JjUdZddlZddlZddlZddlZddlZddlZddlmZm Z ddl m Z ddl m Z ddlmZmZmZddlmZddlmZejeZejejejhZd ed efd Zd Zda e!dze"d <d e!fdZ#dede!d e$ee!e%ffdZ&dZ'e(hdZ)ddeded ee zfdZ*e(hdZ+e(hdZ,dded efdZ-dded e%fdZ.d eeze zd e fdZ/dedzd edzfdZ0d edzfdZ1dded edzfd Z2ded edzfd!Z3dded edzfd"Z4dded edzfd#Z5 ddd$ded%e%dzd ee zfd&Z6ddeded ee zfd'Z7dded(eded edzfd)Z8d ed e%fd*Z9dded+eezdzd e%fd,Z:dd eded edzfd-Z;dded e!fd.Zda?edze"d2<d3a@d edzfd4ZAddeded edzfd5ZBdded edzfd6ZCddeded edzfd7ZDd8eEd e%fd9ZFejGZHiZIeJe"d:<iZKeJe"d;<dedZMejGZNiZOeJe"d?<ejGZPiZQeJe"d@<dedAed e!fdBZRdedCeSd dfdDZTdEZUdFZVdFZWdGZXdHeJd dfdIZYded e%fdJZZded e%fdKZ[ded e%fdLZ\dded efdMZ]ddefdNZ^dd edPe!dQe!ded ef dRZ_ddefdSZ`ddefdTZadeded dfdUZbdeded dfdVZcdeded edzfdWZd ddedCeSedXedzd dfdYZe dd edededZe%dXedzd ef d[Zf dd]ed ed^ed_ed`e%daededZe%dXedzd efdbZg ddeedfed edgedQe!dPe!dhedie!ded efdjZhddklimjZjmkZkdlZldmdndodpdqdrdsdtdOdOdudsdvdEdwdxdyd gdzd{Zmd|d}dodpd~drdpddrddd3ddd dgdzd{Zndaddodpd\dagdd\ddpddrdpddrdpddrddd3ddpddrddd3ddd]gdzd{Zodddodpddrdpddgddddpddcddpddrdsdddddsddddpgdddddsdddddegdzd{ZpdZqdZrdZsdZtejjudmdemeqeldd ejjud|denereldd ejjudadeoeseldd ejjuddepeteldd dS)z6File Tools Module - LLM agent file manipulation tools.N)Path PurePosixPath)get_read_block_error)has_binary_extension)ShellFileOperationsnormalize_read_paginationnormalize_search_pagination) file_state)redact_sensitive_textpathreturnc2|rd|vr|S ddlm}|}n#t$rd}YnwxYw|rK|dks|dr0|dkr|n'tj||ddStj|S)aExpand ``~`` using the effective profile home when available. In-process file tools share the gateway process's HOME, which may differ from the profile-specific HOME that interactive CLI sessions use. This mirrors ``hermes_constants.get_subprocess_home()`` so that ``~`` resolves consistently regardless of whether the tool runs interactively or inside a gateway-driven cron job (#48552). ~r)get_subprocess_homeNz~/)hermes_constantsr Exception startswithosr join expanduser)r rhomes 6/home/rurouni/.hermes/hermes-agent/tools/file_tools.py _expand_tilders 3d?? 888888""$$  E 5 5s{{tt T48(D(DD 7  d # ##s  **i_max_read_chars_cachedcttS ddlm}|}|d}t |t t fr|dkrt |atSn#t$rYnwxYwtatS)zReturn the configured max characters per file read. Reads ``file_read_max_chars`` from config.yaml on first call, caches the result for the lifetime of the process. Falls back to the built-in default if the config is missing or invalid. Nr) load_configfile_read_max_chars) rhermes_cli.configrget isinstanceintfloatr_DEFAULT_MAX_READ_CHARS)rcfgvals r_get_max_read_charsr'?s)%% 111111kmmgg+,, cC< ( ( *S1WW%(XX ") )      4 !!sAA.. A;:A;content max_charsct||kr||r|ddznddfS|d}g}d}|D]=}t||rdndz}||z|krn||||z }>|s#||dd|d|t|dfS)aTrim line-numbered ``read_file`` content to fit a char budget. Ported in spirit from nearai/ironclaw#5029 (dual line/byte cap on ``read_file``). Where hermes previously hard-rejected an oversized read (forcing the model to guess a smaller ``limit`` and burn a round-trip returning nothing), this trims the content to the last *complete line* that fits within ``max_chars`` and reports how many lines were kept so the caller can offer a ``next_offset`` continuation. ``content`` is the gutter-rendered text (``LINE_NUM|CONTENT`` joined by ``\n``). Individual lines are already clamped to ``get_max_line_length()`` upstream, so a single line never blows the whole budget on its own; the overflow this handles is the *accumulation* of many lines under the line-count limit (logs, wide CSV rows, minified data). Returns ``(kept_text, lines_kept, truncated)``. When ``content`` already fits, returns it unchanged with ``truncated=False``. If not even the first line fits, that single line is clamped on a code-point boundary (Python ``str`` slicing never splits a code point) so the read never returns empty and the cursor can still advance.  rFNT)lencountsplitappendr)r(r)lineskeptrunninglineadditions r_truncate_to_char_budgetr6Vs, 7||y  GBt,,q00UJJ MM$  EDGt99T 0q1 X  ) ) E D8 * E!HZiZ())) 99T??CIIt ++i> /dev/tty /dev/fd/0 /dev/fd/1 /dev/fd/2 /dev/full /dev/zero /dev/stdin /dev/random /dev/stderr /dev/stdout /dev/console /dev/urandomdefaultfilepathtask_idc"t||S)zsResolve a path relative to TERMINAL_CWD (the worktree base directory) instead of the main repository root. )_resolve_path_for_task)rErFs r _resolve_pathrIs "(G 4 44r7>./cwdauto.>modaldockerdaytona singularityc ddlm}m}m}m} ||}n#t $r|}YnwxYw|5||p||}dddn #1swxYwY|B|jj }d|vrdSd|vrdSd|vrdSd|vrdSd|vrdSd |vrd S|}t|d ptj d pd S#t $r8ttj d pd cYSwxYw) z@Best-effort terminal backend type for path-resolution decisions.r_active_environments _env_lock_get_env_config_resolve_container_task_idNlocalsshrPrRrOrQenv_type TERMINAL_ENV) tools.terminal_toolrUrVrWrXrr __class____name__lowerstrrgetenv) rFrUrVrWrX container_keyenvnamer%s r_terminal_env_type_for_taskrfsA             $66w??MM $ $ $#MMM $  _ _&**=99^=Q=U=UV]=^=^C _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ?=)//11D$w}}u4x$$$}$wD   yo377:&&N")N*C*CNwOOUUWWW AAA29^,,788>>@@@@@Ast D D *D *D +A& D &A**D -A*.'D D D #D )D /D 5AD ?E  E cf ddlm}|}n#t$r t}YnwxYwt ||vS)Nr)_CONTAINER_BACKENDS)r]rhr!_CONTAINER_PATH_BACKENDS_FALLBACKrf)rFrhcontainer_backendss r_uses_container_pathsrks]?;;;;;;0 ???>? &w / /3E EEs  c^ttjt|S)aNormalize path syntax without following host symlinks. Container backends use paths that are meaningful inside the sandbox. Calling ``Path.resolve()`` on the host can dereference a host-side symlink such as ``/workspace`` and rewrite the path before Docker sees it. )r posixpathnormpathra)r s r_normalize_without_host_derefros# +CII66 7 77r7rawct|pd}|tvrdSt |}t j|sdS|S)uNormalize a cwd candidate to an absolute, sentinel-free anchor. Returns the expanded path only when *raw* is non-empty, not a sentinel (see ``_TERMINAL_CWD_SENTINELS``), and absolute. A relative anchor is meaningless without knowing which cwd it is relative to — exactly the ambiguity that misroutes worktree edits — so relative/sentinel/empty values yield ``None``. rKN)rastripr`_TERMINAL_CWD_SENTINELSrrr isabs)rpexpandeds r_sentinel_free_abs_cwdrvse ciR..   C yy{{---tS!!H 7== " "t Or7cZttjdS)unReturn ``$TERMINAL_CWD`` only when it names a real directory anchor. Sentinel values (see ``_TERMINAL_CWD_SENTINELS``) and relative paths are rejected — a relative anchor is meaningless without knowing which cwd it is relative to, which is exactly the ambiguity that misroutes worktree edits. Only an absolute, sentinel-free value is honored. TERMINAL_CWD)rvrenvironr r7r_configured_terminal_cwdr{s  ""*.."@"@ A AAr7c ddlm}||}n#t$rYdSwxYwt|dS)aReturn a registered cwd override for the raw task id, when available. ``terminal_tool`` intentionally collapses CWD-only task overrides to the shared ``"default"`` environment so TUI/dashboard/ACP sessions do not spin up isolated sandboxes just because they have different workspaces. The cwd value itself is still keyed by the raw session/task id, so file tools must read that raw override before falling back to the collapsed container key. rresolve_task_overridesNrL)r]r~rrvr )rFr~ overridess r_registered_task_cwd_overridersi>>>>>>**733 tt ")--"6"6 7 77s  ""c|dSt|dd}|sdStt|ddpd}t|pd}|r|r|dkr|dkr||krdS|S)aThe env's live cwd, but only when THIS session owns it. The terminal env is shared (collapsed to the ``"default"`` container), so its ``cwd`` tracks the LAST session that ran a command. With two worktree sessions open, trusting it blindly routes one session's edits into the other session's checkout (the wrong-worktree-patch bug). ``terminal_tool`` stamps ``env.cwd_owner`` with the session that last drove the env; return its cwd only when that owner matches the resolving session, else ``None`` so the caller falls through to this session's own registered cwd override. Unknown owner / ``default`` keys keep the prior behavior (single-session / CLI). NrL cwd_ownerrKrD)getattrra)rdrFliveownertids r_live_cwd_if_ownedrs {t 3t $ $D t ["--3 4 4E gm  C )++y0@0@Uc\\t Kr7c ddlm}||}n#t$r|}YnwxYwt5t|pt|}dddn #1swxYwY|kt |dd}t||}|rt|||S|4t |ddr#t |dd}t|||S ddlm }m }|5||p||}dddn #1swxYwYt||}|rt|||Sn#t$rYnwxYwdS)zCReturn the task's live terminal cwd for bookkeeping when available.rrXNrdrL)rUrV) r]rXr_file_ops_lock_file_ops_cacher rr_remember_last_known_cwdrUrV) rFrXrccachedrdlive_cwd legacy_cwdrUrVs r_get_live_tracking_cwdr'sm BBBBBB227;;       TT $$]33S7J7J77S7STTTTTTTTTTTTTTT feT**%c733   $]H = = =O ;765$77; 55J $]J ? ? ?   GGGGGGGG  _ _&**=99^=Q=U=UV]=^=^C _ _ _ _ _ _ _ _ _ _ _ _ _ _ _%c733   $]H = = =O        4sS ##5A..A25A2' E1+D( E(D,,E/D,0&E E%$E%ct|}|r|St|}|r|St|}|r|StS)uBest-effort absolute workspace root for divergence checks. Prefers the live terminal cwd (the directory the agent is actually working in). When no terminal command has run yet — so the live registry is empty — falls back to a registered task/session cwd override (TUI/Desktop/ACP sessions register a raw-keyed cwd before any tool runs), then to a sentinel-free absolute ``$TERMINAL_CWD``. This is what lets a worktree or Desktop session warn about (and resolve into) its workspace from the very first ``write_file``/``patch``, before any ``cd`` has populated the live cwd. Returns ``None`` only when there is genuinely no reliable anchor, in which case callers fall back to the process cwd. )rr_last_known_cwd_forr{)rFr registered preserveds r_authoritative_workspace_rootrLsd "' * *D  /w77J$G,,I # % %%r7container_pathsrct|}|t|}|rt|}ntj}|rIt j|s&t jtj|}t|St|}| s#ttj|z }| S)uReturn the ABSOLUTE base directory for resolving relative paths. Resolution order: 1. The task's live terminal cwd (the directory the agent is actually working in — e.g. a git worktree). Authoritative when known. 2. A registered task/session cwd override (TUI/Desktop/ACP sessions register a raw-keyed workspace cwd before any terminal command runs). 3. A sentinel-free, absolute ``$TERMINAL_CWD`` (the worktree path set by ``cli.py``/``main.py`` for ``-w`` sessions). Used even before any terminal command has populated the live cwd registry. 4. The process cwd. The returned base is ALWAYS absolute. This is the core invariant that prevents the worktree-cwd divergence bug: a relative or sentinel ``TERMINAL_CWD`` (commonly the literal ``"."`` from a stale config) is meaningless as a resolution anchor — left to ``Path.resolve()`` it silently resolves against whatever the agent PROCESS cwd happens to be (e.g. the main repo while the terminal is in a worktree), routing edits to the wrong checkout. We therefore reject sentinel/relative ``TERMINAL_CWD`` values outright (rather than anchoring them to the process cwd) and fall through to the process cwd only as a last resort, deterministically. ) rrkrrgetcwdrmrtrror is_absoluteresolve)rFrroot base_textbases r_resolve_base_dirrss6 ) 1 1D/88  !$'' IKK 8y)) ?!ry{{I>>I,Y777  ??D     (BIKK  4' <<>>r7ct|}t|}|rFtj|rt |St |d|z }t |St |}|r|St |d|z }|S)zResolve *filepath* against the task's absolute base directory. See :func:`_resolve_base_dir` for how the base is chosen. Absolute input paths are returned resolved-but-unanchored. TrF) rkrrmrtrorrrr)rErFrruresolvedps rrHrHs ,G44OX&&H7 ?8 $ $ ;0:: :$WdCCChN,X666 XA}}yy{{ %@@@1DH     r7rc  tt|rdSt|}|sdSt |r*t tt|}n.tt|} ||dS#t$r)d|dt|dt|dcYSwxYw#t$rYdSwxYw)u3Warn when a relative path resolved OUTSIDE the task's workspace root. Surfaces the worktree-cwd divergence the moment it would matter: if the agent passes a relative path but it resolves under a directory that is not the workspace root (i.e. the edit is about to land in a different checkout than the one the agent is working in), return a message naming the absolute target. ``None`` when the path is absolute, the base is unknown, or the resolved path is correctly under the workspace root. The workspace root is the live terminal cwd when known, else a registered task/session cwd override, else a sentinel-free absolute ``$TERMINAL_CWD`` — so a worktree or Desktop session whose terminal registry is still empty (no ``cd`` run yet) is warned on the very first write. NzRelative path z resolved to z), which is OUTSIDE the active workspace (z). The edit will land in a different directory than the terminal's cwd. If this is not intended (e.g. a git-worktree session writing into the main checkout), pass an absolute path under the workspace instead.) rrrrrkror relative_to ValueErrorrar)rErrFworkspace_rootrs r_path_resolution_warningrsJ  h'' ( ( 4 4 6 6 46w?? 4  ) ) A0mN6S6S1T1TUUDD n5566>>@@D    & & &4   QQQ#h--QQ14TQQQ     tts;.C:C:A'C:-C0C74C:6C77C:: DDc$tjt|}|tvrdS|dr|drdS|dr|drdSdS)z=Return True for concrete device/fd paths that can hang reads.Tz/proc/)z/fd/0z/fd/1z/fd/2) z/environz/cmdlinez/mapsz/smapsz /smaps_rollupz /numa_mapsz/memz/auxvz/pagemapF)rr rnr_BLOCKED_DEVICE_PATHSrendswith)r normalizeds r_is_blocked_device_pathrs!!-"5"566J***tX&&:+>+>#,,tX&& :+>+>  , , t 5r7base_dirct|}|Qtj|s2tjtj||}tj|}t|rdSt}|}tdD]} tj |}n#t$rYnwxYwtj|s=tjtj ||}tj|}t|rdS||vrn| ||} tjtj|}n#ttf$rYdSwxYwt|rdSdS)aBReturn True if the path would hang the process (infinite output or blocking input). Check the literal path first so aliases like /dev/stdin are caught before they resolve to terminal-specific paths. Then check each symlink hop before the final resolved path so aliases to devices cannot bypass the guard. NTF)rrr rtrfspathrnrsetrangereadlinkOSErrordirnameaddrealpathr) rErrurseencurrent_targetrs r_is_blocked_devicersX&&HBGMM($;$;7<< ( 3 3X>>!!(++Jz**tUUDG 2YY   [))FF    EE w}}V$$ DW\\"'//'":":FCCF!!&)) "6 * * 44 T>> E 7##BG$4$4Z$@$@AA Z uux((t 5s$5C  CCg}|jD]-}t||r|dz }||.||_t|drJ|jrCi}|jD] \}}t||r|dz }|||<!||_|S)z?Remove credential/cache/env paths from a SearchResult in-place.rmatchesr,filescounts)hasattrrrr r0rritems) resultrFomittedallowed_matchesmatch allowed_files file_pathallowed_countsr.s r#_filter_read_blocked_search_resultsr:s\Gvy!!)fn)^ * *E.uz7CC 1   " "5 ) ) ) )(vw%FL%  , ,I.y'BB 1    + + + +$ vx  'V]' & 3 3 5 5 . . Iu.y'BB 1 (-N9 % %& Nr7)z/etc/z/boot/z/usr/lib/systemd/z /private/etc/z /private/var/z/var/run/docker.sockz/run/docker.sock_hermes_config_resolvedFcPtrtSda ddlm}t |an_#t $rR t ttdan#t $rdaYnwxYwYnwxYwtS)zEReturn the resolved absolute path of the Hermes config file (cached).Trget_config_pathz~/.hermes/config.yamlN) _hermes_config_resolved_loadedrrrrarrrrrs r_get_hermes_config_resolvedrhs&'&&%)"+555555"%oo&7&7&?&?&A&A"B"B +++ +&)$}=T/U/U*V*V*^*^*`*`&a&a # # + + +&* # # # ++ #"s5/A B ;B B BBBBBc tt||}n#ttf$r|}YnwxYwtjt|}d|d}tD]0}| |s| |r|cS1|tvs |tvr|St}|r||ks||krd|dSdS)zHReturn an error message if the path targets a sensitive system location.z,Refusing to write to sensitive system path: zD Use the terminal tool with sudo if you need to modify system files.z)Refusing to write to Hermes config file: zz Agent cannot modify security-sensitive configuration. Edit ~/.hermes/config.yaml directly or use 'hermes config' instead.N) rarHrrrr rnr_SENSITIVE_PATH_PREFIXESr_SENSITIVE_EXACT_PATHSr)rErFrr_errprefix hermes_configs r_check_sensitive_pathrys;-h@@AA Z !!-"9"9::J Nx N N N +   v & & **?*?*G*G KKK )))Z;Q-Q-Q 011M (m33z]7R7R R R R R 4s  66c ddlm}m}m}m}||}n#t $rYdSwxYw |5||p||}dddn #1swxYwY|2|jjdkr tt|ddrdSdS|}n#t $rYdSwxYw|dd kr|d d rdSdS) zEReturn the container-side Hermes mirror prefix for Docker file tools.rrTNDockerEnvironment _persistentFz /root/.hermesr[rPcontainer_persistentT) r]rUrVrWrXrr r^r_boolr)rFrUrVrWrXrcrdconfigs r%_get_container_mirror_prefix_for_taskrs             327;; tt   _ _&**=99^=Q=U=UV]=^=^C _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ?}%)<<<]E22BB<'4 "" ttzz*))fjj9OQU.V.V) 4sF ((B/+A% B/%A))B/,A)-3B/$ B// B=<B=c ddlm}m}m}n#t$rYdSwxYw t t ||}n#ttf$r|}YnwxYw||}||S||}||S||t|S)uReturn a soft-guard warning when ``filepath`` lands in another Hermes profile's scoped area, a host-side sandbox-mirror of authoritative profile state, or the Docker container's sandbox mirror of Hermes state. Three detectors run in order: * cross-profile — writes that hit another profile's ``skills/plugins/cron/memories`` directory. * sandbox-mirror (#32049) — writes that hit the ``…/sandboxes///home/.hermes/…`` mirror created by a non-local terminal backend (Docker, Daytona, etc.), where the host Hermes process never reads the mirror and the authoritative file is left untouched. * container-mirror (#32049 follow-up) — writes from inside a Docker container whose bind-mounted home strips the ``sandboxes/`` prefix, so the agent sees a plain ``/root/.hermes/…`` path. Returns ``None`` when the write is in-scope or outside Hermes scope. All detectors are soft guards — the agent can override any by passing ``cross_profile=True`` to its write tool after explicit user direction. Defense-in-depth, NOT a security boundary — the terminal tool runs as the same OS user and can write any of these paths directly. See ``agent/file_safety.classify_cross_profile_target``, ``classify_sandbox_mirror_target`` and ``classify_container_mirror_target`` for the detection rules. r)get_container_mirror_warningget_cross_profile_warningget_sandbox_mirror_warningN) mirror_prefix) agent.file_safetyrrrrrarHrrr)rErFrrrrwarnings r_check_cross_profile_pathrs 6            tt-h@@AA Z ('11G((22G ' ';GDD   s =AAexcc~t|trdSt|tr|jtvrdSdS)zFReturn True for expected write denials that should not hit error logs.TF)r!PermissionErrorrerrno_EXPECTED_WRITE_ERRNOS)rs r_is_expected_write_exceptionrsB#''t#wCI1G$G$Gt 5r7r_last_known_cwdrLc|sdSt5t||kr |t|<ddddS#1swxYwYdS)uMirror a live terminal cwd into the durable ``_last_known_cwd`` registry. Belt-and-suspenders for #26211: the cleanup thread can pop BOTH ``_file_ops_cache`` and ``_active_environments`` before ``_get_file_ops`` reaches its stale-cache detection branch, in which case the old cwd is never saved and the rebuilt env falls back to the config default — exactly the silent-misplacement bug. By recording the cwd on every successful live read (which happens on every relative-path file resolution while the env is alive), the durable anchor no longer depends on the cleanup-detection branch firing, so it survives recreation regardless of pop ordering. N)rrr )rFrLs rrrs  ++   w ' '3 . .'*OG $++++++++++++++++++s)AA Ac ddlm}||}n#t$r|}YnwxYwt5t|pt|cdddS#1swxYwYdS)a%Read the durable last-known cwd for *task_id*, container-key aware. The registry is keyed by the resolved container id (the same key used by the save sites in ``_get_file_ops`` / ``_get_live_tracking_cwd``), so look up the resolved key first and fall back to the raw task id. rrN)r]rXrrrr )rFrXrcs rrrs BBBBBB227;;      RR""=11Q_5H5H5Q5QRRRRRRRRRRRRRRRRRRs ##4A..A25A2 _read_tracker_patch_failure_tracker resolved_pathcRt5t|i}t|dkr5||vr1 t t |}||=n#t $rYnwxYw||ddz||<||cdddS#1swxYwYdS)zAIncrement and return the consecutive-failure count for this path.@rr,N)_patch_failure_lockr setdefaultr-nextiter StopIterationr )rFr task_failures first_keys r_record_patch_failurerCs   , ,.99'2FF  }   # # ](J(J  m!4!455 !),,     '4'8'8'J'JQ'N m$]+ , , , , , , , , , , , , , , , , , ,s43BAB A)&B(A))&BB #B resolved_pathsc|sdSt5t|}|s ddddS|D]}||d ddddS#1swxYwYdS)z5Clear consecutive-failure counts for the given paths.N)rrr pop)rFrrrps r_reset_patch_failuresrTs  ((.227;;   ((((((((! ( (B   b$ ' ' ' ' ( ((((((((((((((((((sA A  A$'A$iuFile unchanged since last read. The content from the earlier read_file result in this conversation is still current — refer to that instead of re-reading. task_datac|d}|gt|tkrOt|tz }t|D](} |#t $rYnwxYw|d}|t|t krqt|t z }t|D]J} |tt|3#tt f$rYnwxYw|d}|t|t krqt|t z }t|D]J} |tt|3#tt f$rYnwxYw|d}|t|tkrtt|tz }t|D]O} |tt|3#tt f$rYdSwxYwdSdSdS)aEnforce size caps on the per-task read-tracker sub-containers. Must be called with ``_read_tracker_lock`` held. Eviction policy: * ``read_history`` (set): pop arbitrary entries on overflow. This is fine because the set only feeds diagnostic summaries; losing old entries just trims the summary's tail. * ``dedup`` / ``read_timestamps`` (dict): pop oldest by insertion order (Python 3.7+ dicts). Evicted entries lose their dedup skip on a future re-read (the file gets re-sent once) and external-edit mtime comparison (the write/patch falls back to a non-mtime check). Both are graceful degradations, not bugs. read_historyNdedup dedup_hitsread_timestamps) r r-_READ_HISTORY_CAPrrKeyError _DEDUP_CAPrrr_READ_TIMESTAMPS_CAP)rrhexcessrr r tss r_cap_read_tracker_datarosy ~ & &B ~#b''$555R,,v  A      MM' " "E SZZ*44Uj(v  A  $tE{{++,,,,!8,    |,,J#j//J">">Z:-v  A tD$4$4556666!8,     ( ) )B ~#b''$888R//v  A tDHH~~&&&&!8,     ~88  sHA.. A<;A</DDD7/F''F<;F</IIIct|tsdS|}|sdS|tkrdSt|vr*t |dt tzkrdSdS)uReturn True when content looks like an internal file-tool status, not real file bytes. The read_file dedup status message must never be persisted as file content. The obvious shape is the model echoing the message verbatim, but in practice it also wraps it with small framing text (a leading "Note:", a trailing newline + short comment, etc.) before calling write_file. We treat any short-ish write whose body is dominated by the status message as the same class of corruption. Heuristic: * Strict equality (after strip) — the verbatim shape. * OR the stripped content contains the full status message AND is short enough that the status dominates it (<=2x the message length). Short, status-dominated writes can't plausibly be real files — legitimate docs/notes that happen to quote this internal message are always dramatically longer. FTr)r!rarr_READ_DEDUP_STATUS_MESSAGEr-)r(strippeds r_is_internal_file_status_textrsz$ gs # #u}}H u---t!X-- MMQ%?!@!@@ @ @t 5r7c lt|tsdSd|D}t|dkrdSg}|D]g}|}|d\}}}|r6|r"|t|ht|dkrdSt|t|z dkrdStdt||ddD}|t|dz kS) aReturn True for content dominated by read_file's ``LINE_NUM|CONTENT`` display. ``read_file`` intentionally returns line-numbered text to the model. If that display format is echoed into ``write_file``, config/source files are silently corrupted with prefixes like `` 1|``. We reject writes where the non-empty lines are mostly consecutive read_file-style numbered lines, while allowing sparse literal pipe content such as a single ``1|value`` line. Fc:g|]}||Srz)rr).0r4s r z?_looks_like_read_file_line_numbered_content..s% C C Cddjjll CT C C Cr7r|g333333?c32K|]\}}||dzkdVdS)r,Nrz)rprevrs r z>_looks_like_read_file_line_numbered_content..sAdG dQh      r7r,N) r!ra splitlinesr-lstrip partitionisdigitr0r"sumzip) r(r1numberedr4rrsep_restconsecutive_pairss r+_looks_like_read_file_line_numbered_contentr*sH gs # #u C Cg0022 C C CE 5zzA~~uH));;==%//44U  )6>>## ) OOCKK ( ( ( 8}}qu 8}}s5zz!C''u"8Xabb\:: H  1 11r7c>t|pt|S)zLReturn True when content is file-tool display text, not intended file bytes.)rr*)r(s r_is_internal_file_tool_contentr,s% &g.. @ 6w ? ?r7cl ddlm}m}m}m}m}m}m}m}m } m } m } ddl } |pd} | | }t5t|}dddn #1swxYwY||5||vr%| ||<|cdddSt!|dd}|r)t5|t"|<dddn #1swxYwYt5t|ddddn #1swxYwYdddn #1swxYwY|5||vrt'j||<||}dddn #1swxYwY|5|5||vr | ||<||}nd}dddn #1swxYwY|Addlm}|}|d}|| }|dkr|d p|d }nn|d kr|d p|d }nJ|d kr|d p|d }n&|dkr|dp|d}nd}|dp!t"|p|d}|| vrB| |r7||dkr#t,d|||d|d}t,d||ddd}|dvr|dd|dd|dd|dd|dg|dd|d g|d!d|d"dd# }d}|d$krl|d%d|d&d|d'd(|d)d|d*dd+}d}|d,krd-|d.di}|||||d/|||||d01 }|5|||<| ||<dddn #1swxYwY|t,d2||dddddn #1swxYwYt1|}t5|t|<dddn #1swxYwY|S)3aGet or create ShellFileOperations for a terminal environment. Respects the TERMINAL_ENV setting -- if the task_id doesn't have an environment yet, creates one using the configured backend (local, docker, modal, etc.) rather than always defaulting to local. Thread-safe: uses the same per-task creation locks as terminal_tool to prevent duplicate sandbox creation from concurrent tool calls. Note: subagent task_ids are collapsed to "default" via ``_resolve_container_task_id`` so delegate_task children share the parent's container and its cached file_ops. RL/benchmark task_ids with a registered env override keep their isolation. r) rUrV_create_environmentrW_last_activity_start_cleanup_thread_creation_locks_creation_locks_lockrX_is_unusable_container_cwdrhNrDrLr}r[rP docker_imagerRsingularity_imagerO modal_imagerQ daytona_imagerKzaIgnoring host/relative cwd override %r for %s backend (won't exist in sandbox). Using %r instead.z*Creating new %s environment for task %s...>rOrPrQrR container_cpur,container_memoryicontainer_diskirTdocker_volumesdocker_mount_cwd_to_workspaceFdocker_forward_envdocker_run_as_host_userdocker_network) r9r:r;rr<r=r>r?r@rZssh_hostssh_userssh_portssh_keyssh_persistent)hostuserportkey persistentrYrKlocal_persistenttimeouthost_cwd) r[imagerLrM ssh_configcontainer_config local_configrFrNz %s environment ready for task %s)r]rUrVr.rWr/r0r1r2rXr3rhtimerrr rrr threadingLockr~loggerinfor)rFrUrVr.rWr/r0r1r2rXr3rhrS raw_task_idrold_cwd task_lock terminal_envr~rr[rrOrLrQrPrRfile_opss r _get_file_opsr]sKKK&YK((55G .. $$W--...............   7 7...*.))++w' 7 7 7 7 7 7 7 7"&%66;';;3:0;;;;;;;;;;;;;;;#77#''666777777777777777 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7" -- / ) )'0~'7'7OG $#G, --------------- aSaS  $ $...*.))++w'3G< #  $ $ $ $ $ $ $ $ $ $ $ $ $ $ $   B B B B B B$_&&Fj)H..{;;I8##! n55O9O]**! &9::YfEX>YW$$! m44M}8MY&&! o66Q&:Q--&&W/*=*=g*F*FW&QV-C...3M3Mc3R3R.&-''KKFXve} Um KKDhPWXZYZXZP[ \ \ \# HHH%+ZZ%C%C(. 3Et(L(L&,jj1A5&I&I,2JJ7Mt,T,T&,jj1A2&F&F5;ZZ@_af5g5g*0**5I2*N*N/5zz:SUZ/[/[&,jj1A4&H&H $ $ J5  "JJz266"JJz266"JJz266!::i44"(**-=u"E"E   L7"" &**-?"G"G  /.!y)%!1)J//   L 6 60<$W-*.))++w' 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 " ! # # # KK:Hgbqbk R R RCaSaSaSaSaSaSaSaSaSaSaSaSaSaSaSH#<00H ,,#+ ,,,,,,,,,,,,,,, OsAA #A +DD/ C: DC D C  DD4 DD DD DDD$#EEE S1#'F S1F S1F K%S1R, S1,R0 0S13R0 41S11S58S5 T))T-0T-ct5|rt|dntddddS#1swxYwYdS)z Clear the file operations cache.N)rrrclear)rFs rclear_file_ops_cacher`s $$  $    . . . .  ! ! # # # $$$$$$$$$$$$$$$$$$s8A  AAr,offsetlimitc  t||\}}t|rdnt |}t ||rt jdd|diSt||}ddl m }m }m }|t|r |t|} t|} | } t!| } ||zdz } d | |dz | }|r| ||nd | t&j|| | kd d }|d r#d| dzd|dt-| | d| d |d<t!|d}t/}||krt1|d|\}}}||z}||zdz }||d<d |d <d|d<||d<d|dd|d|d|d| d|d |d<t!|d dd|kr|dxxdz cc<|drt5|dd |d<t j|d !S#|$r t6d"|d #YnwxYwt;t|r6|j}t jdd$|d%|d&iStAt|}|rt jd|iSt|}|||f}tB5tD#|ddtIiiid'}d(|vri|d(<d)|vri|d)<|%d*i%|}dddn #1swxYwY| t&j&|}||krtB5|d(%|ddz}||d(|<tO|dddn #1swxYwY|d+kr$t jd,|dzd-||dzd.d !St jd/tP|d d d0d !Sn#tR$rYnwxYwt|} | *|||}|+}t!|j,pd }|%d1d} t/}||kr|%d2d3} t1|j,pd |\}}}||z}||zdz }||_,||d<d |d <d|d<||d<d|dd|d|d|d| d|d |d<t!|d dd|kr|dxxdz cc<t!|}|j,r%t5|j,d |_,|j,|d<| rA| tZkr6|d4kr0|%d r|#d5d6| dd7d8|||f}!tB5d*|vri|d*<d(|vri|d(<|d(.|d|d9/|||f|d:|!kr|d;xxdz cc<n |!|d:<d|d;<|d;}" t&j&|}#|#|d*|<|#|#d)i|<n#tR$rYnwxYwtO|dddn #1swxYwY |dkp!ta|%d }$tcj2|||$<n,#tf$rt6d=d #YnwxYw|"d>krt jd?|"d@||"d.d !S|"dAkr dB|"dC|dD<t j|d !S#tf$r&}%tit|%cYd}%~%Sd}%~%wwxYw)Ez-Read a file with pagination and line numbers.N)rerrorz Cannot read 'zE': this is a device file that would block or produce infinite output.r)ExtractionErrorextract_document_textis_extractable_documentr,r+rKT)r( total_lines file_size truncatedextracted_documentrjz Use offset=z to continue reading (showing -z of z lines)hintr(bytes truncated_by next_offsetzOutput truncated at the ,z-char read budget after z line(s) (showing lines z). Use offset=z to continue.zv Note: the first line alone exceeded the budget and was clamped mid-line; its remainder is not retrievable via offset. file_readF ensure_asciiz!document extraction failed for %sexc_infozCannot read binary file 'z' (zF). Use vision_analyze for images, or terminal to inspect binary files.)last_key consecutiverr r r r r r rz8BLOCKED: You have called read_file on this exact region u times and the file has NOT changed. STOP calling read_file for this path — the content from your earlier read_file result in this conversation is still current. Proceed with your task using the information you already have.)rdr already_read unchanged)statusmessager r content_returnedrirhunknown_hintzThis file is large (zj bytes). Consider reading only the section you need with offset and limit to keep context usage efficient.readrrxry)partialzfile_state.record_read failedz.BLOCKED: You have read this exact file region z| times in a row. The content has NOT changed. You already have this information. STOP re-reading and proceed with your task.z%You have read this exact file region z times consecutively. The content has not changed since your last read. Use the information you already have. If you are stuck in a loop, stop reading and proceed with writing or responding._warning)5rrrrrrjsondumpsrHtools.read_extractrerfrgrar]r r-r_add_line_numbersrr getsizeminr'r6r/r rVdebugrsuffixr`r_read_tracker_lockrrrr getmtimerrr read_fileto_dictr(_LARGE_FILE_HINT_BYTESrrrr record_readr tool_error)&r rarbrF device_base _resolvedrerfrgextracted_textr\r1rhend_line page_text result_dict content_lenr)trimmed lines_keptrrp shown_end_ext block_error resolved_str dedup_keyr cached_mtime current_mtimehitsrriread_keyr. _mtime_now_partiales& rread_file_toolrsG b"1&%@@  #4jj3355AACCcddIZ[bIcIc d[ 9 9 9 :8D888 +499 gfffffffff " "3y>> 2 24 C3 C!6!6s9~~!F!F)11&1133!%jj !E>A- IIeFQJx,?&@AA PYax99)VLLL_a#.!#!;!;!,x!7*.  {+bhlbb$*bb-0;-G-GbbMXbbb '"+i"899 /11 **.F#I. ..*GZ#):"5K & 3a 7I-4K */3K ,29K/1>::  6:w 455 5 9~~ !651  E E%00  # R;;I9,,*, ,' 11/1 +,$=="5599)DDL E E E E E E E E E E E E E E E  #$  " 0 0 > >  L00 ,::(6::9aHH1L=A ,/ :.y999::::::::::::::: qyy#z!D04q!D!D!D%),01H + +). / / / / :"-#= $!%,1 '' %* ++++51B    !))##D&%88nn&& &..B// OOK33 '))  " "&//-CCK%=$"i&& "GZ!:-K+a/I$FN%,K "'+K $*1K ')4K &I9PIIII7=II@IIIII.9III   7==q))!,--::F###### g,,K > 426>TRRRFN%+^K "  )&<<<CKKOOK00  " "73y=333   D&%0  . .i''%' '"9,,*, ,' l # ' ' 4 8 8 8 n % ) )4*? @ @ @$00-(((A-(((((0 *%+, -(m,E  W--l;; 0: '"9-LV $$%6;;LII     #9 - - -A . . . . . . . . . . . . . . .R I ItKOOK,H,H'I'IH  "7L( K K K K K I I I LL84L H H H H H I A:::BUBBB %"### #aZZcccc  # z+E:::: """#a&&!!!!!!!!"s>B`3`8JF7`"J-*`,J--A`3`6`A*O; `O  `O `,R:Q; RQ  RQ ,R< R` R+(`*R++F7`"A<]A\#"]# \0-]/\00] `]`]`?^`&_`_&`*$` `?`:4`?:`?ct5|rYt|}|r}d|vr|dd|vr|d?ddddS#1swxYwYdS)uClear the deduplication cache for file reads. Called after context compression — the original read content has been summarised away, so the model needs the full content if it reads the same file again. Without this, reads after compression would return a "file unchanged" stub pointing at content that no longer exists in context. Call with a task_id to clear just that task, or without to clear all. r r N)rrr r_valuesrFrs rreset_file_deduprs6  4 4  4%))'22I 4i''g&,,...9,,l+11333*1133 4 4 i''g&,,...9,,l+11333 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4sB4C  C C ct5t|}|r(d|d<d|d<d|vr|dddddS#1swxYwYdS)uReset consecutive read/search counter for a task. Called by the tool dispatcher (model_tools.py) whenever a tool OTHER than read_file / search_files is executed. This ensures we only warn or block on *truly consecutive* repeated reads — if the agent does anything else in between (write, patch, terminal, etc.) the counter resets and the next read is treated as fresh. Nrxrryr )rrr r_rs rnotify_other_tool_callrs 00!%%g..  0$(Ij !'(Im $y((,'--///000000000000000000sAAA!Ac tt|n#ttf$rYdSwxYwt5t |}| ddddS|d}|s ddddSfd|D}|D]}||= ddddS#1swxYwYdS)uRemove all dedup cache entries whose resolved path matches *filepath*. Called after write_file and patch so that a subsequent read_file on the same path always returns fresh content instead of a stale "File unchanged" stub. The dedup cache keys are tuples of ``(resolved_path, offset, limit)``; we must evict **all** offset/limit combinations for the written path because any cached range could now be stale. Must be called with ``_read_tracker_lock`` **not** held — acquires it internally. Nr c,g|]}|dk|S)rrz)rkrs rrz._invalidate_dedup_for_path..s';;;A!A$(*:*:a*:*:*:r7)rarIrrrrr )rErFrr  stale_keysrrs @r_invalidate_dedup_for_pathrsr}X..// Z    !%%g..            g&&          <;;;;;;   Aa                   s) 55B3*B3B33B7:B7ct|| tt||}tj|}n#t tf$rYdSwxYwt5t |}|(|| di|<t|ddddS#1swxYwYdS)uRecord the file's current modification time after a successful write. Called after write_file and patch so that consecutive edits by the same task don't trigger false staleness warnings — each write refreshes the stored timestamp to match the file's new state. Also invalidates the dedup cache for the written path so that subsequent reads return fresh content (fixes #13144). Nr ) rrarHrr rrrrrr rr)rErFrrrs r_update_read_timestampr sx111-h@@AA((22 Z  ..!%%g..  DQI !2B 7 7 A "9 - - - ..................s$.Js , , ,1! ,Q , , ,r7Nr)project_facts_for)mark_workspace_edited)rrLpathsz verification stale marker failedTrv) agent.coding_contextragent.verification_evidencerrarparentrrrVr) rFrrrrrrLr candidates r_mark_verification_stalerDs - , , , ,E H::::::EEEEEE  D T 122       ++   ;/88C ; $uQx../00    )>wCuUUUUUU HHH 7$ GGGGGGHsXC!AC ACA&C;'B#"C# B2/C1B22C&C10C1 cross_profilect||}|rt|S|s!t||}|rt|St|rtdS t t ||}n#t $rd}YnwxYw|t||}t|} | ||} | } |r|| d<| dst||g|t||tj| dSt!j|5t!j||}t||}t'|t)||} t|} | ||} | } |p|p| } | r| | d<|| d<| ds|g| d <t||g|t||| dst!j||dddn #1swxYwYtj| dS#t $r}t-|r/t.d t3|j|n0t.d t3|j|d tt |cYd}~Sd}~wwxYw)uXWrite content to a file. ``cross_profile`` opts out of the soft cross-Hermes-profile guard. The guard fires only on writes that land in another profile's skills/plugins/cron/memories directory; everything else is unaffected. Pass ``True`` after explicit user direction — same shape as ``force`` on the terminal tool. zRefusing to write internal read_file display text as file content. Strip read_file line-number prefixes or reconstruct the intended file contents before writing.NrrdrFrtrfiles_modifiedz"write_file expected denial: %s: %szwrite_file error: %s: %sTrv)rrrr,rarHrrr] write_filerr rrrrr lock_path check_stalerr note_writerrVrtyper_rd)r r(rFrr sensitive_err cross_warningr stale_warningr\rr cwd_warningeffective_warningrs rwrite_file_toolrfs*$88M)-((( -1$@@  -m,, ,%g..  ,   8" 24AABBII   III   1$@@M$W--H((w77F ..**K 8*7 J'??7++ Q(4&ZPPPP "4 1 1 1:k>>> >  !) , , : :'27IFFM1$@@M34i'RRK$W--H((G<}tE||"|}|rt)j#||?tI|d"fd| DDdddn #1swxYwY|drwdt |dvr`d}|d kr)|r'"|p|} tK|| }|dkr d|d|d|d <nd!t |dvrd"|d <tMj'|d#$S#t$r&}!tt |!cYd}!~!Sd}!~!wwxYw)%zPatch a file using replace mode or V4A patch format. ``cross_profile`` opts out of the soft cross-Hermes-profile guard for targets under another profile's skills/plugins/cron/memories directory. Same shape as ``write_file``'s flag. rrN)has_traversal_componentv4a_pathr cD|rtd|dSdS)Nz*V4A patch header contains '..' traversal: z. Use the agent's cwd-relative path (no '..') or an absolute path in '*** Update File:' / '*** Add File:' / '*** Delete File:' / '*** Move File:' headers.)r)rrs r_reject_v4a_traversalz)patch_tool.._reject_v4a_traversalsK'&x00 !EEEE 4r7z/^\*\*\*\s*(?:Update|Add|Delete)\s+File:\s*(.+)$r,z+^\*\*\*\s*Move\s+File:\s*(.+?)\s*->\s*(.+)$r) ExitStackrz path requiredz"old_string and new_string requiredzpatch content requiredzUnknown mode: z | rc>g|]}|p|Srzr r_p_path_to_resolveds rrzpatch_tool..>s:"""46!%%b))/R"""r7rdrrrcg|]}||Srzrz)r_rs rrzpatch_tool..Ps.000Z\0000r7c3BK|]}|VdSNrrs rrzpatch_tool..Qs2!V!V"3"7"7";";!V!V!V!V!V!Vr7zCould not findrzThis is failure #z patching a. Stop retrying with variations of the same old_string. Either: (1) re-read the file fresh to verify current content, (2) use a longer / more unique old_string with surrounding context lines, or (3) use write_file to replace the entire file if the targeted region is hard to anchor.rz#Did you mean one of these sections?zfold_string not found. Use read_file to verify the current content, or search_files to locate the text.Frt)(r0retools.path_securityrrafinditer MULTILINEgrouprrrrrrrHrrsort contextlibr enter_contextr rrrrrr]r patch_replace patch_v4arr-rrrrrrrr)$rr rrrrrFrr_paths_to_check_rer_mrrrrr_resolved_paths_seenrr_locksstale_warnings_cross_swr\_replace_targetrr_resolved_modified failure_countrrrrs$ @@r patch_toolrsrO %t$$$ w5?????? C C$J      ,,,QSXZ]Zghh - -Bxx{{((**H((22D   " "8 , , , , ,,MuVYVcdd 1 1BXXa[[..00"((1++2C2C2E2EF 1 1,,X66 KKKKK&&x0000  1 11-b'::  -m,, , , , 15b'BBM 1!-00000@"&(%%!  B /G<<==     boo&&r*** "  )((((( Y[[F F% ? ?$$Z%9"%=%=>>>>)+N02 % / /3B@@AABB BBB(*!"%@BL/<<<B 5b' B BJrJ32tBxxIIC/"))#...$W--Hy  7%o667F F F F F F F F 8%);%&JKK;F F F F F F F F F#4"7"7"="="E!//ZYdee@%&>??OF F F F F F F F P"++E22!"94"9"9::UF F F F F F F F X!..**K x?B>?R?RVW?W?W.*;*;]b]g]ghv]w]w J'"""":I"""  ??7++ 0B ,-)**a//3Ea3HK0(2DQ[\\\\);;B*2w777*..r22B;"-gr:::&g00!V!V!V!Vo!V!V!V000IF F F F F F F F F F F F F F F V ??7 # # (8C G@T$ 5gx H H !!! !!!!!G$$7c+gBV>W>WWWCG$z+E:::: """#a&&!!!!!!!!"sV.G  V GVGAV35S/)JS/ JS/JBS/( V5S/ VAS/ V''S/ VDS/# V/S33V6S37B$V W &WW W rN2patternr file_glob output_modecontextc  t||\}}d||t||pd||f} t5t|ddt d} | d| kr| dxxdz cc<n | | d<d| d<| d} dddn #1swxYwY| d krt jd | d || d d S t||} n#tttf$rd} YnwxYwt| rt| n|} | rt jd| id St|}|||||||||}t||}t!|dr<|jD]4}t!|dr"|jrt'|jd|_5|d}|r|d|d<| dkr d| d|d<t j|d }|dr||z}|d|dz }|S#t,$r&}t/t|cYd}~Sd}~wwxYw)zSearch for content or files.searchrKNr)rxryrrxryr,rz(BLOCKED: You have run this exact search z times in a row. The results have NOT changed. You already have this information. STOP re-searching and proceed with your task.)rdralready_searchedFrtrd)rr rrrbrarrrr(Trr)densifyze result(s) omitted because they target credential, token, cache, or secret-bearing environment files._omittedrzYou have run this exact search zY times consecutively. The results have not changed. Use the information you already have.rrjz' [Hint: Results truncated. Use offset=zC to see more, or narrow with a more specific pattern or file_glob.])r rarrrrrrrHrrrrr]rrrrr(r rr rr)rrr rrbrarrrF search_keyrr.rrr\rrmr result_jsonrprs r search_toolr{s M"3FEBB     II O    - -%00 CEE;;I$ 22-(((A-(((((2 *%+, -(m,E - - - - - - - - - - - - - - - A:::DuDDD#$)"### # !24AAMM\2 ! ! ! MMM !*+X3}+=+=+=TXYY  J:w 45III I ))$vK!  6fgFF 69 % % Q^ Q Q1i((QQYQ 5ai4 P P PAInnTn22  EEE  # A::V%VVV  # j5AAA  ??; ' ' X 5.K X{XXX XK """#a&&!!!!!!!!"sl2H'AB H'BH'"B#&H' CH'C85H'7C88.>#D#D  -        d9os + +  1DO$$- 1 1 1     &\4 ?C488OU;;<<66,''   r7c |dpd}t|dd|d|d|d|dd |d |t|d d |d  S)NrFrDrrr rrrFrrr) rr rrrrrFrr)r rrr$s r _handle_patchr+ds &&   (yC  XXfi ( (txx/?/?88L))dhh|6L6LHH]E22$((7:K:KUX488OU;;<<66,''    r7c |dpd}ddd}|dd}|||}t|dd||d d |d |d d |dd|dd|dd| S)NrFrDr(r)grepfindrrrKr rNrrbrrarrr) rrr rrbrarrrF)r r)r%r&r target_map raw_targetrs r_handle_search_filesr1os &&   (yC#W55J(I..J ^^J 3 3F B''TXXfc=R=R((;''txx/D/DTXXV^`aMbMbHH]I66TU@V@V`c e e eer7fileu📖)retoolsetschemahandlercheck_fnemojimax_result_size_charsu✍️u🔧u🔎)rDr)r,rrD)rDFN) rNNNFNrDFN)r(rNNrrr(rrD)v__doc__rrloggingrrmrTpathlibrrrrtools.binary_extensionsrtools.file_operationsrrr rr agent.redactr getLoggerr_rVEACCESEPERMEROFSrrarr$rr"__annotations__r'tuplerr6r frozensetrrIrsrirfrkrorvr{rrrrrrHrrrrrrrrrrrrrrrrUrrdictrrrrrrrrlistrr rrrrrr*r,r]r`rrrrrrrrrrtools.registryrrrREAD_FILE_SCHEMAWRITE_FILE_SCHEMA PATCH_SCHEMASEARCH_FILES_SCHEMAr'r)r+r1registerrzr7rrNsI<<<  ''''''''222222888888 ......  8 $ $ , U[A$$$$$$>"%)d )))"S"""".),c),c),eCdN>S),),),),\! " # # #  55C5#5d]>R5555$)$B$B$BCC$-I.[.[.[$\$\!!A!A!AS!A!A!A!AHFF3FtFFFF8d ](B8}8888d sTz"B#*BBBB8838sTz8888&SS4Z0""C"d """"J$&$&3$&sTz$&$&$&$&P,$(,,, ,D[, M ,,,,^S3tmG[(&&s&d&S&Y\_cYc&&&&R!#!$!!!!H%%%d T0A%T%%%%P / /# / /CRVJ / / / /SH12DE&*t***!&#S4Z####"C#cDj<3sTzD999c9#PT*9999xiD !!+c+d +t++++& R R RS4Z R R R R<$Y^%% t%in&&!!!!,3,s,s,,,," (3 ( ( ( ( ( ("  =0d0t0000f34> 2 2 2 2 2 2FCD__3_/B____D$$#$$$$d"d"d"cd"cd"#d"^ad"d"d"d"R 44c4444600C0000(st<.S.3.4....0C##*D"HH HIHd H HHHHD=F*/-1P"P"#P"P"cP"#'P" #d P"69P"P"P"P"fKOOS?D(,""S"C"C""48"IL""8<":"25""""DDGFG=>(R"R"R"cR"SR"R".1R"@CR" R"7:R"R".1R"R"R"R"t0///////%%% s%6pqq(9tBCPQRR'8sADQUVV  H   [%7PQQ (9`aa! R   Y'  &  ,!"G, P$ !Q ! K ! B "m  ! ] " H 9! ! DHI%%11 h O (:LMM')W1EWdqz{{%6{ILMM"*Q[o{KSYqxyyyyyyr7