}-j'{UdZddlZddlZddlZddlZddlZddlZddlm Z ej e Z ddl mZmZmZmZmZmZde fdZde fdZde fdZdefd Zd edefd Zd d de dededzfdZdefdZdefdZ d eddfdZ!defdZ"deddfdZ#de de fdZ$e de de de dfZ%e&e dfe'd<de&e dffdZ(de de)fd Z*de&e dffd!Z+de&e dffd"Z,d:de d#ee zdzde)fd$Z-de d%e de)fd&Z.dee fd'Z/d;d*ed+e0deefd,Z1d:dee zdzde fd-Z2dedefd.Z3dede fd/Z4d%e d0ede fd1Z5da{ Hermes Web UI -- Workspace and file system helpers. Workspace lists and last-used workspace are stored per-profile so each profile has its own workspace configuration. State files live at ``{profile_home}/webui_state/workspaces.json`` and ``{profile_home}/webui_state/last_workspace.txt``. The global STATE_DIR paths are used as fallback when no profile module is available. N)Path)WORKSPACES_FILELAST_WORKSPACE_FILEDEFAULT_WORKSPACEMAX_FILE_BYTES IMAGE_EXTSMD_EXTSreturnc ddlm}m}|}|r,|dkr&|dz }|dd|Sn*#t$rt dYnwxYwtjS)zReturn the webui_state directory for the active profile. For the default profile, returns the global STATE_DIR (respects HERMES_WEBUI_STATE_DIR env var for test isolation). For named profiles, returns {profile_home}/webui_state/. r)get_active_profile_nameget_active_hermes_homedefault webui_stateTparentsexist_okz8Failed to import profiles module, using global state dir) api.profilesr r mkdir ImportErrorloggerdebug_GLOBAL_WS_FILEparent)r r nameds #/root/hermes-webui/api/workspace.py_profile_state_dirrsQPPPPPPPP&&((  DI%%&&((=8A GGD4G 0 0 0H QQQ OPPPPPQ  !!s?A$A*)A*c$tdz S)z7Return the workspaces.json path for the active profile.zworkspaces.jsonrr_workspaces_filer"1s   "3 33r!c$tdz S)z:Return the last_workspace.txt path for the active profile.zlast_workspace.txtrr r!r_last_workspace_filer$6s   "6 66r!c0 ddlm}|}dD]~}||}|rett |}|rt |cS|di}t|tr|dd}|rtt |dvrctt |}|rt |Sn1#ttf$rt dYnwxYw dd lm}t t|S#t$rHt ttcYSwxYw) uiRead the profile's default workspace from its config.yaml. Checks keys in priority order: 1. 'workspace' — explicit webui workspace key 2. 'default_workspace' — alternate explicit key 3. 'terminal.cwd' — hermes-agent terminal working dir (most common) Falls back to the live DEFAULT_WORKSPACE from api.config. r) get_config) workspacedefault_workspaceterminalcwd).r+z/Failed to load profile default workspace config)r) api.configr&getrstr expanduserresolveis_dir isinstancedictr Exceptionrrr_BOOT_DEFAULT_WORKSPACE)r&cfgkeywsp terminal_cfgr*_LIVE_DEFAULT_WORKSPACEs r_profile_default_workspacer=;sH))))))jll5 " "CB "RMM,,..668888::"q66MMMwwz2.. lD ) ) """5"--C "s3xxy00SNN--//779988::"q66M  #HHH FGGGGGHIKKKKKK4/00;;==EEGGHHH III4/00;;==EEGGHHHHHIs-BE B7E +E98E9=AGAHH workspacesctjdz dz }g}|D]}|dd}|dd}|s2t t|} || ddlm}|}||n#ttf$rYwxYwn#t$rYnwxYw| dkrd }| t||d |S) aSanitize a workspace list: - Preserve saved paths even when they are currently missing or inaccessible; picker state must not be destroyed by a transient stat/permission failure. - Remove entries whose paths live inside another profile's directory (e.g. ~/.hermes/profiles/X/... should not appear on a different profile). - Rename any entry whose name is literally 'default' to 'Home' (avoids confusion with the 'default' profile name). Returns the cleaned list (may be empty). z.hermesprofilespathr+rr)r rHomerAr)rhomer1r. _safe_resolver0 relative_torr ValueErrorr5lowerappendr/) r>hermes_profilesresultwrArr:r own_profile_dirs r_clean_workspace_listrNcsty{{Y.;DDFFO F 66uuVR  uuVR     $t**//11 2 2  MM/ * * * ??????"8"8":":"B"B"D"D o.... *    /    D  ::<<9 $ $D s1vvt445555 Ms6C7'7CC7C30C72C33C77 DDzPath does not exist) missing_label candidaterOc |}nM#t$r |d|cYSt$r}d|d|dcYd}~Sd}~wt$r}d|d|dcYd}~Sd}~wwxYwtj|jsd|SdS) aReturn a user-facing validation error for an unusable workspace path. ``Path.exists()`` can collapse permission/stat failures into a generic falsey result on some Python/OS combinations, which produced misleading "does not exist" messages for macOS/TCC-denied directories. Probe with ``stat()`` so missing paths, non-directories, and permission-denied paths can be reported separately. z: zCannot access path: z7. The server process could not inspect this directory (z~). On macOS, grant Full Disk Access or Files and Folders permission to the Hermes/WebUI app or server process, then try again.Nz2. The server process could not inspect this path (z).zPath is not a directory: )statFileNotFoundErrorPermissionErrorOSErrorS_ISDIRst_mode)rPrOstexcs r_workspace_access_errorrZs k ^^   ///..9.....     ]9 ] ]" ] ] ]      kkkjijjcfjjjjjjjjjk < # #769666 4s0A! A!AA! A!AA!A!cXtjsgS tjtjd}t |}t |t |kr+tjtj|ddd|S#t$rgcYSwxYw)a7Read the legacy global workspaces.json, clean it, and return the result. This is the migration path for users upgrading from a pre-profile version: their global file may contain cross-profile entries, test artifacts, and stale paths accumulated over time. We clean it in-place and rewrite it. utf-8encodingF ensure_asciiindent) rexistsjsonloads read_textrNlen write_textdumpsr5)rawcleaneds r_migrate_global_workspacesrls  ! # #  j2GDDDEE',, w<<3s88 # #  & 7qAAAG      sBB B)(B)ct}|r tj|d}t |}t |t |krX |tj|dddn*#t$rt dYnwxYw|ptddgS#t$rt d |YnwxYw d d l m}|d v}n#t$rd }YnwxYw|rt!}|r|StddgS)Nr\r]Fr_r`z(Failed to persist cleaned workspace listrBrCz!Failed to load workspaces from %sr)r )rNT)r"rcrdrerfrNrgrhrir5rrr=rr rrl)ws_filerjrkr is_defaultmigrateds rload_workspacesrqs  G~~G G*W...@@AAC+C00G7||s3xx''M&& 7qIIIT['!MMMLL!KLLLLLMV(B(D(DfUUV V G G G LLrns rsave_workspacesrssY  G N555 tz*5KKKV]^^^^^r!clt}|rz |d}|r#t |r|Sn+#t $rtd|YnwxYwtjrx tjd}|r#t |r|Sn*#t $rtdYnwxYwtS)Nr\r]z%Failed to read last workspace from %sz$Failed to read global last workspace) r$rcrfstriprr2r5rr_GLOBAL_LW_FILEr=)lw_filer:s rget_last_workspacerxsI"$$G~~K K!!7!3399;;A T!WW^^%%  K K K LL@' J J J J J KA A)7;;;AACCA T!WW^^%%  A A A LL? @ @ @ @ @ A % ' ''s%A A22%BB1A C>>$D%$D%rAc t}|jdd|t |ddS#t $rt dYdSwxYw)NTrr\r]zFailed to set last workspace)r$rrrhr/r5rr)rArws rset_last_workspacerzs5&((TD9993t99w77777 555 34444445sAA$A:9A:r:c^ |S#ttf$r|cYSwxYw)uKPath.resolve() that never raises — falls back to the input path on error.)r1rU RuntimeErrorr:s rrErEs>yy{{ \ "s ,,z /var/folders/private/var/foldersz/var/tmp/private/var/tmp._USER_TMP_PREFIXEScd}t}g}|D]^}t|tt|fD]0}||vr*||||1_t |S)uSystem roots that must never be accepted as workspace candidates. Returns both the literal path and its symlink-resolved canonical form, deduped. This matters on macOS where ``/etc``, ``/var``, and ``/tmp`` are symlinks to ``/private/etc`` etc. Without the resolved forms, callers that pass a ``.resolve()``-d candidate (every caller does) would compare ``/private/etc`` against literal ``Path('/etc')`` and the ``relative_to`` check would miss — letting ``/etc`` through as a registered workspace on macOS. Carve-outs for legitimate user-tmp paths nominally under these roots (e.g. ``/var/folders/.../T/`` on macOS) are handled by :func:`_is_blocked_system_path`, not by exclusion from this list. )z/etcz/usrz/varz/binz/sbinz/bootz/procz/sysz/devz/libz/lib64z /opt/homebrewz/Systemz/Library)setrrEaddrItuple)_raw_seen_out_p_forms r_workspace_blocked_rootsrs D"uuED##2hh d2hh 7 78 # #EE!! %    E""" # ;;r!ctD]}t||rdStD]}t||rdSdS)a)Return True if *candidate* falls under a blocked system root. Honours :data:`_USER_TMP_PREFIXES` carve-outs so per-user tmp directories nominally under ``/var`` (``/var/folders`` on macOS, ``/var/tmp`` on Linux/macOS) remain valid workspace candidates and reachable file targets. FT)r _is_withinr)rPtmpblockeds r_is_blocked_system_pathr?si" i % % 55 +-- i ) ) 44  5r!c,tttdgz}g}|D]U} |}n#t $r|}YnwxYw||vr||Vt|S)Nz /private/etc)listrrr0r1r5rIr)rootsresolvedrootr:s r$_workspace_blocked_resolved_subtreesrOs )++ , ,^0D0D/E EEH !!))++AA   AAA  H   OOA    ??s&A A*)A*c|tdtdg}tD]a} ||=#t $r||Y^wxYwg}|D]}||vr||t |S)N/ /private/var)rrrIr0r1r5r)rruniques r_workspace_blocked_exact_rootsr\s #YY^,, -E(**  LL**2244 5 5 5 5    LL      F   v   MM$    ==s9A**B  B raw_pathcd}|dvr5 t|}n#t$rd}YnwxYwt}|vs||t vrdSt D]'}t |s|t ||rdS(|$t D]}t ||rdStdtdf}tD]a}|tdkr9|krdStfd|Dr:t |rdSNt |rdSbdS) a Return True when candidate points at a known OS/system directory. Compare both the original spelling and the resolved path. This closes the macOS /etc -> /private/etc bypass without globally banning temporary pytest paths under /private/var/folders. NNr+TFr~rrc38K|]}t|VdSN)r).0allowedrPs r z-_is_blocked_workspace_path..s-UUg:i11UUUUUUr!) rr0r5rrrrrany)rPrrjexactrrallowed_private_vars` r_is_blocked_workspace_pathrjs Cz!! x..++--CC   CCC  + , ,EEco#9Q9S9S2S2St! i % % #/jc>R>R/55 /11  G#w'' tt  677>P9Q9QR799   d>** * *G##ttUUUUATUUUUU )W-- tt  i ) ) 44  5s !+ ::rcT ||dS#t$rYdSwxYw)NTF)rFrG)rArs rrrsB t uus  ''c$gdttzdzddffd }|tj|tt D] }||d!dS)NrPr cN|dvrdS t|}n#t$rYdSwxYw|r|sdSt ||rdS|vr|dSdS)Nr)rr0r1r5rcr2rrI)rPr:rs rrz%_trusted_workspace_roots..adds  " " F Y**,,4466AA    FF xxzz   F %a 3 3  F E>> LLOOOOO >s3= A  A rAc:tt|Srrgr/r}s rz*_trusted_workspace_roots..sSQ[[r!r8)r/rrDr6rqr.sort)rrLrs @r_trusted_workspace_rootsrsE sTzD( T      C C      AEE&MM JJ((J))) Lr!r+ prefixlimitct}|sgS|pd}|sd|d|DS|dr"t|}nGt|rt|}ntj|z }t|}gdtddffd }|D]A}t||r ||Bfd|D}|s d|St|d } | tj p| d } | r|n|j } | rdn|j} | d } | }n#t $r d|cYSwxYw|r|s d|St'|| s d|S| } t)|d }n#t,$r d|cYSwxYw|D]}|s|jd r| s4|r-|j|sc||t/|krnd|S)a\Return workspace path suggestions under trusted roots only. Suggestions are limited to directories under one of: - Path.home() - the boot default workspace - already-saved workspace roots Arbitrary system prefixes return an empty list rather than an error so the UI can safely autocomplete while the user types. r+c,g|]}t|Sr )r/)rr:s r z.list_workspace_suggestions..s...1A...r!N~rAr c\t|}|vr|dSdSr)r/rI)rAvalue suggestionss rrz'list_workspace_suggestions..adds;D   # #   u % % % % % $ #r!cg|]F}t|ks/t|tjzD|GSr )r/ startswithossep)rr normalizeds rrz.list_workspace_suggestions..sT  T " "j&;&;CII.sSQ[[r!rrr,c4|jSr)rrHr}s rrz,list_workspace_suggestions..s16<<>>r!)rrurrr0 is_absoluterDr/rHmaxendswithrrrrr1r5rcr2rsortediterdirrUrg)rrrrjtargetnormalized_lowerrrin_root anchor_root ends_with_seprleaf show_hiddenparent_resolved leaf_lowerchildrenchildrrs @@rlist_workspace_suggestionsrs % & &E  }|dt|d?S)rA)r.rr1)rrLs r z,resolve_trusted_workspace..=s=QQQQ155==QtAfI..00QQQr!zoPath is outside the user home directory, not in the saved workspace list, and not under the default workspace: u+. Add it via Settings → Workspaces first.) rr6r0r1rZrGrDrFrrqr5)rArP access_error_homesaved saved_paths boot_defaults rresolve_trusted_workspacers* z+,,7799AACCCT %%''//11I*955L'&&& IKK   ! !E S    ! !% ( ( (     D ")T22LJyJJKKK !!QQ%QQQ  # #  $       344??AAIIKK l+++        56? 5 5 5  s7 C C-,C-D44 EEAF F! F!c|}t|dkr&|d|dkr|ddvr |ddS|S)uxStrip a single pair of surrounding single or double quotes from a path string. macOS Finder's "Copy as Pathname" (Cmd+Option+C) returns paths wrapped in single quotes, e.g. ``'/Users/x/Documents/foo'``. Other shells and OS file managers do similar things with double quotes. Users routinely paste these quoted strings into the Add Space input expecting them to "just work" — the only reason they didn't was a missing strip. Only paired quotes are stripped (matching opener and closer). One-sided quotes are preserved on the slim chance a path legitimately contains a literal quote character. r_r)'")rurg)rAss r_strip_surrounding_quotesrXsP A 1vv{{qtqu}}1););2w Hr!ct|}t|}t |}|rt |tj}|tdkrt||r|St||rt d||S)uValidate a path for *adding* to the workspace list (less restrictive than resolve_trusted_workspace). When a user explicitly adds a new workspace path, we trust their intent — they have console or filesystem access to that path and are consciously registering it. We only block: non-existent paths, non-directories, and known system roots. The stricter ``resolve_trusted_workspace`` is used when *using* an existing workspace (file reads/writes) to prevent path traversal after the list is built. Surrounding quotes (single or double) are stripped before validation — macOS Finder's "Copy as Pathname" wraps paths in single quotes by default, and users routinely paste those into the Add Space input. rr) rrr0r1rZrGrDrr)rArPrrs rvalidate_workspace_to_addrks %T * *DT %%''//11I*955L'&&& IKK   ! !E S jE::")T22LJyJJKKK r! requestedcddl}||z }|} |||S#t$rYnwxYwt |jt|} ||n #t$rtd|wxYwt|rtd||S)uResolve a relative path inside a workspace root, raising ValueError on traversal. Symlinks whose *unresolved* path is within the workspace root are allowed — the user placed them there intentionally. Only raw ``..`` traversal outside the root is blocked. rNzPath traversal blocked: z%Path traversal blocked (system dir): ) rr1rFrGrrAnormpathr/r)rrr unresolvedrnorms rsafe_resolve_wsrsIII !J!!##H T\\^^,,,         Z11 2 2DA  AAA?I??@@@A x((NLLLMMM Os(A AA B##Cr,r'relct||}|std||}g}t |dD]}|r> |}n#t$rY:wxYw||ks ||ks||krc ||#t$rYnwxYwt|r|}tt|j }|r|dkr|dz|z}|j |dt||d} |s3 |j| d<n#t$rd| d<YnwxYw|| n~|j } |r|dkr |dz|j z} ||j | |rd nd |r|jndd t%|d krn|S) NzNot a directory: c| ||jfSr) is_symlinkis_filerrHr}s rrzlist_dir..s0ALLNN8JAIIKKYZY_YeYeYgYg7hr!rr,rsymlink)rrAtyperr2sizedirfile)rrArr)rr2rSr1rrrrUrFrGrr/rrrRst_sizerIrrg) r'rr ws_resolvedentriesitem link_targetr2 display_pathentry entry_paths rlist_dirrs Y , ,F ==??; 9C 9 9:::##%%KGv~~''-h-hiii55 ??  2  "llnn      v~~////;&3H3H"k11   ,,[999    '{33  ''))FtDI//L 8sczz"Sy<7  $!k** E ))$/$4$4$6$6$>E&MM)))$(E&MMM) NN5 ! ! ! !J 3sczz 3Y2 NN "!%:F/3||~~G ++4     w<<3   E  Ns6 B B,+B,'C== D  D ?FF.-F.cTt||}|std||j}|t krt d|dt d|dd}||||dd zd S) Nz Not a file: zFile too large (z bytes, max )r\replace)r^errors r)rAcontentrlines) rrrSrRrrrGrfcount)r'rrrrs rread_file_contentrs Y , ,F >>  6 4s 4 4555 ;;== D nODOOnOOOPPP BBGGTGMMRVDWDWZ[D[ \ \\r!c tjdg|zt|dd|}|jdkr|jndS#tjttf$rYdSwxYw)z8Run a git command and return stdout, or None on failure.gitT)r*capture_outputtexttimeoutrN) subprocessrunr/ returncodestdoutruTimeoutExpiredrSrU)argsr*r rs r_run_gitrs N GdNCw   $%<1#4#4qx~~$>  %'8' BttsAAA21A2cdz sdStgd}|dSfd}fd}fd}tjd5}||}||}||}|\} } } |} |} dddn #1swxYwY|| | | | | d d S) zEReturn git info for a workspace directory, or None if not a git repo.z.gitN)z rev-parsez --abbrev-refHEADcvtgd}|r#|rt|ndS)N)rev-list--countz @{u}..HEADrrisdigitintrr's r_aheadz&git_info_for_workspace.._ahead; :::I F F1qyy{{1s1vvv1r!cvtgd}|r#|rt|ndS)N)rrz HEAD..@{u}rrrs r_behindz'git_info_for_workspace.._behindr r!ctddgpd}d|D}td|D}td|D}t|||fS)Nstatusz --porcelainr+cg|]}||Sr r rls rrz;git_info_for_workspace.._status..s222q2222r!c3hK|]-}t|dk|ddvs |ddv)dV.dS)r_rMARrN)rgr&s rrz:git_info_for_workspace.._status..sE\\Q3q66Q;;AaDEMMQqTUZ]]q]]]]\\r!c3DK|]}|ddVdS)z??rN)rr&s rrz:git_info_for_workspace.._status..s3??aALL,>,>???????r!)r splitlinessumrg)outrmodified untrackedr's r_statusz'git_info_for_workspace.._statuss-0)<<B22CNN,,222\\%\\\\\??5????? 5zz8Y..r!r) max_workersT)branchdirtyr.r/aheadbehindis_git)rcr concurrentfuturesThreadPoolExecutorsubmitrK)r'r2rr"r0poolf_statusf_aheadf_behindr3r.r/r4r5s` rgit_info_for_workspacer?s   & & ( (t ;;;Y G GF ~t 2222222222/////   . .1 . = =#;;w'';;v&&;;w''%-__%6%6"x!!"" ###############  s BC,,C03C0r)r+r)r,)r);__doc__rdloggingrrRrconcurrent.futuresr7pathlibr getLogger__name__rr-rrrrvrr6rrr rr"r$r/r=rrNrZrlrqrsrxrzrErr__annotations__rboolrrrrrrrrrrrrrr4rrr?r r!rrHsC    8 $ $"D""""&4$4444 7d7777 #IC#I#I#I#IP%d%t%%%%PF[ts_bei_i4D,DDDDDB______ (C(((((5S5T5555Td DD   DD  (E$)$'%c "2''''T t      eD#I.>     dCi(8    ,,$,#*t:K,W[,,,,^T$$t*2QQsQQT#YQQQQhEEC$J$5EEEEET C C    &CDB$34@<<<3<<<<~]]C]D]]]]    &d&t&&&&&&r!