+ lHj aR{t{0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIHt^RIHt^RIHt^RIHt^RIHt^RIHt^RIHtHtHtHtH t H!t!H"t"H#t#H$t$H%t%H&t&H't'H(t(^R I)H*t*H+t+]PX!4R 8Ht-]P\!]/4t0^t1] Pd!4t3R s4]Pj!R 4t6R Rlt7]13RRllt8RRlt9RRlt:RRlt;RRltRRlt?RR lt@R!R"ltAR#R$ltBR%]C!4/R&R'lltDR(R)ltER*R+ltFR|R,R-lltGR.R/ltHR0R R1R/R2R3lltIR4R5ltJR|R6R7R8R7R9RR:R /R;R<llltKR|R=RR0R /R>R?llltLR|R@RAlltMRBRCltNR|RDRElltORFRGltPRHRIltQRsR]^kRJRKltSRLRMltTRNROltURPRQltV]C!0R}m4tWRRRSltXRTtY]Z!4t[][s\]^kR s]RURVlt^RWRXlt_RYRZlt`R[R\ltaR]R^ltbR_R`ltcRaRbltdRcRdlte]!]f4P4P^,ti]^k]*!]i]!]f4P4P^,]!44tk]^k]l!] Re] P4] P8g;'g ]n!] Rf4to]^kRtp]^kRgRhltqRiRjltrRkRlltsRmRnlttRoRpltuRqRrltvRsRtltwRuRvltxRwRxlty!RyRz]4tzR#)~uELocal execution environment — spawn-per-call with session snapshot.N)MappingPath)get_process_hermes_home)BaseEnvironment) _pipe_stdin)windows_hide_flags) _ALWAYS_STRIP_FOLDED_ALWAYS_STRIP_KEYS_HERMES_PROVIDER_ENV_BLOCKLIST!_HERMES_PROVIDER_ENV_FORCE_PREFIX_is_hermes_internal_secret_is_provider_env_blocklisted_is_terminal_first_party_env_home_adapter_secret_env$_matches_terminal_first_party_prefix_plugin_terminal_env_strip_keys_registered_adapter_secret_env_registry_adapter_secret_envstrip_profile_gate_env)_build_hermes_repo_root_aliases2_strip_hermes_owned_pythonpath_and_runtime_markersWindowsFz,^(hermes_bg_[A-Za-z0-9_-]+)\.(log|pid|exit)$c2V^8dQhR\R,/#returnNr)formats"=/home/ubuntu/.hermes/hermes-agent/tools/environments/local.py __annotate__r3sD4Kc^^RIHpV!4R, R, # \dR#i;i)z;Return HERMES_HOME/cache/terminal, or None if unresolvable.get_hermes_homecacheterminalN)hermes_constantsr# Exceptionr"s r_default_terminal_temp_dirr(3s/4 7*Z77 s  ,,c0V^8dQhR\R\/#)r max_age_hoursr)floatint)rs"rrr<s;;u;X[;r cVa a ^RIHp\4o S f^#\P!4VR,, o \ S P 44p/p/pTFpTP4P;Y5&p\PTP4;p'gKK\TPTP^4R4T4YGP^4&K RT T 3Rllp^p TFp\PTP4pT'd=YGP^4,S 8gT!TP^44'dKeMT!TS 4'dKwTP4'd\ P"!TRR7MTP%4\&P(!T4K T # \ d^#i;i \ dEKi;i \ dEKi;i \*dT ^, p EK$\ dEK2i;i)u3Delete session temp artifacts idle for *max_age_hours* (no write anywhere in a directory's subtree; the kwarg name is the ``cleanup_*_cache`` signature the gateway housekeeping loop calls every entry with); return count. Only the managed default dir is pruned — never a user-pointed ``terminal.temp_dir``.)subtree_touched_sinceigc0V^8dQhR\R\/#)rstemrstrbool)rs"rr1cleanup_terminal_temp_cache..__annotate__Vs  C D r c<RF2pSV RV 2, P4PS8dR#K4 R# \dKF\dR#i;i)log.TF)r6pidexit)statst_mtimeFileNotFoundErrorOSError)r0sfxcutoffroots& r group_touched2cleanup_terminal_temp_cache..group_touchedVsg*C dV1SE?*002;;vEF* %   s+< A AAAT) ignore_errors)hermes_constants_scratchr.r(timelistiterdirr=r:r; _BG_GROUP_REmatchnamemaxgetgroupis_dirshutilrmtreeunlinkoslstatr<) r*r.entriesmtimes group_newestfmtmrAremovedr?r@s & @@rcleanup_terminal_temp_cacher[<s ? % 'D | YY[MD0 1Ft||~&!#F%'L  VVX.. .FI""166* *1 * *'*<+;+;AGGAJ+Lb'QL $   G    qvv & GGAJ'61]1771:5N5N6O "1f - -  45HHJJFMM!4 0AHHJ   HHQK& N]    8    !  qLG   s_G G-G.G.G.-H GG G+*G+. G>=G>H(H("H('H(cV^8dQhRR/#r)rs"rrrzs < <4 > A A  A=A88A=c0V^8dQhR\R\/#rcwdrr2)rs"rrrs55s5s5r c8\;'d"T;'d\P!RV4pV'gV#VP^4;'gRP RR4pVP^4P 4 RT;'g \ ^\4 2#)z``/c/Users/x`` / ``/cygdrive/c/..`` / ``/mnt/c/..`` -> native ``C:\Users\x`` so ``isdir``/``Popen(cwd=)`` find it. No-op off Windows, for empty input and for multi-segment POSIX paths like ``/home/x``; idempotent on native paths.z)^/(?:(?:cygdrive|mnt)/)?([a-zA-Z])(/.*)?$/\:) _IS_WINDOWSrerIrMreplaceupperchrrgrYtails& r_msys_to_windows_pathrus~ [[[[)UWZ [A  GGAJ  " % %c4 0Dggaj !4??3r7"3 44r c0V^8dQhR\R\/#rfrh)rs"rrrsCCr cV'd \PPV4M\P!4p\'d*\ V4p\ P!V4'dV#\PPV4'dV#\PPV4p\P!4p\PPV4'ga\V4P\V4PrTV'd0\V4\V48:dV\V4)RV8XdV#V#)zResolve the initial cwd to an absolute host path. A relative ``TERMINAL_CWD`` naming the launch directory would otherwise make the wrapper ``cd`` *inside* the project; anchor it once so ``Popen(cwd=)`` and the in-shell ``cd`` agree.N) rRpath expandusergetcwdrnruntpathisabsabspathisdirrpartslen)rgexpanded candidatecurrentwantedhaves& r_resolve_local_initial_cwdrs+.rww!!#&299;H{(2 << ! !O ww}}X)IiikG 77== # #H~++T']-@-@ c&kSY.4V 3F&3PN r c0V^8dQhR\R\/#rfrh)rs"rrrs++s+s+r c2\;'d"T;'d\P!RV4pV'gV#VP^4;'gRP RR4P R4pRVP^4P 4 RV 2#)zxNative ``C:\Users\x`` -> Git Bash ``/c/Users/x`` so ``builtin cd`` resolves it. No-op off Windows / for non-drive paths.z^([a-zA-Z]):[\\/]*(.*)$rjrlrk)rnrorIrMrplstriplowerrss& r_windows_to_msys_pathrs IIII)CS IA  GGAJ  " % %dC 0 7 7 I[T  & . .tS 9[W[[r c0V^8dQhR\R\/#rrh)rs"rrrs..3.3.r c>^RIpVP\V44#)zFQuote *path* for safe interpolation into a Git Bash script on Windows.N)shlexquoter)rxrs& r_quote_bash_pathrs ;;t, --r c0V^8dQhR\R\/#rr1)rs"rrrs<\V4pV'd\V4'dV#V'dR\PP V4'd-\ P RV\\RR4!44V'd \PPV4MRpV'dP\V4'g?\PPV4pW!8Xd\P!4#TpKWT;'g\P!4#)u``cwd`` if enterable, else the nearest usable ancestor, else ``tempfile.gettempdir()``. MSYS paths are normalized first on Windows so a valid ``pwd -P`` result is not rejected. Lets ``_run_bash`` recover from a deleted or inaccessible cwd instead of ``Popen`` raising and wedging every later call. Used by ``_run_bash`` to recover when the configured cwd is gone — most commonly because a previous tool call deleted its own working directory (issue #17558) — or inaccessible to this user, e.g. ``/root`` leaking from a root-launched CLI session into a non-root gateway's cron jobs (issue #65583). Without this guard, ``subprocess.Popen(..., cwd=...)`` raises ``FileNotFoundError``/``PermissionError`` before bash starts, wedging every subsequent terminal call until the gateway restarts. uConfigured terminal cwd %r exists but is not accessible to this user (uid=%s) — falling back to the nearest usable directory. If this is a gateway/cron process, check for root-owned paths leaking into terminal.cwd / TERMINAL_CWD (#65583).getuidcR#)?r]r]r r#_resolve_safe_cwd..ssr rj) rurrRrxr~rawarninggetattrdirnametempfile gettempdir)rgparent next_parents& r_resolve_safe_cwdrs  $C {3  rww}}S!!  X{35  7&)RWW__S !bF V,,ggoof-  &&( (  * *X((**r c(V^8dQhR\RR/#renvrNdict)rs"rrrs##T#d#r cp^RIHpHpV!4;p'dW0R&T!T4R# \dLi;i)zQBridge the context-local HERMES_HOME override, then the subprocess HOME contract.)apply_subprocess_home_envget_hermes_home_override HERMES_HOMEN)r&rrr')rrrvalues& r_apply_profile_homers>T ,. .5 .!& c"    s'' 55c(V^8dQhR\RR/#rr)rs"rrrs$$T$d$r c ^RIHpHpHpT!4pTP 4FKwrVTP 4pYqJdTfRM \T4Y&K/T'gK9TPTR4KM R# \dR#i;i)uBridge gateway session ContextVars (HERMES_SESSION_*) into a child env. Cross-session leak guard: the vars' last-writer-wins ``os.environ`` mirror may belong to another turn on a concurrent multi-session host, so once the session context is engaged ContextVars are authoritative — a bound value (incl. "") wins and an _UNSET var is STRIPPED, not inherited. An unengaged CLI keeps the mirror.)_UNSET_VAR_MAPsession_context_engagedNrj) gateway.session_contextrrrr'itemsrLr2pop)rrrr_engagedvar_namevarrs& r_inject_session_context_envrss UU'(H!)    "'-BSZCM X GGHd # * s A44 BB plugin_stripc nV^8dQhR\\\3,R\R\R\RR/#)rrout unwrap_forcerrN)rr2rr3 frozenset)rs"rrrs= 38 #':>.2r cL^RIHpHp\ RV44p\ 4pVP 4FwrVP\4'd4V'gK*V\\4Rp\V4'gWV&KS\V4'gVP4V9dK{\V4p V!V4p \W4'dV 'g V 'gKV 'dV 'g V!W4p V fKWV&K R# \d RRrTELi;i)a{Copy *items* into *out*, dropping Hermes-managed secrets. ``_HERMES_FORCE_`` unwraps to ``NAME`` when ``unwrap_force`` (caller extras / terminal env), else is dropped. Blocklisted names survive only via env_passthrough registration or as context-entitled first-party ``BUZZ_*`` vars; the latter are used directly, never scope-resolved (UnscopedSecretError under multiplex).)is_env_passthroughresolve_passthrough_valuecR#)Fr])_s&rr$_filter_secret_env..s5r cV#Nr])_nfbs&&rrrs[]r c3@"TFqP4xK R#5irrq.0ks& r %_filter_secret_env..s#D|!GGII|sN)tools.env_passthroughrrr'rrr startswithr rr rqrr) rrrrrrplugin_strip_folded registeredkeyr first_party passthroughs &&$$ r_filter_secret_envrs_W$#D|#DD/1Jkkm  >>; < <c;<=>C-c22 C  %c * *ciik=P.P 237 (- ' 8 8+Q\  {-c9E  H#$ _9HL]5_sDD#"D#c0V^8dQhR\R\/#rrrr)rs"rrr(s / /T /d /r cv\V4\V4\V4\V4^RIHpV!V4#)zGuards shared by every spawn surface: profile-home propagation, session-context bridging, Hermes-owned PYTHONPATH + venv-marker strip, MSYS defaults, delegate_task Kanban scrub. Returns the (possibly new) dict.delegated_child_subprocess_env)rrr%_apply_windows_msys_bash_env_defaultsagent.delegation_contextr)rrs& r_finalize_child_envr(s2$6s;)#.G )# ..r c0V^8dQhR\R\/#)rrr)rr)rs"rrr4s$$y$t$r ca/pVFwrE\WCVSR7K ^RIHpVPV3RlV!V4P 444\ V4pVe$\ V!VPVR444W7&\V4#)zFilter each ``(items, unwrap_force)`` in *parts* into one env, rewrite PATH via *fix_path* (always prepending the hermes install dir so bare ``hermes`` resolves for children of a systemd/cron-launched gateway), then apply the shared guards.)rr)scoped_passthrough_additionsc3@<"TFwrVS9gKW3xK R#5irr])rrvrs& rr _scrubbed_env..@s!e"K$!qXdOdvv"Ks  rj) rrrupdater _path_env_key_prepend_hermes_bin_dirrLr)rrfix_pathrrrrpath_keys&f& r _scrubbed_envr4sC$5L|\ % CJJe">s"C"I"I"KeeS!H/29N0OP s ##r cXV^8dQhR\R,R\R,R\/#)rbase_envN extra_envrr)rs"rrrJs/IItd{Itd{IVZIr cb\T;'g/R3T;'g/R3.\4R4#)zFilter Hermes-managed secrets from a subprocess environment (background/PTY spawn path, search workers, computer-use driver, user-script runners).FTcV#rr]ps&rr*_sanitize_subprocess_env..Nsar )rr)rrs&&r_sanitize_subprocess_envrJs8 8>>r51IOOT3JK8:K IIr c0V^8dQhR\R\/#rr)rs"rrrQstr cJ\V4pVe\W,4W&V#)z[*env* with the user's tools first on PATH (``_user_tools_first``), for background commands.)r_user_tools_first)rrs& r _terminal_envrQs%S!H)#-8 Jr inherit_credentialsrcV^8dQhR\R\\\3,R,R\\\3,/#)rrrNr)r3rr2)rs"rrrYs9$$ $48cNT4I$ #s(^$r cVe \V4M\PP4p\ W R7pVP RR4\ V4#)aSanitize a non-terminal child's environment (no skill passthrough). Bot, GitHub and remote-compute secrets never pass through; provider/tool credentials pass only with ``inherit_credentials=True`` for children that need them. Callers needing one other secret should add only that key back. ``base_env`` lets an already curated environment use the same policy. Terminal and execute_code spawns use the skill-aware sanitizer instead. r PYTHONUTF81)rrRenvironcopy_scrub_credentials setdefaultr)rrrs$$ rhermes_subprocess_envr YsB%0$x.bjjoo6GC S JCNN<% s ##r c<V^8dQhR\R\R\/#)rrrr)rr3)rs"rrrjs!  D $ 4 r c\4p\\4Uu0uFq3P4kK up,V,p\ 4p\ V4FapVP4V9gHV'g\ We4'g/VP\4'g\V4'gK_WKc V#uupi)z`Tier 1 (always) and, unless ``inherit_credentials``, Tier 2 provider/tool credentials, in place.) rr rrqrrFrrr r )rr home_secretsr strip_foldedrrs&$ rrrjs,-L'>]>_*`>_779>_*``cooL-/JCy IIK< '+0LS0]0]>>"CDD-c22  J+asCinherit_profile_homeT scrub_secretsextrastrip_launch_profilecV^8dQhR\\\3,R,R\R\R\\\3,R,R\R\\\3,/#)rbaseNrrrrr)rr2r3r)rs"rrrzsd!/!/ #s( d "!/DH!/!/'.sCx'84'?!/!/,0S>!/r cVe \V4M\PP4pV'dL\ V4^RIHpHpV!4'd,TPV!4;'g/4\V4V'd#\YS'd\V44#R4#V'd \V4V'dVPV4^RI H pV!V4#)aSingle factory for child-process envs. ``base=None`` snapshots ``os.environ``. ``scrub_secrets=True`` -> :func:`_sanitize_subprocess_env` (profile home inherent, ``inherit_profile_home`` ignored). ``scrub_secrets=False`` keeps the base byte-for-byte (git credential flows, ``bws``/``op``); ``inherit_profile_home`` bridges HERMES_HOME + HOME and ``extra`` is applied last so caller overrides win. ``strip_launch_profile`` drops the LAUNCH profile's ``.env`` residue from the base first (:func:`strip_launch_profile_env`; a no-op unless a routed home is active) so a child that acts for a routed profile sees only that profile's declared names, never the launch profile's. Under multiplex semantics it then overlays the bound secret scope (the routed profile's own ``.env`` + source values, which never enter ``os.environ``) and re-applies the managed keys, all BEFORE the scrub, so those values pass the same scrub / passthrough rules as any other.N)current_secret_scopeis_multiplex_activer)rrRrrstrip_launch_profile_envagent.secret_scoperrrrestore_managed_envrrrr) rrrrrrrrrs &$$$$ rbuild_subprocess_envrzs)-(8$t*bjjoo>OC %P   JJ+-33 4  $'ET%[LLtLLC   5G )# ..r target_homec V^8dQhR\\\3,R,R\\,R,R\R\\\3,/#)rrNrrr)rr2rr3r)rs"rrrsM)) #s( d ");>:;L)) #s(^)r c ^RIHpHpHpHp^RIHpHpVe \V4M \VR7p \T;'gV!4;'gR4p V 'd6WR&V!V 4\V 4'd\W4\V RR7V'dlV 'dV!\V 44p M!V!4p V fV!4'd V!RR4hT PRT ;'g/P!444V #) u{Child env for a process that acts FOR the active (possibly served) profile: ``hermes -p X`` workers, ``key_cmd`` helpers, browser drivers. The process env is the LAUNCH profile's. When the target is a ROUTED home (not the launch profile's — under multiplex or a Desktop/dashboard backend serving ``?profile=`` with the flag off) the launch ``.env`` residue and bridged ``TERMINAL_*`` are dropped (``strip_launch_profile_env``) AND every provider/tool credential is scrubbed from the base regardless of provenance: a key systemd / Compose / the shell injected into the launch process was never recorded in ``.env`` or a source snapshot, so a name-based strip cannot see it and the target overlay cannot remove it. ``inherit_credentials=True`` is for children that legitimately run with the profile's credentials (they run the agent or mint its token): the target profile's own secrets (its ``.env`` + hydrated sources, what a standalone ``hermes -p X`` loads itself) are overlaid — never a sibling profile's. Under multiplex with neither a target nor a bound scope the call raises (``get_secret``'s fail-closed contract): minting with the launch environ would sign in as the wrong profile. ``False`` keeps the provider scrub; the caller re-adds the few keys the child needs via ``get_secret``. ``target_home`` defaults to the active override; ``base`` replaces the ``hermes_subprocess_env`` snapshot.)UnscopedSecretErrorbuild_profile_secret_scoperr)apply_scratch_tmp_envrrrjrFaserved_profile_child_env(inherit_credentials=True) called with no target home and no profile secret scope bound while multiplexing is on; the child would inherit the launch profile's credentials. Bind the profile scope (or pass target_home) at the spawn site.c38"TFwrVfK W3xK R#5irr])rrrs& rr+served_profile_child_env..sO&=da6A6&=s )rrr rrr&r!rrr r2_is_routed_homerrrrr) rrrrr rrr!rrtargetsecretss &$$ rserved_profile_child_envr's&ddP($t*.CXk.lC @@ 8 :@@b AF #Mc" 6 " " $S 1 s > 0f>G*,G#6#8#8)tuu Ow}}"&;&;&=OO Jr cV^8dQhR\\\3,R,R\\\3,/#)rrNr)rr2r)rs"rrrs2   #s( d "  #s(^ r c2^RIHp\W!4RR7#)u&Child env for the host gateway: the default profile's secrets, never the launcher's. ``served_profile_child_env`` — not ``os.environ.copy()``. A profile-scoped parent (desktop, fleet restart, detached watcher) must not donate its dotenv to the multiplexer that owns the primary adapter map. )get_default_hermes_rootT)rrr)r&r*r')rr*s& rhost_gateway_child_envr+s9 # 68d r cFV^8dQhR\\,R\/#)rrr)r2rr3)rs"rrrs  t  r c^RIHp\V4P4V!4P48g# \dR#i;i)aGTrue when ``target_home`` is not the process's own (launch) home. Same launch-home identity as ``agent.secret_scope.serves_routed_profile()``: under a host that mirrors the served profile into ``HERMES_HOME``, the live env var names the served home and the launch residue would never be stripped from that profile's child env.)get_routing_process_hermes_homeT)r&r.rresolver=)rr.s& rr$r$sE AK ((*.M.O.W.W.YYY s.7 AAc`V^8dQhR\R\\,R,R\/#)rrrNr)rr2r)rs"rrrs+)')'$)'S4Z$5F)'RV)'r c^RIHpHp^RIHpHpT;'gV!4pV'd\ V4'gV#T!4p^RIHp^RI H p H p H p V !4U u0uFqP4kK p p \V!VR, 44\V !44,\VP44,\V !44,U u0uFVp V!V P44'd(V P4P!R4'gKFV P4kKX up V , pVUu.uFqP4V9gKVNK upFp W K \#V4#uup iuup iuupi)aDrop the LAUNCH profile's residue from a child env built for another served profile. ``os.environ`` holds the default profile's ``.env`` and its bridged ``TERMINAL_*`` settings; the secret scrub removes credentials but not settings (``HERMES_MODEL``, ``TERMINAL_ENV``, ``HERMES_LANGUAGE``...), so a standalone ``hermes -p X`` worker and a served one saw different envs. The child re-loads X's own ``.env`` and bridges X's config itself. ``target_home`` defaults to the active home override; no-op when there is no target or the target IS the launch profile. The authority test is "does this task serve a routed home", not "is the gateway-wide multiplex flag on": the Desktop/dashboard backend serves ``?profile=B`` by installing a HERMES_HOME override without that flag.)_is_global_env load_env_file)rr.)TERMINAL_CONFIG_ENV_MAP)launch_dotenv_keysmanaged_dotenv_keyssource_supplied_namesz.env TERMINAL_)rr2r3r&rr.r$hermes_cli.configr4hermes_cli.env_loaderr5r6r7rqsetvaluesrr)rrr2r3rr.r% launch_homer4r5r6r7r managed_names residue_namesrs&& rrrsUAZ  6 646F 00 13K9ed,?,AB,ASYY[,AMB M+. /037I7K3LL %,,. / 0256K6M2N OS Ociik**ciik.D.D[.Q   OSVc cM =3a'')}"<3= H> "# &&CS >s$E; F:"F!FFFc0V^8dQhR\R\/#rr)rs"rrrs  T d r c^RIHpV!4F3pV\P9gK\PV,W&K5 V#)uuRe-apply the administrator-managed ``.env`` values over *env* — call AFTER a routed profile's scope has been overlaid. ``_apply_managed_env`` gives those keys precedence over the user's own ``.env`` in the launch process; a routed child must see the same precedence, or the routed user's value for a managed key (``ORG_POLICY_FLAG=user-value``) silently wins over policy.)r6)r:r6rRr)rr6rs& rrrs6 :"$ "** zz#CH% Jr c$V^8dQhR\/#rrrh)rs"rrrs  C r ch^RIpVPP4pV'dV#\R4h)zResolve the shell Hermes runs commands with. Owned by pm (the store is the authority on bundled bash); this is a thin wrapper over pm.shell() for callers that need a bash binary.NzpNo shell found. Hermes needs bash (Git for Windows on Windows). Run `hermes pm install` or reinstall the bundle.)pm.shellshellbash RuntimeError)pmrGs r _find_bashrJs0 88==?D   ; r c:V^8dQhR\\,/#rCrFr2)rs"rrr1s$$DI$r cN\f\'d \4M.s\#)a(Git Bash's coreutils dirs in ``/etc/profile`` order (mingw first so coreutils beat System32 lookalikes); ``[]`` off Windows. A non-login ``bash -c`` (fallback when ``bash -l`` is broken) never sources ``/etc/profile``, so without these ``cat``/``mktemp``/``mv`` are missing and commands exit 127.)_git_bash_bin_dirs_cachern_compute_git_bash_bin_dirsr]r r_git_bash_bin_dirsrP1s!  'CN;#=#?TV ##r c:V^8dQhR\\,/#rCrL)rs"rrr<s D DDI Dr ca\4p\PP \PP T44p\PP T4P 4R8Xd \PP T4MToRpT3RlT4p\\PRT444# \d.u#i;i)usrc3<"TF6p\PP!S.VPR4O5!xK8 R#5i)rkN)rRrxjoinsplit)rsubr@s& rr-_compute_git_bash_bin_dirs..Ds. @4CBGGLL / # / /4s>Ac3t"TF.p\PPV4'gK*VxK0 R#5ir)rRrxr~)rds& rrrXEs!BAq1Aaas'8 8)z mingw64/binz mingw32/binz usr/local/binzusr/binbin) rJr'rRrxrbasenamerrFrfromkeys)rGrsubsdirsr@s @rrOrO<s|WW__RWW__T2 3F&(gg&6&6v&>&D&D&F%&O277??6 "U[D LD @4 @D  BBB CC  s C CCcRV^8dQhR\R\\,R\/#)r existing_pathr_rr2rF)rs"rrrHs*OOODIO#Or cVP\P4Uu.uFq"'gK VNK ppVUu.uF qDV9gK VNK ppV'd$\PP.VOVO4#T#uupiuupi)zPrepend *dirs* missing from *existing_path* (``os.pathsep``); an already-listed dir keeps its position; unchanged input when nothing is missing.)rVrRpathseprU)rar_erTrZmissings&& r_prepend_missing_path_entriesrgHsv(--bjj9?9QQqq9G?3$Q7"2qq$G34;2::??/W/w/ 0NN@3s A>A>B Bc0V^8dQhR\R\/#rrarrh)rs"rrrPs G GS GS Gr c^RIHpV!V4p\4pVUu0uF"p\PP V4kK$ ppVP \P4Uu.uF4qf'gK \PP V4V9gK2VNK6 ppV'd$\PP.VOVO4#T#uupiuupi)a&*existing_path* with the user's tools before Hermes's (``pm.user_facing``) and, on Windows, Git Bash's dirs first. They go first even when already listed: they are store dirs that now sit behind the user's entries, and a non-login ``bash -c`` needs its coreutils ahead of System32's lookalikes.)user_facing_path) pm.user_facingrkrPrRrxnormcaserVrdrU)rarkrx bash_dirsrZkeysrrests& rrrPs 0 M *D"$I)2 3ABGG  Q D 3zz"**- W-!Arww7G7G7JRV7VAA-D W3<2::??.Y.. /F$F 4 Ws(C( C6!CCc$V^8dQhR\/#rCrh)rs"rrres  S r c`\'dRM\PPR4pV'dq\PP V4'dL\P !V\P4'd!\V4P\9dV#\4#)u0User's login shell for background spawning: ``$SHELL`` on POSIX when it is an executable sh-family shell, else ``_find_bash``. macOS's system bash 3.2 under ``-l`` with stdin ``/dev/null`` sources ``~/.bash_profile``, which often ``exec /bin/zsh -l`` and drops ``-c`` — the command silently never runs.rjSHELL) rnrRrrLrxisfilerrrrJ_SPAWN_COMPATIBLE_SHELLSrJ) user_shells r _find_shellrwesg #{ w(?Jrww~~j11bii BGG6T6TZ %%)AA <r za/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binc2V^8dQhR\R,/#rrh)rs"rrrstr c\\Jd\#^RIHpV!\ \ 4P 4P^,4pVe+VP4'd\V4Russ \#\P!R4p\P'd\P^,MRp\P P#V4P%4p\P&'d.\P P)\P&4MRp\*'dRMRpV'd!\P P)V4pM\P P-V4'ddVR8XgVP/R4'dF\P P1V4'd!\P P)V4pMNV'dE\P P1\P P3WV44'dTMRpV'd(\P P5V4'dTMRsRs \#) aUDirectory holding the ``hermes`` console-script, or None (cached). A gateway launched by systemd/cron/a desktop launcher lacks the install dir on PATH and bare ``hermes`` exits 127. Order: a sealed payload's own launcher dir; ``which``; absolute ``sys.argv[0]`` naming a real hermes executable; ``sys.executable``'s dir if it holds the shim.)payload_command_dirNThermesrjz hermes.exezhermes.F)_HERMES_BIN_DIR _SENTINELpm.environmentsrzr__file__r/parentsrNr2_HERMES_BIN_DIR_IS_PAYLOADrOwhichsysargvrRrxr\r executablerrnr|rrtrUr~)rz payload_dirrargv0rexe_dirshimrs r_resolve_hermes_bin_dirrsi'3&d8n&<&<&>&F&Fq&IJK;#5#5#7#769+6F33 LL "E888CHHQKE 77  E " ( ( *D14bggoocnn-RG&;>"'',,w:U+V+VG\` #,y1I1IitO!& r c0V^8dQhR\R\/#rirh)rs"rrrsVV3V3Vr c>\4pV'dn\'dbVP\P4Uu.uFq"'gK W!8wgKVNK pp\PP V.VO4#\ Y'dV.4#.4#uupi)zPrepend the hermes install dir to ``existing_path`` if missing. A sealed payload's launcher dir moves to the front even when already listed: a login PATH can list another install's ``hermes`` ahead of it.)rrrVrRrdrUrg)rabin_direntryrps& rrrs&'G--#0#6#6rzz#Ba#B%ePUP`#Bazz/$/00 (W UURT UUbs BBBc:V^8dQhR\\,/#rCrL)rs"rrrstCyr c^RIp^RIHpVPRRR/R7pVP RR4P \ P4Uu.uFq3'gK \V4NK pp.VOV!4R, NpVUu.uF%q3P4'gK\V4NK' up#uupiuupi \d.u#i;i)uReturn existing Hermes-managed runtime dirs for the terminal subshell PATH. The terminal tool spawns a subshell whose PATH is the agent process's PATH plus ``_SANE_PATH``. Neither carries the runtimes Hermes installs for itself, so on a machine where Hermes provisioned its own toolchain a command the agent runs resolves a system copy instead — or nothing at all: - the pm store's node/npm entries — installed to satisfy the desktop and browser toolchain. ``tools/browser_tool.py`` already does this for its own subprocesses; the agent's shell deserves the same. - ``$HERMES_HOME/bin`` — the managed ``uv``. ``install.sh`` writes it there and nothing has ever put that directory on PATH, so an install whose only uv is the managed one looks uv-less to both the agent and the model. Resolved per call rather than cached in a module constant because ``get_hermes_home()`` is profile-scoped and a managed runtime can appear mid-process (a lazy pm install, a first browser install). Nr"npmPATHrj)rr[) rIr&r#env_forrLrVrRrdrrNr2r')rIr#rrZmanaged candidatess r_managed_runtime_path_entriesrs& 4jj&"j6$'GGFB$7$=$=bjj$IO$IqQ747$IO:w: 1E 9: *9 1hhjA 99P9  s<AB? B5 B5/B?B:#B:2B?5 B?? CCc:V^8dQhR\\,/#rCrL)rs"rrrs  c r c\P!4R, R, pVP4'd \V4.#.# \d.u#i;i)u2``~/.local/bin`` when it exists — the pip --user / pipx / uv-tool install target. A backend launched by a non-interactive SSH session, systemd or a GUI launcher inherits a PATH without it (only the login shell adds it), so CLIs installed there were ``command not found`` from the terminal tool (#111778).z.localr[)rhomerNr2r=) local_bins r_user_local_bin_entriesrsT  h&.I#,#3#3#5#5I=2=  sA A A AAc0V^8dQhR\R\/#rirh)rs"rrrs  S S r c0\'dV#\PRVPR444pVP \P.\ PR4O\ 4O\4O44RPV4#)a;Normalised POSIX PATH with missing sane entries appended: empty entries dropped (shells read them as cwd), duplicates collapsed (first wins), then missing ``_SANE_PATH`` / managed-runtime / ``~/.local/bin`` dirs appended so user entries keep precedence. Windows is a no-op passthrough (native ``;`` PATH untouched).c38"TFq'gK VxK R#5irr])rrs& rr4_append_missing_sane_path_entries..sQ/Ge5EE/Gs  rm) rnrr]rVr _SANE_PATHrrrU)raordereds& r!_append_missing_sane_path_entriesrs {mmQ}/B/B3/GQQG NN4==">:#3#3C#8">;X;Z">#:#<">?@ 88G r c(V^8dQhR\RR/#rr)rs"rrrs33t33r cj\'d'VPRR4VPRR4R#R#)ucDisable MSYS argument path conversion (``/FO`` -> ``C:/.../git/FO`` breaks tasklist/schtasks/wmic/``cmd /c``). Git for Windows honors ``MSYS_NO_PATHCONV``; MSYS2/Cygwin bash honor ``MSYS2_ARG_CONV_EXCL`` — set both; users can override. Git Bash rewrites arguments that look like Unix paths (``/FO``, ``/TN``, ``/Create``) into ``C:/.../git/FO``-style paths, which breaks native Windows commands such as ``tasklist``, ``schtasks``, and ``wmic``. Hermes runs terminal commands through bash on Windows, so set the standard MSYS opt-out by default. Refs #56700. MSYS2-proper and Cygwin bash (which ``_find_bash`` can still return via the final ``shutil.which`` fallback) ignore it and honor ``MSYS2_ARG_CONV_EXCL`` instead, so set both. ``*`` disables all argv conversion — the semantic equivalent of ``MSYS_NO_PATHCONV=1``. Also fixes ``cmd /c`` mangling (#56147). MSYS_NO_PATHCONVrMSYS2_ARG_CONV_EXCL*N)rnr )rs&rrrs,{ )3/ ,c2r c>V^8dQhR\R\R,/#)rrun_envrN)rr2)rs"rrrs"^^4^C$J^r cD\'d\RV4R4#R#)z~PATH env key to update without altering Windows casing (``Path`` vs ``PATH``); None when a Windows env has no PATH key at all.c3R"TFqP4R8XgKVxK R#5i)rNrrs& rr _path_env_key..s;GqwwyF':Gs' 'Nr)rnnext)rs&rrrs#GRk4;G;T B]W]]r c0V^8dQhR\R\/#rr)rs"rrrstr c R^RIHp\\V!\ \ P P444V,4R3.\4R4p^RI H pV!4pV'd$VPV4VPRR4V# \d/pL. s#$Ea$HIr ) published_envWAYLAND_DISPLAYN)agent.session_client_envrrrrrRrrrtools.bot_desktop.runtimerr'rr)rrrr publisheds& r _make_run_envrs;  !9"**//:K!LMPSS TVZ [\ IG;!O y! %t, N  s B B&%B& base_prefix real_prefixc\V^8dQhR\\\,\3,/#rC)tuplerFr2r3)rs"rrr/s  %S 4*@ r c|^RIHpV!4;'g/PR4;'g/pVPR4;'g.p\V\4'g.pVUu.uFq3'gK \ V4NK up\ VPRR443#uupi \d.R3u#i;i)zt(shell_init_files, auto_source_bashrc) from config.yaml; defaults on any failure so terminal execution never breaks.) load_configr%shell_init_filesauto_source_bashrcT)r9rrL isinstancerFr2r3r')r terminal_cfgfilesrWs r _read_terminal_shell_init_configr/s1# ++00<BB   !34::%&&E %+1A+T,2B2BCWY]2^-___+ 4xs9B)B)B) B)) B$7B$B)$B))B;:B;c:V^8dQhR\\,/#rCrL)rs"rrr=s49r c\4wrT;'gV'd\'g.ROM.p.pVFp\PP \PP V44pV'd;\PP V4'dVPV4KKK V# \dKi;i)a^Files to source before the login-shell snapshot (``~``/``${VAR}`` expanded, missing dropped). ``auto_source_bashrc`` applies only without an explicit list: ~/.profile and ~/.bash_profile first (no interactivity guard; where n/nvm/asdf/pyenv add PATH), ~/.bashrc last (Debian's returns early when non-interactive, but guard-less bashrcs keep working).)z ~/.profilez~/.bash_profilez ~/.bashrc) rrnrRrx expandvarsryrtappendr')explicit auto_bashrcrresolvedrawrxs r_resolve_shell_init_filesr=s =>HJJ!,[[MFHH 77%%bgg&8&8&=>Dt,,%-t O   sA(B="B== C  C cRV^8dQhR\R\\,R\/#)r cmd_stringrrrb)rs"rrrQs%22C2S 2c2r cV'gV#VUu.uFq"PRR4NK ppR.RV4OpRPV4R,V,#uupi)zPrepend guarded, silent ``source `` lines: ``set +e`` keeps going on errors, ``2>/dev/null`` hides noisy prompts, ``|| true`` neutralises the status.'z'\''zset +ec34"TFpRV RV R2xK R#5i)z[ -r 'z ' ] && . 'z' 2>/dev/null || trueNr])rrs& rr&_prepend_shell_init..Ws"XSWaVA3j3HISWs )rprU)rrrsafepreludes&& r_prepend_shell_initrQs\ -2 3UIIc7 #UD 3YXSWXYG 99W  $z 11 4sAc<V^8dQhR\R\R\/#)rpgidtimeoutr)r,r+r3)rs"rrr\s!S5Tr cT\P!4V,pVP4\P !V^4\P!4T8dR#\P!R4K^ \dLYi;i \ dR#\dL_i;i)zWait until the process group is gone, reaping the wrapper as we go (a dead but unreaped group leader still makes ``killpg(pgid, 0)`` succeed). POSIX-only; callers are behind the _IS_WINDOWS gate.TFg?) rE monotonicpollr'rRkillpgProcessLookupErrorPermissionErrorsleep)procrrdeadlines&&& r_wait_for_group_exitr\s~~')H   IIK  IIdA  >> x ' 4   "    s.A;B ; B B  B'B'#B'&B'c4V^8dQhR\R\RR/#)r descendantsrrN)rFr,)rs"rrrqs!Dr cVFUpVP4'gK\P!VP4V8XdKDVP 4KW R# \dL#i;i \ dKzi;i)uSIGKILL snapshotted survivors that escaped the process group via ``setsid`` — after TERM→KILL so in-group members keep their grace; psutil's identity-aware Process skips recycled PIDs. POSIX-only (see _IS_WINDOWS gate in caller).N) is_runningrRgetpgidr8r=killr')rrchilds&& r_sweep_escaped_descendantsrqsy ##%% ::eii(D01 JJL     s4A/%AA/ A,)A/+A,,A// A>=A>c$V^8dQhR\/#rC)r3)rs"rrrsTr cVfR#VfR#^RIHpHpV!V4pTfR#T!Y4# \dR#i;i \\ 3dR#i;i)uThe setsid group leader's PID == its PGID. Confirm it is still the process we spawned before signalling the whole group, so a recycled PID/PGID can never take down an unrelated process group (#43044). The baseline and the current reading come from the same host at different times, so they go through the drift-tolerant fingerprint comparator — same-host readings drift ~1 s on macOS (#117505), and exact equality made the guard refuse to kill live, legitimately-owned groups. When no baseline was captured, or the current reading is unreadable, keep the legacy best-effort behaviour rather than refusing to kill: only a LIVE leader with a different start time proves recycling.FT)get_process_start_timestart_time_fingerprints_match)gateway.statusrrr' TypeError ValueError)rexpected_startrrrs&& r_leader_is_oursrso |T(.,^EE  z "s-? <<AAcV^8dQhRR/#rr])rs"rrrs9292t92r cb\VRR4p\P!VP4p\ W!4'g@.p^RIpVPVP4PRR7p\W24R#^RIpVPVP4PRR7pV\P!48Xd \W4M\P!V\P4\!WR4'g\ W!4'gR#\P!V\P"4\!WR4\$P&!\(P*\,4;_uu_4VP/RR 7RRR4M\W24R# \d\TRR4;pfhELi;i \dELli;i \d.pELCi;i +'giLg;i \dLw\0d\Y4Li;i) uTERM the group, wait, KILL, then sweep setsid escapees. Descendants are snapshotted BEFORE the first signal — once the wrapper dies they reparent to init — and we wait on the group, not the wrapper, which can exit before grandchildren under load. POSIX-only (_IS_WINDOWS handled by the caller). PID-reuse guard (#43044): the group is only signalled while its leader's start time still matches the spawn-time baseline — a recycled PGID is never killed._hermes_pgid_startN _hermes_pgidT) recursiveg?@g?r)rrRrr8rrpsutilProcesschildrenr'rgetpgrp_kill_known_pidsrsignalSIGTERMrSIGKILL contextlibsuppress subprocessTimeoutExpiredr=waitr)rrrrrs& r_kill_process_group_posixr sT#7>Nzz$((# 4 0 0     ..2;;d;KK #;5nnTXX.77$7G  rzz| + 0 IIdFNN +'C88&t<< $/$T5(()B)BGLLIIcI*ML9${1_ D.$7 7D @  A      ML!   0 T /  0sy F,/G/G"AH A"H G6H ,G  G  GG" G32G36 H H H H.H. H.-H.cV^8dQhRR/#rr])rs"rrrs4r cV.VOF>p\P!\4;_uu_4VP4RRR4K@ R# +'giKU;i)zPKILL the wrapper and its snapshotted descendants by PID (idempotent on zombies).N)rrr'r)rrr%s&& rrrs@&+&   + + KKM, +' + + +s A  A cV^8dQhRR/#rr])rs"rrrs4r cd^RIHpHpV!VPRV!VP4R7\ P!\P\4;_uu_4VPRR7RRR4R# \dTP 4Lki;i +'giR#;i)zLIdentity-checked terminate (start time guards against PID reuse), else kill.)r terminate_pidT)forceexpected_start_timerrN) rrrr8r'rrrrrr=r )rrrs& r_kill_process_windowsrs}Hdhhd@VW[W_W_@`a   Z66 @ @ #  A @   @ @ @s-A= B=BB B/ caa]tRtRtoRtRtRtRtV3RlRltRV3RlV3Rlllt V3R lR lt ] V3R lR l4t V3R lRlt V3RlRltRRR^xRR/V3RlRlltRtRtV3RlV3RlltRtRtVtV;t#)LocalEnvironmentizRun commands directly on the host: every execute() spawns a fresh bash; the session snapshot preserves exported env vars across calls (unless ``persistent=False``); CWD persists via the stdout marker.Tc4<V^8dQhRS[S[R3,/#)rr.)rr2)r __classdict__s"rrLocalEnvironment.__annotate__s V VeCHo Vr c \\PVP,4p\ \ RV444#)ayFirst-party ``BUZZ_*`` names present in the env, excluded from the shared session snapshot. env_passthrough can never list them (it refuses blocklisted names), so under a multiplexed gateway profile A's BUZZ_PRIVATE_KEY would land in the snapshot and be sourced by profile B. Prefix-only and monotonic on purpose: conservative even when the context-gated carve-out is inactive.c3|"TF2p\V\4'gK\V4'gK.VxK4 R#5ir)rr2r)rrJs& rrPLocalEnvironment._additional_profile_scoped_passthrough_names..s0U#T$$ )Md)S DVs << <)rrRrrrsorted)selfmergeds& r,_additional_profile_scoped_passthrough_names=LocalEnvironment._additional_profile_scoped_passthrough_namessA bjj488+,VU#UUV Vr Nc@<V^8dQhRS[RS[RS[R,RS[/#)rrgrrN persistent)r2r,rr3)rrs"rrrs.CsdTk^br c^<\SV`\V4W#VR7VP4R#))rgrr persist_envN)super__init__r init_session)rrgrrr! __class__s&&&&&rr%LocalEnvironment.__init__s* 7.__annotate__s ( (c (c (r c8VPR4;'gR#)rk)rstriprs&r_posix-LocalEnvironment.get_temp_dir.._posixs88C=''C 'r )r+TMPDIR)r+r4TMPTEMP)rnrrLrRrrxr|r~ras_posixr(rrmkdirrdr2rprrW_OKrr'r})rrr cache_dirr2env_varrfallbacks& r get_temp_dirLocalEnvironment.get_temp_dir s ;6 HHLL-DD1D 9y!9!9bggmmI>V>V ?3355745LL !4!4!67:KK  OOD4O 8 % 'y>))$4 4 (EG W-HH1HIyY11#6622bggmmI6N6Ni(( F  24I OOD4O 89~H""3''BIIh"''@Q,R,R)+h''&&(("5"5c":":hZZPX@YZZ    s$A>K #K KKc&<V^8dQhRS[RS[/#rfrh)rrs"rrr/sMMsMsMr c @\P!\V44#)z@Use native paths for Python, but Git Bash-friendly paths for cd.)r_quote_cwd_for_cdrrgs&rrA"LocalEnvironment._quote_cwd_for_cd.s001Fs1KLLr c&<V^8dQhRS[RS[/#rrh)rrs"rrr3s&&c&c&r c \V4#)z?Rewrite native/mixed Windows paths before quoting for Git Bash.)r)rrxs&&r_quote_shell_path"LocalEnvironment._quote_shell_path3s %%r c<V^8dQhRR/#rr])rrs"rrr7sdr c \VP4pWP8XdR#V\VP48wd"\P RVPV4WnR#)uSwap ``self.cwd`` for a usable directory if it vanished or is inaccessible (e.g. a command ``rm -rf``'d its own cwd) — otherwise Popen raises before bash starts and every subsequent call fails. A benign MSYS→Windows normalization is not warned about.NzaLocalEnvironment cwd %r is missing on disk; falling back to %r so terminal commands keep working.)rrgrurar)rsafe_cwds& r _recover_cwdLocalEnvironment._recover_cwd7sS%TXX. xx   ,TXX6 6 NNH( $r loginFr stdin_datac Z<V^8dQhRS[RS[RS[RS[R,RS[P/#)rrrMrrNNr)r2r3r,rPopen)rrs"rrrKs<C4#!Dj4>4D4Dr c\4pV'd\V\44pV.V'dR.M.ORNVNpVP4\P !V3RRR\ VP4RRRRR \PR \PR Ve\PM\PR RRVP/ \'d R\4/M/Bp\'gn\P!\ 4;_uu_4\"P$!VP&4Vn^RIHpV!VP&4VnR R R 4Ve \1Wt4V# +'giL!;i)z-lz-ctextTrencodingzutf-8errorsrpstdoutstderrstdinNstart_new_sessionrg creationflags)r)rJrrrKrrPrrPIPESTDOUTDEVNULLrgrnrrrrrRrr8rrrrr) rrrMrrNrGargsrrs &&$$$ r _run_bashLocalEnvironment._run_bashKs]| ,Z9R9TUJC%RC$C C  PP!.txx!8PCJPS\P??P+5+<+<P&0%;*//ASASP# P)- P ;F+!3!562 P {$$%788$&JJtxx$8! B*@*J'9  !  ) 98s AE11 F c \'d\M\!V4R# \dU\P !\ 4;_uu_4TP4RRR4R# +'giR#;ii;i)z-Kill the entire process group (all children).N)rnrr r=rrr'r)rrs&&r _kill_processLocalEnvironment._kill_processgsS &1k "7P PRV W $$Y// 0/// s+ ""-BA+ B+ A= 6B=Bc  |\'dVPV4#\P!\4;_uu_4\ VRR4;'g!\ P!VP4pV\ P!48wdC\V\ VRR44'd&\ P!V\P4RRR4\P!\4;_uu_4VP4RRR4R# +'giLM;i +'giR#;i)zPSIGKILL the whole group with no TERM grace or wait: the caller os._exit()s next.rNr)rnrarrr=rrRrr8rrrrrr)rrrs&& r_force_kill_process$LocalEnvironment._force_kill_processos ;%%d+ +   ) )46NN"**TXX:ND rzz|#gdL`bf>g(h(h $/*  ) ) IIK* )* )* ) )sBD<D* D' * D; c <V^8dQhRS[/#)rresultr)rrs"rrr~s((t(r c T<VPp\SV` V4VPV8wd{\VP4pV'd2\P P V4'd W0nW1R&R#W nVPRR4VPRR4R#R#)uBase semantics plus: Git Bash ``pwd -P`` emits MSYS form on Windows — normalize to native and require the dir to exist, else ``_run_bash`` would warn every command. A stale path rolls back to the previous cwd, which this command did not observe, so ``cwd_observed`` is dropped.rg cwd_observedN)rgr$_extract_cwd_from_outputrurRrxr~r)rrgprev_cwd normalizedr's&& rrj)LocalEnvironment._extract_cwd_from_output~s| 88 (0 88x .txx8JbggmmJ77% *u # >40 5$' r c ^^RIpVPVP R24pVPVP.VOFDp\P !\ 4;_uu_4\P!V4RRR4KF R# \d.pLsi;i +'giKn;i)zClean up temp files, including orphaned atomic-write snapshots (``snap.tmp.``) a failed/interrupted mv could leave behind.Nz.tmp.*) glob_snapshot_pathr' _cwd_filerrr=rRrQ)rrostalerWs& rcleanupLocalEnvironment.cleanups  II!4!4 5V<=E%%t~~>>A$$W-- ! .-? E .--sB#B BB B, rB)rj<NT)__name__ __module__ __qualname____firstlineno____doc__"_passwordless_sudo_probe_supported_profile_scoped_passthroughis_localrr%r= staticmethodrArFrKr^rardrjrs__static_attributes____classdictcell__ __classcell__)r'rs@@rrrsB*.&"&H V V#[#[JMM&&(%PS+/8 (("  r rcV^8dQh/^\9d\\,R,;R&^\9d\R,\,;R&^\9d \;R&^\9d\ \R3,;R&^\9d \ ;R&^\9d\\,R,;R&#) rNrNr|_hermes_repo_root._hermes_repo_root_aliases_in_venv_hermes_site_packages)__conditional_annotations__rFr2objectrrr3)rs"rrrsKKZ21$s)d*1[Lr10tf$0sLJ>=4=KLLXX5s+XMLP22$2QLT0/tDzD(/ULr r>shkshzshrGdashmksh)|rrzrloggingr{rRplatformrorOrrrr threadingrEcollections.abcrpathlibrr&rtools.environments.basertools.environments.base_outputrhermes_cli._subprocess_compatr#tools.environments.local_env_policyr r r r r rrrrrrrr#tools.environments.local_pythonpathrrsystemrn getLoggerrvraTERMINAL_TEMP_MAX_IDLE_HOURSLockr_r`compilerHr(r[rdrurrrrrrrrrrrrrrr rrr'r+r$rrrJrNrPrOrgrrurwrrr}r|rrrrrrrrrrr/rrabsoluterrprefixhasattrrrrrrrrrr rrrr)rs@rrsK    #436< Yoo9,   8 $ "%NN,"zzIJ 8T;| <5.+\. < +B#$&'kD /$,I$#($LP$"  !/KO!/!/BF!/"'!/!/H)OS) %))X  )'X  .21$ DO G$%%QR M H '00"DV>  3$^ Jx.002::1==.MtH~..088;=T=V/XX#}cjj9SZZG11S-0 2+// (2*$<92xkkr