߲jsvUdZddlmZddlZddlZddlZddlmZddlm Z m Z m Z m Z m Z ddlmZddlmZej$dZehd Zd Zd Zd(d Zd)d Zd*dZdZgZded<iZded<dZd+dZ d,dZ!d-dZ"d.dZ#d.dZ$d/dZ%d0dZ&d1dZ' d2dZ(d3dZ)d4dZ*d5d Z+ d6 d7d!Z,d8d"Z-d9d#Z. d:d$Z/Gd%d&Z0d5d'Z1y);aSingle-use OAuth grant hygiene: strip cloned grants from profiles, heal forked grants. Split out of ``hermes_cli/auth.py`` and re-exported there; origin helpers are imported lazily inside each function so ``hermes_cli.auth.`` patches still intercept (and no import cycle). ) annotationsN)Path)AnyDictListOptionalTuple)_decode_jwt_claims)file_signaturezhermes_cli.auth> anthropic xai-oauth openai-codex).anthropic_oauth.json)rr cjt|tsyt|jdxsdj j dk(xsdt t|jdxsdj xs-t|jdxsdjdS)NF auth_typeoauth refresh_token access_tokenz sk-ant-oat) isinstancedictstrgetstriplowerbool startswith)entrys A/home/ubuntu/.hermes/hermes-agent/hermes_cli/auth_oauth_grants.py_is_oauth_pool_payloadr $s eT " EIIk " (b)//1779WD I EIIo.4"5;;= > I uyy(.B / : :< HJc\t|jdxsdjdS)Nsourcer hermes_pkce)rrendswith)rows r _is_pkce_rowr'/s& swwx &B ' 0 0 ??r!c`ddlm}m}gggd}t|}tD]L}||z } |j s|j r$|j|dj|N|dz }|j s|S dd l m }|dz }|||s!|jr|j|r|S t#j$|j'd } t+| t,s|Sd } | j/d} t+| t,rt1| D]} | j/| } | t2vst+| t0s-| Dcgc]}t5|r|}}t7|t7| k7s`d} |dj| |r|| | <~| | =| j/d}t+|t,rIt8D]@} |j/| }t+|t,s%|s(|| =|dj| d} B| s|S || ||S#t$rtjd||dY,wxYw#t $r|cYSwxYw#tt"j(f$rd } YwxYwcc}w#t $rtjd|dY|SwxYw)uRemove forked single-use OAuth grants from a freshly cloned profile. Called after any path that copies credential files between profiles (``hermes profile create --clone-all``, the dashboard/TUI ``mirror_credentials`` flow). API-key pool rows are kept — a static key is safe to duplicate. Returns ``{"pool": [...provider ids], "providers": [...], "files": [...]}`` of what was stripped. Never raises: a clone must not fail because hygiene could not run — the caller logs the summary. r) _same_path_save_auth_store)pool providersfilesr-z"Could not remove cloned %s from %sTexc_info auth.json)get_default_hermes_rootz utf-8-sigencodingNFcredential_poolr+r, target_pathz6Failed to strip cloned single-use OAuth grants from %s)hermes_cli.authr)r*r SINGLE_USE_OAUTH_SINGLETON_FILESis_file is_symlinkunlinkappendOSErrorloggerdebughermes_constantsr1existssamefile Exceptionjsonloads read_textJSONDecodeErrorrrrlist!SINGLE_USE_REFRESH_POOL_PROVIDERSr len_DEVICE_CODE_BLOCK_PROVIDERS) profile_dirr)r*strippednametarget auth_pathr1root_auth_pathstorechangedr+ provider_identriesekeptr,blocks r$strip_cloned_single_use_oauth_grantsrY3s=(*bIH{#K0at# a~~6#4#4#6 !((. ak)I     <02[@ i 0  ! ! # (:(:>(JO 9.. .DE eT "G 99& 'D$: *Khh{+G#DD%gt4&H!.DQ.GAHDH4yCL( '' 4(,D%[) * +&I)T"8 KMM+.E%&5k*%,,[9   `I6 Ou a LL=t[[_L ` a  T)) *I. ` DiZ^  ` O`sTAH';I%I!J+J J'"I  I  II!J?J!J-,J-)rr expires_at expires_at_ms last_refresh List[str]_oauth_heal_noticeszDict[str, Tuple[Any, ...]]_oauth_heal_clean_markszoauth_heal_clean.jsoncRtjtj|S)zfThe fingerprint as it reads back from JSON (tuples become lists), so the on-disk compare is exact.)rDrEdumps) fingerprints r _json_shapercs ::djj- ..r!cd ddlm}|jdz tz S#t$rYywxYw)z?Where the persisted clean marks live, or None when unavailable.r_auth_file_pathcacheN)r7rfparent_OAUTH_HEAL_CLEAN_MARK_FILENAMErCres r_oauth_heal_clean_mark_pathrjs63 '''14SSS s # //ct}|y tj|jd}t |t sy|j|}t |tr|SdS#t$rYywxYw)u$The stored clean-mark fingerprint for ``provider_id``, or None. Pure cache read: any problem at all (absent, unreadable, corrupt, wrong shape) means "no mark", which falls through to the locked heal — the pre-existing behaviour. It must never raise into a credential path. Nutf-8r2) rjrDrErFrCrrrrH)rTpathdatastoreds r!_persisted_oauth_heal_fingerprintrpsw ' (D |zz$..'.:; dD ! XXk "F-6747 s%A** A65A6c.t}|y ddlm} tj|j d}t|tsi}|jDcic](\}}t|trt|tr||*}}}t|}|j||k(ry|||<ddlm} | |j |||dy#t $ri}YwxYwcc}}w#t $rt"j%d |d YywxYw) zRecord ``provider_id`` as clean for this exact fingerprint. Best-effort by design: a failed write only means the next process re-runs the heal, which is what it did before this cache existed. Nr)atomic_json_writerlr2)mkdir_under_hermes_homei)modez1%s: could not persist the forked-OAuth clean markTr.)rjutilsrrrDrErFrCrritemsrrHrcrr@rsrhr>r?) rTrbrmrrexistingkeyvaluemarksnew_markrss r_persist_oauth_heal_clean_markr|s ' (D |]+ zz$..'."BCH(D)H)1)9 %3#s# 5$(? J  {+ 99[ !X - %k< ,$E2 H   ] ?W[  ]]sEC0%C%C0 -C* "C00(C0 C'$C0&C'' C00!DDc.|t|<t||y)z0Stamp the clean mark both in memory and on disk.N)r_r|)rTrbs r_mark_oauth_heal_cleanr~s+6K("; z#_oauth_freshness.. sJrrJsg)defaultrexp)agent.credential_poolrrmaxmapr )rrkstampsbestrs r_oauth_freshnessrs} @$S Tqeiil TF T JS!:FCJTW XD s{ >!:;??F(-4 K UsA?cjddlm}t|Dcgc]\}}t|s|}}}|sy|j d}|D] }|s||j d|k(s|cSdD]@}|j |}||s|D]}||j ||k(s|ccSBycc}}w)zIndex of the root OAuth row that shares a grant lineage with *profile_row*. Only a copied row ID or shared token material establishes lineage. The same account/client can issue multiple independent grants; identity is not proof. rrNid)rr)r7r enumerater r) profile_row root_rowsrir candidatespidrxp_vals r_find_root_counterpartrs. )) 4R18Nq8Q!RJR  //$ C  9Q<##D)S0H1$U#  A|$-   Ss B/B/cddlm}t|}tD].}|j | ||||<|j |d0|j tj||S)zGReturn *target* carrying *winner*'s token pair, status markers cleared.r)_POOL_STATUS_FIELDSN)r7rr_OAUTH_TOKEN_FIELDSrpopupdatefromkeys)rOwinnerrmergedrxs r_adopt_oauth_materialr)sc3 &\F"" ::c? & +F3K JJsD ! "  MM$-- 345 Mr!cX tj|jd}t |t r,t|jdxsdjsy|jd|jd|jddS#ttf$rYywxYw) zDRead a ``.anthropic_oauth.json`` as a pool-row-shaped dict, or None.rlr2N accessTokenr refreshToken expiresAt)rrr[) rDrErFr= ValueErrorrrrrr)rmrns r_singleton_as_rowr6szz$..'.:; dD !TXXm-D-J)K)Q)Q)S/.1+. 00 Z s%BB)(B)cz|tvry t|S#t$rtj d|dYywxYw)aOne-time heal for installs that ALREADY forked a single-use grant into a profile. Forked copies are one credential with several owners: whichever profile rotated last holds the only live refresh token and every other copy (root included) is spent. Runs at profile ``load_pool()`` time for ``SINGLE_USE_REFRESH_POOL_PROVIDERS``: finds profile rows sharing LINEAGE with a root row (same pool id or shared token material), keeps the freshest rotation, writes it into ROOT when root's is older, and strips the profile's copy so the profile borrows root from then on. Idempotent; never touches API-key rows; never deletes a row with no root counterpart (an independent ``hermes -p

auth add`` grant, or the only surviving copy); reads only the two auth.json files the root fallback already reads. Returns ``{"adopted", "stripped_ids", "files", "providers_block"}`` when something healed, else None. Never raises. Nz%s: forked-OAuth heal skippedTr.)rI$_heal_forked_single_use_oauth_grantsrCr>r?)rTs r#heal_forked_single_use_oauth_grantsrDsE;;3K@@  4kD Qs !::c |jd|jd}}t|trt|tsy|j||j|}}t|tr|rt|tr|sydd}||||c |st fddDsyt t kD} | rt|||<||=| S)a^Consolidate a forked ``providers.`` device-code block into root. *lineage_proven* carries the pool-row verdict: a profile row that matched root by copied id or shared tokens proves the fork even after both sides rotated past token equality. Root's ``load_pool()`` re-seeds its ``device_code`` row FROM this block, so leaving root's block on the spent pair would undo the pool-row heal on the next root load. Returns None when nothing matched, False when the profile copy was dropped (root already newest), True when the profile copy was fresher and was adopted into root. r,Nct|jdtr|jdni}i|d|jdiS)Ntokensr\)rrr)rXrs r_flatz*_heal_forked_provider_block.._flatos@(2599X3F(M8$SUD&D.%))N*CDDr!c3K|]:}j|xr#j|j|k(<ywr)r)rrxp_flatr_flats rrz._heal_forked_provider_block..ws>&   3>FJJsOvzz#>>&sAA)rr)rXDict[str, Any]returnr)rrranyr) profile_store root_storerTlineage_proven p_providers r_providersp_blockr_blockradoptedrrs @@r_heal_forked_provider_blockr[s -00=z~~k?ZK {D )jd.K"{3[__[5QWG w %'j$6OT[E7^U7^NFF #&4&#v&)9&)AAG#'= K K Nr!ch ||jnd}| t|SdS#t$rYywxYw)uFile signature from ONE stat, or None when absent — a torn pair from two stats could leave a persisted clean mark matching a store rewritten between them.N)statr=r )psts r _stat_sigrsBQVVXD"$>" 9T9 s % 11c|jd}t|tr|j|nd}|t|tr|fSgfS)uY``(store["credential_pool"], its provider_id rows-or-[])`` — pool may be None/non-dict.r4N)rrrrH)rRrTr+rowss r _pool_rowsrsF 99& 'D$.tT$:488K D D$/ 77R 77r!cPt|t|kD}|r t||SdS)zQ*target* carrying *candidate*'s pair when the candidate rotated later, else None.N)rr)rO candidatefreshers r_adopt_if_fresherrs.y),  3HDHr!cbeZdZdZd dZd dZddZddZddZddZ ddZ e dd Z dd Z y ) _HealPasszGOne heal pass over a profile store vs the root store for *provider_id*.c||c|_|_||_dggdd|_dx|_|_d|_t||\|_|_ t||\|_ |_ |jDcgc]}t|s|c}|_ ||_|!|jrt!||_yd|_ycc}w)NF)r stripped_idsr-providers_block)rrrTsummaryprofile_changed root_changedrrp_poolp_rowsr_poolr_rowsr r_oauthroot_singletonrArroot_singleton_row)selfrrrTrrs r__init__z_HealPass.__init__s.;Z+DO&b2RW(Y 388t0##-m[#I  T[#-j+#F  T[#';;La2H2KL ,)n.C.C.E n - KO Ms 8C Cct|j||}|&||j|<dx|_|jd<yyNTr)rrrr)ridxr&rs r_adopt_root_rowz_HealPass._adopt_root_rowsF"4;;s#3S9  %DKK :> >D  Y 7 r!cbt|j|}|||_d|jd<yyr)rrr)rr&rs r_adopt_root_singletonz_HealPass._adopt_root_singletons5"4#:#:C@  &,D #&*DLL # r!cg}|jD]}t|s|j| t||j}|d|_|j ||nGt|r*|j|js|j|n|j||jdj|jdd|_ |jr^t|jt rC|r||j|j"<y|jj%|j"dyyy)NTrr)rr r<rrrrr'rrrrrrrrrrTr)r kept_rowsr& match_idxs rheal_pool_rowsz_HealPass.heal_pool_rowss! ;; (C)#.  %.sDKK@I$&*#$$Y4c"t'>'>'JSWS_S_**3/  % LL ( / / >#'D % (&   Jt{{D$A09 D,,-  0 0$7 %B r!c|jtvryt|j|j|j|j }|0dx|_|jd<|rdx|_|jd<yyy)NTrr) rTrKrrrrrrr)r block_results rheal_provider_blockz_HealPass.heal_provider_blocks~   #? ? 2   1A1A4CVCVX  #EI ID 4<<0A#B>BB!DLL$; $r!cP||jsyddlm}|j|||jryt |}t |j xs|jdu}||sy|j|j|n:tdt|jDd}||j|| |j|jdj|j y#t"$rt$j'd|dYywxYw)Nr)_is_same_auth_storec3RK|]\}}t|rt|r|!ywr)r r'rrrs rrz3_HealPass.heal_profile_singleton..s+Ctq!*1-,q/Cs%'r-zcould not remove %sTr.)rAr7rrrrrrrnextrrrr;rr<rNr=r>r?)rprofile_singletonrp_singleroot_has_grantrs rheal_profile_singletonz _HealPass.heal_profile_singletons  $,=,D,D,F 7    */BCTVZViVi/j $%67dll+Rt/F/Fd/R  >   " " .  & &x 0Cy5CDHJC$$S(3 R  $ $ & LL ! ( ():)?)? @ R LL.0ADL Q Rs8D!D%$D%c|jdr|j |jytdt |j Dd}|y|j |}t |}t |j}||kDrt|j||_y||kDr+t||j|j |<d|_yy)a Keep root's singleton and its ``hermes_pkce``-seeded pool row in step. Root's next load_pool() re-seeds that row FROM the singleton file, so a stale file would resurrect the spent pair (and a stale row would be overwritten by a fresh file). rNc3dK|](\}}t|r|jddk(r|*yw)r#r$N)r rrs rrz>_HealPass.sync_root_singleton_with_pkce_row..s4 P41a&q)aeeHo.N Ps.0T) rrrrrrrrr)rpkce_idxpkce_row row_fresh single_freshs r!sync_root_singleton_with_pkce_rowz+_HealPass.sync_root_singleton_with_pkce_rows LL #(;(;(G''3  P9T[[1 PQUW   ;;x($X. '(?(?@ | #&;Dr?rArrrrr r rrrrrrragent.anthropic_credentialsr$rrrNinfor<)rTrfrrrrr_r^r)r* root_path real_home_env profile_path profile_home is_anthropicrrrbrrrunr singleton_rowr$messages rrr&sS'(I zz~~+, vr2 Z 4 3F3RU`3`a"$L&&L+-LBN '>>TXCOY%%(??UYN L9\2I>O4P I ),i.GK"";/;>)5Q/: ,1~+a."8{K8<3 {K8 JKYef  J.:.A.A.C \ *+WYIZ  ) 4 J8A8H8H8J))4Q\^`PaJM:{NSC     # # %  & &'8 999&{K@ JJJ  1 1 3kkGcjj$/.1jjCJJ{+5@#**4MJ01 C22My!n&@]E^W/!%%n5;]=N=N=_!%%o6~O""|':':'< LI1 JJ8jj**+G KKw' N9 J JJJs2*&M*A5MM*C5M M*M' #M**M3)rrrr)r&rrr)rLrrr)rbtuplerrH)rr)rTrrzOptional[list])rTrrbr1rr)rr])rrrz Optional[str])rrrfloat)rrrzList[Dict[str, Any]]rz Optional[int])rOrrrrr)rmrrOptional[Dict[str, Any]])rTrrr3)F) rrrrrTrrrrzOptional[bool])rrrz#Optional[Tuple[int, int, int, int]])rRrrTrrzTuple[Any, List[Any]])rOrrrrr3)2r __future__rloggingrDr%pathlibrtypingrrrrr hermes_cli.auth_constantsr rur getLoggerr> frozensetrIr8rKr r'rYrr^__annotations__r_rircrjrpr|r~rrrrrrrrrrrrrrr!rr<sb # 338    , -%..X$Y!$>  =J@L^T"$Y#7938#:/ 8( ]F= * ,@ER2  02!%!%/=%LO%%%3%P:8I I'5I:RIHBHBVYr!