߲j<\UdZddlmZddlZddlZddlZddlZddlmZddl m Z m Z ddl Z ddl mZeddlmZej"eZedZej*ZiZd ed <iZd ed <dd Zdd ZddZddZddZddZddZ d dZ!d!dZ"d"d#dZ#d$dZ$d%dZ%d&dZ&y)'uManaged scope — IT-pushed, user-immutable config & env layer. DISTINCT from ``hermes_cli.config.is_managed()`` / ``HERMES_MANAGED`` (a coarse package-manager write-lock that blocks all mutation); this layer injects specific immutable values. The two are independent and may coexist. v1 enforcement is filesystem permissions only (see ``docs/design/managed-scope.md`` §7); ``get_managed_dir()`` is the single seam for adding macOS / Windows native locations later. ) annotationsN)Path)DictOptional)drop_stale_root_modules)file_signaturez /etc/hermesDict[str, tuple] _CONFIG_CACHE _ENV_CACHEc&dtjvS)zTrue inside the test suite: ignore the system ``/etc/hermes`` so a real managed scope on a dev/CI box can't leak policy into the suite. An explicit ``HERMES_MANAGED_DIR`` still wins.PYTEST_CURRENT_TEST)osenviron=/home/ubuntu/.hermes/hermes-agent/hermes_cli/managed_scope.py _under_pytestr(s !BJJ ..rctjjddj}|r t |}nt ryt }|jr|SdS)urResolve the managed-scope directory, or None when no scope is present. Priority: ``$HERMES_MANAGED_DIR`` (IT-only bootstrap override; never persisted to any .env; honored only when non-empty AND the directory exists), then ``/etc/hermes`` when it exists. A missing directory resolves to None — the common case, so it must be cheap + side-effect-free. HERMES_MANAGED_DIRN)rrgetstriprr_DEFAULT_MANAGED_DIRis_dir)overrideps rget_managed_dirr.sNzz~~2B7==?H N   1$$rct5tjtjdddy#1swYyxYw)z@Drop cached managed config/env. For tests and post-edit reloads.N) _CACHE_LOCKr clearr rrrinvalidate_managed_cacher!?s2 s )9Ac" |j}t|}t|}t5|j |}|;|dt ||k(r*tj|t |cdddSddd ||}t5g|tj|||<ddd|S#t$rYywxYw#1swYOxYw#t$r!}tjd||Yd}~yd}~wwxYw#1swY|SxYw)u:Shared stat-signature-keyed read; returns a deepcopy of the parsed value. ``None`` when the file is absent or fails to parse (fail-open). A parse failure is logged LOUDLY — the admin needs to know their policy isn't applied — but never raises, so a malformed managed file can't brick startup. Numanaged scope: failed to parse %s: %s — IGNORING this managed file. Admin policy from this file is NOT being applied. Fix and restart.) statOSErrorrstrrrlencopydeepcopy Exceptionloggerwarning) pathcacheparsestkeypath_keyhitparsedexcs r _cached_readr5Fs  YY[  C4yH 0ii! ?s9CH~4==SX/000t 87C7v!67h8 M% 00  Q #   8 MsAB<AC CD< CC C D C<<DDcft}|iSt||z ||}t|tr|SiS)N)rr5 isinstancedict)namer-r. managed_dirr3s r_load_managed_filer;ds<!#K +,eU ;F-6525rc&tdtdS)zDParsed managed config.yaml, or {} when absent/malformed (fail-open).z config.yamlcTtj|jdxsiS)Nzutf-8encoding)yaml safe_load read_text)rs rz%load_managed_config..ns%dnnUVU`U`jqU`UrFsFywyr)r;r rrrload_managed_configrDls m])agent.secret_scoperIrB)r,rIs rrFrFvs0NNKN(  rc t}|s|Sddlm}m}m}|||}t |j dtrt|}d|di|d<|||S#t$rtjdd|cYSwxYw)a-Overlay administrator-pinned config values on top of an already-built dict. ``${VAR}`` refs in the managed config expand against the PROCESS env only, so a user cannot shadow a managed literal via a ref they control; a bare root ``model: x/y`` string is promoted to ``model.default`` so it can't clobber the dict shape callers expect; managed values deep-merge ON TOP per leaf while sibling keys stay user-controlled. Fail-open: returns ``config`` unchanged when no scope is present or on any error. Mutates and returns ``config``. r) _deep_merge_expand_env_vars_normalize_root_model_keysmodeldefaultz-managed scope: failed to apply config overlayT)exc_info) rDhermes_cli.configrLrMrNr7rr%r8r)r*r+)configmanagedrLrMrNmanaged_expandeds rapply_managed_overlayrV}s%'M__56Fw6OP &**73S 9#$45 )24DW4M(N W %6#344 FQUV s A%AA%%"B  B ct}|jD]L\}}|r|d|n t|}t|tr|r|t ||z}<|j |N|S)N.)setitemsr%r7r8 _flatten_keysadd)dprefixkeyskvdotteds rr[r[siD 1$*F81QCA a 1 M!V, ,D HHV   Krc(ttS)zGDotted leaf keys pinned by the managed config (e.g. {'model.default'}).)r[rDrrrmanaged_config_keysrds ,. //rc|tvS)zCTrue if the exact dotted config key is pinned by the managed layer.)rd) dotted_keys ris_key_managedrgs ,. ..rc|tvS)z=True if the env var name is pinned by the managed .env layer.)rG)r9s ris_env_managedris #% %%r)returnbool)rjzOptional[Path])rjNone)r,rr-r )r9r%r-r rjr8)rjr8)rjDict[str, str])r,rrjrm)rSr8rjr8)r)r]r8r^r%rjrY)rjrY)rfr%rjrk)r9r%rjrk)'__doc__ __future__rr'loggingr threadingpathlibrtypingrrr@hermes_cli.stale_modulesrutilsr getLogger__name__r*rLockrr __annotations__r rrr!r5r;rDrGrFrVr[rdrgrirrrrzs#  ! =   8 $M*inn "$ $! !/ %"<6{ F 80 / &r