+
Wj R t ^ RIt^ RIt^ RIt^ RIt^ RIt^ RIt^ RIt^ RIt^ RI H t H
t
H t ^ RI H
t
^ RIHtHtHtHt ^ RIHtHtHtHtHt ^ RIHt ^ RIH t ^ RI H t ^ R I H t ^ R
I!H"t" ^ R I#H$t$H%t% ^ R I&H't'H(t(H)t)H*t*H+t+H,t,H-t-H.t.H/t/H0t0H1t1 ^ R
I2H3t3H4t4H5t5H6t6H7t7 ^ RI8H9t9 ]Pt ! R4 t;]! 4 t<] ! RR4 t=] ! RR4 t>] ! RR4 t?] ! RR4 t@] ! RR4 tA] ! RR4 tB] ! RR4 tC] ! R R4 tD] ! R R4 tER R/R R lltFRR! R" lltG]4 RR? R@ ll4 tV]
`` action; spawn failure -> 500.
The profile reaches the child as argv (``_profile_cli_args``) — the only mechanism
that retargets a fresh process's import-time home bindings.
)r5 r6 )r% )r3 r4 r5 r6 r0 s &&$$$r<
_spawn_actionr@ 5 s tV TTr> c : V ^8 d QhR\ \ , /# r2 r0 r r9 )r; s "r< r= r= B s + +HSM +r> c ^ RI Hp T ;' g RP 4 pV' d VP 4 R8X d V! 4 # \ V4 V! VR7 # )u Pairing store for ``profile`` — the dashboard's own when unspecified.
The gateway keeps one store per served profile, so without scoping an
operator on a named profile would approve into a whitelist their gateway
never consults. ``PairingStore`` resolves the profile home itself
(``default`` maps to the global store); only the name is validated here,
so nothing process-global is swapped across the ``await`` boundary.
) PairingStore currentr0 )gateway.pairingrE striplowerr* )r0 rE requesteds & r< _pairing_storerM B sG - B%%'I )Y6~ # **r> z /api/pairingc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= U s g g
gr> c " \ V 4 pR \ P ! VP 4 G Rj xL
RVP 4 /# L5i)pendingNapproved)rM asyncio to_thread list_pending
list_approved)r0 stores & r< list_pairingrW T s? 7 #E W . .u/A/A BBJPUPcPcPe ffBs 0A
AA
z/api/pairing/approvec $ V ^8 d QhR\ /# r2 body)r )r; s "r< r= r= \ s r> c " \ V P 4 pV P ;' g R P 4 P 4 pV P
;' g V P ;' g R P 4 pV' d V' g \ RRR7 h\ V P
4 ;' g VP V4 pV' d+ \ P ! VP W#4 G Rj xL
pM7\ P ! VP W#P 4 4 G Rj xL
pV' d RRRV/# V' g) VP V4 ' d \ RR V R
2R7 h\ R R V R
2R7 h L LU5i)rF z,platform and request_id or code are required status_codedetailNokTuseri z
Platform 'z0' is locked out after too many failed approvals. z;Pairing request or code not found or expired for platform 'z'.)rM r0 platformrK rJ
request_idcoder
boollooks_like_request_idrR rS approve_request approve_codeupper_is_locked_out)rZ rV rc target
by_request_idresults & r< approve_pairingro [ s> 4<< (E
##**,224H oo0000b
7
7
9F 64bcc )PPU-H-H-PM (()>)>QQ ((););X||~VV
dFF++ U 1 1( ; ;j
:j$k
"]^f]ggi j RVsZ AF F 1F
F (F ;F $F 9F:7F 1F2 F >
F F ##F F z/api/pairing/revokec $ V ^8 d QhR\ /# rY )r )r; s "r< r= r= y s s s} sr> c " \ V P 4 pV P ;' g R P 4 P 4 pV' d V P
' g \
RRR7 h\ P ! VP W P
4 G Rj xL
' d RR/# \
RRV P
R V R
2R7 h L,5i) rF r\ z!platform and user_id are requiredr] Nr` Trb zUser z not found in approved list for .)
rM r0 rc rK rJ user_idr
rR rS revoke)rZ rV rc s & r< revoke_pairingru x s 4<< (E
##**,224H 4<<<4WXX
u||X||
DDDd|
C% ~Eefneoop0q
rr Es$ ACC$;C C C*#Cz/api/pairing/clear-pendingc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= s c c# cr> c x " R RR\ P ! \ V 4 P 4 G Rj xL
/# L5i)r` TclearedN)rR rS rM
clear_pendingrH s &r< clear_pending_pairingrz s0 $ ):):>';R;`;`)a#a bb#as 0:8
:c
V ^8 d QhR\ R\ \ \ 3, R\ R\ \ \ 3, /# )r2 r4 routebase_urlr7 )r9 r: r )r; s "r< r= r= s; T#s(^ s tTWY\T\~ r> c R T RVP RR4 R\ VP R4 ;' g . 4 RVP RR4 R\ VP R4 4 RVP RR4 RVP RR4 R \ VP R 4 ;' g . 4 R
VP R
4 R V R V 2R
\ VP R4 4 RVP RR4 RJ/ # )r4 descriptionrF eventsdeliverlog deliver_onlypromptscriptskills
created_aturlz
/webhooks/
secret_setsecretenabledTF)getr8 rf )r4 r| r} s &&&r< _webhook_route_summaryr s uyy 3$uyy*00b1599Y.UYY~ 67%))Hb)%))Hb)$uyy*00b1eii -
(:dV,d599X./599Y-U: r> z
/api/webhooksc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= s 8 8# 8r> c : " R p\ W4 G Rj xL
# L5i)c ^ RI Hp V P 4 pRV P 4 RTRV P 4 P 4 UUu. uF w r#\
W#V4 NK upp/# u uppi ) Nr r}
subscriptions)hermes_cli.webhookwebhook_get_webhook_base_url_is_webhook_enabled_load_subscriptionsitemsr )whr} r4 r| s r< _runlist_webhooks.._run sn '++- r--/ #%#9#9#;#A#A#C #CKD 'tH=#C
s A'Nr! r0 r s & r<
list_webhooksr s
)7 77 7 z/api/webhooks/enablec : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= s 8C= r> c a " V 3R lp\ RRRR7 ;_uu_ 4 \ P ! V4 G Rj xL
RRR4 \ S RRR7 pR R
R R R
R
RVR, ' * /VC# L2 + ' g i L8; i5i)c < \ S 4 ;_uu_ 4 \ R R4 RRR4 R# + ' g i R# ; i)r TN)r" r, rH s r< r enable_webhooks.._run s'
(
( #It 4 )
(
(
(s
, = z0Failed to enable webhook platform from dashboard z"Failed to enable webhook platform.)r_ Nzenabling webhookszWebhook enable)whatlabelr` Trc r r
needs_restartrestart_started)r$ rR rS r )r0 r restart_results f r< enable_webhooksr s 5
H#Vz { { %%%
|+G:MUefN dI4^,= >>
&
| {s+ BA/A-A/.B-A// A? :Bc F V ^8 d QhR\ R\ \ , /# r2 rZ r0 )r r r9 )r; s "r< r= r= s 4 4} 4x} 4r> c a a
a a " ^ RI Ho V 3R lp\ W4 G Rj xL
' g \ RRR7 hV P ;' g RP 4 P
4 P RR4 o
\ P ! R S
4 ' g \ RR
R7 hV P ' d V P R 8X d \ RR R7 hV
V 3R
lp\ W4 G Rj xL
o V P ;' g \ P ! ^ 4 pRV P ;' g RS
2RV P Uu. uF* qUP 4 ' g K VP 4 NK, upRTRV P" ;' g RRV P$ Uu. uF* qfP 4 ' g K VP 4 NK, upRV P ;' g R R\& P( ! R\& P* ! 4 4 /o V P, ' d> V P, P 4 ' d V P, P 4 S R& V P ' d RS R& V P. ' d RV P. /S R& V V
V V 3R lp\ W4 G Rj xL
pWHR& V# EL ELu upi u upi L5i) r Nc $ < S P 4 # N)r )r s r< _enabled create_webhook.._enabled s %%''r> r\ zHWebhook platform is not enabled. Enable it from the Webhooks page first.r] rF -z^[a-z0-9][a-z0-9_-]*$zBInvalid name. Use lowercase alphanumeric with hyphens/underscores.r uK Direct delivery requires a real target (telegram, discord, …), not 'log'.c \ < SP 4 p V P SSP 4 # r )r r _MISSING_SUBSCRIPTION)r r4 r s r< _snapshot!create_webhook.._snapshot s* ..0
r'?'?@@r> r z Dashboard-created subscription: r r r r r r z%Y-%m-%dT%H:%M:%SZr Tr chat_id
deliver_extrac < SP SSS4 p \ ST SP 4 4 # SP d p\ R \ T4 R7 ThRp?ii ; i) r] N)_replace_subscription SubscriptionMutationConflictr
r9 r r ) publishedexcexpectedr4 r| r s r< _save create_webhook.._save sd K00uhGI &dIr7O7O7QRR .. K CCAs J Ks 1 A AA )r r r! r
r4 rJ rK replacerematchr r r secrets
token_urlsafer r r r timestrftimegmtimer deliver_chat_id)
rZ r0 r r r esr summaryr r4 r| r s
&& @@@@r< create_webhookr s> #( ); ; ;$n
IIOO " " $ * * , 4 4S# >D
88,d 3 3$h
T\\U 2$q
A -W@@H
[[
5
5G 1 1" 5Ft''TT-MdV+Tdkk?kWWY91779k?&$++##dkk?kWWY91779k?4<<((5dmm$8$++-H E {{{t{{((** ++++-h $n "+T-A-A!Bo S S ,G;;G H N] <$ A
@ @$ c T;' g RP 4 P 4 pW 9 d \ RRV R2R7 hV# )zJNormalized key for an existing route in a lock-held subscription snapshot.rF rb zNo subscription named ''r] )rJ rK r
)r r4 keys && r< _webhook_key_inr sB ::2
$
$
&C
6McURS4TUU Jr> z/api/webhooks/{name}c F V ^8 d QhR\ R\ \ , /# )r2 r4 r0 r9 r )r; s "r< r= r= s s Xc] r> c b a " \ VR 4 pV 3R lp\ W4 G Rj xL
RR/# L5i)zDELETE /api/webhooks/{name}c B < ^ RI Hp V3R lpV P V4 R# )r Nc " < V \ V S4 R # r )r )r r4 s &r< remove,delete_webhook.._run..remove s omT BCr> r r _mutate_subscriptions)r r r4 s r< r delete_webhook.._run s ' D (r> Nr` T)r# r! )r4 r0 r s f& r< delete_webhookr s7 !'+HIG) "'
000 $< 1s !/- /z /api/webhooks/{name}/enabledc R V ^8 d QhR\ R\ R\ \ , /# )r2 r4 rZ r0 )r9 r r )r; s "r< r= r= s, D DC D/C DhWZm Dr> c | a a" VV 3R lp\ W#4 G Rj xL
pRRRVR\ SP 4 /# L 5i)zDisabled routes stay on disk (re-enable later) but the gateway rejects
their events with 403; it hot-reloads the file, so no restart is needed.c @ < ^ RI Hp VV3R lpV P V4 # )r Nc \ < \ V S4 p\ SP 4 W, R & V# )r )r rf r )r r rZ r4 s & r< toggle1set_webhook_enabled.._run..toggle s* !-6C,0 ,>M y )Jr> r )r r rZ r4 s r< r !set_webhook_enabled.._run s '
''//r> Nr` Tr4 r )r! rf r )r4 rZ r0 r r s ff& r< set_webhook_enabledr s; 0 (6
6C $YT\\0B CC 7s <: <z/api/gateway/startc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= ) s B B# Br> c 4 " ^ RI Hp \ P ! WR4 G Rj xL
pV' d \ RVR7 h\ RRR4 ;_uu_ 4 \
\ V R4 R 4 pRRR4 R
R R XP R
R /# L_ + ' g i L$; i5i)r )multiplexed_profile_refusalstartNr r] z Failed to spawn gateway startr zFailed to start gatewayz
gateway-startr` Tpidr4 ) hermes_cli.web_server_gatewayr rR rS r
r$ r+ r( r )r0 r refusalprocs & r<
start_gatewayr ( s I %%&AGTTGG<< 5s c " ^ RI HpHp \ P ! W0R4 G Rj xL
pV' d \ RVR7 hV' g5 \ P ! W R4 G Rj xL
;p' d \ RVR7 h\
RRR4 ;_uu_ 4 \ \ V R4 R .V, , R
4 pRRR4 R R R
XP RR
/# L Lp + ' g i L&; i5i)r )live_session_refusalr stopNr r] z Failed to spawn gateway stopr zFailed to stop gatewayz --interruptz gateway-stopr` Tr r4 )
r r r rR rS r
r$ r+ r( r )r0 r r r r r s && r< stop_gatewayr 5 s _ %%&AFSSGG<< 7+<+<=Q\b+c%cc'cG<< 4c;S T T#$7$HM?]fKf$fhvw
U $txx @@ T &d T TsJ #C'C C'C'C'!C" C'."C'&C6C'C' C$ C'c ^ V ^8 d QhR\ R\ R\ \ \ 3, /# )r2 entryindexr7 )r intr: r9 )r; s "r< r= r= M s) s 3 4S> r> c 2 V P ;' g RpRTRV P RV P RV P RV P RV P
RV P R V P R
V' d \ V4 MRR \ V P 4 /
# ) zcRedacted view of one PooledCredential; ``index`` is 1-based to match
CredentialPool.remove_index().rF r idr auth_typesourcepriority last_status
request_count
token_preview has_refresh) access_tokenr r r r r r r r rf
refresh_token)r r tokens && r< _pool_entry_summaryr M s
$ $"E ehhU__%,,ENNu((,,eE*tE / /0 r> z/api/credentials/poolc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= ` s 8 8
8r> c ^ aa" ^ RI Ho ^ RIHo VV3R lp\ W4 G Rj xL
# L5i)r load_pool)read_credential_poolc v < . p \ S! 4 P 4 4 Fc p S! V4 pTP 4 pT' g K& T P
RTR\ T^R7 UUu. uF w rE\ YT4 NK upp/4 Ke RV /# \ d \ P R T4 K i ; iu uppi )zload_pool(%s) failedproviderentries)r providers) sortedkeys Exception_log exceptionr append enumerater )r provider_idpoolr ir r r s r< r "list_credential_pool.._rund s ""6"8"="="?@K
- llnGw iPW_`Fa bFada 3A 9Fa b" A Y''
5{C
cs B
&B5
!B21B2N)agent.credential_poolr hermes_cli.authr r! )r0 r r r s & @@r< list_credential_poolr _ s$ /4(* )7 77 7s "-+-c F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= } s 68 68*; 68hsm 68r> c l a aaaaaaa a
" ^ RI o
^ RIHoHoHoHoHo S P ;' g RP 4 P 4 o S P ;' g RP 4 oS ' d S' g \ RRR7 hVVVVVV VV V
3 R lp\ W4 G Rj xL
# L5i)r N)AUTH_TYPE_API_KEYCUSTOM_POOL_PREFIX
SOURCE_MANUALPooledCredentialr rF r\ z!provider and api_key are requiredr] c $ < S
! S4 p S P ;' g R P 4 ;' g$ R\ V P 4 4 ^, 2pV P S ! SSP 4 P R, VS^ S
S R7 4 SP S4 ' gV ^ RIH pH
p V! 4 P R/ 4 p\ VP S. 4 ;' g . 4 F pV! SV4 K RRR SR
\ V P 4 4 /# \ d \ P R4 LAi ; i \ d h \ d2 p\ P R 4 \! R \# T4 R
7 ThRp?ii ; i)rF zkey #:N N)r r r r r r r )_load_auth_store unsuppress_credential_sourcesuppressed_sourcesz,unsuppress after pool add failed (non-fatal)r` Tr countz!POST /api/credentials/pool failedr\ r] N)r rJ lenr add_entryuuid4hex
startswithr r' r( r r8 r r r r
r9 )r r r' r(
suppressedsrcr r! r" r$ r# api_keyrZ r r uuids r< r 'add_credential_pool_entry.._run sh $ K X&DZZ%%2,,.SSE#dlln:MPQ:Q9R2SE NN+! ::<##B'+$ $
& &&'9::S^!1!3!7!78Lb!QJ #JNN8R$@$F$FB G4XsC H $
Hgs4<<>?RS S ! SNN#QRS K NN> ? CCAs J KsR E E A7E / c a aaaa" ^ RI Ho ^ RIHo ^ RIHo S ;' g RP
4 P 4 o VVVV V3R lp\ \ VR4 V4 G Rj xL
# L5i)u Remove a pool entry (``index`` is 1-based, as listed).
Removal must be sticky: ``load_pool()`` re-seeds entries from their backing
source (.env var, OAuth file, custom-provider config) on every call, so
deleting only the row silently reverts on the next refresh. Dispatch through
the same RemovalStep registry as ``hermes auth remove``: each source cleans
its external state and suppresses ``(provider, source)`` so seeders skip it.
Manual entries have no step — nothing external, and they aren't re-seeded.
See #55217.
r
)find_removal_step)suppress_credential_sourcerF c
< S ! S
4 p V P S4 pTf \ RRR7 h. p. pS! S
TP ;' g R4 pTec TP S
T4 p\ TP 4 p\ TP 4 pTP ' d S ! S
TP 4 R R
R S
R \ T P 4 4 R
TRT/# \ d2 p\ P R 4 \ R\ T4 R7 ThRp?ii ; i \ d` \ P RS
TP 4 S ! S
TP 4 L \ d \ P R4 Li ; ii ; i)z#DELETE /api/credentials/pool failedr\ r] Nrb zNo pool entry at that indexrF z>credential source cleanup failed for %s/%s; suppressing anywayz!suppress_credential_source failedr` Tr r* cleanedhints) remove_indexr r r r
r9 r remove_fnr8 r; r< suppressr+ r ) r removedr r; r< steprn r8 r r r r9 s r< r *remove_credential_pool_entry.._run sh K X&D''.G ? C8UV V 7>>+?+?R@
H ': v~~. V\\*???.x H dJ'3t||~;NPY[bdkmrss1 K NN@ A CCAs J K
H _aikrkykyzH.x H HNN#FGH
HsB C A!D D",DD,F E E<8F ;E<<F z/DELETE /api/credentials/pool/{provider}/{index}N)
r r agent.credential_sourcesr8 r r9 rJ rK r! r# )r r r0 r r8 r r9 s ff& @@@r< remove_credential_pool_entryrD se 0::B%%'--/H t t< )G%VWY]_ _ _ _s A A,%A*&A,z /api/memoryc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= s 8 8Xc] 8r> c : " R p\ W4 G Rj xL
# L5i)c x \ 4 p V P R 4 p\ V\ 4 ' d \ VP R4 4 MRp\ 4 R, p/ p\ FA w rVW5, pVP 4 ' d VP 4 P M^ WF& KC RVR\ 4 RV/# )memoryr rF memoriesactiver
builtin_files) r. r
isinstancer: r r-
_MEMORY_FILESexistsstatst_sizer' )cfgmemrJ mem_dirfilesfnamer paths r< r get_memory_status.._run s mggh ISTWY]I^I^01DEdf!#j0'JE?D04
,,1EJ ( &+/Q/SUdfkllr> Nr r s & r< get_memory_statusrX s m )7 77 7r z/api/memory/providerc F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= s ) )$8 )8C= )r> c aa" \ V P 4 oVV3R lp\ P ! V4 G Rj xL
# L5i)c < \ S4 ;_uu_ 4 \ S4 \ 4 p \ V P R 4 \
4 ' g / V R & SV R , R& \
V 4 RRR4 RRRS/# + ' g i L; i)rH r Nr` TrJ )r" r r. rL r r: r/ )rQ r0 r s r< r !set_memory_provider.._run ss
(
( *8 4 -C cggh /66 "H
(0CM* %
) dHh// )
(s AA:: B
N)r r rR rS )rZ r0 r r s &f @r< set_memory_providerr] s2 .t}}=H 0 ""4( (( (s 6A?Az/api/memory/resetc F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= s 8 8[ 88C= 8r> c a" V P ;' g R P 4 P 4 oSR9 d \ RRR7 h\ VR4 pV3R lp\ W4 G Rj xL
# L5i)allr\ z#target must be all, memory, or userr] zPOST /api/memory/resetc : < \ 4 R , p . p\ FR w r#W, pSRV09 g K VP 4 ' g K0 VP 4 VP V4 KT RRR V/# \
d p\
RRT RT 2R7 hRp?ii ; i)
rI r` r zCould not delete z: r] Nr` Tdeleted)r- rM rN unlinkr OSErrorr
)rS rb rU r rV r rl s r< r reset_memory.._run s !#j0'JE?D% %$++--dKKMNN5) ( dIw// d'CBSTYSZZ\]`\a@bccds !A77 BBBN> r` ra rH )rl rJ rK r
r# r! )rZ r0 r rl s && @r< reset_memoryrf se kk""U
)
)
+
1
1
3F
..4YZZ!'+CDG 0 )7 77 7s A'A1*A/+A1z/api/ops/doctorc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= 4 s I Ihsm Ir> c , " \ R .R RRV R7 # 5i)doctorzFailed to spawn doctorzFailed to run doctorr5 r6 r0 r@ rH s &r<
run_doctorrl 3 s" (X7O 6 I Is z/api/ops/security-auditc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= : s hsm r> c . " \ R R.RRRV R7 # 5i)securityauditzsecurity-auditz Failed to spawn security auditz Failed to run security auditrj rk rH s &r< run_security_auditrq 9 s& W /09Wah s c F V ^8 d QhR\ \ , R\ /# )r2 r0 r7 )r r9 r )r; s "r< r= r= A s - -8C= -D -r> c \ V 4 ;_uu_ 4 \ 4 R, uuRRR4 # + ' g i R# ; i)uN ``/backups`` — the archive belongs to the profile it backs up.backupsN)r) r- rH s &r< _dashboard_backup_dirru A s' w ' ' 9,
( ' ' 's 0 A z/api/ops/backupc F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= H s = 8C= r> c " R pV P ;' g RP 4 pV' g{ \ P ! 4 P R4 p\ V4 RV R\ P ! ^4 R2, p VP P RRR7 \ T4 p\ R R V.R R
RVR7 pVe \ V4 VR& V# \ d p\ RR T 2R
7 hR p?ii ; i5i)NrF z%Y-%m-%d-%H%M%Szhermes-backup-r .zipTparentsexist_okr z#Could not create backup directory: r] backupz-ozFailed to spawn backupzFailed to run backuprj archive)outputrJ r nowr ru r token_hexparentmkdirrd r
r9 r@ )rZ r0 r} r~ stampr responses && r<
run_backupr G s "Gkk R
&
&
(F ''(9:'0^E7!GL]L]^_L`Kaae3ff e NN = W hf 5xIa$:GMH !'l O e C:]^a]b8cd d es/ .C5AC5 C 2C5 C2 C--C22C5z/api/ops/backup/downloadc F V ^8 d QhR\ R\ \ , /# )r2 r} r0 r )r; s "r< r= r= [ s S 8C= r> c " \ V4 P 4 P R R7 p\ V 4 P 4 P RR7 p\ Y#4 ' g \ RR R7 hTP 4 ' g \ RRR7 h\ \ T4 R
TP R R 7 # \ d \ RRR7 h\ \ 3 d \ RRR7 hi ; i5i)
F)strictTrb zBackup not foundr] r\ zInvalid backup pathi z0Backup is outside the dashboard backup directoryzapplication/zip
attachment)rV
media_typefilenamecontent_disposition_type)
ru
expanduserresolver FileNotFoundErrorr
rd RuntimeErrorr is_filer r9 r4 )r} r0
backup_dirrl s && r< download_dashboard_backupr Z s K*73>>@HHPUHV
g ))+3343@ * - -4fgg >> 4FGG
[%6gs H4FGG \ " K4IJJKs) C2AB9 3C2
/C29&C/ C//C2c ^ V ^8 d QhR\ R\ R\ \ , R\ /# )r2 r} forcer0 r7 )r9 rf r r: )r; s "r< r= r= m s2 I I3 It Ihsm It Ir> c \ R V .pV' d VP R4 \ VR RRVR7 # )importz--forcezFailed to spawn importzFailed to run importrj )r r@ )r} r r0 argss &&& r<
_spawn_importr m s6 g D I x1I 6 I Ir> z/api/ops/importc F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= v s 7 7= 78C= 7r> c * " \ VR 4 pV P ;' g RP 4 pV' g \ RRR7 h\ P
P
V4 ' g \ RRV 2R7 h\ W P V4 # 5i)zPOST /api/ops/importrF r\ zarchive path is requiredr] rb zArchive not found: ) r# r} rJ r
osrV isfiler r )rZ r0 r} s && r<
run_importr u sv !'+ABG||!!r((*G 4NOO
77>>' " "6I'4STT **g 66s 8B1B-&Bc > V ^8 d QhR\ R, R\ /# )r2 r Nr7 )r9 )r; s "r< r= r= s sTz c r> c \ T ;' g R 4 P P 4 p\ P ! RRV4 P R4 ;' g R pVP 4 P
R4 ' g V R2pV# )z
backup.zipz[^A-Za-z0-9._-]+r z.-rx )r r4 rJ r subrK endswith)r r4 s & r< _safe_backup_upload_namer sp ((L ) . . 4 4 6D
66%sD 1 7 7 = M M D ::< ( (t} Kr> z/api/ops/import-upload.c R V ^8 d QhR\ R\ R\ \ , /# )r2 filer r0 )r rf r r9 )r; s "r< r= r= s/ k k
k k c]kr> c ^ " \ VR 4 p\ V4 p VP RRR7 \
P ! \ 4 P R4 pTRT R \ P ! ^4 R \ T P 4 2, p\ YR
R R R
7 G Rj xL
p\ P ! T4 ' g TP! RR7 \ RRR7 h/ \# \% T4 Y4 CR\% T4 RT/C# \ d p\ RRT 2R7 hRp?ii ; i L5i)zPOST /api/ops/import-uploadTry r z+Could not create import staging directory: r] Nz
%Y%m%d-%H%M%Szdashboard-import-r zArchive is too largez(Import staging directory is not writablez Could not write uploaded archive) too_large not_writable write_failed)
missing_okr\ z(Uploaded archive is not a valid zip filer} uploaded_bytes)r# ru r rd r
r r r r r r r r r& zipfile
is_zipfilerc r r9 )r r r0 staging_dirr r rl totals &&& r< run_import_uploadr s+ "'+HIG'0Ki$6
LL & & 7E
.ugQw7H7H7K6LANfgkgtgtNuMvw
wF' 6?Np
E f % %
&4^__ jmCK8 j)S[Rbdi jj i6abeaf4ghhi
s; D-D A4D-"D+# D-AD- D(D##D((D-z/api/ops/hooksc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= s %8 %8hsm %8r> c : " R p\ W4 G Rj xL
# L5i)zConfigured shell hooks with consent (allowlist) status, whether the
script is currently executable, and the valid hook events for the form.c ^ RI Hp ^ RIHp . p\ P
! \ 4 ;_uu_ 4 ^ RIHp \ V4 pRRR4 . p VP V ! 4 4 p. pV EF pRpRp\ P
! \ 4 ;_uu_ 4 VP VP VP 4 pRRR4 \ P
! \ 4 ;_uu_ 4 VP! VP 4 pRRR4 TP# RVP RVP$ R VP R
VP& R VRJR T;' g / P) R 4 R
V/4 EK RVRV/# + ' g i EL:; i \ d \ P R4 ELGi ; i + ' g i L; i + ' g i L; i)r )r. shell_hooks VALID_HOOKSNz iter_configured_hooks failedFeventmatchercommandtimeoutallowed approved_at
executablehooks valid_events)hermes_cli.configr. agentr
contextlibr? r hermes_cli.pluginsr r iter_configured_hooksr r allowlist_entry_forr r script_is_executabler r r r ) _load_configr r r specsoutspecr r s r< r list_hooks.._run sg A%
+
+ 6!+.L , ; 55lnEE DE J$$Y//#77
DLLQ 0$$Y// ( = =dll K
0 JJ4<<4<<4<<5, 0 0 ? j
nl;;7 ,
+
+ ; NN9 : ; 0///s5 E4F 'F/# G4 F F,+F,/ F? G Nr r s & r<
list_hooksr s c V P ;' g R P 4 pV P ;' g R P 4 pV' d V' g \ RRR7 hW3# )rF r\ z event and command are requiredr] )r rJ r r
)rZ r r s & r< _hook_body_fieldsr sQ
ZZ
2 $ $ &E||!!r((*G 4TUU >r> c F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= s /8 /8J /8# /8r> c a aaaa" ^ RI Ho \ SR4 o\ S 4 w ooRp\ P
! \ 4 ;_uu_ 4 ^ RIHp RRR4 Ve3 SV9 d, \ RRS RRP \ V4 4 2R 7 hV VVVV3R
lp\ SV4 G Rj xL
# + ' g i Ld; i L5i) a Add a shell hook to config.yaml and optionally record consent.
Shell hooks run arbitrary commands, so this is privileged: it writes the
``hooks:`` block and, with ``approve``, records the allowlist entry so the
hook actually fires. Takes effect on the next session / gateway restart.
r zPOST /api/ops/hooksNr r\ zUnknown event 'z
'. Valid: z, r] c < \ S4 ;_uu_ 4 \ 4 p V P R 4 p\ V\ 4 ' g / ;qR & VP S4 p\ V\
4 ' g . ;q!S& RS/pSP ' d SP VR& SP e \ SP 4 VR& VP V4 \ V 4 RRR4 RpSP ' d S P SS4 RpRRR SRSR
V/# + ' g i LC; i \ d \ P R4 L?i ; i) r r r Nr FTzhook consent record failedr` r rQ )r" r. r rL r: r8 r r r r r/ approve_record_approvalr r r )
rQ hooks_cfgr new_entryrQ rZ r r r0 r s
r< r create_hook.._run s$
(
( -C(I i..+-- L mmE*G gt,,-//E*)2G(D/ D, / EE)
r r r# r r r? r r r r
joinr r! )rZ r0 valid_hooksr r r r s ff @@@r< create_hookr s " "'+@AG&t,NE7K Y ' 'A
( 5 #;oeWJW[W`W`aghsatWuVv4wxxV V4 )$7 77?
( '> 8s+ AC B/AC*C+C/ B? : Cc F V ^8 d QhR\ R\ \ , /# r )r r r9 )r; s "r< r= r= s J # r> c aaaa" ^ RI Ho \ SR4 o\ V 4 w ooVVVV3R lp\ SV4 G Rj xL
' g \ RRR7 hRR /# L5i)
zFRemove a hook from config.yaml and revoke its consent allowlist entry.r zDELETE /api/ops/hooksc < R p \ S4 ;_uu_ 4 \ 4 pVP R4 p\ V\ 4 ' d \ VP S4 \
4 ' d \
VS, 4 pVS, Uu. uF3 p\ V\ 4 ' d VP R4 S8X d K1 VNK5 upVS& \
VS, 4 V8 p VS, ' g VS V' g VP RR4 \ V4 RRR4 \ P ! \ 4 ;_uu_ 4 SP S4 RRR4 V # u upi + ' g i LS; i + ' g i T # ; i)Fr r N)
r" r. r rL r: r8 r+ popr/ r r? r rt ) r@ rQ r beforer r r r0 r s r< r delete_hook.._run
s.
(
( -C(I)T**z)--:NPT/U/U Yu -. ( /$ /! &q$ / /AEE)4D4O A /$ % i ./&8 ''!%( GGGT*C )
+
+ w ' ,$ )
( ,
+s6 A4E! .E >E 4E!9 E! E4 E!! E1 4 F Nrb zNo matching hook foundr] r` T)r r r# r r! r
)rZ r0 r r r r s &f @@@r< delete_hookr s_ "!'+BCG&t,NE7 , )$7 7 74LMM $< 8s 9A A A
A z/api/ops/checkpointsc : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= ) s 8 8HSM 8r> c : " R p\ W4 G Rj xL
# L5i)z/rollback shadow-store checkpoints (read-only): count + size per session
so the UI can show what a prune reclaims; pruning itself is a spawned CLI
action so the confirmation logic stays in one place.c t \ 4 R , p . p^ pV P 4 ' d \ P ! V 4 ;_uu_ 4 p\ R V 4 R R7 pRRR4 X F pVP 4 ' g K ^ ;rgVP R4 FE pVP
4 ' g K WhP 4 P ,
pV^,
pKG W&,
pVP RVP RVRV/4 K R VR
V/# + ' g i L; i \ d K i ; i) checkpointsc 3 L " T F p\ VP 4 x K R # 5ir )r rV ).0r s & r< 1list_checkpoints.._run..3 s ">A4<<s "$c V P # r )r4 )ps &r< 0list_checkpoints.._run..3 s affr> )r N*sessionrT bytessessions total_bytes) r- is_dirr scandirr rglobr rO rP rd r r4 ) cp_dirr r scanchildrenchildsizer* fs r< r list_checkpoints.._run- s "]2 ==??F##t!">">DTU $! ||~~ S)Ayy{{! FFH$4$4 4D !QJE * # EJJQU VW " Hm[AA $# ' ! !s
D5)D( D% ( D76D7Nr r s & r< list_checkpointsr ( s
B, )7 77 7r z/api/ops/checkpoints/prunec : V ^8 d QhR\ \ , /# rB rC )r; s "r< r= r= G s Xc] r> c
B " \ R R.RRR\ V R4 R7 # 5i)r prunezcheckpoints-prunez!Failed to spawn checkpoints prunezFailed to prune checkpointsz POST /api/ops/checkpoints/prunerj )r@ r# rH s &r< prune_checkpointsr F s. "53 r< r s , , , , D D * ( $ 6 @ h ?01 &**NPn%o "02QR 46VW 24TU 24ST 8:[\ (*=>="56 ="56 U+/U+$ Ng g
#$ %8
"#s $s
)*c +c$ O 8 8"
#$ %" _ 4 4n %& ' *+D ,D*
!" B # B
! A " A.$ #$8 %88
$%68 &68r 9:1_ ;1_p ?
M 8 8 "#) $)(
!8 "86
I I
&' (-
$ &' ($I
7 7
%&Cyu+ !k 'k0 %8 %8P
/8 /8d ! D "#8 $8:
)* +r>