+ lHjOaRt0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI H t ^RI Ht^RIHtHt^RIHt^RIHt^RIHt^RIHtHtHt^R IHtHt^R IH t ^R I!H"t"H#t#^R I$H%t%H&t&H't'H(t(H)t)^R I*H+t+H,t,H-t-H.t.H/t/H0t0H1t1H2t2H3t3^RI4H5t5H6t6H7t7H8t8H9t9H:t:H;t;Ht>H?t?H@t@HAtAHBtBHCtCHDtDHEtEHFtFHGtGHHtH]P!]J4tK]P]P]P0tORtPRRltQRRltRRRltSRtT]U!0Rm4tVRtWRRltX]P!R]P4t[]P!R]P4t\RRlt]RRlt^RRR llt_R!R"lt`RR$R%lltaR&R'ltb] P!4td/te]^kR(R)ltfRR*R+lltgRR,R-llth]PR.3]PR/3]PR03]PR133tmR2R3ltnR4R5ltoR6R7ltpR8R9R:RR;RRR?lltq^]R#3R@RAlltrRBR9/RCRDlltsRERFlttRGRHltuRIRJltvRKtwRLtxRMtyRNROltzRRPRQllt{RRRSlt|RRURVllt}RRZR[llt~^R\IHtHtR]tR^R_R`RaRbRcRdReRfRcRgR`Rh/RiRcRjR`RkR#^Rl^/RmRcRjR`RnR#]RoRp//RqRf.//tR^RrR`RsRbRcRdReRfRcRgR`Rt/RWRcRgR`Ru//RqRfRW.//tR^RvR`RwRbRcRdReRfRcRgR`Rx/RyRcRgR`Rz/R{RcRgR`R|/R}RcR~R`RR#R9//Rq.RO//tRtRRcRgRRTRv.R`RR#RT/RvRcRgR`R//tRRltR^RR`RRbRcRdReRRcRgR`R/RRcRgRRWR.R`RR#RW/RfRcRgR`RR#RX/RRcRgR`R/RmRcRjR`RR#^2/RiRcRjR`RR#^/RRcRgRRYR.R`RR#RY/RRcRgR.ROR`RR#RW/RRcRjR`RR#^// RqR.//tRtRtRRltRtRtRt]EP !R_R]]]RR]R7]EP !RrR]]]RRR7Rt]EP !RvR]]]RR]R7]EP !RR]]]RRR7R#)zFile Tools Module - LLM agent file manipulation tools. Companions: ``file_tools_paths`` (task-aware resolution), ``file_tools_write_guards`` (write-side guards), ``file_tools_read_tracking`` (per-task dedup / loop-detection / staleness state). N) ExitStack)Path)get_nt_namespace_errorget_read_block_error)GUARDRAIL_REFUSAL_KEY)has_binary_extension)is_background_review)ShellFileOperationsnormalize_read_paginationnormalize_search_pagination)DEFAULT_READ_LIMITcount_conflict_blocks) file_state)_is_secret_file_argredact_sensitive_text) _expand_tilde_path_resolution_warning_resolve_base_dir_resolve_entry_for_task_resolve_path_for_task) _READ_DEDUP_STATUS_MESSAGE_check_approval_required_write_check_binary_document_write_check_cross_profile_path"_check_protected_instruction_write_check_sensitive_path_is_internal_file_tool_content_stale_overwrite_blocker_stale_write_refusal)_bump_consecutive_cap_read_tracker_data_carry_full_write_baselines_check_file_staleness_check_not_found_cache_known_full_content_sha256_file_metadata _file_version_mark_full_write_baseline_mark_verification_stale_note_read_coverage_patch_failure_lock_patch_failure_tracker _read_tracker_read_tracker_lock_record_not_found_record_patch_failure_reset_patch_failures _task_data_update_read_timestampic$V^8dQhR\/#return)int)formats"5/home/ubuntu/.hermes/hermes-agent/tools/file_tools.py __annotate__r:5s : :S :c^RIHpV!4PR4p\ V\ \ 34;'dV^8pV'd \ V4#\# \dRpLKi;i)zReturn ``file_read_max_chars`` from config.yaml (default on missing/invalid). No module cache: ``load_config_readonly`` is already mtime+path cached, and a process-lifetime slot would pin the launch profile's value under the multiplexed gateway.)load_config_readonlyfile_read_max_charsN)hermes_cli.configr=get Exception isinstancer7float_DEFAULT_MAX_READ_CHARS)r=valvalids r9_get_max_read_charsrG5sd:"$(()>? sS%L ) 5 5cAgE3s89"99 sA A*)A*c hV^8dQhR\R\R\\\\3,/#)r5content max_charsr6)strr7tuplebool)r8s"r9r:r:Bs,,,c,c,eCdN>S,r;c\V4V8:d'Y'dVPR4^,R3#^R3#VPR4p.p^pVFGp\V4V'd^M^,pWF,V8dMVPV4WF, pKI V'gVPV^,RV4RP V4\V4R3#)aTrim line-numbered ``read_file`` content to the last COMPLETE line within *max_chars*. Returns ``(kept_text, lines_kept, truncated)`` so the caller can offer a ``next_offset`` instead of rejecting the read. If not even the first line fits it is clamped mid-line so the read is never empty and the cursor advances. Ported in spirit from nearai/ironclaw#5029 (dual line/byte cap on ``read_file``). Where hermes previously hard-rejected an oversized read (forcing the model to guess a smaller ``limit`` and burn a round-trip returning nothing), this trims the content to the last *complete line* that fits within ``max_chars`` and reports how many lines were kept so the caller can offer a ``next_offset`` continuation.  FNT)lencountsplitappendjoin)rIrJlineskeptrunninglineadditions&& r9_truncate_to_char_budgetrZBs 7|y Gt,q0UJJUJJ MM$ EDGt9Tq1   )  D   E!HZi() 99T?CIt ++r;c TV^8dQhR\R\R\R\R\/#)r5 result_dictrIoffsetrJr6)dictrKr7)r8s"r9r:r:`s1D3]`ehr;c \W4wrVpW&,pWPR&RVR&RVR&WR&RVR R V R V R V^, R V R V R2 VR&\VPR^4^,4V8dRVR&VR;;,R, uu&V#)zrTrim *content* to the char budget, annotate *result_dict* with the continuation hint, and return the trimmed text.rIT truncatedbytes truncated_by next_offsetzOutput truncated at the ,z-char read budget after z line(s) (showing lines - of z). Use offset=z to continue.hintrOtruncated_lineszv Note: the first line alone exceeded the budget and was clamped mid-line; its remainder is not retrievable via offset.)rZrPrR) r\rIr] total_linesrJtrimmed lines_kept_rcs &&&&& r9_apply_char_budgetrm`s6gIG%K$ #K ")K!,  "9Q-/G ,.vha a7H -~k]- A 7==q !! $%2)- %&F M N Nr;ic$V^8dQhR\/#r4rM)r8s"r9r:r:s - -4 -r;cp\VRR4pVfR#^RIHp\ Y4# \dR#i;i)zTrue when *file_ops* targets the host filesystem (only then may we stat paths or rewrite V4A headers to host-absolute paths; sandboxes have their own namespace).envNT)LocalEnvironment)getattrtools.environments.localrr ImportErrorrB)file_opsrqrrs& r9_file_ops_uses_host_pathsrwsC (E4 (C {= c ,, s & 55z/^(\*\*\*\s*(Update|Add|Delete)\s+File:\s*)(.+)$z-^(\*\*\*\s*Move\s+File:\s*)(.+?)\s*->\s*(.+)$cHV^8dQhR\R\R\R\/#)r5patchpath_to_resolved path_to_entryr6)rKr^)r8s"r9r:r:s0jjSjDjY]j36jr;caaa\V4'gV#RRVV3Rlllo\PV3RlV4p\PV3RlV4#)umRewrite V4A file headers to the resolved host paths (host backends only). The shell layer must patch the SAME files ``patch_tool`` resolved for locking/staleness, not re-resolve a relative header against its own cwd (which can differ — the git-worktree cwd bug). Delete and Move headers take ``path_to_entry``: they act on a symlink itself, never on its target. c<V^8dQhR\R\R\/#)r5rawentryr6rKrM)r8s"r9r:7_rewrite_v4a_patch_paths_for_host..__annotate__s&NN#NdNsNr;cn<VP4pV'dSMSPV4;'gT#N)stripr@)r~rr{rzs&&r9_res/_rewrite_v4a_patch_paths_for_host.._ress,iik!& ,<AA#FMM#Mr;c<VP^4 S!VP^4VP^4R8HR7 2#)Deletergroupmrs&r93_rewrite_v4a_patch_paths_for_host..s3QWWQZLaggaj h8N!O PQr;c<VP^4 S!VP^4RR7 RS!VP^4RR7 2#)rTrz -> rrs&r9rrs>QWWQZLaggaj!= >d4PQ Z^C_B`ar;)F)rw_V4A_SINGLE_HEADER_REsub_V4A_MOVE_HEADER_RE)ryrzr{rvrs&ff&@r9!_rewrite_v4a_patch_paths_for_hostrsU %X . . NN " % %QSX ZE  " "ach jjr;c0V^8dQhR\R\/#r5pathr6r)r8s"r9r:r:s[[#[$[r;c\PP\V44pV\9dR#VP R4;'dVP \4#)zXReturn True for concrete device/fd/proc paths that can hang reads or leak process state.Tz/proc/)osrnormpathr_BLOCKED_DEVICE_PATHS startswithendswith_BLOCKED_PROC_SUFFIXES)r normalizeds& r9_is_blocked_device_pathrsL!!-"56J**   * Z Zz/B/BCY/ZZr;c`V^8dQhR\R\\,R,R\/#)r5filepathbase_dirNr6)rKrrM)r8s"r9r:r:s*"-"-"-d T0A"-T"-r;c\V4pVeZ\PPV4'g5\PP \P !V4V4p\PP V4p\V4'dR#\4pTp\^4Fp\P!V4p\PPT4'g>\PP \PPT4T4p\PP T4p\T4'dR#Yt9dMTPT4TpK \PP \PPV44p\T4# \dKWi;i \\3dR#i;i)zTrue if the path (literal, any symlink hop, or final realpath) is a blocked device. Literal first so /dev/stdin is caught before resolving to a terminal path; every symlink hop is checked so an alias cannot bypass the guard. TF)rrrisabsrTfspathrrsetrangereadlinkOSErrordirnameaddrealpath ValueError) rrexpandedrseencurrentrltargetresolveds && r9_is_blocked_devicersd X&HBGGMM($;$;77<< ( 3X>!!(+Jz**UDG 2Y [[)Fww}}V$$WW\\"''//'":FCF!!&) "6 * * >  77##BGG$4$4Z$@A #8 ,,!    Z s$6G.__annotate__sstr;cT<\\VS44'd S^, oR#R#)rFT)rr)romittedrs&r9_allowed5_filter_read_blocked_search_results.._alloweds%  4T7 C D D qLGr;matchesNfilescounts)rsrrrritems)resultrrrfcrs&f @r9#_filter_read_blocked_search_resultsrs Gvy$''%+^^H^x7G!!^Hvw%%#)<<?Xx ) KK>3>/B>r;c l^RIHpHpHpHpHpHpHpHpH p T;'gRp V!V 4p\;_uu_4\PV4p RRR4X eT;_uu_4W9d$\P!4W0&V uuRRR4#\V RR4p V 'dV!V 4f V !W4\;_uu_4\P!VR4RRR4RRR4V;_uu_4VP#V\$P&!44p RRR4X ;_uu_4T;_uu_4VPV4pVe\P!4W0&RRR4Xf`\)W4wrV;_uu_4WV&\P!4W0&RRR4V!4\*P-RWR,4RRR4\/X4p\;_uu_4V\V&RRR4V# +'giEL;i \dELqi;i +'giELY;i +'giELe;i +'giELA;i +'giEL ;i +'giL;i +'giL;i +'giT#;i)a[Get or create ShellFileOperations for the task's terminal environment. Uses terminal_tool's per-task creation locks (no duplicate sandboxes). Subagent task_ids collapse to "default" (``_resolve_container_task_id``) so delegate_task children share the parent's container; RL/benchmark task_ids with a registered env override keep their isolation. ) _active_environments _env_lock_last_activity_start_cleanup_thread_creation_locks_creation_locks_lock_resolve_container_task_idrrecord_session_cwdrNrz %s environment ready for task %sr)rrrrrrrrrr_file_ops_lock_file_ops_cacher@timersrApop setdefault threadingLockrrrr )rrrrrrrrrrrcachedold_cwd task_lockrrrvs& r9 _get_file_opsr 9s--- &&YK(5G  $$W-   Y.*.))+'YfeT2G&{3;*;@ ##GT2 ',  #..w 8HI    Y/33G%_special_file_kind..sV/B+9iPTo/Bs$ $za special (non-regular) file) rstatrst_moderS_ISREGS_ISDIRnext_SPECIAL_FILE_KINDS)rrs&@r9_special_file_kindr sswwryy'// ||DT\\$// V/BV. 00 s4B BBc bV^8dQhR\R\R\R\R\R,/#)r5rr]limitrr6Nr)r8s"r9r:r:s>G7G73G73G7sG7UXG7]`cg]gG7r;c a^RIHpHpHpHpHp Hp V !\V44'gR#\V4p V P\V4VR7p V P'gV PfT!V P;'gR4h\P!V PRR7p V !V \V44pTP14p\3T4pY#,^, pRP5TT^, T4p^RIHpT!4o\:;QJd.T3RlTP=R44F 'gK RM# RM!T3RlTP=R444pRT'dT P?TT4MRRTRT P@RTT8RR/pTR,'d$RT^, RT R\CTT4 RT R2 TR&\E4p\3TR,4T8d\GTTR,TTT4TR,'d:TR,p\ITR\K\T44R7TR&TR,T8gpMRpT^8XdTR,'grT'gjT'gbTPMR 4'gK\O\T4T4\Q\T4T4\RPT!T\T44\VPX!TRR!7# T\\PP 3dp\"P%RTRR7TP&P)4pTT9;'gTT9;'dTR 8gpT'dL\+Y4'd;\T4P-R 4'g\/R T R T R T R24uRp?#Rp?R#Rp?ii;i)"aRender an extractable document (.docx/.xlsx/.pdf/...) as paginated text. Returns the JSON result, a tool_error for an actionable extraction failure (size cap, encrypted, malformed), or ``None`` to fall through to the normal read path. Runs BEFORE the binary-extension guard. )ANYDOC_EXTENSIONSEXTRACTABLE_EXTENSIONSMAX_DOCUMENT_BYTESExtractionErrorextract_document_bytesis_extractable_documentN) max_byteszDocument bytes unavailableT)validatez!document extraction failed for %sexc_infoz.ipynbzUnsupported document type Cannot read '' (u"): document extraction failed — z8. Use terminal utilities to inspect or convert the file.rO)get_max_line_lengthc3@<"TFp\V4S8xK R#5ir)rP)rrXmax_line_lengths& r9r+_read_extracted_document..sXBW$#d)o5BWsFrIri file_sizer`extracted_documentz Use offset=z to continue reading (showing rerfz lines)rg file_read secret_filerh ensure_ascii)-tools.read_extractr$r%r&r'r(r)rKr read_file_byteserrorbase64_contentbase64 b64decoderbinasciiErrorrdebugsuffixlowerrBr tool_error splitlinesrPrTtools.tool_output_limitsr0anyrR_add_line_numbersr5minrGrmrrr@r'r2r record_readjsondumps)r _resolvedr]r"rr$r%r&r'r(r)rvbinarydocument_bytesextracted_textr_doc_ext _binary_docrUriend_line page_textr0rhr\rJrenderedredactedr2s&&&&& @r9_read_extracted_documentrZsX99 #3y> 2 2W%H))#i.DV)W <<<6008!&,,"N"N2NO O))&*?*?$O/IO  % % 'Ee*K~!H % 845I<)+OcX)//RVBWXcccX)//RVBWXXOI8--i@SU{V%%[8+d $K ;(Q,(xqX{!;  U^_9y)!6 +C N;"= Iy)X5! K 44X#KOO)> ?  8$ N##))+"33II . . G G8x3G  Js<<C++,GHHvS 3)),.223 3 s2AK2;K22&OA O# O1AO6OOcHV^8dQhR\R\R\R\/#)r5 task_data dedup_keyrr6)r^rLrK)r8s"r9r:r:s(DU##r;c l\;_uu_4VR,PV^4^,pW0R,V&\V4RRR4X^8d)\RV^, R23RVRV^,/\R/B#\ P !RR R \RVR RR R /R R7# +'giLe;i)zReturn the "unchanged" stub for a repeated identical read, escalating to a hard BLOCK after 2 stubs so weak tool-followers don't loop forever. dedup_hitsNz8BLOCKED: You have called read_file on this exact region u times and the file has NOT changed. STOP calling read_file for this path — the content from your earlier read_file result in this conversation is still current. Proceed with your task using the information you already have.r already_readTstatus unchangedmessagededupcontent_returnedFr:)r-r@r rGrrNrOr)r\r]rhitss&&& r9_dedup_stub_or_blockrgs  &**9a81<-1, *y)   qy 1H:&0 0 - - -%d+ - - ::+-E    +  s 7B## B3 rYFrVriversion_beforesnapshotcV^8dQhR\R\R\R\R\R\R\R\R \R \R ,R \/ #) r5r\rr resolved_strr]r"r]partialrYrVNr6)r^rKr7rLrM)r8s"r9r:r:svDDtDcDDTWD$'D03D@EDSWD&*D>ADjDVYDr;c jV eT ;'g \V4MRp V RJ;'d#V RRT u;8H;'d\V48HMupRp\;_uu_4VR,PVR4VR,P V4VR,P W$V34\ VRW$V34p\ PPV4pVVPR/4V&VR,pV'dV eV^8dWR ,V&VPV4V 8HpV'g5V'*pV'dV e\WWWV4wrT;'dV'*pV'd(V VV&VPR /4PVR4V'gVPVR4V'dV^8d2VR ,PVR4VR,PV4\V4RRR4\P !WV'*R 7V'd^RIHpV!\-V44X#X# \dELci;i +'giLd;i \"d\$P'R R R7Lmi;i \"d\$P'RR R7X#i;i)uBookkeeping after a real (non-stub) read; returns the consecutive-read count. Per-task tracker under the lock (stub counter, history, consecutive count, mtime for dedup + staleness, page coverage, and the write_file baseline once the task has seen every line UNREDACTED — in one page or by paging contiguously through a file too big for one; a redacted page returned a non-round-trippable ``«redacted:…»`` sentinel, so it must not bless an overwrite that would persist the sentinel into a credential file). Then OUTSIDE our lock (no nested locking): the cross-agent registry, and the background-review read-mark (a FULL read of a skill file counts like skill_view so a follow-up skill_manage(patch) is accepted). NFr_dedup_generation_reads read_historyreadread_timestampsfull_write_baselinesrd blind_patches)rlzfile_state.record_read failedTr,)!mark_background_review_skill_readz"background-review read-mark failed)r&r%r-rrrrrgetmtimerrr@r)discardr rrMrArrDtools.skill_manager_guardsrtr)r\rrrkr]r"r]rlrYrVrirhriversionstablecompleterQ _mtime_now baselinesrts&&&&&&&$$$$$$ r9_record_successful_readr~sw I$$J ? I I II I! $"J J  "J21J2c TV^8dQhR\R\R\R\R\/#)r5rr]r"rr6r)r8s"r9r:r:^s8X"X"X"cX"cX"Y\X"mpX"r;c \W4wr\VRR7pV'd \V4#\V4P 4P 4'dRM \ V4p\WR7'd\RV R24#\W4p\\V44'd1\V4pVe"\P!RRR R V R V R 2/4#\\V44pV'd \V4#\!WWV4p V eV #\#\V44'd+\R V RVP$P'4 R24#\V4p \)RW4p V eV #WV3p \*;_uu_4\-V4p V R,P/V 4pWR,9pRRR4\V4p\V4'd \1V 4MRpXe,\34'gVV8XdX'd \5X W4#TP7\V4'dT MTW4pVP94pVP/R4;'gRp\;V\4'dXVP=R4'dA^RIH pVPCV!V44\ERW\P!VRR74V'gVP/R4'd\P!VRR7#VP/R^4p\G4p\IVPJ;'gR4V8d9\MTVPJ;'gRVVP/RR4V4Vn%RpVPJ'dGVPJp\OVR\QV 4R7Vn%VPJV8gpVPJVR&VPJ'd+\SVPJ4pV'dVVR&V R 2VR!&V'dAV\T8d6V^8d/VP/R"4'dVPWR!R#VR$ R%24VP/R4pVP/R&4R'8Xd$\YVP/R(V44^, pM8W,^, p\;V\X4'dV^8d \[VV4p\]X Y0YTY^8;'g\_VP/R"44T;'g\_VP/R)44VVV\aVR*R4R+7 pV^8d\R,V R-23R.VR/V/\bR/B#V^8d R0V R12VR2&\P!VRR7# +'giEL;i \ddp\\T44uRp?#Rp?ii;i)3uLRead a file with pagination and line numbers. Guard order: NT/device-namespace prefix (raw string, no resolution) → device-path blocklist (no I/O) → stat-based special-file guard (host only) → Hermes internal denylist → document extraction → binary-extension guard → negative-result cache → dedup stub → real read. ReadverbN)rr.zE': this is a device file that would block or produce infinite output.successFnote'z' is u, not a regular file — reading it would block indefinitely, so no read was attempted. Use terminal utilities if you need to interact with it.zCannot read binary file 'r/zF). Use vision_analyze for images, or terminal to inspect binary files.rprdrnr>r4zFile not found:)expired_archive_fieldsr: is_binaryr5riunknownTr7rIconflict_blocksz unresolved git merge-conflict block(s) (<<<<<<< / ======= / >>>>>>>) in this range. Resolve them (keep one side or combine, delete the markers) before editing around them._hintr`zThis file is large (rdzj bytes). Consider reading only the section you need with offset and limit to keep context usage efficient.rbrarcrh _snapshot)rlrYrVrirhriz.BLOCKED: You have read this exact file region z| times in a row. The content has NOT changed. You already have this information. STOP re-reading and proceed with your task.rr`z%You have read this exact file region z times consecutively. The content has not changed since your last read. Use the information you already have. If you are stuck in a loop, stop reading and proceed with writing or responding._warning)3r rrGr expanduser is_absoluterrrrwr r rNrOrrKrZrrErFr#r-r1r@r%rrg read_fileto_dictrBrtools.tool_result_storagerupdater.rGrPrIrmrrr _LARGE_FILE_HINT_BYTESrr7rLr~rMrsrrA)rr]r"rnt_err device_baserPkind block_error extractedrkcached_not_foundr]r\cached_versioncontent_served_in_generationrvrhrr\_errrr5rJrY unredacted conflictsrirVrQes&&&& r9read_file_toolr^sP"1&@  (6: f% %"4j335AACCdIZ[bIc d 9 9v&445 5+49  %]7%; < <%i0DzzuD6tf-,,#.//+3y>: k* *,TfWU    I / /+D6Y5E5E5K5K5M4NOVVW W9~ 1&,P  '# #"51  "7+I&w/33I>N,5BZ8[+[ (  !)9RS[9\9\ 5bf  &/C/E/E"n49U' 9C C##4Mh4W4WL]aciqnn& w'--2 dC T__5F%G%G H   5d; < flTZZ bg=h i ;??;//::k> >  OOK3 ') v~~## $y 0/V^^11r6 y99FFN >>>J2d8KL8Y[FN~~3H%+^^K " >>>-fnn=I1: -. k"uuG$ )&<<CKKOOK$@$@  " "7&ym433 5 "oom4 ??> *g 5;??=&ABQFH~)H+s++ ax5' 7,X](1QJ;m;m4P[P_P_`kPlKm191e1eT+//RcBd=e19{7E18d1S U A:@H>>1 1 # 1 )$/ 1 1 A:7w?cc  #zz+E::i  j "#a&!!"s,V+AV+ AV+&V+V+AV+V+:V+ /V;AV+ V+A V+(/V+AV+ V+7V+3V+$V+(2V+AV+31V+%(V+CV+AV+/'V+ V( " V++ W6W WWrc VV^8dQhR\R\R\R\R,/#)r5rrrr6Nr)r8s"r9r:r:s-sSDSSWZr;cn\V'd\M\!W44# \dR#i;i)zTask-resolved path string, or None when resolution fails for any reason. ``entry``: keep a symlink in the last component (``_resolve_entry_for_task``).N)rKrrrA)rrrs&&$r9_resolve_or_noners3u+:PPRZdee s "% 44c V^8dQhR\\,R\\,R\R\R\R,/#)r5paths content_pathsr cross_profiler6N)listrKrM)r8s"r9r:r:s=??c?49?s?)-?25*?r;cVF7p\WB4;'gV'dRM \WB4pV'gK5Vu# VFp\WB4pV'gKVu# \W4;'g \ W4#)a Run the shared write/patch guards in order; return the first error string. Order matters: hard denies (sensitive path, mirror) and the corruption guard run before anything that could prompt the user, and ONE approval prompt covers every path of a multi-file patch. N)rrrrr)rrrrperrs&&&& r9_write_precheck_errorrs#A/NN!D'@'L 3J  *16 3J /u > > >-e=?r;c tV^8dQhR\\,R\R\R\\,/#)r5rrzrr6)rrKr^)r8s"r9r:r:s1  $s) t c dSVi r;c&.pVFpVPV4pV'd\P!W%4MR;'g \WB4pV'gV'd\ V\ V4V4pV'gKwVP V4K V#)uOne pre-edit warning per path, in priority order: cross-agent registry (names the sibling subagent) > per-task staleness > workspace divergence (relative path resolving outside the terminal's cwd — the worktree-cwd bug).N)r@r check_staler"rrrS)rrzrwarningsrrws&&& r9_edit_warningsrsuH    #34Z # #G /$ d dCXYZCdQ(DGW=A 1 OOA   Or;c pV^8dQhR\R\\,R\R\R,RR/#)r5rrrz session_idNr6)rKrr^)r8s"r9r:r:(sB@@#@d3i@4@UX[_U_@dh@r;c \YUu.uFqBPV4;'gTNK upVR7VFDp\W@4VPV4'gK'\P!WV,4KF R#uupi)zPost-success bookkeeping: verification-stale marker, then per path refresh the read stamp (no false staleness on the next edit) and record the write.)rN)r(r@r2r note_write)rrrzrrs&&&& r9 _note_editedr(spWU&SU';';A'>'C'C!'CU&S`jk q*    " "  ! !'A+> ?'Ts B B i Ng?ic dV^8dQhR\R\R,R\R\R,/#)r5rrN new_contentr6r)r8s"r9r:r:>s3cS4ZcVY\`V`r;c *V'd%\\V4u;8:d\8:gR#R#\V4P V4p\ VRR4p\ VRR4'g\ V\4'gR#\\T4u;8:d\8:gR#R#TP4TP4reT'gR#^RI H p\T!T4T!T4,P44pT\\T4\T44, p T \8dR#\\T4\T44T, p TR R\T4R RT R R T R R \T4R R 2 # \dR#i;i) aReturn a hint when ``new_content`` mostly re-sends what is already at ``resolved``. Reads the OLD content through the task's own file ops (``read_file_raw``, the sandbox/remote backend the write targets), never the host path: on a remote backend the host file is a different file, and a host FIFO at that path would block the write lock forever. Bounded size and a line multiset comparison (linear) instead of a sequence diff (quadratic on repeated lines).NrIr>)Counterrdrfz lines were already on disk (z.0%z unchanged); ~z( line(s) actually changed. Re-sending a z-char file costs output tokens for every unchanged line; for edits like this use patch (old_string/new_string), which sends only the changed region.)_REWRITE_HINT_MIN_CHARSrP_REWRITE_HINT_MAX_CHARSr  read_file_rawrsrBrKrArH collectionsrsumvaluesmax_REWRITE_HINT_MIN_UNCHANGED) rrrrold old_lines new_linesrrbratiochangeds &&& r9_whole_file_rewrite_hintr>su 3s;7GbKbbcw'55h?fi. 67D ) )C1E1E2F $s3x J3J J K>>+[-C-C-Ey #WY'')*<<DDFGI C NC N; ;E **#i.#i.1I=G Q-tC N1--J5QT+Ucdklmcno225k2B11EFv v sAF FFc nV^8dQhR\R\R\R\R\R,R\/#)r5rrIrrrNr6r)r8s"r9r:r:`sE@"@"#@"@"c@"#'@" #d @"69@"r;c \W4;'gS\W4;'g@\V.V4;'g+\V.V4;'gV'dRM \ W4pV'g\ V4'dRpV'd \ V4#\W4pW/p\4;_uu_4pV'd&VP\P!V44\WV4p V 'd-\P!\W V4RR7uuRRR4#\!V.Wr4p \#W&V4p \%V4P'T;'gTV4p V P)4p V 'd V ^,V R&V 'dV P+R4'gWR&V'dWmR&V P+R4'd \-W4M2V'dV.V R &\/Wb\1V R R44\3W .Wt4RRR4\P!X RR7# +'giL(;i \4dp\7T4'd,\8P;R \=T4P>T4M,\8PAR \=T4P>TR R7\ \CT44uRp?#Rp?ii;i)uWrite content to a file. ``cross_profile`` bypasses the sandbox-mirror lost-write guards only (unadvertised in the schema; the mirror rejection error teaches it — the cross-PROFILE guard it was named for no longer exists). NzRefusing to write internal read_file display text as file content. Strip read_file line-number prefixes or reconstruct the intended file contents before writing.Fr:rr>rg resolved_pathfiles_modified_content_sha256z"write_file expected denial: %s: %szwrite_file error: %s: %sTr,)"rrrrrrrGrr enter_contextr lock_pathrrNrOrrrr  write_filerr@r2r'rsrrArrrDtype__name__r>rK)rrIrrrrrPrz_lockblockerr rewrite_hintrr\rs&&&&& r9write_file_toolr`s\ ! / T T*49 T T0$A T T-dVW= T T%t*CD*R  1'::/ #+"%T3  , [[E##J$8$8$CD/tHGzz"6ti"P_de[&tf.>HH3GPL"7+66y7H7HD'RF ..*K*21+ J'KOOG$<$<&2F#09O,w''&t55>KK 01.i'&RceiBjkWf.>K?@zz+E::A[B " ' * * LL=tAw?O?OQR S LL3T!W5E5EqSWL X#a&!! "si H<5A#H) H<#AH)9H) H)$ H)0H) H)*H) H<) H9 4H<< K A;KK K cV^8dQhR\R\\\,\\,\\,3,\,/#)r5ryr6)rKrLr)r8s"r9r:r:s8--S-U49d3ic3R-SVY-Y-r;c @^RIHp\PV4Uu.uF'q"P ^4VP ^4R93NK) ppT\ PV4UUu.uF.q"P ^4VP ^43FqDR3NK K0 upp, p.p.p.pVFawrVP 4p V!V 4'd\RV : R24u#VPV 4V 'dTMTPV 4Kc WVV3#uupiuuppi)aExtract every path named in V4A headers, rejecting ``..`` traversal. Returns ``(all_paths, content_write_paths, entry_paths)`` or a tool_error string. Header paths come from patch CONTENT (more attacker-influenceable than ``path=``, which keeps its legitimate ``..`` use). Move headers check BOTH endpoints; only Update/Add write text and feed the binary-document guard; Delete and Move act on the directory entry (``entry_paths``). )has_traversal_componentFz*V4A patch header contains '..' traversal: z. Use the agent's cwd-relative path (no '..') or an absolute path in '*** Update File:' / '*** Add File:' / '*** Delete File:' / '*** Move File:' headers.)UpdateAdd) tools.path_securityrrfinditerrrrrGrS) ryrrheadersgrr entry_pathsr~ writes_textv4a_paths & r9_collect_v4a_header_pathsrs>xH$  ,,mjs -D&4DreplacecV^8dQhR\R\R,R\R,R\R,R\R\R,R\R \R \R,R \/ #) r5rrN old_string new_string replace_allryrrrr6r)r8s"r9r:r:s["["S["C$J["3QU:[":[";?["PSVZPZ["["8<[":["25["r;c V'dV.M.p \V 4p .p VR8XdSV'dK\V4p \V \4'dV #W^,, p W^,, p V ^,p \ WWg4p V 'd \ V 4#V Uu/uFq\ W4bK ppV Uu/uFq\ WRR7bK pp\4;_uu_4p\.VP4OVP4OUu0uFpV'gK VkK up4F(pVP\P!V44K* \WV4p\V4p\VP4V4pVR8XdjV'g\ R4uuRRR4#VeVf\ R4uuRRR4#VP!V4;'gTpVP#VW#V4pMYVR8Xd;V'g\ R4uuRRR4#VP%\'W_VV44pM\ R V 24uuRRR4#VP)4pV'dR P+V4VR &VP!R 4'gV Uu.uF7pVP!V4;'gVP!V4;'gTNK9 ppVVR &\-V4^8Xd V^,VR&\/WiW4\1VV\3VRR4V4\5YoP4Uu.uFpV'gK VNK up4RRR4XP!R 4'd~R\VR ,49dg^pVR8Xd-V'd%\7YoP!V4;'gT4pV^8dRV RV: R2VR&MR\VR ,49dRVR&\8P:!VRR7#uupiuupiuupiuupiuupi +'giL;i \<dp\ \T44uRp?#Rp?ii;i)zPatch a file using replace mode or V4A patch format. ``cross_profile``: same semantics as ``write_file``'s flag (mirror-guard bypass only; unadvertised). ryTrrz path requiredNz"old_string and new_string requiredzpatch content requiredzUnknown mode: z | rr>rr_writeszCould not findzThis is failure #z patching a,. Stop retrying with variations of the same old_string. Either: (1) re-read the file fresh to verify current content, (2) use a longer / more unique old_string with surrounding context lines, or (3) re-read the file in full, then use write_file to replace it if the targeted region is hard to anchor.rz#Did you mean one of these sections?zfold_string not found. Use read_file to verify the current content, or search_files to locate the text.Fr:r)rrrBrKrrGrrsortedrrrrrr r$r@ patch_replace patch_v4arrrTrPrr!rsr0r/rNrOrA)rrrrrryrrr_paths_to_check_content_write_paths _entry_paths collected precheck_err_p_path_to_resolved_path_to_entry_locks_rstale_warningsrv_known_replace_targetrr\_resolved_modified failure_countrs&&&&&&&&& r9 patch_toolrs!%tf"O0 L w5-e4 i % % Q<'! , | (PWgL,''E"Zi,iYhSU1A"1N-NYh,ibn)obn\^.>rRV.W*Wbn)o [[F+b->-E-E-G+b.J_J_Ja+bi+bRfhbb+bij$$Z%9%9"%=>k+OPWXN$W-H00A0H0H0JGTFy %o6[%);%&JK[ #4"7"7"="E"E!//Yde%&>?)[*"++5eP^`hik"N4&"9:1[4!..*K*/**^*D J'??7++1@&A0?"'5&8&8&<&_&_@Q@U@UVX@Y&_&_]_&_0?#&A0B ,-)*a/3Ea3HK0W7HU+GVWVYXZ=[]no%g=U=U=W/^=Wr[]=W/^_QX ??7 # #(8C G@TWWCG$zz+E::-j)oi>&A0_Q[| "#a&!!"sP'O;,P'2PP'*P P P A2P P P'#P5 P'P%P> P P'*P= P'P *P PP ,P P  AP+ P:PPP'&'P'P'+AP'; P'P P$ P'' Q2Q Q QrI. discoverycV^8dQhR\R\R\R\R,R\R\R\R \R \R \R \/ #) r5patternrr file_globNr"r] output_modecontextorderrr6r)r8s"r9r:r:sxU"U"U"cU"SU":U"58U"GJU" U"7:U"U" U".1 U"r;c \WT4wrTRY\V4T;'gRWEV3p \;_uu_4\P!V RRR^R\ 4/4p \ W4p RRR4X ^8d\RV R23R VR V /\R /B#\VR R 7p V 'd \V 4#\\W)44p\V4pV'd \V4#\!RW4pVeV#\#V 4P%WWWEWgVR7 p\'VV 4p\)VRR4;'gR FRp\)VRR4'gK\+VP,R \/\1VP2V 44R7VnKT VP5R R7pV'd V R2VR&VP7R4;'gRp\V\4'd;VP9R4'd$\;RW\<P>!VRR74V ^8d RV R2VR&VP7R4'dRWT, R2VR&\<P>!VRR7# +'giEL ;i \\\3d6pTp\T\4'd\T4'ghRp?ELRp?ii;i \@dp\\T44uRp?#Rp?ii;i)!zSearch for content or files.searchr4last_keyN consecutiveroz(BLOCKED: You have run this exact search z times in a row. The results have NOT changed. You already have this information. STOP re-searching and proceed with your task.ralready_searchedTSearchr) rrrrr"r]rrrrrIr7)densifyze result(s) omitted because they target credential, token, cache, or secret-bearing environment files._omittedr>zPath not found:Fr:zYou have run this exact search zY times consecutively. The results have not changed. Use the information you already have.rr`zResults truncated. Use offset=zB to see more, or narrow with a more specific pattern or file_glob.rr)!r rKr-r,rrrrGrrrrrrrBrr#r r rrsrrIrrrrr@rr.rNrOrA)rrrrr"r]rrrr search_keyr\rQrresolved_search_pathrrcached_search_nfrrrr\ _search_errrs&&&&&&&&&& r9 search_toolrs O"3FB TIOOU\ab  %00D-NCE;KLI%iK %K 7AK AK )K /K 9A K &K * I; 5 K >K *K>K K  K K5K0*K50K5)registryrGc^RIHpV!4#)z=Lazy wrapper to avoid circular import with tools/__init__.py.check_file_requirements)toolsrrs r9_check_file_reqsr|s- " $$r;namer descriptionu[Read a text file with line numbers and pagination. Use this instead of cat/head/tail in terminal. Output format: 'LINE_NUM|CONTENT'. Suggests similar filenames if not found. Use offset and limit for large files. Reads exceeding ~100K characters are truncated on a line boundary and return a next_offset; continue with offset to read the rest. Documents auto-extract to readable text: .ipynb, Office (.docx/.xlsx/.pptx and legacy .doc/.ppt/.xls), PDF (text layer), OpenDocument, RTF, EPUB, SQLite (.db/.sqlite: schema, row counts, first rows). Cannot read images/binary — use vision_analyze for images. parametersrobject propertiesrstringz8Path to the file to read (absolute, relative, or ~/path)r]integerz9Line number to start reading from (1-indexed, default: 1)minimumr"zMaximum number of lines to read (default: 2000, max: 2000). Reads are additionally capped at a ~100K-character budget with a next_offset continuation.maximumirequiredruWrite content to a file, completely replacing existing content. Use this instead of echo/cat heredoc in terminal. Creates parent directories automatically. OVERWRITES the entire file — use 'patch' for targeted edits. For an EXISTING file, call read_file first: write_file refuses (file untouched) when this task has no current full read/write of the file or the file changed on disk since; on refusal, read_file, merge, then retry. Auto-runs syntax checks on .py/.json/.yaml/.toml and other linted languages; only NEW errors introduced by this write are surfaced (pre-existing errors are filtered out). The result's verified:true means the on-disk content hash was confirmed — do NOT re-read the file to check the write landed.zWPath to the file to write (will be created if it doesn't exist, overwritten if it does)z%Complete content to write to the fileryaTargeted find-and-replace edits in files. Use this instead of sed/awk in terminal. Uses fuzzy matching (9 strategies) so minor whitespace/indentation differences won't break it. Returns a unified diff. Auto-runs syntax checks after editing. Finds a unique string and replaces it.zFile path to edit.rzExact text to find and replace. Must be unique in the file unless replace_all=true. Include surrounding context lines to ensure uniqueness.rzjChanged replacement text; it must differ from old_string. Pass empty string '' to delete the matched text.rbooleanzLReplace all occurrences instead of requiring a unique match (default: false)aTargeted find-and-replace edits in files. Use this instead of sed/awk in terminal. Uses fuzzy matching (9 strategies) so minor whitespace/indentation differences won't break it. Returns a unified diff. Auto-runs syntax checks after editing. REPLACE MODE (mode='replace', default): find a unique string and replace it. REQUIRED PARAMETERS: mode, path, old_string, new_string. PATCH MODE (mode='patch'): apply V4A multi-file patches for bulk changes. REQUIRED PARAMETERS: mode, patch.renumznEdit mode. 'replace' (default): requires path + old_string + new_string. 'patch': requires patch content only.zREQUIRED when mode='patch'. V4A format patch content. Format: *** Begin Patch *** Update File: path/to/file @@ context hint @@ context line -removed line +added line *** End Patchc$V^8dQhR\/#r4ro)r8s"r9r:r:sr;cl^RIHpHpV!4;'gRP4P 4pV!4;'gRP4P 4pTR9dR#TP R^4R,pTPR 4'dR#RT9# \ dR#i;i) uWhether the active main provider/model is the OpenAI/codex family — the population trained on the V4A apply_patch dialect. Provider-family-coarse on purpose (no per-model training-diet table to go stale): direct OpenAI providers always qualify; on aggregators (openrouter/nous/azure...) the MODEL slug decides (gpt-*/o-series/ codex). Fail-closed to the universal replace-only schema. )_read_main_model_read_main_providerr4FT/zopenai/>codexopenai openai-chat azure-openai openai-codexru)zgpt-zgpt.chatgptr-o1o3o4o5)agent.auxiliary_clientr*r+rrFrArRr)r*r+providermodelslugs r9_is_openai_family_mainr;sP')//R668>>@!#))r00288:UU ;;sA r "D STT   sB$,B$B$$ B32B3 search_filesaSearch file contents or find files by name. Use this instead of grep/rg/find/ls in terminal. Ripgrep-backed, faster than shell equivalents. On macOS, broad searches above the user home automatically skip TCC-protected folders (Desktop, Documents, Downloads, Library, Movies, Music, Pictures); target one directly when access is intentional. Content search (target='content'): Regex search inside files. Output modes: full matches with line numbers, file paths only, or match counts. File search (target='files'): Find files by glob pattern (e.g., '*.py', '*config*'). Also use this instead of ls. Discovery order is the fast bounded default; exact global newest-first order is an explicit opt-in and may scan the full tree.rzPRegex pattern for content search, or glob pattern (e.g., '*.py') for file searchrrzK'content' searches inside file contents, 'files' searches for files by namezCDirectory or file to search in (default: current working directory)rzOFilter files by pattern in grep mode (e.g., '*.py' to only search Python files)z1Maximum number of results to return (default: 50)z0Skip first N results for pagination (default: 0)rmodifiedzFile-search order: 'discovery' is fast bounded traversal order; 'modified' is exact global newest-first and may scan the full tree; ignored for contentrzOutput format for grep mode: 'content' shows matching lines with line numbers, 'files_only' lists file paths, 'count' shows match counts per filerzDNumber of context lines before and after each match (grep mode only)c VPR4;'gRp\VPRR4VPR^4VPR\4VR7#)rrrr4r]r")rr]r"r)r@rr argskwtids&, r9_handle_read_filerCsZ &&  ( (yC txx3DHHXq.:sPrvvlG[GbGb_bds &\4 ?C488OU;<66,'Ar;)r@rBrKrGrr/hermes_cli.observability.shared_metrics_harnessrF)r@rArFrBsfl @r9_handle_write_filerL$s &&  ( (yC 88F  :dhhv.>#D#D -      d9os + +:DO$--.a 1  Q L,9 r;c$V^8dQhR\/#)r5ownerr)r8s"r9r:r:As!!#!r;c |^RIHpV!V4;_uu_4V!R/VBuuRRR4# +'giR#;i)zRun an edit tool with its late LSP verdicts attributed to ``owner``, the calling session (``agent.lsp.deferred``): they ride that session's next tool result.) bind_ownerNr)agent.lsp.deferredrP)rNfn call_kwargsrPs&&, r9rIrIAs,. E   K     s* ; c aaaa^RIHpSPR4;'gRoSPRR4oV!RSVVVV3Rl4#)rErrrrrycR<\SPR4;'gS\SSPR4SPR4SPR4SPRR4SPR4S\SPRR44SPR4R7 #) rrrrrFryr) rrrrrryrrr)rIr@rrM)r@rArrBsr9r_handle_patch..Ns6"&&:N:U:URUWa (88L)dhh|6LHH]E2$((7:KUX488OU;<66,' 4r;)rKrFr@)r@rArFrrBsfl @@r9 _handle_patchrXIsBP &&  ( (yC 88FI &D GT, r;c VPR4;'gRpRRRR/pVPRR4pVPWD4pVPRR4pVe-\V\4'dVP4'gRp\ VPR R 4WVVPR 4VPR ^24VPR ^4VPRR4VPR^4VPRR4VR7 #)rrgreprIfindrrrrrr4rr"r]rrrr) rrrrr"r]rrrr)r@rBrKrr)r@rArB target_map raw_targetrrs&, r9_handle_search_filesr^Ws &&  ( (yC)VW5J(I.J ^^J 3F 88FC D | 4--djjll B'((;'txx/DTXXV^`aMbHH]I6TU@Vhhw ,c  ;;r;c^RIHpV!4'd R\R,PRR4/#/# \d/#i;i)uOne-word capability upgrade: "PDF (text layer)" → "PDF (scanned or text)" when hosted OCR has a trusted route (see read_extract.hosted_ocr_available). Config/env probe only — no network at schema-build time. Compaction's tool refresh (#97073) picks up a key added mid-session. hosted_ocr_availablerzPDF (text layer)zPDF (scanned or text))r<raREAD_FILE_SCHEMArrAr`s r9_read_file_schema_overridesrchs^  ;  ! !/ >FF&(?   " I   I s77 AAfileu📖)rtoolsetschemahandlercheck_fnemojimax_result_size_charsdynamic_schema_overridesu✍️)rrerfrgrhrirjc\4'g/#RRRR\R,/\R,R,CR\R,/CRR./pR\RV/# \d/u#i;i) uLayer the V4A patch mode onto the base replace-only schema for OpenAI-family mains (see PATCH_SCHEMA comment). Config/context probe only — no I/O at schema-build time; compaction's tool refresh (#97073) re-evaluates on model switches.rrr rrryr%r)r;_PATCH_V4A_PARAMS PATCH_SCHEMA_PATCH_V4A_DESCRIPTIONrA)paramss r9_patch_schema_overridesrqs %''I H )&1|,\:*73  5|VLL  sAAA A'&A'u🔧u🔎c@V^8dQh/^\9d \;R&#)r5r)__conditional_annotations__r^)r8s"r9r:r:s RSr;> /dev/tty /dev/fd/0 /dev/fd/1 /dev/fd/2 /dev/full /dev/zero /dev/stdin /dev/random /dev/stderr /dev/stdout /dev/console /dev/urandom) z/fd/0z/fd/1z/fd/2z/environz/cmdlinez/mapsz/smapsz /smaps_rollupz /numa_mapsz/memz/auxvz/pagemapr)r)rFN) rNNNFNrFN) rIrN2rUrIrUrr)rrr)rI files_onlyrQ)rs__doc__r@rrNloggingrrerrr contextlibrpathlibragent.file_safetyrr agent.tool_result_classificationrtools.binary_extensionsrtools.skill_provenancertools.file_operationsr r r tools.file_operations_commonr r rr agent.redactrrtools.file_tools_pathsrrrrrtools.file_tools_write_guardsrrrrrrrrrtools.file_tools_read_trackingrr r!r"r#r$r%r&r'r(r)r*r+r,r-r.r/r0r1r2 getLoggerrrEACCESEPERMEROFSrrDrGrZrmr frozensetrrrwcompile MULTILINErrrrrrrrrrrrr rS_ISFIFOS_ISSOCKS_ISCHRS_ISBLKrr rZrgr~rrrrrrrrrrrrrtools.registryrrGrrbWRITE_FILE_SCHEMArnrormr;SEARCH_FILES_SCHEMArCrLrIrXr^rcregisterrqr:)rss@r9rs   JB87QQRCTTTVVVVVV   8 $ ,, U[[A" :,<,!"#! -  #UWYWcWcdjj!QSUS_S_`j,["-J 0J!("V>B*6 ]])* ]]J \\'( \\#$ &0"G7TBD-2DKOD)-D>BDMQDN-.Q[o{KSYqxyr;