hermes - 💡(How to fix) Fix fix(stt,tts): lift mistralai blanket-ban — 2.4.8+ is clean

if provider == "mistral":
    logger.warning(
        "STT provider 'mistral' configured but `mistralai` is "
        "quarantined on PyPI — refusing"
    )
    return "none"

---

if provider == "mistral":
    # `mistralai` PyPI package was quarantined on 2026-05-12 after a
    # malicious 2.4.6 release. Version 2.4.8 (and later) is clean.
    # Check for actual credentials instead of blanket-banning.
    if get_env_value("MISTRAL_API_KEY"):
        return "mistral"
    logger.warning(
        "STT provider 'mistral' configured but MISTRAL_API_KEY not set"
    )
    return "none"

---

elif provider == "mistral":
    return json.dumps({
        "success": False,
        "error": "Mistral Voxtral TTS is disabled — "
                 "`mistralai` package quarantined on PyPI after "
                 "shai-hulud-2026-05 worm"
    })

---

elif provider == "mistral":
    # `mistralai` PyPI package was quarantined on 2026-05-12 after a
    # malicious 2.4.6 release. Version 2.4.8+ is clean.
    logger.info("Generating speech with Mistral Voxtral TTS...")
    _generate_mistral_tts(text, file_str, tts_config)

---

$ uv pip show mistralai
Name: mistralai
Version: 2.4.8

$ python -c "import mistralai; print('OK')"
OK