+ WjKRt^RIHt^RIHt^RIHt^RIHtRt RRlt RRR llt R R lt R R /RRllt RRRlltRRltR#)a*Capability consent (#64228): declared-vs-granted reads, the consent screen, ``hermes plugins capabilities`` and the legacy ``allow_tool_override`` grant. Sibling of :mod:`hermes_cli.plugins_cmd` (the facade re-exports the names other modules use and is imported late here, never at module level). ) annotations)Path)Optional) _child_dictc^RIHpV#)z`The facade, read at call time: tests patch ``plugins_cmd.`` and sibling calls must see it. plugins_cmd) hermes_clirrs WC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\plugins_cmd_capabilities.py_pcr s & c(V^8dQhRRRRRRRR/#) plugin_idstrkeyvalueboolreturnNone)formats"r __annotate__rs(cDTr c^RIHpHpV!4p\\\VR4R4V4p\ V4Wa&V!V4R#)zEWrite ``plugins.entries.. = value`` into config.yaml.) load_config save_configpluginsentriesN)hermes_cli.configrrrr)rrrrrconfigentrys&&& r _set_plugin_entry_flagr!s:: ]F  K $BINPY ZEeEJr c$V^8dQhRRRRRR/#)rmanifestdict plugin_namerrlistr)rs"r rr s'ZZ4ZcZTXZr cR^RIHpT!T;'g/PR4V4#)zFExtract + normalize the ``capabilities:`` declaration from a manifest.)parse_declared_capabilities capabilities)hermes_cli.plugin_capabilitiesr(get)r#r%r(s&& r $_declared_capabilities_from_manifestr, s#J &B';';N'K[ YYr c V^8dQhRRRR/#)rrrrr&r)rs"r rr&s ` ` ` `r c\4PV4pVf.#V^,R8XdJ^RIHpV!4F6pWPVP 39gK!\ VP4u# .#V^,'g.#\\4P\V^,44V^,4#)zFRead the declared capabilities for an installed/bundled plugin by key. entrypoint)discover_entrypoint_manifests) r _find_plugin_entryhermes_cli.pluginsr0rnamer&r)r,_read_manifestr)rr r0r#s& r _declared_capabilities_for_keyr5&s E $ $S )E }  Qx<D57H||X]]33H11228 88 /0D0DT%PQ(^0TV[\]V^ __r contextinstallc(V^8dQhRRRRRRRR/#)rrrdeclaredr&r6rrr)rs"r rr6s*---t-QT-ei-r c^RIHpHpHpV!W4pV'gV'd V!V.V4R#VR8XdRMRpVP RV RV R24VF?p VP V 4p TP R T R V 'd V P MR 24KA VP R 4\4P4'gVP R V RV R24R#\4PRVP4'd3V!WV4VP RRPV4 RV R24R#VP RV RV R24R#)uShow the capability consent screen and record the decision; True when granted. On consent the pending capabilities are granted under ``plugins.entries..granted_capabilities`` with a hash of the declared set. On decline — or in ANY non-interactive context — they stay ungranted (fail closed) and the plugin must degrade via ``ctx.has_capability()``. Consent + audit, NOT a sandbox. )CAPABILITY_REGISTRYpending_capabilitiesrecord_consentTr7requestsz now requestsz [yellow]Plugin [bold]z[/bold] z% the following capabilities:[/yellow]z [bold]u [/bold] — u [dim]Granting trusts the plugin author with these host surfaces. This is consent, not a sandbox — plugins run as regular Python in-process.[/dim]zu [yellow]Non-interactive session: capabilities NOT granted (fail closed).[/yellow] Run `hermes plugins capabilities z'` to review and `hermes plugins enable z` to grant interactively.Fz" Grant these capabilities? [y/N] u [green]✓[/green] Granted: z, z ([dim]plugins.entries.z.granted_capabilities[/dim])z [dim]Declined. z stays enabled with these capabilities off; it should degrade gracefully (ctx.has_capability()). Re-run `hermes plugins enable z` to grant later.[/dim]) r*r;r<r=printr+ descriptionr _is_tty_ask_yesinputjoin) consolerr9r6r;r<r=pendingverbcapspecs &&&$ r _run_capability_consentrK6sjih"97G   9b( 3 I-:>D MM-i[Fklm"&&s+ 3%|D4D4DRT3UVW MM  5==??  ,,5;7&&/[0I K L  u~~:GMMJJy84 ,TYYw-?,@A%%.K/K M N MM I;'""+,C EF r Nc V^8dQhRRRR/#)rr3z Optional[str]rrr)rs"r rrfs-d-d=-dD-dr c^RIHpHpHp\ 4P 4pVei\ 4P V4pVf2\ 4PV\ 4PV44V^,;'g V^,p.p\ 4P4FpV^,;'g V^,pVeWV^,39dK2\V4p V!V4p VU u0uFq!W4'gKV kK p p V 'gV 'gVfK{VPW^,WV 34K Ve:V'g2\ 4PV\ 4PV44V'gVPR4R#\V4Fwrrp VPRV RV R24V 'gVPR4V F.p W9dRpM W9dR pMR pVPR V R V 24K0 \V \V 4, 4Fp VPR V R 24K K R#uup i)u?``hermes plugins capabilities []`` — declared vs granted.)r;granted_capabilitiesplugin_capability_grantedNz3[dim]No plugins declare or hold capabilities.[/dim]z[bold]z[/bold] [dim](z)[/dim]z declared: [dim](none)[/dim]z[yellow]not granted[/yellow]z[green]granted[/green]uI[green]granted[/green] [dim](via legacy allow_* key — deprecated)[/dim]z z: z>: [green]granted[/green] [dim](not declared in manifest)[/dim])r*r;rNrOr _consoler1_fail_unknown_plugin_message_discover_all_pluginsr5appendr@sortedset)r3r;rNrOrFhitrowsr rr9grantedrI effectivesourcemarks& r cmd_capabilitiesr]fs ennG e&&t, ; EKK!>!>t!D E1vQ D,,.Ah""%(  %(O ; 1#6&s+$7_$7S;TUX;^SS$7 _ dl  S(HyAB/   GSU::4@A  KL5;D\1X  se>&AB MM9 :C#5/b MMBse2dV, -)c(m34C MMBse#ab c56B`s 2IIc$V^8dQhRRRRRR/#)rrrallow_tool_overridezOptional[bool]rrr)rs"r rrs"!!s!!\`!r cVf%\4PRVP4p\VRV4V'dVP RV RV R24R#VP RV RV R 24R#) zCResolve and persist the ``allow_tool_override`` grant for a plugin.Nz[yellow]Allow this plugin to replace built-in tools (e.g. shell_exec, write_file)?[/yellow] This is a privileged capability: an override can intercept everything the agent routes through that tool. Grant it? [y/N] r_u![green]✓[/green] Granted [bold]zD[/bold] permission to override built-in tools ([dim]plugins.entries.z".allow_tool_override: true[/dim]).z[dim]z@ may not override built-in tools. Re-run `hermes plugins enable z2 --allow-tool-override` to grant this later.[/dim])r rCrDr!r@)rFrr_s&&&r _resolve_tool_override_grantras"!enn ! MM  3 57JK /u5%%(E)K M N  C5&&)U+   !r )?)N)__doc__ __future__rpathlibrtypingrr*rr r!r,r5rKr]rarr r rgsH#6 Z ` -W`-`-d`!r