epjK2dZddlmZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z mZddlmZmZddlmZddlmZgd Zd Zd Zejd Zd-dZd.dZd/dZd0dZd1dZeed d2d"Zeed d3d#Z d$eedd%d4d*Z!Gd+d,eZ"dS)5u``command`` secret source — resolve secrets via a user-configured helper. Ports the security semantics of the desktop app's TypeScript ``CommandSecretsProvider`` (hermes-desktop ``src/main/secrets/commandProvider.ts``) to the Python agent. The helper command (e.g. ``keepassxc-cli``, ``secret-tool``, or a script that cats a tmpfs env file) comes from ``secrets.command`` in ``config.yaml`` — NEVER from ``.env``, which holds only secret values. Security model (mirrors the TS provider line-for-line where it matters): * The command string is the USER'S OWN configuration (same trust level as the ``.env`` file they control), so it is run via ``/bin/sh -c ``. * The requested key is passed to the child ONLY via the ``HERMES_SECRET_KEY`` environment variable — it is NEVER interpolated into the shell string, so a hostile key name (e.g. ``"; rm -rf ~``) is inert data, not code. * Hard timeout (default 3s) + output cap (default 1 MiB); any failure (non-zero exit, timeout, spawn failure, oversized output) degrades to "no value" rather than raising. * Failures log ONLY structured fields (exit code / signal / errno) to stderr — never the command string, the helper's stderr, or any secret value. The helper's stderr is captured via a pipe and DISCARDED so its diagnostics (which can carry secret material) never reach our stderr. * The startup/apply path runs the helper exactly ONCE (with an empty ``HERMES_SECRET_KEY``) — it is never called per-key in a loop, so a helper that blocks (e.g. on a vault unlock prompt) can't be spawned dozens of times. * PLATFORM: the provider is POSIX-only (needs ``/bin/sh``). On Windows it degrades to an empty result with a warning; Windows users stay on the default ``env`` provider. ) annotationsN)Path)DictOptional) ErrorKind SecretSource)get_source_environment) FetchResult)r apply_command_secretsget_command_secretlist_command_secretsparse_secret_outputunquote_dotenv_valueg@iz^([A-Za-z_][A-Za-z0-9_]*)=(.*)$returnboolcPtjdkptjdkS)NntWindows)osnameplatformsystemB/home/thesage/.hermes/hermes-agent/agent/secret_sources/command.py _is_windowsrJs 7d? = 2 so a lone quote (``"``) is left intact rather than collapsing to empty, and ``""``/``''`` correctly yield an empty string. Shared by the single-key parser and the list path so both unquote identically. "')striplen startswithendswith)rts rrrNs A 1vv{{ c   zz# LL  "#**S//2w Hrstdout wanted_key Optional[str]c|dd}|d}dd|DD}|D]y}t|}|J|d|kr@t |d}|dkr|ndcSzt|dkrdS|}|dkrdSt|}|rU|d|krz'parse_secret_output..nsZ  ,,2;1F1F rc3>K|]}|VdS)N)r%)r4rs r z&parse_secret_output..ps*22SSYY[[222222rNr#r z=*) replacesplitr2r3grouprr%r&re fullmatch) r*r+textlines dotenv_linesr5mvalue env_shapeds rrr_su >>&$ ' 'D JJt  E22E222L :: OOD ! !}}} 771:: # #(44E"KKMMR//55T 9 9 9 $ <1t JJLLE {{t''J   Q  : - - L 0 0 3 3 9 9 ; ; < < Dt Lrcommand secret_keytimeout_secondsfloatmax_output_bytesintctrtdtjdSt }|t jurddlm}|dd}nt|}||d< tj d d |g|tj tj tj d }n;#t$r.}td |jtjYd}~dSd}~wwxYw ||\} } n#tj$r t jt j|jt*jn1#t.t0tf$r|YnwxYw |dn"#tjt4tf$rYnwxYwtd|ddtjYdSwxYw|jdkr|jdkrK t+j|j j} n%#t4$rt=|j } YnwxYwd| } } nt=|jd} } td| d| tjdSt?| |kr!td|dtjdS| ddS)u^Run the helper via ``/bin/sh -c`` and return its stdout, or None. The key is passed as DATA via ``HERMES_SECRET_KEY`` — never interpolated into the command string. Both stdout and stderr are captured via pipes (never inherited); stderr is discarded. Any failure logs structured fields only and returns None — never raises. ze[secrets:command] the 'command' provider is POSIX-only (needs /bin/sh); resolving no value on Windows)fileNr)build_subprocess_envF) scrub_secretsinherit_profile_homeHERMES_SECRET_KEYz/bin/shz-cT)envstdinr*stderrstart_new_sessionzD[secrets:command] helper failed to spawn; resolving no value: errno=)timeoutg?z)[secrets:command] helper timed out after gzs; resolving no value?nonez:[secrets:command] helper failed; resolving no value: code=z signal=z-[secrets:command] helper output exceeded the z-byte cap; resolving no valuezutf-8r:)errors)!rprintsysrSr renvirontools.environments.localrMdict subprocessPopenDEVNULLPIPEOSErrorerrno communicateTimeoutExpiredkillpggetpgidpid_signalSIGKILLProcessLookupErrorPermissionErrorkill ValueError returncodeSignalsrrr&decode)rErFrGrI source_envrMrQprocexc stdout_bytes_stderr_discardedsigcodesignames r _run_helperr{s}}  =    t())JRZ BAAAAA""USSS :)C g &$??"       !Y ! !    ttttt *.*:*:?*:*S*S' ''  $   Ibj**GO < < < <"OW=    IIKKKKK     S  ) ) ) )):w?    D   " N " " "    tt%( ! ?Q   ,ot&677< , , ,4?*++ ,'DD00&'D  , , ,") , ,    t <+++  ? ? ? ?    t   wy  9 99s1;B-- C%7#C  C%)DG6E  G +E85G7E88G<FGF2/G1F22#GG3HH54H5Dict[str, str]cdi}|dddD]}|}|r|dr.t|}|sKt |d||d<|S)uParse a KEY=VALUE blob into a map (the list/enumerate path). Mirrors the TS ``list()``: only env-shaped lines contribute; comments and non-matching lines are skipped. A bare-value helper yields ``{}`` — per-key resolution via :func:`get_command_secret` still works. r.r/r1r r#)r:r;r%r'r2r3rr<)r*outrr5rBs r_parse_dotenv_mapr sC~~fd++11$77;;yy{{ ts++   OOD ! !  .qwwqzz::AGGAJJ Jr)rGrIkeyc|pd}|sdSt||||}|dSt||S)uResolve a single secret by running the helper with the key in ``HERMES_SECRET_KEY``. Returns None on any failure — never raises.r9N)r%r{r)rErrGrIr*s rr r sT}"##%%G t #8H I IF ~t vs + ++rc|pd}|siSt|d||}|iSt|S)zEnumerate secrets by running the helper ONCE with an empty key. Returns the dotenv map ONLY when the helper emits a KEY=VALUE blob; a bare-value helper returns ``{}``. Never raises. r9)r%r{r)rErGrIr*s rr r /sR}"##%%G  "o7G H HF ~ V $ $$rF)override_existingrGrI home_pathrrOptional[Path]r ct}|pd}|s d|_|Str|jd|St |d||}||jd|St|}||_|s|jd|S| D]\}} | dkr|j |8|s:tj |r|j |t| tj |<|j||S)a5Run the helper once at startup and set its KEY=VALUE output on ``os.environ``. LEGACY shim retained for API symmetry with ``apply_bitwarden_secrets``; the startup path goes through :class:`CommandSource` + the registry orchestrator instead (which owns precedence and the environ writes). r9msecrets.command.enabled is true but secrets.command.command is empty. Set the helper command in config.yaml.Nthe 'command' secret source is POSIX-only (needs /bin/sh); skipping on WindowsNzahelper command failed at startup; no secrets applied (process env / .env values remain in effect)z|helper output was not a KEY=VALUE map; nothing applied at startup (a bare-value helper still resolves single keys on demand))r r%errorrwarningsappendr{rsecretsitemsskippedrr\getapplied) rErrGrIrresultr*rrrCs rr r Hs]]F}"##%%G  =   }} "    "o7G H HF ~ ;    ''GFN  Q    mmoo # # U ;;==B   N ! !# & & &   RZ^^C%8%8  N ! !# & & &  3c"""" Mrc@eZdZdZdZdZdZddZdd Zdfd Z xZ S) CommandSourceuUser-configured helper command as a registered secret source. Composes with the other sources (Bitwarden, 1Password, plugins) through the ``apply_all()`` orchestrator — enable any combination simultaneously; there is deliberately NO single-provider selector. ``fetch()`` only fetches: precedence, ``override_existing`` semantics, conflict warnings, and the ``os.environ`` writes are the orchestrator's job. Bulk shape: the helper enumerates a KEY=VALUE blob in one run. Config:: secrets: command: enabled: true command: "cat /run/user/1000/hermes-secrets.env" # or per-vault CLIs: keepassxc-cli / secret-tool / pass / gpg — # anything fast and NON-interactive. rEzCommand helperbulkrr^c2dddddddtdddddS) Nz Master switchF) descriptiondefaultz@Helper run via /bin/sh -c; must print a KEY=VALUE blob on stdoutr9zHard timeout for one helper runz)Helper values overwrite .env/shell values)enabledrEhelper_timeout_secondsr)_COMMAND_TIMEOUT_SECONDS)selfs r config_schemazCommandSource.config_schemasT'65II : A3'' K ""   rcfgrrr ct|tr|ni}t}t|dpd}|sd|_tj|_ |Strd|_tj|_ |S t|dt}n#ttf$r t}YnwxYwt|d|t }|d|_tj|_ |St%|}|s|jd|S||_|S)NrEr9rrrzGhelper command failed (see structured fields above); no secrets appliedz7helper output was not a KEY=VALUE map; nothing to apply) isinstancer^r rrr%rrNOT_CONFIGURED error_kindrrHr TypeErrorror{_MAX_OUTPUT_BYTESINTERNALrrrr)rrrrrErUr*rs rfetchzCommandSource.fetchsqT**2cccggi((.B//5577 D L!* 8F M == & L!* 8F M /CGG$<$<>>??GG:& / / /.GGG /Wb'3DEE >% L!* 2F M#F++  O " "I   M  s#(C C'&C'rc|tjkr dS|tjkr dSt||S)NziSet secrets.command.command in config.yaml to a fast, non-interactive helper that prints KEY=VALUE lines.uRun the helper manually in a shell to see its real error — Hermes discards helper stderr so diagnostics can't leak secret material.)rrrsuper remediation)rkindr __class__s rrzCommandSource.remediations\ 9+ + +F   9% % %#   ww""4---r)rr^)rr^rrrr )rr^rr) __name__ __module__ __qualname____doc__rlabelshaperrr __classcell__)rs@rrrs$ D E E    $----^ . . . . . . . . . .rr)rr)rrrr)r*rr+rrr,) rErrFrrGrHrIrJrr,)r*rrr|) rErrrrGrHrIrJrr,)rErrGrHrIrJrr|) rErrrrGrHrIrJrrrr )#r __future__rrrr=signalrjr_r[pathlibrtypingrragent.secret_sources.baserrr agent.secret_sources.bitwardenr __all__rrcompiler2rrrr{rr r r rrrrrs&@#"""""   !!!!!!!!>=======<<<<<<666666    BJ9 : : ====    "@@@@Fe:e:e:e:P.6- ,,,,,,*6- %%%%%%8$5- $ AAAAAARd.d.d.d.d.Ld.d.d.d.d.r