NQj~5nUdZddlmZddlZddlZddlmZmZddl m Z ddl m Z m Z mZddlmZmZmZmZmZejeZiZded <d aeGd d ZeGd dZeGddZd dd,dZd-dZd.dZ d/dZ!d/d Z"d0d&Z#d1d(Z$ d2d3d+Z%dS)4uSecret-source registry + apply orchestrator. This module owns everything that must be uniform across secret backends so no individual source can get it wrong: * registration (name/scheme uniqueness, API-version gating) * per-source wall-clock timeout enforcement around ``fetch()`` * precedence: mapped sources beat bulk sources; within a shape, ``secrets.sources`` order (or registration order) decides; first claim wins — later sources never silently clobber an earlier one * ``override_existing`` semantics (may beat .env/shell, never another secret source, never a protected var) * cross-source conflict warnings (shadowed claims are always surfaced) * provenance: which source supplied every applied var The single entry point for startup is :func:`apply_all`, called from ``hermes_cli.env_loader._apply_external_secret_sources()``. Plugins register additional sources via ``PluginContext.register_secret_source()`` which lands in :func:`register_source`. In-tree sources are registered lazily by :func:`_ensure_builtin_sources` — the set of bundled sources is deliberately closed (Bitwarden, and 1Password once it lands); new third-party backends ship as standalone plugin repos implementing :class:`agent.secret_sources.base.SecretSource`. ) annotationsN) dataclassfield)Path)DictListOptional)SECRET_SOURCE_API_VERSION ErrorKind FetchResult SecretSourceis_valid_env_namezDict[str, SecretSource]_SOURCESFc<eZdZUdZded<ded<ded<ded<dS) AppliedVarz7Provenance record for one env var the orchestrator set.strnamesourceshapebool overrode_envN)__name__ __module__ __qualname____doc____annotations__A/home/alina/.hermes/hermes-agent/agent/secret_sources/registry.pyrr4s?AA IIIKKKJJJrrceZdZUdZded<ded<ded<eeZded <eeZded <eeZ ded <eeZ ded <eeZ ded <dS) SourceReportz4One source's outcome within an :class:`ApplyReport`.rrlabelr resultdefault_factory List[str]appliedskipped_existingskipped_claimedskipped_protectedskipped_invalidN) rrrrrrlistr'r(r)r*r+rrrr!r!>s>> IIIJJJt444G4444"'%"="="=====!&t!#>#>>>>>!&t!t}dt#|jd|_ tj|_|S|S)uRun source.fetch() under a wall-clock budget; never raises. The budget is enforced with a daemon worker thread: a source that blows its budget is reported as ``TIMEOUT`` and its (eventual) result is discarded. The thread itself may linger until process exit — acceptable for a startup-only path, and strictly better than an unbounded hang on every ``hermes`` invocation. z secret-src-) max_workersthread_name_prefix)timeoutzfetch exceeded z.0fuBs budget — startup continued without this source (raise secrets.z-.timeout_seconds if the backend is just slow)F)waitz fetch raised z: Nzfetch returned z instead of FetchResult)fetch_timeout_seconds concurrentfuturesThreadPoolExecutorrsubmitfetchr# TimeoutErrorcancelr errorr TIMEOUT error_kindshutdownr]typerINTERNALrB) rrbrcrhexecutorfuturer#resexcs r_fetch_with_timeoutr|s**3//G!44*E *E*E5H&sI>> ]]7]33FF!.    MMOOO--CN'NNN;NNN I '.CNJJ u%%%%    --CCS (:CCcCCCI&/CNJJJJJu%%%%   " u%%%%u%%%% fk * *mm Ld6ll3 L L L #+ MsIE-A43E-4AEE-) E2?E 1E2E- EE--F secrets_cfgct|d}g}t|tr|D]9}t|tr"|t vr||vr||:d|D}|rItdd |d t pdt D]}||vr||g}|D]}t |}||}t|tr|ni} | |r||i#t$r td|dYwxYw|S) aEResolve which sources run, in which order. Order: the optional ``secrets.sources`` list wins; sources not named there follow in registration order. Enabled = the source's own ``is_enabled`` says so for its config section. Mapped-vs-bulk precedence is applied on top of this order by :func:`apply_all`. r/cNg|]"}t|tr |tv |#Sr)rBrr).0es r z,_ordered_enabled_sources..sB@@@ C((@-.h->->->->->rz7secrets.sources names unknown source(s): %s (known: %s)z, nonez0Secret source '%s' is_enabled() raised; skippingTrX) rNrOrBr,rrappendrCrDjoinr7 is_enabledr]) r}explicitorderentryunknownrenabledrrbs r_ordered_enabled_sourcesrsy))HE(D!!  $ $E%%% $%8*;*;U@R@R U###@@h@@@   NNI '""DIIh$7$7$A6    u   LL   "$G 0 0$ood##T**2cc 0  %% 'v&&& 0 0 0 NNM$  0 0 0 0 0 0 Ns3*E'FFenvironOptional[Dict[str, str]]c ddl}||n|j}t}t|tr|ni}t |}|s|Sd|Dd|Dz}g}i} |D]} || j} t| tr| ni} t| | |} | | | | f | | D]} | | | j#t$rYwxYwi}|D]\} } } t| j| jp| j| }|j || jsL | | }n#t$rd}YnwxYw| jD]W\} }t| t(rt|t(s1t+| s|j | [| | vr|j | z| |vrI|j | |j | d|| d| jd t5|| }|r|s|j |  ||| <| j|| <|j | t;| | j| j| |j| <Y|S) u]Fetch from every enabled source and apply the merged result to env. ``environ`` defaults to ``os.environ``; injectable for tests. Precedence per env var (most-specific intent wins): 1. Pre-existing env (.env / shell) — unless the winning source has ``override_existing: true``. 2. Mapped sources, in configured order. 3. Bulk sources, in configured order. First claim wins. A later source that also carries the var gets a ``skipped_claimed`` entry and a conflict warning — never a silent clobber, and ``override_existing`` never applies across sources. rNc(g|]}|jdk |S)r?rrss rrzapply_all..3s$:::aag&9&9&9&9&9rc(g|]}|jdk |S)r@rrs rrzapply_all..4s$:::6(9(9!(9(9(9r)rr"r#Fz: kept value from z; uW also supplies it (first source wins — remove one binding or reorder secrets.sources))rrrr) osrr.rBr7rrOrr|rprotected_env_vars setdefaultr]r!r"r/okoverride_existingsecretsrHrrr+r*r)r1rr(r'rrr0)r}rcr_osenvreportrorderedfetches protectedrrbr#varclaimedsroverridevalueexisteds r apply_allrs"(''ckC ]]F!+K!>!>F++BK&{33G  ;:7:::::W:::;G=?G "I  oofk**T**2cc$VS)<<V,--- 0055 7 7$$S&+6666 7    D !G&**V v{ & ; !'))) b!!!y   //44HH   HHH !...00  JCc3'' z%/E/E $S)) "))#...i$++C000g~~"))#... ''EEgclEE{EEE 3773<<((G x #**3///CH!;GCL J  c " " "%/{l$ &&&F c " "1 > Ms$3C<< D D E33 FF)rr r9rr2r)rrr2rL)r2rQ)r2rU)rr rbr7rcrr2r )r}r7r2rQr4)r}r7rcrrrr2r.)&r __future__rconcurrent.futuresrklogging dataclassesrrpathlibrtypingrrr agent.secret_sources.baser r r r r getLoggerrrCrrr[rr!r.rKrPrTrNrar|rrrrrrsb6#"""""((((((((''''''''''  8 $ $%'&&&&    = = = = = = =  =  % % % % % % %  %">C......b #### &&&&4,,,,^&&&&T37\\\\\\\r