+ iHjW4a0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIH t ^RI H t H t ^RI Ht^RIHtHtHtHtHtHtRsR]R &Rs] !R RR 7tR ]R &R RltRRltRRltRRlt!RR]4tRRlt] !RRR 7t R]R&] !RRR 7t!R]R&RRlt"RR lt#!R!R"]$4t%R#R/R$R%llt&R&R'lt'R(R)lt(R*R+lt)]*!0R,kR-kR.kR/kR0kR1kR2kR3kR4kR5kR6kR7kR8kR9kR:kR;kRkR?kR@kRAkRBkRCkRDkREkRFkRGkRHkRIkRJkRKkRLkRMkRNkROk4t+Rlt,RPRQlt-RRRSlt.RmRTRUllt/RnRVRWllt0RXRYlt1RZR[lt2] !4t3R\]R]&]Ph!4t5^@t6RmR^R_llt7R`Ralt8RbRclt9RdRelt:RfRglt;RhRilt\P\V44#)zRun the current task under multiplex semantics regardless of the process flag. Returns a reset token; pair with :func:`reset_multiplex_context` in a ``finally``.)rsetr )rs&rset_multiplex_contextr%Bs  ! !$v, //rc V^8dQhRRRR/#rtokenrrrr)rs"rrrH$$5$T$rc0\PV4R#N)rresetr(s&rreset_multiplex_contextr.HU#rcV^8dQhRR/#rrr r)rs"rrrLs99T9rcF\;'g\P4#)zPTrue in a multiplexing process, or for a task running under multiplex semantics.)rrgetrrris_multiplex_activer4Ls  8 8 2 6 6 88rc0]tRt^Qt$RtR]R&R]R&RtR#) _BoundScopeuAn installed secret scope plus the home it was built for, when the binder declared one — the provenance ``serves_routed_profile`` needs when the binding deliberately skips the HERMES_HOME override (kanban spawn-env builds, MCP owner scopes).zMapping[str, str]mapping Optional[str] profile_homerN)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__rrrr6r6Qs rr6cV^8dQhRR/#r1r)rs"rrr[sEEtErc\4'dR#^RIHpHpHpV!V!44p\ P 4pVe,VP'dV!VP4V8wdR#V!4pVRJ;'d V!V4V8g#)aGTrue when the current task runs for a profile other than the process's own: always under multiplexing, else when a HERMES_HOME override names another home (dashboard/desktop backend, per-profile cron ticker) or a secret scope stamped with a foreign home is bound. The MCP registry scope and the check_fn cache key both follow this predicate so a served profile's view never aliases the launch profile's (#111151). A host that mirrors the turn's profile into ``HERMES_HOME`` pins its own home with ``hermes_constants.pin_process_hermes_home`` so the mirror cannot flip this predicate.T)get_hermes_home_overriderhermes_home_keyN)r4rrCrrD _SECRET_SCOPEr3r9)rCrrDownboundoverrides rserves_routed_profilerI[s~kk 9; \;QJdRV4F 'gK RM RM !RV44'dRTr!V'dRV 2MRp\SV` RV R24WnW nV'dVP V4R#R#) c3@"TFqP4xK R#5ir+)isspace).0chs& r /UnscopedSecretError.__init__..s7[{ {sTFzthis profile's zthis profile's API keyzHermes could not read z (an internal profile-scoping bug on the multiplexed gateway, not your configuration). Run `hermes gateway restart`; if it keeps happening, report it with `hermes debug share`.N)anysuper__init__rUrWadd_note)selfrUrWwhat __class__s&&& rrcUnscopedSecretError.__init__s /CC7[{7[CCC7[{7[4[4[,. )2= .C[ $TF+3 3 ' 0  MM* + r)rWrU)r`r`)r:r;r<r=r>rcr@ __classcell__)rgs@rrSrS~s,,,rrSr9c$V^8dQhRRRRRR/#)rsecretsOptional[Mapping[str, str]]r9r8rrr)rs"rrrs(``9`M`ej`rcVf\PR4#\P\Y'd\V444#R44#)a Install the active profile's secret mapping; ``None`` clears. Returns a reset token. ``profile_home`` stamps the home the mapping was built for so ``serves_routed_profile`` detects a foreign-home scope even when the binder deliberately skips the HERMES_HOME override.N)rEr$r6rV)rkr9s&$rset_secret_scopernsE   &&   [|#l2C^ __Y]^ __rc V^8dQhRRRR/#r'r)rs"rrrserc0\PV4R#r+)rEr,r-s&rreset_secret_scoperqsrcV^8dQhRR/#)rrrlr)rs"rrrs8898rcN\P4pVe VP#R#)z>The active secret mapping, or None when no scope is installed.N)rEr3r7rGs rcurrent_secret_scoperus$    E!-5==747rcV^8dQhRR/#)rrr8r)rs"rrrs====rcN\P4pVe VP#R#)zKThe home the active scope was stamped with, or None when unstamped/unbound.N)rEr3r9rts rcurrent_secret_scope_homerxs&    E!&!25  <%%d4 4! $"    t %%rc$V^8dQhRRRRRR/#)rrrVrrr)rs"rrrs!+++s+C+rc(\W4pVfV#T#)u``get_secret`` for callers that want a ``str``: ``default`` only when the secret is genuinely unset. Still raises ``UnscopedSecretError`` — swallowing it hides a spawn-site bug.)rrs&& rget_secret_strrs T #Ck7*s*rc V^8dQhRRRR/#)rvaluerVrr)rs"rrrs;;;;rcVP4pV'gV#V^,pVR9d^pV\V48doW,pVR8XdVR8Xd V^, pK1W18Xd=W^,RP4PR4'd VRV^,#T#V^, pK~V#\P !RV^R7^,P4#)u:Strip a dotenv-style inline comment (python-dotenv semantics): quoted values scan to the matching close quote (backslash-aware for double quotes) and drop a trailing ``# ...``, else stay untouched; unquoted values truncate only at a ``#`` PRECEDED BY WHITESPACE (``foo#bar`` survives, ``value # c`` → ``value``)."\N#z\s+#)maxsplit)'r)striplenlstriprresplit)rquoteir]s& r_strip_inline_commentrs KKME  !HE  #e*nB|d Q{).1uv)=)=)?)J)J3)O)OuWq1u~ZUZZ FA 88GUQ / 2 8 8 ::rc V^8dQhRRRR/#)r raw_valuerVrr)rs"rrr&srcVP4p\V4^8dV^,VR,u;8XdR8XdMMV^Rp.p^pV\V48dkW$,R8H;'dW$^,V^,R9pTPV'dW$^,,MW$,4YE'd^M^, pKzRPV4#\V4^8d'V^,VR,u;8XdR8Xd MV#V^R#V#)zrParse the small .env value subset Hermes writes itself (bare, 'single', or "double" with ``\"`` / ``\\`` escapes).rrr`r)rr)rrappendjoin)rrquotedparsedrescapeds& r_parse_env_valuer&s OO E 5zQ58uRy7C7q #f+oi4'NNFq5Q,?;,NG MM7&Q- B g1 $Awwv 5zQ58uRy7C7 LQr{ Lrz.OrderedDict[str, tuple[bytes, dict[str, str]]]_ENV_FILE_CACHEc V^8dQhRRRR/#)renv_pathzOptional[Path]rrr)rs"rrrIs555$5rc\;_uu_4Vf\P4M\P\ V4R4RRR4R# +'giR#;i)z@Drop one path from the ``load_env_file()`` memo, or all of them.N)_ENV_FILE_CACHE_LOCKrclearpoprV)rs&rinvalidate_env_file_cacherIs=      ! ! #   H t 4    s 9A A# c V^8dQhRRRR/#)rrawbytesrrVr)rs"rrrRs%%5%S%rcVP\P4pVPR4# \dTPR4u#i;i)zBOM stripped; invalid UTF-8 falls back to latin-1 exactly as ``env_loader._load_dotenv_with_fallback`` installs it into ``os.environ``.zutf-8zlatin-1) removeprefixcodecsBOM_UTF8decodeUnicodeDecodeError)rs&r_decode_env_bytesrRsJ   6?? +C%zz'"" %zz)$$%s2AAc V^8dQhRRRR/#)rtextrVrdict[str, str]r)rs"rrr\s  # . rc/pVP4FpVP4pV'dVPR4'dK4VPR4'dV\R4RP 4pVP R4wrEpVP4pV'gKV'gK\ \V44W&K V#)z?Tokenize already-read ``.env`` text. See :func:`load_env_file`.rzexport N=) splitlinesrrrr partitionrr)rrkraw_linelinekeyseprs& r_parse_env_textr\s GOO%~~ts++  ??9 % %I(//1D..-%iik 333+,A%,HIGL& Nrc V^8dQhRRRR/#)rrrrrr)rs"rrrls  D ^ rc\V4p\VR4;_uu_4pVP4pRRR4\ ;_uu_4\ PT4pTe@T^,X8Xd2\ PT4\T^,4uuRRR4#RRR4\\X44p\ ;_uu_4T\T43\ T&\ PT4\\ 4\8d\ PRR7K0RRR4T# +'giEL;i \d\ T4/u#i;i +'giL;i +'giT#;i)uTHE ``.env`` tokenizer: every reader (profile scope, ``hermes_cli.config.load_env``, the dashboard scrub, skill secret capture, managed .env, setup prompts) parses through here so no two boundaries disagree on which keys/values a file defines. Dict only — never touches ``os.environ``. ``export`` prefix, ``#`` comments, quote escapes reversed; a BOM is stripped so it doesn't prefix the first key. Invalid UTF-8 decodes as latin-1, exactly like ``env_loader._load_dotenv_with_fallback`` installs it into ``os.environ``. Absent/unreadable → ``{}``. Memoised per path on the file's exact bytes (see the cache comment above). Always returns a fresh dict: callers mutate what they get back (``build_profile_secret_scope`` layers external secrets over it). rbNF)last)rVopenreadOSErrorrrrr3 move_to_enddictrrr_ENV_FILE_CACHE_MAXpopitem)rrhandlercachedrks& r load_env_filerls' h-C (D ! !V++-C"   $$S)  &)s"2  ' ' ,q ?    /45G   #T']3##C(/"%88  # # # /9  N%" ! ! !(+      NsGED0EAE" AE50 E ;EEEE" E2 5 F c V^8dQhRRRR/#)r hermes_homerrrr)rs"rrrsD^rc\\V4R, 4p^RIHpV!\V44pTP RVP 444^RIHpV!4pVe$\V4'dVPRV4^RI H pVP RV!4P 444V# \d/pLi;i)uBuild a profile's secret mapping from ``/.env`` plus its external secret sources. Global vars are NOT copied in — ``get_secret`` reads those from ``os.environ`` — so the scope holds only profile secrets.z.env)get_secret_source_valuesc3R"TFwr\V4'dKW3xK R#5ir+rr\kvs& rr^-build_profile_secret_scope..s X&>danUVFW6A6&>' ')bridged_allow_all_usersGATEWAY_ALLOW_ALL_USERS)load_managed_envc3R"TFwr\V4'dKW3xK R#5ir+rrs& rr^rs Z&@daWXHY6A6&@r) rrhermes_cli.env_loaderr Exceptionupdateitemsgateway.config_loaderr_is_process_home setdefaulthermes_cli.managed_scoper)rrkrexternal_secretsrbridgedrs& rbuild_profile_secret_scopersD-67GB3D4EF NNX&6&<&<&>XX>%'G/ <<4g>: NNZ&6&8&>&>&@ZZ N) sC CCc V^8dQhRRRR/#rrrrr r)rs"rrrs$4rc^RIHp\V4P4V!4P48H# \dR#i;i)a Is *hermes_home* the profile this process serves as its own? Same launch-home identity as ``serves_routed_profile()``: a host that mirrors a served profile into ``HERMES_HOME`` would otherwise seed the launch profile's bridged allow-all grant into that profile's scope.)rF)rrrresolver)rrs& rr r sEAK ((*.M.O.W.W.YYY s.7 AAc V^8dQhRRRR/#rr)rs"rrrsrc*\P4pVe VPMRp\V\4'gR#\ V4pVP V4VUu.uF qDV9gK VNK upFpVPVR4K R#uupi)aFold a fresh build of *hermes_home*'s secrets into the INSTALLED scope, in place. A scope is frozen when installed, but a fire can learn of new values afterwards: a routed cron fire's first agent build discovers plugin secret sources, and under multiplex semantics the reload that follows is hydrate-only (never ``os.environ``), so nothing else would carry those values into the scope this fire already holds. The caller names the home the installed scope was built for. True when a scope was updated; False when none is installed.NFT)rEr3r7 isinstancerrr r)rrGscoperebuiltnrs& rrefresh_installed_secret_scopers    E".EMMDE eT " ")5G LL!6Eqg%5E6 $7 7s B,B)HERMES_KANBAN_HERMES_TELEGRAM_ TERMINAL_r+)r`)>__conditional_annotations__r> __future__rrrr threading collectionsr contextvarsrrpathlibrtypingrrr r r r rr?r rr!r%r.r4r6rIrErJrNrQ RuntimeErrorrSrnrqrurx frozensetrrrrrrrrrLockrrrrrrrr r)r!s@rr+s # #)GG  4(22FPU'V$V!60 $9  * E&4>oW[3\ 0\MW$M(I(,$,,,8`\``8 =#%>2 ;     #%-/35:r