yjU,UdZddlmZddlmZddlmZddlmZm Z m Z m Z ddl m Z mZddlmZmZmZddlmZdd lmZdd lmZmZmZmZmZmZmZd d iZd dddddddZ de!d<d`dZ"edGddZ#edGdd Z$dad#Z%dbd&Z&dcd'Z'dcd(Z(ddd*Z)ddd+Z*ddd,Z+dcd-Z,ded9Z- dfd;d<dgd?Z.d:d;d@dhdDZ/dEdFdGdHdIdJdKZ0didMZ1dNdOdOdPdQdRdKZ2dKZ3 dfd;d<djdTZ4dkdWZ5dd<dldXZ6dYd:dZdmd^Z7dnd_Z8d:S)oz8Helpers for Nous subscription managed-tool capabilities.) annotations) dataclass)Path)DictIterableOptionalSet) get_env_value load_config)NousPortalAccountInfo&format_nous_portal_entitlement_messageget_nous_portal_account_info)is_managed_tool_gateway_ready)is_truthy_value)fal_key_is_configuredhas_direct_modal_credentialsmanaged_nous_tools_enabled normalize_browser_cloud_providernormalize_modal_moderesolve_modal_backend_stateresolve_openai_audio_api_keycliz hermes-cli firecrawlfal fal-video openai-audio browser-usemodalweb image_gen video_genttssttbrowserrzDict[str, str]!MANAGED_FEATURE_COVERAGE_CATEGORYsectionobjectreturnboolcxt|tsdSt|ddS)zCReturn True when a config section explicitly opts into the gateway.F use_gateway)default) isinstancedictrget)r's B/home/ragecks/.hermes/hermes-agent/hermes_cli/nous_subscription.py _uses_gatewayr22s8 gt $ $u 7;;}55u E E EET)frozenc|eZdZUded<ded<ded<ded<ded<ded<ded <ded <d Zded <d Zded<dS)NousFeatureStatestrkeylabelr*included_by_default availableactivemanaged_by_nousdirect_overridetoolset_enabledcurrent_providerFexplicit_configuredN)__name__ __module__ __qualname____annotations__rArBr3r1r6r69s HHHJJJOOOLLL %%%%%%%r3r6ceZdZUded<ded<ded<ded<dZded <edd Zedd ZeddZeddZ eddZ eddZ eddZ ddZ dS)NousSubscriptionFeaturesr* subscribednous_auth_presentprovider_is_nouszDict[str, NousFeatureState]featuresNzOptional[NousPortalAccountInfo] account_infor)r6c|jdS)Nr rMselfs r1r zNousSubscriptionFeatures.webO}U##r3c|jdS)Nr!rPrQs r1r!z"NousSubscriptionFeatures.image_genS}[))r3c|jdS)Nr#rPrQs r1r#zNousSubscriptionFeatures.ttsWrSr3c|jdS)Nr$rPrQs r1r$zNousSubscriptionFeatures.stt[rSr3c|jdS)Nr%rPrQs r1r%z NousSubscriptionFeatures.browser_s}Y''r3c|jdS)Nr"rPrQs r1r"z"NousSubscriptionFeatures.video_gencrUr3c|jdS)NrrPrQs r1rzNousSubscriptionFeatures.modalgs}W%%r3Iterable[NousFeatureState]c#6Kd}|D]}|j|VdS)NrrP)rRorderedr8s r1itemszNousSubscriptionFeatures.itemsks:U % %C-$ $ $ $ $ % %r3)r)r6)r)r[)rCrDrErFrNpropertyr r!r#r$r%r"rr^rGr3r1rIrIGsI))))48L8888 $$$X$***X*$$$X$$$$X$(((X(***X*&&&X&%%%%%%r3rIconfigDict[str, object]c|d}t|trt|St|tr*|rd|iSiS)Nmodelr-)r0r.r/r7strip)r` model_cfgs r1_model_config_dictrfqsn 7##I)T""I)S!!.ioo&7&7.9??,,-- Ir3 toolset_keyr7cddlm}|d}t|tr|sdt dgi}t ||}|sdS|D]\}}t|trt|}n!t |}|r|gng}|st |}|r|g}t } |D]I} t| tr| s | || :#t$rYFwxYw|r| | rdSdS)Nr)resolve_toolsetplatform_toolsetsrFT) toolsetsrir0r.r/_DEFAULT_PLATFORM_TOOLSETSsetr^listr7update Exceptionissubset) r`rgrirj target_toolsplatform raw_toolsets toolset_namesdefault_toolsetavailable_tools toolset_names r1_toolset_enabledryzs(((((( #677 ' . .I6GI"%?%F$GH{3344L u"3"9"9";";, lD ) ) I ..MM8<> 4NN)0>AFJMll?]9K9KlLL  11+>> 4 5r3ctsdS ddlm}m}n#t$rYdSwxYw|rdS|S)uReturn True when the *local* browser backend would actually start. The ``agent-browser`` CLI being present is necessary but not sufficient for local mode: agent-browser also needs a Chromium build on disk (without one it hangs on first use until the command timeout fires), unless the Lightpanda engine is selected — text-only navigation needs no Chromium. This mirrors the local-mode tail of :func:`tools.browser_tool.check_browser_requirements`, so the setup/status surfaces advertise local browser readiness only when the runtime would actually run it. Cloud providers (Browserbase, Browser Use, Firecrawl) host their own Chromium and therefore gate on :func:`_has_agent_browser` alone. Fr_chromium_installed_using_lightpanda_engineT)rtools.browser_toolrrrprs r1_local_browser_runnablers   uTTTTTTTTT tt !!t    s  ))rAcFdddddd}||pd|pdS)N Browserbasez Browser Use FirecrawlCamofoxz Local browser) browserbaserrcamofoxlocalrr0rAmappings r1_browser_labelrs?$$  G ;;'274D4W X XXr3cHddddddd}||pd|pdS) N OpenAI TTS ElevenLabszEdge TTSzxAI TTSzMistral Voxtral TTSNeuTTS)openai elevenlabsedgexaimistralneuttsrrrs r1 _tts_labelrsB"( G ;;'163C3Qz R RRr3cDddddd}||pd|pdS)NzOpenAI Whisperz Groq WhisperzMistral Voxtral TranscribezLocal faster-whisper)rgroqrrrrrs r1 _stt_labelrs="/' G ;;'274D4^H^ _ __r3crtdrdS ddlm}t|S#t$rYdSwxYw)a2Whether a local STT backend could serve transcription right now. True when faster-whisper is importable or a custom local STT command is configured. Used both for feature detection and to stop ``apply_nous_managed_defaults`` from flipping a working local setup to the managed gateway. HERMES_LOCAL_STT_COMMANDTr_HAS_FASTER_WHISPERF)r tools.transcription_toolsrr*rprs r1_local_stt_backend_availablersb/00tAAAAAA'((( uus ( 66browser_tool_enabledbrowser_providerbrowser_provider_explicitbrowser_local_availablebrowser_local_runnabledirect_camofoxdirect_browserbasedirect_browser_usedirect_firecrawlmanaged_browser_availabletuple[str, bool, bool, bool]c |rddt|dfS|r|pd} | dkr(t|o|} t|o| } | | | dfS| dkrB| p|} t|o| } t|o|o| o| }t|o| } | | | |fS| dkr(t|o|} t|o| } | | | dfS| dkr| dddfSd} t|} t|o| } | | | dfS| s|rP 4K9KLLI$+++-++* G .<9==F#Y? ? { * *4I9IJJI.<9==F#Y= = y ( (#UE58 8"/00 *8y99FE99 9$6 9011   '' ') ''&    *8y99i887011 *8y99i66+,,I &49 5 5F Ivu ,,r3NF force_freshOptional[Dict[str, object]]rcR]|tpi}t|}t|}t|dpddk} |rtd]nt]n#t$rd]YnwxYwt]o ]j o]j }t]o]j }dM]fd }|p|}t|d }t|d } t|d } t|d} t|d} t|d} t|d tr|d ni}t|dtr|dni}t|dtr|dni}t|dtr|dni}t|dtr|dni}t|dpd}t|dpd}t|dpd}t|dpd}d|v}t|r|dnd}t|dpd}t|d}t!|}t!|}t!|}t!|}t|d tr|d ni}t!|} t|d tr|d ni}!t!|!}"tt#d}#tt#dpt#d}$tt#d}%tt#d}&tt#d}'t%}(|(})tt'}*tt#d}+tt#d},tt#d ot#d!}-tt#d"}.t)}/tt'}0tt#d#}1tt#d$}2 d%d&lm}3t|3ptt#d'}4n,#t$rtt#d'}4YnwxYw|rd(}$d(}#d(}%d(}&| rd(}(|"rd(})|rd(}*d(}+|rd(}0d(}1d(}2d(}4|rd(}.d(}-|o|ot/d)o |d)}5|o|ot/d*o |d+}6|o|ot/d*o |d,}7|o|ot/d-o |d-}8|8}9|o|ot/d.o |d.}:|o|ot/d/o |d/};t1||/|;|0}<|d)ko|5o|$ }=t|oQ|=pO|d1ko|#pG|d)ko|$p?|d2ko|%p7|d3ko|&p/|d4ko|'p'|d4ko|'p|d1ko|#p|d)ko|$p|d2ko|%p|d3ko|&}>t|5p |#p|$p|%p|&p|'}?| o|6o|( }@t| o|@p|(}At|6p|(}B| o|7o|) }Ct| o|Cp|)}Dt|7p|)}E|pd}F| o |Fd5ko|8o|* }Gt|Fd6vp3|Fd5ko|8p|*p)|Fd7ko|+p!|Fd8kott#d$}Ht| o|H}I|pd}J|Jd5ko|9o|0 }Kt|Jdkr|4p|Jd5ko|9p|0p|Jd9ko|1p|Jd8ko|2}L|L}Mt3}Nt5}Ot7| |||N|O|,|-|.|$|:: \}P}Q}R}S|d/krd(}Td}Ut| }Vd(}Wn|v}Xd(}Z|d}[t|[trd|[vr|d?v}Zt9d d@d|?|>|=|>o|= ||p|pdt|p|A t9d dBd|B|A|@|Ao|@ | |(rdCn|@rdDnd|(A t9d dEd(|E|D|C|Do|C | |)rdCn|CrdDnd|)A t9ddFd|H|I|G|Io|G | t;|F|XA t9ddGd|L|M|K|Mo|K dt=|J|ZA t9ddHd|Q|R|S|Ro|S | t?|P|A t9d/dId(|U|V|T|d/ko|W| |d/krdJn|pd|d/kA dK}\tA||||\]LS)NNproviderr@nousTrcategoryr7r)r*cLto|SN)r*tool_gateway_entitled_for)rrNs r1 _entitled_forz5get_nous_subscription_features.._entitled_forxs$LU\%K%KH%U%UVVVr3r r!r"r#r%terminalr$backendsearch_backendrrcloud_provider modal_mode EXA_API_KEYFIRECRAWL_API_KEYFIRECRAWL_API_URLPARALLEL_API_KEYTAVILY_API_KEY SEARXNG_URLELEVENLABS_API_KEY CAMOFOX_URLBROWSERBASE_API_KEYBROWSERBASE_PROJECT_IDBROWSER_USE_API_KEY GROQ_API_KEYMISTRAL_API_KEYrrrFrz fal-queuerrrrr) has_direct managed_readymanaged_enabledexaparalleltavilysearxngr>rrrrr) rrrrrrrrrrselected_backendrdirect>r@r>r@rz Web tools) r8r9r:r;r<r=r>r?rArBzImage generationFALzNous SubscriptionzVideo generationrzSpeech-to-textzBrowser automationzModal executionModalr)rJrKrLrMrN)rr7r)r*)!r r/rfr7r0rdlowerrrpr* logged_intool_gateway_entitledryr.rrr2r rrrrrrrrrrr6rrrrI)^r`rrerLmanaged_tools_flagrKrrJweb_tool_enabledimage_tool_enabledvideo_tool_enabledtts_tool_enabledrmodal_tool_enabledweb_cfgtts_cfgstt_cfg browser_cfg terminal_cfg web_backendweb_search_backend tts_provider stt_providerrrterminal_backendrweb_use_gatewaytts_use_gatewaystt_use_gatewaybrowser_use_gateway image_gen_cfgimage_use_gateway video_gen_cfgvideo_use_gateway direct_exardirect_parallel direct_tavilydirect_searxng direct_faldirect_fal_videodirect_openai_ttsdirect_elevenlabsrrr direct_modaldirect_openai_sttdirect_groq_sttdirect_mistral_sttrlocal_stt_availablemanaged_web_availablemanaged_image_availablemanaged_video_availablemanaged_tts_availablemanaged_stt_availablermanaged_modal_available modal_state web_managed web_active web_available image_managed image_activeimage_available video_managed video_activevideo_availabletts_current_provider tts_managed tts_available tts_activestt_current_provider stt_managed stt_available stt_activerrbrowser_current_providerbrowser_availablebrowser_activebrowser_managed modal_managedmodal_available modal_activemodal_direct_overridetts_explicit_configured raw_tts_cfgstt_explicit_configured raw_stt_cfgrMrNs^ @r1get_nous_subscription_featuresr3[s ~$" &\\F"6**I9==44:;;AACCIIKKvU  :7DIIILL799L    /  " /  . \Dl.DEEWWWWWW!6%6J'66)&+>>)&+>>'66+FI>>)&*==#-fjj.?.?#F#FNfjjBG#-fjj.?.?#F#FNfjjBG#-fjj.?.?#F#FNfjjBG+5fjj6K6KT+R+RZ&**Y'''XZK-7 :8N8NPT-U-U]6::j)))[]Lgkk),,23399;;AACCKW[[)9::@bAAGGIIOOQQw{{:..8&99??AAGGIIL w{{:..9'::@@BBHHJJL 0K ?7-FP ()))D L  Y ' ' 273399;;AACC&&&J$G,,O#G,,O#G,,O' 44/9&**[:Q:QSW/X/X`FJJ{+++^`M%m44/9&**[:Q:QSW/X/X`FJJ{+++^`M%m44mM2233JM*=>>d-PcBdBdee=);<<==O'78899M- 6677N&((J!9;;<<]+?@@AA- 6677Nm,ABBn}UmGnGnoom,ABBCC/11L9;;<<=8899Om,=>>??NAAAAAA"#677 4 4 5 5< <  NNN"=1K#L#LMMN    ! "!!$!"##""  '  ' )+ 6 6 ' M+ & &   !  ! )+ 6 6 ! M%   '  ' )+ 6 6 ' M+ & &   *  * ). 9 9 * M. ) ) 2 )  ) )- 8 8 ) M- ( (   #  # )' 2 2 # M' " "  .-* K,_1F_O_K_K  Bu$3 B{*?/? Bz)=o Bx'9M B y(;^ B#i/BN B#e+:  B#k1F6F B#j0D_ B#h.@=J$uu/?u?uVcuguM'U+BU:~M*L 0KMML2@jAAO&[+B[K[G[M*R 0QAQSSL2F6FGGO'16 " H , " ! "" !   22 Z H , ]2G2\K\ Z L 0 F5F Z !I - X$}EV7W7W2X2X M &8=99J (27( " ! "! !   ( @-@ F H , ]2G2\K\ F F * > F !I - D2D M J022466 '1)"; 75%--)";     7"" .// % ' (I 5 5/00 .// % ' (H 4 4 .// $%7 8 8 y  677 % x   |,, % 6F,GG %#**U##K+t$$C{)B)B".l"B$**U##K+t$$D{)B)B".m"C  $#'&:{?,(D,>D" $[%F4F G G    &$ $%)(>->.&0dUUm7c7J7Jac *    &$ %%)(>->.&6jUUTa=i=P=Pgi 0      $#'&:{?,'(<== 7     " $#'&:{?!'(<== 7   $& $'!+*B?/B0+,DEE 9    "# %%),7Q1[00&\\)enabled_toolsetsrr4Optional[Iterable[str]]set[str]ct||}|jr|jjr |jjst S|jst St |pd}t }|d}t|tsi}||d<|d}t|tsi}||d<|d}t|tsi}||d<|d} t| tsi} | |d<d|vrb|j j sVtdsGtds8td s)td sd |d <| dd|vrC|j j s7ts)td sd|d<| d|jj sut!sgtsYtdsJtds;|j4|jdrd|d<| dd|vrD|jj s8tds)tdsd| d<| dd|vrYt'sK|d} t| tsi} | |d<d| d<| dd|vrxt'sj|jdrP|d} t| tsi} | |d<d| d<d| d<| d|S)NrrGr r#r$r%rrrrrrrrrrrrrrrrr!Tr,r"rr)r3rNrrrmrLr0r.r/r rBr addr#rr$rrr%r) r`r4rrMselected_toolsetschangedrrrr image_cfg video_cfgs r1apply_nous_managed_defaultsr=s .f+NNNH  ! +  ! 7 uu  $uu ,233GjjG gt $ $ u jjG gt $ $ u jjG gt $ $ u **Y''K k4 ( (( 'y !!!(,*J!())" ) * *" , - -" , - - " )  E !!!(,*J!$&&" - . ."'  E L , ,..  ) * *  ^,,  .//   ! -  ! ; ;N K K .'  E%%%h.>.R%+,,& . / /&)6 $% I'''0E0G0G'JJ{++ )T** ,I"+F; #' -  K   (((%'' )  ! ; ;K H H )JJ{++ )T** ,I"+F;  % *#' -  K   Nr3z Web search & extract (Firecrawl)zImage generation (FAL)zVideo generation (FAL)zText-to-speech (OpenAI TTS)zSpeech-to-text (OpenAI Whisper)z Browser automation (Browser Use)r r!r"r#r$r%Dict[str, bool]c  t}ttdp;tdp,tdptdptd||ttptdttptdptdttd ptd otd d S) z4Return a dict of tool_key -> has_direct_credentials.rrrrrrrrrrrr>)rr*r r) fal_directs r1_get_gateway_direct_credentialsrBss&((J - . . ,011 ,/00 ,-.. ,]++     ( * * 3122   ( * * 0^,, 0.//   / 0 0 b344`G_9`9`  /  r3z!Firecrawl/Exa/Parallel/Tavily keyzFAL keyzOpenAI/ElevenLabs keyzOpenAI/Groq/Mistral keyzBrowser Use/Browserbase key&tuple[list[str], list[str], list[str]]c  t|}n#t$rgggfcYSwxYw|r|jr|jsgggfS|t pi}|d}t |trLt|dpd dkrgggfSt}t|dt|dt|d t|d t|d t|d d }g}g}g}tD]} |t| s#|| r|| N|| r|| y|| |||fS)azReturn (unconfigured, has_direct, already_managed) tool key lists. - unconfigured: tools with no direct credentials (easy switch) - has_direct: tools where the user has their own API keys - already_managed: tools already routed through the gateway All lists are empty when the user is not a paid Nous subscriber or is not using Nous as their provider. rNrcrr@rr r!r"r#r$r%r>)rrprrr r0r.r/r7rdrrBr2_ALL_GATEWAY_KEYSrr&append) r`rrNreropted_in unconfiguredralready_managedr8s r1get_gateway_eligible_toolsrJsP"3 LLL 2rz \3 8Z2rz ~$" 7##I i & &#immJ.G.G.M2*N*N*T*T*V*V*\*\*^*^bh*h*h2rz , . .FVZZ..//"6::k#:#:;;"6::k#:#:;;VZZ..//VZZ..// I!6!677 H!LJ!#O % %55 -c 2     <<   %  " "3 ' ' ' ' ZZ__ %   c " " " "    $ $ $ $ _ 44s %% tool_keys list[str]ct}|d}t|tsi}||d<|d}t|tsi}||d<|d}t|tsi}||d<|d}t|tsi}||d<d|vrd|d<d|d<|dd|vrd |d <d|d<|dd|vrd |d <d|d<|dd|vrd |d <d|d<|dd |vrK|d }t|tsi}||d <d|d<|d d|vrP|d}t|tsi}||d<d|d <d|d<|d|S)zApply Tool Gateway config for the given tool keys. Sets ``use_gateway: true`` in each tool's config section so the runtime prefers the gateway even when direct API keys are present. Returns the set of tools that were actually changed. r r#r$r%rrTr,rrrrr!r"r)rmr0r.r/r8) r`rKr:rrrrr;r<s r1apply_gateway_defaultsrNsXGjjG gt $ $ u jjG gt $ $ u jjG gt $ $ u **Y''K k4 ( (( 'y ( !%  E & !%  E & !%  EI(5 $%%) M" IiJJ{++ )T** ,I"+F; #' -  K   iJJ{++ )T** ,I"+F;  % *#' -  K   Nr3ct||\}}}|s|stS ddlm}n#t$rtcYSwxYw t d}n#t$rd}YnwxYwt |o|jduo|jduo |jj }|rdnd}t|t|zd |D} | d |Dz } ttt|} |rd } nd } || | | } n1#tttt f$rtcYSwxYwfd | D} | stSt#|| }|rSddlm}||t)|D]2}t*||}t/d|d|3|S)a<If eligible tools exist, prompt the user (per tool) to enable the Tool Gateway. "Pool enabled" is the trigger: a user with a live free tool pool (or paid access) is shown a per-tool checklist of the covered managed backends and picks which to route through the gateway. The free pool funds web/image/ tts/browser but not video, so the checklist only lists covered tools (the coverage filter lives in get_gateway_eligible_tools). Returns the set of tools that were enabled, or empty set if the user declined or no tools were eligible. rr)prompt_checklistFNTzfree tool poolzNous subscriptionc(g|]}t|SrG)_GATEWAY_TOOL_LABELS.0ks r1 z.prompt_enable_tool_gateway..[sGGGQ-a0GGGr3cHg|]}t|dt| S)u — keep using your )rR_GATEWAY_DIRECT_LABELSrSs r1rVz.prompt_enable_tool_gateway..\sB   "TT9OPQ9RTTr3u6Your free Nous tool pool — pick the tools to enable:uNYour Nous subscription includes the Tool Gateway — pick the tools to enable:cZg|]'}d|cxkrtknn|(S)r)len)rTi offer_keyss r1rVz.prompt_enable_tool_gateway..osDQQQQQ8P8P8P8PZ8P8P8P8P8P:a=8P8P8Pr3) save_configu ✓ z: enabled via )rJrmhermes_cli.setuprPrprr*paid_service_access tool_accessenabledrnrangerZKeyboardInterruptEOFErrorOSError SystemExitrNhermes_cli.configr]sortedrRr0print)r`rrHrrIrPrN pool_only source_labellabels pre_selectedtitle chosen_idx chosen_keysr:r]r8r9r\s @r1prompt_enable_tool_gatewayrq,s"1K111-L*o  uu 5555555 uu  3FFF   -  ,D 8 -  $D 0 -  $ , I (1I##6IL !..j1A1AAJGG,GGGF Fc,//0011L H (  %%eV\BB x* =uu RQQQ*QQQK uu $V[99G@111111 F'?? @ @C(,,S#66E >5>> >> ? ? ? ? Ns31A  A A!! A0/A0 D+E  E zthe Nous Tool Gateway capabilitycoverage_categoryrsrt Optional[str]cd fd } td}n#t$rd}YnwxYw||rdS||js6t|sdS td}n#t$rd}YnwxYw||rdSt || }|r)|D]}t d |dS) u;Make sure the user is entitled to the Nous Tool Gateway, logging in if needed. Used by ``hermes tools`` when a user selects a Nous-managed Tool Gateway backend (e.g. "Firecrawl (Nous Portal)"). Unlike ``hermes model``'s Nous login, this: - does NOT change the inference provider (``model.provider`` is untouched), - does NOT run model selection, and - does NOT offer the bulk "enable for all tools" Tool Gateway prompt. It only performs the Nous Portal device-code OAuth (when the user isn't already logged in) and refreshes entitlement, so the caller can enable the single tool the user picked. Entitlement is satisfied by paid service access OR a live free tool pool. When ``coverage_category`` is given (e.g. ``"fal"`` for image gen), the pool must cover that category specifically — so a pool user selecting video (``"fal-video"``, not pool-funded) is correctly denied. Returns ``True`` when the account is entitled after the flow, ``False`` otherwise (declined login, login failed, or no entitlement). r)r*cH|dS|S|jS)NF)rr)accountrts r1 _entitledz,ensure_nous_portal_access.._entitleds1 ?5  (445FGG G,,r3TrN)rsFrr r)r*)rrpr_run_nous_portal_login_onlyr splitlinesri)rsrtryinfomessagelines ` r1ensure_nous_portal_accessrsG:------+=== yt |4>|*jAAA 5 /DAAADD   DDD yt 5 7HG&&((  D +t++     5s ))A&& A54A5c ddlm}m}m}m}m}m}m}m}m } n*#t$r} td| Yd} ~ dSd} ~ wwxYwttd|d td } n&#tt f$rtYdSwxYw| d vrtd dS |5|d } dddn #1swxYwYd} |}|r^ td  }n#tt f$rd }YnwxYw|d vr |d} | |} |5|}||d| | r| |d <n|d d||dddn #1swxYwY| | |tddS#t $rtdYdSt&$rYdSt$r} td| Yd} ~ dSd} ~ wwxYw)zRun the Nous Portal device-code OAuth and persist credentials only. No model selection, no provider switch, no Tool Gateway bulk prompt. Returns ``True`` on a successful login, ``False`` if the user declined or the flow failed. r) _auth_store_lock_load_auth_store_nous_device_code_login_read_shared_nous_state_save_auth_store_save_provider_state_sync_nous_pool_from_auth_store_try_import_shared_nous_state_write_shared_nous_statez% Could not start Nous Portal login: NFrzz requires a Nous Portal login.z$ Log in to Nous Portal now? [Y/n]: >r@yyesz Skipped Nous Portal login.active_providerz= Found existing Nous OAuth credentials. Import them? [Y/n]: rg.@)timeout_secondsrz Nous Portal login successful.Tz Login cancelled.z Nous Portal login failed: )hermes_cli.authrrrrrrrrrrpriinputrdrrdrcr0poprf)rsrrrrrrrrrexcproceedprior_active_provider auth_stateshared do_import auth_stores r1r|r|s)   ;c;;<<<uuuuu GGG 9z 9 9 9:::>??EEGGMMOO ' ( uu&&& ,---u-    N N$4$4$6$6$:$:;L$M$M ! N N N N N N N N N N N N N N N ((**  Q !S%''%%'' /0     ,,,::4PPP  0022J     ) )))++J VZ @ @ @% 80E ,--0$777  Z ( ( ( ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ! ,,,''))) /000t  $%%%uu uu  2S22333uuuuus A;A%3BB<;B< HD = H D  HD H#3EHE-*H,E--)HAG# H#G''H*G'+'HI"0 I"< I"II")r'r(r)r*)r`rar)ra)r`rargr7r)r*r{)rAr7r)r7)rr*rr7rr*rr*rr*rr*rr*rr*rr*rr*r)rr)r`rrr*r)rI)r`rar4r5rr*r)r6)r)r?)r`rrr*r)rC)r`rarKrLr)r6)r`rarr*r)r6)rsr7rtrur)r*)rsr7r)r*)9__doc__ __future__r dataclassesrpathlibrtypingrrrr rgr r hermes_cli.nous_accountr r rtools.managed_tool_gatewayrutilsrtools.tool_backend_helpersrrrrrrrrlr&rFr2r6rIrfryrrrrrrrr3r=rRrBrXrErJrNrqrr|rGr3r1rsk>>>""""""!!!!!!00000000000088888888 EDDDDD!!!!!! <     5 5!    FFFF $ & & & & & & & & $&%&%&%&%&%&%&%&%R""""JD!!!!6YYYY S S S S````$I-I-I-I-Z+/TTTTTTTz 15 mmmmmmj .)) ( ,1 D / " $, O+/@5@5@5@5@5@5@5FFFFFXOOOOOOr.'+AAAAAAHOOOOOOr3