iUdZddlZddlZddlZddlZddlZddlmZddlm Z ddl m Z ddl m Z ejeZejejejhZdZdaedzed<d efd Zd Zehd Zd ed efdZdZ ddhZ!d ed edzfdZ"de#d efdZ$ej%Z&iZ'e(ed<ej%Z)iZ*e(ed<dpded e fdZ+dqdefdZ,drdedededed ef d Z-dqdefd!Z.dpdefd"Z/d eded dfd#Z0d eded edzfd$Z1dpded%eded efd&Z2 dsd)eded*ed+ed,ed-eded efd.Z3 dtd1ed2eded3ededed4ed5eded efd6Z4dd7l5m6Z6m7Z7d8Z8d9d:d;dd?d@dddAd?dBddCdDdEdgdFdGZ9dHdId;dddLdd%gdFdGZ:d-dMd;ddddSdTd(dUddWd)gdFdGZ;dXdYd;ddd?d_d0dUd?d`ddUddgZ?dhZ@e6jAd9die9e=e8djeBdkle6jAdHdie:e>e8dmdle6jAd-die;e?e8dndle6jAdXdie /dev/tty /dev/fd/0 /dev/fd/1 /dev/fd/2 /dev/full /dev/zero /dev/stdin /dev/random /dev/stderr /dev/stdout /dev/console /dev/urandomfilepathctj|}|tvrdS|dr|drdSdS)uGReturn True if the path would hang the process (infinite output or blocking input). Uses the *literal* path — no symlink resolution — because the model specifies paths directly and realpath follows symlinks all the way through (e.g. /dev/stdin → /proc/self/fd/0 → /dev/pts/0), defeating the check. Tz/proc/)z/fd/0z/fd/1z/fd/2F)ospath expanduser_BLOCKED_DEVICE_PATHS startswithendswith)r# normalizeds r_is_blocked_devicer,Jsf##H--J***tX&&:+>+>#,,t 5)z/etc/z/boot/z/usr/lib/systemd/z /private/etc/z /private/var/z/var/run/docker.sockz/run/docker.sockc tjtj|}n#tt f$r|}YnwxYwtjtj|}d|d}tD]0}||s||r|cS1|tvs |tvr|SdS)zHReturn an error message if the path targets a sensitive system location.z,Refusing to write to sensitive system path: zD Use the terminal tool with sudo if you need to modify system files.N) r%r&realpathr'OSError ValueErrornormpath_SENSITIVE_PATH_PREFIXESr)_SENSITIVE_EXACT_PATHS)r#resolvedr+_errprefixs r_check_sensitive_pathr8fs7##BG$6$6x$@$@AA Z !!"'"4"4X">">??J Nx N N N +   v & & **?*?*G*G KKK )))Z;Q-Q-Q 4sysB#''t#wCI1G$G$Gt 5r-_file_ops_cache _read_trackerdefaulttask_idcxddlm}m}m}m}m}m}m}m}ddl } t5t |} dddn #1swxYwY| }|5||vr%| ||<| cdddSt5t |ddddn #1swxYwYdddn #1swxYwY|5||vrtj||<||} dddn #1swxYwY| 5|5||vr | ||<||} nd} dddn #1swxYwY| ddlm} |}|d}| |i}|dkr| dp|d}nn|dkr| d p|d }nJ|d kr| d p|d }n&|d kr| d p|d }nd}| dp|d}t"d||ddd}|dvrl| dd| dd| dd| dd| dgd}d}|dkrl| dd| dd| d d!| d"d| d#d$d%}d}|d&krd'| d(d$i}|||||d)||||| d*+ } |5| ||<| ||<dddn #1swxYwY|t"d,||dddddn #1swxYwYt'| }t5|t|<dddn #1swxYwY|S)-aGet or create ShellFileOperations for a terminal environment. Respects the TERMINAL_ENV setting -- if the task_id doesn't have an environment yet, creates one using the configured backend (local, docker, modal, etc.) rather than always defaulting to local. Thread-safe: uses the same per-task creation locks as terminal_tool to prevent duplicate sandbox creation from concurrent tool calls. r)_active_environments _env_lock_create_environment_get_env_config_last_activity_start_cleanup_thread_creation_locks_creation_locks_lockN)_task_env_overridesenv_typedocker docker_image singularitysingularity_imagemodal modal_imagedaytona daytona_imagecwdz*Creating new %s environment for task %s...)rNrPrRrT container_cpucontainer_memoryicontainer_diskicontainer_persistentTdocker_volumes)rYr[r\r]r^sshssh_hostssh_userssh_portssh_keyssh_persistentF)hostuserportkey persistentlocalrjlocal_persistenttimeouthost_cwd) rMimagerWrm ssh_configcontainer_config local_configrBrnz %s environment ready for task %s)tools.terminal_toolrDrErFrGrHrIrJrKtime_file_ops_lockr?r pop threadingLockrLloggerinfor)rBrDrErFrGrHrIrJrKrtcached task_lock terminal_envrLconfigrM overridesrorWrqrprrfile_opss r _get_file_opsrs9 KKK .. $$W--...............   7 7...*.))++w' 7 7 7 7 7 7 7 7 $77#''666777777777777777  7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 -- / ) )'0~'7'7OG $#G, --------------- ISIS  $ $...*.))++w'3G< #  $ $ $ $ $ $ $ $ $ $ $ $ $ $ $   ? ? ? ? ? ?$_&&Fj)H+//<YW$$! m44M}8MY&&! o66Q&:Q--&&7&-C KKDhPWXZYZXZP[ \ \ \# HHH%+ZZ%C%C(. 3Et(L(L&,jj1A5&I&I,2JJ7Mt,T,T&,jj1A2&F&F $$ J5  "JJz266"JJz266"JJz266!::i44"(**-=u"E"E   L7"" &**-?"G"G  /.!y)%!1)J//   L 6 60<$W-*.))++w' 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 " ! # # # KK:Hgbqbk R R RSISISISISISISISISISISISISISISISX#<00H ,,#+ ,,,,,,,,,,,,,,, OsAA A CCB/# C/B3 3C6B3 7CC  C #DD DO7'E9 O7E O7 E HO; P//P36P3ct5|rt|dntddddS#1swxYwYdS)z Clear the file operations cache.N)rur?rvclear)rBs rclear_file_ops_cachers $$  $    . . . .  ! ! # # # $$$$$$$$$$$$$$$$$$s8A  AArZr&offsetlimitc  t|rtjdd|diSt|}t t|r6|j }tjdd|d|diSddl m }|}|d z d z d z |d z d z g}|D]C} | | tjdd |d icS#t$rY@wxYwt|} | ||f} t5t|ddt#id} | di| } dddn #1swxYwY| Q t&j| }|| krtjd|dddSn#t,$rYnwxYwt/|}||||}|}t5|jpd}|dd}t9}||kr=|dd}tjd|dd|dd|d|||ddS|jr#t;|j|_|j|d <|rA|t<kr6|d!kr0|d"r|d#d$|dd%d&|||f}t5d| vri| d<| d'|||f| d(|kr| d)xxd*z cc<n || d(<d*| d)<| d)} t&j| }|| d| <|| d+i| <n#t,$rYnwxYwdddn #1swxYwY|d,krtjd-|d.||d/dS|d0kr d1|d2|d3<tj|dS#t@$r&}tCt|cYd}~Sd}~wwxYw)4z-Read a file with pagination and line numbers.errorz Cannot read 'zE': this is a device file that would block or produce infinite output.zCannot read binary file 'z' (zF). Use vision_analyze for images, or terminal to inspect binary files.r)get_hermes_homeskillsz.hubz index-cachezAccess denied: z is an internal Hermes cache file and cannot be read directly to prevent prompt injection. Use the skills_list or skill_view tools instead.N)last_key consecutive read_historydedupruFile unchanged since last read. The content from the earlier read_file result in this conversation is still current — refer to that instead of re-reading.T)contentr&rF ensure_asciirV file_size total_linesunknownzRead produced ,z, characters which exceeds the safety limit (zD chars). Use offset and limit to read a smaller range. The file has z lines total.)rr&rrr truncated_hintzThis file is large (zj bytes). Consider reading only the section you need with offset and limit to keep context usage efficient.readrrrrZread_timestampsz.BLOCKED: You have read this exact file region z| times in a row. The content has NOT changed. You already have this information. STOP re-reading and proceed with your task.)rr& already_readz%You have read this exact file region z times consecutively. The content has not changed since your last read. Use the information you already have. If you are stuck in a loop, stop reading and proceed with writing or responding._warning)"r,jsondumpsrr'resolverstrsuffixlowerhermes_constantsr relative_tor1_read_tracker_lockr@ setdefaultsetr r%r&getmtimer0r read_fileto_dictlenrrr_LARGE_FILE_HINT_BYTESaddr tool_error)r&rrrB _resolved_ext_get_hh _hermes_home _blocked_dirs_blocked resolved_str dedup_key task_data cached_mtime current_mtimerresult result_dict content_lenr max_charsrread_keycount _mtime_nowes rread_file_toolrse" d # # :8D888 JJ))++3355  I / / #))++D:ZZZZZZ  @?????wyy((** 8 #f ,} < 8 #f , &  H %%h///zK$KKK#    9~~ !651  E E%00  #;;I%=="5599)DDL  E E E E E E E E E E E E E E E  #  " 0 0 > >  L00:U!%!%''%*++++1    !))##D&%88nn&& &..B// OOK33 '))  " "%//-CCK:?[N??)2???%0??? *&  " # # # # > 426>BBFN%+^K "  )&<<<CKKOOK00  " "73y=333   D&%0   i''%' '" n % ) )4*? @ @ @$00-(((A-(((((0 *%+, -(m,E  W--l;; 0: '"9-LV $$%6;;LII    )               . A:::BUBBB %"### #aZZcccc  # z+E:::: """#a&&!!!!!!!!"s(QBQ09Q*.DQ D(%Q'D((QAF( Q(F,,Q/F,0Q6>G65Q6 HQHB9Q=A:Q7AO/AOO/ O O/O  O/# Q/O33Q6O37&Q$Q Q3 Q.(Q3.Q3c4t5|r;t|}|rd|vr|dn:tD] }d|vr|d!ddddS#1swxYwYdS)uClear the deduplication cache for file reads. Called after context compression — the original read content has been summarised away, so the model needs the full content if it reads the same file again. Without this, reads after compression would return a "file unchanged" stub pointing at content that no longer exists in context. Call with a task_id to clear just that task, or without to clear all. rN)rr@r rvaluesrBrs rreset_file_deduprs //  /%))'22I +W 11'"((****1133 / / i''g&,,...//////////////////sA8B  BBct5t|}|r d|d<d|d<ddddS#1swxYwYdS)uReset consecutive read/search counter for a task. Called by the tool dispatcher (model_tools.py) whenever a tool OTHER than read_file / search_files is executed. This ensures we only warn or block on *truly consecutive* repeated reads — if the agent does anything else in between (write, patch, terminal, etc.) the counter resets and the next read is treated as fresh. Nrrr)rr@r rs rnotify_other_tool_callrs ))!%%g..  )$(Ij !'(Im $ ))))))))))))))))))s'<AAc tt|}tj|}n#ttf$rYdSwxYwt5t |}||| di|<ddddS#1swxYwYdS)uRecord the file's current modification time after a successful write. Called after write_file and patch so that consecutive edits by the same task don't trigger false staleness warnings — each write refreshes the stored timestamp to match the file's new state. Nr) rrr'rr%r&rr0r1rr@r r)r#rBr5rrs r_update_read_timestamprs"tH~~0022::<<==((22 Z  RR!%%g..  DQI !2B 7 7 ARRRRRRRRRRRRRRRRRRs$AA""A76A76CC Cc" tt|}n#tt f$rYdSwxYwt 5t|}|s ddddS|di|}dddn #1swxYwY|dS tj |}n#t$rYdSwxYw||krd|dSdS)uCheck whether a file was modified since the agent last read it. Returns a warning string if the file is stale (mtime changed since the last read_file call for this task), or None if the file is fresh or was never read. Does not block — the write still proceeds. Nrz Warning: z was modified since you last read it (external edit or concurrent agent). The content you read may be stale. Consider re-reading the file to verify before writing.) rrr'rr0r1rr@r r%r&r)r#rBr5r read_mtimers r_check_file_stalenessrstH~~0022::<<== Z tt HH!%%g..  HHHHHHHH]]#4b99==hGG HHHHHHHHHHHHHHH t((22 tt "" L L L L 4s<AAAA"C )CC CC22 D?Drcrt|}|rt|S t||}t|}|||}|}|r||d<t ||tj|dS#t$r}t|r/t dt|j|n0tdt|j|dtt!|cYd}~Sd}~wwxYw) zWrite content to a file.rFrz"write_file expected denial: %s: %szwrite_file error: %s: %sT)exc_infoN)r8rrr write_filerrrrrr>rydebugtype__name__rr) r&rrB sensitive_err stale_warningrrrrs rwrite_file_toolrs?)$//M)-((("-dG<<  ))$$T733nn&&  4&3K # tW---z+E:::: """ ' * * Y LL=tAww?OQR S S S S LL3T!WW5EqSWL X X X#a&&!!!!!!!! "sA5B D6"B D1+D61D6replaceFmode old_string new_string replace_allpatchcg}|r|||dkr_|r]ddl}|d||jD]<} || d=|D]$} t | } | rt| cS% g} |D])} t| |} | r| | *t|}|dkr=|stdS||tdS| ||||}n?|dkr'|std S| |}ntd |S| }| r3t| dkr| dnd | |d <|d s|D]} t!| |t#j|d}|d rdt'|d vr|dz }|S#t($r&}tt'|cYd}~Sd}~wwxYw)z4Patch a file using replace mode or V4A patch format.rrNz/^\*\*\*\s+(?:Update|Add|Delete)\s+File:\s*(.+)$rZrz path requiredz"old_string and new_string requiredzpatch content requiredzUnknown mode: z | rrFrzCould not findzp [Hint: old_string not found. Use read_file to verify the current content, or search_files to locate the text.])appendrefinditer MULTILINEgroupstripr8rrr patch_replace patch_v4arrjoinr rrrrr)rr&rrrrrB_paths_to_check_re_m_prstale_warnings_swrrr result_jsonrs r patch_toolr5s O %t$$$ w5,,QSXZ]Zghh 8 8B  " "288A;;#4#4#6#6 7 7 7 7---b11  -m,, , , , -&"! + +B'G44C +%%c*** )) 9   3!/222!Z%7!"FGGG++D*j+VVFF W__ <!":;;;''..FF5t5566 6nn&&  t;>~;N;NRS;S;SnQ&7&7Y^YcYcdrYsYsK #w'' 4% 4 4&r73333j5AAA  ??7 # # P(8C G@T'H"&B;H"" I,I I I.2patterntarget file_glob output_modecontextc | d||t||pd||f} t5t|ddt d} | d| kr| dxxdz cc<n | | d<d| d<| d} dddn #1swxYwY| d krt jd | d || d d St|} | ||||||||} t| dr:| j D]2}t|dr |j rt|j |_ 3| }| dkr d| d|d<t j|d }|dr||z}|d|dz }|S#t$r&}t!t|cYd}~Sd}~wwxYw)zSearch for content or files.searchrVNr)rrrrrrZrz(BLOCKED: You have run this exact search z times in a row. The results have NOT changed. You already have this information. STOP re-searching and proceed with your task.)rralready_searchedFr)rr&rrrrrrmatchesrrzYou have run this exact search zY times consecutively. The results have not changed. Use the information you already have.rrz' [Hint: Results truncated. Use offset=zC to see more, or narrow with a more specific pattern or file_glob.])rrr@rrrrrrhasattrrrrrr rr)rrr&rrrrrrB search_keyrrrrmrr next_offsetrs r search_toolrns <"    II O    - -%00 CEE;;I$ 22-(((A-(((((2 *%+, -(m,E - - - - - - - - - - - - - - - A:::DuDDD#$)"### #!))$vK!   69 % % A^ A A1i((AQYA 5ai @ @AInn&& A::V%VVV  # j5AAA  ??; ' ' X 5.K X{XXX XK """#a&&!!!!!!!!"sHF AB< F B  F B &F 7CF F;F60F;6F;)registryrc"ddlm}|S)z=Lazy wrapper to avoid circular import with tools/__init__.py.rcheck_file_requirements)toolsrrs r_check_file_reqsrs#------ " " $ $$r-ruRead a text file with line numbers and pagination. Use this instead of cat/head/tail in terminal. Output format: 'LINE_NUM|CONTENT'. Suggests similar filenames if not found. Use offset and limit for large files. Reads exceeding ~100K characters are rejected; use offset and limit to read specific sections of large files. NOTE: Cannot read images or binary files — use vision_analyze for images.objectstringz8Path to the file to read (absolute, relative, or ~/path))r descriptionintegerz9Line number to start reading from (1-indexed, default: 1))rr rAminimumz9Maximum number of lines to read (default: 500, max: 2000)i)rr rAmaximum)r&rr)r propertiesrequired)namer  parametersruWrite content to a file, completely replacing existing content. Use this instead of echo/cat heredoc in terminal. Creates parent directories automatically. OVERWRITES the entire file — use 'patch' for targeted edits.zWPath to the file to write (will be created if it doesn't exist, overwritten if it does)z%Complete content to write to the file)r&raiTargeted find-and-replace edits in files. Use this instead of sed/awk in terminal. Uses fuzzy matching (9 strategies) so minor whitespace/indentation differences won't break it. Returns a unified diff. Auto-runs syntax checks after editing. Replace mode (default): find a unique string and replace it. Patch mode: apply V4A multi-file patches for bulk changes.zVEdit mode: 'replace' for targeted find-and-replace, 'patch' for V4A multi-file patches)renumr rAz/File path to edit (required for 'replace' mode)zText to find in the file (required for 'replace' mode). Must be unique in the file unless replace_all=true. Include enough surrounding context to ensure uniqueness.z_Replacement text (required for 'replace' mode). Can be empty string to delete the matched text.booleanzLReplace all occurrences instead of requiring a unique match (default: false))rr rAzV4A format patch content (required for 'patch' mode). Format: *** Begin Patch *** Update File: path/to/file @@ context hint @@ context line -removed line +added line *** End Patch)rr&rrrr search_filesuSearch file contents or find files by name. Use this instead of grep/rg/find/ls in terminal. Ripgrep-backed, faster than shell equivalents. Content search (target='content'): Regex search inside files. Output modes: full matches with line numbers, file paths only, or match counts. File search (target='files'): Find files by glob pattern (e.g., '*.py', '*config*'). Also use this instead of ls — results sorted by modification time.zPRegex pattern for content search, or glob pattern (e.g., '*.py') for file searchfileszK'content' searches inside file contents, 'files' searches for files by namezCDirectory or file to search in (default: current working directory)zOFilter files by pattern in grep mode (e.g., '*.py' to only search Python files)z1Maximum number of results to return (default: 50)z0Skip first N results for pagination (default: 0))r files_onlyrzOutput format for grep mode: 'content' shows matching lines with line numbers, 'files_only' lists file paths, 'count' shows match counts per filezDNumber of context lines before and after each match (grep mode only))rrr&rrrrrc |dpd}t|dd|dd|dd| S) NrBrAr&rVrrZrr)r&rrrB)r rargskwtids r_handle_read_filers_ &&   (yC txx33DHHXqU>U_b c c ccr-c D|dpd}t|dd|d|d|d|dd |d | S) NrBrArrr&rrrFr)rr&rrrrrB)r rrs r _handle_patchr  s &&   (yC  XXfi ( (txx/?/?88L))dhh|6L6LHH]E22$((7:K:KUX Z Z ZZr-c |dpd}ddd}|dd}|||}t|dd||d d |d |d d |dd|dd|dd| S)NrBrArr)grepfindrrrVr&rrrrrrrr) rrr&rrrrrrB)r r)rrr target_map raw_targetrs r_handle_search_filesr&s &&   (yC#W55J(I..J ^^J 3 3F B''TXXfc=R=R((;''txx/D/DTXXV^`aMbMbHH]I66TU@V@V`c e e eer-fileu📖inf)rtoolsetschemahandlercheck_fnemojimax_result_size_charsu✍️u🔧u🔎)rA)N)rZrrA)rNNNFNrA)rrNrrrrrA)C__doc__r<rloggingr%rwpathlibrtools.binary_extensionsrtools.file_operationsr agent.redactr getLoggerrryEACCESEPERMEROFSr=rrr__annotations__rr frozensetr(rboolr,r3r4r8rr>rxrur?dictrr@rrrrrrrrrrtools.registryrrrREAD_FILE_SCHEMAWRITE_FILE_SCHEMA PATCH_SCHEMASEARCH_FILES_SCHEMArrr r&registerrr-rrDsU<<<  888888555555......  8 $ $ , U[A"%)d )))"S""""0! " # # #  *12DECC$J&iD !!"$Y^%% tvv3v/Bvvvvr$$#$$$$g"g"g"cg"cg"#g"^ag"g"g"g"X//c////, ) )C ) ) ) ) RSR3R4RRRR$C##*>""#""c"#""""0KOOS'6"6"S6"C6"C6"6"486"IL6"6",/6"6"6"6"rDGFG=>(A"A"A"cA"SA"A".1A"@CA" A"7:A"A".1A"A"A"A"R0///////%%% c%6pqq(9tBCPQRR'8sADQUVV  H   p%7PQQ (9`aa  Y'    B% 7/CUmzCDD%6ghh#+=cdd#+=^__$-?MZ_``&8uvv   H   $ O (:LMM')W1EWdqz{{%6{ILMM"*Q[o{KSYqxyyyyyyr-