ei UdZddlZddlZddlZddlZddlZddlZddlZddlZddl m Z ej e Z ejddZejeed<ded ejefd Zd ejed dfd Zdd ed efdZdZdZdZdZdededZdededZdZdZdddddddd ed!zd"fed#zd$fed%zd&fed'zd(fg Zd)ed efd*Z d+ed e!fd,Z"gd-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=dd>d?d@dAdBedCfdDedEfdBedFedGfdDedFedHfdIdJdKdLdMdNdOdPdQdRdSdTedFedUfdVdWdXdYdZd[d\d]d^Z#d_ed efd`Z$iZ%e!ee&efeda<e#D]x\Z'Z(e$e'Z)e(Z*e%+e*e&,e*e)he%+e)e&,e)e*hydbed e&efdcZ-d)ed efddZ.d)ed efdeZ/ej0Z1iZ2e!ee!fedf<iZ3e!ee&fedg<e&Z4e&eedh<e&Z5e&edi<GdjdkZ6iZ7e!ee8fedl<iZ9e!ee:fedm<ded dfdnZ;ded dfdoZ< ddedqedre=d e>fdsZ?ded e=fdtZ@dedue!fdvZAdedbefdwZBded dfdxZCded dfdyZDded dfdzZEded e=fd{ZFd e=fd|ZGdedbed e=fd}ZHdbefd~ZIde&fdZJd e&fdZKde&fdZL dd)ed+ede>dzde=d ef dZMd efdZNd e!fdZOd efdZPd e>fdZQd efdZRd)ed+ed efdZS dd)eded e!fdZTde!d efdZU dd)eded e!fdZVeKdS)aDangerous command approval -- detection, prompting, and per-session state. This module is the single source of truth for the dangerous command system: - Pattern detection (DANGEROUS_PATTERNS, detect_dangerous_command) - Per-session approval state (thread-safe, keyed by session_key) - Approval prompting (CLI interactive + gateway async) - Smart approval via auxiliary LLM (auto-approve low-risk commands) - Permanent allowlist persistence (config.yaml) N)Optionalapproval_session_keydefault_approval_session_key session_keyreturnc:t|pdS)z\s*/dev/(sd|nvme|hd|mmcblk|vd|xvd)[a-z0-9]*\bzredirect to raw block device)z(:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:z fork bomb)z\bkill\s+(-[^\s]+\s+)*-1\bkill all processesz!(shutdown|reboot|halt|poweroff)\bzsystem shutdown/rebootz init\s+[06]\bzinit 0/6 (shutdown/reboot)z*systemctl\s+(poweroff|reboot|halt|kexec)\bzsystemctl poweroff/rebootztelinit\s+[06]\bztelinit 0/6 (shutdown/reboot)commandct|}tD]8\}}tj||tjtjzrd|fcS9dS)zCheck if a command matches the unconditional hardline blocklist. Returns: (is_hardline, description) or (False, None) T)FN) _normalize_command_for_detectionlowerHARDLINE_PATTERNSresearch IGNORECASEDOTALL)r normalizedpattern descriptions rdetect_hardline_commandr*sk 2'::@@BBJ 1'' 9Wj"-")*C D D '+& & & & ' =rr)cddd|ddS)z5Build the standard block result for a hardline match.FTzBLOCKED (hardline): u. This command is on the unconditional blocklist and cannot be executed via the agent — not even with --yolo, /yolo, approvals.mode=off, or cron approve mode. If you genuinely need to run it, run it yourself in a terminal outside the agent.)approvedhardlinemessage)r)s r_hardline_block_resultr0s/ ;      r)z\brm\s+(-[^\s]*\s+)*/zdelete in root path)z\brm\s+-[^\s]*rzrecursive delete)z\brm\s+--recursive\bzrecursive delete (long flag))z8\bchmod\s+(-[^\s]*\s+)*(777|666|o\+[rwx]*w|a\+[rwx]*w)\bz world/other-writable permissions)z8\bchmod\s+--recursive\b.*(777|666|o\+[rwx]*w|a\+[rwx]*w)z*recursive world/other-writable (long flag))z\bchown\s+(-[^\s]*)?R\s+rootzrecursive chown to root)z\bchown\s+--recursive\b.*rootz#recursive chown to root (long flag))z\bmkfs\bzformat filesystem)z \bdd\s+.*if=z disk copy)z >\s*/dev/sdzwrite to block device)z\bDROP\s+(TABLE|DATABASE)\bzSQL DROP)z \bDELETE\s+FROM\b(?!.*\bWHERE\b)zSQL DELETE without WHERE)z\bTRUNCATE\s+(TABLE)?\s*\wz SQL TRUNCATE)z >\s*/etc/zoverwrite system config)z8\bsystemctl\s+(-[^\s]+\s+)*(stop|restart|disable|mask)\bzstop/restart system service)z\bkill\s+-9\s+-1\br)z\bpkill\s+-9\bzforce kill processes)z%\b(bash|sh|zsh|ksh)\s+-[^\s]*c(\s+|$)zshell command via -c/-lc flag)z)\b(python[23]?|perl|ruby|node)\s+-[ec]\s+zscript execution via -e/-c flag)z\b(curl|wget)\b.*\|\s*(ba)?sh\bzpipe remote content to shell)z1\b(bash|sh|zsh|ksh)\s+<\s*>?\s*["\']?z%overwrite system file via redirectionz["\']?z$overwrite project env/config via teez,overwrite project env/config via redirection)z\bxargs\s+.*\brm\bz xargs with rm)z\bfind\b.*-exec\s+(/\S*/)?rm\bz find -exec rm)z\bfind\b.*-delete\bz find -delete)z%\bhermes\s+gateway\s+(stop|restart)\bz2stop/restart hermes gateway (kills running agents))z\bhermes\s+update\bz6hermes update (restarts gateway, kills running agents))z4gateway\s+run\b.*(&\s*$|&\s*;|\bdisown\b|\bsetsid\b)Mstart gateway outside systemd (use 'systemctl --user restart hermes-gateway'))z\bnohup\b.*gateway\s+run\br1)z1\b(pkill|killall)\b.*\b(hermes|gateway|cli\.py)\bz.kill hermes/gateway process (self-termination))z\bkill\b.*\$\(\s*pgrep\bz3kill process via pgrep expansion (self-termination))z\bkill\b.*`\s*pgrep\bz None`` where *approval_data* contains ``command``, ``description``, and ``pattern_keys``. The callback bridges sync→async (runs in the agent thread, must schedule the actual send on the event loop). N)_lockr^)r cbs rregister_gateway_notifyrbPsy ..+-K(.................. $$ct5t|dt|g}|D]}|j ddddS#1swxYwYdS)zUnregister the per-session gateway approval callback. Signals ALL blocked threads for this session so they don't hang forever (e.g. when the agent run finishes or is interrupted). N)r`r^popr]rNr )r entriesentrys runregister_gateway_notifyrh\s  T222!%%k266  E KOO     sAA++A/2A/Fchoice resolve_allct5t|}|s ddddS|r$t|}|n|dg}|st|ddddn #1swxYwY|D]"}||_|j#t|S)aTCalled by the gateway's /approve or /deny handler to unblock waiting agent thread(s). When *resolve_all* is True every pending approval in the session is resolved at once (``/approve all``). Otherwise only the oldest one is resolved (FIFO). Returns the number of approvals resolved (0 means nothing was pending). Nr) r`r]rlistclearrerPrNr len)r rirjqueuetargetsrgs rresolve_gateway_approvalrqis1  3 3##K00  3 3 3 3 3 3 3 3  %5kkG KKMMMMyy||nG 3    T 2 2 2 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3   w<<sBABBBct5tt|cdddS#1swxYwYdS)zFCheck if a session has one or more blocking gateway approvals waiting.N)r`boolr]rr s rhas_blocking_approvalrts 66O'' 4455666666666666666666s'<AAapprovalcZt5|t|<ddddS#1swxYwYdS)z/Store a pending approval request for a session.N)r`rH)r rus rsubmit_pendingrwsv )) ())))))))))))))))))rcct5t|t|ddddS#1swxYwYdS)z(Approve a pattern for this session only.N)r`rI setdefaultr add)r r8s rapprove_sessionr{s JJ$$[#%%88<<[IIIJJJJJJJJJJJJJJJJJJs;AAAc|sdSt5t|ddddS#1swxYwYdS)z,Enable YOLO bypass for a single session key.N)r`rJrzr s renable_session_yolor}s  ''+&&&'''''''''''''''''' 488c|sdSt5t|ddddS#1swxYwYdS)z-Disable YOLO bypass for a single session key.N)r`rJdiscardr s rdisable_session_yolors  ++k***++++++++++++++++++r~c$|sdSt5t|dt|t |dt |dddddS#1swxYwYdS)z7Remove all approval and yolo state for a given session.N)r`rIrerJrrHr]r s r clear_sessionrs  //k4000k*** [$'''K... //////////////////sA,BB  B c^|sdSt5|tvcdddS#1swxYwYdS)z?Return True when YOLO bypass is enabled for a specific session.FN)r`rJr s ris_session_yolo_enabledrs u ,,m+,,,,,,,,,,,,,,,,,,s "&&c<ttdS)zEReturn True when the active approval session has YOLO bypass enabled.rr)rrr/rris_current_session_yolo_enabledrs "#:2#F#F#F G GGrc6t|}t5td|Dr ddddSt|t tfd|DcdddS#1swxYwYdS)zCheck if a pattern is approved (session-scoped or permanent). Accept both the current canonical key and the legacy regex-derived key so existing command_allowlist entries continue to work after key migrations. c3(K|] }|tvVdSrR)rK).0aliass r zis_approved..s(AAu++AAAAAArNTc3 K|]}|vV dSrRr/)rrsession_approvalss rrzis_approved..s)CC%5--CCCCCCr)r;r`anyrIrr )r r8aliasesrs @r is_approvedrs $K00G DD AAAAA A A DDDDDDDD.11+suuEECCCC7CCCCC DDDDDDDDDDDDDDDDDDsBABBBczt5t|ddddS#1swxYwYdS)z)Add a pattern to the permanent allowlist.N)r`rKrzr:s rapprove_permanentrs -- ,,,------------------ 044patternsczt5t|ddddS#1swxYwYdS)z2Bulk-load permanent allowlist entries from config.N)r`rKupdate)rs rload_permanentrs --""8,,,------------------rc ddlm}|}t|dgpg}|rt ||S#t $r3}t d|tcYd}~Sd}~wwxYw)zLoad permanently allowed command patterns from config. Also syncs them into the approval module so is_approved() works for patterns added via 'always' in a previous session. r load_configcommand_allowlistz&Failed to load permanent allowlist: %sN)hermes_cli.configrr rr Exceptionloggerwarning)rconfigres rload_permanent_allowlistrs 111111vzz"5r::@bAA  % 8 $ $ $ ?CCCuu sAA B(B<BBc ddlm}m}|}t||d<||dS#t$r&}t d|Yd}~dSd}~wwxYw)z4Save permanently allowed command patterns to config.r)r save_configrzCould not save allowlist: %sN)rrrrlrrr)rrrrrs rsave_permanent_allowlistrs:>>>>>>>>&*8nn"# F :::5q999999999:s/3 A#AA#Ttimeout_secondsallow_permanentcv |t}|D |||S#t$r(}td|dYd}~dSd}~wwxYwdtjd< t t d |t d |t rt d nt d t tj d di  fd}tj |d}| | ||rYt d dtjvr tjd=t tj dS d }|dvrYt d dtjvr tjd=t tj dS|dvrYt d dtjvr tjd=t tj dS|dvrsYt d dtjvr tjd=t tj dSt d dtjvr tjd=t tj dSt d dtjvr tjd=t tj dS#tt f$rZt dYdtjvr tjd=t tj dSwxYw#dtjvr tjd=t tj wxYw)aPrompt the user to approve a dangerous command (CLI only). Args: allow_permanent: When False, hide the [a]lways option (used when tirith warnings are present, since broad permanent allowlisting is inappropriate for content-level security findings). approval_callback: Optional callback registered by the CLI for prompt_toolkit integration. Signature: (command, description, *, allow_permanent=True) -> str. Returns: 'once', 'session', 'always', or 'deny' N)rzApproval callback failed: %sT)exc_infodeny1HERMES_SPINNER_PAUSEu ⚠️ DANGEROUS COMMAND: z z2 [o]nce | [s]ession | [a]lways | [d]enyz% [o]nce | [s]ession | [d]enyrirc rdnd}t|d<dS#ttf$r dd<YdSwxYw)Nz Choice [o/s/a/D]: z Choice [o/s/D]: rir)inputstripr!EOFErrorOSError)promptrrPs r get_inputz,prompt_dangerous_approval..get_input+sz*;Jh77PhF',V}}':':'<'<'B'B'D'DF8$$$ '****')F8$$$$*s>> GGG J     ^F * * * * * *%YtDDDF LLNNN KKK 0 0 0   =>>>. "RZ / / 12  1H%F&&.///$ "RZ / / 12  )+++:;;;  "RZ / / 12  #?**&%>???$ "RZ / / 12  >??? "RZ / / 12  ())) "RZ / / 12   ' ( %&&& !RZ / / 12   "RZ / / 12  sX $ AAA)C;N.NN0NN(N O,!O/+O,,O//A P8ct|tr|durdndSt|tr*|}|pdSdS)a"Normalize approval mode values loaded from YAML/config. YAML 1.1 treats bare words like `off` as booleans, so a config entry like `approvals: mode: off` is parsed as False unless quoted. Treat that as the intended string mode instead of falling back to manual approvals. Foffmanual) isinstancersstrrr!)moder's r_normalize_approval_moderUsc$4 uu83$&ZZ\\'')) %X% 8rc ddlm}|}|dipiS#t$r'}td|icYd}~Sd}~wwxYw)zLRead the approvals config block. Returns a dict with 'mode', 'timeout', etc.rr approvalsz"Failed to load approval config: %sN)rrrrrr)rrrs r_get_approval_configrds111111zz+r**0b0 ;Q??? s'* AAAAcdtdd}t|S)zHRead the approval mode from config. Returns 'manual', 'smart', or 'off'.rr)rrr)rs r_get_approval_moderos+  ! ! % %fh 7 7D #D ) ))rc ttddS#ttf$rYdSwxYw)z>Read the approval timeout from config. Defaults to 60 seconds.r<)intrr ValueError TypeErrorr/rrrrusS'))--i<<===  "rrs.1AAc  ddlm}|}t|didd}|dvrdSdS#t $rYdSwxYw)zERead the cron approval mode from config. Returns 'deny' or 'approve'.rrr cron_moder)approverallowyesr)rrrrr!rr)rrrs r_get_cron_approval_moder}s1111116::k2..22;GGHHNNPPVVXX 5 5 59v vvsA/A55 BBcD ddlm}d|d|d}|dd|dgdd }|jdjjpd }d |vrd Sd|vrdSdS#t$r&}t d|Yd}~dSd}~wwxYw)aUse the auxiliary LLM to assess risk and decide approval. Returns 'approve' if the LLM determines the command is safe, 'deny' if genuinely dangerous, or 'escalate' if uncertain. Inspired by OpenAI Codex's Smart Approvals guardian subagent (openai/codex#13860). r)call_llmzYou are a security reviewer for an AI coding agent. A terminal command was flagged by pattern matching as potentially dangerous. Command: z Flagged reason: ul Assess the ACTUAL risk of this command. Many flagged commands are false positives — for example, `python -c "print('hello')"` is flagged as "script execution via -c flag" but is completely harmless. Rules: - APPROVE if the command is clearly safe (benign script execution, safe file operations, development tools, package installs, git operations, etc.) - DENY if the command could genuinely damage the system (recursive delete of important paths, overwriting system files, fork bombs, wiping disks, dropping databases, etc.) - ESCALATE if you're uncertain Respond with exactly one word: APPROVE, DENY, or ESCALATEruuser)rolecontent)taskmessages temperature max_tokensrAPPROVErDENYrescalatez1Smart approvals: LLM call failed (%s), escalatingN) agent.auxiliary_clientrchoicesr.rrupperrrdebug)rr)rrresponseanswerrs r_smart_approvers#333333 =  = = = = =8%&99:    "1%-5;BBDDJJLL   9 v  6:  H!LLLzzzzzsA#A/'A// B9BBenv_typec |dvrdddSt|\}}|r3td||ddt|St jdst rdddSt|\}}}|sdddSt}t||rdddSt jd} t jd } | s6| s4t jd rtd kr d d |ddSdddS| st jdr$t||||dd |d||d|d|ddSt|||} | d kr d d|d||dS| dkrt||n9| dkr3t||t|tt dddS)aCheck if a command is dangerous and handle approval. This is the main entry point called by terminal_tool before executing any command. It orchestrates detection, session checks, and prompting. Args: command: The shell command to check. env_type: Terminal backend type ('local', 'ssh', 'docker', etc.). approval_callback: Optional CLI callback for interactive prompts. Returns: {"approved": True/False, "message": str or None, ...} docker singularitymodaldaytonaTNr,r. Hardline block: %s (command: %s)HERMES_YOLO_MODEHERMES_INTERACTIVEHERMES_GATEWAY_SESSIONHERMES_CRON_SESSIONrF'BLOCKED: Command flagged as dangerous () but cron jobs run without a user present to approve it. Find an alternative approach that avoids this command. To allow dangerous commands in cron jobs, set approvals.cron_mode: approve in config.yaml.HERMES_EXEC_ASK)rr8r)approval_requiredu.⚠️ This command is potentially dangerous (z3). Asking the user for approval. **Command:** ```  ```r,r8statusrr)r.)rzBBLOCKED: User denied this potentially dangerous command (matched 'zL' pattern). Do NOT retry this command - the user has explicitly rejected it.r,r.r8r)rr)r*rrr0rgetenvrrGrrrrwrr{rrrK) rrr is_hardline hardline_desc is_dangerousr8r)r is_cli is_gatewayris rcheck_dangerous_commandrs@@@ T222"9!A!AK59='RVSVRV-XXX%m444 y#$$3(G(I(I3 T222-Eg-N-N*L+{ 3 T222)++K; ,,3 T222 Y+ , ,F344J 3*3 9* + + &((F22 %G+GGG   !T222 RY011 {&&% %    &)&VVVGNVVV   'w 9JLLLFv\gvvv&&     [1111 8   [111+&&& !4555 . ..r tirith_resultc |dpg}|s|dpd}d|Sg}|D]}|dd}|dd}|dd}|r*|r(||r d |d |d |n|d |p|r||rd |d |n||s|dpd}d|Sd d |zS)zBuild a human-readable description from tirith findings. Includes severity, title, and description for each finding so users can make an informed approval decision. findingssummaryzsecurity issue detectedzSecurity scan: severityrtitler)[z] z: uSecurity scan — ; )rappendr)rrrpartsfrrdescs r_format_tirith_descriptionr# so   ,,2H +##I..K2K**** E II55R((gr""uu]B''  IT I LLH\8X8888$888UJ\J\VZJ\J\ ] ] ] ]  I LLHG0X00000% H H H +##I..K2K**** $))E"2"2 22rc |dvrdddSt|\}}|r3td||ddt|St }t jdsts|dkrdddSt jd }t jd }t jd }|sM|sK|sIt jd r0td krt|\} } } | r dd| ddSdddSdgdd} ddl m } | |} n#t$rYnwxYwt|\} }} g}t}| ddvrs| dpg}|r|dddnd}d|}t| }t!||s|||df| r(t!||s||| df|sdddS|dkrdd|D}t'||}|dkrD|D]\}}}t)||td |dd!|ddd|d"S|d kr)dd#|D}dd$|d%dd&Sdd'|D}|dd}d(|D}t-d)|D}|s|rbd}t.5t0|}dddn #1swxYwY|||||d*}t3|}t.5t4|g|dddn #1swxYwY ||n#t8$r} td+| t.5t4|g}!||!vr|!||!st4|ddddn #1swxYwYdd,||d-cYd} ~ Sd} ~ wwxYwt?d.d/}" tA|"}"n#tBtDf$rd/}"YnwxYw dd0l#m$}#n#t8$rd}#YnwxYwtKj&}$|$tO|"dz}%|$|$d1}&d}' |%tKj&z }(|(dkrn;|j()tUd2|(3rd}'n|# |#|&d4Xt.5t4|g}!||!vr|!||!st4|ddddn #1swxYwY|j+})|'r|)|)d kr|'sd5nd6}*dd7|*d8||d-S|D]^\}}}+|)d9ks|)d:kr|+rt)||%|)d:kr3t)||tY|t[t\_ddd|d;St_|||||d*d|d<||d=|d>|d?d@Sta||| |A})|)d krddB||d-S|D]^\}}}+|)d9ks|)d:kr|+rt)||%|)d:kr3t)||tY|t[t\_ddd|d;S)CaCRun all pre-exec security checks and return a single approval decision. Gathers findings from tirith and dangerous-command detection, then presents them as a single combined approval request. This prevents a gateway force=True replay from bypassing one check when only the other was shown to the user. rTNrrrrrrrr rrFrr rr)actionrrr)check_command_securityr%)blockwarnrrule_idunknownztirith:smartrc3"K|] \}}}|V dSrRr/r_r"s rrz+check_all_command_guards..s()J)J:1dA$)J)J)J)J)J)Jrrz'Smart approval: auto-approved '%s' (%s)r)r,r.smart_approvedr)c3"K|] \}}}|V dSrRr/r-s rrz+check_all_command_guards..s(-N-Nzq$d-N-N-N-N-N-NrzBLOCKED by smart approval: z@. The command was assessed as genuinely dangerous. Do NOT retry.)r,r. smart_deniedc3"K|] \}}}|V dSrRr/r-s rrz+check_all_command_guards..s(>>zq$d>>>>>>rcg|]\}}}| Sr/r/)rkeyr.s r z,check_all_command_guards..s... Q...rc3"K|] \}}}|V dSrRr/)rr.is_ts rrz+check_all_command_guards..s(55jaDT555555r)rr8 pattern_keysr)z"Gateway approval notify failed: %sz?BLOCKED: Failed to send approval request to user. Do NOT retry.rgateway_timeouti,)touch_activity_if_due) last_touchrg?rzwaiting for user approvalz timed outzdenied by userzBLOCKED: Command z. Do NOT retry this command.rr)r,r. user_approvedr)r u⚠️ z2. Asking the user for approval. **Command:** ``` r r )rrz#BLOCKED: User denied. Do NOT retry.)1r*rrr0rrrrrrGtools.tirith_securityr& ImportErrorrrr#rrrrr{rrr`r^rMr]ryrremovererrrrtools.environments.baser:time monotonicmaxrNwaitminrPrrrKrwr),rrrrr approval_moderris_askr_pkr)rr&r8warningsr rr) tirith_key tirith_desccombined_desc_for_llmverdictr4r. combined_desc primary_keyall_keys has_tirith notify_cb approval_datargexcrorr:_now _deadline_activity_stateresolved _remainingrireason is_tiriths, rcheck_all_command_guardsr\;s @@@ T222 "9!A!AK59='RVSVRV-XXX%m444'((M y#$$3(G(I(I3]^cMcMc T222 Y+ , ,F344J Y( ) )F 3*3V3 9* + + &((F221I'1R1R. c; $)KkKKK   !T222 'B2FFM @@@@@@..w77      .Fg-N-N*L+{ H)++K X"333 $$Z006B;CR(1+//)Y777(w(( 0?? ; 33 = OOZd; < < <?; 44 ? OO[+u= > > > 3 T222  $ )J)J)J)J)J J J *?@@ i  % 2 2 Q S1111 LLB "'< > > > $&*#8:: :  $(II-N-NX-N-N-N$N$N !!\9N\\\ $  II>>X>>>>>M1+a.K..X...H55H55555J | V|   = =+// <>> ???????????????!&`#.#0  .+,,001BCHHG g,, *     -IIIIIII - - -(,%%% ->##Ds7A.I-1DAAOH &)9)99 ??;##CZ,@,@#AA#H(4))')D   ; ;'++K<<E>>LL''';#'' T:::  ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;\F v~61A1A,4J:J %W6WWW#.#0 &. B B!Q Y&&6X+=+=)+=#K5555x''#K555%c***,-@AAA!%%)-II I {&$( % %    &)(m-mm_fmmm   'w ;E~9JLLLF<&(    &::Q Y  6X#5#5)#5 K - - - - x   K - - - c " " " $%8 9 9 9!- A AAsD00 D=<D=MM  M 1/N,,N03N08 O Q*"Q%0AQ Q%Q Q%Q  Q%Q*%Q*R R65R6:S SS AV>>WW)F)NTNrR)WrZ contextvarsloggingrr#rrSrArBtypingr getLoggerrWr ContextVarrr__annotations__Tokenrrr_SSH_SENSITIVE_PATH_HERMES_ENV_PATH_PROJECT_ENV_PATH_PROJECT_CONFIG_PATH_SENSITIVE_WRITE_TARGET_PROJECT_SENSITIVE_WRITE_TARGET _COMMAND_TAIL_CMDPOSr"tupler*r\r0rEr6r7r _pattern _description _legacy_key_canonical_keyryrr;r rGLockr`rHrIrJrKrMr]rlr^objectrbrhrsrrqrtrwr{r}rrrrrrrrrrrrrrrrrr#r\r/rrrss$     8 $ $ 6L[5K 666{-c2 881B31G8888 '[%6s%;''''' : :S : : : : : > SJ #U):"T"T=Q"T"T"T+ F WJ\;\W>9  335MN !=> <<>YZ ""$CD+2 S U          (B5B,B>Bf B p B A BNB'B#B.B1BFB4B.BaB 2!B"0#B$?%B(P)B*V+B,I-B.m/B02/113RS1B2/,..0WX3B4O7NN}NNPvw5B6L4KKMKKM{|7B8-9B:9;B<-=BDeEBFWGBJOKBLuMBPmQBZY[B\_]B`CaBb]&E\\]\\_BCcBdEeBfUgBlMmBrUsBtOuBvUwBxTyBz:{BBSCBJIIIIII -/d3C=)...0^^Hl%%h//K!N##NCCEE::AA>S^B_```##K77>> ^?\]]]]@s@s3x@@@@cc$ c e    $  $sDy/$&4S>&&&#%% s3x355S ********$&c4i%%%)+T#v+&+++ . .T . . . . 3 4    27#s*.;>:6s6t6666 ))t)))) JJ3JJJJ 'S'T''''+c+d++++/s/t////,,,,,,HHHHH DS Ds Dt D D D D-3---- -S----#$:s:::: =A6:04RRsRR/2TzR/3R:=RRRRj c    d*C**** s     ,C,c,c,,,,`/3`/`/S`/C`/7;`/`/`/`/N3d3s3333804\A\Ac\AS\A8<\A\A\A\A@ r