PL jUdZddlZddlZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z m Z ddlmZmZejdZgdZgdZd d gZgd Zeeed <ehd Zeeed<dZde defdZde fdZehdZ ehdZ!ehdZ"de fdZ#de fdZ$de fdZ%de fdZ&dedefdZ'deddfdZ(dede fdZ)dedefd Z*dedeefd!Z+defd"Z,dedee fd#Z-dedefd$Z.e Gd%d&Z/de de0fd'Z1de de0fd(Z2de defd)Z3de de4fd*Z5de de fd+Z6de de7fd,Z8ddd-de d.eed/eeddfd0Z9dee/fd1Z: dUded3eed4ed5ed6ed7ed.eede fd8Z;dVde d9edee7fd:Zde ddfd>Z?defd?Z@deddfd@ZAdefdAZBdBe fdCZCdedDede fdEZDdFedeefdGZEdHe dIe ddfdJZFdHe deGefdKZHdWdLedeede fdMZIdNedOedPe ddfdQZJdNedOede fdRZKdSedefdTZLdS)Xu_ Profile management for multiple isolated Hermes instances. Each profile is a fully independent HERMES_HOME directory with its own config.yaml, .env, memory, sessions, skills, gateway, cron, and logs. Profiles live under ``~/.hermes/profiles//`` by default. The "default" profile is ``~/.hermes`` itself — backward compatible, zero migration needed. Usage:: hermes profile create coder # fresh profile + bundled skills hermes profile create coder --clone # also copy config, .env, SOUL.md, skills hermes profile create coder --clone-all # full copy of source profile coder chat # use via wrapper alias hermes -p coder chat # or via flag hermes profile use coder # set as sticky default hermes profile delete coder # remove profile + alias + service N) dataclass)Path PurePosixPathPureWindowsPath)ListOptionalz^[a-z0-9][a-z0-9_-]{0,63}$) memoriessessionsskillsskinslogsplans workspacecronhome) config.yaml.envSOUL.mdzmemories/MEMORY.mdzmemories/USER.md) gateway.pidgateway_state.jsonprocesses.json_CLONE_ALL_STRIP>binprofiles node_modules .worktrees hermes-agent_CLONE_ALL_DEFAULT_EXCLUDE_ROOTz.no-bundled-skills profile_dirreturnc^ |tz S#t$rYdSwxYw)z>Return True if the profile opted out of bundled-skill seeding.F)NO_BUNDLED_SKILLS_MARKERexistsOSErrorrs 7/home/kuhnn/.hermes/hermes-agent/hermes_cli/profiles.pyhas_bundled_skills_opt_outr'msA66>>@@@ uus  ,, source_dirc|tkdtdttdttffd }|S)uoExclude infrastructure artifacts when cloning a profile via --clone-all. Two categories: 1. Root-level entries in ``_CLONE_ALL_DEFAULT_EXCLUDE_ROOT`` — known Hermes infrastructure directories that only the default profile (``~/.hermes``) ever contains. Gated on ``source_dir`` actually being the default profile so a named-profile source never has its own data silently dropped. 2. Universal exclusions at any depth — Python bytecode caches that are stale or regenerable (``__pycache__``, ``*.pyc``, ``*.pyo``) and runtime sockets / temp files (``*.sock``, ``*.tmp``). The export-side ignore (``_default_export_ignore``) uses the same two-tier pattern with the broader ``_DEFAULT_EXPORT_EXCLUDE_ROOT`` set because the export archive is a portable snapshot rather than a live clone. directorynamesr c4g}|D]}|dks|dr||3r\ t|kr|tvr||z#t t f$rYwxYw|S)N __pycache__)z.pycz.pyo.sock.tmp)endswithappendrresolverr$ ValueError)r*r+ignoredentryis_default_sourcesource_resolveds r&_ignorez+_clone_all_copytree_ignore.._ignores  E&&>>"CDD'u%%% I..00OCC $CCC#NN5111,D  sABBB)r2_get_default_hermes_homestrr)r(r8r6r7s @@r&_clone_all_copytree_ignorer;us|$!((**O'+C+E+E+M+M+O+OO3tCyT#Y. N>state.db auth.lock errors.log state.db-shm state.db-wal .update_check.hermes_historyhermes_state.dbresponse_store.dbresponse_store.db-shmresponse_store.db-walrr r sandboxes audio_cache checkpoints image_cacheractive_profiledocument_cachebrowser_screenshotsr auth.jsonrrrrr>tmprootsudotesthermesdefault>acpmcpchatrdumploginmodelsetuptoolsconfigdoctorhonchologoutr statusupdategatewaypairingpluginsprofileversioninsightsr whatsapp uninstallc$tdz S)aReturn the directory where named profiles are stored. Anchored to the hermes root, NOT to the current HERMES_HOME (which may itself be a profile). This ensures ``coder profile list`` can see all profiles. In Docker/custom deployments where HERMES_HOME points outside ``~/.hermes``, profiles live under ``HERMES_HOME/profiles/`` so they persist on the mounted volume. rr9r<r&_get_profiles_rootros $ % % 22r<c"ddlm}|S)zReturn the default (pre-profile) HERMES_HOME path. In standard deployments this is ``~/.hermes``. In Docker/custom deployments where HERMES_HOME is outside ``~/.hermes`` (e.g. ``/opt/data``), returns HERMES_HOME directly. rget_default_hermes_root)hermes_constantsrrrqs r&r9r9s%988888 " " $ $$r<c$tdz S)z2Return the path to the sticky active_profile file.rLrmrnr<r&_get_active_profile_pathrus # % %(8 88r<c4tjdz dz S)z)Return the directory for wrapper scripts.z.localr)rrrnr<r&_get_wrapper_dirrws 9;; !E ))r<namect|tst|}|}|std|dkrdS|S)uReturn the canonical profile id used on disk and in CLI ``-p`` argv. Named profiles are stored lowercase under ``profiles//``. The special alias ``default`` is matched case-insensitively (``Default`` → ``default``). Dashboards and tools may pass title-cased display labels; normalize before validation, assignment, and subprocess spawn (see issue #18498). zprofile name cannot be emptyrU) isinstancer:stripr3casefoldlower)rxstrippeds r&normalize_profile_namersq dC 4yyzz||H 97888i''y >>  r<c|dkrdSt|std|d|tvrtd|ddS)uRaise ``ValueError`` if *name* is not a valid profile identifier. Validates the input as-given — strict lowercase match. Callers that accept mixed-case or title-cased input from users (dashboard UI, CLI args) should call :func:`normalize_profile_name` first. This separation keeps validate honest about what the on-disk directory name must look like, while ingress-point normalization handles UX flexibility (see #18498). Also rejects names in :data:`_RESERVED_NAMES` (``hermes``, ``test``, ``tmp``, ``root``, ``sudo``) that would create confusing on-disk collisions (a ``hermes`` profile inside ``~/.hermes/``) or get refused at alias-creation time anyway. ``default`` is a special pass-through — it's a valid alias for the built-in root profile. rUNzInvalid profile name z%. Must match [a-z0-9][a-z0-9_-]{0,63}z Profile name uz is reserved — it collides with either the Hermes installation itself or a common system binary. Pick a different name.)_PROFILE_ID_REmatchr3_RESERVED_NAMES)rxs r&validate_profile_namer s y    % %  *D * * *     &D & & &   r<cjt|}|dkrtSt|z S)z4Resolve a profile name to its HERMES_HOME directory.rU)rr9rorxcanons r&get_profile_dirr)s7 "4 ( (E ')))   % ''r<crt|}|dkrdSt|S)z)Check whether a profile directory exists.rUT)rris_dirrs r&profile_existsr1s9 "4 ( (E t 5 ! ! ( ( * **r<ct|}|tvrd|dS|tvrd|dSt} t jd|gddd}|jdkrg|j}|t||z kr/ ||z }d |vrd Sn#t$rYnwxYwd|d |d Sn#ttj f$rYnwxYwd S) zReturn a human-readable collision message, or None if the name is safe. Checks: reserved names, hermes subcommands, existing binaries in PATH. 'z' is a reserved namez$' conflicts with a hermes subcommandwhichT)capture_outputtexttimeoutr hermes -pNz&' conflicts with an existing command ())rr_HERMES_SUBCOMMANDSrw subprocessrun returncodestdoutr{r: read_text ExceptionFileNotFoundErrorTimeoutExpired)rxr wrapper_dirresult existing_pathcontents r&check_alias_collisionr=sZ #4 ( (E .5.... ###>5>>>>#$$K  e Ta      ! !"M//11MK%$7 8 888*U2==??G"g--#t. DTuTTMTTT T " z8 9      4s6AC B0/C 0 B=:C <B== C C#"C#ctt}|tjddtjvS)z!Check if ~/.local/bin is in PATH.PATH)r:rwosenvirongetsplitpathsep)rs r&_is_wrapper_dir_in_pathr_sA&(())K "*..44::2:FF FFr<c t|}t} |ddn-#t$r }t d|d|Yd}~dSd}~wwxYw||z } |d|d||jtj ztj ztj z|S#t$r }t d|d|Yd}~dSd}~wwxYw) zCreate a shell wrapper script at ~/.local/bin/. Returns the path to the created wrapper, or None if creation failed. Tparentsexist_oku⚠ Could not create : Nz#!/bin/sh exec hermes -p z "$@" u ⚠ Could not create wrapper at ) rrwmkdirr$print write_textchmodstatst_modeS_IEXECS_IXGRPS_IXOTH)rxrre wrapper_paths r&create_wrapper_scriptresD #4 ( (E"$$K$6666  8k88Q88999ttttt&L KU K K KLLL<,,..6E TW[Wccddd  DDDDDEEEttttts.7 A!AA!*A-C D"C==Dctt|z }|r@ |}d|vr|dSn#t $rYnwxYwdS)zARemove the wrapper script for a profile. Returns True if removed.rTF)rwrr#runlinkr)rxrrs r&remove_wrapper_scriptr|s#%%(>t(D(DDL ",,..Gg%%##%%%t&    D  5s,A## A0/A0ceZdZUdZeed<eed<eed<eed<dZe eed<dZ e eed<d Z eed <d Z e ed <dZe eed <dZe eed<dZe eed<dZe eed<dZeed<d Zeed<dS) ProfileInfoz$Summary information about a profile.rxpath is_defaultgateway_runningNr[providerFhas_envr skill_count alias_pathdistribution_namedistribution_versiondistribution_sourcer descriptiondescription_auto)__name__ __module__ __qualname____doc__r:__annotations__rboolr[rrrrintrrrrrrrnr<r&rrs.. III JJJE8C="Hhsm"""GTK!%J%%%'+x}+++*.(3-...)-#--- K #d"""""r<rc|dz }|sdS ddl}t|dd5}||pi}dddn #1swxYwYt |t sdS|d|d |d fS#t$rYdSwxYw) uReturn ``(name, version, source)`` from the profile's ``distribution.yaml`` if present; ``(None, None, None)`` otherwise. Failures (missing file, bad YAML) are swallowed — a bad manifest should never break ``hermes profile list`` for an unrelated profile. zdistribution.yaml)NNNrNrutf-8encodingrxrhsource)is_fileyamlopen safe_loadrzdictrr)rmf_pathrfdatas r&_read_distribution_metars'//G ??      '3 1 1 1 +Q>>!$$*D + + + + + + + + + + + + + + +$%% $## HHV   HHY   HHX        s:B7A B7AB7AB79=B77 CCc|dz }|sdS ddl}t|dd5}||pi}dddn #1swxYwY|di}t |t r|dfSt |tr?|d p|d|d fSdS#t$rYdSwxYw) zLRead model/provider from a profile's config.yaml. Returns (model, provider).r)NNrNrrrr[rUr) r#rrrrrzr:rr)r config_pathrrcfg model_cfgs r&_read_config_modelrsN -K     z  +sW 5 5 5 *..##)rC * * * * * * * * * * * * * * *GGGR(( i % % #d? " i & & a==++Ey}}W/E/Ey}}U_G`G`` `z zzs;C'A C'AC'A1C'AC'' C54C5cV ddlm}||dz dduS#t$rYdSwxYw)z'> QJE Lr<c |dz S)Nz profile.yamlrnr%s r&_profile_yaml_pathrs  ''r<ct|}|sdddS ddl}t|dd5}||pi}dddn #1swxYwYn#t $rdddcYSwxYwt |tsdddSt| d pd t| d ddS) uRead ``/profile.yaml`` and return a dict. Returns ``{"description": "", "description_auto": False}`` when the file is missing or unreadable. Never raises — a corrupt profile.yaml on an unrelated profile must not break ``hermes profile list``. rFrrrNrrrrr) rrrrrrrzrr:rr{r)rrrrrs r&read_profile_metars[ k * *D <<>>>!u===> $g . . . +!>>!$$*D + + + + + + + + + + + + + + + >>>!u=====> dD ! !>!u===488M228b99??AA */profile.yaml`` in place. Only the explicitly passed fields are overwritten; unspecified fields preserve existing values. Creates the file if missing. Profile directory itself must exist. z"profile directory does not exist: rNrrrrrwF) sort_keysdefault_flow_style) rrrrrrrrzrrr{r safe_dump)rrrrrexistingrloadeds r&write_profile_metars     T R[ R RSSSKKK k * *DH ||~~ dC'222 1a**0b 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1&$'' "!   HHH "-"3"3"5"5#'+,<'='=#$ dC' * * *Oa xeNNNOOOOOOOOOOOOOOOOOOsHB*#B; B*B  B*B B** B98B9;D""D&)D&cg}t}t}|rt|\}}t |\}}}t |}|td|dt||||dz t||||| dd| dd t} | r3t| D]} | s| j} t | s:t| \}}|| z } t | \}}}t | }|t| | dt| ||| dz t| | r| nd |||| dd| dd |S) z4Return info for all profiles, including the default.rUTrrrrF) rxrrrr[rrrrrrrrN)rxrrrr[rrrrrrrrr)rwr9rrrrr1rrr#rrrosortediterdirrxrr) rr default_homer[r dist_name dist_version dist_sourcemeta profiles_rootr5rxrs r& list_profilesr =sSH"$$K,--L ,\::x/F|/T/T, < .. 2<@@!F*2244%l33'!- +33!XX&8%@@      "'((MM113344  E<<>> :D!''-- 077OE8$t+J3J53Q3Q 0I|[$U++D OOK 6u = =!//11)%00)3):):)<)<F::$"+%1$/ HH]B77!%* > 8+::<<>LkH&<=== '1M##%% [ {X/EUYZZZZ/ + + 7*::<<+%/CJ$$TD$AAALc***i'I       ? ? ? ? ? ?  7 C C C C    D     3 3 ? ?T! @         D  {((**  '--//!&          D  s6I== J  J J00 J=<J=$K<< L L quietc6t|rgggddSttjj} t jtjddgitj dt|it|ddd}|j dkrD|j r+tj|j S|sat#d |j |jr1t#d |jd d d S#t j$r|st#d Yd St($r}|st#d|Yd }~d Sd }~wwxYw)uSeed bundled skills into a profile via subprocess. Uses subprocess because sync_skills() caches HERMES_HOME at module level. Returns the sync result dict, or None on failure. Profiles that opted out of bundled skills (via ``hermes profile create --no-skills`` — which writes ``.no-bundled-skills`` to the profile root) are skipped and get an empty-result dict so callers can report "opted out" instead of "failed". T)copiedupdated user_modifiedskipped_opt_outz-cziimport json; from tools.skills_sync import sync_skills; r = sync_skills(quiet=True); print(json.dumps(r)) HERMES_HOME<)envcwdrrrru%⚠ Skill seeding returned exit code z Nu!⚠ Skill seeding timed out (60s)u⚠ Skill seeding failed: )r'r__file__r$r2rrsys executablerrr:rrr{jsonloadsrstderrrr)rr/ project_rootrrs r&seed_profile_skillsrA s"+.. #    >>(/7799L ^TA B@2:?}c+.>.>??L!!dB       ! !fm&9&9&;&; !:fm113344 4 : M&:KMM N N N}""$$ :86=..00#688999t  $ 7 5 6 6 6tt  4 2q22 3 3 3ttttts&BE (A#E F0 F9FFyesc$t|}t||dkrtdt|}|st d|dt |\}}t|}t|}t|\}} } td|td||rtd||rd|d nd z|rtd ||r+td |d | pd| rtd| dg} t|z } | } | r| d| d td| D]}td||rtd|stt td|d}n(#t t"f$rtd|cYSwxYw||krtd|St%|||rt'|| r!t)|rtd|  t+j|td|n,#t.$r}td|d|Yd}~nd}~wwxYw t1}||krt3dtdn#t.$rYnwxYwtd|d|S) zDelete a profile, its wrapper script, and its gateway service. Stops the gateway if running. Disables systemd/launchd service first to prevent auto-restart. Returns the path that was removed. rUzZCannot delete the default profile (~/.hermes). To remove everything, use: hermes uninstallr' does not exist.z Profile: z Path: z Model: z (rrz Skills: zDistribution: @?zInstalled from: z;All config, API keys, memories, sessions, skills, cron jobszCommand alias (z This will permanently delete:u • u0 ⚠ Gateway is running — it will be stopped.zType 'z' to confirm: z Cancelled.z Cancelled.u ✓ Removed u⚠ Could not remove rNu#✓ Active profile reset to defaultz Profile 'z ' deleted.)rrr3rrrrrrrrrwr#r1inputr{KeyboardInterruptEOFError_cleanup_gateway_service_stop_gateway_processrrrmtreerget_active_profileset_active_profile)rxrBrrr[r gw_runningrrrritemsr has_wrapperitemconfirmrrs r&delete_profilerT9s  #4 ( (E%     :   "%((K     F DE D D DEEE)55OE8' 44J ,,K+B;+O+O(I|[       #k # #$$$ L !%!!%I%5(%5%5%5%5rJKKK) '+''(((4 @y@@<+>3@@AAA  4 2[22 3 3 3 F E $%%-L%%''K8 6|666777 ,--- otooC ABBB    :U:::;;AACCGG!8,    . ! ! !     e   ,    UK000+k***1  ' ' 1 /// 0 0 0: k""" *[**++++ ::: 8k88Q8899999999: #%% U?? y ) ) ) 7 8 8 8       ) ) ) )*** s<<%G"""HH&&J J6J11J6:2K-- K:9K:c\ddl}tjd} t |tjd<ddlm}m}|dkr|}tj dz dz dz |d z }| r{tj d d d |gd ddtj d d d|gd dd|d tj gdd ddtd|dn|dkrk|}| rMtj ddt |gd dd|d tdn)#t $r} td| Yd} ~ nd} ~ wwxYw||tjd<dSdtjvrtjd=dSdS#||tjd<ndtjvr tjd=wxYw)z9Disable and remove systemd/launchd service for a profile.rNr5)get_service_nameget_launchd_plist_pathLinuxz.configsystemduserz.service systemctl--userdisableTF )rcheckrstopr)r[r\z daemon-reloadu ✓ Service z removedDarwin launchctlunloadu✓ Launchd service removedu⚠ Service cleanup: )platformrrrr:hermes_cli.gatewayrVrWsystemrrr#rrrrr) rxr _platformold_homerVrWsvc_namesvc_file plist_pathrs r&rJrJs    z~~m,,H&*$' $4$4 =!OOOOOOOO      ( (''))Hy{{Y.:VCF[F[F[[H   9 (Ix@#'ub (FH=#'ub4000<<<#'ub7X777888     8 + +//11J  "" 6 (C OO<#'ub!!T!2224555 +++ )a))********+  (0BJ} % % % bj ( ( =)))) (  (0BJ} % % bj ( ( =) ) ) ) )s0E;F! G<! G+G=G<GG<rrrorprangesleeprProcessLookupErrorr$PermissionErrorr) r_timepid_filerawrrn_terminate_pidrp_rs r&rKrKs]*H ??  2  ""((**"%.."5"5Ltz#E3s88;L$u+ CBBBBB......sr  A KK   ;s## 8#888999   N3d + + + + +"G,    D  666677777  0--- +,,,,,, 222 0Q001111111112sHCD04D06 DD0DD0DD00 E9 E9E44E9ct} |}|sdS|S#ttt f$rYdSwxYw)ztRead the sticky active profile name. Returns ``"default"`` if no active_profile file exists or it's empty. rU)rurr{rUnicodeDecodeErrorr$)rrxs r&rMrMsk $ % %D~~%%'' 9 17 ;yys(<<AAct|}t||dkr$t|std|d|t }|jdd|dkr|dd S|d}| |dz| |d S) zlSet the sticky active profile. Writes to ``~/.hermes/active_profile``. Use ``"default"`` to clear. rUr8' does not exist. Create it with: hermes profile create Trrr/ N) rrrrrur$rr with_suffixrreplace)rxrrrPs r&rNrNs #4 ( (E%    ."7"7 = = =5: = =   $ % %DKdT222  t $$$$$v&& ut|$$$ Dr<cddlm}|}|}t}||krdSt } ||}|j}t|dkr(t |dr|dSn#t$rYnwxYwdS)a%Infer the current profile name from HERMES_HOME. Returns ``"default"`` if HERMES_HOME is not set or points to ``~/.hermes``. Returns the profile name if HERMES_HOME points into ``~/.hermes/profiles/``. Returns ``"custom"`` if HERMES_HOME is set to an unrecognized path. rrrUrcustom) rsrr2r9ro relative_topartslenrrr3)r hermes_homeresolveddefault_resolvedr relrs r&get_active_profile_namers100000!/##K""$$H/1199;;###y&((0022M ""=11  u::??~33E!H==?8O       8s.AC CCroot_dirc>dtdtdtffd }|S)zReturn an *ignore* callable for :func:`shutil.copytree`. At the root level it excludes everything in ``_DEFAULT_EXPORT_EXCLUDE_ROOT``. At all levels it excludes ``__pycache__``, sockets, and temp files. r*contentsr c&t}|D]L}|dks|dr||3|dvr||Mt|kr|d|D|S)Nr-)r.r/> package.jsonpackage-lock.jsonc3,K|]}|tv |VdSN)_DEFAULT_EXPORT_EXCLUDE_ROOT).0cs r& z:_default_export_ignore.._ignore..Os-TT!7S2S2S12S2S2S2STTr<)setr0addrrc)r*rr4r5rs r&r8z'_default_export_ignore.._ignoreDsuu # #E %%8I)J)J% E""""??? E"""  ??h & & NNTThTTT T T Tr<)r:listr)rr8s` r&_default_export_ignorer=s= 3 $ 3       Nr< output_pathc` ddl}t|}t|t|}|st d|dt |}t|dd}|dkr| 5}t |dz }tj ||t|tj |d |d} t | cdddS#1swxYwY| 5}t ||z }d d h tj || fd tj |d ||} t | cdddS#1swxYwYdS) zMExport a profile to a tar.gz archive. Returns the output file path. rNrrDz.tar.gzz.tgzrUrgztarrOrc(t|zSr)r)dr_CREDENTIAL_FILESs r&z export_profile..{s'83x=='Hr<)tempfilerrrrrrr: removesuffixTemporaryDirectoryrrr make_archive) rxrrrroutputbasetmpdirstagedrrs @r&export_profilerUsF OOO "4 ( (E%   !%((K     F DE D D DEEE +  F v;; # #I . . ; ;F C CD  ( ( * * f&\\I-F O-k::     (w JJF<<                  $ $ & & &f%(&1  HHHH    $T7FEBBF||                  s&8AD!!D%(D%AF##F'*F' member_namecp|dd}t|}t|}|r/|s|s|jrt d|d|jD}|rtd|Drt d||S)z4Return safe path parts for a profile archive member.\/zUnsafe archive member path: cg|]}|dv| S)>r.rnrparts r& z4_normalize_profile_archive_parts..s" H H Hd$i2G2GT2G2G2Gr<c3"K|] }|dkV dS)z..Nrnrs r&rz3_normalize_profile_archive_parts..s&77 777777r<)rrr is_absolutedriver3rany)rnormalized_name posix_path windows_pathrs r& _normalize_profile_archive_partsrs!))$44O//J";//L G  ! ! # #G  # # % %G   G E EEFFF H Hj. H H HE GC7777777GE EEFFF Lr<archive destinationc *ddl}||d5}|D]H}t|j}|j|}|r|ddM|std|j|j dd| |}|td|j|5t|d5}tj ||dddn #1swxYwYdddn #1swxYwY tj||jd z9#t"$rYFwxYw ddddS#1swxYwYdS) zAExtract a profile archive without allowing path escapes or links.rNr:gzTrz!Unsupported archive member type: zCannot read archive member: wbi)tarfiler getmembersrrxjoinpathisdirrisfiler3r$ extractfiler copyfileobjrrmoder$) rrrtfmemberrtarget extractedr,s r&_safe_extract_profile_archiversoNNN gv & &"mmoo  F4V[AAE)[)51F||~~  TD 999==??  E EE M  t  < < <v..I  !M !M!MNNN 3 3D.. 3#"9c222 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 u!45555    / s~CF4D>D'  D>'D+ +D>.D+ /D>2 F>E FE F E)'F) E73F6E77FF F cddl}||d5}d|D}|sd|D}dddn #1swxYwY|S)aReturn the archive's top-level directory names. Profile imports expect exactly one root directory. Inspecting the archive before extraction lets us stage the import safely instead of mutating a live profile tree first and reconciling names later. rNrch|]E}t|j}t|dks|=|dFS)rr)rrxrr)rrrs r& z1_inspect_profile_archive_roots..sP   :6;GG5zzA~~~ !H~~r<cjh|]0}|t|jd1S)r)rrrx)rrs r&rz1_inspect_profile_archive_roots..sE<<>>0==a@r<)rrr)rrrtop_dirss r&_inspect_profile_archive_rootsrsNNN gv & & "  --//      mmooH                Os?A&&A*-A* archive_pathcddl}t|}|std|t |}t |dkr|nd}|p|}|std|tdt|}t||dkrtdt|}|rtd |d |t} | d d |d 5} t| } t|| | |z } | std|| } ||kr| |z } | | t%jt)| t)|dddn #1swxYwY|S)zImport a profile from a tar.gz archive. If *name* is not given, infers it from the archive's top-level directory. Returns the imported profile directory. rNzArchive not found: rzpCannot determine profile name from archive. Specify it explicitly: hermes profile import --name z=Profile archive must contain exactly one top-level directory.rUuCannot import as 'default' — that is the built-in root profile (~/.hermes). Specify a different name: hermes profile import --name rrTrhermes_profile_import_)prefixz,Profile archive root is missing or invalid: )rrr#rrrpopr3rrrrrorrrrrenamermover:)rrxrrr archive_root inferred_namerrr r staging_rootr final_sources r&import_profilersz OOO<  G >>  A ?g ? ?@@@-g66H%(]]a%7%78<<>>>TL(LM   S    K    #= 1 1E%     V   "%((KTR%RR[RRSSS&((Mt444  $ $,D $ E E9F|| %g|<<< </ !! M|MM ! 5 '%/L   \ * * * C %%s;'7'7888999999999999999" s>BG&&G*-G*old_namenew_namenew_dircd|}d|}|dz tdz tjdz dz g}t}|D]} |}n#t $r|}YnwxYw||vs|sD|| tj | d} n#t tj f$rYwxYw| d} t| tr|| vr|| vrtd|d || |} t| tr+d | vr'd |vr|d d d n|} | | d <| || |<||jd z} | tj| dddzd| |n9#t $r, | dn#t $rYnwxYwYwxYwtd|d|dS)zGRename Honcho host blocks for a renamed profile without changing peers.zhermes.z honcho.jsonz.honchoz config.jsonrrhostsu$⚠ Honcho host block not migrated: z already exists in aiPeerrrr/F)indent ensure_asciirTru✓ Honcho host updated:  → N)r9rrrr2r$rrr=r>rJSONDecodeErrorrrzrrrrrsuffixrdumpsrr)rrrold_hostnew_host candidatesseenrrr{rblockbarerPs r&_migrate_honcho_profile_hostrs###H###H - ""]2 i-/J eeD&E&E ||~~HH   HHH  t  4<<>>    *T^^W^==>>CC-.    H   %&& (%*?*?  u   \\\VZ\\ ] ] ] h eT " " #xu'<'<03x8>>#q))!,,XD"E(O))H--ht{V344  NN4:c!%HHH4OZaN b b b KK         d ++++     H   C(CCCCDDDDM&E&Es[ A"" A10A1#(C  C%$C%/AG44 H*?HH* H# H*"H##H*)H*ct|}t|}t|t||dkrtd|dkrtdt|}t|}|st d|d|rtd|dt|rt||t|| |td|j d|j t|||t|t!|}|s"t#|td |ntd |d | t%|kr!t'|td |n#t($rYnwxYw|S) zrRename a profile: directory, wrapper script, service, active_profile. Returns the new profile directory. rUz"Cannot rename the default profile.u.Cannot rename to 'default' — it is reserved.rrDz' already exists.u ✓ Renamed ru✓ Alias updated: u⚠ Cannot create alias 'u' — u✓ Active profile updated: )rrr3rrrr#rrrJrKrrrxrrrrrMrNr)rr old_canon new_canonold_dirr collisions r&rename_profilerFs- 'x00I&x00I)$$$)$$$I=>>>IIJJJi((Gi((G >>  J HI H H HIII~~HF)FFFGGGg&&' G444g&&& NN7 : : :GL : :;;;!Iw???)$$$%i00I Hi((( /I//0000 F)FF9FFGGG   9 , , y ) ) ) <<< = = =       Ns3G GG profile_namect|}t|t|}|dkr)|st d|d|t |S)zResolve a profile name to a HERMES_HOME path string. Called early in the CLI entry point, before any hermes modules are imported, to set the HERMES_HOME environment variable. rUrr)rrrrrr:)rrrs r&resolve_profile_envrs #< 0 0E%   !%((K +"4"4"6"6 = = =5: = =   {  r<)NFFFFN)Fr)Mrr=rrerrrr; dataclassesrpathlibrrrtypingrrcompilerr r!r#rrr:r frozensetrr"rr'r;rrrror9rurwrrrrrrrrrtuplerrrrrrrrrr r.rArTrJrKrMrNrrrrrrrrrrrrnr<r&rs*  !!!!!!8888888888!!!!!!!!9:: "$s),3<)===3330DT,4,,,,f )y***  2)  i!!! 3D 3 3 3 3%$%%%%9$9999 *$****$      <(#($((((++++++ DGGGGG .      & ####### #8  %    2DU& t     4(D(T((((4D8"&'+ OOOO#Otn O  OOOOJ9tK(9999|!%!%PP P PP P  P  P#P PPPPf**T*$*8D>****Z___4_D____D-*3-*T-*d-*-*-*-*`$2t$2$2$2$2$2V C    ST2>T0))3)4))))X#$s)(4dt@DSX2<<<HSM<T<<<<F2E32E#2E2EQU2E2E2E2Ej4S4C4D4444vccr<