§ oq'j¾ãó*—dZddlmZddlmZd d„Zd S) z ``hermes security`` subcommand parser. Extracted verbatim from ``hermes_cli/main.py:main()`` (god-file Phase 2). Handler injected to avoid importing ``main``. é)Ú annotations)ÚCallableÚ cmd_securityrÚreturnÚNonecóâ—| ddd¬¦«}| dd¬¦«}| dd d ¬¦«}| d d d ¬¦«| ddgd¢d¬¦«| dd d¬¦«| dd d¬¦«| dd d¬¦«| |¬¦«| |¬¦«dS)z5Attach the ``security`` subcommand to ``subparsers``.Úsecurityz?Supply-chain audit (OSV.dev) for venv, plugins, and MCP serversa On-demand vulnerability scan against OSV.dev. Covers the Hermes venv (installed PyPI dists), Python deps declared by plugins under ~/.hermes/plugins/, and pinned npx/uvx MCP servers in config.yaml. Does NOT scan globally-installed packages or editor/browser extensions.)ÚhelpÚ descriptionÚsecurity_commandz )ÚdestÚmetavarÚauditz!Run a one-shot supply-chain auditz@Query OSV.dev for known vulnerabilities in installed components.z--jsonÚ store_truez9Emit machine-readable JSON instead of human-readable text)Úactionr z --fail-onÚcritical)ÚlowÚmoderateÚhighrzFExit non-zero when any finding meets this severity (default: critical))ÚdefaultÚchoicesr z --skip-venvz$Skip scanning the Hermes Python venvz--skip-pluginsz'Skip scanning plugin requirements filesz --skip-mcpz/Skip scanning pinned MCP servers in config.yaml)ÚfuncN)Ú add_parserÚadd_subparsersÚ add_argumentÚ set_defaults)Ú subparsersrÚsecurity_parserÚsecurity_subparsersÚ audit_parsers úD/home/ubuntu/.hermes/hermes-agent/hermes_cli/subcommands/security.pyÚbuild_security_parserr" sy€ð!×+Ò+ØØ Nð Vð ,ñ ô €Oð*×8Ò8Ø Øð9ñôÐð '×1Ò1ØØ 0ØVð2ñô€Lð ×ÒØØØ Hðñôðð ×ÒØØØ7Ð7Ð7Ø Uð ñôðð ×ÒØØØ 3ðñôðð ×ÒØØØ 6ðñôðð ×ÒØØØ >ðñôðð ×Ò <ÐÑ0Ô0Ð0Ø× Ò  lÐ Ñ3Ô3Ð3Ð3Ð3óN)rrrr)Ú__doc__Ú __future__rÚtypingrr"©r#r!úr(sSðððð #Ð"Ð"Ð"Ð"Ð"àÐÐÐÐÐð24ð24ð24ð24ð24ð24r#