+ lHjC2@Rt^RIt^RIt^RIt^RIt^RIHtHtHt^RI H t H t H t ^RI Ht]P!R4tRRltRR/R R lltRRR R R R/RRlltRRltRRltR$RRlltRRltRRltR%RRlltRRltRtRR/R R!lltR"R#ltR#)&aSandbox lifecycle for the terminal tool: idle reaping, teardown, manual/atexit cleanup, and the lazy ensure_task_env bring-up. The env cache dicts and locks stay in tools.terminal_tool (tests patch them there) and are read through it at call time. Split out of ``tools/terminal_tool.py``; every public/patched name is re-imported there, so ``tools.terminal_tool.`` keeps resolving (and monkeypatching) as before. N)AnyDictOptional)_container_config_from_config_local_config_from_config_ssh_config_from_config)_quietztools.terminal_toolcV^8dQhR\\\3,R\R\R\R\R\R\\,/#)configenv_typeimagecwdtimeouttask_idhost_cwd)dictstrrintr)formats"B/home/ubuntu/.hermes/hermes-agent/tools/terminal_tool_lifecycle.py __annotate__rsP cN&)58?BMP $SMc ^RIHp^RIHpT!YY4VR8Xd \ V4MRV!V4'd \ V4MRVR8Xd \ V4MRWVR7 #)z``_create_environment`` with the ssh/local/container kwargs shaped from *config* (shared by the terminal tool, the file tools and the lazy :func:`ensure_task_env` bring-up).)_create_environment)_is_container_backendsshNlocal) r r rr ssh_configcontainer_config local_configrr)tools.terminal_tool_backendsrtools.terminal_tool_configrrrr) r r r rrrrrrs &&$$$$$ r_create_configured_envr#s[ A@ C6>%6G*62T5J85T5T )& 1Z^:Bg:M.v6SW r force_removecJV^8dQhR\R\\,RR/#)r envr$returnN)rrbool)rs"rrr-s%cHTNdrcl\VR4'dZVeDR\P!VP4P9dVPVR7R#VP4R#\VR4'dVP 4R#\VR4'dVP 4R#R#)aiTear down one environment via cleanup()/stop()/terminate(), whichever it has. ``force_remove`` is forwarded to ``cleanup()`` only when given and the backend's signature accepts it (``DockerEnvironment``, issue #20561; other backends don't). Shared by ``cleanup_vm``, the idle reaper and the prompt-time backend probe so the signature check lives in one place. cleanupNr$r$stop terminate)hasattrinspect signaturer* parametersr,r-)r&r$s&$r _cleanup_envr2-s{sI  #':K:KCKK:X:c:c(c KK\K 2 KKM f    k " "  #rdone_msgz,Cleaned up inactive environment for task: %s stop_idleFc nV^8dQhR\R\R\\,R\R\RR/#)r r&rr$r3r4r'N)rrrr()rs"rrr@sMXXsXSX8D>X\_X^bXosXrc`V'dVP4M \WR7\PW14R# \dep\ T4pRT9gRTP 49d\PRT4Rp?R#\PRY4Rp?R#Rp?ii;i)u``_cleanup_env`` (or, with *stop_idle*, the backend's ``stop_idle``) plus outcome logging. A 404/"not found" error means the sandbox is already gone — logged at info.r+404z not foundz*Environment for task %s already cleaned upz-Error cleaning up environment for task %s: %sN)r4r2loggerinfo Exceptionrlowerwarning)r&rr$r3r4e error_strs&&$$$ r _teardown_envr?@s} X  MMO  8 H& XF I  0A!A KKDg N N NNJG W W Xs>2> B- =B( B((B-c(V^8dQhR\RR/#r rr'Nr)rs"rrrQs  3 4 rcH^RIHpV!V4R# \dR#i;i)zZInvalidate the file_ops cache entry so ShellFileOperations can't reference a dead sandbox.)clear_file_ops_cacheN)tools.file_toolsrD ImportError)rrDs& r_clear_file_ops_cacherGQs$ 9W%    s  !!c$V^8dQhR\/#r rrB)rs"rrrZsSrc(^RIHpHpHpHpHpV;_uu_4VP VR4pVP VR4RRR4V;_uu_4VP VR4RRR4X# +'giL7;i +'giX#;i)uPop *task_id* from the env cache, activity map and creation locks; return the env (or None). Callers run the (slow) teardown OUTSIDE the lock — Modal/Docker teardown can block 10-15s and would stall every concurrent terminal/file tool call._active_environments_creation_locks_creation_locks_lock _env_lock_last_activityN)tools.terminal_toolrLrMrNrOrPpop)rrLrMrNrOrPr&s& r_unregister_envrSZsr  "&&w57D)   GT*  J    Js%A-B- A= B c$V^8dQhR\/#)r lifetime_seconds)r)rs"rrrks',',S',rc ^RIHpHpHpHpHp\ P !4p^RIHp\VP44FNpVPV4'g1\V4'gK-VPV3Rl4'gKJWeV&KP T;_uu_4\VP44U U u.uFwrWj, V8gKV NK p p p V U u.uFqVP!V R43NK p p V Fp VP!V R4K T;_uu_4V Fp VP!V R4K RRR4RRR4X F]wrV fK \#V4\V4'd,\%\'V RR44'd\)WRR7KR\)W4K_ R# \dEL,i;iuup p iuup i +'giL;i +'giL;i)zOClean up environments that have been inactive for longer than lifetime_seconds.rK)process_registryc VPV8H#N)r)skeys&&r(_cleanup_inactive_envs..{sQYYZ]M]rNr4T)r4)rQrLrMrNrOrPtimetools.process_registryrWlistkeyshas_active_processes_is_workspace_key _any_runningrFitemsrRrGcallablegetattrr?)rUrLrMrNrOrP current_timerWrtlaststale envs_to_stopr&s& r_cleanup_inactive_envsrmks99;L  ;N//12G 44W==%g..(55G6]^^*6w' 3 "&~';';'=">i">wq,BUXhBh">iHMN1044Q=> NA   q$ ' ! !##At," %  ? !' * ))hwsKQU7V.W.Wcd;c+%    jN" ! sfAF41F4F4 G$=G G G$ G <'G$#G ?G$4 GG G$ G! G$$ G4 c0V^8dQhR\R\/#)r r[r'rr()rs"rrrs$$3$4$rc2R\T;'gR49#)zPA persistent Docker key bound to one session workspace (``:ws:``).z:ws:rB)r[s&rrcrcs S^ ##rc$V^8dQhR\/#rIrB)rs"rrrsUUCUrc^RIHpHpHpV!V4pT;_uu_4VP V4;'gVP V4uuRRR4# +'giR#;i)z9Return the active BaseEnvironment for *task_id*, or None.)rLrO_resolve_container_task_idN)rQrLrOrtget)rrLrOrtlookups& rget_active_envrwsE__ ' 0F #''/TT3G3K3KG3T s *A A# c:V^8dQhR\\,/#rIrr)rs"rrrs??Xc]?rc^RIHpHpHpHpHpHpHpHpH p H p H p V!4p V R,p V R8XdR#V!V4p\V4pVe-V;_uu_4\P!4Wn&RRR4V#V !W!V4V 4pV !4V;_uu_4VPV\P !44pRRR4X;_uu_4\V4pVe VuuRRR4#\#WVV R,V R,VV!W4R7pT;_uu_4TY&\P!4Yn&RRR4\&P+R YR ,4TuuRRR4# +'giT#;i +'giL;i \$d2p\&P)RYR ,T4Rp?RRR4R#Rp?ii;i +'giL;i +'giR#;i) ubLazily create and cache the sandbox env for *task_id* if none is active. Lets non-terminal callers (``tools.image_source`` reading container-only paths) bring the sandbox up on demand with the same machinery as the terminal tool. No-op on local. Returns the env, or ``None`` when local or when creation fails (best-effort; the caller's fail-closed path stays intact). :func:`terminal_tool` creates the environment on the first terminal command, but nothing else did — so under a non-local backend (ssh, docker, …) a session whose first action is ``vision_analyze`` on a container-only path hit "no active sandbox session" because the SSH/Docker handshake never ran (issue #62825). vision reads such paths inside the sandbox (see ``tools.image_source``), so it calls this to bring the env up on demand, reusing the same creation machinery as the terminal tool. ) rLrMrNrO_get_env_configrPrt_resolve_task_host_cwd _select_image_start_cleanup_threadresolve_task_overridesr rNrr)r rrrrz/Lazy %s environment init failed for task %s: %s:NNz-%s environment lazily initialized for task %s)rQrLrMrNrOr{rPrtr|r}r~rrwr^ setdefault threadingLockr#r:r8r<r9)rrLrMrNrOr{rPrtr|r}r~rr r effective_task_idexistingr task_locknew_envexcs& rensure_task_envrs  Fj!H727;/0H Y04 N - ($:7$CV LE  #../@)..BRS   !"34    ,6%=y)3D/@GY6= 304 N -  ; + 1 Y    NNAB/   Y# sfE(&E<G!,%F G!G 7&G!( E9 < F  G G8G!G  G! G G!! G2 c0V^8dQhR\R\/#)r rr'ro)rs"rrrs ^ ^s ^t ^rcz\V4pVfR#\\VRR4;'g\VRR44#)uTrue if *task_id*'s active env persists across turns. The agent loop skips per-turn teardown for these (persistent docker, daytona, modal, …); non-persistent backends are torn down at end of turn to prevent leakage, and the idle reaper handles the rest. Session-scoped docker containers count as persistent HERE: their lifetime is the session (removed by ``AIAgent.close()`` → ``cleanup_vm`` and the idle reaper). F_session_scoped _persistent)rwr(rg)rr&s& ris_persistent_envrs=  !C { .6\\'#}V[:\ ]]rc 6^RIHp^RIHpV!4^p\ VP 44Fp\ V4V^, pK V^8d\PRV4V# \d$p\PRY4RR7Rp?KdRp?ii;i)zBClean up ALL active environments (process exit). Use with caution.)kill_live_foreground_processes)rLzError cleaning %s: %sT)exc_infoNzCleaned %d environments) tools.environments.baserrQrLr`ra cleanup_vmr:r8errorr9)rrLcleanedrr=s rcleanup_all_environmentsrsF8"$G,1134 M w  qLG5{ -w7 N  M LL0'tL L L MsA** B5BBc0V^8dQhR\R\/#)r rr$ro)rs"rrrsdrcZ\V4p\V4VfR#\W VRR7R#)uManually clean up a specific environment by task_id. *force_remove* is forwarded to backends that accept it (currently only ``DockerEnvironment``). Default False matches session-lifecycle semantics: callers (``AIAgent.close()`` on TUI/gateway session teardown, the per-turn cleanup of non-persistent envs) must honor the user's persist-mode preference — stopping the container here would break the "ONE long-lived container shared across sessions" contract. Pass ``force_remove=True`` only for user-initiated teardown. The idle reaper calls ``env.cleanup()`` directly, so persist-mode idle envs are likewise no-op'd; only the orphan reaper at next startup reclaims them. Nz,Manually cleaned up environment for task: %s)r$r3)rSrGr?)rr$r&s&$ rrrs. ' "C'" { <?rc>V^8dQhR\\,RR/#rAry)rs"rrrs#4rc^RIHpHpHpHpV!V40pV'dVP V4.pT;_uu_4VF>pVP VR4pVP VR4VfK-VPV4K@ RRR4VF/p\R4;_uu_4VP4RRR4K1 R# +'giLG;i +'giKY;i)zDrop any cached env for *task_id* (and its collapsed key) after an infrastructure failure, so later calls don't reuse a dead connection.)rLrOrPrtNz&cleanup of degraded environment failed) rQrLrOrPrtaddrRappendrr*) rrLrOrPrtraevictedr[r&s & r_evict_environment_for_taskrs 'w / 0D G C&**35C   sD )s#    < = = KKM> = > = =s+B?+B? C? C  C# )i,rY)__doc__loggingr/rr^typingrrrr!rrrr"r getLoggerr8r#r2r?rGrSrmrcrwrrrrrrrrs && .   0 1&T&XDXcQXejX" "',T$ U?D ^&U.r