+ lHjooaR tF0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIHtHt^RIHtHt^RIHt^RIHt^RIHt^RIHtHtHtHtHtH t H!t!H"t"H#t#H$t$H%t%H&t&H't'^RI(H)t)H*t*H+t+^R I,H-t-^R I.H/t0] Pb!]24t3]4!]Pj!44t6R!t7]^kR R lt8R Rlt9!RR]4t:0R"mt;RtRt?Rt@RRltARRltBRRltCRRltD!RR]*]-]:4tER#)#aFile operations (read, write, patch, search) over any terminal backend. Every operation is a shell command run through the backend's ``execute()``, so one implementation serves every environment (local, docker, ssh, modal, ...). Companions: ``file_operations_common`` (result dataclasses, text helpers), ``file_operations_lint`` (LintMixin), ``file_operations_search`` (SearchMixin). N)ABCabstractmethod)OptionalDict)Path)has_binary_extension)get_write_denied_error) ExecuteResult PatchResult ReadResult SearchResult WriteResult _UTF8_BOM_detect_line_ending_has_bom_normalize_line_endings _strip_bom_strip_terminal_fence_leaksnormalize_read_paginationnormalize_search_pagination)LINTERS_INPROC LintMixin_FAIL_CLOSED_INPROC_EXTS) SearchMixin)file_operations_nativec0V^8dQhR\R\/#samplereturn)bytesstr)formats":/home/ubuntu/.hermes/hermes-agent/tools/file_operations.py __annotate__r$Is  % C c\FGwrVPV4'gKVPR4'dVR,R8wdKEVu# R#)zBest-effort human name for binary content from its magic bytes; never raises. The ISO-media entry additionally requires ``ftyp`` at offset 4 (three leading NULs alone are too weak a signature).z ISO media:Nsftypzunknown binary)_MAGIC_SIGNATURES startswith)rprefixnames& r#identify_binary_bytesr-IsH*    V $ ${++s w0FK * r%cRV^8dQhR\\,R\R\/#)rr file_sizer)rr intr!)r"s"r#r$r$Us* G G% GS GS Gr%c\T;'gR4pVR 8dVR , R R2pMVR8dVR, R R2pMV R2pRV RV R 2#) zOne-line binary-file refusal naming the TYPE ("PNG image data, 4.1 KB"), so the model gets what-is-this in one read instead of hunting for tools it may lack.r%iz.1fz MBz KBz bytesz Binary file (, u) — cannot display as text.)r-)rr/kindsizes&& r#describe_binary_filer6Usn !3 /DK{+C04 d d"3's+F# 4&4&(E FFr%ca]tRt^btoRt]RV3RlRll4t]V3RlRl4t]RV3RlRll4t]RV3R lR ll4t ]V3R lR l4t ]V3R lRl4t ]V3RlRl4t ]RV3RlRll4t RtVtR#)FileOperationsz@Abstract interface for file operations across terminal backends.c2<V^8dQhRS[RS[RS[RS[/#rpathoffsetlimitrr!r0r )r" __classdict__s"r#r$FileOperations.__annotate__fs)33c33333*3r%c R#)z$Read a file with pagination support.N)selfr;r<r=s&&&&r# read_fileFileOperations.read_fileer%c&<V^8dQhRS[RS[/#rr;rr!r )r"r?s"r#r$r@jsUU#U*Ur%c R#)zFWhole file as a plain string: no pagination, line numbers or clamping.NrBrCr;s&&r# read_file_rawFileOperations.read_file_rawirFr%NcB<V^8dQhRS[RS[RS[S[,RS[/#rr;content pre_contentrr!rr )r"r?s"r#r$r@ns4GGsGSGx}GXcGr%c R#)z8Write content to a file, creating directories as needed.NrB)rCr;rPrQs&&&&r# write_fileFileOperations.write_filemrFr%c 8<V^8dQhRS[RS[RS[RS[RS[/#rr; old_string new_string replace_allrr!boolr )r"r?s"r#r$r@rs2;;#;3;C;#';4?;r%c R#)z,Replace text in a file using fuzzy matching.NrB)rCr;rXrYrZs&&&&&r# patch_replaceFileOperations.patch_replaceqrFr%c&<V^8dQhRS[RS[/#r patch_contentrr!r )r"r?s"r#r$r@ws((s({(r%c R#)zApply a V4A format patch.NrB)rCrbs&&r# patch_v4aFileOperations.patch_v4avrFr%c&<V^8dQhRS[RS[/#rHr!r )r"r?s"r#r$r@{sMMM Mr%c R#)z>Delete a file. Returns WriteResult with .error set on failure.NrBrKs&&r# delete_fileFileOperations.delete_filezrFr%c,<V^8dQhRS[RS[RS[/#rsrcdstrrh)r"r?s"r#r$r@s'RRSRsR{Rr%c R#)zCMove/rename a file. Returns WriteResult with .error set on failure.NrB)rCrnros&&&r# move_fileFileOperations.move_file~rFr%cf<V^8dQhRS[RS[RS[RS[S[,RS[RS[RS[RS[R S[R S[/ # rpatternr;target file_globr=r< output_modecontextorderrr!rr0r )r"r?s"r#r$r@sb++c++C+"3-+7:+IL++69++-9+r%c  R#)zSearch for content or files.NrB) rCrur;rvrwr=r<rxryrzs &&&&&&&&&&r#searchFileOperations.searchrFr%rBiNF.rPN2rPr discovery)__name__ __module__ __qualname____firstlineno____doc__rrDrLrTr^rerjrqr}__static_attributes____classdictcell__r?s@r#r8r8bsJ333UUGGG;;;((MMRR+++r%r8__hermes_not_regular____hermes_missing__ __HERMES_RF_ __HERMES_WF_ __HERMES_RB_c0V^8dQhR\R\/#)rr+rr!)r"s"r#r$r$s00#0#0r%c8V \P!^4 R2#)aPer-call separator line for a compound shell probe. 128 random bits make a collision with file content negligible; the underscores keep the token outside the base64 alphabet, so a sentinel leaking into a sample segment fails base64 validation instead of decoding into bytes.__)secrets token_hex)r+s&r# _new_sentinelrs! Xg''+,B //r%cRV^8dQhR\R\R\\,/#)routputsentinelr)r!list)r"s"r#r$r$s%))C)3)49)r%c2VPVR,4#)a Split compound-probe stdout on its sentinel lines. Every producer (``wc``, ``base64``, ``cut``) newline-terminates or prints nothing, so the separator is always ``sentinel + " "`` on its own line; the text after the final sentinel is the status segment. split)rrs&&r#_split_segmentsrs <<4 ((r%cFV^8dQhR\R\\,/#rtextrr!r)r"s"r#r$r$s''S'Xc]'r%caRV9d RV9dR#.oRV3Rllp\P!\V4^,VR7S'd S^,#R# \\3dR#i;i)zFirst NaN/Infinity/-Infinity in ``text`` when it is otherwise valid JSON, else None. ``json.loads`` accepts these JavaScript extensions by default.NaNInfinityNc0V^8dQhR\R\/#)rvaluer)r!float)r"s"r#r$0_json_nonstandard_constant..__annotate__sSUr%c<<SPV4\R4#)nan)appendr)rfounds&r# note_constant1_json_nonstandard_constant..note_constants UU|r%)parse_constant)jsonloadsr ValueErrorRecursionError)rrrs& @r#_json_nonstandard_constantrso DZt3E :d#A&}E58&$&  's(AA.-A.c tV^8dQhR\R\R\\,R\\,/#rOrR)r"s"r#r$r$s3 & &3 & &2:3- &DL[DY &r%cp\V4pVfR#Ve\V4eR#\RV RV R2R7#)zRefuse a JSON write that INTRODUCES a nonstandard constant (strict JSON consumers reject them). A file that already holds one keeps accepting unrelated edits, which is why the lenient syntax gate can't do this check.NRefusing to write 'z': candidate content uses zh, which is not valid JSON. The file was NOT created or modified. Use null or a string instead and retry.error)rr )r;rPrQconstants&&& r# _refuse_introduced_json_constantrsQ *'2H#=k#J#V  dV#=hZH$ $ &&r%ca]tRt^toRtRzV3RlRlltR{V3RlRlltV3RlRltV3R lR ltV3R lR lt V3R lRlt V3RlRlt ] V3RlRl4t R|V3RlRlltV3RlRlt] V3RlRl4tV3RlRlt] V3RlRl4t] V3RlRl4tRzV3RlR lltV3R!lR"ltR}V3R#lR$lltV3R%lR&ltR~V3R'lR(lltV3R)lR*ltV3R+lR,ltRzV3R-lR.lltV3R/lR0lt] V3R1lR2l4tV3R3lR4ltRV3R5lR6lltV3R7lR8lt Rt!R9t"V3R:lR;lt#RzV3R<lR=llt$V3R>lR?lt%RV3R@lRAllt&V3RBlRClt'V3RDlRElt(V3RFlRGlt)] V3RHlRIl4t*V3RJlRKlt+V3RLlRMlt,V3RNlROlt-V3RPlRQlt.V3RRlRSlt/Rt0V3RTlRUlt1V3RVlRWlt2V3RXlRYlt3RzV3RZlR[llt4V3R\lR]lt5V3R^lR_lt6]7Pp!R`4t9V3RalRblt:] V3RclRdl4t;V3RelRfltV3RklRllt?RzV3RmlRnllt@V3RolRpltAV3RqlRrltBRV3RslRtlltCV3RulRvltDRV3RwlRxlltERytFVtGR#)ShellFileOperationsaFile operations over any terminal backend exposing ``execute(command, cwd)`` returning ``{"output": str, "returncode": int}``. cwd rule: every ``_exec`` prefers the LIVE ``env.cwd`` so a ``cd`` run via the terminal tool is picked up immediately; the init-time ``self.cwd`` is only a fallback for envs that don't track cwd (using it for every call once made patches "succeed" with a plausible diff while landing in the wrong directory). Nc.<V^8dQhRS[R,/#)rcwdNr)r"r?s"r#r$ ShellFileOperations.__annotate__s D D#* Dr%cWnT;'g8\VRR4;'g#\\VRR4RR4;'gRVn/Vn/Vn/VnR#)rNconfig/)envgetattrr_command_cache_rg_resolution_cache_rg_modified_capability)rC terminal_envrs&&&r#__init__ShellFileOperations.__init__srVV',t<VV7<4@%NVVRU  0246!AC$r%c b<V^8dQhRS[RS[R,RS[R,RS[R,RS[/#)rcommandrNtimeout stdin_datarr!r0r )r"r?s"r#r$rsEVVSVsTzV3:V*V0=Vr%c </pV'dW5R&VeWER&T;'g,\VPRR4;'g VPpVPP!V3RV/VBpVP R^4pVP RR4p Rp V^~8XdZRV 9dS^R IHp \VPR R4p V 'dV !V 4'dR MRp R V: R V RV P4 2;rVP R4'd V^8Xd^p\WV R7#)uRun ``command`` on the backend. cwd: explicit arg → live ``env.cwd`` → init-time ``self.cwd``. ``stdin_data`` is piped (bypasses ARG_MAX).rNrr returncoderzcd: )_is_container_backendenv_typezI; for container backends use a path inside the container, e.g. /workspacezworking directory zU does not exist on the active terminal backend (check terminal.cwd or the session cwdz). stdin_error)stdout exit_code cwd_error) rrrexecutegettools.terminal_tool_configrstripr )rCrrrrkwargs effective_cwdresultrrrrrhints&&&&& r#_execShellFileOperations._execs&  '9   !#-< IIwtxx=II !!'G}GGJJ|Q/ Hb)   & 0 HtxxT:H$9($C$C`IK %]$56AAEc&,,.IY[ \I ::m $ $aIF9UUr%c&<V^8dQhRS[RS[/#)rcmdrr!r\)r"r?s"r#r$rs ( ( ( (r%c "VR8XdVPV4RJ#WP9dTVPRV R24pVP'dR#VPP 4R8HVPV&VPV,#)z}Check if a command exists in the environment (cached); rg goes through the resolver so a mid-session install becomes visible.rgNz command -v z >/dev/null 2>&1 && echo 'yes'Fyes)_resolve_commandrrrrr)rCrrs&& r# _has_command ShellFileOperations._has_commands $;((-T9 9 )) )ZZ+cU2P QRF'-}}':':'<'ED   $""3''r%c&<V^8dQhRS[RS[/#rHr!r )r"r?s"r#r$rsMMMMr%c JVPRVPV4 R24#)uG``cat`` the file with stderr silenced (missing file → non-zero exit).cat 2>/dev/nullr_escape_shell_argrKs&&r#_catShellFileOperations._cats&zzD!7!7!= >lKLLr%c,<V^8dQhRS[RS[RS[/#)rr;nbytesrr)r"r?s"r#r$rs'ZZ#ZsZ}Zr%cPVPRV RVPV4 R24#)head -c  rr)rCr;rs&&&r#_headShellFileOperations._heads,zzHVHAd.D.DT.J-K<XYYr%c&<V^8dQhRS[RS[/#)rsnippetrr)r"r?s"r#r$rs3=r%c VPRVPV4 24pVP^8wd?RVP;'gR9d$VPRVPV4 24pV#)z}Run ``snippet`` via the backend's ``python3``, retrying with ``python`` when only that name exists (Windows / older systems).z python3 -c python3rz python -c )rrrr)rCrrs&& r#_run_python_snippet'ShellFileOperations._run_python_snippetslk$*@*@*I)JKL   q Y6==3F3FB%GZZ*T-C-CG-L,M NOF r%c v<V^8dQhRS[RS[RS[S[S[S[,,S[S[,S[3,/#)rbodymorer)r!tuplerrr0r )r"r?s"r#r$r s?000S0U8DI;NPXY\P]_l;l5m0r%c  a\\4pRV 2oRPV3RlV44pVPRS RV RV S R24p\ VP ;'gRV4p\ V4\ V4^,8wdRRV3#V^R \\VR ,4P4^,4V3# \\3d T^R RT3u#i;i) uaRun BODY, then each of MORE, each in its own sentinel-delimited segment; return (those segments, BODY's exit status, reply). The transport merges the backend's own stdout with the command's, and every caller here decodes a segment into file bytes, so the payload has to be delimited rather than taken to be the whole reply: a remote shell announcing ``TERM`` is four base64 characters that would otherwise join the payload and decode to ``b"LDL"`` at the head of it. The fence drops noise OUTSIDE it only; output emitted while BODY runs (a ``BASH_ENV`` DEBUG hook) lands inside the payload, so a caller that writes the bytes back must verify them independently (MORE). The status rides in its own trailing segment so a failed BODY is still told apart from an empty file. ``(None, None, reply)`` when no fenced reply came back — the command never ran as written. echo rc34<"TF pS RV R2xK R#5i); NrB).0rmarks& r# 3ShellFileOperations._fenced_read..0s:Tc$r#b)Tsz{ set +x; } 2>/dev/null; rz ; __hb=$?; z ; echo $__hbN) r_BYTES_SENTINEL_PREFIXjoinrrrlenr0rr IndexErrorr)rCr r rrestrsegmentsrs&&* @r# _fenced_read ShellFileOperations._fenced_read s!!78xj!ww:T::9$r${SWRXY]X^^jkl"6==#6#6BA x=CIM )v% % 0Ab>3'B8B<'P'V'V'XYZ'[#\^dd dJ' 0Ab>4/ / 0s5C C&%C&c,<V^8dQhRS[RS[RS[/#)rdata size_segmentr)r r!r\)r"r?s"r#r$r=s'XXEXXXr%c \V4P4p\V4^8H;'d>V^,P4;'d\ V^,4\V48H#)zWhether DATA is exactly as long as the file's own ``wc -c``. Noise inside the payload only ever ADDS text, and any addition that still decodes adds bytes, so equal length is the check; noise in the size segment breaks its single-integer shape instead.)rrrisdigitr0)r r!tokenss&& r# _matches_size!ShellFileOperations._matches_size<sU -\:@@B6{aWWF1I$5$5$7WWCq NcRVi/dev/null | base64N)rr_decode_base64_sample)rCr;r(rread_rc_s&&& r#_sample_file_bytes&ShellFileOperations._sample_file_bytesDs] $00vha 6 6t <==R S U1  w!|))(1+66r%c\<V^8dQhRS[RS[S[S[,S[S[,3,/#rHr!r rr r )r"r?s"r#r$rVs.22c2eHUOXmE\4\.]2r%c  VP4'EdF^RIp\PP V4'dTMH\PP \ VPRR4;'g VPV4p\P!V\P\ \R^4,4pVP\P!V4P4'dJ\VRRR7;_uu_4pVP4R3uuRRR4\P!V4#\P!V4VP#V4pVP%RV 2RV 24wrxp \'V R 2^R 7p VfRV P(^8wdV 3#T 3#VfRV 3#V^8XdVP+V4#VwrV^8wdRVP-WV43#VP/V 4p V eVP1W4'gRV 3#V R3# +'giL;i \P!T4i;i \ dELi;i) a The file's bytes exactly, for the edit paths that write back every line they did not touch. The text transport cannot carry them: it decodes with errors="replace", so a byte UTF-8 cannot decode comes back as U+FFFD and the edit then persists it. A native read on the local POSIX host, else base64 over the transport; ``(None, result)`` hands back the failed shell read for the caller's message. Only a regular file gets a native open (a FIFO would block this thread); the rest take the shell path and its timeout, as before.Nr O_NONBLOCKrbF)closefd base64 < wc -c < 0: the backend returned a garbled byte-exact readrr)_native_read_enabledstatosr;isabsrrrropenO_RDONLYS_ISREGfstatst_modereadcloseOSErrorrrr r_read_exact_bytes_hex _failed_readr+r%)rCr;_statfullfdfhargrr,rgarbledpayloadr5r s&& r#_read_exact_bytes%ShellFileOperations._read_exact_bytesVs   $ $ & & 77==..4BGGLL%.::$((D5BD  WWT2;;\11M#MN!}}RXXb\%9%9::!"dE::b#%779d?;:HHRLBHHRL$$T*$($5$5 #6G8TWSXIY$Z!6$/_'`lmn  6#3#3q#8E EgE E ?= c>--d3 3  a<**4'BB B))'2 30% non-printable chars.Tu�:NiNc3\"TF"p\V4^ 8gKVR9gK^xK$ R#5i) z N)ord)rcs& r#r8ShellFileOperations._is_likely_binary..s)f+@aCFRKTU]eTe+@s ,, ,g333333?F)rsumminr)rCr;rp non_printables&&& r#_is_likely_binary%ShellFileOperations._is_likely_binarysY  % % >%00f>%+@ffM 3s>':D#AADH Hr%c&<V^8dQhRS[RS[/#rHr)r"r?s"r#r$rsEEcEdEr%cx\PPV4^,P4\9#r)r<r;splitextlowerIMAGE_EXTENSIONSrKs&&r# _is_imageShellFileOperations._is_images+ww%a(..04DDDr%c,<V^8dQhRS[RS[RS[/#)rrP start_linerr))r"r?s"r#r$rs'MMM#McMr%c a^RIHpV!4oVPR4pRPV3Rl\ VP R4VR744#)zPrefix each line with a compact ``|`` gutter, clamping long lines. Not fixed-width: padding cost ~16% more tokens per line for no accuracy gain in A/B, while dropping numbers regressed line-referencing.get_max_line_lengthrc3n<"TF*wrT R\V4S8:dTM VRSR, 2xK, R#5i)|Nz... [truncated]r)rilinemax_line_lengths& r#r8ShellFileOperations._add_line_numbers..sBMKc3t974TBR?=SVg=gh iKs25)rk)tools.tool_output_limitsr removesuffixr enumerater)rCrPrrrs&&& @r#_add_line_numbers%ShellFileOperations._add_line_numberssU A-/ &&t,yyM$W]]4%8 KMM Mr%c&<V^8dQhRS[RS[/#rHr)r"r?s"r#r$rsr%c ^RIHp\VPRR4p\VPRR4;'gRpT!Y;'gRV4pV'dV#V'dVP R4'gV#VP R4pVP ^8XEd1VPP4'EdVPP4pVR8XdV#VP R 4'dWqR ,,#VR ,pVPR 4p V ^8dVRV MTp V 'd\P!R V 4'dzVP R V 24p V P ^8XdUV PP4'd5V PP4V^\V 4,R,#V#)uExpand ``~`` / ``~user`` via the backend's shell (its HOME, not the host's). A host path under the configured workspace mount is rewritten to that container path first, so a Windows drive path is readable inside Docker. Must run BEFORE shell escaping — ~ doesn't expand in quotes.)translate_mounted_host_pathhost_cwdNhost_cwd_mountz /workspacer~z echo $HOMEz~/:rNNrz[a-zA-Z0-9._-]+zecho ~) rrrrr*rrrrfindr]r^r) rCr;r host_rootcontainer_root translatedrhomer slash_idxusername expand_results && r# _expand_path ShellFileOperations._expand_pathst KDHHj$7  +;TBRRl0BW  4??3//KL)   q V]]%8%8%:%:==&&(Ds{ t$$2h&8D #I+4>tJY'tHBLL);XFF $ VH:+> ?  **a/M4H4H4N4N4P4P(//557$q3x=?P?Q:RRR r%c,<V^8dQhRS[RS[RS[/#)rrLtranslate_pathrr)r"r?s"r#r$rs"77S7$7#7r%c ^RIHpHpV'd V!V4pM7V'd0\VPRR4'dVP RR4pRVP RR4,R,#)aEscape a string for safe use in shell commands. On Windows native drive paths (``C:\Users\x`` / ``C:/Users/x``) and mixed MSYS leftovers (``/c/Users\x``) are rewritten to the Git Bash ``/c/Users/x`` form via ``_bash_safe_path``: bash eats backslashes and MSYS otherwise mangles drive paths into the ``Directory \drivers\etc does not exist`` failure class. Reuses the env-layer translator so shell file ops and the terminal ``cd`` agree on the path form. No-op off Windows and for plain POSIX paths. ``translate_path=False`` skips that translation for non-path values such as regex patterns. Backslash compensation applies only to the local Windows argv transport. Serialized shell text stays literal. ) _IS_WINDOWS_bash_safe_pathis_localF\z\\''"'"')tools.environments.localrrrrreplace)rCrLrrrs&&& r#r%ShellFileOperations._escape_shell_argsU J !#&C WTXXz5AA++dF+CS[[i00366r%c&<V^8dQhRS[RS[/#)rrLrr)r"r?s"r#r$r/s773737r%c ^RIHpHpV'd!V'dV!V4PRR4pRVPRR4,R,#)u*Quote a path for a NATIVE Windows binary (rg, node, git ...): those don't understand the MSYS ``/c/...`` form and Hermes disables MSYS argument conversion, so nothing translates it back (→ ``os error 3``). ``C:/Users/x`` is accepted by every layer. Identical to ``_escape_shell_arg`` off Windows.)r_msys_to_windows_pathrrrr)rrrr)rCrLrrs&& r#_escape_native_tool_arg+ShellFileOperations._escape_native_tool_arg/s? P 3',44T3?CS[[i00366r%c,<V^8dQhRS[RS[RS[/#rr;rPrr)r"r?s"r#r$r9s":6:6#:6:6 :6r%c VP4'd]\P!VPV4VP RR44p\ T;'gRV'd^R7#^R7#VP V4pTP \PPV4;'gR4pVP R4pRV RV R 2V,R ,pVPWrR 7#) u<Write ``content`` atomically: stdin → temp file in the SAME directory → ``mv -f`` (same-FS rename; cross-device ``mv`` is copy+unlink, NOT atomic). ``mkdir -p`` folded in. Exit 0 = swap happened; non-zero = original intact. Symlink targets are resolved first (replacing the link would orphan the target) and the temp dir recomputed from the RESOLVED target. Existing target: mode copied via ``stat`` (GNU ``-c%a`` / BSD ``-f%Lp``) + ``chmod`` (``chmod --reference`` is GNU-only). New target: ``chmod "=rw"`` AFTER cat gives umask-default perms instead of mktemp's 0600 — not ``$(umask)`` arithmetic (zsh parses leading-zero constants as decimal), quoted so zsh doesn't =word-expand. ``trap ... EXIT`` removes the temp on every failure. The local POSIX backend does the same in-process (``tools.file_operations_native``). rhsurrogateescaperr9rz.hermes-tmp.XXXXXXz set -e; d=z; t=z; if [ -L "$t" ]; then rt="$(readlink -f "$t" 2>/dev/null || realpath "$t" 2>/dev/null || true)"; [ -n "$rt" ] && { t="$rt"; d="$(dirname "$t")"; }; fi; mkdir -p "$d"; tmp="$(mktemp -p "$d" a 2>/dev/null || mktemp "$d/.hermes-tmp.$$.XXXXXX" 2>/dev/null || { tmp="$d/.hermes-tmp.$$"; : > "$tmp" && echo "$tmp"; })"; [ -n "$tmp" ] || { echo "atomic write: could not create temp file" >&2; exit 1; }; trap 'rm -f \"$tmp\"' EXIT; if [ -e "$t" ]; then m="$(stat -c%a "$t" 2>/dev/null || stat -f%Lp "$t" 2>/dev/null || true)"; [ -n "$m" ] && chmod "$m" "$tmp" 2>/dev/null || true; fi; cat > "$tmp"; if [ ! -e "$t" ]; then chmod "=rw" "$tmp" 2>/dev/null || true; fi; mv -f "$tmp" "$t"; trap - EXIT)r) r: _native_io atomic_write _native_pathencoder rr<r;dirnamer)rCr;rPrq_pathq_parenttmplscripts&&& r# _atomic_write!ShellFileOperations._atomic_write9s  $ $ & &++D,=,=d,CW^^T[]nEopE  EqQ QqQ Q''-))"''//$*?*F*F3G%%&:;   $vh'%! %,(,- ,,/-$  Lzz&z55r%c<<V^8dQhRS[RS[S[,RS[/#)rr;rQr)r!rr\)r"r?s"r#r$rus+KK#KHSMKTKr%c ~VPV^4pVP^8H;'d\VP4#)uWhether the on-disk file starts with a UTF-8 BOM. ALWAYS probes disk: ``pre_content`` usually comes from ``read_file_raw``, which strips BOMs, so trusting it would silently drop the marker on rewrite. Missing → False.)rrrr)rCr;rQ head_results&&& r# _file_has_bom!ShellFileOperations._file_has_bomus8jjq) $$)JJh{7I7I.JJr%c2<V^8dQhRS[RS[RS[RS[/#)r old_content new_contentfilenamerr)r"r?s"r#r$r|s*???3?#?RU?r%c RP\P!VPRR7VPRR7RV 2RV 2R74#)rT)keependsza/zb/)fromfiletofile)rdifflib unified_diff splitlines)rCrrrs&&&&r# _unified_diff!ShellFileOperations._unified_diff|sSwww++  " "D " 1;3I3ISW3I3X(_r(_>? ?r%c&<V^8dQhRS[RS[/#rHrI)r"r?s"r#r$rsOOOOr%c "\RV R2R7#)z5Error for a path that exists but would block if read.z Cannot read 'zr': not a regular file (directory, dangling symlink, FIFO, socket, or device). Reading it could block indefinitely.rr )r;s&r#_not_regular_error&ShellFileOperations._not_regular_errors&D6"M MO Or%c<<V^8dQhRS[RS[S[S[3,/#rH)r!r r0)r"r?s"r#r$rs#!!!c3h!r%c VPV4pVPRV RV RV RV R\ R\ R2 4p\ VP 4P 4pV\8XdR #V\8XdR #VP^8wd^VP;'gR3#\V4R 3# \dR u#i;i) aByte size of a REGULAR file: ``(file_size, status)`` with status ``"ok"``, ``"missing"``, ``"not_regular"``, ``"bad_size"`` (unparseable ``wc``), ``"env_unavailable"``, or the named working-directory error when the exec wrapper itself failed (``_env_unavailable_error`` surfaces it verbatim). ``wc -c <`` on a writer-less FIFO/socket//dev/zero blocks forever and a name-based blocklist can't cover a FIFO (a file TYPE at any path); ``[ -f ]`` is a stat (symlinks followed) so it answers without touching content. A dangling symlink is ``not_regular``, never ``missing``: the entry exists, and a writer told the path is free would follow the link and create its target.if [ -f  ]; then wc -c < z 2>/dev/null; elif [ -e ] || [ -L  ]; then echo ; else echo ; fienv_unavailableok)rmissing)r not_regular)rbad_size) rrNOT_REGULAR_SENTINELMISSING_SENTINELrrrrrr0r)rCr;rL stat_result stat_outputs&& r#_probe_regular_file'ShellFileOperations._probe_regular_files$$T*jjse,SE2[^>'#:;BB7K :--/Bzzd>wi~ V  r%c H<V^8dQhRS[RS[RS[RS[RS[S[,/#)rr;r<r=r/r)r!r0rr )r"r?s"r#r$rs>P?P?CP?P?SP?#&P?+3J+?P?r%c  \a\V4'gW@P8dR#R\P!V4 R\ V4 R\ V4 RVP RVP R2 pVP V4pVP^8wd/RVP;'gR 9dVP VR R 7p\VP;'gR 4pVPR 4pVP^8wgV^8dR#Wx\R 4,RP4p \P!R V 9dV PR ^4^,MT 4p V R,p \ V R,4p \V P!RR44p Y#,^, pY8pRT P)4 R2.pT'd&TP+RT^, RT RT RT R2 4^RIHpT!4o\0;QJd.T3RlT PR 44F 'gK RM# RM!T3RlT PR 444p\3TP5Y4T YORP7T4T'dRR7#RR7# \"\$\&3dR#i;i)zRead ``path`` as UTF-16 transcoded to UTF-8, or None (caller falls back to the binary-file error). Skips known-binary extensions and files over 10 MiB. ``path`` must already be expanded.Nzimport sys, json, os p = z offset = z limit = z MAX = z SAMPLE = af try: size = os.path.getsize(p) if size > MAX: print('HERMES_UTF16:NO'); sys.exit(0) with open(p, 'rb') as f: data = f.read() sample = data[:SAMPLE] enc = None if sample[:2] == b'\xfe\xff': enc = 'utf-16-be' elif sample[:2] == b'\xff\xfe': enc = 'utf-16-le' else: odd = sum(1 for i in range(1, len(sample), 2) if sample[i] == 0) even = sum(1 for i in range(0, len(sample), 2) if sample[i] == 0) if even == 0 and odd >= 2: enc = 'utf-16-le' elif odd == 0 and even >= 2: enc = 'utf-16-be' if enc is None: print('HERMES_UTF16:NO'); sys.exit(0) text = data.decode(enc, 'replace') if text[:1] == '\ufeff': text = text[1:] text = text.replace('\r\n', '\n') lines = text.split('\n') total = len(lines) sel = lines[offset - 1: offset - 1 + limit] out = {'total_lines': total, 'encoding': enc, 'content': '\n'.join(sel)} print('HERMES_UTF16:OK') print(json.dumps(out, ensure_ascii=True)) except Exception: print('HERMES_UTF16:NO'); sys.exit(0) rrpythonrzHERMES_UTF16:OKrrP total_linesencodingzutf-16zTranscoded from zP to UTF-8 for display. Text edits via patch/write_file would re-encode as UTF-8. Use offset= to continue reading (showing - of  lines)rc3@<"TFp\V4S8xK R#5irrrrrs& r#r6ShellFileOperations._try_read_utf16../sZFYdc$i/9FYTFrrPrr/ truncatedrtruncated_lines)r_UTF16_MAX_BYTESrdumpsr0_UTF16_SAMPLE_BYTESr rrrrrrrrr!rrKeyError TypeErrorupperrrranyr rr)rCr;r<r=r/rrrmarkerrNr rPrrend_liner hint_partsrrrs&&&&& @r#_try_read_utf16#ShellFileOperations._try_read_utf16s  % %5J5J)J ::d#$%F }%5zl#**+,001"2: ' : V**73   q Y6==3F3FB%G..w8.DF,V]]-@-@bA./   q FQJ#&7"889:@@B ::47?gmmD!4Q7PWXD9oGd=12K488J9:H>A%* ()9(:;RRS    hl^,"81XJd;-wH I A-/#ZgmmTXFYZ###ZgmmTXFYZZ**7;388J;O$3D? ?:>? ?Hi0  s.A,JJ+*J+c2<V^8dQhRS[RS[RS[RS[/#r:r>)r"r?s"r#r$r5s5YPYPcYP3YP3YP*YPr%c  VPV4p\W#4wr#VP4'dVPWV4#VP V4'g\ V4'dVP WV4#^RIHp^V!4,^,pW#,^, p\\4pVPVPWWeV44pVP;'gRp Wy9d\V 4P4p V \ 8XdVP#WV4#V \$8XdVP'V4#\(P+RWP,\/V 44VP WV4#\1W4p VP,^8wg\/V 4^8wd=\(P+RWP,\/V 44VP WV4#V wrrpp\V4P34p\5V^,4\5V^,4pp\5\T 4P44pT^8XdTP;T 4MRpTeTP=T4pMN\(P+RTT4\TP?TR4P4pTPATT4pT'dTPCYTTT4#T^8wd\ER \T4 2R 7#\T4p\5\T4P44p\T4P4pTR9dTR 8HMRpTPGTY&TTTR 7# \6\83d0\(P+RTTR R4TP YT4u#i;i \8d^pELwi;i \8d^pLi;i)a Read a file with pagination, binary detection, and line numbers. ``offset`` is 1-indexed; ``limit`` is clamped by ``normalize_read_pagination``. One shell round-trip answers every question the read needs (existence, size, binary sample, page, line count, trailing newline; see ``_read_probe_cmd``). An unparseable reply falls back to ``_read_file_sequential`` (one probe per question), so an exotic shell can never do worse than before. On a local POSIX environment the read never touches the shell (``_read_file_native``). rrzmread_file: compound probe reply for %s has no sentinel (exit %s, %d chars); falling back to sequential probesznread_file: compound probe for %s returned exit %s with %d segments (want 6); falling back to sequential probesz]read_file: compound probe for %s has unparseable status %r; falling back to sequential probesNznread_file: no usable base64 sample for %s (base64 exit %s); paying one extra round-trip for the text heuristicrwFailed to read file: r1r<r'rr/file_ends_with_newlinei)0r.)$rrr:_read_file_nativerr_read_file_sequentialrrr_READ_SENTINEL_PREFIXr_read_probe_cmdrrrr_read_file_missingrrloggerdebugrrrrr0rrr+rmrr{_read_binary_filer _assemble_read_result)rCr;r<r=rline_clamp_bytesr'rproberr&rsize_seg sample_segpage_segwc_segtail_seg status_segr sample_rcr,r/r is_binaryr read_outputr tail_flagr0s&&&& r#rDShellFileOperations.read_file5s  &1&@   $ $ & &))$> > >>$  #7#=#=--dEB B@244q8>A% !67 4//hZbcd##  !08>>@F))..tUCC--..t44 LLIoos6{ 4--dEB B"64 ??a 3x=A#5 LLGoos8} 6--dEB BGODh*,Z8>>@ C!$VAYVAYwI 7AGGIJI BKat11*=UY  #44\BI LLEFJI W8 48N8U8UVM..t]CI ))$y,W W a<&;*5Lc!1RV)) {8N*P PEJ' C LL459:cd;K M--dEB B  C I , K s6$M:4"N="O:=N:9N:= O O O! O!c <V^8dQhRS[/#r)r\)r"r?s"r#r$rs B Bd Br%c \PPRR4P4P 4pVR9dR#\ P R8g;'dVP4#)aWhether ``read_file`` and ``search_files`` may bypass the shell: only POSIX + ``LocalEnvironment`` (file is on this host, path already native; Windows keeps the shell path since file_operations holds Git-Bash-style paths there). ``HERMES_NATIVE_FILE_READ=0`` turns the fast path off.HERMES_NATIVE_FILE_READr.Fwin32)r1falsenooff)r<environrrrrplatformr)rCflags& r#r:(ShellFileOperations._native_read_enabledsY zz~~7=CCEKKM . .||w&AA4+?+?+AAr%c&<V^8dQhRS[RS[/#rHr)r"r?s"r#r$rsoooor%c \PPV4'dV#\PP\ VP RR4;'g VP V4#)zN``path`` resolved the way the shell resolves it: against the live backend cwd.rN)r<r;r=rrrrrKs&&r#r ShellFileOperations._native_pathsLww}}T**tn WTXXuVZ=[=g=g_c_g_gim0nnr%c2<V^8dQhRS[RS[RS[RS[/#r:r>)r"r?s"r#r$rs/XXcX3XsXzXr%c  ^RIp\PPV4'dTMH\PP \ VP RR4;'g VPV4p\P!V4pTPTP 4'gTPT4#TP"pTP%T4'dTP'T4#^RIHp^T!4,^,p Y#,^, p .p ^p ^p \-4pRpRp\.P0!4p\3TR4;_uu_4pTP5R4p\7T4pT'gTP9T4'dTP;YY7T4uuRRR4#TP=^4TP5R4pT'gEMQTP?T4TRRpY8d#T TPAR 4, p TRRR 8gpKZ^\CT4ppTT8gKpTPER T4pY-u;8*;'dT 8*MupT^8d@T'd4\CT4T 8d$TTTTT \CT4, ,, pRpKT'd_\CT4T 8d.TTT\GTTT \CT4, ,4, pT PI\KT4R ,4\-4pRpT ^, p T ^, p T^,pEKRRR4T'd3Y-u;8:dT 8:d%MM!T PI\KT4R ,4\MRP T 4POR R R 74pTPQTY*T TT'dTR 8HMRR 7pTPRTPTTP"TPVTPXTP[43Tn.T# \\3dN\PPT4'dTPT4u#TPYT4u#\dTPYT4u#i;i +'giELg;i \dTPYT4u#i;i)u``read_file`` without a shell — same contract as the shell path, byte for byte. ``os.stat`` is the ``[ -f ]`` guard (a stat, never an open, so FIFOs and devices are refused before anything touches them); the first 1000 bytes drive the byte-layer binary check; the page is produced exactly as ``sed -n 'a,bp' | cut -b1-N`` prints it (each line clamped to N bytes and newline-terminated) then decoded with errors="replace" like the transport. One chunked pass counts lines and collects the page, so neither the file nor a pathological line is ever held whole. ``path`` is already expanded; any unexpected OSError hands over to the shell path.NrrFr%r4rwT rhr)errorsr/r3r)/r;r<r;r=rrrrFileNotFoundErrorNotADirectoryErrorislinkrr6rEr3r@rBst_sizer_image_redirect_resultrr bytearrayhashlibsha256r>rCrrmr9seekupdatecountrrryrr rrir:st_devst_ino st_mtime_ns st_ctime_nsdigest _snapshot)rCr;r<r=rHrIstr/rclampr'pagerlinenokept have_partial last_byterirKrrchunkposnnlin_pagerErs&&&& r#r2%ShellFileOperations._read_file_natives ww}}T**t DHHeT * 6 6dhh1> CB}}RZZ((**40 0JJ >>$  ..y9 9@'))A->A% {  !& CdD!!R1$7 !=!=f!E!E11$RXY "!  GGG,E MM%( %bc I($u{{5'99 ',RSzU':  E C'"ZZs3"(">">h">6&3t9u+< $c#T9J2K(L L+/L!""4y50 $c#b#TAR:S2T(U U KKd e(;<({', #q( !  1fG"L F88 KKd e+ ,1#((4.2G2GXa2G2bc ++ {;DI$6$,PIIryy"**bnnbnn^d^k^k^mn Q"#56 @ww~~d##..t44**4? ? C--dEB B C("!!H C--dEB B Cs6PR#;RR( R#3AR)BR1R#5R R R -R 6R  R  R R# R##SSc&<V^8dQhRS[RS[/#)rr/r)r0r )r"r?s"r#r$rsZZ#Z*Zr%c \RRVRR7#)TzImage file detected. Automatically redirected to vision_analyze tool. Use vision_analyze with this file path to inspect the image contents.)is_imagerDr/rr)r/s&r#r^*ShellFileOperations._image_redirect_resultsTYXZ Zr%c ><V^8dQhRS[RS[RS[RS[RS[RS[/#)rr;r<r'r;rrr))r"r?s"r#r$rs:11C111*-19<1AD1r%c VPV4pRV 2pRP.RNV NRNV NRNV NRNV NRNV NRNV NR NV NR NV NR NV NR NV NR NV NRNV NRNV NRNV NRNV NRNV NRN\ NRN\ NRN4#)uOne shell command answering every question ``read_file`` asks: six segments each closed by a ``sentinel`` line — byte size, base64 of the first 1000 bytes, the ``sed | cut`` page, ``wc -l``, whether the last byte is a newline, then the base64 and page pipeline statuses. Probes run only inside ``[ -f ]`` (stat-not-open, like ``_probe_regular_file``) so a FIFO/device never reaches ``head``/``sed``. A missing path echoes ``MISSING_SENTINEL`` (a compound command only reports its last status). Every stage silences stderr: the local backend merges stderr into stdout and a stray diagnostic would land inside a segment. The byte clamp is ``4 * max_line_length + 1``; see ``_read_file_sequential``.rrrrz 2>/dev/null; z; head -c 1000 z, 2>/dev/null | base64 2>/dev/null; __hs=$?; z ; sed -n ',p' z 2>/dev/null | cut -b1-z 2>/dev/null; __hr=$?; z ; wc -l < z ; tail -c 1 z 2>/dev/null | wc -l; z ; echo "$__hs $__hr"; elif [ -e rrrr)rrrr)rCr;r<r'r;rrLrs&&&&&& r#r5#ShellFileOperations._read_probe_cmds$$T*xj! 0 0h 0se 0 0e 0) 0*. 00 05 0 L 0MQF 0S 0h 0  0!)z 0*- 0.1E 02 0++ 0,C 0DH& 0I 0 e 0 * 0 +/ 0 0 0  0 4 0 596 0 : 0 0) 0*- 0.< 0=Q;Q 0R 0** 0+/ 0 1r%c2<V^8dQhRS[RS[RS[RS[/#r:r>)r"r?s"r#r$rs)11s1C11 1r%c VPV4pVePVPWBVR7pRV RV R2pVP'dV RVP 2VnV#TVnV#VPV4#)uNot-found recovery shared by every read path. Unicode-equivalent spellings (NFC/NFD, confusable spaces/quotes) render identically, so the model can never discover the byte mismatch by retyping — retrying is the tool's job. No equivalent spelling → suggest similar files.)r<r=zNote: 'zD' not found byte-for-byte; resolved to the unicode-equivalent file 'zM' (invisible encoding difference: NFC/NFD or special space/quote characters).r)_unicode_variant_matchrDr_suggest_similar_files)rCr;r<r=variantrnotes&&&& r#r6&ShellFileOperations._read_file_missings --d3  ^^G%^HF$ 007y9  6<[[[TF!FKK=1FKMGKFKM**400r%c N<V^8dQhRS[RS[RS[RS[RS[S[,RS[/#)rr;r<r=r/rr)r!r0rr r )r"r?s"r#r$r,sFAAcA3AsA%(A8@ALVAr%c `VPWW44pVeV#\RV\WT4R7#)aBinary branch shared by every read path: UTF-16 text (Notepad, PowerShell ``>``) trips the binary guard; transcode it, else refuse with the type name. UTF-16 rescue (ported from MoonshotAI/kimi-code#2647): the terminal env decodes stdout as UTF-8 with errors="replace", so a UTF-16 text file (Windows Notepad .txt, PowerShell `>` redirects) arrives mangled with U+FFFD and trips the binary guard. Probe the raw bytes via the backend's Python and transcode to UTF-8 when a BOM or the zero-byte parity heuristic identifies UTF-16. TrDr/r)r)r r6)rCr;r<r=r/r utf16_results&&&&&& r#r9%ShellFileOperations._read_binary_file,s>++D%K  # i&|?A Ar%c2<V^8dQhRS[RS[RS[RS[/#r:r>)r"r?s"r#r$r=s/0P0P#0Ps0P30P:0Pr%c  rVPV4wrEVR8XdVPWV4#VR8XdVPV4#VR9dVPW4#VP V4'dVP V4#VP V4wrgV'dVPWW4V4#^RIH p^V!4,^,p W#,^, p VPRV RV RVPV4 RV 24p V P^8wd\RV P 2R 7#\V P4p VPR VPV4 24p \!\V P4P#44pR pW8gsV P'R 4'd\VPR VPV4 R24pVP^8Xd'\VP4P#4R8gpVP)WWWOR7# \$d^pLi;i)zOne-probe-per-call read: the pre-compound form, kept as fallback for image / known-binary extensions and unparseable compound replies. ``path`` is already expanded and ``offset``/``limit`` normalized.rrrzsed -n 'r~rz | cut -b1-r-rzwc -l < Nrz tail -c 1 z | wc -lr1r/rr)rr6rrrr^rr9rrrrrr rrr0rrendswithr:)rCr;r<r=r/rrDrrr;r' read_resultrE wc_resultrr0 tail_results&&&& r#r3)ShellFileOperations._read_file_sequential=s7!44T: Y **4? ? ] "**40 0 + +..t< < >>$  ..y9 9"&"5"5d"; ))$,W W A244q8>A%jjvhazT-C-CD-I,J*+ -.   A %&;K*>t*D*D**z$2H2H2N1Ox%XYK$$))D[EWEW)X)^)^)`dg)g&)) *P P K s,,H&& H65H6cT<V^8dQhRS[RS[RS[RS[RS[RS[S[,RS[/#)rrEr<r'rr/r0r)r!r0rr\r )r"r?s"r#r$rosG)?)?)?)?PS)?+.)?;>)?6>tn)?IS)?r%c  a V^8dVRJd V^, pV^8Xd\V4wrWC8pRp V'dRV^, RV RV RV R2 p V'g#VPR4'd VRJdVRRpV^8Xd\R ^^R R 7#Y$u;8d^8dMM\R WER V R V RV R2R 7#^RIHp V !4o \ ;QJd.V 3RlVP R44F 'gK RM# RM!V 3RlVP R444p \VPW4TYXT V 'dRR7#RR7#)a.Turn a raw ``sed | cut`` page into the final ``ReadResult``. Shared by every read path so the BOM strip, pagination hint, ``cut`` newline-artifact fix and the ambiguous-silence guards never drift apart. ``file_ends_with_newline`` is None when the caller could not tell (artifact left alone, as before).FNrrrrrrrzFile is empty (0 bytes).)rPrr/rz Note: offset z is beyond the end of the file (z$ lines total). Retry with offset <= rrc3@<"TFp\V4S8xK R#5irrrs& r#r.s^F]dc$i/9F]rTrr)rrr rrr%rr) rCrEr<r'rr/r0r-rrrrrs &&$$$$$ @r#r:)ShellFileOperations._assemble_read_resultosk q=3u< 1 K Q;' 4NK*   A.LVHTUV^U__cdocppwxD[11$77ba1Kef f  #! # #F8,#}$H"m1&( ( A-/#^kFWFWX\F]^###^kFWFWX\F]^^**;?[4$3D? ?:>? ?r%c6<V^8dQhRS[RS[S[,/#rHr)r"r?s"r#r$rs38C=r%c a\PPV4;'gRp\PPV4pV'gR#RV3RllpV!V4pSP RSP V4 R24pVP ^8wg!VPP4'gR#\VP4P4Uu.uF&pV'gK Ws8wgKV!V4V8XgK$VNK( pp\V4^8Xd>VR8wgRV9d'\PPW(^,4#V^,#R#uupi)uOn-disk spelling of a file whose name is unicode-equivalent to ``path`` (NFC/NFD, confusable spaces/quotes). Returns the entry only when EXACTLY one matches — several candidates = homoglyph collision, guessing would read the wrong file.rNc0V^8dQhR\R\/#)rr,rr)r"s"r#r$@ShellFileOperations._unicode_variant_match..__annotate__s    r%c<\P!RV4pSPFwr#VPW#4pK V#)NFC) unicodedata normalize _CONFUSABLESr)r,outrnrorCs& r#_canon:ShellFileOperations._unicode_variant_match.._canons:''t4C --kk#+.Jr%ls -1 rr) r<r;rbasenamerrrrrrrrr) rCr;dir_pathrrrv ls_resultentry candidatess f& r#r*ShellFileOperations._unicode_variant_matchs5 77??4(//C77##D)   !JJ(>(>x(H'IVW   ! #9+;+;+A+A+C+C:9;K;KLWWYHYe * /5e}/F EY H z?a /dev/null | head -50rg?Ng?cV^,)#)rrB)xs&r#.s 1Q4%r%)keyFile not found: T:NN)r not_found similar_files)r<r;rrrrrrrrrrr*rsetmaxrSequenceMatcherratiorrsortr )rCr;rrbasename_no_extext lower_namerscoredflfscorecommonr-fps&& r#r*ShellFileOperations._suggest_similar_filessq77??4(//C77##D)''**84Q7==?ggx(+113^^% JJ(>(>x(H'II`ab    ! # (8(8(>(>(@(@%%++-33D9WWY#EWW%%a(+113FE]]:..*2G2G2K2KE%E%#b'A+ERWW--a0399;sB _s2w6F6{c#j/3r7&Cc&II "A:'"9"9$ "O"U"U"W[^"^E19MM5"'',,x*C"DE/:0   ("24& 9T9?(D(DF F(Ds( L>c&<V^8dQhRS[RS[/#rHrI)r"r?s"r#r$rsLL#L*Lr%c VPV4pVPV4wr#VR8XdVPV4#VR8XdVPV4#VR 9dVP W4#VP V4'd\ RRVR7#VPV4wrEV'd\ RV\WR4R7#VPV4wrgVf\ RVP 2R7#\VPRR 44wr\ W\P!V4P4R 7#) zCWhole file as a plain string (no pagination/line numbers/clamping).rrT)rzrDr/rr-rrhr)rPr/_content_sha256r)rrrrrrr rr6rOrrrir`ra hexdigest) rCr;r/rrDrr failed raw_contentr-s && r#rL!ShellFileOperations.read_file_raws)  & 44T: Y ..t4 4 ] "**40 0 + +..t< < >>$  ttyQ Q"&"5"5d";  I]^jIvw w--d3  <&;FMM?$KL L $DKK9J$KL +*1..*>*H*H*JL Lr%c<<V^8dQhRS[RS[S[,RS[/#)rr; max_bytesr)r!rr0r )r"r?s"r#r$rs+WWCWHSMWZWr%c VPV4pVPV4wr4VR8Xd\RV 2RR7#VR8XdVPV4#VR9dVP W4#VR8Xd\RV 2R7#VeW28d\VR VR R VR R 2R 7#VP RVP V4 24pVP^8wd\RVP 2R7#RP\VP4P44p\P!VRR7\YcRR7# \\PP 3d\RT 2R7u#i;i)zERead binary-safe bytes (as base64) from any shell-backed environment.rrT)rrrrzCould not determine file size: rzFile is too large (r~z bytes, limit is ))r/rr6zFailed to read binary file: rr[z*Backend returned invalid binary data for: )base64_contentr/rDr)rrr rrrrrrrrrr_r`rrarb)rCr;rr/rrccompacts&&& r#read_file_bytes#ShellFileOperations.read_file_bytess  & 44T: Y &6tf$=N N ] "**40 0 + +..t< < Z &EdV$LM M  Y%:#+Ia=8I)TUVWXZ Z**y)?)?)E(FGH    !&B7>>BR$ST T''5gnnEKKMN Y   Wt 4QUVVFOO112 Y&PQUPV$WX X Ys"E4E>=E>c&<V^8dQhRS[RS[/#rHrh)r"r?s"r#r$rs&&& &r%c VPV4p\VRRR7pV'd \VR7#R\P!V4 R2pVP V4pVP ^8wd/RVP;'gR9dVP VR R 7pVP ^8wd?\R T R VP;'gRP4;'gR 2R7#\4#)zDelete a single file (directories rejected) via the backend's ``python -c`` so one code path works on local/docker/ssh AND Windows shells (no ``rm``).DeleteTverbrrz-import shutil, pathlib, sys p = pathlib.Path(a\) recursive = False try: if p.is_dir() and not p.is_symlink(): if recursive: shutil.rmtree(p) else: print('is a directory: ' + str(p), file=sys.stderr); sys.exit(2) else: p.unlink() except FileNotFoundError: pass except Exception as exc: print(str(exc), file=sys.stderr); sys.exit(1) rrrrzFailed to delete : z unknown error) rrr rr r rrr)rCr;deniedrrs&& r#rjShellFileOperations.delete_files  &(84H V, , $ 4 01 2B B $**73   q Y6==3F3FB%G..w8.DF   q '8b&--BUBUSUA\A\A^AqAqbq@r%st t}r%c,<V^8dQhRS[RS[RS[/#rmrh)r"r?s"r#r$r@s"  S s { r%cVPV4pVPV4pW3F'p\VRRR7pV'gK\VR7u# VPRVP V4 RVP V4 24pVP ^8wd \RV RV RVP 2R7#\4#) MoveTrrzmv rzFailed to move z -> r)rrr rrrr)rCrnroprrs&&& r#rqShellFileOperations.move_file@s$$A+AF$GFv"00c$"8"8"=!>a@V@VWZ@[?\]^   q se4uBv}}o%VW W}r%z[\ud800-\udc7f\udd00-\udfff]c<<V^8dQhRS[RS[RS[S[,/#rrR)r"r?s"r#r$rSs'   c h{>S r%c VPPV4pV'd$\RV RVP^4: R2R7#R#)zRefuse content with a lone surrogate BEFORE any subprocess: letting it reach the pipe spawns a child that hangs or truncates the target via empty-stdin ``cat``. A regex scan needs no encode.rz0': content contains a lone surrogate character (zH) that cannot be encoded as UTF-8. The file was NOT created or modified.rN)_LONE_SURROGATE_REr}r group)rCr;rPms&&& r#_reject_unencodable'ShellFileOperations._reject_unencodableSsV  # # * *7 3 %dV,(() ~6JJL Lr%c B<V^8dQhRS[RS[RS[RS[S[,/#)rr;rrPrrR)r"r?s"r#r$r`s5DDD#DDQ\H]Dr%c  V\9d\P!V4MRpVfR#V!V4wrEV'gVR8XdR#\RV RV RV R2R7#)a/Fail-closed pre-write gate for ``_FAIL_CLOSED_INPROC_EXTS`` (JSON/YAML/TOML): a structured-format write that doesn't parse is a corrupt write, so refuse before any bytes touch disk. Checked against the RAW content, before the BOM/CRLF shims (post-shim linting would false-positive on a BOM-marked file).N__SKIP__rz': candidate content fails z syntax validation (zC). The file was NOT created or modified. Fix the content and retry.r)rrrr )r;rrPlinterrerrs&&& r#_fail_closed_syntax_error-ShellFileOperations._fail_closed_syntax_error_sp -03K,K##C(QU >/  "!$'Be'u-B BD Dr%cB<V^8dQhRS[RS[RS[S[,RS[/#)rr;rr rr)r"r?s"r#r$rps.11S1C1x}1QT1r%c  VPV4pVR8XdRV R2pMVR8XdRV R2pMRpRV RV R V R V R \ R 2 #) aOne shell command for the on-disk questions ``write_file`` asks. Two segments closed by a ``sentinel`` line: base64 of the first three bytes (BOM detection at the byte layer, same on-disk truth as ``_file_has_bom``), then ``body``: ``"cat"`` for the full text when pre-content is wanted, ``"sample"`` for the 4 KB line-ending sample, or None for nothing. Gated on ``[ -f ]`` so a FIFO/device never reaches ``head``/``cat``; a missing path echoes ``MISSING_SENTINEL``.catrrrz head -c 4096 :rz ]; then head -c 3 z( 2>/dev/null | base64 2>/dev/null; echo rrr)rr)rCr;rr rLbody_cmds&&&& r#_write_probe_cmd$ShellFileOperations._write_probe_cmdpsz$$T* 5=cU,/H X &se<8HHseEhZrj)*$ 0 1r%c |<V^8dQhRS[RS[S[,RS[RS[S[S[S[,S[S[,3,/#rr;rQwant_prerr!rr\r )r"r?s"r#r$rsIA,A,A,(3-A,SWA,!&tXc]HSM'I!JA,r%c .V'dVfRpM V'gRpMRpVP4'd*\P!VPV4VR8H4MRpVe_VwrgV'dVP RR4MRpVR8Xd V'dTpT;'g VR8XdTMRp YbV 'd \ V 43#R3#\ \4p VPVPWV44p V P;'gRp W9dx\V 4P4\8XdV'd \ V4MRp RW-3#\PRWP \#V 44VP%WV4#\'W4pV P ^8wg\#V4^8wd=\PR WP \#V44VP%WV4#VwrVP)V4pVf)\PR V4VP+W4pM%VP-\.P0!R44pVR8Xd V'dTpV'd \ V4p MVR8XdV'd \ V4p MRp WbV 3#) a``(has_bom, pre_content, original_line_ending)`` for ``path`` in ONE round-trip (replaces ``cat`` when pre-content is wanted, a ``head -c 4096`` line-ending sample and a ``head -c 3`` BOM check). Semantics unchanged: pre-content is read only when wanted and not supplied; the line ending comes from pre-content when there is any, else from the sample; the BOM always comes from disk. An unparseable reply falls back to the separate probes.NrrrhrrFzowrite_file: pre-write probe reply for %s has no sentinel (exit %s, %d chars); falling back to sequential probeszpwrite_file: pre-write probe for %s returned exit %s with %d segments (want 2); falling back to sequential probeszWwrite_file: no usable base64 head for %s; paying one extra round-trip for the BOM probe)r:rr<rrirr_WRITE_SENTINEL_PREFIXrrrrrrr7r8rr_probe_write_target_sequentialrr+rr*rr)rCr;rQr body_modenativehas_bomrawr rrr<rendingrhead_seg head_bytess&&&& r#_probe_write_target'ShellFileOperations._probe_write_targetsH  +',I IIRVRkRkRmRm!!$"3"3D"99;MNsw  !LG583::gy1bDE!d"  KKY(-BTF)NN=H,[9dk11 LLIoos6{ 466t(S S"64 ??a 3x=A#5 LLGoos8} 666t(S S!//9   LL/04 6((;G ++I,<,V\P!V4P48wdR\RV R2R73#R#R # \dR #i;i) zCompare the on-disk sha256 to the intended bytes: ``(verified, error)``. The explicit flag saves the model a confirming re-read; a mismatch is a hard error. ``verified`` is None when the hash could not be taken.Nz sha256sum rF#Post-write verification failed for u{: on-disk content hash differs from the intended write. The write did not persist correctly — re-read the file and retry.r)TN)NN)r:r sha256_ofrrrrrrrr`rarr Exception)rCr;r disk_sha hash_results&&& r#_verify_written_hash(ShellFileOperations._verify_written_hashs HLHaHaHcHcz++D,=,=d,CDimH"*$ ZH^H^_cHdGeeq;r0sK&;+@+@A+E+J\J\JbJbJdJd&--335;;=a@w~~m<FFHH +=dVD%%#''' "!   s/D.DAD"6D:DD D('D(cB<V^8dQhRS[RS[RS[S[,RS[/#rOrR)r"r?s"r#r$rs4?b?bs?bS?bx}?bXc?br%c  \P!4pVPV4p\V4pV'd \ VR7#VP W4pVeV#\ PPV4^,P4pVPWV4pVeV#V\9;'gVPV4pVPWV4wrp VR8Xd\WV4pVeV#V R8Xd \VR4pV 'd\!V4'g\"V,p\%\ PP'V44p VP)RR4p VP+W4p V P,^8wd\ RV P. 2R7#VP1W4wrVeV#VP3WVR7pRpVP4'gVP6'dVP9WW$R 7;'gRp\ \;V 4Y\<P>!V 4PA4V'dVPC4VR 7#RVR 7#) uWrite content atomically, creating parent directories as needed. Order: deny list → lone-surrogate refusal → fail-closed syntax gate on the CANDIDATE content (JSON/YAML/TOML) → one compound on-disk probe (pre-content when wanted, CRLF, BOM; see ``_probe_write_target``) → JSON NaN/Infinity refusal when the write introduces one → CRLF/BOM preservation → atomic write (content rides stdin: no ARG_MAX limit) → sha256 verification → lint delta → LSP check when syntax is clean (non-blocking; the pre-edit content is its baseline, see ``_maybe_lsp_diagnostics``). ``pre_content``: pre-edit content the caller already has (skips the read); BOM detection always probes disk. rNz.json rhrzFailed to write file: )rQ post_content)rQrstarted) bytes_written dirs_createdverifiedrlintlsp_diagnostics)"time monotonicrrr rr<r;rrrr_lsp_handles_extensionrrrrrr\rrrrrr_check_lint_deltasuccessskipped_maybe_lsp_diagnosticsrr`rarto_dict)rCr;rPrQrrrefusedrrroriginal_endingrr  write_resultcontent_verified verify_error lint_resultrs&&&& r#rTShellFileOperations.write_filesM.."  &'- V, ,**49  Nggt$Q'--/00GD  N.(LLD,G,G,L040H0H\d0e-o '>6tkRG" f $-gv>G 8G,,')GBGGOOD12  w0AB ))$8  ! !Q &'=l>Q>Q=R%ST T)-)B)B4)W&  # ,,TY`,a *.    +"5"5"5"99G:V^^Y] m,<#NN=9CCE*5$$&Q`b b<@Q`b br%cT<V^8dQhRS[RS[RS[RS[RS[RS[S[,RS[/#)rr;rPrXrY match_countrr)r!r0rr )r"r?s"r#r$r/sF**S*3*C*%(*7:*CKC=*U`*r%c ^RIHpHpV!W#V4'd\RRRV R2R7#T;'gRV 2p W!WW24, p \V R7# \dLi;i)a!PatchResult for a failed fuzzy match. Already-applied detection first: the most common production failure is a re-send of an edit that already landed, and a success-shaped no-op stops the model burning turns on re-reads. Otherwise attach a best-effort "Did you mean?" snippet to the error.)format_no_match_hintis_already_appliedTuTFile already contains the target text — the edit appears to be already applied to z0. No write performed; do not re-send this patch.)r$ no_changerz'Could not find match for old_string in r)tools.fuzzy_matchr2r3r r) rCr;rPrXrYr0rr2r3err_msgs &&&&&&& r#_no_match_result$ShellFileOperations._no_match_result/s O g: > >88<<> > KKDTFK  +G*V VG))   sA A#"A#c<<V^8dQhRS[RS[RS[S[,/#)rr;rr)r!rr )r"r?s"r#r$rDs'Cch{F[r%c  pVPV4wr4Vf\RV 2R7#\VPRR44wrVVP RR4P RR4pVP RR4P RR4pWx8wd)\R V R \ V4 R \ V4 R 2R7#R#) aFRe-read ``path`` and confirm the intended bytes landed; error result or None. Catches silent persistence failures (FS oddities, races, truncated pipe). Line endings are normalized first (Windows text-mode ``open()`` writes LF as CRLF) and the re-read's BOM stripped (``new_content`` is the BOM-less string we matched against).Nz2Post-write verification failed: could not re-read rrhrrr rz5: on-disk content differs from intended write (wrote z chars, read back zb chars after normalizing line endings). The patch did not persist. Re-read the file and try again.)rOr rrirr) rCr;rr _failedbomlessr-on_diskintendeds &&& r#_verify_patch_persisted+ShellFileOperations._verify_patch_persistedDs ..t4  <'YZ^Y_%`a a G5F GH //&$/77dC&&vt4<.sZ&TXY11&Ts  )r$difffiles_modifiedrrr_writes)rrr rOrrirr5rDrEr7rrrTrr@rrrrr`rarr)rCr;rXrYrZrr rrrPr-rDrErFrr0strategyr file_endingr*r,s&&&&& r#r^!ShellFileOperations.patch_replaceYs  &'- V, ,--d3  <V%5%5%W%W;PQUPV9WX X kk'+<=  , K4J K[5]1 (E K1$(( P[]bc c*'2 1+{KKtkR    '@ASAS@T%UV V33DF  # t11'M_c^d""Z&T(8&T- :S&TZZbb^b(88GNN40::Z>Z[\ ^ ^r%c&<V^8dQhRS[RS[/#rarc)r"r?s"r#r$rs66s6{6r%c d^RIHpHpV!V4wrEV'd\RV 2R7#V!W@4#)zqApply a V4A format patch (``*** Begin Patch`` / ``*** Update File:`` / ``@@ hint @@`` hunks / ``*** End Patch``).)parse_v4a_patchapply_v4a_operationszFailed to parse patch: r)tools.patch_parserrQrRr )rCrbrQrR operations parse_errors&& r#reShellFileOperations.patch_v4as6 M"1-"@ '>{m%LM M#J55r%cf<V^8dQhRS[RS[RS[RS[S[,RS[RS[RS[RS[R S[R S[/ #rtr{)r"r?s"r#r$rsb%%c%%C%"3-%7:%IL%%69%%-9%r%c  r\We4wreVR8XdV R 9d\RV : R2R7#VPV4pVPV4p V Pp V P 'd\V P R7#RV 9dRV 9d\RV R2R7#RV 9d-VP WW4WVWxV 4 p V eV #VPV4#VPWW4WVWxV 4 p VPV4pV'd6V P'g$R PR V44pR V R 2V n V #)uSearch for content (regex, ``target="content"``) or files (glob, ``target="files"``). ``output_mode``: "content", "files_only" or "count"; ``context``: lines of context around matches; ``order``: file-search ordering — fast "discovery" or exact "modified" time.fileszInvalid file search order z%; expected 'discovery' or 'modified'.rexistsrrrr2c3P"TFqPR4R,xK R#5i)rNrr)ritems& r#r-ShellFileOperations.search..sK  3 3 3 s$&z[Skipped macOS protected folders during broad search to avoid an unattended privacy prompt: z@. Search a protected folder directly when access is intentional.>modifiedr) rr r_path_exists_proberr_try_multi_path_search_path_not_found_result_dispatch_search_macos_search_exclusionsrrwarning)rCrur;rvrwr=r<rxryrzr< exists_probemultir exclusionsr%s&&&&&&&&&& r#r}ShellFileOperations.searchsc4FB  W .G!G3E9=446 6  &''-|| ???eoo6 6 < 'K|,K)Z[_Z`al(ln n , &//v%W\^E  ..t4 4&&wf'2UD2248 fllliiK KKG118 :>> N r%)rrrrrr)NNN)rwr)T)rir))u r) r)u’r)u‘rrr)Hrrrrrrrrrrrr staticmethodr%r.rOrGrFr+rmr{rrrrrrrrrrrrrr!rr r)rDr:rr2r^r5r6r9r3r:rrrrLrrjrqr]compilerrrrrrrrTr7r@r^rer}rrrs@r#rrs D DVV@ ( (MMZZ008XX77$22h00 :  6  EEMM >77077:6:6xKK??OO !!<hh AA$(    "P?P?dYPYPv B BooXXtZZ11211"AA"0P0Pd)?)?XL6$F$FLLL6WW4&&P  "$CD  DD 11(A,A,FJJ *?b?bF*****^*^X66%%%r%rc@V^8dQh/^\9d \;R&#)rr))__conditional_annotations__r )r"s"r#r$r$s$R5Sr%))sPNG  zPNG image data)szJPEG image data)sGIF87aGIF image data)sGIF89arn)sRIFFz$RIFF container (WAV/AVI/WebP family))s%PDF-z PDF document)sPKz$ZIP archive (also docx/xlsx/jar/apk))sPKzZIP archive (empty))szgzip compressed data)sBZhzbzip2 compressed data)s7zXZzxz compressed data)s7z'z 7-Zip archive)sELFzELF executable)sMZzWindows PE executable)szMach-O executable (64-bit))sz$Mach-O universal binary / Java class)sSQLite format 3zSQLite database)sOggSz Ogg container)sfLaCz FLAC audio)sID3zMP3 audio (ID3 tag))sz$ISO media container (MP4/MOV family))sBMzBMP image data)sII*zTIFF image data (little-endian))sMM*zTIFF image data (big-endian)>.bmp.gif.ico.jpg.png.jpeg.webp)Grmrr_rar<r]rrr`rloggingrr rabcrrtypingrrpathlibrtools.binary_extensionsragent.file_safetyrtools.file_operations_commonr r r r r rrrrrrrrtools.file_operations_lintrrrtools.file_operations_searchrtoolsrr getLoggerrr7r!r_HOMEr)r-r6r8rrrr4rrrrrrrr$)rms@r#rs   #!84YYYY[Z46   8 $ DIIK<  G%+S%+VN0 (&''0)'$ & f)[.fr%