+ jHj`aR:tI0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIHt^RIHtHtHtHt^RIHt^RIHt^RIHt]P6!R4t] P:P=R4'd ^RIH t!H"t"M^R I#H!t!H"t"R t$] PN!R4t(Rt)Rt*]!R;^R<])R7t+RRlt,RRlt-^RI.H/t/RRlt0RRlt1RRlt2RRlt3RR lt4^R!I.H5t5H6t6H7t7R"R#lt8R$R%lt9R&R'lt:R=R(R)llt;]R.R/lt?R0R1lt@R2R3ltAR=R4R5lltBR6R7ltC^tDRsE]^k] P!4tGR8R9ltHR# ]%dRt!R t$!R R ]&4t"Li;i)>zChat/terminal WebSocket plumbing: PTY bridge selection and registry, WS client/origin/auth gates, chat argv resolution, gateway/sidecar URL building. N)Optional)FastAPIRequest WebSocketWebSocketDisconnect)Path)PtySessionRegistryzhermes_cli.web_serverwin) WinPtyBridgePtyUnavailableError) PtyBridger TFc]tRt^)tRtRtR#)r z5Stub when the platform PTY bridge cannot be imported.N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r?/home/ubuntu/.hermes/hermes-agent/hermes_cli/web_server_chat.pyr r )sCrr s\x1b\[RESIZE:(\d+);(\d+)\]g?g?)ttl max_sessions buffer_cap read_timeoutc4V^8dQhR\R\RR/#)wspathreturnN)rstr)formats"r __annotate__r"6s!  y 3 4 rc"\PRV4VPRRR7GRjxL R#L \dR#i;i5i)zDClose only the terminal socket when its child stops accepting input.z5pty input stalled path=%s; recycling terminal sessionizPTY input stalled)codereasonN)_logwarningclose Exception)rrs&$r_close_stalled_pty_inputr*6sALLH$O hhD)PTY pump: stream until disconnect, then close the bridge. Used when no ``?attach=`` token is supplied (keep-alive opt-in). Behavior is identical to the pre-keep-alive ``pty_ws`` body, including the 54028 half-open-socket protection (reader EOF → close the WS so the writer's ``ws.receive()`` unparks) and the #53227 ``to_thread`` offloads for the blocking ``bridge.close()``. cV^8dQhRR/#rrNr)r!s"rr""_legacy_pump..__annotate__Is!!$!rc <"SPRSP\4GRjxL pVf\P!\ 4;_uu_4\ P!SP4GRjxL RRR4\P!\ 4;_uu_4SP4GRjxL RRR4R#V'g%\ P!\4GRjxL KSPV4GRjxL EKLL +'giL;iLn +'giR#;iLPL6 \ d\P!\ 4;_uu_4\ P!SP4GRjxL RRR4M +'giM;i\P!\ 4;_uu_4SP4GRjxL RRR4R# +'giR#;ii;i \P!\ 4;_uu_4\ P!SP4GRjxL RRR4M +'giM;i\P!\ 4;_uu_4SP4GRjxL RRR4i +'gii;i;i5i)TN) run_in_executorread_PTY_READ_CHUNK_TIMEOUT contextlibsuppressr)asyncio to_threadr(sleep_PTY_IDLE_BACKOFF send_bytes)chunkbridgelooprs rpump_pty_to_ws$_legacy_pump..pump_pty_to_wsIs !"224F]^^=$$Y//'' 5550$$Y//hhj  0/#!--(9:::--..._&60/ !0//!;/ $$Y//'' 5550///$$Y//hhj  0///$$Y//'' 5550///$$Y//hhj  0///scK%HDH"K$D:D;D?*K)D.=D,>D. K HH1E2H9E EEHD D) $K,D.. D? 9 KHE HH"K4$F'FF' K' F7 2*KH0G31H6 K H KHH#K;$I. I" I. % K. I> 9*K#K 7J: 8K = K K KKNtypezwebsocket.disconnectbytestextzutf-8r)colsrowslegacy)r)r6get_running_loop create_taskreceive RuntimeErrorget isinstancer encode _RESIZE_REmatchendlenresizeintgroupwriter*rcancelr4r5CancelledErrorr)r7r() rr<r> reader_taskmsgrawrBrNr=s ff @r _legacy_pumprZ?s   # # %D!!4%%n&67K. JJL( wwv"88'''"C{wwv.8s.C.Cdkk'*$$S)EC0 3u{{1~#6SQ=P Qc****.rAAA   !7!7 C C  D ---7)  "+A    D C-   !7!7 C C  D C C C ---sKH HHIHHH H+(I*H++I.H00 I ; KAKJ J J  K J, '+KKKK)_LOOPBACK_HOSTScFV^8dQhR\R\\,/#rrrrrr )r!s"rr"r"s++)+ +rc>^RIHp^RIHpV!WP4#)zReturn a rejection reason token for the peer IP, or None when allowed (:func:`hermes_cli.web_server_boundary.ws_client_reason` on the dashboard app state).app)ws_client_reason)hermes_cli.web_serverrahermes_cli.web_server_boundaryrbstate)rrarbs& r_ws_client_reasonrfs*? B **rc0V^8dQhR\R\/#r]rbool)r!s"rr"r"s))i)D)rc\V4RJ#)z7True when the peer IP passes :func:`_ws_client_reason`.N)rfrs&r_ws_client_is_allowedrls R D ((rcFV^8dQhR\R\\,/#r]r^)r!s"rr"r"s00y0Xc]0rc>^RIHp^RIHpV!WP4#)uReturn ``host_mismatch …`` / ``origin_mismatch …``, or None when allowed (:func:`hermes_cli.web_server_boundary.ws_host_origin_reason` on the dashboard app state).r`)ws_host_origin_reason)rcrardrore)rraros& r_ws_host_origin_reasonrps*D YY //rc0V^8dQhR\R\/#r]rh)r!s"rr"r"s..9..rc\V4RJ#)z=True when the upgrade passes the dashboard Host/Origin guard.N)rprks&r_ws_host_origin_is_allowedrss !" % --rc0V^8dQhR\R\/#r]rh)r!s"rr"r"sHHyHTHrc>\V4;'d \V4#)zDReturn True when the WebSocket upgrade matches dashboard boundaries.)rsrlrks&r_ws_request_is_allowedrvs %b ) G G.CB.GGr)_GATEWAY_WS_PROTOCOL"_GATEWAY_WS_TICKET_PROTOCOL_PREFIX#_gateway_ws_ticket_from_subprotocolc0V^8dQhR\R\/#r])rr)r!s"rr"r"swrc^RIHpT!RRR\VPR\4!4UUu.uF5wr#VP 4P R4VP R43NK7 uppRVP'dVPP^3MRR RR R R R RVPPRRRR/ 4#uuppi)uA ``Request`` facade over a ``WebSocket`` for the auth helpers. ``_verify_access_token`` only touches ``request.headers`` (X-Forwarded-For via ``client_ip``) and ``request.client`` on this path (``audit=False``, no cookie/redirect work), so a lightweight duck-typed stand-in avoids constructing a real ASGI request inside the upgrade. ``scan_session_providers`` itself never sees the request — only the provider callbacks do. )rr@httpheadersitemszlatin-1clientNserverschemermethodGETr query_stringr root_path) fastapirgetattrr}dictlowerrLrhosturlr)rrkvs& r_ws_request_viewrs  ' GT B DF DWWY%%i0!((92EF DF299>>1%$$% R   Fs;B?chV^8dQhR\R\\\,\3,/#r])rtuplerr )r!s"rr"r"s,L%L% L%eHSM3,>&?L%rc aaa^RIHpHp^RIHpHpVSP 9d#V!S4pVfR#RVR,RR/SnR #\\VPRR 44pV'Ed^R I H oH o^R IHpHpHp R VVV3R llp RV3Rllp SP$P'RR4p V 'dV !V!V 44R!#\)S4wrVR8XdR##T;'gSP$P'RR4pV'dGV !V4pVP'R4R8Xd V!R4hV !V4V'd\*SnR$#R%#SP$P'RR4pV'Ed^RIHp^RIHpV!\9S4VR R7pTeT !R\TRR4R\TRR4/4S!SP:\TRR4\TRR4SP<'dSP<P>MRSP@PBR7R(#S!SPDRSP<'dSP<P>MRSP@PBR7R)#R*#SP$P'RR4pV'gR*#\FPH!VPK4VPK44'dR(#R+# Tdp T !RT 24R"uRp ? #Rp ? ii;i Tdp T !\/T 44R&uRp ? #Rp ? ii;i Tdp T !RT 24R'uRp ? #Rp ? ii;i),u9Validate WS-upgrade auth; return ``(reason, credential)``. ``reason`` is None when accepted, else a short token (``no_credential``, ``token_mismatch``, ``ticket_invalid``, ``internal_invalid``); ``credential`` names what was presented so the accept path can log *how*. Loopback / ``--insecure``: legacy ``?token=`` (constant-time compared). Gated: ``?ticket=`` (browser-minted, single-use, 30s TTL) or ``?internal=`` (process-lifetime, multi-use, only for server-spawned WS clients so the PTY child can reconnect; never injected into the SPA), or ``?token=`` holding a user session access token (verified against the dashboard auth session providers — the same ``verify_session`` seam the native bearer REST leg uses — e.g. a token-mode Remote desktop connection). The legacy in-process ``_SESSION_TOKEN`` is rejected in gated mode: a leaked ``_SESSION_TOKEN`` must not grant access. Either mode: a local Desktop (no static token) presents the private one-use ``X-Hermes-Gateway-Ticket`` grant its REST calls use (``authenticate_native_ws``). A socket that sends that header is judged by it alone: on a core socket (``/api/ws``, ``/api/pty``, the audio streams) the grant is refused (``native_invalid``) even when a valid ``token`` query credential rides along. That is intended; only the plugin WebSocket gate accepts the grant. )HEADERauthenticate_native_ws_SESSION_TOKENraNuser_idsubjectproviderlocal auth_requiredF) AuditEvent audit_log) TicketInvalidconsume_internal_credentialconsume_ticketc(V^8dQhR\RR/#)rr%rN)r )r!s"rr"%_ws_auth_reason..__annotate__s L LC LD Lrc<S!SPTSP'dSPPMRSPPR7R#)rr%iprN)WS_TICKET_REJECTEDrrrr)r%rrrs&r_reject _ws_auth_reason.._rejects6 --f&(iiiBIINNRrvv{{ LrcV^8dQhRR/#r.r)r!s"rr"rs D DT Drc<RVPR4RVPR4/SnVPR4'dVR,SPR&R#R#)rrissuerN)rJ_hermes_auth_identity)infors&r_stamp_identity(_ws_auth_reason.._stamp_identitysS488I. DHHZ>+@+@+BCC $$_! 6*SE*+55 6.! 2C!11 2,! 48L>LL* L%L*%L*-M 4 MM M c0V^8dQhR\R\/#r]rh)r!s"rr"r"Ws**I*$*rc*\V4^,RJ#)zETrue when the WS-upgrade credential is accepted. See _ws_auth_reason.N)rrks&r _ws_auth_okrWs 2 q !T ))rc<V^8dQhR\\,R\\,R\\,R\\,R\\,R\\\,\\,\\,3,/#rresume sidecar_urlprofileactive_session_file workspace_cwdrrr rlistr)r!s"rr"r"\svY6Y6 SMY6/7}Y6NVWZmY6!#Y6C=Y6-2$s)Xc]HUYN2Z,[Y6rc^RIHpHp^RIHpHp^RIHp ^RIH p H p Rp T;'gRP4p V 'dV P4R8wd V!V 4p T !V R, R R 7wr^R I HpV!R R R 7pV e\V 4VR&^RIHpHpHpV e[V!4P)R4pV!V4FpVP+VR4K V!V 4;_uu_4V!VR7RRR4M V!VR7V'd VVR&VVR&V !V4VP3RR4VP3RR4VP3RR4VP3RR4RVR&V'd=T!V eT MRR R7pV!VV4wppVP54V'dTpVVR&V'dVVR &V'dVVR!&V f\74;p'dVVR"&\9V4V'd\V4V3#RV3# +'giEL;i \,d\.P1RR R7EL`` performs. ``workspace_cwd`` (an already-validated host directory, ``chat_workspaces.resolve_chat_cwd``) is the workspace the user picked for a FRESH chat: it becomes ``HERMES_CWD`` (where a self-spawned gateway starts) and ``HERMES_TUI_CWD`` (what the TUI passes as the explicit ``cwd`` of ``session.create`` when attached to the in-memory gateway, whose own cwd is the dashboard's launch dir). )_config_profile_scope_resolve_profile_dir)_open_session_db_for_profile_session_latest_descendant) PROJECT_ROOT)_apply_tui_python_env_make_tui_argvNrcurrentzui-tuiF)tui_dev)build_subprocess_envT) scrub_secretsinherit_profile_home HERMES_HOME)apply_terminal_config_to_envread_raw_configterminal_config_owned_env_varsterminal)envz9Failed to apply terminal config bridge for dashboard chat)exc_info HERMES_CWDHERMES_TUI_CWDNODE_ENV productionHERMES_TUI_DISABLE_MOUSE1HERMES_TUI_INLINE COLORTERM truecolorHERMES_TUI_DASHBOARD) read_onlyHERMES_TUI_RESUMEHERMES_TUI_SIDECAR_URLHERMES_TUI_ACTIVE_SESSION_FILEHERMES_TUI_GATEWAY_URL)hermes_cli.web_server_profilesrrhermes_cli.web_server_sessionsrrhermes_cli.mainrhermes_cli.main_tui_launchrrstriprtools.environments.localrr hermes_cli.configrrrrJpopr)r&r' setdefaultr(_build_gateway_ws_urlr)rrrrrrrrrrrr profile_dir requestedargvcwdrrrrrraw_launch_terminalenv_var _resume_db latest_resume _latest_pathgateway_ws_urls&&&&& r_resolve_chat_argvr\sJ&[g,P"&KB%%'IY__&)3*95 |h6FID> U NC -Ma [ [  "#2"3"7"7 "C 9:MN&O&y11,521 )S 1)L - #NN:|,NN-s3NN&,NN; ,"%C 1$0IddL  *DVZ*X 'M<     "F#)  (3 $%0C ,- 2G2I I I(6 $% :3s3x# 55D# 55W211 a P[_ `a,    sCAH+ H 5H> H I H HH"IIIz0.0.0.0z::c:V^8dQhR\\,/#rrrr )r!s"rr"r"s < <# :?&`` for server-spawned WS clients, or None when unbound. Gated mode uses the process-lifetime internal credential, NOT a single-use browser ticket: the child reads the URL once and reuses it on every reconnect, and a 30s-TTL ticket can expire before a slow cold boot dials. r bound_portN:[z]:rF)internal_ws_credentialrrzws://?) rcrrar"rre startswithrr)urllibparse urlencode) rextra_qsrrarportnetlocr)auths &, r_server_internal_ws_urlr3s: " $D 399lD 1D t#&$;ts7K7Kqb TXSYYZ[_Z`QaFsyy/511O245( 6(4&&,,"8"89MD9MH9M"N!O PPrc:V^8dQhR\\,/#rr)r!s"rr"r"s..x}.rc\R4#)zAws:// URL the PTY child attaches to for JSON-RPC gateway traffic.z/api/wsr3rrrr r s "9 --rcFV^8dQhR\R\\,/#)rchannelrr$)r!s"rr"r"s"@@@ @rc\RVR7#)zBws:// URL the PTY child publishes events to, or None when unbound.z/api/pubr8r6r:s&r_build_sidecar_urlr;s ":w ??rc<V^8dQhR\\,R\\,R\\,R\\,R\\,R\\\,\\,\\,3,/#rr)r!s"rr"r"svEE SME/7}ENVWZmE!#EC=E-2$s)Xc]HUYN2Z,[Erc,"^RIHpHpRVRVRV/pVeW7R&VeWGR&V!V4;_uu_4GRjxL \P!\ 3/VBGRjxL uuRRR4GRjxL #L9LL +GRjxL 'giR#;i5i)zResolve chat argv off the event loop (it may run ``npm run build``); the async lock keeps one-build-at-a-time without parking worker threads.)_get_chat_argv_lockrarrrNrr)rcr>rar6r7r)rrrrrr>rakwargss&&&&& r_resolve_chat_argv_asyncr@sz ? {Iw OF&(;$% "/"3'''&&'9DVDD(''D('''s\5BA1BA7A3A7 B+A5,B3A75B7B =B> B B Bc<V^8dQhR\R\R\/#)rrar8r)rr r)r!s"rr"r"s!'CDrc^RIHpV!V4pVPV4f>\P!RRR7wrE\ P !V4\V4W1&W1,#)zHReturn the per-channel file where a dashboard TUI writes its active sid.)_get_pty_active_session_fileszhermes-pty-active-z.json)prefixsuffix)rcrCrJtempfilemkstemprr(r)rar8rCfilesfdraw_paths&& r _active_session_file_for_channelrKsQC )# .E yy!''/CGT   h >rcLV^8dQhR\PP/#r) concurrentfuturesThreadPoolExecutor)r!s"rr"r"s  z11DD rc\fb\;_uu_4\f=\PP \ RR7s\ P!R4RRR4\#\# +'gi\#;i)zALazily create the bounded console worker pool (once per process).Nzhermes-console) max_workersthread_name_prefixcL\;'d\PRRR7#)FT)waitcancel_futures)_console_executorshutdownrrr'_get_console_executor..s*-TT)22d2STr)rV_console_executor_lockrMrNrO_CONSOLE_EXECUTOR_MAX_WORKERSatexitregisterrrr_get_console_executorr^ss # # ($.$6$6$I$I =Rb%J%d!TU $  $ # s AA00 B c~V^8dQh/^\9d)\\PP,;R&#)rrV)__conditional_annotations__rrMrNrO)r!s"rr"r"s2RJI8J..AABISrii)NNNNN)Jr`rloggingr6r\concurrent.futuresrMr4rrresysrF threadingurllib.requestr,typingrrrrrrpathlibrhermes_cli.pty_sessionr getLoggerr&platformr+hermes_cli.win_pty_bridger r r hermes_cli.pty_bridge_PTY_BRIDGE_AVAILABLE ImportErrorrIcompilerMr3r9 PTY_REGISTRYr*rZrdr[rfrlrprsrvrwrxryrrrr frozensetr r"r3r r;r@rKr[rVLockrZr^r")r`s@rrts  DD501 D ||u%%\\H ZZ6 7  !b_Kbd  D.N;+) 0. H 2L%^* Y6|Y-. <Q.. @ E"!"EII") SDI!DlD Ds0 E+E++FF