epjEUdZddlmZddlZddlZddlZddlmZm Z ddl m Z ddl m Z mZmZmZddlmZmZmZmZmZmZmZejeZiZded <d aeGd d ZeGd dZ eGddZ!d dd4dZ"d5dZ#d6dZ$d7dZ%d7d Z&d8d(Z'd9d*Z(d:d,Z)d-Z*d;d1Z+ duSecret-source registry + apply orchestrator. This module owns everything that must be uniform across secret backends so no individual source can get it wrong: * registration (name/scheme uniqueness, API-version gating) * per-source wall-clock timeout enforcement around ``fetch()`` * precedence: mapped sources beat bulk sources; within a shape, ``secrets.sources`` order (or registration order) decides; first claim wins — later sources never silently clobber an earlier one * ``override_existing`` semantics (may beat .env/shell, never another secret source, never a protected var) * cross-source conflict warnings (shadowed claims are always surfaced) * provenance: which source supplied every applied var The single entry point for startup is :func:`apply_all`, called from ``hermes_cli.env_loader._apply_external_secret_sources()``. Plugins register additional sources via ``PluginContext.register_secret_source()`` which lands in :func:`register_source`. In-tree sources are registered lazily by :func:`_ensure_builtin_sources` — the set of bundled sources is deliberately closed (Bitwarden, and 1Password once it lands); new third-party backends ship as standalone plugin repos implementing :class:`agent.secret_sources.base.SecretSource`. ) annotationsN) dataclassfield)Path)DictListMutableMappingOptional)SECRET_SOURCE_API_VERSION ErrorKind FetchResult SecretSourceis_valid_env_namereset_source_environmentset_source_environmentzDict[str, SecretSource]_SOURCESFc<eZdZUdZded<ded<ded<ded<dS) AppliedVarz7Provenance record for one env var the orchestrator set.strnamesourceshapebool overrode_envN)__name__ __module__ __qualname____doc____annotations__C/home/thesage/.hermes/hermes-agent/agent/secret_sources/registry.pyrr7s?AA IIIKKKJJJr!rceZdZUdZded<ded<ded<eeZded <eeZded <eeZ ded <eeZ ded <eeZ ded <dS) SourceReportz4One source's outcome within an :class:`ApplyReport`.rrlabelr resultdefault_factory List[str]appliedskipped_existingskipped_claimedskipped_protectedskipped_invalidN) rrrrrrlistr*r+r,r-r.r r!r"r$r$As>> IIIJJJt444G4444"'%"="="=====!&t!#>#>>>>>!&t!>>>>> ((((( &&&I $  & & & & & &&s3+&AAA66&BB#C&C,+C,c<tdadS)NF)rclearr_r r!r"_reset_registry_for_testsrfs NNr!cfgr: home_pathrenvironMutableMapping[str, str]r c}tjddj} dfd }||} ||}n#tjj$rb|t} d|d d jd | _ tj | _ | cY|d St$r`} t} dt!| jd| | _ tj| _ | cYd} ~ |d Sd} ~ wwxYw |d n#|d wxYwt'|ts>t} dt!|jd| _ tj| _ | S|S)uRun source.fetch() under a wall-clock budget; never raises. The budget is enforced with a daemon worker thread: a source that blows its budget is reported as ``TIMEOUT`` and its (eventual) result is discarded. The thread itself may linger until process exit — acceptable for a startup-only path, and strictly better than an unbounded hang on every ``hermes`` invocation. z secret-src-) max_workersthread_name_prefixr5r ct} t|S#t|wxYwr7)rfetchr)tokenrgrirhrs r"_fetchz#_fetch_with_timeout.._fetchsL*733E 0||C33(////(////s 7A)timeoutzfetch exceeded z.0fuBs budget — startup continued without this source (raise secrets.z-.timeout_seconds if the backend is just slow)F)waitz fetch raised z: Nzfetch returned z instead of FetchResult)r5r )fetch_timeout_seconds concurrentfuturesThreadPoolExecutorrsubmitr& TimeoutErrorcancelr errorr TIMEOUT error_kindshutdownratyperINTERNALrE) rrgrhrirsexecutorrrfuturer&resexcs ```` r"_fetch_with_timeoutrsA**3//G!44*E *E*E5H& 0 0 0 0 0 0 0 0 0(( ]]7]33FF!.    MMOOO--CN'NNN;NNN I '.CNJJ u%%%%    --CCS (:CCcCCCI&/CNJJJJJu%%%%   " u%%%%u%%%% fk * *mm Ld6ll3 L L L #+ MsIE3#A:9E3:AEE3/ E8?E7E8E3EE33F  secrets_cfgct|d}g}t|tr|D]9}t|tr"|t vr||vr||:d|D}|rItdd |d t pdt D]}||vr||g}|D]}t |}||}t|tr|ni} | |r||i#t$r td|dYwxYw|S) aEResolve which sources run, in which order. Order: the optional ``secrets.sources`` list wins; sources not named there follow in registration order. Enabled = the source's own ``is_enabled`` says so for its config section. Mapped-vs-bulk precedence is applied on top of this order by :func:`apply_all`. r2cNg|]"}t|tr |tv |#Sr )rErr).0es r" z,_ordered_enabled_sources..sB@@@ C((@-.h->->->->->r!z7secrets.sources names unknown source(s): %s (known: %s)z, nonez0Secret source '%s' is_enabled() raised; skippingTr[) rQrRrEr/rrappendrFrGjoinr: is_enabledra) rexplicitorderentryunknownrenabledrrgs r"_ordered_enabled_sourcesrsy))HE(D!!  $ $E%%% $%8*;*;U@R@R U###@@h@@@   NNI '""DIIh$7$7$A6    u   LL   "$G 0 0$ood##T**2cc 0  %% 'v&&& 0 0 0 NNM$  0 0 0 0 0 0 Ns3*E'FFOptional[Path]c|-t|}|jjdkr|jr|jSdD]@}tj|d}|r |dkr|cSAdS)zBest-effort active profile name for profile-scoped secret aliases. A named profile's HERMES_HOME is ``~/.hermes/profiles/``; the default profile (``~/.hermes``) returns "". Nprofiles)HERMES_PROFILE_NAMEHERMES_PROFILEr>default)rparentrosrirRstrip)rhresolvedenv_namevalues r"_active_profile_namer(s  ?? ? : - -(- -= = x,,2244  Ui''LLL 2r!)_API_KEY_TOKEN_SECRET_KEY _PASSWORDvarprofile Optional[str]c.|sdSd|ddz}||sdS|dt| rt sdSt fdt DsdSS)zBMap ``FOO_`` to ``FOO`` for the active profile when safe.Nr?-c3BK|]}|VdSr7)endswith)rsaliass r" z(_profile_alias_target..Hs/::Qu~~a  ::::::r!)r<upperrlenrany_ALIAS_SUFFIXES)rrsuffixrs @r"_profile_alias_targetr>s t 7??3,,2244 4F <<  t 3v;;, E )%00t ::::/::: : :t Lr!"Optional[MutableMapping[str, str]]c $ddl}||n|jtt|tr|ni}t |}|sS|d}t|trtd|Dn tt|dd}|rt|nd}d|Dd |Dz}g} i|D]|j } t| tr| ni} t| |} | | | f | D]} | j #t $rYwxYwt#} | D]1\}}} | jr$| d | jD2i| D],\} } t+j jpj | j | jsL | n#t $rd YnwxYwd d dfd}| jD]\} }t| t4rt|t4s0|| |}|r|sAt7| |}|r:|| vr6|vr2|||d r$| j d| d|d|d.S)uFetch from every enabled source and apply the merged result to env. ``environ`` defaults to ``os.environ``; injectable for tests. Precedence per env var (most-specific intent wins): 1. ``secrets.preserve_existing`` names — a pre-existing env value always wins for these, even against a source with ``override_existing: true`` (escape hatch for profile-local platform secrets, #58073). 2. Pre-existing env (.env / shell) — unless the winning source has ``override_existing: true``. 3. Mapped sources, in configured order. 4. Bulk sources, in configured order. First claim wins. A later source that also carries the var gets a ``skipped_claimed`` entry and a conflict warning — never a silent clobber, and ``override_existing`` never applies across sources. Profile aliasing (#51447): when running under a named profile, an applied var ``FOO_`` (credential-shaped suffixes only) also hydrates the canonical ``FOO`` so platform adapters and plugins that read fixed env names see the profile's value. The alias obeys the same protected / preserve / claimed / override guards and is disabled with ``secrets.profile_alias: false``. rNpreserve_existingc3K|]A}t|t|+|VBdSr7)rErr)rns r"rzapply_all..ss]$$:a+=+=$BC''))$  $$$$$$r! profile_aliasTr>c(g|]}|jdk |S)rBrrrs r"rzapply_all..|s$:::aag&9&9&9&9&9r!c(g|]}|jdk |S)rCrrs r"rzapply_all..}s$:::6(9(9!(9(9(9r!c3DK|]}t|t|VdSr7)rEr)rvs r"rzapply_all..sE%%Z3-?-?%%%%%%%r!)rr%r&F)is_aliasrrrrrr5ct|s j|dS|vr j|dS|vrJ j| j|d|d jddSt|}|r |vr j |dS|rs j |dS||< j|< j |t| j j | j |<dS)z=Apply one var through the shared guard chain. True = applied.Fz: kept value from z; uW also supplies it (first source wins — remove one binding or reorder secrets.sources))rrrrT)rr.rr-r,r4rrrRr+r*rrr3) rrrexistedclaimedenvoverridepreserve protectedreportrsrs r" _try_applyzapply_all.._try_applys$S)) "))#...ui$++C000ug~~"))#... ''EEgclEE{EEE u3773<<((G 3(??#**3///u x #**3///uCH!;GCL J  c " " "%/{l$ &&&F c " 4r!zapplied profile-scoped z as z (active profile ))rrrrrrr5r)rrir1rEr:rrRr/ frozensetrrrrrprotected_env_vars setdefaultrasetokupdatesecretsr$r%r2override_existingrKrrwarnings)rrhri_osr preserve_raw alias_enabledrorderedfetchesrgr&rsupplied_directlyr?rrr*rrrrrrrrrs @@@@@@@@r" apply_allrMsY6(''ckC ]]F!+K!>!>F++BK&{33G  ??#677L L$ ' '9)$$'$$$-6[[ $??@@M1>F"9---BG;:7:::::W:::;G=?G "I  oofk**T**2cc$VS)SAAV,--- 0055 7 7$$S&+6666 7    D  !UU 1f 9   $ $%%!>%%%    !G&<<V v{ & ; !'))) b!!!y   //44HH   HHH BG               D!...00  JCc3'' z%/E/E  je,,G ' )#w77E &777Ers6#""""" ((((((((777777777777  8 $ $%'&&&&    = = = = = = =  =  % % % % % % %  %">C......b #### &&&&B4444n&&&&R&I     =AIIIIIIIr!