߲j5|dZddlmZddlZddlZddlmZddlZddlmZm Z ddl m Z ddl m Z mZmZe rddlmZej$eZd Zd d efZGd d eZedGddZddZddZddZddZddZdddd d dZ d!dZ dddd d"dZ!y)#uOne frozen routing identity per inbound gateway event. A multiplexed gateway answers three questions about every event, and until now answered them in three places that only agreed because they read the same fallback chain: WHICH bot received it (``_transport_owner``), WHO may admit it (``_authorization_home_for_source``) and WHERE the turn runs (``_resolve_profile_home_for_source`` / ``_session_key_profile``). :func:`resolve_identity` answers all three once and pins the result on the source as a wire-invisible dynamic attribute (like ``_transport_adapter_ref``); the existing helpers read it when present and keep their fallback chain when absent, so a source built outside the runner still resolves as before. ``SessionSource.profile`` stays the serialized runtime profile — ``None`` on the wire means the receiving bot's own profile — so nothing here changes the wire format or any historical ``agent:main`` key. ) annotationsN)suppress) dataclassfield)Path) TYPE_CHECKINGAnyOptional) SessionSource _identity_transport_adapter_ref_authorization_profile_homeceZdZdZy)IdentityUnresolvedzUnder multiplexing the event's runtime profile could not be established (an explicit ``profile_routes`` entry targets a profile this gateway does not serve). Callers drop the event; it must never fall through to the default profile.N)__name__ __module__ __qualname____doc__=/home/ubuntu/.hermes/hermes-agent/gateway/session_identity.pyrr#sArrT)frozenceZdZUdZded<ded<ded<ded<dZd ed <ed d d Zded<ed d d Zd ed<e ddZ e ddZ e ddZ ddZ y )RoutingIdentityuEverything a turn needs to know about who it is, resolved once at ingress. ``transport_profile`` owns the receiving adapter (its credential and allowlist); ``runtime_profile`` is the profile that executes the turn — the same name unless a ``profile_routes`` entry re-homed the event. Both are explicit (``"default"`` is spelled out); ``None`` never means default here. ``multiplexed`` is False for a standalone gateway, whose keys stay in the legacy ``agent:main`` namespace whatever profile it was launched with. strtransport_profileruntime_profilerauthorization_home runtime_homeTbool multiplexedNF)defaultcomparehashzOptional[weakref.ref] transporttransport_inferredc2ddlm}||jS)u``agent:`` prefix for this identity's session keys — byte-identical to :func:`gateway.session._session_key_namespace` for every historical key.r)_session_key_namespace)gateway.sessionr(session_key_profile)selfr(s r namespacezRoutingIdentity.namespaceBs ;%d&>&>??rc |jdz S)Nzstate.db)rr+s r store_pathzRoutingIdentity.store_pathIs  :--rc6|jr |jSdS)zThe ``profile=`` argument :func:`gateway.session.build_session_key` expects for this identity: the runtime profile under multiplexing, else ``None`` (legacy namespace).N)r!rr.s rr*z#RoutingIdentity.session_key_profileMs(,'7'7t##ATArc>|j|jSdS)zGThe live receiving adapter, or None when it is gone or was never known.N)r%r.s radapterzRoutingIdentity.adapterSs#'>>#=t~~G4Gr)returnr)r3r)r3 Optional[str])r3r )rrrr__annotations__r!rr%r&propertyr,r/r*r2rrrrr)sK(-T5u'UI$U %UENN @@ ..BB HrrcLt|td}t|tr|SdS)zDThe identity pinned on *source* by :func:`resolve_identity`, if any.N)getattr_IDENTITY_ATTR isinstancersourceidentitys r identity_ofr>Xs$v~t4H!(O<8F$FrctddfD]&}tt5t||ddd(tt5d|_dddy#1swYRxYw#1swYyxYw)uDrop the pinned identity AND the routed runtime profile so the next :func:`canonical_identity` re-routes from scratch — for sources a caller reuses across events whose routing may differ (a guild's cached voice source is shared by every speaker, and ``profile_routes[].user_id`` routes per speaker). ``source.profile`` is the previous event's routing *result*; left in place it short-circuits the route and the new speaker runs as the old one.profile_route_rejectedrN)r9rAttributeErrordelattrprofile)r<attrs rclear_identityrE^ss  !9;XY" n % " FD ! " "" . ! " "s AAA A(cPt|}||jr |jSdS)zThe receiving bot's profile to persist alongside a routing entry (``SessionEntry.transport_profile``); None outside multiplexing or when nothing resolved the source (an unknown transport is never guessed).N)r>r!rr;s rtransport_profile_ofrGks-6"H)1)=(BVBV8 % %`\``rc tj|fi|}tD]}t||d}|t |||!|S)z:func:`dataclasses.replace` that keeps the wire-invisible provenance (transport ref, authorization home, identity). A plain ``replace`` silently produces a source the runner can only route through heuristics.N) dataclassesreplace_PROVENANCE_ATTRSr8setattr)r<changescopiednamevalues rreplace_sourcerQrsO  37 3F!)d+   FD% () MrcRt|tr|jnd}|xsdS)N)r:rstrip)rPtexts r_namerV~s"&uc25;;=D <4r)r2r primary_homect|}||S t|||||S#t$r }tj d|Yd}~yd}~wwxYw)uNThe identity already pinned on *source*, else :func:`resolve_identity` — the one call every ingress path makes FIRST, before any key is derived. ``None`` = unresolved under multiplexing (``source.profile_route_rejected`` is set): the caller drops the event and says so once; it must never fall through to ``agent:main``.N)runnerr2rrWzidentity unresolved: %s)r>resolve_identityrloggerdebug)r<rYr2rrWr=excs rcanonical_identityr^s\6"H 67FW%' '  .4s! A AA c t|}|yttt|ddddsyt|}||Sddlm}ddlm}tt|ddxsd }tt|d dxs|}||k(rt|n||} ||k(r| nt|j|} | |_ t||| | d d } t|t| | S) uPin the identity of a source rebuilt from durable state (``SessionEntry.origin``, a ``sessions`` row, a cached copy) — no live adapter, so ``transport=None``: the restored row of the transport matrix, where delivery goes through the persisted transport owner or fails closed. *transport_profile* is what the routing index persisted at ingress (``SessionEntry.transport_profile``); ``None`` = a row written before the column existed, whose transport is unknown → nothing is pinned and the legacy heuristics (``_is_shared_bot_satellite``) keep deciding. Standalone gateways have nothing to restore (one bot, one home). Nconfigmultiplex_profilesFrget_profile_dir)get_process_hermes_home_primary_profile_namer"rCTrrrrr!r%)rVr r8r>hermes_cli.profilesrchermes_constantsrdr _resolve_profile_home_for_sourcerrrLr9) r<rYrtransport_nameexistingrcrdprimary_profile runtime_namerrr=s rrestore_identityrns,-N $79MuU V6"H38GF,CTJKXyOD9:MoL+9_+L $ &' ^ ,+n< &99&A B*@TV[\]KGF,CTJKO!7>.6v.>5?DVYvz40H#'M''/  %* "G] 63T : B,3KK,@F )%+%;%;GX%N" ],-X}1EXN DnU3D-E-MnRWXeRfjnRn,3,?GKK(TM O%&"-#$EUbd 1(3?3KT,/QUVmVoQp7,^<);F&x(34AgfiQS6T5U VEv/74? E7*B!CDD WVY -.6"0O"C$ ArErGrQrVr^rnrZrrrrsN #(//-   8 $-/Ln]AA  $+H+H+H\G a  =A'+D (+69$;I(% %(+%@M%%R=A'+DR R(+R69R$R;IRRr