eidZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZejdkZddlmZmZmZmZejeZe jdkZegdZdZdZd Zd Z d e!fd Z"d dddddddZ# dJdee$de$d e$fdZ%dZ&de&zdzZ'de&zdzZ(hdZ)de j de$d e*d!e*d"e+d#ef d$Z,de$fd%Z-d&e$d'e$d dfd(Z.d)ed e$fd*Z/d+e$de$d e*d!e*d"e+d#ed,e j0fd-Z1d.e$dee$deee$d e$fd/Z2 dKd.e$dee$deee$d e$fd0Z3dLd2e!fd3Z4d e5fd4Z6d5Z7d6Z8d e$fd7Z9ej:d89d:e$d e!fd;Z;de$d e$fd?Z=gd@Z> dKdAe?d9 > >s > > > > ) > >/8 > > >   I&&&&F'& DIIn-- --ra # --------------------------------------------------------------------------- # Convenience helpers (avoid common scripting pitfalls) # --------------------------------------------------------------------------- def json_parse(text: str): """Parse JSON tolerant of control characters (strict=False). Use this instead of json.loads() when parsing output from terminal() or web_extract() that may contain raw tabs/newlines in strings.""" return json.loads(text, strict=False) def shell_quote(s: str) -> str: """Shell-escape a string for safe interpolation into commands. Use this when inserting dynamic content into terminal() commands: terminal(f"echo {shell_quote(user_input)}") """ return shlex.quote(s) def retry(fn, max_attempts=3, delay=2): """Retry a function up to max_attempts times with exponential backoff. Use for transient failures (network errors, API rate limits): result = retry(lambda: terminal("gh issue list ...")) """ last_err = None for attempt in range(max_attempts): try: return fn() except Exception as e: last_err = e if attempt < max_attempts - 1: time.sleep(delay * (2 ** attempt)) raise last_err z`"""Auto-generated Hermes tools RPC stubs.""" import json, os, socket, shlex, time _sock = None a def _connect(): global _sock if _sock is None: _sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM) _sock.connect(os.environ["HERMES_RPC_SOCKET"]) _sock.settimeout(300) return _sock def _call(tool_name, args): """Send a tool call to the parent process and return the parsed result.""" conn = _connect() request = json.dumps({"tool": tool_name, "args": args}) + "\n" conn.sendall(request.encode()) buf = b"" while True: chunk = conn.recv(65536) if not chunk: raise RuntimeError("Agent process disconnected") buf += chunk if buf.endswith(b"\n"): break raw = buf.decode().strip() result = json.loads(raw) if isinstance(result, str): try: return json.loads(result) except (json.JSONDecodeError, TypeError): return result return result z"""Auto-generated Hermes tools RPC stubs (file-based transport).""" import json, os, shlex, tempfile, time _RPC_DIR = os.environ.get("HERMES_RPC_DIR") or os.path.join(tempfile.gettempdir(), "hermes_rpc") _seq = 0 a  def _call(tool_name, args): """Send a tool call request via file-based RPC and wait for response.""" global _seq _seq += 1 seq_str = f"{_seq:06d}" req_file = os.path.join(_RPC_DIR, f"req_{seq_str}") res_file = os.path.join(_RPC_DIR, f"res_{seq_str}") # Write request atomically (write to .tmp, then rename) tmp = req_file + ".tmp" with open(tmp, "w") as f: json.dump({"tool": tool_name, "args": args, "seq": _seq}, f) os.rename(tmp, req_file) # Wait for response with adaptive polling deadline = time.monotonic() + 300 # 5-minute timeout per tool call poll_interval = 0.05 # Start at 50ms while not os.path.exists(res_file): if time.monotonic() > deadline: raise RuntimeError(f"RPC timeout: no response for {tool_name} after 300s") time.sleep(poll_interval) poll_interval = min(poll_interval * 1.2, 0.25) # Back off to 250ms with open(res_file) as f: raw = f.read() # Clean up response file try: os.unlink(res_file) except OSError: pass result = json.loads(raw) if isinstance(result, str): try: return json.loads(result) except (json.JSONDecodeError, TypeError): return result return result >pty backgroundwatch_patternsnotify_on_complete server_socktask_id tool_call_logtool_call_countermax_tool_calls allowed_toolsc, ddlm}d} |d|\}}|dd} |d} n#t j$rYnwxYw| sn| | z } d | vr| d d \} } | } | s5tj } tj | } n_#tjtf$rF}t!d |}||d zYd}~d}~wwxYw| d d}| di}||vrjdt+|}tjdd|d|i}||d zi|d|krFtjdd|di}||d z|dkr5t/|t0r t2D]}||d t6jt6j}}t=t>j d} |t6_|t6_||||}||ct6_t6_|!n2#||ct6_t6_|!wxYwnP#tD$rC}tF$d|dt!tK|}Yd}~nd}~wwxYw|dxxd z cc<tj | z }tK|dd}|&||tO|dd||d zd | vn^#t j$rtF(dYn3tR$r'}tF(d|dYd}~nd}~wwxYw|rJ |!dS#tR$r&}tF(d |Yd}~dSd}~wwxYwdS#|rH |!w#tR$r%}tF(d |Yd}~wd}~wwxYwwxYw)!z Accept one client connection and dispatch tool-call requests until the client disconnects or the call limit is reached. rhandle_function_callNrrTi zInvalid RPC request: r toolargsrerrorTool '/' is not available in execute_code. Available: Tool call limit reached (0). No more tool calls allowed in this execution.rwr8zTool call failed in sandbox: %sexc_infoPrC args_previewdurationzRPC listener socket timeoutzRPC listener socket error: %szRPC conn close error: %s)* model_toolsr? settimeoutacceptrecvsockettimeoutsplitstriptime monotonicjsonloadsdecodeJSONDecodeErrorUnicodeDecodeError tool_errorsendallencodegetr(r!dumps isinstancedict_TERMINAL_BLOCKED_PARAMSpopsysstdoutstderropenosdevnullclose ExceptionloggerrFstrr%rounddebugOSError)r7r8r9r:r;r<r?conn_bufchunkline call_startrequestexcrespr, tool_args availableparam _real_stdout _real_stderrrqresult call_durationrRes r_rpc_server_loopr4s100000 Df<q!!!$$&&a U 7  %((>      5LC3,,IIeQ// czz||!^-- "j77GG,.@A%&Cc&C&CDDDLL$+!5!5!7!7888HHHH $KK33 #KK33 M11 $ &*?*? @ @I:6Y66*366'D LL$+!5!5!7!7888%Q'>99:LLLL'D LL$+!5!5!7!7888 **z)T/J/J*!933! eT2222 214SZ,L"2:s33G(%, %, !5!5%y'"""2>|. CJ 2>|. CJ  222LL!BCRVLWWW'C11FFFFFF2"!$$$)$$$ $ 0 0: =  #9~~crc2 $$%$0 %mQ 7 7&&  ftm3355666W3,,U 7n >444 233333 HHH 4a$ GGGGGGGGH  < <  < < < 7;;;;;;;;; < < <4 < <  < < < 7;;;;;;;; < @Q@QR\@]] ^ ^ ^ ^ ^ ^ ^FFFFFFFF8 ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ !""*%'++,=rBB x  MM.11KVN5KEE  & &MM"566U&AT:UEE  MM-00IF=4IEE  " "MM/22Mf_6MEEEmmE""3fUm D D D!'OQ!?!?$*JJ/A4$H$H"(**-=u"E"E(. 3I4(P(P"(**-=r"B"B     u   :r22 :r22 :r22zz)R00$jj)95AA J w  fjj);UCCL  M0!4 6 6 6!!9%!-%%ZZ ++     < <69 !2 304 N, - < < < < < < < < < < < < < < <  C0!4 6 6 6H}MFFFFFFFFFFFFFFFFFFs2A22A69A6?#B..B25B2;O>2D0 O OD OD H3OM9- O9M= =OM= 4OO O remote_pathcontentctj|dd}t j|}|d|d|dddS) u&Write *content* to *remote_path* on the remote environment. Uses ``echo … | base64 -d`` rather than stdin piping because some backends (Modal) don't reliably deliver stdin_data to chained commands. Base64 output is shell-safe ([A-Za-z0-9+/=]) so single quotes are fine. utf-8asciiecho '' | base64 -d > /rrYN)base64 b64encoderer`shlexquoteexecute)rrrencodedquoted_remote_paths r_ship_file_to_remoters}w~~g6677>>wGGG[11KK>>>*<>> rrct|dd}t|r |}t|tr,|dr|dpdSn2#t $r%}td|Yd}~nd}~wwxYwtj }t|tr,|dr|dpdSdS)zAReturn a writable temp dir for env-backed execute_code sandboxes. get_temp_dirNrz/Could not resolve execute_code env temp dir: %s/tmp) getattrcallablerhru startswithrstriprsrtrwtempfile gettempdir)rrtemp_dirr candidates r _env_temp_dirr&s355L Q Q#|~~H(C(( 3X-@-@-E-E 3s++2s2 Q Q Q LLJC P P P P P P P P Q#%%I)S!!,i&:&:3&?&?,$$++ 6sA A.. B8BBrpc_dir stop_eventc  ddlm}d} tj|} |s |d| ddd} | d d } | s|| rtd | d D} | D]}|rntj }tj|}|d |dd} tj|d d }nR#tjt f$r9t"d||d|ddYwxYw|dd }|di}|dd}|d}|d|}tj|}||vr@dt|}tjdd|d|i}n|d|krtjdd|di}n|dkr5t+|t,r t.D]}||d t2jt2j}}t9t:jd} |t2_|t2_||||}||ct2_t2_|n2#||ct2_t2_|wxYwnP#t@$rC}t"!d |d!"tEtG|}Yd}~nd}~wwxYw|dxxd#z cc<tj |z } |$|tG|dd$tK| d%d&tMj'|(d')d(}!|d)|!d*|d+|d,|dd-|d|ddnH#t@$r;}"|st"d.|"d!"Yd}"~"nd}"~"wwxYw|s|| |dSdS)/zPoll the remote filesystem for tool call requests and dispatch them. Runs in a background thread. Each ``env.execute()`` spawns an independent process, so these calls run safely concurrent with the script-execution thread. rr>g?zls -1 z/req_* 2>/dev/null || truer routputrDcg|]g}|rQ|ds*d|vS|hS)z.tmpz/req_)r[endswith).0fs r z"_rpc_poll_loop..Xsq   7799  **622 qwwyy(( )((rr zcat zMalformed RPC request in %szrm -f r@rCrEseq06dz/res_rrFrGrHrIrJrNrKrLz&Tool call failed in remote sandbox: %sTrMrBrOrPrQrrrrz .tmp && mv z.tmp <zRPC poll error: %s)*rTr?rris_setrrfr[waitr!rZr\r]r^r_ra ValueErrorrtrwr(rgrhrirjrkrlrmrnrorprqrrrsrFrcrur%rvrrrer`)#rrr8r9r:r;r<rr? poll_intervalquoted_rpc_dir ls_resultr req_filesreq_filer~quoted_req_file read_resultrr,rrseq_strres_filequoted_res_filer tool_resultrrrrqrrencoded_resultrs# r_rpc_poll_loopr6s 100000M[))N!!v+r E CCCC$I ]]8R006688F  ...  #)<<#5#5   I&[ L[ L$$&&E!^-- "'+h"7"7!kk,?,,* "j2)F)FGGGG,j9LL!>IIIKK : : :QKOOOH  $KK33 #KK33 kk%++ ,,%55G55"'+h"7"7M11 $ &*?*? @ @I"&*6Y66*366.##KK'q)^;;"&*LLLL.##KK!J..:i3N3N.%=77E%MM%6666;58Zl "&rz3"7"7,)0CJ)0CJ*>*> )9g+++K6B<2CJ #MMOOOO6B<2CJ #MMOOOOO$;;; %M%(4%999&0S&:&: ; &a(((A-((($(N$4$4z$AM!(( )(+Iss(;$)-$;$;**"(!1&&w//""&// F^FF_FF-FF4CFF  6_66C KKKK E E E$$&& E 11t DDD E  "" + OOM * * *m!!v+v+v+v+v+sARB R(ERA FRFD R2M&L%7.M%/MMR N%"9N R N%%C R S 1SS codec  t}|dt}|dt}|rt |n t }t t |z}|st }|pd}t|\} } tj j dd} t| } | d| } tj | }tj | d}g}dg}tj}t!j}d} | d d d }d |ddvrt'jdd| dddd|||d | d|d d S#t,$rt.d| YSwxYw| d|d d t3t5|d}t7| | d|t7| | d|t!jt:| | d||||||fd}|d tj | dd!}t?j d"d!}|r|d#|z }t."d$| |dd%| d&|d'|d(|}|dd}|d)d*}d+}|d,krd}n|d-krd.}n#t,$r}tGtj|z d/}t.$d0||dtK|j&|d1t'jdtO||d|dd23cYd}~|||d | d|d d S#t,$rt.d| YSwxYwd}~wwxYw|||d | d|d d n#t,$rt.d| Yn|wxYw#|||d | d|d d w#t,$rt.d| YwwxYwxYwtGtj|z d/}tQ|tRkrtUtRd4z}tR|z } |d|}!|| d}"tQ|tQ|!z tQ|"z }#|!d5|#d6d7tQ|d6d8z|"z}dd9l+m,}$|$|}dd:l-m.}%|%|}|||d|d;}&|dkrEd<|d=}'|'|&d<|r |d>|'z|&d<nd?|'|&d<t./d@|||dn"|d.kr |dAz|&d<n|dkr d|&dB<dC||&d<t'j|&d23S)DaRun a script on the remote terminal backend via file-based RPC. The script and the generated hermes_tools.py module are shipped to the remote environment, and tool calls are proxied through a polling thread that communicates via request/response files. rYr;defaultN z /hermes_exec_z/rpcrz-command -v python3 >/dev/null 2>&1 && echo OKrrOKrrDrFz!Python 3 is not available in the zO terminal environment. Install Python to use execute_code with remote backends.statusrFtool_calls_madeduration_secondsr@rYzrm -rf z$Failed to clean up remote sandbox %sz mkdir -p rr)rz/hermes_tools.pyz /script.pyTtargetrEdaemonzHERMES_RPC_DIR=z PYTHONDONTWRITEBYTECODE=1HERMES_TIMEZONEz TZ=z)Executing code on %s backend (task %s)...rzcd z && z python3 script.py returncodesuccess| interruptedrPz?execute_code remote failed after %ss with %d tool calls: %s: %srMF ensure_ascii皙? ... [OUTPUT TRUNCATED - , chars omitted out of total] ...  strip_ansiredact_sensitive_textrrrrScript timed out after s and was killed. ⏰ ⏰ zHexecute_code (remote) timed out after %ss (limit %ss) with %d tool calls4 [execution interrupted — user sent a new message]rScript exited with code )0 _load_configrfDEFAULT_TIMEOUTDEFAULT_MAX_TOOL_CALLSr# frozensetr"ruuiduuid4hexrrrr\r]rEventrr^rgr(rsrtrwr2listrThreadrstartrpgetenvr[rrvrFtype__name__rulenMAX_STDOUT_BYTESinttools.ansi_stripr agent.redactrwarning)(rr8r_cfgrYr; session_tools sandbox_toolsrrr sandbox_idr sandbox_dirquoted_sandbox_dirrr9r: exec_startr rpc_threadpy_check tools_src env_prefixtz script_result stdout_text exit_coderrrS head_bytes tail_bytesheadtailomittedrrr timeout_msgs( r_execute_remoterNs >>Dhhy/22GXX.0FGGN*7BC &&&SUUM3mCDDM .- ,9&'899MC!#2#&JS!!H88J88K[11[K!5!5!566NM!!J""JJ_N;; ;R   x||Hb11 1 1:!''''$%$%    \   ! OOAO & & & N KK.,..C      N N N LL? M M M M M NW ( ( (c2    1   6    S["B"B"BINNNS["<"<"*>*>?? ) ) ) Y(" - - 3 3 5 5  & +++ %J  ?0!4 6 6 6 H$ H H* H H H$  $''"55 !%%lB77    FF #  "F    ))J6:: M '*DII,>    zXX03 (            ! OOAO & & & N KK.,..C      N N N LL? M M M M M N3    ! OOAO & & & N KK.,..C      N N N LL? M M M M M N   ! OOAO & & & N KK.,..C      N N N LL? M M M M M NT^%% 2A66H  ;***)C/00 % 2 ;J;'J;<<(k""SYY.T: :WG::+&& 9::: :  ,+++++*[))K322222'' 44K,Q/$ FJJJJ %w  4*-E -E-EEF8  3k33F8  V g03     = Q Q x a"x@Y@@w :f5 1 1 11s)A M"F>>%G&%G&)E)MS Q&B Q!(Q&)SP66%QQ!Q&&SR22%SS-U T'&U'%U UUUc JCtstjddiS|r|st dSddlm}|d}|dkrt|||Sddlm }t}| d t}| d t}|rt|n t} tt | z} | st } t#jd } t&jd krdnt#j} t,j| dt3jjd} g}dg}t9j}d} t=t?| }tAt,j| dd5}|!|dddn #1swxYwYtAt,j| dd5}|!|dddn #1swxYwYtEj"tDj#tDj$}|%| t-j&| d|'dtQj)tT|||||| fd}|+d}d} ddl,m-}n#t\$rd}YnwxYwi}t,j/0D]R\C}|Cr||C<tcCfd|Dr2tcCfd|Dr||C<S| |d<d |d!<t,j2t,j2t,j3th}| d"d#}| |g}|r|5|t,j6||d"<t-j7d$d#}|r||d%<|8d$ddd&l9m:}|}|r||d'<tw} ty| }!t{| | }"t,j| d}#t}j?|!|#g|"|t|j@t|j@t|jAtrdn t,jC(}$t9j|z}%g}&ttd)z}'t|'z }(d*})dg}*d+}+g},g}-tQj)|+|$jF|,|-|'|(|*fd}.tQj)|)|$jG|&tfd}/|.+|/+d,}0t9j|d-}1|$I|rt|$d.}0nwt9j|%krt|$d/d }0nL dd0lKmL}2|2|1d1n#t\$rYnwxYwt9jMd2|$I|.d34|/d34d5|,Nd6d78}3d5|-Nd6d78}4d5|&Nd6d78}5|*d}6|6tkr8|4r6|6t|3z t|4z }7d9|7d:d;|6d:d<}8|3|8z|4z}9n|3|4z}9|$jP|$jPnd=}:tt9j|z d>};|Rd}|d34dd?lSmT}<|<|9}9|<|5}5dd@lUmV}=|=|9}9|=|5}5|0|9|d|;dA}>|0d krEdB|dC}?|?|>d<|9r |9dD|?z|>dE<ndF|?|>dE<tXdG|;||dn1|0d.kr |9dHz|>dE<n"|:dkrd|>dI<|5pdJ|:|>d<|5r |9dKz|5z|>dE<tj|>dLM|H |Rn2#t$r%}@tZdN|@Yd}@~@nd}@~@wwxYwddl[}A|A\| dO t-j]| S#t$rYSwxYw#t\$r}Btt9j|z d>};t^dP|;|dt|Bj`|BdQtjdt|B|d|;dRdLMcYd}B~B|H |Rn2#t$r%}@tZdN|@Yd}@~@nd}@~@wwxYwddl[}A|A\| dO t-j]| S#t$rYSwxYwd}B~BwwxYw#|H |Rn2#t$r%}@tZdN|@Yd}@~@nd}@~@wwxYwddl[}A|A\| dO t-j]| w#t$rYwwxYwxYw)SaB Run a Python script in a sandboxed child process with RPC access to a subset of Hermes tools. Dispatches to the local (UDS) or remote (file-based RPC) path depending on the configured terminal backend. Args: code: Python source code to execute. task_id: Session task ID for tool isolation (terminal env, etc.). enabled_tools: Tool names enabled in the current session. The sandbox gets the intersection with SANDBOX_ALLOWED_TOOLS. Returns: JSON string with execution results. rFzHexecute_code is not available on Windows. Use normal tool calls instead.zNo code provided.r)rrr)is_interruptedrYr;hermes_sandbox_)prefixdarwinr hermes_rpc_z.sockNzhermes_tools.pyrKz script.pyirBTr )PATHHOMEUSERLANGLC_TERMTMPDIRTMPTEMPSHELLLOGNAMEXDG_ PYTHONPATH VIRTUAL_ENVCONDAHERMES_)KEYTOKENSECRETPASSWORD CREDENTIALPASSWDAUTH)is_env_passthroughcdS)NFr)rzs rzexecute_code..src3DK|]}|vVdSN)upper)rsks r zexecute_code..s/>>a1 >>>>>>>rc3BK|]}|VdSrp)r)rprss rrtzexecute_code..s-??q1<<????????rHERMES_RPC_SOCKET1PYTHONDONTWRITEBYTECODErarDr TZ)get_subprocess_homerV)rrrmrnstdin preexec_fnrc*d} |d}|sdS||kr"||z }||d||t|z }T#ttf$r(}t d|dYd}~dSd}~wwxYw)z)Simple head-only drain (used for stderr).rTNz Error reading process output: %srM)readr%r3rrxrtrw)pipechunks max_bytestotaldatakeeprs r_drainzexecute_code.._drain<sE S'99T??Dy(((50 d5D5k222SYY&E'( S S S ?T RRRRRRRRR SsA;AB*B  Bc\d}ddlm}|}d} |d} | sn|dxxt| z cc<||krOt t| ||z } || d| || z }| | d} | s|| | t| z } | |kr0|r.|} | t| z} | |kr|.n#ttf$rYnwxYw| |dS)z-Drain stdout keeping both head and tail data.r)dequeTrN) collectionsrrr3minr%popleftrrxextend) r head_chunks tail_chunksrHrI total_refhead_collectedrtail_buftail_collectedrroldests r_drain_head_tailz&execute_code.._drain_head_tailMs~N ) ) ) ) ) )uwwHN 699T??DaLLLCII-LLL% 22"3t99j>.IJJ#**4;777&$.#DEE{#%$OOD)))"c$ii/N(:55(5!)!1!1!3!3&#f++5):55(5#6"(       x ( ( ( ( (sC)DDDr) last_touchr/r)escalate)touch_activity_if_duezexecute_code runningg?rrrreplace)errorsrrrrrrPrrrrr r!rr"z?execute_code timed out after %ss (limit %ss) with %d tool callsr#rr$z --- stderr --- FrzServer socket close error: %s) ignore_errorsz8execute_code failed after %ss with %d tool calls: %s: %srMr)brr^rgr[rcrrrNtools.interruptrPr%rfr&r'r#r(r"rmkdtemprlplatformrrppathr(r)r*r+r\r]r2r-rowriterXAF_UNIX SOCK_STREAMbindchmodlistenrr.rr/tools.env_passthroughrlrsenvironitemsanydirnameabspath__file__r%pathsepr0rkhermes_constantsr{_get_execution_mode_resolve_child_python_resolve_child_cwd subprocessPopenPIPEDEVNULL _IS_WINDOWSsetsidr5r4rmrnMAX_STDERR_BYTESpoll_kill_process_grouptools.environments.basersleepr`r3r rvrrr6rr7rrtr8rxrwshutilrmtreeunlinkrFr1r2ru)Drr8rrr_is_interruptedr9rYr;r:r;tmpdir _sock_tmpdir sock_pathr9r:r?r7rBrr@_SAFE_ENV_PREFIXES_SECRET_SUBSTRINGS_is_passthrough child_envv _hermes_root _existing_pp _pp_parts_tz_namer{ _profile_home_mode _child_python _child_cwd _script_pathprocdeadline stderr_chunks_STDOUT_HEAD_BYTES_STDOUT_TAIL_BYTESrstdout_total_bytesrstdout_head_chunksstdout_tail_chunks stdout_reader stderr_readerr_activity_stater stdout_head stdout_tail stderr_text total_stdoutrLtruncated_noticerFrGrSrrrrMrrrrssD @r execute_coders *  z _     /tzz||/-...433333  ,H7tWm<<< BAAAAA >>Dhhy/22GXX.0FGGN+8BC &&&SUUM3mCDDM .-  %6 7 7 7F!\X55668;N;P;PL \+P9I+P+P+PQQIM!!JKt1m1D1DEE "',,v'8993 ? ? 1 GGI                  "',,v{33S 9 9 Q GGDMMM               mFNF4FGG ### E"""1%#Wm!>=     )0 . S S S S S S S . . .-oOOO . J$$&& ! !DAqq!!  ! >>>>+=>>>>> ????,>????? ! ! )2 %&/2 +, wrwrwx7P7P'Q'QRR  }}\266 \*  +   \ * * *"$*//)"<"< , 9.3399;;  '&IdO '... 988888++--  . -If $%%-e44 'v66 w||FK88  L )??$*9tt    >##g- !!1C!788-0BB S S S S ) ) )@$&#%!(#+13E$&8:LN    "(m=M NW[    .**  iikk!   #D)))&~(**#D48888" IIIIII%%o7MNNNN     JsOOO!iikk!& 1%%%1%%%hh12299')9TT hh12299')9TT hh}--44WY4OO *!, * * *{ *"S%5%55K8H8HHG:wI::&9::: &(88;FKK% 3K'+'BDOO ))J6::  """ 0///// j--  j-- 766666++K88 ++K88 !03 ( " "  Y  NGNNNK)F7O  8#.1IK1I1I#Ix  #7+#7#7x NNQ'#4Q#7    } $ $*-ddF8   !^^&F8 )S-S -S-SF7O T#.1E#E #Sx z&u555*  " A!!#### A A A Le* Le*LMe*$Y76e*7 Ze*ZIe*"c77 d&d!!d&e e'&e'* j5B j>j?jh i %ii )i>> j  j jjl"j/.l"/ k9kl"kl"=ll" ll"ll"Frc tr|n6tjtj|jt jn#ttf$rq}t d|d | n4#t$r'}t d|dYd}~nd}~wwxYwYd}~nd}~wwxYw|r |ddS#tj$r tr| n9tjtj|jt jYdSYdS#ttf$rz}t d|d | n4#t$r'}t d|dYd}~nd}~wwxYwYd}~YdSYd}~YdSd}~wwxYwwxYwdS) z,Kill the child and its entire process group.z Could not kill process group: %sTrMzCould not kill process: %sNr@rz-Could not kill process group with SIGKILL: %s)r terminaterpkillpggetpgidpidsignalSIGTERMProcessLookupErrorPermissionErrorrtrwkillrsrrTimeoutExpiredSIGKILL)rrre2s rrrs] J  < NN     Ibj**FN ; ; ;  0JJJ 7T JJJ J IIKKKK J J J LL5rDL I I I I I I I I J JR R IIaI ( R R R RDIIKKKKIbj22FNCCCCCC KK'8 R R R LaZ^ ___RIIKKKK RRRLL!=rDLQQQQQQQQR KKKKKKQQQQQQQ  R R RRsAAC&CBC C #CCC  CCC66G-AEG)/G$ F"!G$" G,G G$GG$G-G-$G))G-c` ddlm}|diS#t$ricYSwxYw)z8Load code_execution config from CLI_CONFIG if available.r CLI_CONFIGcode_execution)clirrfrsrs rr%r%sR""""""~~.333  s  --)projectstrictrc$ttdt}|t vr|Std|t ttS)uReturn the active execute_code mode — 'project' or 'strict'. Reads ``code_execution.mode`` from config.yaml; invalid values fall back to ``DEFAULT_EXECUTION_MODE`` ('project') with a log warning. Mode semantics: - ``project`` (default): scripts run in the session's working directory with the active virtual environment's python, so project dependencies (pandas, torch, project packages) and files resolve naturally. - ``strict``: scripts run in an isolated temp directory with ``sys.executable`` (hermes-agent's python). Reproducible and the interpreter is guaranteed to work, but project deps and relative paths won't resolve. Env scrubbing and tool whitelist apply identically in both modes. modezHIgnoring code_execution.mode=%r (expected one of %s), falling back to %r) rur%rfDEFAULT_EXECUTION_MODEr[lowerEXECUTION_MODESrtr8) cfg_values rrr2sx"LNN&&v/EFFGGMMOOUUWWIO## NNR?$: "!r )maxsize python_pathc tj|ddgdd}|jdkS#ttjtjf$rYdSwxYw)zCheck whether a candidate Python interpreter is usable for execute_code. Requires Python 3.8+ (f-strings and stdlib modules the RPC stubs need). Cached so we don't fork a subprocess on every execute_code call. z-cz= (3, 8) else 1)r@T)rYcapture_outputrF)rrunr rxrSubprocessError)rrs r_is_usable_pythonrMsp  $ K M      A%% Z. 0J Kuus$'!A  A rc.|dkr tjStrd}d}nd}d}dD]}tj|d}|s7|D]}|D]}tj|||}tj |rtj |tj sbt|r|cccStd||tjcccStjS) uPick the Python interpreter for the execute_code subprocess. In ``strict`` mode, always ``sys.executable`` — guaranteed to work and keeps behavior fully reproducible across sessions. In ``project`` mode, prefer the user's active virtualenv/conda env's python so ``import pandas`` etc. work. Falls back to ``sys.executable`` if no venv is detected, the candidate binary is missing/not executable, or it fails a Python 3.8+ version check. r)z python.exez python3.exe)Scripts)pythonpython3)bin)rb CONDA_PREFIXrDz\execute_code: skipping %s=%s (Python version < 3.8 or broken). Using sys.executable instead.)rl executablerrprrfr[rr(isfileaccessX_OKrrtr)r exe_namessubdirsvarrootsubdirexers rrr`sM y~1 ) .&&z~~c2&&,,..   & &F & &GLLvs;; y11bi 276S6S$Y//%$$$$$$$$ 458)~%%%%%%% & & >r staging_dircf|dkr|Stjdd}|r@tj|}tj|r|Stj}tj|r|S|S)aResolve the working directory for the execute_code subprocess. - ``strict``: the staging tmpdir (today's behavior). - ``project``: the session's TERMINAL_CWD (same as the terminal tool), or ``os.getcwd()`` if TERMINAL_CWD is unset or doesn't point at a real dir. Falls back to the staging tmpdir as a last resort so we never invoke Popen with a nonexistent cwd. r TERMINAL_CWDrD)rprrfr[r expanduserisdirgetcwd)rrrawexpandedheres rrrs y *.. , , 2 2 4 4C 7%%c** 7== " " O 9;;D w}}T r))r zv web_search(query: str, limit: int = 5) -> dict Returns {"data": {"web": [{"url", "title", "description"}, ...]}})r z web_extract(urls: list[str]) -> dict Returns {"results": [{"url", "title", "content", "error"}, ...]} where content is markdown)r z read_file(path: str, offset: int = 1, limit: int = 500) -> dict Lines are 1-indexed. Returns {"content": "...", "total_lines": N})r zT write_file(path: str, content: str) -> dict Always overwrites the entire file.)r z search_files(pattern: str, target="content", path=".", file_glob=None, limit=50) -> dict target: "content" (search inside files) or "files" (find files by name). Returns {"matches": [...]})rz patch(path: str, old_string: str, new_string: str, replace_all: bool = False) -> dict Replaces old_string with new_string in the file.)rz terminal(command: str, timeout=None, workdir=None) -> dict Foreground only (no background/pty). Returns {"output": "...", "exit_code": N}enabled_sandbox_toolscZt|t}dfdtD}fddD}|st dd}|rd|dz}nd }|d krd }nd }d |d|d}d|dddd|ddidgddS)u}Build the execute_code schema with description listing only enabled tools. When tools are disabled via ``hermes tools`` (e.g. web is turned off), the schema description should NOT mention web_search / web_extract — otherwise the model thinks they are available and keeps trying to use them. ``mode`` controls the working-directory sentence in the description: - ``'strict'``: scripts run in a temp dir (not the session's CWD) - ``'project'`` (default): scripts run in the session's CWD with the active venv's python If ``mode`` is None, the current ``code_execution.mode`` config is read. Nr c3*K|] \}}|v |VdSrpr)rnamer/rs rrtz,build_execute_code_schema..s;c8M0M0M0M0M0M0Mrcg|]}|v| Srr)rnrs rrz-build_execute_code_schema..s$[[[QEZ@Z@Zq@Z@Z@Zr)r rrPrz, ...z...ruScripts run in their own temp dir, not the session's CWD — use absolute paths (os.path.expanduser('~/.hermes/.env')) or terminal()/read_file() for user files.zScripts run in the session's working directory with the active venv's python, so project deps (pandas, etc.) and relative paths work like in terminal().a,Run a Python script that can call Hermes tools programmatically. Use this when you need 3+ tool calls with processing logic between them, need to filter/reduce large tool outputs before they enter your context, need conditional branching (if X then Y else Z), or need to loop (fetch N pages, process N files, retry on failure). Use normal tool calls instead when: single tool call with no processing, you need to see the full result and apply complex reasoning, or the task requires interactive user input. Available via `from hermes_tools import ...`: z Limits: 5-minute timeout, 50KB stdout cap, max 50 tool calls per script. terminal() is foreground-only (no background or pty). u Print your final result to stdout. Use Python stdlib (json, re, math, csv, datetime, collections, etc.) for processing between tool calls. Also available (no import needed — built into hermes_tools): json_parse(text: str) — json.loads with strict=False; use for terminal() output with control chars shell_quote(s: str) — shlex.quote(); use when interpolating dynamic strings into shell commands retry(fn, max_attempts=3, delay=2) — retry with exponential backoff for transient failuresrobjectrstringzDPython code to execute. Import tools with `from hermes_tools import z(` and print your final result to stdout.)r1 description)r1 propertiesrequired)r"r' parameters)r"rr(_TOOL_DOC_LINESr!)rr tool_linesimport_examples import_strcwd_noter's` rbuild_execute_code_schemar0sp$ 5 |"$$,J \[[["<[[[O < !677;YY//'9   x _   Y   i  i i  i i i."$A5?AAA       r)registryrcrrc t|dd|d|dS)NrrDr8r)rr8r)rrf)rEkws rrnrn%sD| XXfb ! !y!!ff_-- / / /ru🐍i)r"toolsetschemahandlercheck_fnemojimax_result_size_chars)r)NN)F)F__doc__r functoolsr^loggingrprrrrXrrlrrr\r)systemrtypingrrrr getLoggerr2rtrr(r"r&r'r4rboolrr$rur2_COMMON_HELPERSr'r&rjr-r5rrrrr,rrNrrrir%rrr lru_cacherrrr+r#r0EXECUTE_CODE_SCHEMAtools.registryr1rcregisterrrrrFs:      ho9, ,,,,,,,,,,,,  8 $ $LG+" ###D      K++ ^38 . .S .,/ .