߲jJXUdZddlmZddlZddlZddlmZmZddlm Z ddl m Z m Z ejeZej ZiZded<iZd ed <ddd Zdd Zdd ZddddZddddZdd ddZdd ddZddd dZd!dZd!dZd"dZd#dZ d$dZ!y)%zModule-level registry for DashboardAuthProvider instances. Plugins call ``register_provider`` via the plugin context hook at startup; the auth gate iterates ``list_providers()`` and uses ``get_provider`` to dispatch on the session's ``provider`` field.) annotationsN)ListOptional)hermes_home_key)DashboardAuthProviderassert_protocol_compliance dict[str, DashboardAuthProvider] _providersz+dict[str, dict[str, DashboardAuthProvider]]_scoped_providersctt}|jtj |xs t i|SN)dictr updater getr)scope providerss G/home/ubuntu/.hermes/hermes-agent/hermes_cli/dashboard_auth/registry.py_mergedrs6Z I &**5+EO4ErJK cn|tS|rtj|iStj|iS)z a token-authable route fails closed (401).supports_tokenFr8getattrps rlist_token_providersr?Ss'&' O!716F+NA OO O''cXtDcgc]}t|dds|c}Scc}w)zProviders with ``supports_session`` True (interactive cookie sessions); the login page, /auth/login and the gate's verify/refresh loops use only these.supports_sessionTr;r=s rlist_session_providersrCZs'&' P!716H$+OA PP Pr@ctt|t5|t|j<dddt d|y#1swYxYw)a/Register a host-owned provider in the process-global slot (upsert). The registry is shared across every profile one dashboard process serves, so these outlive any per-home plugin manager: always targets ``_providers`` (never a per-home overlay) and *replaces* a same-name entry instead of raising, so a forced plugin re-discovery (e.g. after a password change) rotates the provider in place. Pairs with ``unregister_global_provider``. Pairs with ``unregister_global_provider`` for teardown of the exact object still current (#91701). Nzglobal provider )rr%r&r rr!)r s rregister_global_providerrE`sAtH~. -$, 8==!-&1--s AA ct5tj||ur tj|d dddy dddy#1swYyxYw)zRemove a global registration if ``provider`` is still current (a stale handle whose provider was already replaced never clears the live one).NTF)r&r rr1)rr s runregister_global_providerrGosP  >>$ 8 + NN4 & +   s /A  Act5tjtjdddy#1swYyxYw)z"Test-only: drop all registrations.N)r&r clearr rrclear_providersrKys2 "!"""s )9Ar )r Optional[str]returnr )rrLrboolrMr )rstrr rrMNone)r rrrLrMrP)rrOrrLrMOptional[DashboardAuthProvider]) rrOr2rr3rQrrLrMrN)rrLrMList[DashboardAuthProvider])rMrR)r rrMrP)rrOr rrMrN)rMrP)"__doc__ __future__rlogging threadingtypingrrhermes_constantsrhermes_cli.dashboard_auth.baserr getLogger__name__rLockr&r __annotations__r rrr!r*r-r/r4r8r?rCrErGrKrJrrr^sE#!,\w" /1 ,1AC>C cbRV +7;(*.6 6&62Q6# -9X'+".2- PQ 2"r