+ Wj%Fa0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI H t H t H t Ht^RIHt^RIHtHt^RIHt]P,!R4t]!RR 4t]!R R 4t]!R R 4t]!R 4t]P8RRl4tRRltRRltRRlt ]P8R3RR/RRlll4t!RRlt"RRlt#Rt$RRlt%]PL!R 4t'R!R"lt(R#t)/t*R$]+R%&R&R'R(R)/t,R&R*R(R+/t-R&R,R(R-/t.R.]-R/]./t/R0R1lt0]P8R24t1R#)4uShared plumbing for the extracted dashboard routers — thin wrappers over the late-binding seam in :mod:`hermes_cli.web_deps` (web_server owns helpers/state; every access resolves at call time so ``monkeypatch.setattr(, ...)`` wins).) annotationsN)AnyCallableDictOptional) HTTPException) LateStatelate)_profile_cli_argszhermes_cli.web_server_profile_scopezhermes_cli.web_server_profiles_config_profile_scope_spawn_hermes_actionzhermes_cli.web_server_gateway_CONFIG_MUTATION_LOCKcV^8dQhRR/#)profile Optional[str])formats"RC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\web_routers\_common.py __annotate__r s c #"\V4;_uu_4\;_uu_4RxRRR4RRR4R# +'giL;i +'giR#;i5i)ukProfile scope, then the config mutation lock — the write-path nesting every config-mutating handler uses.N)r r)rs&rconfig_write_scopers:  " " # ! " " ! s/A#A< A A# A A A  A#c$V^8dQhRRRRRR/#rrrfnzCallable[[], Any]returnrr)rs"rrr(s"))M)7H)S)rc\aa"VV3Rlp\P!V4GRjxL #L5i)zCRun ``fn()`` inside ``_profile_scope(profile)`` on a worker thread.cv<\S4;_uu_4S!4uuRRR4# +'giR#;iN)r rrsr_runscoped_to_thread.._run+s" G $ $4% $ $ $' 8 Nasyncio to_threadrrr"sff rscoped_to_threadr)(s$""4( (( ( !,*,c$V^8dQhRRRRRR/#rr)rs"rrr2s#))=)>O)TW)rc\aa"VV3Rlp\P!V4GRjxL #L5i)uRun ``fn()`` inside ``_config_profile_scope(profile)`` on a worker thread — home + secret scope without the process-global skills-module swap.cv<\S4;_uu_4S!4uuRRR4# +'giR#;ir )r r!srr"%config_scoped_to_thread.._run6s" "7 + +4, + + +r$Nr%r(sff rconfig_scoped_to_threadr/2s$""4( (( (r*c$V^8dQhRRRRRR/#)rrrroutestrrr)rs"rrr=s!s}rcT;'gRP4'dV#^RIHpV!4'd\RV R2R7hV#)u.The profile a DESTRUCTIVE or PRIVILEGED route acts on, or 400 when it is ambiguous. One backend serves every profile, so an omitted ``profile`` on a route that deletes, overwrites or privileges profile-owned data is not a default — it silently meant "whichever home this process launched with". Named profile: honoured. Omitted: rejected as soon as the process hosts more than one profile (``is_multiplex_active()``, decided once at boot by ``activate_multi_profile_hosting_eagerly``). A genuinely single-profile host has nothing to confuse, so there an omitted profile keeps meaning the launch profile and `curl` against a plain ``hermes serve`` is unchanged. "Privileged" is the same class as "destructive": arming an auto-approved shell hook in the wrong profile is at least as bad as removing one from it. )is_multiplex_activez requires an explicit profile: this backend serves several profiles, so an unnamed target would act on the wrong profile's data. status_codedetail)stripagent.secret_scoper5r)rr1r5s&& rdestructive_profiler<=sT  26WQQR R Nrr9c(V^8dQhRRRRRRRR/#)rlog_msgr2statusintprefixrr9r)rs"rrrXs/ m m# ms mM mUb mrc#"RxR# \dh\d7p\PT4\YeTR7hT RT 2R7hRp?ii;i5i)uMap unexpected exceptions to an ``HTTPException``. ``HTTPException`` passes through; anything else is logged with ``log_msg`` (traceback), then re-raised as ``HTTPException(status, f"{prefix}: {exc}")`` — or ``detail`` when given (fixed message, exception text only in the log). Nz: r7)r Exceptionlog exception)r>r?rAr9excs&&&$ r http_failurerGWs^m  m gASvll\b[ccefiejYkllms)A AAA1AAAc 0V^8dQhRRRRRRRRRRR R /#) rrrargvlistnamer2r>rArdictr)rs"rrrhs<77 7"&7.17?B7LO7 7rc\VRV4;_uu_4\\V4V,V4pRRR4RRRXPRV/# +'giL";i)zzSpawn a background ``hermes -p `` action; a spawn failure is logged and becomes ``500 ": "``.iNokTpidrK)rGr r rO)rrIrKr>rAprocs&&&$$ rspawn_profile_actionrQhsO gsF + +#$5g$>$EtL , $txx 66 , +s A  A c$V^8dQhRRRRRR/#)rvaluerr9r2rr)rs"rrrrs!=##rcdT;'gRP4pV'g\RVR7hV#)z0Strip ``value``; 400 with ``detail`` when empty.r4r6r7)r:r)rSr9strippeds&& rrequirerVrs+ ""$H F;; OrzWRefusing to save a redacted credential preview; re-enter the full secret to replace it.c V^8dQhRRRR/#)rrSrrrr)rs"rrrs44s4}4rcLV'gR#^RIHpRV!\V44 R2#)zNReturn a display-only credential sentinel that can never gain write authority.N) redact_keyu «redacted:»)hermes_cli.configrYr2)rSrYs& rredacted_credential_previewr\s$ , CJ/0 33rz.{4}\.\.\..{4}c V^8dQhRRRR/#)r submittedrrboolr)rs"rrrsJJcJdJrc\T;'gR4pVPR4'dR#VR8H;'g\PV4RJ#)zFRecognize current, stale and legacy dashboard previews by shape alone.r4u «redactedTz***N)r2 startswith_LEGACY_MASK_RE fullmatch)r^rSs& ris_redacted_credential_previewrdsJ  R E  %% E> I I_66u=TIIrgr@zdict[str, float]_corrupt_store_warned_aterrorstate_db_corruptmessageubstate.db corrupt — run `hermes doctor` (then `hermes doctor --fix` or `hermes sessions repair`).state_db_deleted_waluanother Hermes process still holds an old copy of the session database's write-ahead log — quit every Hermes process on this profile, run `hermes doctor` (it names the holders), then start Hermes again. Do not run `hermes doctor --fix` while they run.state_db_replacedustate.db was replaced while Hermes was running — stop Hermes, run `hermes doctor`, then start it again. Do not run `hermes doctor --fix`, which would repair the wrong file in place. deleted_walreplacedcV^8dQhRR/#)rrrr)rs"rrrs J J- Jrcr^RIHp\V4\P!4rC\ P V4p\P V!V4\4pVeWE, \8d!V\ V&\PRW4M\PRW4\R/VCRV/CR7#)zThe structured ``state_db_corrupt`` 503 for a malformed store, warning once per store per :data:`_CORRUPT_STORE_WARN_INTERVAL_S` (debug afterwards). Callers ``raise ... from exc``.)classify_persistence_erroruwstate.db at %s is unreadable (%s); dashboard reads return a status payload until it is repaired — run `hermes doctor`z"state.db at %s still has error: %sipathr7)hermes_state_errorsror2time monotonicreget_STORE_STATUS_DETAIL_BY_CAUSECORRUPT_STORE_DETAIL_CORRUPT_STORE_WARN_INTERVAL_SrDwarningdebugr)db_pathrFrokeynowlastr9s&& rcorrupt_store_statusr~s?7|T^^- # ' ' ,D * . ./I#/NPd eF |sz%CC(+ % 78? F 6E S1HF1HFC1H IIrc#"^RIHpHpHpRxR# \P T3d2p\ YA4'gT!T4'gh\Y4ThRp?ii;i5i)zMap a corrupt-image ``sqlite3.DatabaseError`` or ``StateDbReplacedError`` from a state.db read to a 503 status payload, warning once per store per :data:`_CORRUPT_STORE_WARN_INTERVAL_S`. Busy/locked and every other error propagate unchanged.)StateDbReplacedErrorrois_malformed_db_errorN)rqrrorsqlite3 DatabaseError isinstancer~)rzrrorrFs& rcorrupt_store_as_statusrsX lk:  ! !#7 8:#44=RSV=W=W "70c9:s* AAAA AAAr )2__conditional_annotations____doc__ __future__rr& contextlibloggingrerrrtypingrrrrfastapirhermes_cli.web_depsrr hermes_cli.web_server_profilesr getLoggerrDr r r rcontextmanagerrr)r/r<rGrQrV REDACTED_CREDENTIAL_WRITE_DETAILr\compilerbrdrwre__annotations__rvDELETED_WAL_DETAILSTATE_DB_REPLACED_DETAILrur~r)rs@rrs^#  00!/</0&(HI46VW24ST""9: ))4  mei m m 7^! 4**./J"'-/*/  s # [  t "/0BJPh i J   : :r