#jr ddZddlZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z ddl mZddlmZddlmZejeZdZejd Zd Zd Zd Zd Zde fdZdeefdZ deeddfdZ!efdee"de#ddfdZ$dDdee%de&e#e#ffdZ'dEdZ(dZ)dZ*de"dee"fdZ+de"de,fdZ-efdee"de#fdZ.de"de"fd Z/dFde"d"e#de"fd#Z0dFde"d"e#de"fd$Z1e Gd%d&Z2d'e"dee fd(Z3d'e"dee fd)Z4d*e"de"fd+Z5ed,d-d'e"d.e#d/e#d0e,de2f d1Z6d,d2d3e#d0e,dee"e2ffd4Z7de"fd5Z8d6d7dd8d3e#d9e"d:eee"e2fde"fd;Z9e Gd<d=Z:d6d!d,d>d3e#d?e#d0e,de:fd@Z;dAZdS)GaU``hermes debug`` debug tools for Hermes Agent. Currently supports: hermes debug share Upload debug report (system info + logs) to a paste service and print a shareable URL. By default, log content is run through ``agent.redact.redact_sensitive_text`` with ``force=True`` before upload so credentials in ``~/.hermes/logs/*.log`` are not leaked into the public paste service. Pass ``--no-redact`` to disable. N) dataclass)Path)Optionalget_hermes_home)atomic_replacez[[hermes debug share: log content redacted at upload time. run with --no-redact to disable] zW(?}``. Scheduled DELETEs used to be handled by spawning a detached Python process per paste that slept for 6 hours; those accumulated forever if the user ran ``hermes debug share`` repeatedly. Deletion is now driven by the gateway's cron ticker (``gateway/run.py::_start_cron_ticker``) which calls ``_sweep_expired_pastes`` once per hour. ``hermes debug share`` also runs an opportunistic sweep on entry as a fallback for CLI-only users who never start the gateway. pastesz pending.jsonr5/home/ubuntu/.hermes/hermes-agent/hermes_cli/debug.py _pending_filer@s   x '. 88rc(t}|sgS tj|d}t |t r d|DSn"#tttj f$rYnwxYwgS)Nutf-8encodingcLg|]!}t|tr d|vd|v|"Surl expire_at) isinstancedict.0es r z!_load_pending..YsGa&&+0A::+:J:J:J:J:Jr) rexistsjsonloads read_textrlistOSError ValueErrorJSONDecodeError)pathdatas r _load_pendingr)Qs ??D ;;==   z$..'.::;; dD ! !    Z!5 6     IsAA00BBentriesct} |jdd|d}|t j|ddt||dS#t$rYdSwxYw)NT)parentsexist_okz .json.tmp)indentrr) rparentmkdir with_suffix write_textr dumpsrr$)r*r'tmps r _save_pendingr6bs ??D  $666{++ tz'!444wGGGsD!!!!!      sA,A>> B  B urls delay_secondsc8d|D}|sdSt}d|D}tj|z}|D])}t|||d||<*d|D}t |dS)zRecord *urls* for deletion at ``now + delay_seconds``. Only paste.rs URLs are recorded (dpaste.com auto-expires). Entries are merged into any existing pending.json. c0g|]}t||Sr )_extract_paste_id)rus rrz#_record_pending..us&===1(9!(<(<=Q===rNcFi|]}|dt|dSr)floatrs r z#_record_pending..{s*QQQA%%+*?*?QQQrgcg|] \}}||d S)rr )rr<tss rrz#_record_pending..s$ F F Feaab)) F F Fr)r)timemaxgetitemsr6)r7r8 paste_rs_urlsr*by_urlrr<mergeds r_record_pendingrIos >====M ooGQQQQQF m+I 77 6::a#5#566q F Fv||~~ F F FF&rnowct}|sdS|tjn|}d}g}|D]} t|dd}n#tt f$rY:wxYw||kr||Z|dd} t|r|dz }n#t$rYnwxYw|dz|kr|||dz }|rt||t|fS) u9Synchronously DELETE any pending pastes whose ``expire_at`` has passed. Returns ``(deleted, remaining)``. Best-effort: failed deletes stay in the pending file and will be retried on the next sweep. Silent — intended to be called from every ``hermes debug`` invocation with minimal noise. )rrNrrriQ) r)rBr>rD TypeErrorr%append delete_paste Exceptionr6len)rJr*currentdeleted remainingentryrrs r_sweep_expired_pastesrWsgooG v [dikkkcGGI eii Q7788II:&    H  w     U # # # iir"" C   1      D  u w & &   U # # # # qLGG!i   S^^ $$s##AA+*A+!B77 CCcF tdS#t$rYdSwxYw)zBAttempt pending-paste cleanup without letting /debug fail offline.N)rWrQr rr!_best_effort_sweep_expired_pastesrYs;       s   u⚠️ This will upload the following to a public paste service: • System info (OS, Python version, Hermes version, provider, which API keys are configured — NOT the actual keys) • Recent log lines (agent.log, errors.log, gateway.log, desktop.log — may contain conversation fragments and file paths) • Full agent.log, gateway.log, and desktop.log (up to 512 KB each — likely contains conversation content, tool outputs, and file paths) Pastes auto-delete after 6 hours. u⚠️ **Privacy notice:** This uploads system info + recent log tails (may contain conversation fragments) to a public paste service. Full logs are NOT included from the gateway — use `hermes debug share` from the CLI for full log uploads. Pastes auto-delete after 6 hours.rc|d}dD]0}||r|t|dcS1dS)zExtract the paste ID from a paste.rs or dpaste.com URL. Returns the ID string, or None if the URL doesn't match a known service. /)r zhttp://paste.rs/N)striprstrip startswithrR)rprefixs rr;r;sg ))++  S ! !C;%% >>& ! ! %s6{{||$ $ $ $ % 4rcFt|}|std|t|}tj|dddi}tj|d5}d|jcxkod knccd d d S#1swxYwYd S) zDelete a paste from paste.rs. Returns True on success. Only paste.rs supports unauthenticated DELETE. dpaste.com pastes expire automatically but cannot be deleted via API. z7Cannot delete: only paste.rs URLs are supported. Got: DELETE User-Agenthermes-agent/debug-share)methodheaderstimeouti,N)r;r% _PASTE_RS_URLurllibrequestRequesturlopenstatus)rpaste_idtargetreqresps rrPrPs !%%H   Kc K K    )x ) )F . x9: !  C   R  0 0(Ddk''''C''''((((((((((((((((((s4BBBc(t||dS)uRecord *urls* for deletion ``delay_seconds`` from now. Previously this spawned a detached Python subprocess per call that slept for 6 hours and then issued DELETE requests. Those subprocesses leaked — every ``hermes debug share`` invocation added ~20 MB of resident Python interpreters that never exited until the sleep completed. The replacement is stateless: we append to ``~/.hermes/pastes/pending.json`` and the gateway's cron ticker sweeps expired entries once per hour. ``hermes debug share`` also runs an opportunistic sweep as a fallback for CLI-only users. If neither runs again, paste.rs's own retention policy handles cleanup. )r8N)rI)r7r8s r_schedule_auto_deleterusD 666666rcontentc|d}tjt|dddd}tj|d5}|d}d d d n #1swxYwY| d std |d d |S) zvUpload to paste.rs. Returns the paste URL. paste.rs accepts a plain POST body and returns the URL directly. rPOSTztext/plain; charset=utf-8rcz Content-Typerbr(rdrerfrgNhttpz#Unexpected response from paste.rs: ri) encoderkrlrmrjrnreaddecoder\r^r%)rvr(rrrsrs r_upload_paste_rsrs >>' " "D . D74   !  C   R  0 02Diikk  ))//11222222222222222 >>& ! !LJs4C4yJJKKK Js":B((B,/B, expiry_daysczddtdtdtffd }|d||ddz|d t|zd d zd }tjt |d ddd}tj|d5}|d  }dddn #1swxYwY| dstd|dd|S)z\Upload to dpaste.com. Returns the paste URL. dpaste.com uses multipart form data. z----HermesDebugBoundary9f3cnamevaluer cdd|d|dS)N--z( Content-Disposition: form-data; name="z" z r )rrboundarys r_fieldz"_upload_dpaste_com.._field s:   59      rrvsyntaxtextrrz-- rrxzmultipart/form-data; boundary=rcryrzrfrgNr{z%Unexpected response from dpaste.com: ri) strr|rkrlrm_DPASTE_COM_URLrnr}r~r\r^r%)rvrrbodyrrrsrrs @r_upload_dpaste_comrs -H S         y'"" &6 " " # &K 0 0 1 1 2 x     fWoo   . d6GXGG4   !  C   R  0 02Diikk  ))//11222222222222222 >>& ! !NLTcTLLMMM Js;:DDDcPg} t|S#t$r"}|d|Yd}~nd}~wwxYw t||S#t$r"}|d|Yd}~nd}~wwxYwt dd|z)zUpload *content* to a paste service, trying paste.rs then dpaste.com. Returns the paste URL on success, raises on total failure. z paste.rs: Nrz dpaste.com: z)Failed to upload to any paste service: z )rrQrOr RuntimeErrorjoin)rvrerrorsexcs rupload_to_pastebinr=s F*((( *** (3(())))))))*,!'{CCCC ,,, *S**++++++++, 4v{{67J7JJ  s( ?:?A BA;;BcJeZdZUdZeeed<eed<eeed<dS) LogSnapshotz7Single-read snapshot of a log file used by debug-share.r' tail_text full_textN)__name__ __module__ __qualname____doc__rr__annotations__rr rrrrZsAAA 4.NNN}rrlog_namechddlm}||}|rtdz |z ndS)z@Where *log_name* would live if present. Doesn't check existence.r) LOG_FILESlogsN)hermes_cli.logsrrDr)rrfilenames r_primary_log_pathrcsE))))))}}X&&H6> HO   & 1 1DHrct|}|dS|r|jdkr|S|j|jdz }|r|jdkr|SdS)zFind the log file for *log_name*, falling back to the .1 rotation. Returns the first non-empty candidate (primary, then .1), or None. Callers distinguish 'empty primary' from 'truly missing' via :func:`_primary_log_path`. Nrz.1)rrstatst_sizer0r)rprimaryrotateds r_resolve_log_pathrks ))Gt~~GLLNN2Q66n',2222G~~GLLNN2Q66 4rrcf|s|Sddlm}||d}td|S)aRun ``redact_sensitive_text`` with ``force=True`` over upload-bound text. Uses ``force=True`` so redaction fires regardless of the operator's ``security.redact_secrets`` setting. The local on-disk log file is not modified; only the in-memory copy headed for the public paste service is sanitized. Returns the redacted text (or the original when empty / non-string). r)redact_sensitive_textT)forcez[REDACTED_EMAIL]) agent.redactr_EMAIL_ADDRESS_REsub)rrs r_redact_log_textrsO  222222 T 2 2 2D  !3T : ::rT) max_bytesredact tail_linesrrct|}|;t|}|r|rdnd}td|dS |j}|dkrt|ddSt |d5}||kr|} d} nd} |} g} d}d}| dkr||ks ||d zkr||d zkrt| | }| |z} | | ||}| d||t|z }|| d z }t| d zd } | dkr||ks ||d zkr ||d zkd | } | dk} dddn #1swxYwY| }| rht||krUt||z }|dko||d z |d k}||d}|s d |vr|d d d }| dd}d |d| dd}|dd}| r d|dzd|}|rt%|}t%|}t|||S#t&$r }t|d|ddcYd}~Sd}~wwxYw)aMCapture a log once and derive summary/full-log views from it. The report tail and standalone log upload must come from the same file snapshot. Otherwise a rotation/truncate between reads can make the report look newer than the uploaded ``agent.log`` paste. When ``redact`` is True (the default), both ``tail_text`` and ``full_text`` are run through ``_redact_log_text`` so the snapshot returned is upload-safe. The on-disk log file is never modified. Pass ``redact=False`` to capture original log content (used by ``hermes debug share --no-redact``). Nz (file empty)z(file not found))r'rrrrbFi rMr. irrreplace)rrLT)keepends u![... truncated — showing last ~izKB ...] z(error reading: ))rrrrrropenr}minseekinsertrRcountrsplitr~ splitlinesr]rrQ)rrrrlog_pathrtailsizefraw truncated chunk_sizeposchunkstotal newline_count read_sizechunkfull_rawcut on_boundaryall_textrrrs r_capture_log_snapshotrs&!**H#H--!(UW^^-=-=U~~CUEEEE:_}}& 199HRVWWW W (D ! ! $Qy  ffhh! " &( ! Agg59#4#4 VW8W8W]benqrer]r]r #J 4 4I9$CFF3KKKFF9--EMM!U+++SZZ'E!U[[%7%77M!$Z!^U!;!;JAgg59#4#4 VW8W8W]benqrer]r]rhhv&&!G 3 $ $ $ $ $ $ $ $ $ $ $ $ $ $ $6  7X22h--)+C 'FhsQw}&=&FK~H 75H#4#4#>>%33A6::gi:88GGH///>> {||LMMTTUYZZ OOGIO>>  dcI._FakeArgsFN)rrr show_keysr rr _FakeArgsrs rr)hermes_cli.dumprsysstdoutioStringIO SystemExitgetvalue)rr old_stdoutcaptures r _capture_dumprs((((((J;==(CJ         Z      s*AA1 A!A1 A!!A11A?rirLr dump_text log_snapshotsrrcvtj}|st}|||t |}|d|d|d||dj|dt |d}|d|d||dj|d|d |d||d j|d|d |d||d j|d |S)aIBuild the summary debug report: system dump + log tails. Parameters ---------- log_lines Number of recent lines to include per log file. dump_text Pre-captured dump output. If empty, ``hermes dump`` is run internally. Returns the report as a plain-text string ready for upload. N z--- agent.log (last z lines) --- rrz--- errors.log (last rz--- gateway.log (last rz--- desktop.log (last rr)rrrwriterrrr)rrrbufrs rcollect_debug_reportrs$ +--C $!OO IIi6yAA IIfII=Y===>>>IImG$.///IIfy#&&LIIAlAAABBBIImH%/000IIfIIB|BBBCCCIImI&0111IIfIIB|BBBCCCIImI&0111IIdOOO <<>>rcJeZdZUdZeed<eed<eed<eed<dZ e ed<dS) DebugShareResultzStructured outcome of a ``debug share`` upload. Returned by :func:`build_debug_share` so non-CLI callers (the dashboard web server, gateway) can render the uploaded paste URLs as real links instead of scraping printed text. r7failuresredactedauto_delete_secondsrLreportN) rrrrrrr#boolintrrr rrrrLsU JJJNNNNNNFCrrrexpiryrrctt}t||}|rtdt |||}|dj}|dj}|dj}|r|dz|z}|r|dz|z}|r|d z|z}|r.t|z}|r t|z}|r t|z}|r t|z}i} g} t|| | d <d |fd |fd|ffD]N\} } | s t| | | | <#t$r$} | | d| Yd} ~ Gd} ~ wwxYwtt| t| | |t|S)uCollect the debug report + full logs, upload each, return the URLs. This is the shared core behind ``hermes debug share`` (CLI) and the dashboard ``POST /api/ops/debug-share`` endpoint. It performs blocking network I/O (paste uploads) — callers inside an event loop must run it in a worker thread. The summary report upload is required: on failure this raises ``RuntimeError``. Full-log uploads are best-effort; their errors are collected into ``failures`` rather than raised. rzOhermes debug share: applied force-mode redaction to log snapshots before uploadrrrr --- full agent.log ---  --- full gateway.log ---  --- full desktop.log --- rReportz agent.logz gateway.logz desktop.log: N)r7rrrr)rYrrloggerinforr_REDACTION_BANNERrrQrOrur#valuesr_AUTO_DELETE_SECONDS)rrrrrr agent_log gateway_log desktop_logr7rlabelrvrs rbuild_debug_sharer\s<"&''' I29VLLLM   ]   "#F g&0I *4K *4KK >>J Q"BB[P Q"BB[P :"V+  6)I5I  :+k9K  :+k9KDH(FCCCDN i  $  $ / /w    /,W&IIIDKK / / / OOu---- . . . . . . . . /$t{{}}--...  0    s=D ED;;Ect|dd}t|dd}t|dd}t|dd }|r)ttdt}t || }t ||| }|d j}|d j} |d j} |r|dz|z}| r|dz| z} | r|dz| z} |r.t|z}|r t|z}| r t| z} | r t| z} t|d|fd| fd| ffD]I\} } | rBtddt| tddt| JdStttdtd t|||} nX#t$rK}td|tj tdtj dYd}~nd}~wwxYwtd| jD}td| jD]\}}td |d!|d || jr+td"d#| jd$| jd%z}td&|d'td(td)dS)*z:Collect debug report + full logs, upload each, print URLs.linesriexpirerlocalF no_redactzCollecting debug report...rrrrrrrrzFULL agent.logzFULL gateway.logzFULL desktop.logrz<============================================================rNz Uploading...rz Upload failed: )filez? Run `hermes debug share --local` to print the report instead. rMc34K|]}t|VdSN)rR)rks r z"run_debug_share..s(22c!ff222222rz Debug report uploaded:z z4 Share these links with the Hermes team for support.)getattrrYprintrrrrr _PRIVACY_NOTICErrrstderrexitrCr7rErrr)argsrr local_onlyrrrrr r rtitlerresultr label_widthrrhourss rrun_debug_sharer'sgs++I T8Q ' 'Fw..J{E22 2F( *+++ *+++!OO 6yPPP %'    "'*4 #I.8 #I.8  O!$BBYNI  U#&FFTK  U#&FFTK  >&/F :- 9  >/+=  >/+=  f y )  -  -  KE4  'X''(((e ooo&&&d  / &''' . "     '#''cj9999 QRRR   22fk22222K %&&&k''))22 s 050;00003001111 G E &/(B(BEEEFFF  &$ .E =u = = =>>> 6777 BCCCCCs%F88 H AHH ct|dg}|s tdtddS|D]} t|}|rtd|ntd|d;#t$r}td|Yd}~\d}~wt$r}td |d |Yd}~d}~wwxYwdS) z1Delete one or more paste URLs uploaded by /debug.r7z,Usage: hermes debug delete [ ...]z; Deletes paste.rs pastes uploaded by 'hermes debug share'.Nu ✓ Deleted: u ✗ Failed to delete: z (unexpected response)u ✗ u ✗ Could not delete r)rrrPr%rQ)r!r7rokrs rrun_debug_deleter*s- 4 $ $D  <=== KLLL : : :c""B N---....LLLLMMM " " " .3.. ! ! ! ! ! ! ! ! : : : 8C88388 9 9 9 9 9 9 9 9 : : :s#7A11 B>;B B>B99B>cb tn#t$rYnwxYwt|dd}|dkrt|dS|dkrt |dSt dt t dt dt dt t d t d t d t d t d t t dt ddS)zRoute debug subcommands. debug_commandNsharedeletezUsage: hermes debug z Commands:z? share Upload debug report to a paste service and print URLz- delete Delete a previously uploaded pastezOptions (share):z< --lines N Number of log lines to include (default: 200)z0 --expire N Paste expiry in days (default: 7)z8 --local Print report locally instead of uploadingzE --no-redact Disable upload-time secret redaction (default: redact)zOptions (delete):z/ ... One or more paste URLs to delete)rWrQrr'r*r)r!subcmds r run_debugr0sN       T?D 1 1F  8   -...  k OPPP =>>>   !!! LMMM @AAA HIII UVVV  !""" ?@@@@@s  r)r N)r)?rrr loggingrerrBurllib.requestrk dataclassesrpathlibrtypingrhermes_constantsrutilsr getLoggerrrr compilerrjr_MAX_LOG_BYTESr rr#rr)r6rrrIr>tuplerWrYr_GATEWAY_PRIVACY_NOTICEr;rrPrurrrrrrrrrrrrrr'r*r0r rrr>s    !!!!!!,,,,,,  8 $ $ ) BJ$ +9t9999"tDz"  4:  $     ;O$s)CSW(,%,%x,%%S/,%,%,%,%^     ( 3 8C=    (c(d((((*AU77S 7#7777"cc(!!!#!c!!!!H#c:  IIIIII*;3;3;;;;*$ S_S_S_S_S_ S_  S_  S_S_S_S_n'+# #{ :s*6: .....Dk!123 .  ....j          " WWWW W  W  WWWWtODODODd:::* A A A A Ar