+ lHj+Rt^RIt^RIt^RIHtRt]P !R4tRtRt RRlt R R lt RR R llt R Rlt RRltRR/RRlltRRltR#)a"Bash session-snapshot scripting for ``tools.environments.base``. Pure string builders: the CWD marker, the ``export -p`` dump that strips per-session vars, the ``init_session`` bootstrap, and the per-command wrapper. No module state lives here; ``BaseEnvironment`` supplies quoting hooks. N)Iterablez^declare -x (HERMES_SESSION_|HERMES_UI_SESSION_ID|HERMES_CRON_AUTO_DELIVER_|HERMES_CRON_SESSION|HERMES_BROWSER_CONTROL_|HERMES_DELEGATED_CHILD_CONTEXT|HERMES_RPC_|HERMES_KERNEL_DIR)z^[A-Za-z_][A-Za-z0-9_]*$z.tmp.XXXXXXXXXXz"$__hermes_snap_tmp"c0V^8dQhR\R\/#) session_idreturnstr)formats"H/home/ubuntu/.hermes/hermes-agent/tools/environments/base_session_env.py __annotate__r (s**C*C*cRV R2#) __HERMES_CWD___)rs&r _cwd_markerr(s :,b ))r c0V^8dQhR\R\/#)rmarkerrr)r s"r r r ,s>>s>s>r cRV RV R2#)zEmit the CWD marker on its own line (leading ``\n`` guards against a command whose output lacks a trailing newline; ``_split_cwd_marker`` strips it).z printf '\nz%sz\n' "$(pwd -P)"r)rs&r _cwd_marker_printfr,s6(*< ==r cRV^8dQhR\R\\,R\/#)rtmp_pathexcluded_namesrrr)r s"r r r 2s'$$#$xPS}$^a$r cVUu0uF'p\V\4'gKV'gK%VkK) ppRPR\V444pRV RV 2#uupi)uShell snippet dumping ``export -p`` to *tmp_path* minus the per-session bridged vars (see ``_SNAPSHOT_EXCLUDED_ENV_REGEX``) and *excluded_names*. The vars are ``unset`` in a subshell BEFORE ``export -p``: a line-based ``grep -vE`` is unsafe because bash 3.2 prints a value containing a newline as a multi-line ``declare -x`` block, so smuggled continuation lines would survive into the snapshot and execute on the next ``source``. ``|| true`` keeps the success contract. The dump is a brace group with the redirection on the group: *tmp_path* is usually a shell-variable expansion, and a redirect on a pipeline segment would expand it inside that segment's subshell, inconsistently with the parent that expands the follow-up ``mv``. ``curl … | bash #`` smuggled into a Matrix room/display name via ``HERMES_SESSION_CHAT_NAME``) land in the snapshot and execute on the next ``source`` (issue #71296). Unsetting first means ``export -p`` never emits those vars — including any continuation lines. c3T"TFpR\P!V4 2xK R#5i) N)shlexquote).0names& r 6_export_dump_excluding_session_vars..Ds#Q>PdAekk$/01>Ps&(z{ ( unset ${!HERMES_SESSION_*} ${!HERMES_CRON_AUTO_DELIVER_*} ${!HERMES_BROWSER_CONTROL_*} AI_AGENT HERMES_AGENT HERMES_DELEGATED_CHILD_CONTEXT HERMES_CRON_SESSION ${!HERMES_RPC_*} HERMES_KERNEL_DIR HERMES_UI_SESSION_IDz( 2>/dev/null; export -p; ) || true; } > ) isinstancerjoinsorted)rrr! safe_names extra_unsets&& r #_export_dump_excluding_session_varsr)2sf"$2T>4Zc5J$t$$>JT''QfZ>PQQK  +m, J! UsAAAc vV^8dQhR\R\R\R\\,R\R\/#)r quoted_cwd quoted_snapsnap_tmp_templater cwd_markerrr)r s"r r r YsB///%(/=@/RZ[^R_/mp//r cRV R\\V4 R\ R\ R\ R\ R\ R\ R V R \ R V R \V4 R 2#)aLogin-shell bootstrap that captures env/functions/aliases into the snapshot. Atomic publish: assemble in a ``mktemp`` file, then ``mv`` over the final path so a concurrent ``source`` never reads a half-written snapshot (``$$`` is the parent PID in ``&``-launched subshells and macOS bash 3.2 lacks ``$BASHPID``, so only ``mktemp`` is portable). Functions are filtered by NAME via ``declare -F`` (a line-based ``declare -f | grep -v`` strips the header and leaves an orphaned body that breaks every sourced command); the non-empty guard matters because bare ``declare -f`` dumps ALL functions. The trailing ``cd`` restores the configured cwd after profile scripts (e.g. ``cd ~``) so ``pwd -P`` reports terminal.cwd, not the profile's directory.z%umask 077 __hermes_snap_tmp=$(mktemp z ) || exit 1 z __hermes_fns=$(declare -F | awk '{print $3}' | grep -vE '^_[^_]') || true [ -n "$__hermes_fns" ] && declare -f $__hermes_fns >> z! 2>/dev/null || true alias -p >> z# echo 'shopt -s expand_aliases' >> z echo 'set +e' >> z echo 'set +u' >> z mv -f rz || rm -f z builtin cd -- z 2>/dev/null || true  )r) _SNAP_TMPr)r+r,r-rr.s$$$$$r _snapshot_bootstrap_scriptr2Ys &&7%8 .y. I JKCCL+N k"--6K8%;'%;' 1[MI;?# $: j ) *" . /r cV^8dQhR\\,R\\\,\\,3,/#)rnamesr)rrtuplelist)r s"r r r ts0  Xc] uT#YS =Q7R r c .p.pVFEpRV 2pV R2V R2reW RV R2V RV R2., pVRV RV R V R V R 2 R V R V 2., pKG W3#)uShell lines that save profile-scoped passthrough vars before the snapshot is sourced and restore (or unset) them afterwards — a shared snapshot may hold the previous profile's value. Values stay in environment memory and never enter the command string._HERMES_RUNTIME_PASSTHROUGH__PRESENT_VALUEz=${z+x}z-}zif [ "$z" = x ]; then export z="$z"; else unset z; fizunset rr)r4saverestorer!rpresentvalues& r _passthrough_save_restorer?tsDG/v6"88,.? 9Dd+wd4&-DEEgY3D6UG>RVQWW[ \WIQug &( (  =r persist_envTcV^8dQhR\R\R\R\R\\,R\R\R\R \/ #) rcommandr+r,r-passthrough_namessnapshot_readyr.r@r)rrbool)r s"r r r s\%% %!$%36%KN%}%6:%HK%%"%%r c VPRR4p\V4wr\V 4p V'dV PRV R24W, p V RRRV R2R V R2R R ., p V'd@V'd8V PR V R \ \ V4 R\ RV R\ R2 4V \ V4R., p RPV 4#)aPer-command bash script: source snapshot, cd, run, re-dump env, emit CWD marker. ``persist_env=False`` skips the re-dump, so every command starts from the login-time snapshot and exports from one command never reach the next (the CWD marker still runs). ``source`` stdout goes to /dev/null because macOS bash 3.2 / some Homebrew builds echo ``declare -x`` lines when sourcing. AI_AGENT/HERMES_AGENT advertise the harness to remote backends (whose env is not inherited); ``${VAR:-default}`` never clobbers an outer harness. GIT_PAGER/PAGER=cat stop pager-happy tools hanging a PTY-backed command. The env re-dump uses the same mktemp+mv atomic publish as the bootstrap and chains ``mv`` on the dump succeeding so a failed dump never replaces a good snapshot. ``umask 077`` is applied after the user's command so snapshot files (which may carry secrets) are private without changing the command's umask. 'z'\''zsource z >/dev/null 2>&1 || truezPexport AI_AGENT="${AI_AGENT:-hermes-agent}" HERMES_AGENT="${HERMES_AGENT:-true}"z:export GIT_PAGER="${GIT_PAGER:-cat}" PAGER="${PAGER:-cat}"zbuiltin cd -- z || exit 126zeval 'z__hermes_ec=$?z umask 077z__hermes_snap_tmp=$(mktemp z) && { z && mv -f rz; } 2>/dev/null || rm -f z 2>/dev/null || truezexit $__hermes_ecr0)replacer?r6appendr)r1rr%) rBr+r,r-rCrDr.r@escapedr;r<partss &$$$$$$$ r _wrap_command_scriptrLs ooc7+G-.?@MD JE w{m+CDE E ZD  L1  E+ )*;)<=5iARSTU!{!K=1$$-;.B D E   ,.A BBE 99U r czV^8dQhR\R\R\\R,\3,R,/#)routputrrN)rr5)r s"r r r s3==c=3=5tS3ID3P=r cVPV4pVR8XdR#\^VR, 4pVPWV4pVR8XgWB8XdR#W\V4,VP4;'gRpVPR^V4pVR8XdTpVP RV\V4,4pVR8wd V^,M \V4pWPRVWR,3#)aLocate the last ``markermarker`` pair in *output*. Returns ``(cwd_path_or_None, output_without_marker_line)``, or ``None`` when no complete pair exists. The stripped span runs from the ``\n`` the wrapper injected before the marker through the end of the marker line.Nir0)rfindmaxlenstripfind)rNrlast search_startfirstcwd_path line_startline_ends&& r _split_cwd_markerr\s << D rzq$+&L LLt 4E {emc&k)D1779AATHdAu-JR {{4F !34H'2~x!|3v;H KZ(6)+<< <rdsm (%ZZ ;<% " *> $N/6  %%P=r