+ jHj4<Rt^RIHt^RIt^RIt^RIt^RIHt^RIt^RIH t H t ^RI H t ^RI HtHtHt]'d^RIHt]P&!]4tRtR R ]3t!R R ]4t] !R R7!RR44tRRltRRltRRltRRltRRltRRRRRR/RRllt R R!lt!RRRRRR/R"R#llt"R$t#R%t$R&t%R#)'uOne frozen routing identity per inbound gateway event. A multiplexed gateway answers three questions about every event, and until now answered them in three places that only agreed because they read the same fallback chain: WHICH bot received it (``_transport_owner``), WHO may admit it (``_authorization_home_for_source``) and WHERE the turn runs (``_resolve_profile_home_for_source`` / ``_session_key_profile``). :func:`resolve_identity` answers all three once and pins the result on the source as a wire-invisible dynamic attribute (like ``_transport_adapter_ref``); the existing helpers read it when present and keep their fallback chain when absent, so a source built outside the runner still resolves as before. ``SessionSource.profile`` stays the serialized runtime profile — ``None`` on the wire means the receiving bot's own profile — so nothing here changes the wire format or any historical ``agent:main`` key. ) annotationsN)suppress) dataclassfield)Path) TYPE_CHECKINGAnyOptional) SessionSource _identity_transport_adapter_ref_authorization_profile_homec]tRt^$tRtRtR#)IdentityUnresolvedzUnder multiplexing the event's runtime profile could not be established (an explicit ``profile_routes`` entry targets a profile this gateway does not serve). Callers drop the event; it must never fall through to the default profile.N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r=/home/ubuntu/.hermes/hermes-agent/gateway/session_identity.pyrr$sArrT)frozenc]tRt^*t$RtR]R&R]R&R]R&R]R&RtR ]R &]!R R R R 7tR]R&]!R R R R 7t R ]R&] RRl4t ] RRl4t ] RRl4t RRltRtR #)RoutingIdentityuEverything a turn needs to know about who it is, resolved once at ingress. ``transport_profile`` owns the receiving adapter (its credential and allowlist); ``runtime_profile`` is the profile that executes the turn — the same name unless a ``profile_routes`` entry re-homed the event. Both are explicit (``"default"`` is spelled out); ``None`` never means default here. ``multiplexed`` is False for a standalone gateway, whose keys stay in the legacy ``agent:main`` namespace whatever profile it was launched with. strtransport_profileruntime_profilerauthorization_home runtime_homeTbool multiplexedNF)defaultcomparehashzOptional[weakref.ref] transporttransport_inferredcV^8dQhRR/#)returnrr)formats"r __annotate__RoutingIdentity.__annotate__Ds@@3@rc 2^RIHpV!VP4#)u``agent:`` prefix for this identity's session keys — byte-identical to :func:`gateway.session._session_key_namespace` for every historical key.)_session_key_namespace)gateway.sessionr/session_key_profile)selfr/s& r namespaceRoutingIdentity.namespaceCs ;%d&>&>??rcV^8dQhRR/#)r)r*rr)r+s"rr,r-Ks..D.rc (VPR, #)zstate.db)r r2s&r store_pathRoutingIdentity.store_pathJs  :--rcV^8dQhRR/#)r)r* Optional[str]r)r+s"rr,r-OsBB]Brc BVP'd VP#R#)zThe ``profile=`` argument :func:`gateway.session.build_session_key` expects for this identity: the runtime profile under multiplexing, else ``None`` (legacy namespace).N)r"rr7s&rr1#RoutingIdentity.session_key_profileNs (,'7'7'7t##ATArcV^8dQhRR/#)r)r*rr)r+s"rr,r-TsHHHrc BVPeVP4#R#)zGThe live receiving adapter, or None when it is gone or was never known.N)r&r7s&radapterRoutingIdentity.adapterTs#'>>#=t~~G4Grr)rrrrr__annotations__r"rr&r'propertyr3r8r1r@rrrrrr*sK(-T5u'UI$U %UENN @@ ..BB HHrrc V^8dQhRRRR/#)r)sourcerr*Optional[RoutingIdentity]r)r+s"rr,r,YsGGG 9GrcX\V\R4p\V\4'dV#R#)zDThe identity pinned on *source* by :func:`resolve_identity`, if any.N)getattr_IDENTITY_ATTR isinstancerrEidentitys& r identity_ofrMYs'v~t4H!(O<<8F$Frc V^8dQhRRRR/#)r)rErr*Noner)r+s"rr,r,_s  3 4 rc\RRR3F.p\\4;_uu_4\W4RRR4K0 \\4;_uu_4RVnRRR4R# +'giKl;i +'giR#;i)uDrop the pinned identity AND the routed runtime profile so the next :func:`canonical_identity` re-routes from scratch — for sources a caller reuses across events whose routing may differ (a guild's cached voice source is shared by every speaker, and ``profile_routes[].user_id`` routes per speaker). ``source.profile`` is the previous event's routing *result*; left in place it short-circuits the route and the new speaker runs as the old one.profile_route_rejectedr _rejected_route_profileN)rIrAttributeErrordelattrprofile)rEattrs& rclear_identityrW_sh  !9;XZst n % % F !& %u . ! ! " !& % % ! ! !s A&A:& A7 : B c V^8dQhRRRR/#)r)rErr*r;r)r+s"rr,r,lsaaaarc`\V4pVeVP'd VP#R#)zThe receiving bot's profile to persist alongside a routing entry (``SessionEntry.transport_profile``); None outside multiplexing or when nothing resolved the source (an unknown transport is never guessed).N)rMr"rrKs& rtransport_profile_ofrZls06"H)1)=(BVBVBV8 % %`\``rc$V^8dQhRRRRRR/#)r)rEr changesrr*r)r+s"rr,r,ss!  = S ] rc \P!V3/VBp\F!p\WR4pVfK\ W#V4K# V#)z:func:`dataclasses.replace` that keeps the wire-invisible provenance (transport ref, authorization home, identity). A plain ``replace`` silently produces a source the runner can only route through heuristics.N) dataclassesreplace_PROVENANCE_ATTRSrHsetattr)rEr\copiednamevalues&, rreplace_sourceressF  37 3F!d+   F% (" Mrc V^8dQhRRRR/#)r)rdrr*r;r)r+s"rr,r,srcj\V\4'dVP4MRpT;'gR#)N)rJrstrip)rdtexts& r_namerks'&uc225;;=D <<4rr@r primary_homec 0V^8dQhRRRRRRRRRR R R /#) r)rEr runnerrr@rr;rlOptional[Path]r*rFr)r+s"rr,r,s> &)47$;Irc\V4pVeV#\WW#VR7# \d"p\P RT4Rp?R#Rp?ii;i)uBThe identity already pinned on *source*, else :func:`resolve_identity` — the one call every ingress path makes FIRST, before any key is derived. ``None`` = unresolved under multiplexing (``source.profile_route_rejected`` is set): the caller drops the event and says so once; it must never fall through to ``agent:main``.N)rnr@rrlzidentity unresolved: %s)rMresolve_identityrloggerdebug)rErnr@rrlrLexcs&$$$$ rcanonical_identityrusW6"H 7%' '  .4s ! A AA c(V^8dQhRRRRRRRR/#) r)rEr rnrrr;r*rFr)r+s"rr,r,s,%% %&)%>K%%rc \V4pVfR#\\\VRR4RR44'gR#\V4pVeV#^RIHp^RIHp\\VRR44;'gRp\\VR R44;'gTpW78Xd\V!44MV!V4p W8XdT M\VPV44p Wn \W8WR RR 7p \V\V 4V #) unPin the identity of a source rebuilt from durable state (``SessionEntry.origin``, a ``sessions`` row, a cached copy) — no live adapter, so ``transport=None``: the restored row of the transport matrix, where delivery goes through the persisted transport owner or fails closed. *transport_profile* is what the routing index persisted at ingress (``SessionEntry.transport_profile``); ``None`` = a row written before the column existed, whose transport is unknown → nothing is pinned and the legacy heuristics (``_is_shared_bot_satellite``) keep deciding. Standalone gateways have nothing to restore (one bot, one home). Nconfigmultiplex_profilesFget_profile_dir)get_process_hermes_home_primary_profile_namer#rUTrrrr r"r&)rkr!rHrMhermes_cli.profilesr{hermes_constantsr|r _resolve_profile_home_for_sourcer rrarI) rErnrtransport_nameexistingr{r|primary_profile runtime_namerr rLs &$$ rrestore_identityrs,-N $79MuU V V6"H38GF,CTJKXXyOD9:MMoL+9+L $ &' ^ ,+< &99&A B*<&(-D*H FNH- Orc 0V^8dQhRRRRRRRRRR R R /#) r)rEr rnrr@rr;rlror*rr)r+s"rr,r,sFSS S&)S47S$S;ISSrc ^RIHp^RIHpHp\ \ \ VRR4RR44p\\ VRR44p V f;\ VRR4p \V 4'd\V !44MR;'gR p \ VR R4p Rp VfVPV4p V eV wr,M=\ VR R4f\P!V4Vn VPW+4wr\V4;'g\V 4;'gT pVRJ;'d#\V4RJ;'d\V 4RJpVe\P!V4MRpV'g4\V!44p\WVVRVR 7p\!V\"V4V#W8Xd!Ve \V4M\V!44pM^R IHpV!V4pVVn\ V RV 4 R\ VRR4 2p\ VRR4RJd\+V R24h\\ VRR44fEW8XdRMTpVfVP-V4MVP-VVR7pT;'gTTn\VP04;'gT pVV8XdTM\VP5V44p\VVVVRVVR7p\!V\"V4V# Td/pRTnTP0Tn\+T RT 24ThRp?ii;i)aTResolve and pin the :class:`RoutingIdentity` of an inbound *source*. *adapter* is the receiving adapter when the caller holds it; otherwise the source's own transport provenance is consulted. *transport_profile* names the receiving bot's owning profile when the caller knows it by construction (the runner's per-profile handlers); ``None`` = derive it from the adapter registry, primary when unknown. *primary_home* is the primary bot's home for authorization (default: the process home, never a per-turn override). Stamps ``source.profile`` the way the ingress handlers always did (routed name, else a secondary's own name; ``None`` stays ``None`` for the primary so the wire is unchanged) and ``_authorization_profile_home`` for the existing authorization readers. Raises :class:`IdentityUnresolved` under multiplexing when the route is rejected. )ProfileRouteRejected)get_hermes_homer|rxNryFr}_active_profile_namer#platformr r~rzrd/chat_idrhrQTz: profile route rejectedrU)adapter_profilez: )rrrr r"r&r')gateway.profile_routingrrrr|r!rHrkcallable_transport_ownerweakrefrefr _owning_profilerrrarIrr{r r_profile_name_for_sourcerQrUrRr)rErnr@rrlrrr|r"ractiver owner_profileowner _registeredrr' transport_refhomerLrr{whererroutedrtrr s&$$$$ rrqrqs$=Iwwvx>@TV[\]KGF,CTJKO!7>.6v.>.>5?DVVYvz40H#'M''/  %* "G 63T : B,3KK,@F )%+%;%;G%N" ,-XX}1EXXN DnnU3D-E-MnnRWXeRfjnRn,3,?GKK(TM O%&"-#$EUbd 1(3?3KT,/QUVmVoQp7,^<);F&x(34AgfiQS6T5U VEv/74? E7*B!CDD WVY -.6"0"C$ A.parse_authenticated_subject..#s?b\aWX 1c@R@R\asFT) rJr startswithAUTH_SUBJECT_PREFIXjsonloadslen ValueErrorlistalltuple)subjectpartss& rparse_authenticated_subjectrs gs # #7+=+=>Q+R+R 73':#;#<=> ud # #E aCC?b\a?bCCC?b\a?brs # (//-   8 $-/Ln]AA  $+H+H+H\G a  :>'+LP(%PS:>S'+SLPSl!  2r