+ iHjRt^RIHt^RIt^RIt^RIt^RIt^RIHt^RI H t H t H t H t Ht^RIHt^RIHtHtHtHtHtHtHtHtHtHtHtHtHtHtH t H!t!^RI"H#t$^RI%H&t&H't'^R I(H)t)H*t*^R I+H,t,]PZ!].4t/]P`!R ]Pb4t2/]3PiRgR 4C]3PiRhR 4Ct5RRlt6RRlt7Rt8RRlt9RRlt:RRlt;RRltRR lt?R!R"lt@R#R$ltAR%R&ltBR'R(ltCR)R*ltDR+R,ltER-R.ltFR/R0ltGR1R2ltHR3R4ltIR5R6ltJR7R8ltKR9R:ltLR;R<ltMR=R>ltNR?R@ltORARBltPRCRDltQRERFltRRGRHltSRIRJltTRKRLltURMRNltVRORPltWRQRRltXRSRTltYRURVltZRWRXlt[RYRZlt\RiR[R\llt]RiR]R^llt^R_R`lt_RiRaRb/RcRdlllt`ReRflta.RjOtbR#)kaSystem-prompt assembly for :class:`AIAgent`. Built once per session and reused across turns (only context compression triggers a rebuild) so the upstream prefix cache stays warm. Three tiers are joined with ``\n\n``: ``stable`` (identity, guidance, env hints, coding brief, platform hints), ``context`` (workspace snapshot, caller ``system_message``, context files) and ``volatile`` (skills index, memory, USER.md, external memory provider, timestamp line). See ``references/system-prompt-invariant.md``. ) annotationsN)Path)AnyDictListOptionalTuple)owned_kanban_task)DEFAULT_AGENT_IDENTITYEXECUTION_GUIDANCE_MODELS!GOOGLE_MODEL_OPERATIONAL_GUIDANCEHERMES_AGENT_HELP_GUIDANCE$HERMES_AGENT_HELP_GUIDANCE_NO_SKILLSKANBAN_GUIDANCEPARALLEL_TOOL_CALL_GUIDANCEPLATFORM_HINTSSESSION_SEARCH_GUIDANCESKILLS_GUIDANCESTEER_CHANNEL_NOTETASK_COMPLETION_GUIDANCETELEGRAM_RICH_MESSAGES_HINTTOOL_USE_ENFORCEMENT_GUIDANCETOOL_USE_ENFORCEMENT_MODELSdrain_truncation_warnings)prompt_builder)resolve_agent_cwdresolve_context_cwd)get_default_hermes_rootget_hermes_home)is_truthy_valuezv^## Plugin Context: (?P[a-z0-9][a-z0-9._-]{0,127})\n\n\nTFc$V^8dQhRRRRRR/#)settingrmodel Optional[str]returnbool)formats"8/home/ubuntu/.hermes/hermes-agent/agent/system_prompt.py __annotate__r*)s! 9 9 9] 9t 9caVRJgVRJdV#\V\4'd5VP4\9d\VP4,#T;'gRP4o\V\4'd;\ ;QJdV3RlV4F 'gK R# R#!V3RlV44#\ ;QJdV3RlV4F 'gK R# R#!V3RlV44#)zResolve a config gate: True/"true"-ish -> on, False/"false"-ish -> off, list -> case-insensitive model-substring match, anything else ("auto") -> match against *default_models*.TFc3z<"TF0p\V\4'gKVP4S9xK2 R#5iN) isinstancestrlower.0p model_lowers& r) _model_gate..3s(SW 1c@R+1779 +Ws;;c3,<"TF qS9xK R#5ir/r'r3s& r)r7r84s8AKs)r0r1r2 _GATE_WORDSlistany)r"r#default_modelsr6s&&&@r) _model_gater>)s$'U*'3GMMO{$B7==?++;;B%%'K'4  sSWSssSsSsSWSSS 38833838388 88r+c(V^8dQhRRRRRRRR/#)r!agentr platform_keyr1 default_hintr%r')r(s"r)r*r*7s/ G G# GS G GPS Gr+c\VRR4pV'd(\V\4'dVPV4MRp\V\4'dRV/p\V\4'gV#RVPR4VPR434wrVT;'gTpV'dV RV 2P 4#T#)aApply the ``platform_hints.`` config override: ``replace`` substitutes the default, ``append`` adds text (a bare string is shorthand for append). Malformed entries fall back to the unmodified default so bad config can never break prompt assembly or leak across platforms._platform_hint_overridesNappendc3r"TF-p\V\4'dVP4MRxK/ R#5ir-N)r0r1strip)r4vs& r)r7)_resolve_platform_hint..Bs) |R{QjC.@.@b!HR{s57replace )getattrr0dictgetr1rH)r@rArB overridesspec replace_text append_textbases&&& r)_resolve_platform_hintrU7s 94@I*6:iQU;V;V9== &\`D$$ dD ! ! |SWS[S[\eSfhlhphpqyhzR{ |L  ' '>c$V^8dQhRRRRRR/#)r!r@rnowr%r')r(s"r)r*r*s&.Z.Zs.Z.Z.Zr+c \a^RIHpRV3Rllp\VRR4p\VRR4pVe0\V\4'dV'dVP V4MRpWd3Fxp\V\4'd\ P!RV4MRpV'gK<V!VPVP^4 RVP^4 2R 44u# \VR R4p \V R 4'd V!V 4#S# \ dRpLi;i \dKi;i) uBest-known conversation start time, or ``now`` as a fallback. ``Conversation started:`` must be byte-stable across rebuilds (compression, resume, fresh gateway turns), so prefer immutable sources in order: the lineage-root session id's embedded stamp (compaction rotates ids, each with its own mint time), the current session id's stamp, ``agent.session_start``, then ``now``. Stamps are box-local wall-clock: attach that zone first, then convert to ``now``'s zone so the date matches the per-turn clock. 0. the LINEAGE-ROOT session id's embedded timestamp — compaction can rotate the session id, and each rotated id embeds its OWN mint time, so after months of compactions rung 1 alone would quietly re-birth the conversation at its latest rotation. Walking to the lineage root (same walk as ``_conversation_root_id``) recovers the ORIGINAL birth stamp — a Bot Mode forever-chat keeps knowing when it was first born, across every compaction (maintainer-directed, #98426); 1. the timestamp embedded in ``session_id`` (``YYYYMMDD_HHMMSS_...``) — immutable for the life of the session, so the line is byte-stable across every rebuild boundary (preserving prefix-cache KV); 2. 3. ``now`` (initial/legacy build without either). )datetimec V^8dQhRRRR/#)r!dtrr%r')r(s"r)r*)_session_start_like..__annotate__s  3 3 r+c<VPfVP4p\ SRR4e-VPeVPSP4pV#V# \\3dLPi;i \\3dT#i;i)Ntzinfo)r astimezone ValueErrorOSErrorrM)rrs&r)_to_display_tz+_session_start_like.._to_display_tzs 99  ]]_ 3$ ' 3 8M ]]3::. r (   (   s"AA5A21A25B  B rcN _session_dbz^(\d{8})_(\d{6})_z %Y%m%d_%H%M%S session_startr) rrMr0r1get_conversation_rootrfrerstrptimerrr) r@rrrrcdbroot_id candidatemrs &f r)_session_start_likers%$"   d3J  t ,B:<.ZXbdgMhMhmw"**:6~B* 8B9c8R8RBHH() 4X\ 1 %h&7&71771:,aPQ |8TVe&fgg +E?D9M,3M<,P,P>- (YVYY   s)!D D !:D DD D+*D+c V^8dQhRRRR/#r!r@rr%zOptional[Path]r')r(s"r)r*r*ss~r+c^RIHpV!4pV'd \V4#\ \ VRR4RR4pV'd\V4P #R# \dLEi;i \dR#i;i)ucThe agent's OWN profile home, or None to use ambient resolution. A bound HERMES_HOME ContextVar override wins (the gateway multiplexes profiles over one shared session DB and binds the home per turn); else the parent of ``_session_db.db_path`` — ground truth on threads that lost the ContextVar, where ambient resolution would leak the launch profile. 1. Surfaces that multiplex several profiles over ONE shared session DB (the messaging gateway: ``gateway/run.py`` hands every agent the launch-home ``state.db`` and binds the profile home per turn via ``_profile_runtime_scope`` + ``copy_context``) would otherwise have the db-derived launch home STOMP the correctly-bound profile — inverting the leak this helper exists to fix (found by @kshitijk4poor's post-merge probe on #86313). 2. Fallback: the home containing the agent's ``_session_db.db_path`` (``/state.db``) — ground truth on threads that lost the ContextVar (ContextVars don't propagate into ``threading.Thread``), where the unbound build previously fell back to the launch home and leaked the default profile's skills/identity into a bot prompt. )get_hermes_home_overriderNdb_path)hermes_constantsrrrfrMparent)r@roverriders& r)rxrxs~  =+- > ! '%=y$O'.tG}##8D8    s-A A4A,A, A)(A), A;:A;c V^8dQhRRRR/#rr')r(s"r)r*r*s99S9^9r+c6\V4pVe VR, #R#)zCThe agent's own ``/skills`` dir, or None to use ambient home.Nskills)rx)r@r{s& r)_agent_skills_dirrs u D".4(?8D8r+c V^8dQhRRRR/#)r!r{rr%r1r')r(s"r)r*r*s   # r+c^RIHpVP4PV!4R, P44pVP'dVP^,#R# \ \ 3dR#i;i)z``/profiles/X`` -> ``"X"``; anything else -> ``"default"``. Uses ``get_default_hermes_root()`` (NOT ``get_hermes_home()``): on a bound profile session the ambient home IS the profile dir, so every profile would misreport as "default".)rprofilesrs)rrresolve relative_topartsrr)r{rrels& r)ryrysd <lln((*A*Cj*P)Y)Y)[\"yyysyy|7i7  sAA(A(&A((A=<A=c V^8dQhRRRR/#r!r@rr%r$r')r(s"r)r*r*s;;; ;r+cpVPpRpRV9d3\P!\VRR4\VRR4RV9R7p\VRR4pVfR V9d\ 4'd\ pTR V9d\ MRRV9d\MRV.pR PR V44;'gR#) zHTool-aware behavioral guidance, injected only when the tools are loaded.Nmemory_memory_enabledT_user_profile_enabled skill_manage)skill_manage_available_kanban_worker_guidance kanban_showsession_search c38"TFq'gK VxK R#5ir/r')r4gs& r)r7'_tool_guidance_block..*s2}!AA}  ) valid_tool_names_pbbuild_memory_guidancerMr rrrjoin)r@namesmemory_guidance_kanban_guidance tool_guidances& r)_tool_guidance_blockrs  " "EO533 E,d 3 E2D 9#1U#: u&?FMU$:?P?R?R*#3u#<$)U2 M 882}2 2 : :d:r+c V^8dQhRRRR/#rvr')r(s"r)r*r*-s A A# A# Ar+ca\;QJdV3RlR 4F 'gK RM RM!V3RlR 44'gR#^RIpSPUu0uFq!PV4kK upRR0, p^RIHpV!SP \4R7p\P!SPTT;'gR\S4R7#uupi \d\4pLSi;i) uSkills index (empty without skills tools). Focus mode demotes non-coding categories to names-only — never hidden, every name stays visible.c3@<"TFqSP9xK R#5ir/rr4namer@s& r)r7!_skills_prompt..0sh:g$u---:gTFr-N)coding_compact_skill_categories)rerb)available_toolsavailable_toolsetscompact_categoriesskills_dir_override skills_list skill_viewr) r< model_toolsrget_toolset_for_toolagent.coding_contextrrerrf frozensetrbuild_skills_system_promptr)r@r  tool_nameavail_toolsetsr _compact_catssf r)_skills_promptr-s 3h:gh333h:gh h hSXSiSijSii66yASijnrtvmwwN$H7UhUjk   ) )%:P:Pes.Es>f7dtE** *7drT_auto_load_skills_resolvedr-HERMES_IGNORE_RULES)build_auto_load_promptrcN)task_id home_overridez=skills.auto_load: skill(s) not found or disabled, skipped: %s, z#skills.auto_load: injection skippedexc_infor)rMr<rr[environrOagent.skill_commandsrrxrrrrfdebug_auto_load_skills_resultr)r@resultrrsf r)_auto_load_partsr&=s(u*E22##>f7d>f###>f7d>f;f;f 56 > >46B< O"2::>>2G#HIIG/|UY8Zjuv{j|}ayy^`d`i`ijpqrjs`tu*0&+/(  + +A .FF8%2%  O LL>L N Os0A D+,D++"EEc V^8dQhRRRR/#rr')r(s"r)r*r*Xs39r+c.p^RIHpHpHp\ \ VRR4;'gR4P 4pV'g_\ VRR4p\ VRR4p\ V'dV'dVPV4MR;'gR4P 4pWR8XdV!\V44MRpV'd9VPV4VPV!\V444RVn V# \dT#i;i)uBot Mode teammate protocol — only in a bot's canonical "Bot Chat" session. Marks the prompt timeless (the volatile date line is dropped) since a birth date pinned in a months-long session is misinformation.)BOT_CHAT_TITLE epoch_lineget_bot_mode_protocol_section_session_title_hintr-rNrcT) tools.bot_mode_prober)r*r+r1rMrHget_session_titlerxrE_bot_chat_timeless_promptrf) r@rr)r*r+_title_sdb_sid _bot_sections & r)_bot_mode_partsr4XsE bbWU$92>DD"EKKM5-6D5,5D4D$006tZZXZ[aacFLRLd4[5GHjn  LL & LLK$67 8.2E + L   L s."C=C=.C=3C= 5C=8C== D  D cV^8dQhRR/#rnr')r(s"r)r*r*ps**3*r+c^RIHpV!4#)rp_resolve_active_profile_name)agent.file_safetyr8r7s r)!_ambient_file_safety_profile_namer:ps> ' ))r+c V^8dQhRRRR/#rvr')r(s"r)r*r*us%%%%r+c *\V4p\V\4pVR8Xd2\Ve \ 4M \ 44pRV,R,#Ve \V4M\\ 44p\ 4pRV RV RV RV RV R V R 2 #) a Name the running profile so the agent doesn't conflate ``~/.hermes/skills`` (default) with ``~/.hermes/profiles//skills``. Resolved from the agent's OWN home first (a build thread that lost the ContextVar would otherwise print "default" for a bot profile).rszCActive Hermes profile: default. Other profiles (if any) live under z/profiles//. Each profile has its own skills/, plugins/, cron/, and memories/ that affect a different session than this one. Do not modify another profile's skills/plugins/cron/memories unless the user explicitly directs you to.zActive Hermes profile: z . This session reads and writes z'/. The default profile's data lives at z /skills/, z /plugins/, z/cron/, u/memories/ — those belong to a different session run from a different shell. Do NOT modify another profile's skills/plugins/cron/memories unless the user explicitly directs you to.)rxrhr:r1rr)r@_agent_home_pathactive_profile _root_str profile_home default_roots& r)_active_profile_linerBus #5))%1RSN"5E5Q/1WfWhi    !$  -=,H3'(cRaRcNdL +,L !.!12"^$##/. <. ./% &r+c V^8dQhRRRR/#)r!rAr1r%r')r(s"r)r*r*sr+c\P!VR4pV'gcV'd[^RIHpVPV4pVf^RIHpV!4VPV4pT;'dVP ;'gRpVR8Xd;V'd3\4'd#VP4R,\,pV# \dLPi;i)zHBuilt-in hint, else the plugin adapter's ``platform_hint``, else ``""``.r-)platform_registry)discover_pluginstelegramr) rrOgateway.platform_registryrErrF platform_hintrf_telegram_rich_messages_enabledrstripr)rArWrE_entryrFs& r)_default_platform_hintrMs   lB /D L  C&**<8F~@ "*..|<33v33::Dz!d/N/P/P{{}s"%@@ K    sAC+C?C CCc V^8dQhRRRR/#rvr')r(s"r)r*r*sKKsKsKr+c^RIHpV!RR4P4P4pV'dVR8XdR#\ W\ V44pV'd RV RV 2#R#)u)The destination channel's hint (default + its ``platform_hints`` override) for a cron agent. A cron agent runs as platform ``cron`` but its final response lands on the job's ``deliver`` channel, so without this the model never learns that MEDIA: tags become Slack/Telegram attachments or that tables do not render there — and a user's ``platform_hints.slack.append`` never reached scheduled jobs at all. The scheduler publishes the primary auto-deliver target into the session ContextVar before the agent runs (same seam ``send_message`` routes by). )get_session_env!HERMES_CRON_AUTO_DELIVER_PLATFORMr-cronzDelivery destination (z): )gateway.session_contextrPr2rHrUrM)r@rP deliver_keyrWs& r)_cron_delivery_hintrUs`8!"ErJPPRXXZK +/ !%6L[6Y ZD>B #K=D6 :JJr+c V^8dQhRRRR/#rvr')r(s"r)r*r*s    r+c&VP;'gRP4P4p\W\ V44pVR8XdV'd \ V4pVR8Xd)\ V4pV'dV RV 2P4pV#)zBuilt-in/plugin platform hint + Telegram rich-messages opt-in + config override + desktop TUI clarifier; cron agents also carry their delivery channel's hint.r-tuirRrL)rer2rHrUrMr]rU)r@rA_effective_hint _deliverys& r)rIrIsNN((b//1779L,UBXYeBfgOu6Gv'. !0 1i[AGGIO r+cV^8dQhRR/#)r!r%r&r')r(s"r)r*r*s   r+c ^RIHpV!4pVPR4;'g/PR4;'g/PR4;'g/PR4pVPR4;'g/PR4;'g/PR4p/\V\4'dTM/C\V\4'dTM/Cp\ VPR44# \ dR#i;i)z``rich_messages`` from the Telegram ``extra`` config; same precedence the adapter uses (top-level ``platforms.telegram.extra`` overrides ``gateway.platforms.telegram.extra`` at the leaf). False on any read failure.)load_config_readonlygateway platformsrGextra rich_messagesF)hermes_cli.configr]rOr0rNr&rf)r]_cfg_gw_topmergeds r)rJrJs:#%)$**// <BBGG SYYWY^^_fg+&,,"11*=CCHHQgJsD11SrgzRVX\G]G]tcegFJJ/00 s/$C>C>C>)C>C>A!C>> D  D c$V^8dQhRRRRRR/#)r!rrtzr%rr')r(s"r)r*r*s!  C S Y r+c\VRR4p^RIHpV!VR4pV!VR4pV'dV.M.pV'dWB8wdVPV4V'd&VPRVR, RVR , 24V#) uIANA key, abbreviation (if different) and UTC offset — all constant for the day, so the byte-stable date line stays cacheable.keyN) safe_strftimez%Zz%zUTC:NN::rmNN)rM hermes_timerkrE)rrh_ianark_abbrev_offsetbitss&& r) _zone_bitsrtsu Bt $E)C&GC&GE7D7# G c'"+a }56 Kr+c V^8dQhRRRR/#rvr')r(s"r)r*r*s``3`3`r+cZ^RIHpHpHpV!4p\ WA!44pV'dRRP V4 R2MRp\ W4pRV!VR4 V 2pVPR4VPR48wdVR V!VR4 R 2, p\VR R 4'dV'dR RP V4 2MRpRVP'd VPMR3RVP3RVP3RVP33p VRP RV 44,#)zDate-only so the prompt is byte-stable for the day; zone + offset so tools needn't guess EST vs EDT. Long-lived sessions get an "as of" line on rebuild days (the cache prefix is already invalidated at that boundary).) get_timezonerrkz (r)r-zConversation started: z %A, %B %d, %Yz%Y%m%dz0 Today's date (as of the last context rebuild): uW — trust this over the start date for what day it is now; query tools for exact time.r/Fz Timezone: z Session IDNModelProviderPlatformc3J"TFwrV'gKRV RV 2xK R#5i) z: Nr')r4labelvalues& r)r7"_timestamp_line..s%#_gleY^$9br%$9gs ##)rorwrrkrtrrstrftimerMpass_session_idrcr#rdre) r@ _hermes_tz _hermes_nowrkr_bits _zone_suffix_starttimestamp_linetrailers & r)_timestamp_liners2ZY -C sJL )E/4R %()+"L  ,F-mFO.T-UVbUcdN ||H!::N}]`bqOrNsttt uu1599=C>c$V^8dQhRRRRRR/#)r!r@rctx_len Optional[int]r%ztuple[list[str], bool]r')r(s"r)r*r*&s'[[3[[;Q[r+cVP;'gVP'*pV'd"\P!V\ V4R7MRpV'dV.R3#\ .R3#)zSOUL.md (primary identity; cron keeps the persona while skipping cwd instructions, scoped to the agent's OWN home) or the default identity. Returns ``(parts, soul_loaded)``.)rNTF)load_soul_identityrr load_soul_mdrxr )r@r wants_soul _soul_contents&& r)_identity_partsr&sZ))II1I1I-IJS]C$$WK.Ds+M9LAU[[&&B--//9Ls66F_execution_guidanceauto)execution_guidance_text)geminigemma)rrrrMrErrr>_tool_use_enforcementr#rrr<r r agent.prompt_builderr)r@rflagtextrsf r)_guidance_partsr/s1E  ,.FG/1LM$ $ZTd+ D$    LL%e,-  ! ! !  LL#$ 5.. =XYY 23 3M9LM333M9LM M M LL: ;75"7@%++Ohii@ ,U-C-CDE L- s FFc V^8dQhRRRR/#rr')r(s"r)r*r*Ls  # ) r+cVPR8wd.#VPPR^4R,pRV RVP R2.#)z{Alibaba Coding Plan always reports "glm-4.7" as the model name; inject the real identity so the agent can answer correctly.alibaba/z#You are powered by the model named z. The exact model ID is zt. When asked what model you are, always answer based on this information, not on any model name returned by the API.r)rdr#rsplit)r@ _model_shorts& r)_alibaba_identity_partrLsY ~~" ;;%%c1-b1L -l^FFH ;$++-L D!), r+c V^8dQhRRRR/#rr')r(s"r)r*r*vsBB3B=Br+c\VRR4p\V\4'd V'dV#\VRR4\VRR4r2Ve\V\4'd V'gR#VPV4p\T\4'dTPR4MRp\T\4'd T'dT#R# \d\ P RTRR7R#i;i) zQPrompt bytes this session already sends: the cached copy, else its persisted row.rNrrcz8workspace snapshot: session row read failed (session=%s)Tr system_prompt) rMr0r1 get_sessionrfrr#rNrO)r@cachedrrcrowrs& r)_session_promptrvs U3T :F&#6 UM48'%W[:\  zJ44JnnZ(*4C)>)>SWW_ %DF,,6ATA  OQ[fj ks,C#C/.C/c$V^8dQhRRRRRR/#)r!r@rrjr1r%rr')r(s"r)r*r*s!88s888r+c^RIHp\V4pV'gR#V!VR4pV'd WA8wdR#\W14pV'd W3VnR#R#)a_Pin the snapshot the session's existing prompt already carries. An agent that did not build those bytes (resumed, or a fresh gateway/TUI agent whose first act is ``/compress``) would otherwise re-probe git at its first rebuild and rewrite the prompt for any repo that moved since session start. Only a snapshot provably taken in this cwd is adopted.)runtime_host_valueNzCurrent working directory)agent.surface_switchrrr_frozen_workspace_snapshot)r@rjrr stored_cwdrs&& r)_seed_workspace_pinrsM 8 U #F #F,GHJj' &v 3E ,/<( r+c V^8dQhRRRR/#)r!r@rr%z&tuple[list[str], list[str], list[str]]r')r(s"r)r*r*s!Gr+c^RIHpVP'g...3#\4p\ 4p\ VRR4f \ W4\ VRR4pVeV^,V8Xd V^,MRpV!VPW PVPVR7pVf(Y6^,'dV^,^,MR3Vn V# \dMi;i...3#)av``(prefix, workspace, trailing)`` coding-posture blocks; all empty without tools or when probing fails (it must never block prompt build). The workspace block is a live git probe after project context, ahead of the whole volatile band; re-probing at the compaction rebuild re-emits different bytes for any repo that moved and defeats the keep-prompt fast path. So the bytes are pinned per session on the agent, keyed by the probed cwd (a gateway serves many cwds), seeded from the session's existing prompt when this agent did not build it, and replayed on rebuilds; ``reset_session_state`` drops the pin at a session boundary. )coding_system_prompt_partsrN)rerbr#rworkspace_blockr-) r rrrrrMrrer#rrf)r@rrbcwd_keypinnedreplayrs& r) _coding_partsrs C%%%r2: !#$& 56 = E  / 07aq!VX/YE ,    r2:sCCB.C CCc V^8dQhRRRR/#rr')r(s"r)r*r*sr+c.p\VRR4'd^RIHpVPV!44\VRR4'dVP \ V44VP\V44V# \dLVi;i)zBlocks that follow the worktree-specific context: environment probe (config.yaml agent.environment_probe; one line, nothing when clean, skipped for remote backends), bot-mode protocol, platform hint._environment_probeT)get_environment_probe_line_bot_mode_protocol)rMtools.env_proberrErfextendr4rI)r@rrs& r)_post_workspace_partsrs~Eu*D11  B LL35 6u*D11 _U+, LLu%& L    sA<< B  B c(V^8dQhRRRRRRRR/#) r!r@rrr soul_loadedr&r%rr')r(s"r)r*r*s/ i is i] i iR[ ir+c VP'd.#\VRR4p\V'*R7p\P!WBVVP R9\ V4R7.#)aProject context files (AGENTS.md etc.) for the context tier. TERMINAL_CWD when set (gateway); None lets discovery fall back to the launch dir. The install-tree fallback is only legitimate for cli/tui where the launch dir IS the user's shell cwd. Desktop launch artifacts skip the session cwd but still honor the profile-scoped TERMINAL_CWD; without one, the fallback guard can reject Hermes's bundled AGENTS.md._context_cwd_is_launch_artifactF)include_session_override)rb skip_soulcontext_lengthallow_install_tree_fallbackr)clirX)rrMrrbuild_context_files_promptrerx)r@rrlaunch_artifactrbs&&& r)_context_files_partrsf  e%FNO ?7J KC  * * w$)NNn$DT_`eTf h iir+c V^8dQhRRRR/#)r!rzlist[Optional[str]]r%r1r')r(s"r)r*r*sDD)DcDr+c2RPRV44#)z5Join non-empty parts; None/blank entries are dropped.rLc3"TF6q'gK VP4'gK$VP4xK8 R#5ir/)rHr4r5s& r)r7_join_tier..s&C%Q1yyqwwyy%s AAA)r)rs&r) _join_tierrs ;;C%C CCr+c$V^8dQhRRRRRR/#)r!r@rsystem_messager$r%r_r')r(s"r)r*r*s'?~?~S?~-?~Sa?~r+c&\\VRR4RR4p\V\4'd V^8dTMRp\W4wrE\ V4pVP \ 4VP\V44\V4pRVP;'g \49dRV9d \WF&VP\V44VP\V44\P !4p\#V4wrp VPV 4\%V4p .p VeV P V4V P\'WV44V 'dV P.V OV OV O4MVP.V OV O4V.\)V4OpVP\+\-V4R44VP \/V44VP \1V44V'dkVP3\P4R\P4,4pVP \P4 RV R\P6 24R \9V4R \9V 4R \9V4/#) aAssemble the system prompt as three ordered cache tiers: ``stable`` (identity, guidance and the coding brief), ``context`` (caller ``system_message``, project context files, workspace snapshot and remaining workspace guidance) and ``volatile`` (skills index, memory, user profile, external memory block, timestamp line, runtime environment hints). Worktree-dependent blocks follow project context so a shared context file can remain in the longest common prefix across worktrees. Never re-rendered mid-session.context_compressorNrr z- hermes-agent:rz> rLstablecontextvolatile)rMr0rrrrErrrrrsetr rr&rbuild_environment_hintsrrrrrrrBrrKRUNTIME_ENVIRONMENT_HEADINGRUNTIME_ENVIRONMENT_ENDr)r@r_cc_len_ctx_len stable_parts _soul_loaded_help_guidance_slot skills_promptenvironment_hintscoding_prefix_partscoding_workspace_partscoding_trailing_partspost_workspace_parts context_partsvolatile_partss&& r)build_system_prompt_partsr s[ge%94@BRTXYG$Wc22w{wH!0!ALl+<=./"5)M..77#%8=NR_=_,F ).u56(/0335IVW\I]F1F+,07!M!^,,UlKLe5e8MePdef K3K6JKL"/ Fu1E FN01OPU1VXfgh.u56/%01-55c6U6UW[^a^}^}W}~!@!@ AFWEXX\]`]x]x\yz{ j. :m;TV`blm{b| }}r+c$V^8dQhRRRRRR/#)r!r@rrr$r%r1r')r(s"r)r*r*"s& _ _s _M _S _r+c\WR7pVR,Vn\4FpVPV4K RP RVR,VR,VR,344#)zAssemble the full prompt; cached on ``agent._cached_system_prompt`` and only rebuilt after compression. Tiers are ordered stable -> context -> volatile so implicit longest-prefix caches keep the unchanged scaffold.rrrLc38"TFq'gK VxK R#5ir/r'rs& r)r7&build_system_prompt..+s^"XQ\]qq"Xrrr)r _cached_system_prompt_staticr_emit_diagnostic_statusr)r@rrrs&& r)rr"s_ &e KE).xE&,. %%g./ ;;^5?E)4DeJFW"X^ ^^r+c V^8dQhRRRR/#)r!r@rr%rr')r(s"r)r*r*.s--C-D-r+cRVnRVn\VR4'dVPVnV=VP 'dVP P 4R#R#)uForce a rebuild on the next turn (after compression): reload memory from disk and clear the frozen plugin snapshot (previous bytes stashed as the fail-open fallback) so plugins re-render at the same boundary. Called after context compression events. Also reloads memory from disk so the rebuilt prompt captures any writes from this session, and clears the frozen plugin-section snapshot so plugins re-render at the same boundary (maintainer-directed, #95681 arc): a plugin section is just another prompt block carrying state — freezing it while memory, skills, and guidance refresh would recreate the stale-block disease inside plugin-land. The previous bytes are stashed so a plugin whose render RAISES falls back to its last good section instead of vanishing (fail-open guard, not a freeze). Nr)rrrrrrload_from_disk)r@s&r)invalidate_system_promptr.sY#'E)-E&u?@@8=8e8e5  9  **,r+ log_labelrestorec(V^8dQhRRRRRRRR/#) r!r@rrr$rr1r%rr')r(s"r)r*r*Cs*..S.-.^a.rv.r+c\VRR4p\VRR4p\VRR4'df\V\4'dPV'dH\V\4'd V'dVPV4'g\VRR4V8XdR#\ WR7R,pV'd'VPV4'dWPnRVnR#RTnY0nR# \d\PR TR R 7L4i;i) aReconstruct ``_cached_system_prompt_static`` for a stored prompt. Only the full prompt is persisted, so restore / keep-prompt compression / mid-turn failover to a cache-on provider must rebuild the stable tier to regain the ``[static, volatile]`` layout. The rebuilt tier is used ONLY when the stored prompt literally starts with it; otherwise static stays None and the stored bytes are sent untouched. A failed rebuild is memoized per stored prompt so the retry-loop hot path doesn't redo the file I/O.rNr_use_prompt_cachingF_static_rebuild_failed_forrrz0static system-prefix reconstruction failed on %sTr) rMr0r1rr rrrfrr#)r@rrstoredexistingstatics&&$ r)reconstruct_static_prefixr!CsU3T :FurUrZr]rlrirhrrrrrrxrryrrr&r4r:rBrMrUrIrJrtrrrrrrrrrrrrrr rrr!r-__all__r'r+r)rDs#  336(DE!   8 $::}LL@>EWvx}I~  9 G"2/7 2X6\ $ .Zb<9 ;6 A &60* %P*K"   `68[: $B"8&@" i D ?~D _-*.dm..:B r+