߲jhDdZddlmZddlZddlZddlZddlmZmZddlm Z m Z m Z m Z ddl mZmZddlmZmZmZmZmZmZmZmZmZmZddlmZmZmZmZm Z ejBd Z"d%d Z#d&d'd Z$dd d  d(dZ%d)d*dZ&d)d*dZ'd&d+dZ(d&d+dZ) d,dZ*d-dZ+ddd.dZ,dd d/dZ-dd d d0dZ.ddd1dZ/d ded  d2d!Z0d3d"Z1d4d#Z2d5d$Z3y)6aSpotify OAuth (loopback PKCE) login, refresh and runtime credentials. Re-exported from ``hermes_cli/auth.py`` (patch targets unchanged); origin helpers are imported lazily per function so ``hermes_cli.auth.`` patches still intercept and no cycle forms. ) annotationsN)datetimetimezone)AnyDictOptionalTuple) urlencodeurlparse) AuthError!DEFAULT_SPOTIFY_ACCOUNTS_BASE_URLDEFAULT_SPOTIFY_API_BASE_URLDEFAULT_SPOTIFY_REDIRECT_URIDEFAULT_SPOTIFY_SCOPE)SPOTIFY_ACCESS_TOKEN_REFRESH_SKEW_SECONDSSPOTIFY_DASHBOARD_URLSPOTIFY_DOCS_URL _spotify_errhttpx)_bind_loopback_callback_server_make_loopback_callback_handler_pkce_code_challenge_pkce_code_verifier_serve_loopback_callbackzhermes_cli.authc<t|xsdjS)N)strstrip)values z#_spotify_setting..+s;3M#&;sN/)hermes_cli.configr. isinstancer&getr!rstrip) state state_keyenv_varsdefaultr+r, candidates candidatecleanedr.s @r _spotify_settingrA$s~ 0;(; *5$ 7 )TCJJ  # nnS)G N  Nr"cBt|ddd|}|r|Stdd)N client_id)HERMES_SPOTIFY_CLIENT_IDSPOTIFY_CLIENT_IDrr+zPSpotify client_id is required. Set HERMES_SPOTIFY_CLIENT_ID or pass --client-id.spotify_client_id_missing)rAr)r+r:rCs r _spotify_client_idrH7s7  {Mr\dI Z# r"c*t|ddt|S)N redirect_uri)HERMES_SPOTIFY_REDIRECT_URISPOTIFY_REDIRECT_URIrF)rAr)r+r:s r _spotify_redirect_urirMCs  ~V$x r"c*t|ddtdS)N api_base_url)HERMES_SPOTIFY_API_BASE_URLTr,)rArr:s r _spotify_api_base_urlrSJs  ~?A]ko r"c*t|ddtdS)Naccounts_base_url) HERMES_SPOTIFY_ACCOUNTS_BASE_URLTrQ)rAr rRs r _spotify_accounts_base_urlrWPs  "$IKl r"c 6t|d|||d|d}|d|S)NcodeS256)rC response_typerJscoper:code_challenge_methodcode_challengez /authorize?)r )rCrJr\r:r^rUquerys r _spotify_build_authorize_urlr`Ws8 ( E  E7 33r"ct|}|jxsd}|jdk7rdn|dvrdn|jsdnd}|rt d|d||j|j xsd fS) Nrhttpz.must use http://localhost or http://127.0.0.1.> 127.0.0.1 localhostz%must point to localhost or 127.0.0.1.z(must include an explicit localhost port.zSpotify PKCE redirect_uri spotify_redirect_invalidr5)r hostnameschemeportrpath)rJparsedhostproblems r _spotify_validate_redirect_urirmcs| l #F ?? bDt|jd}|stdddt|}t |}t |d||d|dd d d d d }t ||t|t|jdxst|t||S)Nrz?Spotify refresh token missing. Run `hermes auth spotify` again.spotify_refresh_token_missingTrrR) grant_typerrCz token refreshspotify_refresh_failedspotify_refresh_invalidz9Spotify refresh response did not include an access_token.z! Run `hermes auth spotify` again.)rprrrrrrr\)rCrJrrUrOr}) r!r8rrHrWrrrMrrrS)r:rprrCrUrs r _refresh_spotify_oauth_staters599_56M  M +T  #/I259!&U^_'oKc.S9D G +93Hu3UEIIg.G2GH+:OPU:V  r"T) force_refreshrefresh_if_expiringrefresh_skew_secondscddlm}m}m}m}m}m}m} m} |5|} || d} | stdddt|} | s|r|| jd|} | r || } | | d| d | | dddt# jd }|stdddd||t%| jddxsdt'| t#| jdxs| jdt)| t+| | jdt#| jd d S#t$ro}|jr]| jd rL|| d| | | d| d | | #t$r }tj!d |Yd}~d}~wwxYwd}~wwxYw#1swYHxYw)Nr)_auth_store_lock _is_expiring_load_auth_store_load_provider_state_quarantine_flat_oauth_stater_save_auth_store_store_provider_statespotifyz>Spotify is not authenticated. Run `hermes auth spotify` first.spotify_auth_missingTrrF set_activerz6Spotify OAuth: failed to persist quarantined state: %srz>Spotify access token missing. Run `hermes auth spotify` again.spotify_access_token_missingrrrr\rR) providerrapi_keyrbase_urlr\rCrJrr)rrrrrrrrrrboolr8r rrloggerdebugr!rrSrHrM)rrrrrrrrrrr auth_storer:should_refreshr _save_excrs r #resolve_spotify_runtime_credentialsrsLLL  %' $Z;PRhrv m,"5)%))L*ACWXN  4U;%j)UuU ,4%))N34L  L *D  | %))L(;GxH)%0 /2Heii6HI'e4-E:%))T`Ja / :; # ''EIIo,F0 3Gj-j)UW\](4%j %]_hiij !sTA G 'E G'G?FG F=F83G8F==GGG  Gc ddlm}m}|d}|sddiS|jd}t |jd}t |xs ||d |jdd |jd |jd |jd xs|jd ||jdt |dS)Nr)rget_provider_auth_stater logged_inFrrrrrCrJrr\rO)rrrCrJr\rrOhas_refresh_token)rrrr8r!r)rrr:rrs r get_spotify_auth_statusrsE #I .E U##<(J599_56M-J|J/J+JKYY{L9 R]H^ .1?+Auyy/AQ[ .1]H[  r"c ddlm}ddlm}t dddddt dt d |d |s tjt dd l m } |d j}|st dt dtd|d||r|t k7r |d|t d|S#t$rYrwxYw#ttf$rt td wxYw)z`Walk the user through creating a Spotify developer app; persist the client_id to ~/.hermes/.env.r)_is_remote_session)save_env_value zF======================================================================z Spotify first-time setup z Spotify requires every user to register their own lightweight developer app. This takes about two minutes and only has to be done once per machine. Full guide: z Steps: 1. Opening z in your browser... 2. Click 'Create app' and fill in: App name: anything (e.g. hermes-agent) Description: anything Redirect URI: z API/SDK: Web API 3. Agree to the terms, click Save. 4. Open the app's Settings page and copy the Client ID. 5. Paste it below. ) line_inputzSpotify Client ID: zSpotify setup cancelled.z No Client ID entered. See z for the full guide.z)Spotify setup cancelled: empty Client ID.rDrKz2 Saved HERMES_SPOTIFY_CLIENT_ID to ~/.hermes/.env )rrr6rprintrr webbrowseropenrhermes_cli.cli_outputrrEOFErrorKeyboardInterrupt SystemExitr)redirect_uri_hintrrrraws r _spotify_interactive_setupr s20 XJ28*=(()-./ !223! !$    OO1 215./557  ,-=,>>RSTDEE-s3.2NN46GH @A J)    ' (5 3445sB8C8 CC%C,c tddlm}m}m}m}m}m}m}m}|dxsi} tt|dd| } tt|dd| } tt|d dxs| j!d } t#| }t%| }t|d d  }t'}t)j*j,}t/| | | |t1|| }t3d| d| d|dt4d || t4|r3|s,|r% t7j8|}t3|rdndt=| t?t|ddxsd}|j!dr$tAd|j!dxs|d|j!d|k7r tAdtC|| dtE|j!dxsd| |dt?t|ddxsd d!d"d#d$%}tG|| | | ||&}|5|}||d|d '||}dddt3d(d)t4y#t$r;} t| dddk7rtt|ddxst } Yd} ~ [d} ~ wwxYw#t:$rd }Y{wxYw#1swYxxYw)*Nr)r_can_open_graphical_browserrr_print_loopback_ssh_hintrrrrrCrYrrGrJ)rr\ no_browserF)rCrJr\r:r^rUz*Starting Spotify PKCE login... Client ID: z Redirect URI: zo Make sure this redirect URI is allow-listed in your Spotify app settings. Open this URL to authorize Hermes: z Full setup guide: r)docs_urlz)Browser opened for Spotify authorization.z"].BTBTU\B] ^E2>B(8Lt\599L')M**,""K0,e;+M:N_M  5i[@PQ]P^_//CCSBT VE  3 #'B B .%dNDAaEa  > F <00s5IJJ. J0JJ J+*J+.J7)rrreturnrr0)r) Optional[str]rr)r:Optional[Dict[str, Any]]r;rr<zTuple[str, ...]r=rr+rr,rrr)NN)r+rr:rrr)r:rrr)rCrrJrr\rr:rr^rrUrrr)rJrrztuple[str, int, str])rJrrprrzdict[str, Any])rDict[str, Any]rCrrJrrrrUrrOrr}rrr)rUrrzDict[str, str]rprrrrrrrrrrrrrrr)r:rrprrr)rrrrrintrr)rr)rrrr)rNone)4__doc__ __future__rloggingrrrrtypingrrrr urllib.parser r hermes_cli.auth_constantsr r rrrrrrrrhermes_cli.auth_device_flowrrrrr getLoggerrr!r*rArHrMrSrWr`rmr|rrrrrrrr1r"r rs # '--, 33   , -$Q# #03?NY\15 &   4 4%( 414 4=@ 4RU 4 4  4 1OTt[_!14DGZ]*-?W2UW""0FKSV$':=NQ 8UY8# I..9=...b"-`Lr"