߲j):dZddlZddlZddlmZdZej dZdZdZ de d e fd Z d e d e fd Z dd e dee d e fdZ de de de dee de d e f dZdee d eee ee ffdZde de de de dee dede d e fdZde d e d ee dze fdzfdZy)a"Bash session-snapshot scripting for ``tools.environments.base``. Pure string builders: the CWD marker, the ``export -p`` dump that strips per-session vars, the ``init_session`` bootstrap, and the per-command wrapper. No module state lives here; ``BaseEnvironment`` supplies quoting hooks. N)Iterablez^declare -x (HERMES_SESSION_|HERMES_UI_SESSION_ID|HERMES_CRON_AUTO_DELIVER_|HERMES_CRON_SESSION|HERMES_BROWSER_CONTROL_|HERMES_DELEGATED_CHILD_CONTEXT)z^[A-Za-z_][A-Za-z0-9_]*$z.tmp.XXXXXXXXXXz"$__hermes_snap_tmp" session_idreturncd|dS)N __HERMES_CWD___)rs H/home/ubuntu/.hermes/hermes-agent/tools/environments/base_session_env.py _cwd_markerr 's :,b ))markercd|d|dS)zEmit the CWD marker on its own line (leading ``\n`` guards against a command whose output lacks a trailing newline; ``_split_cwd_marker`` strips it).z printf '\nz%sz\n' "$(pwd -P)"r )r s r _cwd_marker_printfr+s6(*< ==r tmp_pathexcluded_namesc|Dchc]}t|ts|s|}}djdt|D}d|d|Scc}w)uShell snippet dumping ``export -p`` to *tmp_path* minus the per-session bridged vars (see ``_SNAPSHOT_EXCLUDED_ENV_REGEX``) and *excluded_names*. The vars are ``unset`` in a subshell BEFORE ``export -p``: a line-based ``grep -vE`` is unsafe because bash 3.2 prints a value containing a newline as a multi-line ``declare -x`` block, so smuggled continuation lines would survive into the snapshot and execute on the next ``source``. ``|| true`` keeps the success contract. The dump is a brace group with the redirection on the group: *tmp_path* is usually a shell-variable expansion, and a redirect on a pipeline segment would expand it inside that segment's subshell, inconsistently with the parent that expands the follow-up ``mv``. ``curl … | bash #`` smuggled into a Matrix room/display name via ``HERMES_SESSION_CHAT_NAME``) land in the snapshot and execute on the next ``source`` (issue #71296). Unsetting first means ``export -p`` never emits those vars — including any continuation lines. c3LK|]}dtj|yw) N)shlexquote).0names r z6_export_dump_excluding_session_vars..Cs!QdAekk$/01Qs"$z{ ( unset ${!HERMES_SESSION_*} ${!HERMES_CRON_AUTO_DELIVER_*} ${!HERMES_BROWSER_CONTROL_*} AI_AGENT HERMES_AGENT HERMES_DELEGATED_CHILD_CONTEXT HERMES_CRON_SESSION HERMES_UI_SESSION_IDz( 2>/dev/null; export -p; ) || true; } > ) isinstancestrjoinsorted)rrr safe_names extra_unsets r #_export_dump_excluding_session_varsr!1sa"$2T4Zc5Jt$TJT''QfZ>PQQK  +m, J  UsA A A  quoted_cwd quoted_snapsnap_tmp_template cwd_markercd|dtt|dtdtdtdtdtdtd |d td |d t|d S)aLogin-shell bootstrap that captures env/functions/aliases into the snapshot. Atomic publish: assemble in a ``mktemp`` file, then ``mv`` over the final path so a concurrent ``source`` never reads a half-written snapshot (``$$`` is the parent PID in ``&``-launched subshells and macOS bash 3.2 lacks ``$BASHPID``, so only ``mktemp`` is portable). Functions are filtered by NAME via ``declare -F`` (a line-based ``declare -f | grep -v`` strips the header and leaves an orphaned body that breaks every sourced command); the non-empty guard matters because bare ``declare -f`` dumps ALL functions. The trailing ``cd`` restores the configured cwd after profile scripts (e.g. ``cd ~``) so ``pwd -P`` reports terminal.cwd, not the profile's directory.z%umask 077 __hermes_snap_tmp=$(mktemp z ) || exit 1 z __hermes_fns=$(declare -F | awk '{print $3}' | grep -vE '^_[^_]') || true [ -n "$__hermes_fns" ] && declare -f $__hermes_fns >> z! 2>/dev/null || true alias -p >> z# echo 'shopt -s expand_aliases' >> z echo 'set +e' >> z echo 'set +u' >> z mv -f rz || rm -f z builtin cd -- z 2>/dev/null || true  )r! _SNAP_TMPr)r"r#r$rr%s r _snapshot_bootstrap_scriptr)Ts &&7%8 .y. I JKCCL+N k"--6K8%;'%;' 1[MI;?# $: j ) *" . /r namesc g}g}|D]>}d|}|d|d}}||d|d|d|dgz }|d|d|d |d |d d |d |gz }@||fS)uShell lines that save profile-scoped passthrough vars before the snapshot is sourced and restore (or unset) them afterwards — a shared snapshot may hold the previous profile's value. Values stay in environment memory and never enter the command string._HERMES_RUNTIME_PASSTHROUGH__PRESENT_VALUEz=${z+x}z-}zif [ "$z" = x ]; then export z="$z"; else unset z; fizunset rr )r*saverestorerr presentvalues r _passthrough_save_restorer3osDG(/v6"88,.? G9Dd+wd4&-DEEgY3D6UG>RVQWW[ \WIQug &( ( ( =r commandpassthrough_namessnapshot_readyc j|jdd}t|\}} t|} |r| jd|d| | z } | ddd|dd |dd d gz } |r7| jd |d t t |dt d|dt d | t |dgz } dj| S)aPer-command bash script: source snapshot, cd, run, re-dump env, emit CWD marker. ``source`` stdout goes to /dev/null because macOS bash 3.2 / some Homebrew builds echo ``declare -x`` lines when sourcing. AI_AGENT/HERMES_AGENT advertise the harness to remote backends (whose env is not inherited); ``${VAR:-default}`` never clobbers an outer harness. GIT_PAGER/PAGER=cat stop pager-happy tools hanging a PTY-backed command. The env re-dump uses the same mktemp+mv atomic publish as the bootstrap and chains ``mv`` on the dump succeeding so a failed dump never replaces a good snapshot. ``umask 077`` is applied after the user's command so snapshot files (which may carry secrets) are private without changing the command's umask. 'z'\''zsource z >/dev/null 2>&1 || truezPexport AI_AGENT="${AI_AGENT:-hermes-agent}" HERMES_AGENT="${HERMES_AGENT:-true}"z:export GIT_PAGER="${GIT_PAGER:-cat}" PAGER="${PAGER:-cat}"zbuiltin cd -- z || exit 126zeval 'z__hermes_ec=$?z umask 077z__hermes_snap_tmp=$(mktemp z) && { z && mv -f rz; } 2>/dev/null || rm -f z 2>/dev/null || truezexit $__hermes_ecr')replacer3listappendr!r(rr) r4r"r#r$r5r6r%escapedr/r0partss r _wrap_command_scriptr>sooc7+G-.?@MD' JE w{m+CDE WE ZD  L1  E )*;)<=5iARSTU!{!K=1$$-;.B D E   ,.A BBE 99U r outputc|j|}|dk(rytd|dz }|j|||}|dk(s||k(ry||t|z|jxsd}|jdd|}|dk(r|}|j d|t|z}|dk7r|dzn t|}||d|||dzfS)aLocate the last ``markermarker`` pair in *output*. Returns ``(cwd_path_or_None, output_without_marker_line)``, or ``None`` when no complete pair exists. The stripped span runs from the ``\n`` the wrapper injected before the marker through the end of the marker line.Nrir')rfindmaxlenstripfind)r?r last search_startfirstcwd_path line_startline_ends r _split_cwd_markerrNs << D rzq$+&L LLt 4E {etmec&k)D1779ATHdAu-JR {{4F !34H'2~x!|3v;H VKZ(6()+<< <rNr r r rXsb (R RZZ ;<% " *C*C*>s>s> # xPS} ^a F//%(/=@/RZ[^R_/mp//6 Xc] uT#YS =Q7R  " "!$"36"KN"}"6:"HK"PS"J=c=3=5tS3ID3P=r