߲j1 UdZddlZddlZddlZddlZddlZddlZddlmZddl m Z m Z ddl m Z ddlmZmZmZmZdaeed<eZe d e Ze eezed <d Zeed fed <dZeed<dee zdzde fdZde ddfdZdedzfdZdede fdZ de fdZ!de dzfdZ"ddZ#de fdZ$iZ%e&eefed<ddee zdzdefdZ'ddZ(de fdZ)e*hdZ+e*eed <da,d!ed"<de fd#Z-d$Z.d%Z/d&e defd'Z0dee zde dzfd(Z1dee zdzdedzfd)Z2d*e de fd+Z3d*ee zdefd,Z4d-Z5ejld.Z7d*ee zdefd/Z8d*ee zdefd0Z9d*ee zdefd1Z:d*ee zddfd2Z;d*ee zddfd3Zd6ed7e dzd8ede fd9Z?dd7e dzde fd:Z@dd7e dzde fd;ZAdd7e dzde fd<ZBdd=d>ed?ed@e dzde fdAZCdd@e dzdeDe fdBZEgdCgdDdEdFgdGZFdHedeDefdIZGddJeDed@e dzfdKZHdJeDedeedzeffdLZIdMeDefdNZJdedefdOZKeLejjdPdQZOdaPe eQjjdRz dSz dTz ZTe eQjjZUdedefdUZVdedzdefdVZWdd@e dzdefdWZXdedXeDedefdYZYdd@e dzdefdZZZda[dd[Z\d\ed]eLde]dzfd^Z^d@e d_ede dzfd`Z_dae dbe dedzfdcZ`dd@e dzdedzfddZadeed]eLdfedefdgZbdedzfdhZcdefdiZddd@e dzdefdjZedHededzfdkZfdHededzfdlZgdHededzfdmZhddne&eefdzde&eeffdoZidedzdefdpZjde defdqZkdd@e dzdefdrZldefdsZmde ddfdtZndedzdefduZoddne&eefdzdedzfdvZpdwedzd*edzdefdxZqddne&eefdyed7edefdzZrddne&eefdzdeDefd{Zsddne&eefdzdefd|Ztd}d}d}d~d~d~d~dZuddne&eefdzdedzfdZvdneeefddfdZwdZxdZydZzdZ{dZ|da}dZ~defdZdZdZe*ddhZe*hdZdd@ee zdzdedzfdZdefdZdeeLdzeLdzffdZddZdd=d@ee zdzddfdZdddd@ee zdzdede fdZdezfde dzdedeLfdZde ddfdZdde dzdeLfdZdneeefdefdZdefdZdZde&dzfdZdedeDefdZdede&dzde&dzfdZdede&dzde&fdZdde&dzdede&dzfdZdededzfdZdededzfdZdedefdZde fdZde fdZde fdZddeddfdZdZdZdZedZe*hdZe*eed<dededzfdZdZdddedzde fdZde dzfdZdddedzde fdZe*hdZdedzdefdZdedeDefdÄZddĜdedefdńZy)uxShared constants for Hermes Agent. Import-safe, stdlib-only — importable from anywhere without circular-import risk. N)MutableMapping) ContextVarToken)Path)_detect_container is_container is_termuxis_wslF_profile_fallback_warned_HERMES_HOME_OVERRIDEdefault)asciiemojikaomojiunicode.INDICATOR_STYLESrDEFAULT_INDICATOR_STYLEpathreturncR|tn t|}tj|S)zSet a context-local Hermes home override and return its reset token. Deliberately does not mutate ``os.environ`` (shared by every thread in the process). )_UNSETstrr set)rvalues 5/home/ubuntu/.hermes/hermes-agent/hermes_constants.pyset_hermes_home_overriders$ %)L&c$iE $ $U ++tokenc.tj|y)z8Restore the previous context-local Hermes home override.N)r reset)rs rreset_hermes_home_overrider"%s&rcXtj}|tur |r t|SdS)z=Return the active context-local Hermes home override, if any.N)r getrroverrides rget_hermes_home_overrider'*s($((*H$F2x3x=ITIrcttjjtjj |S)z>Expand environment and user-home syntax in a Hermes home path.)rosr expanduser expandvarsrs r_expand_hermes_homer-0s+ ""277#5#5d#;< ==rc tjdk(rZtjj ddj }|r t |nt jdz dz }|dz St jdz S)z4Return the platform-native default Hermes home path.win32 LOCALAPPDATAAppDataLocalhermes.hermes)sysplatformr)environr$striprhome) local_appdatabases r!_get_platform_default_hermes_homer=5se ||w ~r:@@B &3tM"y9PSZ9Zh 99; ""rc4ttdrtjdk7rytjj ddj }|r|dk(ryddl} t|j|jdz S#t$rYywxYw)aThe invoking user's native ``~/.hermes`` when this process is root under ``sudo``, else None. sudo strips HERMES_HOME and sets HOME=/root, so the process's own default is root's; the profile store and the system service being operated on belong to SUDO_USER. geteuidrN SUDO_USERr1rootr5) hasattrr)r?r8r$r9pwdrgetpwnampw_dirKeyError) sudo_userrCs rsudo_invoker_default_homerH>s 2y !RZZ\Q%6 {B/557I  V+CLL+223i?? s$&B BBctry t}|dz }|jr |jdj nd}|rw|dk7rqdad|d d |d }tjt5tjj|d ztjjdddyyy#t t f$rd}YwxYw#1swYyxYw) z`Warn once when HERMES_HOME is unset but a non-default profile is sticky-active (wrong fallback).Nactive_profileutf-8encodingr1rTzB[HERMES_HOME fallback] HERMES_HOME is unset but active profile is z. Falling back to u', which is the DEFAULT profile — not z. Any data this process writes will land in the wrong profile. The subprocess spawner should pass HERMES_HOME explicitly (see issue #18594). )r r=exists read_textr9UnicodeDecodeErrorOSError contextlibsuppress Exceptionr6stderrwriteflush) fallback_home active_pathactivemsgs r_warn_profile_fallback_oncer]Qs 9; #&66 DODVDVDX&&&8>>@^`&I%#'  #5m_E..4Z8" #   +  JJ  S4Z ( JJ     &v  (  sAC8ACCCC$ct}|r t|Stjj ddj s t tS)uUHermes home: context-local override → ``HERMES_HOME`` env var → platform default. HERMES_HOMEr1)r'r-r)r8r$r9r]get_process_hermes_homer%s rget_hermes_homeramsB')H"8,, ::>>- , 2 2 4#% " $$r_HOME_KEY_CACHEc| t|n t}t|}tj |}||S|j } |j d}tjjt|}|t|<|S#t$r;tjjt|j dcYSwxYw)azStable registry key for a Hermes home/profile dir. ``strict=False`` so profiles whose directories don't exist yet still get a key. The resolved value is remembered per input path. A directory that does not exist yet is resolved without touching the cache, because the answer can change once it is created (e.g. part of the path turns out to be a symlink). TstrictF) rrarrbr$r*resolverRr)rnormcase)r candidaterawcachedexpandedresolvedkeys rhermes_home_keyrns#.T O4EI i.C   %F  ##%HE##4#0 ''  3x= )COC J EwwH$4$4E$4$B CDDEs BACCc,tjy)zJForget every remembered home key (for tests that move a home dir on disk).N)rbclearrrreset_hermes_home_key_cacherrsrctjjddj}|r t |St S)aHermes home of the running process, ignoring task overrides. For process-level assets (theme YAML, dashboard plugin manifests) that must stay visible while a request is scoped to another profile (e.g. embedded ``/chat`` under ``--open-profile``). r_r1)r)r8r$r9r-r=)vals rr`r`s8 **.. + 1 1 3C'* s #S0Q0SSr>nodemodelsruntimesLOCAL_RUNTIME_ROOT_DIRSztuple[str, str, Path] | None_default_hermes_root_memoct}tjjddj }|r t |nd}t || t |ndf}t}| |dd|k(r|dS|}|. |jj|jg||a|S#t$r4|jjdk(r|jjn|}YEwxYw)z^Root Hermes dir for profile-level ops: ```` when ``HERMES_HOME=/profiles/``.r_r1Nprofiles) r=r)r8r$r9r-rryrf relative_to ValueErrorparentname) native_homeenv_homeenv_pathmemo_keymemoresults rget_default_hermes_rootrs45Kzz~~mR0668H08"8,dHK 83G#h-RPH $D D!H0Aw F `     * *;+>+>+@ A!4( 3F 3 M `/7/C/Cz/QX__++W_F `s<-B22:C/.C/z.deleted) config.yaml.envstate.db profiles_dirc8|jjdk(ry |tz jst fdt Dry jdtjdk(S#t $rY9wxYw#t $rYywxYw)aTrue when *profiles_dir* is provably ``/profiles``. Accepts the classic ``~/.hermes`` layout, a root carrying Hermes-home marker files, a ``profiles/.deleted`` tombstone dir (only ``profile delete`` creates it), or the default root. r5Tc3DK|]}|z jywN)rO).0markerrAs r z+_is_hermes_profiles_root..s%B )/TF] " " $B s Frd) rr_DELETED_PROFILES_DIRis_dirany_HERMES_HOME_MARKERSrRrfr)rrAs @r_is_hermes_profiles_rootrs   D yyI 0 0 8 8 :cB 3GB ? ? ||5|)-D-F-N-NV[-N-\\\     s#/A>,B > B  B  BBct|}|g|jD]`}|jjdk(r4|jj dst |jr|cS|jdk(s`yy)aReturn ``/profiles/`` when *path* is that home or under it. Requires ```` not to start with ``.`` and the ``profiles`` parent to be a real Hermes home; a default home whose path merely contains a ``profiles`` segment is not a named profile. r|.r5N)rparentsrr startswithr)rcurrentrhs rnamed_profile_homersv 4jG00    ! !Z / 8Q8QRU8V,Y-=-=>  >>Y &  rc|t|jsyt|j} t }||j dfD]|}||k(s||j dk(ryt |}||jcS|jjdk(sT|jjdrp|jcS y#tttf$rYywxYw)aReturn the canonical profile id owning *path*, or ``None`` when it is not a profile home. The default home is the Hermes root itself, so its basename is an installation detail (``.hermes`` on POSIX and commonly ``hermes`` on Windows), not the profile id ``default``. NFrdrr|r) rr9rr*rrfrrrrrR RuntimeErrorr~)rr default_rootrhnameds rprofile_name_for_homers  |3t9??,4j##%G .0 !7??%?#@A &IL(I9M9MUZ9M9[,[ &y1E zz!$$ 29>>;T;TUX;Y ~~% &  \: .s/>r)rrzSOUL.mdz profile.yamlz auth.jsonrz^[a-z0-9][a-z0-9_-]{0,63}$cJt|tfdtDS)Nc3nK|],}|z jxs|z j.ywr)is_file is_symlink)rrr:s rrz-named_profile_has_identity.."s3qVv &&(HTF],F,F,HHqs25)rr_PROFILE_IDENTITY_MARKERSrr:s @rnamed_profile_has_identityrs!  D qWpq qqrct|}tD]N}||z }|jry |jr$|dk7s|j j dkDryPy#t $rY]wxYw)uStricter than :func:`named_profile_has_identity`: is this dir a profile a host should change its own posture for? An EMPTY ``.env`` is all a crashed ``hermes profile create`` leaves behind, and it is enough for ``named_profile_has_identity``. Listing such a shell is harmless; counting it as a second tenant is not — it flips the whole host's credential reads fail-closed at the next boot. Every other marker, and a non-empty or symlinked ``.env``, still counts. TrrF)rrrrstatst_sizerR)rr:rrs r#named_profile_has_servable_identityr%sx  D+f} ??  ||~6V#3tyy{7J7JQ7N     s2A$$ A0/A0cnt|}|jxrt|xr t| S)aA resolvable named profile: an existing dir with identity that has not been deleted. ``-p``/``--profile`` resolution and ``profile_exists`` share this so a stale ghost shell can never be started as a backend (whose ``ensure_hermes_home`` would rebuild the full tree).)rrrrrs rnamed_profile_is_liver;s4  D ;;= d7= dF^_cFdBddrctt|}|jjdd|j ddy)NTrexist_okzdeleted rKrL)rrrmkdir write_text)rrs rmark_named_profile_deletedrCs; #D$6 7F MMt4 kG4rcLtt|jdy)NT) missing_ok)rrunlinkrs rclear_named_profile_deletedrIs4 -.555Frctt|}|+t|s|jstd|dyy)z1Refuse missing or tombstoned named profile homes.Nz#Named profile home does not exist: z0. Create the profile explicitly before using it.)rrrOFileNotFoundError)rr:s rassert_named_profile_home_liverMsJ d #D 5d;4;;=1$8= =  DQrcXt|}t||jdd|S)zECreate *path*, but never materialize a deleted/missing named profile.Tr)rrr)rtargets rmkdir_under_hermes_homerWs( $ZF"6* LLL- Mrenv_varrsubdirctj|dj}|r t|S||St |z S)uResolve a package-manager-relocatable directory. Order: *env_var* (Nix wrapper / explicit override) → caller ``default`` (source checkout) → ``/``. r1)r)getenvr9rra)rrrr&s r _packaged_dirr_sA yy"%++-H%4>ig6I7iO`ciOiirctd|dS)zHReturn the optional-skills directory, honoring package-manager wrappers.HERMES_OPTIONAL_SKILLSzoptional-skillsrr s rget_optional_skills_dirris 17/`` (no migration). An empty legacy dir does NOT count (install scaffolds, manual mkdir) so it cannot shadow the new path. A bare empty ``/`` directory does **not** count as "the legacy install is in use" — install scaffolds, manual ``mkdir`` work, and cleared-then-abandoned locations all create empty stubs that would otherwise silently shadow real data populated at ``/``. See #27602 for the pairing-store regression where a dormant empty ``pairing/`` orphaned approved-user data in ``platforms/pairing/``. )ra_legacy_path_has_content)rrr:old_paths rget_hermes_dirrxs1  $?$DhH/98Qtk?QQrcf|xs tdz }tjdk(r||dz gS|dz |gS)zHermes-managed Node dirs in lookup order; both Windows and POSIX shapes so migrated installs work. Keep in sync with hermesManagedNodePathEntries() in apps/desktop/electron/backend-env.ts. rur/bin)rar6r7)r:node_dirs riter_hermes_node_dirsrsB ))V3H+.<<7+BHh& 'dTYIY[cHddr)znpm.cmdznpm.exenpm)znpx.cmdznpx.exenpxnode.exeru)rrrucommandct|j}tjdk7sd|vr|gStj |j |d|d|gS)Nr/rz.cmdz.exe)rrr6r7_WINDOWS_NODE_SHIMSr$lower)rr<s r_candidate_node_command_namesrsW =  D ||w#+v  " "4::/`` files.r/N)rrr6r7r)accessX_OK)rr: directoryrrhs r_iter_managed_node_candidatesrsc*40  D!D(I  " (?299YXZX_X_C`  s)A-7A-$ A-cpd}ttt|D]}t|r||fcSd}d|fS)z8Return ``(first runnable candidate, saw a broken one)``.FTN)maprrnode_tool_runnable)rbrokenrhs r_first_runnable_managedrsG F;EBC i (f$ $ <rargvc ddl} ddlm}|j|fdd|d|S#t|j t f$rYywxYw)z>Run a hidden ``--version`` probe; ``None`` when it cannot run.rN)windows_hide_flagsT )capture_outputtimeout creationflags) subprocesshermes_cli._subprocess_compatrrunrRTimeoutExpiredr~)rkwargsrrs r_run_version_probers\Dz~~  !%rASAU Y_   Z.. ;s!(AAcZt|dgt}|duxr|jdk(S)zJTrue when `` --version`` exits 0 under the Hermes-managed Node PATH. --version)envNr)rwith_hermes_node_path returncode)rrs r_version_probe_okrs2 { 39N9P QF   8&"3"3q"88rHERMES_NODE_TARGET_MAJOR22scriptslibznode-bootstrap.shctjj|xr$tj|tjS)zG``exists()`` follows symlinks, so a dangling link never spawns a probe.)r)rrOrrr,s r_is_executable_filer s) 77>>$  .sjAq$'jsT)r6r7psutilrUrappendrrrfrR process_iterinfor$r~rlist)r:r rprocsprocr#rrs @rmanaged_node_tree_in_user'sl ||wD*40   KKDO3356 7 ##UI$67  99Dhhuo  $s)++-. j33%B$txxXaObOhfhJi1ij j  7           Z( #h sXC;1D #D< D("D7; DD DD D%$D%( D43D47EEc0trydatddy)z8Print the managed-Node deferral notice once per process.NTu→ Hermes-managed Node.js is in use by a running app; deferring its upgrade until the app is closed (re-run `hermes update` afterwards).)rX)#_managed_node_in_use_notice_printedprintrqrr!_print_managed_node_in_use_noticer+s!+*.'  OVZrurlrcddl} |jj||5}|jcdddS#1swYyxYw#t$rYywxYw)Nrr)urllib.requestrequesturlopenreadrR)r,rurllibresponses r _fetch_urlr5(sR ^^ # #C # 9 #X==? # # # s+A = A AA A AA node_archcRddl}ddl}ddl}dtd}t |d}|ydtd|d}t j ||jd d }|sy|jd} t || d } | y|d |jjddz } |j5} t| } | | z j| | dz }|j|j| | z 5}|j!|dddt#|j%dd}||j's dddyt)j*t-|t-| ddd| S#1swYrxYw#1swY| SxYw#t.$rYywxYw)zDownload the target-major portable Node zip into a sibling ``node.new-*`` dir. A sibling makes the later swap a same-volume rename. ``None`` on any failure. rNz https://nodejs.org/dist/latest-vz.x/<znode-vz\.\d+\.\d+-win-z\.ziprKreplace)errors, node.new-extractznode-v*)tempfileuuidzipfile_HERMES_NODE_TARGET_MAJORr5researchdecodegroupuuid4hexTemporaryDirectoryr write_bytesrZipFile extractallrglobrshutilmoverrR)r:r6r?r@rA index_url index_bytespatternmatchzip_name zip_bytesstagedtmp_dirtmp_path extract_dirarchive extracteds r_stage_windows_node_zipr\2s 23L2MSQIY+K12/)ERG IIg{11')1L ME {{1~Hi[ 3S9I i 0 0! 456 6F   ( ( * 5gG}H  - -i 8"Y.K    H!45 0"";/ 0[--i8$?I (8(8(: 5 5 KKIF 4 5 M 0 0 5 M sU%F5A F >F6F F(F 7FF F  FFF F&%F&rrVc:|jd|jjdz }|j}|ra t j t |t |tjt5t j|dddd t j t |t ||rtj|dy#t$r$ttj|dYywxYw#1swY|xYw#t$rs|rWtjt5t j t |t |dddn #1swYnxYwtj|dYywxYw)zRename the live tree aside (``node.old-*``) and *staged* into place. ``None`` when the OS refuses to move the live tree (in use; untouched, retried next time), ``False`` when the staged tree cannot be moved in (live tree rolled back). z node.old-r<T ignore_errorsNF)rr removeprefixrOr)r9rrRr+rNrmtreerSrTutime)rrVbackuphad_lives r_swap_node_treereYs; ]]y)A)A+)N(OP PF}}H  JJs6{CK 0  ) # HHVT " # 3v;F , fD1 '  - / MM& 5   # #  $$W- 5 3v;F 4 5 5 5 fD1 sG(C"D (D"*DDD$F)E4+ F4E= 9FFcddl}ddlm}ddddj|j }|y|xs t }|d z }t |r ty|jd z }g|jd |jd D]7} |jj|krtj|d 9t||}|yt||xrt!t#|dz S#t$rYywxYw)uRedownload the portable Node zip into ``%HERMES_HOME%\node`` on Windows. ``True`` on success, ``False`` on genuine failure (offline, bad archive), ``None`` when the tree is in use and the heal is deferred — callers must not record the once-per-process attempt for ``None``. Staging-first (extract to ``node.new-*``, rename live aside, rename staged in) so an interrupted heal cannot gut the install; a refused rename *is* the in-use signal. The replacement is staging-first: the new tree is fully downloaded and extracted to a sibling ``node.new-*`` directory, then the live tree is renamed aside (``node.old-*``) and the staged tree renamed into place. The live tree is never deleted before its replacement is ready, so an interrupted heal cannot gut the running installation. Windows allows renaming a tree whose executables are running (images are mapped with ``FILE_SHARE_DELETE`` — the same mechanism as the hermes.exe quarantine); when the OS refuses the rename, that refusal *is* the in-use signal and the heal defers instead of forcing the write and crashing with ``PermissionError: [WinError 5]`` on ``npm.cmd`` (#80926). rN)factsx64arm64x86)amd64rirjFruXz node.old-*z node.new-*Tr^r)timehermes_platform.hostrgr$ native_archrar'r+rMrst_mtimerNrarRr\rerr)r:rmrgr6rcutoffstalerVs r_heal_managed_node_windowsrszs  *'%@DDUEVEVEXYI  $?$D F]F%)+ YY[3 FE499\*ETYY|-DE zz|$$v- e48 %T9 5F ~ 66 * [/A#fzFYBZ/[[    s4D D  D func extra_envc >tjsyddl} ddlm}|j |ddtd|git jdtti|d |d }|jdk(S#tt|jf$rYywxYw) zGSource ``scripts/lib/node-bootstrap.sh`` and run shell function *func*.FrN) _find_bashz-czsource "z" && r_T)rrrcheck)_NODE_BOOTSTRAP_SCRIPTrrtools.environments.localrwrr)r8rrarRrSubprocessErrorr)rtrrurrwrs r_run_node_bootstrapr|s ! ) ) + 7 \48,B+C5!O PR2::R}c/2C.DR R      !! \:#=#= >sAA??BBctd}|r|Stjdk(r t}nt ddd}|syt t ddS) zInstall a Hermes-managed Node tree under ``$HERMES_HOME/node`` and return its npm path. Hermes never modifies a user-owned toolchain (system, nvm, brew, Nix) that fails ``engines``. rr/_nb_install_bundled_noderl1)rHERMES_NODE_SKIP_LINKSNr)find_hermes_node_executabler6r7rsr|rr)existingoks rbootstrap_hermes_managed_nodersX +51H ||w ' )!!;Sad e  "#@#G H KKrcts tsytjdk(r t }n t dd}|ydat |S)a{Redownload Hermes-managed Node when the tree exists but is broken; at most once per process. A Windows in-use deferral does NOT record the attempt so a later call can heal once free. POSIX installs shell out to ``heal_managed_node`` in ``scripts/lib/node-bootstrap.sh``; Windows downloads the portable zip directly (same source as ``install.ps1``). See #80926. Fr/heal_managed_noder;r.T)_managed_node_heal_attemptedrr6r7rsr|bool)rs rheal_hermes_managed_nodersI$+K+M ||w+-$%8#F ~#' <rcbttd|D]}tt|dg}|y |jj j jd}t|jdd}d|vry|tkcSy#ttf$rYywxYw) zYTrue when the managed node runs but is below the target major (heals like a broken tree).rurFvrr-T) rrrrstdoutrEr9lstripintsplitr~ IndexErrorrB)r:rhrversionmajors r_managed_node_tree_outdatedrs23PQW3XZ^_ 1 #S^[$AB > mm**,224;;C@G c*1-.E '>000 1 J'  sABB.-B.ct|}t|\}}|xs|duxr t}|rtrt|\}}|r|S|S)zaHermes-managed Node/npm path, healing broken/outdated trees; heal failure still returns old Node.N)rrrr)rrrlbroken_present needs_healhealed_s rrrsW )' 2E6u=Hn[HD$8$Z=X=ZJ.0+E2  M OrcNtjdk7rtj|St |t fdt jt jddfDrtjrSdSt jjddjt jDcgc]}|s| }}tD]@}|D]9}t||z js t t||z ccSBycc}w)zaNode/npm from PATH; on Windows prefer ``.cmd``/``.exe`` (CreateProcess cannot run the bare shim).r/c3.K|] }|xr|vywrrq)rsep command_strs rrz/find_node_executable_on_path..s P#3 %3+% % Ps/\NPATHr1)r6r7rNwhichrrr)raltseprrr8r$rpathsepr)rd directoriesrrrs @rfind_node_executable_on_pathrs ||w||G$$g,K P"&&"))S$1O PP";/779{CtC jjnnVR8>>rzzJPa1PKP-k:3$ 3IY$&//14 ?T122 33  Qs D" D"cLt|}|r|Stryt|S)zResolve a Node command, preferring a healthy managed install. A managed tree that exists but cannot be healed yields ``None`` rather than system Node. N)rrr)rmanageds rfind_node_executabler s* *'2G') ' 00rrct|tjn|}|jddj tj Dcgc]}|s| }}t tDcgc]}|jst| c}D]}||vs|jd|tj j||d<|Scc}wcc}w)zDReturn *env* with Hermes-managed Node directories prepended to PATH.rr1r) dictr)r8r$rrreversedrrrinsertjoin)rmergedrpartsrentrys rrrs  "** 5F 62.44RZZ@ F1AQ FE F1F1HZDKKM3t9Z[#   LLE "#ZZ__U+F6N M GZsCC.C Cc|syd|vr#|jdjdryt|xr t|S)uTrue when *path* is an agent-browser CLI that runs (``--version`` exits 0) or the npx fallback. Dead/wrong-arch/hung binaries are rejected so callers try the next candidate. A bare presence check (``shutil.which`` / ``Path.exists``) is not enough: agent-browser's npm ``postinstall`` re-points a *global* install symlink (e.g. ``/opt/homebrew/bin/agent-browser``) at our local ``node_modules/agent-browser/bin/...`` binary, which then disappears on the next ``hermes update`` — leaving a **dangling symlink** that ``which`` still reports but exec fails on with exit 127 (issue #48521). Callers that trust such a path silently break every browser tool. F rrT)rendswithr rr,s ragent_browser_runnabler$sA  d{tzz|A//6 t $ @):4)@@rc\ |j}tj|jr|j}tj |jsy t|jy#t$rYyt $rYywxYw#t$rYyt $rYywxYw)zTrue iff *path* is a non-directory file or a populated directory. Non-not-found ``OSError`` means "assume occupied" (never orphan legacy data). Symlinks are judged on their target; a dangling one does NOT count. FT) lstatrS_ISLNKst_moderrRS_ISDIRriterdir StopIteration)rsts rrr7s  ZZ\ << #B << #  T\\^        s/?A<"B< BBB B+ B+*B+c| t} d|jtjj zS#t $rt |cYSwxYw)aUser-facing ``~/`` display string for HERMES_HOME (``~/.hermes/profiles/coder``). ``home`` overrides the lookup for callers that run before the CLI has applied the sticky ``active_profile`` (``get_hermes_home()`` would emit the wrong-profile fallback warning there). z~/)rar}rr:as_posixr~rrs rdisplay_hermes_homerPsT  | d&&tyy{3<<>>> 4ys3AAAcFtt}|r |dk7rd|dSdS)a^``-p `` (trailing space) pinning copy-pasteable ``hermes ...`` guidance to the active NAMED profile, else ``""``: a bare ``hermes`` follows the sticky ``active_profile`` file, which can name a different database than the one that failed (#105887). A custom home outside the profile tree has no selector (only HERMES_HOME names it).rz-p rr1)rrars rprofile_cli_selectorr^s- !!2 3D TY%6Sa=>B>rc|jj}|tdk(st|jdkry|t k(st |j vr/ddl}|jtjd|t ytjt5tj|ddddy#1swYyxYw)z`Chmod ``0o700`` on *path*'s parent, refusing ``/`` and top-level dirs (misresolved HERMES_HOME).rNrzNot restricting permissions on %s: it is inside the hermes-agent install directory (%s). Credential files are normally stored under the hermes home directory instead.)rrfrlenr _INSTALL_ROOTrlogging getLogger__name__warningrSrTrRr)chmod)rrrs rsecure_parent_dirrgs [[ "F cc&,,/!3-6>>"A(#++ GHNP]    W %     s %CCc@|xsdj}|sy tjjtjj tjj |S#t $r"tjj|cYSwxYw)zDReturn a comparable absolute path string, or ``""`` for empty input.r1)r9r)rrgabspathr*rU)rris r_norm_home_pathr|st :2   C %ww0B0B30G HII %ww$$%sAA22(BBctxs,|xsijdxstjd}|syt t |dz }tj j|r|SdS)zEReturn ``{HERMES_HOME}/home`` when the profile-home directory exists.r_Nr:)r'r$r)rrr-risdir)r hermes_homers r_profile_home_pathrsc*,j 0NjRTR[R[\iRjK *;7&@AL77==6<@D@rrhcRt|xr|xrt|t|k(Sr)rr)rhrs r_is_profile_homers'  jljy/I_]iMj/j kkrrmct|j|xstj||j S)zCStripped *key* from *env*, falling back to the process environment.)rr$r)rr9)rrmrs r_env_getrs. swws|6ryyg6 7 = = ??rc|xsi}t|dt|dg}tjt5ddl}|j |j tjjjddd|j t|dt|dt|d}}|rH|rF|j |jdr||ntjj||tjjd }|d k7r|j ||Dcgc]}|s| c}S#1swYxYwcc}w) z5Return likely OS-user home candidates in trust order.HERMES_REAL_HOMEHOMErN USERPROFILE HOMEDRIVEHOMEPATH)rr~)rrSrTrUrCr!getpwuidr)getuidrEr9rrrr*)r candidatesrCdriverrkrs r_iter_real_home_candidatesrs' )C3 23Xc65JKJ   Y 'D#,,ryy{3::@@BCDhsM233 ,hsJ.G4E dook.JUGD6*PRPWPWP\P\]bdhPijww!!#&H3(#! '!QA ''DD (sAEE  E Ect|}t}t|D]5}t|}|r||vr|j |t ||r3|cSddl} |jS#ttf$rYywxYw)zThe OS user's real home, avoiding the Hermes profile HOME. ``HOME`` belongs to the OS account and external CLIs keeping credentials under ``~``; a parent already running with ``HOME={HERMES_HOME}/home`` is repaired back when possible. rN/tmp) rrrraddrr? gettempdirrrR)rrseenrhrmr?s r get_real_homers &c*LUD/4 i(cTk    <8  ""$$ ' "sA..B?Bprofilereal)isolatedrz profile-homehostuser real_homez real-homecL|xsi}t|}t|ddjxsd}tj ||}|dk(r|St |}t|d}t |t |k7r|nd}|dk(r|S|r tr|S|r t||r|Sy)zSubprocess ``HOME`` override, or ``None``. ``auto``: hosts keep real HOME (repairing a profile-home parent), containers use ``{HERMES_HOME}/home``; ``real``: always real HOME; ``profile``: always the profile home. TERMINAL_HOME_MODEautorrNr) rrr_HOME_MODE_ALIASESr$rrrr)rrmoder current_homerepaireds rget_subprocess_homers )C%c*L C-v 6 < < > H&D  ! !$ -D yc"IC(L+I6/,:WWy]aH v~  +L,G rcbt|}|r||d<t|}|r||d<t|y)zApply Hermes' subprocess HOME contract to *env* in-place: ``HOME``/``HERMES_REAL_HOME`` per the home mode, and the temp vars re-pointed at ``env["HERMES_HOME"]``'s scratch dir.rrN)rrapply_scratch_tmp_env)rrr:s rapply_subprocess_home_envrs:c"I"+  s #D F #r)TMPDIRTMPTEMPHERMES_SCRATCH_DIRz .last_prunei2cddl}tjdk(ry|j}t |t kst jjds|Sy)zTemp root short enough for AF_UNIX sockets. The scratch dir usually fits; macOS ``TMPDIR`` never does and a deep profile home may not, so those fall back to the OS default root for sockets only (everything else stays in the scratch dir).rNdarwinr) r?r6r7rrSOCKET_TMPDIR_MAX_LENr)rr)r?rhs rsocket_safe_tmpdirrsI ||x##%I 9~..bggmmF6K r)trueryesnixosbrewhomebrew>0noofffalsectjddjjxsd}| t |n t dz }|@|j r0 |jddjj}||tvs|tvry|dk(s|tvrtS|S#t$rd}Y5wxYw)uReturn the package manager owning this install, if any. Signals: HERMES_MANAGED env var (systemd service) or a ``.managed`` marker file in HERMES_HOME (NixOS activation script — interactive shells don't see the service env). An unreadable or empty marker still counts as managed (the legacy NixOS shape). ``home`` names the home whose marker file is read, for callers that already resolved it (:func:`get_scratch_dir` at boot, before ``--profile`` re-homes the process). Defaults to the effective home.HERMES_MANAGEDr1Nz.managedrKr9)rMr:) r)rr9rrrarOrPrR_IGNORED_MANAGED_VALUES_MANAGED_FALSE_VALUES_MANAGED_TRUE_VALUES_LEGACY_MANAGED_SYSTEM)r:rmanaged_markers rget_managed_systemrsYY' , 2 2 4 : : < DF$($4d4j/:KzYN ~.//1 #--wy-QWWY__aF~#::fH]>] |v!55%% M  F s$/B;; C C ctjjdstjjdrytS)uZContainer/chmod-skip detection: the ``HERMES_CONTAINER``/``HERMES_SKIP_CHMOD`` operator overrides on top of the canonical :func:`_detect_container` signals (same breadth as :func:`is_container` — Docker/Podman/LXC/Kubernetes, cgroup and root-mountinfo). The cached :func:`is_container` itself is deliberately avoided: it ignores these env overrides and is computed only once per process, so tests could not flip it. Volume-mounted config is not forced to owner-only in containers: gateway and dashboard may run as different UIDs, or the mount itself needs broader permissions.HERMES_CONTAINERHERMES_SKIP_CHMODT)r)r8r$rrqrr_container_or_chmod_skippedr5s1 zz~~()RZZ^^/``) need the same chown or they land root:root and block later uid-mapped workers. Docker containers running Hermes commonly set these to map the in-container user to a host user so volume-mounted state files end up with the right ownership. See #34107. r/)NNrrNc ttjj|dj xsdS#t t f$rYywxYw)Nr1)rr)r8r$r9 TypeErrorr~rs r_env_intz)_resolve_hermes_uid_gid.._env_intMsF rzz~~dB/557?4@ @:&  s:=AA HERMES_UID HERMES_GID)r6r7rr)rs r_resolve_hermes_uid_gidr"BsA ||wssTz L !8L#9 99rct\}}||y tj|||nd||ydy#ttt f$rYywxYw)aLChown ``path`` to ``HERMES_UID:HERMES_GID`` when set; EPERM/ENOENT are non-fatal (the entrypoint's startup chown -R fixes ownership on the next restart). Used by :func:`apply_secure_dir_policy` to keep ownership consistent across all directories created by ``ensure_hermes_home`` on Docker deployments. See #34107. N)r"r)chownrRAttributeErrorNotImplementedError)ruidgids r_chown_to_hermes_uidr*Vs['(HC {s{  cos2cosVSUV ^%8 9   s99AAcZt|ytjjddj }t r|s t |y t|xsdd} tj||t |y#t$rd}Y0wxYw#ttf$rY.wxYw)uApply the canonical Hermes home-directory permission policy to *path*. Owner-only ``0700`` by default, but the operator's explicit and managed sharing choices win (#117347): managed installs are left exactly as the package manager / activation script set them (#77579); in a container only an explicit ``HERMES_HOME_MODE`` is applied (a bind-mounted data dir is often shared with sibling containers, #10757); elsewhere ``HERMES_HOME_MODE`` (e.g. ``0701``, ``2770``) overrides the mode. ``HERMES_UID`` / ``HERMES_GID`` ownership is applied when those env vars are set (#34107). ``home`` (keyword-only: both arguments are path-likes) names the home whose managed-mode marker is read, for callers that already resolved it; without it the effective home is consulted. Import-safe twin of ``hermes_cli.config._secure_dir`` (which delegates here), so callers outside the CLI package — like :func:`get_scratch_dir` — share one policy implementation. NHERMES_HOME_MODEr1700r=r) rr)r8r$r9rr*rr~rrRr')rr: explicit_moders rapply_secure_dir_policyr/fs"$+JJNN#5r:@@BM"$]T"=)E1-  t  ( )   s$B%B BBB*)B*Tpruner1c| t|n t}|dz dz } |jddtjdk7r t |||r t||S#t $rYwxYw)a``/cache/scratch`` (created, owner-only); *home* defaults to the active Hermes home. Every Hermes process and child gets ``TMPDIR``/``TMP``/``TEMP`` pointed here at boot (see :func:`export_scratch_tmp_env`), so ``tempfile`` defaults land here without call sites knowing. Entries idle for ``SCRATCH_MAX_IDLE_HOURS`` are pruned at most once per process and once per hour across processes (stamp file), so a fan-out of children stays cheap. Permissions follow :func:`apply_secure_dir_policy`, so an explicit ``HERMES_HOME_MODE`` or a managed/shared home is honored instead of a blanket ``0700`` (#117347). cachescratchTrr/r)rrarr6r7r/rR_prune_scratch_dir_once)r:r1r<r4s rget_scratch_dirr6sx)4:/@DWny(G  dT 2 <<7 " $G$ 7 ( N    s3A## A/.A/r4max_idle_hoursc^ddlm}||n td}|||tthS)zDelete top-level scratch entries with no write anywhere in their subtree for *max_idle_hours*, reaping processes and git worktree registrations rooted in them first (``hermes_constants_scratch``); return the count removed.r)prune_idle_entriesFr0)hermes_constants_scratchr9r6 frozenset_SCRATCH_PRUNE_STAMP)r4r7r9rAs rprune_scratch_dirr=s0<)7U/KD dNI?S>T4U VVrcJtrydaddl}|tz } |j|jjz t kry tjt5|jt|dddy#t $rYIwxYw#1swYyxYw)NTr) _scratch_pruned_oncermr<rrp_SCRATCH_PRUNE_INTERVAL_SECONDSrRrSrTrUtouchr=)r4rmstamps rr5r5s * *E 99;.. .1P P  Q   Y '# '"##    ##s2B %B BBB"c V||n td}d}tj|dD]o\}}}|D]d}tjt 5|tj tjj||jz }dddfq|S#1swYtxYw)zMTotal bytes under the scratch dir (for ``hermes doctor``); 0 when unreadable.NFr0rcyrrq)_es rz)scratch_dir_usage_bytes..sr)onerror) r6r)walkrSrTrRrrrr)r4rAtotaldirpath _dirnames filenamesrs rscratch_dir_usage_bytesrMs)7U/KD E)+)OG%I GD$$W- G"'',,w"=>FFF G G GG L G Gs ABB( c|jtd}tD],}|j|dj}|s&||k7s,y|jddj} t t |r t |n t}tD]}|||< ||t<y#ttf$rYywxYw)uPoint ``TMPDIR``/``TMP``/``TEMP`` in *env* at the scratch dir of ``env["HERMES_HOME"]``. A temp var the user (or the OS: macOS ``/var/folders``, Windows ``%TEMP%``) set is respected and nothing changes. A value Hermes itself exported earlier — recognisable because it equals ``HERMES_SCRATCH_DIR`` — is re-derived, so a child running under another profile's home gets that home's scratch dir rather than its parent's. Returns True when the vars were (re)written. r1Fr_T) r$SCRATCH_DIR_MARKER_ENVSCRATCH_TMP_ENV_VARSr9rr6r-r`rrR)roursrmrr:r4s rrrs 77)2 .D#R &&( Ud] 77=" % + + -Do4&9$&?MdMfgh $C")C  ' "s-)B00CCcRttj}|r ddl}d|_|S)a Boot hook: apply :func:`apply_scratch_tmp_env` to this process and reset ``tempfile``'s cached default so ``tempfile.gettempdir()`` follows. Call again after anything that re-homes the process (``--profile`` resolution); a user-set temp var is never overridden.rN)rr)r8r?tempdir)changedr?s rexport_scratch_tmp_envrUs%$BJJ/G Nr)minimallowmediumhighxhighmaxultracD||duryt|trM|jdddurddiSt|jdxsdj }|rd|dSdSt|j j }|dvrddiS|t vrd|dSy) upParse a reasoning effort level into a config dict. ``None`` for empty/unrecognized input (caller uses the default); ``{"enabled": False}`` for "none"/"false"/"disabled"/YAML False — ``reasoning_effort: false`` must mean disabled. The dict form ``{"enabled": true, "effort": ""}`` passes ``effort`` through verbatim so providers with bespoke thinking tiers (``fast``/``thinking`` relays) can be asked for their real level; bare strings stay strict so a typo like ``hgih`` never reaches the wire. The wire layer already tolerates unknown names (``agent.reasoning_effort.clamp_effort``). NTenabledFeffortr1)r^r_>nonerdisabled) isinstancerr$rr9rVALID_REASONING_EFFORTS)r_levels rparse_reasoning_effortres~4&$ ::i &% /u% %FJJx(.B/5575:451DD [   & & (F ..5!! ((622 rmodelc ddt g fdfd}|||jd}t|dk\r ||dt|dk\r|dj|d d d } Dcgc] }d|vs| c}D]fd |Dd } Dcgc]}|j dd k(s|c}D]fd|D Scc}wcc}w)zSpelling variants for tolerant override matching, exact first, deduped in order. Dot/dash recovery runs on EACH base form so ``x-4.5``, ``x-4-5`` and ``x.4.5`` share one variant set. c0tjdd|S)Nz (\d)-(\d)z\1.\2rCsubss rrFz+_canonical_model_variants..sRVVL(A>rc0tjdd|S)Nz (\d)\.(\d)z\1-\2rirks rrFz+_canonical_model_variants..sRVVM8Q?rch|D],}|s|vs j|j|.yr)rr!)valuesrrvariantss r_addz'_canonical_model_variants.._adds2 #AQd] " #rc |jdd|jdd}}|||||||y)Nrr)r9)rldasheddottedrq _dash_to_dot _dot_to_dashs r_add_with_derivativesz8_canonical_model_variants.._add_with_derivativessJ3,aiiS.A Q Qa,vBVXdekXlmrrr{r$rN) anthropicopenaigoogle openroutergroqmistralxaicohere perplexitytogether fireworksdeepseekc3,K|] }|d ywrNrq)rproviderrs rrz,_canonical_model_variants..*sAX(1QC A)r|opencoderr}rc3,K|] }|d ywrrq)raggrs rrz,_canonical_model_variants..-s9#as|9r)rrrrcount) rfrwrknown_providersrknown_aggregatorsrqrurvrrps ` @@@@@r_canonical_model_variantsr s ?L?LUDH# n% KK E 5zQeBi( 5zQchhuQRy12O" 2AS\a 2C AABCS! 7AQWWS\Q%6a 7; 9'89:; O 38s C&C&0C+ C+ overridesc  |rt|tr|syt|}|D]}||vst||}||cSt | |j D]\}}t|t rd|vr|jd}t|d}t|dk\r |tdj|ddz }t fd|Ds}t|}||cSy)uPer-model reasoning_effort override with spelling tolerance; first non-None parse wins. Order: exact → dots↔dashes → provider stripped → aggregator stripped → known prefixes added → reverse lookup of prefixed keys whose stripped forms match (custom provider slugs are not enumerable, so a key like ``ollama-local/qwen3.6:27b`` must still match the bare ``qwen3.6:27b`` model string a fallback swap feeds after stripping the prefix). Nrr$rrxc3&K|]}|v ywrrq)rform variant_sets rrz5resolve_per_model_reasoning_effort..Ms9tt{"9s) rbrrreritemsrrrrr) rfrrpvariantrrmrir key_formsrs @r"resolve_per_model_reasoning_effortr1s Jy$7u(/H i +Ig,>?F! h-KOO% S#s#s#~  #-eBi8 u:? 2388E!"I3FG GI 9y9 9+C0F!   rrvc|rt|tsiSt|D]'}|j|}t|ts%|cSiS)z``provider_routing.models.`` entry for *model*, spelling-tolerant like ``reasoning_overrides``; ``{}`` when none matches. Only the keys a user sets per model are returned so unset ones fall through to the flat ``provider_routing`` values.)rbrrr$)rfrvrrs r"resolve_per_model_provider_routingrTsM  640 ,U3 7# eT "L Ircfgcxt|tr|ni}t|jdtr|jdni}|sk|jd}t|tr(|jdxs|jdxsd}t|tr|j nd}t ||jdxsi}||S|jdd}t |}|rDt|j r+|)ddl}|jtjd ||S) zEffective reasoning config for *model*: per-model override, then global ``agent.reasoning_effort``. Single chokepoint for every surface (CLI, gateway, TUI, cron, ``/model``, fallback activation). agentrfrr1reasoning_overridesNreasoning_effortrz5Unknown reasoning_effort '%s', using default (medium)) rbrr$rr9rrerrrr)rrf agent_cfg model_cfg per_modelr_rrs rresolve_reasoning_configras  C&#BC$.swww/?$F BI GGG$ i &! i0PIMM'4JPbI%/ 3%? !R25)--H]:^:dbdeI]]-r 2F #F +F #f+##%&.(#++,cekl Mrctjdt|xsdj}|rMd|j dj d|j dj tddSdS) zKConvert a Windows drive path (``C:\...``) to its ``/mnt//...`` form.z^([A-Za-z]):[\\/](.*)$r1z/mnt/rxrr{\N)rCrSrr9rFrr9chr)rrSs rwindows_path_to_wslr{sk HH.DJB0E0E0G HEV[U5;;q>'')*!EKKN,B,B3r7C,P+Q Reaeerct|xsdjjdd}tjd|tj }|r$d|j djddzSdS)zTConvert a ``\\wsl.localhost\\...`` (or legacy ``\\wsl$``) UNC path to POSIX.r1rrz)^\\\\wsl(?:\.localhost|\$)\\[^\\]+\\(.*)$rxN)rr9r9rCrS IGNORECASErF)r normalizedrSs rwsl_unc_path_to_posixrscTZR&&(00d;J HHA:r}} ]E6;3Q''c2 2EErcwdc\ts|SttfD]}||}||cS|S)zMap a Windows-host cwd (drive path or ``\\wsl.localhost\`` UNC) to POSIX when Hermes runs in WSL. No-op off WSL and for paths already POSIX. )r rr)r translator translateds rtranslate_cwd_for_wsl_backendrs? 8 ,.AB _  !  Jrctdz S)z5Return the path to ``config.yaml`` under HERMES_HOME.rrarqrrget_config_pathrs  } ,,rctdz S)z:Return the path to the skills directory under HERMES_HOME.rrrqrrget_skills_dirrs  x ''rctdz S)z7Return the path to the ``.env`` file under HERMES_HOME.rrrqrr get_env_pathrs  v %%rforcec|syddltjddryjdfd }d|_|_y)a Monkey-patch ``socket.getaddrinfo`` to prefer IPv4 when *force* is True. Broken-IPv6 hosts hang on AAAA for the full TCP timeout; ``AF_UNSPEC`` resolves as ``AF_INET``, falling back to full resolution when no A record exists (pure-IPv6 hosts still work). Nr_hermes_ipv4_patchedFc |dk(r ||j|||S||||||S#j$r||||||cYSwxYw)Nr)AF_INETgaierror)rportfamilytypeprotoflags_original_getaddrinfosockets r_ipv4_getaddrinfoz0apply_ipv4_preference.._ipv4_getaddrinfosm Q; U,T4uV[\\%T4ueLL?? U,T4ueTT Us,A  A T)rrrr)rgetattr getaddrinfor)rrrrs @@rapply_ipv4_preferencersI v!!#95A"..M.2**Frzpartial-stream-stublengthzhttps://openrouter.ai/api/v1z/models>floornitroexactoonlineOPENROUTER_VARIANT_SUFFIXESmodel_idcp|xsdjd\}}}|r|sy|jtvr|Sy)uMReturn the base model id when ``model_id`` carries a recognized OpenRouter routing-variant suffix (e.g. ``x-ai/grok-4:nitro`` → ``x-ai/grok-4``), else ``None``. Lives here rather than in ``hermes_cli.models`` so the metadata layer (``agent.model_metadata``) can share one definition without importing the CLI — this module is dependency-free by contract. >>> openrouter_variant_base("x-ai/grok-4:nitro") 'x-ai/grok-4' >>> openrouter_variant_base("x-ai/grok-4:free") is None True >>> openrouter_variant_base("x-ai/grok-4") is None True r1:N) rpartitionrr)rr<rsuffixs ropenrouter_variant_basers> "R33C8D#v d ||~44 rzhttps://ai-gateway.vercel.sh/v1windowsrcX|tjdk(n|}t||rdz Sdz S)uVenv executable dir (``Scripts``/``bin``); *windows* lets tests exercise Windows paths on Linux. Returned unconditionally — callers differ on whether a missing venv is an error. Canonical helper for venv layout. This was open-coded in seven places across four ``hermes_cli`` modules using three different Windows predicates (``platform.system()``, ``is_windows()``, ``_is_windows()``); each new call site had to re-derive it, and #76091 shipped an eighth copy because the correct behaviour lived 2400 lines away in another function. A few sites outside ``hermes_cli`` (``tools/code_execution_tool.py``, ``agent/lsp/install.py``, ``agent/lsp/servers.py``) still hand-roll it — convert them as they are touched. r/Scriptsr)r6r7r)venv_dirrs r venv_bin_dirrs1*1cllg%gG >'Y ==u ==rcht|tfddDd}||Sttj}ttj j j k(r``, the layout the shipped Windows launchers assume) have neither, and the ``project_venv_dir(root) or root / "venv"`` idiom those call sites share then handed ``uv`` a ``VIRTUAL_ENV`` that does not exist: that one invented path skipped the import probe, reclassified every ``hermes tools`` dependency as missing and failed the reinstall with interpreter errors (#116148). The interpreter running this module is the only truthful answer to "which venv is live", so fall back to it — but only for the checkout it was loaded from. A foreign root (test temp dir, another clone) still resolves to ``None``: handing it someone else's venv would point the callers' writes at the wrong environment. c3PK|]}|z js|z ywr)r)rrrAs rrz#project_venv_dir..s$OD1H;L;L;ND1HOs& &)venvz.venvN) rrr6prefix__file__rfr base_prefixvenv_python_pathr) project_rootin_treerunningrAs @rproject_venv_dirrs$  DO&7OQUVG3::G X ''4<<>9 coo- )113 rcLt||}||jdk(rdz Sdz S)zAPath to the Python interpreter inside *venv_dir* (may not exist).rrz python.exepython)rr)rrbin_dirs rrrs,8W5G glli&?l NNX NNr> clicronrtoolsutilsgatewaypluginstoolsets providers run_agent acp_adapter model_tools tui_gatewayrc|rt|jddnd}t|xr|tvxs|j dS)zbTrue when *name* ships with Hermes (exact first segment; ``startswith`` would claim ``agentops``).rrr1hermes_)rrrFIRST_PARTY_MODULE_ROOTSr)rrAs ris_first_party_moduler-s@&*3t9??3  "D : Z4#;;Yty?YZrexcczt|tr&t|tstt |ddsgSgdS)zORecovery guidance lines when *exc* looks like a half-updated tree, else ``[]``.rN)r1z`This looks like a partially-updated install: one module was refreshed and a related one was not.z>Re-run the update to bring the whole tree to the same version:z hermes updatezDIf that also fails, reinstall: https://hermes-agent.nousresearch.com)rb ImportErrorModuleNotFoundErrorrr)rs rpartial_update_hintr3s8 sK (Js? r)rNr)r1)F)__doc__rSr)rCrNrr6collections.abcr contextvarsrrpathlibrhermes_platform.host.runtimerrr r r r__annotations__objectrr rrtuplerrr"r'r-r=rHr]rarbrrnrrr`r;rxryrrrrrrrrrcompile PROFILE_ID_RErrrrrrrrrrrrr$rrrrrrrrr8r$rBrrrfrryrr rrrr'r)r+bytesr5r\rersr|rrrrrrrrrrrrrrrrrrrrrrPrOSCRATCH_MAX_IDLE_HOURSr<r@r?rrrrrrrrr"r*r/r6floatr=r5rMrrUrcrerrrrrrrrrrrPARTIAL_STREAM_STUB_IDFINISH_REASON_LENGTHOPENROUTER_BASE_URLOPENROUTER_MODELS_URLrrAI_GATEWAY_BASE_URLrrrrr BaseExceptionrrrqrrrsw   *)[[!&$& 2<=T^d2ez#,/e%M%S/L((,3:#4,,'e'' J#*J >c>d> #4#4$;&8%%#%c3h$#*t+s4 TT+44R*S3S=A9@*#:4D, S4Z D4K  d T 1cDj4KK$K?3:?$?h 89 rS4ZrDrcDjT,ed ete5S4Z5D5 GcDjGTG t  #*j3jjcjdjOTD[ODO K4$;K$K ED4KE4E LP R Rs RTD[ RTX Ret etDze )1NYcekXl W3W49W c $+ 49sTz47G1H T#Y 9C9D9   /I4 PQ$h//1889DuLObb X&&(// =c=d= /S4Z/D/N4$;N$N # d3i D  '4$;'$'T',# C#%$,$$$3$4$;$ND$4$;B(\TD[(\D4K(\V"c"s"""$LsTzL$$*dTkT&  t  # #*  1# 1#* 1tCH~4S#XAtAA&4D2 dTk S ?c? D T *%#*%%ADcNT1AS4ZAld l#*ll@$sCx.@s@S@#@ (DcNT$9(T#Y("tCH~,.#,YXa$f6X^`T#s(^d2cDj4 >#s(#;  *1-$"&  C ", $VZ$89""=>S4Z$.#*. T :sTz3:'=!>:(  @D3:+<DT#*t+dd4.2KaWtd{W5WfiW#T#d#"TD[C~c3h7D6XdTk6"S"T#Y"J c dTk dUYk F c 4$; 4 $+c4$;4fcfcDjf FFd F s s -- (( &d& ++$+4/4./w7/8*/Ys^ ccDj086: >td{ >d > dTk@:>O4$;O$O%& [d [t[ ] tCy  :>-$r