+ lHjcaR/tL0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI H t H t ^RI Ht^RIHtHt^RIHt^RIHtHtHt^RIHtHtHtHt^RIHtHtH t H!t!H"t"H#t#^R I$H%t%^R I&H't'H(t(H)t)]PT!]+4t,](!R 4t-R t.]-'d],P_]P`4]Pb!4t2/t3]^k]Ph!]Pj!44t6R s7^s8Rt9RRlt:RRlt;RRlt4t?Rt@!RR]>4tARRltBRR ltCR!R"ltDR#R$ltER%R&ltFR'R(ltG]Pb!4tHR)R*ltIR+R,ltJ!R-R.] 4tKR#)0aBase class for all Hermes execution environment backends. Unified spawn-per-call model: every command spawns a fresh ``bash -c`` process. A session snapshot (env vars, functions, aliases) is captured once at init and re-sourced before each command. CWD persists via in-band stdout markers (remote) or a temp file (local). Cohesive pieces live in sibling modules (``base_output``, ``base_session_env``, ``base_wait``, ``path_utils``). N)ABCabstractmethodPath)CallableIterable)get_hermes_home) consume_yieldis_interruptedis_thread_interrupted) ProcessHandle_finalize_wait_result_new_output_collector_start_drain_thread)_SHELL_ENV_NAME_RE_SNAP_TMP_SUFFIX _cwd_marker_snapshot_bootstrap_script_split_cwd_marker_wrap_command_script) _WaitTrace)atomic_json_writeenv_var_enabledfile_signatureHERMES_DEBUG_INTERRUPTg@Fg?c$V^8dQhR\/#returnbool)formats"A A) c(V^8dQhR\RR/#)rkillrN)r)r!s"r"r#r#XsUUhUUr$cjV!V4R# \d\PRRR7R#i;i)z-exit-time kill of a foreground command failedTexc_infoN) Exceptionloggerdebug)r5procs&&r" _quiet_killr=Xs1U T U Dt TUs  "22nowc0V^8dQhR\R\/#)rr>r)r int)r!s"r"r#r#_s""4"C"r$c V'ga\;_uu_4\\P44pRRR4XFwr#\ VP V4K \ V4#\P!4\,pRs \P\R7'do\PR\RV\P!4, 44\\P44p\P4M\\P44p.pVFwr#\V\ P"4'd\ VP$V4K=VP'\(P*!\VP$V3RR74VR,P-4K VF8pVP/\RV\P!4, 44K: \ V4# +'giEL;i \P4i;i)aKill every in-flight foreground command's process tree; returns how many were signalled. ``now=True`` is for a caller about to ``os._exit``: the graceful kill TERMs, waits and only then KILLs, so a SIGTERM-ignoring command outlives a hard exit that lands inside that window. It also raises the exit fence and waits for spawns already past it to register, so no command started around the snapshot survives, and it never blocks past ``_HARD_KILL_BUDGET_S``: SDK cancels (Modal, Daytona, Vercel) run on daemon threads under that one deadline.NTtimeoutc\^8H#))r(r)r$r"0kill_live_foreground_processes..rs 3D3Ir$g)targetargsdaemon)r&listr/valuesr= _kill_processlentime monotonic_HARD_KILL_BUDGET_Sr'acquirewait_formaxrelease isinstance subprocessPopen_force_kill_processappend threadingThreadstartjoin)r>liver,r<deadlineremotets$ r"kill_live_foreground_processesrd_s  " "(//12D#IC ))4 04y~~"55HL$$-@$AA , ! * *+I3sT\_c_m_m_oToKp q(//12D ! ) ) +$++-. F  dJ,, - - // 6 MM)**+SE\E\^bDclpq r 2J      s34>>#3345 t91# " " " ) ) +sH,AH' H$ 'H=c]tRt^tRtRtR#)FileFetchErrorz:A file could not be extracted from the backend filesystem.r)N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r)r$r"rfrfsDr$rfi,cJaa]tRt^toRtRR/V3RlV3RllltRtVtV;t#)EnvironmentConnectionErroruInfrastructure/connection-class failure of a terminal backend (SSH host down, Docker daemon not running, remote sync on a dead link) — never a command that merely exited nonzero. Subclassing RuntimeError keeps every ``except RuntimeError`` catcher working. ``terminal_tool`` turns this into a structured ``status: "degraded"`` result; the failed backend is never cached, so a later call retries from scratch. retry_hintc&<V^8dQhRS[RS[/#)rreasonrostr)r! __classdict__s"r"r#'EnvironmentConnectionError.__annotate__s33s333r$cT<\SV`V4WnT;'gRVnR#)uThis is an infrastructure failure, not a command failure. Verify the backend is reachable (network, service running, credentials), then retry the same command — recovery is automatic once the backend is back.N)super__init__rrro)selfrrro __class__s&&$r"ry#EnvironmentConnectionError.__init__s.   $33 2 r$)rrro) rgrhrirjrkryrl__classdictcell__ __classcell__)r{rus@@r"rnrns!F 3333r$rncRV^8dQhR\\.R3,R,RR/#)rcbNrrrt)r!s"r"r#r#s*++hud{3d:+t+r$cV\nR#)z>Register a callback that _wait_for_process fires periodically.N)_activity_callback_localcallback)rs&r"set_activity_callbackrs (*%r$cNV^8dQhR\\.R3,R,/#rrNr)r!s"r"r#r#s#??xt 4t;?r$c$\\RR4#)u]Thread-local activity callback; capture it before handing work to another thread. Public accessor for callers outside this module that need to capture the calling thread's callback before handing work to another thread (the callback is thread-local, so a freshly spawned thread cannot read it back) — e.g. the manual cron-run heartbeat (#76502). rN)getattrrr)r$r"get_activity_callbackrs +Z >>r$c4V^8dQhR\R\RR/#)rstatelabelrN)dictrt)r!s"r"r#r#s& ^ ^ ^c ^d ^r$c H\P!4pW R,, VPRR48dR#W R&\4pV'd'V!V R\ W R,, 4 R24R#R# \ d\ PRR R 7R#i;i) zFire the activity callback at most once every ``state['interval']`` (default 10 s). *state* holds ``last_touch``/``start`` monotonic timestamps. Swallows all exceptions. last_touchinterval$@Nz (r^z s elapsed)z6activity callback failed during a long-running commandTr7)rPrQgetrr@r9r:r;)rrr>rs&& r"touch_activity_if_duers .. C <  599Z#>>,^ " $ %3s7^345Z@ A  ^ MX\ ]^s6A;;"B! B!c$V^8dQhR\/#rr)r!s"r"r#r#s   r$c\P!R4pV'd \V4M\4R, pVP RRR7V#)zHost-side root for all sandbox storage (Docker workspaces, plugin backends' host-side state). ``TERMINAL_SANDBOX_DIR`` overrides ``{HERMES_HOME}/sandboxes``.TERMINAL_SANDBOX_DIR sandboxesTparentsexist_ok)osgetenvrrmkdir)customps r"get_sandbox_dirrs=YY- .FV O$5 $CAGGD4G( Hr$c0V^8dQhR\R\/#rpathrrr)r!s"r"r#r#s2242D2r$c\P!VPRR74p\ T\ 4'dT#/# \\3d/u#i;i)z3Treat a missing or damaged snapshot store as empty.z utf-8-sig)encoding)jsonloads read_textOSError ValueErrorrWrrdatas& r"_load_json_storersTzz$..+.>?dD))41r1 Z  s&AAAc4V^8dQhR\R\RR/#)rrrrNr)r!s"r"r#r#s!,,4,t,,r$cZVPPRRR7\W^R7R#)zYWrite *data* as pretty-printed JSON to *path* atomically (readers never see a torn file).Tr)indentN)parentrrrs&&r"_save_json_storers#KKdT2d+r$cPV^8dQhR\R\\.R3,RR/#)rrupdateNr)rrr)r!s"r"r#r#s,))T)8TFDL+A)d)r$c ^RIHp^RIHpVP VP R24pV!4;_uu_4pVP V!V\RRV R244\V4p\V4pV!V4Wg8wd \W4R R R 4R # \\3d\PRTRR 7Ldi;i +'giR #;i) aRead-modify-write the JSON store at *path* under a cross-process lock. Concurrent sandbox cleanups (delegate children, gateway sessions, the idle reaper) each record a snapshot id; an unlocked load/mutate/save lets one cleanup drop the other's entry. An unusable lock (no flock on the filesystem, a wedged holder) degrades to an unlocked update: a sandbox lifecycle step (modal's restore fallback included) must not abort on it.) ExitStack) _file_lockz.lockrz/Timed out waiting for the snapshot store lock ()zUpdating %s without its lockTr7N) contextlibrhermes_cli.authr with_namename enter_context_JSON_STORE_LOCK_HOLDERr TimeoutErrorr:warningrrr)rrrr lock_pathstackrbefores&& r"_update_json_storers%*$))E23I  P    2D T (  & P NN94$N O P s.C"B/C)CCCC C ctV^8dQhR\R\\\\\3,R,/#)r host_pathrN)rttupler@)r!s"r"r#r#s-suS#sC-?'@4'Gr$cl\\V4P44# \dR#i;i)zReturn the ``file_signature`` change key, or ``None`` if unreadable. mtime + size alone miss a same-size credential refresh landing in the same mtime tick; inode and ctime catch the atomic replace / rewrite.N)rrstatr)rs&r"_file_mtime_keyrs1 d9o22455 s !$ 33c a]tRtRtoRtRtRt^tRtRt Rt V3RlRlt RHV3R lR llt R RR ^xR R/V3RlRllt ]R4tV3RlRltV3RlRltV3RlRltV3RlRltV3RlRltRtV3RlRlt]V3RlRl4tV3R lR!ltV3R"lR#lt]V3R$lR%l4tV3R&lR'lt]V3R(lR)l4tRIR*RR+RR,RR-R/V3R.lR/lllt]!]4tV3R0lR1lt V3R2lR3lt!V3R4lR5lt"V3R6lR7lt#V3R8lR9lt$V3R:lR;lt%RJR RR RRlllt&V3R?lR@lt'RAt(V3RBlRClt)^t*V3RDlRElt+V3RFlt,RGt-Vt.R#)Kr-zCommon interface and unified execution flow for all Hermes backends. Subclasses implement ``_run_bash()`` and ``cleanup()``; the base provides ``execute()`` with snapshot sourcing, CWD tracking, interrupt handling and timeout enforcement.pipeFTc <V^8dQhRS[/#rrs)r!rus"r"r#BaseEnvironment.__annotate__scr$c R#)zReturn the backend temp directory used for session artifacts. Most sandboxed backends use ``/tmp`` inside the target environment. LocalEnvironment overrides this on hosts where ``/tmp`` may be missing and ``TMPDIR`` is the portable writable location. z/tmpr)rzs&r" get_temp_dirBaseEnvironment.get_temp_dirsr$Nc@<V^8dQhRS[RS[RS[R,RS[/#)rcwdrCr,N persist_env)rtr@rr )r!rus"r"r#r(s.&&C&#&D4K&UY&r$cWnW nT;'g/VnW@n\P !4P R,VnVP4PR4;'gRpV RVP R2Vn V RVP R2Vn \VP4Vn RVn \4VnRVnR#)N N/z /hermes-snap-z.shz /hermes-cwd-z.txtFN)rrCr, _persist_envuuiduuid4hex _session_idrrstrip_snapshot_path _cwd_filer_snapshot_readyset_snapshot_passthrough_names_prefer_nonlogin)rzrrCr,rtemp_dirs&&&&& r"ryBaseEnvironment.__init__(s 99"(::<++C0$$&--c299c!) -8H8H7IM$:\$2B2B1C4H&t'7'78$58U(!&r$loginrC stdin_datac F<V^8dQhRS[RS[RS[RS[R,RS[/#)r cmd_stringrrCrNr)rtr r@r )r!rus"r"r#r<sBWWW)-W@CWWZ]aWaW Wr$c D\\V4P R24h)zGSpawn a bash process to run *cmd_string*; every backend overrides this.z must implement _run_bash())NotImplementedErrortyperg)rzrrrCrs&&$$$r" _run_bashBaseEnvironment._run_bash<s""T$Z%8%8$99T"UVVr$c R#)zYZ]Y^!_`fi i js:AFF0F++F0c4<V^8dQhRS[RS[R,/#)rrrNrs)r!rus"r"r#rfs#DD#D#*Dr$c 4VPR\P!V4 R2RR7p\VP R4;'g^4^8wdR#\ R\ VP R4;'gR P444R4#) zG``readlink -f`` inside the backend, or None when it cannot be resolved.z readlink -f z 2>/dev/nullF)rrNc3"TF;qP4PR4'gK)VP4xK= R#5i)rN)strip startswith).0lns& r" 1BaseEnvironment.fetch_realpath..ks1|*]Baiaiakavavwza{ZRXXZZ*]s &AArrp)rrrr@rnextreversed splitlines)rzrrs&& r"fetch_realpathBaseEnvironment.fetch_realpathfs U[[-E,FlSqvw vzz,',,1 - 2|(FJJx4H4N4NB3Z3Z3\*]|CD Dr$c0<V^8dQhRS[S[,/#r)rrt)r!rus"r"r#rnshsmr$c R#)zAReturn backend-specific names that must not persist in snapshots.r)r)rs&r",_additional_profile_scoped_passthrough_names.}s08l%*Tjs.CDHZHdHdeiHjDDUsAA Az4Could not refresh profile-scoped snapshot exclusionsTr7r)) _profile_scoped_passthroughagent.secret_scoper*tools.env_passthroughr+r&rrr9r:r;rsorted)rzr*r+namess& r"$_snapshot_excluded_passthrough_names4BaseEnvironment._snapshot_excluded_passthrough_namesrs///I ` >"$$Ef-/f$2c2c2ef00778l%*8llVD<<=>> ` LLOZ^L _ `sB AB "B.-B.c&<V^8dQhRS[RS[/#rrr)rtr)r!rus"r"r#rs))3)4)r$c \VPV4VPVP4VPVP\,4VP R7#)zQuoting inputs shared by the bootstrap and per-command wrapper scripts. ``_quote_cwd_for_cd`` / ``_quote_shell_path`` (not bare shlex.quote) let the Windows subclass rewrite ``C:\...`` to ``/c/...`` so ``cd`` resolves and MSYS doesn't choke.) quoted_cwd quoted_snapsnap_tmp_template cwd_marker)r_quote_cwd_for_cd_quote_shell_pathrrr)rzrs&&r"_snapshot_script_kwargs'BaseEnvironment._snapshot_script_kwargssV--c2..t/B/BC"44T5H5HK[5[\'' ) )r$c .\R RVP4/VPVP4BpVP VRVP R7pVP W P R7p\VPR4;'g^4^8wd\RVPR4 24hRVn VPV4\PRVPVP4R # \dpRTn TP!\#T44wTnpTP$'d(\P'R TPT4R p?R #\P'R TPT4R p?R #R p?ii;i) uSCapture the login shell environment into the snapshot file (once, after construction). On success ``_snapshot_ready`` is set so commands source the snapshot instead of running under ``bash -l``. On failure, fall back to ``bash -l`` per command — unless a non-login probe shows login bash itself is dead, in which case prefer ``bash -c``.excluded_namesTrrCrBrz)snapshot bootstrap failed with exit code z-Session snapshot created (session=%s, cwd=%s)Fu_init_session failed (session=%s): %s — login bash unusable; falling back to non-login bash -cuLinit_session failed (session=%s): %s — falling back to bash -l per commandNr))rr5r@rr_snapshot_timeout_wait_for_processr@r RuntimeErrorr _update_cwdr:inforr9_probe_nonlogin_fallbackrtrr)rz bootstrapr<rrdetails& r" init_sessionBaseEnvironment.init_sessionsg /rDDFrJNJfJfgkgogoJpr  .>>)4AWAW>XD++D:P:P+QF6::l+00q1Q6"%NvzzZfOgNh#ijj#'D   V $ KKGIYIY[_[c[c d .#(D ,0,I,I#c(,S )D !6$$$M$$c++ b$$f.. .sCC;; FAF(!FFc<<V^8dQhRS[RS[S[S[3,/#)rrLr)rtrr )r!rus"r"r#rs( D Ds DuT3Y7G Dr$c \^VP4pVPRRVR7pVPW2R7p\ VP R4;'g^4^8HpV'g4VP R4;'gTP 4;'gTpWQ3# \dpRT RT 23uRp?#Rp?ii;i) zHRun ``true`` under non-login bash; return ``(prefer_nonlogin, detail)``.trueFrDrBrstdoutz; non-login probe: N)minrErrFr@rrr9)rzrL probe_timeoutprobe probe_resultprefer_nonlogin probe_excs&& r"rJ(BaseEnvironment._probe_nonlogin_fallbacksB 6 67  DNN6 NNE11%1OL!,"2"2<"@"E"EAF!KO"&**84>>EEGQQ6"* * DVH$7 {CC C Ds0AB#-B#B#B## C.B<6C<Cc&<V^8dQhRS[RS[/#r8rs)r!rus"r"r#rs   s  s  r$c VR8XdV#VR8XdR#VPR4'd!R\P!VR,4 2#\P!V4#)zQuote a ``cd`` target while preserving ``~`` expansion (``~/...`` goes through ``$HOME`` so suffixes with spaces stay one word).~z~/z$HOMEz$HOME/:rNN)rrr)rs&r"r>!BaseEnvironment._quote_cwd_for_cdsS #:J $; >>$  EKKB012 2{{3r$c&<V^8dQhRS[RS[/#rrs)r!rus"r"r#rs!!c!c!r$c .\P!V4#)zQuote *path* for a bash script. LocalEnvironment overrides this to rewrite native/mixed Windows paths to ``/c/...``; remote backends are POSIX.rr)rzrs&&r"r?!BaseEnvironment._quote_shell_paths{{4  r$c,<V^8dQhRS[RS[RS[/#)rcommandrrrs)r!rus"r"r#rs"11S1s1s1r$c  \V3RVP4RVPRVP/VP V4B#)zJFull bash script: source snapshot, cd, run, re-dump env, emit CWD markers.passthrough_namessnapshot_readyr)rr5rrr@)rzrcrs&&&r" _wrap_commandBaseEnvironment._wrap_commandsX# 1"GGI1 //1)) 1 **3/ 1 1r$c,<V^8dQhRS[RS[RS[/#)rrcrrrs)r!rus"r"r#rs" . .c .s .s .r$c pR\P!4PR, 2pRV RV RV RV 2#)aRedirect stdin_data to the complete command with a shell heredoc (SDK backends). A heredoc body always ends in a newline stdin_data may lack, and write_file verifies a byte-exact hash, so a process substitution re-emits the body minus that last character. Redirections apply left to right, so the substitution inherits the heredoc as its stdin; the heredoc stays outside ``<( )`` because bash 3.2 mis-parses bodies inside it. ``|| :`` keeps an inherited ``set -e`` from killing the reader on read's EOF status. HERMES_STDIN_rz{ z } << 'z7' < <(IFS= read -r -d '' s || :; printf '%s' "${s%?}")  )rrr)rcr delimiters&& r"_embed_stdin_heredoc$BaseEnvironment._embed_stdin_heredocsG$DJJL$4$4S$9#:; wiy 3o,b - .r$c <V^8dQhRS[/#rrs)r!rus"r"r#rs>>C>r$c VP4PR4;'gRpV R\P!4P 2#)z:Unique sandbox path for staging a payload-mode stdin file.rz/.hermes-stdin-)rrrrr)rzrs& r"_staged_stdin_path"BaseEnvironment._staged_stdin_pathsA$$&--c299c?4::<+;+;*<==r$c,<V^8dQhRS[RS[RS[/#)rrcrrrs)r!rus"r"r#rs'WW3WcWcWr$c D\P!V4pRV RV RV 2#)zPrefix ``command`` so the shell reads stdin from the staged ``path`` and unlinks it before ``command`` runs (the shell then owns the payload).zexec 0< z || exit $? rm -f -- z || exit $? r`)rcrrs&& r"_redirect_stdin_from_file)BaseEnvironment._redirect_stdin_from_files,T"&!7x}WIVVr$bounded_capturewatch_interrupt_tidr yield_handlerc v<V^8dQhRS[RS[RS[RS[R,RS[S[S[.S[3,R,RS[/#)rr<rCrxryNrzr)r r@r rrtr)r!rus"r"r#rscff!f,/ff\@3d,T PC4T !4h \(dhi;ii;i \(dEL i;i)u3Poll-based wait with interrupt checking and stdout draining (shared, not overridden). ``yield_handler(proc, output_so_far)``: when the tool thread is asked to yield (``tools.interrupt.request_yield`` — a user message arrived mid-command), the drain thread is stopped, the still-running process is handed to the handler and its dict is returned as the result; the process is NOT killed. ``bounded_capture=True`` (foreground terminal-tool path only) retains at most ``tool_output.max_bytes`` in a head/tail window so a verbose subprocess cannot OOM the process; the default keeps full fidelity for internal consumers. Fires the activity callback every 10s so the gateway's inactivity timeout doesn't kill long commands. ``watch_interrupt_tid`` is the tool-worker thread that submitted this wait: ``execute()`` may move the wait onto a ``run_bounded_sync`` worker while ``/stop`` still interrupts the original tid, so both bits are honored. ``KeyboardInterrupt``/``SystemExit`` mid-poll kills the process first — the local backend spawns into its own process group, so an unkilled child would be orphaned. The default (False) preserves full-fidelity capture for internal consumers — file-operation ``cat`` reads feeding the patch engine, code-execution RPC reads, log reads — where truncation would corrupt data. See #64435. Nrr^)enabledr:cN<SPS4SP^R7R#)rrBN)rNr_) drain_threadr<rzsr"_kill_and_join9BaseEnvironment._wait_for_process.._kill_and_join s"   t $   a  (r$g{Gzt?z [Command interrupted]suffixhermes_interruptedTrBz6yield-to-background handoff failed; continuing to waitr7 [Command timed out after s]hermes_timed_outzterminal command runningg?g?_hermes_stdin_thread_hermes_stdin_errors stdin_errorz [stdin write failed: ]r)(rr\EventrrPrQr_DEBUG_INTERRUPTr:enterpoll iterationsr r interruptedr renderr rr_r9r close_spillclear timed_out total_charslstripr heartbeatsleeprSKeyboardInterrupt SystemExitexception_exitrRclose natural_exitrrrt)rzr<rCrxryrrz drain_stop_nowra_activity_statetracer _poll_sleephandedrendered stdin_threadr stdin_errorserrrsff&$$$$ @r"rF!BaseEnvironment._wait_for_processsz. >*4AF*7*CY__& *4D ~~>'w=42B6R  )+  K))+%  A% !##'<=P'Q'Q%%'"$8d88VoApruv80$88 ,?R1S1SNN$ %%a%0&!.tV]]_!E)**,% $$tV#PL>>#h.OO%"$%}}6QRYQZZ\4]}^H))Q.#+??#4jd883OjQceijj%o7QR! ;'$"%kC&7"=KA&V !$  KK    4??+ t%;TB  #   a  (==?++FdooN"4)?F F< F*-l1o*> >F= !C',CC5*JJF8  c%&'_jno!%&*":.   "           sB M07M0M+M0BM06M0M0N/$M-)M0,M--M00!N,NN, N(%N,'N((N,/ N>=N>c <V^8dQhRS[/#rr<r )r!rus"r"r#rTs-r$c bVP4R# \\\3dR#i;i)zDTerminate a process. Subclasses may override for process-group kill.N)r5ProcessLookupErrorPermissionErrorrrzr<s&&r"rNBaseEnvironment._kill_processTs)  IIK"OW=   s ..c <V^8dQhRS[/#rr)r!rus"r"r#r[s!! !r$c (VPV4R#)zVKill without waiting, for a host that hard-exits next. Subclasses kill the whole tree.N)rNrs&&r"rZ#BaseEnvironment._force_kill_process[s 4 r$c <V^8dQhRS[/#rrr)r!rus"r"r#r`s..$.r$c (VPV4R#)zDExtract CWD from command output. Override for local file-based read.N)_extract_cwd_from_output)rzrs&&r"rHBaseEnvironment._update_cwd`s %%f-r$c <V^8dQhRS[/#rr)r!rus"r"r#rds##t#r$c \VPRR4VP4pVfR#Vwr4V'dW0nRVR&W1R&WAR&R#)aParse the ``__HERMES_CWD_{session}__`` marker from ``result["output"]``, update ``self.cwd`` and strip the marker line. ``result["cwd_observed"]``/``["cwd"]`` are set only when THIS command emitted a marker: a killed/timed-out command emits none and ``self.cwd`` keeps the previous value. The environment is shared across sessions, so concurrent callers must read ``result["cwd"]`` rather than ``self.cwd``.rrpNT cwd_observedr)rrrr)rzrr cwd_pathcleaneds&& r"r(BaseEnvironment._extract_cwd_from_outputdsR "&**Xr":D "$5M"xr$c<V^8dQhRR/#rr))r!rus"r"r#rusTTTr$c R#)zHook before each command. Remote backends (SSH, Modal, Daytona) trigger their FileSyncManager here; bind-mount backends and Local don't.Nr)rs&r"_before_executeBaseEnvironment._before_executeusr$c<V^8dQhRR/#rr))r!rus"r"r#rys...r$c RVnR#)uFlag that the live container/sandbox was replaced while serving the current command. ``execute`` folds the flag into the result as ``environment_recreated`` so the tool layer can warn the model that background processes died and non-persisted files may be gone — without this the recovery is silent and the model keeps assuming the old workspace state (lobehub/lobehub#19329 class).TN)_recreated_notice_pendingrs&r"_mark_recreatedBaseEnvironment._mark_recreatedys *.&r$rc<V^8dQhRS[RS[RS[R,RS[R,RS[RS[RS[S[S[.S[3,R,R S[/#) rrcrrCNrrrxrzr)rtr@r rr r)r!rus"r"r#rsrrrr t r $J r&*rr  4d :;dBrOSrr$c  aaaaaaaaaaaSP4SPV4wrV'd^RIHp V !V4pT;'g SPoT;'g SP p V eY;'gR,MToS'd&SP R8XdSPVS4pRoSPW4oSP'*;'dSP'*o\P!4Po\4o.o.oRVVVVVVVVVVV3 Rllp RVV3Rllp ^R IHp\#S4pV\(, pV!WR \+S4P, 2V R 7pTP2'deR S R2pS'd=S^,pSP5TTP7TR7P9R4^|4pMRTP94R^|/pRTR&M TP:pSP=T4\?SRR4'd RSn RTR&T# \$\&3dR pLi;i \.\03d T !4hi;i)uExecute a command, return {"output": str, "returncode": int}. ``bounded_capture=True`` caps retention at ``tool_output.max_bytes`` WHILE draining; only the foreground terminal tool may set it — internal full-fidelity consumers (file-op ``cat`` reads feeding the patch engine, RPC reads, log reads) MUST leave it False or data is corrupted. The wait is bounded by ``agent.deadline.run_bounded_sync`` so a wedged poll loop cannot hang past ``timeout`` and silently disable every asyncio timer in the process. ``bounded_capture=True`` caps stdout/stderr retention at ``tool_output.max_bytes`` WHILE the stream is drained (head/tail window) instead of holding the full output in memory (#64435). See #94285. )_rewrite_compound_backgroundNrpheredocc$V^8dQhR\/#rr)r!s"r"r#-BaseEnvironment.execute..__annotate__s < < ._spawn_and_waitsN!-%&89*,, "JLZ]^^G @..GXet.u0w?   w '((1*7ODF   ( <--_%6_HW_(2_;A_._on_timeouts'' A7r$)run_bounded_syncg^@zterminal.wait:)r on_timeoutrrrrlrrTrrFenvironment_recreated)!r_prepare_commandtools.terminal_tool_sudorrCr _stdin_modernrgrrr\current_threadidentragent.deadlinerfloat TypeErrorr_EXECUTE_WAIT_BOUND_GRACE_Srrgrrrr rrvaluerHrr)rzrcrrCrrrxrz exec_command sudo_stdinr effective_cwdrrrbound_sboundedr collectorrrrrrrrrrsf&&$$$dd @@@@@@@@r"rBaseEnvironment.executesJ* #'#8#8#A  ' M7 EL#33t||txx >H=S*(8(8b9Yc t//9<44\?SL"O$$\A(((FF1F1F-F--/55 34   < < <0 8 8 4 -.G .. &.dATAT@U0VcnpG    23D2ERHF)!, 33Iy?O?OW]?O?^?e?efj?kmpq"FMMO\3G)-F% &]]F  44e < <-2D *.2F* + 3:& G ":.  M  s H0!I 0II I#c<V^8dQhRR/#rr))r!rus"r"r#rs X XT Xr$c *VPV4\ VRR4pV'gR#^RIHpV!\V44R# \d\PRRR7LUi;i \d\PRRR7R#i;i)zJBest-effort kill of a wedged spawned process and its tree (backstop path).z'terminal wait-bound kill_process failedTr7pidN)kill_process_treez,terminal wait-bound kill_process_tree failed)rNr9r:r;rrrr@)rzr2rrs&& r"r"BaseEnvironment._kill_spawned_trees S   w 'gud+  X 8 c#h ' S LLBTL R S X LLGRVL W Xs"AA,"A)(A),"BBcLVP4R# \dR#i;ir-)rr9rs&r"__del__BaseEnvironment.__del__s"  LLN   s  ##cJ<V^8dQhRS[RS[S[S[R,3,/#)rrcrN)rtr)r!rus"r"r#r s(     c3:o0F  r$c N^RIHp^RIHpV!V!V4VPR7#)aRewrite sudo for a piped password, or leave it alone when this backend has NOPASSWD. Also applies the macOS ``open`` frontmost raise-ladder (a pure string rewrite, no-op on non-Darwin) so files opened via tool calls are brought to the front instead of landing behind the Hermes window. )_transform_macos_open_command)_transform_sudo_command)sudo_nopasswd_check)tools.terminal_tool_macos_openrrr_sudo_nopasswd_works)rzrcrrs&& r"r BaseEnvironment._prepare_command s) QD& )' 2 $ 9 9  r$c <V^8dQhRS[/#rr)r!rus"r"r#rs  d r$c VP'gR#VPRVPR7pVPWPR7P R4^8H# \ dR#i;i)z``sudo -n true`` inside THIS backend (host sudo state must not leak into a sandbox). Fails closed: any error or a timed-out probe means "assume a password is needed".Fz sudo -n truerBr)"_passwordless_sudo_probe_supportedr_SUDO_PROBE_TIMEOUT_SrFrr9rs& r"r$BaseEnvironment._sudo_nopasswd_workssn666 >>.$:T:T>UD))$8R8R)SWWXdeijj j  sA A!! A0/A0cb<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&#)rris_localrErrr0)rtr r@)r!rus"r"r#rsS !&'2)-43:"&-;r$) rrrrrrrrrrr,rC)NT)x)rp)/rgrhrirjrkrr rErrr0rryrrrrr"r&r5r@rMrJ staticmethodr>r?rgrnrrrvrFr rNrZrHrrrrrrrrr__annotate_func__rlr})rus@r"r-r-s&TKH L 05&).&&(W05WFIWdhWW   ++<DD??")).8 D D    !! 11 . .>> WWf %fIMffSWffP))>?!! ..##"TT..r # r "& r-1r!&rFJrrh X X      {r$r-c8V^8dQh/^\9dR;R&#)rz0dict[int, tuple[BaseEnvironment, ProcessHandle]]r/__conditional_annotations__)r!s"r"r#r#s"tJIDIur$)MrrkrloggingrrrXr\rPrabcrrpathlibrtypingrrhermes_constantsrtools.interruptr r r tools.environments.base_outputr r rr#tools.environments.base_session_envrrrrrrtools.environments.base_waitrutilsrrr getLoggerrgr:rrsetLevelINFOlocalrr/ ConditionRLockr&r'r(rRr*r3r=rdrGrfrrnrrrrrrrrrr-r#rs@r"r"s]   #%,PP4DD   8 $##;<" OOGLL!%??, HJI"++IOO,=> U"%"JE\E 33"+ ? ^ 2, $//+)4 fcfr$