߲jHJUdZddlmZddlZddlZddlZddlZddlm Z m Z ddl m Z ddl mZmZmZmZddlmZmZmZmZmZmZmZddlmZej8eZiZd e d <iZ!d e d <iZ"d e d<da#ejHZ%dZ&e GddZ'e GddZ(e GddZ)d,dZ*dddd d-dZ+d.dZ,ddd/dZ-ddd/dZ.dd d0dZ/ddd1dZ0d2d Z1d3d!Z2d3d"Z3 d4d#Z4d5d$Z5ddd6d%Z6d7d&Z7d'Z8d8d(Z9Gd)d*Z: d9 d:d+Z;y);uzSecret-source registry + apply orchestrator. Owns everything that must be uniform across backends: registration (name/scheme uniqueness, API-version gating), the wall-clock timeout around ``fetch()``, precedence (mapped beats bulk; within a shape ``secrets.sources`` order, else registration order; first claim wins), ``override_existing`` semantics (may beat .env/shell, never another source, never a protected var), cross-source conflict warnings, and provenance. Startup entry point: :func:`apply_all` via ``hermes_cli.env_loader``; plugins register through ``PluginContext.register_secret_source()`` → :func:`register_source`. ) annotationsN) dataclassfield)Path)DictListMutableMappingOptional)SECRET_SOURCE_API_VERSION ErrorKind FetchResult SecretSourceis_valid_env_namereset_source_environmentset_source_environment)hermes_home_keyDict[str, SecretSource]_SOURCESDict[str, str]_SOURCE_ORIGINSz"Dict[str, Dict[str, SecretSource]]_SCOPED_SOURCESF))zagent.secret_sources.bitwardenBitwardenSource Bitwarden)z agent.secret_sources.onepasswordOnePasswordSource 1Password)zagent.secret_sources.command CommandSourcecommandcHeZdZUdZded<ded<ded<ded<dZded <y ) AppliedVarz7Provenance record for one env var the orchestrator set.strnamesourceshapebool overrode_envF authoritativeN)__name__ __module__ __qualname____doc____annotations__r&B/home/ubuntu/.hermes/hermes-agent/agent/secret_sources/registry.pyrr/s&A I K J M4r-rceZdZUdZded<ded<ded<eeZded <eeZded <eeZ ded <eeZ ded <eeZ ded <y) SourceReportz4One source's outcome within an :class:`ApplyReport`.r r!labelr resultdefault_factory List[str]appliedskipped_existingskipped_claimedskipped_protectedskipped_invalidN) r'r(r)r*r+rlistr6r7r8r9r:r,r-r.r0r0<sb> I J t4GY4"'"=i=!&t!y>!&t!r+dictr?r@propertyrDr,r-r.r=r=JsF8"'"=G =(-d(CJ%C 6Iy6 %%r-r=c\t|tsd|dS|jxsd}|r3|jddj r||j k7rd|S|j tk7rd|d|j dtS|jd vrd|d |jSy ) zJReason a source is unregistrable (already formatted for the log), or None.zIgnoring secret source z$: does not inherit from SecretSource_z)Ignoring secret source with invalid name zIgnoring secret source 'z$': built against secret-source API vz, this Hermes speaks v)mappedbulkz)': shape must be 'mapped' or 'bulk', got N) isinstancerr!replaceisalnumlower api_versionr r#)r"r!s r._validate_sourcerRZs fl +( 2VWW ;; "D t||C,446$$**,:N:4(CC 66*4&1&&''=>W=XZ [ ||--)$/XY_YeYeXhii r-)rNbuiltinscopec\t}|rtj|yjt5t t }|%|jtj|i|vr"|s tjd dddytfd|jDd}|r,tjdj| dddy|t ntj|i}|<| |rdndt<dddy#1swYyxYw) zRegister a secret source; True on success. Rejections are logged, never raised. ``replace`` allows same-name override (last-writer-wins); scheme collisions across *different* names are always rejected.FNz9Secret source '%s' already registered; ignoring duplicatec3|K|]3\}}|k7r)jr|jjk(r|5ywrB)scheme).0nor!r"s r. z"register_source..zs:TDAqdv}}V]]9RTs9<zKIgnoring secret source '%s': scheme '%s://' is already owned by source '%s'rSpluginT)rRloggerwarningr!_REGISTRY_LOCKrFrupdatergetnextitemsrW setdefaultr) r"rNrSrTproblem effectiveownertargetr!s ` @r.register_sourceriis% v&Gw ;;D GN     _00; < 9 W NNVX\ ] GGTIOO$5TUY[  NNh 7GG#]0J0J5RT0Ut =18IhOD !!G" #G" sAD"A D"'2D""D+ctt}|jtj |xs t i|S)zOGlobal sources overlaid with the scope's (default: current home) registrations.)rFrr`rrar)rTmergeds r._mergedrls1 (^F MM/%%e&@/@"EF Mr-rTctt5t|j|cdddS#1swYyxYwrB)_ensure_builtin_sourcesr_rlrar!rTs r. get_sourcerqs2 (u~!!$'(((s5>ctt5|tntj |ij |cdddS#1swYyxYw)z>#3Z41a7J7J17MQY7Y!Q$ZZ o))/*;R@AFMMO$%%Z%%s#B' B! B!AB'!B''B0c "t5tr dddydatD]1\}}} t||g}t t ||d3 dddy#t $rtjd|dYawxYw#1swYyxYw)zIdempotently register the bundled sources (lazy so import stays cheap; per-source guarded so one broken source can't block the others).NT)fromlist)rSz+Failed to register bundled %s secret sourceexc_info) r__BUILTINS_LOADED_BUILTIN_SOURCES __import__rigetattr Exceptionr]r^) module_name class_namer1modules r.roros  d   d d .> d *KU d#K:,G ; ; =tL d d d dLe^bc d d ds3BB*AB!B?BBBBct5tjtjtjdadddy#1swYyxYw)NF)r_rclearrrrr,r-r._reset_registry_for_testsrsB !  !!!s ?AAcj}tjjddj} dfd }|j |} |j |} |jd t%|ts?tjdt|j dtj"S|S#tjj$r_|jtjd|ddjd tjcY|jd St$r]} tjd t| j d | tj"cYd} ~ |jd Sd} ~ wwxYw#|jd wxYw)uRun source.fetch() under a wall-clock budget; never raises. A worker thread enforces the budget: a source that blows it is reported as TIMEOUT and its eventual result discarded (the thread may linger until process exit — acceptable for a startup-only path). z secret-src-) max_workersthread_name_prefixcvt} jt|S#t|wxYwrB)rfetchr)tokencfgenviron home_pathr"s r._fetchz#_fetch_with_timeout.._fetchs2*73E 0||C3(/(/s+ 8)timeoutzfetch exceeded z.0fuBs budget — startup continued without this source (raise secrets.z-.timeout_seconds if the backend is just slow)F)waitz fetch raised z: Nzfetch returned z instead of FetchResult)rEr )fetch_timeout_seconds concurrentfuturesThreadPoolExecutorr!submitr2 TimeoutErrorcancelr failr TIMEOUTshutdownrtyper'INTERNALrM) r"rrrrexecutorrfuturer2excs ```` r._fetch_with_timeoutrs**3/G!!44YdekepepdqWr4sH& 0 0( g]]7]3F u% fk *}!!ODL4I4I3JJa"b"+"4"46 6 M!!.. 9 MMO=%%}EL)/ 5b'd'0&7&79 9 u% g=%% d3i6H6H5IC5&QS\SeSef fu% g u%sDF9 CA'F6=F9F6AF1F6F91F66F99G cL|j|}t|tr|SiSrB)rarMrF) secrets_cfgr!rs r._sectionrs$ //$ CS$'3/R/r-ct|Dcic]}|j|}}|jd}t|tr!|Dcgc]}t|t s|c}ng}|Dcgc] }||vs| }}|r9t jddj|dj|xsdtj|Dcgc] }||vs| c}t |z} g} | D]5} || jt|| r| j|| 7| Scc}wcc}wcc}wcc}w#t$rt jd| dYqwxYw) zEnabled sources: ``secrets.sources`` order first, then registration order (mapped-vs-bulk precedence is applied on top by :func:`apply_all`).rmr>z7secrets.sources names unknown source(s): %s (known: %s)z, nonez0Secret source '%s' is_enabled() raised; skippingTr)r{r!rarMr;r r]r^joinrFfromkeys is_enabledrappendr) rrTr"r>explicitenamesrYunknownorderenabledr!s r._ordered_enabled_sourcesrsQ2>E1JKvv{{F"KGKy)H;EhPT;U 71Jq#$6Q 7[]E4Q1G#3q4G4Pyy)499W+=+G I MMe<qG|1>!E"!E"c|``); "" for the default profile.profiles)HERMES_PROFILE_NAMEHERMES_PROFILErIdefault)rparentr!osrrastrip)rresolvedenv_namevalues r._active_profile_namerss ? ??  : -(--== = x,224 Ui'L r-)_API_KEY_TOKEN_SECRET_KEY _PASSWORDcd|jddjz}|r|j|sy|dt| }|r"t |r|jt r|SdS)zBMap ``FOO_`` to ``FOO`` for the active profile when safe.rJ-N)rNupperendswithlenr_ALIAS_SUFFIXES)varprofilesuffixaliass r._profile_alias_targetr1sd 7??3,224 4F #,,v. 3v;, E/65>>/;Z5d`ddr-cLeZdZdZ ddZ ddZ ddZy) _ApplierzPApply phase state for one orchestrated pass: sequential, first-wins, attributed.cP||||f\|_|_|_|_i|_yrB)envreport protectedpreserveclaimed)rCrrrrs r.__init__z_Applier.__init__=s)?BFIW_?_<$+t~t}') r-c t|j|jxs |j|}|jjj ||j sy |j|}|jjD]\}} t|trt| ts'|j||||| r|s?t||} | sN| |vsS| |jvsb|j|||| | sx|j j d|d| d|dy#t$rd}YwxYw)N)r!r1r2Fzapplied profile-scoped z as z (active profile ))r0r!r1rr>rokoverride_existingrsecretsrcrMr _try_applyrrwarnings) rCr"rr2rsupplied_directlysroverriderrrs r. apply_sourcez_Applier.apply_sourceBs$ v{{&,,2M&++V\ ] ""2&yy  //4H!....0 pJCc3'z%/E??2vxeDG)#w7E%'88U$,,=VFHeUK&&)@T%Pabiallm'no p H s$D// D=<D=cDt|s|jj|y||jvr|jj|y||j vra|j j||jjj|d|j |d|jdyt|jj|}|r,||jvs|s|jj|y||j|<|j|j |<|jj|t!||j|j"||xr||jv|jj$|<y)z=Apply one var through the shared guard chain. True = applied.Fz: kept value from z; uW also supplies it (first source wins — remove one binding or reorder secrets.sources))r%r&T)rr:rrr9rr8rr@r!r$rrarr7r6rr#r?)rCrr"rrrexisteds r.rz_Applier._try_applyWsc!%    % %c * $..  ' ' , $,,     % %c * KK ! ! ( (C50B4<Bp*$',0r-rc ||ntj}t}t|tr|ni}t |t |}|s|S|jd}t|trtd|Dn t}|jddr t|nd}|D cgc]} | jdk(s| c} |D cgc]} | jdk(s| c} z} g} i} | D]m} t|| j}t| |||}| j| ||f | j!|D]}| j#|| j o| Dchc]7\}}}|j&s|j(D]}t|t*s|9}}}}t-||| |}| D]\} }}|j/| |||||Scc} wcc} w#t$$rYwxYwcc}}}w) uFetch from every enabled source and apply the merged result to ``environ`` (default ``os.environ``). Precedence per env var, most-specific intent first: (1) ``secrets.preserve_existing`` names always keep a pre-existing value, even against ``override_existing: true``; (2) pre-existing .env/shell value, unless the winning source has ``override_existing: true``; (3) mapped sources in configured order; (4) bulk sources in configured order. First claim wins: a later source carrying the same var gets ``skipped_claimed`` plus a conflict warning — never a silent clobber, and ``override_existing`` never applies across sources. Profile aliasing: under a named profile an applied ``FOO_`` (credential-shaped suffixes only) also hydrates canonical ``FOO``, under the same guards; disabled with ``secrets.profile_alias: false``. 1. 2. 3. 4. See #58073. See #51447. rmpreserve_existingc3K|]6}t|ts|js%|j8ywrB)rMr r)rXrYs r.r[zapply_all..s/qJq#>> profile_aliasTrIrKrL)rrr=rMrFrrrar;rrr#rr!rrprotected_env_varsrdrrrr rr)rrrrrr preserve_rawrrr}orderedfetchesrr"rr2rrJrvrappliers r. apply_allrrs(('bjjC ]F!+K!>+BK&{/):TUG  ??#67L(t<LBK+ 1<RV1W"9-]_G"9QQWW%8q9G "I{FKK0$VS)SAV,- 005 7$$S&++6 7 +2ccwq!QQTT199caPZ[\^aPbcccsFIx8G&NVVS&';LMN M):r s # (77-   8 $%' !&"$$6838 "         = =  =  % %  % >CTY+/(48<59( @DY15 -9=",0- % d !#!9#>I#L0 KO. Ie55r=A595EP5r-