߲jh"`UdZddlmZddlZddlZddlZddlZddlmZddl m Z ddl m Z m Z mZddlmZddlmZej&d Zehd Zej&d Zd ZiZd ed<ej6ZddZddZddZddZ ddZ!ddZ"eddZ#GddZ$y)z]Plugin-owned durable state and namespaced settings helpers (split out of hermes_cli.plugins).) annotationsN)contextmanager)Path)AnyDictMapping)get_hermes_home)_portable_skill_namespacez!^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$>modelpluginssecuritysettingsz#^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$izDict[str, threading.RLock]_PLUGIN_STATE_LOCKSct|ts tdt|j d}| xs%d|vxsd|vxs|dj t v}|std|Ds td|S)zValidate/split a plugin-relative settings key; global paths, traversal, and core roots are rejected before any config read. The public API accepts only relative keys (``endpoint`` or ``retry.policy``). See #64227. z,Expected a plugin-relative config key string./\rc3FK|]}tj|ywN)_PLUGIN_SETTING_SEGMENT_RE fullmatch).0segments =/home/ubuntu/.hermes/hermes-agent/hermes_cli/plugins_state.py z,_plugin_relative_segments.."s`G4>>wG`s!zExpected a plugin-relative config key such as 'endpoint' or 'retry.policy'; global, cross-plugin, and traversal paths are forbidden) isinstancestr ValueErrortuplesplitlower_PLUGIN_SETTING_RESERVED_ROOTSall)keysegmentsinvalids r_plugin_relative_segmentsr's c3 GHHSYYs^$Hgkkts{khqk6G6G6IMk6kGc`W_`` V   OcR|}|D]}t|tr||vr|cS||}!|S)zIWalk ``segments`` through nested mappings; ``default`` on the first miss.)rr)rootr%defaultcurrentrs r_nested_plugin_valuer-*s=G#'7+wg/EN'"# Nr(c2|}t|D]}||i}|S)z;Wrap ``value`` in nested single-key dicts, outermost first.)reversed)r%valuenestedrs r_nested_plugin_mappingr24s*FH%#6"# Mr(cJt|dd|fd}t|tr|SdS)z<``plugins.entries.`` as a mapping, else ``None``.r entriesN)r-rr)config plugin_identrys r_plugin_settings_entryr8<s+ )Y )JD QEug.58D8r(cddlm}ddlm}|jr t ddd|dg|}dj |}|j |rt d |d t|d d t||}t|j5|j5|j|j||hd d d d d d d y #1swYxYw#1swYy xYw)aAtomically write one value under ``plugins.entries..settings``. THE writer for plugin settings: ``PluginContext.set_config`` (the plugin itself) and the Desktop/TUI ``plugins.manage settings`` action both land here so managed-install and administrator-managed-key refusals, the cross-process lock and the fail-closed raw read are enforced once. ``segments`` must already be validated by :func:`_plugin_relative_segments`. r)r5) managed_scopez6Plugin settings cannot be changed in a managed installr r4rrzPlugin setting z is administrator-managedNT) preserve_keysmerge_existing) hermes_clir5r: is_managedPermissionErrorjoinis_key_managedr2_locked_plugin_stateget_config_path _CONFIG_LOCKread_user_config_raw save_config)r6r%r0 config_modr: full_path dotted_pathpartials rsave_plugin_settingrLBs0(VWWIy*HxHI((9%K##K0 >WXYY$Yr]4J8UZ4[\G j88: ;XZ=T=TX '')wykRVW XXXXXXs$ C$!&CC$C! C$$C-c|xs|}|xr|jd}|rtjd|r|St|S)zReturn one Windows-safe directory component for plugin-owned data. Portable Agent Plugins already receive this exact PLUGIN_DATA path; otherwise the fixed prefix avoids Windows reserved device names and the digest prevents fold collisions.z agent-plugin-z[A-Za-z0-9][A-Za-z0-9_-]{0,191}) startswithrerr )r6skill_namespace candidateportables r_plugin_data_namespacerS]sE ,9IH9#7#7#HHBLL!CYO $Y //r(c #8K|jd|jd}t5tj t |j dtj}ddd5|jjddt|d5}tjd k(rd dl }|jd tjd k(r!|j!d |j#|jd |j%|j'|j(d n.d dl}|j-|j'|j. dtjd k(r=|jd j%|j'|j0d n+j-|j'|j2 ddddddy#1swYxYw#tjd k(r=|jd j%|j'|j0d wj-|j'|j2wxYw#1swYxYw#1swYyxYww) zSerialize state read-modify-write across threads/processes (fcntl / msvcrt). The lock lives in a sibling file because atomic replacement changes the target's inode.rz.lockF)strictNT)parentsexist_okza+bntr) with_namename_PLUGIN_STATE_LOCKS_GUARDr setdefaultrresolve threadingRLockparentmkdiropenosmsvcrtseekSEEK_ENDwriteflushlockingfilenoLK_LOCKfcntlflockLOCK_EXLK_UNLCKLOCK_UN)path lock_path thread_lockhandlerfrns rrCrChs499+U34I "n)44S9J9JRW9J9X5Y[d[j[j[lm n @td; )U # @vww$;;q"++.!3LL'LLN Av}}B FMMOU]]; @77d?KKNNN6==?FOOQGKK ?% @@@nn$77d?KKNNN6==?FOOQGKK ?% @ @@@sh&JAG6* J4*JCJ&H*A;J%J- J6H;JARead a JSON value, returning *default* when the key is absent.N)rrCrsrget)r{r$r+s rrzPluginState.getsJ 3 !$)) , ;&&(,,S': ; ; ;s AAc|j|t|j5|j}|||< t j |ddj d}t||jkDr%tdt|d |jd d d l m }||j|d dddy#ttf$r}td|d|d}~wwxYw#1swYyxYw)zBAtomically set one JSON value without dropping concurrent updates.F) ensure_asciiindentrzPlugin state value for z is not JSON-serializableNzPlugin state quota exceeded: z bytes is greater than the z-byte per-plugin quotar)atomic_json_writei)mode) rrCrsrrdumpsencode TypeErrorrlenrutilsr)r{r$r0rencodedrrs rsetzPluginState.sets 3 !$)) , ;&&(DDI f**TaHOOPWX7|d... 3CL>B $ 0 011GI 0 diiE : ; ; z* f #:3'AZ![\bee f ; ;s/C-'C%AC-C*C%%C**C--C6))r6rrPrreturnNone)rr)rint)r$rrr)rdict[str, Any]r)r$rr+rrr)r$rr0rrr)__name__ __module__ __qualname____doc__r|propertyrrsr staticmethodrrrrr(rrxrxslIRHH,,)) ; ;r(rx)r$rrtuple[str, ...])r*objectr%rr+rrr)r%rr0rrr)r5rr6rrzMapping[str, Any] | None)r6rr%rr0rrr)r6rrPrrr)rsr)%r __future__rrrerOr` contextlibrpathlibrtypingrrrhermes_constantsr hermes_cli.plugins_manifestr compiler frozensetr"rrr__annotations__Lockr]r'r-r2r8rLrSrCrxrr(rrsc" %%%,A'RZZ(LM!*+W!X!rzz"HI,24/4*INN,$9 X60@@:=;=;r(