+ lHj5 hRt^RIHt^RIt^RIt^RIHt]P!]4t Rt RRlt R#)aPropagate agent-turn context into worker threads that dispatch Hermes tools. A bare ``threading.Thread`` / ``ThreadPoolExecutor`` worker starts with an empty ``contextvars.Context`` and no thread-local approval/sudo callbacks, so tool dispatch inside it silently loses the approval ContextVars (gateway sessions then auto-approve dangerous commands) and the CLI callbacks (``prompt_dangerous_approval`` cannot reach the user, GHSA-qg5c-hvr5-hjgr). Call :func:`propagate_context_to_thread` **on the parent thread** (it snapshots at call time) and use the result as the worker target; callbacks are installed for the worker's lifetime and always cleared on exit. ) annotationsN)Callablec^RIHp^RIHpVPVP 3VP VP3VPVP3VPVP3VPVP33#)uZ(getter, setter) pairs for every thread-local prompt callback a tool may need mid-dispatch (lazy: terminal_tool imports tools.approval at load, so a top-level import risks a cycle). Add a new per-thread prompt here — a callback missing from this table is silently absent on every parallel/timeout worker, so the tool believes nobody can answer.)unlock) terminal_tool)agent.vault_backendsrtoolsr_get_approval_callbackset_approval_callback_get_sudo_password_callbackset_sudo_password_callbackget_unlock_prompt_callbackset_unlock_prompt_callbackget_save_login_prompt_callbackset_save_login_prompt_callbackget_code_prompt_callbackset_code_prompt_callback) vault_unlocktts 9/home/ubuntu/.hermes/hermes-agent/tools/thread_context.py _callback_apirsz <)  & &(@(@ A  + +R-J-J K  4 4l6]6] ^  8 8,:e:e f  2 2L4Y4Y Z  \\c V^8dQhRRRR/#)targetrreturn)formats"r __annotate__r$s&&&X&rcaaa\P!4oRo\;QJd.R\44FNK 5M!R\444oVVV3RlpV# \d\ P RRR7L.i;i)u8Wrap *target* to run with the *current* thread's ContextVars and per-thread prompt callbacks (approval, sudo, password-manager unlock). Fail-closed: if callback installation raises they stay ``None`` — dangerous commands are then denied by ``prompt_dangerous_approval`` and the gateway approval queue blocks. Nc36"TFwrW!!43xK R#5i)Nr).0gettersetters& r .propagate_context_to_thread../sR/&&(+/sz0Could not capture parent approval/sudo callbacksTexc_infoc<<aaVVVV3RlpSPV4#)c<Sf S!S/SB#SFwrVfK V!V4K S!S/SBSF wrV!R4K # \d\PRRR7LAi;i \d\PRRR7#i;i SF wrT!R4K i \d\PRRR7ii;i;i)NzaFailed to install propagated approval/sudo callbacks; dangerous-command approval will fail closedTr&z2Failed to clear propagated approval/sudo callbacks) Exceptionloggerdebug)r#cb_cbargsinstallskwargsrs r_inner._runner.._inner4st.v.. ["*JF~r #+  0t.v.0'/ t (0 [ KUY[ [!0LL!U*.!000'/ t (0 0LL!U*.!00sVA ABA-"A*)A*-"BBCB+*C+"C CCC)run)r/r1r2ctxr0rsjl r_runner,propagate_context_to_thread.._runner3s 0 0(wwvr) contextvars copy_contexttuplerr*r+r,)rr6r5r0sf @@rpropagate_context_to_threadr;$sq  " " $CHX5R-/R55R-/RR. N5 X GRV WXs A"1A"""BB) __doc__ __future__rr8loggingtypingr getLogger__name__r+rr;rrrrBs3 #   8 $ \&r