+ jHjpCRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI H t Ht^RIHt^RIHt^RIHtHt]P,!R4t^tRR lt!R R 4tR#) a~Plugin and user extension points on the inbound pipeline (moved out of ``gateway/run_inbound.py``). ``pre_gateway_dispatch`` (before auth), ``post_gateway_admission`` (once per admitted inbound message, #129958), ``pre_command`` / ``command:`` hooks, user ``quick_commands`` and plugin-registered slash commands. Bound onto ``GatewayRunner`` through ``GatewayInboundMixin``. ) annotationsN)OptionalTuple)t) MessageEvent) SessionSourcebuild_session_contextz gateway.runcV^8dQhRR/#)returnNone)formats">/home/ubuntu/.hermes/hermes-agent/gateway/run_inbound_hooks.py __annotate__r s 7 74 7cv"VPf/^RIHp\P!WP 4GRjxL \ PR8wd`\P!\\4;_uu_4\P!VP \P4RRR4\P!\ 4;_uu_4\P"!VP%4^R7GRjxL RRR4R#L +'giLm;iL# +'giR#;i5i)a9Kill an exec quick command's shell and everything it started, then reap the shell (bounded). Killing only the shell leaves ``sleep 120 & wait``'s sleep running. ``kill_process_tree`` reaches descendants (``taskkill /T`` on Windows); on POSIX the group the shell led also catches members that already outlived it.N)kill_process_treewin32timeout) returncodeagent.deadlinerasyncio to_threadpidsysplatform contextlibsuppressProcessLookupErrorPermissionErroroskillpgsignalSIGKILL TimeoutErrorwait_forwait)procrs& r_stop_exec_treer* s  4 188<<< ||w  !3_ E E IIdhh /F   \ * *tyy{A666 + * = E E 7 + * *sR8D9DAD9;0D+*D9*D%?D#D% D9 D D9#D%% D6 0 D9c]tRt^0tRtRRltRRltRRlt]RR l4t R R lt RR Rllt RRlt RRlt RRRlltRtR #)GatewayInboundHooksMixinzLHook, quick-command and plugin-command dispatch for ``GatewayInboundMixin``.c(V^8dQhRRRRRRRR/#) r eventrsourcer session_keystrr ztuple[bool, Optional[str]]r )rs"rr%GatewayInboundHooksMixin.__annotate__3s2 O O! O+8 OGJ O # Orc x"^RIHpVP4'dR#^RIHpV!WW#4GRjxL #L5i)a:``post_gateway_admission`` exactly once per inbound message: ``(consumed, reply)``. Never while an admitted row EXECUTES (first run or restart replay): the authority path already offered the message at ingress, before its commit, so a consumed message is never admitted and an admitted one is never offered twice.executing_admissionN)run_post_admission_hook)FN)gateway.session_ingressr5getgateway.run_inbound_consumerr6)selfr.r/r0r5r6s&&&& r_hm_post_admission_consume3GatewayInboundHooksMixin._hm_post_admission_consume3s6 @  " " $ $ H,T&NNNNs 1:8:c$V^8dQhRRRRRR/#)r r.rr/rr zOptional[MessageEvent]r )rs"rrr2As$//!/+8/ /rc "^RIHpVP4'dV#^RIHpV!RW\ VRR4R7GRjxL pVFp\V\4'gKVPR4pVR 8Xdg\PR VPR 4VP'dVPPMR VP;'gR 4R#VR 8XdRVPR4p \V \4'd(^RIHp \$P&!WR7p V !W4T pV#VR8XgKV# V#EL \ d$p\PRT4.pRp?EL/Rp?ii;i5i)uRun the ``pre_gateway_dispatch`` plugin hook; None = drop, else the (maybe rewritten) event. Results: ``{"action": "skip"}`` → drop; ``{"action": "rewrite", "text"}`` → replace ``event.text``; ``allow``/None → normal dispatch. On the messaging path it runs BEFORE auth so plugins can handle unauthorized senders; on the producer path (webhook/relay, ``admit_producer``) it runs AFTER the delivery's authorization, which preparing its payload performs, so it never sees a refused sender. Once per inbound message, at ingress (here, or ``admit_producer`` for webhook/relay), never while an admitted row EXECUTES: a messaging turn already passed it before its commit, and a local CLI/TUI/Desktop turn never fired it on main, so a skip must not drop committed input.r4) ainvoke_hookpre_gateway_dispatch session_storeN)r.gatewayrAz*pre_gateway_dispatch invocation failed: %sactionskipz8pre_gateway_dispatch skip: reason=%s platform=%s chat=%sreasonunknownrewritetext)carry_callback)rHallow)r7r5r8hermes_cli.lifecycler?getattr Exceptionloggerwarning isinstancedictinforvaluechat_idr1gateway.session_ingress_contextrI dataclassesreplace) r:r.r/r5 _ainvoke_hook _hook_results _hook_exc_result_action _new_textrI rewrittens &&& r_hm_pre_gateway_dispatch_hook6GatewayInboundHooksMixin._hm_pre_gateway_dispatch_hookAsO @  " " $ $L  J"/&e%dOTB#M%Ggt,,kk(+G&  NKK)FOOO6??+@+@YbNN//i )##KK/ i--N + 3 3E JI"54%E '! +%* =   NNG SM sTE=E E E A&E=-)E=A&E=E= E E:E5/E=5E::E=cV^8dQhRR/#)r r rQr )rs"rrr2rs22D2rc VPp\V\4'dVPR4M \ VRR4;'g/p\V\4'dV#/#)zVUser-defined ``quick_commands`` mapping from config (empty dict when unset/malformed).quick_commandsN)configrPrQr8rL)r:cfgqcs& r_hm_quick_commands+GatewayInboundHooksMixin._hm_quick_commandsrsSkk+5c4+@+@cgg&'gcSceiFj q qoqD))r1r1rc$V^8dQhRRRRRR/#)r r.rqcmdrQr Optional[str]r )rs"rrr2ys&OOlO$O=Orc tVPR4;'gRP4pV'gR#VPR4'dTMRV 2pV RVP4P4 2P4VnVP R4pV'dVP 4^,#T#)zXRewrite ``event.text`` to an alias quick command's target; returns the new command name.targetN/ )r8strip startswithget_command_argsrHlstripsplit)r.rjrmtarget_commands&& r_hm_expand_alias_quick_command7GatewayInboundHooksMixin._hm_expand_alias_quick_commandxs((8$**113!,,S116(|xq!7!7!9!?!?!A BCIIK s+,:~##%a(NNrc 0V^8dQhRRRRRRRRRRR R /#) r r.rr/r _quick_keyr1command canonicalr )tuple[bool, Optional[str], Optional[str]]r )rs"rrr2s<-!-!!-!+8-!FI-!TW-!dg-! 2-!rc "VP4P4pVP'dVPPMRp^RIHpV!R\ V4\ V4WcVR7R VR VPR VR VR VRV/p VPPRV 2V 4GRjxL p V EFWp \V \4'gK\ V PRR44P4P!4pV PR4p\V\ 4'd V'dTMRpVR8XdRT;'g\#RVR7R3u#VR8XdRVR3u#VR8XgK\ V PRR44P4P%R4pV'gEKRV R\ V PRR44P4 2P4VnRRVP)43u# R# \d$p \PRT RR7Rp ? ELRp ? ii;iEL \d&p \PRY\RR7.p Rp ? ELRp ? ii;i5i)uMFire ``pre_command`` (observer) and ``command:`` (interceptor) hooks → ``(handled, result, new_command)`` (``new_command`` set when a handler rewrote the command). The running-agent path deliberately does NOT fire these — a slow or hostile plugin must not interfere with the operator's escape hatches for a live agent.rn)fire_pre_command_hookrB)surfacer{ alias_usedargs_rawr0rz0pre_command hook dispatch failed (non-fatal): %sTexc_infoNruser_idr{ raw_commandargsraw_argszcommand:z/command:%s hook dispatch failed (non-fatal): %sdecisionmessagedenyzgateway.hooks.command_blockedr{handledrG command_namerorpF)FNN)rsrqrrShermes_cli.pluginsrr1rMrNdebugrhooks emit_collectrPrQr8lowerrrtrH get_command)r:r.r/rzr{r|rrr _pre_cmd_errhook_ctx hook_results _hook_err hook_resultrr new_commands&&&&&& r_hm_command_hooks*GatewayInboundHooksMixin._hm_command_hookss1))+113,2OOO6??(( j @ !!3y>c'l!H  )V^^Y 7FHj(  !%!8!88I;9OQY!ZZL (Kk400;??:r:;AACIIKH!ooi0G!+GS!9!9gg4G6!W[[*ISZ([]aaa9$Wd**9$!+//.""EFLLNUUVYZ ;#$[M3{zSU7V3W3]3]3_2`!a!g!g!iEJ $(9(9(;;;(! = j LLK\dhL i i j[  LLJIkoL pL sA I8 %H1I8 "I,I-I1BI85I8 $I83=I86AI8 H?H:4I8:H??I8I I5I0*I80I55I8Nc(V^8dQhRRRRRRRR/#)r r{r1exec_cmdcwdrkr r )rs"rrr2s*===s=Q^=jm=rc $"Rp^RIHp\P!V\PP \PP V!4VRR7GRjxL p\P !VP4\R7GRjxL wrgT;'gTP4P4pV'd^RI H p V !V4pT;'g \R4#LL[ \\P3dcp Te)\P !\#T44GRjxL \%T \P4'dh\R4uRp ? #Rp ? i\&dp \R T R 7uRp ? #Rp ? ii;i5i) aMRun a ``type: exec`` quick command as a host shell of the gateway process: sanitized env (the gateway process has every API key in os.environ), redacted output, its process tree killed after 30 s or when the awaiting task is cancelled (gateway shutdown). ``cwd`` is a local session's folder; None keeps the gateway's own (messaging).N)build_subprocess_envT)stdoutstderrenvrstart_new_sessionr)redact_sensitive_textzgateway.quick_command.no_outputzgateway.quick_command.timed_outzgateway.quick_command.error)error)tools.environments.localrrcreate_subprocess_shell subprocessPIPEr' communicate_EXEC_QUICK_COMMAND_TIMEOUTdecoderq agent.redactrrr&CancelledErrorshieldr*rPrM) r:r{rrr)rrroutputrstoppedes &&&& r_hm_run_exec_quick_command3GatewayInboundHooksMixin._hm_run_exec_quick_commands8  = E 88!3!3!8!8ASASAXAX(*#' D$+#3#3D4D4D4FPk#llNF&&..0668F>.v6AAQ@A Am g445 8nn_T%:;;;'7#9#9::67 7 =2!< < =sFAC0 C,!1C0C.C0"&C0 C0 C0+F,C0.C00F  &E(1D420E("F #F( F 5F 6 FF FF  Fc(V^8dQhRRRRRRRR/#) r r.rr/rr{rkr r}r )rs"rrr2s2"N"N!"N+8"NCP"N 2"Nrc "VP'dR\RVP4R7V3#V'd VP4P V4MRpVeVP W#4pVeRWS3#VP R4pVR8XdGVP RR4pV'gR\R VR 7V3#RVP W74GRjxL V3#VR 8wdR\R VR 7V3#VPW4pVfR\R VR 7V3#TpV'gRRV3#VPWV4GRjxL #LkL5i)uDrain gate, user-defined quick commands (exec/alias) and plugin slash commands → ``(handled, result, command)``; an alias quick command rewrites ``command``.Tz$gateway.busy.drain_rejected_new_work)rCNtypeexecr{rnz gateway.quick_command.no_commandraliasz&gateway.quick_command.unsupported_typezgateway.quick_command.no_targetF) _drainingr_status_action_gerundrgr8_check_slash_accessrrw_hm_dispatch_plugin_command) r:r.r/r{rj_deniedqtyperrs &&&& r&_hm_dispatch_quick_and_plugin_commands?GatewayInboundHooksMixin._hm_dispatch_quick_and_plugin_commandssT >>>A$JdJdJfgipp p:At&&(,,W5d   ..v?G"W--HHV$E88Ir2#Ew!WY```4#B#B7#UUW^^^QGQXY[bbb==eJK"Q@'RT[[[!G$' '55eWMMMVNs68EA/E+%ED<A EE7D>8E>Ec(V^8dQhRRRRRRRR/#) r r.rr/rr{r1r r}r )rs"rrr2s,$$!$+8$CF$ 2$rc "V'dF^RIHpV!VPRR44pV'dRVPWQV4GRjxL V3#RRV3#L \d#p\ P RTRR7Rp?L/Rp?ii;i5i) uPlugin-registered slash command *command* → ``(handled, result, command)``. No quick commands: a local session resolves those in its own profile before calling this.)get_plugin_command_handler_-TNz"Plugin command dispatch failed: %srF)rrrW_hm_run_plugin_handlerrMrNrO)r:r.r/r{rplugin_handlerrs&&&& rr4GatewayInboundHooksMixin._hm_dispatch_plugin_commands  WI!;GOOCQTZ`'a!acjjj"dG##"b WCQQUVV WsE B%AAA ABA B"A?:B?BBc$V^8dQhRRRRRR/#)r r.rr/rr rkr )rs"rrr2s$(/(/%1(/;H(/ (/rc Z"VfB\VRR4e3VPPVPV44GRjxL p\ W0P V4pVfVPV4VnVfVP4P4MTp^RI H p^RI H p ^RI Hp \P !YYsVP";'gRVP ;'gRVP$P&R7p VP)V4;_uu_4V !V4;_uu_4V !WVPV44;_uu_4\*P,!V4'dV !4GRjxL p M?VP/V 4GRjxL p \*P0!V 4'd V GRjxL p RRR4RRR4RRR4X 'd \3V 4#R#ELLtL\L8 +'giL>;i +'giLI;i +'giLT;i5i)uSRun a resolved plugin command handler for *source* → its reply text or None; raises what the handler raises (``gateway/session_commands.py`` resolves the exact registered name). *args* is the argument as typed (a local session's command); otherwise the message's command arguments, with the messaging dash repair of ``get_command_args``.NrA)invoke_plugin_command)bind_live_source) chat_choicesrn)r/ session_idr0r)rLasync_session_storelookup_by_session_key_session_key_for_sourcerrdr0rsrq"hermes_cli.plugin_command_dispatchrgateway.plugin_messagesrgateway.plugin_command_choicer functoolspartialrrrS_session_env_scopeinspectiscoroutinefunction_run_in_executor_with_context isawaitabler1) r:rr.r/ session_entryr_plugin_context user_argsrrrcallresults &&&&&& rr/GatewayInboundHooksMixin._hm_run_plugin_handlers  WT?D%I%U#'":":"P"P,,V4#66M/ ]S  *.*F*Fv*NO '8< E**,224$ L<>  !9&1177R_E`E`EfEfdf__**, %%o668H8P8P4)E)Ef)MNN**>::#v#AA$GG&&v..#)\F O9Q6%s6{.$./6$&G) ON9Q8P66sAH+G)BH+H+(6H+H/!H 'G2 7G,8G2 G.G2 2G2 7G08G2 <H H H+H+,G2 .G2 0G2 2 H=H  H H H( #H+r )N)NN)__name__ __module__ __qualname____firstlineno____doc__r;r_rg staticmethodrwrrrrr__static_attributes__r rrr,r,0sMV O/b2 OO-!^=>"NH$"(/(/rr,)r __future__rrrrVrrloggingr"r$rtypingrr agent.i18nrgateway.platforms.eventrgateway.sessionrr getLoggerrNrr*r,r rrrsa# "0@   = )! 7 ~/~/r