+ jHja0t$Rt^RIHt^RIt^RIt^RIHtHt^RI H t H t ^RI H t Ht]P!]4t]P$!4t/tR]R&/tR]R &R%R R lltR R ltRRltRR/RRlltRR/RRlltRR/RRlltRR/RRlltRR/RRlltRRltRRlt RR lt!R!R"lt"R#R$lt#R#)&zModule-level registry for DashboardAuthProvider instances. Plugins call ``register_provider`` via the plugin context hook at startup; the auth gate iterates ``list_providers()`` and uses ``get_provider`` to dispatch on the session's ``provider`` field.) annotationsN)ListOptional)hermes_home_keynormalize_scope)DashboardAuthProviderassert_protocol_compliance dict[str, DashboardAuthProvider] _providersz+dict[str, dict[str, DashboardAuthProvider]]_scoped_providersc V^8dQhRRRR/#)scope Optional[str]returnr )formats"G/home/ubuntu/.hermes/hermes-agent/hermes_cli/dashboard_auth/registry.py __annotate__rs=,Lc\\4pVP\P \ V4/44V#N)dictr updater getr)r providerss& r_mergedrs3Z I &**?5+A2FG rc$V^8dQhRRRRRR/#)r rrcreateboolrr r)rs"rrrs'cc=cTc6Vcrc~Vf\#V'd\PV/4#\PV/4#)zb4brc\\PRWPVP4R#)z$dashboard-auth: registered %s%r (%s)N)_loginfoname display_name)r$r&s&&r_log_registeredr- sII4dMM8K`K`arrc$V^8dQhRRRRRR/#)r r&rrrrr'r)rs"rrr$s# + + 5 + +Z^ +rc\\\V44\;_uu_4\V4p\ VRR7pVfTM \ V4pVP V9d\RVP : 24hWVP &RRR4\RV4R# +'giL;i)zORaises ``TypeError`` on protocol violation, ``ValueError`` on a duplicate name.TrNz,dashboard-auth provider already registered: z provider ) rtype_lockrr"rr+ ValueErrorr-)r&rtarget effectives&$ rregister_providerr6$stH~. &t,#mF ==I %KHMMK\]^ ^ (x}} K* s A"B B+ c$V^8dQhRRRRRR/#r r+r%rrrOptional[DashboardAuthProvider]r)rs"rrr1s"((s(m(?^(rc\;_uu_4\V4PV4uuRRR4# +'giR#;i)z@Return the registered provider for ``name``, or None if unknown.N)r2rrr+rs&$r get_providerr<1s% u~!!$' s 4 A c$V^8dQhRRRRRR/#r8r)rs"rrr7s$66 6&62Q6rc\;_uu_4\V4p\VRR7PV4uuRRR4# +'giR#;i)Fr0N)r2rr"rr;s&$rsnapshot_registrationr?7s2 &uU+//5 s 'A A c ,V^8dQhRRRRRRRRR R /#) r r+r%currentrpreviousr9rrrrr)rs"rrr>s4 -9X'+rcF\;_uu_4\V4p\VRR7pVPV4VJd RRR4R#VfVP VR4MW$V&VeV'g\ P VR4RRR4R# +'giR#;i)zBRestore a host-owned provider registration if it is still current.Tr0NF)r2rr"rpopr )r+rArBrr4s&&&$ rrestore_registrationrE>s &t, ::d 7 *    JJtT "#4L  V  ! !% .    s/B&B/B B c V^8dQhRRRR/#)r rrrlist[DashboardAuthProvider]r)rs"rrrPs--]-6Q-rc\;_uu_4\\V4P44uuRRR4# +'giR#;i)z0All registered providers, in registration order.N)r2listrvalues)rs$rlist_providersrKPs( GEN))+, s "< A cV^8dQhRR/#r rrGr)rs"rrrVsPP9Prcj\4Uu.uFp\VRR4'gKVNK up#uupi)zProviders with ``supports_token`` True, in registration order. The ``token_auth`` seam consults only these, so OAuth/password-only providers are never asked to ``verify_token``; empty => a token-authable route fails closed (401).supports_tokenFrKgetattrps rlist_token_providersrTVs/&' O'!716F+NAA' OO O00cV^8dQhRR/#rMr)rs"rrr]sQQ ;Qrcj\4Uu.uFp\VRR4'gKVNK up#uupi)zProviders with ``supports_session`` True (interactive cookie sessions); the login page, /auth/login and the gate's verify/refresh loops use only these.supports_sessionTrPrRs rlist_session_providersrY]s/&' P'!716H$+OAA' PP PrUc V^8dQhRRRR/#)r r&rrr'r)rs"rrrcs 2 2'< 2 2rc\\V44\;_uu_4V\VP&RRR4\ RV4R# +'giL;i)aRegister a host-owned provider in the process-global slot (upsert). The registry is shared across every profile one dashboard process serves, so these outlive any per-home plugin manager: always targets ``_providers`` (never a per-home overlay) and *replaces* a same-name entry instead of raising, so a forced plugin re-discovery (e.g. after a password change) rotates the provider in place. Pairs with ``unregister_global_provider``. Pairs with ``unregister_global_provider`` for teardown of the exact object still current (#91701). Nzglobal provider )rr1r2r r+r-)r&s&rregister_global_providerr\cs;tH~. $, 8==! &1 s A  A c$V^8dQhRRRRRR/#)r r+r%r&rrrr)rs"rrrrs"S4Idrc\;_uu_4\PV4VJd"\PVR4RRR4R#RRR4R# +'giR#;i)zRemove a global registration if ``provider`` is still current (a stale handle whose provider was already replaced never clears the live one).NTF)r2r rrD)r+r&s&&runregister_global_providerr_rsL  >>$ 8 + NN4 &  +    s 1A A& cV^8dQhRR/#)r rr'r)rs"rrr|s"""rc\;_uu_4\P4\P4RRR4R# +'giR#;i)z"Test-only: drop all registrations.N)r2r clearr rrrclear_providersrc|s+ ! s )A A r)$__conditional_annotations____doc__ __future__rlogging threadingtypingrrhermes_constantsrrhermes_cli.dashboard_auth.baserr getLogger__name__r)Lockr2r __annotations__r rr"r-r6r<r?rErKrTrYr\r_rc)rds@rrpsE#!=\"/1 ,1AC>C cb +QU +(d( 6)-6"$-T- PQ 2"r