`gjy UdZddlZddlZddlZddlZddlmZddlmZm Z m Z ddl m Z ddl mZddl mZeZe ZeZe Ze ej(edz dd lmZmZdd lmZdd l mZdd lmZdZddl mZde fdZ!de de fdZ"de de dzfdZ#de$de%e fdZ&de%e fdZ'de de$fdZ(de$fdZ)de*de$fdZ+de de fdZ,d e%e d!e%e*de-e%e e%e*ffd"Z.d#e de$fd$Z/dGd%e d&e fd'Z0dGd%e d&e fd(Z1dGd%e d&e fd)Z2d%e fd*Z3d+e ddfd,Z4d%e d&e d-e d.e%e ddf d/Z5d0Z6e-e-e e e fd1fe7d2<d3Z8e-e d1fe7d4<d5Z9e-e-e e fd1fe7d6<d7e*dzde%e-e e ffd8Z:d9e*dzde%e-e e ffd:Z; dHd7e*dzd9e*dzde%e-e e ffd;Zd!e%e*de%e*fd=Z?de dzfd>Z@d.e%e ddfd?ZAd.e%e ddfd@ZBdIdAZCd.e%e ddfdBZDdaEe%dze7dC<de%fdDZFdIdEZGdFZHy)JzK Doctor command for hermes CLI. Diagnoses issues with Hermes Agent setup. N)Path)get_project_rootget_hermes_home get_env_path)load_hermes_dotenv)display_hermes_home)agent_browser_runnable.env) hermes_home project_env)Colorscolor)_HERMES_USER_AGENT)OPENROUTER_MODELS_URL)base_url_host_matches)DEEPINFRA_API_KEYOPENROUTER_API_KEYOPENAI_API_KEYANTHROPIC_API_KEYANTHROPIC_TOKENOPENAI_BASE_URL NOUS_API_KEY GLM_API_KEY ZAI_API_KEY Z_AI_API_KEY KIMI_API_KEYKIMI_CN_API_KEY GMI_API_KEYFIREWORKS_API_KEYMINIMAX_API_KEYMINIMAX_CN_API_KEYKILOCODE_API_KEYDEEPSEEK_API_KEYDASHSCOPE_API_KEYHF_TOKENOPENCODE_ZEN_API_KEYOPENCODE_GO_API_KEYXIAOMI_API_KEYTOKENHUB_API_KEY) is_termuxreturnctrdSdS)Nzpython -m pip installzuv pip install) _is_termuxD/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/doctor.py_python_install_cmdr1?s&0l "H8HHr/pkgcZtrd|Stjdk(rd|Sd|S)Nz pkg install darwinz brew install zsudo apt install )r-sysplatform)r2s r0_system_package_install_cmdr7Cs:|cU## ||xse$$ se $$r/cmdcL tj|S#t$rYywxYw)zCshutil.which wrapper resilient to platform monkeypatching in tests.N)shutilwhich Exception)r8s r0 _safe_whichr=Ks(||C  s  ##node_installedcg}d}|s|j|d|dz }|j|d|j|dzd|S)Nz) pkg install nodejsz) npm install -g agent-browserz) agent-browser install)append)r>stepssteps r0_termux_browser_setup_stepsrDSs]E D  v123   LLD6789 LLD1H:456 Lr/c gdS)N)z`Termux install profile: use .[termux-all] for broad compatibility (installer default on Termux).zNMatrix E2EE extra is excluded on Termux (python-olm currently fails to build).zYLocal faster-whisper extra is excluded on Termux (ctranslate2/av build path unavailable).zaSTT fallback: use Groq Whisper (set GROQ_API_KEY) or OpenAI Whisper (set VOICE_TOOLS_OPENAI_KEY).r.r.r/r0"_termux_install_all_fallback_notesrF^s  r/contentc4tfdtDS)zIReturn True when ~/.hermes/.env contains provider auth/base URL settings.c3&K|]}|v ywNr.).0keyrGs r0 z+_has_provider_env_config..is=#sg~=s)any_PROVIDER_ENV_HINTS)rGs`r0_has_provider_env_configrPgs =)<= ==r/c ddlm}|j}t|jxr|j xs |j S#t$rYywxYw)zRReturn True when Honcho is configured, even if this process has no active session.r)HonchoClientConfigF)plugins.memory.honcho.clientrRfrom_global_configboolenabledapi_keybase_urlr<)rRcfgs r0 _honcho_is_configured_for_doctorrZlsKC 335CKKAS[[%@CLLBB sAA AAitemc|jddk7rytjjdry|jdxsg}t|xrt d|DS)zQReturn True when Kanban is unavailable only because this is not a worker process.namekanbanFHERMES_KANBAN_TASKtoolsc3PK|]}t|jd yw)kanban_N)str startswith)rKtools r0rMz-_is_kanban_worker_env_gate..sQ4s4y33I>Qs$&)getosenvironrUall)r[r`s r0_is_kanban_worker_env_gaterjwsW xx8# zz~~*+ HHW  #E ; Q3Q5QQQr/toolsetcN|dk(r tjjdsyy)zKOptional explanatory suffix for toolsets whose doctor status needs context.r^r_z;(runtime-gated; loaded only for dispatcher-spawned workers))rgrhrf)rks r0 _doctor_tool_availability_detailrns (2::>>2F#GL r/ available unavailablect|}g}|D]j}|jd}t|rd|vr|jd5|dk(r t rd|vr|jdZ|j|l||fS)z>Adjust runtime-gated tool availability for doctor diagnostics.r]r^honcho)listrfrjrArZ)rorpupdated_availableupdated_unavailabler[r]s r0)_apply_doctor_tool_availability_overridesrvsY )xx %d +00!((2  8  @ B00!((2 ""4( ) 1 11r/provider_labelc@|xsdjj}|dk(r* ddlm}t |xsij dS|dk(r* ddlm}t |xsij dSy#t $rYywxYw#t $rYywxYw) ajReturn True when a direct API-key probe failure is non-blocking. Some provider families support both a direct API-key path and a separate OAuth runtime path. When the OAuth path is already healthy, doctor should still show a failed API-key connectivity row, but it should not promote that direct-key problem into the final blocking summary. rmminimaxr)get_minimax_oauth_auth_status logged_inFxaiget_xai_oauth_auth_status)striplowerhermes_cli.authrzrUrfr<r~)rw normalizedrzr~s r0/_has_healthy_oauth_fallback_for_apikey_providerrs!&B--/557JY  E68>BCCKPQ QU  A24:?? LM M      s#(B(B B B BBtextdetailctdtdtjd||r$dt|tjzydzy)N ✓ rm)printrr GREENDIMrrs r0check_okrsG BuUFLL)*!D6 2Y_% :S9T6U hieg hir/ctdtdtjd||r$dt|tjzydzy)Nr⚠rrm)rrr YELLOWrrs r0 check_warnrsG BuUFMM*+1TF 3Z`5;T:U7V ijfh ijr/ctdtdtjd||r$dt|tjzydzy)Nr✗rrm)rrr REDrrs r0 check_failrsG BuUFJJ'($ 0W]affjj8Q7R4S fgce fgr/cVtdtdtjd|y)N u→r)rrr CYAN)rs r0 check_infors# Dufkk*+1TF 34r/titlectttd|tjtjy)u@Print a doctor section banner: blank line + bold cyan ◆ title.u◆ N)rrr rBOLD)rs r0_sectionrs& G %$ug V[[ 9:r/fixissuesc>t|||j|y)z?Emit a check_fail and append the corresponding fix instruction.N)rrA)rrrrs r0_fail_and_issuerstV MM#r/))displaytool_progress_overrideszdisplay.platforms) delegationmax_async_childrenz"delegation.max_concurrent_children._DEPRECATED_CONFIG_KEYS) summary_modelsummary_providersummary_base_url$_DEPRECATED_COMPRESSION_SUMMARY_KEYS))HERMES_TOOL_PROGRESS$display.tool_progress in config.yaml)HERMES_TOOL_PROGRESS_MODEr) TERMINAL_CWDterminal.cwd in config.yaml) MESSAGING_CWDr)QQ_HOME_CHANNELQQBOT_HOME_CHANNEL)QQ_HOME_CHANNEL_NAMEQQBOT_HOME_CHANNEL_NAME_DEPRECATED_ENV_VARS raw_configcXg}t|ts|StD]E\}}}|j|}t|ts)||vs.|j |d||fG|jd}t|tr&t D]}||vs|j d|df|S)u)Return ``(legacy_path, replacement)`` for deprecated keys present in *raw_config*. Only keys that appear in the on-disk YAML are reported (raw file load, not merged defaults). Empty containers still count — presence of the legacy key is the signal that the user should migrate. . compressionz compression.zauxiliary.compression) isinstancedictrrfrAr)rfindingssectionrL replacement section_valrs r0collect_deprecated_config_keysrs')H j$ '%<?!k nnW- k4 (SK-? OOy#/= >? ../K+t$7 QCk!<u!57N OP Q Or/env_mapcg}t|ts|StD]I\}}|j|}|t |j dk7s7|j ||fK|S)zReturn ``(legacy_env, replacement)`` for deprecated vars present in *env_map*. *env_map* should come from the on-disk ``.env`` (e.g. ``load_env()``), not ``os.environ``, so bridged runtime vars do not trigger false positives. rm)rrrrfrcrrA)rrr]rvals r0collect_deprecated_env_varsrsi ')H gt $11kkk$ ?s3x~~/25 OOT;/ 01 Or/ct|}|jt||s td|S|D]*\}}t d|d|dt d|d|d,|S)a!Emit non-failing doctor warnings for deprecated config keys and env vars. Returns the list of ``(legacy, replacement)`` findings that were reported (empty when nothing deprecated is present). Does not mutate config/env and does not append to the blocking ``issues`` list. z%No deprecated config keys or env varsz Deprecated: z(use z instead)zReplace u → z$ (warn-only; not auto-migrated here))rextendrrrr)rrrlegacyrs r0 report_deprecated_config_and_envrs.j9H OO/89 89'^ 6( #K= *  XfXU;-7[\] ^ Or/c ddlm}ddlm}||xsidDchc] }t |c}Scc}w#t $rYywxYw)zHReturn toolsets enabled for the CLI, or None if config resolution fails.r load_config)_get_platform_toolscliN)hermes_cli.configrhermes_cli.tools_configrrcr<)rrrks r0 _enabled_cli_toolsets_for_doctorr*sG1?,? @SQSUZ,[\G \\\ s <7<< AAc|Dcgc]&}|jds|jdr|(}}t}||S|Dcgc]$}t|jdxsd|vr|&c}Scc}wcc}w)zAFilter unavailable API-key toolsets to those enabled for the CLI. missing_varsenv_varsr]rm)rfrrc)rpr[api_key_unavailableenabled_toolsetss r0%_missing_api_key_toolsets_for_summaryr5s% 88N #txx '; 89"",  txx%2 &*: :   s +A0)A5ctdz } |jd}d}|jD]}|j }|j dr|j dr|dk(};|s>|j d sPd |vsU|jd d d }|jd d d j j d}|xsdcSy#t$rYywxYw)a>Read the ``version = "..."`` from ``pyproject.toml`` at the project root. Returns None when running from an installed wheel (no pyproject.toml ships with the package) or when the file can't be parsed. Reads only the ``[project]`` version, ignoring any version strings that appear in other tables. zpyproject.tomlutf-8encodingNF[]z [project]version=r@#rz"') PROJECT_ROOT read_textOSError splitlinesrrdendswithsplit) pyprojectr in_projectrawlinevalues r0_read_pyproject_versionrDs//I""G"4J !yy{ ??3 DMM#$6,J  $//)4JJsA&q)EKKQ'*00288?E=D !  sC C! C!c ddlm}t}|y||k(rt dd|dyt dd|d |dd |y#t$rYywxYw) alVerify pyproject.toml version matches hermes_cli.__version__. A git conflict resolution (reset/merge) can revert one file without the other, leaving ``hermes --version`` reporting a stale version while ``pyproject.toml`` is current. Detect that drift so users can re-sync. Silent no-op for installed wheels where pyproject.toml isn't present. r) __version__NzVersion files consistent()z%Version mismatch between source filesz(pyproject.toml z != hermes_cli/__init__.py zsRe-sync version files (e.g. run 'hermes update', or set hermes_cli/__init__.py __version__ to match pyproject.toml)) hermes_clirr<rrr)r init_versionpyproject_versions r0_check_version_consistencyr^sx:01 L(+qa-@A 3011L\NZ[ \ J    sA A  A c  ddlm}m}|dk7ryt d|dD]0}j |rt |d#t|d2j}|s td ytfd |D}t d |d t|d t|dkr%ddjt|dzydzy#t$rYywxYw)a Inside a container under our s6 /init, surface what s6 sees. Runs as a counterpart to :func:`_check_gateway_service_linger` for the systemd-on-host case. No-op everywhere except in the s6 container so host runs aren't cluttered with irrelevant output. Reports: - Whether the main-hermes and dashboard static services are up - How many per-profile gateway slots are registered (via ``S6ServiceManager.list_profile_gateways()``) and how many are currently supervised as ``up`` r)S6ServiceManagerdetect_service_managerNs6zs6 Supervision)z main-hermes dashboardz: upz(: down (expected if not enabled via env)uYNo per-profile gateways registered yet — create one with `hermes profile create `c3LK|]}jd|sdyw)zgateway-r@N) is_running)rKpmgrs r0rMz(_check_s6_supervision..s"I#..8A3*H1Is$$zPer-profile gateways: /z supervised upz (, rrm) hermes_cli.service_managerrrr<rrrrlist_profile_gatewayssumlenjoinsorted)rrrstaticprofilesup_countrs @r0_check_s6_supervisionr zs 4'   C/L >>& ! xt_ % &!IJ K L ((*H noIhIIH  !CM?.I25h-12DR &*+,A . NJL N1 sC!! C-,C-c ddlm}ddlm}|t dy#$r}t dt |Yd}~yd}~wt$r}tdt |Yd}~yd}~wwxYw)zVerify the certifi CA bundle is loadable. Surfaces the SSLConfigurationError user-friendly path before they hit a wall of tracebacks on the first outbound HTTPS call. r)verify_ca_bundle_with_fallback)SSLConfigurationErrorz"SSL CA certificate bundle is validz#SSL CA certificate bundle is brokenNzSSL certificate check skipped) agent.ssl_guardr  agent.errorsr rrrcr<r)r r es r0check_certificatesrsZ <B6&(56 B8#a&AA <2CF;;/ is sufficient to get into doctor. )) Z.AI / GLM)rrrz#https://api.z.ai/api/paas/v4/models GLM_BASE_URLT)Kimi / Moonshot)rz!https://api.moonshot.ai/v1/models KIMI_BASE_URLT)StepFun Step Plan)STEPFUN_API_KEYz*https://api.stepfun.ai/step_plan/v1/modelsSTEPFUN_BASE_URLT)Kimi / Moonshot (China))rz!https://api.moonshot.cn/v1/modelsNT)Arcee AI)ARCEEAI_API_KEYz"https://api.arcee.ai/api/v1/modelsARCEE_BASE_URLT) GMI Cloud)rz%https://api.gmi-serving.com/v1/models GMI_BASE_URLT)DeepSeek)r#z"https://api.deepseek.com/v1/modelsDEEPSEEK_BASE_URLT) Hugging Face)r%z'https://router.huggingface.co/v1/models HF_BASE_URLT) NVIDIA NIM)NVIDIA_API_KEYz*https://integrate.api.nvidia.com/v1/modelsNVIDIA_BASE_URLT)Alibaba/DashScope)r$z=https://dashscope-intl.aliyuncs.com/compatible-mode/v1/modelsDASHSCOPE_BASE_URLT)MiniMax)r z https://api.minimax.io/v1/modelsMINIMAX_BASE_URLT)MiniMax (China))r!z"https://api.minimaxi.com/v1/modelsMINIMAX_CN_BASE_URLF) Kilo Code)r"z&https://api.kilo.ai/api/gateway/modelsKILOCODE_BASE_URLT) OpenCode Zen)r&z!https://opencode.ai/zen/v1/modelsOPENCODE_ZEN_BASE_URLT) OpenCode Go)r'NOPENCODE_GO_BASE_URLFrzaiz kimi-codingstepfunzkimi-coding-cnarceegmideepseek huggingfacenvidiaalibabaryz minimax-cnkilocode opencode-zenz opencode-go)rr r"r%r&r)r+r-r/r2r4r6r8r:r<>bedrock anthropic openrouter)list_providers)ProviderProfile)normalize_provider_namer+cF|xsdjjS)Nrm)rr)rNs r0_normalize_providerz9_build_apikey_providers_list.._normalize_provider!s **,2244r/rWr.c3dK|](}|jds|jds|*yw _BASE_URL_URLNrrKvs r0rMz/_build_apikey_providers_list..1s/zz+.qzz&7Is.0c3fK|])}|jds|jds&|+ywrRrUrVs r0rMz/_build_apikey_providers_list..6s'ZqAJJ{,CqzzRXGYZs'11Nr/modelssupports_health_checkT)setitemsaddupdate providersrKproviders.baserLhermes_cli.providersrMr<rcr auth_typer display_namer]aliasestuplenextrX models_urlrstripgetattrrA)_statict _known_names_known_canonical_name_to_canonical_label _canonical_dedicated_canonicalrK_PPrP_pp _candidates_alias _key_vars _base_var _models_url_hcs r0_build_apikey_providers_listrzs?G(#**QAaD*L*"% &CS%Z%X&9'$ 1668) Z() B01' ,9 5 V"# MCc3'3==I+ES\\%%1F%5E)E.sxx89K;;," = 3F ;< =11<<IZCLLZI<<ICLL$7$7$t?d1|jTd2|jVd2|jXt=d4nn|d5k\r4t=d1|jTd2|jVd2|jXd6n5t[d1|jTd2|jVd2|jXd7d8|tj\tj^k7}|r t?d9n t=d:d;ta|t%d<tct%d=gd>}gd?}|D]\} } te| t?||D]\} } te| t?|dDt%dFtktldGz }!|!jor`t?tpdH|!jsdIJ}"tu|"r t?dKnt=dLtpdM|j;dNntvdGz }#|#jor t?dOnt/tpdP|rq|!jxj{dQdQR|!j} tj~t|!dSt?dTtpdMtdN| dz } ntdU|j;dVtldWz }$|$jor7t?tpdX ddlC}%|%j|$jsdIJxsi}&|&jKdYxsi}'|'jKdZxsd[j}(|(j})|'jKd\xs|'jKdYxsd[j}*t}+ dd]lHmI},mJ}-t|,jhd^z}+ dd_l!mL}.dd`lMmN}/mO}0g}1|. |.|&}1|&jKda}2tM|2tNr0ddbl!mP |+j fdc|2jQD|1D]t}tM|tNst|jKddxsd[j}|sC|+jde|jjdCdfzvt|+}3|)r|)hn t}4|/|+D]}5 |3j|/|5|)}6|)r |-|)dgvr |-|)}6|4j|6|)}7|)r3|01|)dgvr-|0|)|2|1}8|8 |8jnd}7|7|4j|7|)rI|)dhk7rD|7|+r@|4|3zs;|+rd jt|+ndi}9t[dj|(dkdl|9ddj|(dm|9dn||6xs|7}:t|:xsd[jj};hdo}<|;|tt|>d{xsd[jxs#t|>d|xsd[j}?nydd}lHmI},mW}@|,jK|6}AdQ}?|Ar\tAd~d[dk(rL@|6xsi}Bt|BjKdxs$BjKdxsBjKd}?|?st[dj|6ddd|6dtpd|ntvdz }C|Cjor t?dn|r|$jxj{dQdQRtvdz }D|Djork7rtd?d<}d>k(rqtd>rS t!j"d>d@gdQdAB}j&dk(rt?d>dCnet[dDd[dE|nTt[dFdGdH|nBtd>rt?d>dDn(t)r tdInrn t=dFdDdJk(rtjdK}|rtjdL}tjdM}tjdN}|rdOn}gdP}rdQgz }r'dRtj*j-gz }dSgz } t!j"dQdQdTU} j&dk(rt?dVn(t[dVd[dW||nt[dXdYdZ|d[k(rOtjd\}|rt?d]d^nt[d_d`da| ddblm}t?dcddtdhrt?ditvdjz dkz }d}tj2dk}|jort?dldmdQ}nrt5rt?dkdmdQ}nrrt=dndodpn\t)rCtdqtdrtdst7dQtD] }t|nt=dudvr t)s ddwlm}m}m}m}m}|xs$txsduxs}|srt?dxdynt=dzd{tjdk(rtd|tvd}nrtd|tvd~n\t)rCtdtdtdst7dtD] }t|nt=ddtd}|r ddlm}|}tvddgftvdddgftvdddgfdgfg}|D]\}}}|rtvn}|djz jos' t!j"ddgtdQdQd}ddl}|jJjrjMjJni}|jKdijKdi}|jKdd}|jKdd}|jKdd}||z|z}r ddk(rd}ndgk(r dd}ndd}dk(rt?ddndkDsdkDrqrddd}nddd}t=dddrddk(r td|j;dd|dk(rdndn!t?ddd|dk(rdnddt)r'tdtOD] }t|t%dddlm}ddlm}|dgdg}dffd }dffd }Ðdffd  dffd }Đdffd }|j;d|f|j;d|ftX t[atXD](}|\}}}}}j;||||||f fd f*j;df|j;dftdtdt|dtj\d[dQtjjKd}̐dtjd< j_dd5}DΏcgc]\}}͐ja|ϫ}}}|Dcgc]}|ѐjc}}ddd̀"tjjddntjd< tdd[D]}|ӐjdD]0\}}}|rtdԛdC՛dC֛tdԛdC՛2tgӐjh}|rtkӐjlrg}D]}|j;|ثt%d tj*jodttvddlm}m}|٫\}}ܐtw||ܫ\}}|D]:}jK|i}t?|jKdd|ݫty|ݫ<D]d}|jKdëxsjKdīxsg}|r&d j}t=ddd|dUt=dddƫft{ܫ}|r|j;dǫt%dɫtldz dz }|jort?d̫dz }|jorR ddl}|jMjs}t|jKdi}t?d|dНdz }|jor#t}dԄjDnd}|dkDr t=d՝d֫nt=dאdثddzl!mU}>dtfdل}|>dګxs |>d۫}|r t?dܫn-rt?dݐdޫnt=dߐdtpdt%dd[} ddlC}%tldWz }|jorktdIJ5}|%j|ѫxsi}ddd ddlm}|j}jKdxsijKdZd[}st?ddndk(r ddlm}m}|j}|}|jos=js jrt?dddnt=ddnjstddnjsjst[ddd|nSddlm}m}| t?dd|jd|jd|jndk(rw ddlm}|}|jKdd[}|rBt?dtdjKddd|jKddnt[ddd|nX dd lm}|}|r!jrt?d n%rt=d dnt=dd ddlm}m}m}ddl}|Dcgc]}|jr}}|rt%dt?td}|D]}g}|jrj;djr!j;jddj*dWz josj;dj*dGz josj;djz }|josj;drd jnd}Bt?djdB|B!jrjD]}|js js}"d|"vrbjd|"}|rJjds1t=djdjddt||z}|r| dkDrttdtj ttd| dtj tjd[rCttdCtd tj8tjn ttrwtdD]\}}td|d!|ttyrttdtj8ttd"td#tj8tjtt|dD]\}}td|d!|t|sttd$tj\tyttdtj ttd%tj tjtycc}w#t@$r}t=d#|Yd}~+*d}~wwxYw#t@$r}t=d.|Yd}~*d}~wwxYw#tf$r#t[|d@dA|dBtidC| |Y)CwxYw#tf$rt=|dEY)>wxYw#t$rY(wxYw#t@$rd}-Y&wxYw#t@$r d}.d}/d}0Y&wxYw#t@$rg}1Y&wxYw#t@$rY&wxYw#t@$r|)}6Y%wxYw#t@$rY#wxYw#t@$r}t=dd|dYd}~#Jd}~wwxYw#t@$r*}Kt=dK|j;dYd}K~K"d}K~KwwxYw#t@$rY#wxYw#1swY"xYwcc}Ow#t@$rY!wxYw#1swY!xYw#t@$rY wxYw#1swY xYw#t@$ri}]Y wxYw#t@$rY wxYw#t@$rY wxYw#t@$ri}]Y wxYw#t@$rY wxYw#t@$r}ht=ddhdYd}h~hd}h~hwwxYw#t@$r}t=dd|dYd}~d}~wwxYw#t@$rYwxYwcc}ww#t@$rn}ddlym~}m{}||r>t=tpdd|d|r}}|jKdr ~jt}}|jdjd}|jn#t@$rd}YnwxYwjKdrtdjnd}t?dddjKdd|d| dz } nit=ddjKdd|jKdd|j;dn&|j;dnt=tpd|Yd}~d}~wwxYw#t@$rYwxYw#t@$rd}Y wxYw#t j$$rd}YwxYw#t j$$rd}YwxYw#tf$rt[dedfdg|Y(wxYw#t@$rY7wxYw#t@$rtvdz dz }Y7wxYw#t@$rYwxYwcc}}wcc}w#1swY^xYw#̀"tjjddwtjd<wxYw#t@$r}t=dd|dYd}~ d}~wwxYw#t@$rt=dѐdҫY BwxYw#1swY 7xYw#t@$rY ,wxYw#t@$rY wxYw#t@$r'}t[dtd||Yd}~ d}~wwxYw#tf$rt[ddd|Y nt@$r!}t=dtYd}~ d}~wwxYw#tf$rt[ddd |Y t@$r!}t=d tYd}~ d}~wwxYw#t@$r$}t=dtYd}~ d}~wwxYwcc}w#t@$rY wwxYw#tf$rYt@$rY wxYw(&zRun diagnostic checks.rFackNHERMES_INTERACTIVE1r) ADVISORIES ack_advisoryzUnknown advisory ID: z . Known IDs: rz(none)u ✓ Acknowledged advisory z,. It will no longer trigger startup banners.u ✗ Failed to persist ack for z*. Check ~/.hermes/config.yaml is writable.r@u┌─────────────────────────────────────────────────────────┐uA│ 🩺 Hermes Doctor │u└─────────────────────────────────────────────────────────┘zSecurity Advisories)detect_compromisedfilter_unackedfull_remediation_text get_acked_idsrz==rrzResolve security advisory z : uninstall z7 and rotate credentials, then run `hermes doctor --ack z`.z still installed (advisory z acknowledged)zNo active security advisoriesz Security advisory check failed: zMCP Server Securityr)validate_mcp_server_entry mcp_serversz MCP server 'z' has suspicious stdio commandz; zReview/remove mcp_servers.zC in config.yaml; rotate any credentials that may have been exposed.z No suspicious MCP stdio commandszMCP security check failed: zPython Environment) zPython r)r zHPython 3.11+ recommended for RL Training tools (tinker requires >= 3.11))rrz(3.10+ recommended)z(3.10+ required)zUpgrade Python to 3.10+zVirtual environment activezNot in virtual environmentz (recommended)zSSL / CA CertificateszRequired Packages))openaiz OpenAI SDK)richzRich (terminal UI))dotenvz python-dotenv)yamlPyYAML)httpxHTTPX))croniterzCroniter (cron expressions))telegramzpython-telegram-bot)discordz discord.pyz (missing)zInstall : rz (optional)z(optional, not installed)zConfiguration Filesr z/.env file existsrrz%API key or custom endpoint configuredzNo API key found in z/.envz(Run 'hermes setup' to configure API keysz'.env file exists (in project directory)z/.env file missingT)parentsexist_okizCreated empty z Run 'hermes setup' to create onez!Run 'hermes setup' to create .envz config.yamlz/config.yaml existsmodelproviderrmdefault)PROVIDER_REGISTRYresolve_provider>autocustomrJ)get_compatible_custom_providers)rMresolve_provider_fullr_)is_provider_enabledc3K|]O\}}t|jr1|r)t|jjQywrJ)rcrr)rKr]prov_cfgrs r0rMzrun_doctor..isG'&h4y(-@-JIOO%++-'sAAr]zcustom:->rrrz (unavailable)zmodel.provider 'z' is not a recognised providerz(known: z' is unknown. Valid providers: z>. Fix: run 'hermes config set model.provider '> rnousrDrFlmstudio deepinfra fireworksrJrCrGrrzmodel.default 'z,' uses a vendor/model slug but provider is ''z=(vendor-prefixed slugs belong to aggregators like openrouter)z,' is vendor-prefixed but model.provider is 'zH'. Either set model.provider to 'openrouter', or drop the vendor prefix.)rrrJ) get_env_valuerr)rget_auth_statusrbrW configuredr{z%' is set but no API key is configuredz,(check ~/.hermes/.env or run 'hermes setup')z#No credentials found for provider 'z7'. Run 'hermes setup' or set the provider's API key in zI/.env, or switch providers with 'hermes config set model.provider 'z(Could not validate model/provider configzcli-config.yamlz-cli-config.yaml exists (in project directory)zcli-config.yaml.examplezCreated z)/config.yaml from cli-config.yaml.example)DEFAULT_CONFIG save_configz/config.yaml from defaultszconfig.yaml not foundz(using defaults))check_config_versionmigrate_configzConfig version outdated (vu → vz(new settings available)) interactivequietz!Config migrated to latest versionzAuto-migration failed: z$Run 'hermes setup' to migrate configz=Run 'hermes doctor --fix' or 'hermes setup' to migrate configzConfig version up to date (v)rrXzStale root-level config keys: z"(should be under 'model:' section))atomic_config_writez1Migrated stale root-level keys into model sectionuOStale root-level provider/base_url in config.yaml — run 'hermes doctor --fix')load_envremove_env_valueagent max_turnsHERMES_MAX_ITERATIONSzHERMES_MAX_ITERATIONS=z! in .env shadows agent.max_turns=z in config.yamlz0(stale ghost from an earlier `hermes setup` run)zKRemoved stale HERMES_MAX_ITERATIONS from .env (config.yaml agent.max_turns=z is now authoritative)z0Could not remove HERMES_MAX_ITERATIONS from .envz4Manually delete the HERMES_MAX_ITERATIONS line from u7/.env — config.yaml agent.max_turns is authoritative.uUStale HERMES_MAX_ITERATIONS in .env shadows config.yaml — run 'hermes doctor --fix')r)validate_config_structurezConfig Structureerrorz#xAI Model Retirement (May 15, 2026))MIGRATION_GUIDE_URLfind_retired_xai_refs format_issuezNo retired xAI models in configzMigration guide: zUpdate u7 retired xAI model reference(s) in config.yaml — see zxAI retirement check skippedzAuth Providers)get_nous_auth_statusget_codex_auth_statusrzzNous Portal authz (logged in)z(not logged in)zOpenAI Codex authcodexufcodex CLI not installed (optional — only required to import tokens from an existing Codex CLI login)regionglobalz MiniMax OAuthz(logged in, region=zAuth provider statusz(could not check: r}z xAI OAuthzDirectory Structurez directory existsz directoryz not foundz(will be created on first use))cronsessionslogsskillsmemoriesz/ existsz / not foundzSOUL.md)zrz$/SOUL.md exists (persona configured)uA/SOUL.md exists but is empty — edit it to customize personalityz/SOUL.md not foundz/(create it to give Hermes a custom personality)z# Hermes Agent Persona You are Hermes, a helpful AI assistant. z/SOUL.md with basic templaterz/memories/ directory existsz MEMORY.mdzUSER.mdzMEMORY.md exists (z chars)zPMEMORY.md not created yet (will be created when the agent first writes a memory)zUSER.md exists (zNUSER.md not created yet (will be created when the agent first writes a memory)z/memories/ not foundz /memories/zstate.dbzSELECT COUNT(*) FROM sessionsz/state.db exists (z sessions))_db_opens_cleanlyrepair_state_db_schemaz?/state.db fails a write-health probe (FTS index may be corrupt)repaired backup_pathzn/az"Repaired state.db FTS write healthz (strategy: strategyz ; backup: z>state.db FTS write-health repair did not recover automaticallyuestate.db FTS write corruption and auto-repair failed — restore from the backup copy beside state.dburstate.db FTS write corruption — run 'hermes doctor --fix' (or 'hermes sessions repair') to rebuild the FTS index)is_malformed_db_errorrz>/state.db schema is malformed (sessions hidden until repaired)?zRepaired state.db schema (z sessions recovered)z4state.db schema repair did not recover automaticallyuastate.db schema malformed and auto-repair failed — restore from the backup copy beside state.dbupstate.db schema malformed — run 'hermes doctor --fix' (or 'hermes sessions repair') to recover hidden sessionsz!/state.db exists but has issues: zzagent-browser not installedz(run: npm install))_chromium_installed_is_camofox_mode_get_cloud_provider_get_cdp_override_using_lightpanda_enginezPlaywright Chromiumz(browser engine)z!Playwright Chromium not installedz/(browser_* tools will be hidden from the agent)zInstall with: cd z# && npx playwright install chromiumz/ && npx playwright install --with-deps chromiumzHNode.js not found (browser tools are optional in the tested Termux path)z2Install Node.js on Termux with: pkg install nodejszNode.js not foundz$(optional, needed for browser tools)npm)resolve_whatsapp_bridge_dirscriptszwhatsapp-bridgezBrowser tools (agent-browser)z--workspaces=falsez web workspacez --workspacewebzui-tui workspacezui-tuizWhatsApp bridgeaudit--json)cwdrrrmetadatavulnerabilitiescriticalhighmoderatezcd z$ && npm audit fix --workspaces=falsez && npm audit fixz depsz(no known vulnerabilities)z critical, z high, u moderate — run: u; moderate — build-tool advisory; clears via lockfile bumpu ^ build-time tooling (not runtime); if manual npm remediation errors with an arborist crash it's a known npm bug — clears via a lockfile bumpz has z npm vulnerabilityz moderate zTermux compatibility fallbacks:zAPI Connectivity) namedtuple_ConnectivityResult)labellinesrr+c ztjd}|s>dtdtjdtdtj fggS ddl}|jtdd|id }|jd k(r&dtd tjdd fggS|jd k(r?dtdtjdtdtj fgdgS|jdk(r?dtdtjdtdtj fgdgS|jdk(r?dtdtjdtdtj fgdgSdtdtjdtd|jdtj fggS#t$rM}dtdtjdtd|dtj fgdgcYd}~Sd}~wwxYw)NrOpenRouter APIrz(not configured)r AuthorizationBearer rheadersrrrmr(invalid API key)z Check OPENROUTER_API_KEY in .enviu%(out of credits — payment required)zOpenRouter account has insufficient credits. Fix: run 'hermes config set model.provider ' to switch providers, or fund your OpenRouter account at https://openrouter.ai/settings/creditsiz(rate limited)uSOpenRouter rate limit hit — consider switching to a different provider or waiting(HTTP rrzCheck network connectivity) rggetenvrr rrrrfr status_coderrr<)rLrrrr s r0_probe_openrouterz%run_doctor.._probe_openrouterlsWii,-& v}}-/?*FJJ79:   2   %(GC5/:A }}#*$E6<<02BBGH }}#*$E6::.0@/<>?78  }}#*$E6::.0@CVZZPRSAB }}#*$E6::.0@,fjj9;<78 ' vzz*,<&q16::>@A    & vzz*,<!A3a&**-/0-.   s<AG$.A G$ dtdtj"dtdtj$fggS dtdtj&dtdtj$fggScc} w#t($rL}  dtdtj&dtd| dtj$fggcYd} ~ Sd} ~ wwxYw)Nr)get_anthropic_key Anthropic API)_is_oauth_token _COMMON_BETAS_OAUTH_ONLY_BETAS_CONTEXT_1M_BETAzanthropic-versionz 2023-06-01rr,zanthropic-betaz x-api-keyz#https://api.anthropic.com/v1/modelsrrizlong context betaznot yet availablerrrmrrrrz(couldn't verify)rr)rrragent.anthropic_adapterr!r"r#r$rrfrrrrsrr rrrrr<) rrLrr!r"r#r$ris_oauthrbrr s r0_probe_anthropicz$run_doctor.._probe_anthropics@5!&B? ?>     +L9G&s+H-4SE?(,/HH]EV5V,W()'* $ 5AMMS('166<<>9'166<<>9,/HH -G16F1FQG,-.-()II9#R}}#*#E6<<0/2FG }}#*#E6::./<>?  'v}}-+VZZ8:;  )H4 &v}}-!A3a&**-/0   sEB/G GGAG 9A G =G G HAHHHc d}|D]}tj|d}|sn|s |ggS|jd}|s>|tdtj |tdtj fggS ddl}|rtj|dnd} | s|jdrd} | r.| jdjd rdd l m } | | } t| d r4| jdjd r| jdd z} | r| jddzn|} d|td} t| d rd| d<| r#t| dr| jdd|| d<|j!| | d} |dk(r%| s#| j"dk(r|j!d| d} | j"dk(r&|tdtj |dfggS| j"dk(rF|tdtj$|tdtj fgd|ddgS|td tj&|td!| j"d"tj fggS#t($rL}|td tj&|td#|d"tj fggcYd}~Sd}~wwxYw)$Nrmrz(key configured)rzsk-kimi-zhttps://api.kimi.com/coding/v1rz /anthropic)_to_openai_base_urlz api.kimi.comz/codingz/v1rYr)r User-Agentzclaude-code/0.1.0r-z!generativelanguage.googleapis.comrzx-goog-api-keyrrr2rz8https://dashscope.aliyuncs.com/compatible-mode/v1/modelsrrrzCheck z in .envrrrr)rgrljustrr rrrrdrhragent.auxiliary_clientr,rrpoprfrrrr<)pnamer default_urlbase_envrZrLevrrbaser,urlrrrr s r0_probe_apikey_providerz*run_doctor.._probe_apikey_providers B))B#C &ub"5 5 B$&v||,e*FJJ79:   B  .6299Xr*BDCNN:67 C(11,?F*40$T>:t{{3?O?X?XYb?c{{3'%/484;;s#i/kC#*3%0G%T>:(; %,S2UV OT2,/() #w ;A,,MMS(IIN#R}}#*E6<<0%<= }}#*E6::./<>?hqk](34  'v}}-u&q16::>@A    &v}}-u!A3a&**-/0   s.E/J3AJA J K)AK$K)$K)c ddlm}m}m}|s dggS|}|}dj d} ddl}ddlm}|dddd i }|jd || } | j} t| jd g} dtdtj|td|d|d| dtj fggS#t$r dggcYSwxYw#t$rfdtdtj"|tdt$j&dtj fgdt$j&dgcYSt($ri} t+| j,} dtdtj"|td| d| dtj fgd| dgcYd} ~ Sd} ~ wwxYw)Nr)has_aws_credentialsresolve_aws_auth_env_varresolve_bedrock_region AWS Bedrockr+)Configr max_attemptsr@)connect_timeout read_timeoutretriesrH) region_nameconfigmodelSummariesrrrz models)ru(boto3 not installed — z -m pip install boto3)zInstall boto3 for Bedrock: z -m pip install boto3rrz AWS Bedrock: u; — check IAM permissions for bedrock:ListFoundationModels)agent.bedrock_adapterr9r:r; ImportErrorr.boto3botocore.configr=clientlist_foundation_modelsrrfrr rrrr5 executabler<type__name__)r9r:r;auth_varrrrH _BotoConfigrYrJrespnrerr_namer s r0_probe_bedrockz"run_doctor.._probe_bedrockCs >  #$&}b"= =+-')##B'#   = !'+C \\)\LF002DDHH-r23A&v||,e!H:Rxr!H=vzzJLM  ) >&}b"= = >4 &v}}-u3CNN3CCYZ $%&/s~~.>>STU   Aw''H&v}}-u!H:Rs!,fjj9;<  +012   s7 CBC5C21C25A,G#G+AG GGc djd} ddlm}|}t|tr|j dni}t|ts dggSt |j dxsdjj}t |j dxsdjj}|d k7s|d k7r dggS dd l m }m }m }m} | sQdtd t j"|tdt j$fgdt&j(dgSt |j dxsdj} |j dxsi} t| tsi} t | j dxsdjxs|} || }||d}|j dro|j dxsg}|rdj+|nd}dtdt j,|td|d | dt j$fggS|j d!xsd"}|j d#xsd$}dtd t j"|td|dt j$fgd%|d&|gS#t$r dggcYSwxYw#t$rP} dtd t j"|td | dt j$fgd| gcYd} ~ Sd} ~ wwxYw)'uProbe Azure Foundry Entra ID auth, parallel to ``_probe_bedrock``. Skipped unless the active config has ``model.provider: azure-foundry`` AND ``model.auth_mode: entra_id`` — we don't probe the token-service / CLI chain for users on plain API-key Azure. Bounded by a 10s timeout (via :func:`agent.azure_identity_adapter.describe_active_credential`) so a slow token service can't pad the doctor run. Azure Foundry (Entra ID)rrrrrm auth_modez azure-foundryentra_id)EntraIdentityConfigSCOPE_AI_AZURE_DEFAULTdescribe_active_credentialhas_azure_identity_installedrz(adapter import failed: rz%Azure Foundry adapter import failed: Nz(azure-identity not installed)zInstall azure-identity: z -m pip install azure-identityrXentrascope)r_g$@)rDtimeout_secondsok env_sourcesrzdefault credential chainrrz, scope=rzcredential chain exhaustedhintzqRun `az login`, set AZURE_TENANT_ID/AZURE_CLIENT_ID/AZURE_CLIENT_SECRET, or attach a managed identity to this VM.zAzure Foundry Entra: . )r.rrrrrfrcrrr<agent.azure_identity_adapterrZr[r\r]rr rrr5rLrr)rrrY model_cfg cfg_providerrXrZr[r\r]excrX entra_cfgr_rDrrbtagerrrcr s r0_probe_azure_entraz&run_doctor.._probe_azure_entravsP+004 K 5-C,6sD,A(rIi.*+Er2NNy}}Z8>B?EEGMMOLIMM+6<"=CCEKKMI.)z2I*+Er2NN3J   ,-&*v}}-u8&**EGH+CNN+;;YZ[  y}}Z06B7==?MM'*0b )T*I  g&," - 3 3 5 &% % *N 88D>((=17RK,7$))K(=WC&*v||,e!C5q16::>@A   hhw?#?xx  L # &E6==)5auAJ +- .$SED6 2 3   i K&'A2rJ J K &*v}}-u23%q96::FHI8>?   s8A KBK( K.K+*K+. M7AM<MMrr c|||||SrJr.)rrur(sr7s r0zrun_doctor..s 6q!Q1 Er/r<rVrzRunning u# connectivity checks in parallel…)endflushAWS_EC2_METADATA_DISABLEDtruerz doctor-probe) max_workersthread_name_prefixzH )rqzTool Availability)check_tool_availabilityTOOLSET_REQUIREMENTSrrz (missing z(system dependency not met)zERun 'hermes setup' to configure missing API keys for full tool accessz!Could not check tool availabilityz Skills Hubrz.hubzSkills Hub directory existsz lock.json installedzLock file OK (z hub-installed skill(s))z Lock filez(corrupted or unreadable) quarantinec3BK|]}|jsdyw)r@N)is_dir)rKds r0rMzrun_doctor..2 sDAaDsz skill(s) in quarantinez(pending review)z$Skills Hub directory not initializedz(run: hermes skills list)c tjgddd}|jdk(S#ttjf$rYywxYw)z?Check if gh CLI is authenticated via token file or device flow.)ghauthstatusr authenticatedTrrrF) subprocessrun returncodeFileNotFoundErrorTimeoutExpired)results r0_gh_authenticatedz%run_doctor.._gh_authenticated: sM ^^C#RF$$) )!:#<#<=  s(+AA GITHUB_TOKENGH_TOKENz2GitHub token configured (authenticated API access)zGitHub authenticated via gh CLIu,(full API access — no GITHUB_TOKEN needed)zNo GITHUB_TOKENu!(60 req/hr rate limit — set in z/.env for better rates)zMemory Providerr|memoryzBuilt-in memory activeu2(no external provider configured — this is fine)rr)rRresolve_config_pathz+Honcho configured via environment variablesz config file z( not found, using HONCHO_API_KEY env varzHoncho config not foundzrun: hermes memory setupz&Honcho disabled (set enabled: true in z to activate)z"Honcho API key or base URL not setu/No Honcho API key — run 'hermes memory setup')get_honcho_clientreset_honcho_clientzHoncho connectedz workspace=z mode=z freq=zHoncho connection failedzHoncho unreachable: zhoncho-ai not installedzpip install honcho-aiz?Honcho is set as memory provider but honcho-ai is not installedzHoncho check failedmem0) _load_configzMem0 API key configuredzuser_id=user_idz agent_id=agent_idzMem0 API key not setz5(set MEM0_API_KEY in .env or run hermes memory setup)z5Mem0 is set as memory provider but API key is missingzMem0 plugin not loadablezpip install mem0aiz:Mem0 is set as memory provider but mem0ai is not installedzMem0 check failed)load_memory_providerz provider activez configured but not availablezrun: hermes memory statusz plugin not foundz check failed) list_profiles_get_wrapper_dirprofile_existsProfilesz profile(s) foundzgateway runningu⚠ missing configzno .envzno aliasz hermes -pzhermes -p (\S+)zOrphan alias: u → profile 'z' no longer existsu────────────────────────────────────────────────────────────z Fixed z issue(s).z& issue(s) require manual intervention.rdz Found z issue(s) to address:z= Tip: run 'hermes doctor --fix' to auto-fix what's possible.u All checks passed! 🎉)rirgrh setdefaulthermes_cli.security_advisoriesrridrrrrr rr5exitrrrrrrrradvisoryrpackageinstalled_versionrrArrr<rrhermes_cli.mcp_securityrrfrrr\ version_infomajorminormicrorprefix base_prefixrr __import__rGr1r HERMES_HOMEr_DHHrrPrparentmkdirtouchchmodrcrrr safe_loadrrr[rrrkeysrrarMrrr^r]replacerdrrUrr:copy2rrrropenr0rrrrrseveritymessagercrhermes_cli.xai_retirementrrrrrrrzr=r~ write_textsqlite3connectexecutefetchoneclose hermes_staterrrr]rstatst_sizerr r6home relative_to is_symlinkresolveunlink symlink_torpathsepr7rhermes_constantsrrrrrr-path expanduserrrr;r rDtools.browser_toolrrrrr!gateway.platforms.whatsapp_commonrjsonstdoutloadsrFconcurrent.futuresfutures collectionsr rrzrThreadPoolExecutorsubmitrrrsrrrinsert model_toolsrwrxrvrnrriterdirrr}apply_managed_overlayrSrRrrTrWrXrVrr workspace_id recall_modewrite_frequencyplugins.memory.mem0rplugins.memoryr is_availablehermes_cli.profilesrrrre is_defaultgateway_runningrr|is_filesearchgroupr enumerate( args should_fix ack_targetrra valid_idsr manual_issues fixed_countrrrrall_hits fresh_hitshitr acked_idshrrrservers suspiciousr]entry issues_found py_versionin_venvrequired_packagesoptional_packagesmoduleenv_pathrG fallback_env config_path_yamlrY model_section provider_rawr default_modelknown_providersr_resolve_auth_provider_compatible_custom_providers_normalize_catalog_provider_resolve_provider_fullcustom_providersuser_providersvalid_provider_idsprovider_ids_to_acceptknown_providerruntime_providercatalog_provider provider_def known_listprovider_for_policyprovider_policy_id providers_accepting_vendor_slugsprovider_accepts_vendor_slugrrrpconfigrfallback_configexample_configrrrr current_ver latest_vermig_errrfrkstale_root_keys raw_modelrrr agent_cfg cfg_max_turns env_ghostdrift _yaml_depr_load_env_depr_f_depr _raw_for_depr _env_for_deprr config_issuesci hint_linerrr_xai_cfg retired_refsref_xai_check_errrrrz nous_status codex_statusminimax_statusrr~xai_oauth_statusr expected_subdirs subdir_name subdir_path soul_pathlr memories_dir memory_file user_filesize state_db_pathrconncursorcountrr _write_reasonreport backup_namerwal_pathwal_sizenew_size _venv_bin _venv_name _candidate_prefix_is_termux_env _cmd_link_dir_cmd_link_display _cmd_link_target _expected _path_dirs terminal_env _is_containerrunning_in_containerrssh_hostssh_userssh_portssh_keytargetr8 daytona_keyragent_browser_pathagent_browser_ok _which_abrCrrrrrskip_chromium_check_npm_binr_whatsapp_bridge_dirnpm_audit_targetsnpm_dirr audit_extra check_dir audit_result_json audit_data vuln_countrr r totalfix_cmd vuln_detailnote_futures _namedtuple_probesrr)rTrl_entry_pname _env_vars _default_url _base_env _supports _imds_prev_ex__fn_futures_in_order_f_results_r_glyphro_detail_issues_to_add_issuerwrxrorptidrr[rvars_str api_disabledhub_dir lock_filer lock_datarzq_countr github_token_active_memory_provider _mem_cfg_path_raw_cfgr}rRrhcfg_honcho_cfg_pathrr_e_load_mem0_configmem0_cfgmem0_keyr _providerrrr_rernamed_profiles wrapper_dirpartswrapper_mremaining_issuesiissuer r7rs  @@@r0 run_doctorr_s}4ue,Jud+JJJ.4  $..aQTT. . Y & %' ~]99VI./;8<>   HHQK  # %.zl;=>    %2:,?;<   HHQK FMK G %DFLFQFQ RS %SU[U`U` ab %DFLFQFQ RS "#+;  &'#H- ! ||))* }Bs'<'<&=Q? 2#6 DU4%?$@AB  $$00AB!!$ R0E0E/FG,,/LLOO+C  4 5  "#61E-##M28b gt $%gmmo6  e!%.8uE #a \$/MNPTPYPYZfPgh$$06yz  ? 7 8 !"!!JW7:++,Aj.>.>-?qAQAQ@RST w 7:++,Aj.>.>-?qAQAQ@RST]^ v WZ--.a 0@0@/A:CSCSBTUWlmj&&'q)9)9(:!J ? $12 3%%dT%B HHS]E2>$u56EFq => AB -KD6,-.z M //+"7"7"7"IJPbCGGG,2M)--j9?RFFHL#))+H*..y9]]=N=Nw=W][]ddfM#&5O #&&7&<&<&>"?Bb"b .m " +7*'CC'H$!WW[1N.$/A&&'*8*>*>*@' * T!%.599V,2399;#'' DJJL4H4Hc4R(RS  T"%_!5 3;hZ "*6&5!N!*../J>/Z[! ( *6$660'=h'G$*../?@ ( *6$665hP`a 6B6NB!?!E!E!G!M!M!O 0 ,&#&FF<%1<%00; ) =(&4%m_4`am`nnopS %m_4`am`no\\ $4?IT)IT)I &,,.#i.2F2F2HH  ,YK8''4o_FF '(?@ <*?@ A  #l+,-**=)>@  &F  +, ??; ' ' 7 )+< =,.   K ( (- 8 *,= >(<01 w'8 78   k *#''(;F _(;F81&E F (9 :  =46<"    , [- 0 {$5 6##G,+G45 "#KD6*+, $68D6,-q dV:&(HIJ' ] !K/     vQ{m84 5    dT  : xvQ{m15 6 1 K $q [9;[ \ ]i'I%%w%7==?#..0qqAGGIaggiFZFZ[oFpqq  vAB C $`a bdV-.0ab     " "4$ " ?  <! !  xv%AB C 1 K+LD6456"[0  9,    {,,g,>DDFGD )$w7 8 i j    y**G*<BBDED 'vW5 6 g hdV/02RS    td  ; xvZ0 1 1 K *,M^ J ??3}#56D\\"ABFOO%a(E JJL v/wjA B O-mC$!@)&**Z*@)AK=XYZ$q( "\ 7 34Jvzz-?X>YYZ[ K MMQj dVWXY^+H }}..H**)(y*A)B$G7""??3}+=>DLL!ABJJL:B//:Kx}}66QRH9(d:J9K6RZ^bRbQccefg1$KMM"^_,,\(y*A)BBbcd"&)&! ||w'( + J% 2U:XEJ  "&   **..2.bjjnn-=>?dCY]dCd g ME1M -  IIK(2U:M . !H,   ,d   ,\N:qr  01F1F|1T0UUVW X##%#++-%--/ i' 122LMN,--KLy {!D"!((*!,,Y7 ?3D2E\R[Q\!]^#q(  (:;L:MMr&st!!#-..JKL()):;D!''t'D((301B0C,??l"mn 5?L14!78+-OP01LY1W0XYZ99^W5L%B, 8 # B  #Lx x  #6(:4Y[\!f&7&71&<#56 ;RAVX^_ "47   X <( XY  %|4u9901 yy!45Hyy!45Hii 23G19z8*-xFJCh''bgg009:: FI& &C ##' !f&7&71&<-hZ89"4XJ ?GcdlcmEnpvw +1/  y ii 12  & 7 )5:    ' ]M 26)N:_L LL1  $ $ & .0F G#  1)< _&< =#   6%i[0CD \ \ ] n o . /34H !4  ! 46J K JL)  %&2-/02*,D8201 $ +*, !68JK"?M<<72&"3L>BB!B '"3L>BN!N ]^GH*+/uE D t   &(NO5!H P U#>#@ :=Q>*a8!~~fa0%>>*a8 4(2;q>]#B#G %9$:: #G9,PQG #G9,=>GA:we_.JK\TAX'j D6 J]^e]fg$ (j D6 KLL$ 'K=*#{1~'F #2 MM 'ugU.3qj?>OPR  'H:Z.6!m?ARSSTVIJ X|4568 D t    *5%;G;2;zC1CJS9LSSj1/1fO 3O d NN$&789 NNO%567&">"@)H@F= <I 9 )2i!FG H H NNM>23 NN.0BCD BuxG ~-PQSYS]S]^_ ` ;%0HIJ|+ HRHYHYH[#D!3!3!5DDab Q; '"9:>xH(0||H'='C&H&HUW&X # #)+_` H ,+ 7 \ \%88:D24 #**,<<4==E&'7&88`a 8:TU\\CDTCUUbcdlldmm8.E `_#%n%d+*$T%6%6$7vd>N>N=OvVZVjVjUkl !F * 5 M(*H||Ir2H23Xhll9c&B%C;x||\fhkOlNmno*KK " K ;,-DEIY335344DEF566STVqr566GHJde) WW%2_IALL!II  Z N+,,=> ?*,K# 2$$LL!2377LL"..668LL!56//1LL+%.~~'LL,-25) 2affXRx01 2"!!#*224 G"??, ")"3"3"5&'1!$,>!HB!.!*E *^GLL>XZX`X`abXcWddv+w x   G -kAo eJ -. eh{m:6 fkkRXZ[  %!C 0122XY[a[h[hjpjujuv w G  %&6: )51#Rw'( ) G G  eJ ./ ehs#3455JKV]]\b\g\ghi !"2A6 %HAu BqcE7# $ %  %WY_YcYcd e  G eJ -. e/v{{KL GS</T ;5aS9::;2 604556j l D+$rBUBWAXXYZ`Ya/bdj k l : t8 9 :H< )-&  ./3,.2+)-& .!*')$*0%! !!0'/$0b! M AQqc8 L L MJ%N"%C$!8?ST)&**Z*@)AK=XYZ$q( "R 7 34Jvzz-?X>YYZ[ K MMS dV#DQCHI_/ JR   H %$%,,,  X,,  :  +':   n  p P#/)#;>O#O  Pb  @ !H@ A A   JJNN6 =6@BJJ2 3V B6!A3aAAB E;(CD EH 5 5       N!n#$>BK_`b_cIdflmmn  )'Q    7 ,c"g 6 6 7"  *$L    5 *CG 4 4 5 K 12-@#b' J J KJ@%      sBx&4DBx+A Bx+*B?By$By5Bz$B{B1B|<&B{8B{"B|< B{8BB|<)AB|<?B|  B|<#B|CI'u%CJy<CJ&~ CJ6/F*CKL9CK<MCK/MCK$M2CK/M9CK*NCK/NCK<RDCL9W(ACM!\ *CN\4CM?] CN]CN ],&CN^,C COa6ACN,cA5CP(d7ACQ1fCR6f'CR!f:CR!f>FCR6mA8CR&o CR6x+ By x4ByyBy y By2yBy-y-By2y5(Bz!z Bz!z$Bz=z<Bz={ B{ { B{ { B{{B|<{B{{B|<{"B{5{1B|<{4B{5{5B|<{8 B||B|<|B||B|<| B||B|<|B||B|<| B|)|%B|<|(B|)|)B|<|, B|9|5B|<|8B|9|9B|<|< B} }B}}B} }# B~},B~~ B~~B~~B~~ B~&~%B~&~)B~3~. B~;~; BB BB B%$B%(B2-C@5 C@@C@@C@@C@@ C@@C@@ C@$@#C@$@' C@6@2C@9@5C@6@6C@9@9 CAACAA CA-ACA(A(CA-A0 CBA9CBBCBB CB$B#CB$B, CH$B6ACHC;A CEECHE CEECHECEECCHHCH$H' CH4H3CH4H7 CIICII CI$I#CI$I'CJJCJJCJ#J"CJ#J& CJ3J2CJ3J6CKKCKK CK!K CK!K$ CK/K/CK9K4CK<K<:CL6L9 CMMCMMCMM!CM<M;CM<M?CN NCNN CNNCNNCNNCNN CN)N(CN)N, CON5COOCOOCOOCOOCP%O<CP%PCP P CP%P(CQ.QCQ.Q CQ)Q)CQ.Q1 CRQ:CRRCRR!CR6R& CR3R/CR6R2CR3R3CR6R6 CSSCSS CS)rm)NN)r+N)I__doc__rgr5rr:pathlibrrrrrhermes_cli.env_loaderrrrr rrr _env_pathrhermes_cli.colorsr rhermes_cli.modelsrrutilsrrOr*r-rcr1r7r=rUrsrDrFrPrZrrjrnrervrrrrrrrr__annotations__rrrrrr[rrrrr rrrrzrrr.r/r0rs   MM403!   N y//\F=RS+02'85ISI%S%S%SS4ZcDI>c>d> $RTRdRcc2c2QUVZQ[2`efjknfoquvzq{f{`|2$CD0j3jjkSk#khSh#h5S5;C;D; #sd3iD=uS#s]3S899$eCHo5eE#s(OS01td{tE#s(O?T2  eCHo9N "#t  D[ %S/2#c(T/ tDz d4j t4 tCy T 8-$s)--`<")L$s))L)LX(,+YdYxL2Z r/