+ iHj$Rt^RIHt^RIt^RIt^RIHt^RIHtH t ^RI H t ^t Rt ]!0Rm4t]!0Rm4t0Rmt0R mtRRltR R ltR!R R lltR RltRRltRRltRRltRRltR^R^/RRlltRR.tR#)"zTurn-end verification guard for coding edits. Policy-only: it never runs checks itself, it turns the passive verification ledger into a bounded follow-up when the model tries to finish right after editing code without fresh evidence.) annotationsN)Path)AnyIterable)elideic V^8dQhRRRR/#)rawstrreturnbool)formats" verify-before-finish behavior is enabled. Precedence: ``HERMES_VERIFY_ON_STOP`` env var, then ``agent.verify_on_stop`` config; default OFF (opt-in). A bool forces the behavior; ``"auto"`` is the legacy surface-aware mode: ON for interactive coding surfaces and programmatic callers, OFF for messaging surfaces where the verification narrative is chat noise. Missing/unrecognized values fall back to OFF. HERMES_VERIFY_ON_STOPN)load_config_readonlyagentverify_on_stopauto)osenvirongetstripr _FALSY_TOKENShermes_cli.configr%r isinstancedictr r r _TRUTHY_TOKENS)r"envr% agent_cfgcfg_valtokens& rverify_on_stop_enabledr75s **..0 1C yy{  "-77 ~  >)+F0:&$/G/G2""7+TI1;It1L1Limm,-RVG'4  '1'3'?'?GMMO ! ! #RE 0222 N "" F s D$$ D43D4c V^8dQhRRRR/#)rpaths Iterable[str]r z list[Path]r )rs"rrrRs # #= #Z #rcX/p\RV4Fgp\V4P4pTP\ VP 4'dTM VP P444Ki VUu.uFp\V4NK up# \dKi;iuupi)zODistinct resolved directories (a file's parent) for the edited paths, in order.N) filterr expanduser setdefaultr is_dirparentresolver)r9seenr pathrs& r_candidate_cwdsrDRsDdE" 9'')D OOCDKK P P RS T# " "TDGT ""    "sA#B>B' B$#B$c$V^8dQhRRRRRR/#)r session_id str | None changed_paths list[str]r z,tuple[dict[str, Any], dict[str, Any]] | Noner )rs"rrr^s$.71rc^RIHp^RIHpRp\ T4FYpT!T4pT'gKT!YR7pT;'gYv3p\ TPR4;'gR4R8wgKVYv3u# T# \dR#i;i)z``(status, facts)`` for the first edited workspace needing proof, else the first recognized workspace when every one is ``passed``.)project_facts_for)verification_statusN)rFcwdstatus unverifiedpassed)agent.coding_contextrKagent.verification_evidencerLrrDr r,)rFrHrKrLfirst_snapshotrMfactsrNs$$ r_verification_snapshotrU^s :CDHN}-!#& $ D'::F? vzz(#33| 4 @= .  s A:: B B c V^8dQhRRRR/#)rr9rIr r r )rs"rrrussrcVR\Uu.uF pRV R2NK pp\V4\8d*VPR\V4\, R24RPV4#uupi)Nz- ``z - ... and z more )_MAX_CHANGED_PATHS_IN_NUDGElenappendjoin)r9rCliness& r_format_changed_pathsr_usk',-I.I'J K'Jts4&]'JE K 5z// z#e*/J"J!K5QR 99U  LsA+c V^8dQhRRRR/#)rrootrr r r )rs"rrr|src V'gR#^RIHp^RIHp\ \ V44pV!V4P 4'dR#V!V4p\VRJ;'d VP4# \dR#i;i)uWhether ``hermes verify`` has a runtime recipe here: a saved ``.hermes/environment.json`` or a statically detected recipe with a start command. Fail-silent and cheap — it only decorates the nudge text.F) manifest_path) detect_recipeTN) agent.verify.environmentrcagent.verify.recipesrdrr is_filer startr)rarcrd root_pathrecipes& r_workspace_has_runnable_reciperk|sq  :6TO  # + + - -y)F$&776<<88 scrc@\VPR4;'gR4p\VPR4\4'dVPR4MRpV'gV#VPR4;'gVPR4p\VPR4;'gR4P 4pV.pV'dVP RV R 24V'd%\ V\4pVP R V 24R PV4#) rNrOevidenceNcanonical_commandcommandoutput_summaryr(zlast command `rXz last output: rY) r r,r0r1r-r\r_MAX_STATUS_SUMMARY_CHARSr])rNstaternrpsummarypartss& r_status_detailrvs  8$44 5E)3FJJz4JD)Q)Qvzz*%W[H  ll./JJ8<< 3JG(,,/066B7==?G GE ~gYa01!:; ~gY/0 99U rattempts max_attemptsc ,V^8dQhRRRRRRRRRR/#) rrFrGrHr:rwintrxr r )rs"rrrs;CCC.;CGJC\_CCrc \VUu0uF*qD'gK \V4'dK\V4kK, up4pV'dW#8dR#\WR7pVfR#Vwrx\VP R4;'gR4R8XdR#VP R4;'g.U u.uF=p \V 4P 4'gK$\V 4P 4NK? p p \ VP R44p ^RIHp V !4p V 'dR V 2MR pV 'dYR R PR V R,44,\V 4^8dRMR ,R,pV 'd VR, pMCV 'dRpM8\PP\P !44pRV R2pR\#V4 R\%V4 R V RV R2 #uupiuup i \dRp Li;i)zGReturn a synthetic follow-up when edited code lacks fresh verification.N)rFrHrNrOrPverifyCommandsra)coding_verify_guidancez r(z+Run the relevant verification command now (z, c3."TF pRV R2xK R#5i)rXNr ).0cmds& r -build_verify_on_stop_nudge..sB.As!C5 .As:NNz, ...z@), read any failure, repair the code, and summarize what passed.u For a full check including a runtime boot (build + test + start + readiness), prefer `hermes verify --json` — a passing run records verification evidence for this workspace.a4No canonical test/lint/build command was detected, but the project has a runnable verification recipe. Run `hermes verify --json` (detect -> build -> test -> boot -> readiness poll); a passing run records verification evidence for this workspace. Read any failure, repair the code, and summarize what passed.ziNo canonical test/lint/build command was detected. Create a focused temporary verification script under `z` using an OS-safe `tempfile` path with a `hermes-verify-` filename prefix, run it against the changed behavior, clean it up when possible, and summarize it explicitly as ad-hoc verification rather than suite green.z[System: You edited code in this turn, but the workspace does not have fresh passing verification evidence yet. Verification status: z Changed paths: zn If verification is not possible, explain the concrete blocker instead of claiming the work is fully verified.])sortedrr rUr,r-rkagent.verify_hooksr}rr]r[r*rCrealpathtempfile gettempdirrvr_)rFrHrwrxrr9snapshotrNrTrverify_commands has_reciper}guidanceaddendumcommand_instructiontemp_dirs$$$$ rbuild_verify_on_stop_nudgers MTMqQF?PQR?SFCFMT UE H,%QHMF 6::h  / /<0H<49II>N4O4U4USU4Uk4UCZ]^aZbZhZhZj's3x~~'4UOk/ &0ABJ=)+%-hZ "H 9iiBob.ABB Co.2w <Q Q   H    L 77##H$7$7$9: 44<:>   .v 678078   K *A  mUl s- G/G/G//!G4G4 G99 H H rr7> .md.csv.log.mdx.org.rst.tsv.txt.adoc.text .asciidoc .markdown>noticeauthorslicencelicense changelog codeowners contributors>0noofffalse>1onyestrue)N)__doc__ __future__rr*rpathlibrtypingrragent.compression_markerrrZrr frozensetrrr.r2rr r7rDrUr_rkrvr__all__r rrrsS#  *   (o'Z, +r#: #.&"CKLC`aCL ()A Br