ibdZddlmZddlZddlmZddlmZdZdd Z ddZ ddZ dddddZ dS)zFHelpers for loading Hermes .env files consistently across entrypoints.) annotationsN)Path) load_dotenv)_API_KEY_TOKEN_SECRET_KEYreturnNonecfttjD]\}t fdt Ds& |d=#t$r:|dddtj<YwxYwdS)aStrip non-ASCII characters from credential env vars in os.environ. Called after dotenv loads so the rest of the codebase never sees non-ASCII API keys. Only touches env vars whose names end with known credential suffixes (``_API_KEY``, ``_TOKEN``, etc.). c3BK|]}|VdS)N)endswith).0suffixkeys =/home/agentuser/.hermes/hermes-agent/hermes_cli/env_loader.py z/_sanitize_loaded_credentials..s/KKF3<<''KKKKKKasciiignore)errorsN) listosenvironitemsany_CREDENTIAL_SUFFIXESencodeUnicodeEncodeErrordecode)valuers @r_sanitize_loaded_credentialsr"s2:++--..UU UKKKK6JKKKKK   U LL ! ! ! !! U U U#ll78lDDKKGTTBJsOOO U UUsA**AB.-B.pathroverrideboolc t||dn"#t$rt||dYnwxYwtdS)Nutf-8) dotenv_pathr$encodingzlatin-1)rUnicodeDecodeErrorr")r#r$s r_load_dotenv_with_fallbackr+"snMx'JJJJJ MMMx)LLLLLLM!"""""s 44c|sdS ddlm}n#t$rYdSwxYwddd} t |fi|5}|}dddn #1swxYwY||}||krddl}|t|j dd \}} tj |d d 5}| || tj|dddn #1swxYwYtj||dS#t"$r( tj|n#t&$rYnwxYwwxYwdS#t($rYdSwxYw) uPre-sanitize a .env file before python-dotenv reads it. python-dotenv does not handle corrupted lines where multiple KEY=VALUE pairs are concatenated on a single line (missing newline). This produces mangled values — e.g. a bot token duplicated 8× (see #8908). We delegate to ``hermes_cli.config._sanitize_env_lines`` which already knows all valid Hermes env-var names and can split concatenated lines correctly. Nr)_sanitize_env_linesr'replace)r)rz.tmpz.env_)dirrprefixw)r))existshermes_cli.configr- ImportErroropen readlinestempfilemkstempstrparentrfdopen writelinesflushfsyncfilenor. BaseExceptionunlinkOSError Exception) r#r-read_kwforiginal sanitizedr7fdtmps r_sanitize_env_file_if_neededrJ/sn ;;==9999999 #i88G $ " "' " " %a{{}}H % % % % % % % % % % % % % % %''11  OOO&& $$VG'GB Yr3999)QLL+++GGIIIHQXXZZ((())))))))))))))) 3%%%%%    IcNNNND   ! "      s -- E>A$ E>$A((E>+A(,AE>2E AD% E%D))E,D)-E E9E'&E9' E41E93E44E99E>> F  F ) hermes_home project_envrKstr | os.PathLike | NonerL list[Path]cg}t|p(tjdtjdz }|dz }|rt|nd}|rt ||r&t |d|||r;|r't || |||S)a[Load Hermes environment files with user config taking precedence. Behavior: - `~/.hermes/.env` overrides stale shell-exported values when present. - project `.env` acts as a dev fallback and only fills missing values when the user env exists. - if no user env exists, the project `.env` also overrides stale shell vars. HERMES_HOMEz.hermesz.envNT)r$)rrgetenvhomer2rJr+append)rKrLloaded home_pathuser_envproject_env_paths rload_hermes_dotenvrX\sF[UBImTY[[9=T$U$UVVI6!H,7AtK(((T/$X... "8d;;;; h(,3355("#3&jIIII &''' Mr)r r )r#rr$r%r r )r#rr r )rKrMrLrMr rN) __doc__ __future__rrpathlibrdotenvrrr"r+rJrXrrr^sLL"""""" A U U U U # # # #* * * * ^-1,0r