߲jdZddlmZddlZddlZddlZddlmZddlm Z m Z m Z ddl m Z hdZdZdd Zdd Zdd Zdd Zdd d d ddZddZy)a|``$HERMES_HOME/cache//`` materialisation helpers for the image/video generation provider ABCs. Several backends return *ephemeral* delivery URLs that expire before a downstream consumer (Telegram ``send_photo``, browser fetch) can resolve them, so providers materialise the bytes locally at tool-completion time. Filenames are ``__.``. ) annotationsN)Path)DictOptionalTuple)urljoin>-./34cRddlm}|dz |z }|jdd|S)zBReturn ``$HERMES_HOME/cache//``, creating parents as needed.r)get_hermes_homecacheT)parentsexist_ok)hermes_constantsrmkdir)kindrpaths 9/home/ubuntu/.hermes/hermes-agent/agent/provider_media.py cache_dirrs,0  w & -DJJtdJ+ Kctjjjd}tjj dd}t ||d|d|d|z S)Nz %Y%m%d_%H%M%S_.)datetimenowstrftimeuuiduuid4hexr)rprefix extensiontsshorts r cache_pathr)s_      ) )/ :B JJL  Ra E T?xqAeWAi[A AArcBt|||}|j||S)z:Write raw bytes to the cache and return the absolute path.)r) write_bytes)rrawr%r&rs r save_bytesr-%s# dFI .DS KrcFt|tj|||S)z?Decode base64 data into the cache and return the absolute path.)r%r&)r-base64 b64decode)rb64_datar%r&s rsave_b64r2,s dF,,X6vQZ [[rF)headersrequire_known_content_typetrusted_originc ddl}ddlm}m}m}|| | }}}t t dzD]}|r,||rt| d||j|d}n"||st| d|||d}|5|jd || 5}|jtvrO|jjd }|st| d |t||dd}}} dddddd|js |j!|j#|jjd xsdj%dddj'j)}|j|}| r|t| d|xsd|8|j%dddj)t+fd|D|}t-|||}d}|j/d5}|j1|D][}|s|t3|z }||kDr2|j5t7|t| d|d|dzd|j9|] ddd|dk(r&t7|t| j;||cdddcdddcSt| dt d|#1swYbxYw#1swYnxYw ddd#1swYxYw)uyStream-download *url* into the cache with a size cap. The extension comes from the response ``Content-Type`` (an explicit table — never inherit a type pointing at HTML/JSON from a degenerate response), then the URL suffix (some CDNs return ``application/octet-stream``), then *default_extension*. Raises on any network / HTTP / oversize / empty error so callers can fall back to the bare URL; a partial file is never left behind. The URL is provider-supplied, so every hop is validated with ``tools.url_safety`` before a socket opens (and again at TCP connect by the guarded transport, closing DNS-rebinding TOCTOU). Caller-supplied *headers* (e.g. provider auth) go to the first hop only — a redirect target never receives them. *trusted_origin* is for callers that built *url* from the operator's own provider ``base_url`` (not from a provider response): the first hop skips the private-address class check so a LAN/loopback relay works without ``security.allow_private_urls``, but the cloud-metadata floor still applies and every redirect target is re-validated in full. rN)create_ssrf_safe_clientis_always_blocked_url is_safe_urlz( URL targets an always-blocked address: F)timeoutfollow_redirectsz# URL failed the SSRF safety check: GET)r3locationz) download redirected without a Location: z Content-Type;z+ download returned unexpected Content-Type z (missing)?c3ZK|]"}jd|s|dk(rdn|$yw)rjpegjpgN)endswith).0exturl_paths r zsave_url..ns4sSV^VgVgjklokphqVr#-S8ss++wb) chunk_sizez at z exceeds izMB cap; refusing to cache.)urlz download exceeded z redirects: )httpxtools.url_safetyr7r8r9range_MAX_SAVE_URL_REDIRECTS ValueErrorClientstream status_code_REDIRECT_STATUS_CODESr3getr is_successreadraise_for_statussplitstriplowernextr)open iter_byteslenclose _unlink_quietwriteformat) rrLr%r; max_bytesrK content_typesurl_extensionsdefault_extensionlabel empty_errorr3r4r5rMr7r8r9 current_url hop_headers trusted_hoprclientresponser> content_typer&r bytes_writtenfhchunkrHs @rsave_urlrt1s:4\\,/.kK *Q. /4 $[1 E7*RS^R_!`aa\\'E\JF{+ E7*Mk]![\\,WuUF + uk;G* 8''+AA'//33J?H#(E72[\g[h)ijjK(AK$K(5C=K2A1K $4K K(K KK K((K2 cD |jy#t$rYywxYw)N)unlinkOSError)rs rrbrbs"     s  )rstrreturnr)rrxr%rxr&rxryr) rrxr,bytesr%rxr&rxryr) rrxr1rxr%rxr&rxryr)rrxrLrxr%rxr;floatreintrKr|rfzDict[str, str]rgzTuple[str, ...]rhrxrirxrjrxr3zOptional[Dict[str, str]]r4boolr5r}ryr)rrryNone)__doc__ __future__rr/rr"pathlibrtypingrrr urllib.parserrUrPrr)r-r2rtrbrrrs#  (( 2B \GK',U T^ T^T^$'T^27T^DGT^UXT^!T^3BT^WZT^ T^!T^,DT^!% T^?C T^  T^n r