+ Wj: Rt^RIHt^RIt^RIt^RIHt^RIHt^RI H t RHt RRlt RR lt R R R R R RRR/RRlltRRltRRI/RRlltRRltRRltRRltRRRRRR R R R!R"R#R/R$R%lltR&R'/R(R)lltRJR*R+lltR,R-ltR.R/ltR0R1ltR2R3ltR4R5R6R/R7R8lltR9R:ltR;R<ltR=R5/R>R?lltR@RAltRKRBRCllt RDRElt!RFRGlt"R#)LuShared skeleton for the ``_model_flow_*`` wizards: banner, credentials, model list, picker, persist, confirmation — one copy of each step. Prompt strings and the config keys written (and their insertion order = config.yaml key order) are behavior; keep them byte-identical. main_provider_setup / auth / config imports are lazy on purpose: main.py imports the flows (import cycle) and tests patch ``hermes_cli.config.load_config`` etc. at call time. ) annotationsN)urlparse) line_input) clear_model_endpoint_credentialsc V^8dQhRRRR/#) failure_classstrreturnNone)formats"WC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\model_setup_flows_common.py __annotate__rs//s/t/c"^RIHpV!V4R#)z`Why a flow returns without a pick, for the provider-setup metric (no-op outside a tracked flow).)note_provider_setup_failureN)-hermes_cli.observability.shared_metrics_setupr)rrs& r_note_setup_failurers Y .rc V^8dQhRRRR/#)rlinesr r r r )r s"rrrsrc:\RPV44R#)zE``print`` each line (``""`` = blank line); one call per banner block. N)printjoin)rs*r_sayrs $))E rsecretFraw cancel_msgz Cancelled. on_cancelc(V^8dQhRRRRRRRR/#)rpromptr rboolrr str | Noner )r s"rrr!s(DjrcV'd^RIHpMV'd\M\pV!V4P 4# \ \ 3dTe \T4Tu#i;i)zOne stripped prompt answer. ``raw`` uses builtin ``input`` (numbered fallbacks), ``secret`` the masked prompt, else ``line_input``. Ctrl-C/EOF prints *cancel_msg* (``None`` = silent) and returns *on_cancel*.)masked_secret_prompt)hermes_cli.secret_promptr%inputrstripKeyboardInterruptEOFErrorr)r!rrrrfns&$$$$ r_askr,!sS GUz&z!! x (  ! * s;"A A c V^8dQhRRRR/#)r provider_idr r tuple[str, str]r )r s"rrr2sBB#B?Brc^RIHpV!W4#)zCResolve an existing wizard credential without changing its storage.) _resolve_api_key_provider_secret)hermes_cli.authr1)r.pconfigr1s&& r _existing_api_key_for_model_flowr42s@ +K AAr missing_hintc V^8dQhRRRR/#)rr.r r ztuple[str, str, bool]r )r s"rrr8s ) )c )K` )rc^RIHp\W4wrEV'gVFp\V4K V!WWR7wrxWGV3#)zResolve the stored key, print *missing_hint* lines when none exists, then run ``_prompt_api_key`` (users can replace a stale key in-flow via K/R/C). Returns ``(existing_key, resolved_key, abort)``. )_prompt_api_key)r.existing_source)hermes_cli.main_provider_setupr8r4r) r.r3r5r8 existing_keyr9lineresolvedaborts &&$ r_ensure_flow_api_keyr?8sA ?$D[$Z!L  D $K!%gvOH 5 ((rcV^8dQhRR/#)rr tuple[dict, dict]r )r s"rrrGs$5rc^RIHpV!4pVPR4p\V\4'gV'dRV/M/pW!R&W3#)zHReturn ``(cfg, cfg["model"])`` with the model section coerced to a dict.) load_configmodeldefault)hermes_cli.configrCget isinstancedict)rCcfgrDs r_load_config_model_sectionrKGsD- -C GGG E eT " "&+E"G :rc$V^8dQhRRRRRR/#)rselectedr providerr rAr )r s"rrrRs"#9JrcD^RIHpV!V4\4wr4WR&W43#)zRecord *selected* as the model choice and open the config model section with ``provider`` set; callers set endpoint fields then ``_commit_model_config``.)_save_model_choicerN)r2rPrK)rMrNrPrJrDs&& r_begin_model_configrQRs)3x +-JC * :rc V^8dQhRRRR/#)rrJrIr r r )r s"rrr\sdtrc<^RIHp^RIHpV!V4V!4R#)z0Persist *cfg* and deactivate any OAuth provider.)deactivate_provider) save_configN)r2rTrFrU)rJrTrUs& r_commit_model_configrV\s3-rbase_urlapi_mode drop_base_url drop_api_mode clear_credsTfinishc8V^8dQhRRRRRRRRRRR RR RR R /#) rrMr rNrWr#rXrYr"rZr[r rIr )r s"rrrdsISCj[e"&?CZ^#'rc\W4wrVeW)R&VeW9R&V'dV PRR4V'd\WR7MV'dV PRR4Ve V!W4\V4V #)uSThe standard persist step: ``_save_model_choice`` → model section with ``provider``, ``base_url`` then ``api_mode`` (that order is the config.yaml key order) → scrub inline endpoint credentials (``clear_creds``; ``drop_api_mode`` also pops ``api_mode``) → *finish(cfg, model)* for extra sections → save + deactivate OAuth provider.NrWrX)clear_api_mode)rQpoprrV) rMrNrWrXrYrZr[r\rJrDs &&$$$$$$ r_persist_modelradst%X8JC$j$j *d#(M  *d# s Lr no_change No change.c$V^8dQhRRRRRR/#)rrNr donerbr )r s"rrr|s!cCrc ^V'g\V4R#\W3/VBp\V4V#)z``_persist_model`` + confirmation line when *selected*, else the no-change line. Returns the saved model section (None when nothing was selected).N)rra)rMrNrerb persist_kwrDs&&&$, r _finish_modelrh|s-  i 8 < `` and named by its own portal host (``hermes login`` no longer exists). Falls back to ``hermes model`` when no provider config is in play.c3v"TF/p\VR4'gK\VR4'gK+VxK1 R#5i)idportal_base_urlN)hasattr).0as& r '_login_retry_context..s'Zt!wq$'7AGAGX>+;+; .sxx~~/?.@A B E-8 9 3M?/R S )#XefD $Kgs. DACAC DD DD fresh_namerrecheckc(V^8dQhRRRRRRRR/#)r logged_inr"namer rr r )r s"rrrs)4ssjnrcJV'g\RV R2R4\V.VO5!#\RV R2R4\V R24pVR8XdR#VR 8XdP\R T;'gT R 2R4\V.VO5R R /'gR#VeV!4'g\R4R#R #)uLogin-or-reuse step for OAuth providers. Not logged in → start a login. Logged in → use / reauthenticate (``force_new_login``; *recheck()* must then report logged in) / cancel. Returns False when the flow must stop.zNot logged into z. Starting login...r u credentials: ✓z credentials:cancelFreauthzStarting a fresh z login...force_new_loginTz Login failed.)rr_prompt_auth_credentials_choicer)rrrrr login_argschoices&&&$$* r _oauth_gaters  v%8 92>(0Z002dV$ %r* ,v]-C DF    !3!3t 4I >C(FZFFF  wyy / " rc V^8dQhRRRR/#)rr.r r listr )r s"rrrs!!C!T!rc^RIHp.p\P!\4;_uu_4^RIHpV!V4pRRR4V'g.#W9dW13MW3wrVVUu/uFqwP4VbK pp/p .VOVOFApV PVP4VPVP4V44KC \V P44# +'giL;iuupi)alCurated ids first (our agentic picks lead, and models.dev lag can't hide new ones), then models.dev agentic models not yet listed (case-insensitive; models.dev's spelling wins since it comes from the provider). Live-first providers keep models.dev order ahead of curated, matching ``_profile_live_catalog``. Empty list when models.dev has nothing / is unavailable.)_LIVE_FIRST_PICKER_PROVIDERS)list_agentic_modelsN) hermes_cli.models_catalog_staticr contextlibsuppressragent.models_devrlower setdefaultrGrvalues) r.curatedr mdev_modelsrprimary secondarym canonicalmergeds && r_models_dev_mergedrs NK   Y ' '8)+6  (  3>3^+/eldzG'23{!A{I3F #w # #!'')Y]]1779a%@A$     ( ' 4sCC2 C/ cV^8dQhRR/#)rr r r )r s"rrrskkkrcJV'd\R\V4 R24R#R#)z Showing u= curated models — use "Enter custom model name" for others.N)rlen)rus&r _show_curatedrs! 3z?++hijr provider_namec$V^8dQhRRRRRR/#)rrWr rr r r )r s"rrrs#""c"UX"bf"rc^RIHpHp^RIHpHpT!Y;'gRR7Uu0uF*p\ V4P4P4kK, ppV'gR#V!R4p\V\4'gR#VP4EFwr\V \ 4'd4V PV4'dW9g\V \4'gKQV U u.uF3p \V \4'dV PR4R8XdK1V NK5 p p \V 4\V 48wgKV U u.uF^p \V \4'gKV PR4R8XgK3V PR4'gKL\ V R,4NK` p p V!WV R7EK" R#uupiuup iuup i \ dR#i;i) a Drop stale ``model_config`` ("the credential under ``model.api_key``") entries from inactive custom pools: after an explicit custom-endpoint switch an old pool still carrying that source points at the previous endpoint and could be selected before the fresh config.)CUSTOM_POOL_PREFIX#custom_provider_pool_key_candidates)read_credential_poolwrite_credential_poolN)rsource model_configr{) removed_ids)agent.credential_poolrrr2rrr r(rrHrIitems startswithrrGrr)rWrrrrrrnactive_pool_keyspoolspool_keyentrieseretainedrs&$ r/_prune_replaced_custom_model_config_credentialsrsaO;8ShShdhiki HNN  " " $i k $T*%&& !& Hx--**+=>>/!'400#*n7a:a3F3F155QY?^lKl7Hn8}G ,*1b*1Q!!T*!/0uuX./P!UVUZUZ[_U`!C$L'b&hkRR"/kob spG G0F9 G#GAG"G(.F>F>!G>GGG7GG&G9G GGc$V^8dQhRRRRRR/#)rtitler rowsr default_idxintr )r s"rrr&s!#TrcF^RIHpV!WV4# \dR#i;i)z``_curses_prompt_choice`` index, or None when curses is unavailable (piped stdin, non-TTY) so the caller can fall back to a numbered prompt.)_curses_prompt_choiceN)hermes_cli.setuprr)rrrrs&&& r_curses_choicer&s):$U+>> s   c$V^8dQhRRRRRR/#)rrr rrrrr )r s"rrr0s!c$Src ^RIHpV!W3RVRR/VB# \\\\ P 3dR#i;i)z``curses_radiolist`` index (-1 = cancelled), or None when curses is unavailable so the caller can fall back to a numbered prompt.)curses_radiolistrMcancel_returnsN)hermes_cli.curses_uir ImportErrorNotImplementedErrorOSError subprocessSubprocessError)rrrkwrs&&&, r _radiolistr0sH9\{\SU\Y[\\ ,gz7Q7Q Rs %>>c(V^8dQhRRRRRRRR/#) rrr rrrrr r r )r s"rrr:s(((3(d(((rc \V4\V^4F+wr4V^, V8XdRMRp\RV RV RV 24K- R#)u→ rz. N)r enumerate)rrrirowmarkers&&& r_print_numberedr:sI %LD!$q5[0c 6(!A3b&'%rc V^8dQhRRRR/#)rrr r r )r s"rrrAs==3=3=rc.R Op\W^4pVeV^8d\4R V,#\W^4\4\RRRRR7pR RR R/P VR4#) zPrompt for reuse / reauthenticate / cancel with the standard radio UI. Returns one of ``"use"``, ``"reauth"``, ``"cancel"``. Falls back to a numbered prompt when curses is unavailable (piped stdin, non-TTY). Nuserrz Choice [1/2/3]: T1)rrr23)zUse existing credentialsz Reauthenticate (new OAuth login)Cancel)rrr)rrrr,rG)rchoicesidxrs& rrrAsm YG  +C 3!8 *3//EA& G &DTS QF 3 ) - -fe <rs #!,>/ 5[i"B )B )4hl).FKae0, ) W8UWae*!*k "[]"J(=r