iX UdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl mZddlmZmZmZmZejeZddlmZmZddlmZddlmZmZmZm Z de!d ed e!fd Z"e"d d e#dZ$e"dde%dZ&dZ'dZ(de!de)fdZ*de+e!efde)fdZ,dZ-iZ.e+e!e!fe/d<e j0Z1ddl Z e j2Z3dZ4dZ5dZ6dZ7de!fdZ8de!fd Z9d!e!ddfd"Z:dd#Z;dd$ld%e!d&e!de+fd'Z?ej@d(ZAd)e!de!dzfd*ZBd+e!d&e!de!fd,ZCdd.e#de!fd/ZDdd%ed1e#de!fd2ZEd3e!de)fd4ZFd%e!d5e#deGe!e#ffd6ZHd%e!deGe!e)ffd7ZIde)fd8ZJd%e!de!fd9ZKd%e!dzdeGe!dze!dzffd:ZLdd;lMmNZOddlUmVZWdd?lXmYZZdd@l[m\Z]ddAl^m_Z_dBZ`iZaee!efe/dC<iZbee!e%fe/dD<e j0ZciZdee!e j0fe/dE<e j0ZedafdFagiZhee!ee!effe/dG<dHe!dIee!effdJZidHe!fdKZjdHee!de!fdLZke#dfde!d e!d e!fdMZldee!effdNZmdOendzdee!effdPZo dd&e!dQe!dRe!dSe#dTe+dUe+dVe+dHe!dWe!fdXZpddZe#fd[Zqd\Zrd]Zsd^ZtdHe!fd_ZudHe!de)fd`ZvdaZwdHe!fdbZxdcZye jzeyd%e!dde#de!dzfdeZ{d%e!de)fdfZ|ej@dgej}Z~ej@dhZej@diZej@djej}ej@dkej}ej@dlej}ej@dmej}ej@dnej}ej@doej}ej@dpej}ej@dqej}fZd%e!de)fdrZd%e!de!dzfdsZdte)due)deGfdvZ dd%e!due)dSee#dHee!dwe)d)ee!dxe)dte)dyeee!de!fdzZde)fd{Zed|kr\ed}ed~emZededed&ededededededRededSdededZdesededededededededededededdZedejdddedejdeedejddeedejdeedejdeedejdejddlmZedejdededejddedejddddlmZde`dddddddFddde$de$dddddddddFddddFddddiddœdÜd%gdĜdŜZdƄZejzddeeeddȬɦdS)a Terminal Tool Module A terminal tool that executes commands in local, Docker, Modal, SSH, Singularity, Daytona, and Vercel Sandbox environments. Supports local execution, containerized backends, and cloud sandboxes, including managed Modal mode. Environment Selection (via TERMINAL_ENV environment variable): - "local": Execute directly on the host machine (default, fastest) - "docker": Execute in Docker containers (isolated, requires Docker) - "modal": Execute in Modal cloud sandboxes (direct Modal or managed gateway) - "vercel_sandbox": Execute in Vercel Sandbox cloud sandboxes Features: - Multiple execution backends (local, docker, modal, vercel_sandbox) - Background task support - VM/container lifecycle management - Automatic cleanup after inactivity Cloud sandbox note: - Persistent filesystems preserve working state across sandbox recreation - Persistent filesystems do NOT guarantee the same live sandbox or long-running processes survive cleanup, idle reaping, or Hermes exit Usage: from terminal_tool import terminal_tool # Execute a simple command result = terminal_tool("ls -la") # Execute in background result = terminal_tool("python server.py", background=True) N)Path)OptionalDictAnyList)is_interrupted_interrupt_event)_get_scratch_dir)coerce_modal_modehas_direct_modal_credentialsmanaged_nous_tools_enabledresolve_modal_backend_statenamedefault type_labelctj|}||dkr|S ||S#ttf$r#td|||||cYSwxYw)zParse module-level numeric env vars without breaking import. Terminal tool is imported by CLI, ACP, tests, and tool discovery. A single malformed env var must not make the whole module unloadable at import time. Nz;Invalid value for %s: %r (expected %s). Falling back to %r.)osgetenv TypeError ValueErrorloggerwarningrr converterrraws 8/home/ubuntu/.hermes/hermes-agent/tools/terminal_tool.py_safe_parse_import_envrNs )D//C {cRii y~~ z " I        s +1AATERMINAL_MAX_FOREGROUND_TIMEOUTiXintegerTERMINAL_DISK_WARNING_GBg@@numberz/vercel/sandbox)node24node22z python3.13runtimereturnc| p|tvSN)_SUPPORTED_VERCEL_RUNTIMES)r%s r_is_supported_vercel_runtimer*|s; ?'%???configcb|dpd}t|s8dt}t d||dS|dd}|dvrt d |dStj d t d dSttj d }ttj d}ttj d}ttj d}|rdS|s|s|r$|r|r|rdSt ddSt ddS)z6Validate Vercel Sandbox terminal backend requirements.vercel_runtimerz, zVVercel Sandbox runtime %r is not supported. Set TERMINAL_VERCEL_RUNTIME to one of: %s.Fcontainer_disk)rr0zmVercel Sandbox does not support custom TERMINAL_CONTAINER_DISK=%s. Use the default shared setting (51200 MB).vercelNzNvercel is required for the Vercel Sandbox terminal backend: pip install vercelVERCEL_OIDC_TOKEN VERCEL_TOKENVERCEL_PROJECT_IDVERCEL_TEAM_IDTzVercel Sandbox backend selected with token auth, but VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID must all be set together. VERCEL_OIDC_TOKEN is supported for one-off local development only.zVercel Sandbox backend selected but no supported auth configuration was found. Set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID for normal use. VERCEL_OIDC_TOKEN is supported for one-off local development only.) getstripr*joinr)rerror importlibutil find_specboolrr)r,r% supporteddiskhas_oidc has_token has_projecthas_teams r"_check_vercel_sandbox_requirementsrDszz*++1r88::G ' 0 0II899   9      u ::& . .D :  9    u~))1 \   uBI12233HRY~..//Iry!45566KBI.//00Ht K 8     4  &   u LL  5r+cd t}d}ddl}|t|dz D]}t|dD]g}|rQ ||jz }4#t$r&}t d||Yd}~_d}~wwxYwh|dz }|tkr#t d|tdSd S#t$r(}t d |d Yd}~d Sd}~wwxYw) z4Check if total disk usage exceeds warning threshold.rNhermes-**zCould not stat file %s: %si@z\Disk usage (%.1fGB) exceeds threshold (%.0fGB). Consider running cleanup_all_environments().TFz#Disk usage warning check failed: %sexc_info)r globstrrrglobis_filestatst_sizeOSErrorrdebugDISK_USAGE_WARNING_THRESHOLD_GBr Exception) scratch_dir total_bytesrJpathfetotal_gbs r_check_disk_usage_warningrZs}&((   IIc+ ":;;<< I ID$ZZ%%c** I I99;;II#qvvxx'77 "III %A1aHHHHHHHHII I), 5 5 5 NNy#%D F F F4u  :A MMMuuuuusBA3C=6BC= CB>9C=>C6C== D/D**D/_sudo_password_cachec.ttddS)N sudo_passwordgetattr _callback_tlsr+r_get_sudo_password_callbackrbs =/4 8 88r+c.ttddS)Napprovalr^rar+r_get_approval_callbackres =*d 3 33r+c|t_dS)uRegister a callback for sudo password prompts (used by CLI). Per-thread scope — ACP sessions that run concurrently in a ThreadPoolExecutor each have their own callback slot. N)r`r]cbs rset_sudo_password_callbackris #%Mr+c|t_dS)uRegister a callback for dangerous command approval prompts. Per-thread scope — ACP sessions that run concurrently in a ThreadPoolExecutor each have their own callback slot. See GHSA-qg5c-hvr5-hjgr. N)r`rdrgs rset_approval_callbackrks Mr+c ddlm}|dd}n%#t$rtjdd}YnwxYw|rd|St }|Zt |dd}t |dd}|$|"d t|d t|Sd t|Sd tj S) z6Return the cache scope for interactive sudo passwords.rget_session_envHERMES_SESSION_KEYrzsession:N__self____func__zcallback-owner::z callback:zthread:) gateway.session_contextrnrSrrrbr_id threading get_ident)rn session_keycallbackownerfuncs r_get_sudo_password_cache_scoper{ s:;;;;;;%o&:B?? :::i 4b99 :('+'''*,,H*d33xT22  !1;RYY;;D;; ;)2h<<))) ,Y(** , ,,s 77ct}t5t|dcdddS#1swxYwYdS)z6Return the cached sudo password for the current scope.rN)r{_sudo_password_cache_lockr[r6)scopes r_get_cached_sudo_passwordrs * , ,E "33#''r22333333333333333333s>AApasswordct}t5|r |t|<nt|dddddS#1swxYwYdS)z.Persist a sudo password for the current scope.N)r{r}r[pop)rr~s r_set_cached_sudo_passwordr&s * , ,E "22  2*2  ' ' $ $UD 1 1 1 222222222222222222s)A  AAcxt5tddddS#1swxYwYdS)z`Clear all cached sudo passwords. Internal helper for tests and process teardown paths. N)r}r[clearrar+r_reset_cached_sudo_passwordsr0s #%%""$$$%%%%%%%%%%%%%%%%%%s /33)check_all_command_guardscommandenv_typec>t||tS)zJDelegate to consolidated guard (tirith + dangerous cmd) with CLI callback.)approval_callback)_check_all_guards_implre)rrs r_check_all_guardsrBs* !'84J4L4L N N NNr+z^[A-Za-z0-9/\\:_\-.~ +@=,]+$workdirc|sdSt|s6|D]1}t|sdt|dcS2dSdS)zReject workdir values that don't look like a filesystem path. Uses an allowlist of safe characters rather than a deny-list, so novel shell metacharacters can't slip through. Returns None if safe, or an error message string if dangerous. Nz/Blocked: workdir contains disallowed character z<. Use a simple filesystem path without shell metacharacters.z0Blocked: workdir contains disallowed characters.)_WORKDIR_SAFE_REmatchrepr)rchs r_validate_workdirrOs t  ! !' * *B  B#))"-- Qd2hhQQQ  BA 4r+outputctjd}|s|Sgd}|D]}||vrddlm}|d|dzcS |S)z Check for sudo failure and add helpful message for messaging contexts. Returns enhanced output if sudo failed in messaging context, else original. HERMES_GATEWAY_SESSION)zsudo: a password is requiredzsudo: no tty presentzsudo: a terminal is requiredrdisplay_hermes_homeu@ 💡 Tip: To enable sudo over messaging, add SUDO_PASSWORD to z/.env on the agent machine.)rrhermes_constantsr)rr is_gateway sudo_failuresfailure_dhhs r_handle_sudo_failureres 344J  M !EE f   D D D D D DEaeaeagagEEEE E E E  Mr+-timeout_secondscFddl}t}| |pdS#t$rYdSwxYwdddfd} dtjd<t jd ttd td td td tdtd|ddzdztdttdddtj |d}| | |dr~dpd}t|rtdntdt|j |dtjvrtjd=SStdtdt|j  dtjvrtjd=dSdS#ttf$rettdt|j Ydtjvrtjd=dSdSt$rT}td |d!|j Yd}~dtjvrtjd=dSdSd}~wwxYw#dtjvr tjd=wxYw)"a Prompt user for sudo password with timeout. Returns the password if entered, or empty string if: - User presses Enter without input (skip) - Timeout expires (45s default) - Any error occurs Only works in interactive mode (HERMES_INTERACTIVE=1). If a _sudo_password_callback is registered (by the CLI), delegates to it so the prompt integrates with prompt_toolkit's UI. Otherwise reads directly from /dev/tty with echo disabled. rNrF)rdonecd}d} tjdkr\ddl}g} |}|dvrn#|dkrt||.read_password_threads * "  I-- $ AL((F{{//LLOOO $&(WWU^^z""R[99#--f55 #--f55 (|w|m; ! !!&'*;YGGG$**A^ 3 3LLOOO $ &)XXe__%;%;GI%;%V%Vz"+W5 $ $ $!#F:    $ $ $!#F:    $!i&;Q....&&vx/A9MMMM QQQLL!LaPPPPPPPPQ!BHV$$$$ BBBLL!=qAAAAAAAAB!F6NNN!i&;Q....&&vx/A9MMMM QQQLL!LaPPPPPPPPQ!BHV$$$$ BBBLL!=qAAAAAAAAB!F6N ! ! ! !sEEH5F 6H58F H5F  H5 F22 G!<GG!'G<< H+H&&H+5K; IK J &JKJ  KJ&%K& K0K KK K1HERMES_SPINNER_PAUSEg?u┌──────────────────────────────────────────────────────────┐uA│ 🔐 SUDO PASSWORD REQUIRED │u├──────────────────────────────────────────────────────────┤u?│ Enter password below (input is hidden), or: │uA│ • Press Enter to skip (command fails gracefully) │u│ • Wait zs to auto-skipz u│u└──────────────────────────────────────────────────────────┘z Password (hidden): T)endflushtargetdaemontimeoutrru1 ✓ Password received (cached for this session)u' ⏭ Skipped - continuing without sudou( ⏱ Timeout - continuing without sudoz (Press Enter to dismiss)u) ⏭ Cancelled - continuing without sudoz [sudo prompt error: z] - continuing without sudo )sysrbrSrenvirontimesleepprintruThreadstartr8stdoutrrr)rr_sudo_cbrpassword_threadrrXrs @r_prompt_for_sudo_passwordrsJJJ+,,H 8::# #   22  . .F."."."."."`03-0 )* 3  ())) CDDD ())) OPPP QRRR @@@@8KeSTTT ()))  %2T::::#*2FtTTT_555 &> j)/RH GGG AIJJJJ?@@@ GGG J     & "RZ / / 122 0# = > > > 0 1 1 1 GGG J      "RZ / / 1222 0 / ' (  9:::   "RZ / / 1222 0 /  IIIIJJJ rrr !RZ / / 1222 0 /  "RZ / / 12 2 2 2 2sJ # 11E-H. AH..ALL# L,,K;L;LLL limitc|dSt|tr |d|S t|d|S#t$rdt |jdcYSwxYw)z>Return a log-safe preview for possibly-invalid command values.Nz<>) isinstancerKrrStype__name__)rrs r_safe_command_previewrsx'3vv-G}}VeV$$ ---,4==),,,,,,-s<"A! A!tokencd|vs|drdS|dd\}}ttjd|S)zCReturn True when *token* is a leading shell environment assignment.=Frz^[A-Za-z_][A-Za-z0-9_]*$) startswithsplitr=rer)rr_values r_looks_like_env_assignmentrsW %5++C00u;;sA&&LD& 4d;; < <> " MM!M a a%%d 773<< r+c6tjddpd}|dkrdS t jgdtjtjtjdd}|jdkS#t$rYdSwxYw)aNReturn True when local sudo currently works without prompting. Only probes for the `local` terminal backend; Docker/SSH/Modal/etc. must not inherit the host's sudo state. Re-probes every call (no process-level cache) so an expired sudo timestamp cannot make a later command silently block waiting for a password. TERMINAL_ENVlocalF)rz-ntruer)stdinrstderrrcheckr) rrr7lower subprocessrunDEVNULL returncoderS) terminal_envprobes r_sudo_nopasswd_worksros9^W55;;==CCEEPLwu  " " "$%%    1$$ uusAB BBcTt|}d}d}d}d}g}||krv||}|dkr|dkr|dkrd}|dz })|r|dz }C|dkr!|d|}|dkrn|}j|dkr|dz|kr|dz }|dvr't||\} } t | |dz}|d kr |dz }|dz }|d krt d|dz }|dz }|d krA|dz|kr8||dzs||dzdkr |dz }|dz }!|d kr|dkr|dz}d}|dz };|dks|dkr|dz }N|d |s|d|r |dz}|dz }|dkr d}|dz }|dkr d}|dz }|dkr|dz|kr||dzdkr|dz }|dz } | dkr?|| r%| dz} | dkr|| %| dkr|| dvr|dz }*|dkr|||fd}|dz }Pt||\} } t | |dz}||kv|s|S|} t|D]{\} }| }||kr?| |r%|dz }||kr| |%| d|}| ||}| |dzd}|dz|zdz|z} || S)uWrap `A && B &` (or `A || B &`) to `A && { B & }` at depth 0. Bash parses ``A && B &`` with `&&` tighter than `&`, so it forks a subshell for the whole `A && B` compound and backgrounds it. Inside the subshell, `B` runs foreground, so the subshell waits for `B` to finish. When `B` is a long-running process (`python3 -m http.server`, `yes > /dev/null`, anything that doesn't naturally exit), the subshell never exits. It leaks as a process stuck in ``wait4`` forever — and on the way, its open stdout pipe can prevent the terminal tool from returning promptly. Rewriting the tail to `A && { B & }` preserves `&&`'s error semantics (skip B if A fails) while replacing the subshell with a brace group. The brace group runs in the current shell (no fork), backgrounds B as a simple command (bash doesn't wait for it in non-interactive mode), and exits immediately. B runs as a normal backgrounded child, orphaned when the parent shell exits. Handles redirects (``&>``, ``2>&1``) and skips content inside quoted strings and parenthesised subshells. Leaves simple ``cmd &`` alone — that construct doesn't have the subshell-wait bug. rrrrrrr)rr(r{}rr;|&rz<>Nz{ z& })rrrrmaxrrreversed)rrr paren_depth brace_depthlast_chain_op_endrewritesrnl_rjr chain_endamp_pos insert_posprefixmiddlesuffixs r_rewrite_compound_backgroundr,sg. G A AKK&(H a%% QZ ::+**{a/?/? "  FA  ::<<  FA  99dA&&BRxxA  ::!a%!)) FA    )'155IAvFAE""A  99 1 K FA  99aq11K FA  99QA(>(>(@(@GAPQENVZDZDZ 1 K FA  99q 1 K "  FA  ??kAoo FA    dA & & '*<*)r?r@s rregister_task_env_overridesrCs $-   r+c<t|ddS)z Clear environment overrides for a task after rollout completes. Called during cleanup to avoid stale entries accumulating. N)r>rr?s rclear_task_env_overridesrFs GT*****r+c |r |tvr|SdS)a Map a tool-call ``task_id`` to the container/sandbox key used by ``_active_environments``. The top-level agent passes ``task_id=None`` and lands on ``"default"``. ``delegate_task`` children pass their own subagent ID so that file-state tracking, the active-subagents registry, and TUI events stay distinct per child -- but we deliberately collapse that ID back to ``"default"`` here so subagents share the parent's long-lived container (one bash, one /workspace, one set of installed packages). Exception: RL / benchmark environments (TerminalBench2, HermesSweEnv, ...) call ``register_task_env_overrides(task_id, {...})`` to request a per-task Docker/Modal image. When an override is registered for a task_id, we honour it by returning the task_id unchanged -- those rollouts need their own isolated sandbox, which is the whole point of the override. rrBrEs r_resolve_container_task_idrHs!&7111 9r+c tj||} ||S#ttjf$rtd|d|d|dwxYw)zParse an environment variable with *converter*, raising a clear error on bad values. Without this wrapper, a single malformed env var (e.g. TERMINAL_TIMEOUT=5m) causes an unhandled ValueError that kills every terminal command. zInvalid value for : z (expected z1). Check ~/.hermes/.env or environment variables.)rrrjsonJSONDecodeErrorrs r_parse_env_varrMs )D' " "C y~~ , -    > > > > >: > > >    s "0Ac  d}tjdd}tjdddv}|dkrtj}n|dkrd}n|d krt}nd }tjd | rtj  d }d }|dkr|rtjd ptj}tjtj| t fd|DsStj r8tj r ds }d nj|dvrf rdt fd|D}tj  }|s|r% |krt d ||| id|dttjdddtjd|dtddt jddtjd d!|d"tjd#|d$tjd%|d&tjd'd(d) d*|d+|d,td-d.d/td0d1d2tjd3d(d4tjd5d(d6td7d8d9tjd:d(tjd;tjdddvtd?d@t&dAtdBdCtdDdEtjdFd=dvtdGdt jdtjdHddvdIS)JzBGet terminal environment configuration from environment variables.*nikolaik/python-nodejs:python3.11-nodejs20rr &TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACEfalse)r ryesssh~vercel_sandbox/root TERMINAL_CWDN)z/Users/z/home/zC:\zC:/dockerc3BK|]}|VdSr(r).0p candidates r z"_get_env_config..s1??A $$Q''??????r+) /workspacerVr_)modalrX singularitydaytonarUc3BK|]}|VdSr(rZ)r[r\cwds rr^z"_get_env_config..s/DD3>>!,,DDDDDDr+zeIgnoring TERMINAL_CWD=%r for %s backend (host/relative path won't work in sandbox). Using %r instead.r modal_modeTERMINAL_MODAL_MODEauto docker_imageTERMINAL_DOCKER_IMAGEdocker_forward_envTERMINAL_DOCKER_FORWARD_ENVz[]z valid JSONsingularity_imageTERMINAL_SINGULARITY_IMAGE docker:// modal_imageTERMINAL_MODAL_IMAGE daytona_imageTERMINAL_DAYTONA_IMAGEr.TERMINAL_VERCEL_RUNTIMErrdhost_cwddocker_mount_cwd_to_workspacerTERMINAL_TIMEOUT180lifetime_secondsTERMINAL_LIFETIME_SECONDS300ssh_hostTERMINAL_SSH_HOSTssh_userTERMINAL_SSH_USERssh_portTERMINAL_SSH_PORT22ssh_keyTERMINAL_SSH_KEYTERMINAL_SSH_PERSISTENTTERMINAL_PERSISTENT_SHELLr TERMINAL_LOCAL_PERSISTENTTERMINAL_CONTAINER_CPUrr"TERMINAL_CONTAINER_MEMORY5120TERMINAL_CONTAINER_DISK51200TERMINAL_CONTAINER_PERSISTENTTERMINAL_DOCKER_VOLUMES TERMINAL_DOCKER_RUN_AS_HOST_USER)ssh_persistentlocal_persistent container_cpucontainer_memoryr/container_persistentdocker_volumesdocker_run_as_host_user)rrrgetcwd_VERCEL_SANDBOX_DEFAULT_CWDrV expanduserabspathanyisabsisdirrrinfor rMrKloadsr7float) default_imagermount_docker_cwd default_cwdrt host_prefixesdocker_cwd_source is_host_path is_relativer]rds @@r_get_env_configrsAMy11Hy!I7SSYY[[_ss 7ikk U   % % %1  )NK 0 0C &g  %%H8M8 0In55DGOOBG$6$67H$I$IJJ ??????? ? ?  i(( -/W]]9-E-E NWNbNbczN{N{ !HC T T TY\ TDDDDmDDDDD '--,,,  K SK-?-? KKXX{ 4 4 4C# H# ' 2G(P(PQQ#   "9=II#  n-JDRVR\^jkk #  RY'CE`Q^E`E`aa #  ry!7GG #  #;]KK#  ")$=rBBHHJJ#  s#  H#  ()9#  >"4e<<#  N+FNN#  BI1266#  BI1266!# " N#6==## $ 29/44%# ,) % I16 : :   %'')*I&A7KKQQSSWkk((@#uhWW*+FOO()BGLL " *I6 R R X X Z Z^r r()BD$*Vbcc#%9-OQX#Y#Y#_#_#a#aey#yE# # # #r+recXt|ttdS)z2Resolve direct vs managed Modal backend selection.r`) has_direct managed_ready)rr r:)res r_get_modal_backend_staterDs0 &/113G<<   r+imagerdr ssh_configcontainer_config local_configrtc |pi} | dd} | dd} | dd} | dd} | d g}| d g}| d i}|d krt|| S|dkrEt|||| | | | |||| dd||| ddS|dkrt|||| | | | |S|dkr5i}| dkr| |d<| dkr| |d<| dkrE ddl}ddl}d||jjj vr| |d<n#t$rYnwxYwt| d}|ddkrt||||| |S|ddkrn|d rtd!|d"dkrtd#|d"dkrtd$d%}trd&}t|t||||| |S|d'kr&dd(lm}||||t%| | | | |S|d)kr.dd*lm}|| d+pd||| | | | |,S|d-kr|r*|d.r|d/std0t+|d.|d/|d1d2|d3d4||5Std6|d7)8a Create an execution environment for sandboxed command execution. Args: env_type: One of "local", "docker", "singularity", "modal", "daytona", "vercel_sandbox", "ssh" image: Docker/Singularity/Modal image name (ignored for local/ssh/vercel) cwd: Working directory timeout: Default command timeout ssh_config: SSH connection config (for env_type="ssh") container_config: Resource config for container backends (cpu, memory, disk, persistent) task_id: Task identifier for environment reuse and snapshot keying host_cwd: Optional host working directory to bind into Docker when explicitly enabled Returns: Environment instance with execute() method rrrr/r0rTrrj docker_envr )rdrrXruFr)rrdrcpumemoryr?persistent_filesystemr?volumesrtauto_mount_cwd forward_envenvrun_as_host_userra)rrdrrrr?rr?r`rrrNephemeral_diskreselected_backendmanaged)rrdrmodal_sandbox_kwargsrr?directmanaged_mode_blockedzModal backend is configured for managed mode, but a paid Nous subscription is required for the Tool Gateway and no direct Modal credentials/config were found. Log in with `hermes model` or choose TERMINAL_MODAL_MODE=direct/auto.modezZModal backend is configured for managed mode, but the managed tool gateway is unavailable.z_Modal backend is configured for direct mode, but no direct Modal credentials/config were found.zHModal backend selected but no direct Modal credentials/config was found.z`Modal backend selected but no direct Modal credentials/config or managed tool gateway was found.rb)DaytonaEnvironmentrU)VercelSandboxEnvironmentr.)r%rdrrrr?rr?rShostuserz?SSH environment requires ssh_host and ssh_user to be configuredportkeyr)rrrkey_pathrdrzUnknown environment type: zV. Use 'local', 'docker', 'singularity', 'modal', 'daytona', 'vercel_sandbox', or 'ssh')r6_LocalEnvironment_DockerEnvironment_SingularityEnvironmentinspectr` signatureSandboxcreate parametersrSr_ManagedModalEnvironmentrr _ModalEnvironmenttools.environments.daytonarint!tools.environments.vercel_sandboxr_SSHEnvironment)rrrdrrrrr?rtccrrr? persistentrrjrsandbox_kwargsrr` modal_statemessage_DaytonaEnvironment_VercelSandboxEnvironments r_create_environmentrMs,  RB &&! $ $C VV& - -F 66"E * *D.55Jff%r**G 4b99 b))J7 S':::: X  !S'F",g66"A5II*VV$=uEE     ] " "&S'F",g    W   77$'N5 ! A::'-N8 $ !88 %%%%%%%%#w'8'89M'N'N'YYY7;N#34    /rvvl/C/CDD ) *i 7 7+g%3&0'  ) *h 6 612  > 6"i// p6"h.. uaG)++ vW%% % S'!/",g    Y  XXXXXX""S'Cd",g    % % %      )(FF+,,4",     U   `!7!7 `z~~f?U?U `^__ _F#F#++^^E2..      M M M M   s3E88 FF,rxctj} ddlm}ttD]!}||r |t|<"n#t$rYnwxYwg}t5tt D]]\}}||z |krOt |d}t |d|| ||f^t5|D] \}}t |d! dddn #1swxYwYdddn #1swxYwY|D]+\}} ddlm}||n#t$rYnwxYw t#|dr|nIt#|dr|n$t#|dr|t*d|#t.$rl} t1| } d | vsd | vrt*d |nt*d || Yd} ~ %d} ~ wwxYwdS) zOClean up environments that have been inactive for longer than lifetime_seconds.rprocess_registryNclear_file_ops_cachecleanupstop terminatez,Cleaned up inactive environment for task: %s404 not found*Environment for task %s already cleaned up-Error cleaning up environment for task %s: %s)rtools.process_registryrlistr<keyshas_active_processes ImportError _env_lockitemsr;rr_creation_locks_lockr=tools.file_toolsrhasattrrrrrrrSrKrr) rx current_timerr? envs_to_stop last_timerr$rrX error_strs r_cleanup_inactive_envsrsq9;;L ;;;;;;N//1122 7 7G44W== 7*6w' 7      L  3 3"&~';';'='=">"> 8 8 GYi'*:::*..w==""7D111? ''#777" 3 3* 3 3 ##GT2222 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3%\\   = = = = = =  ) ) ) )    D  \sI&&  f%%  k**   KKF P P P P \ \ \AI !![IOO4E4E%E%E H'RRRRNPWYZ[[[  \'\\suAA$$ A10A1=B E $D:. E:D> >ED> EEE%E77 FFB H JA!JJc6tr t}t|dn4#t$r'}td|dYd}~nd}~wwxYwt dD]}tsntjd tdSdS)zKBackground thread worker that periodically cleans up inactive environments.rxzError in cleanup thread: %sTrHN<r) _cleanup_runningrrrSrrrangerr)r,rXr$s r_cleanup_thread_workerr s   L$&&F "6*<#= > > > > L L L NN8!dN K K K K K K K K Lr  A#  JqMMMM      s#- AAAct5tts6dat jt datddddS#1swxYwYdS)z;Start the background cleanup thread if not already running.NTr)r_cleanup_threadis_aliverrurrrrar+r_start_cleanup_threadr/s $$  "/*B*B*D*D "# '.6LUYZZZO  ! ! # # # $$$$$$$$$$$$$$$$$$sAA,,A03A0cdat6 tddS#ttf$rYdSwxYwdS)z#Stop the background cleanup thread.FNr)rrr8 SystemExitrrar+r_stop_cleanup_threadr:sb"    + + + + +-.    DD #"s (==ct|}t5t|pt|cdddS#1swxYwYdS)z9Return the active BaseEnvironment for *task_id*, or None.N)rHrr;r6)r?lookups rget_active_envr Es ' 0 0F UU#''//T3G3K3KG3T3TUUUUUUUUUUUUUUUUUUs4AAAcdt|}|dStt|ddS)aReturn True if the active environment for task_id is configured for cross-turn persistence (``persistent_filesystem=True``). Used by the agent loop to skip per-turn teardown for backends whose whole point is to survive between turns (docker with ``container_persistent``, daytona, modal, etc.). Non-persistent backends (e.g. Morph) still get torn down at end-of-turn to prevent leakage. The idle reaper (``_cleanup_inactive_envs``) handles persistent envs once they exceed ``terminal.lifetime_seconds``. NF _persistent)r r=r_)r?rs ris_persistent_envrLs5  ! !C {u ]E22 3 33r+cttt}d}|D]L} t||dz }#t$r(}t d||dYd}~Ed}~wwxYwt}ddl}|t|dz D]g} tj |dt d |5#t$r&}t d ||Yd}~`d}~wwxYw|dkrt d ||S) z3Clean up ALL active environments. Use with caution.rrzError cleaning %s: %sTrHNrF) ignore_errorszRemoved orphaned: %sz%Failed to remove orphaned path %s: %szCleaned %d environments)rr;r cleanup_vmrSrr9r rJrKshutilrmtreerrPrQ)task_idscleanedr?rXrTrJrVs rcleanup_all_environmentsr_s(--//00HGMM M w    qLGG M M M LL0'1tL L L L L L L L L M#$$KKKK #kJ67788KK K M$d 3 3 3 3 KK. 5 5 5 5 K K K LL@$ J J J J J J J J K{{ -w777 Ns/A A5 A00A521C$$ D.DDcd}t5t|d}t|ddddn #1swxYwYt5t |ddddn #1swxYwY ddlm}||n#t$rYnwxYw|dS t|dr| nIt|dr| n$t|dr| td|dS#t$rr}t!|}d|vsd |vrtd |n"td ||Yd}~dSYd}~dSd}~wwxYw) z4Manually clean up a specific environment by task_id.Nrrrrrz,Manually cleaned up environment for task: %srrrr)rr;rr<rr=rrrrrrrrrrSrKrr)r?rrrXrs rrrzs C **"&&w557D)))*************** ++GT***+++++++++++++++ 999999W%%%%       {X 3 " "  KKMMMM S& ! !  HHJJJJ S+ & &  MMOOO BGLLLLL XXXFF I   0A0A!A!A KKDg N N N N NNJGUV W W W W W W W W W O N N N N NXsO7A  AABB B B%% B21B2:B E GA!F<<Gcttr?tt}td|t dSdS)zBStop cleanup thread and shut down all remaining sandboxes on exit.z)Shutting down %d remaining sandbox(es)...N)rr;rrrr)counts r_atexit_cleanuprsU#()) ?GGG """""##r+ exit_codec|dkrdStjd|}|r|dn|}|}d}|D]7}d|vr|ds|dd}|sdSd d id d id d id d id d id d id d id d id d id d id d idddddd did }||}|r ||vr||SdS)a Return a human-readable note when a non-zero exit code is non-erroneous. Returns None when the exit code is 0 or genuinely signals an error. The note is appended to the tool result so the model doesn't waste turns investigating expected exit codes. rNz\s*(?:\|\||&&|[|;])\s*rrr-/rzNo matches found (not an error)z%Files differ (expected, not an error)zGSome directories were inaccessible (partial results may still be valid)z5Condition evaluated to false (expected, not an error)zCould not resolve hostzFailed to connect to hostz2HTTP response code indicated error (e.g. 404, 500)zOperation timed out)ruLNon-zero exit (often normal — e.g. 'git diff' returns 1 when files differ)) grepegrepfgreprgagackdiff colordiffrtest[curlgit)rrr7rr6) rrsegments last_segmentwordsbase_cmdw semantics cmd_semanticss r_interpret_exit_coder5stA~~t x17;;H$,9HRLL'@@BBL    EH  !88ALL--8 773<<# t 676767676767<=@A^_LMLM(*D%   cd1,,I6MM(++M(m33Y'' 4r+cd|}|dod|vS)auReturn True when PTY mode would break stdin-driven commands. Some CLIs change behavior when stdin is a TTY. In particular, `gh auth login --with-token` expects the token to arrive via piped stdin and waits for EOF; when we launch it under a PTY, `process.submit()` only sends a newline, so the command appears to hang forever with no visible progress.  z gh auth loginz --with-token)r8rrrr normalizeds r_command_requires_pipe_stdinr:sL'--////1122Jo.. ) j (r+z\b(?:nohup|disown|setsid)\bz\s&\sz\s&\s*(?:#.*)?$z@\b(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?(?:dev|start|serve|watch)\bz\bdocker\s+compose\s+up\bz\bnext\s+dev\bz\bvite(?:\s|$)z \bnodemon\bz \buvicorn\bz \bgunicorn\bz$\bpython(?:3)?\s+-m\s+http\.server\bcd|}d|vp-|dpd|vp|dS)zGReturn True for informational invocations that should never be blocked.r7z --helpz -hz --versionz -v)r8rrendswithr8s r#_looks_like_help_or_version_commandr=so'--////1122JZ &   u % % & : % &   u % % r+ct|rdSt|r dSt|st|r dSt D]}||r dSdS)zSuggest background mode when a foreground command looks long-lived. Prevents workflows that start a server/watch process and then stall before follow-up checks or test commands run. NzForeground command uses shell-level background wrappers (nohup/disown/setsid). Use terminal(background=true) so Hermes can track the process, then run readiness checks and tests in separate commands.zForeground command uses '&' backgrounding. Use terminal(background=true) for long-lived processes, then run health checks and tests in follow-up terminal calls.zThis foreground command appears to start a long-lived server/watch process. Run it with background=true, verify readiness (health endpoint/log signal), then execute tests in a separate command.)r=_SHELL_LEVEL_BACKGROUND_REsearch_INLINE_BACKGROUND_AMP_RE_TRAILING_BACKGROUND_AMP_RE_LONG_LIVED_FOREGROUND_PATTERNS)rpatterns r_foreground_background_guidancerE s +733t!((11  ?  !''00 4O4V4VW^4_4_  W  3 >>' " " <     4r+notify_on_complete backgroundc"|r |r|rd}d|fS|dfS)uKDecide what to do when both notify_on_complete and watch_patterns are set. These flags produce duplicate, delayed notifications when combined — one notification per watch-pattern match AND one on process exit, with async delivery that can spam the user long after the process ends. When both are set, we drop watch_patterns in favor of notify_on_complete (the more useful "let me know when it's done" signal) and return a human-readable note. Returns: (watch_patterns_to_use, conflict_note). conflict_note is "" when there is no conflict. zuwatch_patterns ignored because notify_on_complete=True; these two flags produce duplicate notifications when combinedNrra)rFwatch_patternsrGnotes r#_resolve_notification_flag_conflictrKAs=$(^ L Tz 2 r+forceptyrIc  t|ts]tdt |jt jdddt |jdddSt} | d } t|} t | i} | d kr| d p| d } nn| d kr| d p| d } nJ| dkr| dp| d} n&| dkr| dp| d} nd} | dp| d}| d}|p|}|s1|r/|tkr$t jdd|dtdidS|s,t|}|rt jdd|dddStt5| t vr+t#jt$| <t | }d}nd}dddn #1swxYwY|rTt&5| t(vrt+jt(| <t(| }dddn #1swxYwY|5t5| t vr*t#jt$| <t | }d}dddn #1swxYwY|r| d krt/td| | dd d}| dkrl| dd| dd| dd| d d| d!dd"}d}| d#vr| d$d%| d&d'| d(d)| d*d| d+d,| d-d| d.g| d/d| d0g| d1i| d2dd3 }d}| d4krd5| d6di}t3| | |||||| | d78 }nB#t4$r5}t jddd9|d:d;ddcYd}~cdddSd}~wwxYwt5|t | <t#jt$| <|}dddn #1swxYwYtd<| | dddddn #1swxYwYd}|sMt7|| }|d=s| d>d?krnt jdd| d@dAd?| dB|| dCdD| dEddFdS| dCdD}dG|dH}t jdd| d@|dIddS| dJr| dCdK}dL|dM}n1| dNr| dCdK}dO|dP}|r]t9|}|rLtdQ|ddRt;|t jdd|dIddSd}|} |rt=|rd} dS}|r-dTdUlm }!dTdVl!m"}"|!dW}#|p|}$ | d4kr3|"#||$| |#tI|dXr|j%nd| Y}%n|"&|||$| |#Z}%d[|%j'|%j(dTdd\}&|r||&d]<|r||&d^<|rk|s|rgdTd_l)m*}'|'d`d}(|(rS|'dad})|'dbd}*|'dcd}+|'ddd},|(|%_+|)|%_,|+|%_-|,|%_.|*|%_/tatc||tc|e\}}-|-r&tdf|%j'|-|-|&dg<|r^|r\d|%_2d|&dh<|%j+rIdi|%_3|"j45|%j'di|#|%j+|%j,|%j-|%j.|%j/ddj |r |rtm||%_7|%j7|&dk<t j|&dS#tp$r4}t jdddlt|dmdcYd}~Sd}~wwxYwdn}.dT}/d}0|/|.kre d|i}1|r||1d<|j9|fi|1}0nH#tp$r:}t|:}2d|2vr#t jddodp|dqdmdcYd}~S|/|.krd|/d%z }/dr|/z}3tds|3|/|.t;|t |j|| | t#j;|3Yd}~t<dt|.t;|t |j|| | t jdddut |jdvt|dmdcYd}~Sd}~wwxYw |0 dwd}4|0 dxdT}5t{|4| }4 dTdyl>m?}6|6dz||4|5| pd| {}7|7D]}8t|8tr|8}4nn#tp$rYnwxYwdTd|l@mA}9|9}:t|4|:kr[t|:d}z};|:|;z }|4d|;|>z|4|< dz}4dTdlDmE}?|?|4}4dTdlFmG}@|4r|@|4Hnd}4t||5}A|4|5ddm}B|r||Bd]<|Ar|A|Bd<t j|BdS#tp$ri}dTdlJ}C|CK}Dt<d|Dt jdddt||DdddcYd}~Sd}~wwxYw)u. Execute a command in the configured terminal environment. Args: command: The command to execute background: Whether to run in background (default: False) timeout: Command timeout in seconds (default: from config) task_id: Unique identifier for environment isolation (optional) force: If True, skip dangerous command check (use after user confirms) workdir: Working directory for this command (optional, uses session cwd if not set) pty: If True, use pseudo-terminal for interactive CLI tools (local backend only) notify_on_complete: If True and background=True, you'll be notified exactly once when the process exits. The right choice for almost every long task. MUTUALLY EXCLUSIVE with watch_patterns. watch_patterns: List of strings to watch for in background output. HARD rate limit: 1 notification per 15s per process. After 3 strike windows in a row, watch_patterns is disabled and the session is auto-promoted to notify_on_complete. Use ONLY for rare, one-shot mid-process signals on long-lived processes (server readiness, migration-done markers). NEVER use in loops/batch jobs — error patterns there will hit the strike limit and get disabled. MUTUALLY EXCLUSIVE with notify_on_complete — set one, not both. Returns: str: JSON string with output, exit_code, and error fields Examples: # Execute a simple command >>> result = terminal_tool(command="ls -la /tmp") # Run a background task >>> result = terminal_tool(command="python server.py", background=True) # With custom timeout >>> result = terminal_tool(command="long_task.sh", timeout=300) # Force run after user confirmation # Note: force parameter is internal only, not exposed to model API z+Rejected invalid terminal command value: %srrz&Invalid command: expected string, got r9)rrr9statusF) ensure_asciirrXrhrarlr`rorbrqrdrzForeground timeout zs exceeds the maximum of zNs. Use background=true with notify_on_complete=true for long-running commands.TNz*Creating new %s environment for task %s...rSr{r}rrrr)rrrrr)rXrar`rbrUrrrrr/r0rrergr.rrurjrr) rrr/rrer.rrurjrrr rrrt) rrrdrrrrr?rtz5Terminal tool disabled: environment creation failed (rdisabledz %s environment ready for task %sapprovedrOapproval_requiredrzWaiting for user approvalr descriptionzcommand flagged pattern_key)rrr9rOrrUrVzCommand denied: z?. Use the approval prompt to allow it, or rephrase the command.blocked user_approvedzflagged as dangerouszCommand required approval (z) and was approved by the user.smart_approvedzCommand was flagged (z&) and auto-approved by smart approval.z+Blocked dangerous workdir: %s (command: %s)rzPTY disabled for this command because it expects piped stdin/EOF (for example gh auth login --with-token). For local background processes, call process(action='close') after writing so it receives EOF.r)get_current_session_keyr)rr)rrdr?rwenv_varsuse_pty)rrrdr?rwzBackground process started)r session_idpidrr9rdpty_notermHERMES_SESSION_PLATFORMHERMES_SESSION_CHAT_IDHERMES_SESSION_THREAD_IDHERMES_SESSION_USER_IDHERMES_SESSION_USER_NAME)rFrIrGzbackground proc %s: %swatch_patterns_ignoredrFr) r]check_intervalrwrchat_iduser_id user_name thread_idrFrIz$Failed to start background process: )rrr9r|zCommand timed out after z secondsrzfExecution error, retrying in %ds (attempt %d/%d) - Command: %s - Error: %s: %s - Task: %s, Backend: %szWExecution failed after %d retries - Command: %s - Error: %s: %s - Task: %s, Backend: %szCommand execution failed: rJrr) invoke_hooktransform_terminal_output)rrrr?r) get_max_bytesg?z ... [OUTPUT TRUNCATED - z chars omitted out of z total] ... ) strip_ansi)redact_sensitive_textexit_code_meaningzterminal_tool exception: %szFailed to execute command: )rrr9 tracebackrO)LrrKrrrrrKdumpsrrHr>r6FOREGROUND_MAX_TIMEOUTrErrr;rr<rr=ruLockrZrrrrrrr:tools.approvalrZrr spawn_localrr spawn_via_envrtr^rsrnwatcher_platformwatcher_chat_idwatcher_user_idwatcher_user_namewatcher_thread_idrKr=rFwatcher_intervalpending_watchersrrrIrSexecuterrr9rhermes_cli.pluginsrltools.tool_output_limitsrnrrtools.ansi_stripro agent.redactrpr7r5rr format_exc)ErrGrr?rLrrMrFrIr,reffective_task_idr@rrddefault_timeouteffective_timeoutguidancerneeds_creation task_lockrrrnew_envrX approval_noterddesc fallback_msg workdir_errorpty_disabled_reason effective_ptyrZrrw effective_cwd proc_session result_data_gse _gw_platform _gw_chat_id _gw_thread_id _gw_user_id _gw_user_name conflict_note max_retries retry_countrexecute_kwargsr wait_timerrrl hook_results hook_resultrnMAX_OUTPUT_CHARS head_chars tail_charsomittedtruncated_noticerorp exit_note result_dictrrtb_strsE r terminal_toolr\sR|'3'' # NN=W &   :Z$w--BXZZ!  " ### #!""*% 7w??(++,=rBB  x  MM.11KVN5KEE  & &MM"566U&AT:UEE  MM-00IF=4IEE  " "MM/22Mf_6MEEEmmE""3fUm +#6 #g #'4J*J*J:J'JJ-JJJ " ### # '6w??H 'z !#%% ## !& ''''   & & $88848IKK01*+<=!&!%  & & & & & & & & & & & & & & & K e% ? ?$O;;9B9I9IO$56+,=>  ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? D eD e//(,@@@<@IKK'8923DE). /////////////// "<e=001333KK LhXijlkljlXmnnn2/%) #u,,(. :r(B(B(. :r(B(B(. :r(B(B'-zz)R'@'@.4jj9I5.Q.Q **J,0(#'fff17OQ1O1O4:JJ?QSW4X4X28**=Mu2U2U8> CY[_8`8`.4jjv.N.N28**=Mr2R2R28**=Mr2R2RAGLkmrAsAs6?<@IKK'89%&&&&&&&&&&&&&&&KK BHN_`bab`bNcdddID eD eD eD eD eD eD eD eD eD eD eD eD eD eD eP  e((;;HJ' '<<))-@@@:"$%'!)i9T!U!U"5#+<< 7#C#C'/||MCT'U'U'/||M2'F'F''%*++++ ||M3DEETtTTTz !#%\\)\BB' ## !& ''''||O,, e||M3IJJ cd c c c .// e||M3IJJ d d d d   '-g66M 'L&tt}.CG.L.LNNNz !#*' ## !& ''''#  /88 !M  T ? ? > > > > > ? ? ? ? ? ?11"===K#NsMa 'w&#?#? ') 1$/,3C,?,?!IT - $@$$LL$4#A#A ') 1$/ $B$$L;"./'+!"!  !<.;K +&B.AK +  G#5 G GOOOOOO#'4(A2#F#FL# G&*d+CR&H&H (,-G(L(L &*d+CR&H&H (,-G(L(L 8D 57B 47B 49F 69F 61T'+,>'?'?#1#J//111- !JNN#;\_m\\\N!Z!ZRUVWRXRX!Z!Z''%* +++++++++)+6ZZ"--FL!44J*&(;;F  ::::::*{/#!)-3%     $0K!+s33!,     ? > > > > >,} 6{{--- !1C!788 - : f++ 2Z?;7;;!&kk;;;!  ,/??&*BVV 4 3 3 3 3 3Z''F ; : : : : :>DL**6<<>>:::"F-WjAAI!'K  8*7 J' =3< /0:k>>> >    %%'' 3V<<<z;3q66;;           sA1q+4D-q+"-q+q+%7H( q+(H,,q+/H,0 q+=2I;/ q+;I??q+I?q+U?4K U?K U?K >U?F/SU? TT/T0U?4 q+T U?(U8 U?U U? U 'U?3 q+?Vq+VB&q+.A q+9Cq+;8q+4Ge f )e<6f7q+<fq+f-+q+- k28Ak-:k2;q+A%k-%q+*A=k-'k2(q+-k22Aq+37m+*q++ m85q+7m88C2q++ s5Asssc t}|d}|dkrdS|dkrRddlm}|}|stddSt j|d gdd }|jdkS|d krPtj d ptj d }|r$t j|dgdd }|jdkSdS|dkrH| dr| dstddSdS|dkr[t| d}|ddkrdS|ddkr|drtddS|ddkrtddS|ddkrEtrtdntddStrtdntddStjdtd!dSdS|d"krt!|S|d#krdd$lm}t'jd%d uStd&|dS#t*$r(}td'|d(Yd }~dSd }~wwxYw))z8Check if all requirements for the terminal tool are met.rr TrXr) find_dockerz?Docker executable not found in PATH or common install locationsFversionr)capture_outputrra apptainerz --versionrSr{r}zSSH backend selected but TERMINAL_SSH_HOST and TERMINAL_SSH_USER are not both set. Configure both or switch TERMINAL_ENV to 'local'.r`rerrrrzModal backend selected with TERMINAL_MODAL_MODE=managed, but a paid Nous subscription is required for the Tool Gateway and no direct Modal credentials/config were found. Log in with `hermes model` or choose TERMINAL_MODAL_MODE=direct/auto.rzModal backend selected with TERMINAL_MODAL_MODE=managed, but the managed tool gateway is unavailable. Configure the managed gateway or choose TERMINAL_MODAL_MODE=direct/auto.zModal backend selected with TERMINAL_MODAL_MODE=direct, but no direct Modal credentials/config were found. Configure Modal or choose TERMINAL_MODAL_MODE=managed/auto.zModal backend selected with TERMINAL_MODAL_MODE=direct, but no direct Modal credentials/config were found. Configure Modal or choose TERMINAL_MODAL_MODE=auto.zModal backend selected but no direct Modal credentials/config or managed tool gateway was found. Configure Modal, set up the managed gateway, or choose a different TERMINAL_ENV.z|Modal backend selected but no direct Modal credentials/config was found. Configure Modal or choose a different TERMINAL_ENV.NzFmodal is required for direct modal terminal backend: pip install modalrUrb)DaytonaDAYTONA_API_KEYzgUnknown TERMINAL_ENV '%s'. Use one of: local, docker, singularity, modal, daytona, vercel_sandbox, ssh.z&Terminal requirements check failed: %srH)rtools.environments.dockerrrr9rrrrwhichr6rr r:r;r<rDrbrrrrS) r,rrrXr executablerrrXs rcheck_terminal_requirementsrDsg ""*% w  4  ! ! = = = = = = []]F  ^___u^VY$7VWXXXF$) )  & &k22Qfl=6Q6QJ .#[(ARV`abbb(A--5   ::j)) J1G1G  Zu4  26::l3K3KLLK-.);;t-.(::56!LLE !5v&)33LL; !5 (H44133  @  8 !5133  B  R!5~''008 efffu4 ) ) )5f== =  " " ' ' ' ' ' '9.//t; ; LL7    5  =q4 PPPuuuuushK2K#K8AKA K5K.K&K+AKK!K5K LK??L__main__zTerminal Tool Modulez2==================================================z Current Configuration:z Environment type: z Docker image: rhz Modal image: roz Working directory: z Default timeout: sz Lifetime: u; ❌ Requirements not met. Please check the messages above.ru ✅ All requirements met!z Available Tool:z= - terminal_tool: Execute commands in sandboxed environmentsz Usage Examples:z # Execute a commandz* result = terminal_tool(command='ls -la')z z # Run a background taskzE result = terminal_tool(command='python server.py', background=True)z Environment Variables:rOz TERMINAL_ENV: rr z< (local/docker/singularity/modal/daytona/vercel_sandbox/ssh)z TERMINAL_DOCKER_IMAGE: riz TERMINAL_SINGULARITY_IMAGE: rmrnz TERMINAL_MODAL_IMAGE: rpz TERMINAL_DAYTONA_IMAGE: rrz TERMINAL_CWD: rWrz TERMINAL_SANDBOX_DIR: TERMINAL_SANDBOX_DIRz /sandboxesz TERMINAL_TIMEOUT: rv60z TERMINAL_LIFETIME_SECONDS: ryrz)registryterminalobjectstringz The command to execute on the VM)rrUbooleanu2Run the command in the background. Two patterns: (1) Long-lived processes that never exit (servers, watchers). (2) Long-running tasks paired with notify_on_complete=true — you can keep working and get notified when the task finishes. For short commands, prefer foreground with a generous timeout instead.)rrUrz3Max seconds to wait (default: 180, foreground max: u). Returns INSTANTLY when command finishes — set high for long tasks, you won't wait unnecessarily. Foreground timeout above z7s is rejected; use background=true for longer commands.)rrUminimumz^Working directory for this command (absolute path). Defaults to the session working directory.zRun in pseudo-terminal (PTY) mode for interactive CLI tools like Codex, Claude Code, or Python REPL. Only works with local and SSH backends. Default: false.uWhen true (and background=true), you'll be automatically notified exactly once when the process finishes. **This is the right choice for almost every long-running task** — tests, builds, deployments, multi-item batch jobs, anything that takes over a minute and has a defined end. Use this and keep working on other things; the system notifies you on exit. MUTUALLY EXCLUSIVE with watch_patterns — when both are set, watch_patterns is dropped.arrayru Strings to watch for in background process output. HARD RATE LIMIT: at most 1 notification per 15 seconds per process — matches arriving inside the cooldown are dropped. After 3 consecutive 15-second windows with dropped matches, watch_patterns is automatically disabled for that process and promoted to notify_on_complete behavior (one notification on exit, no more mid-process spam). USE ONLY for truly rare, one-shot mid-process signals on LONG-LIVED processes that will never exit on their own — e.g. ['Application startup complete'] on a server so you know when to hit its endpoint, or ['migration done'] on a daemon. DO NOT use for: (1) end-of-run markers like 'DONE'/'PASS' — use notify_on_complete instead; (2) error patterns like 'ERROR'/'Traceback' in loops or multi-item batch jobs — they fire on every iteration and you'll hit the strike limit fast; (3) anything you'd ever combine with notify_on_complete. When in doubt, choose notify_on_complete. MUTUALLY EXCLUSIVE with notify_on_complete — set one, not both.)rrrU)rrGrrrMrFrI)r propertiesrequired)rrUrc ft|d|dd|d|d|d|dd|dd|d  S) NrrGFrr?rrMrFrI)rrGrr?rrMrFrI)rr6)argskws r_handle_terminalr s ##88L%00##y!!## HHUE " "88$8%@@xx 011    r+u💻i)rtoolsetschemahandlercheck_fnemojimax_result_size_chars)r&N)r)r)NNNrN)r)FNNFNFFN)__doc__importlib.utilr:rKloggingrrrrruatexitrrpathlibrtypingrrrr getLoggerrrtools.interruptrr tools.environments.singularityr tools.tool_backend_helpersr r r rrKrrrtrrRrr)r=r*dictrDrZr[__annotations__rur}r r`rbrerirkr{rrrrvrrrcompilerrrrrrtuplerrrr,r3tools.environments.localr4rr5rtools.environments.sshr6rrr7rtools.environments.modalr8r tools.environments.managed_modalr9rtools.managed_tool_gatewayr:TERMINAL_TOOL_DESCRIPTIONr;r<rr=rrrr>rCrFrHrMrrrrrrrrr rrrrregisterr5r: IGNORECASEr?rArBrCr=rErKrrrr,exit default_imgrrrrrtools.registryrTERMINAL_SCHEMArrar+rrs   D    ,,,,,,,,,,,,  8 $ $=<<<<<<<<;;;;;   80/% #9"8   ## 0?@#@$@@@@5tCH~5$5555pF(*d38n)))*IN,, !! 999444%%%   -----,333333222222%%%% NsNcNdNNNN2:=>>ssTz,4z3z3sz3Cz3z3z3z3x - -3 -s -S - - - -=c=d====!s!3!5c?!!!!H:C:E#t)4D::::zd4b#b#bbbbJBS4ZBE#*cDj:P4QBBBBLKJJJJJ\\\\\\DDDDDDMMMMMMJJJJJJ``````DDDDDD.(*d38n)))#%S%Z %%% IN   -/c9>)*///%y~''24T#tCH~-.333--c3h----&+c++++ #47:Y     s  s     Sc3hSSSSl$4S>KO-1'0(, R R #R cR R cR $(R CGR &*R "%R #& R R R R j;\;\S;\;\;\;\|   $$$UCUUUU4s4t4444&6'X'X'X'X'XT### =#=#=#*====@ # $    (RZ(F VV&BJx00(bj);<<BJRTVTabbBJ+R];;BJ "-00BJ "-00BJ~r}--BJ~r}--BJ ..BJ6 FF #SS4ZB   :!!!$*.ee eec]ec] e  e c] e eeT#Y'e eeeePiTiiiiX z E !!! E(OOO _  F E $%%% E 5 !3 5 5666 E 5VN3 5 5666 E 3F=1 3 3444 E 1&- 1 1222 E 4y 1 4 4 4555 E 6 23 6 6 6777 & & ( ( LMMM Q E '((( E  E IJJJ E  E !""" E 6777 E$KKK E %&&& E QRRR E $%%%>K E F 29^W - - F F F  E Wibi0G&U&U W WXXX E o9295QSl_jSlSl+m+m o oppp E UYRY/E{%S%S U UVVV E Yyry1I;'W'W Y YZZZ E EYRY~yry{{CC E EFFF<<<<<< E _YRY/E$$&&G\G\G\%]%] _ _``` E F+=t!D!D F FGGG E Y)")4OQV*W*W Y YZZZ $##### ,!A " T  " |Uk | |mC | | | ! " ~  " ` ##   (+ l;" " FKK&&**Z        ( !r+