߲j:UdZddlZddlZddlZddlZddlZddlmZddlm Z ddl m Z m Z ejdZedefdZd d d d d ddddddd Zeeefed<dededzfdZiej-dddiej-dddiej-dddidd id!d"d#d$d%dd&id'Zeeeeeffed(<d)Zd*edededzfd+Zd*ed,ed-edeeeeffd.Zdefd/Zd,edefd0Zd*ed1ed,ede efd2Zde eee ffd3Z!de efd4Z"d*ed5ed6e d-ed7ed8e ed9e ed:ed;e edZ#y)?a7Foreground result post-processing for the terminal tool (cwd dual-write, sudo handling, transform hook, truncation, ANSI strip, redaction, exit-code notes/hints, spill redaction, verification evidence) + exit-code tables. Lazy ``tools.terminal_tool`` lookups keep the origin's monkeypatch points authoritative. N)contextmanager)Path)AnyOptionalztools.terminal_toollabelc#dK dy#t$rtjd|dYywxYww)z>Best-effort block: swallow any exception, logging it at DEBUG.Nz %s failedTexc_info) Exceptionloggerdebug)rs ?/home/ubuntu/.hermes/hermes-agent/tools/terminal_tool_result.py_quietrs.8 8 [%$ 78s0 0!-0-0zSIGQUIT (quit from keyboard)uESIGILL (illegal instruction — corrupt binary or wrong architecture)uJSIGABRT (abort — assertion failure, fatal runtime error, or glibc abort)u;SIGBUS (bus error — misaligned or unmapped memory access)z>SIGFPE (fatal arithmetic error, e.g. integer division by zero)uTSIGKILL — often the kernel OOM killer on memory exhaustion, or an explicit kill -9u4SIGSEGV (segmentation fault — the program crashed)uNSIGPIPE (wrote to a closed pipe — e.g. output piped to a reader that exited)uFSIGTERM (terminated — kill/timeout or shutdown requested it to stop)z!SIGXCPU (CPU time limit exceeded)z"SIGXFSZ (file size limit exceeded))  _SIGNAL_EXIT_NOTES exit_codereturnc2|dkrQ| }|dk(rytj|x}rd|d|S tj|j}d|d|d S|d kDr(tj|d z x}rd |d |d z d|Sy#t $rd|}YGwxYw) zNote for a signal-termination exit code, or None. Negative codes are definite (subprocess semantics); 128+signum is the shell convention and a program *can* exit 139 itself, so those notes hedge with "usually".rNzCommand terminated by signal z: zsignal zCommand terminated by z (signal )z Exit code z4 usually means the command was terminated by signal )rgetsignalSignalsname ValueError)rsignumnoter%s r_interpret_signal_exitr)/s1} Q;%))&1 14 126("TFC C &>>&)..D(vYvha@@3$6$:$:9s?$KKDKYK(((1C'84&B C   &VH%D &sBBB)grepegrepfgreprgagackzNo matches found (not an error))diff colordiffz%Files differ (expected, not an error))test[z5Condition evaluated to false (expected, not an error)zGSome directories were inaccessible (partial results may still be valid)zCould not resolve hostzFailed to connect to hostz2HTTP response code indicated error (e.g. 404, 500)zOperation timed out)rruLNon-zero exit (often normal — e.g. 'git diff' returns 1 when files differ))findcurlgit_EXIT_CODE_SEMANTICSu;The execution environment was recreated while running this command (the previous container/sandbox was gone). Persistent files were restored where the backend supports it, but background processes and any files outside persisted paths from earlier commands may be lost — verify state before relying on prior work.commandc|dk(ryt|x}|Stjd|}|r|dn|j}t d|jDd}t j |ij |S)zNote for a non-zero exit code that is informational rather than an error (grep=1 "no matches", diff=1 "files differ", signal deaths), so the model doesn't burn turns investigating it. None when 0 or a real error.rNz\s*(?:\|\||&&|[|;])\s*c3nK|]-}d|vs|jdr|jdd/yw)=-/r=N) startswithsplit).0ws r z'_interpret_exit_code..os6;!1  S(9WWS\"%;s35)r)rerCstripnextr:r")r;r signal_notesegments last_segmentbase_cmds r_interpret_exit_coderO\sA~-i88 Exx17;H$,HRL'@@BL;|/A/A/C;<>@H  # #Hb 1 5 5i @@outputenv_typecddlm}ddlm}m}m}m}ddlm}|||}||} |||} | xr&|jduxs|dxr| } | r|dz }|| | fS)z>Sudo failure handling -> (output, auth_failed, cache_cleared).rN)_handle_sudo_failure_in_delegated_child_context'_invalidate_cached_sudo_on_auth_failure_sudo_wrong_password_failure)env_var_enabledHERMES_INTERACTIVEuu ⚠️ Sudo authentication failed — cached password cleared. You will be prompted again on the next sudo command.) tools.terminal_tool terminal_tooltools.terminal_tool_sudorTrUrVrWutilsrX_get_sudo_password_callback) r;rQrRttrTrUrVrWrX auth_failed cache_cleared can_reprompts r_sudo_annotationsrcts$& !&( 3F.v6K;GVLM , &&(4]H\8],)+ +S T ; --rPc td5ddlm}ddlm}|d||||xsd||j }t d|D|}d d d |S#1swY|SxYw) zPlugin output-transform seam (fail-open; first string result wins). Replacements are still subject to the output limit applied afterwards.ztransform_terminal_output hookr) invoke_hook)_approval_tool_call_idtransform_terminal_outputrG)r;rQ returncodetask_idrR tool_call_idc3BK|]}t|ts|yw)N) isinstancestr)rDrs rrFz/_apply_output_transform_hook..s@QZ3-?q@sN)rhermes_cli.lifecycleretools.approval_contextrfr"rJ)r;rQrhrirRrerfresultss r_apply_output_transform_hookrrsu 0 1J4A97SY)3W]U]+A+E+E+GI@'@&IJ MJ Ms AAA!c6ddlm}ddlm}|||S)Nr) get_max_bytes)truncate_head_tail)tools.tool_output_limitsrttools.tool_output_truncateru)rQrtrus r_truncate_head_tailrxs6= fmo 66rPrhctd5ddlm}|dk(r|j||cdddS|s|j |||cdddS dddy#1swYyxYw)zRecovery hints for well-known failure shapes (tools/terminal_hints.py); on rc=0, warn when a pipeline tail / `|| echo` may mask an upstream failure and the output carries strong failure indicators (advisory only).z failure hintr)terminal_hintsN)rtoolsrzannotate_masked_successannotate_failure)r;rhrQ exit_noterzs r _failure_hintrsw  P( ?!99'6JPP!227JO PP P  P sAAA$c|sgS ddlm}ddlm}ddlm}t |jdd}|t |||||ddd d|dd|d}d|fd|fd|fgS#t$rVtjd d td 5t |jd d d n #1swYnxYwgcYSwxYw)zSpill handle so the model can read the omitted middle instead of re-running. The collector wrote it raw; redact it with the same pass so no secret persists unmasked on disk. On failure drop the handle (and file).rredact_terminal_output strip_ansi)write_text_exclusivezutf-8replace)encodingerrorsT)private overwriterz-spill redaction failed; dropping spill handler z spill unlinkNzCOutput exceeded the capture window (head+tail shown). Full output (,z chars) saved to u] — search it with search_files or page it with read_file instead of re-running the command.output_total_charsfull_output_pathtruncation_note) agent.redactrtools.ansi_striprtools.spill_safetyrr read_textr r r runlink)path total_charsr;rrr raw_spillr(s r_redact_spill_filers   7/;J((')(L  T$Z)? 9@UW^)_%)T) M '?*;D6BX XD"; /2Dd1KN_aeMf gg  Dt T N # J       s*AA,,+C B:1 C :C ? C  C ctd5ddlm}||||||}|r)dDcic]}||j|c}cdddS dddycc}w#1swYyxYw)Nzverification evidence recordingr)record_terminal_result)r;cwd session_idrrQ)statuskindscopecanonical_command)ragent.verification_evidencerr")r;rrrhrQrevidenceks r_verification_evidencersv 1 2bF)'sz4>vO 0`a1Ax||A&a bb  b b b sAAAAA#resultenveffective_task_idrir session_keyworkdir command_cwd approval_notec ddlm} d} |xsijdr$|xsijdxs t|dd} |s | r | || |jdd} |jdd}t || |\} }}t || |||} t | } dd lm}dd l m }|| } | r|| j|nd} t||}t||| |}d}td 5| r^| r\tj j#t%| tj j#t%| k7r t%| }ddd| r|d k(rd | vr| j'ddz} | |dd}d|fd|jdrt(ndfgt+|jd|jd|dt-|| |xs |xs|xsd|| fd| xsdfd|xsdfd|xsdfd|rdndfd|rdndf}|D] \}}| |||<t/j0|dS#1swYxYw)zETurn a raw ``env.execute`` result into the tool's JSON result string.r)record_session_cwdN cwd_observedrrQrGrhrrzcwd comparisonz[Command interrupted].z, then interrupted.)rQrerrorenvironment_recreatedrrverification_evidencedefaultapprovalexit_code_meaninghintsudo_auth_failedTsudo_cache_clearedF) ensure_ascii)rZrr"getattrrcrrrxrrrrrIrOrrosrrealpathrmrstrip_ENV_RECREATED_NOTErrjsondumps)r;rrrRrrirrrrrr observed_cwdrQrhrrrrr~ failure_hint changed_cwd result_dictoptional_fieldskeyvalues rfinalize_foreground_resultrs 7L ".) "))%0MGC4M |; 5 ZZ" %FL!,J3DWfV^3_0F 0 )'6:GXZb cF  (F4+  F AG #FLLNG rs   %   0 18#88 'OTEH^>XP+, &DcN ccDj,3 mmAAGhCij3 mm)A/V+WX3 mmMA'^#_`3Y Z(-HEK` b ] ^3d3S#X./$A#A#A#*A0.s.C.3.5dTXCY.( TW 777 3 C  HUXM hd5c?6Kh4HUYNG7G7!G7(+G77:G7ORG7 c]G7(0 G7DGG7c]G7*2#G7HPPS}G7 G7rP