`gjt rUdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl ZddlmZej"eZdZdedZdZded ed efd Zded ed efd Zd efd Zdaedzezed<dZ da!eed<dZ"da#eed<da$eed<dCdZ%e jLZ'da(e jRdzed<e*Z+e*eed<e jLZ,deded dfdZ-dCdZ.dZ/d efdZ0d efdZ1d edzfdZ2d efdZ3dDd efd!Z4d"Z5d efd#Z6d edzfd$Z7d efd%Z8dEd&ed'ed(efd)Z9d*ed+ed,ed edzfd-Z:d.ed*ed/ed efd0Z;d1e jxd2ed e=edzeffd3Z>d4d5d6ed e=edzeffd7Z?d8ed efd9Z@d8ed efd:ZAd4d5d6efd;ZBd4d5d6efd<ZCd=ZDd>ZEd?ed efd@ZFdAed efdBZGy)FuTirith pre-exec security scanning wrapper. Runs the tirith binary as a subprocess to scan commands for content-level threats (homograph URLs, pipe-to-interpreter, terminal injection, etc.). Exit code is the verdict source of truth: 0 = allow, 1 = block, 2 = warn JSON stdout enriches findings/summary but never overrides the verdict. Operational failures (spawn error, timeout, unknown exit code) respect the fail_open config setting. Programming errors propagate. Auto-install: if tirith is not found on PATH or at the configured path, it is automatically downloaded from GitHub releases to $HERMES_HOME/bin/tirith. The download always verifies SHA-256 checksums. When cosign is available on PATH, provenance verification (GitHub Actions workflow signature) is also performed. If cosign is not installed, the download proceeds with SHA-256 verification only — still secure via HTTPS + checksum, just without supply chain provenance proof. Installation runs in a background thread so startup never blocks. N)get_hermes_homezsheeki03/tirithz^https://github.com/z,/\.github/workflows/release\.yml@refs/tags/vz+https://token.actions.githubusercontent.comkeydefaultreturncXtj|}||S|jdvS)N>1yestrue)osgetenvlowerrrvals H/root/.hermes/venv/lib/python3.12/site-packages/tools/tirith_security.py _env_boolr3s+ ))C.C { 99;. ..cntj|}||S t|S#t$r|cYSwxYw)N)r r int ValueErrorrs r_env_intr:s; ))C.C {3x s & 44c ddddd} ddlm}|jdixsi}t d|jd |d t j d |jd |d td |jd |d t d|jd|ddS#t$ri}YwxYw)z@Load security settings from config.yaml, with env var overrides.Ttirith)tirith_enabled tirith_pathtirith_timeouttirith_fail_openr) load_configsecurityTIRITH_ENABLEDr TIRITH_BINrTIRITH_TIMEOUTrTIRITH_FAIL_OPENr)hermes_cli.configrget Exceptionrr r r)defaultsrcfgs r_load_security_configr)Ds H 1m B/52 $$4cgg>NPXYiPj6klyysww}h}F]/^_"#3SWW=MxXhOi5jk%&8#''BTV^_qVr:st   s!B// B=<B=_resolved_pathF_install_failure_reason _crash_count _circuit_opencjtdz attk\rdatj dtyy)zCIncrement the crash counter and open the circuit breaker if needed.Tzbtirith circuit breaker opened after %d consecutive failures; disabling for the rest of the processN)r. _CRASH_LIMITr/loggerwarningrr_record_tirith_crashr6us4AL|#  4  $r_install_thread_warned_messagesmessagect5|tvr dddytj|dddtj|g|y#1swY xYw)z``logger.warning`` but at-most-once per ``key`` for the process lifetime. Used to avoid drowning the log when a fail-open tirith misconfiguration fires on every command.N) _warned_lockr8addr3r4)rr9argss r _warn_oncer>sU " " " "" S!" NN7"T" ""s AAAcbt5tjdddy#1swYyxYw)uClear the warn-once dedupe set. Called when tirith is freshly (re)installed so a subsequent failure surfaces again — e.g. user deletes the binary mid-session. N)r;r8clearr5rr_reset_spawn_warning_staterAs( ! !!!s%.iQc(ttS)zAReturn the Hermes home directory, respecting HERMES_HOME env var.)strrr5rr_get_hermes_homerDs  !!rcRtjjtdS)z3Return the path to the install-failure marker file.z.tirith-install-failed)r pathjoinrDr5rr_failure_marker_pathrHs 77<<(*,D EErc6 t}tjj|}t j|z t k\ryt |dd5}|jjcdddS#1swYyxYw#t$rYywxYw)zRead the failure reason from the disk marker. Returns the reason string, or None if the marker doesn't exist or is older than _MARKER_TTL. Nrutf-8encoding) rHr rFgetmtimetime _MARKER_TTLopenreadstripOSError)pmtimefs r_read_failure_reasonrXs}  "  # IIK% K / !S7 + $q668>># $ $ $ s6AB B B6 B B B B BBcht}|y|dk(r tjdr tyy)zCheck if a recent install failure was persisted to disk. Returns False (allowing retry) when: - No marker exists - Marker is older than _MARKER_TTL (24h) - Marker reason is 'cosign_missing' and cosign is now on PATH Fcosign_missingcosignT)rXshutilwhich_clear_install_failed)reasons r_is_install_failed_on_diskr`s4" #F ~ !!fll8&< rr_c t}tjtjj |dt |dd5}|j |dddy#1swYyxYw#t$rYywxYw)aPersist install failure to disk to avoid retry on next process. Args: reason: Short tag identifying the failure cause. Use "cosign_missing" when cosign is not on PATH so the marker can be auto-cleared once cosign becomes available. Texist_okwrKrLN)rHr makedirsrFdirnamerQwriterT)r_rUrWs r_mark_install_failedrhsi " BGGOOA&6 !S7 + q GGFO       s0A A5A) A5)A2.A52A55 BBcrt tjty#t$rYywxYw)z3Remove the failure marker after successful install.N)rAr unlinkrHrTr5rrr^r^s1    &()    s * 66ctjjtd}tj|d|S)z/Return $HERMES_HOME/bin, creating it if needed.binTrb)r rFrGrDre)ds r_hermes_bin_dirrns-  %'/AKKD! Hrctj}tjj}|dk(rd}n|dvrd}ny|dvrd}n|dvrd }ny|d |S) uReturn the Rust target triple for the current platform, or None. Windows is intentionally unsupported — tirith does not ship a Windows build. Callers should treat `None` as "this platform will never have tirith" and silently fall back to pattern-matching guards. Darwinz apple-darwin>LinuxAndroidzunknown-linux-gnuN>amd64x86_64rt>arm64aarch64rv-)platformsystemmachiner )ryrzplatarchs r_detect_targetr}sw__ F &&(G ' '"%% ( (V1TF rctduS)uTrue when tirith ships a prebuilt binary for this OS+arch. Used by callers (CLI banner, etc.) to distinguish "tirith failed to install" from "tirith was never going to install here" — the latter is silent because there is nothing the user can do about it. N)r}r5rris_platform_supportedrs  4 ''rurldesttimeoutcttjj|}tjd}|r|j dd|tjj ||5}t|d5}tj||ddddddy#1swYxYw#1swYyxYw)zDownload a URL to a local file. GITHUB_TOKEN Authorizationztoken )rwbN) urllibrequestRequestr r add_headerurlopenrQr\ copyfileobj)rrrreqtokenresprWs r_download_filers ..  %C IIn %E  &(89   W  5$tD$?O$ST4#$$$$$$s$- B.:B"B."B+ 'B..B7checksums_pathsig_path cert_pathc  tjd}|stjdy t j |dd|d|dt dt|g d d d tj }|jd k(rtjd y tjd|j|jjy#ttjf$r }tjd|Yd}~yd}~wwxYw)ukVerify cosign provenance signature on checksums.txt. Returns: True — cosign verified successfully False — cosign found but verification failed None — cosign not available (not on PATH, or execution failed) The caller treats both False and None as "abort auto-install" — only True allows the install to proceed. r[zcosign not found on PATHNz verify-blobz --certificatez --signaturez--certificate-identity-regexpz--certificate-oidc-issuerTcapture_outputtextrstdinrz%cosign provenance verification passedz(cosign verification failed (exit %d): %sFzcosign execution failed: %s)r\r]r3info subprocessrun_COSIGN_IDENTITY_REGEXP_COSIGN_ISSUERDEVNULL returncoder4stderrrSrTTimeoutExpired)rrrr[resultexcs r_verify_cosignr%s\\( #F  ./ ] i H ,.E (.     $$      ! KK? @ NNE ++V]]-@-@-B D Z.. /4c:sAC 9C D"C==D archive_path archive_namec d}t|d5 D]@}|jjdd}t|dk(s2|d|k(s;|d}nddd|stj d|y t j}t|d 5 t fd d D]}|j| ddd|j}||k7rtj d ||y y#1swYxYw#1swYCxYw)z4Verify SHA-256 of the archive against checksums.txt.NrKrLz r1rzNo checksum entry for %sFrbc&jdS)Ni )rR)rWsrz"_verify_checksum..^s!&&,rrz&Checksum mismatch: expected %s, got %sT) rQrSsplitlenr3r4hashlibsha256iterupdate hexdigest) rrrexpectedlinepartsshachunkactualrWs @r_verify_checksumrNsH nw /1 DJJL&&tQ/E5zQ58|#; 8   1<@ .. C lD !Q.4 E JJu  ]]_F ?6R 's#4C5C5C5&D5C>D tardest_dirc:|jD]}|jdk(s|jjds.d|jvr=|js|d|jy|j |}| |dyt j j|d} t|d 5}tj||ddd|j|d fcS|d y #1swY)xYw#|jwxYw) z?Extract the tirith binary from a release archive into dest_dir.rz/tirithz..z/tirith archive member is not a regular file: %s)Nbinary_not_regular_fileNz,tirith binary could not be read from archive)Nbinary_extract_failedrr+z"tirith binary not found in archive)Nbinary_not_in_archive) getmembersnameendswithisfile extractfiler rFrGrQr\rclose)rrlogmembersrc_file dest_pathouts r_extract_tirith_binaryrgs.."! ;;( "fkk&:&:9&Ev{{"==?Ev{{S6v.HBC4 Xx8I !)T*6c&&x56 b= %!(,- (66 s$1 D=C<D<D DDT log_failuresrc|rtjntj}t}|st<j@zt<jBzt<jDz| rd#nd$}tj d%|||d&ft#j$|dS#t$r}|d |Yd }~y d }~wwxYw#t $r*}|d|Yd }~t#j$|dyd }~wwxYw#t $r!}tj d|Yd }~d }~wwxYw#1swYixYw#t$ri t#j6|nM#t$rA tj8|n#t$rYnwxYwYYt#j$|dy"wxYwYwxYw#t#j$|dwxYw)'a^Download and install tirith to $HERMES_HOME/bin/tirith. Verifies provenance via cosign and SHA-256 checksum. Returns (installed_path, failure_reason). On success failure_reason is "". failure_reason is a short tag used by the disk marker to decide if the failure is retryable (e.g. "cosign_missing" clears when cosign appears). z/tirith auto-install: unsupported platform %s/%s)Nunsupported_platformztirith-z.tar.gzzhttps://github.com/z/releases/latest/downloadztirith-install-)prefixz1tirith install failed: cannot create temp dir: %sN)Nno_spacez checksums.txtzchecksums.txt.sigzchecksums.txt.pemu9tirith not found — downloading latest release for %s.../z/checksums.txtztirith download failed: %sT) ignore_errors)Ndownload_failedFr[z/checksums.txt.sigz/checksums.txt.pemz=tirith install aborted: cosign provenance verification failed)Ncosign_verification_failedz5cosign execution failed, proceeding with SHA-256 onlyz?cosign artifacts unavailable (%s), proceeding with SHA-256 onlyu{cosign not on PATH — installing tirith with SHA-256 verification only (install cosign for full supply chain verification))Nchecksum_failedzr:gzr)Ncross_device_copy_failedzcosign + SHA-256z SHA-256 onlyztirith installed to %s (%s)r+)#r3r4debugr}rrxryrz_REPOtempfilemkdtemprTr rFrGrr&r\rmtreer]rrtarfilerQrrnmovecopyrjchmodstatst_modeS_IXUSRS_IXGRPS_IXOTH)rrtargetrbase_urltmpdirrrrrrcosign_verified cosign_resultrsrcr_r verifications r_install_tirithrs)&..fllC  F  E__&(8(8(: <+VHG,L$UG+DEH !!):;K2ww||FL9 fo>77<<(;<GGLL)<=  OQWX + hZq7 F hZ~6 G  << ! Y(+=>I(+=> J!/~x S  D(&*O"e+WX=P  fD1IKK WX KKN O nlK*<  fD19\\, / $30fcBKC{V| $ $8  fD15 $ ww||O-x8 8 KKT " rwwt},,t||;dllJT\\YZ-<).  14FRx  fD1]   ?E  + ,c 2*|  fD1A + d ]_bcc d, $ $ 8 8 C& 8IIdO7  fD1 8' 8(  fD1s<L=BQ* M Q"N Q98Q Q N?6 Q0Q O BQ= M MM N% N .Q NQ N<N71Q7N<<Q?O Q P>O-,P>- P77P  P7 PP7PP7P>Q6P77P>:Q=P>>QQconfigured_pathc |dk7S)zHReturn True if the user explicitly configured a non-default tirith path.rr5)rs r_is_explicit_pathrs h &&rc\ttturtStjj |}t |}ttu}|st s tada|S|rtjj|r(tj|tjr|a|Stj|}|r|a|Stjd|tada|Stjd}|r|adat|Stjj!t#d}tjj|r4tj|tjr|adat|S|r1tdk(r&tjdrdadatd }n|St$t$j'r|St)}|t+r ta|a|St-\}}|r|adat|Sta|at/||S) u@Resolve the tirith binary path, auto-installing if necessary. If the user explicitly set a path (anything other than the bare "tirith" default), that path is authoritative — we never fall through to auto-download a different binary. For the default "tirith": 1. PATH lookup via shutil.which 2. $HERMES_HOME/bin/tirith (previously auto-installed) 3. Auto-install from GitHub releases → $HERMES_HOME/bin/tirith Failed installs are cached for the process lifetime (and persisted to disk for 24h) to avoid repeated network attempts. Nrz6Configured tirith path %r not found; scanning disabledexplicit_path_missingrr+rZr[F)r*_INSTALL_FAILEDr rF expanduserrrr,raccessX_OKr\r]r3r4r^rGrnr7is_aliverXr`rrh) rexpandedexplicitinstall_failedfound hermes_bin disk_reason installedr_s r_resolve_tirith_pathrs$!nO&Kww!!/2H 1H#6N 13("8 77>>( # (BGG(D%NO X& "NLOQ`a("9 LL "E "$ o/:J ww~~j!bii BGG&D#"$  "&6 66<<;Q!N&( # ! #"NO "'?'?'A '(K#=#?("-')Iv""$%N$ Orct5t dddytjd}|r|ada dddyt j jtd}t j j|r2t j|t jr|ada dddyt|\}}|r|adatnta|at|dddy#1swYyxYw)z6Background thread target: download and install tirith.Nrr+r) _install_lockr*r\r]r,r rFrGrnrrrrr^rrh)rrrrr_s r_background_installrXs )  % ))  X& "N&( # ))WW\\/"3X> 77>>* %"))J*H'N&( # !))$,F 6 &N&( # ! #,N&, #  (5)))sC2C2A0C263C22C;ct}|dsytXtturLt}tjj |r&tj |tjr|Syts tada y|d}t|}tjj|}|rktjj |r(tj |tjr|a|Stj|}|r|a|Stada ytjd}|r|ada t|Stjjt!d}tjj |r4tj |tjr|ada t|Sttur.tdk(r$tjd rdada tnyt#}|t%r ta|a yt&t&j)s2t+j,t.d |id at&j1y) aEnsure tirith is available, downloading in background if needed. Quick PATH/local checks are synchronous; network download runs in a daemon thread so startup never blocks. Safe to call multiple times. Returns the resolved path immediately if available, or None. rNrrrrr+rZr[rT)rkwargsdaemon)r)r*rr rFrrrrr,rrr\r]r^rGrnrXr`r7r threadingThreadrstart) rr(rFrrrrrrs rensure_installedr xs !C  !nO&K 77>>$ BIIdBGG$<K ! "("8-(O 1Hww!!/2H 77>>( # (BGG(D%NO X& "NL("9 LL "E "$ o/:J ww~~j!bii BGG&D#"$( "&6 66<<;Q!N&( # ! # '(K#=#?("-o&>&>&@#**&"L1   r2icommandc $t}|dsdgddStrdgddStsdgddSt|d}|d}|d}|t d d |rdgd dSd gddS t j |dddddd|gdd|t j}|j}|d"k(rd} d"anF|d#k(rd } n>|d$k(rd%} n6t j#d&|t|r dgd'|d(dSd gd'|d)dSg} d} |j$j'rt)j*|j$ni} | j-d*g} | d t.} | j-d+dxsdd t0} | d%k(r%| r#| Dcgc]}t9|r|}}|sd} g} d} | | | dS#t$r`}dt|jdt|dd}t |d|t|rdgd|dcYd }~Sd gd|dcYd }~Sd }~wt j$r1t d|d|t|r dgd|d dcYSd gd!dcYSwxYw#t(j2t4f$r(t j7d,| d k(rd-} n| d%k(rd.} YwxYwcc}w)/a@Run tirith security scan on a command. Exit code determines action (0=allow, 1=block, 2=warn). JSON enriches findings/summary. Spawn failures and timeouts respect fail_open config. Programming errors propagate. Returns: {"action": "allow"|"warn"|"block", "findings": [...], "summary": str} rallowr+)actionfindingssummaryz!tirith disabled (circuit breaker)rrrNtirith_path_nonez/tirith path resolved to None; scanning disabledztirith path unavailableblockz%tirith path unavailable (fail-closed)checkz--jsonz--non-interactivez--shellposixz--Trztirith_spawn_failed::errnoztirith spawn failed: %sztirith unavailable: z#tirith spawn failed (fail-closed): ztirith_timeout:ztirith timed out after %dsztirith timed out (zs)ztirith timed out (fail-closed)rr1rwarnz'tirith returned unexpected exit code %dztirith exit code z (fail-open)z (fail-closed)rrz.tirith JSON parse failed, using exit code onlyz-security issue detected (details unavailable)z/security warning detected (details unavailable))r)r/rrr>rrrrTtype__name__getattrr6rrr.r3r4stdoutrSjsonloadsr% _MAX_FINDINGS_MAX_SUMMARY_LENJSONDecodeErrorAttributeErrorr_is_app_tld_finding)r r(rr fail_openrr spawn_key exit_coderrrdata raw_findingsrWnon_suppressibles rcheck_command_securityr*sE !C  !rbAA!r>abb ! "!rbAA&s='9:K"#G&'I  =  %2B[\ \!r>eff` '8-@ w 0$$  B!!IA~ a a @)L %2DUV_U``lBmn n!r@QR[Q\\j>kllHG H,2MM,?,?,Atzz&--(rxx B/ /88Ir*0b2C3CDH'/N!7J17MANNFHG(w GGO  k+49+=+=*>aWVX@Y?Z[ 97= %2DXY\X]B^_ _!r@cdgch>ijj  $ $ `gY ' (   %2DVW^V__aBbc c!r>^__ `L  . 1H EF W EG v GG HOsV'0F8A3I 6J J  I$AG?+I1G?9I?rArPrDrHrXr`rhr^rnr}rrrrTarFiletuplerrrrrr rr r*r#r5rrrBs,    ,   8 $17ef> /3//$/#t8%)d T!(!!  c t    +/!!D(/!U#c("y~~ #C####! "#" FcF cDj"D"  "    d 8(t($$3$$&3&#&#&$QU+&R33SW2))3)cTXjZ]oH^)4-1c2Tc2U3:s?5Kc2L's't' i#i#iX15))@.2WdW| |HC|HD|H~$r