߲jdZddlmZddlZddlZddlZddlmZddlm Z ddl m Z m Z m Z mZmZddlmZddlmZgd Zdd ZeGd d Zddd ZddZddZedZGdde eZGdde eZdddZdZy)aShared cache substrate for external secret-source backends. Two-layer fetch cache (in-process + on-disk); the disk half writes atomically with ``0600`` permissions and honours a TTL, so that logic is audited in exactly one place. Each backend supplies only its cache-key shape and a serializer. The disk layer is strictly best-effort: a miss just triggers a refetch, because a cache problem must never block Hermes startup. ) annotationsN) dataclass)Path)CallableDictGenericOptionalTypeVar)secure_parent_dir)atomic_json_write) CachedFetch DiskCache SecretCacheatomic_write_jsonentry_from_payload fingerprintresolve_cache_homecltj|jdjddS)uESHA-256 prefix used as a cache key — never logged, never displayed.utf-8N)hashlibsha256encode hexdigest)materials @/home/ubuntu/.hermes/hermes-agent/agent/secret_sources/_cache.pyrr!s* >>(//'2 3 = = ? DDc.eZdZUdZded<ded<ddZy) r z;A set of fetched secret values plus when they were fetched.zDict[str, str]secretsfloat fetched_atcX|dkDxr$tj|jz |kS)Nr)timer!)self ttl_secondss ris_freshzCachedFetch.is_fresh-s%QPDIIK$//$A[#PPrN)r%r returnbool)__name__ __module__ __qualname____doc____annotations__r&rrr r &sE Qrr c$| ddlm}|}|S)z[``home_path`` as resolved by ``load_hermes_dotenv()``, else ``$HERMES_HOME``/``~/.hermes``.r)get_hermes_home)hermes_constantsr0) home_pathr0s rrr1s4#% rcxt|tsy|jd|jd}}t|trt|ttfsy|j Dcic]*\}}t|t st|t s(||,}}}t|t |Scc}}w)u``{"secrets": {...}, "fetched_at": n}`` → :class:`CachedFetch`, or None if malformed. Only str→str pairs survive (JSON permits other types; env vars need strings). Nrr!)rr!) isinstancedictgetintr itemsstrr )payloadrr!kvtypeds rrr:s gt $!++i0'++l2KZG gt $JzC<,P%mmo [daAs1C STVYHZQT [E [ uz1B CC \s.B6B6B6chddlm}||jt|t ||ddy)zSecret cache entry at 0600 from creation; the containing dir is tightened to 0700 (``secure_parent_dir`` refuses ``/``, top-level dirs and the install tree). Raises ``OSError`` on failure; callers decide whether that is best-effort.r)mkdir_under_hermes_homeNi)indentmode)r1r?parentr r )pathr:r?s rrrHs)9DKK(ddGDu=rKc@eZdZdZddZd d dZd d dZd d dZd d dZy)ru?Best-effort, profile-aware on-disk cache for fetched secret values. One JSON object per backend at ``/cache/``:: {"key": "", "secrets": {...}, "fetched_at": 1.0} The file holds only secret *values*, never raw auth material — backends fingerprint tokens/sessions before they reach ``key_serializer``. Both ``read`` and ``write`` short-circuit when ``ttl_seconds <= 0``, so a TTL of zero disables both layers symmetrically: an opted-out user never gets secret values written to disk at all. c ||_||_yN) _basename_key_serializerr$basenamekey_serializers r__init__zDiskCache.__init__ds!-rNc8t|dz |jz S)Ncache)rrHr$r2s rrCzDiskCache.pathhs!),w6GGrc|dkry t|j|dd5}tj|}dddt tr#|jd|j|k7ryt|}||j|r|SdS#1swY_xYw#ttj f$rYywxYw)zEFresh cached entry for ``key``, or None (I/O error, mismatch, stale).rNrr)encodingkey) openrCjsonloadOSErrorJSONDecodeErrorr4r5r6rIrr&)r$rTr%r2fr:entrys rreadzDiskCache.readks !  dii *C'B 'a))A, ''4(GKK,>$BVBVWZB[,["7+)enn[.IuStS ' '--.  s'B%BB%B"B%%CCc|dkry|j||j|jd} t|j ||y#t $rYywxYw)z[Persist ``entry`` atomically at mode 0600; no-op when ``ttl_seconds <= 0`` or on I/O error.rN)rTrr!)rIrr!rrCrX)r$rTr[r%r2r:s rwritezDiskCache.writeysY !  ..s3 ]b]m]mn  dii 2G <   sA AAcn |j|jy#ttf$rYywxYw)z6Delete the on-disk cache file if present (idempotent).N)rCunlinkFileNotFoundErrorrXrPs rclearzDiskCache.clears3  IIi ' ' )!7+   s "44rKr9rLzCallable[[K], str]r'NonerGr2Optional[Path]r'r)rTrDr%r r2rfr'Optional[CachedFetch] rTrDr[r r%r r2rfr'rdr2rfr'rd) r)r*r+r,rMrCr\r^rbr.rrrrVs" .H Trrc@eZdZdZddZ d d dZd d dZd d dZy) rzTwo-layer cache: in-process dict (L1) over a :class:`DiskCache` (L2). L1 saves repeated fetches WITHIN one process (CLI startup, gateway hot-reload); L2 saves them ACROSS back-to-back short-lived processes. c6i|_t|||_y)N)rL)memoryrdiskrJs rrMzSecretCache.__init__s,. "+H^"T rNc|jj|}|r|j|r|S|r|n|jj |||}|||j|<|S)zFresh entry from L1, else from L2 (promoted into L1), else None. ``read_disk`` swaps in an alternative L2 reader (e.g. an encrypted file). )rlr6r&rmr\)r$rTr%r2 read_diskcached disk_cacheds rlookupzSecretCache.lookups` % fook2M%.ikDIINN3 U^4_  "*DKK rc^||j|<|jj||||yrG)rlrmr^)r$rTr[r%r2s rstorezSecretCache.stores&  C UK;rcn|jj|jj|yrG)rlrbrmrPs rrbzSecretCache.clears"   "rrc)NN) rTrDr%r r2rfroz-Optional[Callable[[], Optional[CachedFetch]]]r'rgrGrhri)r)r*r+r,rMrrrtrbr.rrrrs6 UNRJN G Sh <#rr)agent.secret_sources.base FetchResult)rvis_valid_env_name)rwrxctj|}|tdtd|ddl}ddlm}|t|g|t|j|d|dS)Nzmodule z has no attribute r) warn_once) _PLUGIN_COMPAT_LAZYr6AttributeErrorr) importlibhermes_cli.plugin_compatrzgetattr import_module)nametargetr~rzs r __getattr__rse $ $T *F ~wxl2DTHMNN2 h&v& 9**6!95vay AAr)rr9r'r9rGre)r:objectr'rg)rCrr:r5r'rd)r, __future__rrrVr# dataclassesrpathlibrtypingrrrr r r1r utilsr __all__rr rrrrDrrr|rr.rrrs# !==.# E  QQ Q D> CL2 2j#'!*#R@K Br