idZddlZddlZddlZddlZddlZddlZddlmZddl m Z m Z ddl m Z mZmZmZddlmZmZddlmZejeZ ddlmZmZmZd Zn #e$rd ZYnwxYwd efd Z d ed ee!fdZ"ddl#Z#e Z$e$dz Z%dZ&dZ'ded efdZ(de!d ee!fdZ)dZ*dZ+ej,dZ-hdZ.de!d ee!fdZ/dee!d ee!fdZ0de!d ee!fdZ1dQde!d e!d ee!fd!Z2dRde!de!d efd"Z3de!d ee e!effd#Z4d$e!d ee!fd%Z5d ed$e!d eeeee!ffd&Z6dSd$ede!d(e!d dfd)Z7dRde!de!de!d e e!effd*Z8de!de!d e e!effd+Z9 dTde!d,e!d-e!d$e!d.ed e e!eff d/Z:dRde!d0ee!d e e!effd1Z;de!d$e!d2e!d e e!effd3Zd7d8e d9d:d;gd<d=d>d;d?d@d;dAd@d;dBd@d;dCd@dDdEd@d;dFd@d;dGd@d;dHd@d;dId@dJ d5dgdKdLZ?ddMl@mAZAmBZBeAjCd7de?dNdOPdS)Vu Skill Manager Tool -- Agent-Managed Skill Creation & Editing Allows the agent to create, update, and delete skills, turning successful approaches into reusable procedural knowledge. New skills are created in ~/.hermes/skills/. Existing skills (bundled, hub-installed, or user-created) can be modified or deleted wherever they live. Skills are the agent's procedural memory: they capture *how to do a specific type of task* based on proven experience. General memory (MEMORY.md, USER.md) is broad and declarative. Skills are narrow and actionable. Actions: create -- Create a new skill (SKILL.md + directory structure) edit -- Replace the SKILL.md content of a user skill (full rewrite) patch -- Targeted find-and-replace within SKILL.md or any supporting file delete -- Remove a user skill entirely write_file -- Add/overwrite a supporting file (reference, template, script, asset) remove_file-- Remove a supporting file from a user skill Directory layout for user skills: ~/.hermes/skills/ ├── my-skill/ │ ├── SKILL.md │ ├── references/ │ ├── templates/ │ ├── scripts/ │ └── assets/ └── category-name/ └── another-skill/ └── SKILL.md N)Path)get_hermes_homedisplay_hermes_home)DictAnyOptionalTuple)atomic_replaceis_truthy_value)cfg_get) scan_skillshould_allow_installformat_scan_reportTFreturnc ddlm}|}tt|dddS#t$rYdSwxYw)a[Read skills.guard_agent_created from config (default False). Off by default because the agent can already execute the same code paths via terminal() with no gate, so the scan adds friction without meaningful security. Users who want belt-and-suspenders can turn it on via `hermes config set skills.guard_agent_created true`. r) load_configskillsguard_agent_createdF)default)hermes_cli.configrr r Exception)rcfgs =/home/ubuntu/.hermes/hermes-agent/tools/skill_manager_tool.py_guard_agent_created_enabledr;sr111111kmm C#8 9 9     uus/2 AA skill_dirctsdStsdS t|d}t|\}}|durt |}d|d|S|2t |}t d|d|d|Sn5#t$r(}t d||d Yd}~nd}~wwxYwdS) zScan a skill directory after write. Returns error string if blocked, else None. No-op when skills.guard_agent_created is disabled (the default). Nz agent-created)sourceFz"Security scan blocked this skill (z): z4Agent-created skill blocked (dangerous findings): %szSecurity scan failed for %s: %sTexc_info)_GUARD_AVAILABLErr rrloggerwarningr)rresultallowedreasonreportes r_security_scan_skillr(Ns t ' ) )tWIo>>>.v66 e  '//FLLLFLL L ?(//F NNQSY Z Z ZLLLFLL L  WWW8)QQUVVVVVVVVW 4s=B3B CB;;Cr@i skill_pathc ddlm} |}n#t$r|}YnwxYw|D]D} |||cS#t tf$rYAwxYwt S)uReturn the skills root directory (local or external_dirs entry) that contains ``skill_path``. Falls back to the local ``SKILLS_DIR`` if no match is found (defensive — callers should have located the skill via ``_find_skill`` first). rget_all_skills_dirs)agent.skill_utilsr-resolveOSError relative_to ValueError SKILLS_DIR)r*r-resolvedroots r_containing_skills_rootr6ss 655555%%'' $#%%    0 0 0KKKG$    H  s ,,(A''A;:A;namec ddlm}||}|dr d|d|dSn-#t$r t d|d YnwxYwd S) a.Return a refusal message if *name* is pinned, else None. Pinned skills are off-limits to the agent's skill_manage tool. The only way to modify one is for the user to unpin it via ``hermes curator unpin `` (or edit it directly by hand). This mirrors the curator's own pinned-skip behavior but extends the guard to tool-driven writes as well, giving users a hard fence against accidental agent edits. Best-effort: if the sidecar is unreadable we let the write through rather than block on a broken telemetry file. r) skill_usagepinnedSkill 'z^' is pinned and cannot be modified by skill_manage. Ask the user to run `hermes curator unpin z` if they want the change.z!pinned-guard lookup failed for %sTrN)toolsr9 get_recordgetrr!debug)r7r9recs r _pinned_guardrAs O%%%%%%$$T** 778   J$JJ)-JJJ   OOO 8$ NNNNNO 4s8<'A&%A&iiz^[a-z0-9][a-z0-9._-]*$>assetsscripts templates referencesc|sdSt|tkr dtdSt|sd|dSdS)z>Validate a skill name. Returns error message or None if valid.zSkill name is required.zSkill name exceeds characters.zInvalid skill name 'ze'. Use lowercase letters, numbers, hyphens, dots, and underscores. Must start with a letter or digit.N)lenMAX_NAME_LENGTH VALID_NAME_REmatch)r7s r_validate_namerLsn )(( 4yy?""B_BBBB   t $ $  R4 R R R  4categoryc|dSt|tsdS|}|sdSd|vsd|vrd|dSt|tkr dtdSt |sd|dSdS) zFValidate an optional category name used as a single directory segment.NzCategory must be a string./\zInvalid category 'zn'. Use lowercase letters, numbers, hyphens, dots, and underscores. Categories must be a single directory name.zCategory exceeds rG) isinstancestrstriprHrIrJrK)rNs r_validate_categoryrUst h $ $,++~~H t h$(** Z Z Z Z  8}}&&@?@@@@   x ( (  Z Z Z Z  4rMcontentcj|sdS|dsdStjd|dd}|sdS|d|dz} t j|}n!#t j$r}d|cYd}~Sd}~wwxYwt|tsd Sd |vrd Sd |vrd Stt|d tkr dtdS|| dzd}|sdSdS)z Validate that SKILL.md content has proper frontmatter with required fields. Returns error message or None if valid. zContent cannot be empty.z---zPSKILL.md must start with YAML frontmatter (---). See existing skills for format.z \n---\s*\nNzISKILL.md frontmatter is not closed. Ensure you have a closing '---' line.zYAML frontmatter parse error: z6Frontmatter must be a YAML mapping (key: value pairs).r7z&Frontmatter must include 'name' field. descriptionz-Frontmatter must include 'description' field.zDescription exceeds rGzRSKILL.md must have content after the frontmatter (instructions, procedures, etc.).)rT startswithresearchstartyaml safe_load YAMLErrorrRdictrHrSMAX_DESCRIPTION_LENGTHend)rV end_match yaml_contentparsedr'bodys r_validate_frontmatterrhs~ ==??*))   e $ $baa -55I [ZZ1Y__..223L4 -- >4443333333334 fd # #HGG V77F"">> 3vm$ % %&&)???J&<JJJJ 9==??Q&'' ( . . 0 0D dcc 4s/BB"BB"B"SKILL.mdlabelctt|tkr|dt|ddtddSdS)zCheck that content doesn't exceed the character limit for agent writes. Returns an error message or None if within bounds. z content is ,z characters (limit: za). Consider splitting into a smaller SKILL.md with supporting files in references/ or templates/.N)rHMAX_SKILL_CONTENT_CHARS)rVrjs r_validate_content_sizernsY  7||--- - -#g,, > - -. 5 - - - 4rMc4|r t|z |z St|z S)zFBuild the directory path for a new skill, optionally under a category.)r3)r7rNs r_resolve_skill_dirrps%,H$t++  rMcddlm}|D]L}|s|dD]}|jj|kr d|jiccS MdS)z Find a skill by name across all skill directories. Searches the local skills dir (~/.hermes/skills/) first, then any external dirs configured via skills.external_dirs. Returns {"path": Path} or None. rr,ripathN)r.r-existsrglobparentr7)r7r- skills_dirskill_mds r _find_skillrxs655555))++11   ""  "((44 1 1H#t++000000, 1 4rM file_pathc:ddlm}|sdSt|}||rdS|jr|jdtvr0dt t}d|d|dSt|jd krd |jdd Sd S) z Validate a file path for write_file/remove_file. Must be under an allowed subdirectory and not escape the skill dir. r)has_traversal_componentzfile_path is required.z%Path traversal ('..') is not allowed.z, zFile must be under one of: z. Got: ''z5Provide a file path, not just a directory. Example: 'z /myfile.md'N)tools.path_securityr{rpartsALLOWED_SUBDIRSjoinsortedrH)ryr{ normalizedr$s r_validate_file_pathr(s <;;;;; (''iJy))766  Kz/2/II))F?3344JWJJiJJJJ : q  gzGWXYGZgggg 4rMcDddlm}||z }|||}|rd|fS|dfS)zNResolve a supporting-file path and ensure it stays within the skill directory.r)validate_within_dirN)r~r)rryrtargeterrors r_resolve_skill_targetrDsL777777  "F   2 2E U{ 4<rMutf-8encodingc|jddtjt |jd|jdd\}} t j|d|5}||d d d n #1swxYwYt||d S#t$rE t j |n-#t$r td |d YnwxYwwxYw) au Atomically write text content to a file. Uses a temporary file in the same directory and os.replace() to ensure the target file is never left in a partially-written state if the process crashes or is interrupted. Args: file_path: Target file path content: Content to write encoding: Text encoding (default: utf-8) Tparentsexist_ok.z.tmp.)dirprefixsuffixwrNz6Failed to remove temporary file %s during atomic writer)rumkdirtempfilemkstemprSr7osfdopenwriter runlinkr0r!r)ryrVrfd temp_pathfs r_atomic_write_textrOsi4$777$   ! !(9>(((MB  Yr3 2 2 2 a GGG                  y),,,,,  m Ii  m m m LLQS\gkL l l l l l m sTB)*B  B) BB)BB)) C84C C8 'C30C82C33C8ct|}|rd|dSt|}|rd|dSt|}|rd|dSt|}|rd|dSt |}|rdd|d|dddSt ||}|dd|d z }t||t|}|rtj |d d|dSdd |d t| tt|d }|r||d<d||d<|S)z.Create a new user skill with SKILL.md content.FsuccessrzA skill named 'z' already exists at rrrTrri) ignore_errorsr;z ' created.)rmessagerrrwrNzTo add reference files, templates, or scripts, use skill_manage(action='write_file', name='{}', file_path='references/example.md', file_content='...')hint)rLrUrhrnrxrprrr(shutilrmtreerSr1r3format) r7rVrNerrexistingrrw scan_errorr#s r _create_skillrss   C 0 3/// X & &C 0 3///  ( (C 0 3///  ) )C 0 3///4  H TtTT&AQTTT   #422I OOD4O000:%Hx)))&i00J7 it4444 :666-T---I))*5566MM F &%z nntntuynznz 6N MrMct|}|rd|dSt|}|rd|dSt|}|s dd|ddSt|}|rd|dS|ddz }|r|dnd }t ||t|d}|r|t ||d|dSd d|d t|dd S) z:Replace the SKILL.md of any existing skill (full rewrite).Frr;z7' not found. Use skills_list() to see available skills.rrrirrNTz ' updated.rrrr) rhrnrxrArs read_textrr(rS)r7rVrr pinned_errrworiginal_contentrs r _edit_skillrsY  ( (C 0 3///  ) )C 0 3///4  H t +rT+r+r+rssst$$J7 :666*,H?G?P?PZx))7);;;VZx)))&hv&677J7  ' x)9 : : : :666-T---HV$%%  rM old_string new_string replace_allc |sdddS|dddSt|}|s dd|ddSt|}|rd|dS|d}|r1t|}|rd|dSt||\} }|rd|dSn|d z } | sdd | |dS| d } d dlm} | | |||\} } }}|rS| ddt| dkrdndz}|} d dlm }|||| || z }n#t$rYnwxYwd||dS|sd n|}t| |}|rd|dS|st| }|rdd|dS| }t| | t|}|rt| |d|dSdd|sd n|d|d| d| dkrdndd dS)zTargeted find-and-replace within a skill file. Defaults to SKILL.md. Use file_path to patch a supporting file instead. Requires a unique match unless replace_all is True. Fz#old_string is required for 'patch'.rNzOnew_string is required for 'patch'. Use an empty string to delete matched text.r; ' not found.rrrizFile not found: rrr)fuzzy_find_and_replaceiz...r)format_no_match_hint)rr file_previewrjz&Patch would break SKILL.md structure: TzPatched z in skill 'z' (z replacementsz).rr)rxrArrrsr1rtools.fuzzy_matchrrHrrrnrhrr()r7rrryrrrrrrrVr new_content match_count _strategy match_errorpreviewerr_msgr target_labelrrs r _patch_skillrsi R +PQQQ +|}}}4  H I +GT+G+G+GHHHt$$J7 :666 I (!),,  4$s33 3+IyAA   4$s33 3 4Z' ==??_ +]f>P>PQZ>[>[+]+]^^^00G 9888887M7MZ884Ki  $3$-CLL3,>,>55BG  > > > > > > ++KjRYZZ ZGG    D #   &/=::IL L A A AC 0 3/// #K00   G#GG  v{+++&i00J76#3444 :666Z HjjyZZUYZZ^iZZJMNNNwzwzTVZZZ  sD D)(D) absorbed_intoct|}|s dd|ddSt|}|rd|dS|ft|trQ|r=|}||kr dd|ddSt|}|s dd|ddS|d }t |}t j||j}||krI| r5t| s| d|d } |Dt|tr/|r| d |d z } d | dS)u<Delete a skill. ``absorbed_into`` declares intent: - ``None`` / missing → caller didn't declare (legacy / non-curator path); accepted for backward compat but logs a warning because the curator classification pipeline can't tell consolidation from pruning without it. - ``""`` (empty) → explicit "truly pruned, no forwarding target". - ``""`` → content was absorbed into that umbrella; the target must exist on disk. Validated here so the model can't claim an umbrella that doesn't exist. Fr;rrNzabsorbed_into='z'' cannot equal the skill being deleted.zR' does not exist. Create or patch the umbrella skill first, then retry the delete.rrz ' deleted.z Content absorbed into ''.Tr) rxrArRrSrTr6rrrursanyiterdirrmdir) r7rrr target_namerr skills_rootrurs r _delete_skillr3s4  H I +GT+G+G+GHHHt$$J7 :666 Z s%C%C H[H[H]H] #))++ $   _;___ [))  XkXXX  I))44K M) F V^^=M=M9N9N ((((G Z s%C%C H[H[H]H] Gm.A.A.C.CGGGG  rM file_contentct|}|rd|dS|s |dkrdddSt|d}|tkrdd|ddtdd dSt || }|rd|dSt |}|s dd |d dSt |}|rd|dSt|d |\}}|rd|dS|j dd| r| dnd}t||t|d } | r.|t||n|dd| dSdd|d|dt|dS)z>Add or overwrite a supporting file within any skill directory.Frrzfile_content is required.rzFile content is rlz bytes (limit: z7 bytes / 1 MiB). Consider splitting into smaller files.rr;z2' not found. Create it first with action='create'.rrTrrN) missing_okFile 'z' written to skill 'rr)rrHencodeMAX_SKILL_FILE_BYTESrnrxrArrurrsrrr(rrS) r7ryrr content_bytesrrrrrs r _write_filerls6 i ( (C 0 3/// HLB.. +FGGG ++G4455M+++:=;::/D:::    !Y ? ? ?C 0 3///4  H o +mT+m+m+mnnnt$$J7 :666'(8)DDKFC 0 3/// Mt444=C]]__Vv'''999RVv|,,,&hv&677J7  ' v'7 8 8 8 8 MMTM * * * :666CICC4CCCF   rMc t|}|rd|dSt|}|s dd|ddSt|}|rd|dS|d}t||\}}|rd|dS|sg}t D]|}||z } | ra| dD]K} | r5|t| |L}dd|d|d |r|nd d S| |j } | |krI| r5t| s| d d|d |d dS)z2Remove a supporting file from any skill directory.Frr;rrr*rz' not found in skill 'rN)rravailable_filesTz' removed from skill 'r)rrxrArrsrrtis_fileappendrSr1rrurrr) r7ryrrrrr availablesubdirdrrus r _remove_filers i ( (C 0 3///4  H I +GT+G+G+GHHHt$$J7 :666 I' 9==KFC 0 3/// ==??   % H HFF"Axxzz HHHAyy{{H!((Q]]9-E-E)F)FGGGGiGGtGGG,5?yy4    MMOOO]F v}}s6>>;K;K7L7L EIEETEEE  rMactionc R|dkr%|stddSt|||} n|dkr$|stddSt||} n|dkr:|stddS|td dSt|||||} n|d krt || } nq|d kr8|stddS|tddSt |||} n3|dkr$|stddSt ||} n dd|dd} | dr_ ddlm } | dn#t$rYnwxYw ddl m } m } |dvr | |n|d kr | |n#t$rYnwxYwtj| dS)zz Manage user-created skills. Dispatches to the appropriate action handler. Returns JSON string with results. createzVcontent is required for 'create'. Provide the full SKILL.md text (frontmatter + body).F)reditzGcontent is required for 'edit'. Provide the full updated SKILL.md text.patchz=old_string is required for 'patch'. Provide the text to find.NzLnew_string is required for 'patch'. Use empty string to delete matched text.delete)r write_filezJfile_path is required for 'write_file'. Example: 'references/api-guide.md'z*file_content is required for 'write_file'. remove_filez(file_path is required for 'remove_file'.zUnknown action 'z<'. Use: create, edit, patch, delete, write_file, remove_filerrr) clear_skills_system_prompt_cacheT)clear_snapshot) bump_patchforget)rrrr) ensure_ascii) tool_errorrrrrrrr>agent.prompt_builderrrtools.skill_usagerrjsondumps)rr7rVrNryrrrrrr#rrrs r skill_managers" GvAFGGG GtWh77 6   xgqvwww wT7++ 7   n]glmmm m  lv{||| |dJ I{SS 8  t=AAA <   {jtyzzz z  JTYZZZ ZT9l;; =  YHRWXXX XdI..#.E.E.E.EFF zz)  M M M M M M , ,D A A A A A    D    < < < < < < < <GGG 4    8##t     D  :f5 1 1 11s$5E EE)F FFruManage skills (create, update, delete). Skills are your procedural memory — reusable approaches for recurring task types. New skills go to u/skills/; existing skills can be modified wherever they live. Actions: create (full SKILL.md + optional category), patch (old_string/new_string — preferred for fixes), edit (full SKILL.md rewrite — major overhauls only), delete, write_file, remove_file. On delete, pass `absorbed_into=` when you're merging this skill's content into another one, or `absorbed_into=""` when you're pruning it with no forwarding target. This lets the curator tell consolidation from pruning without guessing, so downstream consumers (cron jobs that reference the old skill name, etc.) get updated correctly. The target you name in `absorbed_into` must already exist — create/patch the umbrella first, then delete. Create when: complex task succeeded (5+ calls), errors overcome, user-corrected approach worked, non-trivial workflow discovered, or user asks you to remember a procedure. Update when: instructions stale/wrong, OS-specific failures, missing steps or pitfalls found during use. If you used a skill and hit issues not covered by it, patch it immediately. After difficult/iterative tasks, offer to save as a skill. Skip for simple one-offs. Confirm with user before creating/deleting. Good skills: trigger conditions, numbered steps with exact commands, pitfalls section, verification steps. Use skill_view() to see format examples. Pinned skills are off-limits — all write actions refuse with a message pointing the user to `hermes curator unpin `. Don't try to route around this by renaming or recreating.objectstring)rrrrrrzThe action to perform.)typeenumrYzSkill name (lowercase, hyphens/underscores, max 64 chars). Must match an existing skill for patch/edit/delete/write_file/remove_file.)rrYzFull SKILL.md content (YAML frontmatter + markdown body). Required for 'create' and 'edit'. For 'edit', read the skill first with skill_view() and provide the complete updated text.zText to find in the file (required for 'patch'). Must be unique unless replace_all=true. Include enough surrounding context to ensure uniqueness.zXReplacement text (required for 'patch'). Can be empty string to delete the matched text.booleanzZFor 'patch': replace all occurrences instead of requiring a unique match (default: false).zOptional category/domain for organizing the skill (e.g., 'devops', 'data-science', 'mlops'). Creates a subdirectory grouping. Only used with 'create'.zPath to a supporting file within the skill directory. For 'write_file'/'remove_file': required, must be under references/, templates/, scripts/, or assets/. For 'patch': optional, defaults to SKILL.md if omitted.z0Content for the file. Required for 'write_file'.uFor 'delete' only — declares intent so the curator can tell consolidation from pruning without guessing. Pass the umbrella skill name when this skill's content was merged into another (the target must already exist). Pass an empty string when the skill is truly stale and being pruned with no forwarding target. Omitting the arg on delete is supported for backward compatibility but downstream tooling (e.g. cron-job skill reference rewriting) will have to guess at intent.) rr7rVrrrrNryrr)r propertiesrequired)r7rY parameters)registryrc t|dd|dd|d|d|d|d|d|d |d d |d  S)Nrrr7rVrNryrrrrFr) rr7rVrNryrrrrr)rr>)argskws rrs|xx"%% XXfb ! !##*%%((;''XXn--88L))88L))HH]E22hh// 1 1 1rMu📝)r7toolsetschemahandleremoji)ri)N)r)NF)NNNNNNFN)D__doc__rloggingrr[rrpathlibrhermes_constantsrrtypingrrrr utilsr r rr getLogger__name__r!tools.skills_guardr rrr ImportErrorboolrrSr(r^ HERMES_HOMEr3rIrbr6rArmrcompilerJrrLrUrhrnrprxrrrrrrrrrrSKILL_MANAGE_SCHEMAtools.registryrrregisterrMrrsdB  AAAAAAAA------------11111111%%%%%%  8 $ $WWWWWWWWWWd&DXc]4 o 8 # , 6"  455 CBB  #    #8C=2$3$8C=$$$$N  C  Xc]    SC4chtCH~6$38C=8TceHTNT\]`TaDa>b$RVH666c6S6DcN6666r"c"C"DcN""""R __ ___ _  _  #s(^ ____D666HSM6T#s(^6666r5c5c55c3h5555p,s,s,tCH~,,,,lF2F2 F2 F2F2 F2  F2  F2F2F2F2F2 F2F2F2F2\  1//11 1 1 1:!ZZZ7 !a!U!)!2"{ !/!N!Q !?  {K K Xv&]OO?oof0///////    1 1 s A!!A+*A+