iH$ UdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl mZddlmZmZmZmZejeZddlmZmZddlmZddlmZmZmZm Z e!ej"dd Z#e$ej"d d Z%d Z&d a'e(e)d<da*da+dZ,dZ-ddl.m/Z0de(de(de1fdZ2ej3dZ4de(de(dzfdZ5de(de(de(fdZ6dde!de(fdZ7ddede!de(fd Z8d!e(de9fd"Z:de(d#e!de;e(e!ffd$Zdd'l?m@ZAdd(lmBZCdd)lDmEZFdd*lGmHZIdd+lJmKZLdd,lMmNZOdd-lPmQZQd.ZRiZSee(efe)d/<iZTee(e$fe)d0<e jUZViZWee(e jUfe)d1<e jUZXdaYd2aZiZ[ee(ee(effe)d3<d4e(d5ee(effd6Z\d4e(fd7Z]e!d8fd9e(d:e(d;e(fd<Z^dee(effd=Z_d>e`dzdee(effd?Za dde(d@e(dAe(dBe!dCe1dDe1dEe1d4e(dFe(fdGZbddIe!fdJZcdKZddLZedMZfd4e(fdNZgd4e(de9fdOZhdPZid4e(fdQZjdRZke jlekde(dSe!de(dzfdTZmde(de9fdUZn dde(dVe9dBee!d4ee(dWe9dee(dXe9dYe9dZeee(de(fd[Zode9fd\Zped]kr\eqd^eqd_e_Zreqd`eqdaerdeqdberdceqdderdeeqdferdAeqdgerdBdheqdierdIdhepseqdjesdkeqdleqdmeqdneqdoeqdpeqdqeqdreqdseqdteqdudvZteqdwej"dxdydzeqd{ej"d|eteqd}ej"d~deteqdej"deteqdej"deteqdej"dejuddlvmwZxeqdej"dexdeqdej"ddeqdej"ddddlymzZzdeRddddddd2dd8de#de#ddkddddddd2dddd2ddddiddddgddZ{dZ|ezjldde{e|epdddS)af Terminal Tool Module A terminal tool that executes commands in local, Docker, Modal, SSH, Singularity, and Daytona environments. Supports local execution, containerized backends, and Modal cloud sandboxes, including managed gateway mode. Environment Selection (via TERMINAL_ENV environment variable): - "local": Execute directly on the host machine (default, fastest) - "docker": Execute in Docker containers (isolated, requires Docker) - "modal": Execute in Modal cloud sandboxes (direct Modal or managed gateway) Features: - Multiple execution backends (local, docker, modal) - Background task support - VM/container lifecycle management - Automatic cleanup after inactivity Cloud sandbox note: - Persistent filesystems preserve working state across sandbox recreation - Persistent filesystems do NOT guarantee the same live sandbox or long-running processes survive cleanup, idle reaping, or Hermes exit Usage: from terminal_tool import terminal_tool # Execute a simple command result = terminal_tool("ls -la") # Execute in background result = terminal_tool("python server.py", background=True) N)Path)OptionalDictAnyList)is_interrupted_interrupt_event)_get_scratch_dir)coerce_modal_modehas_direct_modal_credentialsmanaged_nous_tools_enabledresolve_modal_backend_stateTERMINAL_MAX_FOREGROUND_TIMEOUT600TERMINAL_DISK_WARNING_GB500cd t}d}ddl}|t|dz D]}t|dD]g}|rQ ||jz }4#t$r&}t d||Yd}~_d}~wwxYwh|dz }|tkr#t d|tdSd S#t$r(}t d |d Yd}~d Sd}~wwxYw) z4Check if total disk usage exceeds warning threshold.rNhermes-**zCould not stat file %s: %si@z\Disk usage (%.1fGB) exceeds threshold (%.0fGB). Consider running cleanup_all_environments().TFz#Disk usage warning check failed: %sexc_info)r globstrrrglobis_filestatst_sizeOSErrorloggerdebugDISK_USAGE_WARNING_THRESHOLD_GBwarning Exception) scratch_dir total_bytesrpathfetotal_gbs ;/home/agentuser/.hermes/hermes-agent/tools/terminal_tool.py_check_disk_usage_warningr+Rs}&((   IIc+ ":;;<< I ID$ZZ%%c** I I99;;II#qvvxx'77 "III %A1aHHHHHHHHII I), 5 5 5 NNy#%D F F F4u  :A MMMuuuuusBA3C=6BC= CB>9C=>C6C== D/D**D/_cached_sudo_passwordc |adS)zs$ !'84F H H HHr3z^[A-Za-z0-9/\\:_\-.~ +@=,]+$workdirc|sdSt|s6|D]1}t|sdt|dcS2dSdS)zReject workdir values that don't look like a filesystem path. Uses an allowlist of safe characters rather than a deny-list, so novel shell metacharacters can't slip through. Returns None if safe, or an error message string if dangerous. Nz/Blocked: workdir contains disallowed character z<. Use a simple filesystem path without shell metacharacters.z0Blocked: workdir contains disallowed characters.)_WORKDIR_SAFE_REmatchrepr)r?chs r*_validate_workdirrEs t  ! !' * *B  B#))"-- Qd2hhQQQ  BA 4r3outputctjd}|s|Sgd}|D]}||vrddlm}|d|dzcS |S)z Check for sudo failure and add helpful message for messaging contexts. Returns enhanced output if sudo failed in messaging context, else original. HERMES_GATEWAY_SESSION)zsudo: a password is requiredzsudo: no tty presentzsudo: a terminal is requiredrdisplay_hermes_homeu@ 💡 Tip: To enable sudo over messaging, add SUDO_PASSWORD to z/.env on the agent machine.)osgetenvhermes_constantsrJ)rFr9 is_gateway sudo_failuresfailure_dhhs r*_handle_sudo_failurerRs 344J  M !EE f   D D D D D DEaeaeagagEEEE E E E  Mr3-timeout_secondscFddl}ddl}t" tpdS#t$rYdSwxYwdddfd} dtjd<|d ttd td td td tdtd|ddzdztdttdddtj |d}| | |dr~dpd}t|rtdntdt|j |dtjvrtjd=SStdtdt|j  dtjvrtjd=dSdS#ttf$rettdt|j Ydtjvrtjd=dSdSt$rT}td |d!|j Yd}~dtjvrtjd=dSdSd}~wwxYw#dtjvr tjd=wxYw)"a Prompt user for sudo password with timeout. Returns the password if entered, or empty string if: - User presses Enter without input (skip) - Timeout expires (45s default) - Any error occurs Only works in interactive mode (HERMES_INTERACTIVE=1). If a _sudo_password_callback is registered (by the CLI), delegates to it so the prompt integrates with prompt_toolkit's UI. Otherwise reads directly from /dev/tty with echo disabled. rNr,F)passworddonecd}d} tjdkr\ddl}g} |}|dvrn#|dkrt||.read_password_threads * "  I-- $ AL((F{{//LLOOO $&(WWU^^z""R[99#--f55 #--f55 (|w|m; ! !!&'*;YGGG$**A^ 3 3LLOOO $ &)XXe__%;%;GI%;%V%Vz"+W5 $ $ $!#F:    $ $ $!#F:    $!i&;Q....&&vx/A9MMMM QQQLL!LaPPPPPPPPQ!BHV$$$$ BBBLL!=qAAAAAAAAB!F6NNN!i&;Q....&&vx/A9MMMM QQQLL!LaPPPPPPPPQ!BHV$$$$ BBBLL!=qAAAAAAAAB!F6N ! ! ! !sEEH5F 6H58F H5F  H5 F22 G!<GG!'G<< H+H&&H+5K; IK J &JKJ  KJ&%K& K0K KK K1HERMES_SPINNER_PAUSEg?u┌──────────────────────────────────────────────────────────┐uA│ 🔐 SUDO PASSWORD REQUIRED │u├──────────────────────────────────────────────────────────┤u?│ Enter password below (input is hidden), or: │uA│ • Press Enter to skip (command fails gracefully) │u│ • Wait zs to auto-skipz u│u└──────────────────────────────────────────────────────────┘z Password (hidden): T)endflushtargetdaemontimeoutrWrVu1 ✓ Password received (cached for this session)u' ⏭ Skipped - continuing without sudou( ⏱ Timeout - continuing without sudoz (Press Enter to dismiss)u) ⏭ Cancelled - continuing without sudoz [sudo prompt error: z] - continuing without sudo )systimer/r#rKenvironsleepprint threadingThreadstartristdoutrrsrg)rTr time_moduler}password_threadrVr(r|s @r*_prompt_for_sudo_passwordrsJJJ* *,,2 2   22  . .F."."."."."`03-0 )*#  ())) CDDD ())) OPPP QRRR @@@@8KeSTTT ()))  %2T::::#*2FtTTT_555 &> j)/RH GGG AIJJJJ?@@@ GGG J     & "RZ / / 122 0# = > > > 0 1 1 1 GGG J      "RZ / / 1222 0 / ' (  9:::   "RZ / / 1222 0 /  IIIIJJJ rrr !RZ / / 1222 0 /  "RZ / / 12 2 2 2 2sJ" 00E.H. AH..ALL# L,,K;L;LLL limitc|dSt|tr |d|S t|d|S#t$rdt |jdcYSwxYw)z>Return a log-safe preview for possibly-invalid command values.Nz<>) isinstancerrCr#type__name__)r8rs r*_safe_command_previewrIsx'3vv-G}}VeV$$ ---,4==),,,,,,-s<"A! A!tokencd|vs|drdS|dd\}}ttjd|S)zCReturn True when *token* is a leading shell environment assignment.=Fr^z^[A-Za-z_][A-Za-z0-9_]*$) startswithsplitboolrerB)rname_values r*_looks_like_env_assignmentrTsW %5++C00u;;sA&&LD& 4d;; < <> " MM!M a a%%d 773<< r3c|dSt|\}}|s|dfSdtjv}|r tjddnt}|s*|s(tjdrt d}|r|a|s|r||dzfS|dfS) a[ Transform sudo commands to use -S flag if SUDO_PASSWORD is available. This is a shared helper used by all execution environments to provide consistent sudo handling across local, SSH, and container environments. Returns: (transformed_command, sudo_stdin) where: - transformed_command has every bare ``sudo`` replaced with ``sudo -S -p ''`` so sudo reads its password from stdin. - sudo_stdin is the password string with a trailing newline that the caller must prepend to the process's stdin stream. sudo -S reads exactly one line (the password) and passes the rest of stdin to the child command, so prepending is safe even when the caller also has its own stdin_data to pipe. - If no password is available, sudo_stdin is None and the command is returned unchanged so it fails gracefully with "sudo: a password is required". Callers that drive a subprocess directly (local, ssh, docker, singularity) should prepend sudo_stdin to their stdin_data and pass the merged bytes to Popen's stdin pipe. Callers that cannot pipe subprocess stdin (modal, daytona) must embed the password in the command string themselves; see their execute() methods for how they handle the non-None sudo_stdin case. If SUDO_PASSWORD is not set and in interactive mode (HERMES_INTERACTIVE=1): Prompts user for password with 45s timeout, caches for session. If SUDO_PASSWORD is not set and NOT interactive: Command runs as-is (fails gracefully with "sudo: a password is required"). N)NN SUDO_PASSWORDr,HERMES_INTERACTIVErS)rTr[)rrKrgetr-rLr)r8 transformed has_real_sudohas_configured_password sudo_passwords r*_transform_sudo_commandrsHz!?!H!HK }-;;RmBJNN?B777XmM "2=2RYG[=\=\21"EEE  2$1 !1-1MD000 D=r3)LocalEnvironment)SingularityEnvironment)SSHEnvironment)DockerEnvironment)ModalEnvironment)ManagedModalEnvironment)is_managed_tool_gateway_readyuExecute shell commands on a Linux environment. Filesystem usually persists between calls. Do NOT use cat/head/tail to read files — use read_file instead. Do NOT use grep/rg/find to search — use search_files instead. Do NOT use ls to list directories — use search_files(target='files') instead. Do NOT use sed/awk to edit files — use patch instead. Do NOT use echo/cat heredoc to create files — use write_file instead. Reserve terminal for: builds, installs, git, processes, scripts, network, package managers, and anything that needs a shell. Foreground (default): Commands return INSTANTLY when done, even if the timeout is high. Set timeout=300 for long builds/scripts — you'll still get the result in seconds if it's fast. Prefer foreground for short commands. Background: Set background=true to get a session_id. Two patterns: (1) Long-lived processes that never exit (servers, watchers). (2) Long-running tasks with notify_on_complete=true — you can keep working on other things and the system auto-notifies you when the task finishes. Great for test suites, builds, deployments, or anything that takes more than a minute. Use process(action="poll") for progress checks, process(action="wait") to block until done. Working directory: Use 'workdir' for per-command cwd. PTY mode: Set pty=true for interactive CLI tools (Codex, Claude Code, Python REPL). Do NOT use vim/nano/interactive tools without pty=true — they hang without a pseudo-terminal. Pipe git output to cat if it might page. _active_environments_last_activity_creation_locksF_task_env_overridestask_id overridesc|t|<dS)a# Register environment overrides for a specific task/rollout. Called by Atropos environments before the agent loop to configure per-task sandbox settings (e.g., a custom Dockerfile for the Modal image). Supported override keys: - modal_image: str -- Path to Dockerfile or Docker Hub image name - docker_image: str -- Docker image name - cwd: str -- Working directory inside the sandbox Args: task_id: The rollout's unique task identifier overrides: Dict of config keys to override N)r)rrs r*register_task_env_overridesr)s $-   r3c<t|ddS)z Clear environment overrides for a task after rollout completes. Called during cleanup to avoid stale entries accumulating. N)rpoprs r*clear_task_env_overridesr<s GT*****r3integerrdefault type_labelc tj||} ||S#ttjf$rtd|d|d|dwxYw)zParse an environment variable with *converter*, raising a clear error on bad values. Without this wrapper, a single malformed env var (e.g. TERMINAL_TIMEOUT=5m) causes an unhandled ValueError that kills every terminal command. zInvalid value for : z (expected z1). Check ~/.hermes/.env or environment variables.)rKrL ValueErrorjsonJSONDecodeError)rr converterrraws r*_parse_env_varrFs )D' " "C y~~ , -    > > > > >: > > >    s "0Ac  d}tjdd}tjdddv}|dkrtj}n |dkrd}nd }tjd | d }d }|d kr|rtjd ptj}tjtj| t fd|DsStj r8tj r ds }d nj|dvrf rdt fd|D}tj  }|s|r% |krt d ||| id|dttjdddtjd|dtddtjddtjdd |d!tjd"|d#tjd$|d% d&|d'|d(td)d*d+td,d-d.tjd/d0d1tjd2d0d3td4d5d6tjd7d0d8tjd9tjd:d;dvtjdt"d?td@dAtdBdCtjdDd;dvtdEdtjddFS)GzBGet terminal environment configuration from environment variables.*nikolaik/python-nodejs:python3.11-nodejs20 TERMINAL_ENVlocal&TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACEfalse)truer~yesssh~/root TERMINAL_CWDN)z/Users/z/home/zC:\zC:/dockerc3BK|]}|VdSNr).0p candidates r* z"_get_env_config..ss1??A $$Q''??????r3) /workspacerr)modalr singularitydaytonac3BK|]}|VdSrr)rrcwds r*rz"_get_env_config..zs/DD3>>!,,DDDDDDr3zeIgnoring TERMINAL_CWD=%r for %s backend (host/relative path won't work in sandbox). Using %r instead.r9 modal_modeTERMINAL_MODAL_MODEauto docker_imageTERMINAL_DOCKER_IMAGEdocker_forward_envTERMINAL_DOCKER_FORWARD_ENVz[]z valid JSONsingularity_imageTERMINAL_SINGULARITY_IMAGE docker:// modal_imageTERMINAL_MODAL_IMAGE daytona_imageTERMINAL_DAYTONA_IMAGErhost_cwddocker_mount_cwd_to_workspacerTERMINAL_TIMEOUT180lifetime_secondsTERMINAL_LIFETIME_SECONDS300ssh_hostTERMINAL_SSH_HOSTr,ssh_userTERMINAL_SSH_USERssh_portTERMINAL_SSH_PORT22ssh_keyTERMINAL_SSH_KEYssh_persistentTERMINAL_SSH_PERSISTENTTERMINAL_PERSISTENT_SHELLrTERMINAL_LOCAL_PERSISTENTTERMINAL_CONTAINER_CPUr~numberTERMINAL_CONTAINER_MEMORY5120TERMINAL_CONTAINER_DISK51200TERMINAL_CONTAINER_PERSISTENTTERMINAL_DOCKER_VOLUMES)local_persistent container_cpucontainer_memorycontainer_diskcontainer_persistentdocker_volumes)rKrLlowergetcwdr&abspath expanduseranyisabsisdirrrinfor rrloadsfloat) default_imager9mount_docker_cwd default_cwdr  host_prefixesdocker_cwd_source is_host_path is_relativerrs @@r*_get_env_configr?Vs.AMy11Hy!I7SSYY[[_ss 7ikk U    )NK 0 0CH8M8 0In55DGOOBG$6$67H$I$IJJ ??????? ? ?  i(( -/W]]9-E-E NWNbNbczN{N{ !HC B B Bs BDDDDmDDDDD '--,,,  K SK-?-? KKXX{ 4 4 4C H ' 2G(P(PQQ   "9=II  n-JDRVR\^jkk  RY'CE`Q^E`E`aa  ry!7GG  #;]KK  s  H  ()9  >"4e<<  N+FNN  BI1266  BI1266  N#6==! " 29/44# * ") % I16 : :   %'')*+ 2I&A7KKQQSSWkk'(@#uhWW*+FOO()BGLL " *I6 R R X X Z Z^r r()BD$*Vbcc?    r3rcXt|ttdS)z2Resolve direct vs managed Modal backend selection.r) has_direct managed_ready)rr r)rs r*_get_modal_backend_staterCs0 &/113G<<   r3imagerr ssh_configcontainer_config local_configr c |pi} | dd} | dd} | dd} | dd} | d g}| d g}| d i}|d krt|| S|dkr0t|||| | | | |||| dd|| S|dkrt|||| | | | |S|dkr5i}| dkr| |d<| dkr| |d<| dkrE ddl}ddl}d||jjj vr| |d<n#t$rYnwxYwt| d}|ddkrt||||| |S|ddkrn|drtd |d!dkrtd"|d!dkrtd#d$}trd%}t|t||||| |S|d&kr&dd'lm}||||t%| | | | |S|d(kr|r*|d)r|d*std+t'|d)|d*|d,d-|d.d/||0Std1|d2)3a Create an execution environment for sandboxed command execution. Args: env_type: One of "local", "docker", "singularity", "modal", "daytona", "ssh" image: Docker/Singularity/Modal image name (ignored for local/ssh) cwd: Working directory timeout: Default command timeout ssh_config: SSH connection config (for env_type="ssh") container_config: Resource config for container backends (cpu, memory, disk, persistent) task_id: Task identifier for environment reuse and snapshot keying host_cwd: Optional host working directory to bind into Docker when explicitly enabled Returns: Environment instance with execute() method r)r^r*r+r,Tr-r docker_envr)rrrr F) rDrrcpumemorydiskpersistent_filesystemrvolumesr auto_mount_cwd forward_envenvr)rDrrrLrMrNrOrrrrLrMNephemeral_diskrselected_backendmanaged)rDrrmodal_sandbox_kwargsrOrdirectmanaged_mode_blockedzModal backend is configured for managed mode, but a paid Nous subscription is required for the Tool Gateway and no direct Modal credentials/config were found. Log in with `hermes model` or choose TERMINAL_MODAL_MODE=direct/auto.modezZModal backend is configured for managed mode, but the managed tool gateway is unavailable.z_Modal backend is configured for direct mode, but no direct Modal credentials/config were found.zHModal backend selected but no direct Modal credentials/config was found.z`Modal backend selected but no direct Modal credentials/config or managed tool gateway was found.r)DaytonaEnvironmentrhostuserz?SSH environment requires ssh_host and ssh_user to be configuredportkeyr,)r\r]r^key_pathrrzUnknown environment type: zD. Use 'local', 'docker', 'singularity', 'modal', 'daytona', or 'ssh')r_LocalEnvironment_DockerEnvironment_SingularityEnvironmentinspectr signatureSandboxcreate parametersr#rC_ManagedModalEnvironmentrr _ModalEnvironmenttools.environments.daytonar[int_SSHEnvironment)r9rDrrrErFrGrr ccrLrMrN persistentrPrrKsandbox_kwargsrer modal_statemessage_DaytonaEnvironments r*_create_environmentrus7*  RB &&! $ $C VV& - -F 66"E * *D.55Jff%r**G 4b99 b))J7 S':::: X  !S'F",g66"A5II*     ] " "&S'F",g    W   77$'N5 ! A::'-N8 $ !88 %%%%%%%%#w'8'89M'N'N'YYY7;N#34    /rvvl/C/CDD ) *i 7 7+g%3&0'  ) *h 6 612  > 6"i// p6"h.. uaG)++ vW%% % S'!/",g    Y  XXXXXX""S'Cd",g    U   `!7!7 `z~~f?U?U `^__ _F#F#++^^E2..     EhEEEFF Fs/3E## E0/E0,rctj} ddlm}ttD]!}||r |t|<"n#t$rYnwxYwg}t5tt D]]\}}||z |krOt |d}t |d|| ||f^t5|D] \}}t |d! dddn #1swxYwYdddn #1swxYwY|D]+\}} ddlm}||n#t$rYnwxYw t#|dr|nIt#|dr|n$t#|dr|t*d|#t.$rl} t1| } d | vsd | vrt*d |nt*d || Yd} ~ %d} ~ wwxYwdS) zOClean up environments that have been inactive for longer than lifetime_seconds.rprocess_registryNclear_file_ops_cachecleanupstop terminatez,Cleaned up inactive environment for task: %s404 not found*Environment for task %s already cleaned up-Error cleaning up environment for task %s: %s)rtools.process_registryrylistrkeyshas_active_processes ImportError _env_lockitemsrrrh_creation_locks_lockrtools.file_toolsr{hasattrr|r}r~rr5r#rr.r") r current_timeryr envs_to_stop last_timerS_r{r( error_strs r*_cleanup_inactive_envsr/sq9;;L ;;;;;;N//1122 7 7G44W== 7*6w' 7      L  3 3"&~';';'='=">"> 8 8 GYi'*:::*..w==""7D111? ''#777" 3 3* 3 3 ##GT2222 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3%\\   = = = = = =  ) ) ) )    D  \sI&&  f%%  k**   KKF P P P P \ \ \AI !![IOO4E4E%E%E H'RRRRNPWYZ[[[  \'\\suAA$$ A10A1=B E $D:. E:D> >ED> EEE%E77 FFB H JA!JJc6tr t}t|dn4#t$r'}td|dYd}~nd}~wwxYwt dD]}tsntjd tdSdS)zKBackground thread worker that periodically cleans up inactive environments.rzError in cleanup thread: %sTrN<r^) _cleanup_runningr?rr#rr"rangerr)configr(rs r*_cleanup_thread_workerrms   L$&&F "6*<#= > > > > L L L NN8!dN K K K K K K K K Lr  A#  JqMMMM      s#- AAAct5tts6dat jt datddddS#1swxYwYdS)z;Start the background cleanup thread if not already running.NTr)r_cleanup_threadis_aliverrrrrr3r*_start_cleanup_threadr|s $$  "/*B*B*D*D "# '.6LUYZZZO  ! ! # # # $$$$$$$$$$$$$$$$$$sAA,,A03A0cdat6 tddS#ttf$rYdSwxYwdS)z#Stop the background cleanup thread.FNr)rrri SystemExitrgrr3r*_stop_cleanup_threadrsb"    + + + + +-.    DD #"s (==cxt5t|cdddS#1swxYwYdS)z9Return the active BaseEnvironment for *task_id*, or None.N)rrrrs r*get_active_envrs} 11#''00111111111111111111s /33cdt|}|dStt|ddS)aReturn True if the active environment for task_id is configured for cross-turn persistence (``persistent_filesystem=True``). Used by the agent loop to skip per-turn teardown for backends whose whole point is to survive between turns (docker with ``container_persistent``, daytona, modal, etc.). Non-persistent backends (e.g. Morph) still get torn down at end-of-turn to prevent leakage. The idle reaper (``_cleanup_inactive_envs``) handles persistent envs once they exceed ``terminal.lifetime_seconds``. NF _persistent)rrgetattr)rrSs r*is_persistent_envrs5  ! !C {u ]E22 3 33r3cttt}d}|D]L} t||dz }#t$r(}t d||dYd}~Ed}~wwxYwt}ddl}|t|dz D]g} tj |dt d |5#t$r&}t d ||Yd}~`d}~wwxYw|dkrt d ||S) z3Clean up ALL active environments. Use with caution.rr^zError cleaning %s: %sTrNr) ignore_errorszRemoved orphaned: %sz%Failed to remove orphaned path %s: %szCleaned %d environments)rrr cleanup_vmr#rerrorr rrshutilrmtreer5rr )task_idscleanedrr(r$rr&s r*cleanup_all_environmentsrs(--//00HGMM M w    qLGG M M M LL0'1tL L L L L L L L L M#$$KKKK #kJ67788KK K M$d 3 3 3 3 KK. 5 5 5 5 K K K LL@$ J J J J J J J J K{{ -w777 Ns/A A5 A00A521C$$ D.DDcd}t5t|d}t|ddddn #1swxYwYt5t |ddddn #1swxYwY ddlm}||n#t$rYnwxYw|dS t|dr| nIt|dr| n$t|dr| td|dS#t$rr}t!|}d|vsd |vrtd |n"td ||Yd}~dSYd}~dSd}~wwxYw) z4Manually clean up a specific environment by task_id.Nrrzr|r}r~z,Manually cleaned up environment for task: %srrrr)rrrrrrrr{rrr|r}r~rr5r#rr.r")rrSr{r(rs r*rrs C **"&&w557D)))*************** ++GT***+++++++++++++++ 999999W%%%%       {X 3 " "  KKMMMM S& ! !  HHJJJJ S+ & &  MMOOO BGLLLLL XXXFF I   0A0A!A!A KKDg N N N N NNJGUV W W W W W W W W W O N N N N NXsO7A  AABB B B%% B21B2:B E GA!F<<Gcttr?tt}td|t dSdS)zBStop cleanup thread and shut down all remaining sandboxes on exit.z)Shutting down %d remaining sandbox(es)...N)rrrrr5r)counts r*_atexit_cleanuprsU#()) ?GGG """""##r3 exit_codec|dkrdStjd|}|r|dn|}|}d}|D]7}d|vr|ds|dd}|sdSd d id d id d id d id d id d id d id d id d id d id d idddddd did }||}|r ||vr||SdS)a Return a human-readable note when a non-zero exit code is non-erroneous. Returns None when the exit code is 0 or genuinely signals an error. The note is appended to the tool result so the model doesn't waste turns investigating expected exit codes. rNz\s*(?:\|\||&&|[|;])\s*rr,r-/r^zNo matches found (not an error)z%Files differ (expected, not an error)zGSome directories were inaccessible (partial results may still be valid)z5Condition evaluated to false (expected, not an error)zCould not resolve hostzFailed to connect to hostz2HTTP response code indicated error (e.g. 404, 500)zOperation timed out)r_uLNon-zero exit (often normal — e.g. 'git diff' returns 1 when files differ)) grepegrepfgreprgagackdiff colordiffrtest[curlgit)rrstriprr) r8rsegments last_segmentwordsbase_cmdw semantics cmd_semanticss r*_interpret_exit_coderstA~~t x17;;H$,9HRLL'@@BBL    EH  !88ALL--8 773<<# t 676767676767<=@A^_LMLM(*D%   cd1,,I6MM(++M(m33Y'' 4r3cd|}|dod|vS)auReturn True when PTY mode would break stdin-driven commands. Some CLIs change behavior when stdin is a TTY. In particular, `gh auth login --with-token` expects the token to arrive via piped stdin and waits for EOF; when we launch it under a PTY, `process.submit()` only sends a newline, so the command appears to hang forever with no visible progress.  z gh auth loginz --with-token)rir.rr)r8 normalizeds r*_command_requires_pipe_stdinrCsL'--////1122Jo.. ) j (r3 backgroundforceptynotify_on_completewatch_patternsc L t|ts]tdt |jt jdddt |jdddSt} | d } |pd } t | i} | d kr| d p| d } nn| d kr| dp| d} nJ| dkr| dp| d} n&| dkr| dp| d} nd} | dp| d}| d}|p|}|s1|r/|tkr$t jdd|dtdidStt5| tvr+tjt | <t| }d}nd}dddn #1swxYwY|rt"5| t$vrt'jt$| <t$| }dddn #1swxYwY|5t5| tvr*tjt | <t| }d}dddn #1swxYwY|rA| d krt+td| | dd d}| dkrl| dd| dd| dd | d!d| d"dd#}d}| d$vr| d%d&| d'd(| d)d*| d+d| d,d-| d.g| d/dd0}d}| d1krd2| d3di}t/| | |||||| | d45 }nB#t0$r5}t jddd6|d7d8ddcYd}~cdddSd}~wwxYwt5|t| <tjt | <|}dddn #1swxYwYtd9| | dddddn #1swxYwYd}|sMt3|| }|d:s| d;dd<| d?|| d@dA| dBddCdS| d@dA}dD|dE}t jdd| d=|dFddS| dGr| d@dH}dI|dJ}n1| dKr| d@dH}dL|dM}|r]t5|}|rLtdN|ddOt7|t jdd|dFddSd}|}|rt9|rd}dP}|rdQdRlm} dQdSlm }!| dT}"|p|}# | d1kr3|!!||#| |"tE|dUr|j#nd|V}$n|!$|||#| |"W}$dX|$j%|$j&dQddY}%|r||%dZ<|r||%d[<|rk|s|rgdQd\l'm(}&|&d]d}'|'rS|&d^d}(|&d_d})|&d`d}*|&dad}+|'|$_)|(|$_*|*|$_+|+|$_,|)|$_-|r^|r\d|$_.d|%db<|$j)rIdc|$_/|!j01|$j%dc|"|$j)|$j*|$j+|$j,|$j-ddd |r |rte||$_3|$j3|%de<t j|%dS#th$r4}t jdddft|dgdcYd}~Sd}~wwxYwdh},dQ}-d}.|-|,kre d|i}/|r||/d<|j5|fi|/}.nH#th$r:}t|6}0d|0vr#t jddidj|dkdgdcYd}~S|-|,krd|-d&z }-dl|-z}1tdm|1|-|,t7|t |j|| | tj7|1Yd}~t8dn|,t7|t |j|| | t jdddot |jdpt|dgdcYd}~Sd}~wwxYw |. dqd}2|. drdQ}3ts|2| }2ds}4tu|2|4kr[tw|4dtz}5|4|5z }6tu|2|5z |6z }7du|7dvtu|2dw}8|2d|5|8z|2|6 dz}2dQdxlm?}:|2r|:|2@nd}2t||3};|2|3ddg}<|r||t8d{|>t jddd|t||>dd}dcYd}~Sd}~wwxYw)~a+ Execute a command in the configured terminal environment. Args: command: The command to execute background: Whether to run in background (default: False) timeout: Command timeout in seconds (default: from config) task_id: Unique identifier for environment isolation (optional) force: If True, skip dangerous command check (use after user confirms) workdir: Working directory for this command (optional, uses session cwd if not set) pty: If True, use pseudo-terminal for interactive CLI tools (local backend only) notify_on_complete: If True and background=True, auto-notify the agent when the process exits watch_patterns: List of strings to watch for in background output; triggers notification on match Returns: str: JSON string with output, exit_code, and error fields Examples: # Execute a simple command >>> result = terminal_tool(command="ls -la /tmp") # Run a background task >>> result = terminal_tool(command="python server.py", background=True) # With custom timeout >>> result = terminal_tool(command="long_task.sh", timeout=300) # Force run after user confirmation # Note: force parameter is internal only, not exposed to model API z+Rejected invalid terminal command value: %sr,rz&Invalid command: expected string, got r)rFrrstatusF) ensure_asciir9rrrrrrrrr rrzForeground timeout zs exceeds the maximum of zNs. Use background=true with notify_on_complete=true for long-running commands.TNz*Creating new %s environment for task %s...rrrrr_rr)r\r]r^r`rp)rrrrr)r^r*rIr+rJr,rrr-r )r)r*r+r,rr-r rrpr(r ) r9rDrrrErFrGrr z5Terminal tool disabled: environment creation failed (rdisabledz %s environment ready for task %sapprovedrapproval_requiredrszWaiting for user approvalr8 descriptionzcommand flagged pattern_key)rFrrrr8rrzCommand denied: z?. Use the approval prompt to allow it, or rephrase the command.blocked user_approvedzflagged as dangerouszCommand required approval (z) and was approved by the user.smart_approvedzCommand was flagged (z&) and auto-approved by smart approval.z+Blocked dangerous workdir: %s (command: %s)rzPTY disabled for this command because it expects piped stdin/EOF (for example gh auth login --with-token). For local background processes, call process(action='close') after writing so it receives EOF.r)get_current_session_keyrx)rrS)r8rr session_keyenv_varsuse_pty)rSr8rrrzBackground process started)rF session_idpidrrapprovalpty_note)get_session_envHERMES_SESSION_PLATFORMHERMES_SESSION_CHAT_IDHERMES_SESSION_THREAD_IDHERMES_SESSION_USER_IDHERMES_SESSION_USER_NAMErr) rcheck_intervalrrcchat_iduser_id user_name thread_idrrz$Failed to start background process: )rFrrr]|zCommand timed out after z secondsrzfExecution error, retrying in %ds (attempt %d/%d) - Command: %s - Error: %s: %s - Task: %s, Backend: %szWExecution failed after %d retries - Command: %s - Error: %s: %s - Task: %s, Backend: %szCommand execution failed: rrF returncodeiPg?z ... [OUTPUT TRUNCATED - z chars omitted out of z total] ... ) strip_ansi)redact_sensitive_textexit_code_meaningzterminal_tool exception: %szFailed to execute command: )rFrr tracebackr)Drrrr"rrrdumpsr?rrFOREGROUND_MAX_TIMEOUTrrrrrrrrLockr+r5rurr>rErrtools.approvalrrry spawn_localrrS spawn_via_envidrgateway.session_contextrwatcher_platformwatcher_chat_idwatcher_user_idwatcher_user_namewatcher_thread_idrwatcher_intervalpending_watchersrhrrr#executer.rrrRrrmtools.ansi_stripr agent.redactrrrr format_exc)?r8rrrrr?rrrrr9effective_task_idrrDrdefault_timeouteffective_timeoutrSneeds_creation task_lockrErFrGnew_envr( approval_noterdesc fallback_msg workdir_errorpty_disabled_reason effective_ptyrryr effective_cwd proc_session result_data_gse _gw_platform _gw_chat_id _gw_thread_id _gw_user_id _gw_user_name max_retries retry_countr|execute_kwargsr wait_timerFrMAX_OUTPUT_CHARS head_chars tail_charsomittedtruncated_noticerr exit_note result_dictrtb_strs? r* terminal_toolr3RsIRC'3'' # NN=W &   :Z$w--BXZZ!  " ### #!""*%$0y(++,=rBB  x  MM.11KVN5KEE  & &MM"566U&AT:UEE  MM-00IF=4IEE  " "MM/22Mf_6MEEEmmE""3fUm +#6 #g #'4J*J*J:J'JJ-JJJ " ### #   & & $88848IKK01*+<=!&!%  & & & & & & & & & & & & & & & G e% ? ?$O;;9B9I9IO$56+,=>  ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? @ e@ e//(,@@@<@IKK'8923DE). /////////////// "8e=001333KK LhXijlkljlXmnnn./%) #u,,(. :r(B(B(. :r(B(B(. :r(B(B'-zz)R'@'@.4jj9I5.Q.Q **J,0(#'TTT17OQ1O1O4:JJ?QSW4X4X28**=Mu2U2U8> CY[_8`8`.4jjv.N.N28**=Mr2R2RAGLkmrAsAs00,(, #w.. ,fjj9KU.S.S,L#6%-"' #$5'1-=)5$5%+ZZ %;%; # # #'///#z&()+%a]^%a%a%a&0 ++ ).  / / //////k@ e@ e@ e@ e@ e@ e@ e@ eh/#&&BI,->?<@IKK'89%&&&&&&&&&&&&&&&KK BHN_`bab`bNcdddA@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ eH  e((;;HJ' '<<))-@@@:"$%'!)i9T!U!U"5#+<< 7#C#C'/||MCT'U'U'/||M2'F'F''%*++++ ||M3DEETtTTTz !#%\\)\BB' ## !& ''''||O,, e||M3IJJ cd c c c .// e||M3IJJ d d d d   '-g66M 'L&tt}.CG.L.LNNNz !#*' ## !& ''''#  /88 !M  n ? ? > > > > > ? ? ? ? ? ?11"===K#NsMQ 'w&#?#? ') 1$/,3C,?,?!IT - $@$$LL$4#A#A ') 1$/ $B$$L;"./'+!"!  !<.;K +&B.AK +  G#5 G GOOOOOO#'4(A2#F#FL# G&*d+CR&H&H (,-G(L(L &*d+CR&H&H (,-G(L(L 8D 57B 47B 49F 69F 6&*6:L38N!Z!ZRUVWRXRX!Z!Z''%* +++++++++)+6ZZ"--FL!44J*&(;;F % 6{{--- !1C!788 - : f++ 2Z?;7;;!&kk;;;!  ,/??&*BVV 4 3 3 3 3 3Z''F ; : : : : :>DL**6<<>>:::"F-WjAAI!'K  8*7 J' =3< /0:k>>> >    %%'' 3V<<<z;3q66;;           sA1l04D"l0l0,7G/# l0/G33l06G37 l02I6 l0Il0 I l0S24J S2J S2J >S2EP:9S2: Q9Q4"Q9#S2' l04Q99 S2(R7+ S27R; ;S2>R; ?'S2& l02S66l09S6:B&l0!A l0,Cl0.8l0'E7a b))bbl0bl0.c l0 hAh hl0A%h l0A=h hl0 hD!l00 n#:Ann#n#ct}|d} |dkrdS|dkrRddlm}|}|stddSt j|d gdd }|jdkS|d krPtj d ptj d }|r$t j|dgdd }|jdkSdS|dkrH| dr| dstddSdS|dkr[t| d}|ddkrdS|ddkr|drtddS|ddkrtddS|ddkrEtrtdntddStrtdntddStjdtd!dSdS|d"krdd#lm}t%jd$d uStd%|dS#t($r(}td&|d'Yd }~dSd }~wwxYw)(z8Check if all requirements for the terminal tool are met.r9rTrr) find_dockerz?Docker executable not found in PATH or common install locationsFversionr)capture_outputrr apptainerz --versionrrrzSSH backend selected but TERMINAL_SSH_HOST and TERMINAL_SSH_USER are not both set. Configure both or switch TERMINAL_ENV to 'local'.rrrUrVrXrYzModal backend selected with TERMINAL_MODAL_MODE=managed, but a paid Nous subscription is required for the Tool Gateway and no direct Modal credentials/config were found. Log in with `hermes model` or choose TERMINAL_MODAL_MODE=direct/auto.rZzModal backend selected with TERMINAL_MODAL_MODE=managed, but the managed tool gateway is unavailable. Configure the managed gateway or choose TERMINAL_MODAL_MODE=direct/auto.zModal backend selected with TERMINAL_MODAL_MODE=direct, but no direct Modal credentials/config were found. Configure Modal or choose TERMINAL_MODAL_MODE=managed/auto.zModal backend selected with TERMINAL_MODAL_MODE=direct, but no direct Modal credentials/config were found. Configure Modal or choose TERMINAL_MODAL_MODE=auto.zModal backend selected but no direct Modal credentials/config or managed tool gateway was found. Configure Modal, set up the managed gateway, or choose a different TERMINAL_ENV.z|Modal backend selected but no direct Modal credentials/config was found. Configure Modal or choose a different TERMINAL_ENV.NzFmodal is required for direct modal terminal backend: pip install modalr)DaytonaDAYTONA_API_KEYzWUnknown TERMINAL_ENV '%s'. Use one of: local, docker, singularity, modal, daytona, ssh.z&Terminal requirements check failed: %sr)r?tools.environments.dockerr5rr subprocessrunrrwhichrrCr importlibutil find_specrr9rKrLr#) rr9r5rr| executablerrr9r(s r*check_terminal_requirementsrCs   Fj!Ha w  4  ! ! = = = = = = []]F  ^___u^VY$7VWXXXF$) )  & &k22Qfl=6Q6QJ .#[(ARV`abbb(A--5   ::j)) J1G1G  Zu4  26::l3K3KLLK-.);;t-.(::56!LLE !5v&)33LL; !5 (H44133  @  8 !5133  B  R!5~''008 efffu4  " " ' ' ' ' ' '9.//t; ; LL'    5  =q4 PPPuuuuusbJ=2J=#J=8AJ=A J=5J=.J=&J=+AJ=!J= J== K/K**K/__main__zTerminal Tool Modulez2==================================================z Current Configuration:z Environment type: z Docker image: rz Modal image: rz Working directory: z Default timeout: sz Lifetime: u; ❌ Requirements not met. Please check the messages above.r^u ✅ All requirements met!z Available Tool:z= - terminal_tool: Execute commands in sandboxed environmentsz Usage Examples:z # Execute a commandz* result = terminal_tool(command='ls -la')z z # Run a background taskzE result = terminal_tool(command='python server.py', background=True)z Environment Variables:rz TERMINAL_ENV: rrz- (local/docker/singularity/modal/daytona/ssh)z TERMINAL_DOCKER_IMAGE: rz TERMINAL_SINGULARITY_IMAGE: rrz TERMINAL_MODAL_IMAGE: r z TERMINAL_DAYTONA_IMAGE: r z TERMINAL_CWD: rrIz TERMINAL_SANDBOX_DIR: TERMINAL_SANDBOX_DIRz /sandboxesz TERMINAL_TIMEOUT: r60z TERMINAL_LIFETIME_SECONDS: rr)registryterminalobjectstringz The command to execute on the VM)rrbooleanu2Run the command in the background. Two patterns: (1) Long-lived processes that never exit (servers, watchers). (2) Long-running tasks paired with notify_on_complete=true — you can keep working and get notified when the task finishes. For short commands, prefer foreground with a generous timeout instead.)rrrz3Max seconds to wait (default: 180, foreground max: u). Returns INSTANTLY when command finishes — set high for long tasks, you won't wait unnecessarily. Foreground timeout above z7s is rejected; use background=true for longer commands.)rrminimumz^Working directory for this command (absolute path). Defaults to the session working directory.zRun in pseudo-terminal (PTY) mode for interactive CLI tools like Codex, Claude Code, or Python REPL. Only works with local and SSH backends. Default: false.uWhen true (and background=true), you'll be automatically notified when the process finishes — no polling needed. Use this for tasks that take a while (tests, builds, deployments) so you can keep working on other things in the meantime.arrayruTList of strings to watch for in background process output. When any pattern matches a line of output, you'll be notified with the matching text — like notify_on_complete but triggers mid-process on specific output. Use for monitoring logs, watching for errors, or waiting for specific events (e.g. ["ERROR", "FAIL", "listening on port"]).)rrr)r8rrr?rrr)r propertiesrequired)rrric ft|d|dd|d|d|d|dd|dd|d  S) Nr8rFrrr?rrr)r8rrrr?rrr)r3r)argskws r*_handle_terminalrTs ##88L%00##y!!## HHUE " "88$8%@@xx 011    r3u💻i)rtoolsetschemahandlercheck_fnemojimax_result_size_chars)rS)r)NNNrN)rv)FNNFNFFN)}__doc__importlib.utilr?rloggingrKrcrrratexitrr<pathlibrtypingrrrr getLoggerrrtools.interruptrr tools.environments.singularityr tools.tool_backend_helpersr r r rrmrLrr7r!r+r-r__annotations__r/r5r2r6rr7r=dictr>compilerArErRrrrrtuplerrrtools.environments.localrrbrrdtools.environments.sshrrnr;rrctools.environments.modalrrk tools.environments.managed_modalrrjtools.managed_tool_gatewayrTERMINAL_TOOL_DESCRIPTIONrrrrrrrrrrrrr?rJrCrurrrrrrrrrregisterrrr3rCrrexit default_imgr/rMrJrQtools.registryrHTERMINAL_SCHEMArTrr3r*rts >    ,,,,,,,,,,,,  8 $ $=<<<<<<<<;;;;;YRY'H%PPQQ#(%  2Le(T(T"U"U< s!!!  HsHcHdHHHH2:=>>ssTz,4z3z3sz3Cz3z3z3z3x - -3 -s -S - - - -=c=d====!s!3!5c?!!!!H:C:E#t)4D::::z6S4Z6E#*cDj:P4Q6666tKJJJJJ\\\\\\DDDDDDMMMMMMJJJJJJ``````DDDDDD*(*d38n)))#%S%Z %%% IN   -/c9>)*///%y~''24T#tCH~-.333--c3h----&+c++++7:Y     s  s     Lc3hLLLL^$4S>KO-1'0(, ~F~F#~Fc~F~Fc~F$(~FCG~F&*~F"%~F#& ~F~F~F~FB;\;\S;\;\;\;\|   $$$1C1111 4s4t4444&6'X'X'X'X'XT### =#=#=#*====@ # $    "!!!$*.ll llc]lc] l  l c] l llT#Y'l llll^ fTffffR z E !!! E(OOO _  F E $%%% E 5 !3 5 5666 E 5VN3 5 5666 E 3F=1 3 3444 E 1&- 1 1222 E 4y 1 4 4 4555 E 6 23 6 6 6777 & & ( ( LMMM Q E '((( E  E IJJJ E  E !""" E 6777 E$KKK E %&&& E QRRR E $%%%>K E nYRY~w?? n n nooo E Wibi0G&U&U W WXXX E o9295QSl_jSlSl+m+m o oppp E UYRY/E{%S%S U UVVV E Yyry1I;'W'W Y YZZZ E EYRY~yry{{CC E EFFF<<<<<< E _YRY/E$$&&G\G\G\%]%] _ _``` E F+=t!D!D F FGGG E Y)")4OQV*W*W Y YZZZ $##### ,!A " T  " |Uk | |mC | | | ! " ~  " O ##   (+ |;" " FKK&&**Z        ( !r3