+ KiDRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt]P!4R8Ht ^RI H t ^RI Ht^RIHtRtRtRR lt]!4tRR R lltR R lt]tRtRRltRtRRltRRlt!RR]] 4tR#)zHLocal execution environment with interrupt support and non-blocking I/O.NWindows)BaseEnvironment)PersistentShellMixin)is_interrupted__HERMES_FENCE_a9f7b3___HERMES_FORCE_c$V^8dQhR\/#return) frozenset)formats"5/home/ubuntu/hermes-agent/tools/environments/local.py __annotate__r s``y`cL\4p^RIHpVP4FMpVP VP 4VP 'gK2VPVP 4KO ^RI H pVP4FcwrEVPR4pVRA9dVPV4K0VR8XgK9VPR4'gKRVPV4Ke VP 0RkRkRkR kR kR kR kR kRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkR kR!kR"kR#kR$kR%kR&kR'kR(kR)kR*kR+kR,kR-kR.kR/kR0kR1kR2kR3kR4kR5kR6kR7kR8kR9kR:kR;kRkR?kR@k4\V4# \dELi;i \dLi;i)BaHDerive the blocklist from provider, tool, and gateway config. Automatically picks up api_key_env_vars and base_url_env_var from every registered provider, plus tool/messaging env vars from the optional config registry, so new Hermes-managed secrets are blocked in subprocesses without having to maintain multiple static lists. )PROVIDER_REGISTRY)OPTIONAL_ENV_VARScategorysettingpasswordOPENAI_BASE_URLOPENAI_API_KEYOPENAI_API_BASE OPENAI_ORG_IDOPENAI_ORGANIZATIONOPENROUTER_API_KEYANTHROPIC_BASE_URLANTHROPIC_TOKENCLAUDE_CODE_OAUTH_TOKEN LLM_MODELGOOGLE_API_KEYDEEPSEEK_API_KEYMISTRAL_API_KEY GROQ_API_KEYTOGETHER_API_KEYPERPLEXITY_API_KEYCOHERE_API_KEYFIREWORKS_API_KEY XAI_API_KEYHELICONE_API_KEYPARALLEL_API_KEYFIRECRAWL_API_KEYFIRECRAWL_API_URLTELEGRAM_HOME_CHANNELTELEGRAM_HOME_CHANNEL_NAMEDISCORD_HOME_CHANNELDISCORD_HOME_CHANNEL_NAMEDISCORD_REQUIRE_MENTIONDISCORD_FREE_RESPONSE_CHANNELSDISCORD_AUTO_THREADSLACK_HOME_CHANNELSLACK_HOME_CHANNEL_NAMESLACK_ALLOWED_USERSWHATSAPP_ENABLED WHATSAPP_MODEWHATSAPP_ALLOWED_USERSSIGNAL_HTTP_URLSIGNAL_ACCOUNTSIGNAL_ALLOWED_USERSSIGNAL_GROUP_ALLOWED_USERSSIGNAL_HOME_CHANNELSIGNAL_HOME_CHANNEL_NAMESIGNAL_IGNORE_STORIES HASS_TOKENHASS_URL EMAIL_ADDRESSEMAIL_PASSWORDEMAIL_IMAP_HOSTEMAIL_SMTP_HOSTEMAIL_HOME_ADDRESSEMAIL_HOME_ADDRESS_NAMEGATEWAY_ALLOWED_USERSGH_TOKEN GITHUB_APP_IDGITHUB_APP_PRIVATE_KEY_PATHGITHUB_APP_INSTALLATION_IDMODAL_TOKEN_IDMODAL_TOKEN_SECRETDAYTONA_API_KEY>tool messaging)sethermes_cli.authrvaluesupdateapi_key_env_varsbase_url_env_varadd ImportErrorhermes_cli.configritemsgetr )blockedrpconfigrnamemetadatars r_build_provider_env_blocklistrc sG 5(//1G NN733 4''' G4452  7/557ND||J/H00 D!Y&8<< +C+C D! 8 NN@@@ @  @  @  @ @ @ "@ @ @ @ @ @ !@" #@$ %@& '@( )@* +@, -@. /@0 1@4 5@6 %7@8 9@: $;@< "=@> )?@@ A@B C@D "E@F G@H I@J K@L !M@N O@P Q@R S@T %U@V W@X #Y@Z [@\ ]@^ _@` a@b c@d e@f g@h i@j "k@l m@p q@r s@t &u@v %w@z {@| }@~ @@B W a        s7AFF4A FFF FF F#"F#cXV^8dQhR\R,R\R,R\/#)r base_envN extra_envr dict)r s"rrrs*td{td{VZrc^RIHp/pT;'g/P4FAwrEVP \ 4'dK"V\ 9gV!V4'gK=WSV&KC T;'g/P4FWwrEVP \ 4'dV\\ 4RpWSV&K8V\ 9gV!V4'gKSWSV&KY V# \dRpLi;i)a+Filter Hermes-managed secrets from a subprocess environment. `_HERMES_FORCE_` entries in ``extra_env`` opt a blocked variable back in intentionally for callers that truly need it. Vars registered via :mod:`tools.env_passthrough` (skill-declared or user-configured) also bypass the blocklist. is_env_passthroughcR#F_s&r*_sanitize_subprocess_env..ErN)tools.env_passthroughrk Exceptionr] startswith!_HERMES_PROVIDER_ENV_FORCE_PREFIX_HERMES_PROVIDER_ENV_BLOCKLISTlen)rerf_is_passthrough sanitizedkeyvaluereal_keys&& r_sanitize_subprocess_envrs*O!#I~~2,,.  >>; < <  4 48L8L"cN / !B--/  >>; < <3@ABCH"'h  6 6/#:N:N"cN 0 % *)*sC C10C1c$V^8dQhR\/#r str)r s"rrrs((C(rc R\'g\P!R4;'g\PP R4'dRMR;'g[\PP R4'dRMR;'g*\P PR4;'gR#\P PR4pV'd(\PP V4'dV#\P!R4pV'dV#\PP\P PRR 4R R R 4\PP\P PR R4R R R 4\PP\P PRR4RR R R 43F6pV'gK \PP V4'gK4Vu# \R4h)uFind bash for command execution. The fence wrapper uses bash syntax (semicolons, $?, printf), so we must use bash — not the user's $SHELL which could be fish/zsh/etc. On Windows: uses Git Bash (bundled with Git for Windows). bashz /usr/bin/bashNz /bin/bashSHELLz/bin/shHERMES_GIT_BASH_PATH ProgramFileszC:\Program FilesGitbinzbash.exezProgramFiles(x86)zC:\Program Files (x86) LOCALAPPDATAProgramszGit Bash not found. Hermes Agent requires Git for Windows on Windows. Install it from: https://git-scm.com/download/win Or set HERMES_GIT_BASH_PATH to your bash.exe location.) _IS_WINDOWSshutilwhichospathisfileenvironr^join RuntimeError)customfound candidates r _find_bashrs ; LL   #%77>>/#B#B  !ww~~k::   zz~~g&    ZZ^^2 3F "''..((  LL E    RZZ^^N4GH%QVXbc  RZZ^^$79RSUZ\acmn  RZZ^^NB7UES]^ 9 22    A rc0V^8dQhR\R\/#)r outputr r)r s"rrrsssrcRRlpVPR4pV'd)V!V^,4'dVP^4K0\V4^, pV^8d.W#,'dV!W#,4'd V^,pK4V^8dR#VRV^,pRPV4pVP R4'd)V'd!VP R4'g VR, pV#)zStrip shell startup/exit warnings that leak when using -i without a TTY. Removes lines matching known noise patterns from both the beginning and end of the output. Lines in the middle are left untouched. c0V^8dQhR\R\/#)r liner )rbool)r s"rr(_clean_shell_noise..__annotate__sGGGGrca\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)c3,<"TF qS9xK R#5iNrn).0noisers& r 8_clean_shell_noise.._is_noise..sF.EUD=.EsTF)any_SHELL_NOISE_SUBSTRINGS)rsfr _is_noise%_clean_shell_noise.._is_noises.sF.EFssFsFsF.EFFFr rN)splitpopryrendswith)rrlinesendcleanedresults& r_clean_shell_noisersG LL E IeAh'' !  e*q.C (EJJ)EJ*?*? q QwIcAgG YYw Ft0E0E$ Mrza/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binc0V^8dQhR\R\/#)r envr rg)r s"rrrstrc^RIHp\\P V,4p/pVP 4FWwrEVP\4'dV\\4RpWSV&K8V\9gV!V4'gKSWSV&KY VPRR4pRVPR49dV'd V R\ 2M\VR&V# \dRpLi;i)zDBuild a run environment with a sane PATH and provider-var stripping.rjcR#rmrnros&rrq_make_run_env..rsrNPATHrz/usr/bin:)rtrkrurhrrr]rvrwryrxr^r _SANE_PATH)rrzmergedrun_envkvr~ existing_paths& r _make_run_envrs*O"**s" #FG  <<9 : :>?@AH !H  4 48J8JAJ  KK+M,,S11=J]O1ZL9PZ N *)*sCC,+C,c0V^8dQhR\R\/#)r rawr r)r s"rrr%srcVP\4pVR8Xd \V4#V\\4,pVP \4pW18:d\WR4#WV#)abExtract real command output from between fence markers. The execute() method wraps each command with printf(FENCE) markers. This function finds the first and last fence and returns only the content between them, which is the actual command output free of any shell init/exit noise. Falls back to pattern-based _clean_shell_noise if fences are missing. N)find _OUTPUT_FENCErryrfind)rfirststartlasts& r_extract_fenced_outputr%s_ HH] #E {!#&& C & &E 99] #D }!#f+.. T?rcaa]tRtRtoRtRV3RlV3Rlllt]V3RlRl4tV3RlR ltV3R lR lt R t R t RRRRR/V3RlRlllt Rt VtV;t#)LocalEnvironmenti=aRun commands directly on the host machine. Features: - Popen + polling for interrupt support (user can cancel mid-command) - Background stdout drain thread to prevent pipe buffer deadlocks - stdin_data support for piping content (bypasses ARG_MAX limits) - sudo -S transform via SUDO_PASSWORD env var - Uses interactive login shell so full user env is available - Optional persistent shell mode (cwd/env vars survive across calls) Nc2<V^8dQhRS[RS[RS[RS[/#)r cwdtimeoutr persistent)rintrhr)r __classdict__s"rrLocalEnvironment.__annotate__Is***C*s*d*!*rc<\ST`T;'g\P!4W#R7W@nVP'dVP 4R#R#))rrrN)super__init__rgetcwdr_init_persistent_shell)selfrrrr __class__s&&&&&rrLocalEnvironment.__init__IsB S//BIIKJ$ ???  ' ' ) rc <V^8dQhRS[/#r r)r rs"rrrQs77c7rc RVP 2#)z/tmp/hermes-local-) _session_idrs&r _temp_prefixLocalEnvironment._temp_prefixPs#D$4$4#566rc4<V^8dQhRS[P/#r ) subprocessPopen)r rs"rrrTs   j&6&6  rc \4p\VP4p\P!VR.\P \P \P RT\'dRR7#\PR7#)z-lTN)stdinstdoutstderrtextr preexec_fn) rrrrrPIPEDEVNULLrrsetsid)r user_shellrs& r_spawn_shell_process%LocalEnvironment._spawn_shell_processTsi\ )  //??%%*{t  13   rc6<V^8dQhRS[RS[S[,/#)r pathsr )rlist)r rs"rrrasstCyrc*.pVFvp\PPV4'd>\V4;_uu_4pVP VP 44RRR4KeVP R4Kx V# +'giK;i)Nr)rrexistsopenappendread)rrresultsrfs&* r_read_temp_files!LocalEnvironment._read_temp_filesasgDww~~d##$ZZ1NN1668, Zr"    ZZs B B cVPfR#\P!RR\VP4.R^R7R# \P\ 3dR#i;i)Npkillz-PT)capture_outputr) _shell_pidrrunrTimeoutExpiredFileNotFoundErrorrs&r_kill_shell_children%LocalEnvironment._kill_shell_childrenksX ?? "   NN$DOO 45#Q ))+<=   s/AA"!A"c\P!VP R24F@p\PP V4'gK*\P !V4KB R#)z-*N)globrrrrremove)rrs& r_cleanup_temp_files$LocalEnvironment._cleanup_temp_filesvsAd//034Aww~~a   ! 5rr stdin_datac T<V^8dQhRS[RS[RS[R,RS[R,RS[/#)r commandrrNrr )rrrh)r rs"rrr{sIkAkAkA#kA"%*kA%(4ZkA;?kArc DaaaT;'g*VP;'g\P!4pT;'g VPpVP V4wrxVeVe W,oM VeVoMVo\ 4p R\ RV R\ R2p \VP4p \P!V RV .RTT RR\P\PSe\PM\P\'dRM\PR 7 oSe.VV3R lp \ P"!V RR 7P%4.oVV3R lp \ P"!V RR 7pVP%4\&P(!4V,pSP+4Ef\-4'd\'dSP/4MX\P0!SP24p\P4!V\6P84SP;R R7VPG^R7RRPGS4R,R^/#\&P(!4V8d\'dSP/4MD\P4!\P0!SP24\6P84VPG^R7RPGS4pRV R2pRV'd VV,R^|/#VPI4R^|/#\&PJ!R4EKVPG^R7\MRPGS44pRVRSPN/# \P<d*\P4!T\6P>4ELi;i \@\B3dSPE4ELi;i \@\B3dSPE4EL3i;i)Nzprintf 'z' z __hermes_rc=$? printf 'z' exit $__hermes_rc z-licTzutf-8replace) rrrencodingerrorsrrrrc<SPPS4SPP4R# \\3dR#i;ir)rwritecloseBrokenPipeErrorOSError)effective_stdinprocsr _write_stdin7LocalEnvironment._execute_oneshot.._write_stdinsAJJ$$_5JJ$$&'1s5:AA)targetdaemonc0<SPFpSPV4K SPP4R# \dL*i;i \dR#i;i SPP4i \dii;i;ir)rr ValueErrorrru)r_output_chunksrs r _drain_stdout8LocalEnvironment._execute_oneshot.._drain_stdouts  KKD"))$/( KK%%'    !KK%%' sX$AA AA'AA' A$#A$'B)BB BBBBg?)rrru2 [Command interrupted — user sent a new message] returncodez [Command timed out after zs]g?)(rrrr_prepare_commandrrrrrrrSTDOUTrrr threadingThreadrtime monotonicpollr terminategetpgidpidkillpgsignalSIGTERMwaitrSIGKILLProcessLookupErrorPermissionErrorkillrlstripsleeprr%)rrrrrwork_direffective_timeout exec_command sudo_stdinr fenced_cmdrrr#readerdeadlinepgidpartial timeout_msgrr"rrs&&&$$ @@@r_execute_oneshot!LocalEnvironment._execute_oneshot{sF11$((11biik#33t||#'#8#8#A  !j&<(5O  #(O(O\ }oSn$o&" #  )  ,??$$%4%@*//jFXFX*{t     &    L > D D F$& !!tD >>#&77iik!  "{(!zz$((3 $7< IIcI2  A &bggn58mm #~~(* "{( "**TXX"6G A &''.1 ;rVsN   oo9, 3D** %5!`F"?!@>(X "HC *0iA+_iAr