+ lHj=Rt^RIHt^RIt^RIt^RIt^RIHtHt^RI H t ^RI H t H t RRltR]3RR lltR R ltR R ltRRRR/RRlltRRRlltRRltR#)zLHelpers shared by the non-local terminal backends (docker, ssh, cloud SDKs).) annotationsN)CallableIterable)_SHELL_ENV_NAME_RE)_is_hermes_internal_secret_is_provider_env_blocklistedcV^8dQhRR/#)returndict[str, str])formats"E/home/ubuntu/.hermes/hermes-agent/tools/environments/remote_common.py __annotate__rsncX^RIHpV!4;'g/# \d/u#i;i)uW``~/.hermes/.env`` values, or ``{}`` — a broken .env must not fail command execution.load_env)hermes_cli.configr Exceptionrs rload_hermes_env_varsrs..zR  s ))c$V^8dQhRRRRRR/#)r explicit_forward Iterable[str]hermes_env_loaderzCallable[[], dict[str, str]]r ztuple[dict[str, str], set[str]]r )r s"rrrs#%!%!m%!/K%!!@%!rc\4pRpRpRp^RIHpHp^RIHpHpV!4p\V!44pVUu0uFp\V4'dKVkK p p\V4V Uu0uFp\V4'dKVkK up,p V 'dV!4M/p /p \4p \V 4Fp\P!V4;'gV PV4pVe V!W4pVeWV&KHV'gKRV!V4'dKb\P!V4'gKV P!V4K W3# \dEL'i;iuupiuupi)a/Values to forward into a remote shell plus the scoped names that must be unset there. Implicit passthrough (skill ``required_environment_variables`` + ``terminal.env_passthrough``) is filtered through the Hermes provider-credential blocklist and the dynamic internal-secret check; ``explicit_forward`` entries (docker_forward_env) are an operator opt-in that bypasses both. Each value is the routed profile's secret when multiplex is active; a name the active scope lacks is returned in the unset set so a shared sandbox cannot leak another profile's value. NFcR#Fr )_names&r)resolve_passthrough_env..&s%r)get_all_passthroughresolve_passthrough_value)_is_global_envis_multiplex_active)settools.env_passthroughr!r"agent.secret_scoper#r$rrrsortedosgetenvgetr fullmatchadd)rrpassthrough_keysr"multiplex_active is_global_envr!r$kimplicit_forward forward_keys hermes_envexec_env unset_nameskeyvalues&& rresolve_passthrough_envr9sQ"% $'M X[.0245$4Y#3a;UVW;X#3Y'(#,L#a+G+J#,LLL(4"$"J!HEKl# #55*.."5 $ 0-c9E  !SM  mC&8&8=O=Y=YZ]=^=^ OOC $   !    Y,Ls('EE%E%,E*E* E"!E"c$V^8dQhRRRRRR/#)r cmd_stringstrnamesrr r )r s"rrr?s&``c`-`C`rch\V4pV'gV#RRPRV44 RV 2#)z_Prefix ``cmd_string`` with ``unset`` of the profile-scoped names the remote shell must not see.zunset  c3N"TFp\P!V4xK R#5i)N)shlexquote).0ns& r prepend_unset..Ds;UU[[^^Us#%z 2>/dev/null || true )r(join)r;r=s&&r prepend_unsetrH?s: 5ME  CHH;U;;<V'd/\PCVC#R#)zEnv for the docker/ssh CLIENT subprocess: forwarded values travel here (owner-readable /proc/*/environ) while the argv carries names only; ``None`` = inherit when nothing to add.N)r)environ)rJs&rclient_env_withrMGs (. #bjj #F #747rcheckFenvc ,V^8dQhRRRRRRRRR R /#) r cmd list[str]timeoutfloatrNboolrOz dict | Noner zsubprocess.CompletedProcessr )r s"rrrMs7IIYIEI$I[I0Irc Z\P!VRRRRW\PVR7 #)z``subprocess.run`` with the backend-standard capture settings: text mode with utf-8/replace decoding and stdin closed (DEVNULL) so a CLI that unexpectedly prompts cannot hang the agent.Tzutf-8replace)capture_outputtextencodingerrorsrSrNstdinrO) subprocessrunDEVNULL)rQrSrNrOs&$$$r run_capturer`Ms/ >> DtgiJ,>,>C IIrc$V^8dQhRRRRRR/#)r r;r<loginrUr rRr )r s"rrrVs&UU#UdUyUrc(V'dRRRV.#RRV.#)zF``bash [-l] -c `` argv tail used by every spawn-per-call backend.bashz-lz-cr )r;rbs&&r bash_argvreVs/4FD$ +T64:TTrc V^8dQhRRRR/#)r extrar<r Noner )r s"rrr[s""3"4"rc^RIpVPV4R# \dp\\ T44hRp?ii;i)zbLazy-install an optional SDK's pm extra (idempotent). Install failures surface as ``ImportError``.N)pm ensure_importr ImportErrorr<)rgrjes& rensure_lazy_deprn[s9"  "#a&!!"s =8=r r)__doc__ __future__rr)rAr]typingrr#tools.environments.base_session_envr#tools.environments.local_env_policyrrrr9rHrMr`rernr rrrts^R" %Bh?ANb%!P`8 II[_IU "r