+ jHj@ Rt^RIt^RIt^RIt^RIHt^RIHt^RIH t H t ^RI H t ]P!R4t^RIHtHt]!RRR R R 7tR R ltR2RRlltRR/RRlltRRltRRltR3RRlltRRltRRltRRltR R!ltR"R#ltR$R%lt R&R'lt!.R4Ot"R(]R)]R*]R,]R-]R+] /t#R*R5R-R.R/]3/t$R0R1lt%^RI&H't(R#)6zTerminal-backend setup wizard (local/docker/modal/daytona/vercel/ssh/plugin). setup.py names are resolved through the module object so test patches on ``hermes_cli.setup.`` take effect; setup.py re-exports the public entry points.N)Path)tool_backend_helpers)docker_runtime_name find_docker)nous_subscriptionzhermes_cli.setup)DEFAULT_SANDBOX_IMAGEDEFAULT_VERCEL_IMAGETzutf-8replace)capture_outputtextencodingerrorsc$V^8dQhR\/#configdict)formats">/home/ubuntu/.hermes/hermes-agent/hermes_cli/setup_terminal.py __annotate__rs)2)2D)2c VPR/4p\P!RRRR4VPR4;'g\p\P !RV4P 4;'gTpW1R&\P!RV4VPR 4'd#\P!R VR ,: R 24VPR R 4'dRMRp\P !RV4P4pVR9VR &RR^\3RRR\33F>wrgrV !\P !V\VPWh4444W&K@ VPRR4R 9d\P!R4RVR&\P!RRR4\4p V 'd\P!R4\P !R4R!Fxwr{r\P"!V 4;'gV 'dV PV R4MRp\P !WxV R7pV'gKb\P!W4Kz R# \dEKYi;i)"zLPrompt for Vercel Sandbox settings without exposing unsupported disk sizing.terminalNzVercel Sandbox settings:z/ Filesystem persistence uses Vercel snapshots.zX Snapshots restore files only; live processes do not continue after sandbox recreation. vercel_imagez6 Image (Vercel managed image or VCR repository[:tag])TERMINAL_VERCEL_IMAGEvercel_runtimezterminal.vercel_runtime=zR is deprecated by Vercel and overrides the image; unset it to use the image above.container_persistentTyesnoz- Persist filesystem with snapshots? (yes/no) container_cpuz CPU corescontainer_memoryz Memory in MB (5120 = 5GB)icontainer_diskzVVercel Sandbox does not support custom disk sizing; resetting container_disk to 51200.zVercel authentication:z= Use a long-lived Vercel access token plus project/team IDs.z1 Found defaults in nearest .vercel/project.json.VERCEL_OIDC_TOKENpassword>1yrtrue>r#))z Vercel access token VERCEL_TOKENNT)z Vercel project IDVERCEL_PROJECT_ID projectIdF)z Vercel team IDVERCEL_TEAM_IDorgIdF) setdefault_setup_infogetrpromptstripsave_env_value print_warninglowerfloatintstr ValueError_read_nearest_vercel_project print_inforemove_env_value get_env_value)rr current_imageimage persist_labelpersistkeylabeldefaultparselinkedenv_var linked_keysecretvalues& r_prompt_vercel_sandbox_settingsrOs8  R0H LL13dkmLL0HH4HM MMRTa b h h j { {n{E$^ 159||$%%7AQ8R7UVUU V%\\*@$GGETMmmK][aacG'.2K'KH #$ -E2 :D#F'H"G !&--s8<<;U7V"WXHM 'H||$e,J> d f!&H  LL/1pq ) +F MN /0/B* &&w/eeR\FJJz24Nbd ev> 5  ! !' 1/B   s27I55 JJc`V^8dQhR\R,R\\\3,/#)rstartNreturn)rrr<)rs"rrr?s&t tCH~rc T;'g\P!4P4pVP4'd VPpV.VP OFpVR, R, pVP 4'gK+\P!VPRR74p\T\4'g/u#RUu/uFQp\TPT4\4'gK*YE,P!4'gKHYTT,bKS upu# /# \\P3d/uu#i;iuupi)z=Read project/team defaults from the nearest Vercel link file.z.vercelz project.jsonz utf-8-sig)r )r.r0)rcwdresolveis_fileparentparentsexistsjsonloads read_textOSErrorJSONDecodeError isinstancerr4r<r6)rQcurrent directory project_filedatarFs& rr>r>?s"" ++-G..00  9,~= ""$$  ::l44k4JKD$%%I*@I*@3dhhsmS16:ioo6G#Y*@I I1 I --. I Is$ &D/'E;E E/EE confirm_msgr%c@V^8dQhR\R\R\RR/#)rrGrKrdrRNr<)rs"rrrSs(..c.C..d.rc\P!VRR7pV'd9\P!W4V'd\P!V4R#R#R#)z:Prompt for a secret and persist it to .env when non-empty.Tr&N)r2r5r7 print_success)rGrKrdrNs&&$ r_prompt_secret_envriSs> MM%$ /E g-    -  rcHV^8dQhR\R\R\R\/#)rrKrGquestionrR)r<bool)rs"rrr\s(55C55s5t5rc\P!V4'gR#\P!RV R24\P!VR4'*#)zHTrue when ``env_var`` is already set and the user declines to update it.Fz z: already configured)r2rAr? prompt_yes_no)rKrGrks&&&r_existing_secret_keepsro\sD    ( ( 5'!567##He4 44rc(V^8dQhR\RR/#)rextrarRNrf)rs"rrrdsVVsVtVrc^RIp\V4R# \d\P!RT R24TP T.RR7\P !T R24R# TP\\3d<p\P!RT 24\P!R4Rp?R#Rp?ii;ii;i) zEEnable a declared SDK extra without mutating the running interpreter.Nz Installing z SDK...T)explicitz) SDK installed. Restart Hermes to use it.zInstall failed: z!Retry with: hermes setup terminal) pm __import__ ImportErrorr2r? sync_venvrh InstallErrorr]r=r8)rqrtexcs& r _ensure_sdkrzds  V5 VKwg67 V LL%4L 0  E7*S!T U *5 C  #3C5!9 :   A B B C Vs2 %CA) C)C/B;4C;CCc ZV^8dQhR\R,R\R\R\RR/#)rfoundNmissing install_hint found_prefixrRrf)rs"rrrus5((#*(s(#(UX(im(rcV'd\P!V V 24R#\P!V4\P!V4R#N)r2r?r8)r|r}r~rs&&&&r_report_binaryrus8 \N5'23W%,'rc(V^8dQhR\RR/#rrrRNr)rs"rrr}s;;;$;rc\P!R4\P!R4VR,PR\ \ P !444R#)zTerminal backend: Localz&Commands run directly on this machine.rrTN)r2rhr?r1r<rhomers&r_setup_backend_localr}s@ 23 >? :!!%TYY[)9:rc(V^8dQhR\RR/#rr)rs"rrrskk$k4krc\P!R4\4p\TRRV'd\ V4 R2MR4VR,P R\ 4\P!RRR R 4\P!R R 4'dXVP R /4pRVR&VP RR4\P!R4\P!R4R#\P!R4R#)z!Terminal backend: Docker / Podmanz#Docker or Podman not found in PATH!zbInstall Docker: https://docs.docker.com/get-docker/ or Podman: https://podman.io/docs/installationz found: r%r docker_imageNzFDocker sandboxes can be protected with the egress credential firewall.ziIt routes sandbox traffic through iron-proxy so containers receive proxy tokens instead of real API keys.zR Docker only for now; Modal, SSH, Daytona and plugin backends are not wired yet.z. Enable egress firewall for Docker sandboxes?FproxyTenabledenforce_on_dockerz!Egress firewall enabled in configzYRun `hermes egress setup` then `hermes egress start` to mint tokens and launch the proxy.zMSkipping egress firewall. You can enable it later with `hermes egress setup`.) r2rhrrrr1_SANDBOX_IMAGEr3rnr?)r docker_exe proxy_cfgs& r_setup_backend_dockerrs <=J:DDCM)*56h?SUW  :!!..A LL_:egLeTT%%gr2 # )0$7@A g i ijrc(V^8dQhR\RR/#rr)rs"rrrsGGG$Grc\P!R4\P!R4^RIHp^RIHp\\P!4;'d1\P!V4P;'d V!R44pV!\P!VRR44pRpV'dRR^R ^/PT\P!R 4'd^M^4p\P !R R R .V4^8HpV'dsRVR,R&\P!R4\P!R 4'g\P!R4'd\P!R4R#R VR,R&\P!R4\#R4\P$!RRR4\'R RR4'dR#\)RR 4\)RR4R#)zTerminal backend: Modalz@Serverless cloud sandboxes. Each session gets its own container.)is_managed_tool_gateway_ready)normalize_modal_modemodalr modal_modeFmanageddirectMODAL_TOKEN_IDz,Select how Modal execution should be billed:zUse my Nous subscriptionzUse my own Modal accountzPModal execution will use the managed Nous gateway and bill to your subscription.MODAL_TOKEN_SECRETzZDirect Modal credentials are still configured, but this backend is pinned to managed mode.Nz+Requires a Modal account: https://modal.comzModal authentication:z/ Get your token at: https://modal.com/settingsz Modal tokenz Update Modal credentials?z Modal Token IDz Modal Token Secret)r2rhr?tools.managed_tool_gatewayrtools.tool_backend_helpersrrlrmanaged_nous_tools_enabledrget_nous_subscription_featuresnous_auth_presentcfg_getr4rA prompt_choicerzr3rori)rrrmanaged_modal_availableruse_managed_modal default_idxs& r_setup_backend_modalrs 23 XYH?"779 3 3  < /1EFrc(V^8dQhR\RR/#rr)rs"rrrs C C4 CD CrcZ\P!R4\P!RRR4\R4\ 4\ \P !R44p\RRR4'g\RRV'dR MR R 7VR ,PR \4R#)zTerminal backend: Daytonaz*Persistent cloud development environments.zBEach session gets a dedicated sandbox with filesystem persistence.zSign up at: https://daytona.iodaytonaDAYTONA_API_KEYzDaytona API keyz Update API key?z Daytona API keyz Updatedz Configured)rdr daytona_imageN) r2rhr3rzprintrlrArorir1r)rhad_keys& r_setup_backend_daytonars 45 LL=U13  G6''(9:;G !"35FH[ \ \02C8?}EU W :!!/>Brc(V^8dQhR\RR/#rr)rs"rrrs,,$,4,rc\P!R4\P!RR4\R4\ V4R#)z Terminal backend: Vercel SandboxzDCloud microVM sandboxes with snapshot-backed filesystem persistence.z?Requires the optional Vercel SDK (installed through Hermes PM).vercelN)r2rhr3rzrOrs&r_setup_backend_vercelrs4 ;< LLWRT#F+rc(V^8dQhR\RR/#rr)rs"rrrsIItIIrc h\P!R4\P!R4RRR\P!RR43RRR \ \ P!4R , R , 433p.pVFwr4p\P!T\P!V4;'gT4pVPV4V'd'VR8wgVR8wd\P!WF4KzVR8XgKVR8XgK\P!V4K VwrxrV'Ed\P!R R 4'd\P!R4^RIp .ROV 'dRV .M.OV 'd V R8wdRV .M.OV'dV RV 2MTNRNp V P!V 3R^ /\ BRR/Bp V P"^8Xd\P!R4R#\P$!RV P&P)4 24\P!R4R#R#R#)zTerminal backend: SSHz)Run commands on a remote machine via SSH.r%z SSH userTERMINAL_SSH_USERUSERTERMINAL_SSH_PORT22z SSH private key pathTERMINAL_SSH_KEYz.sshid_rsaz Test SSH connection?Tz Testing connection...Nz-iz-p@zecho oktimeoutcheckFz SSH connection successful!z SSH connection failed: z' Check your SSH key and host settings.)z SSH host (hostname or IP)TERMINAL_SSH_HOSTr%)z SSH portrr)ssh-oz BatchMode=yesrzConnectTimeout=5)r2rhr?osgetenvr<rrr5rAappendr7r@rn subprocessrun_RUN_KW returncoder8stderrr6)rfieldsvaluesrGrKrHrNhostuserportssh_keyrssh_cmdresults& r_setup_backend_sshrs 01 AB A *BIIfb,AB1 !#5s499;;ORZ;Z7[\ ^F F#) eV%9%9'%B%M%MgN e g!44  ! !' 1 + +   # #G ,$*!'D t$$%=tDD34t`gdT[_mot%)ddldD\tY]vQtfEUcgtirtLLwLeL    !  !? @  #\4V ,wrp\P2!WR,P/VV44\P6!V4\94\P:!RV 24R# \"dELi;iuup pi)z)Configure the terminal execution backend.zTerminal Backendz1Choose where Hermes runs shell commands and code.z8This affects tool execution, file access, and isolation.z Guide: z8/user-guide/configuration#terminal-backend-configurationNrrr)rH)discover_plugins)list_providersz - zKeep current ()zSelect terminal backend:zKeeping current backend: r TERMINAL_ENVzTerminal backend set to: )r2 print_headerr3 _DOCS_BASErlist_BUILTIN_TERMINAL_BACKENDShermes_cli.pluginsrrrnamer6r9rr descriptionrrlenr?r1_TERMINAL_BACKEND_SETUPr4rr7_BACKEND_ENV_MIRROR save_configrrh)rcurrent_backendbackendsplugin_backend_namesrrrpname_rGterminal_choices terminal_idxselected_backendhandlerrKrFrHs& rsetup_terminal_backendrs= *+ LLDKf//00hikoqnnVZGTO./H  7>&(HMM'')//1E OOU'<'<&=SAUAU@V$WX Y ' ' .) /77h(!h7^OK\\];^:__''(BDTVYZbVcdLs8}$5o5FGH454UH 4Ux-a0[_3Cj"%i0%))*:;G 0E 9=M=i  1f7 .*:;.. 34D Eggj'9'='=c7'KL v G 45E4FGH+    7s.BI;8 J ; J  J r)zFound: ))rz.Local - run directly on this machine (default))rz>Docker/Podman - isolated container with configurable resources)rz Modal - serverless cloud sandbox)rzSSH - run on a remote machine)rz2Daytona - persistent cloud development environment)rzCVercel Sandbox - cloud microVM with snapshot filesystem persistence)TERMINAL_MODAL_MODErauto))__doc__rZloggingrpathlibrtoolsrtools.environments.dockerrr hermes_clir getLoggerloggerhermes_cli.config_defaultsrrrrrrOr>rirorzrrrrrrrrrrrrhermes_cli.setupsetupr2rrr s=  &F(   - .d d R)2X(.r.5V"(;k0GD C,IB I_ !8-BGMa %'79NPUWik  M'*A>Sg)hj(IV"r