+ i Rt^RIt^RIt^RIt^RIHtHt^RIHtH t ^RI H t H t H t Ht^RIHt^RIHt]!]P(!44t]P,P/]RR4]P,P/]RR 4]P,P/]RR 4]P,P/]RR 4]!]!4R , 4]P,P/]R 4]P,P/]R4]P,P/]R4]P,P/]R4]P,P/]R4]P,P/]R4]P,P/]R4]P,P/]R4]P,P/]R4RRR3Uu0uFp]P,P1V4kK upt]P,P/]R4]P,P/]R4]P,P/]R4]P,P/]R4RR]P,P/]R4]P,P/]R4]P,P/]R R!43 Uu.uF/p]P,P1V4]P4,NK1 uptR"R#ltR$R%lt]!R&R'44t]!R(R)44t]!R*R+44t ]!R,R-44t!]!R.R/44t"]!R0R144t#]!R2R344t$!R4R5]4t%0R6kR7kR8kR9kR:kR;kRkR?kR@kRAkRBkRCkRDkREkRFkRGkRHkRIkRJkRKkRLkRMkRNkROkRPkRQkRRkRSkRTkRUkRVkRWkRXkRYkRZkR[kR\kR]kR^kR_kR`kRakRbkRckRdkRekRfkRgkRhkRikt&0Rwmt'RjRkRlRmRnRoRpRqRrRs/t(Rtt)Rtt*Rxt+!RuRv]%4t,R#uupiuupi)yaL File Operations Module Provides file manipulation capabilities (read, write, patch, search) that work across all terminal backends (local, docker, singularity, ssh, modal, daytona). The key insight is that all file operations can be expressed as shell commands, so we wrap the terminal backend's execute() interface to provide a unified file API. Usage: from tools.file_operations import ShellFileOperations from tools.terminal_tool import _active_environments # Get file operations for a terminal environment file_ops = ShellFileOperations(terminal_env) # Read a file result = file_ops.read_file("/path/to/file.py") # Write a file result = file_ops.write_file("/path/to/new.py", "print('hello')") # Search for content result = file_ops.search("TODO", path=".", file_glob="*.py") N)ABCabstractmethod) dataclassfield)OptionalListDictAny)Path)get_hermes_homez.sshauthorized_keysid_rsa id_ed25519configz.envz.bashrcz.zshrcz.profilez .bash_profilez .zprofilez.netrcz.pgpassz.npmrcz.pypircz /etc/sudoersz /etc/passwdz /etc/shadowz.awsz.gnupgz.kubez/etc/sudoers.dz /etc/systemdz.dockerz.azurez.configghc:V^8dQhR\\,/#return)rstr)formats"2/home/ubuntu/hermes-agent/tools/file_operations.py __annotate__rQshsmc\P!RR4pV'gR#\PP\PP V44# \ dR#i;i)aHReturn the resolved HERMES_WRITE_SAFE_ROOT path, or None if unset. When set, all write_file/patch operations are constrained to this directory tree. Writes outside it are denied even if the target is not on the static deny list. Opt-in hardening for gateway/messaging deployments that should only touch a workspace checkout. HERMES_WRITE_SAFE_ROOTN)osgetenvpathrealpath expanduser Exception)roots r_get_safe_write_rootr$QsV 99-r 2D ww 2 24 899 s;A A.-A.c0V^8dQhR\R\/#rrrrbool)rs"rrrbs34rc\PP\PP\ V444pV\ 9dR#\ FpVPV4'gKR# \4pV'd5W8Xg/VPV\P,4'gR#R#)z.Return True if path is on the write deny list.TF) rrr r!rWRITE_DENIED_PATHSWRITE_DENIED_PREFIXES startswithr$sep)rresolvedprefix safe_roots& r_is_write_deniedr1bsww 2 23t9 =>H%%'   v & &( %&I%)<)>>c <V^8dQh/S[;R&S[;R&S[;R&S[;R&S[S[,;R&S[;R&S[;R&S[S[,;R&S[S[,;R &S[S[,;R &S[S[,;R &S[S[,;R &#) rcontent total_lines file_size truncatedhint is_binaryis_imagebase64_content mime_type dimensionserror similar_files)rintr(rr)rr9s"rrr:zs      3-SM(}# $ C=9:r)__name__ __module__ __qualname____firstlineno____doc__rGrHrIrJrKrLrMrNrOrPrQrlistrRrD__annotate_func____static_attributes____classdictcell__r9s@rr3r3zs\%GKIIDIH$(N#I $JE$T:MUU!rr3cRa]tRt^toRt^tRtRtRtV3RlRlt V3Rlt Rt Vt R#) WriteResultzResult from writing a file.FNc <V^8dQhRS[/#rr7)rr9s"rrWriteResult.__annotate__sIIIrcvVPP4UUu/uF wrVfK WbK upp#uuppir<r=r@s& rrDWriteResult.to_dicts1!%!4!4!6H!6!!6HHHs55cj<V^8dQh/S[;R&S[;R&S[S[,;R&S[S[,;R&#)r bytes_written dirs_createdrQwarning)rSr(rr)rr9s"rrrbsA  C=  c]! rrT) rUrVrWrXrYrfrgrQrhrDr[r\r]r^s@rr`r`s/%MLE!GIIrr`ca]tRt^toRtRtRt]!]R7t ]!]R7t ]!]R7t Rt Rt V3RlRltV3RltR tVtR#) PatchResultzResult from patching a file.Frr4Nc <V^8dQhRS[/#rr7)rr9s"rrPatchResult.__annotate__srcRVP/pVP'dVPVR&VP'dVPVR&VP'dVPVR&VP'dVPVR&VP 'dVP VR&VP 'dVP VR&V#successdifffiles_modified files_created files_deletedlintrQrn)rAresults& rrDPatchResult.to_dictsT\\* 999!YYF6N    '+':':F# $    &*&8&8F? #    &*&8&8F? # 999!YYF6N :::"jjF7O rc<V^8dQh/S[;R&S[;R&S[S[,;R&S[S[,;R&S[S[,;R&S[S[S[S[3,,;R&S[S[,;R&#)rrorprqrrrsrtrQ)r(rrrrr )rr9s"rrrls| N  I;  9: 9: 4S> ") C=rrT)rUrVrWrXrYrorprrZrqrrrsrtrQrDr[r\r]r^s@rrjrjsK&GD %d ;N$T:M$T:M%)DErrjc4a]tRt^toRtRtV3RltRtVtR#) SearchMatchzA single search match.gcJ<V^8dQh/S[;R&S[;R&S[;R&S[;R&#)rr line_numberrGmtime)rrSfloat)rr9s"rrSearchMatch.__annotate__s7 I  L   rrTN) rUrVrWrXrYr|r[r\r]r^s@rryrys E rryca]tRt^toRt]!]R7t]!]R7t]!] R7t ^t Rt Rt V3RlRltV3RltRtVtR#) SearchResultzResult from searching.r4FNc <V^8dQhRS[/#rr7)rr9s"rrSearchResult.__annotate__src RVP/pVP'dDVPUu.uF)pRVPRVPRVP/NK+ upVR&VP 'dVP VR&VP 'dVP VR&VP'dRVR&VP'dVPVR &V#uupi) total_countrlinerGmatchesfilescountsTrJrQ) rrrr{rGrrrJrQ)rArums& rrDSearchResult.to_dicts!1!12 <<<!%A 199M%!F9  :::"jjF7O ;;;#{{F8  >>>"&F;  :::"jjF7O !s/C c<V^8dQh/S[S[,;R&S[S[,;R&S[S[S[3,;R&S[;R&S[;R&S[S[,;R&#)rrrrrrJrQ)rryrrrSr(r)rr9s"rrrsh+ < 92  cN8    C=rrT)rUrVrWrXrYrrZrrr8rrrJrQrDr[r\r]r^s@rrrsF !&t!&1z.jsznode --check {file} 2>&1z.tsznpx tsc --noEmit {file} 2>&1z.gozgo vet {file} 2>&1z.rszrustfmt --check {file} 2>&1ica]tRtRtoRtR1V3RlRlltR2V3RlRlltV3RlR ltR1V3R lR lltV3R lR lt R3V3RlRllt V3RlRlt V3RlRlt V3RlRlt R4V3RlRlltR5tV3RlRltV3RlRltV3RlRltR6V3RlRlltV3R lR!ltV3R"lR#ltR7V3R$lR%lltV3R&lR'ltV3R(lR)ltV3R*lR+ltV3R,lR-ltV3R.lR/ltR0tVtR#)8ShellFileOperationsiAz File operations implemented via shell commands. Works with ANY terminal backend that has execute(command, cwd) method. This includes local, docker, singularity, ssh, modal, and daytona environments. Nc <V^8dQhRS[/#)rcwdr)rr9s"rr ShellFileOperations.__annotate__Is22#2rc WnT;'g8\VRR4;'g#\\VRR4RR4;'gRVn/VnR#)a Initialize file operations with a terminal environment. Args: terminal_env: Any object with execute(command, cwd) method. Returns {"output": str, "returncode": int} cwd: Working directory (defaults to env's cwd or current directory) rNr/)envgetattrr_command_cache)rA terminal_envrs&&&r__init__ShellFileOperations.__init__Isf  VV',t<VV7<4@%NVVRU 02rc 8<V^8dQhRS[RS[RS[RS[RS[/#)rcommandrtimeout stdin_datar)rrSr)rr9s"rrr]s2  S s C  )6 rc /pV'dW5R&VeWER&VPP!V3RT;'g VP/VBp\VP RR4VP R^4R7#)zExecute command via terminal backend. Args: stdin_data: If provided, piped to the process's stdin instead of embedding in the command string. Bypasses ARG_MAX. rrrrr returncode)rr)rexecuterrget)rArrrrkwargsrus&&&&& r_execShellFileOperations._exec]ss  '9   !#-< !!'IsdhhI&I::h+jjq1  rc&<V^8dQhRS[RS[/#)rcmdrr')rr9s"rrrqs((((rc WP9d@VPRV R24pVPP4R8HVPV&VPV,#)z6Check if a command exists in the environment (cached).z command -v z >/dev/null 2>&1 && echo 'yes'yes)rrrstrip)rArrus&& r _has_command ShellFileOperations._has_commandqsY )) )ZZ+cU2P QRF'-}}':':'<'ED   $""3''rc,<V^8dQhRS[RS[RS[/#)rrcontent_samplerr')rr9s"rrrxs"c3$rc \PPV4^,P4pV\9dR#V'dCV'gR#\ RVR,44pV\ \V4R4, R8#R#)z_ Check if a file is likely binary. Uses extension check (fast) + content analysis (fallback). TFc3\"TF"p\V4^ 8gKVR9gK^xK$ R#5i) z N)ord).0cs& r 8ShellFileOperations._is_likely_binary..s2 E+@a"%a&2+!"2382C!"+@s ,, ,:NiNig333333?)rrsplitextlowerBINARY_EXTENSIONSsumminlen)rArrext non_printables&&& r_is_likely_binary%ShellFileOperations._is_likely_binaryxsz ggt$Q'--/ # # ! E>%+@ EEM 3s>':D#AADH Hrc&<V^8dQhRS[RS[/#r&r')rr9s"rrrs''c'd'rc |\PPV4^,P4pV\9#)z2Check if file is an image we can return as base64.)rrrrIMAGE_EXTENSIONS)rArr s&& r _is_imageShellFileOperations._is_images0ggt$Q'--/&&&rc,<V^8dQhRS[RS[RS[/#)rrG start_linerr)rr9s"rrrs" # # ## #c #rc VPR4p.p\W2R7F@wrV\V4\8dVR\R,pVP VR RV 24KB RP V4#)z7Add line numbers to content in LINE_NUM|CONTENT format. )startNz... [truncated]6d|)split enumerater MAX_LINE_LENGTHappendjoin)rArGrlinesnumberedirs&&& r_add_line_numbers%ShellFileOperations._add_line_numbersso d# 9GA4y?*,_-0AA OOqfAdV, - : yy""rc&<V^8dQhRS[RS[/#r&r)rr9s"rrrs####rc V'gV#VPR4'EdWVPR4pVP^8XEd4VPP 4'EdVPP 4pVR8XdV#VPR4'dW1R,,#VR,pVP R4pV^8dVRVMTpV'd\ P!RV4'd}VPRV 24pVP^8XdXVPP 4'd8VPP 4pV^\V4,Rp W,#V#) z Expand shell-style paths like ~ and ~user to absolute paths. This must be done BEFORE shell escaping, since ~ doesn't expand inside single quotes. ~z echo $HOMEz~/:rNNrNz[a-zA-Z0-9._-]+zecho ~) r,rrrrfindre fullmatchr ) rArruhomerest slash_idxusername expand_result user_homesuffixs && r _expand_path ShellFileOperations._expand_paths5K ??3  ZZ -F1$)<)<)>)>}}**,3;K__T**r(?*Bx IIcN /8A~4 +4 -? J J%)JJz/B$CM$..!3 8L8L8R8R8T8T$1$8$8$>$>$@ !%a#h-&7&8!9(11 rc&<V^8dQhRS[RS[/#)rargrr)rr9s"rrrs77S7S7rc BRVPRR4,R,#)z/Escape a string for safe use in shell commands.'z'"'"')replace)rAr4s&&r_escape_shell_arg%ShellFileOperations._escape_shell_argsS[[i00366rc2<V^8dQhRS[RS[RS[RS[/#)r old_content new_contentfilenamerr)rr9s"rrrs*   3 # RU rc VPRR7pVPRR7p\P!WERV 2RV 2R7pRPV4#)z2Generate unified diff between old and new content.T)keependsza/zb/)fromfiletofiler) splitlinesdifflib unified_diffr)rAr;r<r= old_lines new_linesrps&&&& r _unified_diff!ShellFileOperations._unified_diffs]**D*9 **D*9 ## (_z?  wwt}rc2<V^8dQhRS[RS[RS[RS[/#rr)rr9s"rrrs/W W cW 3W 3W W rc  nVPV4p\V\4pRVPV4 R2pVP V4pVP ^8wdVP V4#\VPP44pV\8dVPV4'd\RRVRR7#RVPV4 R2pVP V4pVPWP4'd\RVRR7#W#,^, p R V R V R VPV4 2p VP V 4p V P ^8wd\R V P 2R 7#RVPV4 2p VP V 4p \V PP44pW8pRpV'dRV ^, RV RV RV R2 p\VPV PV4VVVVR7# \d^pELi;i \d^pLqi;i)a2 Read a file with pagination, binary detection, and line numbers. Args: path: File path (absolute or relative to cwd) offset: Line number to start from (1-indexed, default 1) limit: Maximum lines to return (default 500, max 2000) Returns: ReadResult with content, metadata, or error info wc -c < 2>/dev/nullTzImage file detected. Automatically redirected to vision_analyze tool. Use vision_analyze with this file path to inspect the image contents.rMrLrIrKz head -c 1000 zUBinary file - cannot display as text. Use appropriate tools to handle this file type.)rLrIrQzsed -n ',zp' Failed to read file: rQzwc -l < Nz Use offset=z to continue reading (showing -z of z lines))rGrHrIrJrK)r1r MAX_LINESr8rr_suggest_similar_filesrSrr ValueError MAX_FILE_SIZErr3r r")rArrrstat_cmd stat_resultrI sample_cmd sample_resultend_lineread_cmd read_resultwc_cmd wc_resultrHrJrKs&&&& rrShellFileOperations.read_filesb  &E9%d44T:;<Hjj*  A %..t4 4 K..4467I } $  >>$  #\  %T%;%;D%A$B,O  :.  ! !$(<(< = =#m >A%fXQxjD4J4J44P3QRjj*  A %&;K/dev/null | tr -d '\n'rzFailed to read image: )rMrLrIrQNidentifyzidentify -format '%wx%h' rz image/pngrz image/jpegrrz image/gifrz image/webprz image/bmprz image/x-iconzapplication/octet-stream)rMrLrIrNrOrP)r8rrSrrrTMAX_IMAGE_BYTESr3rrrrrrr) rArrVrWrIb64_cmd b64_resultrPdim_cmd dim_resultr  mime_typesrOs && r _read_imageShellFileOperations._read_image2sd44T:;<Hjj*  K..4467I ++ +#4YqMBXX  D224899STZZZ4   1 $#.z/@/@.AB     Z ( (1$2H2H2N1O|\GG,J##q('..446 ggt$Q'--/ K L \ K \ K N NN3(BC %,,!   c I s#F F0/F0c&<V^8dQhRS[RS[/#r&ra)rr9s"rrrss  3 : rc \PPV4;'gRp\PPV4pRVP V4 R2pVP V4p.pVP ^8XdVPP4'dVPP4PR4pVFp\VP44\VP44,p \V 4\V4R,8gK\VP\PPW(44K \RV 2VR,R7#) z;Suggest similar files when the requested file is not found.rzls -1 z 2>/dev/null | head -20rg?zFile not found: :NN)rQrR)rrdirnamebasenamer8rrrrrsetrr rrr3) rArdir_pathr=ls_cmd ls_resultsimilarrfcommons && rrS*ShellFileOperations._suggest_similar_filesss77??4(//C77##D)$00:;;RSJJv&    ! # (8(8(>(>(@(@$$**,2248EX^^-.QWWY?v;#h-#"55NN277<<#<=  $TF+!"+  rc,<V^8dQhRS[RS[RS[/#rr)rr9s"rrrs"4 4 s4 S4 [4 rc VPV4p\V4'd\RV R2R7#\PP V4pRpV'd9RVP V4 2pVPV4pVP^8XdRpRVP V4 2pVPWrR7pVP^8wd\R VP 2R7#R VP V4 R 2p VPV 4p \V PP44p \V VR 7# \d\TPR 44p L4i;i)uT Write content to a file, creating parent directories as needed. Pipes content through stdin to avoid OS ARG_MAX limits on large files. The content never appears in the shell command string — only the file path does. Args: path: File path to write content: Content to write Returns: WriteResult with bytes written or error Write denied: '(' is a protected system/credential file.rPFz mkdir -p Tzcat > )rzFailed to write file: rKrLzutf-8)rfrg)r1r1r`rrrpr8rrrrSrrTr encode) rArrGparentrg mkdir_cmd mkdir_result write_cmd write_resultrVrWrfs &&& rrShellFileOperations.write_files^   & D ! !tfQ>Q=R%ST Td44T:;<Hjj*  9 2 2 8 8 :;M'%   9w 78M 9s #D;;%E#"E#c 8<V^8dQhRS[RS[RS[RS[RS[/#rr)rr9s"rrrs2; ; #; 3; C; #'; 4?; rc VPV4p\V4'd\RV R2R7#RVPV4 R2pVP V4pVP ^8wd\RV 2R7#TP p^RIHpV!WrW44wrp V 'd \V R7#V ^8Xd\RV 2R7#VPW4p V P'd\R V P 2R7#VPWyV4p VPV4p\R T V.V'dVP4R 7#R R 7#) a! Replace text in a file using fuzzy matching. Args: path: File path to modify old_string: Text to find (must be unique unless replace_all=True) new_string: Replacement text replace_all: If True, replace all occurrences Returns: PatchResult with diff and lint results r|r}rPzcat rLrO)fuzzy_find_and_replacez'Could not find match for old_string in zFailed to write changes: TN)rorprqrt)r1r1rjr8rrrtools.fuzzy_matchrrrQrG _check_lintrD)rArrrrr[r\rGrr< match_countrQrrp lint_results&&&&& rr!ShellFileOperations.patch_replacesb  & D ! !tf{m%LM M&j7 rc&<V^8dQhRS[RS[/#r&)rr)rr9s"rrr%s    rc R\PPV4^,P4pV\9d\ RRV R2R7#\V,pVP 4^,pVPV4'g\ RV R2R7#VPVPV4R7pVPV^R7p\ VP^8HVPP4'd VPP4R 7#RR 7#) z Run syntax check on a file after editing. Args: path: File path to lint Returns: LintResult with status and any errors TzNo linter for z files)rrz not available)filercr)ror)rrrrLINTERSrrrrr8rrrr)rArr  linter_cmdbase_cmdrrus&& rrShellFileOperations._check_lint%sggt$Q'--/ g dnSE4PQ QS\ ##%a(  **dxj4OP PT%;%;D%ABC,$$),2MM,?,?,A,A6==&&(  GI  rc`<V^8dQhRS[RS[RS[RS[S[,RS[RS[RS[RS[R S[/ #rr)rr9s"rrrIsV">">c">">C">"3-">7:">IL">">69">BN">rc  VPV4pVPRVPV4 R24p RV P9d\ RV R2^R7#VR8XdVP WWV4#VP WWEVWx4#)a Search for content or files. Args: pattern: Regex (for content) or glob pattern (for files) path: Directory/file to search (default: cwd) target: "content" (grep) or "files" (glob) file_glob: File pattern filter for content search (e.g., "*.py") limit: Max results (default 50) offset: Skip first N results output_mode: "content", "files_only", or "count" context: Lines of context around matches Returns: SearchResult with matches or file list ztest -e z! && echo exists || echo not_found not_foundzPath not found: z3. Verify the path exists (use 'terminal' to check).rQrr)r1rr8rr _search_files_search_content) rArrrrrrrrchecks &&&&&&&&& rrShellFileOperations.searchIs(  & Xd&<& >rc 8<V^8dQhRS[RS[RS[RS[RS[/#rrrrrrrrSr)rr9s"rrrms11 1 S1 1 C1 1 Q]1 rc  VPR4'g RV9dTpMVPR4R,pVPR4'dVPWRW44#VPR4'g \ RR7#RpRVP V4 R V R VP V4 R V^, R V 2 pVP V^/dev/null | sort -rn | tail -n +z | head -n rc 2>/dev/null | head -n z | tail -n +rrrrr) r,rr_search_files_rgrr8rrrr r7isdigitr) rArrrrsearch_patternhidden_excluderru cmd_simplerrpartss &&&&& rr!ShellFileOperations._search_filesms!!%((S-?$N$]]3/3N   T " "((uM M  ((K -d,,T231^4DOTXTjTjkyTzS{|GGMPQzlR]^c]dfC,}}""$$ !7!7!= >a?O_c_u_uwE`F_GG1160@ VVWZLZJZZ BZ7FMM'')//5DJJsA&E5zQ58#3#3C#<#D#D#F#F U1X& T"6E   rc 8<V^8dQhRS[RS[RS[RS[RS[/#rr)rr9s"rrrs1   3 s C T` rc RV9dVPR4'gRV 2pMTpW4,pRVPV4 RVPV4 RV 2pVPV^