+ jHjRt^RIHt^RIt^RIHt^RIHt^RIH t H t ^@t Rt ]P!R4tRR ltRR R lltR R ltRRRllt!RR4tR#)aCopy and owner-side signalling for unauthorized inbound senders. Two audiences, two rules: * The **stranger** gets either a pairing code (behaviour ``pair``) or nothing at all (behaviour ``ignore``: an allowlist is configured, so any reply would leak that the bot exists). * The **owner** is the one who can fix a mis-typed allowlist, so an ignored DM is logged at WARNING with the sender's ID and the allowlist / pairing-mode fix, and surfaced once per (platform, user) per gateway process in the platform's home channel when one is configured. No pairing request is minted for an ignored sender: strangers must not create server state when the owner has restricted access. ) annotationsN) OrderedDictt)CODE_TTL_SECONDS_allowlist_env_for_platformiz gateway.runcV^8dQhRR/#returnstr)formats"E/home/ubuntu/.hermes/hermes-agent/gateway/run_inbound_unauthorized.py __annotate__r s#cv\VRR4p\V\4'dV'dVR8wdRV R2#R#)zO``-p `` when the store belongs to a non-default profile, else ``""``.profileNdefaultz-p  )getattr isinstancer ) pairing_store store_profiles& rpairing_profile_argr s8M9d;M-%%-MY[]()`*_~#Nr ).0chs& r *unauthorized_owner_hint..AsKYrN2JYs z ()z#gateway.unauthorized.owner_hint_env)env_varhomez'gateway.unauthorized.owner_hint_genericz!gateway.unauthorized.owner_notice)platformwho allowlistr7)gateway.sessionr._MAX_SENDER_NAME_CHARSjoinstripr rr) rr*r+r,r. safe_namer9r6r:s &&&$ runauthorized_owner_hintr@5sA0bLbcIKYKKQQSI(1YKr'! $s7|C)-8G  /SCD 0=]f yyrcD]tRt^KtRt]3RRlltRRltRRltRt R #) UnauthorizedOwnerNotifieraTells the owner's home channel about the first drop of each unrecognized DM sender. One notice per (platform, user_id) per gateway process: the first drop is the useful signal (an owner who typo'd their own ID); repeats would only let a stranger spam the home channel. c V^8dQhRRRR/#)r max_seenintr Noner )rs"rr&UnauthorizedOwnerNotifier.__annotate__Rs///T/rc X\4Vn\^\V44VnR#)N)r_seenr$rE _max_seen)selfrDs&&r__init__"UnauthorizedOwnerNotifier.__init__Rs9D QH .rc$V^8dQhRRRRRR/#)r rr r*r boolr )rs"rrrGVs!cdrc V\V43pW0P9dVPPV4R#RVPV&\VP4VP8dVPP RR7KBR#)FN)lastT)r rJ move_to_endlenrKpopitem)rLrr*keys&&& r first_time$UnauthorizedOwnerNotifier.first_timeVshc'l+ **  JJ " "3 ' 3$**o. JJ  E  *rc V^8dQhRRRR/#)r hintr r rFr )rs"rrrG`src aaaaa"SP4FlwopooSVP8wdK\SP4\VP48XdR#^RIHpV!VVVVV3RlSR7GRjxL R# R#L 5i)zWBest-effort post to the source platform's home channel; silent when none is configured.N)present_notificationc4<SPSSSRS 2R4#)u⚠️ z/unauthorized-sender notice failed for %s:%s: %s)_send_home_channel_message)rZr7r8runner transportsr2UnauthorizedOwnerNotifier.notify..ls#99dI/?Arr)r8)_home_channel_transportsr8r chat_idgateway.warning_notificationsr\) rLr_sourcerZ_cfgr\r7r8r`s &f&f @@@rnotify UnauthorizedOwnerNotifier.notify`s/5/N/N/P +HdD)6??*4<< C$77 J&"    0Q sA7B >B ? B )rKrJN) __name__ __module__ __qualname____firstlineno____doc___MAX_SEEN_SENDERSrMrWrh__static_attributes__r rrrBrBKs  (9/rrB)r)rn __future__rlogging collectionsr agent.i18nrgateway.pairingrrr<ro getLoggerloggerrr%r(r@rBr rrrxs[ ##I   = )b-z,&&r