KiRUdZddlZddlZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z m Z mZmZddlmZejdkZejdZehdZddlZdd lmZmZdd lmZd Zd d d d dZ de e!fdZ"de#fdZ$de e!fdZ%de!fdZ&dde!de!fdZ'dde!fdZ(ddl)m*Z*de fdZ+de fdZ,de fdZ-dZ.dZ/de ddfd Z0d!Z1id"d#d$gd%id&d'gd(d)d*d+d,id-d.d/d*d0d1d2d3d4gd5d6d7gd8d9d:d6d;d6dd?d@dAdBdCdDgdEdFdGdCdHdIdJdFdFdKdFidLdMdCdNdOdPdQdRdCdSdTdUd#d*ddVdWdFdXdYidZd[d*d#d#d#dJdJd\d*d#d#d#dJd]d*d#d#d#dId]d*d#d#d#dJd]d*d#d#d#dJd]d*d#d#d#dJd]d*d#d#d#dJd]d*d#d#d#dJd]d^d_dFd`dadbdFdFdFdCdFdcdFddd dedfdFidgdhdidjidkdldmdndodpd#d#dqdrdsdtdudCd.d"dvid"dwidxdidydIdFdzd{d|id}d~dddddCdCddd#ddd#d#d#d#dNddd#ddgididd#ddCd#dCdCddidddddgdididdCdCdddCdFggdddddCiddZ2gdddggddgdgdZ3e e4ee!fe5d<iZ6idddddFddCddddddCddgddCddddddCddCddddddCddCddddddCddCddddddFddCddddddCddCddddddFddCddddddCddCddddddFddCddddddCddCddddddFddCddddddCdd؜dddd#dFdd؜dddddCdd؜dddd#dFddCddddddCddCdidddddFddCddddddCddCddddddFddCddddddCdd؜dddddFddCdddddddgdCddddddddgdCddddddddgdCddddd ddFddCdd d d ddFddCdd ddddFddCddddddFddCddddddCddCdddddgddCddddddddgdCddd d!d"dddgdFddd#d$d%d&ddgdCddid'd(d)d*ddgdFddd+d,d-d.d/gdCddd0d1d2d3gd4dCddd5d6d7d8d9d:gdCdddd;d<d=d>d?gdCdddd@dAdBdCdd؜dCdDdEdFdCdd؜dGdHdIdJdKgdCdddLdMdNddOdPdQdRdSdCdTd؜dUdVdWdXdFdTd؜dYdZd[d\dCdTd؜d]d^d_ddFdTd؜d`dadbdcdCdTd؜dddedfdcdCdTd؜dgdhdidjdFdTd؜dkdldmddCdTd؜idndodpddFdTd؜dqdrdsddFdTd؜dtdudvddFdTd؜dwdxdydzdFdTd؜d{d|d}ddCdTd؜d~ddddFdTd؜dddddFdTd؜dddddFdTdCddddddFdTdCddddddCdTdCddddddFdTdCddddddFdTdCddddddFdTd؜dddddFdTd؜dddddCdTd؜dddddFdd؜dddddCdd؜ddddFdd؜ddddFdd؜ddddFdd؜ddddFdd؜ddddFdd؜dZ7esdD]Z8e79e8ddՐde#dee e!e ffdZ:de;de!fdZd֐de#de#de e!e ffdZ?dve;de;de;fdZ@dZAde e!e fde e!e ffdZBde e!e fde e!e ffdZCde e!e ffdZDdZEdZFdZGde e!e ffdZHde e!e!ffd„ZIdeJdeJfdĄZKde4fdńZLde!de!fdȄZMdאde!fdɄZNdאdʄZOdאde!fd˄ZPde!de!de e!e ffd̄ZQde!de e!fd̈́ZRde!de!fd΄ZSdτZTdЄZUde!de!fdфZVd҄ZWdS(a Configuration management for Hermes Agent. Config files are stored in ~/.hermes/ for easy access: - ~/.hermes/config.yaml - All settings (model, toolsets, terminal, etc.) - ~/.hermes/.env - API keys and secrets This module provides: - hermes config - Show current configuration - hermes config edit - Open config in editor - hermes config set - Set a specific value - hermes config wizard - Re-run setup wizard N)Path)DictAnyOptionalListTuple)managed_nous_tools_enabledWindowsz^[A-Za-z_][A-Za-z0-9_]*$> TERMINAL_ENV WECOM_BOT_ID WECOM_SECRET FEISHU_APP_ID WHATSAPP_MODEOPENAI_API_KEYSIGNAL_ACCOUNTANTHROPIC_TOKENMATRIX_PASSWORDOPENAI_BASE_URLSIGNAL_HTTP_URLMATRIX_HOME_ROOMTERMINAL_SSH_KEYWHATSAPP_ENABLEDANTHROPIC_API_KEYFEISHU_APP_SECRETMATRIX_ENCRYPTIONTERMINAL_SSH_PORTDINGTALK_CLIENT_IDFEISHU_ENCRYPT_KEYDISCORD_HOME_CHANNELSIGNAL_ALLOWED_USERSMATTERMOST_REPLY_MODETELEGRAM_HOME_CHANNELAUXILIARY_VISION_MODELDINGTALK_CLIENT_SECRETMATTERMOST_HOME_CHANNELFEISHU_VERIFICATION_TOKENSIGNAL_GROUP_ALLOWED_USERS)Colorscolor)DEFAULT_SOUL_MD)true1yesHomebrewNixOS)brewhomebrewnixnixosreturnctjdd}|r:|}|tvrdSt ||Stdz }|rdSdS)z7Return the package manager owning this install, if any.HERMES_MANAGEDr/z.managedN) osgetenvstriplower_MANAGED_TRUE_VALUES_MANAGED_SYSTEM_NAMESgetget_hermes_homeexists)raw normalizedmanaged_markers ./home/ubuntu/hermes-agent/hermes_cli/config.pyget_managed_systemrEAs )$b ) ) / / 1 1C :YY[[ - - -7$((S999$&&3Nw 4c"tduS)aCheck if Hermes is running in package-manager-managed mode. Two signals: the HERMES_MANAGED env var (set by the systemd service), or a .managed marker file in HERMES_HOME (set by the NixOS activation script, so interactive shells also see it). NrErFrD is_managedrJPs   t ++rFcBt}|dkrdS|dkrdSdS)z;Return the preferred upgrade command for a managed install.r.zbrew upgrade hermes-agentr/zsudo nixos-rebuild switchNrH)managed_systems rDget_managed_update_commandrMZs4'))N##**  ** 4rFc"tpdS)z C C CrFmodify configurationcVtt|tjdS)z+Print user-friendly error for managed mode.)fileN)printrTsysstderr)rQs rD managed_errorr[s&  ( (sz::::::rFr?c$tdz S)zGet the main config file path.z config.yamlr\rIrFrDget_config_pathr^s   } ,,rFc$tdz S)z&Get the .env file path (for API keys).z.envr\rIrFrD get_env_pathr`s   v %%rFcbttjjS)z'Get the project installation directory.)r__file__parentresolverIrFrDget_project_rootres >> ' / / 1 11rFcb tj|ddS#ttf$rYdSwxYw)z>#d)) $ $ " HT5 ! ! ! ! ! " " ( )     sAAAAhomec|dz }|rdS|tdt|dS)zISeed a default SOUL.md into HERMES_HOME if the user doesn't have one yet.zSOUL.mdNutf-8encoding)r@ write_textr*ro)rp soul_paths rD_ensure_default_soul_mdrwsRy I 7;;;rFct}|ddt|dD]-}||z }|ddt|.t|dS)zDEnsure ~/.hermes directory structure exists with secure permissions.T)parentsexist_ok)cronsessionslogsmemoriesN)r?mkdirrlrw)rpsubdirds rDensure_hermes_homers   DJJtdJ+++: 6M t,,,AD!!!!!rFmodelr7fallback_providerscredential_pool_strategiestoolsetsz hermes-cliagentZauto) max_turnstool_use_enforcementterminalbackendlocal modal_modecwd.timeoutenv_passthrough docker_image*nikolaik/python-nodejs:python3.11-nodejs20docker_forward_envsingularity_image3docker://nikolaik/python-nodejs:python3.11-nodejs20 modal_image daytona_image container_cpucontainer_memoryicontainer_diskicontainer_persistentTdocker_volumesdocker_mount_cwd_to_workspaceFpersistent_shellbrowserxmanaged_persistence)inactivity_timeoutcommand_timeoutrecord_sessionsallow_private_urlscamofox checkpoints2)enabled max_snapshotsfile_read_max_charsi compression?皙?)r threshold target_ratioprotect_last_n summary_modelsummary_providersummary_base_urlsmart_model_routing)rmax_simple_charsmax_simple_words cheap_model auxiliary)providerrbase_urlapi_keyrdownload_timeout)rrrrr)vision web_extractrsession_search skills_hubapprovalmcpflush_memoriesdisplaykawaiifull interruptdefault) compact personalityresume_displaybusy_input_modebell_on_completeshow_reasoning streaming inline_diffs show_costskintool_progress_commandtool_preview_lengthprivacy redact_piittsedgevoicezen-US-AriaNeuralpNInz6obpgDQGcFmaJgBeleven_multilingual_v2)voice_idmodel_idzgpt-4o-mini-ttsalloy)rrzneuphonic/neutts-air-q4-ggufcpu) ref_audioref_textrdevice)rr elevenlabsopenaineuttssttbasez whisper-1)rrrrzctrl+bg@) record_keymax_recording_secondsauto_ttssilence_thresholdsilence_duration human_delayoffi i )modemin_msmax_msmemoryii_)memory_enableduser_profile_enabledmemory_char_limituser_char_limitr delegation)rrrrmax_iterationsprefill_messages_fileskills external_dirshonchotimezonediscord)require_mentionfree_response_channels auto_thread reactionswhatsapp approvalsmanual<)rrcommand_allowlistquick_commands personalitiessecuritytirith)rdomains shared_files)redact_secretstirith_enabled tirith_pathtirith_timeouttirith_fail_openwebsite_blocklistr{ wrap_response_config_version )FIRECRAWL_API_KEYBROWSERBASE_API_KEYBROWSERBASE_PROJECT_IDFAL_KEYVOICE_TOOLS_OPENAI_KEYELEVENLABS_API_KEY)rrWHATSAPP_ALLOWED_USERSSLACK_BOT_TOKENSLACK_APP_TOKENSLACK_ALLOWED_USERSTAVILY_API_KEYTERMINAL_MODAL_MODE)r r"ENV_VARS_BY_VERSION NOUS_BASE_URLzNous Portal base URL overridez.Nous Portal base URL (leave empty for default)r) descriptionprompturlpasswordcategoryadvancedOPENROUTER_API_KEYz>OpenRouter API key (for vision, web scraping helpers, and MoA)zOpenRouter API keyzhttps://openrouter.ai/keysvision_analyzemixture_of_agents)r4r5r6r7toolsr8r9 GLM_API_KEYzBZ.AI / GLM API key (also recognized as ZAI_API_KEY / Z_AI_API_KEY)zZ.AI / GLM API keyz https://z.ai/ ZAI_API_KEYz$Z.AI API key (alias for GLM_API_KEY)z Z.AI API key Z_AI_API_KEY GLM_BASE_URLzZ.AI / GLM base URL overridez-Z.AI / GLM base URL (leave empty for default) KIMI_API_KEYzKimi / Moonshot API keyz Kimi API keyzhttps://platform.moonshot.cn/ KIMI_BASE_URLz!Kimi / Moonshot base URL overridez'Kimi base URL (leave empty for default)MINIMAX_API_KEYzMiniMax API key (international)zMiniMax API keyzhttps://www.minimax.io/MINIMAX_BASE_URLzMiniMax base URL overridez*MiniMax base URL (leave empty for default)MINIMAX_CN_API_KEYz MiniMax API key (China endpoint)zMiniMax (China) API keyzhttps://www.minimaxi.com/MINIMAX_CN_BASE_URLz!MiniMax (China) base URL overridez2MiniMax (China) base URL (leave empty for default)DEEPSEEK_API_KEYz+DeepSeek API key for direct DeepSeek accesszDeepSeek API Keyz&https://platform.deepseek.com/api_keys)r4r5r6r7r8DEEPSEEK_BASE_URLz'Custom DeepSeek API base URL (advanced)zDeepSeek Base URLDASHSCOPE_API_KEYz>Alibaba Cloud DashScope API key (Qwen + multi-provider models)zDashScope API Keyz-https://modelstudio.console.alibabacloud.com/DASHSCOPE_BASE_URLzGCustom DashScope base URL (default: coding-intl OpenAI-compat endpoint)zDashScope Base URLOPENCODE_ZEN_API_KEYz=OpenCode Zen API key (pay-as-you-go access to curated models)zOpenCode Zen API keyzhttps://opencode.ai/authOPENCODE_ZEN_BASE_URLzOpenCode Zen base URL overridez/OpenCode Zen base URL (leave empty for default)OPENCODE_GO_API_KEYz firecrawl-gateway.nousresearch.comzTool-gateway domain suffixTOOL_GATEWAY_SCHEMEzShared tool-gateway URL scheme for Nous Subscribers only, used to derive vendor hosts (`https` by default, set `http` for local gateway testing)zTool-gateway URL schemeTOOL_GATEWAY_USER_TOKENzuExplicit Nous Subscriber access token for tool-gateway requests (optional; otherwise read from the Hermes auth store)zTool-gateway user tokenz;Tavily API key for AI-native web search, extract, and crawlzTavily API keyzhttps://app.tavily.com/home)rSr web_crawlr$uUBrowserbase API key for cloud browser (optional — local browser works without this)zBrowserbase API keyzhttps://browserbase.com/browser_navigate browser_clickr%uCBrowserbase project ID (optional — only needed for cloud browser)zBrowserbase project IDBROWSER_USE_API_KEYuUBrowser Use API key for cloud browser (optional — local browser works without this)zBrowser Use API keyzhttps://browser-use.com/ CAMOFOX_URLzYCamofox browser server URL for local anti-detection browsing (e.g. http://localhost:9377)zCamofox server URLz)https://github.com/jo-inc/camofox-browserr&z FAL API key for image generationz FAL API keyzhttps://fal.ai/image_generateTINKER_API_KEYzTinker API key for RL trainingzTinker API keyz/https://tinker-console.thinkingmachines.ai/keys)rl_start_trainingrl_check_statusrl_stop_training WANDB_API_KEYz0Weights & Biases API key for experiment trackingz WandB API keyzhttps://wandb.ai/authorizerl_get_resultsrcz?OpenAI API key for voice transcription (Whisper) and OpenAI TTSz&OpenAI API Key (for Whisper STT + TTS)z$https://platform.openai.com/api-keysvoice_transcription openai_ttsz4ElevenLabs API key for premium text-to-speech voiceszElevenLabs API keyzhttps://elevenlabs.io/ GITHUB_TOKENzCGitHub token for Skills Hub (higher API rate limits, skill publish)z GitHub Tokenz"https://github.com/settings/tokensHONCHO_API_KEYz.Honcho API key for AI-native persistent memoryzHoncho API keyzhttps://app.honcho.devhoncho_contextHONCHO_BASE_URLz=Base URL for self-hosted Honcho instances (no API key needed)z,Honcho base URL (e.g. http://localhost:8000))r4r5r8TELEGRAM_BOT_TOKENz"Telegram bot token from @BotFatherzTelegram bot tokenzhttps://t.me/BotFather messagingTELEGRAM_ALLOWED_USERSzSComma-separated Telegram user IDs allowed to use the bot (get ID from @userinfobot)z+Allowed Telegram user IDs (comma-separated)zhttps://t.me/userinfobotDISCORD_BOT_TOKENz'Discord bot token from Developer PortalzDiscord bot tokenz+https://discord.com/developers/applicationsDISCORD_ALLOWED_USERSz7Comma-separated Discord user IDs allowed to use the botz*Allowed Discord user IDs (comma-separated)r*zSlack bot token (xoxb-). Get from OAuth & Permissions after installing your app. Required scopes: chat:write, app_mentions:read, channels:history, groups:history, im:history, im:read, im:write, users:read, files:writezSlack Bot Token (xoxb-...)zhttps://api.slack.com/appsr+uSlack app-level token (xapp-) for Socket Mode. Get from Basic Information → App-Level Tokens. Also ensure Event Subscriptions include: message.im, message.channels, message.groups, app_mentionzSlack App Token (xapp-...)MATTERMOST_URLz3Mattermost server URL (e.g. https://mm.example.com)zMattermost server URLzhttps://mattermost.com/deploy/MATTERMOST_TOKENz-Mattermost bot token or personal access tokenzMattermost bot tokenMATTERMOST_ALLOWED_USERSz:Comma-separated Mattermost user IDs allowed to use the botz-Allowed Mattermost user IDs (comma-separated)MATTERMOST_REQUIRE_MENTIONzaRequire @mention in Mattermost channels (default: true). Set to false to respond to all messages.zRequire @mention in channels!MATTERMOST_FREE_RESPONSE_CHANNELSzJComma-separated Mattermost channel IDs where bot responds without @mentionz+Free-response channel IDs (comma-separated)MATRIX_HOMESERVERz7Matrix homeserver URL (e.g. https://matrix.example.org)zMatrix homeserver URLz%https://matrix.org/ecosystem/servers/MATRIX_ACCESS_TOKENz3Matrix access token (preferred over password login)zMatrix access tokenMATRIX_USER_IDz)Matrix user ID (e.g. @hermes:example.org)zMatrix user ID (@user:server)MATRIX_ALLOWED_USERSzLComma-separated Matrix user IDs allowed to use the bot (@user:server format)z)Allowed Matrix user IDs (comma-separated)GATEWAY_ALLOW_ALL_USERSzMAllow all users to interact with messaging bots (true/false). Default: false.zAllow all users (true/false)API_SERVER_ENABLEDzrEnable the OpenAI-compatible API server (true/false). Allows frontends like Open WebUI, LobeChat, etc. to connect.zEnable API server (true/false)API_SERVER_KEYz`Bearer token for API server authentication. If empty, all requests are allowed (local use only).zAPI server auth key (optional)API_SERVER_PORTz(Port for the API server (default: 8642).zAPI server portAPI_SERVER_HOSTuHost/bind address for the API server (default: 127.0.0.1). Use 0.0.0.0 for network access — requires API_SERVER_KEY for security.zAPI server hostWEBHOOK_ENABLEDzREnable the webhook platform adapter for receiving events from GitHub, GitLab, etc.zEnable webhooks (true/false) WEBHOOK_PORTz1Port for the webhook HTTP server (default: 8644).z Webhook portWEBHOOK_SECRETz[Global HMAC secret for webhook signature validation (overridable per route in config.yaml).zWebhook secret MESSAGING_CWDz5Working directory for terminal commands via messagingz+Messaging working directory (default: home)setting SUDO_PASSWORDz9Sudo password for terminal commands requiring root accessz Sudo passwordz>Maximum tool-calling iterations per conversation (default: 90)zMax iterationsz=(deprecated) Use display.tool_progress in config.yaml insteadu.Tool progress (deprecated — use config.yaml)u.Progress mode (deprecated — use config.yaml)zFPath to JSON file with ephemeral prefill messages for few-shot primingzPrefill messages file pathzOEphemeral system prompt injected at API-call time (never persisted to sessions)zEphemeral system prompt)HERMES_MAX_ITERATIONSHERMES_TOOL_PROGRESSHERMES_TOOL_PROGRESS_MODEHERMES_PREFILL_MESSAGES_FILEHERMES_EPHEMERAL_SYSTEM_PROMPT)rWrXrYrZ required_onlyc:g}tD]1\}}t|s|d|i|ddi2|sKtD]1\}}t|s|d|i|ddi2|S)z| Check which environment variables are missing. Returns list of dicts with var info for missing variables. name is_requiredTF)REQUIRED_ENV_VARSitems get_env_valueappendOPTIONAL_ENV_VARS)rmissingvar_nameinfos rDget_missing_env_varsrls G,1133LL$X&& L NNFHJJmTJJ K K K Q/5577 Q QNHd ** QODO-OOPPP NrFconfig dotted_keyc|d}|}|ddD];}||vs(t||tsi||<||}<|||d<dS)zSet a value at an arbitrarily nested dotted key path. Creates intermediate dicts as needed, e.g. ``_set_nested(c, "a.b.c", 1)`` ensures ``c["a"]["b"]["c"] == 1``. rN)split isinstancer>dict)rrvaluepartscurrentparts rD _set_nestedrs   S ! !EGcrc    w  jT1B1BD&I&I GDM$-GE"IrFct}gddtdtdtffd t|S)z Check which config fields are missing or outdated (recursive). Walks the DEFAULT_CONFIG tree at arbitrary depth and reports any keys present in defaults but absent from the user's loaded config. r7defaultsrprefixc`|D]\}}|dr|s|n|d|}||vr||d|dGt|tr;t||tr||||dS)N_rzNew config option: )keyrr4)r startswithrrrr>)rrrr default_valuefull_key_checkrs rDrz)get_missing_config_fields.._checks"*.."2"2 > > C~~c"" "(?ss.?.?#.?.?H'!!#,#C#C#C   M400 >Z C@P@PRV5W5W >}gclH=== > >rF)r7) load_configrrnDEFAULT_CONFIG)rrrs @@rDget_missing_config_fieldsrsj]]FG > > > >c > > > > > > > F>6""" NrFct}|dd}tdd}||fS)zS Check config version. Returns (current_version, latest_version). r!rr)rr>r)rrlatests rDcheck_config_versionrsA ]]Fjj*A..G    11 5 5F F?rF interactivequietc gggd} t}|r|std|dn#t$rYnwxYwt\}}|dkrFt }|di}t |tsi}d|vrtd}td} |r7| d vr!d |d<|d  d n| r_| d vrI| |d<|d  d| dn d|d<|d  d||d<t||std|d|dkrt }d|vrtj dd} | r]| rI| |d<|d  d| dn d|d<|d  dt||s|dpd} td| |dkrD td} | r!tdd|stdn#t$rYnwxYw||kr|std|d |t!d!"} | r7|s5td#| D]#}td$|d%d&|d'$|r/| r,td(| D]}|d)rtd*|d)|d+r$d,d-l}|d.|d/d&}n+t%d.|d/d&}|rPt|d%||d0 |d%td1|d%n%|d2 d3|d%d4tt!d5"}| r d6| Dn t'fd7|D}t'}t)|d8z|d8zD]0}|t,|g1|rC|r@|s=d9t/|D}|r!td:t1|d;|D].\}}td<|d=|d'd/t t%d> }n#t2t4f$rd?}YnwxYw|d@vr`t|D]M\}}|d)r?td.|d'|td*|d)n&td.|d'||d+r2d,d-l}|d.|d/|dA}n9t%d.|d/|dA}|r=t|||d0 |td1|tOntdBt7}|r{t }|D]U}|dC}|dD}t9||||d  ||stdE|dF|V||dG<t|n(||kr"t }||dG<t||S)Ha< Migrate config to latest version, prompting for new required fields. Args: interactive: If True, prompt user for missing values quiet: If True, suppress output Returns: Dict with migration results: {"env_added": [...], "config_added": [...], "warnings": [...]} ) env_added config_addedwarningsu ✓ Repaired .env file (z corrupted entries fixed)r0r tool_progressrr)false0norrz;display.tool_progress=off (from HERMES_TOOL_PROGRESS=false))newallzdisplay.tool_progress=z! (from HERMES_TOOL_PROGRESS_MODE)rz#display.tool_progress=all (default)u- ✓ Migrated tool progress to config.yaml: rrHERMES_TIMEZONEr7z timezone=z (from HERMES_TIMEZONE)z$timezone= (empty, uses server-local)(server-local)u% ✓ Added timezone to config.yaml: ru8 ✓ Cleared ANTHROPIC_TOKEN from .env (no longer used)zConfig version:  → Tru0 ⚠️ Missing required environment variables:u • rz: r4z Let's configure them now: r6z Get your key at: r7rN r5ru ✓ Saved rzSkipped z - some features may not workFch|] }|d S)rrI.0vs rD z!migrate_config..&s555Aai555rFcRg|]#}|dv |d!|$S)rr9r>)rrrequired_namess rD z"migrate_config..'sC V9N * *1553D3D * * * *rFrc\g|])}t|s|tv|t|f*SrI)rr)rrs rDrz"migrate_config..2sK    && ,03D+D+D$T* ++D+D+DrF z$ new optional key(s) in this update:u • u — z Configure new keys? [y/N]: n)yr-z (Enter to skip): z1 Set later with: hermes config set rru ✓ Added  = r!)sanitize_env_filerX Exceptionrrr>rrrr;r save_configr8r9r:save_env_valuergetpassinputsetrangeupdater2sortedlenEOFErrorKeyboardInterruptrr)rrresultsfixes current_ver latest_verrr old_enabledold_modeold_tz tz_display old_token missing_envvarrrmissing_optional new_var_namesver new_and_unsetrranswermissing_configfieldrrrs @rDmigrate_configrsp CCG !##  Q Q OuOOO P P P      344KQ**Y++'4(( G ' ) )'(>??K$%@AAH V{00226JJJ+0('../lmmmm Vhnn...@@+3>>+;+;('../{HXHX/{/{/{||||+0('../TUUU 'F9      b`goF^``aaaQ V # #Y0"55F W&,,.. W%+\\^^z"'../b6<<>>/b/b/bcccc%'z"'../UVVV     L#J/C3C JjJJKKKQ %&788I V0"555VTUUU    D Z ???:??@@@'T:::KA5A ABBB A AC ?CK??3}+=?? @ @ @ @{ -...  Cwwu~~ :8CJ88999wwz"" >(>S](>(>(>??43x=44455;;== bs6{E222 $++CK8882S[223333 #**+`c&k+`+`+`aaa GGGG,%@@@9DO555555#%%N# EEM[1_j1n55??044S"==>>>>#K#KU#K  }--    K Q]++QQQ R R R+ K K dIIIDHH]B,G,GIIJJJJ GGG >??EEGGMMOO/0    %%"/JD$xxDB488M4#@#@BBCCCADKAABBBBB488M4#@#@BBCCCxx ++a& '0aTXXh5M5M0a0a0a b b %&W488Hd+C+C&W&W&W X X ^ ^ ` `5&tU333 ,33D9993T33444GGGG"IJJJ/00N# 8 8E,CI&G W - - - N # * *3 / / / 86S66W66777%/ !F z ! !$. !F Ns0%/ <<=2J00 J=<J=,3V V65V6overridec|}|D]X\}}||vrJt||tr/t|trt |||||<S|||<Y|S)aRecursively merge *override* into *base*, preserving nested defaults. Keys in *override* take precedence. If both values are dicts the merge recurses, so a user who overrides only ``tts.elevenlabs.voice_id`` will keep the default ``tts.elevenlabs.model_id`` intact. )copyrrr _deep_merge)rrresultrrs rDrrqsYY[[Fnn&&  U 6MM6#;-- 5$'' &fSk599F3KKF3KK MrFct|trtjdd|St|trd|DSt|t r d|DS|S)aRecursively expand ``${VAR}`` references in config values. Only string values are processed; dict keys, numbers, booleans, and None are left untouched. Unresolved references (variable not in ``os.environ``) are kept verbatim so callers can detect them. z \${([^}]+)}ctj|d|dS)Nrr)r8environr>group)ms rDz"_expand_env_vars..s*bjnnQWWQZZ<<rFc4i|]\}}|t|SrI_expand_env_vars)rkrs rD z$_expand_env_vars..s'???41a#A&&???rFc,g|]}t|SrIr)ritems rDrz$_expand_env_vars..s!7774 &&777rF)rrnresubrrlist)objs rDrrs#s v  < <    #t@??399;;????#t87737777 JrFcjtfddD}|sStd}t|ts |rd|ini}|d<dD]I}|}|r||s|||<|dJS)uMove stale root-level provider/base_url into model section. Some users (or older code) placed ``provider:`` and ``base_url:`` at the config root instead of inside ``model:``. These root-level keys are only used as a fallback when the corresponding ``model.*`` key is empty — they never override an existing ``model.provider`` or ``model.base_url``. After migration the root-level keys are removed so they can't cause confusion on subsequent loads. c3BK|]}|VdSNr)rrrs rD z-_normalize_root_model_keys..s-CCQ6::a==CCCCCCrF)rrrrN)anyrr>rpop)rhas_rootrrroot_vals` rD_normalize_root_model_keysrsCCCC*BCCCCCH  &\\F JJw  E eT " " &+3E""w'::c??  "EIIcNN "!E#J 3 MrFct|}t|dpi}d|vrd|vr |d|d<d|vrtdd|d<||d<|dd|S)z;Normalize legacy root-level max_turns into agent.max_turns.rrN)rr>rr)r agent_configs rD_normalize_max_turns_configrs &\\F 7++1r22LfL!@!@$*;$7 [!,&&$27$;K$H [!"F7O JJ{D!!! MrFcddl}tt}|t}|r t |d5}tj|pi}dddn #1swxYwYd|vr_t| dpi}| d |d|d<||d<| ddt||}n)#t$r}td|Yd}~nd}~wwxYwtt!t#|S)z.Load configuration from ~/.hermes/config.yaml.rNrrrsrrz Warning: Failed to load config: )rrr^deepcopyrr@openyaml safe_loadrr>rrrrXrrr)r config_pathrf user_configagent_user_configes rDrrsKKK!##K ]]> * *F: :kG444 6"nQ//52  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6k))$()A)A)GR$H$H!$((55=5@5M%k2'8 G$ T222 55FF : : : 8Q88 9 9 9 9 9 9 9 9 : 67RSY7Z7Z[[ \ \\s=D!B8 DBD B A6D D) D$$D)u # ── Security ────────────────────────────────────────────────────────── # API keys, tokens, and passwords are redacted from tool output by default. # Set to false to see full values (useful for debugging auth issues). # tirith pre-exec scanning is enabled by default when the tirith binary # is available. Configure via security.tirith_* keys or env vars # (TIRITH_ENABLED, TIRITH_BIN, TIRITH_TIMEOUT, TIRITH_FAIL_OPEN). # # security: # redact_secrets: false # tirith_enabled: true # tirith_path: "tirith" # tirith_timeout: 5 # tirith_fail_open: true u # ── Fallback Model ──────────────────────────────────────────────────── # Automatic provider failover when primary is unavailable. # Uncomment and configure to enable. Triggers on rate limits (429), # overload (529), service errors (503), or connection failures. # # Supported providers: # openrouter (OPENROUTER_API_KEY) — routes to any model # openai-codex (OAuth — hermes login) — OpenAI Codex # nous (OAuth — hermes login) — Nous Portal # zai (ZAI_API_KEY) — Z.AI / GLM # kimi-coding (KIMI_API_KEY) — Kimi / Moonshot # minimax (MINIMAX_API_KEY) — MiniMax # minimax-cn (MINIMAX_CN_API_KEY) — MiniMax (China) # # For custom OpenAI-compatible endpoints, add base_url and api_key_env. # # fallback_model: # provider: openrouter # model: anthropic/claude-sonnet-4 # # ── Smart Model Routing ──────────────────────────────────────────────── # Optional cheap-vs-strong routing for simple turns. # Keeps the primary model for complex work, but can route short/simple # messages to a cheaper model across providers. # # smart_model_routing: # enabled: true # max_simple_chars: 160 # max_simple_words: 28 # cheap_model: # provider: openrouter # model: google/gemini-2.5-flash uD # ── Security ────────────────────────────────────────────────────────── # API keys, tokens, and passwords are redacted from tool output by default. # Set to false to see full values (useful for debugging auth issues). # # security: # redact_secrets: false # ── Fallback Model ──────────────────────────────────────────────────── # Automatic provider failover when primary is unavailable. # Uncomment and configure to enable. Triggers on rate limits (429), # overload (529), service errors (503), or connection failures. # # Supported providers: # openrouter (OPENROUTER_API_KEY) — routes to any model # openai-codex (OAuth — hermes login) — OpenAI Codex # nous (OAuth — hermes login) — Nous Portal # zai (ZAI_API_KEY) — Z.AI / GLM # kimi-coding (KIMI_API_KEY) — Kimi / Moonshot # minimax (MINIMAX_API_KEY) — MiniMax # minimax-cn (MINIMAX_CN_API_KEY) — MiniMax (China) # # For custom OpenAI-compatible endpoints, add base_url and api_key_env. # # fallback_model: # provider: openrouter # model: anthropic/claude-sonnet-4 # # ── Smart Model Routing ──────────────────────────────────────────────── # Optional cheap-vs-strong routing for simple turns. # Keeps the primary model for complex work, but can route short/simple # messages to a cheaper model across providers. # # smart_model_routing: # enabled: true # max_simple_chars: 160 # max_simple_words: 28 # cheap_model: # provider: openrouter # model: google/gemini-2.5-flash crtrtddSddlm}t t }t t|}g}|di}|r|d| t|di}|r*|dr|d s| t||||rd |nd t|dS) z,Save configuration to ~/.hermes/config.yaml.zsave configurationNr)atomic_yaml_writerrfallback_modelrrr7) extra_content)rJr[utilsr!rr^rrr>r_SECURITY_COMMENT_FALLBACK_COMMENTjoinro)rr!rrBrsecfbs rDrrBsG||*+++''''''!##K+,G,O,OPPJ E ..R ( (C (#''*++3 &''' (" - -B (bffZ(((RVVG__( &'''(-7bggennn4 rFct}i}|rtrdddni}t|fi|5}|D]}|}|rn|dsYd|vrU|d\}}}|d||< dddn #1swxYwY|S)z/Load environment variables from ~/.hermes/.env.rrreplacerterrors#=z"'N)r`r@ _IS_WINDOWSrr:r partition)env_pathenv_varsopen_kwrlinerrrs rDload_envr6_sG~~HH GALSw)<<>((   ! # #  " " "$S%9%9::O#O44 2 2301AO8L8L0L0Loa!e,,RUV^R_R_C(..002$$TD[111  2   X_ - - - - rFc6t}|sdStrdddni}trddini}t|fi|5}|}dddn #1swxYwYt |}||krdSt t|t|z }|dkrVtdt||D}|t t|t|z z }tj t|j dd \}} tj|d fi|5}|||tj|dddn #1swxYwYtj||n5#t*$r( tj|n#t.$rYnwxYwwxYwt1||S) zRead, sanitize, and rewrite ~/.hermes/.env in place. Returns the number of lines that were fixed (concatenation splits + placeholder removals). Returns 0 when no changes are needed. rrrr+r,rtNc3,K|]\}}||k dVdS)rNrI)rabs rDr z$sanitize_env_file..s*KK$!QAFFAFFFFKKrF.tmp.env_dirsuffixrw)r`r@r0r readlinesrJabsrsumziptempfilemkstemprnrcr8fdopen writelinesflushfsyncfilenor+ BaseExceptionunlinkrhro) r2read_kwwrite_kwroriginal_linesrArfdtmp_paths rDrrs ~~H ??  q\}} | |d r|d |d||<d }n?|sH|r+|dds|dxxdz cc<||d |dt%jt)|jdd\} } t-j| dfi|5}|||t-j|dddn #1swxYwYt-j| |n5#t8$r( t-j| n#t<$rYnwxYwwxYwt?||t,j |<ts@ t-j!|tDj#tDj$zdS#t<$rYdSwxYwdS)z)Save or update a value in ~/.hermes/.env.zset Nz#Invalid environment variable name: r9r7 rrr+r,rtFr/TrrOrPrQrT)%rJr[_ENV_VAR_NAME_REmatch ValueErrorr+rr`r0r@rrUrJr?r:rendswithrrYrZrnrcr8r[r\r]r^r_r`rarhrorrgstatS_IRUSRS_IWUSR) rrr2rbrcr7rfoundrGr5rerfs rDrrs||lSll###  ! !# & &HFsFFGGG MM$ # # + +D" 5 5E~~H=HO7i888RG(3; G$$H E+ ( & &g & & "!KKMME " " " " " " " " " " " " " " "$E** EU##4 ::<< " "c999 - - )))))E!HE E  )  r++D11  "III III ''e'''(((#HO(<()rr3s rDrr/s: bjz#zzH <<  rFc|stdtjSt|dkrdS|dddz|ddzS)zRedact an API key for display. (not set) z***Nr0...)r)r(DIMr)rs rD redact_keyr>sO .[&*--- 3xx"}}u rr7U?SX %%rFc t}tttdtjttdtjttdtjtttdtjtjtdt tdttdttttdtjtjgd }|D]7\}}t|}td |d d t|8td ptd}td dd d t|tttdtjtjtd| ddtd| di dtddtttdtjtj| di}td| ddtd| ddrdnd td!| d"drdnd tttd#tjtj| d$i}td%| d&d'td(| d)d*td+| d,d-d.| d&d/kr(td0| d1d2nj| d&d3kr(td4| d5d6n)| d&d7krLtd8| d9d2td:}td;|rdkrLtd?| d@d2tdA} tdB| rd.s\  j&!!V+AquuWb/A/ArFu ◆ Auxiliary Models (overrides)rz provider=zmodel=12s, u◆ Messaging Platformsrmrpz Telegram: znot configuredz Discord: u────────────────────────────────────────────────────────────z+ hermes config edit # Edit config filez! hermes config set z+ hermes setup # Run setup wizardN)rrXr)r(CYANBOLDr^r`rerrr>rrrvaluesrrr')rr:env_keyrranthropic_valuerr modal_token daytona_keyssh_hostssh_usertzrr_sm comp_providerr aux_tasks has_overrideslabeltask_cfgprovmdlrtelegram_token discord_tokens rD show_configrGs ]]F GGG %DFLFQ R RSSS %RTZT_ ` `aaa %DFLFQ R RSSS GGG % V[&+ 6 6777 0_.. 0 0111 -\^^ - -... 1-// 1 1222 GGG % V[ 9 9:::   D33 g&& 14111j//112222#$566\-H[:\:\O >{ > > >O! >??? GGG % V[&+ 6 6777 =VZZ;; = =>>> mVZZ4488nU\F]^iFjkk m mnnn GGG % v{FK 8 8999jjB''G CW[[AA C CDDD VW[[1A5%I%ITTTu V VWWW XW[[1CU%K%KVTTQV X XYYY GGG % V[ 9 9:::zz*b))H ?X\\)W== ? ?@@@ 7X\\%55 7 7888 ;X\\)R88 ; ; ;<<<||I(** mn>j!k!kmmnnnn i M 1 1 {.ACx!y!y{{|||| i G + + lm=i!j!jllmmm#$455  O!M+OOPPPP i I - - o(,,@l"m"mooppp#$566  O!M+OOPPPP i E ) ) !455 !455 :!8[::;;; :!8[::;;; GGG % V[ 9 9::: J # #B H %%%&&&& F'7!D!DFFGGG GGG %)6; D DEEE**]B//Kooi..G 9g7UU4 9 9:::6 Pd!C!Cc!IPPPPQQQ j!F!F!Ljjjjkkk Q1A2!F!FQQQRRRooor22Dn &&&'''#(:FCC F " " 4]44 5 5 5 ;++I }}Xr22 }}]B77I!!##M <  e6 V[QQRRR(00 < rr;isdigitintr+floatrdumprn) rrapi_keysrrrrrr_config_to_env_syncs rDset_config_valuers||0111   H yy{{h#))++"6"6z"B"BciikkFZFZ[cFdFdhkhqhqhshsh~h~@NiOiOsyy{{E*** 222,..22333 "##KK kG444 6"nQ//52  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6   KKK  IIcNNEGcrc    w  jT1B1BD&I&I GDM$- {{}}--- 0 0 0 E  sB " " * * , ,e GE"I k3 1 1 1MQ +qUeLLLLMMMMMMMMMMMMMMM +4!8&B 6":2Z&. 6%@   !!!*3/U<<< 5S 5 5U 5 5 5 566666sHE*E  E EEEE E('E(J&&J*-J*c  t|dd}||dkrtdS|dkrtdS|dkrt|dd}t|dd}|r|mtdttd td td td t jd t ||dS|dkrttdS|dkrttdS|dkrtttdtj tj ttd}t}t\}}|s?|s=||kr7ttdtjtdS||krtd|d||r tdt#|dd|D}d|D} |r=tdt#|d|D]} td| d| rztdt#| d | D]W} | d!g} | r!d"d#| dd$d%nd&} td| d| Xtt)d'd(} t| d)s| d*r'ttd+tj| d,rCt| d,D],}ttd-|tj-tdS|d.krtttd/tj tj tt\}}||krtd|d0n.ttd|d|d1tjtttd2tj t,D]O}t/|rtd3|$ttd4|d5tjPtttd6tj t2D]\}}t/|rtd3|'|d!g} | r dd#| dd$nd&} ttd7|| tjt}|rUtttd8t#|d9tjtd:tdStd;|ttd<td=td>td?td@tdAtdBtdCt jd dS)DzHandle config subcommands.config_commandNshoweditrrrz&Usage: hermes config set z Examples:z3 hermes config set model anthropic/claude-sonnet-4z+ hermes config set terminal.backend dockerz0 hermes config set OPENROUTER_API_KEY sk-or-...rrkzenv-pathmigrateu*🔄 Checking configuration for updates...Fru ✓ Configuration is up to date!z Config version: rrz1 new config option(s) will be added with defaultsc<g|]}|d|S)rrrs rDrz"config_command..s)KKK!aeeM6J6JKAKKKrFcfg|].}|d|d,|/S)rr9rrs rDrz"config_command..sN   55'' 01j0A0A    rFu ⚠️ z required API key(s) missing:u • ru ℹ️ z$ optional API key(s) not configured:r=z (enables: r)r7T)rrrru✓ Configuration updated!ru ⚠️ checku📋 Configuration Statusu ✓z (update available)z Required:u ✓ u ✗ z (missing)z Optional:u ○ rz new config option(s) availablez+ Run 'hermes config migrate' to add themzUnknown config command: zAvailable commands:z4 hermes config Show current configurationz/ hermes config edit Open config in editorz6 hermes config set Set a config valuez; hermes config check Check for missing/outdated configz8 hermes config migrate Update config with new optionsz/ hermes config path Show config file pathz- hermes config env-path Show .env file path)getattrrrrXrYexitrr^r`r)r(rrrrrGREENrr>r'rYELLOWrrREDrrr)argssubcmdrrrrrrrequired_missingoptional_missingrr= tools_strrwarningrrs rDrrMsA T+T 2 2F ~6)) 6   5dE4((gt,, em : ; ; ; GGG +    G H H H ? @ @ @ D E E E HQKKKe$$$$$ 6   o     :   lnn 9    e@&+v{[[\\\ +??? 244"6"8"8 Z > kZ6O6O %:FLII J J J GGG F  # # E{EEEE F F F  a _^,,___ ` ` `KK{KKK  "     1 U%5!6!6UUU V V V' 1 1/#f+//0000  < \%5!6!6\\\ ] ] ]' < <,,EJRA$))E"1"I*>*>AAAAPR :#f+:y::;;;; !T???  ;  E7>#: E %4flCC D D D :  D GGG":. D De222FMBBCCCC  7    e/fkJJKKK "6"8"8 Z * $ $ 8{888 9 9 9 9 %^[^^z^^^`f`mnn o o o  eM6;//000) J JHX&& J+++,,,,e;x;;;VZHHIIII  eM6;//000/5577 K KNHdX&& K+++,,,,"-->CK:DIIeBQBi$8$8::: e>>  rF)rP)rU)F)TFr )X__doc__r8platformrrmrrYrYpathlibrtypingrrrrrtools.tool_backend_helpersr _managed_nous_tools_enabledsystemr0compileri frozensetr;rhermes_cli.colorsr(r)hermes_cli.default_soulr*r<r=rnrEboolrJrMrOrTr[hermes_constantsr?r^r`rerlrorwrrr2r__annotations__rr _hidden_varrrrrrrrrrrrrr%r&_COMMENTED_SECTIONSrr6rrJrrrvrxrzrrrrrrrrIrFrDrs"      33333333333333``````ho9, 2:9::) ++++++++333333,     HSM    ,D,,,,HSM;C;;;; 3s8;;#;;;;-,,,,,-----&d&&&&2$2222      $4 " " " I RI"I!"I I   !' I7f s 3  2 D b R C E  D!" %#$ %, "-2 (3< D=I`! # "5   aIBCIR7SIV" WIh iIB "                        g::CIz &!!&   {IZe[Id  ' /0  '  3     eIR  V  [  SIh !$  iIIxyIF  $!   GIf gI~RIH IIV bWI^_Id"$ eItuIJ K IV W IZ b[ Ib Rc Ih     i IB    C IP rQ IId YXX "67EEE   --T#tCy.)x6B xW&+"$78x&[& 'x6=  7xF=  GxV5A Wxf0 . gxv:; wxF8#( GxV2> Wxf9+* gxv:F wxFD$7 GxT@% UxbW%> cxp`& qx@V() AxxP7C Qx`U') axp6B qx@o&7 AxNK9 OxbJ  . cxrN$% . sxBF%' . CxRO= SxbjM cxro. sxBj+ CxRO+   SxbT",;;; cxrn')$o6 sxB\*)$o6 CxRn')$o6 Sxxxbr&:$o6 cxr9 "# sxB 7"@MMM C xR I!+"$56 S xb X:5'6 c xr M&' s x@ \ 3 A xR G"'"# S xb V@c xp ;&' q x~ l?)  xL @%< M xZ P> [ xh P/+i xz G/+{ xL L)/ M xZ F( [ xxxh SA !!i xv !z0 ##w xD (c? **E xR P)6 S x` L' a xn B1 o x| e= } xJf0   KxZL2 [xjy2 kxzA# {xJ]# KxZk0 [xhJ  ixvt" wxHN? IxVR! WxxfX" WB WB ""`. %%i+ ''cxxxt#"$$111 k40000d38n9M,  #    4S#X#78 eCHo    uuuDuT#s(^uuuupddt((tCH~$sCx.< S#X 4S>    "]T#s(^]]]]6 !H(VS#X:$sCx.&0t00000f*3****Z;;C;;;;|$$c$$$$$$$$""#""""s34S>sx}&C&C&&&&L L L ^///@P7#P7cP7P7P7P7nFFFFFrF