`gj1%dZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl mZddlmZdZd Zd efd Zd efd Zd e eeffd Zde eefd dfdZd efdZd efdZd efdZd efdZd efdZdZdZ dZ!dZ"dZ#y)uyhermes webhook — manage dynamic webhook subscriptions from the CLI. Usage: hermes webhook subscribe [options] hermes webhook list hermes webhook remove hermes webhook test [--payload '{"key": "value"}'] Subscriptions persist to ~/.hermes/webhook_subscriptions.json and are hot-reloaded by the webhook adapter without a gateway restart. N)Path)Dictdisplay_hermes_home)atomic_replace)cfg_getzwebhook_subscriptions.jsonireturncddlm}|S)Nrget_hermes_home)hermes_constantsr r s E/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/webhook.py _hermes_homers0  c$ttz S)N)r_SUBSCRIPTIONS_FILENAMErr_subscriptions_pathr$s >3 33rct}|jsiS tj|j d}t |t r|SiS#t$ricYSwxYw)Nutf-8encoding)rexistsjsonloads read_text isinstancedict Exception)pathdatas r_load_subscriptionsr"(s^  D ;;= zz$..'.:;!$-t525  s6AA A%$A%subsct}|jjddtjd|j dd|jd\}}t |} tj|dd5}tj||d d |jtj|jdddtj|tt!||tj|ty#1swYJxYw#t"$r$ |j%d #t&$rYwxYwwxYw) NT)parentsexist_ok.z.tmp)prefixsuffixdirtextwrrF)indent ensure_ascii) missing_ok)rparentmkdirtempfilemkstempnamerosfdopenrdumpflushfsyncfilenochmod_SUBSCRIPTIONS_FILE_MODErrunlinkOSError)r#r fdtmp_nametmp_pathfhs r_save_subscriptionsrD3s#  DKKdT2 ##499+Q KK  LB H~H YYr3 1 "R IIdBqu = HHJ HHRYY[ ! " 34x& /0 " "   OOtO ,     sJ(D"A D AD"DD"" E,D?>E? E E E  Ec^ ddlm}|}t|ddiS#t$ricYSwxYw)z;Load webhook platform config. Returns {} if not configured.r) load_config platformswebhook)default)hermes_cli.configrFrr)rFcfgs r_get_webhook_configrLSs61msKB??  s  ,,cFttjdS)Nenabled)boolrLgetrrr_is_webhook_enabledrQ]s #%)))4 55rctjdi}|jd}|jdd}|r|dvrdn|}d|vr|jdsd|d }d |d|S) Nextrahostporti!>::0.0.0.0 localhost:[]zhttp://)rLrP startswith)whrTrU display_hosts r_get_webhook_base_urlr_as{   " "7B /B 66&>D 66&$ D&*d6G.G;TL l<#:#:3#?<.* \N!D6 **rc(t}d|d|dS)Nz Webhook platform is not enabled. To set it up: 1. Run the gateway setup wizard: hermes gateway setup 2. Or manually add to z/config.yaml: platforms: webhook: enabled: true extra: port: 8644 secret: "your-global-hmac-secret" 3. Or set environment variables in z/.env: WEBHOOK_ENABLED=true WEBHOOK_PORT=8644 WEBHOOK_SECRET=your-global-secret Then start the gateway: hermes gateway run r)_dhhs r _setup_hintrbks1  D &'+V, rc@trytty)zDCheck webhook is enabled. Print setup guide and return False if not.TF)rQprintrbrrr_require_webhook_enabledres +- rct|dd}|stdtdytsy|dvr t|y|dvr t |y|dvr t |y|dk(r t |yy) z,Entry point for 'hermes webhook' subcommand.webhook_actionNz2Usage: hermes webhook {subscribe|list|remove|test}z(Run 'hermes webhook --help' for details.>add subscribe>lslist>rmremovetest)getattrrdre_cmd_subscribe _cmd_list _cmd_remove _cmd_test)argssubs rwebhook_commandrvsv $($ /C  BC 89 # % ""t  $  D $ rc n|jjjjdd}t j d|st d|dyt}||v}|jxstjd}|jr7|jjdDcgc]}|jc}ng}|jxsd||||jxsd |jr7|jjdDcgc]}|jc}ng|j xsd t#j$d t#j&d }t)|d dr|dd k(r t dyd|d <t)|dd xsd } | jr| j|d<|j*rd|j*i|d<|||<t-|t/} |rdnd} t d| d|t d| d|t d||rt ddj1|n t dt d|d|j3d r t d |j3d!rD|d!dd"t5|d!d"kDrd#nd z} |j3d rd$nd%} t d&| d'| |j3drt d(|dt d)t d*t d+ycc}wcc}w),N -z^[a-z0-9][a-z0-9_-]*$zError: Invalid name 'z7'. Use lowercase alphanumeric with hyphens/underscores. ,zAgent-created subscription: logz%Y-%m-%dT%H:%M:%SZ) descriptioneventssecretpromptskillsdeliver created_at deliver_onlyFru|Error: --deliver-only requires --deliver to be a real target (telegram, discord, slack, github_comment, etc.) — not 'log'.Tscriptchat_id deliver_extraUpdatedCreated z webhook subscription: z URL: /webhooks/z Secret: z Events: , z Events: (all)z Deliver: z1 Mode: direct delivery (no agent, zero LLM cost)rPz...MessagePromptz z: z Script: z3 Configure your service to POST to the URL above.z6 Use the secret for HMAC-SHA256 signature validation.zF The gateway must be running to receive events (hermes gateway run). )r5striplowerreplacerematchrdr"rsecrets token_urlsafersplitr~rrrtimestrftimegmtimerodeliver_chat_idrDr_joinrPlen)rtr5r# is_updaterersrouterbase_urlstatusprompt_previewlabels rrprps 99??  " " $ , ,S# 6D 88,d 3 %dV+bcd  D I [[ 5G11"5F<@KK!2!23!7 8Aaggi 8RF''P-I$+P++#AEdkk&7&7&<=1779=RT<<(5mm$8$++-H Et^U+  u $ R   $n T8R ( .BF ||~ ,,.h "+T-A-A!BoDJ$&H#YF D/v 67 Jxj 4& 12 Jvh    499V,-./   Ki() *+ yy  AB yyx"-#eHo:NQS:SY[\"YY~6 H 5'N+,- yy 5?+,- @A BC STi9>s 9L-!L2 cjt}|stdtdyt}tdt|d|j D]\}}dj |j dgxsd}|j dd }|j d r|d }|j d d }td||rtd|td|d|td|td||j drtd|dty)Nz# No dynamic webhook subscriptions.z2 Create one with: hermes webhook subscribe rz webhook subscription(s): rrz(all)rr}ru (direct — no agent)r~r|u ◆ z z URL: rz Events: z Deliver: rz Script: )r"rdr_ritemsrrP)rtr#rr5rrrdescs rrqrqs'  D  34 BC$&H DT 6 78zz| e599Xr23>w))Iu- 99^ $ !78Gyy+ tfo  D-  hZz$89 fX&' gY'( 99X  M%/!23 4 rc|jjj}t}||vrt d|dt dy||=t |t d|y)N No subscription named ''.z> Note: Static routes from config.yaml cannot be removed here.z Removed webhook subscription: )r5rrr"rdrD)rtr5r#s rrrrrsh 99??  " " $D  D 4 )$r23 NO T  ,TF 34rc`|jjj}t}||vrt d|dy||}|j dd}t }|d|}|jxsd}ddl}ddl } d |j|j|j| jjz} t d | ddl} | jj!||jd | d d d} | jj#| d5} | j%j'}t d| j(d|dddy#1swYyxYw#t*$r#}t d|t dYd}~yd}~wwxYw)z$Send a test POST to a webhook route.rrNrr|rzQ{"test": true, "event_type": "test", "message": "Hello from hermes webhook test"}rzsha256=z Sending test POST to zapplication/jsonrn)z Content-TypezX-Hub-Signature-256zX-GitHub-EventPOST)r!headersmethod )timeoutz Response (z): z Error: z. Is the gateway running? (hermes gateway run))r5rrr"rdrPr_payloadhmachashlibnewencodesha256 hexdigesturllib.requestrequestRequesturlopenreaddecoderr)rtr5r#rrrurlrrrsigurllibreqrespbodyrs rrsrs s 99??  " " $D  D 4 )$r23 JE YYx $F$&H Jj 'CllqqG dhh )7>>ik C #C5 )*@nn$$ ! 2'*"( %  ^^ # #C # 4 999;%%'D L S7 8 9 9 9 @ !o >??@s7 AF2:E5,F5E>:F>F F- F((F-)$__doc__rr6rrr3rpathlibrtypingrr rutilsrrJrrr=rrstrrr"rDrLrOrQr_rbrervrprqrrrsrrrrs   0 %7 d 4T4T#t)_d39o$@T6T6+s+S2$,>UB4 5(@r