߲j,nUdZddlmZddlZddlZddlZddlZddlmZm Z m Z m Z ddl m Zddl mZej"eZd%ddd&d Zd Zdad ed <d'd Zd(d)dZdZd(dd d*dZd+dZd,dZd-dZddfdefddfdej@fdZ!ded<d.d Z"ddd! d/d"Z#d0d#Z$d1d$Z%y)2zCross-adapter helpers shared by gateway/platforms/* and plugins/platforms/*. Kept dependency-light (stdlib + ``agent.secret_scope``) so every adapter can import it at module top level without cycles. ) annotationsN)AnyCallableIterableOptional)UnscopedSecretError) get_secretF)external_fallbackc t|d}|%|r#t t j |}||S|S#t$rtj|}YMwxYw)aScope-aware credential read with the default-profile startup fallback. An installed profile secret scope is authoritative: a scoped miss returns ``default`` (never borrow another profile's value from ``os.environ``). The DEFAULT profile constructs and sends *unscoped* under multiplexing, where a bare ``get_secret`` raises ``UnscopedSecretError``; there ``os.environ`` is that profile's own value, so fall back to it. ``external_fallback`` adds one rung for startup gates that run before any scope exists: an unscoped miss consults a one-shot build of the profile's own secret scope, so externally managed credentials (Bitwarden etc., only ``BWS_ACCESS_TOKEN`` in ``.env``) are visible to ``check_requirements``. N)_scoped_get_secret_UnscopedSecretErrorosgetenv_current_scope_unscoped_profile_secretsget)namedefaultr vals >/home/ubuntu/.hermes/hermes-agent/gateway/platforms/_shared.pyget_scoped_secretrse t, {(^-=-E')--d3/3.w. iios ;AAcddlm}|S)Nrcurrent_secret_scope)agent.secret_scoperrs rrr-s7  !!Optional[dict]_UNSCOPED_PROFILE_SECRETSct) ddlm}ddlm}t ||atStS#t $r!tjddiaYtSwxYw)z\Process-cached profile secret mapping (external resolvers are slow); failures degrade to {}.r)build_profile_secret_scope)get_hermes_homezyCould not build the profile secret scope; externally managed credentials will not be visible to the startup gate (#95216)T)exc_info) rrr hermes_constantsr!dict Exceptionloggerwarning)r r!s rrr5sp!( + E 8(,-GHY-Z([ % %$ $$  + NN7AE  G)+ % $$  +s"6"A A cR|s|Stjt5ddlm}m}|}|>|r7|j |}||nt|jcdddSdddtj|xs|jS#1swY0xYw)uAllow/deny gate env read with per-profile isolation, always stripped. With a profile secret scope installed AND multiplexing active, a scoped miss returns ``default`` instead of falling through to ``os.environ``, which may hold ANOTHER profile's first-writer bridged value (the YAML→env bridges are first-writer-wins; allowlist leak, #72348). Single-profile deployments behave exactly like ``os.getenv``. rris_multiplex_activeN) contextlibsuppressr%rrr+rstrstriprr)rrrr+scopers rplatform_gate_envr1Es    Y '@P$&  !4!6))D/C!k7s3x~~/? @@@ IIdO &w - - //@@s ABB&ct|tr>|jdddk(r( tj|}t|t r|S|S#t $r|cYSwxYw)aBDecode a JSON-encoded allowlist written by ``hermes config set``. String-typed defaults keep list literals verbatim on write (``allowed_chats`` is declared as ``""``), so the config can hold ``'["-100","-200"]'`` as a string. Malformed JSON passes through unchanged and keeps the legacy comma-split path. N[) isinstancer.lstripjsonloads ValueErrorlist)rawloadeds rdecode_json_list_literalr=Ys`#s Ra 0C 7 ZZ_F fd #M J  J sA AAT)blank_is_unsetc|r)t|d}|t|jr|S|xsij|}|"|r"t |tr|js|S|S)uThe ONE per-profile setting reader: explicit env ``env`` → the profile's YAML ``config.extra[key]`` → ``default``. The env rung is the owning profile's, read through ``get_scoped_secret``: a secondary multiplex profile sees its own ``.env`` and a miss falls to ITS YAML, never to the launch process's ``os.environ`` (which holds the default profile's bridged values); single-profile and default-profile installs read ``os.environ`` there, keeping the documented env-over-YAML contract (an explicit ``DISCORD_ALLOW_MENTION_EVERYONE=false`` beats ``everyone: true``, #108440; ``TELEGRAM_REACTIONS=true`` beats the stock ``reactions: false``, #109032). A blank env value is unset. An explicit ``False``/``0`` in YAML is a real value (``require_mention: false`` must not fall to ``default``). A blank YAML string is unset by default; readers whose YAML key means "clear it" (``allowed_channels: "" `` = no whitelist) pass ``blank_is_unset=False`` so only a missing/``None`` key falls through. N)rr.r/rr5)extrakeyenvrr> env_valuevalues rextra_or_secretrEjsd  %c40  S^%9%9%;  [b  c "E }Juc,B5;;= Lrch ddlm}m}t|xr |duS#t$rYywxYw)aoTrue when running inside a multiplexed secondary profile's scope. Secondary-profile adapters are constructed/connected inside ``_profile_runtime_scope`` (secret scope installed + multiplex active). The DEFAULT profile under multiplexing runs unscoped and keeps the legacy ``os.environ`` precedence, so YAML->env bridges must skip only when True. rr*NF)rrr+boolr%r*s rprofile_scopedrHs9P')P.B.DD.PQQ s "% 11c(tdfd }|S)ur``set_env(name, value)`` for ``apply_yaml_config_fn`` hooks: writes ``os.environ[name]`` only when the var is unset (explicit env wins over YAML) and NEVER while a multiplexed secondary profile's scope is active — the gateway loads every secondary's config inside ``_profile_runtime_scope``, so a write there would pin that profile's policy process-wide and the default profile's adapters would read it as their own (first-writer-wins poisoning, #80099). Hooks seed the same values into the returned ``extra`` so each profile's adapter reads its own. Lists are comma-joined; ``None`` is skipped. c|stj|ryt|trdj d|Dn t |tj |<y)N,c32K|]}t|ywN)r.).0vs r z3yaml_env_setter..set_env..s#:qCF#:s)rrr5r:joinr.environ)rrDskips rset_envz yaml_env_setter..set_envsG =DBIIdO >HPT>U388#:E#::[^_d[e 4r)rr.rDrreturnNone)rH)rTrSs @ryaml_env_setterrWs  Df Nrc0ddlm}|t|S)zStandalone-sender failure envelope with vendor exception text redacted (the same helper ``send_message`` uses), so a token or signed URL in an httpx/aiohttp error never reaches the model transcript.r)_error)tools.send_message_sendersrYr.)messagerYs r send_errorr\s2 #g, rc ||vSrMcfgrAs rras sczrc4t|jSrM)r.lowerrOs rrarasSV\\^rc(|j|dvS)N)Nr(rr_s rrarasSWWS\;rc(|j|duSrMrfr_s rrarasSWWS\5rc|SrMr^rds rrarasrc ||vSrMr^r_s rraras cSjr)rcr.csvr7zCdict[str, tuple[Callable[[dict, str], bool], Callable[[Any], Any]]] _YAML_KINDSct}i}|D]6\}}}t|\}}|||s||||<|||||8|xsdS)a#Table-driven ``apply_yaml_config_fn`` body: for each ``(yaml_key, ENV_VAR, kind)`` row seed the original YAML value into the returned ``extra`` and bridge it to env through ``yaml_env_setter`` (env wins; skipped under a secondary profile's scope). ``None`` when nothing matched. N)rWrk) r`specrTseededrArBkindappliesencodes rapply_yaml_bridgerrsj GF+S$%d+ 3 c(F3K CC) * + >Tr)home_env home_defaultcvi}|D]a\}}}tt|dxsdj}|s1tjt 5|r||n|||<dddc|rBtt|dxsdjxs|}|r|t|ddd|d<|S#1swYxYw)u2Table-driven ``env_enablement_fn`` body: for each ``(ENV_VAR, extra_key, conv)`` row read the profile-scoped value, skip it when blank or when ``conv`` raises ``ValueError``, else seed ``conv(value)`` (``None`` conv keeps the stripped string). ``home_env`` seeds ``home_channel`` as ``{"chat_id", "name"}`` from ```` (else ``home_default``) with ``_NAME`` naming it — the core hook lifts that dict into a ``HomeChannel``. The name falls back to the literal ``"Home"``, the same rule the built-in platforms use. r(N_NAMEHome)chat_idr home_channel)r.rr/r,r-r9) rmrsrtseedrBrAconvr;homes rseed_extra_from_envr}sD3S$#C,2399;    , 3%)S sDI 3 3 3 $Xr28b9??AQ\ /3=NRZQ[[`Oaci=j#kD K  3 3s B//B8 cdfd }|S)a``is_connected`` for platforms whose only configuration is env: True when every ``names`` var is non-blank. Resolves ``hermes_cli.gateway.get_env_value`` at call time (scope-aware, .env-backed) so setup-status tests that patch it see the same value.c:ddlmtfdDS)Nrc3dK|]'}j|xsdj)yw)r(N) get_env_valuer/)rNr gateway_mods rrPz9env_is_connected..is_connected..s*UtK--d39r@@BUs-0)hermes_cli.gatewaygatewayall)configrnamess @r is_connectedz&env_is_connected..is_connecteds0UuUUUr)rrrUrGr^)rrs` renv_is_connectedrs V rcH t|S#ttf$r|cYSwxYw)z/``int(value)`` or ``default`` when unparseable.)int TypeErrorr9)rDrs r coerce_portrs*5z z "s !!rM)rr.rrr rGrUr)rUr$)r()rr.rr.rUr.) r@rrAr.rBr.rrr>rGrUr)rUrG)rUzCallable[[str, Any], None])r[rrUr$)r`r$rmzIterable[tuple[str, str, str]]rUz dict | None)rmz6Iterable[tuple[str, str, Callable[[str], Any] | None]]rsz str | Nonertr.rUr$)rr.rUzCallable[[Any], bool])rDrrrrUr)&__doc__ __future__rr,r7loggingrtypingrrrrrrr r r getLogger__name__r&rrr__annotations__rr1r=rErHrWr\r.dumpsrkrrr}rrr^rrrs #  44K?   8 $/SX/." -1>0 % 0(".2'+7:4 && *+C D ;S A 5{ C ($** 5 T P (04",CFPT2 r