+ i$aERRt]0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI H t ^RI H t ^RI HtHtHtHtHt^RIHt]P,!4R8Ht]P0!R4t]!0RkR kR kR kR kR kRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkR kR!kR"kR#kR$kR%kR&kR'kR(k4t^RIt^R)IHtHt^R*I H!t!ERSt"R+R,R-R,R.R/R0R//t#R1R2lt$R3R4lt%R5R6lt&R7R8lt'ERTR9R:llt(ERUR;R<llt)^R=I*H+t+R>R?lt,R@RAlt-RBRClt.RDt/REt0RFRGlt1RHt2/RIRJbRK/bRL.bRM/bRNRO.bRPRQ^ZRRRSRTRU/bRV/RWRXbRYRUbRZR[bR\^bR].bR^R_bR`.bRa/bRbRcbRdR_bReR_bRf^bRgRhbRiRjbRkRlbRm.bRnRobRpRl/CbRqRr^xRs^RtRoRuRoRvRwRo//bRxRyRlRz^2/bR{R|bR}RyRlR~RRRR^RRJRRURR/bRRyRoR^R^R//bRRRRURIRJRRJRRJR\^R^/RRRURIRJRRJRRJR\R/R}RRURIRJRRJRRJR\^x/RRRURIRJRRJRRJR\^/RRRURIRJRRJRRJR\^/RRRURIRJRRJRRJR\^/RRRURIRJRRJRRJR\^/RRRURIRJRRJRRJR\^//bRRRoRRRRRRRRoRRoRRoRRlRRoRRRRoR^/ bRRRo/bRRRRRR/RRRRR/RRIRRR/RRRJRRJRIRRR//bRRyRlRRXRXRIR/RRIR//b/RRRR^xRRoR^RR/bRRRRRRR/bRRRlRRlRRRRRRJ/bRRIRJRRJRRJRRJR^2/bRRJbRR./bR/bRRJbRRRlRRJRRlRRl/bR/bRRRR\^ERER?ERRlER R/bER@ERERAERERBERRJERRoER R/b/ERCERERDEREREERERFERRlER R/bERGERERHERERIERRJERRoER RER Rl/bERJERERKERERLERERMERRlER RER Rl/bERNEREROERERPERRERRoER RER Rl/bERQERERRERERSERERMERRlER RER Rl/bERTERERUERERVERRERRoER RER Rl/bERWERERXERERYERERZERRlER R/bER[ERER\ERER]ERRERRoER RER Rl/bER^ERER_ERER`ERERaERERbR.ERRlER ERc/bERdEREReERERfERERgERERbR.ERRlER ERc/bRERERhERERiERERjERERbR.ERRlER ERc/bERkERERlERERmERRERRoER ERcER Rl/bERnERERoERERpERRERRoER ERcER Rl/bERqERERrERERsERRERRoER ERcER Rl/bERtERERuERERvERRERRoER ERcER Rl/bERwERERxERERyERRERRlER ERcER Rl/bERERERzERER{ERER|ER.ERXOERRlER ERc/bC/RERER}ERER~ERERERERER.ERRlER ERc/bRERERERERERERERERER.ERRoER ERc/bERERERERERERERERERER.ERRlER ERc/bERERERERERERERER.ERRoER ERc/bERERERERERERERERERER.ERRoER ERc/bRERERERERERERERER.ERRlER ERc/bERERERERERERERER.ERYOERRlER ERc/bERERERERERERERERERER.ERRlER ERc/bRERERERERERERERERER.ERRlER ERc/bRERERERERERERERRlER ERc/bERERERERERERERERRlER ERc/bERERERERERERERERER.ERRlER ERc/bERERERERERER ERc/bERERERERERERERERRlER ER/bERERERERERERERERRoER ER/bERERERERERERERERRlER ER/bERERERERERERRERRoER ER/bC/RERERERERERERERRlER ER/bRERERERERERERERRlER ER/bERERERERERERERERRoER ER/bERERERERERERRERRlER ER/bERERERERERERRERRoER ER/bERERERERERERRERRoER ER/bERERERERERERRERRoER ER/bERERERERERERERERRoER ER/bERERERERERERRERRlER ER/bERERERERERERRERRoER ER/bERERERERERERRERRoER ER/bR&ERERERERERRERRoER ERER Rl/bR'ERERERERERRERRoER ERER Rl/bR(ERERERERERRERRoER ERER Rl/bR$ERERERERERRERRoER ERER Rl/bERERERERERERRERRoER ERER Rl/bERERERERERERRERRoER ERER Rl/bCERERERERERERRERRlER ERER Rl/ERERERERERERRERRoER ERER Rl/ERERERERERERRERRoER ERER Rl/ERERERERERERRERRoER ER/ERERERERERERRERRoER ER/ERERERERERERRERRlER ER/ERERERERERERRERRoER ER/ERERERERER ERRERRlER ER/ER ERER ERER ERRERRoER ER/ER ERERERERERRERRoER ER/ERERERERERERRERRoER ER/ERERERERERERRERRoER ER/ERERERERERERRERRoER ER// Ct6]!4'gERZFt7]6Pq]7R4K ER[ERERllt9ERERlt:ERERlt;ERERlt0ER]mt?0ER^mt@] !ER"ER#44tAER_ER$ER%lltBER_ER&ER'lltCER`ER(ER)lltDER*ER+ltEER,tFER-ER.ltGER/ER0ltHER1ER2ltIER3tJER4tKER5tLER6ER7ltMER8ER9ltNER:ER;ltOER<ER=ltPER>ER?ltQER@ERAltRER_ERBERClltSER_ERDltTER_EREERFlltUERGERHltVERIERJltWERKERLltXERMtYERNtZEROERPlt[ERQt\R#(aa Configuration management for Hermes Agent. Config files are stored in ~/.hermes/ for easy access: - ~/.hermes/config.yaml - All settings (model, toolsets, terminal, etc.) - ~/.hermes/.env - API keys and secrets This module provides: - hermes config - Show current configuration - hermes config edit - Open config in editor - hermes config set - Set a specific value - hermes config wizard - Re-run setup wizard N) dataclassPath)DictAnyOptionalListTuple)managed_nous_tools_enabledWindowsz^[A-Za-z_][A-Za-z0-9_]*$OPENAI_API_KEYOPENAI_BASE_URLANTHROPIC_API_KEYANTHROPIC_TOKENAUXILIARY_VISION_MODELDISCORD_HOME_CHANNELTELEGRAM_HOME_CHANNELSIGNAL_ACCOUNTSIGNAL_HTTP_URLSIGNAL_ALLOWED_USERSSIGNAL_GROUP_ALLOWED_USERSDINGTALK_CLIENT_IDDINGTALK_CLIENT_SECRET FEISHU_APP_IDFEISHU_APP_SECRETFEISHU_ENCRYPT_KEYFEISHU_VERIFICATION_TOKEN WECOM_BOT_ID WECOM_SECRET TERMINAL_ENVTERMINAL_SSH_KEYTERMINAL_SSH_PORT WHATSAPP_MODEWHATSAPP_ENABLEDMATTERMOST_HOME_CHANNELMATTERMOST_REPLY_MODEMATRIX_PASSWORDMATRIX_ENCRYPTIONMATRIX_DEVICE_IDMATRIX_HOME_ROOMMATRIX_REQUIRE_MENTIONMATRIX_FREE_RESPONSE_ROOMSMATRIX_AUTO_THREAD)Colorscolor)DEFAULT_SOUL_MDbrewHomebrewhomebrewnixNixOSnixosc:V^8dQhR\\,/#returnrstr)formats"./home/ubuntu/hermes-agent/hermes_cli/config.py __annotate__r>Cs  HSM c\P!RR4P4pV'd3VP4pV\9dR#\ P W4#\4R, pVP4'dR#R#)z7Return the package manager owning this install, if any.HERMES_MANAGEDr4z.managedN) osgetenvstriplower_MANAGED_TRUE_VALUES_MANAGED_SYSTEM_NAMESgetget_hermes_homeexists)raw normalizedmanaged_markers r=get_managed_systemrOCsi ))$b ) / / 1C YY[ - -$((99$&3N r?c$V^8dQhR\/#r7)bool)r<s"r=r>r>Rs,,D,r?c\4RJ#)zCheck if Hermes is running in package-manager-managed mode. Two signals: the HERMES_MANAGED env var (set by the systemd service), or a .managed marker file in HERMES_HOME (set by the NixOS activation script, so interactive shells also see it). NrOr?r= is_managedrURs  t ++r?c:V^8dQhR\\,/#r7r:)r<s"r=r>r>\sHSMr?c>\4pVR8XdR#VR8XdR#R#)z;Return the preferred upgrade command for a managed install.r1zbrew upgrade hermes-agentr4zsudo nixos-rebuild switchNrS)managed_systems r=get_managed_update_commandrY\s#')N#* * r?c$V^8dQhR\/#r7r;)r<s"r=r>r>fs;;C;r?c*\4;'gR#)zr>ks3sr?c,\4;'gRp\P!RR4P4P 4pVR8Xd#V\ 9dRM T;'gRpRV RV R2#VR 8XdT;'gR pRV R V R 2#RV R V R2#)z/Build a user-facing error for managed installs.za package managerrArBr4truezCannot z?: this Hermes installation is managed by NixOS (HERMES_MANAGED=ze). Edit services.hermes-agent.settings in your configuration.nix and run: sudo nixos-rebuild switchr1r2zB: this Hermes installation is managed by Homebrew (HERMES_MANAGED=z#). Use: brew upgrade hermes-agentz): this Hermes installation is managed by z:. Use your package manager to upgrade or reinstall Hermes.)rOrCrDrErFrG)r_rXrLenv_hints& r=format_managed_messagercks')@@-@N ))$b ) / / 1 7 7 9C  $886cmmVfX'j)* * #$$*fX'j)* *  &B>BRSC Cr?c$V^8dQhR\/#)r8r_r[)r<s"r=r>r>s;;#;r?cN\\V4\PR7R#)z+Print user-friendly error for managed mode.)fileN)printrcsysstderr)r_s&r= managed_errorrjs  (szz:r?rJc$V^8dQhR\/#r7r)r<s"r=r>r>s---r?c$\4R, #)zGet the main config file path.z config.yamlrkrTr?r=get_config_pathrns  } ,,r?c$V^8dQhR\/#r7r)r<s"r=r>r>s&&d&r?c$\4R, #)z&Get the .env file path (for API keys).z.envrkrTr?r= get_env_pathrqs  v %%r?c$V^8dQhR\/#r7r)r<s"r=r>r>s22$2r?cd\\4PPP4#)z'Get the project installation directory.)r__file__parentresolverTr?r=get_project_rootrws! > ' ' / / 11r?cf\P!VR4R# \\3dR#i;i)z>#d) $ $ HHT5 ! % ( )   sAA A A c(V^8dQhR\RR/#)r8homer9Nr)r<s"r=r>r>s$4r?cVR, pVP4'dR#VP\RR7\V4R#)zISeed a default SOUL.md into HERMES_HOME if the user doesn't have one yet.zSOUL.mdNutf-8encoding)rK write_textr/r)r soul_paths& r=_ensure_default_soul_mdrs9y I 7;r?c\4pVPRRR7\V4RF)pW, pVPRRR7\V4K+ \V4R#)zDEnsure ~/.hermes directory structure exists with secure permissions.T)parentsexist_okN)cronsessionslogsmemories)rJmkdirr~r)rsubdirds r=ensure_hermes_homersT  DJJtdJ+: M t,A;D!r?modelrB providersfallback_providerscredential_pool_strategiestoolsetsz hermes-cliagent max_turnsgateway_timeoutitool_use_enforcementautoterminalbackendlocal modal_modecwd.timeoutenv_passthrough docker_image*nikolaik/python-nodejs:python3.11-nodejs20docker_forward_env docker_envsingularity_image3docker://nikolaik/python-nodejs:python3.11-nodejs20 modal_image daytona_image container_cpucontainer_memoryicontainer_diskicontainer_persistentTdocker_volumesdocker_mount_cwd_to_workspaceFpersistent_shellbrowserinactivity_timeoutcommand_timeoutrecord_sessionsallow_private_urlscamofoxmanaged_persistence checkpointsenabled max_snapshotsfile_read_max_charsi compression threshold? target_ratio皙?protect_last_n summary_modelsummary_providersummary_base_urlsmart_model_routingmax_simple_charsmax_simple_words cheap_model auxiliaryvisionproviderbase_urlapi_keydownload_timeout web_extractihsession_search skills_hubapprovalmcpflush_memoriesdisplaycompact personalitykawaiiresume_displayfullbusy_input_mode interruptbell_on_completeshow_reasoning streaming inline_diffs show_costskindefaulttool_progress_commandtool_preview_lengthprivacy redact_piittsedgevoicezen-US-AriaNeural elevenlabsvoice_idpNInz6obpgDQGcFmaJgBmodel_ideleven_multilingual_v2openaizgpt-4o-mini-ttsalloyneutts ref_audioref_textzneuphonic/neutts-air-q4-ggufdevicecpusttbasez whisper-1 record_keyzctrl+bmax_recording_secondsauto_ttssilence_thresholdsilence_durationg@ human_delaymodeoffmin_msi max_msi memorymemory_enableduser_profile_enabledmemory_char_limitiuser_char_limiti_ delegationmax_iterationsprefill_messages_fileskills external_dirshonchotimezonediscordrequire_mentionfree_response_channels auto_thread reactionswhatsapp approvalsmanualcommand_allowlistquick_commands personalitiessecurityredact_secretstirith_enabled tirith_pathtirithtirith_timeouttirith_fail_openwebsite_blocklistdomains shared_filesr wrap_responselogginglevelINFO max_size_mb backup_count_config_versionFIRECRAWL_API_KEYBROWSERBASE_API_KEYBROWSERBASE_PROJECT_IDFAL_KEYVOICE_TOOLS_OPENAI_KEYELEVENLABS_API_KEYSLACK_BOT_TOKENSLACK_APP_TOKENTAVILY_API_KEYTERMINAL_MODAL_MODE NOUS_BASE_URL descriptionzNous Portal base URL overridepromptz.Nous Portal base URL (leave empty for default)urlpasswordcategoryadvancedOPENROUTER_API_KEYz>OpenRouter API key (for vision, web scraping helpers, and MoA)zOpenRouter API keyzhttps://openrouter.ai/keystoolsvision_analyzemixture_of_agentsGOOGLE_API_KEYzAlibaba Cloud DashScope API key (Qwen + multi-provider models)zDashScope API Keyz-https://modelstudio.console.alibabacloud.com/DASHSCOPE_BASE_URLzGCustom DashScope base URL (default: coding-intl OpenAI-compat endpoint)zDashScope Base URLOPENCODE_ZEN_API_KEYz=OpenCode Zen API key (pay-as-you-go access to curated models)zOpenCode Zen API keyzhttps://opencode.ai/authOPENCODE_ZEN_BASE_URLzOpenCode Zen base URL overridez/OpenCode Zen base URL (leave empty for default)OPENCODE_GO_API_KEYz firecrawl-gateway.nousresearch.comzTool-gateway domain suffixTOOL_GATEWAY_SCHEMEzShared tool-gateway URL scheme for Nous Subscribers only, used to derive vendor hosts (`https` by default, set `http` for local gateway testing)zTool-gateway URL schemeTOOL_GATEWAY_USER_TOKENzuExplicit Nous Subscriber access token for tool-gateway requests (optional; otherwise read from the Hermes auth store)zTool-gateway user tokenz;Tavily API key for AI-native web search, extract, and crawlzTavily API keyzhttps://app.tavily.com/homeuUBrowserbase API key for cloud browser (optional — local browser works without this)zBrowserbase API keyzhttps://browserbase.com/browser_navigate browser_clickuCBrowserbase project ID (optional — only needed for cloud browser)zBrowserbase project IDBROWSER_USE_API_KEYuUBrowser Use API key for cloud browser (optional — local browser works without this)zBrowser Use API keyzhttps://browser-use.com/FIRECRAWL_BROWSER_TTLz@Firecrawl browser session TTL in seconds (optional, default 300)zBrowser session TTL (seconds) CAMOFOX_URLzYCamofox browser server URL for local anti-detection browsing (e.g. http://localhost:9377)zCamofox server URLz)https://github.com/jo-inc/camofox-browserz FAL API key for image generationz FAL API keyzhttps://fal.ai/image_generateTINKER_API_KEYzTinker API key for RL trainingzTinker API keyz/https://tinker-console.thinkingmachines.ai/keysrl_check_status WANDB_API_KEYz0Weights & Biases API key for experiment trackingz WandB API keyzhttps://wandb.ai/authorizerl_get_resultsz?OpenAI API key for voice transcription (Whisper) and OpenAI TTSz&OpenAI API Key (for Whisper STT + TTS)z$https://platform.openai.com/api-keysvoice_transcription openai_ttsz4ElevenLabs API key for premium text-to-speech voiceszElevenLabs API keyzhttps://elevenlabs.io/ GITHUB_TOKENzCGitHub token for Skills Hub (higher API rate limits, skill publish)z GitHub Tokenz"https://github.com/settings/tokensHONCHO_API_KEYz.Honcho API key for AI-native persistent memoryzHoncho API keyzhttps://app.honcho.devhoncho_contextHONCHO_BASE_URLz=Base URL for self-hosted Honcho instances (no API key needed)z,Honcho base URL (e.g. http://localhost:8000)TELEGRAM_BOT_TOKENz"Telegram bot token from @BotFatherzTelegram bot tokenzhttps://t.me/BotFather messagingTELEGRAM_ALLOWED_USERSzSComma-separated Telegram user IDs allowed to use the bot (get ID from @userinfobot)z+Allowed Telegram user IDs (comma-separated)zhttps://t.me/userinfobotDISCORD_BOT_TOKENz'Discord bot token from Developer PortalzDiscord bot tokenz+https://discord.com/developers/applicationsDISCORD_ALLOWED_USERSz7Comma-separated Discord user IDs allowed to use the botz*Allowed Discord user IDs (comma-separated)zSlack bot token (xoxb-). Get from OAuth & Permissions after installing your app. Required scopes: chat:write, app_mentions:read, channels:history, groups:history, im:history, im:read, im:write, users:read, files:writezSlack Bot Token (xoxb-...)zhttps://api.slack.com/appsuSlack app-level token (xapp-) for Socket Mode. Get from Basic Information → App-Level Tokens. Also ensure Event Subscriptions include: message.im, message.channels, message.groups, app_mentionzSlack App Token (xapp-...)MATTERMOST_URLz3Mattermost server URL (e.g. https://mm.example.com)zMattermost server URLzhttps://mattermost.com/deploy/MATTERMOST_TOKENz-Mattermost bot token or personal access tokenzMattermost bot tokenMATTERMOST_ALLOWED_USERSz:Comma-separated Mattermost user IDs allowed to use the botz-Allowed Mattermost user IDs (comma-separated)MATTERMOST_REQUIRE_MENTIONzaRequire @mention in Mattermost channels (default: true). Set to false to respond to all messages.zRequire @mention in channels!MATTERMOST_FREE_RESPONSE_CHANNELSzJComma-separated Mattermost channel IDs where bot responds without @mentionz+Free-response channel IDs (comma-separated)MATRIX_HOMESERVERz7Matrix homeserver URL (e.g. https://matrix.example.org)zMatrix homeserver URLz%https://matrix.org/ecosystem/servers/MATRIX_ACCESS_TOKENz3Matrix access token (preferred over password login)zMatrix access tokenMATRIX_USER_IDz)Matrix user ID (e.g. @hermes:example.org)zMatrix user ID (@user:server)MATRIX_ALLOWED_USERSzLComma-separated Matrix user IDs allowed to use the bot (@user:server format)z)Allowed Matrix user IDs (comma-separated)zZRequire @mention in Matrix rooms (default: true). Set to false to respond to all messages.z&Require @mention in rooms (true/false)zCComma-separated Matrix room IDs where bot responds without @mentionz(Free-response room IDs (comma-separated)z@Auto-create threads for messages in Matrix rooms (default: true)z)Auto-create threads in rooms (true/false)zNStable Matrix device ID for E2EE persistence across restarts (e.g. HERMES_BOT)z)Matrix device ID (stable across restarts)GATEWAY_ALLOW_ALL_USERSzMAllow all users to interact with messaging bots (true/false). Default: false.zAllow all users (true/false)API_SERVER_ENABLEDzrEnable the OpenAI-compatible API server (true/false). Allows frontends like Open WebUI, LobeChat, etc. to connect.zEnable API server (true/false)API_SERVER_KEYz`Bearer token for API server authentication. If empty, all requests are allowed (local use only).zAPI server auth key (optional)API_SERVER_PORTz(Port for the API server (default: 8642).zAPI server portAPI_SERVER_HOSTuHost/bind address for the API server (default: 127.0.0.1). Use 0.0.0.0 for network access — requires API_SERVER_KEY for security.zAPI server hostWEBHOOK_ENABLEDzREnable the webhook platform adapter for receiving events from GitHub, GitLab, etc.zEnable webhooks (true/false) WEBHOOK_PORTz1Port for the webhook HTTP server (default: 8644).z Webhook portWEBHOOK_SECRETz[Global HMAC secret for webhook signature validation (overridable per route in config.yaml).zWebhook secret MESSAGING_CWDz5Working directory for terminal commands via messagingz+Messaging working directory (default: home)setting SUDO_PASSWORDz9Sudo password for terminal commands requiring root accessz Sudo passwordHERMES_MAX_ITERATIONSz>Maximum tool-calling iterations per conversation (default: 90)zMax iterationsHERMES_TOOL_PROGRESSz=(deprecated) Use display.tool_progress in config.yaml insteadu.Tool progress (deprecated — use config.yaml)HERMES_TOOL_PROGRESS_MODEu.Progress mode (deprecated — use config.yaml)HERMES_PREFILL_MESSAGES_FILEzFPath to JSON file with ephemeral prefill messages for few-shot primingzPrefill messages file pathHERMES_EPHEMERAL_SYSTEM_PROMPTzOEphemeral system prompt injected at API-call time (never persisted to sessions)zEphemeral system promptchV^8dQhR\R\\\\3,,/#)r8 required_onlyr9)rQrrr;r)r<s"r=r>r>s'd38n9Mr?c>.p\P4F1wr#\V4'dKVPRV/VCRR/C4K3 V'gJ\P4F1wr#\V4'dKVPRV/VCRR/C4K3 V#)zl Check which environment variables are missing. Returns list of dicts with var info for missing variables. name is_requiredTF)REQUIRED_ENV_VARSitems get_env_valueappendOPTIONAL_ENV_VARS)rmissingvar_nameinfos& r=get_missing_env_varsrs G,113X&& NNFHJJmTJ K4 /557NH **ODO-OP8 Nr?c0V^8dQhR\R\/#)r8config dotted_keydictr;)r<s"r=r>r>s   # r?cVPR4pTpVRRF:pWT9g&\VPV4\4'g/WE&WE,pK< W$VR,&R#)zSet a value at an arbitrarily nested dotted key path. Creates intermediate dicts as needed, e.g. ``_set_nested(c, "a.b.c", 1)`` ensures ``c["a"]["b"]["c"] == 1``. rN)split isinstancerIr)rrvaluepartscurrentparts&&& r= _set_nestedrs`   S !EGcr   jT1BD&I&IGM-E"Ir?c\V^8dQhR\\\\3,,/#r7rrr;r)r<s"r=r>r>s 4S#X#7r?cTaa\4p.oRRVV3RllloS!\V4S#)z Check which config fields are missing or outdated (recursive). Walks the DEFAULT_CONFIG tree at arbitrary depth and reports any keys present in defaults but absent from the user's loaded config. c<V^8dQhR\R\R\/#)r8defaultsrprefixr)r<s"r=r>/get_missing_config_fields..__annotate__s! > > > >c >r?c p<VP4Fwr4VPR4'dKV'gTMV RV 2pW19dSPRVRVRRV 2/4KQ\V\4'gKi\VP V4\4'gKS!WAV,V4K R#)_rkeyrr;zNew config option: N)r startswithrrrrI)rrrr default_valuefull_key_checkrs&&& r=r)get_missing_config_fields.._checks"*.."2 C~~c"""(s#.?H!8}!%8 #C  M400Z C@PRV5W5W}clH=#3r?)rB) load_configDEFAULT_CONFIG)rrrs @@r=get_missing_config_fieldsrs,]FG > > >6" Nr?c\V^8dQhR\\\\3,,/#r7r)r<s"r=r>r>s ""tDcN';"r?c^RIHpHpT!4pT'g.#\ 4p.pTFpT RTR, 2pTP R4pTpRp TF-p \ T\4'dY9d Y,pTp K+Rp M T e1\ T \4'gKuT P4'dKTPT4K T# \d.u#i;i)a#Return skill-declared config vars that are missing or empty in config.yaml. Scans all enabled skills for ``metadata.hermes.config`` entries, then checks which ones are absent or empty under ``skills.config.`` in the user's config.yaml. Returns a list of dicts suitable for prompting. )discover_all_skill_config_varsSKILL_CONFIG_PREFIXrrN) agent.skill_utilsrr Exceptionrrrrr;rEr) rrall_varsrrvar storage_keyrrrrs r=get_missing_skill_config_varsrsY./H  ]F$&G,-Qs5zl; !!#&D'4((T_!-  =Zs33EKKMM NN3  N3  sC CCcFV^8dQhR\\\3,/#r7)r int)r<s"r=r>r>'s  eCHo r?cl\4pVPR^4p\PR^4pW3#)zC Check config version. Returns (current_version, latest_version). r/)rrIr)rrlatests r=check_config_versionr's7 ]Fjj*A.G    11 5F ?r?c0a]tRtRtoRtV3RltRtVtR#) ConfigIssueiIz$A detected config structure problem.c><V^8dQh/S[;R&S[;R&S[;R&#)r8severitymessagehintr[)r< __classdict__s"r=r>ConfigIssue.__annotate__Is)M  L  I r?rTN)__name__ __module__ __qualname____firstlineno____doc____annotate_func____static_attributes____classdictcell__)rs@r=rrIs.r?rcvV^8dQhR\\\\3,,R\R,/#)r8rr9r)rrr;rr)r<s"r=r>r>Rs0wwhtCH~&>w$}J]wr?c Vf \4p.pVPR4pVEe\ V\ 4'dVP \RRR44\ V\ 4'd\VP44M \4pV\,pV'd*VP \RR\V4 R 2R 44M\ V\4'd\V4FwrV\ V\ 4'g9VP \RR V R \V4P R 2R44KSVPR4'g!VP \RR V R2R44VPR4'dKVP \RR V R2R44K VPR4pVe\ V\ 4'g4VP \RR\V4P 2R44MnV'dgVPR4'gVP \RRR44VPR4'gVP \RRR44\ V\ 4'd5RV9d.RT;'g/9dVP \RRR44VPR4pV'd%V'gVP \RR R!44VFZp V PR"4'dKV \ 9gK)V \9gK6VP \RR#V R$2R%V R&244K\ V# \d\RRR4.u#i;i)'aValidate config.yaml structure and return a list of detected issues. Catches common YAML formatting mistakes that produce confusing runtime errors (like "Unknown provider") instead of clear diagnostics. Can be called with a pre-loaded config dict, or will load from disk. errorzCould not load config.yamlz+Run 'hermes setup' to create a valid configcustom_providersuOcustom_providers is a dict — it must be a YAML list (items prefixed with '-')zeChange to: custom_providers: - name: my-provider base_url: https://... api_key: ...warningzRoot-level keys z( look like custom_providers entry fieldszLThese should be indented under a '- name: ...' list entry, not at root levelzcustom_providers[z] is not a dict (got )z1Each entry should have at minimum: name, base_urlrz] is missing 'name' fieldz#Add a name, e.g.: name: my-providerrz] is missing 'base_url' fieldzDAdd the API endpoint URL, e.g.: base_url: https://api.example.com/v1fallback_modelzAfallback_model should be a dict with 'provider' and 'model', got zZChange to: fallback_model: provider: openrouter model: anthropic/claude-sonnet-4ruHfallback_model is missing 'provider' field — fallback will be disabledz/Add: provider: openrouter (or another provider)ruEfallback_model is missing 'model' field — fallback will be disabledz8Add: model: anthropic/claude-sonnet-4 (or another model)zGfallback_model appears inside custom_providers instead of at root levelzDMove fallback_model to the top level of config.yaml (no indentation)u[custom_providers defined but no 'model' section — Hermes won't know which provider to useziAdd a model section: model: provider: custom default: your-model-name base_url: https://...rzRoot-level key 'uW' looks misplaced — should it be under 'model:' or inside a 'custom_providers' entry?zMove 'z' under the appropriate section)rrrrIrrrsetkeys_CUSTOM_PROVIDER_LIKE_FIELDSsortedlist enumeratetyperr_KNOWN_ROOT_KEYS) rissuescpcp_keys suspiciousientryfb model_cfgrs & r=validate_config_structurerRsF~ w ]F!#F & 'B ~ b$   MM+a% )32t(<(CSXZX`X`^`Ca k  U R   7#I ) k  i (   >>#    & &32N+N MM+"3%'~<=   MY w)EGtuv v ws M//N  N c`V^8dQhR\\\\3,,RR/#)r8rr9N)rrr;r)r<s"r=r>r>s'00(4S>":0d0r?cf\V4pT'gR#^RIpR.pTF9pTPR8XdRMRpTP RT RTP 24K; TP R4TP PR PT4R ,4R# \dR#i;i) zPrint config structure warnings to stderr at startup. Called early in CLI and gateway init so users see problems before they hit cryptic "Unknown provider" errors. Prints nothing if config is healthy. Nu3⚠ Config issues detected in config.yaml:ru ✗u ⚠  z2 Run 'hermes doctor' for fix suggestions. z ) rrrhrrrriwritejoin)rrrhlinescimarkers& r=print_config_warningsrs*62  H IE)+)?%EY r&2::,/0 LLKLJJTYYu%./ s B!! B0/B0c^V^8dQhR\R\R\\\3,/#)r8 interactivequietr9)rQrr;r)r<s"r=r>r>s.___D_T#s(^_r?c R.R.R./p\4pV'dV'g\RV R24\4wrET^8Ed1\ 4pTP R/4p\ T\4'g/pRT9d\R4p\R 4p T'd4TP4R]9dR TR&TR,PR 4MxT 'dTT P4R^9d?T P4TR&TR,PR T P4 R24MR TR&TR,PR4YvR&\T4T'g\RTR, 24T^8d\ 4pRT9d\P!RR4p T 'dUT P4'd?T P4TR&TR,PRT P4 R24MRTR&TR,PR4\T4T'g"TR,;'gRp \RT 24T^ 8d4\R4p T 'd \RR4T'g \R4T^ 8Ed\ 4pTP R4p \ T \ 4'EdyT 'EdpTP R/4p\ T\4'g/p^pT EFp\ T\4'gKTP RR4pTP RR4;'gTP RR4;'gRpTP R R4pT'gKTP4P4P#R!R"4P#R#R4P#R$R4pR%T9dTP#R%R"4pKTPR"4pT'g6^R&IHpT!T4pTP(;'gR'P#R(R"4pTT9dT R"T 2pR*T/pT'dTTR&T'd TR_9dTTR &TP R+4'd TR+,TR,&TP R-4'd TR-,TR.&TTT&T^, pEK T^8dxYR&TR\T4T'g^\R/T R024\!TP+44T)R1F-pTT,p\R2T R3TP R*R4 24K/ YE8dT'g\R4T R5T 24\-R6R77pT'd<T'g4\R84TF"p\R9TR, R3TR:, 24K$ T'Ed%T'Ed\R;4TEF pTP R4'd\RTR?, R324pM$\1R>TR?, R324P4pT'dI\TR,T4TR,PTR,4\R@TR, 24M#TR,PRATR, RB24\4EK \-RCR77pT'dTUu0uF pTR,kK upM \34pTUu.uF.pTR,T9gKTP RD4'dK,TNK0 pp\34p \5T^,T^,4F(p!T P7\8P T!.44K* T 'Ed!T'EdT'Eg\;T 4U"u.uF2p"\T"4'dKT"\<9gK#T"\<T",3NK4 p#p"T#'Ed\RE\?T#4 RF24T#F'wp"p$\RGT" RHT$P R:R4 24K) \4\1RI4P4P4p%T%R`9Ed5\4T#EF"wp"p$T$P R4'd5\R>T$P R:T"4 24\RT$P R:T"4 24T$P R=4'd+^R1IpTP/R>T$P R?T"4 RK24pM-\1R>T$P R?T"4 RK24P4pT'd3\T"T4TR,PT"4\R@T" 24\4EK% M \RL4\E4p&T&'dv\ 4pT&FUp'T'RM,pT'RN,p(\GTTT(4TR,PT4T'dKD\ROT RPT( 24KW YVRQ&\T4MYE8d\ 4pYVRQ&\T4\I4p)T)'EdT'EdT'Eg\RE\?T)4 RR24T)F8pTP RSRT4p*\RGTRM, RHTR:, RUT* R$24K: \4\1RV4P4P4p%T%R`9Ed2\4\ 4p^RWI%H&p+T)EFpTP RNR4p(T('dRYT( R$2MRp,\1R>TR?, T, R324P4pT'gT('d \OT(4pT'dTT+ R(TRM, 2p-\GTT-T4TR,PTRM,4\R@TRM, RPT 24M6TR,PRATRM, RZTP RSR[4 R\24\4EK \T4T#\RL4T# \dE L8i;i \dE Li;i \d R)T 2pEL_i;iuupiuupiuup"i \@\B3dRJp%EL@i;i \@\B3dRJp%ELi;i \dRXp+ELi;i)aa Migrate config to latest version, prompting for new required fields. Args: interactive: If True, prompt user for missing values quiet: If True, suppress output Returns: Dict with migration results: {"env_added": [...], "config_added": [...], "warnings": [...]} env_added config_addedwarningsu ✓ Repaired .env file (z corrupted entries fixed)r tool_progressrrrz;display.tool_progress=off (from HERMES_TOOL_PROGRESS=false)allzdisplay.tool_progress=z! (from HERMES_TOOL_PROGRESS_MODE)z#display.tool_progress=all (default)u- ✓ Migrated tool progress to config.yaml: rHERMES_TIMEZONErBz timezone=z (from HERMES_TIMEZONE)z$timezone= (empty, uses server-local)(server-local)u% ✓ Added timezone to config.yaml: ru8 ✓ Cleared ANTHROPIC_TOKEN from .env (no longer used)rrrrr=rr-(rz--)urlparseendpointrz endpoint-apir default_modelapi_mode transportu ✓ Migrated z) custom provider(s) to providers: sectionNu → z: zConfig version:  → Tru0 ⚠️ Missing required environment variables:u • r;z Let's configure them now: z Get your key at: r>rr<u ✓ Saved zSkipped z - some features may not workFr@ z$ new optional key(s) in this update:u • u — z Configure new keys? [y/N]: nz (Enter to skip): z1 Set later with: hermes config set rru ✓ Added  = r/z! skill setting(s) not configured:skillunknownz (from skill: z# Configure skill settings? [y/N]: )rz skills.configz (default: u — skill '?z' may ask for it later)false0no)newr )zno-keyzno-key-requiredrB)yyes)(sanitize_env_filergrrrrIrrrrFr save_configrCrDrEsave_env_valuerreplace urllib.parserhostnamerrgetpassinputrrangeupdateENV_VARS_BY_VERSIONrrlenEOFErrorKeyboardInterruptrrrrrr;).rrresultsfixes current_ver latest_verrr old_enabledold_modeold_tz tz_display old_token custom_listproviders_dictmigrated_countrold_nameold_urlold_keyrrparsed new_entryep missing_envrr*rmissing_optionalvrequired_names new_var_namesverr new_and_unsetranswermissing_configfieldrmissing_skill_config skill_namer default_hintrs.&& r=migrate_configrQs BJCG !#  .ug5NO P 34KQ**Y+'4((G ' )'(>?K$%@AH{0026JJ+0('../lmhnn..@+3>>+;('..1GHXGYYz/{|+0('../TU '9   EgoF^E_`aQ V #YY0"5F&,,..%+\\^z"'..6<<>:JJa/bc%'z"'../UV  #J/CC3C =j\JKQ %&78I0"5TU Rjj!34 k4 ( ([[#ZZ R8Nnd33!#N$!%.. 99VR0))J3QQuyy7KQQr))Ir2nn&,,.66sC@HHbQYYZ]_abck++dC0Ciin;9!)'!2%<<*EEc3O .( E>"23C"G, (0If%w.OO+2Ii(99W%%16wIo.99Z((-2:->Ik*&/s#!#S%V!&4{#-.F#ON+;;def#N$7$7$9:N?;KL+C0Rub0A/BCD M   U:,?@'T:K5 ABC GCK=3}+=*>? @{{{ -.Cwwu~~+CJ<89wwz"""S]O2(>?3x=/45;;=s6{E2 $++CK8 S[M23 #**Xc&k]B_+`a G!(,%@9D5Aaii5#%N##a V9N * 34553D # EM[1_j1n5044S"=>6}UU}- - & ,+/3D+D ,T$T* +-  = D]+,,PQ R+ deDHH]B,G+HIJ, G >?EEGMMO%"/JD$xx488M4#@"ABC 3DK=AB488M4#@"ABCxx ++& '"TXXh5M4NN`0a b %488Hd+C*DDV&W X ^ ^ `&tU3 ,33D9 TF34G#0"IJ/0N#E,CI&G W - N # * *3 /5 SEWI67$%/ !F  !$. !F 9: EE S-.//PQR'C)4J HSZLc-.@-APZ|[\] ^(  @AGGIOOQF \ ! G ]F 6A,'')R0;BWIQ7 3x=/,rBCIIKLE%8$93u:,"GK U;N+223u:>LU Cw?@J'.."3u:,l3777C;P:QQgh,   N E F N[    l   B%; ).)9:;F6 /0  z+, F  6&5# 6sqq2q/ r"r2rr*rrr"r"(r"'r'0's4s q,+q,/ q>=q>rr'r>=r>ss s,+s,c<V^8dQhR\R\R\/#)r8roverrider9)r)r<s"r=r>r>s!ddtr?cVP4pVP4FWwr4W29dI\W#,\4'd-\V\4'd\ W#,V4W#&KSWBV&KY V#)a Recursively merge *override* into *base*, preserving nested defaults. Keys in *override* take precedence. If both values are dicts the merge recurses, so a user who overrides only ``tts.elevenlabs.voice_id`` will keep the default ``tts.elevenlabs.model_id`` intact. )copyrrr _deep_merge)rrSresultrrs&& r=rVrVsaYY[Fnn&  M6;--5$''%fk59FK3K' Mr?cd\V\4'd\P!RRV4#\V\4'd/VP 4UUu/uFwrV\ V4bK upp#\V\4'dVUu.uFp\ V4NK up#V#uuppiuupi)zRecursively expand ``${VAR}`` references in config values. Only string values are processed; dict keys, numbers, booleans, and None are left untouched. Unresolved references (variable not in ``os.environ``) are kept verbatim so callers can detect them. z \${([^}]+)}c~\PPVP^4VP^44#))rCenvironrIgroup)ms&r="_expand_env_vars..#s#bjjnnQWWQZr>-s*tCH~$sCx.r?ca\;QJdV3RlR4F 'gK RM RM!V3RlR44pV'gS#\S4oSPR4p\V\4'gV'dRV/M/pVSR&RFIpSPV4pV'dVPV4'gWBV&SP VR4KK S#)uMove stale root-level provider/base_url into model section. Some users (or older code) placed ``provider:`` and ``base_url:`` at the config root instead of inside ``model:``. These root-level keys are only used as a fallback when the corresponding ``model.*`` key is empty — they never override an existing ``model.provider`` or ``model.base_url``. After migration the root-level keys are removed so they can't cause confusion on subsequent loads. c3F<"TFpSPV4xK R#5iNrI).0rdrs& r= -_normalize_root_model_keys..8sC*BQ6::a==*Bs!TFrrN)rr)anyrrIrpop)rhas_rootrrroot_valsf r=_normalize_root_model_keysrt-ssC*BCsssC*BCCH  &\F JJw E eT " "&+E"w'::c? EIIcNN!#J 3 ( Mr?ctV^8dQhR\\\3,R\\\3,/#rgrh)r<s"r=r>r>Ks*  S#X 4S> r?c\V4p\VPR4;'g/4pRV9dRV9d VR,VR&RV9d\R,R,VR&WR&VPRR4V#)z;Normalize legacy root-level max_turns into agent.max_turns.rrN)rrIrrq)r agent_configs& r=_normalize_max_turns_configrxKsz &\F 7+11r2LfL!@$*;$7 [!,&$27$;K$H [!"7O JJ{D! Mr?cFV^8dQhR\\\3,/#r7rh)r<s"r=r>r>\s]]T#s(^]r?c^RIp\4\4pVP\4pVP 4'd\ VRR7;_uu_4p\P!V4;'g/pRRR4RX9dZ\VPR4;'g/4pVPR4f VR,VR&WTR&VPRR4\W$4p\\!\#V444# +'giL;i \dp\RT 24Rp?LNRp?ii;i)z.Load configuration from ~/.hermes/config.yaml.Nrrrrz Warning: Failed to load config: )rUrrndeepcopyrrKopenyaml safe_loadrrIrqrVrrgrbrtrx)rU config_pathrf user_configagent_user_configes r=rr\s !#K ]]> *F :kG44"nnQ/552 5k)$()A)G)GR$H!$((5=5@5M%k2'8G$ T2 5F 67RSY7Z[ \\54 : 4QC8 9 9 :s7D!D ;+D'AD D D E)D<<Eu # ── Security ────────────────────────────────────────────────────────── # API keys, tokens, and passwords are redacted from tool output by default. # Set to false to see full values (useful for debugging auth issues). # tirith pre-exec scanning is enabled by default when the tirith binary # is available. Configure via security.tirith_* keys or env vars # (TIRITH_ENABLED, TIRITH_BIN, TIRITH_TIMEOUT, TIRITH_FAIL_OPEN). # # security: # redact_secrets: false # tirith_enabled: true # tirith_path: "tirith" # tirith_timeout: 5 # tirith_fail_open: true u # ── Fallback Model ──────────────────────────────────────────────────── # Automatic provider failover when primary is unavailable. # Uncomment and configure to enable. Triggers on rate limits (429), # overload (529), service errors (503), or connection failures. # # Supported providers: # openrouter (OPENROUTER_API_KEY) — routes to any model # openai-codex (OAuth — hermes auth) — OpenAI Codex # nous (OAuth — hermes auth) — Nous Portal # zai (ZAI_API_KEY) — Z.AI / GLM # kimi-coding (KIMI_API_KEY) — Kimi / Moonshot # minimax (MINIMAX_API_KEY) — MiniMax # minimax-cn (MINIMAX_CN_API_KEY) — MiniMax (China) # # For custom OpenAI-compatible endpoints, add base_url and api_key_env. # # fallback_model: # provider: openrouter # model: anthropic/claude-sonnet-4 # # ── Smart Model Routing ──────────────────────────────────────────────── # Optional cheap-vs-strong routing for simple turns. # Keeps the primary model for complex work, but can route short/simple # messages to a cheaper model across providers. # # smart_model_routing: # enabled: true # max_simple_chars: 160 # max_simple_words: 28 # cheap_model: # provider: openrouter # model: google/gemini-2.5-flash uB # ── Security ────────────────────────────────────────────────────────── # API keys, tokens, and passwords are redacted from tool output by default. # Set to false to see full values (useful for debugging auth issues). # # security: # redact_secrets: false # ── Fallback Model ──────────────────────────────────────────────────── # Automatic provider failover when primary is unavailable. # Uncomment and configure to enable. Triggers on rate limits (429), # overload (529), service errors (503), or connection failures. # # Supported providers: # openrouter (OPENROUTER_API_KEY) — routes to any model # openai-codex (OAuth — hermes auth) — OpenAI Codex # nous (OAuth — hermes auth) — Nous Portal # zai (ZAI_API_KEY) — Z.AI / GLM # kimi-coding (KIMI_API_KEY) — Kimi / Moonshot # minimax (MINIMAX_API_KEY) — MiniMax # minimax-cn (MINIMAX_CN_API_KEY) — MiniMax (China) # # For custom OpenAI-compatible endpoints, add base_url and api_key_env. # # fallback_model: # provider: openrouter # model: anthropic/claude-sonnet-4 # # ── Smart Model Routing ──────────────────────────────────────────────── # Optional cheap-vs-strong routing for simple turns. # Keeps the primary model for complex work, but can route short/simple # messages to a cheaper model across providers. # # smart_model_routing: # enabled: true # max_simple_chars: 160 # max_simple_words: 28 # cheap_model: # provider: openrouter # model: google/gemini-2.5-flash cFV^8dQhR\\\3,/#)r8rrh)r<s"r=r>r>sS#Xr?c<\4'd\R4R#^RIHp\ 4\ 4p\ \V44p.pVPR/4pV'dVPR4fVP\4VPR/4pV'd/VPR4'dVPR4'gVP\4T!TTV'dR PV4MRR 7\V4R#) z,Save configuration to ~/.hermes/config.yaml.zsave configurationN)atomic_yaml_writerr rrrrB) extra_content)rUrjutilsrrrnrtrxrIr_SECURITY_COMMENT_FALLBACK_COMMENTrr)rrrrMrsecrs& r=r%r%s||*+'!#K+,G,OPJ E ..R (C #''*+3 &' (" -B bffZ((RVVG__ &'(-bggen4 r?cFV^8dQhR\\\3,/#r7)rr;)r<s"r=r>r>s$sCx.r?c\4p/pVP4'd\'dRRRR/M/p\V3/VB;_uu_4pVFpVP 4pV'gKVP R4'dK6RV9gK?VP R4wrVpVP 4P R4WP 4&K RRR4V#V# +'giT#;i) z/Load environment variables from ~/.hermes/.env.rrerrorsr'#=z"'N)rqrK _IS_WINDOWSr|rEr partition)env_pathenv_varsopen_kwrlinerrrs r=load_envrs~HHAL :w)r>s00t00r?c t\\P44\,p.pVEFpVP R4pVP 4pV'dVP R4'dVPVR,4K^.pVFXpVR,pVPV4p V ^8gK&VPV 4VPW\V4,4p K= \V4^8dVP4\\V44p\V4FjwrV ^,\V48dWj^,,M \V4p W[V P 4p V 'gKRVPV R,4Kl EKnVPVR,4EK V#)aFix corrupted .env lines before writing. Handles two known corruption patterns: 1. Concatenated KEY=VALUE pairs on a single line (missing newline between entries, e.g. ``ANTHROPIC_API_KEY=sk-...OPENAI_BASE_URL=https://...``). 2. Stale ``KEY=***`` placeholder entries left by incomplete setup runs. Uses a known-keys set (OPTIONAL_ENV_VARS + _EXTRA_ENV_KEYS) so we only split on real Hermes env var names, avoiding false positives from values that happen to contain uppercase text with ``=``. z rrr) rrr_EXTRA_ENV_KEYSrstriprErrfindr/sortrr)r known_keys sanitizedrrLstrippedsplit_positionskey_nameneedleidxrposendrs& r=_sanitize_env_linesrsi&++-.@JIkk&!99;8..s33   S4Z ( "H^F--'C(&&s+mmF#f+,=> #  ! #  "$S%9:O#O401AO8L0Lo!e,RUV^R_C(..04$$TD[1 5   X_ -;> r?c$V^8dQhR\/#r7)r)r<s"r=r>r>9s**3*r?c2\4pVP4'g^#\'dRRRR/M/p\'dRR/M/p\V3/VB;_uu_4pVP 4pRRR4\ X4pWT8Xd^#\ \V4\V4, 4pV^8XdG\R\WE444pV\ \V4\V4, 4, p\P!\VP4RRR 7wrx\P!VR 3/VB;_uu_4pVP!V4VP#4\P$!VP'44RRR4\P(!W4\1T4T# +'giELU;i +'giLG;i \*d+\P,!T4h \.dhi;ii;i) zRead, sanitize, and rewrite ~/.hermes/.env in place. Returns the number of lines that were fixed (concatenation splits + placeholder removals). Returns 0 when no changes are needed. rrrr'Nc3:"TFwrW8wgK ^xK R#5i)rZNrT)rmabs& r=rn$sanitize_env_file..RsK"@$!AFAA"@s  .tmp.env_dirsuffixrw)rqrKrr| readlinesrabsr/sumziptempfilemkstempr;rurCfdopen writelinesflushfsyncfilenor' BaseExceptionunlinkrzr) rread_kwwrite_kwroriginal_linesrr3fdtmp_paths r=r$r$9s ~H ??  r>fs;;;C;r?cT\4'd\RV 24R#\PV4'g\ RV: 24hVP RR4P RR4p\ 4\4p\'dRRR R /M/p\'dRR/M/p.pVP4'd9\V3/VB;_uu_4pVP4pRRR4\V4pR p\V4F;wrV P4PV R 24'gK/V R V R2WX&R pM V'gSV'd4VR,P!R4'gVR;;,R, uu&VP#V R V R24\$P&!\)VP*4RRR7wr\,P.!V R3/VB;_uu_4pVP1V4VP34\,P4!VP744RRR4\,P !W4\?T4T\,P@T&\'g>\,PB!T\DPF\DPH,4R#R# +'giEL;i +'giL;i \8d+\,P:!T 4h \<dhi;ii;i \<dR#i;i)z)Save or update a value in ~/.hermes/.env.zset N#Invalid environment variable name: rrB rrrr'FrTrrrrr)%rUrj_ENV_VAR_NAME_REmatch ValueErrorr'rrqrrKr|rrrrErendswithrrrr;rurCrrrrrrrrzrr[rystatS_IRUSRS_IWUSR) rrrrrrrfoundrrrrs && r=r&r&fs||SEl#  ! !# & &>sgFGG MM$ # + +D" 5E~H=HKz7Hi8RG(3 G$H E ( &g & &!KKME'$E* EU# ::< " "cU!9 - -awb)EHE  $  r++D11 "I I uAeWB'(##HOO(r>s**#*$*r?c\4'd\RV 24R#\PV4'g\ RV: 24h\ 4pVP 4'g#\PPVR4R#\'dRRRR/M/p\'dRR/M/p\V3/VB;_uu_4pVP4pRRR4\X4pVUu.uF.qfP4PV R 24'dK,VNK0 pp\!V4\!V48pV'd\"P$!\'VP(4R R R 7wr\P*!V R 3/VB;_uu_4pVP-V4VP/4\P0!VP344RRR4\P4!W4\=T4\PPVR4V# +'giELU;iuupi +'giLl;i \6d+\P8!T 4h \:dhi;ii;i)zrRemove a key from ~/.hermes/.env and os.environ. Returns True if the key was found and removed, False otherwise. zremove FrNrrrr'rrrrr)rUrjrrrrqrKrCr[rqrr|rrrErr/rrr;rurrrrrr'rrrzr) rrrrrrr new_linesrrrs & r=remove_env_valuers ||uo&  ! !# & &>sgFGG~H ??   sD!JJJc$V^8dQhR\/#r8rr[)r<s"r=r>r>s$$c$r?cJT;'g\pV!RV4V!RR4R#)zBPersist an Anthropic OAuth/setup token and clear the API-key slot.rrrBNr&rsave_fnwriters&& r=save_anthropic_oauth_tokenrs%  & &F e$ #r?cJT;'g\pV!RR4V!RR4R#)zHUse Claude Code's own credential files instead of persisting env tokens.rrBrNr)rrs& r=%use_anthropic_claude_code_credentialsrs%  & &F b! #r?c$V^8dQhR\/#rr[)r<s"r=r>r>s""#"r?cJT;'g\pV!RV4V!RR4R#)zBPersist an Anthropic API key and clear the OAuth/setup-token slot.rrrBNrrs&& r=save_anthropic_api_keyrs%  & &F & b!r?c^V^8dQhR\R\R\\\3,/#)r8rrr9)r;rr)r<s"r=r>r>s)s34S>r?c(\W4RRRVRR/#)successT stored_as validatedFr)rrs&&r=save_env_value_securers#34SU r?cFV^8dQhR\R\\,/#r)r;r)r<s"r=r>r>ssx}r?cV\P9d\PV,#\4pVPV4#)z/Get a value from ~/.hermes/.env or environment.)rCr[rrI)rrs& r=rrs6 bjjzz#zH << r?c0V^8dQhR\R\/#rr[)r<s"r=r>r>s&&C&C&r?cV'g\R\P4#\V4^ 8dR#VR,R,VRR,#)zRedact an API key for display. (not set)z***:NN...N)r.r-DIMr/)rs&r= redact_keyrs= [&**-- 3x"} r7U?SX %%r?c 2\4p\4\\R\P44\\R\P44\\R\P44\4\\R\P\P 44\R\ 4 24\R\4 24\R\4 24\4\\R\P\P 44.ROpVF+wr#\V4p\R VR R \V4 24K- \R 4;'g \R 4p\R RR R \V4 24\4\\R\P\P 44\RVPRR4 24\RVPR/4PR\R,R,4 24\4\\R\P\P 44VPR/4p\RVPRR4 24\RVPRR4'dRMR 24\R VPR!R4'dRMR 24\4\\R"\P\P 44VPR#/4p\R$VPR%R&4 24\R'VPR(R)4 24\R*VPR+^<4 R,24VPR%4R-8Xd!\R.VPR/R04 24EMBVPR%4R18Xd!\R2VPR3R44 24EM VPR%4R58XdC\R6VPR7R04 24\R84p\R9V'dR:MR; 24MVPR%4R<8XdC\R=VPR>R04 24\R?4p \R@V 'dR:MR; 24M\VPR%4RA8XdG\RB4p \RC4p \RDT ;'gR; 24\RET ;'gR; 24\4\\RF\P\P 44VPRGRH4p V 'd\RIV 24M&\RI\RJ\P4 24\4\\RK\P\P 44VPRL/4p V PRMRN4p\ROV'dRPMRQ 24V'd\RRV PRSRT4^d,RU RV24\RWV PRXRY4^d,RU RZ24\R[V PR\^4 R]24V PR^RH4;'gR_p\RV 24V PR`Ra4pVRa8wd\RbV 24VPRc/4pRdVPRe/4RfVPRg/4/p\;QJd*RhVP44F 'gK RNM RM!RhVP444pV'd\4\\Ri\P\P 44VP!4F~wppVPRjRa4pVPRRH4pVRa8wg V'gK;RkV 2.pV'dVP#RlV 24\R VRm R RnP%V4 24K \4\\Ro\P\P 44\Rp4p\Rq4p\RrV'dR:M\Rs\P4 24\RtV'dR:M\Rs\P4 24^RuIHpHpV!4pV'dV!V4p\4\\Rv\P\P 44VFpVRw,p VPV RH4pVPRxRH4p!V'd \-V4M\R;\P4p"\R V Ry R V" R \RzV! R{2\P4 24K \4\\R\P44\\R|\P44\\R}\P44\\R~\P44\4R# \.dLi;i)zDisplay current configuration.u┌─────────────────────────────────────────────────────────┐u@│ ⚕ Hermes Configuration │u└─────────────────────────────────────────────────────────┘u ◆ Pathsz Config: z Secrets: z Install: u ◆ API Keysrz<14rrr Anthropicu ◆ Modelz Model: rznot setz Max turns: rru ◆ Displayrz Personality: rrz Reasoning: rFonrz Bell: ru ◆ Terminalrz Backend: rrz Working dir: rrz Timeout: rsdockerz Docker image: rr singularityz Image: rrmodalz Modal image: rMODAL_TOKEN_IDz Modal token: configuredrdaytonaz Daytona image: rDAYTONA_API_KEYz API key: sshTERMINAL_SSH_HOSTTERMINAL_SSH_USERz SSH host: z SSH user: u ◆ TimezonerrBz Timezone: r u◆ Context CompressionrrTz Enabled: r#r z Threshold: rrz.0f%z Target ratio: rrz% of threshold preservedz Protect last: rz messagesrz (main model)rrz Provider: rVisionrz Web extractrc3"TF4pVPRR4R8g;'gVPRR4xK6 R#5i)rrrrBNrl)rmts& r=rnshow_config..u s=#A j&!V+AAquuWb/AA#s >>u ◆ Auxiliary Models (overrides)rz provider=zmodel=12s, u◆ Messaging Platformsrurxz Telegram: znot configuredz Discord: )rresolve_skill_config_valuesu◆ Skill Settingsrrz<20s[]z+ hermes config edit # Edit config filez! hermes config set z+ hermes setup # Run setup wizardN) )rA OpenRouter)r4zOpenAI (STT/TTS))r\Exa)r_Parallel)r0 Firecrawl)r8Tavily)r1 Browserbase)rgz Browser Use)r3FALu────────────────────────────────────────────────────────────)rrgr.r-CYANBOLDrnrqrwrrrIrrrpvaluesrrrrrr r;r)#rrenv_keyrranthropic_valuerr modal_token daytona_keyssh_hostssh_usertzrr_sm comp_providerr aux_tasks has_overrideslabeltask_cfgprovmdlrtelegram_token discord_tokenrr  skill_varsresolvedrrrO display_vals# r= show_configr+ s ]F G %DFLFQFQ RS %RTZT_T_ `a %DFLFQFQ RS G % V[[&++ 67 _./ 01 \^, -. -/0 12 G % V[[ 9: D g& 4*Aj/012$$56\\-H[:\O B{3qO!< = >? G % V[[&++ 67 VZZ;< => VZZ488nU\F]^iFjkl mn G % v{{FKK 89jjB'G W[[AB CD W[[1A5%I%ITuU VW W[[1CU%K%KTQVW XY G % V[[ 9:zz*b)H X\\)W=> ?@ X\\%56 78 X\\)R89 ;<||I(*  n>j!k lmn i M 1  .ACx!y z{| i G +  m=i!j klm#$45   + NOP i I - !(,,@l"m!nop#$56   + NOP i E ) !45 !45  !8!8[ 9:;  !8!8[ 9:; G % V[[ 9: J #B   %&  '7!D EFG G %)6;; DE**]B/Kooi.G gU48 9:  d!Cc!I# NaPQ  !F!LS QQijk  1A2!F GyQRooor2DDn  &'#(:FC F " $]O4 5 ;+Iy}}Xr2y}}]B7IC!!#CCC!!#M  e6 V[[QR(0OE8<< F3D,,w+Cv~$TF+,LL6#05+R %(8'9:; 1 G %)6;; DE"#78N!"56M ^\GWY_YcYcAde fg ]\FVX^XbXb@cd ef a35 2:>H G %,fkk6;;G H!%j S"- WWWb1 ,1c%ju[&**7U 3t*Ak]"UQzl!;Lfjj5Y4Z[\ " G % FJJ '( %=vzz JK %3VZZ @A %=vzz JK G    s7jCj jjc.\4'd\R4R#\4pVP4'g\ \ 4\ RV 24\P!R4;'g\P!R4pV'g)R F"p^RI pVPV4'gK TpM V'g\ R4\ RV 24R#\ RV R V R 24\P!V\V4.4R#) z"Open config file in user's editor.zedit configurationNzCreated EDITORVISUALz#No editor found. Config file is at:rzOpening  in r)nanovimvicodenotepad)rUrjrnrKr%rrgrCrDshutilwhich subprocessrunr;)reditorcmdr5s r= edit_configr; s||*+!#K     N#  &'YYx 7 7BIIh$7F ;C ||C   <  34 ;- ! H[MfXS 12NNFC ,-.r?c0V^8dQhR\R\/#rr[)r<s"r=r>r> sP7P7#P7cP7r?c\4'd\R4R#.R'OpVP4V9gpVP4PR4'gKVP4PR4'g&VP4P R4'd6\ VP4V4\ RV R\4 24R#\4p/pVP4'd@\VRR 7;_uu_4p\P!V4;'g/pRRR4VPR 4pTpVRR(F:pW9g&\VP!V4\"4'g/Wx&Wx,pK< VP%4R)9dR pMlVP%4R*9dR pMTVP'4'd \)V4pM2VP+R R ^4P'4'd \-V4pWVR(,&\/4\VRRR 7;_uu_4p\P0!WER R R7RRR4RRRRRRRRRRRRRRRRR R!R"R#R$R%/ p W 9d\ W,\3V44\ RV R&V RV 24R# +'giEL;i \d/pELi;i +'giL;i)+zSet a configuration value.zset configuration valuesN_API_KEY_TOKEN TERMINAL_SSHu✓ Set r/rrrTFrBr)default_flow_style sort_keyszterminal.backendrzterminal.modal_moder9zterminal.docker_imageTERMINAL_DOCKER_IMAGEzterminal.singularity_imageTERMINAL_SINGULARITY_IMAGEzterminal.modal_imageTERMINAL_MODAL_IMAGEzterminal.daytona_imageTERMINAL_DAYTONA_IMAGEz&terminal.docker_mount_cwd_to_workspace&TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACEz terminal.cwd TERMINAL_CWDzterminal.timeoutTERMINAL_TIMEOUTzterminal.sandbox_dirTERMINAL_SANDBOX_DIRzterminal.persistent_shellTERMINAL_PERSISTENT_SHELLr)rAr rr4r\r_r0r`rarbrcrdr8r1r2rgr3rurxrrr rr6r7rqrrrmrkr)rar#r)rr r)rUrjupperrrr&rgrqrnrKr|r}r~rrrrIrrFisdigitrr'floatrdumpr;) rrapi_keysrrrrrr_config_to_env_syncs && r=set_config_valuerR s||01 H yy{h#))+"6"6z"B"BciikFZFZ[cFdFdhkhqhqhsh~h~@NiOiOsyy{E* T,.!123 "#KK kG44"nnQ/552 5 IIcNEGcr   jT1BD&I&IGM-  {{}-- 0 0 E  sB " * * , ,e E"I k3 1 1Q +UeL 2 N4!8$&B 6 ":02Z. 6#%@  !*/U< HSEUG4 } 56c544 K 4 2 1s<>K!J24KK2 K =KK KK K* c P \VRR4pVeVR8Xd \4R#VR8Xd \4R#VR8Xd\VRR4p\VRR4pV'dVfX\R4\4\R 4\R 4\R 4\R 4\P !^4\ W#4R#VR 8Xd\\44R#VR8Xd\\44R#VR8XEd\4\\R\P\P44\4\RR7p\4p\4wrgV'g>V'g6Wg8d0\\R\P 44\4R#Wg8d\RV RV 24V'd\R\#V4 R24VUu.uFqP%R4'gKVNK p pVUu.uF7pVP%R4'dKVP%R4'dK5VNK9 p pV 'd7\R\#V 4 R24V Fp \RV R, 24K V 'dq\R\#V 4 R24V FRp V P%R .4p V 'dR!R"P'V R#,4 R$2MR%p \RV R, V 24KT \4\)R&RR'7p\4VR(,'gVR),'d$\\R*\P 44VR+,'dA\4VR+,F)p\\R,V 2\P*44K+ \4R#VR-8XEdC\4\\R.\P\P44\4\4wrgWg8d\RV R/24M*\\RV RV R02\P*44\4\\R1\P44\,FKp\/V4'd\R2V 24K$\\R3V R42\P044KM \4\\R5\P44\2P54Fwpp\/V4'd\R2V 24K'VP%R .4p V 'dRR"P'V R#,4 2MR%p \\R6V V 2\P644K \4pV'dF\4\\R7\#V4 R82\P*44\R94\4R#\R:V 24\4\R;4\R<4\R=4\R>4\R?4\R@4\RA4\RB4\P !^4R#uupiuupi)CzHandle config subcommands.config_commandNshoweditrrrz&Usage: hermes config set z Examples:z3 hermes config set model anthropic/claude-sonnet-4z+ hermes config set terminal.backend dockerz0 hermes config set OPENROUTER_API_KEY sk-or-...r}zenv-pathmigrateu*🔄 Checking configuration for updates...Fru ✓ Configuration is up to date!z Config version: rrz1 new config option(s) will be added with defaultsrr@u ⚠️ z required API key(s) missing:u • ru ℹ️ z$ optional API key(s) not configured:rBz (enables: r :Nr8NrrBT)rrrru✓ Configuration updated!r u ⚠️ checku📋 Configuration Statusu ✓z (update available)z Required:u ✓ u ✗ z (missing)z Optional:u ○ rz new config option(s) availablez+ Run 'hermes config migrate' to add themzUnknown config command: zAvailable commands:z4 hermes config Show current configurationz/ hermes config edit Open config in editorz6 hermes config set Set a config valuez; hermes config check Check for missing/outdated configz8 hermes config migrate Update config with new optionsz/ hermes config path Show config file pathz- hermes config env-path Show .env file path)getattrr+r;rgrhexitrRrnrqr.r-rrrrrGREENr/rIrrQYELLOWrrREDrrr)argssubcmdrrrDrLr4r5rFrequired_missingoptional_missingrrB tools_strr2rrrs& r=rTrT s T+T 2F ~6) 6  5dE4(gt,em : ; G +  G H ? @ D E HHQK$ 6  o :  ln 9   e@&++v{{[\ +? 24"6"8 >k6O %:FLLI J G   # &{m5 E F  D^,--^_ `'2K{!eeM6JAA{K" "!55' 01j0A A{   L%5!6 77TU V' #f+/0(  L%5!6 77[\ ]',EJk$))E"I*>)?qAPR  #f+yk:;( !T?  ;  7>#:#: %4fllC D :   G":..ej 2FMMBC/  7   e/fkkJK "6"8  $ &{m48 9 %,[MzlJ]^`f`m`mn o  eM6;;/0)HX&& +,ehxj ;VZZHI *  eM6;;/0/557NHdX&& +,"->CeDIIeBi$8#9: ehxj   gL s1ZZZ#8Z#Z#cxV^8dQh/^\9d&\\\\,3,;R&#)r8r.)__conditional_annotations__rrrr;)r<s"r=r>r>s1  ZT#tCy.)[ r?)ra1r#)zmodify this Hermes installation)zmodify configuration)r0r1r2r3)r#r"WHATSAPP_ALLOWED_USERSr6r7SLACK_ALLOWED_USERS)r]r web_crawl)rl_start_trainingrlrl_stop_training)rarbrcrd)F>rrrrgatewayrrrrr rrr/rrr>rmodelsrrrcontext_lengthrate_limit_delay>rrrrnrk)TF)^rdrrCplatformr`rr7rhr dataclassesrpathlibrtypingrrrrr tools.tool_backend_helpersr _managed_nous_tools_enabledsystemrcompiler frozensetrr}hermes_cli.colorsr-r.hermes_cli.default_soulr/rGrHrOrUrYr]rcrjhermes_constantsrJrnrqrwr~rrrrr.rr _hidden_varrqrrrrrr_VALID_CUSTOM_PROVIDER_FIELDSrrrrrQrVrbrtrxrrr_COMMENTED_SECTIONSr%rrr$r&rrrrrrrr+r;rRrTr>)rds@r=r~s%    !33`oo9, ::9:'* 4    (    9 3)+?A\#')<( 7+-?AS;=Q  +3, J  7 W  ,; 8;;--&2   " ] R]]"]!" ]  ]  R 4   ]*%7%f% s% 3 % 2% D% b% b!%" R#%$ C%%& E'%* +%, D-%. %/%0 1%8 "9%> (?%H DI%+]xc25e "5  y]Z4[]j7k]n4T"FDo]@5CBr A]Z  R  r r      R  r s     R  r s     R  r r     R  r r     R  r r     R  r r     R  r r  g:[]R5x&;E%UU q S]res]| F '   . 0   & W    3 e   }]j 4G V   [ k]@ hESC A]P#$Q]^ $T4 B _]~BB2" ]VRW]` a]n bo]vw]|4 "tT }]L M ]b 2c ]n o ]r bs ]z R{ ]@ $$x!D u r B A ]Z    [ ]j qk ]x ry ]L X "67E   -w 6B tEJD w W& +D"$78JDw &U, 7DJD 'w 6L" 7DJD 7w F;= tEJD Gw V[& DJD Ww f=. DJD gw v=. DJD ww F5A tEJD Gw V0. .DJD Ww f:; tEJD gw v8# (DJD ww F2> tEJD Gw V9+ *DJD Ww f:F tEJD gw vD$ 7DJ ww D@% rEJ Ew RW% >DJ Sw ``& rEJD aw pV( )DJD qw @7C tEJD Aw PU' )DJD Qw `6B tEJD aw po& 7DJ qw ~K9 tEJD w RJ-  , .DF Sw bN$ %, .DF cw rF% ', .DF sw BO= tEFD Cw RjM tEFD Sw bo. tEFD cw rj+ tEFD sw BO+ tDFD  Cw RT" ,;DF Sw bn' )$o6DF cw r\* )$o6EF sw B n' )$o6DF C w R Y1$o6EF S w ` r& :$o6EF a w p 9-  "#DF q w @ 7" @MDF A w P I/ +"$56DF Q w ` X: 5'6DF a w p M& 'DF q w ~ \. 3DF  w P G" '"#DF Q w ` V@Fa w n ;& 'DK o w | l? )EK } w J @% <DK K w X P> tEK Y w f P . +DKg w x G . +DKy w J L) /EK K w X F( tDK Y w f SA tEK !g w t !z0 tEK #u w B(c? tEK *Cw PP) 6EK Qw ^L' tDK _w lB1 tEK mw ze= tEK {w Hs: tEKD Iw X!\< tEKD #Yw hY= tEKD iw xg= tEKD yw Hf0 tEKD  Iw XL2 tEKD Yw hy2 tDKD A# tEKD ]# tEKD k0 tEK J. tEK t" tDK N? tEI R/ tDI W" tEI VB tEI  VB tEI "#_. tEI %%h+ tEI 'aw r#$$ k40 , 8"J "! W  wwt00.__D ((< "]6 !H(V:&0f*Z;|*Z$$$""&] @/@P7nFr?