)j|vdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z mZddlmZejdkZejeZdedefd Zdedefd Zd Zed hZdefd ZeZdeddfdZd!dedzdedzdefdZ defdZ!e!Z"dZ#dedefdZ$dededzfdZ%dedefdZ&de'e(ee)ffdZ*de(efdZ+dede(edefdZ,Gdd e Z-dS)"uELocal execution environment — spawn-per-call with session snapshot.N)Path)BaseEnvironment _pipe_stdin)windows_hide_flagsWindowscwdreturnctr|s|Stjd|}|s|S|d}|dpddd}|d|pt dS) uTranslate a Git Bash / MSYS-style POSIX path (``/c/Users/x``) to the native Windows form (``C:\Users\x``) so ``os.path.isdir`` and ``subprocess.Popen(..., cwd=...)`` can find it. No-ops on non-Windows hosts or for paths that aren't in MSYS form. Returns the input unchanged when no translation applies. This is idempotent — calling it on an already-Windows path returns it as-is. z^/([a-zA-Z])(/.*)?$/\:\) _IS_WINDOWSrematchgroupupperreplacechr)rmdrivetails =/home/ubuntu/.hermes/hermes-agent/tools/environments/local.py_msys_to_windows_pathrs c  '--A  GGAJJ    E GGAJJ " % %c4 0 0D ' 'doc"gg ' ''c~trt|n|}|r!tj|r|S|rtj|nd}|rKtj|r|Stj|}||krn|}|Kt jS)utReturn ``cwd`` if it exists as a directory, else the nearest existing ancestor. Falls back to ``tempfile.gettempdir()`` only if walking up the path can't find any existing directory (effectively never on a healthy filesystem, but cheap belt-and-braces). On Windows, also normalizes Git Bash / MSYS-style POSIX paths (``/c/Users/x``) to native Windows form before the isdir check so a perfectly valid ``pwd -P`` result from bash doesn't get rejected as "missing" (see ``_msys_to_windows_path``). Used by ``_run_bash`` to recover when the configured cwd is gone — most commonly because a previous tool call deleted its own working directory (issue #17558). Without this guard, ``subprocess.Popen(..., cwd=...)`` raises ``FileNotFoundError`` before bash starts, wedging every subsequent terminal call until the gateway restarts. r )rrospathisdirdirnametempfile gettempdir)rparent next_parents r_resolve_safe_cwdr(*s")4 <  $ $ $C rw}}S!! %( 0RW__S ! ! !bF  7==  Mgoof-- &       r_HERMES_FORCE_AWS_BEARER_TOKEN_BEDROCKct} ddlm}|D]b}||j|jdkr|t|jr| |jcn#t$rYnwxYw ddl m }| D]d\}}|d}|dvr| |4|dkr*|dr| |en#t$rYnwxYw|hd t|S) z=Derive the blocklist from provider, tool, and gateway config.r)PROVIDER_REGISTRYaws_sdk)OPTIONAL_ENV_VARScategory>tool messagingsettingpassword><GH_TOKENHASS_URL LLM_MODEL HASS_TOKEN XAI_API_KEY GROQ_API_KEY EMAIL_ADDRESS GITHUB_APP_ID OPENAI_ORG_ID WHATSAPP_MODECOHERE_API_KEYEMAIL_PASSWORDGOOGLE_API_KEYMODAL_TOKEN_IDOPENAI_API_KEYSIGNAL_ACCOUNTANTHROPIC_TOKENDAYTONA_API_KEYEMAIL_IMAP_HOSTEMAIL_SMTP_HOSTMISTRAL_API_KEYOPENAI_API_BASEOPENAI_BASE_URLSIGNAL_HTTP_URLDEEPSEEK_API_KEYHELICONE_API_KEYPARALLEL_API_KEYTOGETHER_API_KEYWHATSAPP_ENABLEDFIRECRAWL_API_KEYFIRECRAWL_API_URLFIREWORKS_API_KEYANTHROPIC_BASE_URLEMAIL_HOME_ADDRESSMODAL_TOKEN_SECRETOPENROUTER_API_KEYPERPLEXITY_API_KEYSLACK_HOME_CHANNELDISCORD_AUTO_THREADOPENAI_ORGANIZATIONSIGNAL_HOME_CHANNELSLACK_ALLOWED_USERSDISCORD_HOME_CHANNELSIGNAL_ALLOWED_USERSGATEWAY_ALLOWED_USERSSIGNAL_IGNORE_STORIESTELEGRAM_HOME_CHANNELWHATSAPP_ALLOWED_USERSCLAUDE_CODE_OAUTH_TOKENDISCORD_REQUIRE_MENTIONEMAIL_HOME_ADDRESS_NAMESLACK_HOME_CHANNEL_NAMESIGNAL_HOME_CHANNEL_NAMEDISCORD_HOME_CHANNEL_NAMEGITHUB_APP_INSTALLATION_IDSIGNAL_GROUP_ALLOWED_USERSTELEGRAM_HOME_CHANNEL_NAMEGITHUB_APP_PRIVATE_KEY_PATHDISCORD_FREE_RESPONSE_CHANNELSHERMES_DASHBOARD_SESSION_TOKEN)sethermes_cli.authr,valuesupdateapi_key_env_vars auth_type_AWS_SDK_CREDENTIAL_ENV_VARSbase_url_env_varadd ImportErrorhermes_cli.configr.itemsget frozenset)blockedr,pconfigr.namemetadatar/s r_build_provider_env_blocklistrdsG  555555(//11 6 6G NN73 4 4 4 I--;<<<' 6 G4555  6        777777/5577 " "ND(||J//H000 D!!!!Y&&8<< +C+C& D!!!  "       NN======| W  s%A=B BBA?D D,+D,envc\ ddlm}|}|r||d<dSdS#t$rYdSwxYw)zBBridge the context-local Hermes home override into subprocess env.r)get_hermes_home_override HERMES_HOMEN)hermes_constantsr Exception)rrvalues r_inject_context_hermes_homersk ======((**  '!&C    ' '      s  ++base_env extra_envc ddlm}n#t$rd}YnwxYwi}|piD]9\}}|t r |t vs ||r|||<:|piD]Z\}}|t r"|tt d}|||<A|t vs ||r|||<[t|ddl m }|}|r||d<|S)zz*_sanitize_subprocess_env..ErNget_subprocess_homeHOME) tools.env_passthroughrrr{ startswith!_HERMES_PROVIDER_ENV_FORCE_PREFIX_HERMES_PROVIDER_ENV_BLOCKLISTlenrrr) rr_is_passthrough sanitizedkeyrreal_keyr _profile_homes r_sanitize_subprocess_envrst*OOOOOOO ***)/*!#I~2,,..## U >>; < <   4 4 48L8L 4"IcN B--//## U >>; < < #3@AABBCH"'Ih   6 6 6//#:N:N 6"IcN ***544444''))M*) & s  c ts{tjdpftjdrdndpCtjdrdndp tjdpdStjd}|r!tj|r|Stjdd }|r!tj|d d nd }|ritj|d d tj|dd d fD]%}tj|r|cS&tjd}|r|Stjtjdddd d tjtjdddd d tj|ddd d fD]'}|r#tj|r|cS(td)z Find bash for command execution.bashz /usr/bin/bashNz /bin/bashSHELLz/bin/shHERMES_GIT_BASH_PATH LOCALAPPDATAr hermesgitbinzbash.exeusr ProgramFileszC:\Program FilesGitzProgramFiles(x86)zC:\Program Files (x86)ProgramszGit Bash not found. Hermes Agent requires Git for Windows on Windows. Install it from: https://git-scm.com/download/win Or set HERMES_GIT_BASH_PATH to your bash.exe location.) rshutilwhichr r!isfileenvironr|join RuntimeError)custom_local_appdata_hermes_portable_git candidatefounds r _find_bashrsB  L  #%7>>/#B#BL !w~~k::D  z~~g&&   Z^^2 3 3F "'..(( Z^^NB77NLZb27<<%HHH`b! GLL-uj A A GLL-ueZ H H  ! !Iw~~i(( !     ! L E    RZ^^N4GHH%QVXbcc  RZ^^$79RSSUZ\acmnn  ^ZzJJ   22      A  rza/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin existing_pathctr|SdtdD}|sd|St }g}|dD]3}|r||vr ||||4|D]}||vr||d|S)uReturn a normalised POSIX PATH with missing sane entries appended. On POSIX the caller-supplied PATH is rewritten (not merely appended to): empty entries and duplicate entries are dropped, preserving first-occurrence order, then each missing ``_SANE_PATH`` entry is appended once at the end so existing entries keep their precedence. Two intentional normalisations beyond the bare "add Homebrew dirs" fix: - **Empty entries are stripped.** A leading/trailing/double ``:`` encodes an empty PATH element, which POSIX shells interpret as the current working directory — a mild foot-gun in a default terminal environment. We drop these rather than carry them through. - **Duplicates are collapsed** (first occurrence wins), so a caller PATH that already contains repeats is not propagated verbatim. For a well-formed PATH (no empties, no duplicates) the leading segment is byte-identical to the input and ordering is preserved; only the missing sane entries are appended. On Windows this is a no-op passthrough (the separator is ``;`` and the native PATH must not be touched). cg|]}||Srr).0entrys r z5_append_missing_sane_path_entries..HsFFFeFEFFFrr)r _SANE_PATHsplitrrprxappend)r sane_entriesseenordered_entriesrs r!_append_missing_sane_path_entriesr/s,FFz'7'7'<'<FFFL &xx %%%UUD!#O$$S))&&   u%%%%**     " "5 ) ) ) 88O $ $$rrun_envcZtsdS|D]}|dkr|cSdS)aReturn the PATH env key to update without altering Windows casing. Note: this is deliberately a *second* Windows guard, distinct from the early-return in ``_append_missing_sane_path_entries``. Its job is to pick the correctly-cased key (``Path`` vs ``PATH``) so completion writes back to the key the caller already used; the helper's guard makes that helper safe to call standalone (it is, e.g. in the Windows unit tests). Both are intentional. PATHN)rr)rrs r _path_env_keyr_sF v 99;;& JJJ ! 4rc ddlm}n#t$rd}YnwxYwttj|z}i}|D]Z\}}|tr"|ttd}|||<A|tvs ||r|||<[t|}|&t| |d||<t|ddlm}|} | r| |d< ddlm} m} | D]$\} } | }|| ur|r||| <%n#t$rYnwxYw|S) zDBuild a run environment with a sane PATH and provider-var stripping.rrcdSrrrs rrz_make_run_env..vrrNr rr)_UNSET_VAR_MAP)rrrdictr rr{rrrrrrr|rrrgateway.session_contextrr)rrmergedrkvrpath_keyrrrrvar_namevarrs r _make_run_envrqs*OOOOOOO ***)/*"*s" # #FG 1 <<9 : : >??@@AH !GH   4 4 48J8J 4GAJW%%H=gkk(TV>W>WXX((( 544444''))M(' <<<<<<<<%^^-- * *MHcGGIIEF""u"$)! *       Ns AE EEc< ddlm}|pi}|dpi}|dpg}t|tsg}t |dd}d|D|fS#t $rgdfcYSwxYw)uReturn (shell_init_files, auto_source_bashrc) from config.yaml. Best-effort — returns sensible defaults on any failure so terminal execution never breaks because the config file is unreadable. r) load_configterminalshell_init_filesauto_source_bashrcTc0g|]}|t|Sr)str)rfs rrz4_read_terminal_shell_init_config..s#+++1+A+++r)rzrr| isinstancelistboolr)rcfg terminal_cfgfiles auto_bashrcs r _read_terminal_shell_init_configrs 111111kmm!rwwz**0b   !344:%&& E<++,@$GGHH +++++[88 4xsBB BBct\}}g}|r||n |rts|gdg}|D]} tjtj|}n#t$rYLwxYw|r4tj|r| ||S)uhResolve the list of files to source before the login-shell snapshot. Expands ``~`` and ``${VAR}`` references and drops anything that doesn't exist on disk, so a missing ``~/.bashrc`` never breaks the snapshot. The ``auto_source_bashrc`` path runs only when the user hasn't supplied an explicit list — once they have, Hermes trusts them. )z ~/.profilez~/.bash_profilez ~/.bashrc) rextendrr r! expandvars expanduserrrr)explicitr candidatesresolvedrawr!s r_resolve_shell_init_filesrs=>>HkJJ(#### J[J HHHIIIH"" 7%%bg&8&8&=&=>>DD    H   "BGNN4(( " OOD ! ! ! Os`` lines (guarded + silent) to a bash script. Each file is wrapped so a failing rc file doesn't abort the whole bootstrap: ``set +e`` keeps going on errors, ``2>/dev/null`` hides noisy prompts, and ``|| true`` neutralises the exit status. zset +e'z'\''z[ -r 'z ' ] && . 'z' 2>/dev/null || true )rrr)rr prelude_partsr!safepreludes r_prepend_shell_initrs JMSS||C))QdQQdQQQRRRRii &&-G Z rc eZdZdZddededeffd Zd efd Zd d dd dede dededzd e j f dZ dZ defdZdeffd ZdZxZS)LocalEnvironmentzRun commands directly on the host machine. Spawn-per-call: every execute() spawns a fresh bash process. Session snapshot preserves env vars across calls. CWD persists via file-based read after each command. r <Nrtimeoutrc|rtj|}t|ptj|||dS)N)rrr)r r!rsuper__init__getcwd init_session)selfrrr __class__s rrzLocalEnvironment.__init__sb  *'$$S))C S/BIKKcJJJ rr ctr ddlm}|dz dz }n3#t$r&t t jdz }YnwxYw|ddt| dd Sd D]k}|j |ptj |}|r.|d r|d pd cSltjd r.tjd tjtjzrd St j}|d r|d pd Sd S) uReturn a shell-safe writable temp dir for local execution. Termux does not provide /tmp by default, but exposes a POSIX TMPDIR. Prefer POSIX-style env vars when available, keep using /tmp on regular Unix systems, and only fall back to tempfile.gettempdir() when it also resolves to a POSIX path. Check the environment configured for this backend first so callers can override the temp root explicitly (for example via terminal.env or a custom TMPDIR), then fall back to the host process environment. **Windows:** hardcoded ``/tmp`` is wrong in two ways — native Python can't open the path, and the Windows default temp (``%TEMP%``) often contains spaces (``C:\Users\Some Name\AppData\Local\Temp``) that break unquoted bash interpolations. Use a dedicated cache dir under ``HERMES_HOME`` instead — single-word path, guaranteed to exist, same string resolves in both Git Bash and native Python. r)get_hermes_homecacherhermes_terminalT)parentsexist_okrr)TMPDIRTMPTEMPz/tmp)rrrrrr$r%mkdirrrrr|r rrrstripr!r"accessW_OKX_OK)rr cache_direnv_varrs r get_temp_dirzLocalEnvironment.get_temp_dirs&  5  L<<<<<<+O--7*D  L L L !4!6!677:KK  L OOD4O 8 8 8y>>))$44 40 4 4G W--H1H1HI 4Y11#66 4 '',,3333 7==  RYvrw7H%I%I 6'))    $ $ 0##C((/C /vs -AAFx)loginr stdin_datarrrc t}|r t}|rt||}|r|dd|gn|d|g}t|j}t |j} | |jkrPtrt|jn|j} | | kr!t d|j| | |_|j} trdtini} tj |fd|ddtjtj| tjn tjtrdn t"j| d | } ts0 t#j| j| _n#t,$rYnwxYw|t/| || S) Nz-lz-czaLocalEnvironment cwd %r is missing on disk; falling back to %r so terminal commands keep working. creationflagsTutf-8r) textrencodingerrorsstdoutstderrstdin preexec_fnr)rrrrrr(rrrloggerwarningr subprocessPopenPIPESTDOUTDEVNULLr setsidgetpgidpid _hermes_pgidProcessLookupErrorr)rrrrrr init_filesargsrsafe_cwd normalized _popen_cwd _popen_kwargsprocs r _run_bashzLocalEnvironment._run_bash-s||  I244J I0ZHH 16TdD*--T4*>??TV    ?$%/%;*//AS*9tt         $&Jtx$8$8!!%      ! j ) ) ) sE## E0/E0cdtdtfddtdtdtffd } trdS t jj}n$#t$rtdd}|YnwxYw t j |tj n#t$rYdSwxYw||drdS t j |tj n#t$rYdSwxYw||d  d dS#tjt"f$rYdSwxYw#tt$t"f$r+ YdS#t($rYYdSwxYwwxYw) z-Kill the entire process group (all children).pgidr cl tj|ddS#t$rYdSt$rYdSwxYw)NrTF)r killpgr0PermissionError)r:s r _group_alivez4LocalEnvironment._kill_process.._group_alivevsY  $"""t%   uu"   tt s 3 33rc~tj|z}tj|kr^ n#t$rYnwxYw|sdStjdtj|k^ n#t$rYnwxYw| S)NTg?)time monotonicpollrsleep)r:rdeadliner>r7s r_wait_for_group_exitz._wait_for_group_exits~'''1H.""X--IIKKKK D#|D)) 4 4   .""X--      #|D))) )s#A AAB## B0/B0r/Ng?g@g?)r)intrfloatr terminater r-r.r0getattrr<signalSIGTERMSIGKILLwaitr'TimeoutExpiredOSErrorr=killr)rr7rEr:r>s ` @r _kill_processzLocalEnvironment._kill_processss& s t     *s *U *t * * * * * * *$$       :dh//DD)"4>>D|$| IdFN3333)FF ('c22FIdFN3333)FF$$T3///IIcI*****"17;DD"OW=          sEA*)E*B E B  EB/.E/ B=9E<B==EC/.E/ C=9E<C==E D%%D?;E>D??EFE11 F;F?FFresultc t|jd5}|}dddn #1swxYwYtrt |}|r&t j|r||_ n#ttf$rYnwxYw| |dS)uRead CWD from temp file (local-only, no round-trip needed). Skip the assignment when the path no longer exists as a directory — ``pwd -P`` on a deleted cwd can leave a stale value in the marker file, and propagating it would re-wedge the next ``Popen``. The ``_run_bash`` recovery path will resolve a safe fallback if needed. On Windows, the value written by Git Bash's ``pwd -P`` is in MSYS form (``/c/Users/x``). Translate it to native Windows form before validating with ``os.path.isdir`` and before storing on ``self.cwd``; otherwise the isdir check rejects every valid result and ``_run_bash`` later prints a misleading "cwd is missing" warning on every command. r)rN) open _cwd_filereadstriprrr r!r"rrOFileNotFoundError_extract_cwd_from_output)rrRrcwd_paths r _update_cwdzLocalEnvironment._update_cwds dnw777 ,16688>>++ , , , , , , , , , , , , , , , ;0:: $BGMM(33 $#*+    D  %%f-----s4B'A  B ABAABB)(B)c|j}t||j|krUtrt |jn|j}|r(t j|r ||_dS||_dSdS)uSame semantics as the base class, but on Windows the value emitted by ``pwd -P`` inside Git Bash is in MSYS form (``/c/Users/x``). Normalize to native Windows form and validate the directory exists before assigning to ``self.cwd`` — otherwise ``_run_bash``'s safe-cwd recovery would warn on every subsequent command. Always defers to the base class for stripping the marker text from ``result["output"]`` so output formatting is identical. N)rrrYrrr r!r")rrRprev_cwdr4rs rrYz)LocalEnvironment._extract_cwd_from_outputs8 ((000 8x  4DDDDDLDDDL.$....8$t$$$$$$0rr)N).reloggingr platformrrrJr'r$r@pathlibrtools.environments.baserrhermes_cli._subprocess_compatrsystemr getLoggerrbr%rrr(rr}rvrrrrrr _find_shellrrrrtuplerrrrrrrrrrpsKK   @@@@@@@@<<<<<<ho9,  8 $ $(s(s(((((!3!3!!!!D%5!& )y*   XyXXXXv"?!>!@!@  T  d     td{td{VZB2C2222l C -%S-%S-%-%-%-%`4C$J$(t(((((V%S 4*@('49''''T C S  c    *DDDDDDDDDDr