*jDž@!UdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZddlmZmZejZeejjZdefdZejddZeejd d Zejd d pdZejd d pdZ eduoe duZ!eZ"eejde#e"dz $Z%e%dz Z&e%dz Z'e&dz Z(e%dz Z)e%dz Z*e%dz Z+ej,e-Z.de#dedefdZ/defdZ0dede#fdZ1e0Z2e1e2Z3e28e#e2e j4vr#e j45e#e2dZ6ndZ6iZ7e j8Z9da:e;ee#dzed?d@dAdBdAdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdRdTdUdVdWdXdYdZd[d\d]d^d_d`dadadbdcdddedddfdgdh Z[gdiZ\djdkiZ]dlZ^ddmZ_e_Z`gdndodpdqdndrdsdqdtdudvdqdtdwdxdqdtdydzdqdtd{d|dqdtd}d~dqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqddddqZaiddddddtddnddddÓddœddǓddɓdd˓ddddddϓddddғddԓdd֓ddddddddddddߜ Zbiddȓddȓddȓddȓddēddēddēddēddddddddʓddʓdddddd̓ddΓiddΓddddddddddddddddddՓddՓddՓddՓddddddddddddZcde#de#fd Zddeede#fd Zfdd e?dzdeLe?fd Zgdd e?dzdehe#fd Zi ddeed e?dzde#fdZj dddddeed e?dzdeedeAde#f dZkdeede#fdZldeede#fdZmdeedehe#fdZnehZoehe#e<d<deede#fdZpdeede#fdZqdeede#dzfdZr ddeed e?dzde#fdZsidddvdd dxdd!dzdd"d|dd#d~dgdd$d%dd&d'dd(dpdd)dsdgdd$d%dd&d'dd)dsdd(dpdd*d+dd,d-dd.d/dd0d1dd2d3dg dАd4ddd5ddd6ddd7ddd8ddgd̐d9ddd:ddd;ddd<d=dgdd>d?dd@dAddBdCddDdEdgdȐdFdddGdddHdddIdddJdddKddgdʐdLdMddNdOddPdQddRdSddTdUdgd͐dVdddWdddXdYddZd[dd\d]dgdΐdVdddXdYdd\d]dd^d_dgdĐd$d%dd&d'dd)dsdd(dpdd`dadd dxdd!dzdd5ddgdƐdbdcddddeddfdgdddǐdgdgdhdidd)dsdd(dpddjdkdd*d+ddldmddndodd,d-ddpdqddrdsdd.d/dd0d1ddtduddvdwddxdyddzdvdd{dxdd|d}dd~ddddzdd"d|ddddd#d~ddddd4ddd5ddd6ddd7ddd8dddFdddGdddTdUdddYddddddddddddFdddGdddTdUddddd:ddd9dddddddddddddddddddYdddddddgdd4ddd5ddd6ddd7ddd8ddgdddddddgdddddddgddddddddddddgdddddddddddddddgdddgdddgddddddddddddddddddgdZteuddhZvde#de#de#deAfdZwde#de#fdZxde#de#fdZydZzdZ{dZ|de{dĜdeLe#de#dzdedeTeLe#eLe#ffdȄZ}deLe?de#de#dzdeLe?fd˄Z~deLe?ddfd̈́ZhdΣZde#deAfdτZde#deAfdЄZde#deAfd҄ZdӄZde#deTfdՄZde#deTe#dze#dzffdքZeudƐdhZdde#de#dzde#fdلZdd)e?dzde#fdڄZdZd܄Zde#de#fd݄Zde#de#deLe#fdބZ dde#dzde#dzde#dzdeLe#fd߄Zddddde#dzde#dzde#dzde?fdZdeAde?fdZde#de?fdZde#de?fdZdZeTe#dfe<d<de?fdZde#de#de#de?fdZdae?dze<d<dae;e<d<dae?dze<d<dZe;e<d<e jZe jeadaiae?e#eTe;dffe<d<iZe?e#e;fe<d<de#dzfdZdZe%dz ZdefdZd1ede?fdZde?fdZeuhdZdZd1ede?fdZde?fdZddZdeedeAfdZdeedeAfdZde?dzfdZde?ddfdZde;de?dzfdZdZde#fd Zde#fd Zde#d eLde#fd Zde#deLe#fd Zde#deLe#deLe?fdZdeLe#fdZde?fdZedz dz Ze j8ZdZe j8ZGddZdefdZiZe?e<d<e j8ZiZe?e<d<iZe?e<d<iZe?e<d<iZe?e<d<iZe?e<d<iZe?e<d<iZe?e<d<ehZehe<d<iZe?e<d <e j8Zdae;dze<d!<e j Z̐d"e#ddfd#Z͐d"e#ddfd$Zΐd"e#ddfd%ZddlZejZeje<d&<d'Ze j8ZӐd(e#ddfd)Ze jZ֐d*Zאd+ZiZe?e<d,<e j8Zڐd(e#de j8fd-Zid.e#td/dd0d1d2dd3dd4dd5dd6dd7dd8dd9dd:dd;ddd?d@dAd@idBddCddDddEdFdGdHdIdJdKdLdMdNdOgdPdQdRejdSdTdUddVddWddXddYddZdd[d\d]dd^Zhd_Zhd`ZhdaZߐdbdcdddbdedfZdeTe#e#ffdgZde?fdhZeheܠdidjhz Zd1dkhd[dlhhdmhdnhdodpZdqdrdsdtdudvdwZhdxZedydzZd{e?de?fd|ZeZ e)Zn #e$rdZYnwxYwerejd}seOed.aQedjded.e#tkrMe#ted.< e)ejedd~dn #e$rYnwxYwejZeje<d< ddlmZedS#e$rYdSwxYw(a Hermes Web UI -- Shared configuration, constants, and global state. Imported by all other api/* modules and by server.py. Discovery order for all paths: 1. Explicit environment variable 2. Filesystem heuristics (sibling checkout, parent dir, common install locations) 3. Hardened defaults relative to $HOME 4. Fail loudly with a human-readable fix-it message if required modules are missing N)Path)parse_qsurlparsereturnctjdkr;tjdd}|rt |dz St dz S)zReturn the platform-aware default Hermes home when HERMES_HOME is unset. Native Windows Hermes Agent installs default to %LOCALAPPDATA%\hermes, while POSIX installs use ~/.hermes. nt LOCALAPPDATAhermesz.hermes)osnamegetenvstriprHOME)local_app_datas -/Users/bertmahoney/hermes-webui/api/config.py_platform_default_hermes_homer"sR  w$>266<<>>  3''(2 2 ) HERMES_WEBUI_HOST 127.0.0.1HERMES_WEBUI_PORT8787HERMES_WEBUI_TLS_CERTr HERMES_WEBUI_TLS_KEYHERMES_WEBUI_STATE_DIRwebuisessionszworkspaces.jsonz _index.jsonz settings.jsonzlast_workspace.txtz projects.jsonr default_mbctj|d}|s|dzdzStjd|tj}|s%t d||||dzdzSt| d}|dkr%t d||||dzdzS|dzdzS)zParse an optional megabyte environment variable into bytes. Accepts values like ``200``, ``200MB``, or ``200MiB``. Invalid or non-positive values fall back to the provided default. r iz^(\d+)\s*(?:m|mb|mib)?$zGInvalid %s=%r; expected a positive integer in MB. Falling back to %sMB.rzHInvalid %s=%r; expected a value greater than zero. Falling back to %sMB.) r rrrematch IGNORECASEloggerwarningintgroup)r rrawmvalue_mbs r _env_mb_bytesr+Js )D"   # # % %C (D 4'' +S"-@@A ( U       D 4''1771::H1}} V       D 4'' d?T !!rc ~g}tjdrX|ttjdtjdt t}|t|dz |tj dz tj dz r|tj |tdz |tdz ttjdt tdz dz }||dz dD]'}|t|dz (|D]C}| r-|dz r|cSDd S) a Locate the hermes-agent checkout using a multi-strategy search. Priority: 1. HERMES_WEBUI_AGENT_DIR env var -- explicit override always wins 2. HERMES_HOME / hermes-agent -- e.g. ~/.hermes/hermes-agent 3. Sibling of this repo -- ../hermes-agent 4. Parent of this repo -- ../../hermes-agent (nested layout) 5. Common install paths -- ~/.hermes/hermes-agent (again as fallback) 6. HOME / hermes-agent -- ~/hermes-agent (simple flat layout) HERMES_WEBUI_AGENT_DIR HERMES_HOMEz hermes-agentz run_agent.py XDG_DATA_HOMEz.localshare)z/optz /usr/localz/usr/local/shareN) r rappendr expanduserresolvestr_DEFAULT_HERMES_HOME REPO_ROOTparentexistsr) candidates hermes_homexdg_data sys_prefixpaths r_discover_agent_dirr>isJ y)**  344 5 5 @ @ B B J J L L   )M3/C+D+DEEKd;''2244~EFFFi&7888 >)1133,)*+++*^;<<<d^+,,,BIos4(?W3L/M/MNNOOHh))++n<===A== $z**^;<<<<"" ;;== "d^3;;== "<<>> ! ! ! 4r agent_dircxtjdrtjdS|r|dz dz dz }|rt|S|dz dz dz }|rt|S|dz dz dz }|rt|S|dz dz dz }|rt|Stdz dz dz }|rt|Sdd l}d D]}||}|r|cSd S) z Locate a Python executable that has the Hermes agent dependencies installed. Priority: 1. HERMES_WEBUI_PYTHON env var 2. Agent venv at /venv/bin/python 3. Local .venv inside this repo 4. System python3 HERMES_WEBUI_PYTHONvenvbinpythonz.venvScriptsz python.exerN)python3rDrF)r rr8r4r6shutilwhich)r?venv_py venv_py_win local_venvrGr founds r_discover_pythonrMs y&''0y.///$f$u,x7 >>   w<< g%-8 >>   w<<  &(94|C      ${## #')I5 D      ${## #W$u,x7J:MMM% T""  LLL  9rTF _cfg_mtime _cfg_path_cfg_fingerprintdatac| tj|ddtS#t$rt |cYSwxYw)azReturn a stable fingerprint for config dictionaries. A few tests and legacy call sites still mutate ``cfg`` directly for in-memory overrides. Path-aware reloads should not immediately discard those overrides just because the active profile path differs from the last disk load, but an unchanged disk-loaded cache must still reload on profile switches. T,:) sort_keys separatorsdefault)jsondumpsr4 Exceptionrepr)rRs r_fingerprint_configr^sMz$$:sSSSS Dzzs ;;cttttkrdS ttuS#t$rYdSwxYw)uFTrue when cfg was changed after the last successful reload_config(). Detects two override shapes: 1. ``_cfg_cache`` was mutated in place (fingerprint differs). 2. ``cfg`` (the module attribute) was rebound to a different dict — e.g. ``monkeypatch.setattr(config, "cfg", {...})`` in tests. The alias-with-the-cache pattern at module load means this is a common test-isolation override, and silently reloading from disk over it (the v0.51.7 path-aware reload regression) breaks any test that relies on the override. NTF)rQr^ _cfg_cachecfg NameErrorrr_cfg_has_in_memory_overridesrdsU#(;J(G(GK[([([t*$$ uus 6 AActjd}|r!t|S ddlm}|dz S#t $r tdz cYSwxYw)z/Return config.yaml path for the active profile.HERMES_CONFIG_PATHrget_active_hermes_homez config.yaml)r rrr2 api.profilesrh ImportErrorr5) env_overriderhs r_get_config_pathrls9122L/L!!,,...4777777%%''-77 444#m33334sA A#"A#deferredeagercJt} |j}n#t$rd}YnwxYw|tkp t |k}t r|rtst tt urtSn#t$rYnwxYwt S)z;Return the cached config dict, loading from disk if needed.rN) rlstatst_mtimeOSErrorrOrPr`rd reload_configrarb) config_path current_mtime cache_stales r get_configrw$s"$$K#((**3  :-Ik1IK +.J.L.L  j J !      s* 998B BB config_datact|tr|nt}t|tr|dini}t|tstS|dt}t|t r1|}|tvr|StS)aReturn the validated first-turn session persistence mode. ``deferred`` preserves the current first-turn sidecar behaviour: persist pending_user_message/runtime fields before streaming, then merge the turn after the agent finishes. ``eager`` additionally checkpoints the current user turn into ``messages`` before launching the agent thread. Unknown values fail closed to ``deferred`` so a typo never reintroduces eager disk writes unexpectedly. rsession_save_mode) isinstancedictraget _DEFAULT_WEBUI_SESSION_SAVE_MODEr4rlower_WEBUI_SESSION_SAVE_MODES)rx active_cfg webui_cfgmode normalizeds rget_webui_session_save_moder;s!+; = =F3J/9*d/K/KS w+++QSI i & &0// ==,.N O OD$ZZ\\'')) 2 2 2  ++rct5tt}t}|ada ddl}|r|| d}t|trTt | t|jan#t $rdaYnwxYwn+#t"$rt$d|YnwxYwt)ta|dkrt-ddddS#1swxYwYdS)z7Reload config.yaml from the active profile's directory.rNrNutf-8encodingz"Failed to load yaml config from %s) _cfg_lockr`clearrlrOrPyamlr8 safe_load read_textr{r|updaterrprqrrr\r$debugr^rQ_delete_models_cache_on_disk)rt_old_cfg_mtime_yamlloadeds rrsrsQs ++&(( $   L !!## ))>)>)>)P)PQQfd++)%%f---)%)+%6%6%;%;%=%=%F ")))%( ) L L L LL={ K K K K K L.z:: S ( * * *9++++++++++++++++++sY3EA0C'-&CC' C# C'"C##C'&E'%D ED+EE E rtc> ddl}n#t$ricYSwxYw|siS ||d}t |t r|niS#t$r t d|icYSwxYw)Nrrrz#Failed to parse yaml config from %s) rrjr8rrr{r|r\r$r)rtrrs r_load_yaml_config_filerss        !6!6!6!H!HII#FD119vvr9  :KHHH s AA22'BBc ddl}n"#t$r}td|d}~wwxYw|jdd|||ddddS) Nrz.PyYAML is required to write Hermes config.yamlTparentsexist_okF)rW allow_unicoderr)rrj RuntimeErrorr7mkdir write_text safe_dump)rtrxrexcs r_save_yaml_config_filersV VVVKLLRUUVTD999  uDIIs &!&r(cgdttzdzddffd }||tjdr|tjdtdz }tdz }|r |||r |||||t dz S)z8Return ordered candidate workspace paths, de-duplicated. candidateNrc|dvrdS t|}n#t$rYdSwxYw|vr|dSdS)N)Nr )rr2r3r\r1)rr=r9s raddz"_workspace_candidates..adds  " " F  ??--//7799DD    FF  z ! !   d # # # # # " !s3= A  A HERMES_WEBUI_DEFAULT_WORKSPACE workspacework)r4rr rrr8 STATE_DIR)r(rhome_workspace home_workr9s @r_workspace_candidatesrsJ$sTzD($T$$$$$$CHHH y1229 BI6 7 7888K'Nv I N ICC K   rr=c: |}|dd|o8t j|tjtjztjzS#t$rYdSwxYw)zDBest-effort check that a workspace directory exists and is writable.TrF) r2r3ris_dirr accessR_OKW_OKX_OKr\)r=s r_ensure_workspace_dirrs  ((** 4$ ///{{}}M4271BRW1L!M!MM uusB B BBcjt|D]}t|r|cStd)zBReturn the first usable workspace path, creating it when possible.zqCould not create or access any usable workspace directory. Set HERMES_WEBUI_DEFAULT_WORKSPACE to a writable path.)rrr)r(rs rresolve_default_workspacersR*3//  + +       A  rctS)z Resolve the default workspace in order: 1. HERMES_WEBUI_DEFAULT_WORKSPACE env var 2. ~/workspace if it already exists 3. ~/work if it already exists 4. ~/workspace (create if needed) 5. STATE_DIR / workspace )rrcrr_discover_default_workspacers % & &&rHERMES_WEBUI_DEFAULT_MODELcd}d}d}ddddtdtrtnd d tr|n|d td td tdt dt dtd trdnddg }td |dtst|dddSdS)zNPrint detected configuration at startup so the user can verify what was found.z [ok]z [!!]z [XX]r z! Hermes Web UI -- startup configz" --------------------------------z repo root : z agent dir : z NOT FOUNDz z python : z state dir : z workspace : z host:port : rVz config file : z(found)z(not found, using defaults) T)flusha\ Could not find the Hermes agent directory. The server will start but agent features will not work. To fix, set one of: export HERMES_WEBUI_AGENT_DIR=/path/to/hermes-agent export HERMES_HOME=/path/to/.hermes Or clone hermes-agent as a sibling of this repo: git clone ../hermes-agent N) r6 _AGENT_DIR PYTHON_EXErDEFAULT_WORKSPACEHOSTPORTrlr8printjoin _HERMES_FOUND)okwarnerrliness rprint_startup_configrs1 B D C +,&9&&cD::ccjHa^acc':''&9&&.,..(4(($((~+--~~>N>P>P>W>W>Y>Y1|_|~~  E $))E  $''''     F F F    rcdg}g}i}|D]Z} t|#t$r;}||t|jd|||<Yd}~Sd}~wwxYwt |dk||fS)zw Attempt to import the key Hermes modules. Returns (ok: bool, missing: list[str], errors: dict[str, str]). run_agentz: Nr) __import__r\r1type__name__len)requiredmissingerrorsmodes rverify_hermes_importsrs }HG F55 5 sOOOO 5 5 5 NN3   "!WW-4444F3KKKKKK  5 LLA  //s A"1AA"i@ HERMES_WEBUI_MAX_UPLOAD_MB>.bmp.gif.ico.jpg.png.svg.jpeg.webp>.md.mdown .markdown>.c.h.go.js.py.rs.sh.ts.cpp.css.csv.jsx.log.sql.tsx.txt.xml.yml.bash.java.toml.yaml.env.html.jsonrz image/pngrz image/jpegrrz image/gifrz image/svg+xmlrz image/webprz image/x-iconrz image/bmpz.pdfzapplication/pdfrapplication/jsonrz text/htmlz.htmz.xlszapplication/vnd.ms-excelz.xlsxzAapplication/vnd.openxmlformats-officedocument.spreadsheetml.sheetz.doczapplication/mswordz.docxzGapplication/vnd.openxmlformats-officedocument.wordprocessingml.documentz.mp3z audio/mpegz audio/wavz audio/mp4z audio/aacz audio/oggz audio/opusz audio/flacz video/mp4zvideo/quicktimez video/webmz video/ogg) z.wavz.m4az.aacz.oggz.ogaz.opusz.flacz.mp4z.movz.m4vz.webmz.ogv)browserclarifycode_executioncronjob delegationfile image_genmemorysession_searchskillsterminaltodowebwebhookr )z hermes-clizhermes-api-servercg}t}|pgD]S}t||f}|D]2}|r.||vr*||||3T|S)zGExpand legacy CLI toolset aliases while preserving order and de-duping.)set_LEGACY_CLI_TOOLSET_ALIASESr}rr1)toolsetsrseenr replacements replacements r_normalize_cli_toolsetsrpsJ 55DB//266tdWEE ' / /K /{$66%%%!!+... / rc|t} ddlm}t||dS#t$r?t|didt cYSwxYw)zResolve CLI toolsets using the agent's _get_platform_tools() so that MCP server toolsets are automatically included, matching CLI behaviour.Nr)_get_platform_toolscliplatform_toolsets)rwhermes_cli.tools_configrrr\r}_DEFAULT_TOOLSETS)rars r_resolve_cli_toolsetsr}s {llg??????&':':3'F'FGGG ggg&sww/BB'G'G'K'KESd'e'efffffgs1AA:9A:OpenAIzopenai/gpt-5.4-miniz GPT-5.4 Mini)provideridlabelzopenai/gpt-5.4zGPT-5.4 Anthropiczanthropic/claude-opus-4.7zClaude Opus 4.7zanthropic/claude-opus-4.6zClaude Opus 4.6zanthropic/claude-sonnet-4.6zClaude Sonnet 4.6zanthropic/claude-sonnet-4-5zClaude Sonnet 4.5zanthropic/claude-haiku-4-5zClaude Haiku 4.5Googlezgoogle/gemini-3.1-pro-previewzGemini 3.1 Pro Previewzgoogle/gemini-3-flash-previewzGemini 3 Flash Previewz$google/gemini-3.1-flash-lite-previewzGemini 3.1 Flash Lite Previewzgoogle/gemini-2.5-prozGemini 2.5 Prozgoogle/gemini-2.5-flashzGemini 2.5 FlashDeepSeekzdeepseek/deepseek-v4-flashzDeepSeek V4 Flashzdeepseek/deepseek-v4-prozDeepSeek V4 Prozdeepseek/deepseek-chat-v3-0324zDeepSeek V3 (legacy)zdeepseek/deepseek-r1zDeepSeek R1 (legacy)Qwenzqwen/qwen3-coderz Qwen3 Coderzqwen/qwen3.6-plusz Qwen3.6 PlusxAIzx-ai/grok-4.20z Grok 4.20Mistralzmistralai/mistral-large-latestz Mistral LargeMiniMaxzminimax/MiniMax-M2.7z MiniMax M2.7zminimax/MiniMax-M2.7-highspeedzMiniMax M2.7 HighspeedzZ.AIz zai/glm-5.1zGLM-5.1z zai/glm-5zGLM-5zzai/glm-5-turboz GLM-5 Turboz zai/glm-4.7zGLM-4.7z zai/glm-4.5zGLM-4.5zzai/glm-4.5-flashz GLM-4.5 Flash OpenRouterzopenrouter/elephant-alphazElephant Alpha (free)zopenrouter/owl-alphazOwl Alpha (free)ztencent/hy3-preview:freezHy3 Preview (free)z&nvidia/nemotron-3-super-120b-a12b:freezNemotron 3 Super (free)z#arcee-ai/trinity-large-preview:freezTrinity Large Preview (free)nousz Nous Portal openrouter anthropicopenai openai-codexz OpenAI Codex xai-oauthzxAI Grok OAuthcopilotzGitHub Copilot cursor-acpz Cursor ACPzaiz Z.AI / GLM kimi-codingzKimi / Moonshotdeepseekminimax minimax-cnzMiniMax (China)googlez meta-llamaz Meta Llama huggingface HuggingFacealibabaAlibabaOllamaz Ollama Cloudz OpenCode Zenz OpenCode Goz LM Studioz NVIDIA NIMXiaomiz AWS Bedrock) ollama ollama-cloud opencode-zen opencode-golmstudio mistralaiqwenx-ainvidiaxiaomibedrockglmz-aizz.aizhipugithubgithub-copilotz github-modelsz github-modelgeminiz google-geminizgoogle-ai-studiokimimoonshotclaudez claude-codez deep-seekz minimax-china minimax_cnopencoder;grokxair@zx.aiawsrCz aws-bedrockamazonzamazon-bedrockr?aliyun dashscopez alibaba-cloudnimrAz nvidia-nimz build-nvidianemotronrBcustom)mimoz xiaomi-mimolocalc|s|St|} ddlm}||vr||Sn#t $rYnwxYwt||S)a"Return the canonical provider slug for *name*. Applies the WebUI's local alias table first, then merges any additional aliases the agent provides (when hermes_cli is on sys.path). Lookup is case-insensitive and whitespace-trimmed. Unknown names pass through unchanged. r)_PROVIDER_ALIASES)r4rrhermes_cli.modelsr[r\r})r r(_agent_aliasess r_resolve_provider_aliasr^s  d))//   ! ! # #C IIIIII . !#& & !       d + ++sA AAc2t|pd}|sdS|dr|St jdd|d}t jdd|}|sdSd|zS)Nr custom:z [^a-z0-9._-]+-z-{2,})r4rr startswithr!sub)r r(slugs r_custom_provider_slug_from_namere0s djb//   ! ! ' ' ) )C r ~~i    6"C - - 3 3C 8 8D 6(C & &D r t r config_objct|tr|nt}|dg}t|tsgSd|DS)Ncustom_providersc<g|]}t|t|Src)r{r|.0entrys r z,_custom_provider_entries..Es' B B Be*UD*A*A BE B B Br)r{r|rar}list)rfsourceentriess r_custom_provider_entriesrq@sY%j$77 @ZZSFjj+R00G gt $ $ B Bw B B BBrcHddt|DDS)Nch|]}||Srcrc)rkrds r z/_named_custom_provider_slugs..Is0           rc3ZK|]&}t|dV'dS)r N)rer}rjs r z/_named_custom_provider_slugs..KsJ   ,EIIf,=,= > >      r)rq)rfs r_named_custom_provider_slugsrwHsD    1*==      rrct|pd}|sdS|d}t |D]}t|dpd}t |}|r|s^|||hvs||dkr|cSdS)Nr r`r )r4rr removeprefixrqr}re)rrfr( raw_suffixrl entry_namerds r(_named_custom_provider_slug_for_providerr|Ss hn"   # # % % + + - -C r!!),,J)*556**0b117799??AA .z::    :t$ $ $ d6G6G 6R6R(R(RKKK)S 2rbase_url resolve_aliasr~rct||}|r|S|sbt|pd}|r|dkrt ||}|r|St|pdSt |}|rMt|pddkrt ||}|r|S|S)aNormalize a configured provider id. When ``resolve_alias`` is True (default, used for active-provider / badge surfaces), falls through to ``_resolve_provider_alias`` after the named-custom check. When False (used by ``resolve_model_provider``), preserves the raw provider value so downstream local-server detection (`_LOCAL_SERVER_PROVIDERS` membership in #1625) sees the original name like ``ollama`` / ``lm-studio`` rather than alias-collapsed ``custom`` / ``lmstudio``. The base-url-to-named-slug fallback still runs in both modes when applicable. See in-stage absorption note on stage-313 for the #1625 regression that motivated the ``resolve_alias`` flag. r rW)r|r4rr(_named_custom_provider_slug_for_base_urlr^)rrfr~r named_slugr( by_base_urlresolveds r_resolve_configured_provider_idres*:(JOOJ #(.b!!''))//11  #xB8ZXXK #""8>r"""&x00H B   % % ' ' - - / /8 ; ;>xTT    OrcL|sdSt|dd}|sdS|tvs |t vr|St |}|r/|tvr|S|S)uCNormalise a provider id slug into a stable lowercase-hyphenated form. Folds underscores to hyphens and lowercases the result, so a user with ``providers.opencode_go.api_key`` in ``config.yaml`` and ``model.provider: opencode-go`` sees ONE provider group, not two (#1568). Then attempts alias resolution but only if the alias target is itself a known canonical id in ``_PROVIDER_DISPLAY`` — this avoids converting ``x-ai`` (canonical in WebUI's data structures) to ``xai`` (the hermes_cli alias target which the WebUI doesn't index by). Examples:: opencode-go -> opencode-go (canonical, no change) opencode_go -> opencode-go (underscore folded) OpenCode-Go -> opencode-go (case folded) OPENCODE_GO -> opencode-go (both folded) z_ai -> zai (alias-resolved — zai is canonical) x-ai -> x-ai (preserved — x-ai is canonical) Empty input passes through as the empty string. Unknown ids preserve their normalised form. r _ra)r4rrreplace_PROVIDER_DISPLAY_PROVIDER_MODELSr^)r r(rs r_canonicalise_provider_idrs. r d))//   ! ! # # + +C 5 5C r 3*:#:#: 's++H HNN$$(999~~ Jrvaluect|pdd}|sdStd|vr|nd|}|jpd}|jp|jd}|jd}|jsd}|d||S)Nr /://http://http)r4rrstriprschemernetlocr=)rurl parsed_urlrrr=s r_normalize_base_url_for_matchrs ekr   " " ) )# . .C r###?S??CCJ)6 0 0 2 2F2:? 9 9 ; ; B B3 G GF ? ! !# & &D   ' ' ' ' ''rct|pdd}|stSt d|vr|nd|}|jpd}|stS|j}|%|jpd}|dkrdnd }d |d |d |d |hS) aReturn custom provider slugs that WebUI may derive from a base URL. Model picker values for endpoint-discovered models have historically used both ``custom::`` and ``custom:-`` forms. When the active config already names a local-server provider such as Ollama for that same base URL, those endpoint slugs are just UI routing hints and should resolve back to the configured provider rather than requiring a CUSTOM_* API key. r rrrNrhttpsiPr`rVra) r4rrr rhostnamerportr)rrrhostrrs r#_custom_endpoint_slugs_for_base_urlrs ekr   " " ) )# . .C uu ###?S??CCJ   %2 , , . . 4 4 6 6D uu ?D |#-v4466''ssR #d # #T # #%zmistral-large-latestzmistral-small-latestz Mistral Smallz qwen3-coderz!nvidia/nemotron-3-super-120b-a12bzNemotron 3 Super 120Bznvidia/nemotron-3-nano-30b-a3bzNemotron 3 Nano 30Bz(nvidia/llama-3.3-nemotron-super-49b-v1.5zLlama 3.3 Nemotron Super 49Bz qwen/qwen3-next-80b-a3b-instructzQwen3 Next 80Bz mimo-v2-flashz MiMo V2 Flashz grok-4.20z global.anthropic.claude-opus-4-7z Global Anthropic Claude Opus 4.7z#global.anthropic.claude-opus-4-6-v1z Global Anthropic Claude Opus 4.6z"global.anthropic.claude-sonnet-4-6z"Global Anthropic Claude Sonnet 4.6z.global.anthropic.claude-opus-4-5-20251101-v1:0z GLOBAL Anthropic Claude Opus 4.5z0global.anthropic.claude-sonnet-4-5-20250929-v1:0zGlobal Claude Sonnet 4.5z/global.anthropic.claude-haiku-4-5-20251001-v1:0z!Global Anthropic Claude Haiku 4.5)rArBr@r*rCgh_cli gh auth tokenror key_sourcec|tvpS|dkp)|dkS)zTrue when a credential-pool entry is a seeded gh-cli token rather than one the user added explicitly. Filter these so Copilot doesn't appear in the dropdown just because `gh` is installed on the system. r)rr_AMBIENT_GH_CLI_MARKERS)rorrs r_is_ambient_gh_cli_entryrsl  "99 9 ;;==   O 3 9      # # % % 8rmidc|d\}}}dtdtfd}||}|r|d||dz }|S)uTurn an Ollama model id (Ollama tag format) into a readable display label. Examples: 'kimi-k2.5' → 'Kimi K2.5', 'qwen3-vl:235b-instruct' → 'Qwen3 VL (235B Instruct)' rVsrc|dddd}g}|D]}|dd}|r;t|dkr(||g|rD|rB|dr(||||r%|d|ddzn|d|S) Nra r.r rr ) rsplitisalpharr1risalnumisdigitr)rtokensoutt alpha_onlys r_fmtz"_format_ollama_label.._fmts.3$$,,S#66<<>> = =A3++J!!## =A!  17799%%%%##%% =* =A9N9N9P9P = 17799%%%% 1;1Q4::</[:]`` (e.g. ``anthropic/claude-opus-4.7``); drop the vendor namespace, prettify the model name with the same token rules as :func:`_format_ollama_label` (short acronyms uppercase, size suffixes uppercase, capitalize the rest), then append ``" (via Nous)"`` so the entry is visually distinct from same-named models in other provider groups (e.g. direct Anthropic). Examples (matches the helper's actual output — labels are produced by :func:`_format_ollama_label`'s token rules, so 3-letter tokens like ``GPT`` and ``PRO`` render uppercase):: anthropic/claude-opus-4.7 -> Claude Opus 4.7 (via Nous) openai/gpt-5.4-mini -> GPT 5.4 Mini (via Nous) google/gemini-3.1-pro-preview -> Gemini 3.1 PRO Preview (via Nous) moonshotai/kimi-k2.6 -> Kimi K2.6 (via Nous) qwen/qwen3.5-plus-02-15 -> Qwen3.5 Plus 02 15 (via Nous) nvidia/nemotron-3-super-120b-a12b -> Nemotron 3 Super 120B A12b (via Nous) minimax/minimax-m2.5:free -> MiniMax M2.5 (Free) (via Nous) rr r0r#Nz (via Nous))rrrbrr)rrbases r_format_nous_labelrs,*- #q!!"%%I##I..; #i..// ::  * *D   r)r'r(r2 moonshotairEr0r?r@r/stepfunrBtencentrAzarcee-ai)selected_model_idrlive_idsrrcD|sggfSt|tkrt|gfSgtdtddffd }|r=|}|dr|tdd}||vr ||t dgD]S}|dd}|dr|tdd}||vr ||Ti}|D]R}|vrd |vr|d d d nd} | | g |Stttfd |D} | z} t|krqd } | D]R} t|krn<|| } | s/|| d | d z } S| d krnt|kqfd |D}|fS)u Trim a Nous Portal catalog into a (featured, extras) split. ``featured`` is what the picker dropdown renders. ``extras`` is everything else — kept available so the slash-command `/model` autocomplete and the ``_dynamicModelLabels`` map cover the full catalog. Selection rules (in order, deterministic): 1. Always include the user's currently-selected model if it's in the catalog (preserves selection stickiness — no orphan IDs in the dropdown after a refresh). 2. Always include every entry from the curated static ``_PROVIDER_MODELS["nous"]`` list whose id maps onto a live id — those four are explicitly maintained as flagship picks. 3. Top up to ``target`` by walking ``_NOUS_VENDOR_PRIORITY`` round-robin (one model per vendor each pass) so no vendor monopolises the slot budget. Within a vendor, the original ``live_ids`` order is preserved — that's the order Nous Portal returned, which approximates recency. Returns ``(featured_ids, extras_ids)`` — both lists are subsets of ``live_ids`` with disjoint membership and union equal to ``live_ids``. For catalogs ≤ ``_NOUS_FEATURED_THRESHOLD`` entries the function is a no-op: ``featured == live_ids``, ``extras == []``. rrNcp|r0|vr.||dSdSdSN)r1r)rchosen chosen_sets r_addz&_build_nous_featured_set.._addisO  3j(( MM#    NN3       ((r@nous:r%rr rr rc3>K|]}|tv|VdSr)r )rkvprioritys rrvz+_build_nous_featured_set..s3EEAas8}}.D.Da.D.D.D.DEErcg|]}|v| Srcrc)rkr)rs rrmz,_build_nous_featured_set..s# 9 9 9AQj%8%8a%8%8%8r)r_NOUS_FEATURED_THRESHOLDrnr r4rbrr}r setdefaultr1_NOUS_VENDOR_PRIORITYsortedpop)rrrrselstaticsid by_vendorrvendorleftover vendor_orderadded_this_passbucketextrasrrrs @@@r_build_nous_featured_setrBs> 2v  8}}000H~~r!!F55J # $        >>( # # &c(mmnn%C (?? DIII#&&vr22jjr"" >>( # # &c(mmnn%C (?? DIII')I55 *   ),3""1%%VR((//4444)**HEEEEEEEEEHh&L f++  " ! !F6{{f$$]]6**F  DA    q OO a    f++  : 9 9 9 9 9 9F 6>r raw_modelsactive_providerc6|pd}|r||krt|Sg}|D]f}|d}|dsd|vr|||ddB|d|d||ddg|S)zReturn *raw_models* with @provider: prefixes applied when needed. Prefixing is skipped when (a) the provider is already the active one, or (b) a model id already starts with '@' or contains '/' (already routable). r r@rrrrV)rrnrbr1)rrr_activeresultr)rs r_apply_provider_prefixrs$"++--G  kW,,J F PPg >>#   P#** MMqz:: ; ; ; ; MM!8[!8!83!8!81W:NN O O O O MrgroupscRsdStttfd}i}|D]}|}t|dgD]\}}t |ddpd}|r|drT||g ||f| D]\}} t| dkr| d dD]\}}|}|d|}|d d} d| d ||d<|d | } |d |kr|d d| d|d <}|d| d|d <dS)ubEnsure every model ID across groups is globally unique. When multiple providers expose the same model ID (either bare names like ``gpt-5.4`` or slash-qualified IDs like ``google/gemma-4-27b``), the dropdown cannot distinguish them. This post-process detects such collisions and prefixes colliding entries with ``@provider_id:`` so the frontend can treat them as distinct options. The first occurrence (in provider-id order) is left unchanged for backward compatibility with sessions that already store the original bare/slash model name. If that provider is later removed from the config, the next cache rebuild re-runs dedup — the remaining provider becomes the sole occurrence and is left unchanged, so the session still matches. .. note:: The "first occurrence wins" rule means the unchanged ID is not stable across config changes (adding, removing, or reordering providers). This is acceptable because the dedup runs on every cache rebuild, so sessions always resolve to the current canonical unchanged ID. The ``@provider_id:model`` format is consistent with the existing ``_apply_provider_prefix()`` function and is handled by ``resolve_model_provider()`` (rsplits on the last ``:`` to handle provider_ids that themselves contain ``:``). Operates in-place on *groups*. Nc<|ddS)Nrr r})irs rz(_deduplicate_model_ids..sfQimmM266rkeymodelsrr rr rrVrrrr) rranger enumerater}r4rrbrr1items) rsorted_group_indicesid_mapgir'mimodelr original_id locationspid provider_names ` r_deduplicate_model_idsrs8  " c&kk 6 6 6 602F"88r "599Xr#:#:;; 8 8IBeiib))/R006688C #..--    c2 & & - -r2h 7 7 7 7  8#),,.. D D Y y>>A   m D DFB2JE(OB'E))M2..C1c11K11E$K!IIj#66Myy!![00$)'N!F!Fm!F!F!Fg$/!C!C=!C!C!Cg D D Dr> llama-cppvllmtabbyr9localaitextgenllamacppr=tabbyapi koboldcpp lm-studioct|pd}|tvrdS|dr|dtvSdS)zTrue when provider_id names a local model server. Named custom providers resolve to ``custom:``. Treat those as local when the bare slug is one of the known local-server provider names too. r Tr`F)r4rr_LOCAL_SERVER_PROVIDERSrbry)rrs r_is_local_server_providerr!su ;$"%%++--3355H***t9%%K$$Y//3JJJ 5rc|sdS ddlm}ddl}||jpd}|sdS|dvrdS ||}n#t $rYdSwxYw|jp |jp|j S#t$rYdSwxYw)uTTrue if base_url's host is a loopback or private IP (likely local server). Reuses ipaddress.is_loopback / is_private / is_link_local — the same heuristic used in the `api/config.py` SSRF/credential-routing code. Errors (DNS failure, malformed URL) return False so callers fall back to the static-provider-name check. Fr)rNr ) localhostz ip6-localhostz ip6-loopbackT) urllib.parser ipaddressrr ip_address ValueError is_loopback is_private is_link_localr\)r~rr%raddrs r _base_url_points_at_local_serverr,+s u))))))""+1r88:: 5 A A A4 ''--DD   55   H4?Hd6HH uus90A;A;AA; A#A;"A##A;; B B restct|pd}d|vrdS|dd\}}|rd|vrdS|sdS t |}n#t $rYdSwxYwd|cxkrdksndS ddl}||dS#t $rYnwxYw|}|d krdSd |vrdSdS) uRTrue when ``custom:`` is an endpoint-style slug ``host:port``. WebUI sometimes derives ``custom:10.8.71.41:8080`` from ``base_url`` authority. The #1776 peel must not treat that middle colon as part of an eaten model segment — otherwise ``@custom:10.8.71.41:8080:Qwen3`` wrongly becomes model ``8080:Qwen3``. r rVFr irNTr#r) r4rrsplitrr&r'r%r&r)r-rport_sport_nr%hls r&_custom_slug_rest_looks_like_host_portr3JsB tzr?? " "D $u;;sA&&LD& 3$;;u >>  uV uu  5 u T"""t      B [t d{{t 5s$"A22 B?BB00 B=<B=ctdi|ipi}|dpdd}|r|Stdipi}t |t rt |dpd}|t |kr@|dpdd}|r|SdS)u0Look up the configured base_url for a provider (e.g. lmstudio). Checks two locations, in order: 1. ``cfg["providers"][]["base_url"]`` — the explicit per-provider override. 2. ``cfg["model"]["base_url"]`` — falls back here when ``cfg["model"]["provider"] == provider_id``. This is the historical shape (the model block carries both the active provider AND the base URL for that provider in a single record). Returns the URL stripped of trailing ``/`` if configured, otherwise None. providersr~r rrrN)rar}rrr{r|r4r)rprov_cfgexplicit model_cfgmodel_provider model_bases r_get_provider_base_urlr;ps7ww{B''++K<<BH Z((.B5577>>sCCH$$*I)T"""Y]]:66<"==CCEEKKMM S--3355;;== = =#-- 339r@@BBII#NNJ "!! 4rmodel_idc d}d}tdi}t|tr@|d}t |dt|d}t|t r,|dkrd}|pd }|s|||fS|duo|dko|d  }t|tr|d nd}t}|@|tvr7tt|trd t|D}|o |dur||kp||v}td g}t|tr9|s6|D]2} t| ts| dpd } | dpd } | dpd } t} | r| | | d}t|tr1| d|D| r|| vrt| }||| pdfcS4|dr=d|vr8|dd}|dd\}}|d r`|ddkrG|t%d d}t'|s |dd\}}|d|}n@|tvr7|t(vr.|d s|dd\}}|d r9|r7t-|r(|t/|vr|||fS||t1|fSd|vr|dd\}}|dkr|d|fShd}||vr|||fS|r ||kr|||fS|dkrNt |pd ddkr|tvr ||kr|ddfS|r|r||krtd g}t|tr|D]}t|trm|dd |krAt|}|dpd }|||pdfcS|r6t-|st5|r|||fS|tvr|||fS|||fS|tvr ||kr|ddfS|||fS)a'Resolve model name, provider, and base_url for AIAgent. Model IDs from the dropdown can be in several formats: - 'claude-sonnet-4.6' (bare name, uses config default provider) - 'anthropic/claude-sonnet-4.6' (OpenRouter-style provider/model) - '@minimax:MiniMax-M2.7' (explicit provider hint from dropdown) The @provider:model format is used for models from non-default provider groups in the dropdown, so we can route them through the correct provider via resolve_runtime_provider(requested=provider) instead of the default. Custom OpenAI-compatible endpoints are special: their model IDs often look like provider/model (for example ``google/gemma-4-26b-a4b``), which would be mistaken for an OpenRouter model if we only looked at the slash. To avoid that, first check whether the selected model matches an entry in config.yaml -> custom_providers and route it through that named custom provider. Returns (model, provider, base_url) where provider and base_url may be None. Nrr~rFr}rYrWr r`rYch|]U}t|tt|dt?|ddVS)rr )r{r|r}r4rkr)s rrtz)resolve_model_provider..s`   !!T"" '1!%%++s'C'C EE$OO   rrhr rc3K|]A}t|t|+|VBdSrr{r4r)rkrs rrvz)resolve_model_provider..s`''!#s++'14 'IIKK''''''rrrVr rrr&>r%rAr<r;r)z%https://chatgpt.com/backend-api/codex)rar}r{r|rr4rrrbr rrnrrkeysrer/countrr3rrr!rr;rr,)r<config_providerconfig_base_urlr8 _is_explicit_non_custom_provider_default_model_provider_models_set_skip_custom_providersrhrl entry_modelr{rentry_model_ids entry_models provider_hintinner bare_model _slug_restextraprefixbare_PORTAL_PROVIDERS _custom_cfg_entry_slug_bases rresolve_model_providerrYs*OO$$I)T"" #-- 339 MM* % % $    /3''#O,A,A,C,C,I,I,K,Kw,V,V"B%%''H :/99 t# 6 x ' 6**955 5% 2>677***/))\4/ /  >o >&O*C*C''"4b99K+t,, >)>>F!&$//>FJJvr4J4J4P4P4R4RV\4\4\ ? G G!'J!7!7!=2 D D F F' ====  >*/:: B7HH B/AA )))_o==_o= = % % %&O*C*C\4/ / _o 55rc t|pd}|dsdSdtdtfd}||ddd}|sdSt }ddtd zfd }|d g}t|tsg}|D]}t|tst|d pd}|sQ||} | |krct|d pdpd } ||d|d|} | | fcSt|dkrt|dtrs|d}||d|d|t|d pdpd fS|di} t| tr| |ini} t| tr| dini}|di}t|trHt|dpdnd}d }| ||fD]S}t|tr._slugifyws     " " $ $ * * , , 4 4S# > > F FsC P Paii $$$Aaiiwws||rrVr Ncd}|t|}|drZ|drEt |dkr2t j|dddpd}n|r|}|sNt|pd}|r)t j|dpd}|s|rt|}|S)Nz${}rrrr )r4rrbendswithrr rr) raw_api_key raw_key_envrMrkey_textkey_envs r _resolve_keyz8resolve_custom_provider_connection.._resolve_keys  ";''--//H""4(( #X->->s-C-C #H XYHYHY)HQrTNB77==??G4 #" A++,,2244G A)GR006688@D @= @0??Grrhr r~rrcrr5rWrrr) r4rrrbrrwr}r{rnr|r)rrr\rdcfg_datardrhrlr entry_slugr~r providers_cfgprovider_specificprovider_customr8r9 fallback_baserrX fallback_keys r"resolve_custom_provider_connectionrlls kR & & ( ( . . 0 0C >>) $ $z 8CIIc1%%a(..00 1 1D z||HcDj  ||$6;; & - -! ! !%&&  599V$$*++1133  Xd^^    uyy,,23399;;Ct,uyy33UYYy5I5I3OO     !!j1A!1Dd&K&K! # L9--uyy/C/CS I I  *%%+ , , 2 2 4 4 <  LLb11M6@PT6U6U] ))#r222[]9CMSW9X9X`m''"555^`O Wb))IMWXacgMhMhpSz228b99??AAGGIIInpNM')D i & &  j117R88>>@@E  % L#T**m#|$5$9$9)$D$DFWF[F[\eFfFfhkll iJ==i#|O$7$7 $B$BODWDWXaDbDbdghh ]Jy$77]NxY\^bNcV>VX[\\ 3}3]2d22 :r copilot-acpr9cRt|pd}t|pd}|r|r|dks|dr|Stdi}d}t |trHt|dpd}|tvrd|d|S||kr|S|dkrd|d|Sd |vr|Sd|d|S) aReturn the model string to pass to ``resolve_model_provider()``. Session persistence keeps the user's selected provider in ``model_provider`` instead of forcing every selected model into ``@provider:model`` form. At runtime, however, ``resolve_model_provider()`` still understands that internal disambiguation form, so use it only when the provider context is needed to route away from the current default provider. r rYrrNrrVr&r) r4rrrbrar}r{r|_ACP_SUBPROCESS_PROVIDERS)r<r9rrr8rDs rmodel_with_provider_contextrps\ B   % % ' 'E>'R((..006688H H $9$9U=M=Mc=R=R$9 $$IO)T""OimmJ77=2>>DDFFLLNN,,,%8%%e%%%?"" <%8%%e%%% e|| !x ! !% ! !!rc||nt}t}|di}t|tr|}nOt|t r:t |dpd}|r|}tjdp'tjdptjd}|r|}|S)zKResolve the effective Hermes default model from config, then env overrides.NrrYr HERMES_MODEL OPENAI_MODEL LLM_MODEL) ra DEFAULT_MODELr}r{r4rr|r r)rxr default_modelr8 cfg_default env_models rget_effective_default_modelrys + 7SJ!Mw++I)S!!(!)) It $ $()-- 228b99??AA  ('M .!!XRY~%>%>X")KBXBX*!)) r)minimallowmediumhighxhighc|r!t|sdSt|}|dkrddiS|tvrd|dSdS)a"Parse an effort level into the dict the agent expects. Returns None when *effort* is empty or unrecognised (caller interprets as "use default"), ``{"enabled": False}`` for ``"none"``, and ``{"enabled": True, "effort": }`` for any of ``VALID_REASONING_EFFORTS``. NnoneenabledFT)reffort)r4rrVALID_REASONING_EFFORTS)reffs rparse_reasoning_effortrs V**,,t f++     # # % %C f}}5!! %%%3/// 4rct|pd}|dr d|vr|dddS|S)zFRemove WebUI routing hints before provider-specific capability lookup.r rrVr )r4rrbr)r<rs r"_strip_provider_hint_for_reasoningr+s[ B   % % ' 'E &{{3""1%% Lrct|tt|pd}r|dvrgSddd}|dkrB|dr-|drgd SttS|d vrB|dr-|drgd SttSd }tfd |DrttSgS) z(Fallback when hermes_cli is unavailable.r r,rmrr rr))ro1o3o4)rrr)r{r|r}r+rH z deepseek/z anthropic/zopenai/zx-ai/zgoogle/gemini-2zgoogle/gemma-4z qwen/qwen3ztencent/hy3-previewzxiaomi/c3BK|]}|VdSrrb)rkrRrs rrvz/_heuristic_reasoning_efforts..Ns1 ; ;5  F # # ; ; ; ; ; ;r) rrr^r4rr/rbrnrany)r<rrrSprefixesrs @r_heuristic_reasoning_effortsr3s^ .x 8 8 > > @ @E&s;+<"'='='C'C'E'E'K'K'M'MNNH H === <<Q   #D>!!doo6Q&R&R! ??- . . -,,, ,+,,,000 ??6 7 7 1122 10000/00 0 H ; ; ; ;( ; ; ;;;-+,,, Irc(t|pd}|sgS|r5t|pdnd}t|pdpd}|s t|\}}}nr#t$rett dpidpd}YnwxYwt|}|dvrgS ddlm }m }n #t$rt||cYSwxYwt|} |dvr || S|d kr'| d d d } || S|d kr|pt|} ||| } d| D} | r#t| dhrgSd| D}|r't#t$|St| ddhrgSgS|d}t)fd|Drt#t*SgS)zGReturn supported reasoning-effort levels for *model_id*, or [] if none.r Nrrrr)github_model_reasoning_efforts lmstudio_model_reasoning_optionsrr)rr rr=cg|]V}t|#t|WSrc)r4rrrkopts rrmz3resolve_model_reasoning_efforts..|sISSS3#c((..BRBRSc#hhnn&&,,..SSSroffc$g|] }|tv |Src)rrs rrmz3resolve_model_reasoning_efforts..s#RRRc3:Q3Q3Qc3Q3Q3Qronrc3BK|]}|VdSrr)rkrR model_lowers rrvz2resolve_model_reasoning_efforts..s1 A Af; ! !& ) ) A A A A A Ar)r4rrrYr\rar}r^r\rrrrr/r;r issubsetrnr|fromkeysrr)r<rr~rrresolved_base_urlrrr hinted_modelrS probe_baseoptsr level_optsrrs @rresolve_model_reasoning_effortsrSs B   % % ' 'E  9DLs;$"%%++--33555"HHN++1133;t [ [-CE-J-J *Ax** [ [ [CGGG,,277 CCIrJJPPRRXXZZHHH ['x00H000 =          ===+E8<<<<<=6e<!!""3**2.--d333:&J*@*J*J //zBBSS$SSS  S__55ug>> IRRZRRR  3 j1122 2 z?? # #UDM 2 2 I ++--K H A A A A A A AAA-+,,, Is% BA,D  D &D//E  E )r<rr~c>tt}|dpi}|dpi}t|tr|dnd}t|tr|dnd}t |||}t|t rt |ndt|pd |t |d S) u2Return current reasoning configuration from the active profile's config.yaml — the same source of truth the CLI reads from. Keys: - show_reasoning: bool — from ``display.show_reasoning`` (default True) - reasoning_effort: str — from ``agent.reasoning_effort`` ('' = default) displayagentshow_reasoningNreasoning_effort)rr~Tr )rrsupported_effortssupports_reasoning_effort) rrlr}r{r|rboolr4rr) r<rr~rx display_cfg agent_cfgshow_raw effort_rawrs rget_reasoning_statusrs))9););<{D4Q4Q[{/000W[H6@D6Q6Q[1222W[J7-7x,F,FP$x...D 0b117799??AA.%)*;%<%<   rshowcXt}t5t|}|d}t |t si}t ||d<||d<t||dddn #1swxYwYttS)aPersist ``display.show_reasoning`` to the active profile's config.yaml. Mirrors CLI ``/reasoning show|hide``: writes the same key that the CLI writes, so the preference is shared across the WebUI and the terminal REPL for the same profile. rrN) rlrrr}r{r|rrrsr)rrtrxrs rset_reasoning_displayrs#$$K 99,[99 !ooi00 +t,, K(,T $%!, I{K888999999999999999OOO  ! !!sA#BB  B rcDt|pd}|std|dkr7|tvr.td|ddtdt }t5t|}| d}t|tsi}||d <||d<t||d d d n #1swxYwYttS) a+Persist ``agent.reasoning_effort`` to the active profile's config.yaml. Mirrors CLI ``/reasoning ``: same key, same valid values (``none`` | ``minimal`` | ``low`` | ``medium`` | ``high`` | ``xhigh``). Raises ``ValueError`` on an unrecognised level so callers can return 400. r zeffort is requiredrzUnknown reasoning effort 'z'. Valid: none, z, rrrN)r4rrr'rrrlrrr}r{r|rrsr)rr(rtrxrs rset_reasoning_effortrsy fl   ! ! # # ) ) + +C /-... f}}$;;; B B B II&=>> B B B   #$$K 99,[99 OOG,, )T** I(+ $%( G{K888999999999999999OOO  ! !!sAC;;C?C?ct|pd}|stdt}t5t |}|di}t|tsi}t|dpd}t|\}}}t|p|} t|p|pd} | dkrd} | |d<| r| |d<|r8t| d|d <n=| |kr7| d krd |d <n+| d s| d d ||d<t||d d d n #1swxYwYtt!d| dS)zJPersist the Hermes default model in config.yaml and reload runtime config.r zmodel is requiredrrrYrWrYrr~r(zhttps://api.openai.com/v1r`NT)rr)r4rr'rlrrr}r{r|rYrrrbrrrsinvalidate_models_cache) r<selected_modelrtrxr8previous_providerresolved_modelresolved_providerrpersisted_modelpersisted_providers rset_hermes_default_modelrsgR((..00N .,---"$$K *9*9,[99 OOGR00 )T** I j 9 9 ?R@@FFHH?U @ @ <)+<n>??EEGG !2!M6G!M2NNTTVV  # # % % 0 0!) . )  7$6Ij !  0$'(9$:$:$@$@$B$B$I$I#$N$NIj ! ! #4 4 4!X--(C *%%'229== 0 j$///( G{K888U*9*9*9*9*9*9*9*9*9*9*9*9*9*9*9XOOO  1 11s FGGG) vision web_extract compressionr skills_hubapprovalmcptitle_generationcurator.AUX_TASK_SLOTSc ttdi}t|tsi}t |dpd}t |dp|dpd}tdi}t|tsi}g}tD]}||i}t|tsi}||t |dpdt |dpdt |dpdd |||d d S) a)Return current auxiliary task assignments from config.yaml. Shape: { "tasks": [ {"task": "vision", "provider": "auto", "model": "", "base_url": ""}, ... ], "main": {"provider": "openrouter", "model": "anthropic/claude-opus-4.7"}, } rrr rYr auxiliaryautor~)taskrrr~)rr)tasksmain) rsrar}r{r|r4rrr1)r8 main_provider main_modelaux_cfgrslotrls rget_auxiliary_modelsr8 sOOO$$I i & &  j117R88>>@@MY]]9--Lv1F1FL"MMSSUUJggk2&&G gt $ $ E    D"%%%&& E EIIj11;V<<BBDD7++1r2288::EIIj117R88>>@@       *Z@@  rrrc|dkr0|tvr'td|dttt}t5t |}|dkry|di}t|tsi}tD]>}||i}t|tsi}d|d<d|d<|||<?||d<n|di}t|tsi}||i}t|tsi}|pd|d<|pd|d<|ry| d s|d kr^ t|\}}} | r7t|  d |d <n#t$rYnwxYw|||<||d<t||d d d n #1swxYwYt!d|||dS)zzPersist an auxiliary model assignment in config.yaml. Special case: task='__reset__' clears all auxiliary slots. __reset__zUnknown auxiliary task slot: z . Valid: rrrr rr`rWrr~NT)rrrr)rr'rnrlrrr}r{r|rbrYr4rrr\rrs) rrrrtrxrrslot_cfgrrs rset_auxiliary_modelra s  {t>99 SD S ST.=Q=Q S S   #$$K $9$9,[99 ;  "ook266Ggt,, & ) )";;tR00!(D11"!H'-$$&! ( '.K $ $!ook266Ggt,, {{4,,Hh-- #+#5vHZ % HW  X00;; x8?S?S.DU.K.K+Aq+(Z/23D/E/E/K/K/M/M/T/TUX/Y/Y, D$GDM'.K ${K888I$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9LOOO(U K KKs8 DG$!A F.-G$. F;8G$:F;;G$$G(+G(_available_models_cache_available_models_cache_ts*_available_models_cache_source_fingerprint@_AVAILABLE_MODELS_CACHE_TTLCredentialPool_CREDENTIAL_POOL_CACHE_provider_models_invalidated_tsc ddl}|jd}|dSt|dd}|rt |ndS#t $rYdSwxYw)uLazy resolver for the WebUI version, used to stamp the disk cache (#1633). `api.updates` imports `api.config` at module-load time, so we cannot `from api.updates import WEBUI_VERSION` at the top of this module without a circular import. Instead we resolve lazily on each cache load/save. Returns the runtime version string (e.g. ``v0.50.293``) when api.updates has been imported, or None if it isn't loaded yet (boot-time corner case before the server has finished initializing). A None return is treated as "do not stamp / do not validate" by the cache layer so cache reads/writes that happen during early init still work — the next call after init will stamp normally. rNz api.updates WEBUI_VERSION)sysmodulesr}getattrr4r\)_sysrrs r_current_webui_versionr sz l}-- ;4 C$ / /$s1vvv$ tts A#A AArmodels_cache.jsonc^ ddlm}|dz S#t$r tdz cYSwxYw)z8Return the auth.json path for the active Hermes profile.rrgz auth.json)rirhrjr5)_gahs r_get_auth_store_pathr sV2??????tvv ## 222#k11112s ,,cdtt|i} t|}n#t$r d|d<|cYSwxYw|j|d<|j|d<|S)a0Return non-secret identity metadata for a cache dependency file. The /api/models response depends on config.yaml (model/provider defaults) and auth.json (active_provider + credential_pool). The cache only needs cheap invalidation signals here, not file contents; never include secrets. r=Trmtime_nssize)r4rr2rprr st_mtime_nsst_size)r= fingerprintsts r_models_cache_file_fingerprintr s3tDzz4466778K $ZZ__   !% I!nK *K s!AA('A(cttd} tj|dddtd}t j|}n#t$rd}YnwxYwttj dd p td z }|t!|d z d S) aReturn non-secret model-catalog identity metadata for cache invalidation. The /api/models payload is not only a function of user config/auth files. It also depends on the provider/model catalog baked into this module and on small local catalogs such as Codex's models_cache.json. Keep this cheap and deterministic so a server restart after catalog changes does not keep serving an otherwise-valid persisted models_cache.json until the 24h TTL expires (#2443). )provider_modelsprovider_displayTrTrWrX ensure_asciirYr unavailable CODEX_HOMEr .codexr)provider_catalog_sha256codex_models_cache)rrrZr[r4encodehashlibsha256 hexdigestr\rr rrrr2r)catalog_payloadencodedprovider_catalog_sha codex_homes r!_models_cache_catalog_fingerprintr s,-O -* !    &//  '~g66@@BB ---,-bi b117799NdXoOOZZ\\J#7secretrid_token expires_at expires_in updated_at last_status access_token client_secret expires_at_ms refresh_token request_countlast_status_atlast_error_codelast_error_reasonlast_error_messagelast_error_reset_atct|trd|DSt|tr d|DS|S)aRecursively drop credential-rotation-only keys from an auth.json tree. Pure structural transform; never mutates the input. Any key NOT in the deny-list is preserved verbatim so real provider/endpoint changes still show through in the fingerprint. cFi|]\}}|tv|t|Src)_AUTH_FINGERPRINT_VOLATILE_KEYS_strip_volatile_auth_fieldsrkkrs r z/_strip_volatile_auth_fields..H s=   1777 *1--777rc,g|]}t|Src)r)rkrs rrmz/_strip_volatile_auth_fields..N s!<<<1+A..<<rrvrconfigured_model_badgesrNrvr3r)r{r|rr}r4rn)r1rs r_is_valid_models_cacher4 s eT " "u T T T ] ]^c d duii 122O D DJ$D$D 2 uyy113 7 7 2 uyy!:;;T B B 2 uyy**D 1 1 rc&t|sdSt|tsdS|d}|tkr#t d|tdSt}|N|d}t|tr||krt d||dS|d}t}||krt d||dSd S) uReturn True when an on-disk cache is safe to use after a process boot. Adds two checks on top of _is_valid_models_cache (#1633): 1. ``_schema_version`` matches `_MODELS_CACHE_SCHEMA_VERSION`. A bumped schema version unconditionally invalidates older cache files. 2. ``_webui_version`` matches the current runtime version. Forces a rebuild after every release so users see picker-shape fixes immediately, instead of waiting up to 24 hours for the TTL to expire. If the runtime version cannot be resolved (early-init edge case), skip this check rather than wedge the boot. Note: ``_webui_version`` is a string equality check, not a semver compare — two debug builds with the same `WEBUI_VERSION` string but different actual code wouldn't invalidate via this axis. ``_schema_version`` is the independent invalidation axis for breaking changes that lack a tag bump; bump it whenever the cache shape changes incompatibly. F_schema_versionz.models cache rejected: schema=%r vs runtime=%rN_webui_versionz5models cache rejected: webui_version=%r vs runtime=%r_source_fingerprintz:models cache rejected: source_fingerprint=%r vs runtime=%rT) r4r{r|r}_MODELS_CACHE_SCHEMA_VERSIONr$rrr4r-)r1 cached_schemaruntime_versioncached_versioncached_sourcesruntime_sourcess r_is_loadable_disk_cacher? s-$ "% ( (u eT " "uII/00M444  < 7   u,..O"#344.#.. .O2S2S LLG   5YY455N688O(( H     u 4rcJ ddl}tsdSttd5}||}dddn #1swxYwYt |sdS|d|d|d|dd S#t $rYdSwxYw) aLoad /api/models cache from disk if it exists and has current metadata. Adds the per-release version check from #1633: a cache stamped with a different WebUI version is treated as missing, forcing a fresh rebuild that picks up any picker-shape fixes shipped in the new release. The returned dict is the SHAPE-only cache (without the `_webui_version` / `_schema_version` stamps) so callers don't have to know about the on-disk metadata fields. rNrrrrvr3r)rrvr3r)rZr0r8openloadr?r\)_jfr1s r_load_models_cache_from_diskrE s !((** 4 $w 7 7 7 1GGAJJE               &u-- 4 %%67"?3',-F'GHo    tts?BBA BAB A!B5B B"!B"c t|sdStt|d|d|d|dd}t}|||d<t t dt jd z}t|d d 5}tj ||d dddn #1swxYwYt j |t t dS#t$rYdSwxYw)u3Save cache to disk so it survives server restarts. Stamps the payload with `_webui_version` and `_schema_version` (#1633) so a subsequent process running a different WebUI version, or a future release that bumps the schema, will treat the file as invalid and rebuild from live provider data on its first /api/models call. The version stamp is omitted (not the literal None — the field is just skipped) when the runtime version cannot be resolved at the moment of save, which would happen only in a very early boot path before api.updates is loaded. _is_loadable_disk_cache treats a missing field as a mismatch (since runtime_version is non-None on every subsequent call), so this is safe — at worst we write one cache file that gets rejected once on the next boot. Nrrvr3r)r6r8rrvr3rr7rz.tmpwrrr)indent) r4r9r-rr4r0r getpidrArZdumprenamer\)r1payloadr;tmprDs r_save_models_cache_to_diskrN sY  %e,,  F;#C#E#E$%67"?3',-F'GHo   122  &(7G$ %$%%(=BIKK(=(=(== #sW - - - , Igq + + + + , , , , , , , , , , , , , , , #s-../////      s;C0BC0B<0 C0<CC0C*C00 C>=C>nowc,tdS|tz tkrdSt}t|kr)t dt|dadadadSttrtj tSdadadadS)zHReturn a valid fresh in-memory /api/models cache, or clear stale shapes.NzAmodels memory cache rejected: source_fingerprint=%r vs runtime=%rrN) rrrr-rr$rr4copydeepcopy)rOcurrent_sourcess r_get_fresh_memory_models_cacherT, s&t ((-HHHt688O1_DD O 6    #'%("592t5666}4555"!$15. 4rct5dadadadat tdddn #1swxYwYtdS)aForce the TTL cache for get_available_models() to be cleared. Call this after modifying config.cfg in-memory (e.g. in tests) so the next call to get_available_models() picks up the changes rather than returning a stale cached result. Also deletes the on-disk cache so that a subsequent cold build does not immediately reload a stale disk snapshot and skip the fresh build. This is essential for test isolation: without the disk delete, tests that call invalidate_models_cache() still get back the previous test's result from the disk cache because the disk hit is checked before the memory cache rebuild runs. NrNF) _available_models_cache_lockrrr_cache_build_in_progress_cache_build_cv notify_allrrrrcrrrrF s & ' '"&%("592#( ""$$$ $$&&& ' ' ' ' ' ' ' ' ' ' ' ' ' ' '!"""""s;AAAcxt5t|dtt|ddddn #1swxYwY ddlm}|||t|dS#t $r tddYdSwxYw)zInvalidate the credential pool cache for a specific provider. Used by the streaming layer's credential self-heal logic (#1401) to force a fresh credential pool load after re-reading auth.json. Nr)%invalidate_account_usage_status_cachez/Failed to invalidate account usage status cacheTexc_info) rVrrr^ api.providersr[r\r$r)rr[s r invalidate_credential_pool_cacher_e s1 &OO"";555""#:;#G#GNNNOOOOOOOOOOOOOOOW HGGGGG--k:::--.Ek.R.RSSSSS WWW FQU VVVVVVWs$AAAA$)B&B98B9c(t5dadadat jt |<t |dt t|ddddn #1swxYwYtdS)aInvalidate cached models for a single provider. Also invalidates the full cache so that the next get_available_models() call rebuilds all groups cleanly (the rebuilt provider is merged with any other cached groups from the 24h TTL window). After the next get_available_models() call, _provider_models_invalidated_ts[provider_id] is cleared so the provider's fresh models are used. Args: provider_id: canonical provider id (e.g. 'openai', 'anthropic', 'custom:my-key') NrN) rVrrrtimerrrr^r)rs r invalidate_provider_models_cacherbz s & O O"&%("5927;y{{' 4 "";555""#:;#G#GNNN O O O O O O O O O O O O O O O!"""""sA%A99A=A=existing_groupsc 8|}|dr d|vr|ddd}d}||}|D]l}|dgD]S}|dr<|t|dd|kr |dccSTmd |vr|d d n|}d d |d ddDS)aReturn a human-friendly label for *model_id*. Resolution order: 1. If the model already appears in *existing_groups* with a label, use it. 2. Strip @provider: prefix and namespace prefix, then title-case. This ensures the injected default model entry in the dropdown always shows the same label as the live-fetched or static-catalog version, rather than the raw lowercase ID string (#909). rrVr cd|vr|dddn|ddS)Nrr rrar)rrr)rs rrz&_get_label_for_model.. s@cQhhqwwsAr**AFFsCPPVVXXrrrrr rrrc3K|]{}t|dkrP|ddr(|s|n|V|dS)rrr N)rrrrr capitalize)rkrGs rrvz'_get_label_for_model.. s !ffkkaiiR&8&8&@&@&B&Bk199;;k ]^]i]i]k]krrra)rbrr}r4rr)r<rc lookup_id_norm norm_lookupgr)rSs r_get_label_for_modelrl sRIC  /SI%5%5OOC++A.  Y XE% ""K ""x$$ " "AuuW~~ "%%AEE$OO(<(<"="="L"Lz!!!!! " (+i'7'79??3   # #YD 88c3''--c22  rcdt|pd}|sgS ddlm}n#t$rgcYSwxYw|g} t |}n#t$rd}YnwxYw|r||vr||t}|D]} ||pg}n+#t$rt d|Y8wxYwg}|D]U} t| pd} | r.| |vr*| | || V|r|cSgS)aReturn live model IDs from Hermes CLI for a provider, or [] on failure. WebUI's static ``_PROVIDER_MODELS`` table is only a fallback. The agent CLI owns the provider registry and catalog-discovery logic, so ordinary picker groups should ask ``hermes_cli.models.provider_model_ids()`` first (#1240). Provider aliases are tried as a secondary lookup because WebUI keeps a few display-facing IDs (for example ``google`` / ``x-ai``) that Hermes CLI may normalize internally. r rprovider_model_idsz(Failed to load %s models from hermes_cli) r4rr\ror\r^r1r r$rr) rr_provider_model_idsr9aliasrrrrrmid_ss r_read_live_provider_model_idsrs s kR & & ( (C  OOOOOOO  J',,  !j((%   UUD    **955;HH    LLCY O O O H  % %C rNN((**E %d** e$$$  MMM  Is00 ??A A%$A% B$$%C  C c2|dvrtnd}g}t}|D]v}t|pd}|r||vr,|||r ||nt |g}|||dw|S)z=Convert Hermes CLI model ids into WebUI picker model entries.r9r:Nr r)rr r4rrrlr1)rr formatterrrrrrrs r_models_from_live_provider_idsrw s(37Q(Q(Q$$W[IFUUD55CI2$$&&   $-R %   3Gr3R3R UU334444 Mrc\ttjddp tdz }|dz } t j|d}n#t$rgcYSwxYwt|tr| dnd}t|tsgSg}|D]}t|ts| d }t|tr|sX| d d}t|tr)|d vr| d }t|t t"frt!|nd } || |f|dg} |D]\} }|| vr| || S)azReturn visible model slugs from Codex's local models_cache.json. The agent's provider_model_ids('openai-codex') intentionally filters IDs with ``supported_in_api: false``. Codex CLI still lists some of those models in its picker (notably ``gpt-5.3-codex-spark`` from #1680), so the WebUI merges this visible local catalog to stay in sync with Codex itself. rr rrrrrNrd visibility)hidehiddenri'c"|d|dfS)Nrr rc)items rrz5_read_visible_codex_cache_model_ids.. sDGT!W#5rr)rr rrrr2rZr$rr\r{r|r}rnr4rr&floatr1sort) r cache_pathrLrpsortabler}rdryrrankorderedrs r#_read_visible_codex_cache_model_idsr s#bi b117799NdXoOOZZ\\J11J*Z1171CCDD  (2'4'@'@Jgkk(###dG gt $ $ &(H . .$%%  xx$$$ DJJLL  XXlB// j# & & :+;+;+=+=+C+C+E+EI[+[+[ 88J'' *8c5\ B BNs8}}}tzz||,---- MM55M666G!!4 w   NN4 Ns(B BBc t}|j}n #t$rt}d}YnwxYw|tks |t krt stdtfd}t} ttj}n#t$rd}YnwxYw|tk}d}tt}t5|rMtddt!t#j}||cdddS|rtda dadad}t#j}t!|}||cdddS|A|a |at+at-|t/j|cdddSt5da dddn #1swxYwY |}nI#t2$r<t5d a tdddn #1swxYwYwxYwt5|a t#jat+ad a tdddn #1swxYwYt-|t/j|cdddS#1swxYwYdS) a Return available models grouped by provider. Discovery order: 1. Read config.yaml 'model' section for active provider info 2. Check for known API keys in env or ~/.hermes/.env 3. Fetch models from custom endpoint if base_url is configured 4. Fall back to hardcoded model list (OpenRouter-style) Returns: { 'active_provider': str|None, 'default_model': str, 'groups': [{'provider': str, 'models': [{'id': str, 'label': str}]}] } rNrcJdttgdtdtfddtttttffffd }d}tdid}t trnZt trEddd}d d}|r|rt t| i}t}|r d dl }| | d }s*t |dt| n+#t$rtd|YnwxYwt}r| t |tr|dini}t |tr)|r& d dlm}t'|D]^} t+t| } t,| } | | \} } t/j| z dkr| }nt/j}|| } t/j| ft,| <| }nOt/j}|| } t/j| ft,| <| }d|D}|r|| 4#t$rtd| Y\wxYwn#t4$r|D]x\} }t |t&rt9|d kr.t;d|D}|r/|t+t| yYnwxYwn*#t$rtdYnwxYwi}d} d dlm}d dl m!}|D]}|ds ||ddd}|dkrEn?#t$r2td|ddYnwxYw||dd } |d!d"r|d!n*#t$rtd#YnwxYwn*#t$rtd$YnwxYw|s` d d%l"m#}|d&z }n#t4$r tHd&z }YnwxYwi}|r | d %D]}|&}|r|'d'sld(|vrh|(d(d)\}}|&&d*&d+||&<n*#t$rtd,YnwxYwi|}d-D]}tSj*|}|r|||<|d.r|d/|d0r*|d1|d2|d3r|d4|d5r|d6|d7r|d8|d9r|d:|d;r|d<|d=r|d>|d?r|d@|dAr|dB|dCr|dD|dEr|dF|dGr|dH|dIr|dJ|dKr|dL|dMr*|dNr|dO|dPr*|dQr|dRtdSi} i}!t | tr| D]n\}"}#tW|"}$|$s|$tXvp|$tZv}%t |#t}&|%s|&sC|!.|$|"||$od t^dtffdT }'d tdtfdUdVt^dtdt&tfdWddXdtdYtdZt`dzdtfd[dd\d]d t^dtd^t^d_tbt^d`fdtbt&ttdzff fda}(g})i}*|r|&}+|'|+},|,pdb}-te|,}.tgdc|+vr|+ndd|+}/|/j4p|/j56}0|/j7rc|.sa d dl8}1|19|/j7}2|2j:s|2j;s|2j<rde|0vsdf|0vsdg|0vrde}-n dR|0vsdh|0vrdR}-ndb}-n#tz$rYnwxYwd}3t tr)d^pd&}3|3stdSi}4t |4trmt}ddbgD]Z}5|4|5i}6t |6tr-|6d^pd&}3|3rn[|3sHdi}7|7D]C}8||8ptSj*|8pd&}3|3rnD|g}9tdjg}:t |:t&r|9?dk|:D|(|+|-|3tc|9]\};}<|;D]i}=|)@|=|-6}5|*.|5g@|=||5jtdjg}>i}?i}@t |>t&r3t}A|>D]!}Bt |Bts|Bdlpd&}C|Crt|Cnd}D|Dr |D|?vr|Cgf|?|D<t|Bd pd&}E|Dr|Ert|Bd^pd&}F|Fsmt|Bdmpd&}G|Gr5ttSj*|Gpd&}F|Bdn}Ht |Htt&fot9|Hd k}I|*|D}Jd}K|Ir|Jg}Jn|J|(|E|D|F|Ef]\}J}K|Kr|K|@|D<||D|JD]}Lt|Ldpd&}M|Ms;|Ddo|M}N|N|AvrG|A|N||D|M}O|Dkr|O'dpsdp|Ddo|O}O|?|Dd)@|O|Ldqpt|Mgdrg}P|Bdd}Q|Qr|P@|Q|Bdn}Rt |RtrZ|RD]V}St |Str?|S&r+|S|Pvr'|P@|S&Wnt |Rt&r|RD]}Tt |Ttr0|T&}U|Ur|U|Pvr|P@|UGt |Ttr{t|Tdp+|Tdp|Tdlpd&}U|Ur|U|Pvr|P@|U|PD]}Q|Dr|Ddo|Qn|Q}N|Qr|N|Avrt|Qg}V|A|N|Dr_||D|Q}O|Dkr|O'dpsdp|Ddo|O}O|?|Dd)@|O|Vdr|)@|Q|Vdr|dbǐ#t |>t&ot9|>d k}Wr\dbkrV|WsT|Cdbt'|D].}D|D'dsr|Ws|C|D/n8dbkr2|Wr0t;dt|>D}X|Xs|Cdbtt}Yt|t}Z|Zrw|Yrut'|D]e} t| pd&6}[|['dsr|[|Yvr|C| ftdSi}4t |4tr|4dudnd}\|\rt}]r|]tdSi}^t |^tr1|]Fdv|^D|G|]}|r;t}_|D](} tW| p| }`|_|`)|_}| rKt|D ]9}a|a'dsrX|a|?vrS|?|a\}b}c|cs|*|ag}c|cs|a|@vr*|b|a|cdw}d|a|@vr |@|a|ddx<@|dptZ|a|aI}e|ad4kr)g}ft}g d dylmJ}h|hpg}i|iD]8\}j}k|jr1|j|gvr-|g|j|f@|j|jdr9n*#t$rtKdzYnwxYw d dlLmM}l|lNd{d|d}i~}m|lO|md5}ntj |nPQ}odddn #1swxYwYd }pd}q|odVgpgD]}Tt |Ttst|Tdpd&}U|Ur|U|gvrV|Tdpi}r t|rddpdd ko(t|rddpdd k}sn#ttzf$rd}sYnwxYw|sp|UTd}s|sst|Tdlpd&p|U}td|tvr|t(ddn|t}ud|u6vr|ud}u|g|U|f@|U|udr|pd)z }p|p|qkrnn*#t$rtdYnwxYw|fsdtD}f@dd4|fdw|adkryg}f d dlmV}vd|vdpgD}fn*#t$rtKdYnwxYw|fr*t|f|a}w@|e|a|wdwL|ad2krg}fg}x d dlmV}vd|vd2pgD}xn*#t$rtKdYnwxYwtD]}j|j|xvr|x@|jd|xD}f|fs-tjZtXd2g}f|fr*t|f|a}w@|e|a|wdw2|ad!krg}fg}yd}zd}{ d dlmV}v|vd!pg}|n.#t$r!tKdg}|d }{YnwxYw||rtdi}}t |}tr|}dppd}~t|||~\}}d|D}fd|D}y|r#dt9|dt9||d}znJ|{stKdn-tjZtXd!g}f|frKt|f|a}w|yrt|y|ang}|e|zz|a|wdw}|r||d<@||adRkrqg}fg} d dlmV}v|vdRpg}n*#t$rtdYnwxYw|rd|D}fntdSidRipi}tdRpd}t |tr6t|d^pd&nd}|r^ddi}|rd||d<|dz]d} d dlLmM}l|lN|d|}|lO|d5}tj |PQ}dddn #1swxYwY|dVpgD]n}t |trWt|dpd&}j|jr|j|jdr|fvr|f@|j|jdron+#t$rtd|YnwxYw|fr*t|f|a}w@|e|a|wdw 2|atXvs|a|!vre|!|a|a}tdSi|i}6g}ft |6tradn|6vr]|6dn}t |trd|D}fn!t |t&r d|D}f|fst|at|a}f|fs-tjZtX|ag}f|*|ag}|r|fstjZ|}ft|f|a}w@|e|a|wdw |*|a}|rtjZ|}n*|)r&|adbkr r dbkrg}ntjZ|)}ng}|r@|e|a|dw |adbkr|r@|e|agdw ;n/r-t}@dd|drgdwr[t&6`ddtZvptWtZv}|rtKdnوfdD}|vrt}r/tZpd6nd}d}D]S}|rO|dd6|kr#|dnad |drd }nT|s!r@dpd|drgdwtdDt t |tr|dini}t |tr4|D]1} t+t| 2n#t$rYnwxYw tdSi} t | tr| D]s\}}t |trY|d^s|dmr/t+t|tn#t$rYnwxYwfd}c|i} tdidi}t |trd|D}n#t$rYnwxYw||dS)Nr<rcNt|pd}|dr#d|vr|d}|dp|}d|vr|d}|dp|}|ddS)Nr rrVrrrar)r4rrrbrr)r<rpartss r_norm_model_idzVget_available_models.._build_available_models_uncached.._norm_model_id? sHN##))++1133A||C   #SAXX "INaxx "IN99S#&& &rcg}rr|dddtdg}t|trt |dD]\}}t|t st|dt|dpd  }r|sx||d d |dd D}d |DdDi}|D]4}| |g|5i}|D]&}|d|d}g} |d|dd|fD]} | r| | vr| | d} tfd| Dd} | D])} | vr#| kr | } n*| V| D]S} | } || g}|s&tfd|Dd}|p | p|d} | rnT|d|dd}| D]%} | }|r|kr ||| <&| r||| <(|S)NprimaryPrimary)rrrolerfallback_providersr )startrrr fallbackz Fallback cg|]F}|dgD]-}|d|dd.GS)rrr rrkrkr)s rrmzzget_available_models.._build_available_models_uncached.._build_configured_model_badges..k sUfffa155SUCVCVffaZ[Z_Z_`dZeZef!%%b//ffffrcHi|]}t|t| Src)r4)rkopt_ids rrzzget_available_models.._build_available_models_uncached.._build_configured_model_badges..l s&OOO&S[[#f++OOOrc i|]u}|dgD]\}|dt|dt|dpd]vS)rrrr )r}r4rs rrzzget_available_models.._build_available_models_uncached.._build_configured_model_badges..m s&&&x,,&&55;; &AEE$KK  #aeeM&:&:&@b"A"A&&&&rrrrVc30K|]}|v|VdSrrc)rkc option_lookups rrvzyget_available_models.._build_available_models_uncached.._build_configured_model_badges.. s4#c#cPQUbPbPbM!$4PbPbPbPb#c#crc3NK|]}|k|V dSrr)rkr)option_provider_lookuprs rrvzyget_available_models.._build_available_models_uncached.._build_configured_model_badges.. s=]]13I3M3Ma3P3PT\3\3\Q3\3\3\3\]]rrrr)rrr) r1rar}r{rnr r|r^r4rrnext)configured_entries fallback_cfgidxrlr option_idsrjrbadgesraw_candidatesrmatch_id exact_matchrmatchesprovider_match badge_payloadcandidate_providerrrrrrrvrs @@@r_build_configured_model_badgeszfget_available_models.._build_available_models_uncached.._build_configured_model_badgesN s79  = "))$3!. )!* 77#7<%> "-//*b"A"A&%$)-]]]]]]]] **$2#N[#NGAJ#"!E"*/vw]e f f !/66I)?)C)CI)N)N&)!.@H.L.L (5F9%%5'4F8$Mrr rrrYr~r~rrrrz!Failed to load auth store from %scredential_pool) load_poolrc g|]o}ttt|ddpdtt|ddpdtt|ddpdm|pS)ror rr)rr4r)rkrs rrmzRget_available_models.._build_available_models_uncached.. s)))&''?$'8R(@(@(FB$G$G$'7B(?(?(E2$F$F$'<(D(D(J$K$K("(") !)))rz$credential_pool.load_pool(%s) failedc 36K|]}t|toztt|ddpdt|ddpdt|ddpd VdS)ror rrN)r{r|rr4r})rkrVs rrvzQget_available_models.._build_available_models_uncached.. s11!' 'vt44$< #FJJx$<$<$B C C #FJJw$;$;$Ar B B #FJJ|R$@$@$FB G G%%!111111rz1Failed to inspect credential_pool from auth storeF)list_available_providers)get_auth_status authenticatedrrrz(Failed to get key source for provider %sunknownTr% logged_inz'Failed to check Nous Portal auth statusz+Failed to detect auth providers from hermesrgr#=r "'zFailed to parse hermes env file)ANTHROPIC_API_KEYOPENAI_API_KEYOPENROUTER_API_KEYGOOGLE_API_KEYGEMINI_API_KEY GLM_API_KEY KIMI_API_KEYDEEPSEEK_API_KEYXIAOMI_API_KEYOPENCODE_ZEN_API_KEYOPENCODE_GO_API_KEYMINIMAX_API_KEYMINIMAX_CN_API_KEY XAI_API_KEYMISTRAL_API_KEYAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYrr'rr(r)rr&rr2rrIrr-rr.rr0rr1rr/rrBrr@rr>rr;rr<rrrC LM_API_KEY LM_BASE_URLr=r5ct|}|sdSt trt d}||kr_t dt |}|r3t |St di}t|tr| D]\}}t|tst|d}||krFt|}|r5t |cSt dg}t|tr|D]} t| tst| d} | |krAt | dpd} | rt| cSdSdS) Nr r~rrr5rhr rW) rr{r|r}rrar4rrr r^rnre) r~rmodel_base_urlrMrg provider_key provider_cfgprovider_base_urlcustom_providers_cfgrlrr{r8s r!_configured_provider_for_base_urlziget_available_models.._build_available_models_uncached.._configured_provider_for_base_url sB28<y}}Z?X?X!Y!Y!V++$C! j11!)%%%M %B"=117799??AAAGGK44M-.. F2?2E2E2G2G F F.L,%lD99! (E$((44))%)F22(? (M(M (F#&}#5#5#;#;#=#=#C#C#E#EEEE#&77+=r#B#B .55 $1 $ $E%eT22! %B599ZCXCX%Y%YN%// !$UYYv%6%6%<"!=!=!C!C!E!EJ!K>zJJJJJ#882rct|pdd}|dr|dzS|dzS)Nr rz/v1/modelsz /v1/models)r4rrr_)r~rs r_models_endpoint_for_base_urlzeget_available_models.._build_available_models_uncached.._models_endpoint_for_base_url sWx~2&&,,..55c::D}}U## (i'',& &rrRc.g}t|trOd|vr$t|dtr |d}n'd|vr#t|dtr|d}g}t}|D]}t|ts|ddp+|ddp|dd}|ddp|ddp|}t |pd}t |pd}|r|r||vr|||dvrt|n|}| ||d|S) NrRrrr r rrur) r{r|rnr r}r4rrrr1) rRr models_listrrrr< model_namers r#_extract_model_entries_from_payloadzkget_available_models.._build_available_models_uncached.._extract_model_entries_from_payload sK$%% 1T>>jft&D&D>"&v,KK%%*T(^T*J*J%"&x.KF55D$ @ @!%..IIdB''.yy,,.yy"-- #YYvr22Xeii6L6LXPX x~2..4466 !1r2288:: zX5E5E""":BF`:`:`,X666fp X>>????Mrcoderrc$t|pddd}||nt|dd}|dvrdt|d|d|d d St |trd t|d|d |d d Sddd|dd S)NrWr`r r)iiauthzModels endpoint returned u — check the API key for r)kindrmessagerz for z ; see logs.networkz Models endpoint unreachable for z; verify base_url.)r4rrr&r{)rrrprovider_label status_codes r_custom_endpoint_errorz^get_available_models.._build_available_models_uncached.._custom_endpoint_error s !!5X66>>y"MMN"&"2$$VT8R8RKj((" ,,t;ttcqttt +s++ " ,,h;hh^hhh "`n``` rrc)rtrusted_base_urlsrr.c t|pd}|sgdfS ddl}ddl}ddl}ddl}|}i} t|pd} | rd| | d<t } |g|RD]g} tdt| vrt| nd| } | jr,| | j htd|vr|nd|}|j dvrtd|j |jr | |jd}|D]\}}}}}||d}|js|js|jrT|jpd t%fd d Dp| v}|std |dn#|j$rYnwxYw|j|d }|dd| D]\}}||||j|d5}t3j|d}dddn #1swxYwY||dfS#|jj$rG}||t?|dd}t@!d||g|fcYd}~Sd}~wtD$r6}||}t@!d||g|fcYd}~Sd}~wwxYw)Nr rBearer Authorizationrr)r rrzInvalid URL scheme: c3 K|]}|vV dSrrc)rkrhost_ls rrvzwget_available_models.._build_available_models_uncached.._read_custom_endpoint_models..;s;5"5"()%&K5"5"5"5"5"5"r)r9r#rr=rz&SSRF: resolved hostname to private IP GET)method User-AgentOpenAI/Python 1.0 timeoutrrrz7Custom endpoint models fetch failed for provider %s: %sz@Custom endpoint unreachable or misconfigured for provider %s: %s)#r4rr% urllib.errorurllib.requestsocketr rrrrrr' getaddrinfor&r)r(r*rgaierrorrequestRequest add_headerr urlopenrZr$readdecodeerror HTTPErrorrr$rr\)r~rrrrr%urllibr endpoint_urlheadersr_ssrf_trusted_hoststrusted _cp_parsedr resolved_ipsrr+addr_objis_known_localreqrrresponserRrrrrrrs @r_read_custom_endpoint_modelszdget_available_models.._build_available_models_uncached.._read_custom_endpoint_modelssx~2&&,,..D 4x8 !    ####%%%% <GO, 14# $9'899MMG!)(-W(=(=G CVWCVCV""J"*M+// 0C0I0I0K0KLLL%e|6K6KllQi[gQiQijj $,AAA$%OJ._build_available_models_uncached..sh--!#t,,-251D1D-GGJ''------rr rcrrVrrrr`c3K|]C}t|to)|dpd VDdS)r r N)r{r|r}rrs rrvzQget_available_models.._build_available_models_uncached..sc3%%Mswwv/D".K.K.M.M*Mronly_configuredc38K|]}t|p|VdSr)rrkrs rrvzQget_available_models.._build_available_models_uncached..3sA,,:;-a005A,,,,,,r)rrrmodels_endpoint_error)fetch_openrouter_modelsz9Failed to load OpenRouter curated catalog from hermes_cliz#https://openrouter.ai/api/v1/modelsAcceptr)rg @rpricingprompt0 completionz:freerrz(free)z (free)z;OpenRouter free-tier live fetch unavailable; using fallbackcbg|],}|ddk|d|dd-S)rr$rrrrr?s rrmzRget_available_models.._build_available_models_uncached..sI&&& ! uuZ00L@@$%T7QwZ@@@@@rr$r:rnc2g|]}|t|dSr)rrkrs rrmzRget_available_models.._build_available_models_uncached..s9&&& #$'1Ec1J1JKK&&&rz2Failed to load Ollama Cloud models from hermes_clicg|]}||Srcrcrs rrmzRget_available_models.._build_available_models_uncached..s$g$g$gScf$gS$g$g$grz2Failed to load OpenAI Codex models from hermes_clic4g|]}|t|gdSr)rlrs rrmzRget_available_models.._build_available_models_uncached..s;""" #-A#r-J-JKK"""rz1Failed to load Nous Portal models from hermes_cli)rc8g|]}d|t|dSrrrrs rrmzRget_available_models.._build_available_models_uncached..-s?&&& #$2C>>._build_available_models_uncached..1s?((( #$2C>>._build_available_models_uncached..qs %R%R%RCS3&?&?%R%R%Rrrrrrrr)rrz$LM Studio /models fetch failed at %scg|]}||dSrrcrs rrmzRget_available_models.._build_available_models_uncached..s )[)[)[AQ*?*?)[)[)[rcg|]U}t|tr|dn|t|tr|d|dn|dVS)rrrr rs rrmzRget_available_models.._build_available_models_uncached..s*@*@*@/0=Gq$._build_available_models_uncached.. sGeeeAQRQVQVW_acQdQdeeAqw 7 7eeeercg|]C}|ds*|dpddA|DS)rrr r`r}rb)rkrks rrmzRget_available_models.._build_available_models_uncached..2sa   uuX m$$*66yAA    rc|dpd}|krd|fS|drd|fS|vrd|fSd|fS)Nrr rr`r rrr-)rkr_providers_with_keysrs r_group_sort_keyzWget_available_models.._build_available_models_uncached.._group_sort_keyKsh%% &&,"Co%%3x~~i(( 3x***3xs8Orraliasesci|]J\}}|| t|t|KSrc)r4rrs rrzRget_available_models.._build_available_models_uncached..[sF k k kDAqcd kij kQQ k k kr)rrvr3rr1)dryrar4r|r}r{rrr8rZr$rr\r$rr ragent.credential_poolrrnrBr^rrarp monotonicrjr rrr\rhermes_cli.authrrirhr5 splitlinesrrbrr rrrrrobjectr&tuplerrrr=rrr%r&r)r(r*r'filterextendr1rerldiscardrwrr intersectionrtitlerr%rrrrrrr~ TypeErrorr__FALLBACK_MODELSrorrrQrRrr;rrwrsrinsertrr)r cfg_base_urlrw auth_storeauth_store_pathrCdetected_providers_pool _load_pool_pid_canonical_pid_cached_cp_ts_cp_pool _all_entries_lp_t0 _explicit_entries_has_explicit_credall_env_hermes_auth_used_lap_gas_p_src_gah2hermes_env_pathenv_keyslinerrval_cfg_providers_canonical_to_raw_provider_key_pid_key _provider_cfg _canonical_is_known_provider_is_provider_configrrauto_detected_models auto_detected_models_by_providerr~configured_providerrprovider_from_configparsedrr%r+rrgrr api_key_varsr_trusted_custom_bases_custom_providers_for_trust_active_endpoint_models_active_endpoint_error auto_model_custom_providers_cfg_named_custom_groups_named_custom_errors_seen_custom_idsr_cp_namerW _cp_base_url _cp_api_key _cp_key_env_cp_configured_models_cp_has_configured_models _live_models _live_error _live_model_live_id _dedup_key _cp_option_id _cp_model_ids _cp_model_cp_models_dict_m_id_item_mid _cp_label_has_custom_providers _has_unnamed_named_custom_slugs_base_matched_named_slug _pid_normonly_show_configuredconfigured_providers cfg_providers_canonicalised_detected_cr _nc_display _nc_modelsr'rrseen_ids_fetch_or_models live_curatedr_desc_urlreq_req_resp_payload _free_count _free_cap_pricing_is_free_name_labelrpr codex_idsr&truncated_label_suffixlive_fetch_failedr _model_cfg _selected featured_ids extras_idsr group_entrylm_idslm_cfg lm_base_url lm_api_keyrendpointrresplm_datar)_raw_key cfg_modelsdetected_modelsmodels_for_groupr_looks_like_provider_id all_ids_normtarget_displayinjectedrk_pk_pvr0 model_aliases raw_aliasesrrrrr/rrvrr8s @@@@@@@@@r _build_available_models_uncachedz>get_available_models.._build_available_models_uncached: s.3C88  'S 'S ' ' ' 'R S$sCx.5H0IR R R R R R R R R j GGGR((  i % % ,   4 ( ( ,'mmJ77O#-- 266K$==R88L , +  =%O .00  ! ! # # S S!!!!XXo&?&?&?&Q&QRR &&E"'899!-'''O  S S S @/RRRRR S!UU  4  " "? 3 3 35 N=G TX=Y=YaJNN#4b999_aE%&&1 W51 W0WMMMMMM $UZZ\\ 2 2WWW-DSYY-O-ON&<&@&@&F&FG&23: 0$(IKK&$8G#C#C3;3C3C3E3ELL-1^-=-=F/9z$/?/?HDHIKKQYCZ$:4$@3;3C3C3E3ELL)-)9)9+5:d+;+;@D X?V 6t #WWW*/++-- W Wh)(D99%S]]a=O=O$-011+3111..*.W.223J3t993U3UVVV W WW N N N LLL M M M M M N! H J J J J J J ? ? ? ? ? ?dff 1 1vvo..f44>>--lB??D.. / fffLL!KRVVTXZcMdMdeeeeef"&&r$x0000 $  H4<<##K003&**6222 H H H FGGGGG H H H H LLF G G G G G H!Q 3 @HHHHHH"'%''F"2 @ @ @"6"? @H%%'' DD / 9 97 9 K K V V X XRR#zz||R(<(<R#'::c1#5#5DAq23''))//#2F2F2L2LS2Q2QHQWWYY/ R !DDDLL!BCCCCCD"lG % %&ill%!$GAJ{{.// 4"&&{333{{+,, 7"&&x000 #&&~666{{/00 5"&&|444{{+,, 1"&&x000{{+,, 1"&&x000{{=)) ."&&u---{{>** 6"&&}555{{,-- 2"&&y111{{/00 5"&&|444{{-.. 3"&&z222{{+,, 1"&&x000{{=)) /"&&v...{{,-- 4"&&{333{{122 7"&&~666{{011 6"&&}555{{.// 2GKK@W4X4X 2"&&y111{{<(( 3W[[-G-G 3"&&z222&b11:<& nd + + 3+9+?+?+A+A 3 3'-6x@@ !"22UjDU6U#'1&E&E#*.A.99*hOOO"&&z2222* * 3* * * * * * X 'C 'C ' ' ' '  f  PTUYPZ    > $      *        <!46 B !B !B !B !B ! B ! %VS[1 B ! 4:td{* + B !B !B !B !B !B !B !B !J "BD( L 5#))++H"C"CH"M"M *6hH#'(;#<#< %8*;*;hhAU8AUAUVVFM0V[7799D '; $$$$$//@@D0$*:0d>P0#t++{d/B/BkUYFYFY'/HH'4//;$3F3F'1HH(0H!DG)T** C$==339r@@BB & # R 8 8 mT22&(.tox5P(Q(Q&& '4'8'8r'J'J %lD99&'3'7'7 'B'B'Hb&O&O&Q&QG&& %   (C&{{3//G29S>>GRNNPPG4@. !*-''2Db*I*I '5t<< %,,--:--- ?[>Z"'(=">"> ??? ; #%; 6 5 5 $++J777'~~// 0;;L"MMTTU_```"&&|4444 #(:B ? ?%'02 +T 2 2f ="uu ,d =d =!#t,,GGFOO1r88::EMW7AAASWAU*>>>3;R.(/"377:#6#6#<"==CCEE 5\5"%cggi&8&8&>B"?"?"E"E"G"GK&T&)#'')*<*<*B&C&C&I&I&K&K &T*-bi .D.D.J*K*K*Q*Q*S*SK-0GGH,=,=)"#84,GG; 566:.$D#G#G#N#NL"&K0(/+-L%-4P4P(!$//;o 5551 k #66A,U3*..u555'3 #&{t'<'<'B#C#C#I#I#K#K'%$(-%:%:%:%: %)999$(,,Z888*..u555(0 *e33M>),,2222Fs2K/ Z *W)I)M)McSU)V)VJ%10D)D)D1"MM%000 1 5 5c399;; G G ,&&"$J"uuH d(8'7'9'9'?R *6MMJC"Ms(':': ( S 1 1 1 * 1 1s2K2K L L LM%ddd'bcccccd )d888888&A%-/A$B /  %__T3_??I5'+z%**,,2E2E2G2G'H'HHIIIIIIIIIIIIIII&' $& %-\\&"%=%=%C&&E#-eT#:#:) (#&uyy'<"#=#=#C#C#E#ED#')48+;+; (',yy';';'ArH1$)(,,x*E*E*L$M$MQR$R%[(-hll<.M.M.TQT(U(UYZ(Z!)%.z#:111+01(0'I4==3I3IH#+) ( #EIIf$5$5$; < < B B D D L">AE\\U[[%5%5b%9%9uF'v||~~==,2);););$LL...&--TF.K.KLLL'1,K*i77 % 8$ddd %bcccccd&&&%5&&& MM(4+7&0N**!#J]______&&(;(;N(K(K(Qr&&& %]]]'[\\\\\]"!7 C!Y!Y ,9/2*0N**"$J "I]______$g$g5H5H5X5X5^\^$g$g$g $]]]'[\\\\\] CDD22i//%,,S111""#,"""J &]%)]3C3G3GXZ3[3[%\%\ !!7 C!Y!Y ,9/2*0F]]"$J/1L-/*(-%1______#6#6v#>#>#D"$111'Z[[[#%,0)))1  6U &)WWWb%9%9 ' D99UjnnW>U>U$,$#" 4L$.74440 j&&'3&&& (('1((( &!MS%6%6 L LCMM L L L3/UV&*]3C3G3GPR3S3S%T%T ! 3!7 C!Y!Y`l!s!7 c?![![![qs(58N(N+.&,'' "A:@K7 k222J&&"$J(*Fh______!4!4Z!@!@!FB$hhh %fgggggh_%R%R6%R%R%R "%b!9!9!=!=j"!M!M!SQS&)>)D"%E%E%K%K%M%M%Moq &_'35H&IG)R;QZ;Q;Q 8(3i(?'G'G'L'LH _ @ @ @ @ @ @&-oohuV]o&^&^%,__S!_%D%D!O.2j9K9K9M9M.N.NG!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O*1++f*=*=*C!Y!YA'1!T':':%Y.1!%%++2C.D.D.J.J.L.L+.)Y#3L3LT^3^3^,6,=,=SSV>W>W,X,X,X !Y $-___ & -SU] ^ ^ ^ ^ ^_"!7 C!Y!Y ,9/2*0,,,7U0U0U >AA#sKKH#&77;#;#;#?#?"#M#ML!#J",55@(l:R:R%1(%; %j$77@)[)[IZIZ)[)[)[JJ' D99@*@*@4>*@*@*@J&%C9#>>&& &R%)]3C3G3GR3P3P%Q%Q &F&J&J3PR&S&SO&DzD%)]?%C%C 3J_UUFMM(5+.&,'G&J&J3&O&OO&.+/=+I+I((- .(????V^C^C^/1,,/3}=Q/R/R,,+-(' ,9/2*:\ (5+.&(''G g R  ,]FCC !*9XepuQvQvPwxx * M""((**0022::3DDHYYQ,];;?PP $' &"  feeeeee !>-00 DD0GGE+ )--o?TRTUU[[]]]# %H#"")"aeeJ.C.C.I.I.K.K~.].]hK..qQV2W2WXXX'+H!E# ,5/>/K)2?%+P+P*Q v&&&     *- =G TX=Y=YaJNN#4b999_aE%&& Q!QQD(,,-DSYY-O-OPPPP    D   WW["55N.$// T . 4 4 6 6TTHC!#t,,T#'')2D2DTPYHZHZT,001HS1R1RSSS    D          ((()+  '''2..229bAAK+t,, l k kKL]L]L_L_ k k k     D  /*'E'E'G'G$    s5AF%F76F7 AQ '*N/D.NN/%N+'N/*N++N/.Q /BQ Q Q  Q $Q43Q4<.V++SV9TVT!V63U*)V*$VVVV$V<;V<WW.-W.C[ $[21[2Aq.. q;:q;\5A A^^$A^*^)A^*^.6Ag5_$9A`)` Ag5`)A`- `-Ag5`0A`- `1B Ag5b>AAddAg5dAd'd$Ag5d&Ad'd'C Ag5g5$AhhAhiAi4i4$AjjAjkAk5k5$AllAloAoo(AppApuAuu$AvvAvy 5A}z9A{z; A}{A{ { A}{A{ {B A}}%A~~A~M3A6BO*O* BO7O6BO7O;B8BR4R4 BSSBSS#A"BUU BUUBUNc$t otduSr)rWrrcrrrz&get_available_models..s44\9PX\9\r<rTF)rlrprqrrrOrPrdrsr|rWrrrErVrXwait_forrTrar4rrr-rNrQrRr\rY) _current_path_current_mtimer should_wait _cfg_changed disk_groupscachedrOrs rget_available_modelsr s&(** &++--6 (**  : % %))C)C,..*D k dk k k k b)+K.00116688A !Z/L K&244 %4%4%    $ $\\ %   4DN4D4DEEF!4%4%4%4%4%4%4%4%   OOO&* #), &9= 6Kn/44  14%4%4%4%4%4%4%4%6  "&1 #), &9Y9[9[ 6 &{ 3 3 3=--A4%4%4%4%4%4%4%4%F , ,'+ $ , , , , , , , , , , , , , , , 5577FF     - -+0(**,,, - - - - - - - - - - - - - - -     ) )&, #)-)9)9 &9Y9[9[ 6', $  & & ( ( (  ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) #6***}V$$i4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%s'*AA2C CC=AK =K6KK!G0$ K0G4 4K7G4 8K< HKI I4 I I I I I  K?J" K"J& &K)J& *%KK #K rz index.htmldceZdZdZdZdejfdZdejddfdZde e e fddfd Z de e effd ZdS) StreamChannela{Broadcast SSE events to every connected browser tab for a stream. While no tab is connected, events are buffered so the first/reconnected subscriber still receives the stream tail that arrived during the gap. Once one or more subscribers are attached, new events are broadcast to all of them instead of being consumed destructively by a single queue reader. cRtj|_g|_g|_dSr) threadingLock_lock _subscribers_offline_bufferselfs r__init__zStreamChannel.__init__s'^%% /19;rrctj}|j5|jD]}|||j|dddn #1swxYwY|Sr)queueQueuerr put_nowaitrr1)rqr}s r subscribezStreamChannel.subscribes Z ( ( , # # T""""   $ $Q ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( (s:A!!A%(A%rNc|j5 |j|n#t$rYnwxYwddddS#1swxYwYdSr)rrremover')rrs r unsubscribezStreamChannel.unsubscribes Z   !((++++                      s,A%A 2A2AA Ar}c&|j5t|j}|s(|j| ddddS|jdddn #1swxYwY|D]}||dSr)rrnrrr1rr)rr} subscribersrs rrzStreamChannel.put_nowaits Z ) )t011K $++D111  ) ) ) ) ) ) ) )  & & ( ( (  ) ) ) ) ) ) ) ) ) ) ) ) ) ) )   A LL      s2A,A,,A03A0c|j5t|jt|jdcdddS#1swxYwYdS)zCReturn non-sensitive stream observation counters for health checks.)subscriber_countoffline_buffered_eventsN)rrrrrs rdiagnostic_snapshotz!StreamChannel.diagnostic_snapshots Z  $'(9$:$:+.t/C+D+D                  s)>AA)r __module__ __qualname____doc__rrrrrr8r4r7rr|r&rrcrrrrs<<< 5;    U[TuS&[1dT#s(^rrctSr)rrcrrcreate_stream_channelrs ??rSTREAMS CANCEL_FLAGSAGENT_INSTANCESSTREAM_PARTIAL_TEXTSTREAM_REASONING_TEXTSTREAM_LIVE_TOOL_CALLSSTREAM_GOAL_RELATEDSTREAM_LAST_EVENT_IDPENDING_GOAL_CONTINUATION ACTIVE_RUNSLAST_RUN_FINISHED_AT stream_idc .|sdStj}t|pi}|d||d||ddt5|t|<ddddS#1swxYwYdS)zAMark a WebUI agent worker as alive until its outer finally exits.Nr started_atphaserunning)rar|rACTIVE_RUNS_LOCKr)rmetadatarOrls rregister_active_runr s  )++C R E [),,, \3''' Wi((( ''!& I''''''''''''''''''s2 B  BBc |sdSt5t|}|||ddddS#1swxYwYdS)zAUpdate active-run metadata without creating a new run implicitly.N)rrr}r)rrrls rupdate_active_runrs  ## **   LL " " "##################s2A  AAc|sdSt5t|dtjaddddS#1swxYwYdS)zCRemove a worker from the active-run registry and record idle start.N)rrrrar)rs runregister_active_runr s  ++ 4(((#y{{++++++++++++++++++s/AA A SESSION_AGENT_CACHE2 session_idcdd}t5t|d}|t|tr|dnd}dddn #1swxYwY|dSd} ddlm}m}m}||r|||d||s ||nd}n/#t$r"d}t d|dYnwxYw|r[t|d dL |j dS#t$r!t d |dYdSwxYwdSdS) aRemove a cached agent for a session (on delete, clear, or model switch). Attempts a lifecycle commit before dropping the agent handle so that batch-extraction memory providers can extract any pending work. If the commit fails or there is uncommitted work with no successful commit, the lifecycle entry is preserved (not unregistered) so a future commit can retry. NrT)commit_session_memoryhas_uncommitted_workunregister_agent)rwaitFz*Lifecycle commit on eviction failed for %sr\ _session_dbz.Failed to close _session_db on eviction for %s)SESSION_AGENT_CACHE_LOCKrrr{r8api.session_lifecyclerrrr\r$rrrclose)rrrl should_closerrrs r_evict_session_agentr 5s E !CC#'' D99   *5% 8 8BE!HHdECCCCCCCCCCCCCCC }L ^gggggggggg   + + F ! !*E E E E E##J// !  Z ( ( ( ( L ^^^  A:X\ ]]]]]^f}d;;G f   # # % % % % % f f f LLI:`dL e e e e e e fffGGs5=AAA%.>  +":.//////////////////s1AA  A default_workspaceonboarding_completedsend_keyentershow_token_usageshow_quota_chiphide_empty_state_suggestionsshow_tpsfade_text_effectshow_cli_sessions show_previous_messaging_sessionssync_to_insightscheck_for_updatesignore_agent_updateswhats_new_summary_enabledthemedarkskinrY font_sizesession_jump_buttonssession_endless_scrollpinned_sessions_limitinflight_state_max_sessionsinflight_state_max_messagesinflight_state_max_tool_calls0inflight_state_max_string_charsi`inflight_state_max_json_charsi` hidden_tabslanguageenbot_nameHERMES_WEBUI_BOT_NAMEHermes sound_enabledrtlnotifications_enabled show_thinkingsimplified_tool_callingapi_redact_enabledcompactrr)sidebar_densityauto_title_refresh_everybusy_input_mode password_hash> bubble_layoutrvassistant_language>r&lightsystem> geist-contrastaresmonor%slatesiennarYposeidonsisyphus charizard catppuccin)r&rL)r&rN)r&rOr&rY)rL solarizedmonokainordoledct|tr&|nd}t|tr&|nd}t|}|r|\}}n|t vr|d}}nd\}}|tvr|n|}||fS)uCNormalize a (theme, skin) pair, migrating legacy theme names. Legacy migration table (from `_SETTINGS_LEGACY_THEME_MAP`): slate → ("dark", "slate") solarized → ("dark", "poseidon") monokai → ("dark", "sisyphus") nord → ("dark", "slate") oled → ("dark", "default") Unknown / custom theme names fall back to ("dark", "default"). This is a behavior change vs. the pre-PR-#627 state, where the `theme` field was open-ended ("no enum gate -- allows custom themes"). Users who set a custom CSS theme via `data-theme` will need to re-apply via skin or custom CSS — see CHANGELOG entry for details. The same mapping is mirrored in `static/boot.js` (`_LEGACY_THEME_MAP`) so client and server normalize identically; keep them in sync. r rYrR)r{r4rr_SETTINGS_LEGACY_THEME_MAPr}_SETTINGS_THEME_VALUES_SETTINGS_SKIN_VALUES)r%r' raw_themeraw_skinlegacy next_theme legacy_skin next_skins r_normalize_appearanceras(*4E3)?)?G ##%%%RI'1$'<'<Dtzz||!!###"H ' + +I 6 6F 4"( KK , , ,"+YK #4 K , , ,   y  rctt}d} t}n2#t$r%t dtd}YnwxYw|r tjt d}t|tr1| d| Dn0#t$r#t dtYnwxYwtt|tr|dn|dt|tr|d n|d \|d<|d <t!|d < t#d i}t|tr:|d r%t%|d |d <n*#t$rt dYnwxYw|S)zDLoad settings from disk, merging with defaults for any missing keys.Nz,Cannot stat settings file %s (inaccessible?)Frrc,i|]\}}|tv||Src)_SETTINGS_LEGACY_DROP_KEYSrs rrz!load_settings..s4 Aq$>>>1>>>rzFailed to load settings from %sr%r'rvrrdefault_model_providerz5Failed to resolve default model provider for settings)r|_SETTINGS_DEFAULTS SETTINGS_FILEr8rrr$rrZr$rr{rr r\rar}ryrwr4)settingsstoredsettings_existsr8s r load_settingsrksS&''H F '..00      C]SSS   K KZ 7 7 7 I IJJF&$'' $*LLNN K K K LL:M J J J J J K*?)&$77R 7X\\'=R=R(66P 6HLLlargesmallxlargerY>r51020>rsteer interrupt)rrAr(rBrC)r c)r r)r r)r )ii )ii =)r+r,r.r0r2r3>r;rr=r:rrrr!r"rr?r#rr)r<r*r>r$rr r!z$^[a-zA-Z]{2,10}(-[a-zA-Z0-9]{2,8})?$rhct}|d}|d}d}d}d}|dd}|rQt|tr<|r(ddlm}|||d<d }|d drd|d<d }|D]\\} } | tvrL| dkr.t| tr| r| }d }D| dkr.t| tr| r| }d }x| tvr| t| vr| tvrE t| } n#ttf$rYwxYwt| \} } | | ks| | kr| d kr1t| trt| s| d kr#t| t"s3d | D} | t$vrt'| } | || <^|} |}|rJ|sHt|tr&|nd}|t*vrd}t-| |\|d<|d<t t/|d|d<d|D}t0jd d t0t9j|ddd|rddlm}|d|vrt/|datA|d<|S)zISave settings to disk. Returns the merged settings. Ignores unknown keys.r%r'F _set_passwordNr)_hash_passwordrDT_clear_passwordr5r4clg|]1}t|tr|r|dv/|2S)>chatrhrA)rkrs rrmz!save_settings..ysP!!S))./ggii<=EY.s(JJJ$!QQ/5I5IA5I5I5IrrrrrHrr)_invalidate_password_hash_cacherv)!rkr}rr{r4rapi.authryr _SETTINGS_ALLOWED_KEYS_SETTINGS_ENUM_VALUES_SETTINGS_INT_RANGESr&r>r'_SETTINGS_LANG_REr"rn_SETTINGS_BOOL_KEYSrrrYrarrgr7rrrZr[rrry)rhcurrent pending_theme pending_skintheme_was_explicitskin_was_explicit_password_changedraw_pwryrr min_value max_value theme_value skin_valuer[ persistedrs r save_settingsr@sooGKK((M;;v&&L \\/4 0 0F !*VS))!fllnn!++++++#1>&,,..#A#A  ||%u--!#'    ,,1 & & &G||a%%.!'')).$%M)-&F{{a%%-!''))-#$L(,%)))a7LQ7O.O.O(((AAA!:.H';A'>$ 9y==A MMJq#&&.?.E.Ea.H.H M!!!!T**  '''GGGAJKJ"35? s5S5S[M''))//111Y[ 2 2 2J(=k:(V(V%GGgfo#&!'++.A"B"BCC$$G  KJ'--//JJJItd;;; 95;;; *<<<<<<'')))g%%5g>Q6RSS:<rMrrr=r1rr`rrrOr~__annotations__rPrQr|r^rrdrlrr~rwrrsrrrarnrrrrrrurr8rMAX_FILE_BYTESMAX_UPLOAD_BYTES IMAGE_EXTSMD_EXTS CODE_EXTSMIME_MAPrr rr CLI_TOOLSETSr?rr[r^r7rerqr rwr|rrrrrrrrrr frozensetrrrrr_NOUS_FEATURED_TARGETrrrrr r!r,r3r;rYrlrorpryrrrrrrrrrrrrrrrrRLockrV ConditionrXrWrrrr9r0rrrrrr(r-rr4r?rErNrTrr_rbrlrsrwrr_INDEX_HTML_PATHLOCK SESSIONS_MAX CHAT_LOCKrrr STREAMS_LOCKrrrrrrrrrrrSERVER_START_TIMErrr OrderedDictrSESSION_AGENT_CACHE_MAXrr rYr rrrrrrfrdrYrZrXrarkrBrrrrrcompilerr_startup_settingsr8_settings_file_existsrrr}rrr[r\rrirrjrcrrrs:(        ++++++++ty{{ DNN ! ( 0 0 2 2  t    ry$k22 s929(& 1 122 29,b 1 1 7 7 9 9 AT ")*B / / 5 5 7 7 ?4d":wd': 5466 D+SS1E1O-P-P Q QRRZ\\ WYY *$ // =0O+ "66O+  8 $ $""""""">1T1111h,,,,,,`! " "  j ) ) " s:ch&& J(((MMM IN    E 4$;##*### d s    d, 4$ 4 4 4 4(1#- D.,,TD[,C,,,,,++++D        4 D     sTzD0DJ>3:#4 'T ' ' ' '0/11 6;; ! ! ! ! H0u0000( =!=rBBP O O ( ( (    6  K  L  \  K    O    \   N  K      [  K  &  P     V! " L# $            ;   B* 1     g g g g%$&& .$9Sabb.$4S\]]. $?Sdee . $?Sdee .$ASfgg.$ASfgg.$@Seff.$CYqrr.$CYqrr.$JYxyy.$;Yijj.$=Ykll."$@Tghh#.$$>Teff%.&$DTjkk'.($:Tjkk).,$6S`aa-..$7Sabb/.2$4R]^^3.6$DSbcc7.:$:Q_``;.<$DQijj=.@MQZ[[A.BKQXYYC.D$5Q^__E.FMQZ[[G.HMQZ[[I.J$7Q`aaK.R%@]tuuS.T%;]oppU.V%?]qrrW.X%M]vwwY.Z%J]{||[.b M, h  N  ! , <$ y# h, =!"y#$""   9X+ 5+ E+ E+ U +  i + i +Y+I+ h+X++ M+ + k+;+ !+"\#++$,%+&'+( E)+* E++, E-+. 9/+091+2 i3+4i5+6 I7+8 i9+:;+<Y=+> 8?+@(A+BHC+DE++F  U+++\,#,#,,,,, & S     CCCT CCCCTD[CH#t  (#* ****t * *  *  ****Z'F's''''T ( (C ( ( ( (>v>#c(>>>>0/2cee!3s8333"6"c""""CFsTz0#   t        F +<== +<=="-@AA"-@AA!,>?? F  227777 22 F9--779--779999"-@AA#.BCC"-BCC F2 '=UVV'=UVV.=\]]=MNN!=OPP 3F@"-@AA +<==&1GHH"-IJJ AFL 0?[\\2?]^^*?XYY4?bcc  MFX 9--))}559--9--99  YFh*:;; +<==!,>??}55[11 iFv77'2JKK77'2JKK77 wFD777777l33 EFR9--779--77(++ +<=="-@AA'2JKK SFh$~>>"\::)44l33 iFv%}55%9--%77%77 % 99 % %/DEE %9--%99%9--%99%#-@AA%$.BCC%))%}55%l33% !+<==!%"!+<==#%$!+<==%%&!+<=='%(#-@AA)%*#-@AA+%,!+<==-%.",>??/%0",>??1%2(2JKK3%4(2JKK5%6/9XYY7%8 *:;;9%:",>??;%<9--=%>))?%@[11A%B77C%D#-@AAE%F'1HIIG%Hl33I%wFDI66G44K88K88 ,=>>",?@@M::N;;O<<K88N;;N;;N;;N;;EFj '=UVV'=UVV.=\]]=MNN!=OPP kFz%@@%@@{FD 7788 EFP3=TUU/:OPP9Dbcc1######L6^6S^6U^6^6^6^6B_C_E#*cTXjBX*D4K>>>%,U,,,.y00%)%&BCC  EGS%/?(?"@@AFFF46c5j!1666d D !!442d2222$$4h#,)---##2$.4.D....b$$    &T.161d1111hdTk># d# t# # # # L$+4###>W#WWWW*######43#B)s)tCy))))X  tCy TRVZ    &T#Y&&&&RW%dW%W%W%W%v,x',6y~ IN   22222222j}y~  dT t !!!!Td!$3&&&  T!9>##%)edl)))DIKK '3 't ' ' ' '##T####+S+T++++/F{/F/H/H[,HHH)9>++ fS fT f f f fFio  T)9>++// ////8).//)E)) ) u ) #E ))))')))E) ) V)  I!)"#))$E%)&e')(Q))*"1+),"2-).$R/)0&u1)2$W3)425)67)8  9)>U?)@ 5A)BUC)DTE)FtG)H$I))J! #Q)))TVUU444   %#   #!%S/#!#!#!#!L#t####L/446677; ,'!:.888 6 6 6666 %#*#+%-'5%6 .Jt$$,,-TUU]D]T]]]]J"MOO")0022"""!" 295 6 6 55  ! !"5 6 6  /4000011SS9J5K5KKK145F1G1G-.   $ $ ,5KKK  %        D %