+ Wj a0t$Rt^RIHt^RIt^RIt^RIt^RIHt^RI H t H t ^RI H t HtHt^RIHtHtHtHtHtHtHtHtHt^RIHt^RIHtHtHtH t H!t!^R I"H#t#H$t$H%t%H&t&^R I'H(t(]PR!]*4t+R R lt,R Rlt-RRlt.RRRllt/RRlt0Rt1]Pd!R]Pf4t4Rt5R]6R&RRlt7RRlt8RRlt9!RR ]4t:/R!]:!R"R#4bR$]:!R"R%4bR&]:!R"R'4bR(]:!R"R(4bR)]:!R*R+4bR,]:!R*R,4bR-]:!R*R-4bR.]:!R*R.4bR/]:!R*R/4bR0]:!R1R04bR2]:!R2R34bR4]:!R5R44bR6]:!R7R64bR8]:!R8R84bR9]:!R9R94bR:]:!R;R:4bR<]:!R=R<4bR>]:!R?R>4R@]:!RAR@4RB]:!RCRB4RD]:!RERD4/Ct;RF]6RG&!RHRI]4t/t?RJ]6RN&RRORPllt@RsARQ]6RR&RsBRS]6RT&RURVltCRWRXltDRYRZltER[R\ltF]G!0Rm4tHR]R^ltI!R_R`]4tJRaRbRcRbRdRReRRfR/RgRhlltK] !RiRj44tL] !RkRl7!RmRn44tMRoRpRqRrRsRtRuRv/tNRwRaRxRy/tORzR{ltPERR|R}lltQR~tRRtSRtT]RR]SR]TR/tU] !RkRl7!RR44tVRRltWRRltXERRRlltYRRltZRRlt[!RR]\4t]RRlt^ERRRllt_ERRRllt`RRltaRRltbERRRlltcERRRlltdERRRllteRRltfRRltgRRlthRRltiRRltjRRltkRRltlRRltmRRltnRRltoRRltpRRltqRRltrRRltsRRlttRRltu] !RR44tvRRltwRRltxRRltyRRltzRRlt{RRlt|RRlt}RRlt~RRltRRltRRltRRltRRltRRltRRltRRltRRlt/]EPER]4C]EPER]4C]EPER]4CtR]6R&ER RRlltRRltER RRlltRRltRRltRRltRRltRRRlltRRltRRltR#( a`Shared model-switching logic for the CLI and gateway /model commands. Pipeline: parse flags -> alias resolution -> provider resolution -> credential resolution -> normalize model name -> metadata lookup -> build result. Provider switching uses ``--provider`` exclusively; colons are reserved for OpenRouter variant suffixes (``:free``, ``:extended``).) annotationsN)suppress) dataclassfield)Any NamedTupleOptional) LLAMACPP_ALIASES ProviderDefcustom_provider_aliasesdetermine_api_mode get_labelhost_mandated_api_mode is_aggregatornormalize_providerresolve_provider_full)normalize_model_for_provider)ModelCapabilities ModelInfoget_model_capabilitiesget_model_infolist_provider_models)base_url_host_matchesbase_url_hostnamebase_url_originfile_signature)list_authenticated_providersc V^8dQhRRRR/#)valuerreturn list[str])formats"KC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\model_switch.py __annotate__r%ssyc\V\4'dV.pMH\V\4'd RV4pM(\V\\34'd RV4pM.#.p\ 4pVF|p\V\4'gKVP 4pV'gK5VP4V9gKLVPVP44VPV4K~ V#)zaConfigured model IDs from ``{"id": {...}}``, ``["a", "b"]``, ``[{"id"|"name": ...}]`` or ``"a"``.c36"TFqR9gK VxK R#5i)__explicit_model_allowlist__N)r)__discovered_model_catalog__r").0ks& r$ &_declared_model_ids..$stA3s*saa c3h"TF(p\V\4'd \V4MTxK* R#5iN) isinstancedict_declared_item_id)r+items& r$r-r.&s*d^cVZD$1G1G'-TQ^cs02) r2strr3listtuplesetstriploweraddappend)r candidatesidsseen candidatemodel_ids& r$_declared_model_idsrCs% ' E4 tt ED%= ) )d^cd  CUD )S)) ??$ 8(4 HHX^^% & JJx   Jr&c V^8dQhRRRR/#)rr5r3r rr")r#s"r$r%r%5s\\D\S\r&cVPR4p\V\4'dVP4'dV#VPR4#)zQ``id`` of a ``[{"id": ...}]`` entry, falling back to ``name`` when blank/missing.idname)getr2r6r:)r5rBs& r$r4r45s<xx~H!(C00X^^5E5E8[488TZK[[r&c V^8dQhRRRR/#)rentryrr boolr")r#s"r$r%r%;s Y YC YD Yr&c\V\4'gR#VPR4pVPR4RJ;'g,\V\4;'dVPR4RJ#)uTrue when the entry's ``models`` mapping was auto-discovered by Hermes. Current shape: entry-level ``models_discovered: true``. Older versions wrote an in-mapping ``__discovered_model_catalog__: true`` sentinel — accepted on read (the next save migrates it).Fmodelsmodels_discoveredTr*)r2r3rH)rJrMs& r$_entry_models_discoveredrO;sh eT " " YYx F 99( )T 1 Y Y64 WWVZZ0N%OSW%WYr&c$V^8dQhRRRRRR/#)rrr discoveredrKr r")r#s"r$r%r%Gs!sr&cV'dR#\V\4'd\VP44#\V\\ 34'd\\ V44#R#)aTrue when ``models:`` is an intentional ID allowlist. A mapping like ``{model_id: {context_length: N}}`` is per-model *metadata* written by ``_save_custom_provider`` / the wizard, not a catalog narrow (treating it as one made GUI pickers show only the saved default for keyless Ollama while the CLI live-probed). List and string shapes remain allowlists for no-key endpoints; pin a dict catalog with ``discover_models: false``. A catalog Hermes itself persisted (``discovered``) is never a pin.F)r2r6rKr:r7r8rC)rrQs&&r$_models_config_is_allowlistrSGsM%EKKM""%$'''.// r&c V^8dQhRRRR/#)rcurrent_base_urlr6r zOptional[ProviderDef]r")r#s"r$r%r%Xs\\\8M\r&c R\V4pV'gR#\RRRR VRRRR7#) z=ProviderDef for a direct ``model.provider: custom`` endpoint.NcustomCustom endpoint openai_chatFapi_keyz model-config)rFrG transportapi_key_env_varsbase_urlr auth_typesourcer")_cleanr )rUr]s& r$_bare_custom_provider_defraXs6&'H   +}WY)N \\r&zNous Research Hermes 3 & 4 models are NOT agentic and are not designed for use with Hermes Agent. They lack the tool-calling capabilities required for agent workflows. Consider using an agentic model instead (Claude, GPT, Gemini, DeepSeek, etc.).z&(?:^|[/:])hermes[-_ ]?[34](?:[-_.:]|$)ztuple[str, ...]_OPAQUE_MODEL_PREFIXESc V^8dQhRRRR/#r model_namer6r r")r#s"r$r%r%wsr&c\F>pV'gK VPV4'gK&V\V4R;'gTu# V#)zZHuman-friendly form of *model_name* for CLI status output (display only, never wire-side).N)rb startswithlen)reprefixs& r$format_model_for_displayrjwsB( :*//77c&kl+99z 9) r&c V^8dQhRRRR/#)rrer6r rKr")r#s"r$r%r%sOO3O4Or&cR\T;'d\PV44#)z]True if *model_name* is a real Nous Hermes 3/4 chat model (single owner; cli.py uses it too).)rK_NOUS_HERMES_NON_AGENTIC_REsearchres&r$is_nous_hermes_non_agenticrps!  MM:AA*M NNr&c V^8dQhRRRR/#rdr")r#s"r$r%r%sSSCSCSr&c4\V4'd\#R#)zHWarning string if *model_name* is a Nous Hermes 3/4 chat model, else "".)rp_HERMES_MODEL_WARNINGros&r$_check_hermes_model_warningrus$>z$J$J RPRRr&c0]tRt^t$RtR]R&R]R&RtR#) ModelIdentityz:Vendor slug and family prefix used for catalog resolution.r6vendorfamilyr"N)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__r"r&r$rwrwsD K Kr&rwsonnet anthropicz claude-sonnetopusz claude-opushaikuz claude-haikuclaudegpt5openaizgpt-5gptcodexo3o4geminigoogledeepseekz deepseek-chatgrokzx-aillamaz meta-llamaqwenminimaxnemotronnvidiakimi moonshotaiglmzz-aistepstepfunmimoxiaomitrinityzarcee-aizdict[str, ModelIdentity] MODEL_ALIASEScV]tRt^t$RtR]R&R]R&R]R&RtR]R&RtR]R&R tR #) DirectAliasaExact model mapping that bypasses catalog resolution. ``api_key`` / ``key_env`` carry the alias endpoint's OWN credential. Without them the switch would keep the *default* provider's key, which 401s against the alias host and sends that provider's secret to an unrelated third party. Both default so positional ``DirectAlias(model, provider, base_url)`` keeps working. See #83612. r6modelproviderr]rsrZkey_envr"N) rzr{r|r}r~rrZrrr"r&r$rrs, JMMGSGSr&rdict[str, DirectAlias]_BUILTIN_DIRECT_ALIASESc V^8dQhRRRR/#rrrr r6r")r#s"r$r%r%s$$#$#$r&cH\T;'gR4P4#)uY``str(value or "").strip()`` — the config-field normaliser used throughout this module.rs)r6r:)rs&r$r`r`s u{{  ! ! ##r&DIRECT_ALIASESc V^8dQhRRRR/#)rcfgOptional[dict]r rr")r#s"r$r%r%s11n18N1r&c \\4pVf^RIHpV!4pVP R4p\ V\4'dVP 4FwrE\ V\4'gKVP RR4'gK7\VP RR4VP RR4VP RR4\VP R R44\VP R R44R 7WP4P4&K VP R/4p\ V\4'dVP R 4MRp\ V\4'EdVP RR4pVP 4EFwrIVP4P4p V 'dW9dK4\ V \4'd\V P R44p V 'd\T \V P R44;'g T;'gR\V P RR44\V P R R44\V P R R44R 7W&KK\ V \4'gEKV P4'gEK+V P4p R V 9dV PR ^4MW3wr\V P4V P4;'gTRR7W&EK V# \dT#i;i)uLoad direct aliases from config.yaml (or from the caller's *cfg* snapshot). ``model_aliases:`` entries are dicts (``model``, ``provider``, ``base_url``, optional ``api_key`` — literal or ``"${VAR}"`` — / ``key_env``); with neither credential field the key is resolved from the alias HOST, never from the previously active provider. ``model.aliases`` never overrides ``model_aliases``; its string entries (``ds-flash: deepseek/deepseek-v4-flash``) take the provider from the ``provider/`` prefix, else the current provider. See #83612. N load_config model_aliasesrrsrrWr]rZr)rrr]rZraliases/rrr])r3rhermes_cli.configrrHr2itemsrr`r:r;r6split Exception)rmergedr user_aliasesrGrJ model_sectionsimple_aliasescurrent_providerrkeyrvalrs& r$_load_direct_aliasesrs) *F$ ; 5-Cww/ lD ) )+113 eT**uyy"/E/E3>#ii4uyyU]?^!&:r!:F599U^`bKcDd &uyyB'? @4BF::<--/0 4, 9CMSW9X9X**95^b nd + +,00R@ -335 jjl((*cmeT**"599W#56E&1"'&:9N2O2o2oSc2o2ogo%+EIIj",E%F$*599Y+C$D$*599Y+C$D 'F   s++ ++-C;>#:ciiQ&7L\KbOH"-#kkmhnn6F6Z6ZJZeg#iFK 6& M   M s?A L.6L.FL.+ L.5A/L.*L.AL.L.. L=<L=Optional[tuple]_DIRECT_ALIAS_IDENTITYr_DIRECT_ALIAS_LOADEDcV^8dQhRR/#)rr rr")r#s"r$r%r% s---r&c^RIHpV!4pTP4p\ T4\ T43# \dR#i;i \d\ T4R3u#\dR#i;i)zSIdentity of the active profile's alias source; None means "do not reuse the cache".)get_config_pathN)hermes_constantsrrstatOSErrorr6r)rpathrs r$_direct_alias_source_identityr sv4 yy{ I~d+ ,,  !D 4  s, 6A AAA0"A0+A0/A0cV^8dQhRR/#rr Noner")r#s"r$r%r%s(((r&c\4p\'d!\\8wgVeV\8XdR#\ 4p\P 4\P V4Vs\V4sR#)zLoad direct aliases for the ACTIVE profile, caching per config identity. Mutates DIRECT_ALIASES in place (never rebinds) so ``from ... import DIRECT_ALIASES`` references in callers stay valid.N)rrrrrclearupdater3)identityloadeds r$_ensure_direct_aliasesrs] -.H~..  X1G%G ! #F&!%<r&c V^8dQhRRRR/#)raliasrr r6r")r#s"r$r%r%/s : : : :r&cLVP;'gRP4pVPR4'd4VPR4'd\ V^RP44#V'dV#\ VP ;'gRP44#)uSResolve a direct alias's own credential, or "" when it has none. Precedence: ``api_key: "${VAR}"`` (env indirection) > literal ``api_key`` > ``key_env``. Env reads go through the per-profile secret scope: a raw ``os.environ`` read hands this profile whatever key the process env holds — another profile's, under the multiplexed gateway.rs${})rZr:rgendswith_scoped_key_envr)rraws& r$direct_alias_api_keyr/s{ ==  B % % 'C ~~d S 1 1s1Ry011  EMM//R668 99r&c V^8dQhRRRR/#)rrrr ztuple[str, Optional[str]]r")r#s"r$r%r%=s o o o8Q or&cVP'dRMVP;'gR\V4;'gR3#)ue``(requested_provider, explicit_api_key)`` for resolving *alias*. Single owner of the invariant that a URL-bearing direct alias resolves its credential for the alias HOST, never for its provider label: a label like ``anthropic`` on an unrelated URL would otherwise reach that provider's explicit-runtime branch and put the live vendor token on the foreign wire. Bare ``custom`` is host-gated, so an authoritative URL still resolves its vendor key and a foreign one resolves none. An alias with no base_url keeps its label — there is no foreign host, and the label is the only routing information. See #28660. rWN)r]rr)rs&r$direct_alias_runtime_requestr=s5HU^^-G-GxK_`eKfKnKnjn nnr&c$V^8dQhRRRRRR/#)rsession_base_urlr6alias_base_urlr rKr")r#s"r$r%r%Ps" < .s`v$:%z%QU?VI[abgbkbklrbs[tI*3uyy/@/F/FB+GHH$:sA4A4A4!A4) custom_ids)rrrc3@"TFqP4xK R#5ir1r:r+parts& r$r-rs@.?dZZ\\.?)is_routing_aggregatorr)_find_openrouter_slugc3"TFpp\V\4'gK\VPR44'gK=RVPRR4P 4P 4 2xKr R#5i)rGcustom:rsN)r2r3r`rHr:r;)r+rJs& r$r-rs_B,E eT " :'-eii.?'@ :'%))FB'--/55789,sA:A:9A:)r)r`rrrrHr;rrr]rhermes_cli.modelsrhermes_cli.providersrrr2r3r6rrrrrrr:r)rrrrrrrrdirectalias_provider alias_keyrrrJrqualified_providerqualified_modelrirr _norm_provrrG configuredr canonicalrrs&$$$$$ @r$resolve_startup_model_routerfs  C  , 4n:N|:\G [[ %F  %6<=K>L$#L$c]tRtRt$RtR]R&RtR]R&RtR]R&R tR]R &Rt R]R &Rt R]R &Rt R]R &Rt R]R&Rt R]R&RtR]R&RtR]R&RtR]R&RtR]R&RtR]R&RtR]R&RtR]R&R tR]R&R tR]R&RtR#)ModelSwitchResultiz!Result of a model switch attempt.rKsuccessrsr6 new_modeltarget_providerFprovider_changedrZr]api_modeNrrequest_overrides error_messagewarning_message usage_noticeprovider_labelresolved_via_aliaszOptional[ModelCapabilities] capabilitieszOptional[dict[str, bool]]runtime_capabilitiesOptional[ModelInfo] model_info is_globalalias_endpoint_appliedr")rzr{r|r}r~rrrrrZr]rrrrrrrrrrr r!rr"r&r$rrs+ MIsOS"d"GSHcHc(,~,M3OSL#NC  04L-46:3:&*J#*It$)D(r&rT)frozencz]tRtRt$RtR]R&RtR]R&RtR]R&RtR ]R &Rt R ]R &Rt R ]R &Rt R ]R &Rt R#)ModelFlagParseResultiz"Parsed flags for a /model command.r6 model_inputrsrreasoning_effortFrKr  force_refresh is_sessionis_oncer"N) rzr{r|r}r~rrr&r r'r(r)rr"r&r$r$r$sI,scItM4JGTr&r$z--globalr z --sessionr(z --refreshr'z--oncer)z --providerz --reasoningr&c V^8dQhRRRR/#)rraw_argsr6r r$r")r#s"r$r%r%s[[[1E[r&c&\P!RRV4p\P\P 4R4p\P\ P 4R4p.p\VP44pVF]pV\9dRV\V,&K V\ 9d"\VR4;peWb\ V,&KLVPV4K_ \R RRPV4P4/VBVB#) a-Parse /model flags: ``--provider X``, ``--reasoning ``, ``--global``, ``--session``, ``--refresh``, ``--once``. ``--once`` is parsed here but interpreted by each caller (each frontend has its own live-session restore hook). ``is_global`` / ``is_session`` are raw flag presences; the effective persistence decision belongs to :func:`resolve_persist_behavior`. ``reasoning_effort`` is the raw level word (validated by :func:`hermes_constants.parse_reasoning_effort` at apply time) so a model pick and its effort travel as ONE request on every surface.zJ[\u2012\u2013\u2014\u2015](provider|reasoning|global|session|refresh|once)z--\1FrsTNr% r")resubr3fromkeys _BOOL_FLAGSvalues _VALUE_FLAGSiterrnextr=r$joinr:)r+flagsr2filteredtokenstokrs& r$parse_model_flags_detailedr;svvcelnvwH"]];+=+=+?GE!]]<+>+>+@"EFH (.." #F + &*E+c" # L tFD/A&Ae%N(-<$ % OOC  ZCHHX,>,D,D,F Z& ZTY ZZr&c ,V^8dQhRRRRRRRRRR/#)rr rKr(r)rr6r r")r#s"r$r%r% s4!!!!%!04!QT!^b!r&cV'g V'dR#V'dR#^RIHpV!4PR4p\ T\ 4'd`TPR4'gTPR4'gR#\ TPRR44'dR#T'dR#R#T'*# \dR#i;i)uDecide whether a ``/model`` switch should persist to ``config.yaml``. Order: ``--once`` / ``--session`` -> False; ``--global`` -> True; no default configured yet (neither ``model.default`` nor ``model.provider`` — a fresh install's first pick) -> True, so the pick does not evaporate into whatever ``*_API_KEY`` is lying around on the next launch; ``model.persist_switch_by_default`` -> True (the user's explicit opt-in to persistence); ``--provider`` without a persist flag -> False (exploratory). A flat-string ``model`` IS a configured default; an unreadable config -> False. 1. ``--once`` explicitly opts out → ``False`` (next turn only). 2. ``--session`` explicitly opts out → ``False`` (this session only). 3. 4. Applies to every surface (CLI, gateway, Desktop picker) so no client has to hardcode ``--global``. 5. ``model.persist_switch_by_default: true`` also covers provider picks (a pick between two providers sharing one ``base_url`` is tenant selection on the same backend, not exploration; session-scoping it silently serves the next chat with the other twin's key). 6. Without that opt-in, provider switches stay exploratory — the user is trying a different backend for this conversation, not reconfiguring the default. The key defaults to ``False`` (a plain ``/model `` affects only the current session); users who want the old persist-by-default behavior can set it to ``true``; a one-off ``--global`` always persists, and ``--session`` / ``--once`` always opt out. See #86414. FTrrdefaultrpersist_switch_by_default)rrrHrr2r3rK)r r(r)rr model_cfgs&&&& r$resolve_persist_behaviorrA s *1M%%g. )T"" i((IMM*,E,E  95A B B = sB66 CConce_with_globalonce_requires_target bad_reasoningz./model --once cannot be combined with --globalz+/model --once requires a model or provider.zO/model --reasoning takes none, minimal, low, medium, high, xhigh, max or ultra.c]tRtRt$RtR]R&R]R&RtR]R&RtR]R&R tR ]R &R t R ]R &R t R ]R &R t R ]R&Rt R]R&Rt R]R&]RRl4tRRltRtR#)ModelSwitchRequesti>aA fully parsed /model command request. ``scope`` is the *requested* persistence scope from the flags alone: ``"once"`` | ``"session"`` | ``"global"`` | ``"default"`` (the effective decision then belongs to :func:`resolve_persist_behavior`). ``errors`` carries ``MODEL_SWITCH_ERR_*`` codes rendered via :data:`MODEL_SWITCH_ERROR_TEXT`. ``model_input`` keeps it a drop-in for :class:`ModelFlagParseResult` consumers.r6rtargetrsrr&FrKr r(r)r'r>scoper8errorscV^8dQhRR/#rr r6r")r#s"r$r%ModelSwitchRequest.__annotate__SsSr&c VP#r1)rGselfs&r$r%ModelSwitchRequest.model_inputRs {{r&cV^8dQhRR/#)rr r7r")r#s"r$r%rLVsGGGr&c ZVPUu.uFp\V,NK up#uupi)z8Canonical (undercorated) error strings for this request.)rIMODEL_SWITCH_ERROR_TEXT)rOcodes& r$error_messages!ModelSwitchRequest.error_messagesVs':>++F+$'--+FFFs(r"N)rzr{r|r}r~rrr&r r(r)r'rHrIpropertyr%rUrr"r&r$rFrF>s0 H KscItJGTM4E3FE GGr&rFc V^8dQhRRRR/#)rrr6r rFr")r#s"r$r%r%[swww);wr&c \T;'gR4p\V4p.pVP'd(VP'dVP \ 4VP'd:VP 'g(VP'gVP \4VP'd0^RI H pV!VP4fVP \4\RRVP3RVP3RVP334R4p\R RVR VP R VR \!V4/R Uu/uFpV\#W4bK upB#uupi)aThe ONE parser for every /model surface: tokenization plus flag-conflict validation. ``--once`` + ``--global`` -> ``MODEL_SWITCH_ERR_ONCE_WITH_GLOBAL``; ``--once`` with neither a model nor ``--provider`` -> ``MODEL_SWITCH_ERR_ONCE_REQUIRES_TARGET``; an unknown ``--reasoning`` level -> ``MODEL_SWITCH_ERR_BAD_REASONING``. Targets pass through untouched (bare names, ``vendor/model``, ``vendor:model``) for :func:`switch_model`.rs)parse_reasoning_effortc3>"TFwrV'gKVxK R#5ir1r")r+rGons& r$r-*parse_model_switch_args..os%M(F84IK$(Fs  oncerglobalr>rrGrHrIr")rr&r r(r)r')r6r;r)r r=!MODEL_SWITCH_ERR_ONCE_WITH_GLOBALr%r%MODEL_SWITCH_ERR_ONCE_REQUIRES_TARGETr&rrZMODEL_SWITCH_ERR_BAD_REASONINGr5r(rFr8getattr)rparsedrIrZrHfs& r$parse_model_switch_argsrf[sU ciiR.C ' ,FF ~~~&*** 78 ~~~f0009Q9Q9Q ;< ; !&"9"9 : B MM8 9 M(@9fN_N_B`)163C3C(D(FMNW YE  w  w** w27 w@Ef  wu vtq gf t v ww vsE" c V^8dQhRRRR/#rr")r#s"r$r%r%ws@@c@c@r&c\V\4'dVP4#\V\4'd\ VP R44#\ VRR4pVe \ V4#R#)z?Extract a model-name candidate from a str / dict / attr-object.rNrs)r2r6r:r3r`rHrc)r model_attrs& r$_effective_model_candidaterjws_%{{}%eii()).J!+!76* ?R?r&c(V^8dQhRRRRRRRR/#)rsession_overridesrchannel_config global_configr r6r")r#s"r$r%r%s,   36 NQ [^ r&cJWV3Fp\V4pV'gKVu# R#)a7Resolve the effective model: session override > channel > global. Single owner of the precedence rule gateway/run.py and api_server.py each used to encode. Each argument may be a model string, a dict with a ``"model"`` key, or an object with a ``.model`` attribute; empty entries fall through to the next tier.rs)rj)rlrmrntierrAs&&& r$resolve_effective_modelrqs.#MB.t4 9 C r&c$V^8dQhRRRRRR/#)rrBr6rir r8r")r#s"r$r%r%s!::c:3:5:r&cV\V4RPR4PR4P4p\ V4wr4VP 4PR4P4p\ ;QJd.RV4FNK 5M !RV44p\RV4RR7pVR8XdR MR V)3pVR 9d^M^p WiV3,V,#) zSort key preferring higher versions after the family prefix, then ranked suffix tokens. With prefix ``"mimo"``: ``mimo-v2.5-pro`` -> (-2.5, 0, 'pro'), ``mimo-v2.5`` -> (-2.5, 1, ''), ``mimo-v2-omni`` -> (-2.0, 1, 'omni').Nr--_.c38"TFqR8gK V)xK R#5ii%!Nr"r+ns& r$r-"_model_sort_key..s;Dq NDs c36"TFqR8gK VxK R#5irwr"rxs& r$r-rzs9Ajaar/)r>g?)r|r|)promaxplusturbosolastra)rh removeprefixlstripr:_split_version_suffixr;r8r~) rBrirestnums suffix_bufsuffix version_key date_stampdate_key suffix_ranks && r$_model_sort_keyrs CKL ! . .s 3 : :3 ? E E GD,T2D     % %e , 2 2 4F %;D;%%;D;;K993GJ'3.zS:+4FH !PP!VWK v. . 99r&c V^8dQhRRRR/#)rrr6r ztuple[list[float], str]r")r#s"r$r%r%s"""(?"r&caa.oR^uopRVV3RllpV\V48dW,pVR9d V^, pK*VR9gVP4'gMVR9d V^, pV\V48d`W,P4'gW,R8Xd7W,R8XdRS9d V!4MSW,, oV^, pKoV!4V\V48gKW,R9gKSWR3#) z``"v2.5-pro"`` -> ``([2.5], "pro")``; ``"-omni"`` -> ``([], "omni")``. Version tokens are ``v``-optional digit/dot runs separated by ``-``/``_``; a second dot inside a run starts a new component; the first character that is neither starts the suffix.rscV^8dQhRR/#rr")r#s"r$r%+_split_version_suffix..__annotate__sDr&c<SP\SPR444RoR# \dRoR#i;i).rsN)r=floatrstrip ValueError)rrunsr$_flush%_split_version_suffix.._flushsA  KKcjjo. /   s)0 AAruvVrz-_N)rhisdigit)rposrchrrs& @@r$rrs D1HC D / Y ; 1HC d bjjll  : 1HCCIo49#4#4#6#6$)s:JyCC3Jty  1HC T?ty4  d r&c2a]tRtRtRtRV3RlltRtV;t#)AmbiguousAliasErrorizAlias family-matches multiple catalog models; caller must disambiguate. Raised by :func:`resolve_alias` instead of silently picking one via version-sort heuristics. ``candidates`` is sorted best-guess-first (see :func:`_model_sort_key`) for display only.c$V^8dQhRRRRRR/#)rrr6rr>r!r")r#s"r$r% AmbiguousAliasError.__annotate__s&\\c\S\i\r&c p<WnW nW0n\SV`RV: R\ V4 RV 24R#)zalias z matches models on N)rrr>super__init__rh)rOrrr> __class__s&&&&r$rAmbiguousAliasError.__init__s8  $ 6%)C O3DKPXzZ[r&)rr>r)rzr{r|r}r~rr __classcell__)rs@r$rrsa\\r&rc V^8dQhRRRR/#)rerrrr r6r")r#s"r$r%r%s 5 5"5 5# 5r&c DVPR,pRPR\V^444p\VP4\V4, pV^8dRV R2MRpRVP R\VP4 R VP R V V R 2 #) z7User-facing disambiguation list for an ambiguous alias.:N N c36"TFwrRV RV 2xK R#5i)z z. Nr")r+ims& r$r-+_ambiguous_alias_message..s D0C1#Rsm0Csu … and z morers'z ' matches ru" — not switching automatically: z) Pick one with /model .)r>r6 enumeraterhrr)rshownlineshiddenmores& r$_ambiguous_alias_messagers NN3 E IID %0CD DE  3u: -F+1A:\& '2D CII;jS^^!4 5[ <<.;E74&I3 45r&c(V^8dQhRRRRRRRR/#)rrGr6rrrrr r")r#s"r$r%r%s0KKSK.K)7KCFKr&cxV'd \WV4MRpVe VP#\T;'gR4#)zId a provider name routes to, e.g. ``custom:`` for a legacy ``custom_providers`` entry, so an alias naming it by its bare name compares equal to the resolved provider.Nrs)rrFr)rGrrpdefs&&& r$_provider_identityrs9MQ 7G HVZD&477J,>tzzr,JJr&c ,V^8dQhRRRRRRRRRR /#) r raw_inputr6rrrrrr Optional[tuple[str, str, str]]r")r#s"r$r%r%s8E/E/SE/CE/E/$2E/>\E/r&c aaVP4P4p\4\P V4pVeVP VP V3#Rp\WV4p\P4F{wrV P P4V8wdK&\V P W#4V8XdV P V P V3u#VeKbV P V P V3pK} VeV#\V4wrV 'd\WWAR7p V eWV3#\P V4p V fR#V wrV 'd\WWR7p V 'dWV3#R#\V4p^RI HpVUu0uFpVP4kK upoVPV3RlVP V.444\#V4'dV RV 2MToVUu.uF:pVP4P%SP44'gK8VNK< ppV'gR#VP'V3RlR7\)V4^8d \+WAV4hVV^,V3#uupi \ dLi;iuupi)aResolve a short alias against the current provider's catalog. Direct aliases (and reverse lookup by exact model id) win; then :data:`MODEL_ALIASES` is matched against the provider's models.dev catalog by ``vendor/family`` prefix (``family`` for non-aggregators). Returns ``(provider, resolved_model_id, alias_name)`` or None; raises :class:`AmbiguousAliasError` when several catalog models match.N)r)_PROVIDER_MODELSc3T<"TFqP4S9gKVxK R#5ir1r;)r+rr@s& r$r- resolve_alias..&s$f"LQPWPWPYaePeqq"L( (rc<\VS4#r1)r)rris&r$resolve_alias..2s q&9r&)r)r:r;rrrHrrrr_external_process_catalog_external_process_matchrrrrextendrrrgsortrhr)rrrrrrreverse_fallback current_id alias_namedaprocess_catalogprocess_aliasesdeclaredrrxrycatalogrrmidmatchesrir@s&&&& @@r$ resolve_aliasrsK //  ! ! #C    $F s33 8<#$4FVWJ(..0 88>> s "  bkk> LPZ ZKK:6 6  # " RXXzB  1#'@AQ'R$O+?Sl  $4 4  %HNF*?Vo4< C0F$F##34G 6#*+7a 7+f"2"6"67G"Lff&33C%D%Dxq !&F%Pgs)?)? )OssgGP   LL9L: 7|a!#AA gaj# ..!,    Qs0< I:I5.I:+5J %J 5I:: JJc V^8dQhRRRR/#)rrr6r z tuple[list[str], dict[str, str]]r")r#s"r$r%r%8sccc0Pcr&c^RIHpV!V4pVeVPR8wd./3#\VP4VP P 4UUu/uFwr4VP4VbK upp3#uuppi)zU``(declared model ids, own aliases)`` of an ``external_process`` profile, else empty.)get_provider_profileexternal_process) providersrr^r7fallback_modelsrrr;)rrprofiler,vs& r$rr8sp."8,G'++/AA2v '' (GDYDYD_D_Da*bDaDA1779a ``claude-opus-5[1m]``); several candidates raise so nothing is picked silently.c3T<"TFqP4S8XgKVxK R#5ir1r)r+rwanteds& r$r-*_external_process_match..Gs.ds(KI1Y>;KLLIsc30"TF qfKVxK R#5ir1r")r+rs& r$r-rfs5GqGs N) openrouternous)r5)rrrrresultssf&ff r$_resolve_alias_fallbackr]s3K/II3IIKG 5G5t <I%&%AK%$ % $ % 0= %r&c Ve2V'gV'g V 'd^RIHp V !WpWW4'dRp^RIHp T !Y;'gRT;'gRT;'gRWVR7p V 'd \ V 4#Ve(VP 'd\ VP 4#R# \dRpLi;i \dLMi;i)uwContext length to show in /model output. models.dev reports per-vendor context but provider-enforced limits can be lower (Codex OAuth caps gpt-5.5 at 272k), so ``agent.model_metadata.get_model_context_length`` is authoritative (it also honors ``custom_providers[].models..context_length``); ``model_info.context_window`` is the fallback. A ``config_context_length`` pin is dropped when the route changed. When ``custom_providers`` is provided, per-model ``context_length`` overrides from ``custom_providers[].models..context_length`` are honored — this closes #15779 where ``/model`` switch ignored user-set overrides. Nshould_clear_context_pin)get_model_context_lengthrs)r]rZrrr)hermes_cli.route_identityrragent.model_metadatarintcontext_window) rrr]rZrrrrrrrrctxs &&&&&&&&&& r$resolve_display_context_lengthr is"(.>BUYl ) J'$-@L_kk(,% A& NNGMMrHL\L\X\-\ s8O *";";";:,,--  )$( ! )    s4B(B; B; B;B;( B87B8; C C c$V^8dQhRRRRRR/#)rrr6rr rr")r#s"r$r%r%s'^^c^S^Wd^r&cV"^RIpVP!\W3/VBGRjxL #L5i)uThread-offloaded :func:`resolve_display_context_length` (same keyword arguments) — the sync version runs blocking provider probes that async gateway handlers must not run on the loop.N)asyncio to_threadr )rrkwargsrs&&, r$$resolve_display_context_length_asyncrs*""#A5]V\] ]] ]s )')c(V^8dQhRRRRRRRR/#) rrer6rrrrr rr")r#s"r$r%r%s,$$$%3$GU$$r&c paa V'dVP4'g/#VP4P4o .p\V\4'd\Y1P 4UUu.uF8wrE\V\ 4'gK\V\4'gK5WE3NK: upp, pVUUu/uFwrEV\ WE4bK ppp\V4Uu.uFWp\VPR4\ 4'gK*VR,P4'gKIRVR, 2V3NKY pp/p W8,FXwpo\VV 3RlR4R4p V 'gK'WF9d\VSV4MRp T PT ;'gTV 4KZ V #uuppiuuppiuupi)u#``{provider_slug: canonical_model_id}`` for every configured provider whose declared models (``models``, ``model``, ``default_model`` — exact, case-insensitive, never fuzzy) contain ``model_name``, so a typed name routes to the provider that declares it instead of being soft-accepted by the current provider (openai-codex) as an unknown hidden model. Used by :func:`switch_model` to route a *typed* model name to the provider that actually declares it in user/custom provider config, instead of leaving it on the current provider. See #45006. rGrc3<"TF>p\SPV44Fq"P4S8XgKVxK K@ R#5ir1)rCrHr;)r+rrrrGs& r$r-/_configured_provider_matches..sA[#GC23773<@IIKSYDYC@#Gs 3A A N)rMr default_model) r:r;r2r3rr6_configured_provider_identity_custom_entriesrHr5_duplicates_configured_row setdefault) rerrr>rrrowseentriesrhitownerrGs &&& ` @r$_configured_provider_matchesr"s Z--//     % % 'F)+J.$''4H4H4JK4Jyt$T3/#4>sD4I#{4JK K MW WJytD/: :JD W3BCS3TH3TaQUU6]C0*56vY__5F*'!F)%q)3TGH!G)) c[#G[\`b 3CGCS.tS$?Y]E   u}}c 2 * N'K XHs*,F' F'#F'9F- 'F3 F3+F3c$V^8dQhRRRRRR/#)rrr6rr3r ztuple[str, str, str, str]r")r#s"r$r%r%s'aaa$a;Tar&c^RIHpHpT!VP4UUu/uFwrEVR8wgKWEbK uppVP R4'dRMTR7;'gTp\ VP R44P4;'g VPR4P4PRR4p\ VP R 4;'g+VP R 4;'gVP R 44PR 4P4p\ VP R 44\ VP R4;'gVP R44rV P R4'd,V PR4'dRV ^RP4rV 'dRV 2MKV 'dRV 2M>\ VP R44'dR\ VP R44 2MRp \ VP R4;'gVP R44p YxY'dV!V 4P43#R3#uuppi)a_``(name, endpoint, credential, api_mode)`` of one configured provider, read through the same normalizer that builds the compat view, so a ``providers.`` row, its ``custom:`` projection and a legacy duplicate of the same endpoint reduce to one tuple. Any difference in endpoint, credential identity or wire protocol keeps two rows distinct.)_canonical_api_mode _normalize_custom_provider_entry provider_keyrrs)r'rGr-rtr]urlapirrZr api_key_envrrzkey:zenv:key_cmdzcmd:rr[r) hermes_cli.config_providersr%r&rrgr`rHr;rreplacerrr:) rrr%r&r,rrJrGr]rZr credentialrs && r$rrs b -syy{-b{tqaSaNadad{-b@DPY@Z@Z"`d f m mil 599V$ % + + - U U1B1B91M1S1S1U ^ ^_bdg hDeii +SSuyy/?SS599UCST[[\_`ffhHeii 23VEIIi`` row a ``custom_providers`` entry is a second view of, else None: the row's compat projection (``provider_key`` names the slug AND it points at the same endpoint with the same credential — on the raw-list fallback a hand-written provider_key aimed at another endpoint or another key stays a candidate) or a legacy duplicate with the same provider identity.r'c3<"TF>wrSV8Xg/SVP48XgK#SR,VR,8XgK:VxK@ R#5i):NNr)r+row_slugrowrr's& r$r--_duplicates_configured_row..sIi|mhO 8H(HMUVY]^abe^fMf|s A A  A N)rr`rHr;r5r)rrJrrr's&&&@@r$rrsQ-T9H%))N34::.s]g+$IMM$rs&&@@r$_current_provider_matchr@sw k)"""R(()//1G%/0A0A4%H%H!!bI g+ghl nnr&c(V^8dQhRRRRRRRR/#)rrer6rrrr r")r#s"r$r%r%s*sS\jorr&c\V4P4pVPR4'dRV9dV#RVPR^44wrEV'd V'gV#\ V4Fzp\ V4pW79gKRVP4 2V9gK0\ VPR44F,pVP4VP48XgK(Vuu# K| V#)zUMap a picker-prefixed custom model selection (``prefix/model``) to its configured ID.rrc3@"TFqP4xK R#5ir1rrs& r$r-1_resolve_named_custom_model_id..sK2J$2JrrM)r`r;rgrr_entry_aliasesrCrH) rerrrrirArJ entry_slugsrBs &&& r$_resolve_named_custom_model_idrGso&,,.H   y ) )S -BK*2B2B32JKF  !12$U+  "0@'A['P/ (0CD>>#y'88#OE3 r&c V^8dQhRRRR/#)rrrr z list[dict]r")r#s"r$r%r%snncnjnr&c\V\4'd+VUu.uFp\V\4'gKVNK up#.#uupi)zSThe dict-shaped entries of a ``custom_providers:`` list (anything else is ignored).)r2r7r3)rrs& r$rrs<CMN^`dCeCe' ?'!:a+>AA' ?mkmm ?s AAc V^8dQhRRRR/#)rrJr3r zfrozenset[str]r")r#s"r$r%r%sgg$g>gr&c\\VPR4;'gR4\VPR4;'gR44#)rGrsr')r r6rH)rJs&r$rErEs< "3uyy'8'>'>B#?UYY~E^EdEdbdAe ffr&c V^8dQhRRRR/#)rrr3r r6r")r#s"r$r%r% s  t # r&cH\VPRR44pVPR4'd#VPR4'd V!V^R4pV'gF\VPR4;'gVPR44pV'd V!V4MRpV#)ztInline ``api_key`` (a ``${VAR}`` template resolves via *read_env*), else ``key_env``/``api_key_env`` via *read_env*.rZrsrrrr*r)r`rHrgr)rread_envrrs&& r$_entry_configured_keyrO s B' (C ~~d S 1 1s1Ry! +EEsww}/EF#*hw Jr&cV^8dQhRR/#)rr ztuple[dict, str]r")r#s"r$r%r%sPP!1Pr&c^RIHpV!R4pT\VPR4;'g+VPR4;'gVPR443#))_get_provider_config_dictollamar]r)r()rrSr`rH)rSrs r$_ollama_configured_baserUsH; #H -C swwz*NNcggenNNO OOr&c V^8dQhRRRR/#)rrr6r r")r#s"r$r%r%s    r&cRV R2p^RIHpV!4pV'd.VRRPRVR,44,, pV# \dT#i;i)zUnknown provider 'z`'. Check 'hermes model' for available providers, or define it in config.yaml under 'providers:'.)validate_config_structureu1 Run 'hermes doctor' — config issues detected:rsc3@"TFpRVP 2xK R#5i)u • N)message)r+cis& r$r-,_unknown_provider_message..&s'SAuoqU]^`^h^h]iSjur:Nr4N)rrXr6r)rmsgrXissuess& r$_unknown_provider_messager_s ./0E F ?*,  H277SAu{|~uSALAA AC J   J sA -A AAc(V^8dQhRRRRRRRR/#)rrr6rrr r")r#s"r$r%r%,s,111-01DG11r&c^RIHp^RIHpVP 4P 4pVP V4pV'dW8Xd W8wdW9gR#\W#VR7p W9dR#V U u.uF%qPV4'gKW8wgK#V NK' p p V 'dRRPV 4 R2MRp RV R \V4 R V 2#uup i) a Guard against silent aggregator hops: a vendor alias like bare "openai" resolves to an aggregator ("openrouter"); if that aggregator has no credentials, refuse instead of switching the user onto an unauthed endpoint (HTTP 401) and point at the real direct provider.)_AGGREGATOR_PROVIDERS)ALIASESrsrrrz Did you mean: , ? Provider 'z"' is an alias that routes through z&, which has no credentials configured.) rrbrrcr:r;rHrrgr6r ) rrrrrrbrc explicit_norm alias_targetautheds suggestionshints &&&&& r$_aggregator_alias_errorrn,s 8,%++-335M;;}-L8_=]  4 -)[kmF $[f ](C1HZ11fK[:E_TYY{34A 62D ]O$_-./))- 01\s1CCCc$V^8dQhRRRRRR/#)rrr6rr7r rr")r#s"r$r%r%Fs&aaata ar&caVP4o\V3RlV4R4;'g\V3RlV4R4#)zSExact (case-insensitive) match on full id, then on the bare part after ``vendor/``.c3T<"TFqP4S8XgKVxK R#5ir1rr+rrs& r$r-,_aggregator_catalog_match..IsA99;&+@rNc3<"TF>pRV9gK VPR^4^,P4S8XgK:VxK@ R#5i)rN)rr;rrs& r$r-rsJs<Y3#:#))C2CA2F2L2L2NRX2Xs A )A  A )r;r5)rrrs&&@r$_aggregator_catalog_matchruFsE __ F AA4 H a aDYY[_Maar&c(V^8dQhRRRRRRRR/#)rrr6rr]r rKr")r#s"r$r%r%Ms,%(47^br&cV'dL^RIHpVPV4pVe1V!V4'd#V\VPR/449dR#\ V4FspVP 4\ V49gVPRR4V8XgK:WPRR48Xg#V\VPR/449gKrR# R#)zA model declared in the user's ``providers:``/``custom_providers:`` config is accepted even when the remote /v1/models does not list it (cloud/aliased models). Custom entries match by slug alias or by base_url.)is_provider_enabledrMTr]rsrF)rrxrHrCrr;rE)rrr]rrrxrrJs&&&&& r$_config_declares_modelryMs 9  1 ?2377II\]`]d]demoq]rIs.sXY[]I^IdIdIfr&TN)hermes_cli.models_localr|hermes_cli.runtime_providerr~rrr]rZrrrrHrr:r;rUrOvalidation_headerssuppress_ollama_headersr) r9rr|r~r same_hostreqexplicit alias_runtime resolved_key ollama_cfgollama_cfg_baseconfigured_keys && r$_apply_direct_alias_endpointr_sAD$R(I-bkk2;;GI"$++y RZ  &77Ikk  8)rrhermes_cli.moa_configrrHr)rrs r$_moa_default_presetrsE1>#KM$5$5e$<$B$BCDTUU s*; ; A  A cf]tRtRt$RtR]R&R]R&R]R&R]R&R]R&R ]R &R]R &R ]R &R]R&RtR]R&RtR]R&RtR]R&Rt R ]R&Rt R]R&Rt R]R&Rt R]R&Rt R]R&]!]R7tR]R&RtR ]R&]!]R7tR]R&RR ltR!R"lt]R#R$l4tR%R&ltR'tR(#))r:iafMutable state threaded through the ``switch_model`` steps. The routing steps settle ``target_provider`` / ``new_model`` / ``resolved_alias`` (and may promote a config-routed ``providers.`` to ``explicit_provider`` so the credential step resolves its block); the credential step fills ``api_key`` / ``base_url`` / ``api_mode`` / ``validation_headers``.r6rr current_modelrUcurrent_api_keyrKr rrrrrrsrrresolved_aliasFr!rrZr]r)default_factoryr3rr validationc V^8dQhRRRR/#rrZr6r rr")r#s"r$r%_Switch.__annotate__skkCk.?kr&c 8\RRRRVPRV/VB#)rFr rr")rr )rOrZfieldss&&,r$fail _Switch.fails% jj$..jX_jcijjr&c V^8dQhRRRR/#rr")r#s"r$r%rsllcl.?lr&c PVPWPVPR7#)zNFailure carrying the already-settled ``target_provider`` / ``provider_label``.)rr)rrr)rOrZs&&r$fail_on_target_Switch.fail_on_targets"yy2F2FW[WjWjykkr&cV^8dQhRR/#)rr rKr")r#s"r$r%rs==$=r&c 4VPVP8g#r1)rrrNs&r$r_Switch.provider_changeds##t'<'<<> LV L&(ffY&;RVVJPR=S# dmz2. "$&&"9"T"TT=T=Tr&)rZrr]rN)rzr{r|r}r~rrrrr!rrZr]rrr3rrrrrrWrrrr"r&r$r:r:s NO""$$IsOSNC#(D(NCGSHcHc$T::$)T)T2J2kl==UUr&r:c V^8dQhRRRR/#rr9r:r Optional[ModelSwitchResult]r")r#s"r$r%r%s***-H*r&c\VPVPVP4pVfCVPP 4P 4R8Xd\ VP4pVf%VP\VP44#VPVPuVn Vn VPR8Xd"VP'g\4Vn\!VPVPVP"VPVP4pV'dVP%V4#VP'gVP&'g,VP%RVP RVP 24#^RIHpV!VP&4VnVP'g9VP%RVP RVP& R VP 24#\-VPVPVPVP4pTe_Twq`np\3Y`PTP4\3TPTPTP48XdYpnR# \.d1pTP\1T4TPR 7uRp?#Rp?ii;i) zPATH A (``--provider`` given): resolve the provider, auto-detect a model from a local endpoint when none was typed, then resolve the alias on the TARGET provider.NrWrrgzN' has no base URL configured. Specify a model: /model --provider )_auto_detect_local_modelzNo model detected on z (z@). Specify the model explicitly: /model --provider )r)rrrrr:r;rarUrr_rFrGrrrrrnrrr]rrrrrrr)r9ragg_errr alias_resultrrrs& r$_route_explicit_providerrs` !!5!5r7H7H"J]J] ^D |,,224::<H()<)<= |ww01E1EFGG,0GGTYY)B) U"2<<<*, % b00"2E2ErGXGXZ\ZmZmoG  )) <<<}}}$$TYYK(CCECWCWBXZ[ [ I/ > |||$$' {"T]]ODPPRPdPdOegh hZ$R\\23E3ErGXGXZ\ZmZmn 3?0 j ~/@/@"BUBU V%b&8&8":K:KRM`M`a b *   Zww/4bFXFXwYYZs6J K%%K KKc$V^8dQhRRRRRR/#)rr9r:rr6r rr")r#s"r$r%r%s"gC4Or&c 0\VPVPVPR7p\ VP W PVP4pTf=\T,pTPRT RTP RTP R24#TwTn Tn Tn\P!RTPTPTP4R# \ d%pTP\T44uRp?#Rp?ii;i)zcStep b: the alias exists but not on the current provider -> try the user's authenticated providers.rdNzAlias 'z ' maps to rz] but no matching model was found in any provider catalog. Try specifying the full model name.z,Alias '%s' resolved via fallback to %s on %s)rrrrrrrrrrrxryrrrloggerdebug)r9rrjfallback_resultrrs&& r$_route_alias_fallbackrs -,,R=N=NacatatF61",,HYHY[][n[no %wwcU*X__$5Qx6GH2 34 4;J7B b&7 LL68I8I2< ``vendor/model``. Only without a slash: with one, the colon is a variant tag (:free, :extended, :fast) that must be preserved. On an aggregator every ``left:right`` is a slug. Elsewhere the colon is converted only when ``left`` names a provider Hermes knows, so ``/model alibaba:qwen3.6-plus`` routes like ``alibaba/qwen3.6-plus`` (#9748) while Ollama-style tags (``qwen3.5:4b``) stay intact.:rrWrTNz(Converted vendor:model '%s' to slug '%s') rfindr6rr:r;rgr_names_known_providerrrr)r9r colon_poscur_normleftrights& r$_convert_vendor_colon_slugr s Is#I2&&'--/557HA~ )X-@-@-J-JhZbNb Zi & & ( . . 0D !mn % + + -E u ,, - -6KD6U6UV1UG$BL LL;Y Ur&c$V^8dQhRRRRRR/#)rrGr6r9r:r rKr")r#s"r$r%r%"s!Tr&c^RIHp\WPVP4eR#V!VRR7RJ# \ dR#i;i)zSWhether ``name`` is a built-in provider id/alias or a provider the user configured.) get_providerNTF allow_network)rrrrrr)rGr9rs&& r$rr"sJ1T#4#4b6I6IJVD6dBB s 8 AAc V^8dQhRRRR/#)rr9r:r z"Optional[ModelSwitchResult] | boolr")r#s"r$r%r%-s7/Qr&c|\VPVPVP4pV'gR#\ W4pVeW,VnR#\ V4p\ V4^8d2VPRVP RRPV4 R24#V^,Vn WP,Vn\PRVPVP4\VP\4'd-VPVP9dVPVnR#)a-Step d.5: a model declared in user/custom provider config routes there BEFORE detect_provider_for_model() guesses from static catalogs and before a soft-accepting current provider (openai-codex) can swallow it as an unknown hidden model. Returns a failure result, ``True`` when routed, else ``False``.FTrz0' is declared by multiple configured providers (rez<). Re-run with --provider to choose which one to use.z/Configured-provider detection routed '%s' to %s)r"rrrr@sortedrhrr6rrrr2r3r)r9r; current_slug match_slugss& r$_route_configured_providerr-s  /r||R=N=NPRPcPcdK *2;L"0 %K ;!ww ~))K012< => >%QB112BL LLBBLLRTRdRde"##T**r/A/AREVEV/V!11 r&c V^8dQhRRRR/#rr")r#s"r$r%r%Is===,G=r&cV^RIHpVPVPr2^RIHp^RIHpHpT!T!V!4PR4;'g/4V4pV'dRVRuVn Vn Vn M\W#VPVP 4pTeMTwTn Tn Tn \(P+RTPTPTP4M`TP-4P/4\09d/\3YP-4P/44p T eT #M \5T4Rp \7VP4'dTVP'gB\9VP4p V 'd%\;VPV 4p V e V R uVn p VP'gV 'gVPV8wdR#VR 8XdP^R IHpH pV!VPB4'd0VPV8wdVP%VP R 24#\EV4p\GV\H4'dV#VR9;'g<VPKR 4;'g#\MVPB;'gR4R9pV'g3V'g+V!VPV4pV'dVwVn Vn R# \dRpELi;i \"d%p TP%\'T 44uRp ? #Rp ? ii;i)zPATH B (no ``--provider``): MoA preset / alias on the current provider (a) -> alias fallback (b) or ``vendor:model`` conversion (c) -> aggregator catalog search (d) -> configured-provider match (d.5) -> detect_provider_for_model() as last resort (e).)detect_provider_for_modelr)exact_moa_preset_namerrNrszAlias '%s' resolved to %s on %sFTr) GUEST_MODELroute_is_welcome_hostz_ needs a Nous account or an API key. Use /login to sign in, or /model to pick another provider.r>localrW) localhost 127.0.0.1)'rrrrrrrrrrHrrrrrrrrrrrrr:r;rrrrrruhermes_cli.anon_authrrrUrr2rrgr)r9rrrrrr moa_matchrrrresolved_in_current_catalogrmatchedrr config_routed is_customdetecteds& r$_route_from_model_inputrIs<"$,,0C0C1U)*>{}?P?PQV?W?]?][]*^`ij >CYPR;BL"*; :(bFWFWY[YlYlmL  #BN ?B  b.? LL:B-D-D-FGD   'r * #(R''((1B1B1B&r'9'9: / gFG",>@Q@QSUSfSfg  "$$E Lr&c V^8dQhRRRR/#rr")r#s"r$r%r%s;;W;1L;r&cRpVPP4P4pVP'dPVP'd>^RIHpV!W P4;'gV!VP VP4pVeVP'dVPPV4;'g0VPPVP 4;'g/p\V\4p\V4Vn TPVP T;'gRVPR7VP;'gTVP;'g VPuVnVnR#VP R8XdVP"'dVP$VP"rvVP&R8wdm\)\4;_uu_4VPRR7RRR4VP'd)\+V4'gVPVPrvWguVnVn\-VP VP4VnR#^RIHpVP2'd \4PVP24MRp V e%V!VP 4'd V PMRp TPVP T ;'gRR7R# \d$YQPRuTnTnTnR#i;i +'giEL>;i \dp TP P4P4\69d TP9\;T 44uRp ? #TP9TP< R TP R T 24uRp ? #Rp ? ii;i) aCCredentials when the provider changed or ``--provider`` was given. ``providers.`` blocks carry their own base_url + transport + key reference; resolve_runtime_provider() resolves by provider NAME and would re-resolve a block named "openai" from scratch (or hop to an aggregator), so use the pdef's endpoint directly.N)resolve_user_provider)rrrrsrWr)_resolves_to_custom)rrzW is not connected: no API key or login was found for it. Add one with `hermes auth add z6`, or pick a connected provider in /model. Details: )rr:r;rrrrr]rHrOr_extra_headers_from_configrrrZrrrUrrr _fell_back_to_openrouter_defaultr rrrrr rr6r) r9 user_pdefrhrucfgukeyrr(rr alias_urlrs & r$_creds_for_switched_providerrs2 I((..0668M  1 1 1>*=:K:KLUU-b.@.@"BSBST !3!3!3  $$]3ffr7H7H7L7LRM_M_7`ffdf$T?; :4 @ P   ,,t||t_h_q_q  s&(jj&8&8D"++:[:[I[I[ #BJ N I  x 'B,?,?,?%%r':':S  ( *)$$""X"6%{{{#CB#G#G::r{{S"% BK(););R[[I ,  D686G6G6G^   1 1 2T#%>6I"J\J\6]6]BKKcg  #   ););yO`O`\`  a M P379K9KR 0BJ R[J M P%$$$ #!!'')//15EE((Q00$$$$%&$$&$6$6#78S"# #  #saL4%LL/L,L4M9M*L10L14 M  OA OO#,OOOc V^8dQhRRRR/#rr")r#s"r$r%r%s)O)OG)O)Or&c^RIHpHpRp/pVPR8XdvVP'dd^RIHpV!4p\ 4wrgV'dV!VPV4'g /pRVnV!VPVPVR7pV'dZVP;'gRVnVPVn\!VPVP4VnW@nR #VP'VPR7VPR 9dVP'dpVP'd\+V4'dKVPVPuVnVn\!VPVP4VnR #R #R #R # \\\\\3dRpEL9i;i \(dLi;i) zCredentials when staying on the current provider. Mid-session ``/model `` on a local Ollama-compatible endpoint keeps the endpoint in use; re-resolving bare ``custom`` from config can fall through to an unrelated default provider.)_get_ollama_request_headersr|FrW) should_use_ollama_native_catalogT)headersrrN>rrW)rrr|rrUrrUr ImportErrorr RuntimeError TypeErrorrrrZr]r rrrrr)r9rr|keep_current_ollama_endpointollama_headersrrconfigured_ollama_bases& r$_creds_for_current_providerrs^#( %'N h&2+>+>+> 1 P8:N(?(A %A*1I"J]J]_u1v1v!#-1*+K##R%8%8.,R ($''<<+< )) ()<)>BEEG N M%'--2 ,6y}}Z7PRU,V,Vy}}Z(\^0:9==;TVY0Z0Z9==,`b !!# LT \ \tdbdd s9C0C0C0C0 A;C0C0C0.C00 C?>C?cV^8dQhRR/#rKr")r#s"r$r%r%s  S r&c^RIHpV!RR4;'gRP4PR4# \dR#i;i)ur``OPENROUTER_BASE_URL``, read the way the resolver reads it (env, or the profile's secret scope). A guard read, not a credential fetch: a read that fails — unscoped under multiplexing — must leave the mirror undetected so its caller keeps the session endpoint, rather than raising out of ``switch_model`` where the resolver's own read of the same name is suppressed.rOPENROUTER_BASE_URLrsr)rrr:rrrs r$r r sI 24b9??RFFHOOPSTT s88 AAc V^8dQhRRRR/#rr")r#s"r$r%r%+sG0Kr&c\V4VnVPVPuVnVnVP 'gVP'd\V4pVeV#M \V4VP'dR\4\PVP4pVe%VP 'd\W4RVn^RIHpV!VP$VP 4'dRM\'VP 4pVeVP(R8wdW@nVP(;'g!\+VP$VP 4VnR#)zCOMMON PATH part 1: credentials, direct-alias endpoint override, and the api_mode for the final (provider, base_url) before validation.NT)is_actual_routechat_completionscodex_app_server)rrrrUrZr]rrrrrrrrHrr!rrrrrr )r9rrr mandated_modes& r$_resolve_switch_credentialsr!+s*/r2B 00"2E2EBJ  b222+B/  K  $B'     1 1 2 >bkkk ( 0(,B % 5*9":L:Lbkk*Z*Z&`vwyxCxCaDM R[[4F%F# ++TT!3B4F4F !TBK r&c V^8dQhRRRR/#rr")r#s"r$r%r%Ks333%@3r&c ^RIHp^RIHp\ VP VP VP4Vn\VP VP 4Vn^RI H pV!VP 4'dBVPRVP R2VP VP VPR7#VP P4P4R8Xd1VP'd/MVP ;'gV!4pMqVP ;'g^VP"'dJVP VP"9d/\%VP"P'VP 44MRpVP pVP4P)R 4'gN\+WPP"VP4pVe*VP,R 8XdVP.'gMR V 2pT!VP YPP0VP.VP2;'gRVR 7pVP'R4'g\7VP VP VP.VP"VP4'gDVPVP'RR4VP VP VPR7#RRRRRRRVP'RR 4/pWpnR# \4d%pRRRRRRRRTP RT 2/pRp?LRp?ii;i)zCOMMON PATH part 2: normalize the model name for the target provider, validate it, and accept config-declared models the remote catalog lacks.)r)validate_requested_model)is_known_non_chat_model`zq` is a generation model and cannot be used for chat. Pick a chat model, or use image generation for image models.)rrrrTNrWz user-configrsr)rZr]rracceptedFpersist recognizedrZzCould not validate `z`: z Invalid modelT)rrhermes_cli.models_validater$rGrrrrhermes_cli.chat_catalogr%rrr:r;rrrrrHrgrr_r]rZrrryr) r9rr$r%r validate_asrrrs & r$_validate_switchr-KsDC1",,@R@RTVTgTghBL/ b>P>PQBL?r||,,ww ~K KllB4F4F,,    !'')X5222"9N9N9o9oRmRo''XX   R%7%72;L;L%L 'r'8'8'<'>* % %% b00"++r?P?PRTReRegg77y/:,,8J8J[][l[ln n!$ 4uiYcYgYghqsuYvw M  N %E<#7 ~S!LN Ns5L L L?L::L?c(V^8dQhRRRRRRRR/#rrr6rrZr r")r#s"r$r%r%s(:::C:#:#:r&c ^RIHpV!WR7#)rR)copilot_model_api_mode)rZ)rr1)rrrZr1s&&& r$_copilot_api_moder2s8 !% 99r&c(V^8dQhRRRRRRRR/#r/r")r#s"r$r%r%s( 4 4 4S 43 43 4r&c^RIHpV!W4#)rR)opencode_model_api_mode)rr5)rrrZr5s&&& r$_opencode_api_moder6s: "8 33r&c(V^8dQhRRRRRRRR/#r/r")r#s"r$r%r%s(  S  s s r&c^RIHpV!V4#)rR) nous_api_mode)rr9)rrrZr9s&&& r$_nous_api_moder:s3  r&dict[str, Any]_PROVIDER_API_MODE_OVERRIDESc(V^8dQhRRRRRRRR/#)rrr6rrZr r0r")r#s"r$r%r%s.KKSKKsKMKr&c^RIHp\T;'gR4P4P 4p\ P V!V4;'gT4pVe V!WAV4#R#)uapi_mode re-derived from the FINAL model for providers that serve several wire formats behind one endpoint (OpenCode Zen/Go and custom providers extending a family slug, Copilot, Nous); None when the provider's wire is fixed by its endpoint. A persisted api_mode from an earlier model of such a provider is never authoritative — resume paths must call this instead of honoring the row (#96066).)opencode_provider_familyrsN)rr?r6r:r;r<rH)rrrZr?roverrides&&& r$model_derived_api_moderAs_ ; hnn"  # # % + + -C+//0H0M0T0TQTUH,4,@8C (JdJr&c V^8dQhRRRR/#)rr9r:r rr")r#s"r$r%r%s*i*iW*i):*ir&c \VPVPVP4pVeWnVP'g2\ VPVP VPR7Vn^RIHpH pV!VP4eN\VP \4'd.V!VPVPVP 4Vn\VPVPRR7p^RI HpV!VPVP VPVPP4P!4R8HR7p\#VPVPRR7pVP$P'R 4\)VP43Uu.uFq'gK VNK p p^R IHp V !VPVPRR 7;'gR p Rp ^R IHp HpV !VP4pV'dV!V4;'gRMRp \7R /RRbRVPbRVPbRVP8bRVPbRVP bRVPbR\;T ;'g/4bRV 'dRP=V 4MR bRV bRVP>bRVP@bRVbRVPC4UUu/uF9wpp\V\4'gK\V\D4'gK6VVbK; uppbRVbRVPFbRVPHb#uupi \4dRp EL5i;iuuppi)!zJCOMMON PATH part 3: final api_mode / base_url shaping, metadata, warnings.N)r)normalize_opencode_base_urlr?Tr)&resolve_native_compaction_capabilitiesz openai-codex)rr]ris_codex_backendrZ)large_model_notice)fetchrs)_get_named_custom_provider"_custom_provider_request_overridesrrrrrZr]rrrz | rrrrrrr r!r")%rArrrZrr r]rrDr?r2r6ragent.native_compactionrEr:r;rrrHruhermes_cli.model_picker_usagerGrrIrJrrrr3r6rrrrKr r!)r9derivedrDr?rrErrwwarningsrGrrrIrJ cp_for_ror,rs& r$_build_switch_resultrQs)$R%7%7rzzRG ;;;(););R[[PRP\P\] X 2 23?Jr{{\_D`D`1"2D2DbkkSUS^S^_ )"*<*yIQQTdh  i i "  i>@>P>P i,, i68jj iKM;; iacalal i066B7 ibjT\I]oq i"  i352C2C  iY[XiXi  iyE  i 2779i9TQZ3=ODT^_`bfTgDAqD9i  i i*, iOQNgNg iik ! !is<1 M?M9!MM*M-M( M(%M( M%$M%c@V^8dQhRRRRRRRRRRRRR RR R R R RR/ #)rrr6rrrUrr rKrrrrrr rr")r#s"r$r%r%se$$$&)$:=$QT$$*.$KN$ $;F$Rc$r&c \WVW4VWgVVP4VR7 p V'd\M\p V \\ 3Fp V !V 4p V fKV u# \ V 4#)akCore model-switching pipeline shared between CLI and gateway. Route (PATH A with ``--provider``, else PATH B) -> credentials -> validation -> result; each step returns a failure :class:`ModelSwitchResult` to stop the chain, or ``None`` to continue. ``user_providers`` / ``custom_providers`` are the config.yaml ``providers:`` dict and ``custom_providers:`` list.) rrrrUrr rrrrr)r:r:rrr!r-rQ) rrrrUrr rrrr9routerrs &&&&&&&&& r$ switch_modelrUso m)V_+]m//#5E  GB ): $?VE35EFBx  KG  ##r&c$V^8dQhRRRRRR/#)rresultrcurrent_model_cfgrr r;r")r#s"r$r%r%s$%%+<%QT%Yg%r&c \V\4'dTM/pRVPRVPRVP;'gRRVP ;'gR/pRV9d^RIHpT!VPR4;'gVPR4VPVPR4VPVPR4VP4'dRVR&\VP;'gR 4P4P4p\W 4pVPR 4'd V'dR R .M.pV'd VR R., pVFpW9gK RW8&K V#)uThe ONE config.yaml shape a persisted model selection produces, as ``model.`` -> value (``None`` = clear). ``current_model_cfg`` is the on-disk ``model:`` block (raw). base_url/api_mode are freshly resolved for the target route, so they are always synced — ``None`` when the target has none — otherwise the OLD provider's endpoint/wire-protocol lingers (#25106). A context pin is dropped only when its route identity changed (fail-closed). Non-custom targets resolve credentials from env/auth.json/the pool, so an inline ``model.api_key`` is a leftover that would contaminate later custom resolution. For custom targets the inline key belongs to ONE endpoint: it survives only a same-route re-pick (same provider and base_url) — ``custom:a`` -> ``custom:b`` must not hand endpoint A's secret to B. The ``key_env`` / ``api_key_env`` credential POINTER (written by custom-endpoint activation and, for REGISTRY providers too, by the Desktop settings UI (#106336); resolved by runtime_provider / auxiliary_client / ``auth._model_level_key_env``) clears only when the route changed: left behind it routes the NEW provider's requests to the OLD endpoint's env var, but a same-provider same-base_url model re-pick keeps it whatever the provider is. The dashboard re-adds an explicitly submitted key / the target provider's own pointer after this (``_apply_main_model_assignment`` / ``_resolve_assignment_credentials``).r>rr]Nrcontext_lengthrrrsrWrZr)rr*)r2r3rrr]rrrrHr6r:r;selection_route_changedrg) rWrXr@updatesrrG route_changedstalers && r$model_selection_config_updatesr_sM$&00A4%H%H!bI6##Z1G1GFOO++tZ9P9PDG9$F # i(BBIMM',BFDTDT j)6??IMM*F+I>M'-'8'8'B'BmY Z\E )]++  GL Nr&c$V^8dQhRRRRRR/#)rr@r3rWrr rKr")r#s"r$r%r%s'lltl5Fl4lr&cb^RIHp\VPR4;'gR4P 4P 4\VP ;'gR4P 4P 48wdR#V!VPR44V!VP48g#)zProvider or endpoint differs between a ``model:`` block and the switch target. The one route-identity test for endpoint-bound credentials (inline keys, ``key_env``, launch keys).)normalize_route_base_urlrrsTr])rrbr6rHr:r;rr])r@rWrbs&& r$r[r[sC 9== $ * *+11399;s6CYCYC_C_]_?`?f?f?h?n?n?pp #IMM*$= >BZ[a[j[jBk kkr&c$V^8dQhRRRRRR/#)rr@rrWrr r3r")r#s"r$r%r%#s'bbSb2Cbbr&c,\V\W44#)zApply the canonical shape to an in-memory ``model:`` dict (``None`` = key removed) for callers that save a whole config document they are already mutating.)_merge_selection_updatesr_)r@rWs&&r$apply_model_selectionrf#s $I/Mf/` aar&c$V^8dQhRRRRRR/#)rr@rr\r;r r3r")r#s"r$r%r%)s!nr&c\V\4'd \V4M/pVP4F!wr#VfVPVR4KW0V&K# V#r1)r2r3rpop)r@r\rrs&& r$rere)sM#-i#>#>YBImmo  = MM#t $"cN & r&c$V^8dQhRRRRRR/#)rrWr config_pathrr rr")r#s"r$r%r%3s#% % $5% C% SW% r&c:^RIHp^RIHpHpHpHpV'd V!V4MV!4pV!V4PR4p\W4p T;_uu_4V!V4p V PR4p W8wd \W 4p \W4p \V \4'd#V P4V PV 4MWR&V!Wz4RRR4\P!VR4R# +'giL*;i \ \"3dR#i;i)uWrite a successful :func:`switch_model` result to ``config_path`` (default: ``HERMES_HOME/config.yaml`` — the context override or ``HERMES_HOME`` at call time). Build the complete selection from one raw snapshot, preserving sibling settings and secret references, then publish once. Per-key publication can leave a mixed route after a failed write or an overlapping selection. ``should_clear_context_pin`` can do cold-start disk I/O — async callers run this on a worker thread. The replace deletes keys missing from the snapshot, so every route decision (and its disk I/O) is made from a pre-read BEFORE the snapshot; read -> merge -> replace is then a pure in-memory section. Only when another writer changed ``model:`` in between are the updates recomputed against the fresh block. ``_CONFIG_LOCK`` is in-process only: a cross-process config lock, once one exists, must wrap the same section.)Path) _CONFIG_LOCKatomic_config_replacerread_user_config_rawrNi)pathlibrmrrnrorrprHr_rer2r3rrrchmodrNotImplementedError) rWrkrmrnrorrpr planned_fromr\configr@rs && r$persist_model_selectionrv3sll +4 1BD'-11':L,VBG %d+JJw'  $4VGG))= i & & OO    V $$7Od+   u! " ( )   sA:C2D2 D DDc V^8dQhRRRR/#)rrJrr rr")r#s"r$r%r%[s??c?n?r&cl\V\4'g/#^RIHpV!VP R44#)rR)normalize_extra_headersr)r2r3rryrH)rJrys& r$rr[s+ eT " " 9 "599_#= >>r&c V^8dQhRRRR/#)rrGr6r r")r#s"r$r%r%bs##r&c V'gR#^RIHpHpHpV!4fV!4'd"V!VR4;'gRP 4#^RIHpV!V4;'gRP 4# \dR#i;i)uRead a provider key env var the way the chat path does, honouring the per-profile scope. With a secret scope installed (multiplexed gateway turn, dashboard/kanban workers) the scope's verdict is authoritative: a hit is this profile's key, a miss must not borrow another profile's value from the process env or the default ``.env``. Multiplexing on with no scope fails closed (``UnscopedSecretError`` -> ""). Otherwise resolve through ``get_env_prefer_dotenv`` — the chain ``client_lifecycle`` uses for the actual request — so a ``key_env`` that lives only in ``$HERMES_HOME/.env`` authenticates the ``/model`` verification probe (#109315) and a rotated ``.env`` beats a stale value inherited from the parent shell.rs)current_secret_scope get_secretis_multiplex_active)get_env_prefer_dotenv)rr|r}r~r:agent.credential_poolrr)rGr|r}r~rs& r$rrbsv \\  ! -1D1F1FtR(..B557 7?%d+11r88:: s'A3A3A3 A3"A33 BB)F)z*ri.language-model-service..language-model.r1>r::10.0.0.0r)Frs)NNrs)NN)rsNN)r"NN)rsrsNNNNNN)copilotzgithub-copilot)z opencode-zenz opencode-goopencode)rz nous-portal nousresearchr)rsrsFrsNN)__conditional_annotations__r~ __future__rloggingrr. contextlibr dataclassesrrtypingrrrrr r r r r rrrrhermes_cli.model_normalizeragent.models_devrrrrrutilsrrrr!hermes_cli.model_switch_providersr getLoggerrzrrCr4rOrSrartcompile IGNORECASErmrbrrjrprurwrrrr`rrrrrrrr frozensetrrrrrr$r1r3r;rAr`rarbrSrFrfrjrqrrrrrrrrrrrr rr"rrr@rGrrErOrUr_rnruryrrr:rrrrrrrrrrr r r!r-r2r6r:r3r0r<rArQrUr_r[rfrervrr)rs@r$rs` # (,,VVVD``[[J   8 $.\ Y"\-!jj)RTVTaTab +ZYO SJ +7 {O<+7 {M:+7 {N;+7 {H5 +7  x1 +7  x/ +7 x1+7 x.+7 x.+7 x2+7z?;+7 vv.+7 |W5+7 vv.+7y)4+7 x4!+7" |V4#+7$ vu- y&1 x0 z95++7 '78*$35/4$ *,&+1p+/.(,n+-"(( : o HI < Sc02ScLNSc%)Sc(,ScMQScp )) )6 $; \;P_aiktu 1=BTU [:!!R%7!(>%!0 &'W)+X"$uw  $GGG8w8@   :4"J \) \ 5KKE/E/Pc +   = =%%P^$Na* p n$n g P 14a$-` .U.U .Ub*Z*V,8=@;|)OX Q* @3l: 4 0N mm13DE0N mm?AST0N mm;^L0NnN KK*iZ$$.%Plb % P?r&