߲jdZddlmZddlZddlZddlmZmZmZe hdZ e hdZ e hdZ dZ ejd Zdd Zddd Zdd Zdd ZddZ d ddZy)aCredential-pool disk-boundary sanitization: strip raw secrets from *borrowed* pool entries before they reach ``auth.json``. Deliberately free of ``hermes_cli.auth`` imports so the pool model and the auth-store write boundary share one policy without import cycles.) annotationsN)AnyDictMapping>z xai-oauth device_codez openai-codexrz minimax-oauthoauthnousr anthropic hermes_pkce>scope client_id expires_at expires_in token_type last_status agent_key_id last_refresh expires_at_ms secret_sourcelast_status_atlast_error_codeagent_key_reusedlast_error_reasonlast_error_messagesecret_fingerprintlast_error_reset_atagent_key_expires_atagent_key_expires_inagent_key_obtained_at>tokenapikeysecrettokensapi_keyid_tokenpassword agent_key api_token auth_token credential secret_key credentials oauth_token private_key access_token bearer_token authorization client_secret refresh_token session_token)_api_key _api_token _access_token _auth_token_refresh_token _bearer_token_client_secret _id_token _oauth_token _private_key_session_token _secret_key _password_secret_token_keyz(?<=[a-z0-9])(?=[A-Z])ctjdt|xsdj}|j j ddj ddS)N_-.)_CAMEL_CASE_BOUNDARYsubstrstriplowerreplace)keyraws A/home/ubuntu/.hermes/hermes-agent/agent/credential_persistence.py_normalize_keyrX3sK  " "3CI2(<(<(> ?C 99;  sC ( 0 0c ::ct|xsdjj}|r|dk(s|jdryt|xsdjj}||ftvS)zGReturn True when ``source`` points at a borrowed/reference-only secret.rLmanualzmanual:F)rQrRrS startswith_PERSISTABLE_PROVIDER_SOURCES)source provider_idnormalized_sourcenormalized_providers rWis_borrowed_credential_sourcerb8stFLb)//1779  1X =ARA]A]^gAhk/R0668>>@ !2 3;X XXrYclt|}|r|tvry|tvxs|jtS)NF)rX_SAFE_SECRETISH_METADATA_KEYS_SECRET_VALUE_KEYSendswith_SECRET_VALUE_SUFFIXES)rU normalizeds rW_is_secret_payload_keyriAs7$J 'DD + + Zz/B/BCY/ZZrYc|dn t|}|sytj|jddj }d|ddS)zNon-reversible ``sha256:<16 hex>`` fingerprint of one secret value. Callers comparing a live secret against the ``secret_fingerprint`` left on a sanitized (borrowed) pool row need exactly the digest this module writes. NrLzutf-8 surrogatepass)errorssha256:)rQhashlibsha256encode hexdigest)valuetextdigests rWfingerprint_secret_valuervHsP 2CJD  ^^DKKKH I S S UF VCR[M ""rYcVd}|Dcgc]}|j|}}||jDcgc]\}}t|s|c}}z }|D]}t|}|s|cS|jd}t |t r|j dr|Sycc}wcc}}w)N)r,r4r8r)r%r'r rm)getitemsrirv isinstancerQr\)payload preferredk candidatesvrs fingerprintexistings rW_credential_secret_fingerprintrUs\I*34Q'++a.4J4NA4J14M1NNJ.u5  {{/0H(C X%8%8%C 5NsB B% B%ct|}t|jd|s|St|}|j Dcic]\}}t |r||}}}|r||d<|Scc}}w)zReturn a disk-safe credential-pool payload. Owned sources pass through unchanged. Borrowed sources keep labels, source refs, status/cooldown metadata, counters and a fingerprint, but every raw secret value field is removed. r^r )dictrbrxrryri)r{r_resultrr}r sanitizeds rW$sanitize_borrowed_credential_payloadrcsr']F (H)={ K 08K"(,,.R$!Q8Nq8QARIR*5 &' Ss A,A,)rUrreturnrQ)N)r^rr_rrbool)rUrrr)rsrr str | None)r{Mapping[str, Any]rr)r{rr_rrzDict[str, Any])__doc__ __future__rroretypingrrr frozensetr]rdrergcompilerOrXrbrirvrrrYrWrs+ # %% !*+!!*+! "rzz";<; Y[ #   rY