`gjAcHUdZddlmZddlZddlZddlZddlZddlmZm Z ddl m Z m Z ddl m Z ddlmZmZmZmZmZddlmZd Zd Zd Zd d dddefZded<ehdZded<GddeZeGddZeGddZ d2dZ!d3dZ"d4dZ#d5dZ$ejJd Z&d6d!Z'd7d"Z(d8d#Z)d9d$Z*d:d%Z+d;d&Z,dd+Z0 d? d@d,Z1 dAd-Z2dBd.Z3 dC dDd/Z4 dE dFd0Z5dGd1Z6y)HuProfile distributions — shareable, packaged Hermes profiles via git. A distribution is a Hermes profile published as a git repository (or installed from a local directory for development). Install with one command from a git URL, update in place, and keep your local memories / sessions / credentials untouched. Where this fits relative to the existing pieces: * ``hermes profile export/import`` — local backup / restore for a profile on your own machine. NOT a distribution format. Stays as-is. * ``hermes skills install `` — the URL install pattern we're mirroring, but at the profile granularity. Subcommands (all live under ``hermes profile``, not a parallel tree): hermes profile install [--name N] [--alias] [--force] [--yes] hermes profile update [--force-config] [--yes] hermes profile info ```` is one of: * A git URL (``github.com/user/repo``, ``https://github.com/...``, ``git@...``, ``ssh://``, ``git://``), optionally with ``#`` to pin a tag / branch / commit SHA. * A local directory that already contains ``distribution.yaml`` — used during profile development before the first push. Manifest format (``distribution.yaml`` at the profile root):: name: telemetry version: 0.1.0 description: "Compliance monitoring harness" hermes_requires: ">=0.12.0" author: "..." license: "..." env_requires: - name: OPENAI_API_KEY description: "OpenAI API key" required: true - name: GRAPHITI_MCP_URL description: "Memory graph URL" required: false default: "http://127.0.0.1:8000/sse" distribution_owned: # optional; sensible defaults apply - SOUL.md - skills/ - cron/ - mcp.json Update semantics: * Distribution-owned paths (SOUL.md, mcp.json, skills/, cron/, distribution.yaml) are replaced from the new source. * ``config.yaml`` is distribution-owned but preserved on update unless ``--force-config`` is passed (user overrides typically live here). * User-owned paths (memories/, sessions/, state.db, auth.json, .env, logs/, workspace/, home/, plans/, *_cache/, and anything under ``local/``) are never touched. ) annotationsN) dataclassfield)datetimetimezone)Path)AnyDictListOptionalTupleis_excluded_skill_pathzdistribution.yamlz .env.templatez .env.EXAMPLEzSOUL.md config.yamlzmcp.jsonskillscronzTuple[str, ...]DEFAULT_DIST_OWNED>%.envstate.db auth.json auth.lock .worktrees errors.log gateway.pid hermes-agent state.db-shm state.db-wal .update_checkprocesses.json.hermes_historyhermes_state.dbresponse_store.dbgateway_state.jsonresponse_store.db-shmresponse_store.db-walbinhomelogscachelocalplansbackupsmemoriesprofilessessions sandboxes workspace audio_cache checkpoints image_cache node_modulesactive_profiledocument_cachebrowser_screenshots frozensetUSER_OWNED_EXCLUDEceZdZdZy)DistributionErrorz0Raised for distribution install/update failures.N)__name__ __module__ __qualname____doc__R/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/profile_distribution.pyr<r<s:rBr<c\eZdZUded<dZded<dZded<dZd ed <ed d Zdd Z y)EnvRequirementstrname descriptionTboolrequiredN Optional[str]defaultc vt|ts!tdt|jt |j dxsdj}|s td||t |j dxsdt|j dd|j d S) Nz*env_requires entry must be a mapping, got rGrHz!env_requires entry missing 'name'rIrKTrMrGrIrKrM) isinstancedictr<typer=rFgetstriprJ)clsdatarGs rC from_dictzEnvRequirement.from_dicts$%#r?__annotations__rIrKrM classmethodrWr[rArBrCrErEs< IKHd!G]!    rBrEceZdZUded<dZded<dZded<dZded<dZded<dZded <e e Z d ed <e e Z d ed<dZ ded<dZded<eddZddZddZy)DistributionManifestrFrG0.1.0versionrHrIhermes_requiresauthorlicense)default_factoryzList[EnvRequirement] env_requires List[str]distribution_ownedsource installed_atcVt|ts'ttdt |j t |jdxsdj}|sttd|jdxsg}t|ts td|Dcgc]}tj|}}|jdxsg}|rt|ts td|Dcgc]D}t |jst |jjd F}}||t |jd xsd t |jd xsdt |jd xsdt |jdxsdt |jdxsd||t |jdxsdt |jdxsd Scc}wcc}w)Nz must be a mapping, got rGrHz missing 'name'rizenv_requires must be a listrkz!distribution_owned must be a list/rdrcrIrerfrgrlrm) rGrdrIrerfrgrirkrlrm) rPrQr<MANIFEST_FILENAMErRr=rFrSrTlistrErW) rUrVrGenv_raweridist_owned_rawprks rCrWzDistributionManifest.from_dicts$%#$%%=d4j>Q>Q=RS 488F#)r*002#'8&9$IJ J((>*0b'4(#$AB B=DE003E E"67=2 *^T"B#$GH HAObASVWXSYS_S_Sac!flln2237bb+6w7DHH]39r:): ; ArBtxx)/R0+1r2%1txx)/R0TXXn5;<  Fcs,H!H&*H&c*|j|jd}|jr|j|d<|jr|j|d<|jr|j|d<|j r|j |d<|j r+|j Dcgc]}|jc}|d<|jr|j|d<|jr|j|d<|jr|j|d <|Scc}w) N)rGrdrIrerfrgrirkrlrm) rGrdrIrerfrgrir[rkrlrm)rYrZrss rCr[zDistributionManifest.to_dictsII||    !%!1!1C    %)%9%9C! " ;; KKCM <<!\\C N   8<8I8I"J1199;"JC   " "(,(?(?C$ % ;; KKCM   "&"3"3C  #Ks Dcb|jrt|jSttS)z0Resolve which paths count as distribution-owned.)rkrqr)rYs rC owned_pathsz DistributionManifest.owned_pathss(  " "//0 0&''rBN)rVr r\z'DistributionManifest'r])r\rj)r=r>r?r_rdrIrerfrgrrqrirkrlrmr`rWr[rxrArBrCrbrbs IGSKOSFCGS).t)DL&D$)$$? ?FCL#  :.(rBrbch ddl}|j|S#t$r}td|d}~wwxYw)Nrz-PyYAML is required for distribution manifests)yaml ImportErrorr< safe_load)textrzexcs rC _load_yamlrs?Z >>$  Z OPVYYZs 1 ,1c2ddl}|j|ddS)NrF) sort_keysdefault_flow_style)rz safe_dump)rVrzs rC _dump_yamlrs >>$%E> JJrBc|tz }|jsy t|jd}t j|xsiS#t$r}t d|d||d}~wwxYw)zJReturn the manifest for *profile_dir*, or None if it isn't a distribution.Nutf-8encodingzFailed to parse z: )rpis_filer read_text Exceptionr<rbrW) profile_dirmf_pathrVr~s rC read_manifestrs~--G ?? N'++W+=> ) )$*" 55 N"27)2cU CD#MNsA A0A++A0cl|tz }|jt|jd|S)Nrr)rp write_textrr[)rmanifestrs rCwrite_manifestrs3--G z("2"2"45H NrBz!^\s*(>=|<=|==|!=|>|<)\s*(.+?)\s*$ct|jjd}tjd|dd}|j d}t |dkr |j dt |dkr t|dt|dt|dfS#t$r}td ||d }~wwxYw) uLVery small semver parser — major.minor.patch only. Extra labels stripped.vz[-+]r.0zUnparseable version: N) rFrTlstripresplitlenappendint ValueErrorr<)rspartsr~s rC _parse_semverrs A c"A !Q"A GGCLE e*q. S e*q.HE!H s58}c%(m<< H"7u =>CGHs(B,, C 5CC cV|r|jsytj|}|sd|j}}n"|jd|jd}}t |}t |}||k\||k||k(||k7||kD||kd|}|st d||d|dy) uRaise DistributionError if ``current_version`` does not satisfy ``spec``. ``spec`` accepts a single comparator (``>=0.12.0``, ``==0.12.0``, etc.). Empty or blank spec is a no-op — no requirement. N>=rr)rz<=z==z!=>>>  .vj9O O rBc|jdD]2}|js |j|}t d|y#t$r|}YwxYw)z=Reject symlinks before reading or copying distribution files.*z/Profile distributions cannot contain symlinks: N)rglob is_symlink relative_torr<)stagedentryrels rC_reject_distribution_symlinksrsmc"  !  ##F+C =cU C     C sA AAcneZdZUdZded<ded<ded<ded<d ed <d Zd ed <d Zd ed<d Zd ed<y) InstallPlanzCSummary of what an install will do, surfaced for user confirmation.rbrr staged_dirrF provenance target_dirrJexistingTpreserves_configFhas_cron has_skillsN)r=r>r?r@r_rrrrArBrCrrs@M""ON!d!HdJrBrc|dz }|jsy|jdD]}y|jdD]}yy)NrFz*.jsonTz*.yaml)rr)rcron_dir_s rC_has_cron_jobsrsQH ??  ^^H % ^^H % rBcp|dz }|jsytd|jdDS)Nrrc38K|]}t|rdyw)rNr).0rus rC z _count_skills..s7Ma7PszSKILL.md)rsumr)r skills_dirs rC _count_skillsrs@("J     ##J/ rBc 6ddlm}m}m}ddlm}t ||\}}t|t|} | tdtdt| j||xs | j} || } || | dk(r td| | _ || _tj t"j$j'd | _|| } | j+} t-|}t/|}t1| ||| | | ||dkD S) zCStage *source* and produce a plan describing what install would do.rget_profile_dirnormalize_profile_namevalidate_profile_name) __version__ruM found at the distribution root — this source is not a Hermes distribution.rMuCannot install a distribution as 'default' — that is the built-in root profile (~/.hermes). Pass --name to install under a new profile.seconds)timespec)rrrrrrrr)hermes_cli.profilesrrr hermes_clirrrrr<rprrerGrlrnowrutc isoformatrmrrrr)rlr override_namerrrhermes_versionrrr target_namecanonrrr skill_counts rC plan_installrs2  9&vw7FJ!&)V$H#$%8 8  (22NC 08==K "; /E%     HM HO%LL6@@)@TH 'J  "Hf%H'K !?  rBc|jdd|jD]}|j}|tvr|tk(rt j ||tz ?|dk(r|r|dz jrZ||z }|jrQ|jrt j||jt j||fdt j |||jr:|tz js#|tz jt|dt!||y) aICopy distribution-owned files from *staged* into *target*. User-owned paths are never touched. ``config.yaml`` is replaced only when ``preserve_config`` is False (fresh install or ``--force-config`` update). ``.env.template`` is renamed to ``.env.EXAMPLE`` in the target to avoid shadowing a real ``.env``. Tparentsexist_okrc|t|jk(r|Dcgc] }|tvs |c}SgScc}wN)rrr:)dnamesnstaged_resolveds rCz$_copy_dist_payload..Ds@Aw(O;!&A1.@)@QAAs 99)ignorerrN)mkdiriterdirrGr:ENV_TEMPLATE_FILENAMErcopy2ENV_EXAMPLE_FILENAMEexistsrrrcopytreerirrr)rrrpreserve_configrrGrrs @rC_copy_dist_payloadr*!s" LLL-!&zz % %  ( ( LL)= = >  = _&=:P9X9X9Z } <<>{{} d#$nn.O OO  LL %7&<f/C&C%K%K%M & &22 ' 1G 3 68$rBc>dD]}||z jddy)z2Create the bootstrap dirs a fresh profile expects.) r-r/rskinsr(r+r1rr'TrN)r")rrs rC_bootstrap_user_dirsr-Ws*48 !4$78rBcddlm}m}tjd5}t |t ||}|jr2|s0td|jjd|jdt|jt|j|j|jd |r:||jj}|||jj|cd d d S#1swYy xYw) zInstall a distribution from *source* into a new profile. Returns the resolved :class:`InstallPlan`. Use :func:`plan_install` first if you want to preview + prompt the user before calling this. r)check_alias_collisioncreate_wrapper_scripthermes_dist_install_rr Profile 'z' already exists at zP. Use `hermes profile update` to upgrade in place, or pass --force to overwrite.Fr)N)r r/r0tempfileTemporaryDirectoryrrrr<rrGrr-r*r) rlrGforce create_aliasr/r0tmpplan collisions rCinstall_distributionr=^s  $ $,B CsFDITB ==#DMM..//CDOOCTU00  T__- OO OO MM!   -dmm.@.@AI %dmm&8&891s CC>>Dcddlm}m}m}||}||||}|j st d|dt |}|t d|dtd|jst d|dtjd 5}t|jt|| } | | _ t| j| j | j"| j | cdddS#1swYyxYw) aYRe-pull the distribution for an existing profile and apply updates. The source is read from the installed profile's ``distribution.yaml`` ``source:`` field. Distribution-owned files are overwritten; user-owned data (memories, sessions, auth) is never touched. ``config.yaml`` is preserved unless ``force_config`` is True. rrr4' does not exist.Nz' is not a distribution (no zG). Only profiles installed via `hermes profile install` can be updated.zd' has no recorded source. Re-install with `hermes profile install --name {canon} --force`.hermes_dist_update_r2r3r5)r rrrrr<rrprlr6r7rrrr*rrr) profile_name force_configrrrrrexisting_manifestr:r;s rCupdate_distributionrDs+ #< 0E% U #F ==?)E72C DEE%f- w:;L:MNS S    # #wH H   $ $,A Bc  $ $ I  %1 0 OO OO MM 11  s A"DD cddlm}m}m}||}||||}|j st d|dt |}|iS|jS)zReturn a structured view of a profile's distribution metadata. Returns an empty dict if the profile exists but has no manifest. Raises DistributionError if the profile itself doesn't exist. rrr4r?)r rrrrr<rr[)rArrrrrrs rCdescribe_distributionrFsl  #< 0E% U #F ==?)E72C DEEV$H    rB)r}rFr\r )rVr r\rF)rrr\zOptional[DistributionManifest])rrrrbr\r)rrFr\zTuple[int, int, int])rrFrrFr\None)rrbr\rF)rrFr\rJ)rrFrrr\rG)rlrFrrr\zTuple[Path, str])rrr\rG)rrr\rJ)rrr\rr)rlrFrrrrLr\r) rrrrrrbr)rJr\rG)rrr\rG)NFF) rlrFrGrLr8rJr9rJr\r)F)rArFrBrJr\r)rArFr\r^)7r@ __future__rrrrr6 dataclassesrrrrpathlibrtypingr r r r r agent.skill_utilsrrpr$r&rr_r9r:rr<rErbrrrrcompilerrrrrrrrrrrrr*r-r=rDrFrArBrCrNs;z# ('334('%    'O!*+!I6; ;  > I(I( I(X K 6@A H H,0  P"(V  &     $(7 7 7!7 7t3% 3% 3%#3% 3%  3%l8 ( ( ( ( (  (Z1111rrB