i)dZddlZddlZddlZddlZddlZddlZddlmZm Z ej dkZ dZ de fdZeZddedzd edzdefd Zdefd ZeZd Zd edefdZGddeZdS)uELocal execution environment — spawn-per-call with session snapshot.N)BaseEnvironment _pipe_stdinWindows_HERMES_FORCE_returnc`t} ddlm}|D]=}||j|jr||j>n#t$rYnwxYw ddl m }| D]d\}}| d}|dvr||4|dkr*| dr||en#t$rYnwxYw|hdt|S) z=Derive the blocklist from provider, tool, and gateway config.r)PROVIDER_REGISTRY)OPTIONAL_ENV_VARScategory>tool messagingsettingpassword>;GH_TOKENHASS_URL LLM_MODEL HASS_TOKEN XAI_API_KEY GROQ_API_KEY EMAIL_ADDRESS GITHUB_APP_ID OPENAI_ORG_ID WHATSAPP_MODECOHERE_API_KEYEMAIL_PASSWORDGOOGLE_API_KEYMODAL_TOKEN_IDOPENAI_API_KEYSIGNAL_ACCOUNTANTHROPIC_TOKENDAYTONA_API_KEYEMAIL_IMAP_HOSTEMAIL_SMTP_HOSTMISTRAL_API_KEYOPENAI_API_BASEOPENAI_BASE_URLSIGNAL_HTTP_URLDEEPSEEK_API_KEYHELICONE_API_KEYPARALLEL_API_KEYTOGETHER_API_KEYWHATSAPP_ENABLEDFIRECRAWL_API_KEYFIRECRAWL_API_URLFIREWORKS_API_KEYANTHROPIC_BASE_URLEMAIL_HOME_ADDRESSMODAL_TOKEN_SECRETOPENROUTER_API_KEYPERPLEXITY_API_KEYSLACK_HOME_CHANNELDISCORD_AUTO_THREADOPENAI_ORGANIZATIONSIGNAL_HOME_CHANNELSLACK_ALLOWED_USERSDISCORD_HOME_CHANNELSIGNAL_ALLOWED_USERSGATEWAY_ALLOWED_USERSSIGNAL_IGNORE_STORIESTELEGRAM_HOME_CHANNELWHATSAPP_ALLOWED_USERSCLAUDE_CODE_OAUTH_TOKENDISCORD_REQUIRE_MENTIONEMAIL_HOME_ADDRESS_NAMESLACK_HOME_CHANNEL_NAMESIGNAL_HOME_CHANNEL_NAMEDISCORD_HOME_CHANNEL_NAMEGITHUB_APP_INSTALLATION_IDSIGNAL_GROUP_ALLOWED_USERSTELEGRAM_HOME_CHANNEL_NAMEGITHUB_APP_PRIVATE_KEY_PATHDISCORD_FREE_RESPONSE_CHANNELS)sethermes_cli.authr valuesupdateapi_key_env_varsbase_url_env_varadd ImportErrorhermes_cli.configr itemsget frozenset)blockedr pconfigr namemetadatar s @/home/agentuser/.hermes/hermes-agent/tools/environments/local.py_build_provider_env_blocklistr\sG 555555(//11 6 6G NN73 4 4 4' 6 G4555 6        777777/5577 " "ND(||J//H000 D!!!!Y&&8<< +C+C& D!!!  "       NN<<<<<<z W  s%AA)) A65A6:A?C:: DDbase_env extra_envc ddlm}n#t$rd}YnwxYwi}|piD]9\}}|t r |t vs ||r|||<:|piD]Z\}}|t r"|tt d}|||<A|t vs ||r|||<[ddlm }|}|r||d<|S)zz*_sanitize_subprocess_env..sENget_subprocess_homeHOME) tools.env_passthroughra ExceptionrT startswith!_HERMES_PROVIDER_ENV_FORCE_PREFIX_HERMES_PROVIDER_ENV_BLOCKLISTlenhermes_constantsrk) r]r^_is_passthrough sanitizedkeyvaluereal_keyrk _profile_homes r[_sanitize_subprocess_envrznsf*OOOOOOO ***)/*!#I~2,,..## U >>; < <   4 4 48L8L 4"IcN B--//## U >>; < < #3@AABBCH"'Ih   6 6 6//#:N:N 6"IcN544444''))M*) &   c ts{tjdpftjdrdndpCtjdrdndp tjdpdStjd}|r!tj|r|Stjd}|r|Stjtjdd d d d tjtjd dd d d tjtjdddd d d fD]'}|r#tj|r|cS(td)z Find bash for command execution.bashz /usr/bin/bashNz /bin/bashSHELLz/bin/shHERMES_GIT_BASH_PATH ProgramFileszC:\Program FilesGitbinzbash.exezProgramFiles(x86)zC:\Program Files (x86) LOCALAPPDATAProgramszGit Bash not found. Hermes Agent requires Git for Windows on Windows. Install it from: https://git-scm.com/download/win Or set HERMES_GIT_BASH_PATH to your bash.exe location.) _IS_WINDOWSshutilwhichospathisfileenvironrUjoin RuntimeError)customfound candidates r[ _find_bashrs  L  #%7>>/#B#BL !w~~k::D  z~~g&&   Z^^2 3 3F "'..(( L E    RZ^^N4GHH%QVXbcc  RZ^^$79RSSUZ\acmnn  RZ^^NB77UES]^^   22      A  riza/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binenvc ddlm}n#t$rd}YnwxYwttj|z}i}|D]Z\}}|tr"|ttd}|||<A|tvs ||r|||<[| dd}d| dvr|r |dtnt|d<dd lm}|} | r| |d <|S) zDBuild a run environment with a sane PATH and provider-var stripping.rr`cdSrcrdres r[rgz_make_run_env..rhriNPATHrz/usr/bin:rjrl)rmrarndictrrrTrorprrrqrUsplit _SANE_PATHrsrk) rrtmergedrun_envkvrx existing_pathrkrys r[ _make_run_envrs^*OOOOOOO ***)/*"*s" # #FG 1 <<9 : : >??@@AH !GH   4 4 48J8J 4GAJKK++M,,S1111=JZ]99Z999PZ 544444''))M(' Nr{c eZdZdZddededeffd Zd efd Zd d dd dede dededzd e j f dZ dZ defdZdZxZS)LocalEnvironmentzRun commands directly on the host machine. Spawn-per-call: every execute() spawns a fresh bash process. Session snapshot preserves env vars across calls. CWD persists via file-based read after each command. r<Ncwdtimeoutrct|ptj|||dS)N)rrr)super__init__rgetcwd init_session)selfrrr __class__s r[rzLocalEnvironment.__init__sE S/BIKKcJJJ rircdD]k}|j|ptj|}|r.|dr|dpdcSltjdr.tjdtj tj zrdStj }|dr|dpdSdS)a6Return a shell-safe writable temp dir for local execution. Termux does not provide /tmp by default, but exposes a POSIX TMPDIR. Prefer POSIX-style env vars when available, keep using /tmp on regular Unix systems, and only fall back to tempfile.gettempdir() when it also resolves to a POSIX path. Check the environment configured for this backend first so callers can override the temp root explicitly (for example via terminal.env or a custom TMPDIR), then fall back to the host process environment. )TMPDIRTMPTEMP/z/tmp) rrUrrrorstriprisdiraccessW_OKX_OKtempfile gettempdir)renv_varrs r[ get_temp_dirzLocalEnvironment.get_temp_dirs1 4 4G W--H1H1HI 4Y11#66 4 '',,3333 7==  RYvrw7H%I%I 6'))    $ $ 0##C((/C /vriFx)loginr stdin_data cmd_stringrrc @t}|r|dd|gn|d|g}t|j}tj|d|ddtjtj| tjn tjtrdn tj  }|t|||S)Nz-lz-cTzutf-8replace)textrencodingerrorsstdoutstderrstdin preexec_fn) rrr subprocessPopenPIPESTDOUTDEVNULLrrsetsidr) rrrrrr}argsrprocs r[ _run_bashzLocalEnvironment._run_bashs||16TdD*--T44D0$ .$ . . . .rir)N)rrplatformrrrrtools.environments.baserrsystemrrprVr\rqrrzrr _find_shellrrrrdrir[rsoKK  @@@@@@@@ho9, %5!UyUUUUp"?!>!@!@td{td{VZ>CF C t