+ iHj aRt0tRt^RIHt^RIt^RIt^RIt^RIHt]!RRR7!RR44t Rs ]^k]!4t ] !0Rm4t RR ltR R ltR R ltRRltRRltRRltR#)aPrivate bootstrap policy for admission-owned workers: the frozen session config every config reader returns, plus (troubleshooting workers only) the safe/ignore-user-config bypass. Stdlib-only: hermes_cli's config/env layer imports it, so it ships in the installer's hermes_cli + i18n-kernel tail and must never import beyond the standard library. Bind once in a fresh exec, before config/agent/plugin imports. This is not a sandbox or a public launch switch: only the managed worker bootstrap consumes the owner's validated assignment. No environment flag grants this policy and no reset exists; helper threads see the same immutable snapshot. ) dataclassN)LockT)frozenslotsc,a]tRt^toV3RltRtVtR#)_SafeWorkerPolicycJ<V^8dQh/S[;R&S[;R&S[;R&S[;R&#)pid safe_modeignore_user_config config_json)intboolstr)format __classdict__s"=/home/ubuntu/.hermes/hermes-agent/agent/safe_worker_policy.py __annotate___SafeWorkerPolicy.__annotate__s5 HO   N)__name__ __module__ __qualname____firstlineno____annotate_func____static_attributes____classdictcell__)rs@rrrsrrcHV^8dQhR\R\R\R\/#r r r configreturnrdictr)rs"rrr#s***4*T*%)*.?*rc\V4\Jg\V4\Jd \R4hV'gV'g \R4h\ VRV4#)zICalled by the private worker bootstrap, never by the owner or public CLI.z,worker bypass policy fields must be booleanszd&JFGG +WXX D& ))rc0V^8dQhR\R\/#)r r!r")r$r)rs"rrr-s'''):'rc\RRV4#)uAn ordinary managed worker's frozen session config: every config reader returns it (the session never follows later profile edits), while plugins, MCP, hooks and providers load as usual — ``safe_worker_enabled()`` stays False. Same one-shot, pre-import rules as bypass.F)r))r!s&r_bind_worker_configr--s v &&rcHV^8dQhR\R\R\R\/#r r#)rs"rrr4s)  T t T FW rc\V4\Jd \R4h\P!VRR7p\ ;_uu_4\ e \R4h\P\P4'd \R4h\\P!4WV4s\ uuRRR4# +'giR#;i)z#worker config must be a JSON objectF) allow_nanNzworker policy is already boundz.worker policy must bind before runtime imports)r&r$r'jsondumps _bind_lock_policy RuntimeError_RUNTIME_IMPORTS intersectionsysmodulesrosgetpid)r r r! serializeds&&& rr)r)4s F|4=>>Fe4J   ?@ @  ( ( 5 5OP P#BIIKPZ[ s)r$)rs"rrrMsJJt Jrcb\4pVe!\P!VP4#R#)zHReturn detached explicit config; None means the ordinary loader owns it.N)r@r1loadsr rCs rworker_config_snapshotrIMs)  F-3-?4::f(( )ITIrcNV^8dQh/^\9d\R,;R&#)r Nr4)__conditional_annotations__r)rs"rrrs$  4)( T !(5 r> providers run_agent model_toolsagent.agent_inithermes_cli.confighermes_cli.pluginshermes_cli.env_loader)rK__doc__ dataclassesrr1r:r8 threadingrrr4r3 frozensetr6r*r-r)r@rErIr)rKs@rrWs| "  $d#$%)( V  *'  3 Jr