UAj"SrSSKJr SSKrSSKrSSKrSSKrSSKrSSKrSSK J r SSK J r \ "S5r SrSSjrSS jrSS jrSS jrSS jrSS jrSSjrSS SjjrSS!SjjrS"SjrSSjrS#SjrS$SjrS%SjrS&SjrS'SjrS'Sjrg)(aRead-only system facts and a safe subprocess helper. Everything here is strictly read-only: no service is touched, nothing is written to the server. On non-Linux dev machines functions degrade gracefully and return None / empty values instead of raising. ) annotationsN)Any) get_loggerzdiscovery.system c.[R"US5(dg[R"USS[SS9nUR S:wagUR $![R[4a n[RSX5 SnAgSnAff=f)zRun a read-only command and return stdout, or None on any failure. Never raises. Used for inspection commands only (systemctl list, ss, etc.). Destructive commands must never be passed here. rNTF)capture_outputtexttimeoutcheckzcommand failed %s: %s) shutilwhich subprocessrun _CMD_TIMEOUT returncodestdoutSubprocessErrorOSErrorlogdebug)cmdresultexcs :D:\Programs\laragon\www\wolf\agent\src\discovery\system.py run_readonlyrs <<A           !}}  & & 0 )34s,A AB4BBc[R"5[R"5[R"5S.n[SSSS9n0nUH@nSU;dM UR 5R S5upEnUR S5X$'MB SSS5 S W;aUS US 'UR S 5US 'UR S 5US'U$!,(df  NF=f![a U$f=f)zDOperating system name/version, reading /etc/os-release when present.)systemrelease pretty_namez/etc/os-releaserutf-8encoding="N PRETTY_NAMErID distro_id VERSION_IDdistro_version)platformrropenstrip partitiongetr)infohandlefieldslinekey_values ros_infor71s//###%((*D  #S7 ;vF$;$(JJL$:$:3$?MCE"'++c"2FK< F ""("7D "JJt,[!'L!9  K< ;   K s0 C& C9C>C& C#C&& C43C4c,[R"5$N)r+rrkernelr<H    r;c,[R"5$r9)r+machiner:r;r architecturer@Lr=r;c>[R"5=(d S$)Nr)os cpu_countr:r;rrCrCPs <<> Qr;c[SSSS9nUHEnURS5(dM[UR5S5nUS-s sSSS5 $ SSS5 g!,(df  g=f![[ 4a gf=f) z9Total RAM in bytes from /proc/meminfo (Linux), else None. /proc/meminfor r!r"z MemTotal:N)r, startswithintsplitr ValueError)r1r3kibs rmemory_total_bytesrMTs /3 9V??;//djjl1o.C:% : 9: : 9  Z s? A3A""A" A3A"A3" A0,A30A33BBcb0n[SSSS9n0nUHFnURS5upEn[UR5S5S-X$R 5'MH SSS5 S W;aUS US 'S U;aUS US 'U$!,(df  N,=f![ [ [4a U$f=f) z.Total/available memory in bytes (best effort).rEr r!r":rrGNMemTotaltotal MemAvailable available)r,r.rIrJr-rrK IndexError)usager1valuesr3r4r5rests r memory_usagerXasE  /3 9VF#~~c2 &)$**,q/&:T&Ayy{#:  #J/E'N V #!'!7E+  L: 9 Z ,  L s) BAB$B BBB.-B.cd[R"U5R$![a gf=fr9)r disk_usagerQr)paths rdisk_total_bytesr\ss0  &,,, s " //c[R"U5nURURURS.$![ a 0s$f=f)N)rQusedfree)r rZrQr^r_r)r[rUs rrZrZzsD!!$'ejj%**MM  s9< A  A cp[[R"55$![[4a /s$f=fr9)listrB getloadavgrAttributeErrorr:r;r load_averagerds1BMMO$$ ^ $ s  55c,[R"5$r9)socket gethostnamer:r;rhostnamerhs    r;c[SSSS9n[UR5R5S5sSSS5 $!,(df  g=f![[ [ 4a gf=f)Nz /proc/uptimer r!r"r)r,floatreadlinerJrrKrT)r1s ruptime_secondsrlsV .# 8F*0021569 8 8 Z ,s- A*A A A AAA*)A*c[R"U5nURS:H=(a2 UR=(d UR =(d UR $![a gf=f)zTrue only for RFC1918, loopback and link-local IPv4 addresses. Public addresses must never be labelled private, so we classify with the stdlib ipaddress module rather than naive prefix checks. F) ipaddress ip_addressrKversion is_private is_loopback is_link_local)addrips r_is_private_ipv4rwsX   ! !$ ' ::? T S S2CSCST sA A-,A-c,[5n[R"[R"5S[R5HnUR USS5 M [R"[R[R5nURS5 UR UR5S5 UR5 [SU55$![R a Nf=f![a N8f=f)zDBest-effort list of local *private* IPv4 addresses (RFC1918 et al.).Nrnr)z10.255.255.255rFc3H# UHn[U5(dMUv M g7fr9)rw).0rvs r private_ips..s;s&6r&:""ss" ") setrf getaddrinforgAF_INETaddgaierror SOCK_DGRAMconnect getsocknameclosersorted)ipsr0socks r private_ipsrsEC &&v'9'9';T6>>RD GGDGAJ S  }}V^^V->->? *+   "1%&  ;s; ;; ??       s%AC,$A6D,DD DDcg)zPlaceholder for v1. The control plane already sees the source IP, and discovery must stay read-only/local, so we do not call an external echo service here. TODO(prod): resolve via panel-side observation or opt-in.Nr:r:r;r public_iprs r;c[/SQ5n/nU(dU$UR5HBnUR5n[U5S:dM$UR USUSUSS.5 MD U$)z5Parse `ip -o addr` output when available (read-only).)rvz-orurnrF) interfacefamilyaddress)r splitlinesrJlenappend)output interfacesr3partss rnetwork_interfacesrsp . /F')J !!#  u:?   E!HaUZ[\U]^ _$ r;c[SS/5n/nU(dU$UR5HQnUR5n[U5S:dM$USnUR SS5SnUR XES.5 MS U$) zGListening TCP sockets via `ss -tlnH` (read-only). Empty if unavailable.ssz-tlnHrnrrOrF)localport)rrrJrrsplitr)rportsr3r2rrs r open_portsrs{ 4/ *F"$E  !!# v;! 1IE<<Q'+D LL57 8 $ Lr;)r list[str]return str | None)rzdict[str, Any])rstr)rrI)r int | None)rdict[str, int])/)r[rrr)r[rrr)rz list[float])rz float | None)rurrbool)rr)rr)rzlist[dict[str, Any]]) __doc__ __future__rrorBr+r rfrtypingrloggerrrrrr7r<r@rCrMrXr\rZrdrhrlrwrrrrr:r;rrs#  #$ 0. $  U<(  r;