+ lHj VaRVtO0tRt^RIt^RIt^RIt^RIt^RIt^RIH t H t H t ^RI H t^RIHt^RIHt^RIHt^RIHt^RIHt^R IHt^R IH t H!t!H"t"H#t#]PH!R 4t%Rs&]^kR R lt'RRlt(RRlt)Rt*RWt+Rt,RXt-RYt.RZR[R\R]R^R_R`R.3RaR.3R/3RbR.3RcRdReRfRgRhRi3t/RR.3RjRR.3RR/3RkRlRR.3RmRnRoRpRq3 t0RRlt1R R!lt2R"R#lt3R$R%lt4R&R'lt5R(R)lt6R*R+lt7R,R/R-lt8R.t9R/t:R0R1RR23R3R4RR53/t;R6t<]Pz!]]Pz!]]:R0]>R3]?R?]@/tCRrR@RAlltDRBRCltERDREltFRFRGltGRHRIltHRRN]FRORs/R3RN]E/R0RP]H//tI]^kR=RQ/tJRRRSltKRTRUltL]IUu/uFq]P{]KV4bK uptM]MR3,tNR#uupi)ta Execution-environment backends for the terminal tool: per-backend builders, config-to-kwargs shapers, and requirement checkers, routed by dispatch/spec tables. Split out of ``tools/terminal_tool.py``; the terminal tool imports the builders/checkers it uses from here.N)AnyDictOptional)DockerEnvironment)LocalEnvironment)ManagedModalEnvironment)ModalEnvironment)SSHEnvironment)is_managed_tool_gateway_ready)_get_plugin_env_provider)has_direct_modal_credentialsmanaged_nous_tools_enabled%nous_tool_gateway_unavailable_messageresolve_modal_backend_stateztools.terminal_toolc0V^8dQhR\R\/#)reasonreturnstrbool)formats"A/home/ubuntu/.hermes/hermes-agent/tools/terminal_tool_backends.py __annotate__rsCDc4Vs\PV4R#)zWLog *reason*, remember it for the user-facing notice, and return False for the checker.F)_last_unavailable_reasonloggererrorrs&r_rejectr s & LL rc>V^8dQhR\\,RR/#)rrrNrr)rs"rrr's&&x}&&rc VsR#)z^Store (or clear) the last failure reason without logging; used by check_terminal_requirements.Nrrs&r_record_unavailable_reasonr%'s  &rc:V^8dQhR\\,/#)rrr")rs"rrr-s$$Xc]$rc\#)zUWhy the last terminal requirements check failed, in plain words; None when it passed.r$rr#terminal_backend_unavailable_reasonr)-s ##rz/vercel/sandboxz2local, docker, modal, daytona, vercel_sandbox, sshTdocker_volumesFdocker_forward_env docker_envdocker_extra_argsvolumes forward_envenv extra_argscRV^8dQhR\\\3,R\/#rconfigrdictrr)rs"rrrOs&NNDcNNtNrc h\UUUu/uFwrq1VPW#4bK uppp#uupppi)zZ``ssh_config`` for :func:`_create_environment` (shared with the lazy ``ensure_task_env``).) _SSH_KEYSget)r4outkeydefaults& r_ssh_config_from_configr=Os+CL M9.?cC) )9 MM M-cRV^8dQhR\\\3,R\/#r3r5)rs"rrrTs&@@d38n@@rc*RVPRR4/#)zY``local_config`` for :func:`_create_environment` (TERMINAL_LOCAL_PERSISTENT, default on). persistentlocal_persistentTr9r4s&r_local_config_from_configrETs &**%7> ??rcRV^8dQhR\\\3,R\/#r3r5)rs"rrrYs"==$sCx.=T=rc `\UUu/uFwrWPW4bK upp#uuppi)z```container_config`` for :func:`_create_environment` (shared with the lazy ``ensure_task_env``).)_CONTAINER_KEYSr9)r4kds& r_container_config_from_configrKYs(,; OdOrc h\UUUu/uFwrq1VPW#4bK uppp#uupppi)zICommon sandbox resource kwargs (cpu/memory in MB/disk in MB/persistence).)_RESOURCE_KEYSr9)rMr:r;r<s& r _resourcesrP^s+?M N~*;#G% %~ NN Nr>c0V^8dQhR\R\/#)rruntimerr)rs"rrrcs@@#@$@rc2V'*;'g V\9#)N)_SUPPORTED_VERCEL_RUNTIMES)rRs&r_is_supported_vercel_runtimerUcs; ? ?'%???rc`V^8dQhR\R,R\\\3,/#)r modal_modeNr)objectr6rr)rs"rrrgs*]]$]4S>]rc@\V\4\R4R7#)z2Resolve direct vs managed Modal backend selection.modal) has_direct managed_ready)rr r )rWs&r_get_modal_backend_stater]gs" &z>Z>\5RSZ5[ ]]rctV^8dQhR\\\3,R\\\3,/#)r modal_stater)r6rrtuple)rs"rrrms.WW4S>WeCHoWrc<\R4pVR,'gVR,R8Xd%VR,'dRV R2MRV 2pRV 2R V 23#\4pVR,R 8XdR V'dR MR R2R3#V'dRMRpV'dRMRpRV RV R2RV R23#)z(log message, ValueError message) for a modal_state with no selected backend. Single decision shared by the requirements checker and the env builder.zmanaged Modal executionmanaged_mode_blockedmodemanagedzgNous Tool Gateway access is not currently available and no direct Modal credentials/config were found. zH Choose TERMINAL_MODAL_MODE=direct/auto to use direct Modal credentials.z)the managed tool gateway is unavailable. z=Modal backend selected with TERMINAL_MODAL_MODE=managed, but z2Modal backend is configured for managed mode, but directzModal backend selected with TERMINAL_MODAL_MODE=direct, but no direct Modal credentials/config were found. Configure Modal or choose TERMINAL_MODAL_MODE=z managed/autoauto.z_Modal backend is configured for direct mode, but no direct Modal credentials/config were found.z!or managed tool gateway was foundz was foundz , set up the managed gateway, orz orz>Modal backend selected but no direct Modal credentials/config z. Configure Modalz! choose a different TERMINAL_ENV.)rr )r_gatewaytailrdfoundfixs& r_modal_unavailable_reasonrlms44MNG)**k&.AY.N566 'y(pr>ghogpR@@6w??AO P,=Cg266#''F P-2)*'DeDDgDW^DiqD*4R.DQ    sB(B// B>=B>c \V4pR Uu/uFqvV,^8gKWvV,bK ppVR,^8dK^RIp R\P!V PP 4P 9d VR,VR&\VPR44p V R,p V R 9d\\V 4^,4hV R8Xd\M\p V !WW(VR,VR7#uupi \dL}i;i) cpudiskNephemeral_diskrWselected_backendrdpersistent_filesystem)rzrorpmodal_sandbox_kwargsrr{)rmemory)rdre)rPrZinspect signatureSandboxcreate parameters Exceptionr]r9 ValueErrorrl_ManagedModalEnvironment_ModalEnvironment) rzrorprMr{rrresrIsandbox_kwargsrZr_selectedclss $$$$$, r_build_modal_envrs R.C):I):A!fqjiaQi):NI 6{Q  7#4#4U]]5I5I#J#U#UU36v;/0+266,+?@K-.H,,2;?BCC&.)&; "ARC UW%()@%A7 TTJ    sC6 C6A C;; D D daytonacB\P!R4P#)ztools.environments.daytona) importlib import_moduleDaytonaEnvironmentr(rrrs //0LM``rc*R\VR,4/#)r)intrMkws&&rrrss2e9~6rvercel_sandboxcB\P!R4P#)z!tools.environments.vercel_sandbox)rrVercelSandboxEnvironmentr(rrrrsy667Z[ttrcrRVPR4;'gRRVPR4;'gR/#)rRvercel_runtimeNrz vercel_imagerCrs&&rrrs5i@P9Q9Y9YUY'.~0F0N0N$.Prc \V,wrxp \RRVRVRV/\V4BV'dRV/M/Bp V PV !WJ44V!4!R/V B#)rorpr{rzr() _SANDBOX_ROWSr6rPupdate) env_typerzrorprMr{rrr with_imageextrars &$$$$$, r_build_sandbox_envrsk*84CU >c>7>G>z"~>)3gu%>F MM%#$ 5?6?r probe_onlyc $V'd/VPR4'dVPR4'g \R4h\VR,VR,VPR^4VPRR4WVVPRR4R7#) hostuserz?SSH environment requires ssh_host and ssh_user to be configuredportr;rAT)rrrkey_pathrorprrA)r9r_SSHEnvironment)rorp ssh_configrrrs$$$$,r_build_ssh_envrs} Z^^F33:>>&;Q;QZ[[  6 2F9KR\R`R`agikRl$.NN5"$=3dn&0nn\4&H JJrcV^8dQhRR/#)rrNr()rs"rrrs4rcVPpVR8XdVR8Xd\ VRR4MRpMTp\V\4'd,VPR4'dVR8wd W@n R#R#R#R# \d1\PR\ T4P RR7RpLi;i \dR#i;i)aZRecord the provider's declared home on this environment: a declared absolute path whatever ``cwd`` the environment started in (``terminal.cwd`` may pick another directory), or, for ``~``, the path it resolved to inside THIS sandbox when it started there. Per environment, never per backend, so a second sandbox with a different home gets its own.z3%s.default_cwd raised; not recording a sandbox homeT)exc_infoN~ro/) default_cwdrrwarningtype__name__getattr isinstancer startswith_hermes_sandbox_homer)env_objproviderrodeclaredhomes&&& r_stamp_sandbox_homers '' 303s wwt,$!5!5$#+ +/ (;F!5 LdS[nNeNe $  &    s# A1#B/18B,+B,/ B>=B>c \V4pVet^RIHpV!V4'd\RV R24hVP W#WQVR7p VP P 4P4V n\WV4V #^RI H p V !4p RPR\P!R4\#V 4,44p ^RIHp \R V R V V !V4 24h \dLi;i \d.p Lzi;i) N)is_hosted_objectzterminal.backend is z, a plugin that runs in the plugin host (plugins.isolation: host), and the host cannot hand its environment to Hermes, so commands cannot run in it. Set plugins.isolation: in_process to use this backend.)rorpr{rzcontainer_config)plugin_backend_names, c3."TF pRV R2xK R#5i)'Nr().0ns& r $_build_plugin_env..s[(Z1!Ah(Zsterminal_backend_install_hintzUnknown environment type: z. Use )r hermes_cli.plugin_hostrrcreate_environmentnamestriplower_hermes_backend_namerragent.terminal_env_registryrrjoin_BUILTIN_BACKENDSsplitlisthermes_cli.left_core_migrationr)rrzrorprMr{rrrrrr plugin_namesknownrs$$$$$$, r_build_plugin_envrs%'1H; H % %&xj1EFG G--#PW?A.C +3==+>+>+@+F+F+HG ( Gs3D+-  II[(9(?(?(E\HZ(Z[ [EL 1(6%IfgoIpHqr ss     s$-C+ C<+ C98C9< D  D localdockerrZsshcV^8dQhR\R\R\R\R\R,R\R,R\R,R \R \\,R \/ #) rrrzrorprNrrmr{r|r)rrr6rr)rs"rrrso#cc$(4KJNQU+&*TkCF#+3-EIrc \PV4p \YY5;'g/VWFWR7 p V e V !R/V Bp M \RRV/V Bp W nV # \ dT #i;i)aCreate an execution environment (instance with ``execute()``) for *env_type*. ``image`` is ignored for local/ssh/vercel; ``container_config`` carries the container_*/docker_* resource keys; ``host_cwd`` is the host dir bound into Docker when cwd mounting is enabled. ``probe_only`` asks ssh for a throwaway connection with no remote setup/sync (the prompt-time probe). Unknown types fall through to plugin backends.) rzrorprMr{rrmr|rrr() _ENV_BUILDERSr9r6rrr) rrzrorprrrmr{r|rbuilderrr0s &&&&&&&&&& r_create_environmentrs)G  disk -> SDK -> auth (OIDC token, else the full TOKEN/PROJECT_ID/TEAM_ID tuple).rrcontainer_diskzVercel Sandbox runtime z: is not supported. Set TERMINAL_VERCEL_RUNTIME to one of: rrgz?Vercel Sandbox does not support custom TERMINAL_CONTAINER_DISK=z,. Use the default shared setting (51200 MB).vercelzpvercel is required for the Vercel Sandbox terminal backend. Run hermes setup terminal and select Vercel Sandbox. get_secretVERCEL_OIDC_TOKENTzkselected with token auth, but VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID must all be set together.zselected but no supported auth configuration was found. Set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID for normal use.zVercel Sandbox backend zC VERCEL_OIDC_TOKEN is supported for one-off local development only.>rur) VERCEL_TOKENVERCEL_PROJECT_IDVERCEL_TEAM_ID)r9rrUr rrTrutil find_specagent.secret_scoperrallany)r4rRrrrIpresentheads& r _check_vercelr.s9zz*+11r88:G ::& .D ' 0 00 ;u))$>?@CD D :XY]X^_DDE E~~)1JK K-%&&,cd,cqtJqM",cGd 7||"7||  1  ,TF2uv wwesD"chV^8dQhR\\\3,R\\,/#r3)r6rrrr)rs"rrrHs&tCH~(4.rc\VPR44pVR,R8XdR#VR,R8wd\\V4^,4#R#)rWrrdTreN)r]r9r rl)r4r_s& r _modal_prer HsM*6::l+CDK%&)3%&(20=a@AA rcRV^8dQhR\\\3,R\/#r3r)rs"rrrQs&\\T#s(^\\rcxVPR4'dVPR4'dR#\R4#)ssh_hostssh_userTzthe SSH host and user are not configured (TERMINAL_SSH_HOST / TERMINAL_SSH_USER); run `hermes setup terminal` to enter them or pick the 'local' backend)r9r rDs&r_ssh_prerQs7 zz*&**Z"8"8 [ \\rcRV^8dQhR\\\3,R\/#r3r)rs"rrrXs"55$sCx.5T5rc.^RIHp^RIHpV!R4RJ#)ru)DaytonarDAYTONA_API_KEYN)rrrr)r4rrs& r _daytona_postrXs- ' ( 44rbinarycJ\P!R4P4#)ztools.environments.docker)rr find_dockerr(rrrr`s)"9"9:U"V"b"b"drversionuWDocker is not installed — no docker executable in PATH or the usual install locationspremodulepostz8Docker is installed but the Docker daemon is not runningc^V^8dQhR\R\\\3,R\/#)rrr4r)rr6rr)rs"rrros)#tCH~$rc \R4\V,pRV9dVR,!V4MRpVeV#RV9dVR,wrEpV!4pV'g\T;'gRV: R24#\P!Wu.R^\P RR7pVP ^8wd-\\V, RV R V R VP R 24#R#R V9dI\PPVR ,^,4f\VR ,^,4#R V9d&VR ,!V4'g\RV: R24#R#)Nrrthe z# backend's executable was not foundTF)capture_outputrpstdincheckz (` z` exited with code )rrz& backend is missing its API key or SDK) r%_BACKEND_SPECSr subprocessrunDEVNULL returncode_PROBE_FAILED_REASONSrrr) rr4specverdictfinderarg missing_msg executableprobes && r_check_requirementsr0os?t$ ( #D%*d]d5k&!G4#'> [X ;``D <_*`a a 0qXbXjXjrwx   q 3H=>c*QseSfglgwgwfxxyz{ {4INN44T(^A5FGOtH~a()) ~d6l622h\)OPQQ rcRV^8dQhR\\\3,R\/#r3r)rs"rrrs& H HtCH~ H$ Hrc \R4VR,p\V4pVe5\VPV44pT;'g\ RV: R24#^RIHp\ RV R\ RV!V4 24#)Nrrz5 plugin backend reported its requirements are not metrzUnknown TERMINAL_ENV 'z'. Use one of: z , or a plugin-registered backend)r%r rcheck_requirementsr rrr)r4rrokrs& r_check_plugin_requirementsr5st$j!H'1H (--f5 6ffWtHr?)r@rA)rr)rBT)rWrf)rr)rr)docker_mount_cwd_to_workspaceF)docker_run_as_host_userF)docker_shm_size1g)docker_networkT)docker_persist_across_processesT)docker_shared_container_keyr)docker_orphan_reaperT)docker_snap_compatF)docker_image_pinnedF)auto_mount_cwdrCF)run_as_host_userrDF)networkrGT)ryrHT)shared_container_keyrIr)shm_sizerErF) snap_compatrKF) image_pinnedrLF)NNNr<NF)rZz`modal is required for direct modal terminal backend. Run hermes setup terminal and select Modal.)Pr7__doc__ functoolsimportlib.utilrrloggingr$typingrrrtools.environments.dockerrrtools.environments.localrrq tools.environments.managed_modalrrtools.environments.modalrrtools.environments.sshr rtools.managed_tool_gatewayr tools.terminal_tool_configr tools.tool_backend_helpersr r rr getLoggerrrr r%r)_VERCEL_SANDBOX_DEFAULT_CWDrTrr8rOrHr~r=rErKrPrUr]rlrsrrrrpartial_build_daytona_env_build_vercel_envrrrrrrr rrr#r(r0r5_REQUIREMENT_CHECKERS"_check_vercel_sandbox_requirementsr)rr7s0@rrhsF&&MJ`JDD?ll   0 1 +/.& $ 0?H M n46O"$: