.cjH&dZddlmZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z mZddlmZmZddlmZgdZd Zd Zejd Zd,dZd-dZd.dZd/dZd0dZeedd1d!Zeedd2d"Zd#eedd$d3d)Z Gd*d+eZ!dS)4u``command`` secret source — resolve secrets via a user-configured helper. Ports the security semantics of the desktop app's TypeScript ``CommandSecretsProvider`` (hermes-desktop ``src/main/secrets/commandProvider.ts``) to the Python agent. The helper command (e.g. ``keepassxc-cli``, ``secret-tool``, or a script that cats a tmpfs env file) comes from ``secrets.command`` in ``config.yaml`` — NEVER from ``.env``, which holds only secret values. Security model (mirrors the TS provider line-for-line where it matters): * The command string is the USER'S OWN configuration (same trust level as the ``.env`` file they control), so it is run via ``/bin/sh -c ``. * The requested key is passed to the child ONLY via the ``HERMES_SECRET_KEY`` environment variable — it is NEVER interpolated into the shell string, so a hostile key name (e.g. ``"; rm -rf ~``) is inert data, not code. * Hard timeout (default 3s) + output cap (default 1 MiB); any failure (non-zero exit, timeout, spawn failure, oversized output) degrades to "no value" rather than raising. * Failures log ONLY structured fields (exit code / signal / errno) to stderr — never the command string, the helper's stderr, or any secret value. The helper's stderr is captured via a pipe and DISCARDED so its diagnostics (which can carry secret material) never reach our stderr. * The startup/apply path runs the helper exactly ONCE (with an empty ``HERMES_SECRET_KEY``) — it is never called per-key in a loop, so a helper that blocks (e.g. on a vault unlock prompt) can't be spawned dozens of times. * PLATFORM: the provider is POSIX-only (needs ``/bin/sh``). On Windows it degrades to an empty result with a warning; Windows users stay on the default ``env`` provider. ) annotationsN)Path)DictOptional) ErrorKind SecretSource) FetchResult)r apply_command_secretsget_command_secretlist_command_secretsparse_secret_outputunquote_dotenv_valueg@iz^([A-Za-z_][A-Za-z0-9_]*)=(.*)$returnboolcPtjdkptjdkS)NntWindows)osnameplatformsystem>/home/ice/.hermes/hermes-agent/agent/secret_sources/command.py _is_windowsrIs 7d? = 2 so a lone quote (``"``) is left intact rather than collapsing to empty, and ``""``/``''`` correctly yield an empty string. Shared by the single-key parser and the list path so both unquote identically. "')striplen startswithendswith)rts rrrMs A 1vv{{ c   zz# LL  "#**S//2w Hrstdout wanted_key Optional[str]c|dd}|d}dd|DD}|D]y}t|}|J|d|kr@t |d}|dkr|ndcSzt|dkrdS|}|dkrdSt|}|rU|d|krz'parse_secret_output..msZ  ,,2;1F1F rc3>K|]}|VdS)N)r$)r3rs r z&parse_secret_output..os*22SSYY[[222222rNr"rz=*) replacesplitr1r2grouprr$r%re fullmatch) r)r*textlines dotenv_linesr4mvalue env_shapeds rr r ^su >>&$ ' 'D JJt  E22E222L :: OOD ! !}}} 771:: # #(44E"KKMMR//55T 9 9 9 $ <1t JJLLE {{t''J   Q  : - - L 0 0 3 3 9 9 ; ; < < Dt Lrcommand secret_keytimeout_secondsfloatmax_output_bytesintc@trtdtjdStj}||d< tjdd|g|tj tj tj d}n;#t$r.}td |j tjYd}~dSd}~wwxYw | | \}}n#tj$r t jt j|jt$jn1#t(t*tf$r|YnwxYw | d n"#tjt.tf$rYnwxYwtd |d dtjYdSwxYw|jdkr|jdkrK t%j|j j} n%#t.$rt7|j } YnwxYwd| } } nt7|jd} } td| d| tjdSt9||kr!td|dtjdS|ddS)u^Run the helper via ``/bin/sh -c`` and return its stdout, or None. The key is passed as DATA via ``HERMES_SECRET_KEY`` — never interpolated into the command string. Both stdout and stderr are captured via pipes (never inherited); stderr is discarded. Any failure logs structured fields only and returns None — never raises. ze[secrets:command] the 'command' provider is POSIX-only (needs /bin/sh); resolving no value on Windows)fileNHERMES_SECRET_KEYz/bin/shz-cT)envstdinr)stderrstart_new_sessionzD[secrets:command] helper failed to spawn; resolving no value: errno=)timeoutg?z)[secrets:command] helper timed out after gzs; resolving no valuer?nonez:[secrets:command] helper failed; resolving no value: code=z signal=z-[secrets:command] helper output exceeded the z-byte cap; resolving no valuezutf-8r9)errors)rprintsysrOrenvironcopy subprocessPopenDEVNULLPIPEOSErrorerrno communicateTimeoutExpiredkillpggetpgidpid_signalSIGKILLProcessLookupErrorPermissionErrorkill ValueError returncodeSignalsrrr%decode) rDrErFrHrMprocexc stdout_bytes_stderr_discardedsigcodesignames r _run_helperrusJ}}  =    t *//  C)C g &$??"       !Y ! !    ttttt *.*:*:?*:*S*S' ''  $   Ibj**GO < < < <"OW=    IIKKKKK     S  ) ) ) )):w?    D   " N " " "    tt%( ! ?Q   ,ot&677< , , ,4?*++ ,'DD00&'D  , , ,") , ,    t <+++  ? ? ? ?    t   wy  9 99s;B C#B??CC""F826D)(F8)+EF8EF8E21F82FF8F#F87F8G22HHDict[str, str]cdi}|dddD]}|}|r|dr.t|}|sKt |d||d<|S)uParse a KEY=VALUE blob into a map (the list/enumerate path). Mirrors the TS ``list()``: only env-shaped lines contribute; comments and non-matching lines are skipped. A bare-value helper yields ``{}`` — per-key resolution via :func:`get_command_secret` still works. r-r.r0rr")r9r:r$r&r1r2rr;)r)outrr4rAs r_parse_dotenv_maprysC~~fd++11$77;;yy{{ ts++   OOD ! !  .qwwqzz::AGGAJJ Jr)rFrHkeyc|pd}|sdSt||||}|dSt||S)uResolve a single secret by running the helper with the key in ``HERMES_SECRET_KEY``. Returns None on any failure — never raises.r8N)r$rur )rDrzrFrHr)s rr r sT}"##%%G t #8H I IF ~t vs + ++rc|pd}|siSt|d||}|iSt|S)zEnumerate secrets by running the helper ONCE with an empty key. Returns the dotenv map ONLY when the helper emits a KEY=VALUE blob; a bare-value helper returns ``{}``. Never raises. r8)r$rury)rDrFrHr)s rr r "sR}"##%%G  "o7G H HF ~ V $ $$rF)override_existingrFrH home_pathr}r~Optional[Path]r ct}|pd}|s d|_|Str|jd|St |d||}||jd|St|}||_|s|jd|S| D]\}} | dkr|j |8|s:tj |r|j |t| tj |<|j||S)a5Run the helper once at startup and set its KEY=VALUE output on ``os.environ``. LEGACY shim retained for API symmetry with ``apply_bitwarden_secrets``; the startup path goes through :class:`CommandSource` + the registry orchestrator instead (which owns precedence and the environ writes). r8msecrets.command.enabled is true but secrets.command.command is empty. Set the helper command in config.yaml.Nthe 'command' secret source is POSIX-only (needs /bin/sh); skipping on WindowsNzahelper command failed at startup; no secrets applied (process env / .env values remain in effect)z|helper output was not a KEY=VALUE map; nothing applied at startup (a bare-value helper still resolves single keys on demand))r r$errorrwarningsappendrurysecretsitemsskippedrrXgetapplied) rDr}rFrHr~resultr)rrzrBs rr r ;s]]F}"##%%G  =   }} "    "o7G H HF ~ ;    ''GFN  Q    mmoo # # U ;;==B   N ! !# & & &   RZ^^C%8%8  N ! !# & & &  3c"""" Mrc@eZdZdZdZdZdZddZdd Zdfd Z xZ S) CommandSourceuUser-configured helper command as a registered secret source. Composes with the other sources (Bitwarden, 1Password, plugins) through the ``apply_all()`` orchestrator — enable any combination simultaneously; there is deliberately NO single-provider selector. ``fetch()`` only fetches: precedence, ``override_existing`` semantics, conflict warnings, and the ``os.environ`` writes are the orchestrator's job. Bulk shape: the helper enumerates a KEY=VALUE blob in one run. Config:: secrets: command: enabled: true command: "cat /run/user/1000/hermes-secrets.env" # or per-vault CLIs: keepassxc-cli / secret-tool / pass / gpg — # anything fast and NON-interactive. rDzCommand helperbulkrdictc2dddddddtdddddS) Nz Master switchF) descriptiondefaultz@Helper run via /bin/sh -c; must print a KEY=VALUE blob on stdoutr8zHard timeout for one helper runz)Helper values overwrite .env/shell values)enabledrDhelper_timeout_secondsr})_COMMAND_TIMEOUT_SECONDS)selfs r config_schemazCommandSource.config_schemasT'65II : A3'' K ""   rcfgr~rr ct|tr|ni}t}t|dpd}|sd|_tj|_ |Strd|_tj|_ |S t|dt}n#ttf$r t}YnwxYwt|d|t }|d|_tj|_ |St%|}|s|jd|S||_|S)NrDr8rrrzGhelper command failed (see structured fields above); no secrets appliedz7helper output was not a KEY=VALUE map; nothing to apply) isinstancerr rrr$rrNOT_CONFIGURED error_kindrrGr TypeErrorrjru_MAX_OUTPUT_BYTESINTERNALryrrr)rrr~rrDrQr)rs rfetchzCommandSource.fetchsqT**2cccggi((.B//5577 D L!* 8F M == & L!* 8F M /CGG$<$<>>??GG:& / / /.GGG /Wb'3DEE >% L!* 2F M#F++  O " "I   M  s#(C C'&C'rc|tjkr dS|tjkr dSt||S)NziSet secrets.command.command in config.yaml to a fast, non-interactive helper that prints KEY=VALUE lines.uRun the helper manually in a shell to see its real error — Hermes discards helper stderr so diagnostics can't leak secret material.)rrrsuper remediation)rkindr __class__s rrzCommandSource.remediations\ 9+ + +F   9% % %#   ww""4---r)rr)rrr~rrr )rrrr) __name__ __module__ __qualname____doc__rlabelshaperrr __classcell__)rs@rrrs$ D E E    $----^ . . . . . . . . . .rr)rr)rrrr)r)rr*rrr+) rDrrErrFrGrHrIrr+)r)rrrv) rDrrzrrFrGrHrIrr+)rDrrFrGrHrIrrv) rDrr}rrFrGrHrIr~rrr )"r __future__rrrr<signalrerZrWpathlibrtypingrragent.secret_sources.baserragent.secret_sources.bitwardenr __all__rrcompiler1rrr ruryr r r rrrrrs@#"""""   !!!!!!!!>=======666666    BJ9 : : ====    "@@@@FY:Y:Y:Y:x.6- ,,,,,,*6- %%%%%%8$5- $ AAAAAARd.d.d.d.d.Ld.d.d.d.d.r