+ WjaRt0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t H t H t ^RI H t Ht^RIHtRs]^k]!4t] !R]R7t]^kRt]^kRt]^kR R ltR R ltR RltRRltRRltRRltRRltRRltRRlt]P@!R4t!RRlt"RRlt#R R!lt$R"R#lt%/t&]^kRR$R%llt'R&R'lt(R(R)lt)Rs*]^kR*R+lt+R,R-lt,R.R/lt-].!0Rm4t/]^k]!R1R24t0Rs1]^kR3R/R4R5llt2R6t3Rt4R7R8lt5R9R:lt6R;R<lt7R=R>lt8R?R@lt9Rt:]P@!RA4t;RBRCltRHRIlt?RJRKlt@RLRMltARNROltBRPRQltCRRRRSlltDRRTRUlltERRVRWlltFR3R/RXRYlltGRRZR[lltHR\.ROR].ROR0R^R0./tIR_R`ltJRaRbltKRcRdltL]!]M4P4PtPReRfltQRgRhltRRRiRjlltSRkRlltTRRmRnlltURoRpltVRqRrltWRRsRtlltXRuRvltYRwRxltZRyRzlt[RR{R|llt\R}R~lt]RRRllt^RRRllt_RRRllt`RRRRRRRRRRRRRR/taRRRlltbRRltcRtdRte^tfRtgRthRsi^2tjRRltkRtlRtm].!RR04tn].!0Rm4toRRRlltpRRltqRRltrRRltsR3R/RRllttRRR/RRllltuR]f3RRlltvRRltwRRRlltxRRltyRRltzRt{RRlt|RRlt}RRlt~RRltRRRlltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRRlltRtRtRt] R2t].!0Rm4t]^kRRltRtRR/RRlltRRltRRltRR/RRllt].!0Rm4tRRltRRltRR/RRlltRRltR#)uxShared constants for Hermes Agent. Import-safe, stdlib-only — importable from anywhere without circular-import risk. N)CallableMappingMutableMapping) ContextVarTokenPathF_HERMES_HOME_OVERRIDEdefaultkaomojicTV^8dQhR\\,R,R\/#pathNreturn)strrr)formats"DC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_constants.py __annotate__rs#,,3:#4,,cVVf\M \V4p\PV4#)zSet a context-local Hermes home override and return its reset token. Deliberately does not mutate ``os.environ`` (shared by every thread in the process). )_UNSETrr set)rvalues& rset_hermes_home_overriders$ %)L&c$iE $ $U ++rc(V^8dQhR\RR/#)rtokenrN)r)rs"rrr#s''e''rc0\PV4R#)z8Restore the previous context-local Hermes home override.N)r reset)rs&rreset_hermes_home_overrider #s&rc2V^8dQhR\R,/#rrNr)rs"rrr(sJJ#*Jrch\P4pV\JdV'd \V4#R#)z=Return the active context-local Hermes home override, if any.N)r getrroverrides rget_hermes_home_overrider((s($((*H$F2x3x=ITIrc0V^8dQhR\R\/#rrrrr)rs"rrr.s>>c>d>rc\\PP\PP V444#)z>Expand environment and user-home syntax in a Hermes home path.)rosr expanduser expandvarsrs&r_expand_hermes_homer1.s+ ""277#5#5d#;< ==rcxV^8dQhR\\\3,R\.\3,R\/#)renviron user_homer)rrrr)rs"rrr3s7..738+<.RTVZRZI[.`d.rc*VPRR4p\PR8XdYVPRR4P4pV'd \ V4MV!4R, R, pVRV,, #V!4RV,, #) zRThe platform default that *environ* names, with the literal data-directory suffix.HERMES_DATA_DIR_SUFFIXwin32 LOCALAPPDATAAppDataLocalhermes.hermes)r%sysplatformstripr)r3r4suffix local_appdatabases&& r_platform_default_hermes_homerD3su [[12 6F ||w NB7==? &3tM"y9PSZ9Zx&()) ;)f, --rc$V^8dQhR\/#rrr)rs"rrr=s@@4@rcR\\P\P4#)zCReturn the platform default with the literal data-directory suffix.)rDr-r3rhomerr!_get_platform_default_hermes_homerJ=s (TYY ??rc$V^8dQhR\/#rFr)rs"rrrBs%%t%rc^RIp\VP\P!44P 4# \ \\\3d\\44u#i;i)zThe OS account's home from the password database, never ``$HOME``: harnesses and profile isolation repoint HOME (root under ``sudo`` has uid 0 too, which keeps the #108674 remap). Falls back to the shared real-home resolver where pwd cannot answer.N) pwdrgetpwuidr-getuidpw_dir ImportErrorKeyErrorOSErrorAttributeError get_real_home)rMs r _account_homerVBsO%CLL-4455 7N ;%MO$$%s:=.A.-A.c$V^8dQhR\/#rFr)rs"rrrMs w wT wrca\4o\P!4P4SP48HpV'd \ 4#\\PV3Rl4# \\ 3dRpLEi;i)aThe platform default of the OS ACCOUNT, never of a foreign process ``HOME``. Host service identities (``systemctl --user`` units, LaunchAgents) belong to the account, and their definitions are found under the account home. A process started with ``HOME=`` used to call ``/.hermes`` native, name the bare ``hermes-gateway`` unit, and stop the account's real gateway through it. When the process HOME is the account home the two answers are the same home. Fc<S#NrI)accountsr-account_default_hermes_home..Zsnur) rVrrHresolverS RuntimeErrorrJrDr-r3)samer[s @raccount_default_hermes_homeraMsooGyy{""$(9937 , .v.__annotate__wstrc@<S'g \R4h\S4#)zno user profile folder) LookupErrorr)profilesrr4.hermes_root_for_environment..user_homews67 7G}r HERMES_HOMEcd<SVPVP4P4,#rZ)group lastindexupper)matchnamess&rr\-hermes_root_for_environment..s E%++eoo:V:\:\:^4_r~NNN)~/z~\)itemsrzr%r>r?r@rD_ENV_REFERENCEsub startswithrrsr is_absoluterk) r3keyrr4rawrcexpandedrdr|rts & @@rhermes_root_for_environmentrks3:--/ B/JCSYY[% / BEii)@ fbQWWYG ))M2 & , , .C3E9E  !%%&_ade s?h11-@@9;'(2,6HH~H5=5I5I5K5K?; 1UQUU' C sD1D7-AD77 EEc2V^8dQhR\R,/#r"r)rs"rrrs4$;rch\\R4'd\P!4^8wdR#\PP RR4P 4pV'dVR8XdR#^RIp\VPV4P4R, # \dR#i;i)aThe invoking user's native ``~/.hermes`` when this process is root under ``sudo``, else None. sudo strips HERMES_HOME and sets HOME=/root, so the process's own default is root's; the profile store and the system service being operated on belong to SUDO_USER. geteuidN SUDO_USERr7rootr=) hasattrr-rr3r%r@rMrgetpwnamrPrR) sudo_userrMs rsudo_invoker_default_homers 2y ! !RZZ\Q%6 {B/557I  V+CLL+223i?? s7*B"" B10B1cV^8dQhRR/#r"rI)rs"rrrsTrc8\'dR#Rs\4pVR, pVP4'd!VPRR7P 4MRpV'dVR8wdRV: R X R V: R 2p\P!\4;_uu_4\PPVR ,4\PP4RRR4R#R#R# \ \ 3dRpLi;i +'giR#;i) z`Warn once when HERMES_HOME is unset but a non-default profile is sticky-active (wrong fallback).NTactive_profileutf-8encodingr7r zB[HERMES_HOME fallback] HERMES_HOME is unset but active profile is z. Falling back to u', which is the DEFAULT profile — not z. Any data this process writes will land in the wrong profile. The subprocess spawner should pass HERMES_HOME explicitly (see issue #18594). )_profile_fallback_warnedrJexists read_textr@UnicodeDecodeErrorrS contextlibsuppress Exceptionr>stderrwriteflush) fallback_home active_pathactivemsgs r_warn_profile_fallback_oncers  $9; #&66 DODVDVDXDX&&&8>>@^`&I% #5m_E..4Z8" #   + + JJ  S4Z ( JJ   , +&v  (, + +sA C/AD/DD D c$V^8dQhR\/#rFr)rs"rrrs%%%rc\4pV'd \V4#\PP RR4P 4'g \ 4\4#)uUHermes home: context-local override → ``HERMES_HOME`` env var → platform default.rvr7)r(r1r-r3r%r@rget_process_hermes_homer&s rget_hermes_homersE')H"8,, ::>>- , 2 2 4 4#% " $$rcTV^8dQhR\\,R,R\/#rr+)rs"rrrs##*t+src Ve \V4M \4p\V4p\P V4pVeV#VP 4pVP RR7p\PP\T44pT\T&T# \d<\PP\TP RR744u#i;i)afStable registry key for a Hermes home/profile dir. ``strict=False`` so profiles whose directories don't exist yet still get a key. The resolved value is remembered per input path. A directory that does not exist yet is resolved without touching the cache, because the answer can change once it is created (e.g. part of the path turns out to be a symlink). TstrictF) rrr_HOME_KEY_CACHEr%r.r^rSr-rnormcase)r candidatercachedrresolvedrs& rhermes_home_keyrs#.T O4EI i.C   %F  ##%HE##4#0 ''  3x= )COC J EwwH$4$4E$4$B CDDEsBACCcV^8dQhRR/#r"rI)rs"rrrsTrc.\P4R#)zJForget every remembered home key (for tests that move a home dir on disk).N)rclearrIrrreset_hermes_home_key_cachersrc$V^8dQhR\/#rFr)rs"rrrs T T Trc\PPRR4P4pV'd \ V4#\ 4#)aHermes home of the running process, ignoring task overrides. For process-level assets (theme YAML, dashboard plugin manifests) that must stay visible while a request is scoped to another profile (e.g. embedded ``/chat`` under ``--open-profile``). Follows ``HERMES_HOME`` live on purpose: routed-profile DECISIONS compare against :func:`get_routing_process_hermes_home` instead (#119242). rvr7)r-r3r%r@r1rJ)vals rrrs8 **.. + 1 1 3C'* s #S0Q0SSrcLV^8dQhR\\,R,RR/#rr+)rs"rrrs'FF#*t"3FFrc,VfRsR#\V4sR#)aPin the home this process serves as its own profile, for "is this task routed?" decisions. An embedding host that serves several profiles and mirrors the active turn's profile into ``os.environ["HERMES_HOME"]`` for legacy readers (Hermes WebUI) otherwise makes every turn's own profile look like the launch profile: ``agent.secret_scope.serves_routed_profile()`` turns False and that turn's MCP connections fall back to bare, cross-profile names; the sibling launch-home checks (``secret_scope._is_process_home``, ``tools.environments.local._is_routed_home``, ``hermes_cli.env_loader._process_hermes_home``) misjudge the same way. ``None`` clears the pin. Process-global on purpose: it names the process's own identity, not a per-task value. It is NOT folded into :func:`get_process_hermes_home`: :func:`get_hermes_home` falls back to that for tasks carrying no override, and the host's mirror exists precisely so those readers see the served profile. Hosts that never mutate ``HERMES_HOME`` need not call this (no-op). N)r_PINNED_PROCESS_HERMES_HOMEr0s&rpin_process_hermes_homers +/,$CIrc$V^8dQhR\/#rFbool)rs"rrrs33t3rc\RJ#rZ)rrIrrprocess_hermes_home_is_pinnedrs &d 22rc$V^8dQhR\/#rFr)rs"rrrsPPPrcH\pV'd \V4#\4#)z`Launch home for routed-profile decisions: the pinned home, else :func:`get_process_hermes_home`.)rr1r)pinneds rget_routing_process_hermes_homers (F*0 v &O6M6OOrnode downloads connectorsrHcTV^8dQhR\\,R,R\/#rrHNrr+)rs"rrr(s#  S4Z$%6 $ rcx\4pVe\V4P4M-\PP RR4P4pV'd \ V4MRp\V4Ve \V4MR3p\pVeVR,V8Xd V^,#\W4p.VOVN5sV#)zDRoot of an explicit home, or the process home when none is supplied.Nrvr7:NrN) rJrr@r-r3r%r1_default_hermes_root_memork)rHrcenv_homerdmemo_keymemoresults$ rget_default_hermes_rootr(s45K$($4s4y "**..XZ:[:a:a:cH08"8,dHK 83G#h-RPH $D DH0Aw [ 3F 3( 3F 3 Mrz.deletedc0V^8dQhR\R\/#)r profiles_dirrrr)rs"rrr=s4DrcaVPoSPR8XdR#V\, P4'gI\;QJd#V3Rl\ 4F 'gK RM RM!V3Rl\ 44'dR#SPRR7\4PRR78H# \ dL;i;i \ dR#i;i)zTrue when *profiles_dir* is provably ``/profiles``. Accepts the classic ``~/.hermes`` layout, a root carrying Hermes-home marker files, a ``profiles/.deleted`` tombstone dir (only ``profile delete`` creates it), or the default root. r=Tc3R<"TFpSV, P4xK R#5irZ)r).0markerrs& r +_is_hermes_profiles_root..Gs&B 3GTF] " " $ $3Gs$'Fr) rirj_DELETED_PROFILES_DIRis_dirany_HERMES_HOME_MARKERSrSr^r)rrs&@r_is_hermes_profiles_rootr=s   D yyI 0 0 8 8 : :ccB 3GB cccB 3GB ? ? ? ||5|)-D-F-N-NV[-N-\\\     s5 B< B<B<)!B<,C < C  C  CCcTV^8dQhR\\,R\R,/#rrrNr+)rs"rrrSs"  S4Z D4K rc&\V4pV.VPOFrpVPPR8XdAVPP R4'g \ VP4'dVu#VPR8XgKqR# R#)aReturn ``/profiles/`` when *path* is that home or under it. Requires ```` not to start with ``.`` and the ``profiles`` parent to be a real Hermes home; a default home whose path merely contains a ``profiles`` segment is not a named profile. rf.r=N)rparentsrirjrr)rcurrentrs& rnamed_profile_homerSsw 4jG00    ! !Z / 8Q8QRU8V8V,Y-=-=>>  >>Y & 1 rcbV^8dQhR\\,R,R\R,/#rr+)rs"rrrcs'd T 1cDjrcVe \V4P4'gR#\V4P4p\ 4pWP RR73FpW28XgW2P RR78XdR#\ V4pVeVPu#VPPR8XgK\VPPR4'dKVPu# R# \\\3dR#i;i)a Return the canonical profile id owning *path*, or ``None`` when it is not a profile home. The default home is the Hermes root itself, so its basename is an installation detail (``.hermes`` on POSIX and commonly ``hermes`` on Windows), not the profile id ``default``. NFrr rfr) rr@rr.rr^rrjrirrSr_rh)rr default_rootrnameds& rprofile_name_for_homercs  |3t9??,,4j##%G .0 !??%?#@AI(I9M9MUZ9M9[,[ &y1E zz!$$ 29>>;T;TUX;Y;Y ~~%B  \: .s0=C.?C.C.9C. C.*C..DDc0V^8dQhR\R\/#r profile_homerr)rs"rrr}sKKK$KrcRVP\, VP, #rZ)rirrjrs&rprofile_tombstone_pathr}s   !6 69J9J JJrcFV^8dQhR\\,R\/#rrrr)rs"rrrs??3:?$?rcF\\V44P4#rZ)rrrrs&rnamed_profile_is_deletedrs !$|"4 5 < < >>rz^[a-z0-9][a-z0-9_-]{0,63}$cFV^8dQhR\\,R\/#rr)rs"rrrs"rrS4ZrDrrca\V4o\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)c3<"TF;pSV, P4;'gSV, P4xK= R#5irZ)is_file is_symlink)rrrHs& rr-named_profile_has_identity..s8qWpVv &&(HHTF],F,F,HHWps "A ATF)rr_PROFILE_IDENTITY_MARKERSrrHs&@rnamed_profile_has_identityrs:  D 3qWpq33q3q3qWpq qqrcFV^8dQhR\\,R\/#rr)rs"rrrscDjTrc \V4p\FfpW, pVP4'dR#VP4'd,VR8wg VP 4P ^8dR#KfKh R# \ dKzi;i)uStricter than :func:`named_profile_has_identity`: is this dir a profile a host should change its own posture for? An EMPTY ``.env`` is all a crashed ``hermes profile create`` leaves behind, and it is enough for ``named_profile_has_identity``. Listing such a shell is harmless; counting it as a second tenant is not — it flips the whole host's credential reads fail-closed at the next boot. Every other marker, and a non-empty or symlinked ``.env``, still counts. T.envF)rrrrstatst_sizerS)rrHrrs& r#named_profile_has_servable_identityr s}  D+} ??   ||~~6V#3tyy{7J7JQ7N8O~ ,    sA> &A>> B  B cFV^8dQhR\\,R\/#rr)rs"rrrs"eed eterc\V4pVP4;'d$\V4;'d\V4'*#)a A resolvable named profile: an existing dir with identity that has not been deleted. ``-p``/``--profile`` resolution and ``profile_exists`` share this so a stale ghost shell can never be started as a backend (whose ``ensure_hermes_home`` would rebuild the full tree).)rrrrrs& rnamed_profile_is_liver s:  D ;;= d d7= d dF^_cFdBddrc>V^8dQhR\\,RR/#rrrNr+)rs"rrrs55S4Z5D5rc\\V44pVPPRRR7VP RRR7R#)Trexist_okzdeleted rrN)rrrimkdir write_text)rrs& rmark_named_profile_deletedrs; #D$6 7F MMt4 kG4rc>V^8dQhR\\,RR/#rr+)rs"rrrs"GGcDjGTGrcN\\V44PRR7R#)T) missing_okN)rrunlinkrs&rclear_named_profile_deletedrs4 -.555Frc>V^8dQhR\\,RR/#rr+)rs"rrrs  t  rc\V4pVe9\V4'gVP4'g\RV R24hR#R#)z1Refuse missing or tombstoned named profile homes.Nz#Named profile home does not exist: z0. Create the profile explicitly before using it.)rrrFileNotFoundError)rrHs& rassert_named_profile_home_liversO d #D 5d;;4;;==1$8= =  DQrcFV^8dQhR\\,R\/#r*r+)rs"rrrs  #*  rcT\V4p\V4^RIHpV!VRRR7V#)zECreate *path*, but never materialize a deleted/missing named profile.) make_user_dirTr)rrhermes_dir_aclr!)rtargetr!s& rmkdir_under_hermes_homer$s) $ZF"6*-&$6 MrcVV^8dQhR\R\R,R\R\/#)renv_varr Nsubdirrr+)rs"rrrs2jj3jjcjdjrc\P!VR4P4pV'd \V4#VeV#\ 4V, #)uResolve a package-manager-relocatable directory. Order: *env_var* (Nix wrapper / explicit override) → caller ``default`` (source checkout) → ``/``. r7)r-getenvr@rr)r&r r'r's&&& r _packaged_dirr*sA yy"%++-H%4>ig6I7iO`ciOiirc>V^8dQhR\R,R\/#rr Nrr)rs"rrrs"OOTD[ODOrc\RVR4#)zHReturn the optional-skills directory, honoring package-manager wrappers.HERMES_OPTIONAL_SKILLSzoptional-skillsr*r s&rget_optional_skills_dirr0s 17V^8dQhR\R,R\/#r,r)rs"rrrs"KK4$;K$Krc\RVR4#)zaReturn the optional-mcps directory, honoring package-manager wrappers (``HERMES_OPTIONAL_MCPS``).HERMES_OPTIONAL_MCPSz optional-mcpsr/r s&rget_optional_mcps_dirr4s // JJrc>V^8dQhR\R,R\/#r,r)rs"rrrs"EED4KE4Erc\RVR4#)zcReturn the bundled skills directory, honoring package-manager wrappers (``HERMES_BUNDLED_SKILLS``).HERMES_BUNDLED_SKILLSskillsr/r s&rget_bundled_skills_dirr9s 0'8 DDrcVV^8dQhR\R\R\R,R\/#)r new_subpathold_namerHNrr+)rs"rrrs3 R R Rs RTD[ RTX RrcpT;'g \4pW!, p\V4'dV#W , #)uaResolve a Hermes subdirectory, honouring a populated legacy ``/`` (no migration). An empty legacy dir does NOT count (install scaffolds, manual mkdir) so it cannot shadow the new path. A bare empty ``/`` directory does **not** count as "the legacy install is in use" — install scaffolds, manual ``mkdir`` work, and cleared-then-abandoned locations all create empty stubs that would otherwise silently shadow real data populated at ``/``. See #27602 for the pairing-store regression where a dormant empty ``pairing/`` orphaned approved-user data in ``platforms/pairing/``. )r_legacy_path_has_content)r;r<rHold_paths&&$ rget_hermes_dirr@s3  $ $?$DH/998Qt?QQrcTV^8dQhR\R,R\\,/#r)rlist)rs"rrrs&eet etDzercT;'g \4R, p\PR8Xd WR, .#VR, V.#)zGHistorical layout for old-updater diagnostics, never runtime selection.rr8bin)rr>r?)rHnode_dirs& riter_hermes_node_dirsrFsA)))V3H+.<<7+BH& 'dTYIY[cHddrnpmnpxznode.execFV^8dQhR\R\\,/#)rcommandrrrB)rs"rrrs"WW3W49Wrc\V4Pp\PR8wgRV9dV.#\P VP 4V R2V R2V.4#)r8r.cmd.exe)rrjr>r?_WINDOWS_NODE_SHIMSr%lower)rJrCs& r_candidate_node_command_namesrQsW =  D ||w#+v  " "4::Run a hidden ``--version`` probe; ``None`` when it cannot run.N)windows_hide_flagscapture_outputTtimeout creationflags) subprocesshermes_cli._subprocess_compatrUrunrSTimeoutExpiredrh)rSkwargsrYrUs&, r_run_version_prober^ seD~~  !% /1 ASAU Y_   Z.. ;s#*A  A c0V^8dQhR\R\/#r*rr)rs"rrrs99C9D9rcf\VR.\4R7pVRJ;'dVP^8H#)zJTrue when `` --version`` exits 0 under the Hermes-managed Node PATH.z --version)envN)r^with_hermes_node_path returncode)rrs& r_version_probe_okres5 { 39N9P QF   8 8&"3"3q"88rc0V^8dQhR\R\/#r*r`)rs"rrr&s==c=d=rc\PPV4;'d&\P!V\P4#)zG``exists()`` follows symlinks, so a dangling link never spawns a probe.)r-rraccessX_OKr0s&r_is_executable_filerj&s, 77>>$  < V^8dQhR\R,R\/#rr`)rs"rrr+s//S4Z/D/rcV'gR#\PR8Xd\V4P4M \ V4pT;'d \ V4#)zXTrue only when *path* is a Node/npm/npx binary that actually runs (``--version`` probe).Fr8)r>r?rrrjre)rpresents& rnode_tool_runnablern+sB &)llg&=d4j  "CVW[C\G  . .(..rc>V^8dQhR\R,R\/#rr)rs"rrr3s"ll4$;l$lrcaRUUu.uFp\V4Fq"NK K uppo\;QJd(V3Rl\V44F 'gK R# R#!V3Rl\V444#uuppi)zERead-only legacy artifact detection for already-running old updaters.c3b<"TF$pSFq!V, P4xK K& R#5irZ)r)r directoryrjr|s& rr3hermes_managed_node_tree_present..6s.k=X ej]aD ))++ej+=Xs,/TF)rrGrH)rQrrF)rHcnr|s& @r hermes_managed_node_tree_presentrv3sf. Y.18UVW8X1Q8XQ. YE 3k=RSW=Xk33k3k3k=RSW=Xk kk ZsA3c>V^8dQhR\R\R,/#)rrJrNr#)rs"rrr9s&&#&#*&rca\S4o\;QJdV3RlR 4F 'gK RM RM!V3RlR 44'dO\PR8Xd$\ S4P 4'dS#R#\ P!S4#SP4pR FpVPV4pK RRRRRR/PV4pVe^R I H pV!V4pVeVPfR#VR8wd\VP4#\R4FCpVPPV, pVP 4'gK8\V4u# R#\PR8wd\ P!S4#\ P"PR R 4P%\ P&4Uu.uFq'gK VNK p p\S4FCpV F:p \ V 4V, pVP 4'gK-\V4uu# KE R#uupi)abRead PM's selected Node/npm/npx; ``None`` when PM has not installed it. Never falls back to the user's PATH copy (callers ``pm.ensure`` on ``None``): mixing toolchains breaks native-addon ABIs and npm caches. Explicit executable paths remain caller-owned. Discovery never installs, probes, repairs, or activates the retired ``HERMES_HOME/node`` layout. c3,<"TF qS9xK R#5irZrI)rseprJs& rr'find_node_executable..Bs 1[c'>[TFr8NrrGrH)installed_packagePATHr7)/\)rMrNz.ps1)rrr>r?rrshutilwhichrP removesuffixr%pmr}binaryrQrir-r3splitpathsep) rJrCrA package_namer} installedrjrd directoriesrrs f rfind_node_executabler9s'lG s 1[ 1sss 1[ 111 <<7 ""7m33557 ?4 ?||G$$ ==?D*  (+FE5%?CCDIL(%l3   0 0 8 5=y''( (1%8D!((//$6I  ""9~%9 ||w||G$$ jjnnVR8>>rzzJPJa11JKP-g6$IY$.I  ""9~%%7  Qs  I*IcV^8dQhR\\\3,R,R\\\3,/#rrbNrdictr)rs"rrrbs/((tCH~4(S#X(rc"^RIHpV!RVR7#)zFCompose installed PM npm and its Node dependency without provisioning.)env_forrG)base_env)rr)rbrs& rrcrcbs 53 ''rc>V^8dQhR\R,R\/#rr`)rs"rrris" A At A ArcRV'gR#\V4;'d \V4#)u|True when *path* is an agent-browser CLI that runs (``--version`` exits 0). Dead/wrong-arch/hung binaries are rejected so callers try the next candidate. A bare presence check (``shutil.which`` / ``Path.exists``) is not enough: agent-browser's npm ``postinstall`` re-points a *global* install symlink (e.g. ``/opt/homebrew/bin/agent-browser``) at our local ``node_modules/agent-browser/bin/...`` binary, which then disappears on the next ``hermes update`` — leaving a **dangling symlink** that ``which`` still reports but exec fails on with exit 127 (issue #48521). Callers that trust such a path silently break every browser tool. F)rjrer0s&ragent_browser_runnableris#  t $ @ @):4)@@rc0V^8dQhR\R\/#r*r)rs"rrrys4DrcVP4p\P!VP4'dVP4p\P !TP4'gR#\TP44R# \dR#\ dR#i;i \dR#\ dR#i;i)zTrue iff *path* is a non-directory file or a populated directory. Non-not-found ``OSError`` means "assume occupied" (never orphan legacy data). Symlinks are judged on their target; a dangling one does NOT count. FT) lstatrS_ISLNKst_moderrSS_ISDIRnextiterdir StopIteration)rsts& rr>r>ys  ZZ\ << # #B << # #  T\\^        s@5B B 1B+ B(B(#B('B(+ C9CCCc>V^8dQhR\R,R\/#r)rr)rs"rrrs  dTk S rcVf \4pRVP\P!44P 4,# \ d\ T4u#i;i)a User-facing ``~/`` display string for HERMES_HOME (``~/.hermes/profiles/coder``). ``home`` overrides the lookup for callers that run before the CLI has applied the sticky ``active_profile`` (``get_hermes_home()`` would emit the wrong-profile fallback warning there). r)rrgrrHas_posixrhrrHs&rdisplay_hermes_homersT  | d&&tyy{3<<>>> 4ys8A A"!A"c$V^8dQhR\/#rFr#)rs"rrrs??c?rcV\\44pV'dVR8wdRV R2#R#)aR``-p `` (trailing space) pinning copy-pasteable ``hermes ...`` guidance to the active NAMED profile, else ``""``: a bare ``hermes`` follows the sticky ``active_profile`` file, which can name a different database than the one that failed (#105887). A custom home outside the profile tree has no selector (only HERMES_HOME names it).r z-p  r7)rrrjs rprofile_cli_selectorrs- !!2 3D TY%6Sa=>B>rc(V^8dQhR\RR/#rr)rs"rrrs  D T rcVPP4pV\R48Xg\VP4^8dR#V\ 8Xg\ VP 9d1^RIpVP\4PRV\ 4R#\P!\4;_uu_4\P!VR4RRR4R# +'giR#;i)z`Chmod ``0o700`` on *path*'s parent, refusing ``/`` and top-level dirs (misresolved HERMES_HOME).rNzNot restricting permissions on %s: it is inside the hermes-agent install directory (%s). Credential files are normally stored under the hermes home directory instead.)rir^rlenparts _INSTALL_ROOTrlogging getLogger__name__warningrrrSr-chmod)rrirs& rsecure_parent_dirrs [[ "F cc&,,/!3-6>>"A(#++ GHNP]    W % %  & % % %s 9C C, c>V^8dQhR\R,R\/#rr#)rs"rrrs%%#*%%rc^T;'gRP4pV'gR#\PP\PP \PP V444# \ d#\PPT4u#i;i)zDReturn a comparable absolute path string, or ``""`` for empty input.r7)r@r-rrabspathr.r)rrs& r_norm_home_pathrsv ::2   C %ww0B0B30G HII %ww$$%sAA??*B,+B,cnV^8dQhR\\\3,R,R\R,/#rr)rs"rrrs/AADcNT1AS4ZArc4\4;'g:T;'g/PR4;'g\P!R4pV'gR#\ \ V4R, 4p\P PV4'dV#R#)zEReturn ``{HERMES_HOME}/home`` when the profile-home directory exists.rvNrH)r(r%r-r)rr1risdir)rb hermes_homers& r_profile_home_pathrsn*,jj 0NjjRTR[R[\iRjK *;7&@AL77==66<@D@rcXV^8dQhR\R,R\R,R\/#)rrNrrr`)rs"rrrs.lld l#*llrcj\T;'d"T;'d\V4\V48H4#rZ)rr)rrs&&r_is_profile_homers-  jjljjy/I_]iMj/j kkrcjV^8dQhR\\\3,R\R\R\/#)rrbrr rr)rs"rrrs6@@$sCx.@s@S@#@rc\VPV4;'g\P!W44P 4#)zCStripped *key* from *env*, falling back to the process environment.)rr%r-r)r@)rbrr s&&&r_env_getrs/ swws|66ryy6 7 = = ??rcvV^8dQhR\\\3,R,R\\,/#r)rrrB)rs"rrrs+((DcNT$9(T#Y(rc,T;'g/p\VR4\VR4.p\P!\4;_uu_4^RIpVP VP \P!44PP44RRR4VP \VR44\VR4\VR4rCV'dTV'dLTP VPR4'dV V 2M\PPW444\PPR4pVR8wdVP V4VUu.uFqf'gK VNK up# +'giL;iuupi) z5Return likely OS-user home candidates in trust order.HERMES_REAL_HOMEroNrn HOMEDRIVEHOMEPATHr~)rr)rrrrrMappendrNr-rOrPr@rrjoinr.)rb candidatesrMdriverrrts& r_iter_real_home_candidatesrs% ))C3 23Xc65JKJ   Y ' '#,,ryy{3::@@BC (hsM233 ,hsJ.G4 dook.J.JUGD6*PRPWPWP\P\]bPijww!!#&H3(#! 'z!QAAz '' ( ' (sAE>' F5F> F c`V^8dQhR\\\3,R,R\/#rr)rs"rrrs'tCH~,rc,\V4p\4p\V4FDp\V4pV'dWB9dKVP V4\ W14'dKBVu# ^RIpVP4# \\3dR#i;i)zThe OS user's real home, avoiding the Hermes profile HOME. ``HOME`` belongs to the OS account and external CLIs keeping credentials under ``~``; a parent already running with ``HOME={HERMES_HOME}/home`` is repaired back when possible. N/tmp) rrrraddrtempfile gettempdirr_rS)rbrseenrrrs& rrUrUs &c*LUD/4 i(ck    88  5""$$ ' "s.A>>BBisolatedrtrz profile-homehostrealuser real_homez real-homecnV^8dQhR\\\3,R,R\R,/#rr)rs"rrrs+T#s(^d2cDjrcT;'g/p\V4p\VRR4P4;'gRp\P W"4pVR8XdV#\ V4p\VR4p\ V4\ V48wdTMRpVR8XdV#V'd\4'dV#V'd\WA4'dV#R#)zSubprocess ``HOME`` override, or ``None``. ``auto``: hosts keep real HOME (repairing a profile-home parent), containers use ``{HERMES_HOME}/home``; ``real``: always real HOME; ``profile``: always the profile home. TERMINAL_HOME_MODEautortroNr) rrrP_HOME_MODE_ALIASESr%rUr is_containerr)rbrmoder current_homerepaireds& rget_subprocess_homers ))C%c*L C-v 6 < < > H H&D  ! !$ -D yc"IC(L+I6/,:WWy]aH v~  +LGG rcJV^8dQhR\\\3,RR/#)rrbrN)rr)rs"rrr!s#  >#s(#;  rcx\V4pV'dWR&\V4pV'dW R&\V4R#)zApply Hermes' subprocess HOME contract to *env* in-place: ``HOME``/``HERMES_REAL_HOME`` per the home mode, and the temp vars re-pointed at ``env["HERMES_HOME"]``'s scratch dir.rroN)rUrapply_scratch_tmp_env)rbrrHs& rapply_subprocess_home_envr!s6c"I"+  s #D F #rHERMES_SCRATCH_DIRz .last_pruneic$V^8dQhR\/#rFr#)rs"rrrDs  C rc^RIp\PR8XdR#VP4p\ V4\ 8:g&\ PPR4'gV#R#)zTemp root short enough for AF_UNIX sockets. The scratch dir usually fits; macOS ``TMPDIR`` never does and a deep profile home may not, so those fall back to the OS default root for sockets only (everything else stays in the scratch dir).Ndarwinr) rr>r?rrSOCKET_TMPDIR_MAX_LENr-rr)rrs rsocket_safe_tmpdirrDsL ||x##%I 9~..bggmmF6K6K rnixosbrewhomebrewcbV^8dQhR\\,R,R\R,/#rr+)rs"rrr`s'S4Z$.#*rc\P!RR4P4P4;'gRpVe \ V4M \ 4R, pVfGVP 4'd1VPRRR7P4P4pVeV\9g V\9dR#VR8Xg V\9d\#V# \dRpLEi;i)uReturn the package manager owning this install, if any. Signals: HERMES_MANAGED env var (systemd service) or a ``.managed`` marker file in HERMES_HOME (NixOS activation script — interactive shells don't see the service env). An unreadable or empty marker still counts as managed (the legacy NixOS shape). ``home`` names the home whose marker file is read, for callers that already resolved it (:func:`get_scratch_dir` at boot, before ``--profile`` re-homes the process). Defaults to the effective home.HERMES_MANAGEDr7Nz.managedrreplace)rerrors) r-r)r@rPrrrrrS_IGNORED_MANAGED_VALUES_MANAGED_FALSE_VALUES_MANAGED_TRUE_VALUES_LEGACY_MANAGED_SYSTEM)rHrmanaged_markers& rget_managed_systemr`sYY' , 2 2 4 : : < D DF$($4d4j/:KzYN ~.//11 #--wy-QWWY__aF~#::fH]>] |v!55%% M  F s9/C C.-C.c$V^8dQhR\/#rFr)rs"rrrws  T rc\PPR4'g&\PPR4'dR#\4#)uBContainer/chmod-skip detection: the ``HERMES_CONTAINER``/``HERMES_SKIP_CHMOD`` operator overrides on top of the canonical :func:`_detect_container` signals (same breadth as :func:`is_container` — Docker/Podman/LXC/Kubernetes, cgroup and root-mountinfo). The cached :func:`is_container` itself is deliberately avoided: it ignores these env overrides and is computed only once per process, so tests could not flip it. Volume-mounted config is not forced to owner-only in containers: gateway and dashboard may run as different UIDs, or the mount itself needs broader permissions.HERMES_CONTAINERHERMES_SKIP_CHMODT)r-r3r%_detect_containerrIrr_container_or_chmod_skippedrws7 zz~~())RZZ^^:rc\\PR8XdR#RRlpV!R4V!R43#)aRead HERMES_UID / HERMES_GID (set by Docker deployments); (None, None) if unset/invalid/Windows. The entrypoint chowns HERMES_HOME once, but subdirs created at runtime (``profiles//``) need the same chown or they land root:root and block later uid-mapped workers. Docker containers running Hermes commonly set these to map the in-container user to a host user so volume-mounted state files end up with the right ownership. See #34107. r8c>V^8dQhR\R\R,/#)rrjrN)rr)rs"rr-_resolve_hermes_uid_gid..__annotate__sssTzrc\\PPVR4P 4;'gR4# \ \ 3dR#i;i)r7N)rr-r3r%r@ TypeErrorrhrs&r_env_int)_resolve_hermes_uid_gid.._env_intsI rzz~~dB/557??4@ @:&  s9AAAA HERMES_UID HERMES_GID)NN)r>r?)r s r_resolve_hermes_uid_gidrs2 ||w L !8L#9 99rcV^8dQhRR/#r"rI)rs"rrrs   $  rc\4wrVfVfR#\P!YeTMRVeTMR4R# \\\ 3dR#i;i)a<Chown ``path`` to ``HERMES_UID:HERMES_GID`` when set; EPERM/ENOENT are non-fatal (the entrypoint's startup chown -R fixes ownership on the next restart). Used by :func:`apply_secure_dir_policy` to keep ownership consistent across all directories created by ``ensure_hermes_home`` on Docker deployments. See #34107. N)rr-chownrSrTNotImplementedError)ruidgids& r_chown_to_hermes_uidrsT'(HC {s{  os2cosSUV ^%8 9   s#=AAcLV^8dQhR\\,R,RR/#rr+)rs"rrrs#!!3:+<!!rc\V4eR#\PPRR4P 4p\ 4'dV'g\ V4R#\T;'gR^4p\P!W4\ V4R# \dRpL3i;i \\3dL3i;i)uQApply the canonical Hermes home-directory permission policy to *path*. Owner-only ``0700`` by default, but the operator's explicit and managed sharing choices win (#117347): managed installs are left exactly as the package manager / activation script set them (#77579); in a container only an explicit ``HERMES_HOME_MODE`` is applied (a bind-mounted data dir is often shared with sibling containers, #10757); elsewhere ``HERMES_HOME_MODE`` (e.g. ``0701``, ``2770``) is passed to the host's ``chmod``. Special bits may be cleared by the host filesystem (macOS commonly clears setgid on directories whose group the caller does not belong to). ``HERMES_UID`` / ``HERMES_GID`` ownership is applied when those env vars are set (#34107). ``home`` (keyword-only: both arguments are path-likes) names the home whose managed-mode marker is read, for callers that already resolved it; without it the effective home is consulted. Import-safe twin of ``hermes_cli.config._secure_dir`` (which delegates here), so callers outside the CLI package — like :func:`get_scratch_dir` — share one policy implementation. NHERMES_HOME_MODEr7700r) rr-r3r%r@rrrrhrrSr)rrH explicit_moders&$ rapply_secure_dir_policyrs&$+JJNN#5r:@@BM"$$]T"=))E1-    ( )   s*$ B2B;B1 B.-B.1CCpruneTc`V^8dQhR\\,R,R\R\/#)rrHNrrr)rs"rrrs*#*t+ddrc Ve \V4M \4pVR, R, pVPRRR7\PR8wd \ W2R7T'd \T4T# \ dL"i;i)ac``/cache/scratch`` (created, owner-only); *home* defaults to the active Hermes home. Every Hermes process and child gets ``TMPDIR``/``TMP``/``TEMP`` pointed here at boot (see :func:`export_scratch_tmp_env`), so ``tempfile`` defaults land here without call sites knowing. Entries idle for ``SCRATCH_MAX_IDLE_HOURS`` are pruned at most once per process and once per hour across processes (stamp file), so a fan-out of children stays cheap. Permissions follow :func:`apply_secure_dir_policy`, so an explicit ``HERMES_HOME_MODE`` or a managed/shared home is honored instead of a blanket ``0700`` (#117347). cachescratchTrr8r)rrrr>r?rrS_prune_scratch_dir_once)rHrrCr#s&$ rget_scratch_dirr%sv)4:/@DWny(G  dT 2 <<7 " $G 7 ( N    s4A44 BBcJV^8dQhR\R,R\R\/#)rr#Nmax_idle_hoursr)rfloatr)rs"rrrs+ a atd{ a5 afi arc^RIHpVeTM \RR7pVPPR, R, pV!W1\ \ 04V4#)aqDelete top-level scratch entries with no write anywhere in their subtree for *max_idle_hours*, reaping processes and git worktree registrations rooted in them first (``hermes_constants_scratch``); return the count removed. Each removal, each kill and each entry rescued mid-prune is recorded in ``/logs/scratch-prune.log`` (*scratch* is ``/cache/scratch``).)prune_idle_entriesFrlogszscratch-prune.log)hermes_constants_scratchr*r%ri frozenset_SCRATCH_PRUNE_STAMP)r#r'r*rlog_files&& rprune_scratch_dirr1sK <)7U/KD{{!!F*-@@H dI?S>T4UW_ ``rc(V^8dQhR\RR/#)rr#rNr)rs"rrrs##T#d#rc\'dR#Rs^RIpV\, pVP4VP4P, \ 8dR#\P!\4;_uu_4VP4\V4RRR4R# \ dLUi;i +'giR#;i)NT) _scratch_pruned_oncetimer/rst_mtime_SCRATCH_PRUNE_INTERVAL_SECONDSrSrrrtouchr1)r#r5stamps& rr$r$s * *E 99;.. .1P P  Q   Y ' ' '" ( '    ' ' 's8B&B7& B43B47 C c>V^8dQhR\R,R\/#)rr#Nr)rr)rs"rrrsTD[Crc VeTM \RR7p^p\P!VRR7F~wr4pVFrp\P!\ 4;_uu_4V\P !\PPW644P, pRRR4Kt K V# +'giK;i)zMTotal bytes under the scratch dir (for ``hermes doctor``); 0 when unreadable.NFr+cR#rZrI)_es&rr\)scratch_dir_usage_bytes..s$r)onerror) r%r-walkrrrSrrrr )r#rtotaldirpath _dirnames filenamesrjs& rscratch_dir_usage_bytesrEs)7U/KD E)+)O%ID$$W--"'',,w"=>FFF.-*P L.--s AB2 2 C cRV^8dQhR\\\3,R\/#)rrbr)rrr)rs"rrrs#~c3h7DrcVP\R4p\F6pVPVR4P4pV'gK-W18wgK5R# VPRR4P4p\ \ V'd \ V4M \444p\FpYPT&K YP\&R# \\3dR#i;i)uPoint ``TMPDIR``/``TMP``/``TEMP`` in *env* at the scratch dir of ``env["HERMES_HOME"]``. A temp var the user (or the OS: macOS ``/var/folders``, Windows ``%TEMP%``) set is respected and nothing changes. A value Hermes itself exported earlier — recognisable because it equals ``HERMES_SCRATCH_DIR`` — is re-derived, so a child running under another profile's home gets that home's scratch dir rather than its parent's. Returns True when the vars were (re)written. r7FrvT) r%SCRATCH_DIR_MARKER_ENVSCRATCH_TMP_ENV_VARSr@rr%r1rr_rS)rboursrrrHr#s& rrrs 77)2 .D#R &&( 5U]$ 77=" % + + -Do4&9$&?MdMfgh $C$")  ' "s8/CCCc$V^8dQhR\/#rFr)rs"rrr*src^\\P4pV'd ^RIpRVnV#)aBoot hook: apply :func:`apply_scratch_tmp_env` to this process and reset ``tempfile``'s cached default so ``tempfile.gettempdir()`` follows. Call again after anything that re-homes the process (``--profile`` resolution); a user-set temp var is never overridden.N)rr-r3rtempdir)changedrs rexport_scratch_tmp_envrO*s%$BJJ/G Nrc2V^8dQhR\R,/#r")r)rs"rrr8sdTkrcVeVRJdR#\V\4'd]VPRR4RJdRR/#\VPR4;'gR4P 4pV'dRRRV/#R#\V4P 4P 4pVR9dRR/#V\ 9dRRRV/#R#)uTParse a reasoning effort level into a config dict. ``None`` for empty/unrecognized input (caller uses the default); ``{"enabled": False}`` for "none"/"false"/"disabled"/YAML False — ``reasoning_effort: false`` must mean disabled. The dict form ``{"enabled": true, "effort": ""}`` passes ``effort`` through verbatim so providers with bespoke thinking tiers (``fast``/``thinking`` relays) can be asked for their real level; bare strings stay strict so a typo like ``hgih`` never reaches the wire. The wire layer already tolerates unknown names (``agent.reasoning_effort.clamp_effort``). NTenabledFeffortr7>nonefalsedisabled) isinstancerr%rr@rPVALID_REASONING_EFFORTS)rSlevels& rparse_reasoning_effortrZ8s~4&$ ::i &% /u% %FJJx(..B/5575: 451DD [   & & (F ..5!! ((4622 rcFV^8dQhR\R\\,/#)rmodelrrK)rs"rrrSs""S"T#Y"rc aaaaa a RoRo\4o .o V V 3RloVVV3RlpV!V4VPR4p\V4^8dV!VR ,4\V4^8dV!RPVR,44R pS Uu.uFpRV9gK VNK upFoS!V3RlV4!K R pS Uu.uFqDP R4^8XgKVNK upFoS!V3RlV4!K S #uupiuupi) zSpelling variants for tolerant override matching, exact first, deduped in order. Dot/dash recovery runs on EACH base form so ``x-4.5``, ``x-4-5`` and ``x.4.5`` share one variant set. c2\P!RRV4#)z (\d)-(\d)z\1.\2rerss&rr\+_canonical_model_variants..XsRVVL(A>rc2\P!RRV4#)z (\d)\.(\d)z\1-\2r_ras&rr\rcYsRVVM8Q?rc<VF8pV'gK VS9gKSPV4SPV4K: R#rZ)rr)valuesvrvariantss* r_add'_canonical_model_variants.._add]s/AqQd] "rc <VPRR4VPRR4r!S!WVS!V4S!V4S!V4S!V44R#)r-N)r)rbdasheddottedri _dash_to_dot _dot_to_dashs& r_add_with_derivatives8_canonical_model_variants.._add_with_derivativescsF3,aiiS.A Q Qa,vBVXdekXlmrrrc30<"TF q RS 2xK R#5irNrI)rproviderrgs& rr,_canonical_model_variants..qsAX1QC c30<"TF q RS 2xK R#5irtrI)raggrgs& rrrvts9'8as|'8rwr) anthropicopenaigoogle openroutergroqmistralxaicohere perplexitytogether fireworksdeepseek)r}opencoderr~r)rrrrcount) r\rqrknown_providersrgknown_aggregatorsrirorprrhs & ` @@@@@r_canonical_model_variantsrSs ?L?LUDH# n% KK E 5zQeBi( 5zQchhuRy12O" 2AS\aa 2 AAB3S! 7AWWS\Q%6aa 7 9'89:8 O 38s D"DD $D cXV^8dQhR\R\R,R\R,/#)rr\ overridesNrrr)rs"rrrxs*  c dTk dUYk rca V'd\V\4'd V'gR#\V4pVF$pW19gK \W,4pVfK"Vu# \ V4o VP 4FwrV\V\ 4'dRV9dK$VPR4p\VR,4p\V4^8d)V\RPVR,44, p\;QJdV 3RlV4F 'gK RM RM!V 3RlV44'gK\V4pVfKVu# R#)uPer-model reasoning_effort override with spelling tolerance; first non-None parse wins. Order: exact → dots↔dashes → provider stripped → aggregator stripped → known prefixes added → reverse lookup of prefixed keys whose stripped forms match (custom provider slugs are not enumerable, so a key like ``ollama-local/qwen3.6:27b`` must still match the bare ``qwen3.6:27b`` model string a fallback swap feeds after stripping the prefix). Nrrc3,<"TF qS9xK R#5irZrI)rform variant_sets& rr5resolve_per_model_reasoning_effort..s9yt{"yr|TFr) rWrrrZrrrrrrr) r\rrhvariantrrrr key_formsrs && @r"resolve_per_model_reasoning_effortrxs Jy$77u(/H  +I,>?F! h-KOO%#s##s#~  #-eBi8 u:? 2388E"I3FG GI 39y93339y9 9 9+C0F! & rcJV^8dQhR\R\R,R\/#)rr\modelsNrr)rs"rrrs%  c 4$; 4 rcV'd\V\4'g/#\V4F.pVPV4p\V\4'gK,Vu# /#)z``provider_routing.models.`` entry for *model*, spelling-tolerant like ``reasoning_overrides``; ``{}`` when none matches. Only the keys a user sets per model are returned so unset ones fall through to the flat ``provider_routing`` values.)rWrrr%)r\rrentrys&& r"resolve_per_model_provider_routingrsN  6400 ,U3 7# eT " "L4 IrcXV^8dQhR\R,R\R\R,/#)rcfgNr\rr)rs"rrrs)$+c4$;rc\V\4'dTM/p\VPR4\4'dVPR4M/pV'gVPR4p\V\4'd5VPR4;'gVPR4;'gRp\V\4'dVP 4MRp\ YPR4;'g/4pVeV#VPRR4p\ V4pV'dM\V4P 4'd.Vf*^RIpVP\4PRV4V#) zEffective reasoning config for *model*: per-model override, then global ``agent.reasoning_effort``. Single chokepoint for every surface (CLI, gateway, TUI, cron, ``/model``, fallback activation). agentr\r r7reasoning_overridesNreasoning_effortz5Unknown reasoning_effort '%s', using default (medium)) rWrr%rr@rrZrrrr)rr\ agent_cfg model_cfg per_modelrSrrs&& rresolve_reasoning_configrs C&&#BC$.swww/?$F$F BI GGG$ i & &! i0PPIMM'4JPPbI%/ 3%?%? !R25--H]:^:d:dbdeI]]-r 2F #F +F #f+##%%&.(#++,cekl Mrc$V^8dQhR\/#rFr)rs"rrrs4rc^RIHpV!4#)zcDelegate Termux detection without making the bootstrap constants module depend on the full package.) is_termux)hermes_platform.host.runtimerdetects rrrs @ 8Orc$V^8dQhR\/#rFr)rs"rrrsrc^RIHpV!4#)z`Delegate WSL detection without making the bootstrap constants module depend on the full package.)is_wsl)rrrs rrrs = 8Orc$V^8dQhR\/#rFr)rs"rrrsdrc^RIHpV!4#)zfDelegate container detection without making the bootstrap constants module depend on the full package.)r)rrrs rrrs C 8Orc$V^8dQhR\/#rFr)rs"rrrs4rc^RIHpV!4#)zCKeep the historical test seam while delegating canonical detection.)r)rrrs rrrs H 8Orc>V^8dQhR\R\R,/#rr#)rs"rrrs"ffcfcDjfrc \P!R\T;'gR4P44pV'dNRVP ^4P 4 RVP ^4P \^\4R4 2#R#)zKConvert a Windows drive path (``C:\...``) to its ``/mnt//...`` form.z^([A-Za-z]):[\\/](.*)$r7z/mnt/rN)r`r{rr@rxrPrchr)rr{s& rwindows_path_to_wslrsm HH.DJJB0E0E0G HEV[U5;;q>'')*!EKKN,B,B3r7C,P+Q Reaeerc>V^8dQhR\R\R,/#rr#)rs"rrrs"FFFd Frc\T;'gR4P4PRR4p\P!RV\P 4pV'd)RVP ^4PRR4,#R#)zTConvert a ``\\wsl.localhost\\...`` (or legacy ``\\wsl$``) UNC path to POSIX.r7rrz)^\\\\wsl(?:\.localhost|\$)\\[^\\]+\\(.*)$N)rr@rr`r{ IGNORECASErx)r normalizedr{s& rwsl_unc_path_to_posixrseTZZR&&(00d;J HHA:r}} ]E6;3Q''c2 2EErc0V^8dQhR\R\/#)rcwdrr#)rs"rrrs  s s rcp\4'gV#\\3FpV!V4pVfKVu# V#)zMap a Windows-host cwd (drive path or ``\\wsl.localhost\`` UNC) to POSIX when Hermes runs in WSL. No-op off WSL and for paths already POSIX. )rrr)r translator translateds& rtranslate_cwd_for_wsl_backendrs= 88 ,.AB _  ! C Jrc$V^8dQhR\/#rFr)rs"rrrs---rc$\4R, #)z5Return the path to ``config.yaml`` under HERMES_HOME. config.yamlrrIrrget_config_pathrs  } ,,rc$V^8dQhR\/#rFr)rs"rrrs(((rc$\4R, #)z:Return the path to the skills directory under HERMES_HOME.r8rrIrrget_skills_dirrs  x ''rc$V^8dQhR\/#rFr)rs"rrrs&&d&rc$\4R, #)z7Return the path to the ``.env`` file under HERMES_HOME.rrrIrr get_env_pathrs  v %%rc(V^8dQhR\RR/#)rforcerNr)rs"rrrs+++$+rcaaV'gR#^RIo\SPRR4'dR#SPoRVV3RllpRVnVSnR#)aMonkey-patch ``socket.getaddrinfo`` to prefer IPv4 when *force* is True. Broken-IPv6 hosts hang on AAAA for the full TCP timeout; ``AF_UNSPEC`` resolves as ``AF_INET``, falling back to full resolution when no A record exists (pure-IPv6 hosts still work). N_hermes_ipv4_patchedFc <V^8XdS!WSPW4V4#S!WW#WE4# SPdS!YY#YE4u#i;i))AF_INETgaierror)rportfamilytypeprotoflags_original_getaddrinfosockets&&&&&&r_ipv4_getaddrinfo0apply_ipv4_preference.._ipv4_getaddrinfos] Q; U,TV[\\%TuLL?? U,TuTT Us)AAT)rrrr)rgetattr getaddrinfor)rrrrs& @@rapply_ipv4_preferencersR v!!#95AA"..MM.2**Frzpartial-stream-stublengthzhttps://openrouter.ai/api/v1z/modelsc>V^8dQhR\R\R,/#)rmodel_idrNr#)rs"rrr7sccDjrcT;'gRPR4wrpV'd V'gR#VP4\9dV#R#)uReturn the base model id when ``model_id`` carries a recognized OpenRouter routing-variant suffix (e.g. ``x-ai/grok-4:nitro`` → ``x-ai/grok-4``), else ``None``. Lives here rather than in ``hermes_cli.models`` so the metadata layer (``agent.model_metadata``) can share one definition without importing the CLI — this module is dependency-free by contract. >>> openrouter_variant_base("x-ai/grok-4:nitro") 'x-ai/grok-4' >>> openrouter_variant_base("x-ai/grok-4:free") is None True >>> openrouter_variant_base("x-ai/grok-4") is None True r7:N) rpartitionrPOPENROUTER_VARIANT_SUFFIXES)rrCrzrAs& ropenrouter_variant_baser7s> "R33C8Dv d ||~44 rzhttps://ai-gateway.vercel.sh/v1windowsc>V^8dQhR\R,R\/#rrNrrr)rs"rrrRs..td{.d.rc ^RIHpV!WR7#)RFrozen updater surface: pre-PM updaters import this name; pm.environments owns it.) venv_bin_dirr)pm.environmentsr)venv_dirrr^s&$ rrrRs7 8 --rc2V^8dQhR\R,/#r"r)rs"rrrYsdTkrca\V4o\V3RlR4R4pVeV#\\P4p\\4P 4P SP 48XdW\P\P8wd4\V4P4'd\VS4'dV#R#)uThe project's ``venv`` or ``.venv`` dir when one exists (``uv venv`` defaults to ``.venv``); for an install whose interpreter lives outside the checkout, the running interpreter's venv. ``uv venv`` defaults to ``.venv`` while our installers create ``venv``, so both layouts are in the wild. Call sites that only knew about ``venv`` silently no-oped on a ``.venv`` install — that is how the Windows shim-lock preflight skipped itself entirely (#79542). ``venv`` wins when both exist, matching what the installers write. Installers that keep the interpreter out of the checkout (``$HERMES_HOME/venvs/``, the layout the shipped Windows launchers assume) have neither, and the ``project_venv_dir(root) or root / "venv"`` idiom those call sites share then handed ``uv`` a ``VIRTUAL_ENV`` that does not exist: that one invented path skipped the import probe, reclassified every ``hermes tools`` dependency as missing and failed the reinstall with interpreter errors (#116148). The interpreter running this module is the only truthful answer to "which venv is live", so fall back to it — but only for the checkout it was loaded from. A foreign root (test temp dir, another clone) still resolves to ``None``: handing it someone else's venv would point the callers' writes at the wrong environment. c3t<"TF-pSV, P4'gK"SV, xK/ R#5irZ)r)rrurs& rr#project_venv_dir..ls*O&7D1H;L;L;NHD1HH&7s88N)venvz.venv) rrr>prefix__file__r^ri base_prefixvenv_python_pathr_venv_installs_checkout) project_rootin_treerunningrs& @rproject_venv_dirrYs$  DO&7OQUVG3::G X ''4<<>9 coo- )1133'66 rc<V^8dQhR\R\R\/#)rrrrr)rs"rrrzs!$dtrc^RIp^RIHp^RIHp^RIHp^RIHpV!R\V!V44.R7FpVPR4pTPT;'gR 4PR R 4p T PR 4'gKY\T!T!T 4P 44P#4TP#48XgKR # R# \dKi;i)aIs *venv*'s own ``hermes-agent`` installed from *root*? Where this module was loaded from does not answer that: ``PYTHONPATH= /bin/python`` runs one checkout's code on another install's interpreter, and adopting that venv made a dev checkout's update rewrite the Desktop install's venv into an editable install of the dev tree. Every install of a checkout into a venv (installers, ``uv sync``) records the source tree in ``direct_url.json``. N) distributions)urlparse) url2pathname) site_packagesz hermes-agent)rjrzdirect_url.jsonz{}urlr7zfile:TF)jsonimportlib.metadatar urllib.parserurllib.requestrrrrrloadsr%rhrrrr^) rrrrrrrdistrrs && rrrzs0%+->]4=P9Q8RS ..!23C**S[[D)--eR8C >>' " "tL#9K9K,L'M'U'U'W[_[g[g[i'iT     s$C C C*)C*c>V^8dQhR\R,R\/#rr)rs"rrrs224$;2$2rc ^RIHpV!WR7#)r) venv_pythonr)rr)rrrs&$ rrrs+ x 11rc>V^8dQhR\R,R\/#)rrjNrr`)rs"rrrs"[[d [t[rcV'd"\V4PR4^,MRp\V4;'d#V\9;'gVP R4#)zbTrue when *name* ships with Hermes (exact first segment; ``startswith`` would claim ``agentops``).rr7hermes_)rrrFIRST_PARTY_MODULE_ROOTSr)rjrs& ris_first_party_modulersF&*3t9??3  "D : Z Z4#;;YYty?YZrcFV^8dQhR\R\\,/#rexcr) BaseExceptionrBr)rs"rrrs  ] tCy rc\V\4'd3\V\4'g\\ VRR44'g.#.RO#)zORecovery guidance lines when *exc* looks like a half-updated tree, else ``[]``.rjN)r7z`This looks like a partially-updated install: one module was refreshed and a related one was not.z>Re-run the update to bring the whole tree to the same version:z hermes updatezDIf that also fails, reinstall: https://hermes-agent.nousresearch.com)rWrQModuleNotFoundErrorrr)rs&rpartial_update_hintrsA sK ( (Jsr)rrlineslines&$ remit_partial_update_hintr"s?  $E 3%)5) d|>* rcbV^8dQhR\\,R,R\R,/#)rscopeNrr+)rs"rrrs+AA3:,AtArc$Ve \V4#R#)u Normalize a WRITE-side registry scope key, preserving ``None``. Two different contracts live on the same registries — do not unify them: * **Write / slot paths** (``register_*``, ``snapshot_registration``, ``restore_registration``, tool-registry slot lookup): ``None`` means the process-global layer and must stay ``None``. Use this function. * **Read paths** (``list_providers``, ``get_provider``): ``None`` means "the active home's scope" and must go through :func:`hermes_home_key` (falsy input resolves to the active default home). Using this function there hides every scoped registration — the exact bug fixed after e66a627aa5. Both normalize non-None values identically (resolved absolute path, normcase on Windows) so writes and reads agree on the key. N)r)r$s&rnormalize_scoper&s"&+%6?5 !@D@rc\V^8dQh/^\9d \;R&^\9d \\\,,;R&^\9d\ \R3,;R&^\9d \;R&^\9d\ \\3,;R&^\9d\R,;R&^\9d\\,;R &^\9d'\ \\\3,R,;R &^\9d\\,;R &#) rrr .INDICATOR_STYLESDEFAULT_INDICATOR_STYLErNrLOCAL_RUNTIME_ROOT_DIRSrr) __conditional_annotations__rrrobjectrrr.r)rs"rrrs'&$&"fez#,/e#*ML%S/L+,)((-T%$c3h$Ur/.S4Z.szTS3S{H ?>5c4047>I b)Ys^c)r)asciiemojir unicoderZ>rrruntimes)rrstate.db)rrzSOUL.mdz profile.yamlz auth.jsonr1)znpm.cmdznpm.exerG)znpx.cmdznpx.exerH)r7)TMPDIRTMPTEMP)true1yes>0nooffrU)minimallowmediumhighxhighmaxultra)F>floornitroexactoonline> clicronrtoolsutilsgatewaypluginstoolsets providers run_agent acp_adapter model_tools tui_gateway)r+__doc__rr-r`rrr>collections.abcrrr contextvarsrrpathlibrrr,rr r(r)rr r(r1rDrJrVrarkcompilerrrrrrrrrrrrrr.r*CONNECTOR_DOWNLOADS_SUBDIRrrrrrrrrrr PROFILE_ID_RErr r rrrr$r*r0r4r9r@rFrOrQr^rerr^rirrjrnrvrrcrr>rrrrrrrrrUrrrrIrHSCRATCH_MAX_IDLE_HOURSr/r7r4rrrrrrrrrrrr%r1r$rErrOrXrZrrrrrrrrrrrrrrrPARTIAL_STREAM_STUB_IDFINISH_REASON_LENGTHOPENROUTER_BASE_URLOPENROUTER_MODELS_URLrrAI_GATEWAY_BASE_URLrrrrrrrr"r&r)r+s@rr_s5  ==)!&& 2<=T^d2ee%ML((,' J > .@ % w IJV>&>%#%$4 T+/.F&3P+44R*SS"+|<;?>   #:,  4K?h 89 r,e5 G  jO K E R4 Re (%1NPVYcekXl W 9X&&(// = /l &R( A 2 ? *%Al@ (".!)^YXafffk6;X^`4 *1-$"&  ", $VZ$89""=>. :(  !t!HT4.2Ka a#"6X6"J F 4f F - ( & +4/4./w7/8*/ 08.T.B622%& [  Ar