+ lHj@aRt!0tRt^RIt^RIt^RIt^RIt^RIt^RIHt]P!R4t ]P!4R8Ht Rt RtRRlt]!0Rm4t]!0Rm4tRR]!43RltRR lt^ t/t]^k/t]^k]!4t]^kR R ltR R /RRlltRRltRRltRRltRRltRRRllt R#) a5Child-process environment for execute_code: env scrubbing, interpreter and cwd resolution. Both the per-call remote path and the local session kernel build their child env through ``_build_child_env`` so the security rules (secret scrubbing, PYTHONPATH hygiene, UTF-8 forcing, TZ) cannot drift between them. N)Dictztools.code_execution_toolWindowsc0V^8dQhR\R\/#)namereturnstrbool)formats"=/home/ubuntu/.hermes/hermes-agent/tools/code_execution_env.py __annotate__r !s>>S>T>ca\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)zlThe credential-name policy, shared with a local session's client environment (``agent.session_client_env``).c3H<"TFqSP49xK R#5iN)upper).0srs& r %is_secret_env_name..#s=*"_scrub_child_env..FsurcR#rr)_name _fallbacks&&r r!r"GsTrc/#rr)_presents&r r!r"Hsrc3F<"TFpSPV4xK R#5ir) startswith)rpks& r r#_scrub_child_env..Ys<);A Q);s!TFHERMES_c3N<"TFwrS!V4'gKW3xK R#5irr)rr+vis_passthroughs& r rr,as"k'UtqYghiYjFQF'Us% %aexecute_code: dropped %d non-allowlisted HERMES_* var(s) from the sandbox child env (%s). This is intentional hardening (#27303); if a sandbox script legitimately needs one, declare it via env_passthrough in the skill/config so it passes by explicit opt-in.z, )DELEGATED_CHILD_ENV_MARKERdelegated_child_subprocess_envHERMES_KANBAN_DBHERMES_KANBAN_BOARD)tools.env_passthroughrrr Exception _IS_WINDOWSitemsrr_SAFE_ENV_PREFIXES_HERMES_CHILD_ALLOWEDr_WINDOWS_ESSENTIAL_ENV_VARSr)appendupdateloggerdebuglenjoinsortedagent.delegation_contextr1r2get) source_envr0 is_windows toolchainrrrscrubbed_dropped_hermesr/resolvedr1r2scopedkeyr+s&f&& @r _scrub_child_envrM9s;uu + HO  "1 !  0A6H#&  a  C<);Irc haaa^RIHpHpHp^RIHpHp\V!4\V!44R7p W R&WR&RV R&RV R &RV R &^R I H p V !4p V 'd\'gWR &V PR R4V!V 4V!4p V 'd WR&V!V 4^RI Hp HpHoRpV\"P$8XdV!V 4pVe^RIHo^RIHpV!V4o\.;QJdNVVV3RlV P1RR4P3\4P644F 'gK RMC RM?!VVV3RlV P1RR4P3\4P6444'd \9S4pV !V 4V P1RR4pV.pVeVP;V4\=V4'dnVP;\4P>PA\4P>PA\4P>PC\D4444M6V\F9d,\FPIV4\JPMRV4V'dVP;V4\4P6POV4V R&V #)z@Build the scrubbed child environment both execution paths share.)apply_scratch_tmp_envapply_subprocess_home_envget_hermes_home_override)tool_envtoolchain_environ)rGHERMES_RPC_SOCKETHERMES_RPC_TOKEN1PYTHONDONTWRITEBYTECODEzutf-8PYTHONIOENCODING PYTHONUTF8)get_timezone_nameTZHERMES_TIMEZONEN HERMES_HOME)_strip_hermes_owned_pythonpath_validated_runtime_venv _same_path)Path) site_packagesc3T<"TFq'gK S!S!V4S4xK R#5irr)rentryrgrf candidates& r r#_build_child_env..s,\ QuUZ6:d5k955 Qs (( PYTHONPATHTFziexecute_code: child interpreter %s is outside the Hermes environment; hermes root omitted from PYTHONPATH)(hermes_constantsrUrVrWagent.session_client_envrXrYrM frozenset hermes_timer`r7pop#tools.environments.local_pythonpathrdrerfsys executablepathlibrgpm.environmentsrhrrDsplitospathsepr r<_uses_hermes_python_environmentpathdirnameabspath__file___external_env_loggedaddr>inforA)rOrPrQrRrUrVrWrXrY child_envr`_tz_name_home_overriderdre _runtime_path runtime_venvrh _existing_pp _pp_partsrgrfrks$$$$ @@@r _build_child_envrzs,lkD!!2!4 (*@UVI%1!"$- !+.I'(%,I !!Il. "H "$ MM#T*i( ./N#1- i(Ms~~%.y9  # $ 5%l3Is\ ) lB ? E Ebjj Q\sss\ ) lB ? E Ebjj Q\\\ #I "9-==r2LI '&|449R)STU 1 1  . GHT V& jjooi8Il rc0V^8dQhR\R\/#)rcacherL)rSr )r s"r r r st#rc|\V4\8d$VP\\ V444W V&R#)z= (3, 8) else 1)F)_usable_python_cacherDr returncoder)rcachedresultusables& r _is_usable_pythonrsR ! % %k 2F  ;(f gF ~   ! #F,kB Mrc0V^8dQhR\R\/#rr )r s"r r r s  C C rcT\PV4pVeV#\VRRR7pVe{VP^8XdjVPP 4'dJ\ PPVPP 44p\\W4V#R#)z[Resolved ``sys.prefix`` reported by *python_path* ("" on failure; failures are not cached).zimport sys; print(sys.prefix)T)rrn) _python_prefix_cacherDrrstdoutstriprzr}realpathr)rrrprefixs& r _python_environment_prefixrs ! % %k 2F  ;(Gd SF f//149L9L9N9N!!&--"5"5"780+F rc0V^8dQhR\R\/#rr)r s"r r r sSSSSrc@V\P8XgP\PP V4\PP \P48XdR#\ V4\PP \P 48H#)uWhether *python_path* belongs to Hermes's active Python environment. Short-circuits when it IS the running interpreter (by path or realpath — covers ``uv run`` venvs) so no probe runs on the default strict path and a flaky probe can never drop the hermes root.T)rurvrzr}rrr)rs&r r|r|sbcnn$(8(8(EIYIYZ]ZhZhIi(i %k 2bgg6F6Fszz6R RRrc0V^8dQhR\R\/#)rmoderr)r s"r r r srchVR8wd\P#^RIHpV!4p\'dRMRwr4RFpVP VR4P 4pV'dTMRFp\PPWcV4p\PPV4'd,\P!V\P4'gKu\V4'dVuu#\PRWX4\Puu# K \P#) zChild interpreter: ``sys.executable`` in strict mode; in project mode the active VIRTUAL_ENV/CONDA_PREFIX python if it exists and passes the 3.8+ probe, else ``sys.executable``.project)rYrnz\execute_code: skipping %s=%s (Python version < 3.8 or broken). Using sys.executable instead.)Scripts)z python.exez python3.exe)bin)pythonpython3) VIRTUAL_ENV CONDA_PREFIXr)rurvrprYr7rDrrzr}rAisfileaccessX_OKrr>r) rrYenvironsubdir exe_namesvarrootexerks & r _resolve_child_pythonrs y~~:!GFQkBWuF.{{3#))+ $9",C T37IGGNN9--"))Irww2O2O ++  KK89< I>> !-/ >>rcHV^8dQhR\R\R\R\/#)rr staging_dirtask_idrr)r s"r r r s(SsS#rcVR8wdV#V'd}^RIHpV!V4pV'd(\PP V4'dV#^RIHpV!V4pV'd(\PP V4'dV#^RIH pV!4P4pV'd \PPV4MR\P!43F6p V 'gK \PP V 4'gK4V u# V# \dRpELi;i \dRpLi;i)uChild cwd. Strict: the staging dir. Project mirrors the terminal/file-tool ladder so every file-writing path agrees: session cwd record (`cd` state) → registered ``session.cwd.set`` override → TERMINAL_CWD → os.getcwd() → staging dir (never Popen on a missing cwd). (#56047) r)get_session_cwdN)_registered_task_cwd_override)scope_terminal_cwdrn) tools.terminal_toolrr6rzr}isdirtools.file_tools_pathsragent.runtime_cwdrr expandusergetcwd) rrrrrecordedr session_cwdrrawrks &&& r _resolve_child_cwdrs y  ;&w/H  h//O  L7@K 277==55 4   $ $ &C14bgg((-"biikJ 9y11 K ! H  K s#D#D7# D43D47 EEcV^8dQh/^\9d \;R&^\9d \;R&^\9d \;R&#)rrrr)__conditional_annotations__rSset)r s"r r r sHP dQR dSX"!c!Yr)PATHHOMEUSERLANGLC_TERMTMPDIRTMPTEMPSHELLLOGNAMEXDG_rmrCONDA) KEYTOKENSECRETPASSWORD CREDENTIALPASSWDAUTHDSNWEBHOOKCREDSBEARERAPIKEYCOOKIE> HERMES_ENVrc HERMES_CONFIGHERMES_PROFILEHERMES_DELEGATED_CHILD_CONTEXT>OSPUBLICWINDIRAPPDATACOMSPECPATHEXTHOMEPATHUSERNAME HOMEDRIVE SYSTEMROOT USERDOMAIN PROGRAMDATA SYSTEMDRIVE USERPROFILE COMPUTERNAME LOCALAPPDATA PROGRAMFILES PROGRAMW6432ALLUSERSPROFILENUMBER_OF_PROCESSORSPROCESSOR_ARCHITECTUREPROGRAMFILES(X86))rn)"r__doc__loggingrzplatformrrutypingr getLoggerr>systemr7r9rrrqr:r;rMrrrrrrrrrrr|rrr )rs@r rs     6 7oo9, OH>"#()15QZQ\>4BI\ E! u   S,r