}-jizUdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl mZddlmZmZejZeejjZejddZeejddZejd d pdZejd d pdZeduoeduZeejd e ed z dz !Z"e"dz Z#e"dz Z$e#dz Z%e"dz Z&e"dz Z'e"dz Z(ej)e*Z+defdZ,dede fdZ-e,Z.e-e.Z/e.8e e.ej0vr#ej01e e.dZ2ndZ2iZ3e j4Z5da6e7e8d<da9edze8d<da:e dze8d<de;de fd Zdefd"Z?d#d$hZ@d#ZAde;fd%ZBd6d&e;dzde fd'ZCd7d(ZDd)ede;fd*ZEd)ed&e;ddfd+ZFeDe3ZGd6d,e ezdzdeHefd-ZId.ede=fd/ZJd6d,e ezdzdefd0ZKdefd1ZLeLaMejd2d ZNd7d3ZOdePfd4ZQd5ZRd6ZShd7ZThd8ZUhd9ZVid:d;dd=d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdNdPdQdRdSdTdUdVdWdXdYdZd[d\d]d]d^d_d`dad`dbdcdd ZWgdeZXd6dfZYeYZZgdgdhdidjdgdkdldjdmdndodjdmdpdqdjdmdrdsdjdmdtdudjdmdvdwdjdxdydzdjdxd{d|djdxd}d~djdxdddjdxdddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjddddjZ[iddddddmddgddddddddddddddēddxddǓddɓdd˓dd͓ddϓddddddddd՜Z\iddddddddddddddddddޓddޓddޓddddddddddddÓiddÓddddddddddddddddddʓddʓddʓddʓddddddddddddZ]de de fdZ^de_de fdZ`d6de;dzdeHe;fdZad6de;dzdebe fdZc d6de_de;dzde fdZd d6dddde_de;dzde_d e=de f d Zede_de fd Zfd e_de fd Zg d6de_de;dzde fdZhidddodddqdddsdddudddwdgdddddddddidddldgdddddddddldddiddddddddd dd!d"dd#d$dg dŐd%dzdd&d|dd'd~dd(ddd)ddgdd*ddd+ddd,ddd-d.dgdd/d0dd1d2dd3d4dd5d6dgdd7ddd8ddd9ddd:ddd;ddddd?d@ddAdBddCdDddEdFdgddGdddHdddIdJddKdLddMdNdgdÐdGdddIdJddMdNddOdPdgdddddddddldddiddQdRdddqdddsdd&d|dgdgdSdTdddldddiddUdVdddddWdXddYdZddddd[d\dd]d^ddd dd!d"dd_d`ddadbddcddddedoddfdqddgdhddidjddkdsddduddldmdddwddndodd%dzdd&d|dd'd~dd(ddd)ddd7ddd8dddEdFddpdJddqdrddsdtddudvddwd7ddd8dddEdFddxdydd+ddd*dddzd{dd|d}dd~dddddddddpdJdddddddgdސd%dzdd&d|dd'd~dd(ddd)ddgdddddddgdddddddgdddddddddddddgd~ddddddzd{dd|d}ddddgdddgdZiejddhZkde de de de=fdZlde de fdZmde de fdZndZodZpdZqdepddeHe de dzdedePeHe eHe ffdZrdeHe;de de dzdeHe;fdZsdeHe;ddfdZthdZude de=fdZvde de=fdZwde de=fdZxdZyde dePfdZzde dePe dze dzffdZ{d6de de dzde fdZ|d6d&e;dzde fdZ}dZ~dZde;fdZde=de;fdZde de;fdZde de;fdZdae;dze8d<dae7e8d<dae;dze8d<dZe7e8d<e jZe jeadaiae;e ePe7dffe8d<iZe;e e7fe8d<de dzfdʄZdZe"dz Zdefd̈́Zd.ede;fd΄Zde;fdτZd7dЄZde_de=fd҄Zde_de=fdӄZde;dzfdԄZde;ddfdՄZde7de;dzfdׄZd؄Zde fdلZde fdڄZde deHde fd܄Zde deHe fd݄Zde deHe deHe;fdބZdeHe fd߄Zde;fdZedz dz Ze j4ZdZe j4ZGddZdefdZiZe;e8d<e j4ZiZe;e8d<iZe;e8d<iZe;e8d<iZe;e8d<iZe;e8d<iZe;e8d<ebZebe8d<iZe;e8d<e j4Zdae7dze8d<e j Zde ddfdZde ddfdZde ddfdZddlZejZeje8d<dZe j4Zde ddfdZe jZdZdZiZe;e8d<e j4ZÐde de j4fdZide tdddddddddddddddddd d d d dd dd ddejddddddddddddddZhdZhdZhdZȐddddddZdePe e ffd Zde;fd!ZebeŠd"d#hz Z͐dd$hdd%hhd&hd'hd(d)Zhd*ZeАd+d,ZҐd-e;de;fd.Ze˦Z e&Zn #e$rdZYnwxYwerejd/seKeԠdaMeԠd#deԠde tkrMe teԐd< e&ejedd01d23n #e$rYnwxYwejZeje8d4< dd5lmZeߦdS#e$rYdSwxYw(8a Hermes Web UI -- Shared configuration, constants, and global state. Imported by all other api/* modules and by server.py. Discovery order for all paths: 1. Explicit environment variable 2. Filesystem heuristics (sibling checkout, parent dir, common install locations) 3. Hardened defaults relative to $HOME 4. Fail loudly with a human-readable fix-it message if required modules are missing N)Path)parse_qsurlparseHERMES_WEBUI_HOST 127.0.0.1HERMES_WEBUI_PORT8787HERMES_WEBUI_TLS_CERTHERMES_WEBUI_TLS_KEYHERMES_WEBUI_STATE_DIR.hermeswebuisessionszworkspaces.jsonz _index.jsonz settings.jsonzlast_workspace.txtz projects.jsonreturnc g}tjdrX|ttjdtjdt tdz }|t|dz |tj dz tj dz r|tj |tdz dz |tdz ttjdt tdz dz }||dz d D]'}|t|dz (|D]C}| r-|dz r|cSDd S) a Locate the hermes-agent checkout using a multi-strategy search. Priority: 1. HERMES_WEBUI_AGENT_DIR env var -- explicit override always wins 2. HERMES_HOME / hermes-agent -- e.g. ~/.hermes/hermes-agent 3. Sibling of this repo -- ../hermes-agent 4. Parent of this repo -- ../../hermes-agent (nested layout) 5. Common install paths -- ~/.hermes/hermes-agent (again as fallback) 6. HOME / hermes-agent -- ~/hermes-agent (simple flat layout) HERMES_WEBUI_AGENT_DIR HERMES_HOMErz hermes-agentz run_agent.py XDG_DATA_HOMEz.localshare)z/optz /usr/localz/usr/local/shareN) osgetenvappendr expanduserresolvestrHOME REPO_ROOTparentexists) candidates hermes_homexdg_data sys_prefixpaths /root/hermes-webui/api/config.py_discover_agent_dirr';sJ y)**  344 5 5 @ @ B B J J L L   )M3ti/?+@+@AAKd;''2244~EFFFi&7888 >)1133,)*+++dY&7888d^+,,,BIos4(?W3L/M/MNNOOHh))++n<===A== $z**^;<<<<"" ;;== "d^3;;== "<<>> ! ! ! 4 agent_dircxtjdrtjdS|r|dz dz dz }|rt|S|dz dz dz }|rt|S|dz dz dz }|rt|S|dz dz dz }|rt|Stdz dz dz }|rt|Sdd l}d D]}||}|r|cSd S) z Locate a Python executable that has the Hermes agent dependencies installed. Priority: 1. HERMES_WEBUI_PYTHON env var 2. Agent venv at /venv/bin/python 3. Local .venv inside this repo 4. System python3 HERMES_WEBUI_PYTHONvenvbinpythonz.venvScriptsz python.exerN)python3r.r0)rrr rrshutilwhich)r)venv_py venv_py_win local_venvr1namefounds r&_discover_pythonr8os y&''0y.///$f$u,x7 >>   w<< g%-8 >>   w<<  &(94|C      ${## #')I5 D      ${## #W$u,x7J:MMM% T""  LLL  9r(TF _cfg_mtime _cfg_path_cfg_fingerprintdatac| tj|ddtS#t$rt |cYSwxYw)azReturn a stable fingerprint for config dictionaries. A few tests and legacy call sites still mutate ``cfg`` directly for in-memory overrides. Path-aware reloads should not immediately discard those overrides just because the active profile path differs from the last disk load, but an unchanged disk-loaded cache must still reload on profile switches. T),:) sort_keys separatorsdefault)jsondumpsr Exceptionrepr)r=s r&_fingerprint_configrHsMz$$:sSSSS Dzzs ;;cttttkrdS ttuS#t$rYdSwxYw)uFTrue when cfg was changed after the last successful reload_config(). Detects two override shapes: 1. ``_cfg_cache`` was mutated in place (fingerprint differs). 2. ``cfg`` (the module attribute) was rebound to a different dict — e.g. ``monkeypatch.setattr(config, "cfg", {...})`` in tests. The alias-with-the-cache pattern at module load means this is a common test-isolation override, and silently reloading from disk over it (the v0.51.7 path-aware reload regression) breaks any test that relies on the override. NTF)r<rH _cfg_cachecfg NameErrorr(r&_cfg_has_in_memory_overridesrNsU#(;J(G(GK[([([t*$$ uus 6 AActjd}|r!t|S ddlm}|dz S#t $rtdz dz cYSwxYw)z/Return config.yaml path for the active profile.HERMES_CONFIG_PATHrget_active_hermes_homez config.yamlr)rrrr api.profilesrR ImportErrorr) env_overriderRs r&_get_config_pathrVs9122L/L!!,,...0777777%%''-77 000i-////0sA A&%A&deferredeagercJt} |j}n#t$rd}YnwxYw|tkp t |k}t r|rtst tt urtSn#t$rYnwxYwt S)z;Return the cached config dict, loading from disk if needed.r9) rVstatst_mtimeOSErrorr:r;rJrN reload_configrKrL) config_path current_mtime cache_stales r& get_configras"$$K#((**3  :-Ik1IK +.J.L.L  j J !      s* 998B BB config_datact|tr|nt}t|tr|dini}t|tstS|dt}t|t r1|}|tvr|StS)aReturn the validated first-turn session persistence mode. ``deferred`` preserves the current first-turn sidecar behaviour: persist pending_user_message/runtime fields before streaming, then merge the turn after the agent finishes. ``eager`` additionally checkpoints the current user turn into ``messages`` before launching the agent thread. Unknown values fail closed to ``deferred`` so a typo never reintroduces eager disk writes unexpectedly. rsession_save_mode) isinstancedictrKget _DEFAULT_WEBUI_SESSION_SAVE_MODErstriplower_WEBUI_SESSION_SAVE_MODES)rb active_cfg webui_cfgmode normalizeds r&get_webui_session_save_moderp s!+; = =F3J/9*d/K/KS w+++QSI i & &0// ==,.N O OD$ZZ\\'')) 2 2 2  ++r(ct5tt}t}|ada ddl}|r|| d}t|trTt | t|jan#t $rdaYnwxYwn+#t"$rt$d|YnwxYwt)ta|dkrt-ddddS#1swxYwYdS)z7Reload config.yaml from the active profile's directory.r9rNutf-8encodingz"Failed to load yaml config from %s) _cfg_lockrJclearrVr:r;yamlr safe_load read_textrerfupdaterrZr[r\rFloggerdebugrHr<_delete_models_cache_on_disk)r^_old_cfg_mtime_yamlloadeds r&r]r]#s ++&(( $   L !!## ))>)>)>)P)PQQfd++)%%f---)%)+%6%6%;%;%=%=%F ")))%( ) L L L LL={ K K K K K L.z:: S ( * * *9++++++++++++++++++sY3EA0C'-&CC' C# C'"C##C'&E'%D ED+EE E r^c> ddl}n#t$ricYSwxYw|siS ||d}t |t r|niS#t$r t d|icYSwxYw)Nrrrrsz#Failed to parse yaml config from %s) rwrTr rxryrerfrFr{r|)r^rrs r&_load_yaml_config_filerEs        !6!6!6!H!HII#FD119vvr9  :KHHH s AA22'BBc ddl}n"#t$r}td|d}~wwxYw|jdd|||ddddS) Nrz.PyYAML is required to write Hermes config.yamlTparentsexist_okF)rA allow_unicoderrrs)rwrT RuntimeErrorrmkdir write_text safe_dump)r^rbrexcs r&_save_yaml_config_filerUsV VVVKLLRUUVTD999  uDIIs &!&rawcgdttzdzddffd }||tjdr|tjdtdz }tdz }|r |||r |||||t dz S)z8Return ordered candidate workspace paths, de-duplicated. candidateNrc|dvrdS t|}n#t$rYdSwxYw|vr|dSdS)N)Nr )rrrrFr)rr%r!s r&addz"_workspace_candidates..addls  " " F  ??--//7799DD    FF  z ! !   d # # # # # " !s3= A  A HERMES_WEBUI_DEFAULT_WORKSPACE workspacework)rrrrrr STATE_DIR)rrhome_workspace home_workr!s @r&_workspace_candidatesrhsJ$sTzD($T$$$$$$CHHH y1229 BI6 7 7888K'Nv I N ICC K   r(r%c: |}|dd|o8t j|tjtjztjzS#t$rYdSwxYw)zDBest-effort check that a workspace directory exists and is writable.TrF) rrris_dirraccessR_OKW_OKX_OKrF)r%s r&_ensure_workspace_dirrs  ((** 4$ ///{{}}M4271BRW1L!M!MM uusB B BBcjt|D]}t|r|cStd)zBReturn the first usable workspace path, creating it when possible.zqCould not create or access any usable workspace directory. Set HERMES_WEBUI_DEFAULT_WORKSPACE to a writable path.)rrr)rrs r&resolve_default_workspacersR*3//  + +       A  r(ctS)z Resolve the default workspace in order: 1. HERMES_WEBUI_DEFAULT_WORKSPACE env var 2. ~/workspace if it already exists 3. ~/work if it already exists 4. ~/workspace (create if needed) 5. STATE_DIR / workspace )rrMr(r&_discover_default_workspacers % & &&r(HERMES_WEBUI_DEFAULT_MODELcd}d}d}ddddtdtrtnd d tr|n|d td td tdt dt dtd trdnddg }td |dtst|dddSdS)zNPrint detected configuration at startup so the user can verify what was found.z [ok]z [!!]z [XX]r z! Hermes Web UI -- startup configz" --------------------------------z repo root : z agent dir : z NOT FOUNDz z python : z state dir : z workspace : z host:port : r@z config file : z(found)z(not found, using defaults) T)flusha\ Could not find the Hermes agent directory. The server will start but agent features will not work. To fix, set one of: export HERMES_WEBUI_AGENT_DIR=/path/to/hermes-agent export HERMES_HOME=/path/to/.hermes Or clone hermes-agent as a sibling of this repo: git clone ../hermes-agent N) r _AGENT_DIR PYTHON_EXErDEFAULT_WORKSPACEHOSTPORTrVr printjoin _HERMES_FOUND)okwarnerrliness r&print_startup_configrs1 B D C +,&9&&cD::ccjHa^acc':''&9&&.,..(4(($((~+--~~>N>P>P>W>W>Y>Y1|_|~~  E $))E  $''''     F F F    r(cdg}g}i}|D]Z} t|#t$r;}||t|jd|||<Yd}~Sd}~wwxYwt |dk||fS)zw Attempt to import the key Hermes modules. Returns (ok: bool, missing: list[str], errors: dict[str, str]). run_agentz: Nr) __import__rFrtype__name__len)requiredmissingerrorsmodes r&verify_hermes_importsrs }HG F55 5 sOOOO 5 5 5 NN3   "!WW-4444F3KKKKKK  5 LLA  //s A"1AA"i@ i@>.bmp.gif.ico.jpg.png.svg.jpeg.webp>.md.mdown .markdown>.c.h.go.js.py.rs.sh.ts.cpp.css.csv.jsx.log.sql.tsx.txt.xml.yml.bash.java.toml.yaml.env.html.jsonrz image/pngrz image/jpegrrz image/gifrz image/svg+xmlrz image/webprz image/x-iconrz image/bmpz.pdfzapplication/pdfrapplication/jsonrz text/htmlz.htmz.xlszapplication/vnd.ms-excelz.xlsxzAapplication/vnd.openxmlformats-officedocument.spreadsheetml.sheetz.doczapplication/mswordz.docxzGapplication/vnd.openxmlformats-officedocument.wordprocessingml.documentz.mp3z audio/mpegz audio/wavz audio/mp4z audio/aacz audio/oggz audio/opusz audio/flacz video/mp4zvideo/quicktimez video/webmz video/ogg) z.wavz.m4az.aacz.oggz.ogaz.opusz.flacz.mp4z.movz.m4vz.webmz.ogv)browserclarifycode_executioncronjob delegationfile image_genmemorysession_searchskillsterminaltodowebwebhookc|t} ddlm}t||dS#t$r2|didt cYSwxYw)zResolve CLI toolsets using the agent's _get_platform_tools() so that MCP server toolsets are automatically included, matching CLI behaviour.Nr)_get_platform_toolscliplatform_toolsets)rahermes_cli.tools_configrlistrFrg_DEFAULT_TOOLSETS)rKrs r&_resolve_cli_toolsetsr9s {llN??????''U33444 NNNww*B//33E;LMMMMMNs19A-,A-OpenAIzopenai/gpt-5.4-miniz GPT-5.4 Mini)provideridlabelzopenai/gpt-5.4zGPT-5.4 Anthropiczanthropic/claude-opus-4.7zClaude Opus 4.7zanthropic/claude-opus-4.6zClaude Opus 4.6zanthropic/claude-sonnet-4.6zClaude Sonnet 4.6zanthropic/claude-sonnet-4-5zClaude Sonnet 4.5zanthropic/claude-haiku-4-5zClaude Haiku 4.5Googlezgoogle/gemini-3.1-pro-previewzGemini 3.1 Pro Previewzgoogle/gemini-3-flash-previewzGemini 3 Flash Previewz$google/gemini-3.1-flash-lite-previewzGemini 3.1 Flash Lite Previewzgoogle/gemini-2.5-prozGemini 2.5 Prozgoogle/gemini-2.5-flashzGemini 2.5 FlashDeepSeekzdeepseek/deepseek-v4-flashzDeepSeek V4 Flashzdeepseek/deepseek-v4-prozDeepSeek V4 Prozdeepseek/deepseek-chat-v3-0324zDeepSeek V3 (legacy)zdeepseek/deepseek-r1zDeepSeek R1 (legacy)Qwenzqwen/qwen3-coderz Qwen3 Coderzqwen/qwen3.6-plusz Qwen3.6 PlusxAIzx-ai/grok-4.20z Grok 4.20Mistralzmistralai/mistral-large-latestz Mistral LargeMiniMaxzminimax/MiniMax-M2.7z MiniMax M2.7zminimax/MiniMax-M2.7-highspeedzMiniMax M2.7 HighspeedzZ.AIz zai/glm-5.1zGLM-5.1z zai/glm-5zGLM-5zzai/glm-5-turboz GLM-5 Turboz zai/glm-4.7zGLM-4.7z zai/glm-4.5zGLM-4.5zzai/glm-4.5-flashz GLM-4.5 Flash OpenRouterzopenrouter/elephant-alphazElephant Alpha (free)zopenrouter/owl-alphazOwl Alpha (free)ztencent/hy3-preview:freezHy3 Preview (free)z&nvidia/nemotron-3-super-120b-a12b:freezNemotron 3 Super (free)z#arcee-ai/trinity-large-preview:freezTrinity Large Preview (free)nousz Nous Portal openrouter anthropicopenai openai-codexz OpenAI CodexcopilotzGitHub Copilotzaiz Z.AI / GLM kimi-codingzKimi / Moonshotdeepseekminimax minimax-cnzMiniMax (China)googlez meta-llamaz Meta Llama huggingface HuggingFacealibabaAlibabaollamaOllama ollama-cloudz Ollama Cloudz OpenCode Zenz OpenCode Goz LM Studioz NVIDIA NIMXiaomi) opencode-zen opencode-golmstudio mistralaiqwenx-ainvidiaxiaomiglmz-aizz.aizhipugithubzgithub-copilotz github-modelsz github-modelgeminiz google-geminizgoogle-ai-studiokimimoonshotclaudez claude-codez deep-seekz minimax-china minimax_cnopencodergrokxair"zx.aiawsbedrockz aws-bedrockamazonzamazon-bedrockr!aliyun dashscopez alibaba-cloudnimr#z nvidia-nimz build-nvidianemotronr$custom)mimoz xiaomi-mimolocalr6c|s|St|} ddlm}||vr||Sn#t $rYnwxYwt||S)a"Return the canonical provider slug for *name*. Applies the WebUI's local alias table first, then merges any additional aliases the agent provides (when hermes_cli is on sys.path). Lookup is case-insensitive and whitespace-trimmed. Unknown names pass through unchanged. r)_PROVIDER_ALIASES)rrirjhermes_cli.modelsr<rFrg)r6r_agent_aliasess r&_resolve_provider_aliasr?s  d))//   ! ! # #C IIIIII . !#& & !       d + ++sA AAc2t|pd}|sdS|dr|St jdd|d}t jdd|}|sdSd|zS)Nr custom:z [^a-z0-9._-]+-z-{2,})rrirj startswithresub)r6rslugs r&_custom_provider_slug_from_namerGs djb//   ! ! ' ' ) )C r ~~i    6"C - - 3 3C 8 8D 6(C & &D r t r( config_objct|tr|nt}|dg}t|tsgSd|DS)Ncustom_providersc<g|]}t|t|SrM)rerf.0entrys r& z,_custom_provider_entries..s' B B Be*UD*A*A BE B B Br()rerfrKrgr)rHsourceentriess r&_custom_provider_entriesrRsY%j$77 @ZZSFjj+R00G gt $ $ B Bw B B BBr(cHddt|DDS)Nch|]}||SrMrM)rMrFs r& z/_named_custom_provider_slugs..s0           r(c3ZK|]&}t|dV'dS)r6N)rGrgrLs r& z/_named_custom_provider_slugs..sJ   ,EIIf,=,= > >      r()rR)rHs r&_named_custom_provider_slugsrXsD    1*==      r(rct|pd}|sdS|d}t |D]}t|dpd}t |}|r|s^|||hvs||dkr|cSdS)Nr rAr6)rrirj removeprefixrRrgrG)rrHr raw_suffixrN entry_namerFs r&(_named_custom_provider_slug_for_providerr] s hn"   # # % % + + - -C r!!),,J)*556**0b117799??AA .z::    :t$ $ $ d6G6G 6R6R(R(RKKK)S 2r(base_url resolve_aliasr_r`ct||}|r|S|sbt|pd}|r|dkrt ||}|r|St|pdSt |}|rMt|pddkrt ||}|r|S|S)aNormalize a configured provider id. When ``resolve_alias`` is True (default, used for active-provider / badge surfaces), falls through to ``_resolve_provider_alias`` after the named-custom check. When False (used by ``resolve_model_provider``), preserves the raw provider value so downstream local-server detection (`_LOCAL_SERVER_PROVIDERS` membership in #1625) sees the original name like ``ollama`` / ``lm-studio`` rather than alias-collapsed ``custom`` / ``lmstudio``. The base-url-to-named-slug fallback still runs in both modes when applicable. See in-stage absorption note on stage-313 for the #1625 regression that motivated the ``resolve_alias`` flag. r r8)r]rrirj(_named_custom_provider_slug_for_base_urlr?)rrHr_r` named_slugr by_base_urlresolveds r&_resolve_configured_provider_idrfs*:(JOOJ #(.b!!''))//11  #xB8ZXXK #""8>r"""&x00H B   % % ' ' - - / /8 ; ;>xTT    Or(cL|sdSt|dd}|sdS|tvs |t vr|St |}|r/|tvr|S|S)uCNormalise a provider id slug into a stable lowercase-hyphenated form. Folds underscores to hyphens and lowercases the result, so a user with ``providers.opencode_go.api_key`` in ``config.yaml`` and ``model.provider: opencode-go`` sees ONE provider group, not two (#1568). Then attempts alias resolution but only if the alias target is itself a known canonical id in ``_PROVIDER_DISPLAY`` — this avoids converting ``x-ai`` (canonical in WebUI's data structures) to ``xai`` (the hermes_cli alias target which the WebUI doesn't index by). Examples:: opencode-go -> opencode-go (canonical, no change) opencode_go -> opencode-go (underscore folded) OpenCode-Go -> opencode-go (case folded) OPENCODE_GO -> opencode-go (both folded) z_ai -> zai (alias-resolved — zai is canonical) x-ai -> x-ai (preserved — x-ai is canonical) Empty input passes through as the empty string. Unknown ids preserve their normalised form. r _rB)rrirjreplace_PROVIDER_DISPLAY_PROVIDER_MODELSr?)r6rres r&_canonicalise_provider_idrlKs. r d))//   ! ! # # + +C 5 5C r 3*:#:#: 's++H HNN$$(999~~ Jr(valuect|pdd}|sdStd|vr|nd|}|jpd}|jp|jd}|jd}|jsd}|d||S)Nr /://http://http)rrirstriprschemerjnetlocr%)rmurl parsed_urlrtrur%s r&_normalize_base_url_for_matchrxus ekr   " " ) )# . .C r###?S??CCJ)6 0 0 2 2F2:? 9 9 ; ; B B3 G GF ? ! !# & &D   ' ' ' ' ''r(ct|}|sdSt|D]P}t|d}||kr+t|dpdcSdS)Nr r_r6r8)rxrRrgrG)r_rHtargetrNentry_base_urls r&rbrbs+8 4 4F r)*55NN6uyy7L7LMM V # # .uyy/@/@AAMXMMM 2r(zclaude-opus-4.7rrzclaude-opus-4.6zclaude-sonnet-4.6zclaude-sonnet-4-5zclaude-haiku-4-5zgpt-5.5zGPT-5.5z gpt-5.5-miniz GPT-5.5 Miniz gpt-5.4-minizgpt-5.4z gpt-5.3-codexz GPT-5.3 Codexz gpt-5.2-codexz GPT-5.2 Codexzgpt-5.1-codex-maxzGPT-5.1 Codex Maxzgpt-5.1-codex-minizGPT-5.1 Codex Minizcodex-mini-latestzCodex Mini (latest)zgemini-3.1-pro-previewzgemini-3-flash-previewzgemini-3.1-flash-lite-previewzgemini-2.5-prozgemini-2.5-flashzdeepseek-v4-flashzdeepseek-v4-prozdeepseek-chat-v3-0324zdeepseek-reasonerzDeepSeek Reasoner (legacy)z@nous:anthropic/claude-opus-4.6zClaude Opus 4.6 (via Nous)z!@nous:anthropic/claude-sonnet-4.6zClaude Sonnet 4.6 (via Nous)z@nous:openai/gpt-5.4-minizGPT-5.4 Mini (via Nous)z#@nous:google/gemini-3.1-pro-previewz!Gemini 3.1 Pro Preview (via Nous)zglm-5.1zglm-5z glm-5-turbozglm-4.7zglm-4.5z glm-4.5-flashzmoonshot-v1-8kzMoonshot v1 8kzmoonshot-v1-32kzMoonshot v1 32kzmoonshot-v1-128kzMoonshot v1 128kz kimi-latestz Kimi Latestz kimi-k2.5z Kimi K2.5z MiniMax-M2.7zMiniMax-M2.7-highspeedz MiniMax-M2.5z MiniMax M2.5zMiniMax-M2.5-highspeedzMiniMax M2.5 Highspeedz MiniMax-M2.1z MiniMax M2.1z MiniMax-M2z MiniMax M2zgpt-4ozGPT-4oz gpt-5.4-proz GPT-5.4 Proz gpt-5.4-nanoz GPT-5.4 Nanozgpt-5.3-codex-sparkzGPT-5.3 Codex Sparkzgpt-5.2zGPT-5.2zgpt-5.1zGPT-5.1z gpt-5.1-codexz GPT-5.1 Codexzgpt-5zGPT-5z gpt-5-codexz GPT-5 Codexz gpt-5-nanoz GPT-5 Nanozclaude-opus-4-7zclaude-opus-4-6zclaude-opus-4-5zClaude Opus 4.5zclaude-opus-4-1zClaude Opus 4.1zclaude-sonnet-4-6zclaude-sonnet-4zClaude Sonnet 4zclaude-3-5-haikuzClaude 3.5 Haikuz minimax-m2.5zminimax-m2.5-freezMiniMax M2.5 Freeznemotron-3-super-freezNemotron 3 Super Freez big-picklez Big Picklerz kimi-k2.6z Kimi K2.6z mimo-v2-proz MiMo V2 Proz mimo-v2-omniz MiMo V2 Omniz mimo-v2.5-proz MiMo V2.5 Proz mimo-v2.5z MiMo V2.5z minimax-m2.7z qwen3.6-plusz qwen3.5-plusz Qwen3.5 Plusr zmistral-large-latestzmistral-small-latestz Mistral Smallz qwen3-coderz!nvidia/nemotron-3-super-120b-a12bzNemotron 3 Super 120Bznvidia/nemotron-3-nano-30b-a3bzNemotron 3 Nano 30Bz(nvidia/llama-3.3-nemotron-super-49b-v1.5zLlama 3.3 Nemotron Super 49Bz qwen/qwen3-next-80b-a3b-instructzQwen3 Next 80Bz mimo-v2-flashz MiMo V2 Flashz grok-4.20)r$r"gh_cli gh auth tokenrPr key_sourcec|tvpS|dkp)|dkS)zTrue when a credential-pool entry is a seeded gh-cli token rather than one the user added explicitly. Filter these so Copilot doesn't appear in the dropdown just because `gh` is installed on the system. r~)rirj_AMBIENT_GH_CLI_MARKERS)rPrrs r&_is_ambient_gh_cli_entryrJsl  "99 9 ;;==   O 3 9      # # % % 8r(midc|d\}}}dtdtfd}||}|r|d||dz }|S)uTurn an Ollama model id (Ollama tag format) into a readable display label. Examples: 'kimi-k2.5' → 'Kimi K2.5', 'qwen3-vl:235b-instruct' → 'Qwen3 VL (235B Instruct)' r@src|dddd}g}|D]}|dd}|r;t|dkr(||g|rD|rB|dr(||||r%|d|ddzn|d|S) NrB rh.r r) risplitisalpharrupperisalnumisdigitr)rtokensoutt alpha_onlys r&_fmtz"_format_ollama_label.._fmt]s.3$$,,S#66<<>> = =A3++J!!## =A!  17799%%%%##%% =* =A9N9N9P9P = 17799%%%% 1;1Q4::</[:]`` (e.g. ``anthropic/claude-opus-4.7``); drop the vendor namespace, prettify the model name with the same token rules as :func:`_format_ollama_label` (short acronyms uppercase, size suffixes uppercase, capitalize the rest), then append ``" (via Nous)"`` so the entry is visually distinct from same-named models in other provider groups (e.g. direct Anthropic). Examples (matches the helper's actual output — labels are produced by :func:`_format_ollama_label`'s token rules, so 3-letter tokens like ``GPT`` and ``PRO`` render uppercase):: anthropic/claude-opus-4.7 -> Claude Opus 4.7 (via Nous) openai/gpt-5.4-mini -> GPT 5.4 Mini (via Nous) google/gemini-3.1-pro-preview -> Gemini 3.1 PRO Preview (via Nous) moonshotai/kimi-k2.6 -> Kimi K2.6 (via Nous) qwen/qwen3.5-plus-02-15 -> Qwen3.5 Plus 02 15 (via Nous) nvidia/nemotron-3-super-120b-a12b -> Nemotron 3 Super 120B A12b (via Nous) minimax/minimax-m2.5:free -> MiniMax M2.5 (Free) (via Nous) rorrrNz (via Nous))rrjrCrr)rrbases r&_format_nous_labelrps,*- #q!!"%%I##I..; #i..// ::  * *D   r()r r r moonshotair&rr!r"rstepfunr$tencentr#zarcee-ai)selected_model_idrzlive_idsrrzcD|sggfSt|tkrt|gfSgtdtddffd }|r=|}|dr|tdd}||vr ||t dgD]S}|dd}|dr|tdd}||vr ||Ti}|D]R}|vrd |vr|d d d nd} | | g |Stttfd |D} | z} t|krqd } | D]R} t|krn<|| } | s/|| d | d z } S| d krnt|kqfd |D}|fS)u Trim a Nous Portal catalog into a (featured, extras) split. ``featured`` is what the picker dropdown renders. ``extras`` is everything else — kept available so the slash-command `/model` autocomplete and the ``_dynamicModelLabels`` map cover the full catalog. Selection rules (in order, deterministic): 1. Always include the user's currently-selected model if it's in the catalog (preserves selection stickiness — no orphan IDs in the dropdown after a refresh). 2. Always include every entry from the curated static ``_PROVIDER_MODELS["nous"]`` list whose id maps onto a live id — those four are explicitly maintained as flagship picks. 3. Top up to ``target`` by walking ``_NOUS_VENDOR_PRIORITY`` round-robin (one model per vendor each pass) so no vendor monopolises the slot budget. Within a vendor, the original ``live_ids`` order is preserved — that's the order Nous Portal returned, which approximates recency. Returns ``(featured_ids, extras_ids)`` — both lists are subsets of ``live_ids`` with disjoint membership and union equal to ``live_ids``. For catalogs ≤ ``_NOUS_FEATURED_THRESHOLD`` entries the function is a no-op: ``featured == live_ids``, ``extras == []``. rrNcp|r0|vr.||dSdSdSN)rr)rchosen chosen_sets r&_addz&_build_nous_featured_set.._addsO  3j(( MM#    NN3       ((r(@nous:r rr rorrc3>K|]}|tv|VdSr)set)rMvprioritys r&rWz+_build_nous_featured_set..s3EEAas8}}.D.Da.D.D.D.DEEr(cg|]}|v| SrMrM)rMmrs r&rOz,_build_nous_featured_set..s# 9 9 9AQj%8%8a%8%8%8r()r_NOUS_FEATURED_THRESHOLDrrrrCrkrgr setdefaultr_NOUS_VENDOR_PRIORITYsortedpop)rrrzrselstaticsid by_vendorrvendorleftover vendor_orderadded_this_passbucketextrasrrrs @@@r&_build_nous_featured_setrs> 2v  8}}000H~~r!!F55J # $        >>( # # &c(mmnn%C (?? DIII#&&vr22jjr"" >>( # # &c(mmnn%C (?? DIII')I55 *   ),3""1%%VR((//4444)**HEEEEEEEEEHh&L f++  " ! !F6{{f$$]]6**F  DA    q OO a    f++  : 9 9 9 9 9 9F 6>r( raw_models provider_idactive_providerc6|pd}|r||krt|Sg}|D]f}|d}|dsd|vr|||ddB|d|d||ddg|S)zReturn *raw_models* with @provider: prefixes applied when needed. Prefixing is skipped when (a) the provider is already the active one, or (b) a model id already starts with '@' or contains '/' (already routable). r r@rorr|r@)rjrrCr)rrr_activeresultrrs r&_apply_provider_prefixrs$"++--G  kW,,J F PPg >>#   P#** MMqz:: ; ; ; ; MM!8[!8!83!8!81W:NN O O O O Mr(groupscRsdStttfd}i}|D]}|}t|dgD]\}}t |ddpd}|r|drT||g ||f| D]\}} t| dkr| d dD]\}}|}|d|}|d d} d| d ||d<|d | } |d |kr|d d| d|d <}|d| d|d <dS)ubEnsure every model ID across groups is globally unique. When multiple providers expose the same model ID (either bare names like ``gpt-5.4`` or slash-qualified IDs like ``google/gemma-4-27b``), the dropdown cannot distinguish them. This post-process detects such collisions and prefixes colliding entries with ``@provider_id:`` so the frontend can treat them as distinct options. The first occurrence (in provider-id order) is left unchanged for backward compatibility with sessions that already store the original bare/slash model name. If that provider is later removed from the config, the next cache rebuild re-runs dedup — the remaining provider becomes the sole occurrence and is left unchanged, so the session still matches. .. note:: The "first occurrence wins" rule means the unchanged ID is not stable across config changes (adding, removing, or reordering providers). This is acceptable because the dedup runs on every cache rebuild, so sessions always resolve to the current canonical unchanged ID. The ``@provider_id:model`` format is consistent with the existing ``_apply_provider_prefix()`` function and is handled by ``resolve_model_provider()`` (rsplits on the last ``:`` to handle provider_ids that themselves contain ``:``). Operates in-place on *groups*. Nc<|ddS)Nrr rg)irs r&z(_deduplicate_model_ids..>sfQimmM266r(keymodelsrr rrrr@rrrr) rranger enumeratergrrirCrritems) rsorted_group_indicesid_mapgigroupmimodelr original_id locationspid provider_names ` r&_deduplicate_model_idsrs8  " c&kk 6 6 6 602F"88r "599Xr#:#:;; 8 8IBeiib))/R006688C #..--    c2 & & - -r2h 7 7 7 7  8#),,.. D D Y y>>A   m D DFB2JE(OB'E))M2..C1c11K11E$K!IIj#66Myy!![00$)'N!F!Fm!F!F!Fg$/!C!C=!C!C!Cg D D Dr(> llama-cppvllmtabbyrlocalaitextgenllamacpprtabbyapi koboldcpp lm-studioct|pd}|tvrdS|dr|dtvSdS)zTrue when provider_id names a local model server. Named custom providers resolve to ``custom:``. Treat those as local when the bare slug is one of the known local-server provider names too. r TrAF)rrirj_LOCAL_SERVER_PROVIDERSrCrZ)rrs r&_is_local_server_providerrsu ;$"%%++--3355H***t9%%K$$Y//3JJJ 5r(c|sdS ddlm}ddl}||jpd}|sdS|dvrdS ||}n#t $rYdSwxYw|jp |jp|j S#t$rYdSwxYw)uTTrue if base_url's host is a loopback or private IP (likely local server). Reuses ipaddress.is_loopback / is_private / is_link_local — the same heuristic used in the `api/config.py` SSRF/credential-routing code. Errors (DNS failure, malformed URL) return False so callers fall back to the static-provider-name check. Fr)rNr ) localhostz ip6-localhostz ip6-loopbackT) urllib.parser ipaddresshostnamerj ip_address ValueError is_loopback is_private is_link_localrF)r_rrhostaddrs r& _base_url_points_at_local_serverrs u))))))""+1r88:: 5 A A A4 ''--DD   55   H4?Hd6HH uus90A;A;AA; A#A;"A##A;; B B restct|pd}d|vrdS|dd\}}|rd|vrdS|sdS t |}n#t $rYdSwxYwd|cxkrdksndS ddl}||dS#t $rYnwxYw|}|d krdSd |vrdSdS) uRTrue when ``custom:`` is an endpoint-style slug ``host:port``. WebUI sometimes derives ``custom:10.8.71.41:8080`` from ``base_url`` authority. The #1776 peel must not treat that middle colon as part of an eaten model segment — otherwise ``@custom:10.8.71.41:8080:Qwen3`` wrongly becomes model ``8080:Qwen3``. r r@FrirNTrr) rrirsplitrintrrrrj)rrport_sport_nrhls r&&_custom_slug_rest_looks_like_host_portrsB tzr?? " "D $u;;sA&&LD& 3$;;u >>  uV uu  5 u T"""t      B [t d{{t 5s$"A22 B?BB00 B=<B=ctdi|ipi}|dpdd}|r|Stdipi}t |t rt |dpd}|t |kr@|dpdd}|r|SdS)u0Look up the configured base_url for a provider (e.g. lmstudio). Checks two locations, in order: 1. ``cfg["providers"][]["base_url"]`` — the explicit per-provider override. 2. ``cfg["model"]["base_url"]`` — falls back here when ``cfg["model"]["provider"] == provider_id``. This is the historical shape (the model block carries both the active provider AND the base URL for that provider in a single record). Returns the URL stripped of trailing ``/`` if configured, otherwise None. providersr_r rorrN)rKrgrirsrerfrrj)rprov_cfgexplicit model_cfgmodel_provider model_bases r&_get_provider_base_urlr s7ww{B''++K<<BH Z((.B5577>>sCCH$$*I)T"""Y]]:66<"==CCEEKKMM S--3355;;== = =#-- 339r@@BBII#NNJ "!! 4r(model_idcd}d}tdi}t|tr@|d}t |dt|d}t|t r,|dkrd}|pd }|s|||fS|duo|dko|d  }t|tr|d nd}|o |duo||k}td g}t|tr9|s6|D]2}t|ts|dpd } |d pd } |dpd } t} | r| | |d} t| tr1| d| D| r|| vrt| }||| pdfcS4|drd|vr|dd}|dd\}}|d r`|ddkrG|t#d d}t%|s |dd\}}|d|}n@|t&vr7|t(vr.|d s|dd\}}||t-|fSd|vr|dd\}}|dkr|d|fShd}||vr|||fS|r ||kr|||fS|dkrNt |pd ddkr|t&vr ||kr|ddfS|r6t1|st3|r|||fS|t&vr|||fS|||fS|t&vr ||kr|ddfS|||fS)a'Resolve model name, provider, and base_url for AIAgent. Model IDs from the dropdown can be in several formats: - 'claude-sonnet-4.6' (bare name, uses config default provider) - 'anthropic/claude-sonnet-4.6' (OpenRouter-style provider/model) - '@minimax:MiniMax-M2.7' (explicit provider hint from dropdown) The @provider:model format is used for models from non-default provider groups in the dropdown, so we can route them through the correct provider via resolve_runtime_provider(requested=provider) instead of the default. Custom OpenAI-compatible endpoints are special: their model IDs often look like provider/model (for example ``google/gemma-4-26b-a4b``), which would be mistaken for an OpenRouter model if we only looked at the slash. To avoid that, first check whether the selected model matches an entry in config.yaml -> custom_providers and route it through that named custom provider. Returns (model, provider, base_url) where provider and base_url may be None. Nrr_rFr^r:r8r rArCrJr6rc3K|]A}t|t|+|VBdSr)rerri)rMrs r&rWz)resolve_model_provider..=s`''!#s++'14 'IIKK''''''r(rr@rrror >r r#rrr z%https://chatgpt.com/backend-api/codex)rKrgrerfrfrrirjrCrrrrzkeysrGrcountrrrkrjrr rsrr)r config_providerconfig_base_urlr _is_explicit_non_custom_provider_default_model_skip_custom_providersrJrN entry_modelr\r{entry_model_ids entry_models provider_hintinner bare_model _slug_restextraprefixbare_PORTAL_PROVIDERSs r&resolve_model_providerr!sy*OO$$I)T"" #-- 339 MM* % % $    /3''#O,A,A,C,C,I,I,K,Kw,V,V"B%%''H :/99 t# 6 x ' 6**955 5% 2>677***/))\4/ /  >*/:: B7HH B/AA )))_o==_o= = % % %&O*C*C\4/ / _o 55r(c t|pd}|dsdSdtdtfd}||ddd}|sdSt }dtd zfd }|d g}t|tsg}|D]}t|tst|d pd}|sQ||} | |krct|d pdpd } ||d|d} | | fcSt|dkrt|dtrr|d}||d|dt|d pdpd fS|di} t| tr| |ini} t| tr| dini}|di}t|trHt|dpdnd}d }| ||fD]S}t|tr._slugifys     " " $ $ * * , , 4 4S# > > F FsC P Paii $$$Aaiiwws||r(r@rNcd}|t|}|drZ|drEt |dkr2t j|dddpd}n|r|}|sNt|pd}|r)t j|dpd}|S)Nz${}rrrr )rrirCendswithrrr) raw_api_key raw_key_envapi_keykey_textkey_envs r& _resolve_keyz8resolve_custom_provider_connection.._resolve_keys  ";''--//H""4(( #X->->s-C-C #H XYHYHY)HQrTNB77==??G4 #" A++,,2244G A)GR006688@Dr(rJr6r_r*r,rrr8rr) rrirjrCrrargrerrfr)rrr$rFcfg_datar-rJrNr6 entry_slugr_r* providers_cfgprovider_specificprovider_customrr  fallback_baser_base fallback_keys r&"resolve_custom_provider_connectionr6s kR & & ( ( . . 0 0C >>) $ $z 8CIIc1%%a(..00 1 1D z||H #*     ||$6;; & - -! ! !%&&  599V$$*++1133  Xd^^    uyy,,23399;;Ct,uyy33UYYy5I5IJJ     !!j1A!1Dd&K&K! # L9--uyy/C/C D D  *%%+ , , 2 2 4 4 <  LLb11M6@PT6U6U] ))#r222[]9CMSW9X9X`m''"555^`O Wb))IMWXacgMhMhpSz228b99??AAGGIIInpNM')D i & &  j117R88>>@@E  % L#T**h#|$5$9$9)$D$DFWF[F[\eFfFfgg dJ==d#|O$7$7 $B$BODWDWXaDbDbcc XJy$77XNxY\^bNcV>VWW 3}3]2d22 :r(r c0t|pd}t|pd}|r|r|dks|dr|Stdi}d}t |trHt|dpd}||kr|S|dkrd|d|Sd |vr|Sd|d|S) aReturn the model string to pass to ``resolve_model_provider()``. Session persistence keeps the user's selected provider in ``model_provider`` instead of forcing every selected model into ``@provider:model`` form. At runtime, however, ``resolve_model_provider()`` still understands that internal disambiguation form, so use it only when the provider context is needed to route away from the current default provider. r rCrrNrr r@ro)rrirjrCrKrgrerf)r r rrrrs r&model_with_provider_contextr8 s8 B   % % ' 'E>'R((..006688H H $9$9U=M=Mc=R=R$9 $$IO)T""OimmJ77=2>>DDFFLLNN?"" <%8%%e%%% e|| !x ! !% ! !!r(c||nt}t}|di}t|tr|}nOt|t r:t |dpd}|r|}tjdp'tjdptjd}|r|}|S)zKResolve the effective Hermes default model from config, then env overrides.NrrCr HERMES_MODEL OPENAI_MODEL LLM_MODEL) rK DEFAULT_MODELrgrerrirfrr)rbrl default_modelr cfg_default env_models r&get_effective_default_modelrA/s + 7SJ!Mw++I)S!!(!)) It $ $()-- 228b99??AA  ('M .!!XRY~%>%>X")KBXBX*!)) r()minimallowmediumhighxhighc|r!t|sdSt|}|dkrddiS|tvrd|dSdS)a"Parse an effort level into the dict the agent expects. Returns None when *effort* is empty or unrecognised (caller interprets as "use default"), ``{"enabled": False}`` for ``"none"``, and ``{"enabled": True, "effort": }`` for any of ``VALID_REASONING_EFFORTS``. NnoneenabledFT)rIeffort)rrirjVALID_REASONING_EFFORTS)rJeffs r&parse_reasoning_effortrMKs V**,,t f++     # # % %C f}}5!! %%%3/// 4r(ctt}|dpi}|dpi}t|tr|dnd}t|tr|dnd}t|t rt |ndt |pddS) u2Return current reasoning configuration from the active profile's config.yaml — the same source of truth the CLI reads from. Keys: - show_reasoning: bool — from ``display.show_reasoning`` (default True) - reasoning_effort: str — from ``agent.reasoning_effort`` ('' = default) displayagentshow_reasoningNreasoning_effortTr )rQrR) rrVrgrerfboolrrirj)rb display_cfg agent_cfgshow_raw effort_raws r&get_reasoning_statusrX]s))9););<{D4Q4Q[{/000W[H6@D6Q6Q[1222W[J-7x,F,FP$x...D 0b117799??AA  r(showcXt}t5t|}|d}t |t si}t ||d<||d<t||dddn #1swxYwYttS)aPersist ``display.show_reasoning`` to the active profile's config.yaml. Mirrors CLI ``/reasoning show|hide``: writes the same key that the CLI writes, so the preference is shared across the WebUI and the terminal REPL for the same profile. rOrQN) rVrurrgrerfrSrr]rX)rYr^rbrTs r&set_reasoning_displayr[qs#$$K 99,[99 !ooi00 +t,, K(,T $%!, I{K888999999999999999OOO  ! !!sA#BB  B rJcDt|pd}|std|dkr7|tvr.td|ddtdt }t5t|}| d}t|tsi}||d <||d<t||d d d n #1swxYwYttS) a+Persist ``agent.reasoning_effort`` to the active profile's config.yaml. Mirrors CLI ``/reasoning ``: same key, same valid values (``none`` | ``minimal`` | ``low`` | ``medium`` | ``high`` | ``xhigh``). Raises ``ValueError`` on an unrecognised level so callers can return 400. r zeffort is requiredrHzUnknown reasoning effort 'z'. Valid: none, z, rrPrRN)rrirjrrKrrVrurrgrerfrr]rX)rJrr^rbrUs r&set_reasoning_effortr]sy fl   ! ! # # ) ) + +C /-... f}}$;;; B B B II&=>> B B B   #$$K 99,[99 OOG,, )T** I(+ $%( G{K888999999999999999OOO  ! !!sAC;;C?C?ct|pd}|stdt}t5t |}|di}t|tsi}t|dpd}t|\}}}t|p|} t|p|pd} | dkrd} | |d<| r| |d<|r8t| d|d <n=| |kr7| d krd |d <n+| d s| d d ||d<t||d d d n #1swxYwYtt!d| dS)zJPersist the Hermes default model in config.yaml and reload runtime config.r zmodel is requiredrrr:r8rCror_r zhttps://api.openai.com/v1rANT)rr)rrirrVrurrgrerfr!rjrsrCrrr]invalidate_models_cache) r selected_modelr^rbrprevious_providerresolved_modelresolved_providerresolved_base_urlpersisted_modelpersisted_providers r&set_hermes_default_modelrgsgR((..00N .,---"$$K *9*9,[99 OOGR00 )T** I j 9 9 ?R@@FFHH?U @ @ <)+<n>??EEGG !2!M6G!M2NNTTVV  # # % % 0 0!) . )  7$6Ij !  0$'(9$:$:$@$@$B$B$I$I#$N$NIj ! ! #4 4 4!X--(C *%%'229== 0 j$///( G{K888U*9*9*9*9*9*9*9*9*9*9*9*9*9*9*9XOOO  1 11s FGGG_available_models_cache_available_models_cache_ts*_available_models_cache_source_fingerprint@_AVAILABLE_MODELS_CACHE_TTLCredentialPool_CREDENTIAL_POOL_CACHE_provider_models_invalidated_tsc ddl}|jd}|dSt|dd}|rt |ndS#t $rYdSwxYw)uLazy resolver for the WebUI version, used to stamp the disk cache (#1633). `api.updates` imports `api.config` at module-load time, so we cannot `from api.updates import WEBUI_VERSION` at the top of this module without a circular import. Instead we resolve lazily on each cache load/save. Returns the runtime version string (e.g. ``v0.50.293``) when api.updates has been imported, or None if it isn't loaded yet (boot-time corner case before the server has finished initializing). A None return is treated as "do not stamp / do not validate" by the cache layer so cache reads/writes that happen during early init still work — the next call after init will stamp normally. rNz api.updates WEBUI_VERSION)sysmodulesrggetattrrrF)_sysrrs r&_current_webui_versionrvsz l}-- ;4 C$ / /$s1vvv$ tts A#A AArmodels_cache.jsoncd ddlm}|dz S#t$rtdz dz cYSwxYw)z8Return the auth.json path for the active Hermes profile.rrQz auth.jsonr)rSrRrTr)_gahs r&_get_auth_store_pathrz"s[.??????tvv ## ...i+----.s //cdtt|i} t|}n#t$r d|d<|cYSwxYw|j|d<|j|d<|S)a0Return non-secret identity metadata for a cache dependency file. The /api/models response depends on config.yaml (model/provider defaults) and auth.json (active_provider + credential_pool). The cache only needs cheap invalidation signals here, not file contents; never include secrets. r%Trmtime_nssize)rrrrZr\ st_mtime_nsst_size)r% fingerprintsts r&_models_cache_file_fingerprintr,s3tDzz4466778K $ZZ__   !% I!nK *K s!AA('A(cpttttdS)zGReturn the current config/auth-store fingerprint for /api/models cache.) config_yaml auth_json)rrVrzrMr(r& _models_cache_source_fingerprintr>s766F6H6HII34H4J4JKK  r(cv tjttdS#t$rYdSwxYwr)runlinkr_models_cache_pathr\rMr(r&r}r}FsH  #())*****      s &* 88cachect|tsdShd|sdS|d}|dust|towt|dtoOt|dto't|dt S)aReturn True when a cache payload has the full /api/models shape. SHAPE-only check: validates structural correctness of an in-memory or on-disk cache. Use _is_loadable_disk_cache() for the strictness needed when reading from disk (it adds version-stamp invalidation per #1633). Kept loose so in-memory cache writes (which never touch disk and so don't need version stamping) can use this validator unchanged. F>rr>rconfigured_model_badgesrNr>rr)rerfissubsetrgrr)rrs r&_is_valid_models_cacherMs eT " "u T T T ] ]^c d duii 122O D DJ$D$D 2 uyy113 7 7 2 uyy!:;;T B B 2 uyy**D 1 1 r(c&t|sdSt|tsdS|d}|tkr#t d|tdSt}|N|d}t|tr||krt d||dS|d}t}||krt d||dSd S) uReturn True when an on-disk cache is safe to use after a process boot. Adds two checks on top of _is_valid_models_cache (#1633): 1. ``_schema_version`` matches `_MODELS_CACHE_SCHEMA_VERSION`. A bumped schema version unconditionally invalidates older cache files. 2. ``_webui_version`` matches the current runtime version. Forces a rebuild after every release so users see picker-shape fixes immediately, instead of waiting up to 24 hours for the TTL to expire. If the runtime version cannot be resolved (early-init edge case), skip this check rather than wedge the boot. Note: ``_webui_version`` is a string equality check, not a semver compare — two debug builds with the same `WEBUI_VERSION` string but different actual code wouldn't invalidate via this axis. ``_schema_version`` is the independent invalidation axis for breaking changes that lack a tag bump; bump it whenever the cache shape changes incompatibly. F_schema_versionz.models cache rejected: schema=%r vs runtime=%rN_webui_versionz5models cache rejected: webui_version=%r vs runtime=%r_source_fingerprintz:models cache rejected: source_fingerprint=%r vs runtime=%rT) rrerfrg_MODELS_CACHE_SCHEMA_VERSIONr{r|rvrr)r cached_schemaruntime_versioncached_versioncached_sourcesruntime_sourcess r&_is_loadable_disk_cacherds-$ "% ( (u eT " "uII/00M444  < 7   u,..O"#344.#.. .O2S2S LLG   5YY455N688O(( H     u 4r(cJ ddl}tsdSttd5}||}dddn #1swxYwYt |sdS|d|d|d|dd S#t $rYdSwxYw) aLoad /api/models cache from disk if it exists and has current metadata. Adds the per-release version check from #1633: a cache stamped with a different WebUI version is treated as missing, forcing a fresh rebuild that picks up any picker-shape fixes shipped in the new release. The returned dict is the SHAPE-only cache (without the `_webui_version` / `_schema_version` stamps) so callers don't have to know about the on-disk metadata fields. rNrrrsrr>rrrr>rr)rDrr openloadrrF)_jfrs r&_load_models_cache_from_diskrs !((** 4 $w 7 7 7 1GGAJJE               &u-- 4 %%67"?3',-F'GHo    tts?BBA BAB A!B5B B"!B"c t|sdStt|d|d|d|dd}t}|||d<t t dt jd z}t|d d 5}tj ||d dddn #1swxYwYt j |t t dS#t$rYdSwxYw)u3Save cache to disk so it survives server restarts. Stamps the payload with `_webui_version` and `_schema_version` (#1633) so a subsequent process running a different WebUI version, or a future release that bumps the schema, will treat the file as invalid and rebuild from live provider data on its first /api/models call. The version stamp is omitted (not the literal None — the field is just skipped) when the runtime version cannot be resolved at the moment of save, which would happen only in a very early boot path before api.updates is loaded. _is_loadable_disk_cache treats a missing field as a mismatch (since runtime_version is non-None on every subsequent call), so this is safe — at worst we write one cache file that gets rejected once on the next boot. Nrr>rr)rrrr>rrrrz.tmpwrrrsr)indent) rrrrvrrrgetpidrrDdumprenamerF)rpayloadrtmprs r&_save_models_cache_to_diskrsY  %e,,  F;#C#E#E$%67"?3',-F'GHo   122  &(7G$ %$%%(=BIKK(=(=(== #sW - - - , Igq + + + + , , , , , , , , , , , , , , , #s-../////      s;C0BC0B<0 C0<CC0C*C00 C>=C>nowc,tdS|tz tkrdSt}t|kr)t dt|dadadadSttrtj tSdadadadS)zHReturn a valid fresh in-memory /api/models cache, or clear stale shapes.NzAmodels memory cache rejected: source_fingerprint=%r vs runtime=%rr9) rhrirlrrjr{r|rcopydeepcopy)rcurrent_sourcess r&_get_fresh_memory_models_cachers&t ((-HHHt688O1_DD O 6    #'%("592t5666}4555"!$15. 4r(ct5dadadadat tdddn #1swxYwYtdS)aForce the TTL cache for get_available_models() to be cleared. Call this after modifying config.cfg in-memory (e.g. in tests) so the next call to get_available_models() picks up the changes rather than returning a stale cached result. Also deletes the on-disk cache so that a subsequent cold build does not immediately reload a stale disk snapshot and skip the fresh build. This is essential for test isolation: without the disk delete, tests that call invalidate_models_cache() still get back the previous test's result from the disk cache because the disk hit is checked before the memory cache rebuild runs. Nr9F) _available_models_cache_lockrhrirj_cache_build_in_progress_cache_build_cv notify_allrnrvr}rMr(r&r_r_s & ' '"&%("592#( ""$$$ $$&&& ' ' ' ' ' ' ' ' ' ' ' ' ' ' '!"""""s;AAAct5t|dtt|dddddS#1swxYwYdS)zInvalidate the credential pool cache for a specific provider. Used by the streaming layer's credential self-heal logic (#1401) to force a fresh credential pool load after re-reading auth.json. N)rrnrr?rs r& invalidate_credential_pool_cacher s &OO"";555""#:;#G#GNNNOOOOOOOOOOOOOOOOOOsAAA Ac(t5dadadat jt |<t |dt t|ddddn #1swxYwYtdS)aInvalidate cached models for a single provider. Also invalidates the full cache so that the next get_available_models() call rebuilds all groups cleanly (the rebuilt provider is merged with any other cached groups from the 24h TTL window). After the next get_available_models() call, _provider_models_invalidated_ts[provider_id] is cleared so the provider's fresh models are used. Args: provider_id: canonical provider id (e.g. 'openai', 'anthropic', 'custom:my-key') Nr9) rrhrirjtimerornrr?r}rs r& invalidate_provider_models_cacher" s & O O"&%("5927;y{{' 4 "";555""#:;#G#GNNN O O O O O O O O O O O O O O O!"""""sA%A99A=A=existing_groupsc 8|}|dr d|vr|ddd}d}||}|D]l}|dgD]S}|dr<|t|dd|kr |dccSTmd |vr|d d n|}d d |d ddDS)aReturn a human-friendly label for *model_id*. Resolution order: 1. If the model already appears in *existing_groups* with a label, use it. 2. Strip @provider: prefix and namespace prefix, then title-case. This ensures the injected default model entry in the dropdown always shows the same label as the live-fetched or static-catalog version, rather than the raw lowercase ID string (#909). rr@rcd|vr|dddn|ddS)NrorrrBr)rrirj)rs r&rz&_get_label_for_model..M s@cQhhqwwsAr**AFFsCPPVVXXr(rrrr rorrc3K|]{}t|dkrP|ddr(|s|n|V|dS)rrr N)rrirrr capitalize)rMrs r&rWz'_get_label_for_model..W s !ffkkaiiR&8&8&@&@&B&Bk199;;k ]^]i]i]k]kr(rhrB)rCrrgrrri)r r lookup_id_norm norm_lookupgrrs r&_get_label_for_modelr< sRIC  /SI%5%5OOC++A.  Y XE% ""K ""x$$ " "AuuW~~ "%%AEE$OO(<(<"="="L"Lz!!!!! " (+i'7'79??3   # #YD 88c3''--c22  r(cdt|pd}|sgS ddlm}n#t$rgcYSwxYw|g} t |}n#t$rd}YnwxYw|r||vr||t}|D]} ||pg}n+#t$rt d|Y8wxYwg}|D]U} t| pd} | r.| |vr*| | || V|r|cSgS)aReturn live model IDs from Hermes CLI for a provider, or [] on failure. WebUI's static ``_PROVIDER_MODELS`` table is only a fallback. The agent CLI owns the provider registry and catalog-discovery logic, so ordinary picker groups should ask ``hermes_cli.models.provider_model_ids()`` first (#1240). Provider aliases are tried as a secondary lookup because WebUI keeps a few display-facing IDs (for example ``google`` / ``x-ai``) that Hermes CLI may normalize internally. r rprovider_model_idsz(Failed to load %s models from hermes_cli) rrir=rrFr?rrr{r|r) rr_provider_model_idsr!aliasseenrrrrmid_ss r&_read_live_provider_model_idsr] s kR & & ( (C  OOOOOOO  J',,  !j((%   UUD    **955;HH    LLCY O O O H  % %C rNN((**E %d** e$$$  MMM  Is00 ??A A%$A% B$$%C  C c2|dvrtnd}g}t}|D]v}t|pd}|r||vr,|||r ||nt |g}|||dw|S)z=Convert Hermes CLI model ids into WebUI picker model entries.rrNr r|)rrrrirrr)rr formatterrrrrrs r&_models_from_live_provider_idsr s(37Q(Q(Q$$W[IFUUD55CI2$$&&   $-R %   3Gr3R3R UU334444 Mr(c\ttjddp tdz }|dz } t j|d}n#t$rgcYSwxYwt|tr| dnd}t|tsgSg}|D]}t|ts| d }t|tr|sX| d d}t|tr)|d vr| d }t|t t"frt!|nd } || |f|dg} |D]\} }|| vr| || S)azReturn visible model slugs from Codex's local models_cache.json. The agent's provider_model_ids('openai-codex') intentionally filters IDs with ``supported_in_api: false``. Codex CLI still lists some of those models in its picker (notably ``gpt-5.3-codex-spark`` from #1680), so the WebUI merges this visible local catalog to stay in sync with Codex itself. CODEX_HOMEr z.codexrwrrrsrNrF visibility)hidehiddenri'c"|d|dfS)NrrrM)items r&rz5_read_visible_codex_cache_model_ids.. sDGT!W#5r(r)rrrrirrrDloadsryrFrerfrgrrrjrfloatrsort) codex_home cache_pathrrQsortablerrFrrrankorderedrhs r&#_read_visible_codex_cache_model_idsr s#bi b117799NdXoOOZZ\\J11J*Z1171CCDD  (2'4'@'@Jgkk(###dG gt $ $ &(H . .$%%  xx$$$ DJJLL  XXlB// j# & & :+;+;+=+=+C+C+E+EI[+[+[ 88J'' *8c5\ B BNs8}}}tzz||,---- MM55M666G!!4 w   NN4 Ns(B BBc t}|j}n #t$rt}d}YnwxYw|tks |t krt stdtfd}t} ttj}n#t$rd}YnwxYw|tk}d}tt}t5|rMtddt!t#j}||cdddS|rtda dadad}t#j}t!|}||cdddS|A|a |at+at-|t/j|cdddSt5da dddn #1swxYwY |}nI#t2$r<t5d a tdddn #1swxYwYwxYwt5|a t#jat+ad a tdddn #1swxYwYt-|t/j|cdddS#1swxYwYdS) a Return available models grouped by provider. Discovery order: 1. Read config.yaml 'model' section for active provider info 2. Check for known API keys in env or ~/.hermes/.env 3. Fetch models from custom endpoint if base_url is configured 4. Fall back to hardcoded model list (OpenRouter-style) Returns: { 'active_provider': str|None, 'default_model': str, 'groups': [{'provider': str, 'models': [{'id': str, 'label': str}]}] } r9rc .Edttgdtdtfddtttttffffd }d}tdid}t trnZt trEddd}d d}|r|rt t| i}t}|r d dl }| | d }s*t |dt| n+#t$rtd|YnwxYwt}r| t |tr|dini}t |tr)|r& d dlm}t'|D]^} t+t| } t,| } | | \} } t/j| z dkr| }nt/j}|| } t/j| ft,| <| }nOt/j}|| } t/j| ft,| <| }d|D}|r|| 4#t$rtd| Y\wxYwn#t4$r|D]x\} }t |t&rt9|d kr.t;d|D}|r/|t+t| yYnwxYwn*#t$rtdYnwxYwi}d} d dlm}d dl m!}|D]}|ds ||ddd}|dkrEn?#t$r2td|ddYnwxYw||dd } |d!d"r|d!n*#t$rtd#YnwxYwn*#t$rtd$YnwxYw|s$ d d%l"m#}|d&z }n#t4$rtHd'z d&z }YnwxYwi}|r | d %D]}|&}|r|'d(sld)|vrh|(d)d*\}}|&&d+&d,||&<n*#t$rtd-YnwxYwi|}d.D]}tSj*|}|r|||<|d/r|d0|d1r*|d2|d3|d4r|d5|d6r|d7|d8r|d9|d:r|d;|d<r|d=|d>r|d?|d@r|dA|dBr|dC|dDr|dE|dFr|dG|dHr|dI|dJr|dK|dLr|dM|dNr*|dOr|dPtdQi} t | tr=| D]:}!tW|!}"|"s|"tXvs|"| vs|!| vr||";d tZdtffdR }#g}$i}%|r d dl.}&d dl/}'|&}(|(0dSr|(dTz})n|(1dUdVz})|#|(}*|*pdW}+te|*},tgdX|(vr|(ndY|(}-|-j4p|-j56}.|-j7r_|,s] |&8|-j7}/|/j9s|/j:s|/j;rdZ|.vsd[|.vsd\|.vrdZ}+n dP|.vsd]|.vrdP}+ndW}+n#tx$rYnwxYwi}0d}1t tr)d^pd&}1|1stdQi}2t |2trmt{ddWgD]Z}3|2|3i}4t |4tr-|4d^pd&}1|1rn[|1sHd_}5|5D]C}6||6ptSj*|6pd&}1|1rnD|1rd`|1|0da<d dl>}7t}8|rKtgdX|vr|ndY|}9|9j7r,|8|9j76tdbg}:t |:t&r|:D]};t |;ts|;d pd&}<||>D]\}?}?}?}?}/|&8|/d }@|@j9s|@j:s|@j;rRt;fdedfDpj7pd6|8v}A|Astydg|/d n#|7jA$rYnwxYw|'jBC|)dhi}B|BDdjdk|0D]\}}|BD|||'jBE|Bdlm5}Ctj |CFGd }Ddddn #1swxYwYg}Edn|Dvr$t |Ddnt&r |Ddn}En'do|Dvr#t |Ddot&r|Ddo}E|ED]}Ft |Fts|Fddp+|Fdpdp|Fdd}G|Fdpdp|Fddp|G}H|Gr|Hr|+dqvrt|Gn|H}I|G|Idr}J|$I|J|+6}3|%J|3gI|J||3n+#t$rtds|+YnwxYwtdbg}:i}Kt |:t&rt}L|:D]};t |;ts|;dppd&}M|Mrt|Mnd}N|Nr |N|Kvr|Mgf|K|N<g}O|;dd}P|Pr|OI|P|;do}Qt |QtrY|QD]V}Rt |Rtr?|R&r+|R|Ovr'|OI|R&W|OD]}P|Nr|Ndt|Pn|P}S|Pr|S|Lvrt|Pg}T|L|S|Nr_||N|P}U|Nkr|U'dusdu|Ndt|U}U|K|Nd*I|U|Tdr|$I|P|Tdr|dWǐt |:t&ot9|:d k}Vr\dWkrV|VsT|MdWt'|D].}N|N'dvr|Vs|M|N/n8dWkr2|Vr0t;dw|:D}W|Ws|MdWtt}Xt|t}Y|Yrw|Xrut'|D]e} t| pd&6}Z|Z'dvr|Z|Xvr|M| ftdQi}2t |2tr|2dxdnd}[|[rt}\r|\tdQi}]t |]tr1|\Pdy|]D|Q|\}|r;t}^|D](} tW| p| }_|^|_)|^}| rt|D ]}`|`'dvrC|`|Kvr>|K|`\}a}b|bs|%|`g}b|brI|a|`|bdz[t|`|`T}c|`d5kr)g}dt}e d d{lmU}f|fpg}g|gD]8\}h}i|hr1|h|evr-|e|h|dI|h|hdr9n*#t$rtVd|YnwxYw d dl/mB}j|jCd}d~di}k|jE|kdm5}ltj |lFG}mdddn #1swxYwYd }nd}o|mdngpgD]}pt |ptst|pdpd&}q|qr|q|evrV|pdpi}r t|rddpdd ko(t|rddpdd k}sn#ttxf$rd}sYnwxYw|sp|q0d}s|sst|pdppd&p|q}tdU|tvr|t(dUdn|t}ud|u6vr|ud}u|e|q|dI|q|udr|nd*z }n|n|okrnn*#t$rtdYnwxYw|dsdtD}dIdd5|ddz|`dkryg}d d dlmZ}vd|vdpgD}dn*#t$rtVdYnwxYw|dr*t|d|`}wI|c|`|wdz7|`d3krg}dg}x d dlmZ}vd|vd3pgD}xn*#t$rtVdYnwxYwtD]}h|h|xvr|xI|hd|xD}d|ds-tj^tXd3g}d|dr*t|d|`}wI|c|`|wdz|`d!krg}dg}yd}zd}{ d dlmZ}v|vd!pg}|n.#t$r!tVdg}|d }{YnwxYw||rtdi}}t |}tr|}dppd}~t|||~\}}d|D}dd|D}y|r#dt9|dt9||d}znJ|{stVdn-tj^tXd!g}d|drKt|d|`}w|yrt|y|`ng}|c|zz|`|wdz}|r||d<I||`dPkrqg}dg} d dlmZ}v|vdPpg}n*#t$rtdYnwxYw|rd|D}dntdQidPipi}tdPpd}t |tr6t|d^pd&nd}|r^djdki}0|rd`||0da<|dTz1dU} d dl/mB}j|jC|dh|0}B|jE|Bdm5}tj |FG}dddn #1swxYwY|dnpgD]n}t |trWt|dpd&}h|hr|h|hdr|dvr|dI|h|hdron+#t$rtd|YnwxYw|dr*t|d|`}wI|c|`|wdz |`tXvs|`tdQivrOtdQi|`i}4g}dt |4trado|4vr]|4do}t |trd|D}dn!t |t&r d|D}d|dst|`t|`}d|ds-tj^tX|`g}d|%|`g}|r|dstj^|}dt|d|`}wI|c|`|wdz |%|`}|rtj^|}n*|$r&|`dWkr r dWkrg}ntj^|$}ng}|rI|c|`|dz n/r-t}IIdd|Idrgdzr[t&6cddtvptWtv}|rtVdnوfdD}|vrt}Ir/tpd6nd}d}D]S}|rO|dd6|kr#|dodd |Idrd }nT|s!rIdpd|IdrgdztdD|dS)Nr rcNt|pd}|dr#d|vr|d}|dp|}d|vr|d}|dp|}|ddS)Nr rr@rrorBr)rrirjrCrri)r rpartss r&_norm_model_idzVget_available_models.._build_available_models_uncached.._norm_model_id sHN##))++1133A||C   #SAXX "INaxx "IN99S#&& &r(cg}rr|dddtdg}t|trt |dD]\}}t|t st|dt|dpd  }r|sx||d d |dd D}d |DdDi}|D]4}| |g|5i}|D]&}|d|d}g} |d|dd|fD]} | r| | vr| | d} tfd| Dd} | D])} | vr#| kr | } n*| V| D]S} | } || g}|s&tfd|Dd}|p | p|d} | rnT|d|dd}| D]%} | }|r|kr ||| <&| r||| <(|S)NprimaryPrimary)rrrolerfallback_providersr)startrrr fallbackz Fallback cg|]F}|dgD]-}|d|dd.GS)rrr rrMrrs r&rOzzget_available_models.._build_available_models_uncached.._build_configured_model_badges.. sUfffa155SUCVCVffaZ[Z_Z_`dZeZef!%%b//ffffr(cHi|]}t|t| SrM)r)rMopt_ids r& zzget_available_models.._build_available_models_uncached.._build_configured_model_badges.. s&OOO&S[[#f++OOOr(c i|]u}|dgD]\}|dt|dt|dpd]vS)rrrr )rgrrs r&rzzget_available_models.._build_available_models_uncached.._build_configured_model_badges.. s&&&x,,&&55;; &AEE$KK  #aeeM&:&:&@b"A"A&&&&r(rorr@c30K|]}|v|VdSrrM)rMc option_lookups r&rWzyget_available_models.._build_available_models_uncached.._build_configured_model_badges..- s4#c#cPQUbPbPbM!$4PbPbPbPb#c#cr(c3NK|]}|k|V dSrr)rMroption_provider_lookuprs r&rWzyget_available_models.._build_available_models_uncached.._build_configured_model_badges..9 s=]]13I3M3Ma3P3PT\3\3\Q3\3\3\3\]]r(rrr)rrr) rrKrgrerrrfr?rrirnext)configured_entries fallback_cfgidxrNr option_idsrrbadgesraw_candidatesrmatch_id exact_matchromatchesprovider_match badge_payloadcandidate_providerrrrrrr>rs @@@r&_build_configured_model_badgeszfget_available_models.._build_available_models_uncached.._build_configured_model_badges s79  = "))$3!. )!* 77#7<%> "-//*b"A"A&%$)-]]]]]]]] **$2#N[#NGAJ#"!E"*/vw]e f f !/66I)?)C)CI)N)N&)!.@H.L.L (5F9%%5'4F8$Mr(r rrrCr_r_rrrrsrz!Failed to load auth store from %scredential_pool) load_poolrkc g|]o}ttt|ddpdtt|ddpdtt|ddpdm|pS)rPr rr)rrrt)rMrs r&rOzRget_available_models.._build_available_models_uncached.. s)))&''?$'8R(@(@(FB$G$G$'7B(?(?(E2$F$F$'<(D(D(J$K$K("(") !)))r(z$credential_pool.load_pool(%s) failedc 36K|]}t|toztt|ddpdt|ddpdt|ddpd VdS)rPr rrN)rerfrrrg)rM_entrys r&rWzQget_available_models.._build_available_models_uncached.. s11!' 'vt44$< #FJJx$<$<$B C C #FJJw$;$;$Ar B B #FJJ|R$@$@$FB G G%%!111111r(z1Failed to inspect credential_pool from auth storeF)list_available_providers)get_auth_status authenticatedrrr~z(Failed to get key source for provider %sunknownTr  logged_inz'Failed to check Nous Portal auth statusz+Failed to detect auth providers from hermesrQrr#=r"'zFailed to parse hermes env file)ANTHROPIC_API_KEYOPENAI_API_KEYOPENROUTER_API_KEYGOOGLE_API_KEYGEMINI_API_KEY GLM_API_KEY KIMI_API_KEYDEEPSEEK_API_KEYXIAOMI_API_KEYOPENCODE_ZEN_API_KEYOPENCODE_GO_API_KEYMINIMAX_API_KEYMINIMAX_CN_API_KEY XAI_API_KEYMISTRAL_API_KEYrr rr r rr rrrr)rrrrr rr!rrrrr$r"r"r#r rrrr LM_API_KEY LM_BASE_URLrrct|}|sdSt trt d}||kr_t dt |}|r3t |St di}t|tr| D]\}}t|tst|d}||krFt|}|r5t |cSt dg}t|tr|D]} t| tst| d} | |krAt | dpd} | rt| cSdSdS) Nr r_rrrrJr6r8) rxrerfrgrfrKrrirjrr?rrG) r_rzmodel_base_urlrr0 provider_key provider_cfgprovider_base_urlcustom_providers_cfgrNr{r\rs r&!_configured_provider_for_base_urlziget_available_models.._build_available_models_uncached.._configured_provider_for_base_url4 sB28<y}}Z?X?X!Y!Y!V++$C! j11!)%%%M %B"=117799??AAAGGK44M-.. F2?2E2E2G2G F F.L,%lD99! (E$((44))%)F22(? (M(M (F#&}#5#5#;#;#=#=#C#C#E#EEEE#&77+=r#B#B .55 $1 $ $E%eT22! %B599ZCXCX%Y%YN%// !$UYYv%6%6%<"!=!=!C!C!E!EJ!K>zJJJJJ#882r(z/v1z/modelsroz /v1/modelsr8rprqrrrrr*)HERMES_API_KEYHERMES_OPENAI_API_KEYr LOCAL_API_KEYrAPI_KEYzBearer AuthorizationrJ)r rrhttpszInvalid URL scheme: c3RK|]!}|jpdvV"dS)r N)rrj)rMkrws r&rWzQget_available_models.._build_available_models_uncached.. sP 5" 5"()%&**=*C)J)J)L)L$L 5" 5" 5" 5" 5" 5"r()rrrrrz&SSRF: resolved hostname to private IP GET)methodz User-AgentzOpenAI/Python 1.0 timeoutr=rr6rr|z=Custom endpoint unreachable or misconfigured for provider: %sr@rrAc3K|]C}t|to)|dpd VDdS)r6r N)rerfrgri)rM_cps r&rWzQget_available_models.._build_available_models_uncached..& sc3%%Mswwv/D".K.K.M.M*Mr(only_configuredc38K|]}t|p|VdSr)rlrMr4s r&rWzQget_available_models.._build_available_models_uncached..B sA,,:;-a005A,,,,,,r()rrr)fetch_openrouter_modelsz9Failed to load OpenRouter curated catalog from hermes_cliz#https://openrouter.ai/api/v1/modelsAcceptr)headersg @pricingprompt0 completionz:freerz(free)z (free)z;OpenRouter free-tier live fetch unavailable; using fallbackcbg|],}|ddk|d|dd-S)rrrrr|r)rMrs r&rOzRget_available_models.._build_available_models_uncached.. sI&&& ! uuZ00L@@$%T7QwZ@@@@@r(rrrc2g|]}|t|dSr|)rrMrs r&rOzRget_available_models.._build_available_models_uncached.. s9&&& #$'1Ec1J1JKK&&&r(z2Failed to load Ollama Cloud models from hermes_clicg|]}||SrMrMrJs r&rOzRget_available_models.._build_available_models_uncached.. s$g$g$gScf$gS$g$g$gr(z2Failed to load OpenAI Codex models from hermes_clic4g|]}|t|gdSrI)rrJs r&rOzRget_available_models.._build_available_models_uncached.. s;""" #-A#r-J-JKK"""r(z1Failed to load Nous Portal models from hermes_cli)rc8g|]}d|t|dSrr|rrJs r&rOzRget_available_models.._build_available_models_uncached..9 s?&&& #$2C>>._build_available_models_uncached..= s?((( #$2C>>._build_available_models_uncached..} s %R%R%RCS3&?&?%R%R%Rr()r6rAz$LM Studio /models fetch failed at %scg|]}||dSrIrMr>s r&rOzRget_available_models.._build_available_models_uncached.. s )[)[)[AQ*?*?)[)[)[r(cg|]U}t|tr|dn|t|tr|d|dn|dVS)rrr|)rerfrgr>s r&rOzRget_available_models.._build_available_models_uncached.. s*@*@*@/0=Gq$._build_available_models_uncached..sGeeeAQRQVQVW_acQdQdeeAqw 7 7eeeer(cg|]C}|ds*|dpddA|DS)rrr rA)rgrC)rMrs r&rOzRget_available_models.._build_available_models_uncached..,sa   uuX m$$*66yAA    r(r)frArKrrfrgrerfrzr rDrryrFr{r|rragent.credential_poolrrrr?rnrrQ monotonicrTrranyr=r hermes_cli.authr rSrRr splitlinesrirCrrrrlrkobjectrurllib.requestr'rsrSrrur%rjrrrrrrfiltersocketrt getaddrinfogaierrorrequestRequest add_headerurlopenreaddecoderrrrGrdiscardrXrbrz intersectionrrjtitler?warningr TypeError_FALLBACK_MODELSrrrrrrr rrriinsertr)r cfg_base_urlr? auth_storeauth_store_pathrdetected_providers_pool _load_pool_pid_canonical_pid_cached_cp_ts_cp_pool _all_entries_lp_t0 _explicit_entries_has_explicit_credall_env_hermes_auth_used_lap_gas_p_src_gah2hermes_env_pathenv_keysliner4rval_cfg_providers_pid_key _canonicalr,auto_detected_models auto_detected_models_by_providerrurllibr_ endpoint_urlconfigured_providerrprovider_from_configparsedrrrAr*r0r(r) api_key_varsrra_ssrf_trusted_hosts _base_parsed_custom_providers_cfgr;_cp_base _cp_parsed resolved_ipsrhaddr_objis_known_localreqresponser= models_listrr  model_namer auto_model_named_custom_groups_seen_custom_ids_cp_name_slug _cp_model_ids _cp_model_cp_models_dict_m_id _dedup_key _cp_label _cp_option_id_has_custom_providers _has_unnamed_named_custom_slugs_base_matched_named_slug _pid_normonly_show_configuredconfigured_providers cfg_providers_canonicalised_detected_cr _nc_display _nc_modelsrrseen_ids_fetch_or_models live_curatedr_desc_urlreq_req_resp_payload _free_count _free_cap_item_mid_pricing_is_free_name_labelrr codex_idsrQtruncated_label_suffixlive_fetch_failedr _model_cfg _selected featured_ids extras_idsr group_entrylm_idslm_cfg lm_base_url lm_api_keyendpointresplm_datar cfg_modelsdetected_modelsmodels_for_group_looks_like_provider_id all_ids_normtarget_displayinjectedrrrr>rrrws @@@@@@r& _build_available_models_uncachedz>get_available_models.._build_available_models_uncached s}+3C88  'S 'S ' ' ' 'R S$sCx.5H0IR R R R R R R R R j GGGR((  i % % ,   4 ( ( ,'mmJ77O#-- 266K$==R88L , +  =%O .00  ! ! # # S S!!!!XXo&?&?&?&Q&QRR &&E"'899!-'''O  S S S @/RRRRR S!UU  4  " "? 3 3 35 N=G TX=Y=YaJNN#4b999_aE%&&1 W51 W0WMMMMMM $UZZ\\ 2 2WWW-DSYY-O-ON&<&@&@&F&FG&23: 0$(IKK&$8G#C#C3;3C3C3E3ELL-1^-=-=F/9z$/?/?HDHIKKQYCZ$:4$@3;3C3C3E3ELL)-)9)9+5:d+;+;@D X?V 6t #WWW*/++-- W Wh)(D99%S]]a=O=O$-011+3111..*.W.223J3t993U3UVVV W WW N N N LLL M M M M M N! H J J J J J J ? ? ? ? ? ?dff 1 1vvo..f44>>--lB??D.. / fffLL!KRVVTXZcMdMdeeeeef"&&r$x0000 $  H4<<##K003&**6222 H H H FGGGGG H H H H LLF G G G G G H!K 3 <HHHHHH"'%''F"2 < < <"&"2V"; <H%%'' DD / 9 97 9 K K V V X XRR#zz||R(<(<R#'::c1#5#5DAq23''))//#2F2F2L2LS2Q2QHQWWYY/ R !DDDLL!BCCCCCD"lG % %"ill%!$GAJ{{.// 4"&&{333{{+,, 7"&&x000 #&&~666{{/00 5"&&|444{{+,, 1"&&x000{{+,, 1"&&x000{{=)) ."&&u---{{>** 6"&&}555{{,-- 2"&&y111{{/00 5"&&|444{{-.. 3"&&z222{{+,, 1"&&x000{{=)) /"&&v...{{,-- 4"&&{333{{122 7"&&~666{{011 6"&&}555{{<(( 3W[[-G-G 3"&&z222b11 nd + + 7* 7 76x@@ !!111Z>5Q5QU]aoUoUo&**:666* * 3* * * * * * Z "BD( R hQ h    %%%%'--//$$U++G#+i#7LL#+??3#7#7,#FL&G&G&Q&Q#.:('+,?'@'@$!ex.?.?((EYxEYEYZZ 4;;==?+?(33FODD?4d.>4$BT4'4//;$3F3F+Y]J]J]+3!+t!3!3{d7J7J+5,4%i..G(}}Y77=2DDFFG*$'GGK$<$O>O((Ui_gUiUi)j)jJ)2U 3 7 7 8K8Q8Q8S8S T T T%$)\$9$9LL?W?W?W $,AAA$%OJ>jft&D&D>"&v,KK%%*T(^T*J*J%"&x.K(==E%eT22!  $++2 99VR002 99Wb11 "'62!6!6!\%))GR:P:P!\T\J=J=BJNhBhBh 4X > > >nx,4u%E%E ,33J???'/~~'7'7 8CCLRTUU\\]ghhh*..|<<<=  h h h \^fggggg h!$(:B ? ?%' +T 2 2$ ="uu ," =" =!#t,,GGFOO1r88::EMW7AAASWAU*>>>3;R.(/,. GGGR00 4!((333"%''("3"3ot44@!0@@%eS11@ekkmm@UbHbHb)00???!.==I;@!OE!7!7I!7!7!7iJ =Z7G%G%G$8B$G$G (,,Z888 =.225999,5M.%77 @X@XY\@]@]70KE0K0KM0K0K 07:AA'4y I I177yS\8]8]^^^.228<<<="!++@$ G G jCPeLfLfijLj  5(::CX:  & &x 0 0 0011 6 6##I..67L6&..u555 6 ( (-B (0L  5"**8444:3??#KLZ]#^#^ # 5(; 5/00 5 5 OO113399;; '' 225yH[7[7[&..t444 R00 NXYfhlNmNmx}001BEJJJsx  W#&55  :$((999GGK44M-..  %++,,?L?Q?Q?S?S,,,"4!@!@AU!V!V   9&)ee #* 0 0.t44<'++B////!8  Y 011R R >>),,2222Fs2K/ Z *W)I)M)McSU)V)VJ%o"MM{SVbl*m*mnnn 1 5 5c399;; G G ,&&"$J"uuH d(8'7'9'9'?R *6MMJC"Ms(':': ( S 1 1 1 * 1 1s2K2K L L LM%ddd'bcccccd )d888888&A%-/A$B /  %__T3_??I5'+z%**,,2E2E2G2G'H'HHIIIIIIIIIIIIIII&' $& %-\\&"%=%=%C&&E#-eT#:#:) (#&uyy'<"#=#=#C#C#E#ED#')48+;+; (',yy';';'ArH1$)(,,x*E*E*L$M$MQR$R%[(-hll<.M.M.TQT(U(UYZ(Z!)%.z#:111+01(0'I4==3I3IH#+) ( #EIIf$5$5$; < < B B D D L">AE\\U[[%5%5b%9%9uF'v||~~==,2);););$LL...&--TF.K.KLLL'1,K*i77 % 8$ddd %bcccccd&&&%5&&& MM(4+7&0N**!#J]______&&(;(;N(K(K(Qr&&& %]]]'[\\\\\]"!7 C!Y!Y ,9/2*0N**"$J "I]______$g$g5H5H5X5X5^\^$g$g$g $]]]'[\\\\\] CDD22i//%,,S111""#,"""J &]%)]3C3G3GXZ3[3[%\%\ !!7 C!Y!Y ,9/2*0F]]"$J/1L-/*(-%1______#6#6v#>#>#D"$111'Z[[[#%,0)))1  6U &)WWWb%9%9 ' D99UjnnW>U>U$,$#" 4L$.74440 j&&'3&&& (('1((( &!MS%6%6 L LCMM L L L3/UV&*]3C3G3GPR3S3S%T%T ! 3!7 C!Y!Y`l!s!7 c?![![![qs(58N(N+.&,'' "A:@K7 k222J&&"$J(*Fh______!4!4Z!@!@!FB$hhh %fgggggh_%R%R6%R%R%R "%b!9!9!=!=j"!M!M!SQS&)>)D"%E%E%K%K%M%M%Moq &_'35H&IG)R;QZ;Q;Q 8(3i(?'G'G'L'LH _ @ @ @ @ @ @&-oohuV]o&^&^%,__S!_%D%D!O.2j9K9K9M9M.N.NG!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O*1++f*=*=*C!Y!YA'1!T':':%Y.1!%%++2C.D.D.J.J.L.L+.)Y#3L3LT^3^3^,6,=,=SSV>W>W,X,X,X !Y $-___ & -SU] ^ ^ ^ ^ ^_"!7 C!Y!Y ,9/2*0,,,sww{B7O7O0O0O#&77;#;#;#?#?R#H#HL!#J",55@(l:R:R%1(%; %j$77@)[)[IZIZ)[)[)[JJ' D99@*@*@4>*@*@*@J&%C9#>>&& &R%)]3C3G3GR3P3P%Q%Q &F&J&J3PR&S&SO&DzD%)]?%C%C 3J_UUFMM(5+.&,'G&J&J3&O&OO&.+/=+I+I((- .(????V^C^C^/1,,/3}=Q/R/R,,+-(' ,9/2*:Y R h  ,]FCC !*9XepuQvQvPwxx * M""((**0022::3DDHYYQ,];;?PP $' &"  feeeeee !>-00 DD0GGE+ )--o?TRTUU[[]]]# %H#"")"aeeJ.C.C.I.I.K.K~.].]hK..qQV2W2WXXX'+H!E# ,5/>/K)2?%+P+P*Q v&&&      /*'E'E'G'G    s2AF %F43F4AQ $*N,D.M?=N,?%N($N,'N((N,+Q ,BQQ QQ $Q10Q19.V(+SV9TVT!V33U'&V'$V V VV$V98V9WW.-W.C[ $[21[2,B.AC8A m'&AC8' m41AC83m44JAC8 B(z54AC85 {?AC8{BAC8:~ = AC8 ~  AC8~ E&AC8C8%AD DAD Y9A A[[$A[.[-A[.[26Ad9\(9A]-]! Ad9]-A]1 ]1Ad9]4A]1 ]5B Ad9`AAaaAd9aAa+a(Ad9a*Aa+a+C Ad9d9$Ae eAe fAf8f8$AggAghAh9h9$Ai iAi lAll(AmmAmr Arr$AssAsv5Azw9Ax w? Azx Ax xAzxAx xB Azz%A{{A{Nc$t otduSr)rrhrMr(r&rz&get_available_models..Ss44\9PX\9\r(<r8TF)rVrZr[r\r:r;rNr]rfrrrhrrrwait_forrrrZrirjrrrrrFr) _current_path_current_mtimer should_wait _cfg_changed disk_groupscachedrrs r&get_available_modelsr s&(** &++--6 (**  : % %))C)C,..*D U dU U U U v"+K.00116688A !Z/L K&244 %4%4%    $ $\\ %   4DN4D4DEEF!4%4%4%4%4%4%4%4%   OOO&* #), &9= 6Kn/44  14%4%4%4%4%4%4%4%6  "&1 #), &9Y9[9[ 6 &{ 3 3 3=--A4%4%4%4%4%4%4%4%F , ,'+ $ , , , , , , , , , , , , , , , 5577FF     - -+0(**,,, - - - - - - - - - - - - - - -     ) )&, #)-)9)9 &9Y9[9[ 6', $  & & ( ( (  ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) #6***}V$$i4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%4%s'*AA2C CC=AK =K6KK!G0$ K0G4 4K7G4 8K< HKI I4 I I I I I  K?J" K"J& &K)J& *%KK #K rz index.htmldcheZdZdZdZdejfdZdejddfdZde e e fddfd Z dS) StreamChannela{Broadcast SSE events to every connected browser tab for a stream. While no tab is connected, events are buffered so the first/reconnected subscriber still receives the stream tail that arrived during the gap. Once one or more subscribers are attached, new events are broadcast to all of them instead of being consumed destructively by a single queue reader. cRtj|_g|_g|_dSr) threadingLock_lock _subscribers_offline_buffer)selfs r&__init__zStreamChannel.__init__s'^%% /19;r(rctj}|j5|jD]}|||j|dddn #1swxYwY|Sr)queueQueuerr put_nowaitrr)rqrs r& subscribezStreamChannel.subscribes Z ( ( , # # T""""   $ $Q ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( (s:A!!A%(A%rNc|j5 |j|n#t$rYnwxYwddddS#1swxYwYdSr)rrremover)rrs r& unsubscribezStreamChannel.unsubscribes Z   !((++++                      s,A%A 2A2AA Arc&|j5t|j}|s(|j| ddddS|jdddn #1swxYwY|D]}||dSr)rrrrrrvr)rr subscribersrs r&rzStreamChannel.put_nowaits Z ) )t011K $++D111  ) ) ) ) ) ) ) )  & & ( ( (  ) ) ) ) ) ) ) ) ) ) ) ) ) ) )   A LL      s2A,A,,A03A0) r __module__ __qualname____doc__rrrrrtuplerr^rrMr(r&rrs<<< 5;    U[TuS&[1dr(rctSr)rrMr(r&create_stream_channelrs ??r(STREAMS CANCEL_FLAGSAGENT_INSTANCESSTREAM_PARTIAL_TEXTSTREAM_REASONING_TEXTSTREAM_LIVE_TOOL_CALLSSTREAM_GOAL_RELATEDPENDING_GOAL_CONTINUATION ACTIVE_RUNSLAST_RUN_FINISHED_AT stream_idc .|sdStj}t|pi}|d||d||ddt5|t|<ddddS#1swxYwYdS)zAMark a WebUI agent worker as alive until its outer finally exits.Nr started_atphaserunning)rrfrACTIVE_RUNS_LOCKr)rmetadatarrNs r&register_active_runrs  )++C R E [),,, \3''' Wi((( ''!& I''''''''''''''''''s2 B  BBc |sdSt5t|}|||ddddS#1swxYwYdS)zAUpdate active-run metadata without creating a new run implicitly.N)rrrgrz)rrrNs r&update_active_runrs  ## **   LL " " "##################s2A  AAc|sdSt5t|dtjaddddS#1swxYwYdS)zCRemove a worker from the active-run registry and record idle start.N)rrrrr)rs r&unregister_active_runrs  ++ 4(((#y{{++++++++++++++++++s/AA A SESSION_AGENT_CACHE2 session_idc|t5t|dddddS#1swxYwYdS)zHRemove a cached agent for a session (on delete, clear, or model switch).N)SESSION_AGENT_CACHE_LOCKrrr s r&_evict_session_agentr$s !22 D111222222222222222222s 155c |t_dSr _thread_ctxenv)kwargss r&_set_thread_envr*s KOOOr(cit_dSrr&rMr(r&_clear_thread_envr, s KOOOr(SESSION_AGENT_LOCKSct5|tvrtjt|<t|cdddS#1swxYwYdS)aXReturn the per-session Lock used to serialize all Session mutations. Lock lifecycle invariant: - A Lock is created lazily on first access and lives in SESSION_AGENT_LOCKS for the lifetime of the session. - The entry is pruned in /api/session/delete (under SESSION_AGENT_LOCKS_LOCK) so deleted sessions don't leak a Lock forever. - During context compression the agent may rotate session_id. The streaming thread migrates the lock entry atomically under SESSION_AGENT_LOCKS_LOCK: it aliases the new session_id to the *same* Lock object and pops the old-id entry (see streaming.py compression block). This ensures that subsequent callers using the new ID still acquire the same Lock, while the old-id entry is removed to prevent a leak. The streaming thread already holds the Lock during this migration, so the reference stays alive even after the dict entry is removed. - Lock contract: hold for the in-memory mutation + s.save() only; never across network I/O (LLM calls, HTTP requests). N)SESSION_AGENT_LOCKS_LOCKr-rrr#s r&_get_session_agent_lockr0s( "// 0 0 0.7n.>.>  +":.//////////////////s1AA  A default_workspaceonboarding_completedsend_keyentershow_token_usageshow_tpsshow_cli_sessionssync_to_insightscheck_for_updatesthemedarkskinrC font_sizesession_jump_buttonssession_endless_scrolllanguageenbot_nameHERMES_WEBUI_BOT_NAMEHermes sound_enablednotifications_enabledcompactrEr) show_thinkingsimplified_tool_callingapi_redact_enabledsidebar_densityauto_title_refresh_everybusy_input_mode password_hash> bubble_layoutr>assistant_language>r;lightsystem>aresmonoslaterCposeidonsisyphus charizard)r;rU)r;rV)r;rWr;rC)rU solarizedmonokainordoledct|tr&|nd}t|tr&|nd}t|}|r|\}}n|t vr|d}}nd\}}|tvr|n|}||fS)uCNormalize a (theme, skin) pair, migrating legacy theme names. Legacy migration table (from `_SETTINGS_LEGACY_THEME_MAP`): slate → ("dark", "slate") solarized → ("dark", "poseidon") monokai → ("dark", "sisyphus") nord → ("dark", "slate") oled → ("dark", "default") Unknown / custom theme names fall back to ("dark", "default"). This is a behavior change vs. the pre-PR-#627 state, where the `theme` field was open-ended ("no enum gate -- allows custom themes"). Users who set a custom CSS theme via `data-theme` will need to re-apply via skin or custom CSS — see CHANGELOG entry for details. The same mapping is mirrored in `static/boot.js` (`_LEGACY_THEME_MAP`) so client and server normalize identically; keep them in sync. r rCrY)rerrirj_SETTINGS_LEGACY_THEME_MAPrg_SETTINGS_THEME_VALUES_SETTINGS_SKIN_VALUES)r:r< raw_themeraw_skinlegacy next_theme legacy_skin next_skins r&_normalize_appearancerhas(*4E3)?)?G ##%%%RI'1$'<'<Dtzz||!!###"H ' + +I 6 6F 4"( KK , , ,"+YK #4 K , , ,   y  r(cbtt}d} t}n2#t$r%t dtd}YnwxYw|r tjt d}t|tr1| d| Dn0#t$r#t dtYnwxYwtt|tr|dn|dt|tr|d n|d \|d<|d <t!|d <|S) zDLoad settings from disk, merging with defaults for any missing keys.Nz,Cannot stat settings file %s (inaccessible?)Frrrsc,i|]\}}|tv||SrM)_SETTINGS_LEGACY_DROP_KEYSrMr4rs r&rz!load_settings..s4 Aq$>>>1>>>r(zFailed to load settings from %sr:r<r>)rf_SETTINGS_DEFAULTS SETTINGS_FILEr r\r{r|rDrryrerzrrFrhrgrA)settingsstoredsettings_existss r& load_settingsrrs&''H F '..00      C]SSS   K KZ 7 7 7 I IJJF&$'' $*LLNN K K K LL:M J J J J J K*?)&$77R 7X\\'=R=R(66P 6HLLz ctrl+enterdetailed>largesmallrC>rE51020>rsteer interrupt)r3rKr=rLrM> r6rHrEr5r8r9r7rJr2r>rFr?rIrDz$^[a-zA-Z]{2,10}(-[a-zA-Z0-9]{2,8})?$roct}|d}|d}d}d}|dd}|rOt|tr:|r&ddlm}|||d<|d drd|d<|D]\}} |tvr|dkr.t| tr| r| }d }B|dkr.t| tr| r| }d }v|tvr| t|vr|d kr0t| trt | s|tvrt| } | ||<|} |} |rJ|sHt|tr&|nd } | t vrd} t#| | \|d<|d<t t%|d |d <d|D} t&jd d t&t/j| dddd |vrt%|d at5|d<|S)zISave settings to disk. Returns the merged settings. Ignores unknown keys.r:r<F _set_passwordNr)_hash_passwordrN_clear_passwordTr@r r1c&i|]\}}|dk ||S)r>rMrls r&rz!save_settings..s(JJJ$!QQ/5I5IA5I5I5Ir(rr ensure_asciirrrrsr>)rrrgrrerriapi.authr}r_SETTINGS_ALLOWED_KEYS_SETTINGS_ENUM_VALUES_SETTINGS_LANG_REmatch_SETTINGS_BOOL_KEYSrSrjr`rhrrnrrrrDrErrA)rocurrent pending_theme pending_skintheme_was_explicitskin_was_explicitraw_pwr}r4r theme_value skin_valuerb persisteds r& save_settingsrs ooGKK((M;;v&&L \\/4 0 0F B*VS))BfllnnB++++++#1>&,,..#A#A ||%u--(#'   1 & & &G||a%%.!'')).$%M)-&F{{a%%-!''))-#$L(,%)))a7LQ7O.O.OJq#&&.?.E.Ea.H.H'''GGGAJKJ"35? s5S5S[M''))//111Y[ 2 2 2J(=k:(V(V%GGgfo#&!'++.A"B"BCC$$G  KJ'--//JJJItd;;; 95;;; g%%5g>Q6RSS:<rs`#       ++++++++ty{{ DNN ! ( 0 0 2 2 ry$k22 s929(& 1 122 29,b 1 1 7 7 9 9 AT ")*B / / 5 5 7 7 ?4d":wd':  D+SS 1AG1K-L-L M MNNZ\\ WYY *$ // =0O+ "66O+  8 $ $1T1111h,,,,,,`! " "  j ) ) " s:ch&& J(((MMM IN    E 4$;##*### d s    d, 0$ 0 0 0 0(1#- D.,,TD[,C,,,,,++++D        4 D     sTzD0DJ>3:#4 'T ' ' ' '0/11 6;; ! ! ! ! H0u0000(#P O O ( ( (    6  K  L  \  K    O    \   N  K      [  K  &  P     V! " L# $            ;   B N N N N%$&& .$9Sabb.$4S\]]. $?Sdee . $?Sdee .$ASfgg.$ASfgg.$@Seff.$CYqrr.$CYqrr.$JYxyy.$;Yijj.$=Ykll."$@Tghh#.$$>Teff%.&$DTjkk'.($:Tjkk).,$6S`aa-..$7Sabb/.2$4R]^^3.6$DSbcc7.:$:Q_``;.<$DQijj=.@MQZ[[A.BKQXYYC.D$5Q^__E.FMQZ[[G.HMQZ[[I.J$7Q`aaK.R%@]tuuS.T%;]oppU.V%?]qrrW.X%M]vwwY.Z%J]{||[.b M, h  N    <$ y# h,=y  h!"N#$#   3R+ 5+ E+ E+ U +  i + i +Y+I+ h+X++ M+ + k+;+ !+"\#++$,%+&'+( E)+* E++, E-+. 9/+091+2 i3+4i5+6 I7+8 i9+:;+<Y=+> 8?+@(A+BHC+DE++F  U+++\,#,#,,,,, & S     CCCT CCCCTD[CH#t  (#* ****t * *  *  ****Z'F's''''T ( (C ( ( ( (#   t        r +<== +<=="-@AA"-@AA!,>?? r  227777 22 r9--779--779999"-@AA#.BCC"-BCC r2 '=UVV'=UVV.=\]]=MNN!=OPP 3r@"-@AA +<==&1GHH"-IJJ ArL 0?[\\2?]^^*?XYY4?bcc  MrX 9--))}559--9--99  Yrh*:;; +<==!,>??}55[11 irv77'2JKK77'2JKK77 wrD777777l33 ErR9--779--77(++ +<=="-@AA'2JKK Srh%}55%9--%77%77 % 99 % %/DEE %9--%99%9--%99%#-@AA%$.BCC%))%}55%l33% !+<==!%"!+<==#%$!+<==%%&!+<=='%(#-@AA)%*#-@AA+%,!+<==-%.",>??/%0",>??1%2(2JKK3%4(2JKK5%6/9XYY7%8 *:;;9%:",>??;%<9--=%>))?%@[11A%B77C%D#-@AAE%F'1HIIG%Hl33I%irvI66G44K88K88 ,=>>",?@@M::N;;O<<K88N;;N;;N;;N;;wr\ '=UVV'=UVV.=\]]=MNN!=OPP ]rl%@@%@@mrv 7788 wr@ 2=TUU/:OPP9Dbcc1######L6{6S{6U{6{6{6{6|]C]E#*cTXjBX*D4K>>>%,U,,,.y00%)%&BCC  EGS%/?(?"@@AFFF46c5j!1666d D !!44.d....$$$    &T.161d1111hdTk># d# t# # # # L$+4###> O# O O O O######43#B)s)tCy))))X  tCy TRVZ    &T#Y&&&&RA%dA%A%A%A%J&x',6y~ IN   ********Z}y~  dT t !!!!T!$3&&&  T!9>##%)edl)))DIKK '3 't ' ' ' '##T####+S+T++++/F{/F/H/H[,HHH)9>++2S2T2222 io  T)9>++// ////8.//E      V IEe  $U%&U'(# #58VUU444%#   #!%S/#!#!#!#!Lt@/446677; ,'!:.... 6 6 6666  Jt$$,,-TUU?D?T????N"MOO")0022"""!" 295 6 6 55  ! !"5 6 6  /4000011SS9J5K5KKK145F1G1G-.   $ $ ,5KKK  %        D %