+VjPUdZddlZddlZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z m Z ddlmZmZejdZgdZgdZd d gZgd Zeeed <ehd Zeeed<dZde defdZde fdZehdZ ehdZ!ehdZ"de fdZ#de fdZ$de fdZ%de fdZ&dedefdZ'deddfdZ(dede fdZ)dedefd Z*dedeefd!Z+defd"Z,dedee fd#Z-dedefd$Z.e Gd%d&Z/de de0fd'Z1de de0fd(Z2de defd)Z3de de4fd*Z5dee/fd+Z6 dQded-eed.ed/ed0ed1ede fd2Z7dRde d3edee8fd4Z9dRded5ede fd6Z:dede ddfd7Z;de ddfd8Zdefd;Z?dede fd?ZAd@edeefdAZBdBe dCe ddfdDZCdBe deDefdEZEdSdFedeede fdGZFdHedIedJe ddfdKZGdHedIede fdLZHdefdMZIdefdNZJdOedefdPZKdS)Tu_ Profile management for multiple isolated Hermes instances. Each profile is a fully independent HERMES_HOME directory with its own config.yaml, .env, memory, sessions, skills, gateway, cron, and logs. Profiles live under ``~/.hermes/profiles//`` by default. The "default" profile is ``~/.hermes`` itself — backward compatible, zero migration needed. Usage:: hermes profile create coder # fresh profile + bundled skills hermes profile create coder --clone # also copy config, .env, SOUL.md, skills hermes profile create coder --clone-all # full copy of source profile coder chat # use via wrapper alias hermes -p coder chat # or via flag hermes profile use coder # set as sticky default hermes profile delete coder # remove profile + alias + service N) dataclass)Path PurePosixPathPureWindowsPath)ListOptionalz^[a-z0-9][a-z0-9_-]{0,63}$) memoriessessionsskillsskinslogsplans workspacecronhome) config.yaml.envSOUL.mdzmemories/MEMORY.mdzmemories/USER.md) gateway.pidgateway_state.jsonprocesses.json_CLONE_ALL_STRIP>binprofiles node_modules .worktrees hermes-agent_CLONE_ALL_DEFAULT_EXCLUDE_ROOTz.no-bundled-skills profile_dirreturnc^ |tz S#t$rYdSwxYw)z>Return True if the profile opted out of bundled-skill seeding.F)NO_BUNDLED_SKILLS_MARKERexistsOSError)rs 1/root/.hermes/hermes-agent/hermes_cli/profiles.pyhas_bundled_skills_opt_outr&msA66>>@@@ uus  ,, source_dirc|tkdtdttdttffd }|S)uoExclude infrastructure artifacts when cloning a profile via --clone-all. Two categories: 1. Root-level entries in ``_CLONE_ALL_DEFAULT_EXCLUDE_ROOT`` — known Hermes infrastructure directories that only the default profile (``~/.hermes``) ever contains. Gated on ``source_dir`` actually being the default profile so a named-profile source never has its own data silently dropped. 2. Universal exclusions at any depth — Python bytecode caches that are stale or regenerable (``__pycache__``, ``*.pyc``, ``*.pyo``) and runtime sockets / temp files (``*.sock``, ``*.tmp``). The export-side ignore (``_default_export_ignore``) uses the same two-tier pattern with the broader ``_DEFAULT_EXPORT_EXCLUDE_ROOT`` set because the export archive is a portable snapshot rather than a live clone. directorynamesr c4g}|D]}|dks|dr||3r\ t|kr|tvr||z#t t f$rYwxYw|S)N __pycache__)z.pycz.pyo.sock.tmp)endswithappendrresolverr$ ValueError)r)r*ignoredentryis_default_sourcesource_resolveds r%_ignorez+_clone_all_copytree_ignore.._ignores  E&&>>"CDD'u%%% I..00OCC $CCC#NN5111,D  sABBB)r1_get_default_hermes_homestrr)r'r7r5r6s @@r%_clone_all_copytree_ignorer:us|$!((**O'+C+E+E+M+M+O+OO3tCyT#Y. N>state.db auth.lock errors.log state.db-shm state.db-wal .update_check.hermes_historyhermes_state.dbresponse_store.dbresponse_store.db-shmresponse_store.db-walrr r sandboxes audio_cache checkpoints image_cacheractive_profiledocument_cachebrowser_screenshotsr auth.jsonrrrrr>tmprootsudotesthermesdefault>acpmcpchatrdumploginmodelsetuptoolsconfigdoctorhonchologoutr statusupdategatewaypairingpluginsprofileversioninsightsr whatsapp uninstallc$tdz S)aReturn the directory where named profiles are stored. Anchored to the hermes root, NOT to the current HERMES_HOME (which may itself be a profile). This ensures ``coder profile list`` can see all profiles. In Docker/custom deployments where HERMES_HOME points outside ``~/.hermes``, profiles live under ``HERMES_HOME/profiles/`` so they persist on the mounted volume. rr8r;r%_get_profiles_rootrns $ % % 22r;c"ddlm}|S)zReturn the default (pre-profile) HERMES_HOME path. In standard deployments this is ``~/.hermes``. In Docker/custom deployments where HERMES_HOME is outside ``~/.hermes`` (e.g. ``/opt/data``), returns HERMES_HOME directly. rget_default_hermes_root)hermes_constantsrqrps r%r8r8s%988888 " " $ $$r;c$tdz S)z2Return the path to the sticky active_profile file.rKrlrmr;r%_get_active_profile_pathrts # % %(8 88r;c4tjdz dz S)z)Return the directory for wrapper scripts.z.localr)rrrmr;r%_get_wrapper_dirrvs 9;; !E ))r;namect|tst|}|}|std|dkrdS|S)uReturn the canonical profile id used on disk and in CLI ``-p`` argv. Named profiles are stored lowercase under ``profiles//``. The special alias ``default`` is matched case-insensitively (``Default`` → ``default``). Dashboards and tools may pass title-cased display labels; normalize before validation, assignment, and subprocess spawn (see issue #18498). zprofile name cannot be emptyrT) isinstancer9stripr2casefoldlower)rwstrippeds r%normalize_profile_namer~sq dC 4yyzz||H 97888i''y >>  r;c|dkrdSt|std|d|tvrtd|ddS)uRaise ``ValueError`` if *name* is not a valid profile identifier. Validates the input as-given — strict lowercase match. Callers that accept mixed-case or title-cased input from users (dashboard UI, CLI args) should call :func:`normalize_profile_name` first. This separation keeps validate honest about what the on-disk directory name must look like, while ingress-point normalization handles UX flexibility (see #18498). Also rejects names in :data:`_RESERVED_NAMES` (``hermes``, ``test``, ``tmp``, ``root``, ``sudo``) that would create confusing on-disk collisions (a ``hermes`` profile inside ``~/.hermes/``) or get refused at alias-creation time anyway. ``default`` is a special pass-through — it's a valid alias for the built-in root profile. rTNzInvalid profile name z%. Must match [a-z0-9][a-z0-9_-]{0,63}z Profile name uz is reserved — it collides with either the Hermes installation itself or a common system binary. Pick a different name.)_PROFILE_ID_REmatchr2_RESERVED_NAMES)rws r%validate_profile_namer s y    % %  *D * * *     &D & & &   r;cjt|}|dkrtSt|z S)z4Resolve a profile name to its HERMES_HOME directory.rT)r~r8rnrwcanons r%get_profile_dirr)s7 "4 ( (E ')))   % ''r;crt|}|dkrdSt|S)z)Check whether a profile directory exists.rTT)r~ris_dirrs r%profile_existsr1s9 "4 ( (E t 5 ! ! ( ( * **r;ct|}|tvrd|dS|tvrd|dSt} t jd|gddd}|jdkrg|j}|t||z kr/ ||z }d |vrd Sn#t$rYnwxYwd|d |d Sn#ttj f$rYnwxYwd S) zReturn a human-readable collision message, or None if the name is safe. Checks: reserved names, hermes subcommands, existing binaries in PATH. 'z' is a reserved namez$' conflicts with a hermes subcommandwhichT)capture_outputtexttimeoutr hermes -pNz&' conflicts with an existing command ())r~r_HERMES_SUBCOMMANDSrv subprocessrun returncodestdoutrzr9 read_text ExceptionFileNotFoundErrorTimeoutExpired)rwr wrapper_dirresult existing_pathcontents r%check_alias_collisionr=sZ #4 ( (E .5.... ###>5>>>>#$$K  e Ta      ! !"M//11MK%$7 8 888*U2==??G"g--#t. DTuTTMTTT T " z8 9      4s6AC B0/C 0 B=:C <B== C C#"C#ctt}|tjddtjvS)z!Check if ~/.local/bin is in PATH.PATH)r9rvosenvirongetsplitpathsep)rs r%_is_wrapper_dir_in_pathr_sA&(())K "*..44::2:FF FFr;c t|}t} |ddn-#t$r }t d|d|Yd}~dSd}~wwxYw||z } |d|d||jtj ztj ztj z|S#t$r }t d|d|Yd}~dSd}~wwxYw) zCreate a shell wrapper script at ~/.local/bin/. Returns the path to the created wrapper, or None if creation failed. Tparentsexist_oku⚠ Could not create : Nz#!/bin/sh exec hermes -p z "$@" u ⚠ Could not create wrapper at ) r~rvmkdirr$print write_textchmodstatst_modeS_IEXECS_IXGRPS_IXOTH)rwrre wrapper_paths r%create_wrapper_scriptresD #4 ( (E"$$K$6666  8k88Q88999ttttt&L KU K K KLLL<,,..6E TW[Wccddd  DDDDDEEEttttts.7 A!AA!*A-C D"C==Dctt|z }|r@ |}d|vr|dSn#t $rYnwxYwdS)zARemove the wrapper script for a profile. Returns True if removed.rTF)rvr~r#runlinkr)rwrrs r%remove_wrapper_scriptr|s#%%(>t(D(DDL ",,..Gg%%##%%%t&    D  5s,A## A0/A0ceZdZUdZeed<eed<eed<eed<dZe eed<dZ e eed<d Z eed <d Z e ed <dZe eed <dZe eed<dZe eed<dZe eed<dS) ProfileInfoz$Summary information about a profile.rwpath is_defaultgateway_runningNrZproviderFhas_envr skill_count alias_pathdistribution_namedistribution_versiondistribution_source)__name__ __module__ __qualname____doc__r9__annotations__rboolrZrrrrintrrrrrmr;r%rrs.. III JJJE8C="Hhsm"""GTK!%J%%%'+x}+++*.(3-...)-#-----r;rc|dz }|sdS ddl}t|dd5}||pi}dddn #1swxYwYt |t sdS|d|d |d fS#t$rYdSwxYw) uReturn ``(name, version, source)`` from the profile's ``distribution.yaml`` if present; ``(None, None, None)`` otherwise. Failures (missing file, bad YAML) are swallowed — a bad manifest should never break ``hermes profile list`` for an unrelated profile. zdistribution.yaml)NNNrNrutf-8encodingrwrgsource)is_fileyamlopen safe_loadrydictrr)rmf_pathrfdatas r%_read_distribution_metars'//G ??      '3 1 1 1 +Q>>!$$*D + + + + + + + + + + + + + + +$%% $## HHV   HHY   HHX        s:B7A B7AB7AB79=B77 CCc|dz }|sdS ddl}t|dd5}||pi}dddn #1swxYwY|di}t |t r|dfSt |tr?|d p|d|d fSdS#t$rYdSwxYw) zLRead model/provider from a profile's config.yaml. Returns (model, provider).r)NNrNrrrrZrTr) r#rrrrryr9rr)r config_pathrrcfg model_cfgs r%_read_config_modelrsN -K     z  +sW 5 5 5 *..##)rC * * * * * * * * * * * * * * *GGGR(( i % % #d? " i & & a==++Ey}}W/E/Ey}}U_G`G`` `z zzs;C'A C'AC'A1C'AC'' C54C5cV ddlm}||dz dduS#t$rYdSwxYw)z'> QJE Lr;cg}t}t}|rt|\}}t |\}}}|t d|dt||||dz t|||| t}|rt| D]} | s| j } t| s9t| \}}|| z } t | \}}}|t | | dt| ||| dz t| | r| nd||| |S)z4Return info for all profiles, including the default.rTTr) rwrrrrZrrrrrrFN) rwrrrrZrrrrrrr)rvr8rrrr0rrr#rrnsortediterdirrwrr) rr default_homerZr dist_name dist_version dist_source profiles_rootr4rwrs r% list_profilesrsH"$$K,--L ,\::x/F|/T/T, < 2<@@!F*2244%l33'!- +    '((MM113344  E<<>> :D!''-- 077OE8$t+J3J53Q3Q 0I|[ OOK 6u = =!//11)%00)3):):)<)<F::$"+%1$/        Or;F clone_from clone_all clone_configno_alias no_skillsc|r|s|rtdt|}t||dkrtdt|}|rt d|d|d}||s|rk|ddlm} | }n-t|}t|t|}|std |pd d ||rK|rItj ||t| tD]} || z d n|d d t D]} || z d d |t"D]3} || z } | rtj| || z 4|dz }|rtj ||dz d t&D]Q}||z } | r6||z }|jd d tj| |R|dz }|s/ ddlm}||dn#t0$rYnwxYw|r1 |t2z ddn#t4$rYnwxYw|S)aCreate a new profile directory. Parameters ---------- name: Profile identifier (lowercase, alphanumeric, hyphens, underscores). clone_from: Source profile to clone from. If ``None`` and clone_config/clone_all is True, defaults to the currently active profile. clone_all: If True, do a full copytree of the source (all state). clone_config: If True, copy config files (config.yaml, .env, SOUL.md), installed skills, and selected profile identity files from the source profile. no_alias: If True, skip wrapper script creation. no_skills: If True, create an empty profile with no bundled skills, and write a marker file so ``hermes update`` skips re-seeding this profile's skills. Mutually exclusive with ``clone_config``/``clone_all`` (those explicitly copy skills from the source). Returns ------- Path The newly created profile directory. zx--no-skills is mutually exclusive with --clone / --clone-all (cloning explicitly copies skills from the source profile).rTuSCannot create a profile named 'default' — it is the built-in profile (~/.hermes). Profile '' already exists at Nrget_hermes_homezSource profile 'activez' does not exist at ignoreT missing_okrr ) dirs_exist_okr)DEFAULT_SOUL_MDrrzThis profile opted out of bundled-skill seeding (`hermes profile create --no-skills`). Delete this file to re-enable sync on the next `hermes update`. )r2r~rrr#FileExistsErrorrrrrrshutilcopytreer:rrr _PROFILE_DIRS_CLONE_CONFIG_FILEScopy2_CLONE_SUBDIR_FILESparenthermes_cli.default_soulr rrr"r$)rwrrrrrrrr'rstalesubdirfilenamesrc source_skillsrelpathdst soul_pathr s r%create_profilersF l i  J    #4 ( (E%     a   "%((KTR%RR[RRSSSJl   8 8 8 8 8 8(**JJ/ ;;J !* - - -(44J  "" #[:#9[[z[[ %+Z%+  -j99    & : :E 5 ( (D ( 9 9 9 9 : $666# F FF 6 ! ( ( ( E E E E  !/ > > 8+::<<>LkH&<=== '1M##%% [ {X/EUYZZZZ/ + + 7*::<<+%/CJ$$TD$AAALc***i'I       ? ? ? ? ? ?  7 C C C C    D     3 3 ? ?T! @         D  s$I== J  J J00 J=<J=quietc6t|rgggddSttjj} t jtjddgitj dt|it|ddd}|j dkrD|j r+tj|j S|sat#d |j |jr1t#d |jd d d S#t j$r|st#d Yd St($r}|st#d|Yd }~d Sd }~wwxYw)uSeed bundled skills into a profile via subprocess. Uses subprocess because sync_skills() caches HERMES_HOME at module level. Returns the sync result dict, or None on failure. Profiles that opted out of bundled skills (via ``hermes profile create --no-skills`` — which writes ``.no-bundled-skills`` to the profile root) are skipped and get an empty-result dict so callers can report "opted out" instead of "failed". T)copiedupdated user_modifiedskipped_opt_outz-cziimport json; from tools.skills_sync import sync_skills; r = sync_skills(quiet=True); print(json.dumps(r)) HERMES_HOME<)envcwdrrrru%⚠ Skill seeding returned exit code z Nu!⚠ Skill seeding timed out (60s)u⚠ Skill seeding failed: )r&r__file__rr1rrsys executablerrr9rrrzjsonloadsrstderrrr)rr project_rootrrs r%seed_profile_skillsr0s"+.. #    >>(/7799L ^TA B@2:?}c+.>.>??L!!dB       ! !fm&9&9&;&; !:fm113344 4 : M&:KMM N N N}""$$ :86=..00#688999t  $ 7 5 6 6 6tt  4 2q22 3 3 3ttttts&BE (A#E F0 F9FFyesc$t|}t||dkrtdt|}|st d|dt |\}}t|}t|}t|\}} } td|td||rtd||rd|d nd z|rtd ||r+td |d | pd| rtd| dg} t|z } | } | r| d| d td| D]}td||rtd|stt td|d}n(#t t"f$rtd|cYSwxYw||krtd|St%|||rt'|| r!t)|rtd|  t+j|td|n,#t.$r}td|d|Yd}~nd}~wwxYw t1}||krt3dtdn#t.$rYnwxYwtd|d|S) zDelete a profile, its wrapper script, and its gateway service. Stops the gateway if running. Disables systemd/launchd service first to prevent auto-restart. Returns the path that was removed. rTzZCannot delete the default profile (~/.hermes). To remove everything, use: hermes uninstallr' does not exist.z Profile: z Path: z Model: z (rrz Skills: zDistribution: @?zInstalled from: z;All config, API keys, memories, sessions, skills, cron jobszCommand alias (z This will permanently delete:u • u0 ⚠ Gateway is running — it will be stopped.zType 'z' to confirm: z Cancelled.z Cancelled.u ✓ Removed u⚠ Could not remove rNu#✓ Active profile reset to defaultz Profile 'z ' deleted.)r~rr2rrrrrrrrrvr#r0inputrzKeyboardInterruptEOFError_cleanup_gateway_service_stop_gateway_processrr rmtreerget_active_profileset_active_profile)rwr1rrrZr gw_runningrrrritemsr has_wrapperitemconfirmrrs r%delete_profilerCs  #4 ( (E%     :   "%((K     F DE D D DEEE)55OE8' 44J ,,K+B;+O+O(I|[       #k # #$$$ L !%!!%I%5(%5%5%5%5rJKKK) '+''(((4 @y@@<+>3@@AAA  4 2[22 3 3 3 F E $%%-L%%''K8 6|666777 ,--- otooC ABBB    :U:::;;AACCGG!8,    . ! ! !     e   ,    UK000+k***1  ' ' 1 /// 0 0 0: k""" *[**++++ ::: 8k88Q8899999999: #%% U?? y ) ) ) 7 8 8 8       ) ) ) )*** s<<%G"""HH&&J J6J11J6:2K-- K:9K:c\ddl}tjd} t |tjd<ddlm}m}|dkr|}tj dz dz dz |d z }| r{tj d d d |gd ddtj d d d|gd dd|d tj gdd ddtd|dn|dkrk|}| rMtj ddt |gd dd|d tdn)#t $r} td| Yd} ~ nd} ~ wwxYw||tjd<dSdtjvrtjd=dSdS#||tjd<ndtjvr tjd=wxYw)z9Disable and remove systemd/launchd service for a profile.rNr$)get_service_nameget_launchd_plist_pathLinuxz.configsystemduserz.service systemctl--userdisableTF )rcheckrstopr)rJrKz daemon-reloadu ✓ Service z removedDarwin launchctlunloadu✓ Launchd service removedu⚠ Service cleanup: )platformrrrr9hermes_cli.gatewayrErFsystemrrr#rrrrr) rwr _platformold_homerErFsvc_namesvc_file plist_pathrs r%r9r90s    z~~m,,H&*$' $4$4 =!OOOOOOOO      ( (''))Hy{{Y.:VCF[F[F[[H   9 (Ix@#'ub (FH=#'ub4000<<<#'ub7X777888     8 + +//11J  "" 6 (C OO<#'ub!!T!2224555 +++ )a))********+  (0BJ} % % % bj ( ( =)))) (  (0BJ} % % bj ( ( =) ) ) ) )s0E;F! G<! G+G=G<GG<``. Returns ``"custom"`` if HERMES_HOME is set to an unrecognized path. rrrTrcustom) rrrr1r8rn relative_topartslenrrr2)r hermes_homeresolveddefault_resolvedrrelrws r%get_active_profile_namer}s100000!/##K""$$H/1199;;###y&((0022M ""=11  u::??~33E!H==?8O       8s.AC CCroot_dirc>dtdtdtffd }|S)zReturn an *ignore* callable for :func:`shutil.copytree`. At the root level it excludes everything in ``_DEFAULT_EXPORT_EXCLUDE_ROOT``. At all levels it excludes ``__pycache__``, sockets, and temp files. r)contentsr c&t}|D]L}|dks|dr||3|dvr||Mt|kr|d|D|S)Nr,)r-r.)z package.jsonzpackage-lock.jsonc3,K|]}|tv |VdSN)_DEFAULT_EXPORT_EXCLUDE_ROOT).0cs r% z:_default_export_ignore.._ignore..s-TT!7S2S2S12S2S2S2STTr;)setr/addrrb)r)rr3r4r~s r%r7z'_default_export_ignore.._ignoresuu # #E %%8I)J)J% E""""??? E"""  ??h & & NNTThTTT T T Tr;)r9listr)r~r7s` r%_default_export_ignorers= 3 $ 3       Nr; output_pathc` ddl}t|}t|t|}|st d|dt |}t|dd}|dkr| 5}t |dz }tj ||t|tj |d |d} t | cdddS#1swxYwY| 5}t ||z }d d h tj || fd tj |d ||} t | cdddS#1swxYwYdS) zMExport a profile to a tar.gz archive. Returns the output file path. rNrr3z.tar.gzz.tgzrTrgztarrNrc(t|zSr)r)dr_CREDENTIAL_FILESs r%z export_profile..s'83x=='Hr;)tempfiler~rrrrrr9 removesuffixTemporaryDirectoryr rr make_archive) rwrrrroutputbasetmpdirstagedrrs @r%export_profilersF OOO "4 ( (E%   !%((K     F DE D D DEEE +  F v;; # #I . . ; ;F C CD  ( ( * * f&\\I-F O-k::     (w JJF<<                  $ $ & & &f%(&1  HHHH    $T7FEBBF||                  s&8AD!!D%(D%AF##F'*F' member_namecp|dd}t|}t|}|r/|s|s|jrt d|d|jD}|rtd|Drt d||S)z4Return safe path parts for a profile archive member.\/zUnsafe archive member path: cg|]}|dv| S))r.rmrparts r% z4_normalize_profile_archive_parts..$s" H H Hd$i2G2GT2G2G2Gr;c3"K|] }|dkV dS)z..Nrmrs r%rz3_normalize_profile_archive_parts..%s&77 777777r;)rsrr is_absolutedriver2rwany)rnormalized_name posix_path windows_pathrws r% _normalize_profile_archive_partsrs!))$44O//J";//L G  ! ! # #G  # # % %G   G E EEFFF H Hj. H H HE GC7777777GE EEFFF Lr;archive destinationc *ddl}||d5}|D]H}t|j}|j|}|r|ddM|std|j|j dd| |}|td|j|5t|d5}tj ||dddn #1swxYwYdddn #1swxYwY tj||jd z9#t"$rYFwxYw ddddS#1swxYwYdS) zAExtract a profile archive without allowing path escapes or links.rNr:gzTrz!Unsupported archive member type: zCannot read archive member: wbi)tarfiler getmembersrrwjoinpathisdirrisfiler2r extractfiler  copyfileobjrrmoder$) rrrtfmemberrwtarget extractedrs r%_safe_extract_profile_archiver*soNNN gv & &"mmoo  F4V[AAE)[)51F||~~  TD 999==??  E EE M  t  < < <v..I  !M !M!MNNN 3 3D.. 3#"9c222 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 u!45555    / s~CF4D>D'  D>'D+ +D>.D+ /D>2 F>E FE F E)'F) E73F6E77FF F cddl}||d5}d|D}|sd|D}dddn #1swxYwY|S)aReturn the archive's top-level directory names. Profile imports expect exactly one root directory. Inspecting the archive before extraction lets us stage the import safely instead of mutating a live profile tree first and reconciling names later. rNrch|]E}t|j}t|dks|=|dFS)rr)rrwrxr)rrrws r% z1_inspect_profile_archive_roots..TsP   :6;GG5zzA~~~ !H~~r;cjh|]0}|t|jd1S)r)rrrw)rrs r%rz1_inspect_profile_archive_roots..[sE<<>>0==a@r;)rrr)rrrtop_dirss r%_inspect_profile_archive_rootsrJsNNN gv & & "  --//      mmooH                Os?A&&A*-A* archive_pathcddl}t|}|std|t |}t |dkr|nd}|p|}|std|tdt|}t||dkrtdt|}|rtd |d |t} | d d |d 5} t| } t|| | |z } | std|| } ||kr| |z } | | t%jt)| t)|dddn #1swxYwY|S)zImport a profile from a tar.gz archive. If *name* is not given, infers it from the archive's top-level directory. Returns the imported profile directory. rNzArchive not found: rzpCannot determine profile name from archive. Specify it explicitly: hermes profile import --name z=Profile archive must contain exactly one top-level directory.rTuCannot import as 'default' — that is the built-in root profile (~/.hermes). Specify a different name: hermes profile import --name rrTrhermes_profile_import_)prefixz,Profile archive root is missing or invalid: )rrr#rrrxpopr2r~rrr rnrrrrrenamer mover9)rrwrrr archive_root inferred_namerrrr staging_rootr final_sources r%import_profilercsz OOO<  G >>  A ?g ? ?@@@-g66H%(]]a%7%78<<>>>TL(LM   S    K    #= 1 1E%     V   "%((KTR%RR[RRSSS&((Mt444  $ $,D $ E E9F|| %g|<<< </ !! M|MM ! 5 '%/L   \ * * * C %%s;'7'7888999999999999999" s>BG&&G*-G*old_namenew_namenew_dircd|}d|}|dz tdz tjdz dz g}t}|D]} |}n#t $r|}YnwxYw||vs|sD|| tj | d} n#t tj f$rYwxYw| d} t| tr|| vr|| vrtd|d || |} t| tr+d | vr'd |vr|d d d n|} | | d <| || |<||jd z} | tj| dddzd| |n9#t $r, | dn#t $rYnwxYwYwxYwtd|d|dS)zGRename Honcho host blocks for a renamed profile without changing peers.zhermes.z honcho.jsonz.honchoz config.jsonrrhostsu$⚠ Honcho host block not migrated: z already exists in aiPeerrrr.F)indent ensure_asciirqTru✓ Honcho host updated:  → N)r8rrrr1r$rrr,r-rJSONDecodeErrorrryrrrrrrsuffixrdumpsrsr)rrrold_hostnew_host candidatesseenrrzrjrblockbarerOs r%_migrate_honcho_profile_hostrs###H###H - ""]2 i-/J eeD&E&E ||~~HH   HHH  t  4<<>>    *T^^W^==>>CC-.    H   %&& (%*?*?  u   \\\VZ\\ ] ] ] h eT " " #xu'<'<03x8>>#q))!,,XD"E(O))H--ht{V344  NN4:c!%HHH4OZaN b b b KK         d ++++     H   C(CCCCDDDDM&E&Es[ A"" A10A1#(C  C%$C%/AG44 H*?HH* H# H*"H##H*)H*ct|}t|}t|t||dkrtd|dkrtdt|}t|}|st d|d|rtd|dt|rt||t|| |td|j d|j t|||t|t!|}|s"t#|td |ntd |d | t%|kr!t'|td |n#t($rYnwxYw|S) zrRename a profile: directory, wrapper script, service, active_profile. Returns the new profile directory. rTz"Cannot rename the default profile.u.Cannot rename to 'default' — it is reserved.rr3z' already exists.u ✓ Renamed ru✓ Alias updated: u⚠ Cannot create alias 'u' — u✓ Active profile updated: )r~rr2rrrr#r rr9r:rrrwrrrrr<r=r)rr old_canon new_canonold_dirr collisions r%rename_profilers- 'x00I&x00I)$$$)$$$I=>>>IIJJJi((Gi((G >>  J HI H H HIII~~HF)FFFGGGg&&' G444g&&& NN7 : : :GL : :;;;!Iw???)$$$%i00I Hi((( /I//0000 F)FF9FFGGG   9 , , y ) ) ) <<< = = =       Ns3G GGcdS)z;Generate a bash completion script for hermes profile names.az# Hermes Agent profile completion # Add to ~/.bashrc: eval "$(hermes completion bash)" _hermes_profiles() { local profiles_dir="$HOME/.hermes/profiles" local profiles="default" if [ -d "$profiles_dir" ]; then profiles="$profiles $(ls "$profiles_dir" 2>/dev/null)" fi echo "$profiles" } _hermes_completion() { local cur prev cur="${COMP_WORDS[COMP_CWORD]}" prev="${COMP_WORDS[COMP_CWORD-1]}" # Complete profile names after -p / --profile if [[ "$prev" == "-p" || "$prev" == "--profile" ]]; then COMPREPLY=($(compgen -W "$(_hermes_profiles)" -- "$cur")) return fi # Complete profile subcommands if [[ "${COMP_WORDS[1]}" == "profile" ]]; then case "$prev" in profile) COMPREPLY=($(compgen -W "list use create delete show alias rename export import" -- "$cur")) return ;; use|delete|show|alias|rename|export) COMPREPLY=($(compgen -W "$(_hermes_profiles)" -- "$cur")) return ;; esac fi # Top-level subcommands if [[ "$COMP_CWORD" == 1 ]]; then local commands="chat model gateway setup status cron doctor dump config skills tools mcp sessions profile update version" COMPREPLY=($(compgen -W "$commands" -- "$cur")) fi } complete -F _hermes_completion hermes rmrmr;r%generate_bash_completionrs - - r;cdS)z:Generate a zsh completion script for hermes profile names.a #compdef hermes # Hermes Agent profile completion # Add to ~/.zshrc: eval "$(hermes completion zsh)" _hermes() { local -a profiles profiles=(default) if [[ -d "$HOME/.hermes/profiles" ]]; then profiles+=("${(@f)$(ls $HOME/.hermes/profiles 2>/dev/null)}") fi _arguments \ '-p[Profile name]:profile:($profiles)' \ '--profile[Profile name]:profile:($profiles)' \ '1:command:(chat model gateway setup status cron doctor dump config skills tools mcp sessions profile update version)' \ '*::arg:->args' case $words[1] in profile) _arguments '1:action:(list use create delete show alias rename export import)' \ '2:profile:($profiles)' ;; esac } _hermes "$@" rmrmr;r%generate_zsh_completionrHs   r; profile_namect|}t|t|}|dkr)|st d|d|t |S)zResolve a profile name to a HERMES_HOME path string. Called early in the CLI entry point, before any hermes modules are imported, to set the HERMES_HOME environment variable. rTrrp)r~rrrrr9)rrrs r%resolve_profile_envrks #< 0 0E%   !%((K +"4"4"6"6 = = =5: = =   {  r;)NFFFF)Fr)Lrr,rrer rrr* dataclassesrpathlibrrrtypingrrcompilerrrrrrr9r frozensetrr"rr&r:rrrrnr8rtrvr~rrrrrrrrtuplerrrrrrrrr0rCr9r:r<r=r}rrrrrrrrrrrrrmr;r%rs*  !!!!!!8888888888!!!!!!!!9:: "$s),3<)===3330DT,4,,,,f )y***  2)  i!!! 3D 3 3 3 3%$%%%%9$9999 *$****$      <(#($((((++++++ DGGGGG .      & ....... ."  %    2DU& t      3tK(3333p!% BB B BB B  B  B BBBBJ**T*$*8D>****Z___4_D____D-*3-*T-*d-*-*-*-*`$2t$2$2$2$2$2V C    ST2>T0))3)4))))X#$s)(4dt@DSX2<<<HSM<T<<<<F2E32E#2E2EQU2E2E2E2Ej4S4C4D4444v/#////dFccr;