+ jHjJ% a0t$Rt^RIHt^RIt^RIt^RIHt^RIHtH t H t ^RI H t H t HtHtHtHtHt]P&!]4t]!RR7!RR 44tR&t]UUUu/uFwrq ]!WV4bK uppptR ]R &]!]4tR tR tR'RRlltRRltRRlt R(RRllt!R(RRllt"RRlt#R(RRllt$RRlt%RRlt&R(R R!llt'R(R"R#llt(R(R$R%llt)R#uupppi))zPlugin capability declarations + consent state. Every capability id maps 1:1 to a trust gate that already exists on the enforcing surface; ids without an enforcing gate are deliberately never minted. ) annotationsN) dataclass)datetimetimezoneUTC)AnyDictIterableListMappingOptionalTupleT)frozenc:]tRt^t$RtR]R&R]R&R]R&RtR#) CapabilitySpecz9One declarable capability and the legacy gate it maps to.stridztuple[str, ...] legacy_path descriptionN)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__rC/home/ubuntu/.hermes/hermes-agent/hermes_cli/plugin_capabilities.pyrrsC G  rrzdict[str, CapabilitySpec]CAPABILITY_REGISTRYgranted_capabilitiescapabilities_consentc$V^8dQhRRRRRR/#)rawr plugin_namerreturn list[str]r)formats"r __annotate__r):s!SsYrc V'g.#\V\\34'g-\P RV\ V4P 4.#.pVFp\V\4'g\P RW4K1VP4pV\9d6\P RWRP\\444KWB9gKVPV4K V#)aNormalize a manifest ``capabilities:`` value into known capability ids. Unknown ids are dropped with a warning: they can never be granted by this build, so hiding them from the consent screen is the fail-closed choice (the plugin must degrade gracefully). uFPlugin %s: manifest 'capabilities' must be a list, got %s — ignoringz2Plugin %s: ignoring non-string capability entry %ru9Plugin %s: unknown capability %r (known: %s) — ignoringz, ) isinstancelisttupleloggerwarningtyperrstripVALID_CAPABILITY_IDSjoinsortedappend)r$r%outitemcaps&& rparse_declared_capabilitiesr9:s  cD%= ) ) T c++ - C$$$ NNOQ\ c jjl * * NNK$))F3G,H"I K^ JJsO Jrc V^8dQhRRRR/#)r# capabilities Iterable[str]r&r'r)r(s"rr)r)VsQQQ9Qrcn\PV4Uu.uFq\9gKVNK up#uupi)zODeduplicated (order-preserving) subset of *capabilities* with a registry entry.)dictfromkeysr2)r;cs& r_knownrAVs-}}\2 P2!;O6OAA2 PP Ps 22c V^8dQhRRRR/#)r#r;r<r&rr)r(s"rr)r)[s==m==rcRP\\V444p\P!VP R44P 4#)z?Deterministic sha256 over a capability set (order-insensitive). zutf-8)r3r4sethashlibsha256encode hexdigest)r;canons& rcapability_set_hashrK[s; IIfS./ 0E >>%,,w/ 0 : : <r)r(s"rr)r)cs#  S *E QU rc2TpVf^RIHpV!4;'g/pVPR4;'g/PR4;'g/PV4;'g/p\V\4'dV#/# \ d/u#i;i)u\``plugins.entries.`` or ``{}`` — never raises (unreadable state = not granted).) load_configpluginsentries)hermes_cli.configrQgetr+r> Exception)rMrNcfgrQentrys&& r _plugin_entryrYcs ; 5-%%2C'')$**// :@@bEEiPVVTV"5$//u7R7  s-BBBB)BB BBc$V^8dQhRRRRRR/#)r#rMrrNrOr& frozensetr)r(s"rr)r)ps(KKCK1LKXaKrc\W4P\4p\V\4'g \ 4#\ \ RV444#)z9The set of capabilities the user has granted this plugin.c3r"TF-p\V\4'gKVP4xK/ R#5iN)r+rr1.0r@s& r 'granted_capabilities..us#Is!jC6HIAGGIIss77)rYrU GRANTED_KEYr+r,r[rA)rMrNr$s&& rr r psB  * . .{ ;C c4 { VIsII JJrc$V^8dQhRRRRRR/#)r#rXzMapping[str, Any]specrr&boolr)r(s"rr)r)xs"-^rcTpVPF-p\V\4'gR#VPV4pK/ \ V4#)z>True when the deprecated ``allow_*`` key for *spec* is truthy.F)rr+r rUrf)rXrenodeparts&& r_legacy_gate_setrjxs@D  $((xx~! :rc(V^8dQhRRRRRRRR/#)r#rMr capabilityrNrOr&rfr)r(s"rr)r)s*#Gbnrrch\PV4pVf\PRW4R#\ W4pV\ VRRW///R79dRRreM8\ WC4'd%RRV R R PVP4 R 2reMRR re\PR YV'dR MRV4V#)zCanonical check: is *capability* live for *plugin_id*? True via ``granted_capabilities`` OR the deprecated-but-honored legacy ``allow_*`` key. Unknown ids / unreadable state -> False.u9capability check for unknown id %r (plugin %s) — deniedFrRrS)rNTr zlegacy key plugins.entries..z (deprecated)z not grantedzecapability_check plugin=%s capability=%s decision=%s checked_by=plugin_capability_granted evidence=%sallowdeny) rrUr.debugrYr rjr3rinfo)rMrlrNrerXallowedevidences&&& rplugin_capability_grantedrus  " ": .D | PR\h ) ,E))YU^TfHgkeyrr&r)r(s"rr)r)s!34rcbVPV/4p\V\4'g/pW V&V#)zA``parent[key]`` as a dict, replacing any non-dict value in place.) setdefaultr+r>)rwrxchilds&& r _child_dictr|s2   c2 &E eT " "s Lrc(V^8dQhRRRRRRRR/#)r#rMrgrantedr<declaredr&Noner)r(s"rr)r)s/SScSMS]SW[Src^RIHpHpV!4p\\\VR4R4V4pVP \ 4p\ V\4'd \V4M.\V4,p\\RV444V\ &R\\V44R\P!\4PRR7/V\&V\ ,F6p \ V ,P"EvrTp V Fp \W4p K R W&K8 V!V4\$P'R TR P)V\ ,4;'gR V\,R,R ,4R#)zPersist a consent decision: ``granted_capabilities`` (union with prior grants), the consent record (hash of the declared set the user saw + UTC timestamp), and the legacy ``allow_*`` key for each grant so existing enforcement sites keep working unchanged.)rQ save_configrRrSc3V"TFp\V\4'gKVxK! R#5ir^)r+rr_s& rra!record_consent..s&O&QJq#r)rMrNconsenths&& r consent_hashrsLI.22;?G)'488 FdA1c""q12d2rc(V^8dQhRRRRRRRR/#) r#rMrrr<rNrOr&r'r)r(s"rr)r)s,===+=5P==rch\W4p\V4Uu.uF qDV9gK VNK up#uupi)zDeclared-but-ungranted capabilities: everything at first consent, only the additions on an update re-consent (they must be re-consented before going live).)r rA)rMrrNr~r@s&&& rpending_capabilitiesrs4 #95Gh' <'!G+;AA' << L LV':6(;K'LLLr))ztools.override)allow_tool_overrideuvReplace built-in tools (e.g. shell_exec, write_file) — an override can intercept everything routed through that tool)zllm.provider_override)llmallow_provider_overridez^Run host-owned LLM calls against a provider other than your active one (uses your credentials))zllm.model_override)rallow_model_overridezLChoose which model host-owned LLM calls use (spend follows the chosen model))zllm.agent_id_override)rallow_agent_id_overridez/Attribute its LLM calls to a different agent id)zllm.profile_override)rallow_profile_overridez,Run LLM calls under a different auth profile)zllm.task_override)rallow_task_overridezDRoute its LLM calls through the host's built-in auxiliary task lanes)zgateway.platform_actions)allow_platform_actionszkAct on connected chat platforms as the gateway bot (add reactions, rename threads) via ctx.platform_actions)?r^)*__conditional_annotations__r __future__rrFlogging dataclassesrrrrtypingrrr r r r r getLoggerrr.r_CAPABILITY_ROWSrrr[r2rcrr9rArKrYr rjrur|rrrr)cidpathdescrs000@rrs #!,,FFF   8 $ $B*AQ2@P_S4 ((@P2.!!45% $ 8Q = K,S83=MM{2s'C*