Jj̍ dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl mZddlmZddlmZddlmZejeZdZejd Zd Zd Zd Zd ZdefdZde e!fdZ"de e!ddfdZ#efde e$de%ddfdZ&dKdee'de(e%e%ffdZ)dLdZ*dZ+dZ,de$dee$fdZ-de$de.fdZ/efde e$de%fdZ0de$de$fd Z1dMde$d"e%de$fd#Z2dMde$d"e%de$fd$Z3e Gd%d&Z4d'e$deefd(Z5d'e$deefd)Z6d*e$de$fd+Z7ed,d-d'e$d.e%d/e%d0e.de4f d1Z8d,d2d3e%d0e.de!e$e4ffd4Z9de$fd5Z:d6d7dd8d3e%d9e$d:ee!e$e4fde$fd;Z;de!e$e$fd0e.de>fd?Z?e Gd@dAZ@d6d!d,dBd3e%dCe%d0e.de@fdDZAde.fdEZBdFZCdGZDd3e%d0e.ddfdHZEdIZFdJZGdS)Pa``hermes debug`` debug tools for Hermes Agent. Currently supports: hermes debug share Upload debug report (system info + logs) to a paste service and print a shareable URL. By default, log content is run through ``agent.redact.redact_sensitive_text`` with ``force=True`` before upload so credentials in ``~/.hermes/logs/*.log`` are not leaked into the public paste service. Pass ``--no-redact`` to disable. Pass ``--nous`` to upload instead to Nous-internal storage (AWS S3) via a signed URL minted by the Nous account service: the bundle is private (viewable only by Nous staff / allowlisted mods via a Google-login-gated viewer) and auto-deletes after 14 days, rather than going to a public paste. N) dataclass)Path)Optionalget_hermes_home)atomic_replacez[[hermes debug share: log content redacted at upload time. run with --no-redact to disable] zW(?}``. Scheduled DELETEs used to be handled by spawning a detached Python process per paste that slept for 6 hours; those accumulated forever if the user ran ``hermes debug share`` repeatedly. Deletion is now driven by the gateway's cron ticker (``gateway/run.py::_start_cron_ticker``) which calls ``_sweep_expired_pastes`` once per hour. ``hermes debug share`` also runs an opportunistic sweep on entry as a fallback for CLI-only users who never start the gateway. pastesz pending.jsonr6/home/rurouni/.hermes/hermes-agent/hermes_cli/debug.py _pending_filerHs   x '. 88rc(t}|sgS tj|d}t |t r d|DSn"#tttj f$rYnwxYwgS)Nutf-8encodingcLg|]!}t|tr d|vd|v|"Surl expire_at) isinstancedict.0es r z!_load_pending..asGa&&+0A::+:J:J:J:J:Jr) rexistsjsonloads read_textrlistOSError ValueErrorJSONDecodeError)pathdatas r _load_pendingr)Ys ??D ;;==   z$..'.::;; dD ! !    Z!5 6     IsAA00BBentriesct} |jdd|d}|t j|ddt||dS#t$rYdSwxYw)NT)parentsexist_okz .json.tmp)indentrr) rparentmkdir with_suffix write_textr dumpsrr$)r*r'tmps r _save_pendingr6js ??D  $666{++ tz'!444wGGGsD!!!!!      sA,A>> B  B urls delay_secondsc8d|D}|sdSt}d|D}tj|z}|D])}t|||d||<*d|D}t |dS)zRecord *urls* for deletion at ``now + delay_seconds``. Only paste.rs URLs are recorded (dpaste.com auto-expires). Entries are merged into any existing pending.json. c0g|]}t||Sr )_extract_paste_id)rus rrz#_record_pending..}s&===1(9!(<(<=Q===rNcFi|]}|dt|dSr)floatrs r z#_record_pending..s*QQQA%%+*?*?QQQrgcg|] \}}||d S)rr )rr<tss rrz#_record_pending..s$ F F Feaab)) F F Fr)r)timemaxgetitemsr6)r7r8 paste_rs_urlsr*by_urlrr<mergeds r_record_pendingrIws >====M ooGQQQQQF m+I 77 6::a#5#566q F Fv||~~ F F FF&rnowct}|sdS|tjn|}d}g}|D]} t|dd}n#tt f$rY:wxYw||kr||Z|dd} t|r|dz }n#t$rYnwxYw|dz|kr|||dz }|rt||t|fS) u9Synchronously DELETE any pending pastes whose ``expire_at`` has passed. Returns ``(deleted, remaining)``. Best-effort: failed deletes stay in the pending file and will be retried on the next sweep. Silent — intended to be called from every ``hermes debug`` invocation with minimal noise. )rrNrrriQ) r)rBr>rD TypeErrorr%append delete_paste Exceptionr6len)rJr*currentdeleted remainingentryrrs r_sweep_expired_pastesrWsgooG v [dikkkcGGI eii Q7788II:&    H  w     U # # # iir"" C   1      D  u w & &   U # # # # qLGG!i   S^^ $$s##AA+*A+!B77 CCcF tdS#t$rYdSwxYw)zBAttempt pending-paste cleanup without letting /debug fail offline.N)rWrQr rr!_best_effort_sweep_expired_pastesrYs;       s   un⚠️ This will upload system info + logs to a PUBLIC paste service. Cryptographic secrets (API keys, tokens, passwords) are redacted before upload, but the following personal data is NOT redacted and will be public: • Your display name and persistent platform user ID • Verbatim content of your recent messages (prompts, responses, tool output) • Local filesystem paths • Any other PII present in the logs The resulting URL is public to anyone who has the link. Pastes auto-delete after 6 hours, but may be archived by third parties in the meantime. Use --local to view the report without uploading. u⚠️ **Privacy notice:** This uploads system info + recent log tails (may contain conversation fragments) to a public paste service. Full logs are NOT included from the gateway — use `hermes debug share` from the CLI for full log uploads. Pastes auto-delete after 6 hours.rc|d}dD]0}||r|t|dcS1dS)zExtract the paste ID from a paste.rs or dpaste.com URL. Returns the ID string, or None if the URL doesn't match a known service. /)r zhttp://paste.rs/N)striprstrip startswithrR)rprefixs rr;r;sg ))++  S ! !C;%% >>& ! ! %s6{{||$ $ $ $ % 4rcFt|}|std|t|}tj|dddi}tj|d5}d|jcxkod knccd d d S#1swxYwYd S) zDelete a paste from paste.rs. Returns True on success. Only paste.rs supports unauthenticated DELETE. dpaste.com pastes expire automatically but cannot be deleted via API. z7Cannot delete: only paste.rs URLs are supported. Got: DELETE User-Agenthermes-agent/debug-share)methodheaderstimeouti,N)r;r% _PASTE_RS_URLurllibrequestRequesturlopenstatus)rpaste_idtargetreqresps rrPrPs !%%H   Kc K K    )x ) )F . x9: !  C   R  0 0(Ddk''''C''''((((((((((((((((((s4BBBc(t||dS)uRecord *urls* for deletion ``delay_seconds`` from now. Previously this spawned a detached Python subprocess per call that slept for 6 hours and then issued DELETE requests. Those subprocesses leaked — every ``hermes debug share`` invocation added ~20 MB of resident Python interpreters that never exited until the sleep completed. The replacement is stateless: we append to ``~/.hermes/pastes/pending.json`` and the gateway's cron ticker sweeps expired entries once per hour. ``hermes debug share`` also runs an opportunistic sweep as a fallback for CLI-only users. If neither runs again, paste.rs's own retention policy handles cleanup. )r8N)rI)r7r8s r_schedule_auto_deleterusD 666666rcontentc|d}tjt|dddd}tj|d5}|d}d d d n #1swxYwY| d std |d d |S) zvUpload to paste.rs. Returns the paste URL. paste.rs accepts a plain POST body and returns the URL directly. rPOSTztext/plain; charset=utf-8rcz Content-Typerbr(rdrerfrgNhttpz#Unexpected response from paste.rs: ri) encoderkrlrmrjrnreaddecoder\r^r%)rvr(rrrsrs r_upload_paste_rsrs >>' " "D . D74   !  C   R  0 02Diikk  ))//11222222222222222 >>& ! !LJs4C4yJJKKK Js":B((B,/B, expiry_daysczddtdtdtffd }|d||ddz|d t|zd d zd }tjt |d ddd}tj|d5}|d  }dddn #1swxYwY| dstd|dd|S)z\Upload to dpaste.com. Returns the paste URL. dpaste.com uses multipart form data. z----HermesDebugBoundary9f3cnamevaluer cdd|d|dS)N--z( Content-Disposition: form-data; name="z" z r )rrboundarys r_fieldz"_upload_dpaste_com.._field,s:   59      rrvsyntaxtextrrz-- rrxzmultipart/form-data; boundary=rcryrzrfrgNr{z%Unexpected response from dpaste.com: ri) strr|rkrlrm_DPASTE_COM_URLrnr}r~r\r^r%)rvrrbodyrrrsrrs @r_upload_dpaste_comr%s -H S         y'"" &6 " " # &K 0 0 1 1 2 x     fWoo   . d6GXGG4   !  C   R  0 02Diikk  ))//11222222222222222 >>& ! !NLTcTLLMMM Js;:DDDcPg} t|S#t$r"}|d|Yd}~nd}~wwxYw t||S#t$r"}|d|Yd}~nd}~wwxYwt dd|z)zUpload *content* to a paste service, trying paste.rs then dpaste.com. Returns the paste URL on success, raises on total failure. z paste.rs: Nrz dpaste.com: z)Failed to upload to any paste service: z )rrQrOr RuntimeErrorjoin)rvrerrorsexcs rupload_to_pastebinrIs F*((( *** (3(())))))))*,!'{CCCC ,,, *S**++++++++, 4v{{67J7JJ  s( ?:?A BA;;BcJeZdZUdZeeed<eed<eeed<dS) LogSnapshotz7Single-read snapshot of a log file used by debug-share.r' tail_text full_textN)__name__ __module__ __qualname____doc__rr__annotations__rr rrrrfsAAA 4.NNN}rrlog_namechddlm}||}|rtdz |z ndS)z@Where *log_name* would live if present. Doesn't check existence.r) LOG_FILESlogsN)hermes_cli.logsrrDr)rrfilenames r_primary_log_pathrosE))))))}}X&&H6> HO   & 1 1DHrct|}|dS|r|jdkr|S|j|jdz }|r|jdkr|SdS)zFind the log file for *log_name*, falling back to the .1 rotation. Returns the first non-empty candidate (primary, then .1), or None. Callers distinguish 'empty primary' from 'truly missing' via :func:`_primary_log_path`. Nrz.1)rrstatst_sizer0r)rprimaryrotateds r_resolve_log_pathrws ))Gt~~GLLNN2Q66n',2222G~~GLLNN2Q66 4rrcf|s|Sddlm}||d}td|S)aRun ``redact_sensitive_text`` with ``force=True`` over upload-bound text. Uses ``force=True`` so redaction fires regardless of the operator's ``security.redact_secrets`` setting. The local on-disk log file is not modified; only the in-memory copy headed for the public paste service is sanitized. Returns the redacted text (or the original when empty / non-string). r)redact_sensitive_textT)forcez[REDACTED_EMAIL]) agent.redactr_EMAIL_ADDRESS_REsub)rrs r_redact_log_textrsO  222222 T 2 2 2D  !3T : ::rT) max_bytesredact tail_linesrrct|}|;t|}|r|rdnd}td|dS |j}|dkrt|ddSt |d5}||kr|} d} nd} |} g} d}d}| dkr||ks ||d zkr||d zkrt| | }| |z} | | ||}| d||t|z }|| d z }t| d zd } | dkr||ks ||d zkr ||d zkd | } | dk} dddn #1swxYwY| }| rht||krUt||z }|dko||d z |d k}||d}|s d |vr|d d d }| dd}d |d| dd}|dd}| r d|dzd|}|rt%|}t%|}t|||S#t&$r }t|d|ddcYd}~Sd}~wwxYw)aMCapture a log once and derive summary/full-log views from it. The report tail and standalone log upload must come from the same file snapshot. Otherwise a rotation/truncate between reads can make the report look newer than the uploaded ``agent.log`` paste. When ``redact`` is True (the default), both ``tail_text`` and ``full_text`` are run through ``_redact_log_text`` so the snapshot returned is upload-safe. The on-disk log file is never modified. Pass ``redact=False`` to capture original log content (used by ``hermes debug share --no-redact``). Nz (file empty)z(file not found))r'rrrrbFi rMr. irrreplace)rrLT)keepends u![... truncated — showing last ~izKB ...] z(error reading: ))rrrrrropenr}minseekinsertrRcountrsplitr~ splitlinesr]rrQ)rrrrlog_pathrtailsizefraw truncated chunk_sizeposchunkstotal newline_count read_sizechunkfull_rawcut on_boundaryall_textrrrs r_capture_log_snapshotrs&!**H#H--!(UW^^-=-=U~~CUEEEE:_}}& 199HRVWWW W (D ! ! $Qy  ffhh! " &( ! Agg59#4#4 VW8W8W]benqrer]r]r #J 4 4I9$CFF3KKKFF9--EMM!U+++SZZ'E!U[[%7%77M!$Z!^U!;!;JAgg59#4#4 VW8W8W]benqrer]r]rhhv&&!G 3 $ $ $ $ $ $ $ $ $ $ $ $ $ $ $6  7X22h--)+C 'FhsQw}&=&FK~H 75H#4#4#>>%33A6::gi:88GGH///>> {||LMMTTUYZZ OOGIO>>  dcI._FakeArgsFN)rrr show_keysr rr _FakeArgsrs rr)hermes_cli.dumprsysstdoutioStringIO SystemExitgetvalue)rr old_stdoutcaptures r _capture_dumprs((((((J;==(CJ         Z      s*AA1 A!A1 A!!A11A?rirLr dump_text log_snapshotsrrctj}|st}|||t |}|d|d|d||dj|dt |d}|d|d||dj|d|d |d||d j|d|d |d||d j|d|d |d||dj|d|S)aIBuild the summary debug report: system dump + log tails. Parameters ---------- log_lines Number of recent lines to include per log file. dump_text Pre-captured dump output. If empty, ``hermes dump`` is run internally. Returns the report as a plain-text string ready for upload. N z--- agent.log (last z lines) --- rrz--- errors.log (last rz--- gateway.log (last rz--- gui.log (last rz--- desktop.log (last rr)rrrwriterrrr)rrrbufrs rcollect_debug_reportr&s$ +--C $!OO IIi6yAA IIfII=Y===>>>IImG$.///IIfy#&&LIIAlAAABBBIImH%/000IIfIIB|BBBCCCIImI&0111IIfII><>>>???IImE",---IIfIIB|BBBCCCIImI&0111IIdOOO <<>>rzhermes-debug-share/1ct}t||}t|||}|dj}|dj}|dj}|dj}|r|dz|z}|r|dz|z}|r|d z|z}|r|d z|z}|r:t|z}|r t|z}|r t|z}|r t|z}|r t|z}d |i} |r|| d <|r|| d <|r|| d<|r|| d<| S)uCollect the debug report + full logs as a label→text mapping. Returns ``{"report": ..., "agent.log": ..., "gateway.log": ..., "desktop.log": ...}`` where each value is the already-redacted (when ``redact`` is True) text that would be uploaded. Keys for logs that are absent/empty are simply omitted. This is the single source of collection + redaction shared by both destinations: the paste.rs path (:func:`build_debug_share`) and the Nous-S3 path (``--nous``). Centralising it guarantees the Nous bundle is built from the *same* force-redacted snapshots as the public paste path — redaction is the safety boundary, so the Nous path must never see raw logs. The dump header is prepended to each full log (mirroring the historical paste behaviour) so every file is self-contained, and the redaction banner is prepended when ``redact`` is True. rrrrrrz --- full agent.log --- z --- full gateway.log --- z --- full gui.log --- z --- full desktop.log --- report agent.log gateway.loggui.log desktop.log)rrrr_REDACTION_BANNER) rrrrr agent_log gateway_loggui_log desktop_logbundles rcollect_share_bundlerds,I29VLLLM !#F g&0I *4KE",G *4KK >>J Q"BB[P E::WDQ"BB[P  :"V+  6)I5I  :+k9K  2''1G  :+k9K&/F('{, +}$#y, +} Mrrc&tjtjj}t t |||d}tjtj | dS)a<Gzip-compress a :func:`collect_share_bundle` mapping into the Nous envelope. The JSON shape is what the discord-support viewer (Repo 3) parses:: {"format": "hermes-debug-share/1", "redacted": , "created": , "files": {"report": ..., "agent.log": ..., ...}} )formatredactedcreatedfilesr) datetimerJtimezoneutc isoformat_NOUS_BUNDLE_FORMATboolgzipcompressr r4r|)rrrenvelopes rbuild_nous_bundlerst##H$5$9::DDFFG%LL H =H--44W== > >>rcJeZdZUdZeed<eed<eed<eed<dZ e ed<dS) DebugShareResultzStructured outcome of a ``debug share`` upload. Returned by :func:`build_debug_share` so non-CLI callers (the dashboard web server, gateway) can render the uploaded paste URLs as real links instead of scraping printed text. r7failuresrauto_delete_secondsrLrN) rrrrrrr#rintrrr rrrrsU JJJNNNNNNFCrrrexpiryrrc tt||}|rtd|d}i}g}t |||d<dD]`}||}|s t ||||<0#t $r$} ||d| Yd} ~ Yd} ~ wwxYwtt| t|||t| S) uCollect the debug report + full logs, upload each, return the URLs. This is the shared core behind ``hermes debug share`` (CLI) and the dashboard ``POST /api/ops/debug-share`` endpoint. It performs blocking network I/O (paste uploads) — callers inside an event loop must run it in a worker thread. The summary report upload is required: on failure this raises ``RuntimeError``. Full-log uploads are best-effort; their errors are collected into ``failures`` rather than raised. rrzOhermes debug share: applied force-mode redaction to log snapshots before uploadrrReport)rrrr: N)r7rrrr) rYrloggerinforrDrQrOrur#valuesr_AUTO_DELETE_SECONDS) rrrrrr7rlabelrvrs rbuild_debug_sharer$sR"&''' "If E E EF   ]   H FDH(FCCCDNH//**U##   /,W&IIIDKK / / / OOu---- . . . . . . . . /$t{{}}--...  0    s9B B<B77B<ctt|ddrdStjs/t dtjtjd td }n#ttf$rd}YnwxYw|d vrt d dSdS) uRequire explicit consent before any debug-share upload. The privacy notice is printed by the caller. This gates the actual upload: with ``--yes`` (or ``-y``) we proceed unprompted; otherwise we ask an interactive ``[y/N]`` question. In a non-interactive context (no TTY on stdin — scripts, CI, piped input) we refuse rather than hang or upload silently, so debug data can't be exposed without a deliberate ``--yes``. Returns True to proceed with the upload, False to abort. yesFTzERROR: Non-interactive mode requires --yes to confirm upload. This prevents accidental exposure of personal data. Use --local to view the report without uploading.filerMzUpload debug report? [y/N] rL)yr&zAborted.) rgetattrrstdinisattyprintstderrexitinputr\lowerEOFErrorKeyboardInterrupt)argsanswers r_confirm_uploadr6 s GD% ' '((t 9      G      455;;==CCEE ' ( \!! ju 4s/3B##B98B9c0t|dd}t|dd}t|dd}t|dd}t|dd }|rttd t|| }t|d d D]^\}}||} | rBtd dt|tddt| _dS|rt ||| dStt t|sdStd td t|||} nX#t$rK} td| tj tdtj dYd} ~ nd} ~ wwxYwtd| jD} td| jD]\}} td|d| d| | jr+tdd| jd| jdz}td|d td!td"dS)#z:Collect debug report + full logs, upload each, print URLs.linesriexpirerlocalFnous no_redactCollecting debug report...rr))zFULL agent.logr)zFULL gateway.logr)z FULL gui.logr)zFULL desktop.logrrz<============================================================rNz Uploading...rz Upload failed: r'z? Run `hermes debug share --local` to print the report instead. rMc34K|]}t|VdSN)rR)rks r z"run_debug_share..as(22c!ff222222rz Debug report uploaded:z z4 Share these links with the Hermes team for support.)r*rYr-rrD_run_debug_share_nous_PRIVACY_NOTICEr6r$rrr.r/rCr7rErrr)r4rr local_onlyr;rrtitler#rresultr label_widthrhourss rrun_debug_sharerJ-sgs++I T8Q ' 'Fw..J 4 ' 'D{E22 2F *+++ *+++% &III fX  LE5 ::e$$D 'X''(((e ooo&&&d  diGGGG / 4  &''' . "     '#''cj9999 QRRR   22fk22222K $%%%k''))22 s 050;00003001111 G E &/(B(BEEEFFF  &$ .E =u = = =>>> 5666 ABBBBBsE,, G6AF<<Guw⚠️ --nous: This uploads your debug bundle to Nous-INTERNAL storage (AWS S3), NOT a public paste service. The following is included: • System info (OS, Python/Hermes version, provider, which API keys are configured — NOT the actual keys) • Full agent.log, gateway.log, and desktop.log (up to 512 KB each — likely contains conversation content, tool outputs, and file paths) • The bundle is viewable only by Nous staff (and allowlisted Discord mods) via a Google-login-gated viewer. • It is NOT a public paste — there is no public URL to the contents. • It auto-deletes after 14 days. cddlm}ttt |sdS|stdtdt t ||}|rtdt||}td  ||}nJ#t$r=}td |d tj tj d Yd}~nd}~wwxYw|dp|d}td|rtd|n'td|ddd|dp|d} | rtd| dntdtddS)aHHandle ``hermes debug share --nous``: upload the bundle to Nous-S3. Collects the same force-redacted bundle as the paste path, gzips it into the Nous envelope, requests a signed URL from NAS, uploads, and prints the private viewer link. On any failure falls back to a clear error that suggests ``--local``. r) share_to_nousNuU⚠️ --no-redact is set: secrets in your logs will NOT be redacted before upload. r=rzEhermes debug share --nous: applied force-mode redaction before uploadrz(Uploading to Nous diagnostics storage...z Nous upload failed: z The Nous diagnostics service may be unavailable or not yet provisioned. Run `hermes debug share --local` to print the report instead, or `hermes debug share` to upload to a public paste service. r'rMviewUrlview_urlz) Debug bundle uploaded to Nous (private):z View URL z$ (no view URL returned; upload id: id?r expiresAt expires_atu ⏱ Auto-deletes at z (14-day retention).u! ⏱ Auto-deletes after 14 days.u_ Share this private link with the Nous team — only Nous staff (via Google login) can open it.)hermes_cli.diagnostics_uploadrLr-_NOUS_PRIVACY_NOTICEr6rYrrr rrQrr.r/rD) r4rrrLrblobresrrNrRs rrCrCsG<;;;;;  4         &'''%''' !If E E EF   S    VF 3 3 3D 4555 mD!!      MS M M M         wwy!!8SWWZ%8%8H 6777L 'X''(((( JSWWT35G5GJJJKKK%%>)>)>J4 H HHHIIII 2333  *s( B44 C;>3C66C;ct|dg}|s tdtddS|D]} t|}|rtd|ntd|d;#t$r}td|Yd}~\d}~wt$r}td |d |Yd}~d}~wwxYwdS) z1Delete one or more paste URLs uploaded by /debug.r7z,Usage: hermes debug delete [ ...]z; Deletes paste.rs pastes uploaded by 'hermes debug share'.Nu ✓ Deleted: u ✗ Failed to delete: z (unexpected response)u ✗ u ✗ Could not delete r)r*r-rPr%rQ)r4r7rokrs rrun_debug_deleterYs- 4 $ $D  <=== KLLL : : :c""B N---....LLLLMMM " " " .3.. ! ! ! ! ! ! ! ! : : : 8C88388 9 9 9 9 9 9 9 9 : : :s#7A11 B>;B B>B99B>c tn#t$rYnwxYwt|dd}|dkrt|dS|dkrt |dSt dt t dt dt dt t d t d t d t d t d t dt dt t dt ddS)zRoute debug subcommands. debug_commandNsharedeletezUsage: hermes debug z Commands:z? share Upload debug report to a paste service and print URLz- delete Delete a previously uploaded pastezOptions (share):z< --lines N Number of log lines to include (default: 200)z0 --expire N Paste expiry in days (default: 7)z8 --local Print report locally instead of uploadingzD --nous Upload to Nous-internal storage (private, staff-only,zA auto-deletes in 14 days) instead of a public pastezE --no-redact Disable upload-time secret redaction (default: redact)zOptions (delete):z/ ... One or more paste URLs to delete)rWrQr*rJrYr-)r4subcmds r run_debugr_sl       T?D 1 1F  8   -...  k OPPP =>>>   !!! LMMM @AAA HIII TUUU QRRR UVVV  !""" ?@@@@@s  r?)r N)r)riT)T)Hrr rrr loggingrerrBurllib.requestrk dataclassesrpathlibrtypingrhermes_constantsrutilsr getLoggerrrrcompilerrjr_MAX_LOG_BYTESr"rr#rr)r6rrrIr>tuplerWrYrD_GATEWAY_PRIVACY_NOTICEr;rrPrurrrrrrrrrrrrrbytesrrr$r6rJrTrCrYr_r rrrnsp&  !!!!!!,,,,,,  8 $ $ ) BJ$ +9t9999"tDz"  4:  $     ;O$s)CSW(,%,%x,%%S/,%,%,%,%^    "( 3 8C=    (c(d((((*AU77S 7#7777"cc(!!!#!c!!!!H#c:  IIIIII*;3;3;;;;*$ S_S_S_S_S_ S_  S_  S_S_S_S_n'+# #{ @s*6: 22222Dk!123 2  2222v-BBB B #s(^BBBBJ??d38n?d?e????0          " 9999 9  9  9999xT@BCBCBCJ :c:4:D::::z:::*"A"A"A"A"Ar