߲jX- UdZddlmZddlZddlZddlZddlmZmZddl m Z m Z ddl m Z mZddlmZddlmZdd lmZmZmZmZmZmZmZmZd Zd Zd Zd ed<e ddZ d,dZ!d-dZ"d.dZ#d/dZ$Gdde%eZ&eee&ee%fZ'd0dZ(d1dZ)e GddZ*e&jVde&jXde&jZde&j\de&j^de&j`d iZ1Gd!d"eZ2ejfd#Z4ejfd$Z5d2d%Z6d3d&Z7ejpd' d4d(Z9d)ded* d5d+Z:y)6a7Secret-source contract: the ABC every secret backend implements. A *secret source* resolves credentials from an external secret manager into env-var-shaped values at process startup, AFTER ``~/.hermes/.env`` has loaded and BEFORE the rest of Hermes reads ``os.environ``. The contract is deliberately narrow: read-only; startup-time and synchronous (one ``fetch()`` per process per HERMES_HOME, under a registry-enforced wall-clock timeout, no background refreshers); never raises, never prompts (errors go in ``FetchResult.error`` with an :class:`ErrorKind`; interactive auth belongs in the CLI ``setup`` flow); sources fetch, the orchestrator (``registry.apply_all``) applies. ``SECRET_SOURCE_API_VERSION`` gates plugin compatibility: additive optional hooks with defaults do NOT bump it; required-signature changes do. ) annotationsN)ABCabstractmethod) ContextVarToken) dataclassfield)Enum)Path)AnyDict FrozenSetListMutableMappingOptionalSequenceTupleg^@g>@z.ContextVar[Optional[MutableMapping[str, str]]]_SOURCE_ENVIRONMENT hermes_secret_source_environment)defaultc,tj|S)zEInstall a per-fetch environment view without changing ``os.environ``.)rsetenvirons >/home/ubuntu/.hermes/hermes-agent/agent/secret_sources/base.pyset_source_environmentr&s  " "7 ++c.tj|yN)rreset)tokens rreset_source_environmentr#+se$rcRtj}||StjS)zDReturn the active per-fetch environment, or the process environment.)rgetosrrs rget_source_environmentr'/s$!%%'G)79rzz9rcpt}|tjurddlm}|ddSt |S)zEnvironment for a helper child that legitimately needs the caller's env: full process env (minus the terminal blocklist) in single-profile startup; ONLY the per-fetch view under multiplex, so no sibling profile's secrets leak.r)build_subprocess_envF) scrub_secretsinherit_profile_home)r'r&rtools.environments.localr)dict) source_envr)s rsource_child_envr/5s3()JRZZA#%eTT  rc4eZdZdZdZdZdZdZdZdZ dZ d Z d Z y ) ErrorKindzFailure taxonomy for :class:`FetchResult.error`; lets the orchestrator apply kind-dependent policy once (stale-cache fallback on NETWORK/TIMEOUT, never AUTH_FAILED).not_configuredbinary_missing auth_failed auth_expired ref_invalidnetwork empty_valuetimeoutinternalN) __name__ __module__ __qualname____doc__NOT_CONFIGUREDBINARY_MISSING AUTH_FAILED AUTH_EXPIRED REF_INVALIDNETWORK EMPTY_VALUETIMEOUTINTERNALrrr1r1As7`&N%NK!LKGKGHrr1c|j|D]\}}tfd|Ds|cStjS)zABest-effort mapping of helper-CLI failure text onto the taxonomy.c3&K|]}|v ywr rH).0toklowereds r z%classify_cli_error..Ys0#sg~0s)loweranyr1rG)messageruleskindtokensrMs @rclassify_cli_errorrUUsBmmoG f 00 0K   rcH t|S#ttf$r|cYSwxYw)z>``float(value)`` with ``default`` for malformed config values.)float TypeError ValueError)valuers r coerce_floatr[^s*U| z "s !!ceZdZUdZeeZded<eeZ ded<eeZ ded<eeZ ded<d Z d ed <d Z d ed <d Zded<eddZddZy ) FetchResultzOutcome of one source's fetch. ``secrets`` is what the source *would* contribute; ``applied``/``skipped`` serve the legacy fetch-and-apply entry points and stay empty in ``fetch()``.)default_factoryDict[str, str]secretsz List[str]appliedskippedwarningsN Optional[str]errorzOptional[ErrorKind] error_kindzOptional[Path] binary_pathc|jduSr )reselfs rokzFetchResult.okuszzT!!rc$||c|_|_|Sr )rerf)rjrerSs rfailzFetchResult.failys&+T# DO r)returnbool)restrrSr1rnz 'FetchResult')r;r<r=r>r r-r`__annotations__listrarbrcrerfrgpropertyrkrmrHrrr]r]fs{-$D9G^9t4GY4t4GY45Hi5E=&*J#*"&K& ""rr]z:Run `hermes secrets {name} setup` to finish configuration.z`` section and may be malformed.NrH)rjcfg home_paths rfetchzSecretSource.fetchsrcZtt|txr|jdS)Nenabled)ro isinstancer-r%rjrs r is_enabledzSecretSource.is_enableds"JsD)@cggi.@AArcptt|txr|jd|jS)zMay this source overwrite vars .env / the shell already set? Never extends to vars claimed by another source (a config error the orchestrator warns about).override_existing)rorr-r%rrs rrzSecretSource.override_existings7JsD)U 3T5S5STV Vrct|tr>|jr2t|j |jxs |j S|j S)z?Name of the env var holding this source's bootstrap credential.)rr-r~rpr%rrs r token_envzSecretSource.token_envsE c4 T%7%7swwt112Ld6L6LM M%%%rcd|jrt|j|hStS)z>Env vars the orchestrator must never let ANY source overwrite.)r~ frozensetrrs rprotected_env_varszSecretSource.protected_env_varss(373E3Ey$..-./V9;Vrclt|xsijdtt}|dkDr|StS)z;Wall-clock budget the orchestrator enforces around fetch().timeout_secondsr)r[r%DEFAULT_FETCH_TIMEOUT_SECONDS)rjrvals rfetch_timeout_secondsz"SecretSource.fetch_timeout_secondss4CI2??+<>[\8:Ags@#@@rciS)zLInformational ``{key: {"description": str, "default": Any}}`` for setup UIs.rHris r config_schemazSecretSource.config_schemas rc|y|jj|xstj|d}|j|j|j |S)zPOne-line actionable next step for a failed fetch (pure); "" suppresses the hint.rx)ryr)rr%_GENERIC_REMEDIATIONformatryr)rjrSrtemplates r remediationzSecretSource.remediationsU <))--d3Y7K7O7OPTVX7YDII9LMMr)rr-rr rnr])rr-rnro)rr-rnrp)rr-rnzFrozenSet[str])rr-rnrW)rnr-)rSzOptional['ErrorKind']rr-rnrp)r;r<r=r>SECRET_SOURCE_API_VERSIONrwrqryrzr|r}r~rrrrrrrrrrrrrHrrrurus 1K0D#NE3OE3 FM #'M='s&+t+.0+0@@BV & WA Nrruz^[A-Za-z_][A-Za-z0-9_]*$z<\x1b(?:\[[0-9;?]*[ -/]*[@-~]|\][^\x07\x1b]*(?:\x07|\x1b\\)?)cXt|xrttj|S)z8True when ``name`` is a legal environment-variable name.)ro _ENV_NAME_REmatch)rys ris_valid_env_namers! : 8$|11$788rc6tjd|xsdS)zDStrip ANSI escape sequences (whole CSI/OSC sequences, not just ESC).rx)_ANSI_REsub)texts r scrub_ansirs <<DJB ''r)stdinc  tjt||dddd||S#tj$r}t ||d}~wt $r}t d|d||d}~wwxYw)z``subprocess.run`` an argv list (never a shell), capturing utf-8 text; timeout and spawn failure become ``RuntimeError``. Callers own returncode interpretation.Tzutf-8replace)envcapture_outputrencodingerrorsr9rNzfailed to invoke z: ) subprocessrunrrTimeoutExpired RuntimeErrorOSError)argvrr9rztimeout_messagerexcs rrun_clirs{H~~ JC4'Zc5    $ $5?+4 H.ugRu=>CGHs %(A* A A*A%%A*rH) allow_env extra_envr9c d}g||Dcic])}|tjvs|tj|+}}|r|j||jddt t |dj }t|||||d|dd}|jxsd |_t|jxsd |_ |Scc}w) a<Run a secret-manager helper CLI with a minimal, allowlisted env (never the full post-dotenv ``os.environ``): PATH/HOME/locale basics plus ``allow_env`` and ``extra_env``. ``NO_COLOR=1`` + ANSI-scrubbed stderr; stdin is /dev/null so a prompting helper fails fast. Pass user refs AFTER a ``--`` terminator.) PATHHOME USERPROFILE SYSTEMROOTTMPDIRTEMPLANGLC_ALLXDG_CONFIG_HOME XDG_DATA_HOMENO_COLOR1rz timed out after z.0fs)rr9rzrrx) r&rupdate setdefaultr rpryrstdoutrstderr) rrrr9 base_keepkrryprocs rrun_secret_clirs GI%=y%=9%= Qbjj1bjjm  QC Q 9NN:s# DG  " "D 4S'&*V+ __future__rr&rerabcrr contextvarsrr dataclassesrr enumr pathlibr typingr r rrrrrrrrDEFAULT_CLI_TIMEOUT_SECONDSrqrrr#r'r/rpr1rrUr[r]r?r@rArBrDrFrrucompilerrrrDEVNULLrrrHrrrs # #)(XXX!&"CC !CTR, %:  T "eIx}45 6   0Z \ k k g b ?N3?NHrzz56 2::U V9 ( 0:/A/A H  H), HFa HGIpt$?!D_r