+ iHjRt^RIt^RIt^RIt^RIt^RIHt^RIHt^RI H t H t ]P!] 4t]P!R4t]P!R4tRtRR ltR R ltR R ltRRltRRltRRRlltR#)zmShared SKILL.md preprocessing helpers: ``${HERMES_*}`` template tokens and inline ``!`cmd``` shell expansion.N)Path)elide) IS_WINDOWSwindows_hide_flagsz*\$\{(HERMES_SKILL_DIR|HERMES_SESSION_ID)\}z !`([^`\n]+)`ic$V^8dQhR\/#)return)dict)formats">/home/ubuntu/.hermes/hermes-agent/agent/skill_preprocessing.py __annotate__r s  D c^RIHpV!4;'g/PR4p\V\4'dV#/# \ d\ PRRR7/#i;i)z9Load the ``skills`` section of config.yaml (best-effort).)load_config_readonlyskillszCould not read skills configTexc_info)hermes_cli.configrget isinstancer Exceptionloggerdebug)r skills_cfgs r load_skills_configrsnD:*,2277A j$ ' '  ( I D 3d C IDsA)A"A)(A)cdV^8dQhR\R\R,R\R,R\/#)rcontent skill_dirN session_idr)strr)r s"r r r $s8WWcWdTkWsUYzW^aWr caV'gV#RV'd \V4MRRV'd \V4MR/o\PV3RlV4#)zYReplace ${HERMES_SKILL_DIR} / ${HERMES_SESSION_ID}; tokens without a value stay in place.HERMES_SKILL_DIRNHERMES_SESSION_IDcf<SVP^4,;'gVP^4#))group)mvaluess&r *substitute_template_vars..,s%F1771:,>,L,L!''!*,Lr )r_SKILL_TEMPLATE_REsub)rrrr's&&&@r substitute_template_varsr,$sB iC NT S_F  ! !"Lg VVr cVV^8dQhR\R\R,R\R\/#)rcommandcwdNtimeoutrrrint)r s"r r r /s,'3'3c'3t '3c'3c'3r c\\'d R\4/M/p^RIHpRp\'d^RIHpV!4p\ P!VRV.3RV'd \V4MRRR R R R R R RR\^\V44RRR\ PRV!4/ VBpTP";'gRP%R4;'g&TP&;'gRP%R4p TP(^8wdT 'gRTP( RT R2#\+T \,4# \ Pd RT RT R2u#\dR#\dEp\T\ 4'dR\T49dRT RT R2uRp?#RT R2uRp?#Rp?ii;i)zRun one inline-shell snippet and return its stdout (trimmed; stderr when stdout is empty). Failures return an ``[inline-shell ...]`` marker instead of raising, so one bad snippet can't wreck the whole skill message. creationflags)delegated_child_subprocess_envbash) _find_bashz-cr/Ncapture_outputTtextencodingzutf-8errorsreplacer0checkFstdinenvz[inline-shell timeout after zs: ]z$[inline-shell error: bash not found]z"live-system guard: blocked os.killz[inline-shell error:  z[inline-shell exit z with no output: )rragent.delegation_contextr5tools.environments.localr7 subprocessrunrmaxr2DEVNULLTimeoutExpiredFileNotFoundErrorrr RuntimeErrorstdoutrstripstderr returncoder_INLINE_SHELL_MAX_OUTPUT) r.r/r0 _popen_kwargsr5r6r7 completedexcoutputs &&& r run_inline_shellrU/s@Jz_&8&:;rMG. : <.__annotate__]s"HHHSHr cp<VP^4P4pV'd\VSS4#R#)r$rA)r%striprU)rYcmdrr0s& r _replace%expand_inline_shell.._replace]s0kk!n""$V^8dQhR\R,R\/#)rrNr)rbool)r s"r r r cs((td{(t(r cVfR#^RIHp^RIHpVP 4pV!4P P 4V!4P 4/pVP FjpVPR8XgKVR, R, P4'gK<VPVR, R, P 4V4Kl VP4EFwreVPV4'dVP4'gK5\P!VPRR74R ,pVP4Uu.uFp\!V\"4'gKVNK p pT Fxp \3T P5R 4;'gR4p T P5R4R8XgK?T 'gKITPY[, P 44'gKvR # EK R#uupi \$\&\(\*\,3d\.P1R TR R 7R #i;i \6d\.P1RR R 7R #i;i)unWhether *skill_dir* is a hub-installed skill the scan gate classifies as community trust. The hub's INSTALL_POLICY blocks a community install on a caution/dangerous verdict — but ``--force`` (or a pre-scanner install) puts that skill on disk anyway, and the inline-shell DSL scans as high severity, so auto-executing it on view would re-arm exactly what the gate refused (#63307). Provenance is the hub lock entry (trusted/builtin entries expand; anything without one — bundled-synced, user-created, project/external — keeps the flag's contract). It covers every SKILL.md nested inside a community install and is read from the lock that owns the skills tree the dir lives in, not only the active profile's (``external_dirs`` can expose another profile's installs). A lock that exists but cannot be read fails closed for skills in its tree; no lock means no hub installs. F) HubLockFile) _skills_dirrz.hubz lock.jsonz utf-8-sig)r: installedz;Unreadable hub lock %s; inline shell stays off for its treeTr install_pathrA trust_level communityz?Could not resolve hub provenance for inline-shell trust scoping)tools.skills_hubrgtools.skills_toolrhresolvepathparentsnameis_file setdefaultitemsis_relative_tojsonloads read_textr'rr OSError ValueErrorKeyError TypeErrorAttributeErrorrrrrr) rrgrhtargetlocksroot lock_pathrieentriesentryrels & r _is_community_hub_skillrcs01""$##++-{}/D/D/FGNNDyyH$$-+*E)N)N)P)P  $-+"=!F!F!H$O# %{{}OI))$//I4E4E4G4G  JJy':':K':'PQR]^ &/&6&6&8P&8Jq$III"I,+I,c ~V^8dQhR\R\R,R\R,R\R,R\/#)rrrNrrr)rrr )r s"r r r sF d{d t   r c VV'gV#\V\4'dTM \4pVPRR4'd \ WV4pVPRR4'dA\ V4'g0\ Y\VPR^ 4;'g^ 44pV#)zBApply configured SKILL.md template and inline-shell preprocessing. template_varsT inline_shellFinline_shell_timeout)rr rrr,rrcr2)rrrrcfgs&&&& r preprocess_skill_contentrs ":t44*:L:NC ww%%*7zJ ww~u%%.Ei.P.P%g#cggF\^`>a>g>geg:hi Nr )NN)__doc__rwloggingrZrEpathlibragent.compression_markerrhermes_cli._subprocess_compatrr getLogger__name__rcompiler*rbrPrr,rUrcrrr r rs~&  *H   8 $ZZ MN::o. W'3T3(Vr