߲jM U d Z ddlZddlZddlZddlZddlZddlZddlm Z m
Z
m Z ddl m
Z ddlmZ ddlmZ ddlmZ ddlmZ dd lm Z dd
l m Z dd l m!Z! dd l"m#Z#m$Z$m%Z%m&Z& ejN d
Z(da)e e* e+d< de*de,fdZ-de e* ddfdZ.de e* fdZ/dZ0dZ1dZ2dZ3dZ4dddd d d d g fd d!g fd"i fd#d$g fd%d&d'd(d)d*fZ5d+d g fd,d-d!g fd.d"i fd/d0d1d$g fd2d3d4d5f Z6d6e
e*e f de7fd7Z8d6e
e*e f de7fd8Z9d9e
e*e f de7fd:Z:d;e*de,fd<Z;d=eZ=d?e
e*e f de>e*e*f fd@Z?dA Z@dB ZAdC ZBdD dEdF fdG dEdH fdI dJdK fdLZCdM ZD ej eDdN ZF ej eDdO ZG ej eDdP ZHdJdQdRZIdS ZJe@eAeFeBeGeHeIdTZK dudUe*dVe*dWe*dXeLdYe7dZe7d[e7d\e*d]e e* d^e,fd_ZMd6e
e*e f de,fd`ZNd6e
e*e f de e, fdaZOd6e
e*e f de,fdbZPd6e
e*e f de,fdcZQi ddde dfdgfidddh didfidjePieOdkdldjeNidmeQidnZRe
e*e
e*e f f e+do< dpdqdrZSdUe*d6e
e*e f de,fdsZTd6e
e*e f de,fdtZUeRD ci c] } | ej eT| c} ZVeVdP ZWyc c} w )va Execution-environment backends for the terminal tool: per-backend builders, config-to-kwargs
shapers, and requirement checkers, routed by dispatch/spec tables. Split out of ``tools/terminal_tool.py``;
the terminal tool imports the builders/checkers it uses from here. N)AnyDictOptional)DockerEnvironment)LocalEnvironment)ManagedModalEnvironment)ModalEnvironment)SingularityEnvironment)SSHEnvironment) is_managed_tool_gateway_ready)_get_plugin_env_provider) has_direct_modal_credentialsmanaged_nous_tools_enabled%nous_tool_gateway_unavailable_messageresolve_modal_backend_stateztools.terminal_tool_last_unavailable_reasonreasonreturnc 2 | a t j | y)zWLog *reason*, remember it for the user-facing notice, and return False for the checker.F)r loggererrorr s A/home/ubuntu/.hermes/hermes-agent/tools/terminal_tool_backends.py_rejectr ! s &
LL c | a y)z^Store (or clear) the last failure reason without logging; used by check_terminal_requirements.Nr r s r _record_unavailable_reasonr ) s
& r c t S )zUWhy the last terminal requirements check failed, in plain words; None when it passed.r r r #terminal_backend_unavailable_reasonr! / s ##r z/vercel/sandbox)node24node22z
python3.13z?local, docker, singularity, modal, daytona, vercel_sandbox, ssh))hostssh_host )userssh_userr& )portssh_port )keyssh_keyr& )
persistentssh_persistentF))cpu
container_cpu )memorycontainer_memory )diskcontainer_disk )persistent_filesystemcontainer_persistentT)r1 r2 )r4 r5 )r7 r8 )r: T)
modal_modeauto)vercel_runtimer& docker_volumes) docker_mount_cwd_to_workspaceFdocker_forward_env
docker_env)docker_run_as_host_userFdocker_extra_args)docker_shm_size1g)docker_networkT) docker_persist_across_processesT)docker_shared_container_keyr& )docker_orphan_reaperT)docker_snap_compatFvolumes)auto_mount_cwdr? F forward_envenv)run_as_host_userrB F)networkrF T
extra_args)persist_across_processesrG T)shared_container_keyrH r& )shm_sizerD rE ) snap_compatrJ Fconfigc
j t D ci c] \ }}}|| j || c}}}S c c}}}w )zZ``ssh_config`` for :func:`_create_environment` (shared with the lazy ``ensure_task_env``).) _SSH_KEYSget)rV outr, defaults r _ssh_config_from_configr\ P s0 CL M M.?c3CC) ) MM M .c b t D ci c] \ }}|| j || c}}S c c}}w )z```container_config`` for :func:`_create_environment` (shared with the lazy ``ensure_task_env``).)_CONTAINER_KEYSrY )rV kds r _container_config_from_configrb U s* ,; Z>\5RSZ5[ ] ]r modal_statec t d }| d s| d dk( r| d rd| dnd| }d| d | fS t }| d d
k( r d |rd nd
ddfS |rdnd}|rdnd}d| d| dd| dfS )z(log message, ValueError message) for a modal_state with no selected backend.
Single decision shared by the requirements checker and the env builder.zmanaged Modal executionmanaged_mode_blockedmodemanagedzgNous Tool Gateway access is not currently available and no direct Modal credentials/config were found. zH Choose TERMINAL_MODAL_MODE=direct/auto to use direct Modal credentials.z)the managed tool gateway is unavailable. z=Modal backend selected with TERMINAL_MODAL_MODE=managed, but z2Modal backend is configured for managed mode, but directzModal backend selected with TERMINAL_MODAL_MODE=direct, but no direct Modal credentials/config were found. Configure Modal or choose TERMINAL_MODAL_MODE=z managed/autor< .z_Modal backend is configured for direct mode, but no direct Modal credentials/config were found.z!or managed tool gateway was foundz was foundz , set up the managed gateway, orz orz>Modal backend selected but no direct Modal credentials/config z. Configure Modalz! choose a different TERMINAL_ENV.)r r )rq gatewaytailru foundfixs r _modal_unavailable_reasonr| i s 44MNG)*k&.AY.N 56 'y(pr>ghogpR @ 6w ?? AO
P
P,=Cgc266#w''
PF
P-2)*' DegW^iq D*4R.D Q s B >B B B c t | }dD ci c] }|| dkD s ||| }}|d dkD rB dd l} dt j | j j
j v r|d |d< t |j d }
|
d } | dvrt t |
d | d k( rt nt } | | ||||d
| S c c}w # t $ r Y lw xY w) N)r0 r3 r r6 ephemeral_diskr; selected_backend)ru rv r2 ru r9 )r r~ r modal_sandbox_kwargsr9 r )rf rm inspect signatureSandboxcreate
parameters Exceptionrp rY
ValueErrorr| _ManagedModalEnvironment_ModalEnvironment)
r r~ r rc r r resr` sandbox_kwargsrm rq selectedclss
r _build_modal_envr s
R.C):IAc!fqjaQiINI
6{Q 7#4#4U]]5I5I#J#U#UU36v; /0 +266,+?@K-.H,,2;?BCC&.)&;
"ARC UW>%()@%A7 T T J s
CCAC C C c t S ri )_SingularityEnvironmentr r r r s 3 r Tc i S ri r rc kws r r r s " r c @ t j d j S )Nztools.environments.daytona) importlib
import_moduleDaytonaEnvironmentr r r r r s //0LM`` r c " dt |d iS )Nr0 )intr s r r r s s2e9~ 6 r c @ t j d j S )Nz!tools.environments.vercel_sandbox)r r VercelSandboxEnvironmentr r r r r s y 6 67Z [ t t r Fc 0 d| j d xs d iS )Nrg r= )rY r s r r r s i@P9Q9YUY-Z r ) singularitydaytonavercel_sandboxc t | \ }}} t d|||dt | |rd|ini }
|
j | ||
| di |
S )N)r~ r r r r )
_SANDBOX_ROWSdictrf update) env_typer r~ r rc r r r
with_imageextrar s r _build_sandbox_envr sg *8 4CU
>c7G >z"~ >)3gu%>F
MM%F#$ 35?6?r r r r )
probe_onlyc |r"|j d r|j d s t d t |d |d |j dd |j dd | || S ) Nr$ r' z?SSH environment requires ssh_host and ssh_user to be configuredr) r+ r, r& )r$ r' r) key_pathr~ r r )rY r _SSHEnvironment)r~ r
ssh_configr r s r _build_ssh_envr sl Z^^F 3:>>&;QZ[[
6 2F9KR\R`R`agikRl$.NN5"$=3PWdn p pr c t | }|F|j ||||| } |j j j |_ |S ddlm} | }
dj d t j d t |
z D } t d| d| # t $ r Y |S w xY w# t $ r g }
Y ew xY w)N)r~ r r r container_configr )plugin_backend_names, c 3 ( K | ]
}d | d yw)'Nr ).0ns r z$_build_plugin_env.. s [1!Ah[s zUnknown environment type: z. Use )r
create_environmentnamestriplower_hermes_backend_namer agent.terminal_env_registryr r join_BUILTIN_BACKENDSsplitlistr ) r r r~ r rc r r providerenv_objr plugin_namesknowns r _build_plugin_envr s '1H--#wPW_d?A . C +3==+>+>+@+F+F+HG ( D+-
II[(9(?(?(E\HZ(Z[ [E
1(6%I
JJ s# -B*
B: * B76B7: CC)localdockerr rm r r sshr r r~ r r r local_configr r r c
t j | }
t ||||xs i |||| } |
|
di | } n
t dd| i| } | | _ | S # t
$ r Y | S w xY w)a Create an execution environment (instance with ``execute()``) for *env_type*. ``image`` is ignored
for local/ssh/vercel; ``container_config`` carries the container_*/docker_* resource keys; ``host_cwd`` is
the host dir bound into Docker when cwd mounting is enabled. ``probe_only`` asks ssh for a throwaway
connection with no remote setup/sync (the prompt-time probe). Unknown types fall through to plugin backends.)r r~ r rc r r r r r r )
_ENV_BUILDERSrY r r r r )
r r r~ r r r r r r r builderr rN s
r _create_environmentr s )G
3 disk -> SDK -> auth (OIDC token, else the full TOKEN/PROJECT_ID/TEAM_ID tuple).r= r& r7 r8 zVercel Sandbox runtime z: is not supported. Set TERMINAL_VERCEL_RUNTIME to one of: r rw > r r8 z?Vercel Sandbox does not support custom TERMINAL_CONTAINER_DISK=z,. Use the default shared setting (51200 MB).vercelzNvercel is required for the Vercel Sandbox terminal backend: pip install vercelr
get_secretVERCEL_OIDC_TOKENT) VERCEL_TOKENVERCEL_PROJECT_IDVERCEL_TEAM_IDzkselected with token auth, but VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID must all be set together.zselected but no supported auth configuration was found. Set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID for normal use.zVercel Sandbox backend zC VERCEL_OIDC_TOKEN is supported for one-off local development only.)rY r rk r r rj r util find_specagent.secret_scoper boolallany)rV rg r6 r r` presentheads r
_check_vercelr s zz*+1r88:G ::& .D ' 00 ;u ))$>?@C D D : XY]X^ _D D E E~~ )1ghh-%&,cdqtJqM"dGd
7| "7|
1 ,TF2uv ww es 6C:c t | j d }|d dk( ry|d dk7 rt t | d S y )Nr; r ru Trv r )rp rY r r| )rV rq s r
_modal_prer ! sM *6::l+CDK%&)3%&(20=a@AA r c ^ | j d r| j d ryt d S )Nr% r( Tzthe SSH host and user are not configured (TERMINAL_SSH_HOST / TERMINAL_SSH_USER); run `hermes setup terminal` to enter them or pick the 'local' backend)rY r )rV s r _ssh_prer * s1
zz* &**Z"8 [ \ \r c . ddl m} ddlm} |d d uS )Nr )Daytonar DAYTONA_API_KEY)r r r r )rV r r s r
_daytona_postr 1 s - ' ( 44r binaryc H t j d j S )Nztools.environments.docker)r r find_dockerr r r r r 9 s )"9"9:U"V"b"b"d r versionuW Docker is not installed — no docker executable in PATH or the usual install locationsc Z t j d xs t j d S )N apptainerr )shutilwhichr r r r r ; s v||K'@'_FLLQ^D_ r z --versionpre)rm zFmodal is required for direct modal terminal backend: pip install modal)r modulepost)r r r r rm r r _BACKEND_SPECSz8Docker is installed but the Docker daemon is not runningzVApptainer/Singularity is installed but `--version` failed, so the install looks broken)r r c
t d t | }d|v r |d | nd }||S d|v r|d \ }}} | }|st |xs d| d S t j ||gddt j
}|j dk7 r(t t | d | d
| d |j d S yd
|v r6t j j |d
d t |d
d S d|v r |d | st d| d S y)Nr r the z# backend's executable was not foundT )capture_outputr stdinr z (` z` exited with code )r r2 r z& backend is missing its API key or SDK) r r r
subprocessrunDEVNULL
returncode_PROBE_FAILED_REASONSr r r ) r rV specverdictfinderarg missing_msg
executableprobes r _check_requirementsr J s> t$ ( #D%*d]kd5k&!G4#'> [X
;`D <_*`a a
C 0qXbXjXjk q 3H = >c* QseSfglgwgwfxxyz{ {4INN 4 4T(^A5F G OtH~a())
~ld6l6 2h\)OPQQ r c t d | d }t | }|-t |j | }|xs t d|d S t d| dt
d S )Nr r z5 plugin backend reported its requirements are not metzUnknown TERMINAL_ENV 'z'. Use one of: z!, or a plugin-registered backend.)r r
r check_requirementsr r )rV r r oks r _check_plugin_requirementsr! ` sq t$j!H'1H
(--f5
6fWtH
r< s F
& & M J ` J \ D D ?l l
0 1
+/ (3- .C D &x} & & $Xc] $
0 ? U
N n 46O"$: Od O
@# @$ @]$ ]4S> ] W4S> WeCHo W074T, 4T;LM`bf68t Z\
+**+=}M &Y&&'99E %I%%&8:JK