(GjdUdZddlZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z m Z mZmZmZddlmZmZddlmZmZddlmZejeZejde Zd ed <d e d dfdZ d e d e!fdZ"dkdZ# ddl$m%Z%m&Z&m'Z'dZ(n #e)$rdZ(YnwxYwd e!fdZ*de d ee+fdZ,ddl-Z-eZ.e.dz Z/dZ0dZ1de d e fdZ2d e d e!fdZ3de d ee+fdZ4de+d ee+fdZ5de+de d e+d ee e+e ffd!Z6de+d"e d e+d#e+d ee e+e ff d$Z7d e+de+d ee e+e ffd%Z8de+d&ee+d ee e+e ffd'Z9d(Z:d)Z;ej<d*Z=hd+Z>de+d ee+fd,Z?d-ee+d ee+fd.Z@d/e+d ee+fd0ZAdld/e+d2e+d ee+fd3ZBdmde+d-e+d e fd4ZCde+d ee e+e ffd5ZDde+d eee+e ffd6ZEdnde+d8e+d e+fd9ZFd:e+d ee+fd;ZGde d:e+d eee ee+ffd<ZHdod:e d/e+d>e+d dfd?ZIdmde+d/e+d-e+d e e+e ffd@ZJde+d/e+d e e+e ffdAZK dpde+dBe+dCe+d:e+dDe!d e e+e ff dEZLdmde+d&ee+d e e+e ffdFZMde+d:e+dGe+d e e+e ffdHZNde+d:e+d e e+e ffdIZOddlZejdJd ZPdKedL<dMZQdNe e+e fd e+fdOZR dqd e+de+d/e+d-e+d:e+dGe+dBe+dCe+dDe!d&e+d e+fdPZSdQdRedSdTdUgdVdWdXdUdYdZdUd[dZdUd\dZdUd]dZd^d_dZdUd`dZdUdadZdUdbdZdUdcdZdd d dgdedfZTddglUmVZVmWZWeVjXdQdeTdhdijdS)ru Skill Manager Tool -- Agent-Managed Skill Creation & Editing Allows the agent to create, update, and delete skills, turning successful approaches into reusable procedural knowledge. New skills are created in ~/.hermes/skills/. Existing skills (bundled, hub-installed, or user-created) can be modified or deleted wherever they live. Skills are the agent's procedural memory: they capture *how to do a specific type of task* based on proven experience. General memory (MEMORY.md, USER.md) is broad and declarative. Skills are narrow and actionable. Actions: create -- Create a new skill (SKILL.md + directory structure) edit -- Replace the SKILL.md content of a user skill (full rewrite) patch -- Targeted find-and-replace within SKILL.md or any supporting file delete -- Remove a user skill entirely write_file -- Add/overwrite a supporting file (reference, template, script, asset) remove_file-- Remove a supporting file from a user skill Directory layout for user skills: ~/.hermes/skills/ ├── my-skill/ │ ├── SKILL.md │ ├── references/ │ ├── templates/ │ ├── scripts/ │ └── assets/ └── category-name/ └── another-skill/ └── SKILL.md N)Path)AnyDictListOptionalTuple)get_hermes_homedisplay_hermes_home)atomic_replaceis_truthy_value)cfg_getbackground_review_read_pathsdefaultz#_ctxvars.ContextVar[frozenset[str]]_background_review_read_pathspathreturnc ddlm}|sdSn#t$rYdSwxYw t|}n#t$rt|}YnwxYwt t }||t t|dS)aRecord that the active background-review fork has read a skill file. The autonomous review fork is allowed to evolve skills, but it must not patch or rewrite content it has only inferred from the transcript. The skill_view tool calls this after returning file content to the model; write paths below require the corresponding target path to be present when the current origin is ``background_review``. ris_background_reviewN) tools.skill_provenancer Exceptionstrresolvesetrgetadd frozenset)rrresolvedcurrents >/home/rurouni/.hermes/hermes-agent/tools/skill_manager_tool.py!mark_background_review_skill_readr"8s??????##%%  F  t||~~&& t99/335566G KK!%%i&8&899999s ##!A A%$A%c t|}n#t$rt|}YnwxYw|tvSN)rrrrr)rrs r!_background_review_has_readr%Qs`t||~~&& t99 488:: ::s!$AAcRttdS)zCTest helper: clear read-before-write marks for the current context.N)rrrr!#_reset_background_review_read_marksr)Ys !%%ikk22222r() scan_skillshould_allow_installformat_scan_reportTFc ddlm}|}tt|dddS#t$rYdSwxYw)a[Read skills.guard_agent_created from config (default False). Off by default because the agent can already execute the same code paths via terminal() with no gate, so the scan adds friction without meaningful security. Users who want belt-and-suspenders can turn it on via `hermes config set skills.guard_agent_created true`. r) load_configskillsguard_agent_createdFr)hermes_cli.configr.r r r)r.cfgs r!_guard_agent_created_enabledr3fsr111111kmm C#8 9 9     uus/2 AA skill_dirctsdStsdS t|d}t|\}}|durt |}d|d|S|2t |}t d|d|d|Sn5#t$r(}t d||d Yd}~nd}~wwxYwdS) zScan a skill directory after write. Returns error string if blocked, else None. No-op when skills.guard_agent_created is disabled (the default). Nz agent-created)sourceFz"Security scan blocked this skill (z): z4Agent-created skill blocked (dangerous findings): %szSecurity scan failed for %s: %sTexc_info)_GUARD_AVAILABLEr3r*r+r,loggerwarningr)r4resultallowedreasonreportes r!_security_scan_skillrAys t ' ) )tWIo>>>.v66 e  '//FLLLFLL L ?(//F NNQSY Z Z ZLLLFLL L  WWW8)QQUVVVVVVVVW 4s=B3B CB;;Cr/@i skill_pathc ddlm} |}n#t$r|}YnwxYw|D]D} |||cS#t tf$rYAwxYwt S)uReturn the skills root directory (local or external_dirs entry) that contains ``skill_path``. Falls back to the local ``SKILLS_DIR`` if no match is found (defensive — callers should have located the skill via ``_find_skill`` first). rget_all_skills_dirs)agent.skill_utilsrFrOSError relative_to ValueError SKILLS_DIR)rCrFrroots r!_containing_skills_rootrMs 655555%%'' $#%%    0 0 0KKKG$    H  s ,,(A''A;:A;c |p#t|do|S#t$rYdSwxYw)aTrue when ``path`` is a symlink or (on Windows) a directory junction. Either form lets a poisoned skills tree redirect a subsequent ``shutil.rmtree`` to content outside the skills root. ``is_junction`` only exists on Python 3.12+ Windows; gate with ``hasattr``. is_junctionF) is_symlinkhasattrrOrH)rs r!_is_path_redirectrRsY  YWT=%A%A%XdFVFVFXFXY uus7: AAcddlm}t|rd|dS |}n #t$r}d|d|dcYd}~Sd}~wwxYwg}|D]:} ||+#t$rY7wxYw|D]A}||krd|dcS ||}n#t$rY3wxYw|jrdSBd|d S) aLast-line guard before ``shutil.rmtree(skill_dir)`` in ``_delete_skill``. ``_find_skill`` already restricts ``skill_dir`` to a real ``SKILL.md`` parent discovered by walking the skills roots, so the agent cannot inject an arbitrary path the way Kilo Code's HTTP endpoint could (their issue #11227: a built-in-skill sentinel resolved to the server cwd and a recursive delete wiped the user's entire working directory). This is the matching defense-in-depth for our agent-facing ``skill_manage`` delete path: even if discovery or a poisoned tree hands us a bad directory, never recursively delete 1. a path that is not strictly *inside* one of the known skills roots, 2. a skills root itself (would wipe every installed skill), or 3. a directory reached via a symlink / junction (``rmtree`` would follow it into content outside the skills tree). Returns an error string to refuse on, or ``None`` when the delete is safe. rrEzRefusing to delete 'zZ': the skill directory is a symlink/junction. Remove the link target manually if intended.z': could not resolve path ().NzP': resolves to the skills root itself, which would remove every installed skill.z6': path does not resolve inside any known skills root.) rGrFrRrrHappendrIrJparts)r4rFrexcrootsrLrels r!_validate_delete_targetrZs&655555##  N9 N N N T$$&& TTTSiSSCSSSSSSSSST E##%%  LL ( ( ( (    H    t  EyEEE     &&t,,CC    H  9 44  y   s>2 AA A A!'B  BB,C CCnamec ddlm}||}|dr d|d|dSn-#t$r t d|d YnwxYwd S) uReturn a refusal message if *name* is pinned, else None. Pin protects a skill from **deletion** — both the curator's auto-archive passes and the agent's ``skill_manage(action="delete")`` tool call. The agent can still patch/edit pinned skills; pin only guards against irrecoverable loss, not against content evolution. Best-effort: if the sidecar is unreadable we let the delete through rather than block on a broken telemetry file. r skill_usagepinnedSkill 'z]' is pinned and cannot be deleted by skill_manage. Ask the user to run `hermes curator unpin zf` if they want to delete it. Patches and edits are allowed on pinned skills; only deletion is blocked.z!pinned-guard lookup failed for %sTr7N)toolsr^ get_recordrrr:debug)r[r^recs r! _pinned_guardres O%%%%%%$$T** 778   ($(()-(((   OOO 8$ NNNNNO 4s8<'A&%A&actionc ddlm}|sdSn#t$rYdSwxYw ddlm}||drdd|d|d |d d Sn-#t$r td |d YnwxYw ddl m }||r dd|d|dd Sn-#t$r td|d YnwxYw ddlm}| |r dd|d|dd S| |r dd|d|dd S| |r dd|d|dd Sn-#t$r td|d YnwxYwdS)aNRefuse autonomous curator writes to externally owned skills. Foreground agents may still perform user-directed edits to external, bundled, or hub-installed skills. The background review fork is different: it is autonomous lifecycle maintenance, so its write surface is restricted to local curator-owned sediment. rrNr]r_FRefusing background curator z for pinned skill 'ze': pinned skills are off-limits to autonomous maintenance. Ask the user to run `hermes curator unpin z` if they want it changed.successerrorz'pinned skill guard lookup failed for %sTr7)is_external_skill_path for skill 'zl': the skill lives in skills.external_dirs, which are externally owned and read-only to autonomous curation.z)external skill guard lookup failed for %sz for protected built-in skill ''.z for hub-installed skill 'z for bundled skill 'z&owned skill guard lookup failed for %s)rrrrar^rbrr:rcrGrlis_protected_builtinis_hub_installed is_bundled)r[r4rfrr^rls r!_background_review_write_guardrrs??????##%% 4  tt U%%%%%%  ! !$ ' ' + +H 5 5  N6NNNN.2NNN   UUU >t TTTTTU W<<<<<< ! !) , ,  M6MMtMMM   WWW @$QU VVVVVWT%%%%%%  + +D 1 1  0600'+000   ' ' - -  '6''"'''   ! !$ ' '  '6''"'''   TTT =td SSSSST 4sM ##editpatchdelete write_file remove_filer) _find_skillrr)rfr[existings r!_background_review_preflightrsD MMMt4  H t )$0@& I IIr( absorbed_intoc ddlm}|sdSn#t$rYdSwxYwt|to|}|rdSdd|d|dd S) uFail closed on unverified deletes during the curator consolidation pass. The curator's forked review agent (``is_background_review()``) runs the LLM umbrella-building pass. Its only legitimate ``skill_manage(delete)`` is a *verified consolidation*: the skill's content was absorbed into an umbrella, declared via ``absorbed_into=`` where the umbrella exists on disk (validated separately in ``_delete_skill``). A delete with no forwarding target — ``absorbed_into`` omitted (``None``) or empty (``""``) — is the fail-open behavior reported in #29912: the consolidation pass archived whole clusters of active skills with zero verified consolidations (``consolidated_this_run == 0``), leaving active automations pointing at names that no longer resolve. The deterministic inactivity prune is the only legitimate prune path, and it archives via ``skill_usage.archive_skill()`` directly without ever calling ``skill_manage`` — so a bare prune reaching here can only be the LLM pass pruning without consolidation evidence. Refuse it; keep the skill active. Returns an error dict to abort the delete, or ``None`` when the delete is allowed to proceed (not the curator pass, or a declared consolidation). rrNFz-Refusing background curator delete of skill 'u_': the consolidation pass may only archive a skill it has absorbed into an umbrella. Pass absorbed_into= (the umbrella must already exist) to record a verified consolidation. Pruning a skill with no forwarding target is not permitted here — the deterministic inactivity prune handles staleness archival separately. Keeping '{name}' active.r[T)rjrk _fail_closed)rrr isinstancerstripformat)r[rrdeclareds r!#_curator_consolidation_delete_guardrs0??????##%% 4  tt---G-2E2E2G2GHt 3D 3 3 3 4:6t63D3D   rxiiz^[a-z0-9][a-z0-9._-]*$>assetsscripts templates referencesc|sdSt|tkr dtdSt|sd|dSdS)z>Validate a skill name. Returns error message or None if valid.zSkill name is required.zSkill name exceeds characters.zInvalid skill name 'ze'. Use lowercase letters, numbers, hyphens, dots, and underscores. Must start with a letter or digit.N)lenMAX_NAME_LENGTH VALID_NAME_REmatchrs r!_validate_namersn )(( 4yy?""B_BBBB   t $ $  R4 R R R  4r(categoryc|dSt|tsdS|}|sdSd|vsd|vrd|dSt|tkr dtdSt |sd|dSdS) zFValidate an optional category name used as a single directory segment.NzCategory must be a string./\zInvalid category 'zn'. Use lowercase letters, numbers, hyphens, dots, and underscores. Categories must be a single directory name.zCategory exceeds r)rrrrrrr)rs r!_validate_categoryrst h $ $,++~~H t h$(** Z Z Z Z  8}}&&@?@@@@   x ( (  Z Z Z Z  4r(contentcj|sdS|dsdStjd|dd}|sdS|d|dz} t j|}n!#t j$r}d|cYd}~Sd}~wwxYwt|tsd Sd |vrd Sd |vrd Stt|d tkr dtdS|| dzd}|sdSdS)z Validate that SKILL.md content has proper frontmatter with required fields. Returns error message or None if valid. zContent cannot be empty.z---zPSKILL.md must start with YAML frontmatter (---). See existing skills for format. \n---\s*\nNzISKILL.md frontmatter is not closed. Ensure you have a closing '---' line.zYAML frontmatter parse error: z6Frontmatter must be a YAML mapping (key: value pairs).r[z&Frontmatter must include 'name' field. descriptionz-Frontmatter must include 'description' field.zDescription exceeds rzRSKILL.md must have content after the frontmatter (instructions, procedures, etc.).)r startswithresearchstartyaml safe_load YAMLErrorrdictrrMAX_DESCRIPTION_LENGTHend)r end_match yaml_contentparsedr@bodys r!_validate_frontmatterrs~ ==??*))   e $ $baa -55I [ZZ1Y__..223L4 -- >4443333333334 fd # #HGG V77F"">> 3vm$ % %&&)???J&<JJJJ 9==??Q&'' ( . . 0 0D dcc 4s/BB"BB"B"SKILL.mdlabelctt|tkr|dt|ddtddSdS)zCheck that content doesn't exceed the character limit for agent writes. Returns an error message or None if within bounds. z content is ,z characters (limit: za). Consider splitting into a smaller SKILL.md with supporting files in references/ or templates/.N)rMAX_SKILL_CONTENT_CHARS)rrs r!_validate_content_sizer#sY  7||--- - -#g,, > - -. 5 - - - 4r(c4|r t|z |z St|z S)zFBuild the directory path for a new skill, optionally under a category.)rK)r[rs r!_resolve_skill_dirr2s%,H$t++  r(cddlm}m}|D]X}|s|dD]+}||r|jj|kr d|jiccS,YdS)z Find a skill by name across all skill directories. Searches the local skills dir (~/.hermes/skills/) first, then any external dirs configured via skills.external_dirs. Returns {"path": Path} or None. r)rFis_excluded_skill_pathrrN)rGrFrexistsrglobparentr[)r[rFr skills_dirskill_mds r!rr9sNMMMMMMM))++11   ""  "((44 1 1H%%h// #t++000000, 1 4r(cg} ddlm}ddlm}n#t$r|cYSwxYw |}n#t$r|cYSwxYwt rt nt }g}|dz } ||kr|d|fn#ttf$rYnwxYw|dz }| r | D]j} | s| dz } | |kr6n#ttf$rYJwxYw|| j | fkn#t$rYnwxYw|D]}\} } | s | dD]<} || r| jj |kr|| | jfn=n#t$rYzwxYw|S)uLook for ``name`` under SKILL.md across OTHER Hermes profiles. Returns a list of ``(profile_name, skill_dir)`` pairs. Used to make the "Skill X not found" error explain when the user is editing the wrong profile. Empty list when no other profile has the skill (or when profile discovery fails — fail-quiet, the caller falls back to the plain "not found" error). r)get_default_hermes_root)rr/rprofilesr)hermes_constantsrrGrrrKrrrUrH RuntimeErroris_diriterdirr[rr)r[matchesrrrL active_dir candidatesdefault_skills profiles_rootentrypskills profile_namerrs r!_find_skill_in_other_profilesrMs')G<<<<<<<<<<<<< &&((  *4):):)<)<L##%%%*J)+JH_N  ! ! # #z 1 1   y.9 : : : \ "     :%M  &..00 9 9||~~(*((J66 7.H!!5:w"78888 9    D %/   j  ""   &,,Z88  ))(33?'4//NNL(/#BCCCE0    H  Nss    / >>/B22CC#0E#D.,E#.E?E#E E## E0/E0AG## G0/G0suffixc ddlm}|}d|d|d}t|}|rWt|dkr|d\}}|d|d|d |d z }n.d d |D}|d |dz }n|dz }|r||z }|S)a Build a "skill not found" error that names other profiles holding the same skill, so the agent can recognize a profile-scoping mistake. ``suffix`` is appended after the cross-profile hint if present (e.g. ``" Create it first with action='create'."``). r)_resolve_active_profile_namer`z' not found in active profile 'rnz) A skill by that name exists in profile '' (zC). To edit a skill in another profile, switch profiles (`hermes -p zB`) or operate via explicit file tools with ``cross_profile=True``., c3(K|] \}}d|dVdS)'Nr').0p_s r! z)_skill_not_found_error..s.::41ah!hhh::::::r(z. Skills by that name exist in other profiles: zu. Switch profiles (`hermes -p `) to edit there, or operate via explicit file tools with ``cross_profile=True``.z+ Use skills_list() to see available skills.)agent.file_safetyrrrjoin) r[rractivebaseothers other_profile other_pathnamess r!_skill_not_found_errorrs?>>>>> ) ) + +F DT D D& D D DD *4 0 0F > v;;!  (.q %M: 0!00&000!000 DDII::6:::::E PPPP DD ==   Kr( file_pathcddlm}|sdSt|}||rdS|jr=|jdkr2t |jdkst |jdkrdS|jr|jdt vr0d tt }d |d |d St |jdkrd |jddSdS)z Validate a file path for write_file/remove_file. Must be under an allowed subdirectory and not escape the skill dir. r)has_traversal_componentzfile_path is required.z%Path traversal ('..') is not allowed.rrNrzFile must be under one of: z. Got: 'rz5Provide a file path, not just a directory. Example: 'z /myfile.md') tools.path_securityrrrVr[rALLOWED_SUBDIRSrsorted)rr normalizedr=s r!_validate_file_pathrs <;;;;; (''iJy))766 JOz99 z A % %Z-=)>)>!)C)C4  Kz/2/II))F?3344JWJJiJJJJ : q  gzGWXYGZgggg 4r(cDddlm}||z }|||}|rd|fS|dfS)zNResolve a supporting-file path and ensure it stays within the skill directory.r)validate_within_dirN)rr)r4rrrsrks r!_resolve_skill_targetrsL777777  "F   2 2E U{ 4<r(utf-8encodingc|jddtjt |jd|jdd\}} t j|d|5}||d d d n #1swxYwYt||d S#t$rE t j |n-#t$r td |d YnwxYwwxYw) au Atomically write text content to a file. Uses a temporary file in the same directory and os.replace() to ensure the target file is never left in a partially-written state if the process crashes or is interrupted. Args: file_path: Target file path content: Content to write encoding: Text encoding (default: utf-8) Tparentsexist_ok.z.tmp.r)dirprefixrwrNz6Failed to remove temporary file %s during atomic writer7)rmkdirtempfilemkstemprr[osfdopenwriter runlinkrHr:rk)rrrfd temp_pathfs r!_atomic_write_textrsi4$777$   ! !(9>(((MB  Yr3 2 2 2 a GGG                  y),,,,,  m Ii  m m m LLQS\gkL l l l l l m sTB)*B  B) BB)BB)) C84C C8 'C30C82C33C8ct|}|rd|dSt|}|rd|dSt|}|rd|dSt|}|rd|dSt |}|rdd|d|dddSt ||}|dd|d z }t||t|}|rtj |d d|dSd } tj d |d d} | r\tj|d | d z} t!| dd dd}n#t$$rYnwxYwdd|dt!|t(t!|d|id} |r|| d<d|| d<| S)z.Create a new user skill with SKILL.md content.FrizA skill named 'z' already exists at rrTrr) ignore_errorsrrrNrxr`z ' created.)rjmessagerr_changerzTo add reference files, templates, or scripts, use skill_manage(action='write_file', name='{}', file_path='references/example.md', file_content='...')hint)rrrrrrrrrAshutilrmtreerrrrrrrrrIrKr) r[rrerrrr4r scan_error_desc_fm_end_parsedr<s r! _create_skillrsm   C 0 3/// X & &C 0 3///  ( (C 0 3///  ) )C 0 3///4  H TtTT&AQTTT   #422I OOD4O000:%Hx)))&i00J7 it4444 :666 E )M7122;77  >nWQw}}/B-B%CDDG M26677=E      -T---I))*5566MM!5) F&%z nntntuynznz 6N Ms'A;E## E0/E0cJt|}|rd|dSt|}|rd|dSt|}|sdt|dSt ||dd}|r|S|ddz }t ||dd}|r|S|r|dnd}t||t|d}|r|t||d|dSd } tj d |d d} | r\tj |d | d z} t| d d dd } n#t"$rYnwxYwdd|dt|dd | idS)z:Replace the SKILL.md of any existing skill (full rewrite).FrirrzrrrNrrrrrTr`z' updated (full rewrite).)rjr rr )rrrrrrrwr read_textrrArrrrrrrr) r[rrrguardr read_guardoriginal_contentrrrrs r! _edit_skillrLs"  ( (C 0 3///  ) )C 0 3///4  H I +A$+G+GHHH *4&1A6 J JE  *,H; h J@H?P?PZx))7);;;VZx)))&hv&677J7  ' x)9 : : : :666 E )M7122;77  >nWQw}}/B-B%CDDG M26677=E      P>PQZ>[>[+]+]^^^; #2  J 00G 9888887M7MZ884Ki  $3$-CLL3,>,>55BG  > > > > > > ++KjRYZZ ZGG    D #   &/=::IL L A A AC 0 3/// #K00   G#GG  v{+++&i00J76#3444 :666Z HjjyZZUYZZ^iZZJMNNNwzwzTVZZZF $3$C OOc,A,A55rJ$3$C OOc,A,A55rJF9 Ms*E EEct|}|sdt|dSt||dd}|r|St||}|r|St |}|rd|dS|)t |t r|nd}t|}|r+|}||kr dd|ddSt|} | s dd|d dS|d} t| } t| } | rd| dS d d l m } | }n#t$rd}YnwxYw|rY d d lm}||\}}n"#t$r}dd |d|dcYd}~Sd}~wwxYw|sd|dSd|d|d}|r |d|dz }d|ddSt!j| | j}|| krI|r5t)|s|d|d}|r |d|dz }d|dS)u<Delete a skill. ``absorbed_into`` declares intent: - ``None`` / missing → caller didn't declare (legacy / non-curator path); accepted for backward compat but logs a warning because the curator classification pipeline can't tell consolidation from pruning without it. - ``""`` (empty) → explicit "truly pruned, no forwarding target". - ``""`` → content was absorbed into that umbrella; the target must exist on disk. Validated here so the model can't claim an umbrella that doesn't exist. Frirr|Nrzabsorbed_into='z'' cannot equal the skill being deleted.zR' does not exist. Create or patch the umbrella skill first, then retry the delete.rr) archive_skillzfailed to archive 'z': r`z ' archived (rTz Content absorbed into 'rnT)rjr  _archivedz ' deleted.r#)rrrrrrerrrboolrMrZrrrtools.skill_usager1r r rranyrrmdir)r[rrr fail_closed pinned_errabsorbed_targetis_consolidation target_namersr4 skills_rootunsafer curator_passr1ok archive_msgr@r rs r! _delete_skillrAs_4  H I +A$+G+GHHH *4&1A8 L LE  6dMJJKt$$J7 :666  $M3)G)G $   O,,% $   _;___ [))  XkXXX  I))44K%Y / /F 3 6222??????++--   H S 7 7 7 7 7 7+mD11OB  S S S$/QT/Q/Qa/Q/QRR R R R R R R S <${;; ;=D==k===  F E/EEE EGG$GGG M) F V^^=M=M9N9N ((((GBAoAAAA  s0D D D &D;; E EEE file_contentct|}|rd|dS|s |dkrdddSt|d}|tkrdd|ddtdd dSt || }|rd|dSt |}|sdt |d dSt||d d }|r|St|d |\}}|rd|dS|J| rt||d |}|r|S|j dd| r| dnd} t||t|d } | r.| t|| n|dd| dSdd|d|dt#|dS)z>Add or overwrite a supporting file within any skill directory.Frirzfile_content is required.rzFile content is rz bytes (limit: z7 bytes / 1 MiB). Consider splitting into smaller files.r!z& Create it first with action='create'.rr}NTrr) missing_okFile 'z' written to skill 'rn)rjr r)rrencodeMAX_SKILL_FILE_BYTESrrrrrrrrwrrrrrArr) r[rrBr content_bytesrrrsrrrs r! _write_filerI[sz i ( (C 0 3/// HLB.. +FGGG ++G4455M+++:=;::/D:::    !Y ? ? ?C 0 3///4  H s +A$Hp+q+qrrr *4&1A< P PE  '(8)DDKFC 0 3///     }}? &,       Mt444=C]]__Vv'''999RVv|,,,&hv&677J7  ' v'7 8 8 8 8 MMTM * * * :666CICC4CCCF   r(c Xt|}|rd|dSt|}|sdt|dS|d}t||d}|r|St ||\}}|rd|dS|J|sg}t D]|}||z } | ra| dD]K} | r5| t| |L}dd|d|d |r|ndd St||d|} | r| S| |j} | |krI| r5t| s| d d|d |d d S)z2Remove a supporting file from any skill directory.Frirr~N*rEz' not found in skill 'rn)rjrkavailable_filesTz' removed from skill 'r#)rrrrrrrrris_filerUrrIrwrrr5rr6) r[rrrr4rrs availablesubdirdrrrs r! _remove_filerQs  i ( (C 0 3///4  H I +A$+G+GHHH I *4M J JE  ' 9==KFC 0 3///     ==??   % H HFF"Axxzz HHHAyy{{H!((Q]]9-E-E)F)FGGGGiGGtGGG,5?yy4   < fmYJ MMOOO]F v}}s6>>;K;K7L7L EIEETEEE  r(skill_gate_bypassz_ctxvars.ContextVar[bool]_skill_gate_bypassc |dvrdStrdS ddlm}n#t$rYdSwxYw||j}|jrdS|jrt|j dS||d}| d| D| |||d pd |d pd |d pd |d pd }||j|||}t!jdd|d||j ddS)zEvaluate the skill write gate. Returns a JSON tool-result string when the write should NOT proceed (blocked or staged), or None to perform the real write. Bypassed during approved-pending replay. >rzr{creater|r}r~Nr)write_approvalFrj)rfr[ci|] \}}||| Sr$r')rkvs r! z+_apply_skill_write_gate..sMMMTQq}Aq}}}r(rrrrr)rrrr)summaryoriginTid)rjstaged pending_idgistr  ensure_ascii)rSrrarVr evaluate_gateSKILLSallowblocked tool_errorr updateitems skill_gist stage_writecurrent_originjsondumps)rfr[payload_kwargswadecisionpayloadrarecords r!_apply_skill_write_gaterus WWWtt....... tt **H~t;(*E:::: ..G NNMM^%9%9%;%;MMMNNN ==""9--3 $$[117R!%%l339r!%%l339r   D^^BIwREVEVEXEX^ Y YF :Dt ("2 4 4   s * 88rsc^td} t|dd|dd|d|d|d|d|d |d |d d |d  t|S#t|wxYw)zReplay a staged skill write, bypassing the gate. Returns the tool result JSON string. Called by the /skills approve handler. Trfrr[rrrrBrrrFr rfr[rrrrBrrrr)rSr skill_managerreset)rstokens r!apply_skill_pendingr{s  " "4 ( (E(;;x,,VR((KK **[[,,kk+.. ^44{{<00{{<00 M599!++o66       ''''  ''''s CDD,c Nt||} | tj| dSt||||||||||  } | | S|dkr%|st ddSt |||} n|dkr$|st d dSt ||} n|d kr:|st d dS|t d dSt|||||} n|d krt|| } nq|dkr8|st ddS|t ddSt|||} n3|dkr$|st ddSt||} n dd|dd} | dr ddl m } | dn#t$rYnwxYw ddlm}m}m}ddlm}|dkr|r ||n6|dvr ||n&|d kr | ds ||n#t$rYnwxYwtj| dS) zz Manage user-created skills. Dispatches to the appropriate action handler. Returns JSON string with results. NFrb)rrrrBrrrrrUzVcontent is required for 'create'. Provide the full SKILL.md text (frontmatter + body).rWrzzGcontent is required for 'edit'. Provide the full updated SKILL.md text.r{z=old_string is required for 'patch'. Provide the text to find.zLnew_string is required for 'patch'. Use empty string to delete matched text.r|)rr}zJfile_path is required for 'write_file'. Example: 'references/api-guide.md'z*file_content is required for 'write_file'.r~z(file_path is required for 'remove_file'.zUnknown action 'z<'. Use: create, edit, patch, delete, write_file, remove_filerirjr) clear_skills_system_prompt_cacheT)clear_snapshot) bump_patchforgetmark_agent_createdr>rzr{r}r~r2)rrnrorurhrrr/rArIrQragent.prompt_builderr}rr4rrrrr)rfr[rrrrBrrrr preflight gate_resultr<r}rrrrs r!rxrxsr"-VT::Iz)%8888 *g,*} K   GvAFGGG GtWh77 6   xgqvwww wT7++ 7   n]glmmm m  lv{||| |dJ I{SS 8  t=AAA <   {jtyzzz z  JTYZZZ ZT9l;; =  YHRWXXX XdI..#.E.E.E.EFF zz)  M M M M M M , ,D A A A A A    D   P P P P P P P P P P C C C C C C!!''))-&&t,,,III 4    8##zz+..!F4LLL    D  :f5 1 1 11s%:F FFA"H H HrxuManage skills (create, update, delete). Skills are your procedural memory — reusable approaches for recurring task types. New skills go to uo/skills/; existing skills can be modified wherever they live. Actions: create (full SKILL.md + optional category), patch (old_string/new_string — preferred for fixes), edit (full SKILL.md rewrite — major overhauls only), delete, write_file, remove_file. On delete, pass `absorbed_into=` when you're merging this skill's content into another one, or `absorbed_into=""` when you're pruning it with no forwarding target. This lets the curator tell consolidation from pruning without guessing, so downstream consumers (cron jobs that reference the old skill name, etc.) get updated correctly. The target you name in `absorbed_into` must already exist — create/patch the umbrella first, then delete. Create when: complex task succeeded (5+ calls), errors overcome, user-corrected approach worked, non-trivial workflow discovered, or user asks you to remember a procedure. Update when: instructions stale/wrong, OS-specific failures, missing steps or pitfalls found during use. If you used a skill and hit issues not covered by it, patch it immediately. After difficult/iterative tasks, offer to save as a skill. Skip for simple one-offs. Confirm with user before creating/deleting. Good skills: trigger conditions, numbered steps with exact commands, pitfalls section, verification steps. Use skill_view() to see format examples. Pinned skills are protected from deletion only — skill_manage(action='delete') will refuse with a message pointing the user to `hermes curator unpin `. Patches and edits go through on pinned skills so you can still improve them as pitfalls come up; pin only guards against irrecoverable loss.objectstring)rUr{rzr|r}r~zThe action to perform.)typeenumrzSkill name (lowercase, hyphens/underscores, max 64 chars). Must match an existing skill for patch/edit/delete/write_file/remove_file.)rrzFull SKILL.md content (YAML frontmatter + markdown body). Required for 'create' and 'edit'. For 'edit', read the skill first with skill_view() and provide the complete updated text.zText to find in the file (required for 'patch'). Must be unique unless replace_all=true. Include enough surrounding context to ensure uniqueness.zXReplacement text (required for 'patch'). Can be empty string to delete the matched text.booleanzZFor 'patch': replace all occurrences instead of requiring a unique match (default: false).zOptional category/domain for organizing the skill (e.g., 'devops', 'data-science', 'mlops'). Creates a subdirectory grouping. Only used with 'create'.zPath to a supporting file within the skill directory. For 'write_file'/'remove_file': required, must be under references/, templates/, scripts/, or assets/. For 'patch': optional, defaults to SKILL.md if omitted.z0Content for the file. Required for 'write_file'.uFor 'delete' only — declares intent so the curator can tell consolidation from pruning without guessing. Pass the umbrella skill name when this skill's content was merged into another (the target must already exist). Pass an empty string when the skill is truly stale and being pruned with no forwarding target. Omitting the arg on delete is supported for backward compatibility but downstream tooling (e.g. cron-job skill reference rewriting) will have to guess at intent.) rfr[rrrrrrrBr)r propertiesrequired)r[r parameters)registryrhc t|dd|dd|d|d|d|d|d|d |d d |d  S)Nrfrr[rrrrBrrrFrrw)rxr)argskws r!rs|xx"%% XXfb ! !##*%%((;''XXn--88L))88L))HH]E22hh// 1 1 1r(u📝)r[toolsetschemahandleremoji)rN)rr$)r)r)NF)NNNNNNFN)Y__doc__rnloggingrrr r contextvars_ctxvarspathlibrtypingrrrrrrr r utilsr r r1r getLogger__name__r: ContextVarrr__annotations__r"r3r%r)tools.skills_guardr*r+r,r9 ImportErrorr3rrAr HERMES_HOMErKrrrMrRrZrerrrwrrrrGcompilerrrrrrrrrrrrrrrr/rArIrQrSrur{rxSKILL_MANAGE_SCHEMAtools.registryrrhregisterr'r(r!rs^ B  33333333333333AAAAAAAA11111111%%%%%%  8 $ $GZxGZ"IIKKHHHD :D:T::::2;d;t;;;;3333 WWWWWWWWWWd&DXc]4 o 8 # , D T    :t: ::::z 6R RR Rd38n RRRRj     d38n <JJCJHT#s(^b$RVHAAAcASADcNAAAAH2c2C2DcN2222r nn nnn n  n  #s(^ nnnnbfffHSMfT#s(^ffffR;c;c;;c3h;;;;|2s2s2tCH~2222v2E(2E333/ $$$N(c3h(C((((2b2b2 b2 b2b2 b2  b2  b2b2b2b2b2 b2b2b2b2T  H//11 H H H<!ZZZ7 !a!U!)!2"{ !/!N!Q !?  {K K Xv&]OOApph0///////    1 1 s BB%$B%