߲j  dZddlZddlZddlZddlZddlmZddlmZejdZ ee ejdde defd Zed fd e d e d ede fdZde fdZdZej&dZde defdZehdZehdzZde de fdZd#de de fdZde defdZde fdZde defd Zd$d e d e de fd!Zd e d e defd"Z y)%aTerminal backend configuration: scope-aware TERMINAL_* reads, env-var parsing, container-cwd sanity checks, plugin-backend classification, and the ``_quiet`` best-effort block shared by the terminal_tool_* modules. Split out of ``tools/terminal_tool.py``; every public/patched name is re-imported there, so ``tools.terminal_tool.`` keeps resolving (and monkeypatching) as before. N)contextmanager)Anyztools.terminal_tool)exclevellabelrc'`K dy#|$rtj||g|ddiYywxYww)zBest-effort block: swallow *exc*, log *label* (``%``-formatted with *args*) at *level* with the traceback. For janitor/advisory work that must never take the terminal tool down.Nexc_infoT)loggerlog)rrrargss ?/home/ubuntu/.hermes/hermes-agent/tools/terminal_tool_config.py_quietrs4 7 7 5%6$667s. .+.+.integernamedefault converter type_labelc |jdr t||ntj||} ||S#tt j f$rt d|d|d|dwxYw)zParse an env var with *converter*, raising a clear ValueError on bad values (e.g. TERMINAL_TIMEOUT=5m) instead of an opaque crash. TERMINAL_* names are read scope-aware via :func:`_tenv`. TERMINAL_zInvalid value for z: z (expected z1). Check ~/.hermes/.env or environment variables.) startswith_tenvosgetenv ValueErrorjsonJSONDecodeError)rrrrraws r _parse_env_varrs}#'//+">%g BIIdT[D\C ~ ,, -  b{:,G= >   s =/A,returnc tjS#ttf$r/t dxstj j dcYSwxYw)z``os.getcwd()`` tolerant of a deleted cwd (FileNotFoundError) or a macOS TCC-protected one without Full Disk Access (PermissionError); falls back to TERMINAL_CWD, then the home directory. TERMINAL_CWD~)rgetcwdFileNotFoundErrorPermissionErrorrpath expanduserr _safe_getcwdr*-sI@yy{  /@^$?(:(:3(??@s;AA)z/Users/z/home/z^[A-Za-z]:[\\/]r&cl|jtxsttj |S)N)r_HOST_CWD_PREFIXESbool_WINDOWS_DRIVE_REmatch)r&s r _is_host_cwdr0=s( ??- . U$7H7N7Nt7T2UUr)>modaldockerdaytona singularityvercel_sandbox>sshlocal managed_modalenv_typefn_namecp|r|tvr|S ddlm}t|||g|S#t$r|cYSwxYw)uCall ``agent.terminal_env_registry.(env_type, *args)`` for a plugin backend. Fail-soft: *default* for built-in/empty backends, when the registry is unavailable, or when the provider raises — a misbehaving plugin must never take the terminal tool down.rN)_BUILTIN_BACKENDSagent.terminal_env_registryterminal_env_registrygetattr Exception)r9r:rr regs r _plugin_registry_lookuprBDsI x#441$wsG$X555 s ' 55attrc t|d|||S)zJClassification flag of a plugin-registered backend (fail-soft, see above). provider_flagrB)r9rCrs r _plugin_env_flagrGSs "8_gtW UUr)c.|tvxs t|dS)zLTrue for built-in container backends and plugins declaring ``is_container``. is_container)_CONTAINER_BACKENDSrGr9s r _is_container_backendrLXs * * X.>x.XXr)ct|ddS)z>Return the registered plugin provider for *env_type*, or None. get_providerNrFrKs r _get_plugin_env_providerrO]s "8^T BBr)cwdcvt|xr-t|xs tjj | S)aTrue if *cwd* is a host or relative path that can't be a container workdir: ``docker run -w`` needs an absolute in-sandbox path, otherwise the container fails to start (exit 125). Windows drive paths aren't ``isabs`` on POSIX, so they're caught by the prefix check.)r-r0rr&isabs)rPs r _is_unusable_container_cwdrSbs- 9 F,s+E277==3E/EFr)c ddlm}|||S)a*Scope-aware read of a ``TERMINAL_*`` variable. Every terminal setting must go through this: under gateway multiplexing the active profile's config arrives via a per-turn scope, and a raw ``os.getenv`` would read whatever a previous turn pinned into the process env (cross-profile leak).r) terminal_env)tools.terminal_scoperU)rrrUs r rrjs 2 g &&r)c:t||jdvS)zGScope-aware boolean ``TERMINAL_*`` read: true/1/yes (case-insensitive).>1yestrue)rlower)rrs r _tenv_boolr\ts w  % % '+? ??r))F))!__doc__loggingrrre contextlibrtypingr getLoggerr r@DEBUGstrintrrr*r,compiler.r-r0 frozensetrJr<rBrGrLrOrSrr\r(r)r ris{ %   0 1"+'--7#7C77>AT]    s  s  c  @c@+BJJ12VsVtV _`'*KK c C VsV#V YCYDY CsC GCGDG''c'3'@S@3@4@r)