt dt ffd}i}tjD]\}}|||||<D]}||vs||i||<D]%}||vs|vr ||id}d|d <d|d <|||<'|S#1swYxYww) NFrOvar_namerRrOrKclj|}j|xsi}t||r t|nd|jdxs|jdd|jd|jdn|jd|jdxs|jdd|jd|jdd|jdg|jd |jd d|v|jd d|jd d|d S) Nr"rrr'passwordrFtoolsrrUr) r(redacted_valuer"rr'rrrchannel_managedrUrrO)rrr%)rrRrOrcat_meta catalog_meta channel_keysrs rV_rowzget_env_vars.._rows)##H-35k38j/d88M2Uhll=RT6U&*hhuo&A488E?x||TYGZ,L Z0L88J ]E0RSXXgr*X\\*e-LM (<7! Z4&ll+;R@ /  rXTr'r) rr_channel_managed_env_keysrrrrrr) rrr3rrRrrrrs @@@rV get_env_varsrs  !j !,.L13L:? s $ 4 D >F+1130$$/x0 !2 6 !#Hb1F8 2  v \!9 8R-"J!Mx  Mu!!s" C C A2C:C CCcXK t|jxs|5ddlm}||j|j }ddd|S#1swYSxYw#t $r}tdt||d}~wt$r#tjdtddwxYww)Nr)save_provider_env_credentialrrzPUT /api/env failedrYr|) rrhermes_cli.credential_lifecyclerrrrr7rr\rQrK)rjrrr3rs rV set_env_varrsM DLL3G 4 H U1$((DJJGF H  H G CH=3F M ,-4KLLMsKB*A$A  A B* AAB*A B'!A88/B''B*)z https://openrouter.ai/api/v1/keybearer)z https://api.openai.com/v1/modelsr)zhttps://api.x.ai/v1/modelsr)z7https://generativelanguage.googleapis.com/v1beta/modelsr)OPENROUTER_API_KEYOPENAI_API_KEY XAI_API_KEYGEMINI_API_KEY_CREDENTIAL_PROBESric |jsgS|j}t|tr|j dn|}t|t sgSg}|D]p}t|tr-t|j dxsdj}nt|xsdj}|s`|j|r|S#t$rgcYSwxYw)a1Extract model ids from an OpenAI-compatible ``/v1/models`` response. Tolerant of the common shapes: ``{"data": [{"id": ...}]}`` (OpenAI / vLLM / llama.cpp) and a bare ``{"data": ["id", ...]}``. Returns ``[]`` on any parse/HTTP error so a slightly non-standard endpoint never hard-blocks. rrr) is_successrdr\rrrrrrr)rirridsrmids rV_parse_model_idsr'sI))+#-Wd";7;;v D dD ! C dD !dhhtn*+113Cdjb/'')C  JJsO  J  s CC CCfallbackctjdd|xsdjjdj}|xs|S)Nz[^A-Za-z0-9_-]+rOrz-_)rrrr)rrr[s rV_custom_endpoint_idrBsA 66$cCI2+<+<+> ? E Ed K Q Q SD  8rXrcg}|jd}t|tr'|jd|j Dn(t|t r|jd|Dt |jdxs|jdxsdj}|r|jd|t}|Dcgc]}|s||vr |j|r| c}Scc}w)Nr\c3NK|]}t|jywrrrrr#s rVrz5_models_from_custom_endpoint_entry..KsHUc%j&&(H#%c3NK|]}t|jywrrrs rVrz5_models_from_custom_endpoint_entry..MsAUc%j&&(Arr# default_modelrr) rrrrrrrrinsertrr)rr\ raw_modelsrrr#s rV"_models_from_custom_endpoint_entryrGsF8$J*d# Hjoo6GHH J % AjAA '*Neii.HNBOUUWM a'UD% Ze RWE ZZ ZsC:C:!C:3C:cft|jdtr|jdini}t|jddxsd}t|jd|jddxsd}t|jddxsd}g}|jd}t|tr|j D]\}}t|tst|jdxs(|jdxs|jd xsdj } | smt|} t |} t|jdxs|jd xs | r| d nd} |j| t|jdxs| | | | |jd t|jd dtt|jddxsdj |jdr(tt|jddxsdnd| |k(dd |jdk(r|rtd|Ds|jd dd|||r|gng|jd dtt|jddxsdj |jdr(tt|jddxsdndddd ||||ddS)Nr#rUrr?rSrrrrMrrrrTr) rrSrr#r\rr has_api_keyapi_key_preview is_currentrrOc3,K|] }|ddk(yw)rrONr)res rVrz,_custom_endpoint_response..wsLtefQtWX`M`LtsCustomz direct-config)rUr#r) endpointsr) rrrrrrrrrr%rrr) rrKrf current_modelcurrent_base_urlrr provider_id raw_entryr endpoint_idr\endpoint_models rV_custom_endpoint_responserWs(237773CT(J$PRI9==R8>B? ivr1JKQrRM9==R8>B?&(I $I)T"&/oo&7  "Ki.9==4j e8LjPYP]P]^cPdjhjkqqsHk*K7 BF w!7!z9==;Y!zkq^def^gwy{N   !IMM&1@[A$' "+--0@"A#' 6G(N#O#C i(D(J$K$Q$Q$STZcZgZghqZr:c)-- 22N2TRT.U#Vx|)-==%   .8+0@LtjsLtIt(")6}oB'mm,<=#IMM)R$@$FB G M M OPV_VcVcdmVnz#immIr.J.Pb*QRtx%  ("(  rX provider_keyc|jd}t|tsyt|jdxsdj j |k7rydD]}|j |d||d<y)u}Drop the main-slot mirror of a provider that no longer exists. ``activate_custom_endpoint`` copies the endpoint's ``base_url`` and ``api_key`` onto ``model``. That mirror outranks the environment at client construction (#62269), so deleting the endpoint without clearing it leaves the agent still authenticating to the deleted host with the deleted key — and leaves that key sitting in config.yaml after the operator believes the dashboard removed it. Only touches ``model`` when it actually names the deleted provider, so an endpoint deleted while a *different* provider is active is left alone. r#NrUr)rUrr)rrrrrrrP)rrrKrs rV _detach_main_model_from_providerrsu I i & 9== $ *+11399;|K4# eT"#CLrXct|jxs |j}|jxsdj}|jxsdjj d}|j xsdj}|s tdd|s tddtjj|}|jr |js tdd|s tdd|jd }t|tsi}|j|}t|tsi}t|} | j!|||t#|j$d | jd } t| tr t| ni} | j|} t| tr t| ni| |<| | d <|j&rE|j&d kDr6t)|j&| d <t)|j&| d |d <|j*7|j*jr|j*j| d<| ||<||d <|j,rPt/|jdi||||d<| jdrt|dtr | d|dd<|| fS)Nrrrz name requiredrzbase_url requiredz%base_url must include scheme and hostzmodel requiredr)rSrr#rr\rrrr#)rrrSrrr^r#r7r`rrschemerrrrrrrrrrrrS) rrjrrSrr#rrrrexisting_models models_mapcurrent_model_entrys rV_write_custom_endpointr s%dgg&:;K IIO " " $D #**,33C8H ZZ 2 $ $ &E ODD 4GHH \\ " "8 ,F == 4[\\ 4DEE $I i & }}[)H h %!NE LL 4 45 ii)O:D_VZ:[o!6acJ$../5?@SUY5Z01`bJu E(O t22Q6"%d&9&9":36t7J7J3Kh/0 ||DLL$6$6$8<<--/i"Ik C  3 GGGR +uh G  99Y Js7|T$B&+I&6CL #  rXz/api/providers/custom-endpointsc ttS#t$r#tj dt ddwxYw)zAReturn configured OpenAI-compatible custom endpoints for Desktop.z*GET /api/providers/custom-endpoints failedrYzFailed to list custom endpointsr)rrr\rQrKr7rrXrVlist_custom_endpointsr sAW(77 W CD4UVVWs ,Ac t}t||\}}t|t|}d|d<||d<|S#t$rt $r#t jdt ddwxYw)zNseSTr "C ZZ 2 $ $ &E $;QRR  ll3)+<<%2,,.>IC+,G F x%,UG#4 u o \\%--"5\ 6 C&::c76:BD C  :%$;vww 3$//"==d9PQUQaQaPbbp7q rr= 8 8 [eBRSVRWWX@YZ Z [" C C o% W3DHH=F >zz'"C488*DV8WX X  > >  GCH=3F M /04KLLMs>CA7A+4A7*C+A40A77C B  /CCz/api/env/revealcRKt|tj}|tz }tDcgc] }||kDs | c}tddt tt k\r t ddtj|t|jxs|5t}dddj|j}|t d|jdtjd|j|j|dScc}w#1swYtxYww) zReturn the real (unredacted) value of a single env var. Protected by: - Ephemeral session token (generated per server start, injected into SPA) - Rate limiting (max 5 reveals per 30s window) - Audit logging Nr z,Too many reveal requests. Try again shortly.rrr! zenv/reveal: %s)rr)rr}_REVEAL_WINDOW_SECONDSrr_REVEAL_MAX_PER_WINDOWr7rrrrrrrQrR)rjrrrycutofftrrs rVreveal_env_varr( s7 ))+C ) )F(:I1a&jQIq "884bccc"  / 0!j ! OODHH %E }txxj@R4STTII)88e ,,J !!s/1D' DDAD' D(A3D'D$ D'Telegramz1Run Hermes from Telegram DMs, groups, and topics.z1https://core.telegram.org/bots/features#botfather)rrTELEGRAM_PROXY)r)rSr"r,env_varsrfDiscordz5Connect Hermes to Discord DMs, channels, and threads.z+https://discord.com/developers/applications)DISCORD_BOT_TOKENDISCORD_ALLOWED_USERSDISCORD_REPLY_TO_MODE)r- rSlackzbUse Hermes from Slack via Socket Mode. Add allowed Slack member IDs so connected bots can respond.zhttps://api.slack.com/apps)rrr)rr mattermost Mattermostz:Connect Hermes to Mattermost channels and direct messages.zhttps://mattermost.com/deploy/)MATTERMOST_URLMATTERMOST_TOKENMATTERMOST_ALLOWED_USERS)r3 r4 matrixMatrixz/Use Hermes in Matrix rooms and direct messages.z%https://matrix.org/ecosystem/servers/)MATRIX_HOMESERVERMATRIX_ACCESS_TOKENMATRIX_USER_IDMATRIX_ALLOWED_USERS)r8 r9 r: signalSignalz)Connect through a signal-cli REST bridge.z0https://github.com/bbernhard/signal-cli-rest-api)SIGNAL_HTTP_URLSIGNAL_ACCOUNTSIGNAL_ALLOWED_USERS)r> r? whatsappWhatsAppzBUse Hermes through the bundled WhatsApp bridge with QR-based auth.z"https://github.com/tulir/whatsmeow)WHATSAPP_ENABLED WHATSAPP_MODEWHATSAPP_DM_POLICYWHATSAPP_ALLOWED_USERSr homeassistantzHome Assistantz7Control your smart home from Hermes via Home Assistant.z2https://www.home-assistant.io/docs/authentication/)HASS_URL HASS_TOKENemailEmailz,Talk to Hermes through an IMAP/SMTP mailbox.z@https://hermes-agent.nousresearch.com/docs/user-guide/messaging/) EMAIL_ADDRESSEMAIL_PASSWORDEMAIL_IMAP_HOSTEMAIL_SMTP_HOSTrz SMS (Twilio)z*Send and receive text messages via Twilio.zhttps://www.twilio.com/console)TWILIO_ACCOUNT_SIDTWILIO_AUTH_TOKENdingtalkDingTalku+Connect Hermes to DingTalk groups (钉钉).zGhttps://open.dingtalk.com/document/orgapp/the-robot-development-process)DINGTALK_CLIENT_IDDINGTALK_CLIENT_SECRETrz Feishu / Larkz Use Hermes inside Feishu / Lark.zKhttps://open.feishu.cn/document/uAjLw4CM/ukTMukTMukTM/reference/im-v1/intro) FEISHU_APP_IDFEISHU_APP_SECRETFEISHU_ENCRYPT_KEYFEISHU_VERIFICATION_TOKEN)rV rW google_chatz Google Chatz0Connect Hermes to Google Chat via Cloud Pub/Sub.zKhttps://hermes-agent.nousresearch.com/docs/user-guide/messaging/google_chat)rSr"r,wecomzWeCom (group bot)z&Send-only WeCom group bot via webhook.z8https://developer.work.weixin.qq.com/document/path/91770) WECOM_BOT_ID WECOM_SECRET)r\ rz WeCom (app)z+Two-way WeCom integration via callback app.z8https://developer.work.weixin.qq.com/document/path/90930)WECOM_CALLBACK_CORP_IDWECOM_CALLBACK_CORP_SECRETWECOM_CALLBACK_AGENT_IDWECOM_CALLBACK_TOKENWECOM_CALLBACK_ENCODING_AES_KEY)r^ r_ r` weixinzWeixin / WeChat (Personal)zBConnect a personal WeChat account through Tencent's iLink Bot API.zGhttps://hermes-agent.nousresearch.com/docs/user-guide/messaging/weixin/)WEIXIN_ACCOUNT_ID WEIXIN_TOKENWEIXIN_BASE_URL)rd re rzBlueBubbles (iMessage)z5Use Hermes through iMessage via a BlueBubbles server.zhttps://bluebubbles.app/)BLUEBUBBLES_SERVER_URLBLUEBUBBLES_PASSWORDBLUEBUBBLES_ALLOWED_USERS)rg rh zQQ Botz5Connect Hermes to a QQ Bot from the QQ Open Platform.zhttps://q.qq.com) QQ_APP_IDQQ_CLIENT_SECRETQQ_ALLOWED_USERS)rj rk r,zEhttps://hermes-agent.nousresearch.com/docs/user-guide/messaging/teamsuYuanbao (元宝)z"Connect Hermes to Tencent Yuanbao.)rSr"r,rfz API serverzIExpose Hermes as an OpenAI-compatible HTTP API for tools like Open WebUI.)API_SERVER_ENABLEDAPI_SERVER_KEYAPI_SERVER_PORTAPI_SERVER_HOSTAPI_SERVER_MODEL_NAMEWebhooksz>Receive events from GitHub, GitLab, and other webhook sources.zIhttps://hermes-agent.nousresearch.com/docs/user-guide/messaging/webhooks/)WEBHOOK_ENABLED WEBHOOK_PORTWEBHOOK_SECRET)qqbotteamsyuanbaorr_PLATFORM_OVERRIDES)rsrtrr1 r6 rA r< rrG rJ rrR rrZ r[ rrc rv rx rr_PLATFORM_ORDERr> z8signal-cli REST API base URL, e.g. http://127.0.0.1:8080zSignal bridge URL)r"rFrr? z6Signal account phone number registered with the bridgezSignal account)r"rFr@ z3Comma-separated Signal users allowed to use the botzAllowed Signal usersrC z#Enable the WhatsApp gateway adapterzEnable WhatsApp)r"rFrrD zWhatsApp bridge modez WhatsApp moderE z+How WhatsApp direct messages are authorizedzWhatsApp DM policyrF z5Comma-separated WhatsApp users allowed to use the botzAllowed WhatsApp usersrH z>Home Assistant base URL, e.g. https://homeassistant.local:8123zHome Assistant URLrI uBLong-lived access token from Home Assistant (Profile → Security)zHome Assistant access token)r"rFrrL z&Email address to send and receive fromz Email addressrM z&Email account password or app passwordzEmail passwordrN z&IMAP server host (e.g. imap.gmail.com)z IMAP hostrO z&SMTP server host (e.g. smtp.gmail.com)z SMTP hostrP zTwilio Account SIDrQ zTwilio Auth Tokenr\ zWeCom group bot IDz WeCom Bot IDr] zWeCom group bot secretz WeCom Secretz WeCom corp IDz WeCom Corp IDzWeCom app corp secretzWeCom Corp SecretzWeCom app agent IDzWeCom Agent IDz!WeCom callback verification tokenz WeCom TokenzWeCom callback AES encoding keyz WeCom AES KeyzFiLink Bot account ID obtained through QR login in hermes gateway setupziLink Bot account IDzAiLink Bot token obtained through QR login in hermes gateway setupziLink Bot tokenzMiLink API base URL saved by QR login (default: https://ilinkai.weixin.qq.com)ziLink API base URLzFeishu / Lark app IDzApp IDzFeishu / Lark app secretz App secretzFeishu / Lark encrypt keyz Encrypt keyz Feishu / Lark verification tokenzVerification tokenzDingTalk client ID (App key)z Client IDz#DingTalk client secret (App secret)z Client secret)r^ r_ r` ra rb rd re rf rV rW rX rY rT rU _MESSAGING_ENV_FALLBACKScddlm}t}g}|jj D]`}|j dk(r|j |vr"|j |j |jt|j b ddl m }|jD]Q}|j|vr|j |j|jt|j|S t!t"Dcic]\}}|| c}}|j%fd t'|S#t$rtjddYewxYwcc}}w) aBuild the messaging catalog from the gateway's Platform enum + plugin registry. Built-in platforms come from ``gateway.config.Platform`` (LOCAL is excluded). Plugin platforms come from ``gateway.platform_registry.plugin_entries()``, which lets newly installed adapters (e.g. IRC) appear without a code change here. Per-platform UI metadata (description, docs URL, env-var picks) lives in :data:`_PLATFORM_OVERRIDES`; anything not overridden gets reasonable defaults derived from the platform id and required_env. r)Platformr*)platform_registryz$plugin platform registry unavailableTr:cnj|dtt|djfS)NrrS)rrrz r)rrhs rVrz-_messaging_platform_catalog..gs+uyy4#o*>?6ARSrXr)rr} r __members__rrrr_build_catalog_entrygateway.platform_registryr~ plugin_entriesrSr\rQr@ enumeraterz rr) r} rrmemberr~ plugin_entryidxrrhs @rV_messaging_platform_catalogr Cs>(UD$&G&&--/; <<7 "  <<4   +FLL9: ; J?-<<> RL  D( HH\&& ' NN/ 0A0A<P Q  R'0&@ A(#sS#X AE LL S > J 9D IJ BsA*E E& E#"E#c t}tD]#}|j|jdd%t |S#t $r$t jddt cYSwxYw)aEnv-var keys owned by a Channels page platform card. The Channels page is the canonical surface for configuring messaging platform credentials (with connection status, test, enable toggle and gateway restart). The Keys/Env page consults this set to hide those vars so the same fields aren't duplicated in a plainer UI. Best-effort: if the gateway catalog can't be built, nothing is flagged and Keys shows it all. r+ rz+could not build channel-managed env key setTr:)rr rr frozensetr\rQr@)rrs rVrrlsi02 3E KK *b1 2 3  @4 P{sAA*A43A4>GATEWAY_PROXY_KEYGATEWAY_PROXY_URLGATEWAY_ALLOW_ALL_USERScnddddddd}||vr||S|jjdd d zfS) z4Env-var prefixes owned by a messaging platform card.)EMAIL_)HASS_)QQ_QQBOT_)TWILIO_) WECOM_BOT_r] )WECOM_CALLBACK_)rJ rG rv rr[ rrOr)upperr)rr s rV_platform_env_prefixesr sV#"/. +Gg{##     ' 'S 1C 7 99rXct|}g}tjD]I\}|jddk7rtvr$t fd|Ds9|j Kttt|S)zLAll messaging-category env vars for a platform (override + plugin + prefix).r'rc3@K|]}j|ywr)r)rrrSs rVrz._discover_platform_env_vars..sBv4??6*B) r rrr_MESSAGING_KEYS_PAGE_KEYSrrrrr)rprefixesrrRrSs @rV_discover_platform_env_varsr s%k2HD'--/ d 88J ; .  , , BBB  D D " ##rXoverrider ct|}d|vr&ttjg|d|S|B|jr6ttjgt|j|S|S)z5Canonical env-var list for a messaging platform card.r+ )r rrrrf)rr r rs rV_merge_platform_env_varsr sx -[9JXT]]#GXj%9#GJ#GHIIL$=$=T]]#SU<+D+D%E#S #STUU rXctj|i}t|||}d|vrt|d}n|t|jxsd}nd}|jdr|d}n;||j r |j }n |j ddj}|jd}|s||jxsd}|||xsd|jdd||d S) NrfrrSrrr"rr,)rrSr"r,r+ rf) ry rr rrfrgrr install_hint)rr r r+ rfrSr"s rVr r s#&&{B7H' X|LH!Xn56  !\66<"=  ||F  !l&8&8!!""3,224,,}-K <3"//52 "(bLLR0$  rXc:tD]}|d|k(s |cSy)Nr)r )rrs rV_catalog_lookupr s*,. ;+ %L rXc 2tj|xstj|xsi}|jdd|jd||jdd|jd|jdd|jddd S) Nr"rrFhelprrFr)r"rFr rrr)rrr{ )rrRs rV_messaging_env_infor s   % P)A)E)Ec)J PbDxx r2((8S)$xxxx E2HHZ/  rXcpddlm}m}|}||}|jj |}|||fS)Nr)r} r)rr} rrr)rr} rrr-platform_configs rV_gateway_platform_configr s:< "F $H&&**84O 8_ ,,rXrscopedc|d}|r|jdni}t|tr|j|ini}tduxs t |du}g}|dD]k} j| xs|rdnt j | d} |j| | |dvt| | r t| nddt| m|r t} | jdxsi} | j|} t| tsi} t| jd}| jd}t|tr|nd}tfd |dD}nr t|\}}}t|xr |j}t|xr|j!||}|r&|j"r|j"j%nd}t|tr|jd nd}t|tr|jd nd}t|tr|jdnd}|sd}n|sd}n|r|sd}n|s |s|dk(rd}n|s|sd}t|tr|jdnd}t|tr|jdnd}|dk(r |xsd}|xs|}d}|dk(rjdxs|rdnt j ddj'}jdxs|rdnt j ddj'}|dvr|ndt|t|d}||d|d|d||||||t|tr|jdnd||d }|||d <|S#t$rd }d}Y[wxYw#t$rd }tfd |dD}d}YwxYw)!Nrrr+ rrf)rrr(rr home_channelFc3@K|]}j|ywrrrrrs rVrz._messaging_platform_payload..(sO#-Or c3pK|]-}j|xstj|d/ywrN)rrvrwr s rVrz._messaging_platform_payload..:s5$: #r(::s36rmrrdisablednot_configuredpending_restartrgateway_stopped error_code error_messagerA rD rF >r self-chat)rallowed_users_sethome_channel_setrSr"r,r) rrSr"r,rrrrmr r rr r+ whatsapp_setup)rrrr/r0rvrwrrr%r rr\rr r_is_platform_connectedr to_dictr)rrrr rruntime_platformsruntime_platformrr+ rrr platforms_cfgplat_cfgrhcr rrr-r rmruntime_gateway_stateruntime_gateway_errorr r r whatsapp_modeallowed_users_valuers ` rV_messaging_platform_payloadr sU +K4; K0 ' . k2.  % ? )' 2$ >HZ   $Nv299S";M5#88u+7<*U"3$   &c*     -CGGK06BM$((5Hh-8<< 23Gn-B!+B!524LO~9NOO  8P9 5NHo?F/F/FGGU"99(OTJ #'C'C ,,446 *44Dd)KW%QU =GwPT)> Nj OOO , B"))OR"@ %'  OO4 5 K")),Db"I %'  &36J%JMPR!%&9!: $\ 2 f ]+*% * &*D1   .$#G&!$2 ! NE GL & G 0J L  s&BN-A1N3 N0/N03$OOrct|d|y)Nr)r&)rrs rV_write_platform_enabledr s Y@rXX>rexpired cancelled connectedceZdZUejdzed<eed<eed<eed<eed<eed<dZedzed<d Z eed <dZ edzed <dZ edzed <dZ edzed <dZ edzed<dZedzed<y)_WhatsAppOnboardingSessionNr%rr session_path expires_at expires_at_tsrstartingrc qr_payload account_id account_name account_phoner)rrrr.rrrrrrcr r r r rrrXrVr r s   T !! IOGS4ZFC!Jd !!Jd !#L#*# $M3:$E3:rXr _whatsapp_onboarding_sessionsrctj|tjj j ddS)N+00:00Z)r fromtimestamprutc isoformatr)rs rV_utc_iso_from_tsr s0  ! !"hll 3 = = ? G GRU VVrXc~t|xsdjj}|dvr tdd|S)Nr>rr rz+WhatsApp mode must be 'bot' or 'self-chat'.r)rrrr7)rrs rV#_normalize_whatsapp_onboarding_moder s> u~  $ $ & , , .D ''4abb KrXct|xsdj}|sydjd|jdDS)Nrrc3bK|]'}|js|jdd)yw)rrN)rrrs rVrz4_normalize_whatsapp_allowed_users..s#Ud DLLb)Us//)rrrr)rrs rV!_normalize_whatsapp_allowed_usersr s< ekr  "C  88UciinU UUrXc ddlm}|ddS)Nrget_hermes_dirzplatforms/whatsapp/sessionzwhatsapp/session)rlr r s rV_whatsapp_session_pathr s/ 68J KKrXct|xsdj}|sy|jdddjddd}tjdd|}|xsdS)Nr@rrrz\D+)rrrrr)rrrdigitss rV_whatsapp_phone_from_identifierr sb ekr  "C  #q!!$**3215I VVFB *F >TrXr c(|dz } tj|jd}dddtddffd }||j d||j d ||t fS#t$rYywxYw) N creds.jsonrrNNNrrKct|tsy9dD]4}t|j|xsdj }|s2|n:dD]4}t|j|xsdj }|s2|yyy)N)rjidlidr)rS verifiedNamenotifypushName)rrrrr)rrrr r s rVcollectz6_whatsapp_linked_account_from_session..collects)T*   + IMM#.4"5;;=!&J    E IMM#.4"5;;=#(L   rXmeaccount)rdrerr\r rr )r creds_pathrr r r s @@rV%_whatsapp_linked_account_from_sessionr s ,J **Z1171CD"J#L34" GKK  GKK "# G |%DZ%P PP5   s%B BB bridge_dirc f|dz jryddlm}m}ddlm}|d}|s t dd |d d } tj|d d gt|dd||t}|jdk7rd|jxs|jxsdj!}|r"dj#|j%dd}t dd|xsd y#tj$r}t dd |d}~wt$r}t dd| |d}~wwxYw)zDInstall bridge dependencies when the dashboard is the setup surface.rNrfind_node_executablewith_hermes_node_path)env_intnpmrYz8npm was not found. WhatsApp setup needs Node.js and npm.rWHATSAPP_NPM_INSTALL_TIMEOUTrwrcz--silentT)rr%rr[rr(z2Installing WhatsApp bridge dependencies timed out.z0Failed to install WhatsApp bridge dependencies: rriz(npm install failed for WhatsApp bridge: z no output)r{rlr r rr r7r.r/rr TimeoutExpiredrr0rr1rrr) r r r r r r[r3rrs rV$_ensure_whatsapp_bridge_dependenciesr sT^#++-L u %C M  4c:G )Z (J%',. (A--66==6B==? YYv0023489F=f>S =TU    $ $G   EcUK  s$5C--D0D D0D++D0rc ddlm}ddlm}m}|}|dz }|j st dd|d|d }|s t dd t||jd d |}||d <d|d<tj|t|dddt|gt|tjtjd ddd |t S)Nr)resolve_whatsapp_bridge_dirr z bridge.jsrYz(WhatsApp bridge script was not found at rrrz4Node.js was not found. WhatsApp setup needs Node.js.TrWrD rrE z --pair-onlyz --pair-jsonz --sessionrr) rr1rrrrrrr()!gateway.platforms.whatsapp_commonr rlr r r{r7r rZr.rrPIPErr ) r rr r r r bridge_scriptrrs rV_spawn_whatsapp_pairing_processr  sML,.J,M    !=m_AN    'D I  )4td3  !CC )C               O   (*# rXr%c|y|jy |j|jdy#t$r$ |j Yy#t$rYYywxYwwxYw)NrrZ)r terminater^r\kill)r%s rV_terminate_whatsapp_pairingr E se | yy{  !    IIK   s'"9 A&A A"A&!A""A& pairing_idcR |j}||D]}|j}|s tj|}t |j dxsdj}t5tj |}|r|j|ur dddy|dk(rEt |j dxsdj}|r||_ d|_ d|_ n|dk(r|j d} t| tr~t | j dxsdj} t | j dxsdj} | xsd|_| xsd|_t#| |_d|_ d|_ nK|d k(r+d |_ t |j d xsd |_ n|d k(r|jd k(rd|_ ddd|j'} t5tj |}|r|j|ur dddy|jd vr dddyd |_ | dk(rdnd| d|_ dddy#tj$rYywxYw#1swYxYw#t($rt} t5tj |}|r7|j|ur)|jt*vrd |_ t | |_ dddn #1swYnxYwYd} ~ yd} ~ wwxYw#1swYyxYw)Neventrqrwaitingr rrrSrzWhatsApp pairing failed.rr >r r r r9WhatsApp pairing process exited before pairing completed.z*WhatsApp pairing process exited with code r)r1rrdreJSONDecodeErrorrr_whatsapp_onboarding_lockr r%r rcrrrr r r r r^r\&_WHATSAPP_ONBOARDING_TERMINAL_STATUSES)r r%streamrrrr recordr rr r r0rs rV_watch_whatsapp_pairingr T s,  ! 2jjl"jjoGGKK06B7==?.2:>>zJF!V[[%<22} T!2!8b9??A02F-,5FM+/FL+-&{{62%dD1),TXXd^-Ar)B)H)H)JJ+.txx/?/E2+F+L+L+NL0:0BdF-2>2F$F/3RS]3^F0(3 '+ ')(/ '*7;;w+?+]C]'^ .0V]]j5P(1 122! 2DYY[  #  .22:>D0     ==A A      Q H=j\K     K++224  & (266zBF&++-&--Gm2m ' "3x  ( ( (     s(JI62J2'J J#EJ+J 'L<LL6J  J J  JJ J L&L,AL; LL LLL&ct5tj|}|r|jtvr dddyd|_ddd t ||}t5tj|}|r|jtvrt| dddy||_ d|_dddt||y#1swY~xYw#t $rf}t5tj|}|r)|jtvrd|_t||_dddn #1swYnxYwYd}~yd}~wwxYw#1swYxYw)N installingrr ) r r rrcr r r\rrr r%r )r r rr r%rs rV_run_whatsapp_pairingr s) "%.22:>*PP %%% % .|TB ##.22:>*PP ' -  ##  " #J-1%%  & (266zBF&--/UU ' "3x  ( ( (  ##sS+B?B? C 6D=D=?C D:D5AD$ D5$D- )D55D:=Ec$tj}g}tjD]\}}|j:|jt vr(|jj d|_d|_|j|kr5|jt vr#t|jd|_d|_|jt vs|jdz|ks|j||D]}tj|dy)Nrr r z-WhatsApp QR setup expired. Start a new setup.rw) r}r rr%rcr rrr r rrP)ry remove_idsr r s rV#_prune_whatsapp_onboarding_sessionsr s ))+CJ;AAC * F KK # %KK   ".#FMVFL   3 &6==@f+f ' 4%FMJFL ==B BvG[G[^aGaehGh   j ) *!< %))*d;G G+AG,F5 1F88G=GG  Gz//api/messaging/whatsapp/onboarding/{pairing_id}c Kt5ttj|}|s t dd|j dk(rt d|j xsdt||cdddS#1swYyxYww)Nr8WhatsApp setup session was not found. Start a new setup.rr zWhatsApp setup expired.)r r r rr7rcrr% r$ s rVget_whatsapp_onboarding_statusr0 '!s| " @+-.22:>Q  ==I %C 8aHab b+J? @ @ @sBA$A7- B7B<Bz5/api/messaging/whatsapp/onboarding/{pairing_id}/applyc Kt5ttj|}|s t dd|j dk7r t ddt |jxs |j}t|j |jn |j}|dk(r |s|jxs|jxsd}|j}ddd|jxs|xs} t|5td td d r td |td dtdddddt5tj+|ddddt-|} dd| d d| S#1swYxYw#1swYQxYw#t$rt $r}t dt#||d}~wt$$r(}t&j)dt dd|d}~wwxYw#1swYxYww)Nrr. rr rz$WhatsApp setup is not connected yet.r rrD rE rrF rC rrA Trz WhatsApp onboarding apply failedrYzFailed to save WhatsApp setup.r)rr- needs_restart)r r r rr7rcr rr rr r rrrr rrr\rQrKrPr' ) r rjrr rrrecord_profiler+ rrestart_results rVapply_whatsapp_onboardingr5 6!s #(+-.22:>Q  ==K 'C8^_ _24993K L9$($6$6$>F DDVDV  ; }"00KF4E4EKM!($ AA> "#4 5 6 ?D 1 / ;7G -v 6 #J 5 6( #<%))*d;<@@QRN+,=>>    Y((( 6 6  GCH=3F  9:3  < rr rP)ryr r r s rV#_prune_telegram_onboarding_pairingsrI !sn ))+C#@"E"E"G J   3 & G < %))*d;< sA(clt|xsdj}tj|r|Syr)rrrr)rrs rV_normalize_telegram_user_idrK !s0U[b!'')J%%j1 rXc4dddddddj||S)Nz2Telegram pairing was not found. Start a new setup.z*Telegram setup expired. Start a new setup.z6Telegram setup was already claimed. Start a new setup.z-Telegram setup service rejected this request.z)Telegram setup service is not configured.z/Telegram could not finish bot setup. Try again.) not_foundr claimedrO)telegram_manager_bot_token_not_configuredtelegram_token_fetch_failedr)rrs rV"_telegram_onboarding_error_messagerQ !s,I?KG5`'X   c%rXrj bearer_tokenrYrS cddl}dtd}i}| d|d<||d<|rd||d<t|} |j|j d 5}|j ||fd |i|} | j ddd  j} t#| t$s tdd| S#1swY9xYw#|j$r} | jj} n#t$ri} YnwxYwt| jd xs| jd xsd } t| d} | jjdk(rdnd}| dvrd}t|| | d} ~ w|j $r} tdd| d} ~ wt$r} tdd| d} ~ wwxYw#t$r} tdd| d} ~ wwxYw)NrrH)rI User-Agent Content-Typerdrr r rZrrrcrz)Telegram setup service returned an error.rr>rN r r/ rz9Telegram setup service is unavailable. Try again shortly.z4Telegram setup service returned an invalid response.)r _TELEGRAM_ONBOARDING_USER_AGENTrB r r rraise_for_statusHTTPStatusErrorrLrdr\rrrQ rr7 RequestErrorrr)rYrrjrS r rrequest_kwargsrrerLrrrrrs rV!_telegram_onboarding_request_syncr\ !s#%5G&(N "4!%v%,\N#; * , -dV 4C  \\%--"5\ 6 (&%v~~ ! H  % % ' (B fd #I   M[ ( (  M \\&&(F F FJJw'E6::h+?E2F3  7 !\\55:CF*C,+E+, C:7E+9C::A1E++F*=F  F*F%%F*- G 6GG cZKtjt||||d{S7w)NrR )rorr\ )rYrrjrS s rV_telegram_onboarding_requestr^ !s4"") !   s "+)+z(/api/messaging/telegram/onboarding/startcTK|jxsdjxsd}tddd|id{}t|j dxsdj}t|j dxsdj}t|j d xsdj}t|j d xsdj}t|j d xs|j}t|j d xsdj}|r|r|r|s t d dt 5tt||t|t|<ddd|||||dS7a#1swYxYww)NrPOSTz/v1/telegram/pairingsrrlr rr: r deep_linkr suggested_usernamer7Telegram setup service returned an incomplete response.r)r: r r )r rb ra r r ) rrr^ rrr7_telegram_onboarding_lockrI r9 rG r> ) rjrrr r: r ra r rb s rVstart_telegram_onboardingre "s /668JNH0( #G W[[.4"5;;=JW[[.4"5;;=JW[[.4"5;;=JGKK ,2399;IW[[.;)<BBDJW[[)=>D"EKKM ZzL  # +-4N!!*:65 %j1 !0   5$  s(6F(FD'F( )F F(F%!F(z//api/messaging/telegram/onboarding/{pairing_id}cHKt5ttj|}|s t dd|j r.d|j |j|jdcdddS|j}dddtddtjj|d  d{}t|jd xsdj}|d k(r9t5tj|}|r |jnd}dddd d S|dk(rt|jdxsdj}t|jdxsdj}|s t ddt!|jd} t5tj|}|s t dd||_|xsd|_| |_d|j |j|jdcdddS|dvrrN r r/ z9Telegram setup is no longer available. Start a new setup.z2Telegram setup service returned an unknown status.)rd rI r> rr7r; r< r= r r: r^ r`rquoterrrK rPrQ ) r r r: rrcrr r; r< r= s rVget_telegram_onboarding_statusrk 4"s "'+-.22:>Q    ! & 3 3!'!5!5$// ''&& '"1 !3!3JR!3!H IJG X&," - 3 3 5F  & ?377 CG/6++BJ ?$:>>  G,2399; 7;;~6<"=CCE P 4GKK4PQ & 266zBF# #U )F "."6$F #0F ! & 3 3!'!5!5$//   "'' & @ ) - -j$ ? @5K   C E''" ? ?  $ @ @sJ"AI-( J"2 I->;J"9I::;J"5&I=BJ"4A"J J"*J,J"-I72 J"=JJ" JJ"JJ"c t|\}}|r tj d|j dd|j dS#t$r-}tjddt |dcYd}~Sd}~wwxYw) azBest-effort gateway restart after saving Telegram QR onboarding. The QR flow naturally pulls users into Telegram on another device. If the saved token waits on a separate dashboard restart click, Hermes appears broken from the chat side. Keep the config save authoritative, but report restart failures so the UI can fall back to the existing manual banner. z8Failed to auto-restart gateway after Telegram onboardingFrNz?Telegram onboarding: reusing in-flight gateway restart (pid %s)Trrrrs rV*_restart_gateway_after_telegram_onboardingrm ~"s| -g6 f M HH  +xx    QR$ X   rz5/api/messaging/telegram/onboarding/{pairing_id}/applycKg}t}|jD]C}t|}|s tdd||vs"|j ||j |E|s tddt 5ttj|}|s tdd|j}|j} |s tdd ddd|jxs|} t| 5td td d j|t!d d dddt 5tj-|ddddt/| } d d  | d d| S#1swYxYw#1swYRxYw#t$rt"$r} tdt%| | d} ~ wt&$r(} t(j+dtdd| d} ~ wwxYw#1swYxYww)Nrz*Allowed Telegram user IDs must be numeric.rz*Add at least one allowed Telegram user ID.rrg rz Telegram setup is not ready yet.rrrrsTz Telegram onboarding apply failedrYzFailed to save Telegram setup.r)rr-r< r2 )rrrK r7rrrd rI r> rr; r< rrrrr rrr\rQrKrPrm ) r rjrrrraw_idrr r; r< r+ rr4 s rVapply_telegram_onboardingrp "s 5D'' 008 C  T ! HHZ  # #J / 0 ?  #+-.22:>Q $$ ** 9   / - . 6 / ; 3SXX>N5O P #J 5 6 #<%))*d;<@@QRN$+,=>>     M$ 6 6  GCH=3F  9:3  < rP)r s rVcancel_telegram_onboardingrr "s< "<%))*d;< $<< $<s;, ;8 ;z/api/messaging/platformsc Kt|5}t}t}tt t |dt Dcgc]}t||||duc}dcdddScc}w#1swYyxYww)NrTr )rgateway_start_commandr)rrr2rrrr r )r scoped_dirrrrs rVget_messaging_platformsrw "s   Jj %'LN+%=gw%O 9: ,; $8N        s. B>A7 A2 $A7( B2A77B<Brc8ddlm}m}||vry|xsdj}|r|j dk(rddlm}|}n t||}|dvrytd5|js dddy dddd |d |d S#1swYxYw) uReason enabling ``platform_id`` on the target profile would break a multiplexed gateway, or ``None`` when the change is allowed. Mirrors the gateway's startup rule (``_start_one_profile_adapters`` in gateway/run.py): with ``gateway.multiplex_profiles`` on, the default profile owns the single shared HTTP listener and serves every profile via the ``/p//`` prefix, so a SECONDARY profile must never enable a port-binding platform. Without this pre-write check the dashboard happily persisted the invalid config and the shared gateway died with ``MultiplexConfigError`` on its next start — for ALL profiles. Only *enabling* is blocked; disabling/clearing stays allowed so users can repair an already-invalid profile. r)PORT_BINDING_PLATFORM_VALUESrNrrget_active_profile_namer?rOr?zCannot enable 'z' on profile 'z': it binds its own listener port, and gateway.multiplex_profiles is on, so the default profile owns the single shared HTTP listener for every profile. Configure this channel on the default profile instead (disabling or clearing it here is still allowed).) rry rrrrr{ _resolve_profile_dirrmultiplex_profiles)rrry r requestedr{ rjs rV _multiplex_port_binding_conflictr "s Q66"(b//1I  )Y6? )*Y' && y )"$777 +nVH=< < s "BBz&/api/messaging/platforms/{platform_id}c Kt|}|stdd||jxs|}|jr6t ||}|r(t j d||xsdtd|t|d} t|jxs|5|jD]&}||vrtd|d |d t|(|jjD]J\}}||vrtd|d |d |j} | s2t||| t|| L|jt!||jdddt j d ||xsd|jt#|jt#|jd |d S#1swY\xYw#t$rt$$r$t j'd|tddwxYww)NrUnknown messaging platform: rz\Rejected messaging platform update: platform=%s profile=%s (multiplex port-binding conflict)rrr+ rz is not configurable for rSzYMessaging platform updated: platform=%s profile=%s enabled=%s env_keys=%s cleared_keys=%sT)rr-z&PUT /api/messaging/platforms/%s failedrYr|)r r7rrr rQrRrrrr rrrrrr rr\rK) rrjrrtarget_profileconflict allowed_envrrtrimmeds rVupdate_messaging_platformr .#s K (E &B;-$P  \\,WN ||3KP  II4+)    CA AeJ'(K'M DLL3G 4 C~~ &k)'$'"%&?f O!%  &#hhnn. 1 Uk)'$'"%&?f O ++-1+sGL"30 1||'' T\\B+ C0  *   'i LL 488  4>> "  44C C CD  M ?M4KLLMs>A>G9GBF4=F4AG3G94F=9G6G66G9z+/api/messaging/platforms/{platform_id}/testc Kt|}|stdd|t|5}t}t ||t |du}dddds|dd}d|d |d S|d s@|d Dcgc]}|d r |ds|d}}|rddj |nd}d|d |d S|ds d|d dd S|d dk(rd|d |ddd S|jdr d|d |dd Sd|d dd S#1swYxYwcc}ww)Nrr rrt rrSz2 is disabled. Enable it, then restart the gateway.Frm)rrmr4rr+ rr(rzMissing required setup: rzPlatform setup is incomplete.rzEGateway is not running. Restart the gateway to connect this platform.r Tz is connected.r z]Setup looks complete, but the gateway has not reported a connection yet. Restart the gateway.)r r7rrr r2rr) rrrrv rrr4rrs rVtest_messaging_platformr q#s K (E &B;-$P     Jj - ; 3 5jPT>T  9 6]O#UVgg&67KK < !, Z x %L  'tyy'9&: ;0  gg&67KK $ %W%^  w;&W%-7  {{?#W%/  !r M   s))D$C=*D9D A.D=D Dvisiblec|syt|rt|tsyt|}d|vr)|jddk\r|j ddd}t ||kr|Sd|| dS) uReturn ``...XXXXXX`` (last N chars) for safe display in the UI. We never expose more than the trailing ``visible`` characters of an OAuth access token. JWT prefixes (the part before the first dot) are stripped first when present so the visible suffix is always part of the signing region rather than a meaningless header chunk. Returns the Entra-ID placeholder when handed a callable (Azure Foundry bearer provider) — the callable is NEVER invoked here. rzrr$rru…N)r_rrrrr)rr rxs rV_truncate_tokenr #sw z%5" E A axAGGCLA% HHS! R  1v G89 rXc  ddlm}m}d}|r |}|rf|j drUddd|r|nddt |j d|j d t|j d d Sd } dd lm }|dj} ddl m } ddlm}|D]K}|r||ndxst!j"|}|s)|r||nd} dd|| t |ddd cSdddS#t$rd}d}YwxYw#t$rd}YwxYw#ttf$rYwxYw#t$rd}YwxYw#t$rd}YwxYw)u/Status for the "Anthropic API Key" catalog entry. Two sources, in priority order: 1. ``~/.hermes/.anthropic_oauth.json`` — Hermes-managed PKCE flow (what this entry's Connect button writes) 2. ``ANTHROPIC_API_KEY`` → ``ANTHROPIC_TOKEN`` → ``CLAUDE_CODE_OAUTH_TOKEN`` env vars (registry order) — from ``.env``, the shell, or an external secret source like Bitwarden (whose keys are injected into the process env during ``load_hermes_dotenv()``, so the same check covers them) Claude Code's ``~/.claude/.credentials.json`` is deliberately NOT read here — it has its own dedicated catalog entry (``claude-code`` → ``_claude_code_only_status``). Reporting it under the API-key entry double-counts the token and shadows a real ANTHROPIC_API_KEY. r)read_hermes_oauth_credentials_get_hermes_oauth_fileN accessTokenT hermes_pkcez Hermes PKCE (r? expiresAt refreshTokenrhr source_label token_previewr has_refresh_token)ANTHROPIC_API_KEYANTHROPIC_TOKENCLAUDE_CODE_OAUTH_TOKEN)PROVIDER_REGISTRY anthropic get_env_value)format_secret_source_suffixrrFrhr)agent.anthropic_adapterr r rbr\rr rrr rKeyErrorr<r hermes_cli.env_loaderr rvrw) r r hermes_creds env_var_orderr r r varrrs rV_anthropic_oauth_statusr #s & L$ 8:L ((7#+H^,B,Ddh+iijk,\-=-=m-LM&**;7!%l&6&6~&F!G   _M 5)+6GG 3+E  '4s#$Q299S> 5P,S1VX"eF8,,U3!&    $ //e &(,%!%& L $  "      +&*#+sXC9D DD3E9 D D  DDD0/D03 EE EEc  ddlm}|}|rY|jdrHdddt |jd|jdt |jd d Sd dd S#t$rd}YmwxYw) aSurface Claude Code CLI credentials as their own provider entry. Independent of the Anthropic entry above so users can see whether their Claude Code subscription tokens are actively flowing into Hermes even when they also have a separate Hermes-managed PKCE login. r)read_claude_code_credentialsNr Tclaude_code_cliz~/.claude/.credentials.jsonr r r Fr )r r r\rr r)r credss rV_claude_code_only_statusr $sH,. =)'9,UYY}-EF))K0!%eii&?!@   $ // s A// A=<A=cdddddddS)uStatus for copilot-acp — credentials are owned by the Copilot CLI. There is no cheap programmatic credential probe for the ACP subprocess, so this is a read-only "managed by the Copilot CLI" card (like claude-code): Hermes never claims a login state it can't verify. F copilot_cliz!Managed by the GitHub Copilot CLINr rrrXrV_copilot_acp_statusr -$s ;"  rXrO Nous Portal device_codezhermes auth add nouszhttps://portal.nousresearch.comrrSflow cli_commandr, status_fn openai-codexzOpenAI OAuth (ChatGPT)zhermes auth add openai-codexz https://platform.openai.com/docs qwen-oauthzQwen (via Qwen CLI)externalzhermes auth add qwen-oauthz#https://github.com/QwenLM/qwen-code minimax-oauthzMiniMax (OAuth)zhermes auth add minimax-oauthzhttps://www.minimax.io xai-oauthz%xAI Grok OAuth (SuperGrok / Premium+)zhermes auth add xai-oauthz@https://hermes-agent.nousresearch.com/docs/guides/xai-grok-oauthz copilot-acpzGitHub Copilot (ACP)zcopilot /loginz"https://docs.github.com/en/copilotr zAnthropic API Keypkcezhermes auth add anthropicz.https://docs.claude.com/en/api/getting-started claude-codezAAnthropic OAuth: Required Extra Usage Credits to Use Subscriptionzclaude setup-tokenz+https://docs.claude.com/en/docs/claude-code_OAUTH_PROVIDER_CATALOGrc (| |S ddlm}|dk(r|j }t |j dd|j d xsd t|j d |j d t |j d dS|dk(r|j}t |j d|j dxsd|j dxsdt|j ddd|j ddS|dk(r|j}t |j dd|j dxsdt|j d |j dt |j d dS|dk(rT|j}t |j ddd|j dd d!d|j dd"dS|d#k(r|j}t |j d|j dxsd$|j d%xs|j dxsd&t|j ddd"|j ddS|j|}t|trd|vr t |j d|j dxs|j d'xs||j d(xsN|j d%xs;|j dxs(|j d)xs|j d*xsd+t|j d xs|j d|j dxs|j d t |j d dSddiS#t$r}dt|dcYd}~Sd}~wwxYw#t$r}dt|dcYd}~Sd}~wwxYw),z@Dispatch to the right status helper for an OAuth provider entry.NF)rhrr)rrOrh nous_portalrir access_tokenaccess_expires_atr r r r openai_codex auth_modez OpenAI Codexr last_refresh)rhrr r r r r r qwen_cliauth_store_pathzQwen CLIr r minimax_oauthz MiniMax (regionglobalr?Tr xai_oauth auth_storezxAI Grok OAuthrUr rrSr)r\rr]rrbrrr get_codex_auth_statusget_qwen_auth_statusget_minimax_oauth_auth_statusget_xai_oauth_auth_statusget_auth_statusrr)rr rhauthrs rV_resolve_provider_statusr $s 9; S5, & ,,.C!#''+"67' #(9 : Km!01H!I!gg&9:%)#''2E*F%G   . (--/C!#''+"67''(+=~ # 4 F!01C!D"%* # 7  , &,,.C!#''+"67$ #(9 : Hj!01H!I!ggl3%)#''2E*F%G   / )557C!#''+"67)"+CGGHh,G+H J!%!ggl3%)   + %113C "#''+"67''(+:{ # 5 ^9J ^N^!01C!D"%) # 7 ##K0 c4 [C%7!#''+"67''(+Qswwz/BQkGGN+ww|,ww01wwz*wwv  !0GGN+Aswwy/A""ggl3Ssww?R7S%)#''2E*F%G &  m 9!&Q8 8 9h 5"SV445s^O B O0BO0BO0&AO0?BO0D1O0 O- O("O-(O-0 P9 P P Pc|jddk7ry|jddk(rd}tjdk(rd|S|Sy) uaShell command that clears an external provider's credentials. External providers store their credentials outside Hermes, so the disconnect API deliberately refuses them (we never delete files another CLI owns on the user's behalf via a silent API call). For the ones we know how to clear we instead hand the GUI a command it can *run in the embedded terminal* — the user sees exactly what executes, and Hermes then stops resolving the token. Claude Code has no scriptable logout (only the interactive ``/logout``), so we remove the credential the same way logout does: the macOS Keychain entry (``Claude Code-credentials``) and/or the ``~/.claude/.credentials.json`` file — the two sources ``read_claude_code_credentials()`` consults. Returns None for providers we can't safely clear (the GUI shows a manual hint). r r Nrr z!rm -f ~/.claude/.credentials.jsondarwinzKsecurity delete-generic-password -s "Claude Code-credentials" 2>/dev/null; )rr,r-)rUrm_files rV"_oauth_provider_disconnect_commandr $sQ||Fz)||D]*5 <<8 #`ah`ij j rXcp|jddk(r t|ryy|jddk(ryy) zJReturn the manual disconnect path when the API cannot clear this provider.r r uCManaged outside Hermes — run the disconnect command to remove it.z0Managed by that provider's CLI; remove it there.rru2Remove the API key from Settings → Keys instead.N)rr )rUrcs rV_oauth_provider_disconnect_hintr %s;||Fz) -h 7YA zz(y(C rXc g}t}tD]8}|d|vr |j|d|jt |: ddlm}|D]}|jdk7s|j|vr!|j|j|j|j|jdd|j|jxsddd  |S#t$rY|SwxYw) uBuild the Accounts-tab provider list. MEMBERSHIP is the union of: 1. ``_OAUTH_PROVIDER_CATALOG`` — the explicit, hand-tuned cards that carry bespoke flow / status_fn / cli_command (including the api-key Anthropic PKCE card and the synthetic claude-code subscription row, which are not catalog providers), and 2. every accounts-tab provider in the unified ``provider_catalog()`` (the ``hermes model`` universe) — so any OAuth/external provider added as a plugin appears automatically, with sensible defaults, even if no explicit card was written for it. The explicit catalog wins on metadata; the unified catalog guarantees we never silently drop a provider the CLI picker offers. Order: explicit cards first (their curated order), then any catalog-only providers appended in ``hermes model`` order. rrraccountsr zhermes auth add rNr ) rr rrrrrrr[rgrr\)r"rrrrs rV_build_oauth_catalogr %s$"$DUD)! ;$   t DK ! @!# Auu "affn HHQVV  KKff"!1!&&:LL.B!    K   K sBC$$ C10C1z/api/providers/oauthc4Kt|5g}tD]a}t|d|jd}t ||}|j |d|d|d|d|d|t ||du|d cd |icdddS#1swYyxYww) uzEnumerate every OAuth-capable LLM provider with current status. Response shape (per provider): id stable identifier (used in DELETE path) name human label flow "pkce" | "device_code" | "external" cli_command fallback CLI command for users to run manually disconnect_command shell command that clears an external provider's creds (run in the embedded terminal), else null docs_url external docs/portal link for the "Learn more" link status: logged_in bool — currently has usable creds source short slug ("hermes_pkce", "claude_code", ...) source_label human-readable origin (file path, env var name) token_preview last N chars of the token, never the full token expires_at ISO timestamp string or null has_refresh_token bool Membership is derived from the unified provider_catalog() so this stays in sync with the `hermes model` picker; _OAUTH_OVERRIDES supplies per-provider flow/status/cli metadata. rr rSr r r,N) rrSr r r,disconnect_hintdisconnect_commanddisconnectablercr)rr r rr rr )rrrrcr s rVlist_oauth_providersr P%s0  ( %' A-agquu[7IJF=aHO   g& &  /jM#2&H&K"1T"9    Y'!(((s BA4B  B BBz"/api/providers/oauth/{provider_id}c Kt|t|5tDcic]}|d| }}|j|}|+t dd|ddj t |t|i}|rt d|dd |t||jd }t||}|rt d|dd ||d k(rrd } d dl m } | } | jr| jd} d dlm} | d xs|}t j#d|t%||dcdddS d dlm} m} | |}|dk(r| t j#d||t%||dcdddScc}w#t$rYwxYw#t$rYwxYw#t$r1} t j)d|t dt+| d} ~ wwxYw#1swYyxYww)zDDisconnect an OAuth provider. Token-protected (matches /env/reveal).rNrzUnknown provider: . Available: rrrSz' cannot be disconnected automatically. r r Frr T)clear_provider_authzoauth/disconnect: %s)rrU)r !invalidate_nous_auth_status_cacherOz!oauth/disconnect: %s (cleared=%s)zdisconnect %s failedrY)rrr rr7rrr r r r r{rr\rr rQrRrr rKr)rrrr catalog_by_idrUr rcclearedr oauth_filer r rs rVdisconnect_oauth_providerr {%sA7  8@-A-CD4!D D $$[1  +K=9%%)YYvm/D%E$FH  :(BG "6*++RSbRcd  *+x||K7PQ9(FK "6*++RSbRcd  + %G J35 $$&%%'"G ?-k:Eg II,k :w-[A[8@8@^ @ ^)+6Gf$13 II9; Pw-[Ak8@8@DF      @ NN1; ?CA? ? @m8@8@sH G6 FB(G6/F F*#G6 H AF9 HG6 F'$G6&F''G6* F63G65F66G69 G3,G..G33G66G?;H_oauth_sessions)_OAUTH_CLIENT_ID_OAUTH_TOKEN_URL_OAUTH_TOKEN_URLS_OAUTH_REDIRECT_URI _OAUTH_SCOPES_generate_pkcez!https://claude.ai/oauth/authorizectjtz }t5tj Dcgc]\}}|d|ks|}}}|D]}tj |d dddycc}}w#1swYyxYw)z:Drop expired sessions. Called opportunistically on /start. created_atN)r}_OAUTH_SESSION_TTL_SECONDS_oauth_sessions_lockr rrP)r& rsessstales rV_gc_oauth_sessionsr %s YY[5 5F +&5&;&;&=]dlASV\A\]] +C   T * +++]++s"A?A9 A9 A?9A??BcZ|xsdj}|r|jdk(ry|S)Nrr)rr)rr s rV_oauth_profile_namer &s.B%%'I  )Y6 rXc6t|}|r t|yyr)r r} )rrs rV_validate_oauth_profiler &s&w/L\*rXr ctjd}t|}||||tjddd}t5|t |<ddd||fS#1swY||fSxYw)zICreate + register a new OAuth session, return (session_id, session_dict).rpendingN)rrUr rr rcr )rr* r r}r r )rr rrrr s rV_new_oauth_sessionr &ss    #C&w/Liik D $#$ 9$ 9s  AA%rct5tj|}|r|jdnd}dddxs t|S#1swYxYw)zCReturn the profile that owns an OAuth session, if one was provided.rN)r r rr )rrr rs rV_oauth_session_profiler %&sQ 8"":.)-$((9%48  3)(3388s +A  Ar refresh_token expires_at_msc Bddlm}|}|||d}ddlm}|||dd ddlm}m}m} m} dd l } |d } | jD cgc]$} t| d d j| d s#| &}} |D]} | jt| dd !|d | jj d dd| d| d ||| }| j#|y cc} w#t$rYswxYw#t$r } t$j'd| Yd } ~ y d } ~ wwxYw)zPersist Anthropic PKCE creds to both Hermes file AND credential pool. Mirrors what auth_commands.add_command does so the dashboard flow leaves the system in the same state as ``hermes auth add anthropic``. rr )r r r r8r$r;)indentr)PooledCredential load_poolAUTH_TYPE_OAUTH SOURCE_MANUALNr rrz:dashboard_pkcerzdashboard PKCE) rUrrgrpriorityrr r r z)anthropic pool add (dashboard) failed: %s)r r rr9agent.credential_poolr r r r uuidrrr remove_entryr\uuid4hex add_entryrQrS)r r r r r rr9r r r r r poolrrrs rV_save_anthropic_oauth_credsr 0&sC ?')J#%"G(j'!%@E  %#||~x!Hb1I1T1TXeWffuUv1wAxx A !!'!T2"67  ! zz|#"%#_O4%''   u#y   E @!DDEsT*C5$C!6C!:C5C&AC5!C5& C2/C51C22C55 D>DDc  ts tddt\}}tdd|\}}||d<||d<d td t t |d |d }td tjj|}|d|tdS)z9Begin PKCE flow. Returns the auth URL the UI should open.iz/Anthropic OAuth not available (missing adapter)rr r rverifierrmrrRS256)rR client_id response_type redirect_urircode_challengecode_challenge_methodrm?)rr auth_url expires_in) _ANTHROPIC_OAUTH_AVAILABLEr7_generate_pkce_pairr _ANTHROPIC_OAUTH_CLIENT_ID_ANTHROPIC_OAUTH_REDIRECT_URI_ANTHROPIC_OAUTH_SCOPES_ANTHROPIC_OAUTH_AUTHORIZE_URLr`r urlencoder )rr challengerr r r s rV_start_anthropic_pkcer( i&s %4eff-/Hi";HICDDM/5(#!' F116<<3I3I&3Q2RSH0  rX code_inputc xt5tj|}dddr|ddk7s|ddk7r tdd|d d k7rd |d |jd d S|j j dd}|dj }|sd ddd St |dkDr|dnd}tjdt||xs|dt|ddj}d}d} tD]} tjj| |dddd} tjj!| d5} tj"| j%j'}dddn|%t5d|d <d| |d <dddd d|d d S|jd d}|jd!d}t+|jd"xsd#}|s"t5d|d <d$|d <dddd d|d d St+t-j,d%z|d%zz} t/t1||5t3|||dddt5d'|d <dddt4j7d(|d)d'd*S#1swYuxYw#1swY(xYw#t($r } | } Yd} ~ d} ~ wwxYw#1swY-xYw#1swYxYw#1swYxYw#t($r<} t5d|d <d&| |d <dddn #1swYnxYwd d|d d cYd} ~ Sd} ~ wwxYw#1swYxYw)+z> D w;MNN&)%j1n%("JJ*/$5W 5j)  vxFH0 nn$$  24%  ''R'8 :DDIIK$6$6$89 : "~ ! I$DN&=hZ$HD ! Iw4;PQQ::nb1LJJ3MVZZ -56J  ! ?$DN$>D ! ?w4;PQQ d*+zD/@AMR 2:wG H T ' m] S T $#X$IIBJO* --O//L : : H   I I ? ? T T R ! 8$DN&3A3$7D ! 8 8 8w4;PQQ R $$sJ$!J*2J7J* K3 K6K( KK('L0JJ' "J** K3J;;KK KK%!K(( L-1L(7L L(L L("L-(L-0L9c l K|dk(r}ddlmm}ddl|d}t j dxs#t j dxs |j jd|j|jfd}tjjd|d{\}}tdd | \}}t|d |d <t|d |d <t!j t|d z|d <|d<|d<||d<t#j$t&|fdd|ddj)|d t|dt|dt|d t|d dS|dk(rtdd | \}} t#j$t*|fdd|ddj)t!j,dz} t!j,| krut.5t0j3|} ddd r| j3ds| ddk7rn5tj4dd{t!j,| krut.5t0j3|i} ddd j3ddk(r t7d| j3d xsd!"| j3ds t7d#d$"|d | d| d%t| j3d xsd&t| j3d xsd'dS|d(k(rdd)lm} mmm} ddl| \}t j d*xs| jdfd+}tj@jd|d{}td(d | \}}|j3d }| t|nd|d,<t|d|d<||d-<|d.<|d<|d<d/|d0<t|d1}||d2<|d3kDr0|d4z }tCdt|t!j z }nt!j |z}|}||d <t#j$tD|fdd|ddj)|d t|dt|d5|tCd6|d,xsd7d8zdS|d9k(rdd:lm#ddlfd;}tjjd|d{}td9d | \}}t|d |d <t|d |d <t!j t|d z|d <t#j$tH|fdd|ddj)|d t|dt|j3dxs|d5t|d t|d dSt7d"7Y#1swYxYw7#1swYxYw7z7w)?a!Initiate a device-code flow (Nous, OpenAI Codex, MiniMax, or xAI). Calls the provider's device-auth endpoint via the existing CLI helpers, then spawns a background poller. Returns the user-facing display fields so the UI can render the verification page link + user code. rOr)_request_device_coder NHERMES_PORTAL_BASE_URLNOUS_PORTAL_BASE_URLrcjjdddi5}|fcdddS#1swYyxYw)N.@rIrHr[r)rerir rr r )rer8 r r rirs rV_do_nous_device_requestz8_start_device_code_flow.._do_nous_device_request&sa d+!#56 (%(7"+#     s >Ar r rJr r rir rTz oauth-poll-r ri user_codeverification_uri_complete)rr r@ verification_urlr poll_intervalr z oauth-codex-rrcr rrrYr zdevice-auth failedriz2device-auth timed out before returning a user coderB r rr )_minimax_pkce_pair_minimax_request_user_codeMINIMAX_OAUTH_CLIENT_IDMINIMAX_OAUTH_GLOBAL_BASEMINIMAX_PORTAL_BASE_URLcjjdddid5}|cdddS#1swYyxYw)Nr< rIrHTr[rfollow_redirects)rerir r rmr> )rerF rE r' r rirms rV_do_minimax_requestz4_start_device_code_flow.._do_minimax_requestG's] d+!#56!% 1!$35#,    s >A interval_msr. rmr r expired_inexpired_in_rawlJ)g@@verification_urir$r]r/ r )_xai_oauth_request_device_codecjjdddi5}|cdddS#1swYyxYw)N4@rIrHr= r> )rerQ r s rV_do_xai_device_requestz7_start_device_code_flow.._do_xai_device_request'sK d+!#56 >5f=  > > >s 8Ar Provider z" does not support device-code flow)%rr8 r r rvrwrir^r rrorrur rrr}rxrz _nous_pollerrT_codex_full_login_worker monotonicr r rsleepr7rD rE rF rG rtr\_minimax_pollerrQ _xai_device_poller)rrr pconfigr? device_dataeffective_scoperr rdeadlinerxrD rG r rL interval_rawrO r expires_in_secondsrT rF rE r8 rQ r' r r rirrms @@@@@@@@@@rV_start_device_code_flowrb &sff  #F+ II. / 'yy/0 '&& &+  %%    .5-E-E-G-W-W ). ( $ _'v}gN T!+m"<=]{:67Z!YY[3{>#b(nn)% -#'', -aeeK(AhK9,D--$ $ $ nn) " -##C,A - 55?g %Co8N8fRfg guu[!C8lm m!; !"4 5aeeL18S9 z!2!7a8   o%  %7%9")U II/ 0 M4M &+   $224DD %  ' wW T#z2 !-!9C t ] K 89[ (_W "1 3[!X [67!/  - -*V3M!$QMDIIK,G(H!I  IIK.8M!/ *\"s2Awi(  %'![56 #K0B$C D, T-%8%@DT$IJ   k!B >$446FF (  '{M7S T!+m"<=]{:67Z!YY[3{?J++ \\%--"5J\?]\ ^ bh( /#'%& J hll8<<( |49: .",..1E"F"^^G,5$..x@&~6'^^O<==?'&&s}}'Bx||T^^`"&# 2:> ? 16 $#J A $Z 0 1" ('DN ( CZPa//  6 1 1 ( ( + DjRST ! +$DN$'FD ! + + + + ++sH$H53HC4H56HH5H)$H5H HH5H&"H5)H2.H55 J>JI8/ J8J =JJcddlm}m}m}m}m}ddlm}m}ddl}t5tj|} ddd sy| d} | d} | d} | d} | jd }| d } |j|jd d d id5}||| | | | ||}ddd|j|j}|t!d|}t#dt!||j%z }d| jdd| || ||jdd|d|d|jd|j'|j(||jj'|d }t+t-|5||dddt5d| d<dddt.j1d|y#1swYxYw#1swY:==?0(00(,,ik& "2:> ? 1 $Z 0 1 ! ('DN ( F Sq//  R 1 1 ( ( + GUVW ! +$DN$'FD ! + + + + ++sG-%HG"C1H G)H*G50HGG&!H)G2.H5G>:H I I'I; II IIc fddl}ddlm}m}m}m}t 5tj|}dddsy|d}t|d}tdt|dtjz } |d} |j|jdd d i 5} || | d || | } dddt jddxsdjt| jddxsdjt| jddxsdj| jdt| jdxsdjxsdd} t!t#|5|| | t%j&t(j*j-j/ddd|dddddt 5d|d<dddt0j3d|y#1swYxYw#1swYyxYw#1swYNxYw#1swYFxYw#t4$rU}t0j7d||t 5d|d<t||d <dddn#1swYnxYwYd}~yYd}~yd}~wwxYw)!z3Background poller for xAI's OAuth device-code flow.rN)_save_xai_oauth_tokens_xai_oauth_discovery_xai_oauth_poll_device_tokenunsuppress_credential_sourcer rJrf r rS rIrHr= token_endpoint)r r r rC r rr id_tokenr rg rh )r r r r rg r r oauth_device_code) discoveryr r r r0 rcz.oauth/device: xai login completed (session=%s)z,xai device-code poll failed (session=%s): %srr )r rr| r} r~ r r r rrr\r}r r rrrr rryrr r rrQrRr\rS)rr r| r} r~ r r r rJr r rero tokensrs rVr[ r[ <(s /"":./ }%K4 #$HRT,/$))+=>?J,+(. \\MM$'12 5()9:'%& J  ~r B HbIOOQ !D!JKQQSJNN:r:@bAGGI$..6jnn\:FhGMMO[S[  2:> ? E "#%\\(,,7AACKKHVYZ-   )m D! E"" ('DN ( BJO]//  $ E E" ( ( + CZQRS ! +$DN$'FD ! + + + + ++sH 9,I%H-6C"IAH:-I;II H*-H72I:I?II I J0J+8J J+J J++J0c  |j}t|tr|j d}t|trrdDcgc]T}t |j |dj r)t |j |dj V}}|rdj|St|t r |j r|j SdD]F}|j |}t|t s%|j s6|j cSt t|ddxsdj }|ddS#t$rd}YZwxYwcc}w) z8Best-effort extraction of a short provider error detail.Nr)r4error_descriptionrRr!r: )rr4r rrY) rdr\rrrrrrr)rirrrrrrs rV_http_response_error_detailr |(sA))+'4  G$ eT "Luyyb)*002EIIc2&'--/E yy'' eS !ekkm;;= = %CKK$E%%%++-{{}$ % wtVR(.B / 5 5 7D :'  sEAE0 E-,E-ct|dd}t|}|j}d|vr d|vsd|vrd}nd}|r |d|d |d S|d|d S) z8Dashboard-facing OpenAI Codex device-code start failure.rrdeviceauthorienablezOpenAI rejected the device-code login request. Your OpenAI account may need device-code authorization enabled before Hermes can start this dashboard login. Enable device-code authorization in OpenAI, then return here and click Login again.zOpenAI rejected the device-code login request. Please try Login again from the dashboard after checking your OpenAI account settings.z (HTTP r r?)rr r)rircrrr4s rV_codex_device_code_start_errorr (s T=) 4F ( .F LLNE5i50H4E A  T '&F8155YgfXQ ''rXc  ddl}ddlm}m}m}d}|j |j d5}|j|dd|id d i }dddjd k7rtt||j}|jd d} |jdd} tdt|jdd} | r| s td|d} t5t j|} | s dddy| | d <| | d<| | d<| | d<d| d<t#j"| dz| d<dddt#j$ dz}d}|j |j d5}t#j$|krxt#j&| |j|d| | dd d i }|jd k(r|j}n'|jdvrwtd|jddd|t5d| d<d| d <dddy|jd!d}|jd"d}|r|s td#|j |j d5}|j|d!||d$||d%d d&i'}dddjd k7rtd(|j|j}|jd)d}|jd*d}|s td+dd,lm}t+t-|5|||d-dddt5d.| d<dddt.j1d/|y#1swY.xYw#1swYExYw#1swY}xYw#1swYyxYw#1swYxYw#1swYsxYw#1swYkxYw#t2$rl}t.j5d0||t5t j|}|rd1|d<t7||d <dddn#1swYnxYwYd}~yYd}~yd}~wwxYw)2uRun the complete OpenAI Codex device-code flow. Codex doesn't use the standard OAuth device-code endpoints; it has its own ``/api/accounts/deviceauth/usercode`` (JSON body, returns ``device_auth_id``) and ``/api/accounts/deviceauth/token`` (JSON body polled until 200). On success the response carries an ``authorization_code`` + ``code_verifier`` that get exchanged at CODEX_OAUTH_TOKEN_URL with grant_type=authorization_code. The flow is replicated inline (rather than calling _codex_device_code_login) because that helper prints/blocks/polls in a single function — we need to surface the user_code to the dashboard the moment we receive it, well before polling completes. rN)CODEX_OAUTH_CLIENT_IDCODEX_OAUTH_TOKEN_URLDEFAULT_CODEX_BASE_URLzhttps://auth.openai.comr< rZz!/api/accounts/deviceauth/usercoder rV rH)rdrr\r@ rdevice_auth_idrrJ5z8device-code response missing user_code or device_auth_idz /codex/devicerB r r r z/api/accounts/deviceauth/token)r r@ >r rzdeviceauth/token poll returned r rcz#Device code expired before approvalr r, r. z=device-auth response missing authorization_code/code_verifierz/deviceauth/callback)r- rRr r r. z!application/x-www-form-urlencoded)rrztoken exchange returned r r z*token exchange did not return access_token)_save_codex_tokens)r r r0 z7oauth/device: openai-codex login completed (session=%s)z0codex device-code worker failed (session=%s): %sr)r rr r r r r postrrr rdrr\rr r r}rX rY r rr rQrRr\rSr)rr r r r issuerrerir] r@ r rC rB r r_ code_resprr, r. token_respr r r r rrxs rVrW rW (se,  +\\%--"5\ 6 &;;(;<!#89');<D    s "=dCD Diik OOK4 $)92>As;??:s#CDE YZ Z$X]3 ! B"&&z2D B B!*D '7D# $%3D! ",D !(D !%tL/A!AD  B>>#d<&88 \\%--"5\ 6 Y&.."X- =){{h<=,:S+-?@# ##s* $ I##z1"%DTEUEUDV#WXX Y  % N!*X(M_% N ']]+?D! or: !^_ _ \\%--"5\ 6 &%"6.'-h.B$C!6%2 ()LM% J   ! !S (!9*:P:P9QRS S"zz."5  ?B7 KL L6 2:> ?   ,!.    " ('DN ( KZXi   B B Y Y  N   ,    ( ( , GUVW ! ,##J/A%( %(V/"  , , , , ,,s1OM;BO-NO6NAO BNO* N"5O>AO N.2B O< N:OOO;NON ONO"N+'O+O.N73O:O?OO O QQ8+P,# Q,P5 1QQz(/api/providers/oauth/{provider_id}/startc0Kt|tt|tDchc]}|d }}|vrt ddt fdtD}|ddk(rt dd|d d  |dd k(rd k(r t | S|ddk(rt| d{S t ddcc}w7#t$rt$r1}tjdt dt|d}~wwxYww)z.Initiate an OAuth login flow. Token-protected.rrUnknown provider rc34K|]}|dk(s |yw)rNr)rrrs rVrz$start_oauth_login..0)sVqqw+?UV r r z uses an external CLI; run `r z ` manuallyr r r r Nzoauth/start %s failedrYzUnsupported flow) rr r r r7rr( rb r\rQrKr)rrrrvalid catalog_entryrs` rVstart_oauth_loginr #)s67G$5 6QtW 6E 6%6G }4UVVV$;VVMV *!]">}]?[>\\fg  <  F *{k/I(9 9  M 10gNN N 2 C0B CC3 7&O  < . <CF;;.row_get)sX c4 773<  s8O  5z!   s)( A 9A  AA AA Nconn_conn connection _connectiona WITH RECURSIVE descendants(id, parent_session_id, started_at) AS ( SELECT id, parent_session_id, started_at FROM sessions WHERE id = ? UNION SELECT s.id, s.parent_session_id, s.started_at FROM sessions s JOIN descendants d ON s.parent_session_id = d.id ) SELECT id, parent_session_id, started_at FROM descendants rrrrrvr$)rrrv'T)rqrrrc^ t|jdxsdS#t$rYywxYw)Nrvr)rrr\rs rVstartedz+_session_latest_descendant..started)s2 .3!4 4  s  ,,r) resolve_session_idrrexecutefetchallrr|rrrr)rrr rr r"raw_rowsrchildrenridrr rrrr candidatess rV_session_latest_descendantr )s    +C bnnS)Rx FD! , 2w % , 2|T * , 2}d +   D << F   (*  C KKc4+%,S2Eq%I%c<;  $$5$NH8ggdm,- 6    + 2 23 7 8  G 5D 5D ,,w !)'!2NAaeeDk6MaN N  D= GT2Q-% G  ,,w  D=Os G"Gc2eZdZUeeed<dZeeed<y)BulkDeleteSessionsrNrrrrXrVr r )s cN!GXc]!rXr c<eZdZUeeeefed<dZe eed<y) SessionImportrNr) rrrrr rr rrrrrXrVr r )s#4S>""!GXc]!rXr cKt}|j23d{}t|t|ztkDr t dd|j |F7A6t |Sw)NrBz#Session import payload is too larger) bytearrayr r_SESSION_IMPORT_MAX_BYTESr7rr)rrjrs rV_read_session_import_bodyr )sh ;D~~'e t9s5z !$= =C8]^ ^ E' ;s%A1A%A#A%>A1#A%% A1ct|} |j||jS#|jwxYwr)r~import_sessionsr)rrrs rV_import_sessions_for_profiler *s2 %g .B!!(+   s .Az/api/sessions/bulk-deletecKtjdkDr tdddtffd }t j |d{}d|d S7 w) uDelete every session in ``body.ids`` in a single DB transaction. Backs the dashboard's bulk-select-and-delete flow on the sessions page. POST (not DELETE) because most HTTP clients refuse to send a request body on DELETE and a body is the natural shape for a list of IDs — Starlette accepts both, but POSTing a list keeps proxies, curl, and the browser ``fetch`` API consistent. Per-row contract matches :meth:`SessionDB.delete_sessions`: * Unknown IDs are silently skipped (the response ``deleted`` count reflects what really happened, not the input length). This is deliberate — UI selection state can race against another tab's delete, and we'd rather succeed-on-the-rest than fail-the-whole- batch. * Children of every deleted parent are orphaned, not cascade- deleted. * Active and archived sessions ARE deleted when explicitly selected — unlike ``DELETE /api/sessions/empty``, the user hand-picked the rows so we trust the selection. * Like the other session-delete endpoints, this does NOT pass a ``sessions_dir`` through; on-disk transcript / request-dump cleanup runs at the CLI/agent layer on the next prune pass. The response carries the actual deleted count, so the dashboard can surface it in a toast. The IDs that were removed are not echoed back because the client already knows what it asked to delete (unknown IDs are silently skipped — see contract above) and can prune its in-memory list directly from the request. rYrz$ids must contain at most 500 entriesrrKctj} |jj|j S#|j wxYwr)r~rdelete_sessionsrr)rrjs rV_deletez.bulk_delete_sessions_endpoint.._delete3*s; )$,, 7 %%dhh/ HHJBHHJs AANTrdeleted)rrr7rror)rjr r s` rVbulk_delete_sessions_endpointr *s^J 488}s9  S%%g..G7 ++/sA A A Az/api/sessions/importcK t|d{}tj|} t j t|j|jd{}|jdds td||S7r#t$rt$r}tdd|d}~wwxYw7O#t$r}tdt||d}~wwxYww)a"Import one or more sessions exported from the dashboard or CLI. This is intentionally separate from ``/api/ops/import``: that endpoint restores a whole Hermes backup archive, while this endpoint is scoped to session rows/messages and is safe to use from the Sessions page. NrzInvalid session import payloadrrF) r r model_validate_jsonr7rrorr rrrr)rraw_bodyrjrr3s rVimport_sessions_endpointr >*s_27;;00: G(()Et||UYUbUbcc ::dE "F;; M<  _4TU[^^_d GCH=3FGsgCBBB2B1B/ B1$!CBB,B''B,,C/B11 C:CCCz/api/sessions/empty/countcfKdtffd }dtj|d{iS7w)uReturn the number of empty, ended, non-archived sessions. Drives the dashboard's "Delete empty (N)" button — when N is 0 the UI hides the affordance so users aren't presented with a button that does nothing. Cheap, single-COUNT query. rKct} |j|jS#|jwxYwr)r~count_empty_sessionsrrrs rV_countz-count_empty_sessions_endpoint.._count`*s1 )' 2 **, HHJBHHJ .ArNrror)rr s` rVcount_empty_sessions_endpointr X*s1C 7,,V44 554s &1/1z/api/sessions/emptyclKdtffd }tj|d{}d|dS7 w)uXDelete every empty (``message_count == 0``), ended, non-archived session in a single transaction. Safety contract mirrors :meth:`SessionDB.delete_empty_sessions`: * Active sessions are skipped (``ended_at IS NULL``) so a live agent isn't yanked mid-handshake. * Archived sessions are skipped — the user explicitly chose to keep those rows. * Children of deleted parents are orphaned, not cascade-deleted. Like the single-session ``DELETE /api/sessions/{id}`` endpoint below, this doesn't pass a ``sessions_dir`` through — the on-disk transcript / request-dump cleanup is wired at the CLI/agent layer but the web server historically leaves file cleanup to the next prune-on-startup pass. Matching that pre-existing trade-off keeps the two delete endpoints' DB-vs-disk behaviour consistent. rKct} |j|jS#|jwxYwr)r~delete_empty_sessionsrr s rVr z/delete_empty_sessions_endpoint.._delete~*s1 )' 2 ++- HHJBHHJr NTr r )rr r s` rVdelete_empty_sessions_endpointr j*s8(S%%g..G7 ++/s %42 4z/api/sessions/statscKt|} |jd}|jd}|jd}|j}i} |jdddD]8}t |j dxsd}|j |d d z||<: |||||d |jS#t $rY#wxYw#|jwxYww) zSession-store statistics for the Sessions page (mirrors `hermes sessions stats`). Registered before ``/api/sessions/{session_id}`` so the literal ``stats`` path isn't captured as a session id by the parameterized route. T)rvF)rwr )rqrvrrrrrr)r active_storergmessages by_source)r~r message_countr|rrr\r) rrrr rgr r rxrs rVget_session_statsr *s &g .B  $ 7'''? ##$#7##%$&  **\`*a ;!%%/2U3!*sA!6!: # ; (  "         sB C$ACAC'C/C$ C  C C  CC!!C$cfddlm}|s|St|\}}|t|dz S)ukOpen a SessionDB for read paths, optionally for another profile. ``profile`` None/empty → this process's own ``state.db`` (the common, single-profile case). A named profile opens that profile's on-disk ``state.db`` directly so the primary backend can serve cross-profile reads (transcripts, detail) without spawning that profile's backend. rrr)r)rzrnr}r )rrn_namer9s rVr~r~*s4' {$W-KE4 T$Z*4 55rXz/api/sessions/{session_id}cKt|} |j|}|r|j|nd}|s tdd|rt |d|d<||j S#|j wxYww)NrSession not foundrrr)r~r rr7r}r)rrrrrs rVget_session_detailr *st %g .B ##J/),"..%$C8KL L !3G!A A)A>)A;;A>z,/api/sessions/{session_id}/latest-descendantcKfd}tj|d{\}}|s tdd|r|dn||t|xr||dk7dS77w)Nc~t} t||jS#|jwxYwr)r~r r)rrrs rV_lookupz.get_session_latest_descendant.._lookup*s/ )' 2 -j"= HHJBHHJs *<rr rr)requested_session_idrrr)rorr7r)rrr latestrs`` rVget_session_latest_descendantr *sl !**733LFD 4GHH+/QZ247!23  4sAA8Az#/api/sessions/{session_id}/messagescKfd}tj|d{}| tdd|\}}}|||t|ddS7,w)Nc t} |j}|s |jy|j|} t dnd}|||j ||f|jS#|jwxYw)NrYrqr)r~r rresolve_resume_session_idr get_messages)rr_limitrqrrrs rV_readz#get_session_messages.._read*s )' 2 '' 3C HHJ ..s3C(-(9S_tF6& QQ HHJBHHJsA;7A;;B rr r)rqrreturned)rr pagination)rorr7r) rrrqrr r3rr r s ```` rVget_session_messagesr *sg $$U+ +F ~4GHH"CH    ,s!AA-AcXKfd}tj|d{S7w)Nct} |j}|sddd|jS|j|ddi|jS#|jwxYw)NT)ralready_absentr)r~r rdelete_sessionrrrrs rVr z(delete_session_endpoint.._delete+sd )' 2 '' 3C"d; HHJ   c "$< HHJBHHJsAAA-)ror)rrr s`` rVdelete_session_endpointr +s% (""7+ ++ +s *(*cJeZdZUdZeeed<dZeeed<dZ eeed<y) SessionRenameNrrgr) rrrrrrrrgrrrrXrVr r +s.E8C=#Hhtn#"GXc]!rXr c~Kt|j} |j|}|s tdd|j|j tdd|j! |j ||jxsd|j |j||j d|j|xsdd }|j t|j |d <||jS#t$r}tdt|d}~wwxYw#|jwxYww) aUpdate a session: rename (or clear its title) and/or archive it. ``title`` renames (empty/null clears the title); ``archived`` soft-hides or restores the session. Either field may be omitted. ``profile`` targets another profile's session. rr rNrz5Nothing to update; provide 'title' and/or 'archived'.rT)rrrg) r~rr r7rrgset_session_titlerrset_session_archivedget_session_titlerr)rrjrrrr3s rVrename_session_endpointr $+s  &dll 3B##J/C8KL L :: $--"7N  :: ! D$$S$***:; == $  # #C 7r';';C'@'FBG == $!%dmm!4F:    D#CFCC D  sBD=AD(+ D A%D(0D= D% D  D%%D((D::D=z!/api/sessions/{session_id}/exportczKfd}tj|d{}| tdd|S7w)z6Export a single session (metadata + messages) as JSON.ct} |j}|r|j|nd |jS#|jwxYwr)r~r export_sessionrr s rV_exportz(export_session_endpoint.._exportI+sJ )' 2 '' 3C-02$$S)d : HHJBHHJs %AANrr r)rorr7)rrr rs`` rVexport_session_endpointr F+s>""7+ +D |4GHH K ,s ;9;ceZdZUdZeeed<dZeeed<dZ eeed<dZ eeed<dZ eeed<dZ eeed<dZ eeed <dZeeed <dZeeed <dZeeed <dZeeed <dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeeed<dZeed<dZ eed<y) SessionPruneZolder_than_daysNrrstarted_before started_after title_likerrjrf max_messages model_likerUrchat_id chat_type branch_like min_tokensr)min_costmax_costmin_tool_callsmax_tool_callsFrvdry_run)!rrrr rrrrrrr r r rrjrfrr r rUrr r r r r)r r r r rvrr rrXrVr r W+sK')OXe_) FHSM !GXc]!&*NHUO*%)M8E?) $J $ $J $ $J $"&L(3-&"&L(3-& $J $"Hhsm"!GXc]!!GXc]!#Ix}#!%K#% $J $ $J $ $Hhuo$ $Hhuo$$(NHSM($(NHSM("d"GTrXr cjduxsjdu}jjdkr|s tddt fddD}dj v}j}|s|r|sd}j rtj dn t}tj } td,id|d jxsdd jd jd jxsdd jxsddjxsddjdj dj"xsddj$xsddj&xsddj(xsddj*xsddj,xsddj.dj0dj2dj4dj6dj8dj:rdnd}j<r|j>d,i|}dd tA||r|d d!nd|r|d"d!nd|D cgc]5} | d#| d | jCd$| jCd%| d!| d&d'7c} d(|jES|d)z } |jFd,d*| jIr| ndi|} d| d+|jEScc} w#|jEwxYw)-zIDelete ended sessions matching filters (mirrors `hermes sessions prune`).Nrrzolder_than_days must be >= 1rc3:K|]}t|duywr)r)rrrjs rVrz"_prune_sessions..}+s%   a$ s)rr rrjrfr r rUrr r r r r)r r r r r rr r r rrjrfr r rUrr r r r r)r r r r rgFTrrvrrrr#r )rrrr#rvr )rremovedmatchedoldest_started_atnewest_started_atrr sessions_dir)rr! r)%r r r r7rmodel_fields_setrr}rr~rrr rrjrfr r rUrr r r r r)r r r r rvr list_prune_candidatesrrrprune_sessionsr{) rj has_window_attr_filters_set_older_than_explicit_effective_older_thanrrfiltersr"r r% r! s ` rV_prune_sessionsr. s+s` 4'I4+=+=T+I 'D,@,@1,DZ4RSS    -0E0EE 00'0D $:>,,%dll3A6OL]L %dll 3B5 1 KK'4  .. ,,  /4  /4  /4 ** ** /4 mm+t \\)T \\)T ~~- ))1T ! "# $]]% &]]' ( ..) * ..+ ,"22T- 0 <<+2++6g6Dt9>BT!W\%:?CT"Xl%;"  g"#H+!"w!"w&' o)*?);  4  $j0 #"## )5)<)<)>D  w/  ' &  s%F K%:K  K% /K% K%%K7z/api/sessions/prunecRKtjt|d{S7w)zGDelete ended sessions matching filters without blocking the event loop.N)rorr. rls rVprune_sessions_endpointr0 +s!""?D9 99 9s '%'z /api/logslevel componentrc Kddlm}m}|j|}|st dd|t dz |z }|j s|gdS ddlm} |r|jd k7r|nd} |rQ|jd k7r>| j|} | -t dd |d d jt| d} t| xs| xs|} |||s t|dnd| | | } |rA|j}| Dcgc]}||jvs|c}t|d d} || dS#t$ri} YwxYwcc}ww)Nr) _read_tail LOG_FILESrzUnknown log file: rr)rr)COMPONENT_PREFIXESALLrzUnknown component: r rrYr]) has_filters min_levelcomponent_prefixes)hermes_cli.logsr4 r5 rr7rr{hermes_loggingr6 rbr rrrrr)rrr1 r2 rr4 r5 log_namerr6 r9 comp_prefixesr8 r3needlels rVget_logsrA +sw6}}T"H 6H4OPP 6)H4H ?? r** 55;;=E#9tIY__&%/*..y9  ,YK8%%)YYv6H/I%J$KM   y;M;VB2E E$E(E> E  E E  EceZdZUdZeed<eed<dZeed<dZeed<dZe e eed<dZ e eed <dZ e eed <dZ e eed <dZe eed <dZe eed <dZe e eed<dZe eed<dZeed<y) CronJobCreaterrFschedulerSr*deliverNrfr#rUrscript context_fromrworkdirFno_agent)rrrrFrrrSrE rfrrr#rUrrF rG r rrH rI rrrXrVrC rC ,sFCMD#NGS"&FHT#Y &E8C="Hhsm""Hhsm" FHSM "&L(3-&,0htCy)0!GXc]!HdrXrC ceZdZUeed<y) CronJobUpdaterqN)rrrrrrrXrVrK rK , MrXrK strip_trailing_slashrN cl|yt|j}|r|jd}|xsdS)Nr)rrr^)rrN rs rV_cron_optional_textrP ,s7 } u:   D{{3 <4rXc |yt|trtjd|}nt|tt fr|}ny|Dcgc]5}t|j st|j 7}}|xsdScc}w)Nz[\n,])rrrrrrr)r raw_itemsrrs rV_cron_string_listrS ',su }%HHXu- ED%= ) +4 J4D 8ISY__  JE J =D Ks B (B ct|}|sy|dz j}t|j}|j r|jn||z j} |j |}|jstdd||jstdd|t|S#t $r}tdd||d}~wwxYw)zFValidate a dashboard-selected cron script against the profile sandbox.Nscriptsrzscript must be inside rzscript does not exist: zscript is not a file: ) rP rr rr relative_torr7r{rHr)rrr scripts_rootrrrelativers rV _normalize_dashboard_cron_scriptrY 4,s u %D  9,557LDz$$&H&.&:&:&<  ":  s/C C*C%%C*jobcZt|jd}t|jd}t|jdxst|jd}t|jd}|r|s t ddy|s|s|s t dd yyy) NrFrF rfskillrI rzno_agent=True requires a scriptrz2agent cron jobs require a prompt, skill, or script)rP rrS rr7)rZ rFrF rfrI s rV&_validate_dashboard_cron_effective_jobr] K,s !2 3F !2 3F swwx0 1 X5FswwwGW5XFCGGJ'(H8   fG  !'fFrXc>t|xsi}dD]}||vst||||<d|vrt|d||d<d|vrt|dd|d<d|vrt|dxsd|d<d|vrt|d|d<d |vrt|d |d <|S) a5Normalize dashboard JSON into cron.jobs.update_job's storage shape. This intentionally stays in the dashboard adapter layer: cron/jobs.py is the source of truth for scheduling behaviour; the dashboard only translates form payloads into the shapes that existing core functions already accept. )r#rUrH rF rTrM rE r*rG r)rrP rY rS )rqrrrs rV!_normalize_dashboard_cron_updatesr_ `,sgm$J/C * 1*S/BJsOC:? x  8Z!4 z "" :J 3Jy4I J Ug 9#%6z.7Q%R >"Z')::FX;Y)Z %& rXrefsrc Z|sy|D]#}t|d|rtdd|d|dy)Nget_jobrzcontext_from job 'z' not found in profile 'rr)_call_cron_for_profiler7)r` rrbs rV%_validate_dashboard_cron_context_fromrd ,sM %lIsC(.$~Q( rXcddlm} |jDcgc] }t|c}Scc}w#t$r#t j dt|cYSwxYw)zCReturn dashboard profile records, falling back to a directory scan.rrzJFailed to list profiles for cron dashboard; falling back to directory scan)r]rr_profile_to_dictr\rQrK_fallback_profile_dicts)rrs rV_cron_profile_dictsrh ,sT35-9-G-G-IJ #JJJ 5 cd&|445s4/44)A A cL ddlm}|}|dvrdS|S#t$rYywxYw)uCProfile to target when a cron request carries no explicit ``profile``. A desktop pool backend runs one process per profile (HERMES_HOME already scoped), but these cron endpoints deliberately route storage through the profiles tree via ``_cron_profile_home`` — so a hardcoded ``"default"`` fallback would write a non-default profile's job into ``~/.hermes``. Resolve the process's own profile instead. ``custom`` (an unrecognized HERMES_HOME outside the profiles tree) has no profile-dir equivalent, so it keeps the legacy ``default`` fallback. rrz r?r| )rr{ r\)r{ rSs rV_cron_default_profilerj ,s;?&( 559?4? s  ##cLddlm}|xs tjxsd} |j |}|j ||j|stdd|d ||j|fS#t $r}tdt|d}~wwxYw) z=Resolve a profile query value to (profile_name, HERMES_HOME).rrr?rrNr Profile '' does not exist.) r]rrj rnormalize_profile_namevalidate_profile_namerr7rprofile_existsr)rrrcanonrs rVr}r},s3  -+- 4 4 6 C)C<33C8**51  & &u -iwFW4XYY ,..u5 55 <CF;;.,s3NAquuT{f$?f (??Ns47)rh rrrc r)r rrSrx s` rV_find_cron_job_profiler ,sY&(7;;v&,"- %dK> NN NK  rXcV|xsdj}|jdk7r t|ddSg}tD]@}t |j dxsd}|s$ |j t|ddB|S#t$rtjd|YfwxYw)Nrr TrSrz'Failed to list cron jobs for profile %s) rrrc rh rrrr\rQrK)rr rx rrSs rV_list_cron_jobs_syncr ,s!E((*IE!%idCC!#D#%L488F#)r*  L KK.t[$G H L K L NNDd K Ls&BB('B(cKtj|r tdt|g|i|d{}tj|r td|S7&w)zBRun cron dashboard profile/job I/O outside the FastAPI event loop.z2_run_cron_dashboard_io only accepts sync callablesNz:_run_cron_dashboard_io sync callable returned an awaitable)inspectiscoroutinefunctionrrD isawaitable)funcrkr} r3s rV_run_cron_dashboard_ior -s[""4(LMM$T;D;F; ;F6"TUU MKtt|d{S7wr)r r r s rVlist_cron_jobsr -s'(? w @s% A,AA AAAc|xs t|}|s tdd t|\}}t|d|}|s tddt |j |}d|vrt |jd|hd}|j|ri||} d|vr d|vrd| d<t| t|d ||} | s tdd| S#t$rt$r} td t| | d} ~ wwxYw) Nrr rrb rG >r\ rFrF rfrI rfr\ update_jobr) r r7r}rc r_ rqrd r intersectionr] rr) r rjrr rrrrqexecution_fields effectiverZ rs rV_update_cron_job_syncr -s*808H ODDG%7%A" l), 6JCH H3 LL   W $ 1 N+ O  ( ( 1/8/w/I7"wg'=%) '" 29 =$\<Q ODD J  GCH=3FGsB CC?#C::C?cBKtt|||d{S7wr)r r )r rjrs rVupdate_cron_jobr -s'(=vtWU UU Ur cz|xs t|}|s tddt|d|}|s tdd|S)Nrr r pause_jobr r s rV_pause_cron_job_syncr -sE808H ODD ; ?C ODD JrXz/api/cron/jobs/{job_id}/pausec@Ktt||d{S7wr)r r r s rVpause_cron_jobr -s'(P PP Pr c|xs t|}|s tdd t|d|}|s tddddiS#t$r}tdt ||d}~wwxYw)Nrr r remove_jobrrT)r r7rc rr)r rr r! rs rV_delete_cron_job_syncr -sy808H ODDG(<H ODD $< GCH=3FGs A A% A  A%c@Ktt||d{S7wr)r r r s rVdelete_cron_jobr -r r c>t|\}}ddlm}ddlm}ddlm}m}|t|} |j|5|} t| j|ddcddd||S#1swYnxYw ||y#||wxYw)aRun ONE due cron job end-to-end for ``profile`` via the resolved scheduler provider's ``fire_due`` (store CAS claim + ``run_one_job``). Scope both cron storage and the runtime Hermes home so the job's store, config, credentials, scripts, skills, and output all belong to the selected profile. Runs with no live adapters; delivery falls back to the per-platform send path. rrw rMry N)adaptersr) r}rgrx rPrNrlrz r{ rr| rfire_due) rr _profile_namer9r~ rNrz r{ rrUs rV_fire_cron_job_for_profiler -s-W5M4&> %SY /E*  % %d + M-/H))&4d)KL M M #5)  M M M #5)"5)s#B$A<* B<BB Bz/api/cron/firec Kddlm}|jjdd}|j dr|ddj nd}t }||t|dd d d t|dd d d xsdt|dd d d xsd}|tddidS |jd{}t|tr|xsijdnd}|stddidStt|d{}|std|ddStj tj"t$||td|ddS7#t$ri}YwxYw7gw)ueChronos managed-cron fire webhook (NAS -> agent). Authenticated by a short-lived NAS-minted JWT (verified by the pluggable Chronos fire-verifier), NOT the dashboard session cookie — so this path is in ``PUBLIC_API_PATHS`` to bypass the dashboard auth gate, and the JWT is the real gate. This is the inbound half of scale-to-zero managed cron: NAS POSTs here at fire time, the agent verifies, claims the job (store CAS, so at-most-once across replicas / on a NAS retry), runs it, and re-arms the next one-shot. Lives on the dashboard app (not the api_server adapter) because the dashboard is the agent's always-reachable public HTTP surface on hosted deployments; the gateway may be idle/scaled down. Returns 202 immediately and runs the job in the background so a long agent turn never trips NAS's HTTP timeout. r)get_fire_verifierr rrrNrgchronosexpected_audiencer nas_jwks_urlrk)rr jwks_or_keyr rzinvalid fire tokenrrr zmissing job_idrgone)rcr r\accepted)%plugins.cron_providers.chronos.verifyr rrrrrrr?rdr\rrr r ror{rr ) rr rrrclaimsrjr rs rVcron_fire_webhookr .s{&H ??   3D $ :DHNN E -C  !#vy:MWYZCNBOWSWsFI|RHPD F ~W&:;MM\\^#,6dD+Adjb  h 'tF W&67SII ++A6JJG v@cRR 4gvF :@c RR+$ KsJB'E7*E$=E">E$A E7 E5AE7"E$$ E2/E71E22E7c0eZdZUeed<iZeeefed<y)AutomationBlueprintInstantiate blueprintrN)rrrrrrr r rrXrVr r W.sNFDcNrXr z/api/cron/blueprintsc K ddlm}m}d} ddlm}|Dcgc]}|j ds|d}}ddg|}g}|D]N}||}|r1|j d gD]} | j d d k(s|| d<|j|Pd|iScc}w#t $rtjdd YwxYw#t $r0} tjdtdt| d} ~ wwxYww)aReturn the blueprint catalog as form schemas for the dashboard gallery. The ``deliver`` slot's options are rewritten from the user's actually configured gateway platforms (plus the universal origin/local/all), so the form never offers a platform that isn't connected. r)CATALOGblueprint_catalog_entryNr roriginr*z?cron_delivery_targets unavailable; using static deliver optionsTr:rrSrE r blueprintszGET /api/cron/blueprints failedrYr) cron.blueprint_catalogr r r r rr\rQr@rrKr7r) r r deliver_optionsr r' rrr rrrs rVlist_cron_blueprintsr \.s<K i <*?*AQQQUU4[4QIQ'=9=O "A+A.E8R07AuuV} 1'6) 7 NN5 !  "g&&R i JJXcgJ h i < 89CF;;roauthrzUnsupported auth mode: z2Arguments are only supported for stdio MCP serversz>Environment variables are only supported for stdio MCP serversrrzBearer token is requiredrz+Bearer token requires header authenticationrr rz:HTTP authentication is not supported for stdio MCP serversrrkrServer 'z ' rejected: ru)hermes_cli.mcp_configr r hermes_cli.mcp_securityr rSrrrrrrrS get_secret_valuerrkrrrr) rjr r r rSrrrrS server_configrissuess rV_normalize_mcp_server_creater .s.B IIO " " $D 233 88>r "C||!r((*G II  & & ( . . 0D    ( **,   CyDM!STT ..24&9::$&M 99QR R 88P  8 ?K-l;QSJ!1!1!3x!? !;<<';D'AM) $    *JK K" e 7?$+M& ! 6>T..:L $+ i 99$(OM& ! 88#'>M% &t] ;F 8D6dii6G5HIJJ  ,,rXci}|xsijD]*\}} |rtt|nd|t|<,|S#t$rd|t|<YHwxYw)z5Mask secret-shaped MCP env values for read responses.rz***)rr%rr\)rr;rrs rV_redact_mcp_envr /skC!!# 1 01*SV,rCAK J CAK s$AA A c |jdrdn|jdrdnd}|jd}|jdxsi}|s$t|trtd|Drd }|||jd|jdt |jd xsgt |jd xsi||jd d du|jdd S)Nrrrstdiorrrc3TK|] }t|jdk("yw)rNr)rrs rVrz&_mcp_server_summary../s%603CO+6s&(rrkrrTFr) rS transportrrrkrrrr)rrrrrr )rSrr rrs rV_mcp_server_summaryr /s''%.#''):LwR[I 776?Dggi &BG Jw-#67>63wwu~779%SWWV_*+swwu~34779d+58!  rXz/api/mcp/serversc Kddlm}t|5|}ddddtj Dcgc]\}}t ||c}}iS#1swYAxYwcc}}ww)Nr_get_mcp_serversr )r r rrrr )rr r rSrs rVlist_mcp_serversr !/sk6  %"$% ._probe_scoped/sL#7 + ((wt}gNE;L1$7RVM-' ( ( (s5>F)rrru1OAuth authentication required — no token found.TrSr"prompts resources)rrr r ) r r r r rr7rrorr\r)rSrr r rr rr' rr r r r r s`` @@@@@rVtest_mcp_serverr! p/s-  %"$% 7htfK4PQQ G  ))&1W<((  &-%6%6}%EE} H  %C93C>4D9C>> DrDashboardOAuthFlow_mcp_oauth_flows_mcp_oauth_transactionsc $tjtz }t5tj Dcgc]\}}t |dd|kr|}}}|D]}tj |d dddycc}}w#1swYyxYw)Nr r)r}_MCP_DASHBOARD_OAUTH_TTL_mcp_oauth_flows_lockr# rrrP)r& flow_idr r s rV_gc_mcp_oauth_flowsr) /s YY[3 3F 0"2!7!7!9 t\1-6    0G  $ / 0 00 00sBB BBB server_namecJddlm}|jdd||dS)Nrrj rrrrh ) urllib.parserj r^)rr* rj s rV!_mcp_oauth_callback_url_from_baser. /s*"ooc" ##;E+TV rlrz r{ tools.mcp_dashboard_oauthr? tools.mcp_oauthr@ rA tools.mcp_oauth_managerrB rr r: r* snapshotremover\rrrr mark_approvedreconnect_livetools.mcp_toolrD r\restore restore_entryrr mark_errormark_worker_done)r rr r r r< r= r> rz r{ r? r@ rA rB home_token secret_token transactionmanagerr-rprevious_entryrr' rrD rmsgrs rV_run_dashboard_mcp_oauthr\ /s F   ZBO7-d.>.>? '(B4HXHXCY(Z[ ' 306K" 57" 9Md9S" %-,T-=-=> ))+!%%,^^(($($4$4&4&N1(((+E#'':KQ2O2TST,UWZ([E 11A1AB*\%T%5%5s;LQ!RDAq1Q"?!RDJ&&(**G,T-=-=>5" " " H | , &z 2$ E"S !OOF4O@))((&$($4$4* 7" " " " " " H | , &z 2 #h ))+ C.O0s!    sr z0Too many MCP OAuth flows are already in progressc3|K|]3}|jk(xr|jk(xr |j 5ywr)r* rra )rr flow_homerSs rVrz"auth_mcp_server..X0sO     $ %  I- %$$$ % s9<rzMCP OAuth for 'z' is already in progressTz mcp-oauth-rirrZ) r r rJ r" rr) rlrrrrrr7rrrr* r7 r' r~r# r_MAX_PENDING_MCP_OAUTH_FLOWSrrxrzr\ rTwait_for_authorization_urlr\rT rM )rSrrr r" r process_homer rr( r r rrc s` @rVauth_mcp_serverrg -0s7<70(335==U=KLL  N"$)446>>e>LM N 7htfK4PQQ wt} C 775>4hii wwycggfo84effCK##B'G ggg&,"11.A2 "7D 1 L0 D ) (//1   2 2I   )//1    (.FG %)!))*'C[$   eg"--b-999 ==?kNN,))8 : " C!! ==?"stA!J0%6ICJ07A.0sA ''3!&&y'?'?G  rzA

OAuth flow expired

Return to Hermes and try again.

rr )rRrmrzalready receivedrrzP

OAuth callback rejected

The callback was invalid or already used.

zA

Authorization failed

Return to Hermes for details.

zR

Authorization received

You can close this tab and return to Hermes.

) r) r' r# rr* rcrr>deliver_callbackrr) r* rRrmrr r rreasonrs ` rVmcp_oauth_callbackrp |0s  )//1 ;. 77      '   D |_mpqq   4uEB _mpqq l mm=   *  S/69cs  ?#   s]C6B4'B/B4,C6CC6/B44B=9C6 C3 C.(C3)C6.C33C6c,eZdZUeed<dZeeed<y)MCPEnabledTogglerNrrrrrrrrrrrXrVrr rr 0 M!GXc]!rXrr z/api/mcp/servers/{name}/enabledcKt|jxs|5t}|jd}t |t r||vrt dd|dt ||t s t ddt|j||d<t|d d d d |t|jd S#1swY"xYww) u$Enable or disable an MCP server (takes effect on next session/gateway). Toggles the ``enabled`` key on the server's config.yaml entry — the same flag the agent reads at startup. Disabled servers stay in config so they can be re-enabled without re-entering their settings. mcp_serversrr r rrzMalformed server configrNTrrSr) rrrrrrr7rrr)rSrjrrr s rVset_mcp_server_enabledrx 0s  / 0m''-('4(D,?C(4& 8TU U'$-.C8QR R#' #5 i Cdll1C DDsCBC#!CC  Cz/api/mcp/catalogc ,K ddlm}g} t |5t|j}|Dcic]C}|j|j|j|j|jfE}}dddD]}|j}|j} |j} |jid|jd |j d |j"d | j$d t'|d ddt'|dgxsgDcgc]&}|j|j(|j*d(c}d| j,dt| j.xsgd| j0d| r | j0ndd| r | j2ndd| rt| j4ngd|j6j8t|j6j8ndd|j:xsdd|jdudj=|jddd|j=|jdd g} |j?D cgc] \} } }| | |d!} } } }|| d"S#t$r*}tj dt dd|d}~wwxYwcc}w#1swYAxYwcc}w#t $rt$rtj d YwxYwcc}} } w#t$rYwxYww)#aBrowse the Nous-approved MCP catalog (the optional-mcps/ manifests). Each entry reports whether it's already installed and enabled so the UI can show install / enabled state inline. This is the same catalog `hermes mcp catalog` / `hermes mcp install` read. ``profile`` scopes the installed/enabled annotations (the catalog itself is repo-shipped and identical for every profile). r mcp_catalogzmcp_catalog import failedrYzCatalog unavailable: rNrSr"rr rr!rrfr)rSrFrrrkr install_url install_ref bootstrapdefault_enabled post_installr needs_installr)FFrrzlist_mcp_catalog failed)rSrr4)r diagnostics) r]r{ r\rQrKr7rr list_catalogrS is_installedr*rr rcrr"rr!rrFrrrkrrbr~ rr r rcatalog_diagnostics)rr{ rrcatalog_entriesrinstalled_staterrr rcr rrrs rVlist_mcp_catalogr 0s]S* G.2 G $ ";#;#;#=>O)11!&&9;;Q;QRSRXRX;YZZO  %" E::DImmG NN u00%,,Y^^  WT66: $T5"5;!VVqxxQZZP!9,, Y^^1r2!"y}}#&gw{{4'(gw{{4)*T'"3"34R+.";;..:$( (C(C#D34 2 2 8b56 d!:78_00^LQO9:?..uzz>J1M;  " RK )<<>  Aqa 0  { ;;} S 236KC54QRRS  "!0  2 012      sLJL KJ?AJ:>J?BK+K ?DKLL*K>;L?L J7 %J22J77L:J??K  K'K;8L:K;;L>L LLLLcReZdZUeed<iZeeefed<dZeed<dZ e eed<y)MCPCatalogInstallrSrTr Nr) rrrrrrr r rrrrrXrVr r 1s1 ICc3hFD!GXc]!rXr z/api/mcp/catalog/installc, Kddlm jxsdj} j | t dd|dj xs| jrFt 5jjD]\}}|s t|| ddd j.t|} tt d d |gz|}d |d |dS fd} t!j"|d{d |ddS#1swYoxYw#t $rt$r}t d d |d}~wwxYw7@#t $rt$r0}t$j'dt dt)|d}~wwxYww)aJInstall a catalog MCP into config.yaml. For HTTP/stdio entries with required env vars, those are written to .env via the standard env path so the agent can read them at session start. Entries that need a git bootstrap (``needs_install``) are installed via the CLI action path because the clone can take time. rrz rNrzNo catalog entry 'rrrurcrYzInstall failed: T)rrS backgroundrct5jjdddy#1swYyxYw)N)r )r install_entryr )rjr+ rr{ srV_install_scopedz2install_mcp_catalog_entry.._install_scopedH1s< - . A  % %eDKK % @ A A As4=z install_mcp_catalog_entry failedrF)rrSr )r]r{ rSr get_entryr7rrrrrrc_mcp_install_action_namerDrr\rorrQrKr) rjrrSrrrr%rr r+ rr{ s ` @@@rVinstall_mcp_catalog_entryr 1s' IIO " " $D  ! !$ 'E }6Ha4PQQ / xx - . )( )1"1a( ) ) }} *$/ R'!"34y$7OODDOOA>000 E ::S ) )$   RC:J3%8PQ Q R 1  > 9:CH==>s~A0F6#DD)F D#$F4E E  EFD F#E 5EE  F EF!+F  FFc(tjdd|jjdddxsd}t j |j jdd}d|d|}tj|d|d |S) zUnique per-entry mcp-install action name (+ registered log file), so a re-click or a second catalog install doesn't overwrite the first's tracked process/log while its git clone is still running. [^a-z0-9]+rON0serverrz mcp-install-action-.log rrrrhashlibsha1r hexdigestrr)rSr[digestrs rVr r V1s 66-djjl 3 9 9# >s C OxD \\$++- ( 2 2 4Ra 8FD66( +F  76($)?@ MrXcomputer-use-grantzaction-computer-use-grant.logc"eZdZUeed<eed<y)PairingApprover-rRNrrrXrVr r l1s M IrXr c"eZdZUeed<eed<y) PairingRevoker-rNrrrXrVr r q1s M LrXr cddlm}|S)Nr PairingStore)gateway.pairingr r s rV_pairing_storer v1s , >rXz /api/pairingc`Kt}|j|jdSw)N)r r0 )r list_pending list_approved)stores rV list_pairingr |1s0  E%%''') s,.z/api/pairing/approvecKt}|jxsdjj}|jxsdj j}|r|s t dd|j||}|rd|dS|j|rt dd|d t d d |d |d w)Nrrzplatform and code are requiredrT)rrr z Platform 'z0' is locked out after too many failed approvals.rzCode 'z%' not found or expired for platform 'r) r r-rrrRr r7 approve_code_is_locked_out)rjr r-rRr3s rVapprove_pairingr 1s  E #**,224H IIO " " $ * * ,D 44TUU   $ /F F++ H%z)YZ   vB8*BO sCCz/api/pairing/revokec(Kt}|jxsdjj}|r |js t dd|j ||jrddiSt dd|jd |d w) Nrrz!platform and user_id are requiredrrTrzUser z not found in approved list for r)r r-rrrr7revoke)rjr r-s rVrevoke_pairingr 1s  E #**,224H 4<<4WXX ||Hdll+d| t||n$DXJaP sBBz/api/pairing/clear-pendingcHKt}|j}d|dSw)NT)rr )r clear_pending)r rs rVclear_pending_pairingr 1s'  E    !E5 ))rceZdZUeed<dZeeed<gZeeed<dZ eeed<dZ eeed<gZ eeed<dZ eed <d Z eed <dZeeed <dZeeed <y) WebhookCreaterSNr"eventsrFrF rfrrE F deliver_onlydeliver_chat_idr)rrrrrr"rr rrFrF rfrE r rr rrrXrVr r 1s} I!%K#%FDI FHSM  FHSM FDIGSL$%)OXc]) FHSM rXr routec||jddt|jdxsg|jddt|jd|jdd|jddt|jd xsg|jd |d |t|jd |jd ddud S)Nr"rr rE rr rFrF rfr z /webhooks/rrTF) rSr"r rE r rFrF rfr r secret_setr)rrr)rSr rs rV_webhook_route_summaryr 1syy3uyy*0b199Y.UYY~67))Hb)))Hb)uyy*0b1ii -:dV,599X./99Y-U: rXz /api/webhooksc Kddlm}|j}|j}|j ||j Dcgc]\}}t |||c}}dScc}}ww)Nr)rr subscriptions)hermes_cli.webhookr_get_webhook_base_url_load_subscriptions_is_webhook_enabledrr )whrsubsrSr s rV list_webhooksr 1sn#'')H ! ! #D))+ $zz| e #4 9   sA A/ A) # A/z/api/webhooks/enablecK tddt }ddd|d d|S#t$r(}tjdt dd|d}~wwxYww) NrTz0Failed to enable webhook platform from dashboardrYz"Failed to enable webhook platform.rr)rr-rr2 )r r\rQrKr7r)rr4 s rVenable_webhooksr 1s~ 40;>       IJ7  s$A 'A A#AAAc Kddl}ddl}ddl}ddlm}|j s t dd|jxsdjjjdd}|jd|s t dd |jr|jd k(r t dd |jxs|jd }|j xsd ||j"Dcgc]#}|js|j%c}||j$xsd|j&Dcgc]#}|js|j%c}|jxsd |j)d|j+d} |j,r7|j,jr|j,j| d<|jrd| d<|j.rd|j.i| d<|j1} | | |<|j3| |j5} t7|| | } || d<| Scc}wcc}ww)NrrzHWebhook platform is not enabled. Enable it from the Webhooks page first.rrrrOz^[a-z0-9][a-z0-9_-]*$zBInvalid name. Use lowercase alphanumeric with hyphens/underscores.ruKDirect delivery requires a real target (telegram, discord, …), not 'log'.rz Dashboard-created subscription: z%Y-%m-%dT%H:%M:%SZ)r"r rrFrfrE r rF Tr r deliver_extrar)rrr}r rr r7rSrrrrr rE rr* r"r rFrfrgmtimerF r r _save_subscriptionsr r ) rj_re_secrets_timer rSrrrxr r rrs rVcreate_webhookr 1s # ! ! #]  IIO " " $ * * , 4 4S# >D 99-t 4W   T\\U2`  [[ 6H2226F''T-MdV+T&*kk?QWWY1779?++#&*kk?QWWY1779?<<(5nn%95<<>JE {{t{{((*++++-h  $n "+T-A-A!Bo ! ! #DDJ4 '')H$T5(;GGH N-@@s+C2I4I I I<I I $C8Iz/api/webhooks/{name}cKddlm}|xsdjj}|j }||vrt dd|d||=|j |ddiSw) NrrrNo subscription named 'rrrT)r rrrr r7r )rSr rr s rVdelete_webhookr 52sp# :2    $ $ &C ! ! #D $6McURS4TUU S 4 $<sA&A(ceZdZUeed<y)WebhookEnabledTogglerNr;rrXrVr r B2rL rXr z/api/webhooks/{name}/enabledc.Kddlm}|xsdjj}|j }||vrt dd|dt |j||d<|j|d |t |jd Sw) a Enable or disable a webhook route. Disabled routes stay in the subscriptions file (so they can be re-enabled) but the gateway rejects incoming events with 403. The gateway hot-reloads the subscriptions file, so this takes effect on the next event without a restart. rNrrr rrrTrw ) r rrrr r7rrr )rSrjr rr s rVset_webhook_enabledr F2s$ :2    $ $ &C ! ! #D $6McURS4TUU -DIi4 T\\0B CCsBBz/api/gateway/startcK tt|dd}d|j ddS#t$rt$r*}tj dtdd|d}~wwxYww) NrTrzFailed to spawn gateway startrYzFailed to start gateway: rTrBrDrr7r\rQrKrrr%rs rV start_gatewayr d2stW#$7$I?[ txx AA  W 676OPSu4UVVW$A)*A)A&%A!!A&&A)z/api/gateway/stopcK tt|dd}d|j ddS#t$rt$r*}tj dtdd|d}~wwxYww) NstoprzFailed to spawn gateway stoprYzFailed to stop gateway: rTrBr r s rV stop_gatewayr p2ssV#$7$H.Y txx @@  V 566Nse4TUUVr c6eZdZUeed<eed<dZeeed<y)CredentialPoolAddrUrNrg)rrrrrrgrrrXrVr r 2sMLE8C=rXr r ct|ddxsd}|t|ddt|ddt|ddt|ddt|dd t|d dt|d d |r t|ndtt|d dd S)z{Redacted, display-safe view of one PooledCredential. ``index`` is 1-based to match CredentialPool.remove_index(). r rrNrgrrr r last_status request_countr ) r rrgrrr r r r has_refresh)rr%r)rr rs rV_pool_entry_summaryr 2s E>2 . 4"EeT4(.UK6%40E:q1umT: ;.3E*GE?DAB  rXz/api/credentials/poolc ~Kddlm}ddlm}g}|}t |j D]Z} ||}|j}|s|j|t|dDcgc]\}}t||c}}d\d|iS#t $rtjd|YwxYwcc}}ww) Nrr )read_credential_poolzload_pool(%s) failedr)rT)rUrr) r r rr rrr\rQrKrrr r ) r r rraw_poolrr rirs rVlist_credential_poolr 2s/4I$%Hhmmo.  [)D,,. #6?q6Q.2a#Aq)     ##  NN1; ?  s32B=B/B=,B7B=B41B=3B44 B=c Kddl}ddlm}m}m}m}m}|jxsdjj}|jxsdj}|r|s tdd ||} |jxsdjxsdt| jdz} |||jj dd | |d|| } | j#| |j%|sN dd lm} m} | j-d i}t/|j-|gxsgD] }| ||  d|t| jdS#t0$rt2j5d Y=wxYw#t$rt0$r1}t2j5dtdt7||d}~wwxYww)Nr)r r AUTH_TYPE_API_KEYCUSTOM_POOL_PREFIXr rrz!provider and api_key are requiredrzkey #rr )rUrrgrr rr )_load_auth_storer suppressed_sourcesz,unsuppress after pool add failed (non-fatal)z!POST /api/credentials/pool failedT)rrUr)r r r r r r r rUrrrr7rgrrr r r rrr r rrr\rQrKr)rj_uuidr r r r r rUrr rgrr r suppressedrrs rVadd_credential_pool_entryr 2s #**,224H||!r((*G 74WXX G"!r((*Oc$,,.6IA6M5N.O {{}  !$'    u ""#56 O./334H"M  x < BC@C03?@Hs4<<>7J KK OMN O  G :;CH=3FGsPA.G1BFA E/FG/F FFFG%,GGGz(/api/credentials/pool/{provider}/{index}c@Kddlm}ddlm}ddlm}|xsdj j} ||}|j|}| td d g}g} |||jxsd} | \ | j||} t!| j"}t!| j$} | j&r|||jd|t)|j+|| dS#t$r1}tjdtdt||d }~wwxYw#t$r]tjd ||j |||jn$#t$rtjd YnwxYwYwxYww)uRemove a pool entry. ``index`` is 1-based (matches the list response). Removal must be sticky (#55217): ``load_pool()`` re-seeds entries from their backing source (.env var, OAuth singleton file, custom-provider config) on every call, so deleting only the pool row silently reverts on the next dashboard refresh. We dispatch through the same RemovalStep registry the CLI ``hermes auth remove`` uses: each source cleans up its external state and suppresses ``(provider, source)`` so the seeders skip it. Manual entries have no registered step — nothing external to clean, no suppression needed (they aren't re-seeded). rr )find_removal_step)suppress_credential_sourcerz#DELETE /api/credentials/pool failedrrNrzNo pool entry at that indexz>credential source cleanup failed for %s/%s; suppressing anywayz!suppress_credential_source failedT)rrUrcleanedhints)r r agent.credential_sourcesr rr rr remove_indexr\rQrKr7rr remove_fnrr r suppressrr) rUr r r r r r! rr r stepr3s rVremove_credential_pool_entryr2s0::B%%'--/HG"##E*4QRRGE Xw~~'; >*G&E*8W^^DT\\^$  9 G <=CH=3FG  D NNP'..  D*8W^^D DBC D Dsq5FC8,F>AD5F8 D2,D--D22F5*F E43F4FFFFFFFceZdZUeed<y)MemoryProviderSelectrUNrrrXrVrr33sMrXrceZdZUdZeed<y) MemoryResetrrjN)rrrrjrrrrXrVrr83s FCrXrz /api/memorycNKt}d}|jd}t|trt |jd}t dz }i}dD]9\}}||z }|j r|jjnd||<;|t|dSw)NrrzrUmemories)) MEMORY.mdrz)USER.mdrr)rr builtin_files) rrrrrUrr{rrIr)rrrmem_dirfilesfnamerrs rVget_memory_statusr=3s -C F ''( C#t01DE*,G EDA s,0KKMTYY[((qc A 79 sB#B%z/api/memory/providercKt|j}t|t}t |j dt si|d<||dd<t|d|dSw)NrzrUTr)rUrUrrrrrr)rjrUrs rVset_memory_providerrS3s`.t}}=H"8, -C cggh' .H (CM*( ++sA'A)z/api/memory/resetc K|jxsdjj}|dvr tddt dz }g}g}|dvr|j d|d vr|j d |D]:}||z }|j s |j|j |<d|dS#t$r}td d |d |d}~wwxYww)Nr>rrrzrz#target must be all, memory, or userrr>rrzr>rrr rYzCould not delete r Tr ) rjrrr7rrr{rr)rjrjr r rr rrs rV reset_memoryra3skk"U ) ) + 1 1 3F ..4YZZ*,GGG ""{#  y!` ;;= ` u% `7 ++ `#>OPUwVXY\X]<^__ `s*BC#!B?8C#? C CC  C#z/api/ops/doctorcK tdgd}d|j ddS#t$r*}tjdt dd|d}~wwxYww)NrzFailed to spawn doctorrYzFailed to run doctor: rTrBrDr\rQrKr7rrEs rV run_doctorr3sbT#XJ9txx :: T /06LSE4RSSTs$A !A A%AAAz/api/ops/security-auditcK tddgd}d|j dd S#t$r*}tjdt dd|d}~wwxYww) NrcauditrzFailed to spawn security auditrYzFailed to run security audit: rTrBrrEs rVrun_security_auditr3si\#Z$9;KLtxx1A BB \ 786TUXTY4Z[[\$A"A A%AAAc"eZdZUdZeeed<y) BackupRequestNoutput)rrrrrrrrrXrVrr3s FHSM rXrctdz S)Nbackupsr^ rrXrV_dashboard_backup_dirr3s  y ((rXctjjd}td|dt j ddz S)Nz%Y-%m-%d-%H%M%Szhermes-backup-rOr.zip)rryrrrr)stamps rV_new_dashboard_backup_pathr#3sD LLN # #$5 6E "~eWAg>O>OPQ>R=SSW%X XXrXz/api/ops/backupcKdg}d}|jxsdj}|r|jd|gnDt} |jj dd|jdt|g t|d}d|jdd }|t||d <|S#t $r}tdd|d}~wwxYw#t$r*}tjd tdd |d}~wwxYww) Nrrz-oTrWrYz#Could not create backup directory: rzFailed to spawn backupzFailed to run backup: rBarchive)rrrr#rrZrr7rrDr\rQrKr)rjrkr%rrr%rLs rV run_backupr&3s :D"GkkR & & (F  T6N#,.  NN  = T3w<()T#D(3488X>H!'l O >DDz/api/ops/backup/downloadr%cK tjjd}t|jjd}t||s t d d |js t ddtt|d |jd S#t$rt ddt tf$rt ddwxYww)NFrTrzBackup not foundrrzInvalid backup pathr z0Backup is outside the dashboard backup directoryzapplication/ziprr) rrrr rr7rrr^rHr=rrS)r% backup_dirrjs rVdownload_dashboard_backupr)3sK*,779AAAO g))+3343@ *f -4fgg >> 4FGG  [$!-   H4FGG \ "K4IJJKsC"AB-AC"-2CC"c&eZdZUeed<dZeed<y) ImportRequestr%Fr<Nr=rrXrVr+r+3s LE4rXr+z/api/ops/importcK|jxsdj}|s tddtjj |stdd|d|g}|j r|jd t|d}d |jdd S#t$r*}tjd td d |d}~wwxYww)Nrrzarchive path is requiredrrzArchive not found: r--forceFailed to spawn importrYFailed to run import: TrB) r%rr7rvrrr<rrDr\rQrKr)rjr%rkr%rs rV run_importr03s||!r((*G 4NOO 77>>' "6I'4STT g D zz IT#D(3txx :: T /06LSE4RSSTs*A>C B C C&%C  CCct|xsdjj}tjdd|jd}|sd}|j j ds|d}|S)Nz backup.zipz[^A-Za-z0-9._-]+rOz.-r!)r rSrrrrr_)rrSs rV_safe_backup_upload_namer23sj (L ) . . 4 4 6D 66%sD 1 7 7 =D  ::<  (t} KrXz/api/ops/import-uploadcKt} |jddt |j }t jtjjd}|d|dtjd d|z }tjd |jd d t!| \}}t#|} d } d} t%j&|d5} |j)t*d{} | sn6| t-| z } | t.kDr tdd| j1| V dddt%j2| |d} | s| j7d|j9d{t;j<|s|j7dtdddt!|g}|r|j?d tA|d}d|jHdt!|| dS#t$r}tdd|d}~wwxYw7)#1swYxYw#t$rt4$rtddt$r}tdd|d}~wwxYw7#| s| j7d|j9d{7wxYw#tB$r*}tDjGdtdd|d}~wwxYww)NTrWrYz+Could not create import staging directory: rz %Y%m%d-%H%M%Szdashboard-import-rOrrrrrFrrBzArchive is too larger z(Import staging directory is not writablez"Could not write uploaded archive: rrz(Uploaded archive is not a valid zip filerr-r.r/)rrrSr%uploaded_bytes)%rrZrr7r2rrryrr rrrrrrSrr rvrrfrrrrrrrrzipfile is_zipfilerrDr\rQrKr)rr< staging_dirr safe_namer"rjrrrrrr;rrkr%s rVrun_import_uploadr94s ()K $6)7I LL & / / @E .ugQw7H7H7K6LAi[Y YF''6;;-q!  FH H~H EG YYvt $ !"ii(;<<U#22'C@VWW %   ! 8V$ OOtO ,jjl   f %  &=  c&k "D  IT#D(3 xxv;  {  @F   (= ! !   =    7u=     OOtO ,jjl T /06LSE4RSSTs KHB)K H3!H';H$<=H': H3'KI2AK J&(K H! HH!!K$H''H0,H33'I/I**I//I42K4(J#JJ##K& K/%KKKz/api/ops/hooksc tKddlm}ddlm} ddlm}t |}g} |j|}g}|D]}d} |j|j|j}d} |j|j}|j|j|j |j|j"|du|xsij%d|d ||d S#t$rg}YwxYw#t$rtjdYwxYw#t$rYwxYw#t$rYwxYww) zList configured shell hooks from config.yaml with consent + health. Reports each hook's allowlist (consent) status and whether the script is currently executable, plus the set of valid hook events so the create form can offer them. rr shell_hooks VALID_HOOKSziter_configured_hooks failedNF approved_at)r matcherrr[rr@r)hooks valid_events)r<rrer=hermes_cli.pluginsr?rr\iter_configured_hooksrQrKallowlist_entry_forr rscript_is_executablerrAr[r) _load_configr=r?rCspecsr;r rrs rV list_hooksrJQ4sI>!2k*  E711,.A C  33DJJ ME  $99$,,GJ ZZ||||||D(!KR,,];$   *, 77?   7 567       s D8C%D8C6 D8&D*D8-D)AD8% C30D82C33D86DD8DD8 D&#D8%D&&D8) D52D84D55D8cXeZdZUeed<eed<dZeeed<dZeeed<dZ e ed<y) HookCreater rNrAr[Tapprove) rrrrrrArr[rrMrrrXrVrLrL4s4 J L!GXc]!!GXc]!GTrXrLc \Kddlm}|jxsdj}|jxsdj}|r|s t dd ddlm}||vr+t dd|d d jt| t}|jd }t|tsi}||d <|j|}t|tsg}|||<d |i}|j r|j |d <|j"t%|j"|d<|j'|t)|d} |j*r |j-||d} d||| dS#t $rt$rYwxYw#t$rt.j1dY?wxYww)aOAdd a shell hook to config.yaml (and optionally approve it). Shell hooks run arbitrary commands, so this is a privileged action: it writes to the ``hooks:`` config block and, when ``approve`` is set, records consent in the allowlist so the hook actually fires. Takes effect on the next session / gateway restart. rr<rrevent and command are requiredrr>zUnknown event 'z '. Valid: rrBrrAr[FTzhook consent record failed)rr rr0 )rer=r rrr7rDr?rrr\rrrrrrAr[rrrrM_record_approvalrQrK) rjr=r rr?r hooks_cfgr new_entryr0 s rV create_hookrS4s" ZZ 2 $ $ &E||!r((*G 4TUU  2  #(z$))F;DW:X9YZ  $ -C I i &  G mmE"G gt $" %!*G 4I ||#|| ) ||"4<<0 ) NN9H || 9  ( ( 8H7 QQ?     4 9 NN7 8 9sOAF,5E0 CF,F)F,0FF,FF,F)&F,(F))F,c"eZdZUeed<eed<y) HookDeleter rNrrrXrVrUrU4s J LrXrUcKddlm}|jxsdj}|jxsdj}|r|s t ddt }|jd}d}t|trt|j|trt||}||Dcgc](}t|tr|jd |k(s|*c}||<t|||k}||s||=|s|jdd t| |j||s t d d d diScc}w#t$rY#wxYww)zFRemove a hook from config.yaml and revoke its consent allowlist entry.rr<rrrOrrBFrNrzNo matching hook foundrT)rer=r rrr7rrrrrrrPrr r\) rjr=r rrrQr! beforers rV delete_hookrX4sT" ZZ 2 $ $ &E||!r((*G 4TUU -C IG)T"z)--2F'MYu%& ' q$'AEE),<,G  %i&'&0%  GGGT "C 7# 4LMM $<'     s6B5E7-E$>E#E 4E EEEEz/api/ops/checkpointscKtdz }g}d}|jrt|jD]}|jsd}d}|j dD]6}|j s ||j jz }|dz }8||z }|j|j||d||dS#t$rYowxYww)z8List the /rollback shadow store checkpoints (read-only).rirrr)rr r)r total_bytes) rr rrrglobrHrrIrrrS)cp_dirrrZrrrrs rVlist_checkpointsr]4s  .FHK }}FNN,- E<<>DE[[% 99; 0 00    4 K OO ::  $! ==#s*A7C;"C -C CCCCz/api/ops/checkpoints/prunecK tddgd}d|j dd S#t$r*}tjdt dd|d}~wwxYww) Nriprunerz!Failed to spawn checkpoints prunerYzFailed to prune checkpoints: rTrBrrEs rVprune_checkpointsr`5si[#]G$<>QRtxx1D EE [ :;6STWSX4YZZ[rc,eZdZUeed<dZeeed<y)SkillInstallRequest identifierNrrrrXrVrbrb#5sO!GXc]!rXrbc|xsdj}|r|jdvrgSddlm}t |d|j |gS)uReturn ``["-p", ]`` for a validated non-default profile. Hub install/uninstall/update run in a fresh ``hermes`` subprocess, and ``_apply_profile_override()`` reads ``-p`` from argv in the child — the only mechanism that reaches import-time-bound globals like ``skills_hub.SKILLS_DIR``. Empty/"current" means the dashboard's own profile (no args, legacy behavior). r>rr?rr-p)rrr]rr} rn )rr rs rVrr(5sNB%%'I  )-CC 3# ,55i@ AArXc.tjdd|jjdddxsd}t j |j jdd}d|d|d|}tj|d|d |S) apUnique per-skill hub action name (+ registered log file). ``_spawn_hermes_action`` tracks one process/log per name, so a shared "skills-install"/"skills-uninstall" would make concurrent row-level actions overwrite each other's status/log while the UI polls per identifier. Slug (readable) + hash (collision-proof) keys each action to its own row. r rONr r\ rzskills-r r r )rrr[r rSs rV_hub_action_namerg95s 66-ciik 2 8 8 =cr B MgD \\#**, ' 1 1 3BQ 7F TF!D66( +D  d';< KrXz/api/skills/hub/installcpK|jxsdj}|s tddtd|} t t |j xs|dd|dgz|}d |j|d S#t$rt$r*}tjdtd d |d}~wwxYww) Nrridentifier is requiredrrcrf--yeszFailed to spawn skills installrYzFailed to install skill: TrB) rcrr7rgrDrrr\rQrKr)rjrrcrSr%rs rVinstall_skill_hubrkH5s//'R..0J 4LMM Iz 2D W# dll5g 6J8 9  txx 66  W 786OPSu4UVVW(:B6*A7'B67B3 %B..B33B6c,eZdZUeed<dZeeed<y)SkillUninstallRequestrSNrrrrXrVrnrn\5s I!GXc]!rXrnz/api/skills/hub/uninstallcpK|jxsdj}|s tddtd|} t t |j xs|dd|dgz|}d |j|d S#t$rt$r*}tjdtd d |d}~wwxYww) Nrrzname is requiredr uninstallrfrjz Failed to spawn skills uninstallrYzFailed to uninstall skill: TrB) rSrr7rgrDrrr\rQrKr)rjrrSrr%rs rVuninstall_skill_hubrqa5s IIO " " $D 4FGG k4 0F Y# dll5g 6(KQUW^9_ _  txx 88  Y 9:6QRUQV4WXXYrlc"eZdZUdZeeed<y)SkillsUpdateRequestNr)rrrrrrrrrXrVrsrst5s!GXc]!rXrsz/api/skills/hub/updatecK |r |jndxs|}tt|ddgzd}d|jdd S#t$rt$r*}t j dtdd|d}~wwxYww) NrfrrzFailed to spawn skills updaterYzFailed to update skills: rTrB)rrDrr7r\rQrKr)rjrr r%rs rVupdate_skills_hubrux5s W%)T\\t? # i (Hh+? ? txx AA  W 676OPSu4UVVWs'B.ABA>%A99A>>BzOfficial (Nous)z Hermes Indexz skills.shz Well-Knownz Direct URLGitHubClawHubzClaude MarketplaceLobeHubz browse.sh) official hermes-index skills-sh well-knownrgithubclawhubclaude-marketplacelobehubz browse-shc |j|j|j|j|j|j t |jxsgdS)N)rSr"rrc trust_levelrepotags)rSr"rrcrrrr)rs rV_skill_meta_to_payloadr5sF}}((ll}}QVV\r" rXc ddlm}|xsdj}|r0|jdk7rt |}||dz dz dz }n|}i}|j D]L}|j d}|s|j d |j d |j d d ||<N|S#t$ricYSwxYw) ahMap identifier -> installed lock entry for hub-installed skills. Lets the UI mark search results that are already installed. Scoped to ``profile``'s skills/.hub/lock.json when provided (HubLockFile takes an explicit path, sidestepping the import-time LOCK_FILE binding). Best-effort: returns an empty dict if the lock file can't be read. r) HubLockFilerrrfz.hubz lock.jsonrcrSr scan_verdict)rSrr)tools.skills_hubrrrr} list_installedrr\)rrr profile_dirlockr;ridents rV_installed_hub_identifiersr5s0]))+ *i7.y9K{X5>LMD=D((* EIIl+E!IIf-#(99]#;$)IIn$=E    sA;B8>9B88 CCz/api/skills/hub/sourcescKfd} tj|d{S7#t$rt$r*}tj dtdd|d}~wwxYww)uList the configured skill-hub sources and installed-skill provenance. Gives the dashboard something to show BEFORE a search runs — which hubs are wired up, their trust tier, and a set of featured skills pulled from the centralized index (zero extra API calls). Without this the Browse-hub tab is a blank page with no indication it's even connected to anything. ``profile`` scopes the installed-skill provenance to that profile. cddlm}t 5|}dddg}d}g}D]}|j}|tj ||d}|dk(r t t|dd|d<|dk(rH t t|d d}||d <|r* |jd d Dcgc] }t|}}|j|thd} |D]}|xr|d| v |d<|||t dS#1swYxYw#t$rd|d<YwxYw#t$rd}YwxYwcc}w#t$rg}YwxYw)Nrcreate_source_routerF)rrgr}is_rate_limited rate_limitedrz is_availabler rr)rq>r}r~rr{r|rr searchable)r index_availablefeaturedr)rrr source_id_SKILL_HUB_SOURCE_LABELSrrrr\rrrr r) rr r;rrrrrr_api_source_idsrs rVr z%list_skills_hub_sources.._run5s9 "7 + -*,G - C--/C155c3?E h2,0>OQV1W,XE.)n$,&*73+N&OO&5k""&?Bzz"TVz?W$:;215$$ JJu 5 B$ ]  [E'6'Y5;/;Y"ZE,  [. 3G<   W - -!2,1E.)2 !,&+O, $%&#%&sSD D<D)D?/D:D? DD&%D&) D76D7:D?? E  E Nz!skills hub sources listing failedrzHub sources failed: r)rorr7r\rQrK)rr rs` rVlist_skills_hub_sourcesr5sh3 jR&&t,,,,  R :;6J3%4PQQRs0A()')A()A%%A  A%%A(z/api/skills/hub/searchcK|xsdjsgigidSfd} tj|d{S7#t$rt$r*}t j dtdd|d}~wwxYww) aKSearch the skill hub across all configured sources. Network-bound (parallel source search); runs in a thread so the FastAPI loop isn't blocked. Returns structured results the UI installs by identifier via POST /api/skills/hub/install, previews via /api/skills/hub/preview, and scans via /api/skills/hub/scan. rr source_counts timed_outrcLddlm}m}t 5|}dddt t dd}|xsdd\}}}dddd }i}|D]v} | j |vr| || j <!|j| jd|j|| j jdkDsh| || j <xt|jd|} | D cgc] } t| c} ||t d S#1swYxYwcc} w) Nr)rparallel_search_sourcesrrprr)rroverall_timeoutr$)rTtrusted communityr) rrrrrr\rcrrrrrr)rrr capped all_resultsrr_rankrr dedupedrrqrrrs rVr zsearch_skills_hub.._run6s%R "7 + -*,G -S]B'0G 5%QS1 - ]I !!< 'A||4'%&Q\\"1==!,uyyall9K9W9WYZ/[[%&Q\\"  ' t{{}%gv.._runP6ssI9 "7 + Q*,G!@!P D&$ Qd !'!3 : : < ) Wgu-5%,^^G%<c ")E#J )yyR06BH NFAvu-"1mR8>Ba2.4"!!\59BU"1m[AP[Avt,FD17R8 EJJL)  / Q Q .5%4c 5sD;6E;EEENzskills hub preview failedrzHub preview failed: rSkill not found: rr7rorr\rQrKrcrr r3rrs ` @rVpreview_skill_hubr@6s 2 $ $ &E 4LMM% NR((..~6Gw4OPP M / R 236J3%4PQQR:*BA"A A" B A"" B+%BBBz/api/skills/hub/scanc4K|xsdjs tddfd} tj|d{}|td d |S7#t$r*}t j dtdd |d}~wwxYww) uTRun the install-time security scan on a hub skill WITHOUT installing it. Fetches the bundle, quarantines it, and runs the same `scan_skill` / `should_allow_install` pipeline the CLI installer uses — then cleans up the quarantine. Returns the verdict, per-finding detail, trust tier, and the install-policy decision so the dashboard can show a visual safety result on demand (the 'scan' button the Browse-hub tab was missing). Scoped to ``profile`` so the bundle resolves against that profile's hub source router, matching where an install would pull it from. rrrirc tddl}ddlm}ddlm}m}ddlm}m}t5|}||\}}} dddsy|jdk(rd} n t|ddxstddxs} d} ||} || | } | |j| d  || d \} }| d urd }n| d}nd}| jDcgc]<}|j|j|j |j"|j$d>}}ddddd}| jD](}|j|vs||jxxdz cc<*| j&| j| j(| j*| j,||||d S#1swYSxYw#| |j| d wwxYwcc}w)Nrr)rquarantine_bundle) scan_skillshould_allow_installryrcr)rT) ignore_errorsF)r<allowaskr)severityr'rrr")criticalrZrYrXr) rSrcrrverdictrr~ policy_reasonfindingsseverity_counts)rrrrrrtools.skills_guardrrrrrrrrr'rrr" skill_namerrr)_shutilrrrrrr rrr scan_sourceq_pathr3rro r~rrcountsrrs rVr zscan_skill_hub.._run6s ILG "7 + Q*,G!@!P D&$ Q ==J &$K b14r2   ;&v.F{;F!vT:.vUC d?F _FF__   JJJJ }}       aB (AzzV#qzz"a'" ( %%mm!--~~~~# %  a Q Q(!vT:"  sF <F AF5 FF2Nzskills hub scan failedrzHub scan failed: rrrrs ` @rVscan_skill_hubr6s 2 $ $ &E 4LMMB HO((..~6Gw4OPP M / O /06Gu4MNNOrceZdZUeed<dZeeed<dZeed<dZ eed<dZ eed<dZ eeed<dZ eeed <dZ eeed <gZed ed <gZeeed <gZeeed<y) ProfileCreaterSN clone_fromFclone_from_default clone_all no_skillsr"rUr#r rv keep_skills hub_skills)rrrrrrrrrrrr"rUr#rv rrrrrXrVrr6s I $J $ %$ItIt!%K#%"Hhsm"E8C= ,.K'(-  Kc JS rXrceZdZUeed<y) ProfileRenamenew_nameNrrrXrVrr7sMrXrceZdZUeed<y)ProfileSoulUpdaterNrrrXrVrr7s LrXrceZdZUeed<y)ProfileActiveUpdaterSNrrrXrVrr 7rrXrceZdZUdZeed<y)ProfileDescriptionUpdaterr"N)rrrr"rrrrXrVrr 7s KrXrc"eZdZUeed<eed<y)ProfileModelUpdaterUr#NrrrXrVrr7s M JrXrceZdZUdZeed<y)ProfileDescribeAutoFrN)rrrrrrrrXrVrr7s ItrXrc> t||S#t$r|cYSwxYwr)rr\)rRrSr?s rV _profile_attrr7s(tT"" s  ct|ddtt|ddtt|ddt|dt|dtt|ddtt|d d xsd tt|d dt|d dxsdtt|d dt|dt|dt|dt|ddudS)NrSrr is_defaultFr#rUhas_env skill_countrrr"description_autodistribution_namedistribution_versiondistribution_source alias_pathrSrrr#rUrrrr"rrrr has_alias)rrrr)rRs rVrf rf !7sdFB/M$34=|UCDtW-!$ 3 dIu=>=}a@EAF d4Eu MN$T="=C t5G!OP*41DE -d4J K,T3HI"46dB rXc2d}g}jjrv|fdd\}}|jdtd||dz j |fdd|fd d |fd d |fd d dddd dj }|jrt |jD]}|jr%jj|js9||ffd d\}}|j|jt|d |||dz j ||ffd d||ffd d ||ffd d ||ffd d dddd d|S)Nc4 |S#t$r|cYSwxYwr)r\) callable_r?s rV_safez&_fallback_profile_dicts.._safe57s# ;  N s  c&jSr_read_config_model default_homersrVrz)_fallback_profile_dicts..>7s (G(G (UrXNNr?Trc&jSr _count_skillsrsrVrz)_fallback_profile_dicts..F7s)C)CL)QrXrc&jSrrrsrVrz)_fallback_profile_dicts..G7s\-P-PQ]-^rXFcFjjddSNr"rread_profile_metarrsrVrz)_fallback_profile_dicts..H7s!)G)G )U)Y)YZgik)lrXrcFjjddSNrFrrsrVrz)_fallback_profile_dicts..I7s!l.L.L\.Z.^.^_qsx.yrXrc&j|Srrrrs rVrz)_fallback_profile_dicts..U7s 8W8WX]8^rXc&j|Srrrs rVrz)_fallback_profile_dicts..]7s9S9STY9ZrXc&j|Srrrs rVrz)_fallback_profile_dicts..^7s\=`=`af=grXcFj|jddSrrrs rVrz)_fallback_profile_dicts.._7s"9W9WX]9^9b9bcprt9urXcFj|jddSrrrs rVrz)_fallback_profile_dicts..`7s)l>\>\]b>c>g>ghz}B?CrX) _get_default_hermes_homer rrr{_get_profiles_rootrr_PROFILE_ID_RErrS)rrrr#rU profiles_rootrrs` @rVrg rg 47s &(H88:L UWcdx % $v-557 !QSTU$%^`ef !lnpq %&y|A!B!%$(#'  "!335MM1134 E<<>)D)D)J)J5::)V#$^`lmOE8 OO E #$!FN224$%%Z\]^#(e)gin#o$%%uwyz$)u+CEJ%K%)(,'+"   * OrXcddlm} |j||j |st dd|d|j|S#t$r}t dt |d}~wwxYw) zIValidate ``name`` and resolve to its directory or raise an HTTPException.rrrrNrrl rm )r]rro rr7rrp r)rSrrs rVr} r} j7ss3<**40  & &t ,ivEV4WXX  ' ' -- <CF;;CtfFOCrXrcddlm}m}|t|} t ||\}}t }t |jdi|||d<t|||y#||wxYw)aWrite the main model assignment into a specific profile's config.yaml. Scopes ``load_config``/``save_config`` to ``profile_dir`` via the context-local HERMES_HOME override so the write lands in the target profile's config rather than the dashboard process's active profile. Clears any stale ``base_url`` / ``context_length`` the same way ``POST /api/model/set`` does, since the new model may differ. rr{ rz r#N) rlr{ rz rrJrrSrr)rrUr#r{ rz rrs rV_write_profile_modelr|7skV $S%5 6E*:8UK%m3CGGGR4H(TYZG C"5)"5)s AA(( A2r cddlm}m}ddlm}d}|t |} t }|jdi}|D]*} t| \} } } | || | | d <| || <|d z },|r t|n|s|jddt||||S#t$rC} | jxsdjxsd}tjd|| Yd} ~ d} ~ wwxYw#||wxYw) aWrite MCP server entries into a specific profile's config.yaml. Scopes ``load_config``/``save_config`` to ``profile_dir`` via the context-local HERMES_HOME override (same mechanism as ``_write_profile_model``) so the entries land in the target profile's config rather than the dashboard process's active profile. Mirrors the per-server shape the ``POST /api/mcp/servers`` endpoint builds, but batched so the whole profile-create write is a single config save. Returns the number of servers written. rr)r rv rz z,Profile-create: skipping MCP server '%s': %sNrr)rlr{ rz r r rrrr rrSrrQrSrrP)rr r{ rz r writtenrrrur rSrrS r display_names rV_write_profile_mcp_serversr7sV=G $S%5 6E*mnn]B/ F ,H,P)e\'#:4#Ni CI qLG     GGM4 (  "5) N+  & 1r88:Ik  B   ( #5)s6!C4B%AC4% C1.9C,'C4,C11C44 C>keepcddlm}m}ddlm}m}|Dchc]&}|s|j s|j (}}d}|t|} g} |dz } | jr;| jdD]'} | j| jj)t} || }| D]"}||vs||vs |j||dz }$|r || ||| |Scc}w#|| wxYw)uADisable every installed skill in ``profile_dir`` not in ``keep``. Profiles manage skill activation via a *disabled* list — all installed skills are active by default and users opt out. The builder's skill step uses "replace" semantics: the user picks exactly which seeded built-in / optional skills stay active, and everything else gets added to the disabled list. (Hub skills are installed separately via subprocess and are active on install.) Scoped to the profile via the HERMES_HOME override. Returns the number of skills newly disabled. rrget_disabled_skillssave_disabled_skillsrfrr)rlr{ rz hermes_cli.skills_configrrrrr r[rrrSrr)rrr{ rz rrrxkeep_setdisabled_countrr skills_rootmdrr rSs rV_disable_unselected_skillsr%7sVR#';a1 ;H;N $S%5 6E*! !H,    !'' 3 1  0 1m&s+ $D8#H(< T"!# $  h /"5) '<$ #5)s(C6C6C6A-C;C; #C;; Dz /api/profilesc.Kddlm} tj}|j d|j d{}d|Dcgc] }t |c}iS7cc}w#t$r%tjddt|icYSwxYww)Nrrrz@GET /api/profiles failed; falling back to profile directory scan) r]rrorrurrf r\rQrKrg )rrrrs rVlist_profiles_endpointr'7s3C'')--dL4N4NOO(CQ-a0CDDPC C YZ3LABBCsJB3A$A A$AA$BA$A$$+BBBBc Kddlm}|jxsdj}|rd}|}|j }n'|jrd}d}d}n|j }|rdnd}|} |j |j||j||j|j}|s|j|d|j|j}|s|j|j|j*xsdj} |j,xsdj} d} | r| r t/|| | d} d} |j0r t3||j0} d} |j4r t7||j4} g}|j8D]^}|xsdj}|s t;d|jdd|dgt=d|}|j?||j@d`d|jt#|| | | |dS#tttf$r}t!d t#| d}~wt$$r0}t&j)d t!d t#| d}~wwxYw#t$$r$t&j)d |jYkwxYw#t$$r$t&j)d|jYvwxYw#t$$r$t&j)d|jYwxYw#t$$r9t&j)d||j|j?|ddYwxYww)NrrrTr?F)rSrr clone_configrr")quietrrzPOST /api/profiles failedrYz'Setting model for new profile %s failedz-Writing MCP servers for new profile %s failedz2Applying skill selection for new profile %s failedrerfrcrj)rcrz7Spawning hub-skill install %s for new profile %s failed)rrSr model_set mcp_writtenskills_disabled hub_installs)!r]rrrrrcreate_profilerSrr"seed_profile_skillscheck_alias_collisioncreate_wrapper_scriptrFileExistsErrorrr7rr\rQrKrUr#rrv rrr%rrDrgrr)rjrexplicit_sourceclonerr)r collisionrrUr#r+r,r-r.rcrr%s rVcreate_profile_endpointr77s73,"335O$ >>)   ''"'YT  <**!nn%nn(( +   , ,T , >!66tyyA   . .tyy 9 #**,H ZZ 2 $ $ &EIE Q x 7I K  W4T4;K;KLKO  \8t?O?OPO*,LooD !r((*  D'tyy(IugF E2D   uTXX F GD& D "*$ y ): ;<CF;; < 23CF;;< Q NNDdii P Q W NNJDII V W \ NNOQUQZQZ [ \" D NNI     uT B C  DsA M#B H/AM2JMJ0&M5K (M4AL8MI=+I I= +I88I==M)J-)M,J--M0)KMKM )L  M L  M>MMMMz/api/profiles/activecKddlm} |jxsd} |j xsd}||dS#t$rd}Y'wxYw#t$rd}Y#wxYww)uHReturn the sticky active profile and the profile this dashboard process is currently running as. ``active`` is the sticky default written by ``hermes profile use`` — the profile new CLI invocations pick up. ``current`` is the profile the running dashboard/gateway is scoped to (derived from HERMES_HOME). rrr?)rr)r]rget_active_profiler\r{ )rrrs rVget_active_profile_endpointr:a8sr4002?i668EI 11  sBA8A A AAAA AAAAcKddlm} |j|jd |j|jd S#t$r}t dt |d}~wt$r}t dt |d}~wt$r0}tjdt dt |d}~wwxYww) uSet the sticky active profile (mirrors ``hermes profile use``). Note: this does not retarget the already-running dashboard process — it changes which profile subsequent CLI commands and gateways use. rrrrNrz POST /api/profiles/active failedrYTr) r]rset_active_profilerSrr7rrr\rQrKrn )rjrrs rVset_active_profile_endpointr=v8s4<'' 2,"E"Edii"P QQ <CF;; <CF;; < 9:CF;;')>dESZ([\!$4dD%#QRYdE7CD!$4dhwiq>CCc\Kddlm} |j|d}dt |d S#t$r}t dt |d}~wt $r}t dt |d}~wt$r1}tjd |t d t |d}~wwxYww) zDelete a profile. The dashboard collects the user's confirmation in its own dialog before this request, so we always pass ``yes=True`` to skip the CLI's interactive prompt.rrT)rrrNrzDELETE /api/profiles/%s failedrYr) r]rdelete_profilerr7rrr\rQrK)rSrrrs rVdelete_profile_endpointrU8s 4<**4T*:D ** <CF;; <CF;; < 7>CF;; --auto``. A failed generation (no aux client, LLM error, …) is returned as ``ok: false`` with a reason rather than an HTTP error so the UI can surface it inline and let the operator fix config and retry. r)r>)rz*POST /api/profiles/%s/describe-auto failedrYrN)rro r"r)r} r]r>describe_profilerrr\rQrKr7rrro r")rSrjr>outcomers rVdescribe_profile_auto_endpointrd'9s<0#44TT$..EY4Z 7::..**!,  < CTJCF;;|j dd}dt|jvrdnd }t|| t|S#1swYdxYww) zIReplace the SKILL.md of an existing skill (full rewrite) from the editor.r) _edit_skillNr1rzFailed to update skill.rSrrr) rrrrrSrrrrr7r)rjrr3errrcs rVupdate_skill_contentr$:s5  %6TYY 56 ::i jj";<#s3x~~'77Ss;; M66sB+BA#B+B($B+z/api/tools/toolsetscKddlm}m}m}m}m}ddlm}ddlm }t|5t}|} | D chc]\} } } || } } } | D cic]} | ||| d}} dddg} D]e\} }} tt|| }|| }| |v}|j| |||||||||||| |d g|Scc} } wcc} w#1swYxYw#t$rg}YlwxYww)Nr)$_get_effective_configurable_toolsetsr_toolset_configuration_platform_toolset_has_keysgui_toolset_label)r)resolve_toolsetFr) rSrgr"r-rrr rr)rrrrrrhermes_cli.platformsrtoolsetsrrrrrr\r)rrrrrrrrr toolset_rowsrSrtarget_platformsr-enabled_by_platformr3rgdescrtarget_platformr*s rV get_toolsetsr3:sd4(   ;= DP 6@dAq +D 1  -   ),1    F) eT 3t456E:$?0AA  &u-'/@"#+D&9   ( MA    $ E s^&D C/C$C/C*,C/.D C;AD $ C//C84D ; D D D  D c,eZdZUeed<dZeeed<y) ToolsetTogglerNrrs rrXrVrre:rt rXrz/api/tools/toolsets/{name}cKddlm}m}m}m}|Dchc]\}}}| } }}|| vrt dd|||} t |jxs|5t} t|| | d} |jr| j|n| j||| | | dddd || |jd Scc}}w#1swY xYww) aEnable/disable a configurable toolset for its configuration platform. Most toolsets persist to ``platform_toolsets.cli``. Platform-restricted toolsets instead target their supported platform (for example, Discord's native toolsets persist to ``platform_toolsets.discord``). The shared ``_save_platform_tools`` helper keeps the GUI and CLI in lockstep. Scoped to ``body.profile`` when provided. Returns 400 for unknown toolset keys. r)rr_save_platform_toolsrrUnknown toolset: rFrNT)rrSr-r) rrrrrr7rrrrrrr_) rSrjrrrrrts_keyrr rrrs rVtoggle_toolsetrj:s)M(N O 1V OE O 56Gv4NOO5d;O  / 0 ? ,1   << KK  OOD !V_g> ?#<<  ' P ? ?s(C! C8C!AC6C!CC!z!/api/tools/toolsets/{name}/configc|Kddlm}m}m}m}m}m}ddlm}ddl m } |D chc]\} } } |  } } } || vrtdd|t|5t} |j|}g}d}d}d}|rU| | d }||| d D]<}|jd gDcgc]P}|d |jd |d |jd|jdt||d dR}}||| d }|r||d}|d|jdd|jdd||jdt|jd|||| ||d}|dk(r'|jdr|d|d<||d|d<|dk(r|jdr|d|d<|j!|?|dk(r ddlm}m}|}|}ddd|dud}|dk(r |d <|d!<|Scc} } wcc}w#t($rd}d}Y"?   0f$O !8&*6lO L!XXgr288E2. ("&((<"8*.txx8L/M*N!* 8fx9 5=TXXm%< *.m)C'  %_/ &` 5=  .U(;(=%)=)?&KH.T4* G  u}+@'(,B() Nm P" r .(,%)-& .MH.H.sZ'H< H"H<AH0,AHCH0H0(H<H0 H-*H0,H--H00H95H<c@eZdZUeed<dZeeed<dZeeed<y)ToolsetProviderSelectrUN capabilityr)rrrrrrrrrrXrVrr;s%M!%J $!GXc]!rXr image_gen video_gen)rrr provider_rowc|dk(r(|jdxs|jdrdSdS|dk(r|jdSy)a$Map a provider picker row to its model-catalog plugin name. Plugin-backed rows carry ``image_gen_plugin_name`` / ``video_gen_plugin_name``; the managed "Nous Subscription" image row instead carries the legacy ``imagegen_backend: "fal"`` marker (same underlying FAL catalog). rimage_gen_plugin_nameimagegen_backendfalNrvideo_gen_plugin_namer)rrs rV_resolve_toolset_model_pluginr;s] 78 !%%&89E ?C  788 rXrc<ddlm}m}|dk(r||S||S)zHReturn ``(catalog_dict, default_model)`` for a toolset's plugin backend.r)_plugin_image_gen_catalog_plugin_video_gen_catalogr)rrr)rrrrs rV_toolset_model_catalogr&;s' (55 $[ 11rXcddlm}mm}|j |}|y||d}rt fd|DdSt fd|DdS)zFResolve a provider picker row by name, or the active row when omitted.r)rrrNTrXc3LK|]}|jdk(s|ywrr)rrrUs rVrz-_find_toolset_provider_row..?;s B1f (AQBrc3:K|]}|ds|yw)TrXNr)rrrrs rVrz-_find_toolset_provider_row..A;sMq/6tLMs)rrrrrr)rrrUrrrr"rs `` @rV_find_toolset_provider_rowr2;sb   f %C { c6t &mmo  Hd xx 84XXgr*+r2XXgr*   F 6l'*CGGFO  CJJ. s6+F1E= F(A?E='FAF )F=F Fc@eZdZUeed<dZeeed<dZeeed<y)ToolsetModelSelectr#NrUr)rrrrrrUrrrrXrVrr;s# J"Hhsm"!GXc]!rXrz /api/tools/toolsets/{name}/modelc`Ktj|}|tdd||jxsdj }|s tddt |j xs|5t}t|||j}|r t||nd}|stdd|t||\}} ||vrtdd|d ||j|i} t| tsi} | ||<|| d <t|dddd ||d S#1swYxYww) u$Persist a backend model selection (``image_gen.model`` / ``video_gen.model``). Validates the model against the resolved backend's catalog — the same write the CLI's post-selection model picker performs. Returns 400 for toolsets without model catalogs or unknown model ids. NrzToolset has no model catalog: rrzmodel is requiredz'No model-capable backend is active for zUnknown model z for backend r#T)rrSr#r)rrr7r#rrrrrrUrrrrrr) rSrjrrrrrrr_defaultrs rVselect_toolset_modelr;sW&))$/G&DTF$K    b'')H 4GHH  / 0(vt}}E=@.tS9d@G  34@ 7 "'|= K  ''4 +t,K)F7O' GF-0x6 JJ1sA.D.0B#D"D."D+'D.z#/api/tools/toolsets/{name}/providerc Kddlm}m}m}m}m}ddlm}m} |D chc]\} } } |  } } } || vrtdd|j;|dk7r tdd jd vrtdd jd tjxs|5t} j|j|}|r ||| d ng}tfd|Dd}|tddj d||jd}|stddj dj||vr&tdj dj| j#di}t%|t&si}|| d<||jd<n ||j | t/| d |j d}jj|d<|j|}d}|rtfd||| d Dd}|xsijd}|rm| | d }|j0}|j|}t3|xr-|j4xr|r|j7|n |j8}|s d |d<||d<ddd|Scc} } w#t($r*}tdt+|j-dd}~wwxYw#1swYSxYww)uPersist a provider selection for a toolset (no key prompting). Delegates to ``apply_provider_selection`` — the shared, non-interactive core extracted from the CLI configurator — so the GUI and ``hermes tools`` write identical config keys (``web.backend``, ``tts.provider``, etc.). API keys and post-setup flows are handled by separate endpoints. Returns 400 for unknown toolset or provider names. For the ``web`` toolset only, an optional ``capability`` ('search' | 'extract') scopes the selection to ``web.search_backend`` / ``web.extract_backend`` — the same per-capability overrides the runtime dispatchers (``tools.web_tools._get_search_backend`` / ``_get_extract_backend``) resolve first. The provider must actually support the requested capability (a search-only backend can't be the extract backend). Omitting ``capability`` keeps the legacy whole-provider behavior (writes ``web.backend``). Managed Nous rows (``managed_nous_feature``) additionally report the Portal entitlement state: the CLI flow gates these selections on ``ensure_nous_portal_access`` (inline login), but the GUI has no inline prompt, so selecting one while logged out / unentitled used to write the config keys and then never activate (``_is_provider_active`` requires ``managed_by_nous``). The response now carries an additive ``needs_nous_auth: true`` + ``feature`` so the client can drive the existing Nous Portal OAuth flow (``POST /api/providers/oauth/nous/start``) and refetch. r)rapply_provider_selectionrrr)!MANAGED_FEATURE_COVERAGE_CATEGORYrdrrrNrz:capability selection is only supported for the web toolset)rextractzUnknown capability: z! (expected 'search' or 'extract')TrXc3`K|]%}|jdjk(s"|'ywrrrUrrrjs rVrz*select_toolset_provider..;s$Pqv$--1OPs#..r z for toolset rrU z has no web backend keyz does not support _backendr)rrSrUrc3^K|]$}|jdjk(r|&ywrrrs rVrz*select_toolset_provider.. <s-uuV} 5s*-managed_nous_featureneeds_nous_authfeature)rrrrrrrorrdr7rrrrrrrUrrrr rrr account_inforrhtool_gateway_entitled_fortool_gateway_entitled)rSrjrrrrrrrrdrrr rrrrbackendweb_cfgrrLrmanaged_featurernacctr'entitleds ` rVselect_toolset_providerr;sW> )M(N O 1V OE O 56Gv4NOO " 5=S  ??"7 7-doo-@@ab   / 0F6 ?? & "%%d+CMP*3DIVXIPIPRVWD|# #.t}}.?}THUhh}-G# #&t}}&77NO&?&HH# #"mm_,>t>OP''r2Ggt, 'u 4;Gt'x0 1 Q(t}}fE F*.$--#X ?? &%)__H\ "!!$' /VN  C9"//*@A 5f$OH((D8<<_MHNN 228<33 H.2*+&5#MF6N Oo Pd Q#CHNN3!!$'E *3DI **b1*AKK%)* *#hh;!7*:1;; 8b6RY?A[@\]  ((..* $JCJ"3 6 S!s# $6==!T-*++==9>:uTZ [[CS<"J'CCIIJ >9>>sqG/ F,0G/A1G# F2F2A%G#F7)G#GG#G/2G#7 GGGG##G,(G/c,eZdZUeed<dZeeed<y)ToolsetPostSetuprNrrrrXrVrrw<rrXrz%/api/tools/toolsets/{name}/post-setupcKddlm}m}|Dchc]\}}}| }}}||vrtdd||j|vrtdd|j t t |jxs|dd|jgzd }d|jd |jdScc}}w#t$rt$r*} tjd td d | d } ~ wwxYww)uSpawn a provider's post-setup install hook as a background action. Post-setup hooks (npm install for browser/Camofox, pip install for KittenTTS/Piper/ddgs, cua-driver fetch, etc.) are long-running and text-output, so this follows the spawn-action pattern: it launches ``hermes tools post-setup `` and the frontend tails the log via ``GET /api/actions/tools-post-setup/status``. The ``key`` is validated against the declared post-setup allowlist before spawning. Returns 400 for unknown toolset or post-setup key. ``profile`` spawns the hook as ``hermes -p tools post-setup``. Most hooks install machine-level artifacts (repo node_modules, shared pip packages) where the scope is inert, but hooks that read config or write per-profile state must see the same HERMES_HOME the rest of the drawer's writes targeted — so the scope is threaded for consistency. r)rvalid_post_setup_keysrrrzUnknown post-setup key: rz post-setuprz Failed to spawn tools post-setuprYzFailed to run post-setup: NT)rrrSr) rrrr7rrDrrr\rQrKr) rSrjrrrrrrr%rs rVrun_toolset_post_setupr|<s( ,P+QR<61aRHR 86Gv4NOO xx,..&>txxj$I    # dll5g 6 dhh/ 0  txx1CDHH UU-S    9:&@$F   s4C: B5AC:'3B;!C:;C7 %C22C77C:r*Localz4Run commands directly on this machine. No isolation.)rSrgr"r+DockerzIRun commands in an isolated Docker container with a persistent workspace.r/zSingularity / ApptainerzKRun commands in a Singularity/Apptainer container (HPC-friendly, rootless).r-Modalz&Run commands in a Modal cloud sandbox.r.Daytonaz(Run commands in a Daytona cloud sandbox.r,SSHz'Run commands on a remote host over SSH._TERMINAL_BACKENDS terminal_cfgrc|j|}|2t|jrt|jS ddlm}||xsdjS#t $rYywxYw)zHRead a terminal.* setting from config.yaml, falling back to its env var.rr r)rrrr<r r\)rrrrr s rV_terminal_cfg_valuer<sm   S !E SZ--/5z!!3g&,"3355 sA'' A32A3ctjdsy tjgdddd}|jdk(ryy #tj $rYy t $r}d d |fcYd}~Sd}~wwxYw) Nr+) needs_setupu=Docker CLI not found — install Docker Desktop or docker-ce.)r+rRz--formatz{{.ServerVersion}}Tr$rrrr)ru7Docker daemon not reachable — start Docker and retry.)rz)Docker daemon not responding (timed out).rzDocker probe failed: )rrr.r/r0r r\rEs rV_probe_docker_backendr<s << ! >~~ @   ??a     $ $LK >!6se<==>s#*AA2A2!A-'A2-A2cZtjdstjdryy)Nr/ apptainerr)rz0Neither singularity nor apptainer found on PATH.)rrrrXrV_probe_singularity_backendr=s! ||M"fll;&? rXct|dd}t|dd}g}|s|jd|s|jd|rddd j|d fSd |d |fS) Nssh_hostTERMINAL_SSH_HOSTssh_userTERMINAL_SSH_USERzterminal.ssh_hostzterminal.ssh_userrzSet z and z: in config.yaml (or the matching TERMINAL_SSH_* env vars).rr )rrr)rrrrs rV_probe_ssh_backendr =s |Z9L MD |Z9L MDG *+ *+ 7<<())c d   vQtf% &&rXc ddlm}|ry ddlm}|dr |dryy#t$rY$wxYw#t$rYywxYw)Nr)has_direct_modal_credentialsrr MODAL_TOKEN_IDMODAL_TOKEN_SECRET)ruaModal credentials not found — set MODAL_TOKEN_ID and MODAL_TOKEN_SECRET (or run `modal setup`).)tools.tool_backend_helpersr r\r<r )r r s rV_probe_modal_backendr$=se K ' )  * 3 ) *}=Q/R           s *9 66 AAcD ddlm}|dry y#t$rYywxYw)Nrr DAYTONA_API_KEYr)rz/Set DAYTONA_API_KEY to use the Daytona backend.)r<r r\r s rV_probe_daytona_backendr'2=s8 3 * +  , N   M s  c |dk(ry|dk(r tS|dk(r tS|dk(r t|S|dk(r tS|dk(r t Sdd |fS#t $r}dd |fcYd }~Sd }~wwxYw) z:Return ``(status, detail)`` for one backend. Never raises.r*rr+r/r,r-r.rzUnknown backend: zProbe failed: N)rrrr$r'r\)rSrrs rV_probe_terminal_backendr)==s7 7? 8 (* * = -/ / 5=%l3 3 7?') ) 9 )+ +!24&9:: 7u5667s=AAAAAAA A5$A0*A50A5z/api/tools/terminal/backendsc Kt|5t}|jd}t|tsi}t |jdxsdj j}|tvrd}g}tD];}t|d|\}}|j|d|d|d|d|k(||d= dddd S#1swYxYww) uTerminal execution backend rows with health probes for the picker panel. Returns ``{active, backends: [{name, label, description, active, status, detail}]}`` where ``status`` is ``ready`` / ``needs_setup`` / ``unavailable`` and ``detail`` carries setup guidance for non-ready rows. Probes are fast (<~2s each) and defensive — a probe failure surfaces as a status, never an error response. rxrr*rSrgr")rSrgr"rrcrN)rbackends) rrrrrrrr_TERMINAL_BACKEND_NAMESrr)r)rrrrr+rrcrs rVget_terminal_backendsr-Q=s  zz*- ,-L\%%i0;G<BBDJJL 0 0F% C4S[,ONFF OOF W"=1f+/    (( 33)s C B8C C CC c,eZdZUeed<dZeeed<y)TerminalBackendSelectrNrrrrXrVr/r/r=s L!GXc]!rXr/z/api/tools/terminal/backendc K|jxsdjj}|tvr9t dd|jddj t tt|jxs|5t}|jdi}t|tsi}||d<||d<t|d d d d |d S#1swYxYww) uPersist ``terminal.backend`` in config.yaml. Validates against the known backend set (the same enum the raw-config settings row exposes). Selecting a backend that still needs setup is allowed — the picker shows guidance instead of blocking, matching the CLI. rrzUnknown terminal backend: z. Use one of: rrrxrNT)rr)rrrr,r7rrrrrrrrr)rjrrrrs rVselect_terminal_backendr1w=s||!r((*002G--/ /?@99V,C%DEFH   / 0((R8 ,-L!-F: ") YF7 ++sBC& AC C&C#C&z/api/tools/computer-use/statuscfKddlm}t|5|cdddS#1swYyxYww)zCross-platform Computer Use readiness for the desktop card. See ``tools.computer_use.permissions.computer_use_status`` for the payload shape. Read-only and fast (shells ``cua-driver doctor`` + macOS ``permissions status``). r)computer_use_statusN)tools.computer_use.permissionsr3r)rr3s rVget_computer_use_statusr5=s.C  %"$%%%s1% 1.1z)/api/tools/computer-use/permissions/grantcKtjdk7r tdd tt |gdzd}d |jdd S#t$rt $r*}t jdtdd |d }~wwxYww) aSpawn ``hermes computer-use permissions grant`` as a background action. macOS-only: ``cua-driver permissions grant`` launches CuaDriver via LaunchServices so the TCC dialog is attributed to com.trycua.driver, then waits for approval. The frontend polls ``GET /api/actions/computer-use- grant/status`` and re-reads ``/status`` once it exits. Windows/Linux have no TCC toggles to grant, so this returns 400 there. r rz3Computer Use permission grants are a macOS concept.r)z computer-use permissionsgrantr z.Failed to spawn computer-use permissions grantrYzFailed to request permissions: NTrB) r,r-r7rDrr\rQrKrr s rVgrant_computer_use_permissionsr9=s ||xH    # g &6 7  txx1E FF    GH&EcU$K   s'!B AB B  %BB  B c,eZdZUeed<dZeeed<y)RawConfigUpdate yaml_textNrrrrXrVr;r;=sN!GXc]!rXr;z/api/config/rawcKt|5t}dddjsdt|dS|j dt|dS#1swYExYww)ucRaw config.yaml text plus its resolved path. ``path`` is resolved inside ``_profile_scope`` so the Config page header shows the file the switched profile actually reads/writes — /api/status's ``config_path`` is machine-global and always reports the dashboard process's own profile, which is wrong under the global profile switcher. Nr)rrrr)rrr{rr)rrs rVget_config_rawr>=s^  ! ! ;;=CI..NNGN4c$i HH !!s A) AAA)A&"A)cXK tj|j}t|ts t ddt |jxs|5t|ddddddiS#1swY xYw#tj$r}t dd|d}~wwxYww) NrzYAML must be a mappingrF)merge_existingrTzInvalid YAML: ) rrr<rrr7rrr YAMLError)rjrrrs rVupdate_config_rawrB=s J/&$'C8PQ Q DLL3G 4 6 u 5 6d|  6 6 >>JnQC4HIIJsAB*AA?A3' A?2B*3A<8A??B'B""B''B*r& c |jjd|f}|jDcgc] }t|c}Scc}w#t$rgcYSwxYw)aPer-(model, task) auxiliary usage within the window (issue #23270). Reads the task-dimension rows (task != '') that record_auxiliary_usage writes into session_model_usage. Returns [] when the table predates the task column (older DB opened read-only by newer code). ai SELECT u.model, u.task, u.billing_provider, SUM(u.input_tokens) as input_tokens, SUM(u.output_tokens) as output_tokens, SUM(u.cache_read_tokens) as cache_read_tokens, SUM(u.reasoning_tokens) as reasoning_tokens, COALESCE(SUM(u.estimated_cost_usd), 0) as estimated_cost, COUNT(DISTINCT u.session_id) as sessions, SUM(COALESCE(u.api_call_count, 0)) as api_calls, MAX(u.last_seen) as last_used_at FROM session_model_usage u JOIN sessions s ON s.id = u.session_id WHERE s.started_at > ? AND u.task != '' GROUP BY u.model, u.task, u.billing_provider ORDER BY SUM(u.input_tokens) + SUM(u.output_tokens) DESC )r r r rr\)rr& rr s rV_aux_usage_rowsrD=s]hh "Y#$"%0AQ000  s"/A AA A AAby_modelaux_rowsc |s|Si}|D]}|||jdxsd<|D]y}|jdxsd}|j|}||dddddd}|||<|jdxsd|jdxsdz|d<|jdxsd|jdxsdz|d<|jdxsd|jdxsdz|d<|jdxsd|jdxsdz|d<|jd g}|j|jd xsd |jdxsd|jdxsd|jdxsd|jdxsdd |t|j }|j d d|S)uOFold aux usage rows into the sessions-derived per-model list. Aux usage lives only in session_model_usage (never in the sessions counters), so adding it here cannot double-count. Models that ONLY appear via aux calls (e.g. a dedicated vision model) get their own entry — previously they were entirely invisible. r#rr)r# input_tokens output_tokensestimated_costr api_callsrHrIrJrK aux_tasksrr)rrHrIrJrKcX|jdxsd|jdxsdzSNrHrrIrr s rVrz*_merge_aux_into_by_model..F>(quu^,1aeeO6L6QPQRrXTrrrrrrr) rErFrrrr#rjrar3s rV_merge_aux_into_by_modelrR>s (*F403swww,9-4  -IE" > !!""# F#F5M"(**^"<"AcggnF]Fbab!c~#)::o#>#C!P_H`Hede"f$*JJ/?$@$EA#''RbJcJhgh#i %zz+6;! @T@YXYZ{!!+r2 GGFO)rGGN38q WW_5:!gg&67<1-2   % 2&--/ "F KK R MrXc 0i}|D]}|jdxsd}|j||ddddgd}|dxx|jdxsdz cc<|dxx|jdxsdz cc<|dxx|jdxsdz cc<|dxx|jdxsdz cc<|jd xsd }||d vs|d j|t|j }|j d d |S)z?Aggregate aux usage rows across models into a per-task summary.rrr)rrHrIrJrKr\rHrIrJrKr#rr\cX|jdxsd|jdxsdzSrNrrOs rVrz#_aux_task_summary..b>rPrXTrrQ)rFby_taskrrrr#r3s rV_aux_task_summaryrVL>s-)+G&wwv$"   t &   .SWW^499 /cggo6;!; sww'78=A= +#''+.3!3 -I ( # hK  u %!&"'.." #F KK R MrXdaysc  ddlm}t|} tj|dzz }|jj d|f}|j Dcgc] }t|}}|jj d|f}|j Dcgc] }t|} }t||} t| | } |jj d|f} t| j} ||j|} | jdddddd gd }|| t| | ||| jd gd |jScc}wcc}w#|jwxYw) Nr)InsightsEngineQa} SELECT date(started_at, 'unixepoch') as day, SUM(input_tokens) as input_tokens, SUM(output_tokens) as output_tokens, SUM(cache_read_tokens) as cache_read_tokens, SUM(reasoning_tokens) as reasoning_tokens, COALESCE(SUM(estimated_cost_usd), 0) as estimated_cost, COALESCE(SUM(actual_cost_usd), 0) as actual_cost, COUNT(*) as sessions, SUM(COALESCE(api_call_count, 0)) as api_calls FROM sessions WHERE started_at > ? GROUP BY day ORDER BY day a SELECT model, SUM(input_tokens) as input_tokens, SUM(output_tokens) as output_tokens, COALESCE(SUM(estimated_cost_usd), 0) as estimated_cost, COUNT(*) as sessions, SUM(COALESCE(api_call_count, 0)) as api_calls FROM sessions WHERE started_at > ? AND model IS NOT NULL GROUP BY model ORDER BY SUM(input_tokens) + SUM(output_tokens) DESC a2 SELECT SUM(input_tokens) as total_input, SUM(output_tokens) as total_output, SUM(cache_read_tokens) as total_cache_read, SUM(reasoning_tokens) as total_reasoning, COALESCE(SUM(estimated_cost_usd), 0) as total_estimated_cost, COALESCE(SUM(actual_cost_usd), 0) as total_actual_cost, COUNT(*) as total_sessions, SUM(COALESCE(api_call_count, 0)) as total_api_calls FROM sessions WHERE started_at > ? )rWrf)total_skill_loadstotal_skill_editstotal_skill_actionsdistinct_skills_used)r top_skillsr)dailyrErUtotals period_daysrfr)agent.insightsrYr~r}r r r rrDrRfetchonegeneraterrVr)rWrrYrr& rr r`cur2rErFcur3rainsights_reportrfs rV_get_usage_analyticsrih>s- %g .BJu -hh Y #&,,.1Qa11xx ! Y &*]]_5DG55#2v.+Hh?xx ! Y dmmo&(,5545@ $$X%&%&'(()  0   )2%(("5    w26^  s+A E0E&.1E0E+1B$E0& E00Fz/api/analytics/usagecTKtjt||d{S7wr)rorrirWrs rVget_usage_analyticsrl>s"""#7wG GG G (&(ct|} tj|dzz }|jjd|f}|j Dcgc] }t |}}t ||D]}|j|jdxsd|jdxsd|jdxsd|jd xsd|jd xsd|jd xsd|jd xsdd|jd xsd|jdxsdd|jdd|jdxsddi}|D]6|jjdxsdgj8g} |jD]Y} | Dcgc]}|jds|} }t| dk(r| d| D]usjdrtfddD} | r0jd xsdjd xsdzd <tjdxsdjdxsdd<jdxsdjd xsdz} jd xsd}|r| |z ndd<| j| jfd| DI| j| \| jddg}| D]jdxsd}d}i} ddlm}|||}|E|j$|j&|j(|j*|j,|j.d}|j||dd d d d dd dddd|d|jjd |f}t |j3}|||d!|j5Scc}wcc}w#t0$rYwxYw#|j5wxYw)"zRich per-model analytics for the Models dashboard page. Returns token/cost/session breakdown per model plus capability metadata from models.dev (context window, vision, tools, reasoning, etc.). rZa SELECT model, billing_provider, SUM(input_tokens) as input_tokens, SUM(output_tokens) as output_tokens, SUM(cache_read_tokens) as cache_read_tokens, SUM(reasoning_tokens) as reasoning_tokens, COALESCE(SUM(estimated_cost_usd), 0) as estimated_cost, COALESCE(SUM(actual_cost_usd), 0) as actual_cost, COUNT(*) as sessions, SUM(COALESCE(api_call_count, 0)) as api_calls, SUM(tool_call_count) as tool_calls, MAX(started_at) as last_used_at, AVG(input_tokens + output_tokens) as avg_tokens_per_session FROM sessions WHERE started_at > ? AND model IS NOT NULL AND model != '' GROUP BY model, billing_provider ORDER BY SUM(input_tokens) + SUM(output_tokens) DESC r#rbilling_providerrrHrrIcache_read_tokensreasoning_tokensrJrrK last_used_atr)r#rorHrIrprqrJ actual_costrrK tool_callsrravg_tokens_per_sessionaux_taskrc3NK|]}j|xsddk7ywrNr)rrrs rVrz(_get_models_analytics..?s+ $*q0 $"%rHrIrprqrJrsrKrtruc3vK|]/ur)jdstfddDr1yw)roc3NK|]}j|xsddk7ywrxr)rrr s rVrz2_get_models_analytics...?s* :sqQ. :ryrzN)rr)rr rjs @rVrz(_get_models_analytics..?sC12c : $ : 7s59cX|jdxsd|jdxsdzSrNrrOs rVrz'_get_models_analytics...?s(15505A!%%:P:UTUVrXTrr#r%r&rsrt)r#rUrHrIrprqrJrsrrKrtrrrura SELECT COUNT(DISTINCT model) as distinct_models, SUM(input_tokens) as total_input, SUM(output_tokens) as total_output, SUM(cache_read_tokens) as total_cache_read, SUM(reasoning_tokens) as total_reasoning, COALESCE(SUM(estimated_cost_usd), 0) as total_estimated_cost, COALESCE(SUM(actual_cost_usd), 0) as total_actual_cost, COUNT(*) as total_sessions, SUM(COALESCE(api_call_count, 0)) as total_api_calls FROM sessions WHERE started_at > ? AND model IS NOT NULL AND model != '' )r\rarb)r~r}r r r rrDrrrrrrr\rrr.r$r'r(r)r*r+r,r\rdr)rWrrr& rr r r rows_by_modelr" model_rows provider_rows has_usage total_tokensrr\rUr/r4r$r5 totals_currarrjs @@rV_get_models_analyticsr>s &g .Bfu -hh "Y#$&)\\^4DG44 #2v. C OO)6Y$'GG,>$?$E2 # 7 <1!$!9!>Q%(WW-@%A%FQ$'GG,>$?$D1"%''*:";"@q GGJ/41 WW[16Q # 7*+GGFO1r  0:<  MC  $ $SWWW%5%;R @ G G L M&('..0. (J(2P1aee*$*JJ~$>$C! SbHcHhgh#iL%zz*5:HRZ|h7N`aF34-b. F# )$ J']. (` V  " Cww128bHWJD C+XZP>*,*;*;+-+=+=.0.C.C*,*;*;-/-A-A(* D MM#$ #N 3!$_!5%()<%=$'(:$;"%&6"7"=1 O -!,/ #N 3*-.F*G $ '" HXX%% ' Y  j))+,  c5HQJ  P  sXA Q P4*EQ P9P9E1Q AP>%A>Q 4 Q > Q Q Q  Q Qz/api/analytics/modelscTKtjt||d{S7w)z?Return model analytics without blocking the serving event loop.N)rorrrks rVget_models_analyticsrn?s$""#8$H HH Hrmr) WinPtyBridgePtyUnavailableErrorceZdZdZy)rz,Stub when win_pty_bridge cannot be imported.NrrrrrrXrVrr?s > rXr) PtyBridgerceZdZdZy)rz5Stub on platforms where pty_bridge can't be imported.NrrrXrVrr?s G rXs\x1b\[RESIZE:(\d+);(\d+)\]g?)PtySessionRegistry RegistryFullr|ir)ttl max_sessions buffer_cap read_timeoutwsr:cdKtjd fd }tj|} jd{}|j ddk(rn|j d}|4|j d}t |tr|jdnd}|sytj|}|r`|jt|k(rDjt|jd t|jd  j!||j% |d{tj*j,d{y71#t$rYQwxYw#t"$rY`wxYw7M#tj&t(f$rYfwxYw7G#|j% |d{7n#tj&t(f$rYnwxYwtj*j,d{7wxYww) uOriginal 1:1 socket<->PTY pump: stream until disconnect, then close the bridge. Used when no ``?attach=`` token is supplied (keep-alive opt-in). Behavior is identical to the pre-keep-alive ``pty_ws`` body, including the #54028 half-open-socket protection (reader EOF → close the WS so the writer's ``ws.receive()`` unparks) and the #53227 ``to_thread`` offloads for the blocking ``bridge.close()``. NcbK jdjtd{}|C tjj d{ j d{y|stjdd{ j|d{77[#t $rYdwxYw7S#t $rYywxYw7D7+#t $reY tjj d{7n#t $rYnwxYw j d{7y#t $rYywxYwwxYw# tjj d{7n#t $rYnwxYw j d{7w#t $rYwwxYwxYwwrZ) rurf_PTY_READ_CHUNK_TIMEOUTrorrr\rY send_bytes)rbridgerrs rVpump_pty_to_wsz$_legacy_pump..pump_pty_to_ws?s# "22&++'>=, '' 555 hhj  5!--***--...66  !  5+/  '' 555   hhj    -  '' 555   hhj    sF/%EB/E"B3B1B3C.C/C3F/4ECEC)C*C.E1B33 B?<F/>B??F/C C F/CF/EC E E""D DD F/ DF/DF/D5.D1/D54F/5 E>F/EF/EEF, "E3,E/-E32F,3 E?<F,>E??F,FFFF, F)&F,(F))F,,F/r!websocket.disconnectrrrrXrr$colsr"rKN)rorr{receiverrrrr _RESIZE_RErendrresizerrrr;r~CancelledErrorr\rr) rrr reader_taskr[ rrrrs `` @rV _legacy_pumpr?s  # # %D$L%%n&67K. JJL( wwv"88'''"C{wwv.8s.Cdkk'*$$S)EC0 3u{{1~#6SQ=P Q LL )0     ---7)  $    && 2   -    && 2    ---s7H0FFFFC)FH0F&F$F&"H0=G>H0F FFFF F!G F!!G$F&&G?H0GH0H-G%G!G%$H-%H>H-H%H-&H)'H--H0z^[A-Za-z0-9._-]{1,128}$>rrbrrcNttjddryttjddxsdjj }|r |t vry|j r|j jnd}|s d|xsdS|t vryd|d |xsdS) a_Return a rejection reason for the client IP, or None when allowed. Reasons are short machine-parseable tokens logged on the rejection path so a "WS keeps closing" report can be diagnosed from agent.log without a repro. ``None`` means the peer IP passed this gate. See :func:`_ws_client_is_allowed` for the full policy rationale. rFNrrzmissing_or_empty_peer bound=r zpeer_not_loopback peer= bound=rrermrr_LOOPBACK_HOSTSrerrrrfs rV_ws_client_reasonr@ssyy/51#))\26<"CCEKKMJj7$&II"))..2K  .j.?C-@AAo% $[M9Js8K LLrXc$ttjddryttjddxsdjj }|r |t vry|j r|j jnd}|sy|t vS)uCheck if the WebSocket client IP is acceptable. Loopback bind: only loopback clients allowed — the legacy ``?token=<_SESSION_TOKEN>`` path is the only auth we have, so we don't want LAN hosts guessing tokens. Explicit non-loopback bind (``--host 0.0.0.0``, ``--host ::``, or a specific address such as a Tailscale/LAN IP, always with ``--insecure``): allow any peer. The operator explicitly opted into non-loopback exposure, so the loopback-only peer restriction does not apply. DNS-rebinding is still blocked by the Host/Origin guard in :func:`_ws_host_origin_is_allowed`, which mirrors the HTTP layer and requires the Host header to match the bound interface — the same defence ``_is_accepted_host`` applies to non-loopback HTTP requests. Gated mode: any peer is allowed — uvicorn's ``proxy_headers=True`` (enabled when the OAuth gate is active so cookies can pick up ``X-Forwarded-Proto``) rewrites ``ws.client.host`` to the X-Forwarded-For value, which is the real internet client IP. The OAuth gate + single-use ``?ticket=`` is the auth at that point; the Host/Origin guard in :func:`_ws_host_origin_is_allowed` is what blocks DNS-rebinding here, not the peer IP. rFTrrrrs rV_ws_client_is_allowedr#@sw0syy/51 #))\26<"CCEKKMJj7$&II"))..2K  / ))rXcttjdd}|sy|jj dd}t ||s d|xsdd|S|jj dd}|syt jj|}|jd vry|jsd |d|St |j|sd |d|Sy) uReturn a Host/Origin rejection reason, or None when allowed. Mirrors :func:`_ws_host_origin_is_allowed` but yields a short machine-parseable token (``host_mismatch …`` / ``origin_mismatch …``) on rejection so the close path can log *why* the upgrade was refused. rNrrzhost_mismatch host=r rr >rhttpszorigin_mismatch origin=) rrermrrrr`rrrr)rrrr rs rV_ws_host_origin_reasonrN@sL$7J **..,K [* 5$[%7C$8 |LL ZZ^^Hb )F  \\ " "6 *F }}-- ==( |DD V]]J 7( |DD rXct|duS)aApply the dashboard Host/Origin guard to WebSocket upgrades. FastAPI HTTP middleware does not run for WebSocket routes, so the DNS-rebinding Host check used for normal dashboard HTTP requests must be repeated here before accepting the upgrade. Browsers also send an Origin header on WebSocket handshakes; when present, require it to target the same bound dashboard host. N)rrs rV_ws_host_origin_is_allowedrp@s "" % --rXc2t|xs t|S)zDFirst Host/Origin or peer-IP rejection reason, or None when allowed.)rrrs rV_ws_request_reasonr|@s !" % >):2)>>rXc2t|xr t|S)zDReturn True when the WebSocket upgrade matches dashboard boundaries.)rrrs rV_ws_request_is_allowedr@s %b ) G.CB.GGrXcttjddryttjddxsdjj }|r |t vryy)uGShort label for the active WS auth mode — logged on every connection.rFgatedrrinsecureloopback)rrermrrr)rs rV _ws_auth_moder@sNsyy/51#))\26<"CCEKKMJj7 rXcRtttjdd}|rcddlm}m}ddlm}m }m }|jjdd}|r ||y|jjd d} | sy || y|jjdd} | syt'j(| j+t,j+ryy#|$rY}||jd ||jr|jjnd|j j" Yd }~y d }~wwxYw#|$r_}||jt%||jr|jjnd|j j" Yd }~yd }~wwxYw)uValidate WS-upgrade auth; return ``(reason, credential)``. ``reason`` is None when the credential is accepted, else a short machine-parseable token explaining the rejection (``no_credential``, ``token_mismatch``, ``ticket_invalid``, ``internal_invalid``). ``credential`` names which credential type was presented (``ticket``, ``internal``, ``token``, or ``none``) so the accepted path can log *how* a peer authed, not just that it did. Loopback / ``--insecure``: legacy ``?token=<_SESSION_TOKEN>`` query parameter, constant-time compared. Gated (public bind, no ``--insecure``): one of two credentials — * ``?ticket=`` — a browser-minted, single-use, 30s-TTL ticket consumed against the dashboard-auth ticket store. This is what the SPA (and native clients) use. * ``?internal=`` — the process-lifetime internal credential, used only by WS clients the server spawns itself (the embedded-TUI PTY child attaching to ``/api/ws`` and ``/api/pub``). It is multi-use and never expires so the child can reconnect, and is never injected into the SPA — see ``dashboard_auth.ws_tickets`` for the threat model. The legacy ``?token=`` path is unconditionally rejected in gated mode (the SPA bundle isn't carrying the token any longer, and a leaked ``_SESSION_TOKEN`` must not grant WS access once the gate is engaged). Audit-logs the rejection so operators can debug "WS keeps closing" issues from the log. rFr) AuditEvent audit_log) TicketInvalidconsume_internal_credentialconsume_ticketinternalr)Nrz internal: )ro iprN)internal_invalidrticket) no_credentialr)Nr)ticket_invalidrr)Nr)token_mismatchr)rrrermhermes_cli.dashboard_auth.auditrr$hermes_cli.dashboard_auth.ws_ticketsrrrrrWS_TICKET_REJECTEDrerrrrrrrr) rrrrrrrrrrrs rV_ws_auth_reasonr@sg@OUCDM J  ??&&z26  6+H5'$$Xr2* . 6 "! OO   ,E & 5<<>>+@+@+BC $=! 611'u-*,))   6 6  . --3x&(iiBIINNRVV[[   . .s2C!E!D?&AD::D?F&AF!!F&c"t|dduS)zETrue when the WS-upgrade credential is accepted. See _ws_auth_reason.rN)rrs rV _ws_auth_okr@s 2 q !T ))rXresume sidecar_urlactive_session_filec.ddlm}m}m}d}|xsdj }|r|j dk7r t |}||dz d\} } tjj} dd l m } | | || | jdd| jdd| jdd| jddd| d<|t!|| d<|r8t#||nd} t%|| \}}| j'|r|}|| d<|r|| d<|r|| d<|t)x}r|| d<t+| | r t!| | fSd| fS#t$rtjd d YwxYw#| j'wxYw)uTResolve the argv + cwd + env for the chat PTY. Default: whatever ``hermes --tui`` would run. Tests monkeypatch this function to inject a tiny fake command (``cat``, ``sh -c 'printf …'``) so nothing has to build Node or the TUI bundle. Session resume is propagated via the ``HERMES_TUI_RESUME`` env var — matching what ``hermes_cli.main._launch_tui`` does for the CLI path. Appending ``--resume `` to argv doesn't work because ``ui-tui`` does not parse its argv. ``HERMES_TUI_GATEWAY_URL`` is injected so the PTY child can attach to this process's in-memory ``tui_gateway`` instance instead of spawning its own Python gateway subprocess. `sidecar_url` (when set) is forwarded as ``HERMES_TUI_SIDECAR_URL`` so the spawned ``tui_gateway.entry`` can mirror dispatcher emits to the dashboard's ``/api/pub`` endpoint (see :func:`pub_ws`). `active_session_file` (when set) is forwarded as ``HERMES_TUI_ACTIVE_SESSION_FILE``. The TUI writes the current session id there whenever it creates/resumes/switches sessions, giving the dashboard a small cross-process breadcrumb for reconnecting after an unexpected browser WebSocket close. `profile` (when set) scopes the ENTIRE chat to that profile by pointing ``HERMES_HOME`` at the profile dir in the child env. Every spawned process (the TUI and the ``tui_gateway.entry`` it launches) resolves ``get_hermes_home()`` from that env var at its own import, so the child binds the profile's config, skills, memory, and state.db from the start — the same propagation ``hermes -p `` performs. The in-process ``HERMES_TUI_GATEWAY_URL`` attach is SKIPPED for scoped chats: the dashboard's in-memory gateway runs under the dashboard's own profile, so a profile-scoped chat must spawn its own gateway subprocess. r)rq_apply_tui_python_env_make_tui_argvNrrzui-tuiF)tui_dev)apply_terminal_config_to_env)rz9Failed to apply terminal config bridge for dashboard chatTr:NODE_ENV productionHERMES_TUI_DISABLE_MOUSErhHERMES_TUI_INLINE COLORTERM truecolorHERMES_TUI_DASHBOARDrjHERMES_TUI_RESUMEHERMES_TUI_SIDECAR_URLHERMES_TUI_ACTIVE_SESSION_FILEHERMES_TUI_GATEWAY_URL)rrqrrrrr} rvrrr<rr\rQr@rrr~r r_build_gateway_ws_urlr)rrrrrqrrrr argvrrr _resume_db latest_resume _latest_pathgateway_ws_urls rV_resolve_chat_argvr@sRTS"&KB%%'IY__&)3*95 |h6FID# **// C_B$-#NN:|,NN-s3NN&,NN; ,"%C -M 1$0Id  *DVZ*X 'M<     "F#)  (3 $%0C ,- 24 4> 4,:C( ) :3s3x# 55D# 55m _ NY] ^_F    s0E6F E?>E?Frrctjjddj}|r|St t j dd}|sy|tvry|S)uoReturn the host the in-container WS client should dial. Resolution order: 1. Explicit ``HERMES_DASHBOARD_WS_HOST`` env var — wins always. Operators running the dashboard behind a forward proxy can pin a routable host (e.g. ``127.0.0.1``, the container's internal IP, or a sidecar DNS name) and bypass auto-detection entirely. 2. The configured bind host — if it's a wildcard (``0.0.0.0`` / ``::``), substitute ``127.0.0.1`` since both the dashboard and its TUI child run in the same container. 3. Any other bind host (loopback or LAN IP) — preserved verbatim. HERMES_DASHBOARD_WS_HOSTrrNr)rvrrrrrerm_WILDCARD_HOSTS)explicitrs rV_resolve_client_ws_hostrhAsRzz~~8"=CCEH 399lD 1D   KrXct}ttjdd}|r|syd|vr|j dsd|d|n|d|}ttjddr-dd lm}tjjd |i}n%tjjd ti}d |d |S)a ws:// URL the PTY child should attach to for JSON-RPC gateway traffic. Loopback / ``--insecure``: ``?token=<_SESSION_TOKEN>``. Gated mode: the legacy token path is rejected by ``_ws_auth_ok``, so the server-spawned PTY child authenticates with the process-lifetime internal credential (``?internal=``). It must NOT use a single-use browser ticket: the child reads this URL once at startup and reuses it on every reconnect, and a 30s-TTL ticket can expire before a slow cold boot even dials. bound_portNrr]:rFrinternal_ws_credentialrrws://z/api/ws? rrrermrrrr`rr& r)rrrrqss rVrrAs # $D 399lD 1D t $;ts3 D6D6vQtf  syy/51O \\ # #Z1G1I$J K \\ # #Wn$= > 6((2$ ''rXcK|||d}|||d<tt4d{tjtfi|d{cdddd{S7777 #1d{7swYyxYww)a)Resolve chat argv without blocking the dashboard event loop. ``_resolve_chat_argv`` may run ``npm install`` / ``npm run build`` through ``_make_tui_argv``. Keep that synchronous work off the WebSocket event loop so reverse proxies and existing dashboard connections can continue to exchange keepalives while the TUI launch command is prepared. The async lock preserves the previous one-build-at-a-time behavior when multiple browser tabs connect at once without occupying worker threads while queued connections wait. rrrNr)rrerorr)rrrrr} s rV_resolve_chat_argv_asyncrAs""F &(;$%"3'  &&            sV!A6AA6A!AA! A6AA6A!A6!A3'A* (A3/A6channelct}ttjdd}|r|syd|vr|j dsd|d|n|d|}ttjddr.dd lm}tjj||d }n&tjjt|d }d |d |S)aws:// URL the PTY child should publish events to, or None when unbound. Loopback / ``--insecure``: uses ``?token=<_SESSION_TOKEN>``. Gated mode: authenticates with the process-lifetime internal credential (``?internal=``), the same one ``_build_gateway_ws_url`` uses. The PTY child is a server-spawned process we trust; the credential is multi-use and never expires, so the child can reconnect ``/api/pub`` without a new URL. (This previously minted a single-use 30s ticket, which meant the child could not reconnect and could miss the window on a slow cold boot.) Connections authenticated this way are recorded under the ``server-internal`` identity in the audit log. rNrrrrFrr)rr)rrrz /api/pub?r)rrrrrrs rV_build_sidecar_urlrAs # $D 399lD 1D t#&$;ts7Kqb TXSYYZ[_Z`QaFsyy/51 P \\ # #/1g F \\ # #n$Q R 6()B4 ((rXcZKt|\}}|4d{t|j|d}dddd{D]} |j|d{y7Q7(#1d{7swY8xYw7 #t$rt j d|dY^wxYww)z=Fan out one publisher frame to every subscriber on `channel`.Nrz*broadcast send failed for subscriber on %sTr:)rrr send_textr\rQrS)rerrrnrqr rs rV_broadcast_eventrAs!1#!6NJ55N&&w3455_ _--( ( (_55555 ) _ LLEwY]L ^ _syB+A)B+A- B+A+ B+ B!B"B&B++B+-A?3A6 4A?;B+B!B(%B+'B((B+cl|jjdd}tj|r|SdS)z?Return the channel id from the query string or None if invalid.rrN)rr_VALID_CHANNEL_RErrrs rV_channel_or_close_coderAs0oo!!)R0G'--g67@D@rXct|}|j|}||Stjdd\}}t j |t |}|||<|S)zHReturn the per-channel file where a dashboard TUI writes its active sid.zhermes-pty-active-r)rr)rrrrrvrr )rerr rfdrrs rV _active_session_file_for_channelrAs^ )# .Eyy!H##+?PLBHHRL >DE'N KrXc tj|jd}t |j dxsdj}|xsdS#ttjf$rYywxYw)Nrrrr)rdrerrr rrr)rrrs rV_read_active_session_filer Bsmzz$..'.:;TXXl+1r288:J   T)) *s%AA54A5cH |jdy#t$rYywxYw)NTr)rrrs rV_forget_active_session_filer Bs'  t $    s  !!cv|jdd}t|dkr|S|ddjdddzS)aClamp a WS close reason to the protocol's 123-byte UTF-8 limit. RFC 6455 caps the close-frame reason at 123 bytes; uvicorn raises if a longer string is passed. Our reasons embed an attacker-controlled origin, so truncate defensively rather than crash the close handler. rr{Nxignorez...)rrrN)rrOs rV_ws_close_reasonrBsCkk'9-G 7|s 4C=   2U ::rXzhermes> gN@iPr_console_executorctVt5t;tjj t dat jddddtStS#1swYtSxYw)zALazily create the bounded console worker pool (once per process).Nzhermes-console) max_workersthread_name_prefixc@txrtjddS)NFT)r^cancel_futures)rshutdownrrXrVrz'_get_console_executor..OBs#-T)22d2SrX)r_console_executor_lock concurrentfuturesThreadPoolExecutor_CONSOLE_EXECUTOR_MAX_WORKERSatexitregisterrrXrV_get_console_executorrABsp #  ($.$6$6$I$I ='7%J%!T     s AA##A1ch|jjdxsdj}|xsdS)Nrr)rrr)rrs rV_console_profile_from_wsrUBs.""9-3:::> A<A>AAA A Ar3 command_idc XK|jxsd}|j}|dk(rQ|jr%t||d|d|j|dd{t||d|d|tdd{y|dk(rHt||d||jxsd |d d{t||d|d|tdd{y|d k(rQt||d |||j xsd |d tdd{t||d|d |tdd{y|dk(r8t||d|dd{t||d|d|tdd{y|dk(rt||d|d|ddd{yt||d|d||d d{y7D7(77777q7T757w)Nrrrr1)r!rr rrcompleter!rrcrrFrzCommand failed.r!rr4rrzzRun `z`?)r!rrr4rFclear)r!rexitzUnknown console result status: )rrcrr(_CONSOLE_PROMPTconfirmation_message)rr%r3r)rrcs rV_console_send_resultr2pBspnn"G ]]F ~ ==$$&"MM&      " ")         !===,="      " !")      ##  * "!66ME'":M)      " ,")      B G:+NOOO  " !")        "  "       8A     M       P   sAF*FF*/F0-F*FF*<F=6F*3F4F*F F*0F"1F*F$ F*0F&1F*F(F*F*F*F*F* F*"F*$F*&F*(F*r[ c:|jd}||jd}|yt|tr |jd} t j |}t|tsy|dfS#t$rYywxYw#t j$rYywxYw)Nrrrr)Nz"Console frames must be UTF-8 JSON.)Nz$Console frames must be JSON objects.) rrrrNrrdrer r)r[ rrs rV_console_json_payloadr4Bs!ggfoC {ggg {#u >**W%C<**S/ gt $; D=" >= >   <;$rY*wxYw77D77777>77 777|7Y#tJ$rYawxYw7=#tjLt2f$rYywxYw#rMjGs<jI d{7w#tjLt2f$rYwwxYwwwxYww)9Nr z/console refused: embedded chat disabled peer=%s4embedded chat disabledrRro z7console auth rejected reason=%s mode=%s cred=%s peer=%s1auth: zconsole refused: %s peer=%s3zconsole refused: %s8r)HermesConsoleEngine) output_limitrrr)r!r4rF0zconsole failed to initializezConsole unavailable: rRz3console accepted peer=%s mode=%s cred=%s profile=%sr)r!rrFrr!r)rKc K tj}tj|jt t j t|| td{}|k7r |k(rdyy|jdk(r |jnd t ||d{|jdk(r jdd{ |k(rdyy7z797#tj$rtj$rE|k(r=d t d|d |d d{7t d |d |t d d{7Yyt"$r}|k(rsd t$j'dt d|t)|xs|j*j,|d d{7t d |d|t d d{7Yd}~d}~wwxYw#|k(rdwwxYww)N)r!rrZrz)r)r/r/ rArz9Command timed out. Hermes Console returned to the prompt.r-r+r[r,zconsole command failed)rorrrurr r r$ _CONSOLE_COMMAND_TIMEOUT_SECONDSrcrr2rrrr(r0r\rQrKr __class__r) rr!r)rr3r active_taskcommand_generationr pending_confirmationrr%rs rV run_commandzconsole_ws..run_commandZCsFT #++-D"++$$)+%%-"+ '  9  FF////" 0#)--3E"E4 !'%    }}&hhDh)))//" 0c P *E%%  ## //'+$# '(W#'    $ *("+#'"1     //'+$78# '(#&s8#Es}}/E/E#'    $ *(")#'"1     P//" 0sG0A&C,+C&,C,0G#6 G0?/G#.C(/(G#C*G# G0&C,(G#*G#,AG .D1/G EG G#G AG0F31GGGG#G  G## G--G0Fr#cXKdz }tj|||yw)Nr)r!r))ror{)rr!r)rErFrHs rV start_commandz!console_ws..start_commandCs3a' ))  j I s'*Tr!rpingpong)r!rFr~rr+r )r!rcrFidlez%A console command is already running.confirmrz'No command is waiting for confirmation.z0Confirmation does not match the pending command.>inputrrzAConfirm or cancel the pending command before running another one.zUnsupported console frame: )'rer _DASHBOARD_EMBEDDED_CHAT_ENABLEDrQrRrrrrSrrracceptrrorphermes_cli.console_enginer=_CONSOLE_OUTPUT_LIMITrr} r7r(rrr\rKr0rrrrrr4rdoner~r;r)rpeer auth_reasoncredrhost_origin_reason client_reasonr=rrJr[ msg_typerr frame_typerrrErFr rGrrHr%s` @@@@@@@rV console_wsr\CsYY299>>CD + CTJhhD)AhBBB'+K ?D E tT hhD)9F;-:P)QhRRR/3% 24FMhhD)9:L)MhNNN%b)M  *M:hhD)9-)HhIII ))+&r*G IA$2GH w}})3  )6 II=   9   +)%  (,K*.V#V#4V#SV#TV#V#p=B # T d b JJL(wwvH11237NGU# '#("1W[[06B7==?EEGJV## &"1X%{'7'7'9&!+&&&("&K+/('!$.&1&5*+/('!$.&1&5(!$.&,&5;#3#3#5# '#J"1Y&gkk)4R8LRPRSYY[+'!$+'P&522'!$+'Y&5'+$#Gt<<<117;;v.N'++i2HNBOUUW'!$.&*&5''!$+!7'6    #D)))#!A[# U[#&U'#[# 3U>9[#7X 8A[#<Y>X&X#X&AYX6AY5X96A YX<!Y%X?&YY0Y4Y5AY Y #Y.Y /YYA#Y(Y) Y Y YY%YYY"[#+Y00Y-1Y05[#;[#>[#[#[# X'V:7U:87V:/V20V:5[#: X,X2W53X XX[#X[##X&& X3/Y2X33Y9Y<Y?YYYY YYYYYY Y*&Z)Y**Z-Y00Z  [# Z  [##[ 3Z?8Z;9Z?>[ ?[[ [[  [#z/api/ptyc K|jr|jjnd}ts2tj d||j ddd{yt |\}}t}|Atjd|||||j dtd|d{yt|}|t@f$rC}|jd|dd{7|j dd{7Yd}~yd}~wwxYw77#t<$rC}|jd|dd{7|j dd{7Yd}~yd}~wt>t@tHf$rC}|jd|dd{7|j dd{7Yd}~yd}~wwxYw787 #tN$rY-wxYw#tf$rY=wxYw#tDji||wxYww)*Nr z+pty refused: embedded chat disabled peer=%sr6r7r8z3pty auth rejected reason=%s mode=%s cred=%s peer=%sr9r:zpty refused: %s peer=%sr;zpty refused: %sr<z$pty accepted peer=%s mode=%s cred=%su Chat unavailable: the embedded terminal requires a POSIX PTY, which native Windows Python doesn't provide. Install Hermes inside WSL2 to use the dashboard's /chat tab — the rest of the dashboard works here. r@rArrfreshr>rhrrrrrz Chat unavailable: z attachrrc4tjS)N)rr)rspawn)rrrsrV_spawnzpty_ws.._spawnDst#66rXz Chat failed to start: )rar!rrrrrXrr$rr)5rerrPrQrRrrrrSrrrrQ_PTY_BRIDGE_AVAILABLErrrrrrrrrer rrrr7r SystemExitrrrrr}attach_or_spawnrr_rrrrrrrrrrrrrr;detach)rrUrVrWrrXrY raw_resumerrrrrYrresolve_kwargsr attach_tokenregistry_resumerbrr_createdr[ rrrrrrs @@@rVpty_wsrl_DscYY299>>CD + ?FhhD)AhBBB(+K ?D A tT hhD)9F;-:P)QhRRR/3% .0BDIhhD)9:L)MhNNN%b)M  & 6hhD)9-)HhIII ))+II4dD$G !ll G   hhDh!!!$$X.6$J Foo!!),4G$R(G18$W-dK??&&w/52<<>DDFKK +/>rvvwO F '(; <./BCF"N &034G0H,- 7I.IIc3??&&x08DL Oc''"56D*_&r'-R?;Pb:QR 7 XF2v&&& ".">"> #?#   .. . JJL( wwv"88'''"C{wwv.8s.Cdkk'*$$S)EC0%%3u{{1~+>SUVEX%Y NN  %-8 L"-O C S O J  "DJ ll;CJJ<{STTThhDh!!! ll;C5 LMMMhhDh!!! ,# ,,!?uKPQ Q Q(((% % % !7+ ,,!CC5 TU U U(((% % %   '   ll;C5 LMMMhhDh!!! w 5ll;C5 LMMMhhDh!!! )  (    L"-sjA[RA[7R8A[RA[R  [!R#"6[R&[2R)3C)[R/+R,,R/4A[U[&W1'[-W7W4W7[#Z$[)Z1+Z!>Z?Z!C=Z1[[[ [#[&[)[,R// U8"TST5S86T;[ U U $T'%U ?UU [ U[ W.V3U64VVV[W.+W)WW)W!W)$[)W..[4W77 ZX>XX>3X64X>9[>ZZ-Y0.ZZ  Z[Z[Z!! Z.*Z1-Z..Z11 Z>:[=Z>>[[[z/api/wsc"Kts|jdd{yt|s|jdd{yt|s|jdd{yddlm}||d{y7h7D7 7 w)Nr;rAr9r) handle_ws)rPrrrtui_gateway.wsrn)rrns rV gateway_wsrpEs +hhDh!!! r?hhDh!!! !" %hhDh!!!( B- " " " sEBB%BB %B*B +BB B B B Bz/api/pubcKts|jdd{yt|s|jdd{yt|s|jdd{yt |}|s|jdd{y|j d{ t |j||jd{d{67777[7D77#t$rYywxYwwNr;rAr9r?) rPrrrrrQrre receive_textr;rs rVpub_wsrt9Es +hhDh!!! r?hhDh!!! !" %hhDh!!!$R(G hhDh!!! ))+ "2667"//:K4KL L L' " " " "5L L    sDC(%DC*%D*C,+'DC.D+C0,D1%C6C2  C6"C4#C6(D*D,D.D0D2C64C66 D?DDDz /api/eventsc rKts|jdd{yt|s|jdd{yt|s|jdd{yt |}|s|jdd{y|j d{t |j\}}|4d{|j|tj|dddd{ |jd{7 77777c7,#1d{7swY`` block with the ``:root`` CSS variables that ``ThemeProvider.applyTheme()`` installs once the ``/api/dashboard/themes`` round-trip completes. The goal is to eliminate the green flash where the first paint shows the bundle's default Hermes Teal canvas before the SPA flips the configured user theme into place. Built-in themes return an empty string — their full definitions live in ``web/src/themes/presets.ts`` and are applied by the bundle before paint, so no shim is needed for them. rmthemer?rrc3.K|] }|dk(ywrr)rbrs rVrz5_render_active_theme_bootstrap_css..EsFqqyF"FsrSpaletter midgroundr z#0a0a0az#e5e5e5 typographyfontSansbaseSizerxrKc8t|jddS)Nz._escEs1v~~dF33rXz;ztheme bootstrap render failedTr:) rrrrr_BUILTIN_DASHBOARD_THEMES_discover_user_themesrr_THEME_DEFAULT_TYPOGRAPHYr\rQr@) rr{r~bgmgbg_hexmg_hextypo font_sans base_sizerrs @rV"_render_active_theme_bootstrap_cssrEs6gyIZ4 F,EF F*,* Eyy F*ii *0bG\*0bB[)/RB1;B1ERVVE9-9F1;B1ERVVE9-9F99\*0bD,U0I*0UI,U0I*0UI 4 4 4 %%)&\N3$$(L>2%%))_$56%%))_$56  ;* V  2T Bs#+E:E:D/E:8E:: FF applicationctjjddk(}|stj s'|rdnd|jddt ffd }ytd z dd t ffd |jd d t dt fd}|jdttdz d|jddt dt ffd }y)aMount the built SPA. Falls back to index.html for client-side routing. The session token is injected into index.html via a ``z)