#!/usr/bin/env python3 """ Hermes Agent CLI - Interactive Terminal Interface A beautiful command-line interface for the Hermes Agent, inspired by Claude Code. Features ASCII art branding, interactive REPL, toolset selection, and rich formatting. Usage: python cli.py # Start interactive mode with all tools python cli.py --toolsets web,terminal # Start with specific toolsets python cli.py --skills hermes-agent-dev,github-auth python cli.py --list-tools # List available tools and exit """ # IMPORTANT: hermes_bootstrap must be the very first import — UTF-8 stdio # on Windows. No-op on POSIX. See hermes_bootstrap.py for full rationale. try: import hermes_bootstrap # noqa: F401 except ModuleNotFoundError: # Graceful fallback when hermes_bootstrap isn't registered in the venv # yet — happens during partial ``hermes update`` where git-reset landed # new code but ``uv pip install -e .`` didn't finish. Missing bootstrap # means UTF-8 stdio setup is skipped on Windows; POSIX is unaffected. pass import logging import os import shutil import sys import json import re import concurrent.futures import base64 import atexit import errno import tempfile import time import uuid import textwrap from collections import deque from urllib.parse import unquote, urlparse from contextlib import contextmanager from pathlib import Path from datetime import datetime from typing import List, Dict, Any, Optional logger = logging.getLogger(__name__) # Suppress startup messages for clean CLI experience os.environ["HERMES_QUIET"] = "1" # Our own modules import yaml from hermes_cli.fallback_config import get_fallback_chain from hermes_cli.cli_agent_setup_mixin import CLIAgentSetupMixin from hermes_cli.cli_commands_mixin import CLICommandsMixin # prompt_toolkit for fixed input area TUI from prompt_toolkit.history import FileHistory from prompt_toolkit.styles import Style as PTStyle from prompt_toolkit.patch_stdout import patch_stdout from prompt_toolkit.application import Application from prompt_toolkit.layout import Layout, HSplit, Window, FormattedTextControl, ConditionalContainer from prompt_toolkit.layout.processors import Processor, Transformation, PasswordProcessor, ConditionalProcessor from prompt_toolkit.filters import Condition from prompt_toolkit.layout.dimension import Dimension from prompt_toolkit.layout.menus import CompletionsMenu from prompt_toolkit.widgets import TextArea from prompt_toolkit.key_binding import KeyBindings from prompt_toolkit import print_formatted_text as _pt_print from prompt_toolkit.formatted_text import ANSI as _PT_ANSI try: from prompt_toolkit.cursor_shapes import CursorShape _STEADY_CURSOR = CursorShape.BLOCK # Non-blinking block cursor except (ImportError, AttributeError): _STEADY_CURSOR = None try: from hermes_cli.pt_input_extras import ( install_ctrl_enter_alias, install_ignored_terminal_sequences, install_shift_enter_alias, ) install_shift_enter_alias() install_ctrl_enter_alias() install_ignored_terminal_sequences() del install_shift_enter_alias, install_ctrl_enter_alias, install_ignored_terminal_sequences except Exception: pass import threading import queue def CanonicalUsage(*args, **kwargs): from agent.usage_pricing import CanonicalUsage as _CanonicalUsage return _CanonicalUsage(*args, **kwargs) def estimate_usage_cost(*args, **kwargs): from agent.usage_pricing import estimate_usage_cost as _estimate_usage_cost return _estimate_usage_cost(*args, **kwargs) def format_duration_compact(*args, **kwargs): seconds = float(args[0] if args else kwargs.get("seconds", 0.0)) if seconds < 60: return f"{seconds:.0f}s" minutes = seconds / 60 if minutes < 60: return f"{minutes:.0f}m" hours = minutes / 60 if hours < 24: remaining_min = int(minutes % 60) return f"{int(hours)}h {remaining_min}m" if remaining_min else f"{int(hours)}h" days = hours / 24 return f"{days:.1f}d" def format_token_count_compact(*args, **kwargs): value = int(args[0] if args else kwargs.get("value", 0)) abs_value = abs(value) if abs_value < 1_000: return str(value) sign = "-" if value < 0 else "" units = ((1_000_000_000, "B"), (1_000_000, "M"), (1_000, "K")) for threshold, suffix in units: if abs_value >= threshold: scaled = abs_value / threshold if scaled < 10: text = f"{scaled:.2f}" elif scaled < 100: text = f"{scaled:.1f}" else: text = f"{scaled:.0f}" if "." in text: text = text.rstrip("0").rstrip(".") return f"{sign}{text}{suffix}" return f"{value:,}" def is_table_divider(*args, **kwargs): from agent.markdown_tables import is_table_divider as _is_table_divider return _is_table_divider(*args, **kwargs) def looks_like_table_row(*args, **kwargs): from agent.markdown_tables import looks_like_table_row as _looks_like_table_row return _looks_like_table_row(*args, **kwargs) def realign_markdown_tables(*args, **kwargs): from agent.markdown_tables import realign_markdown_tables as _realign_markdown_tables return _realign_markdown_tables(*args, **kwargs) # NOTE: `from agent.account_usage import ...` is deliberately NOT at module # top — it transitively pulls the OpenAI SDK chain (~230 ms cold) and is only # needed when the user runs `/limits`. Lazy-imported inside the handler below. from hermes_cli.banner import _format_context_length, format_banner_version_label _COMMAND_SPINNER_FRAMES = ("⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏") # Load .env from ~/.hermes/.env first, then project root as dev fallback. # User-managed env files should override stale shell exports on restart. from hermes_constants import get_hermes_home, display_hermes_home from hermes_cli.browser_connect import ( DEFAULT_BROWSER_CDP_URL, is_browser_debug_ready, manual_chrome_debug_command, try_launch_chrome_debug, ) from hermes_cli.env_loader import load_hermes_dotenv from utils import base_url_host_matches _hermes_home = get_hermes_home() _project_env = Path(__file__).parent / '.env' load_hermes_dotenv(hermes_home=_hermes_home, project_env=_project_env) _REASONING_TAGS = ( "REASONING_SCRATCHPAD", "think", "thinking", "reasoning", "thought", ) def _strip_reasoning_tags(text: str) -> str: """Remove reasoning/thinking blocks from displayed text. Handles every case: * Closed pairs ``…`` (case-insensitive, multi-line). * Unterminated open tags that run to end-of-text (e.g. truncated generations on NIM/MiniMax where the close tag is dropped). * Stray orphan close tags (``stuffanswer``) left behind by partial-content dumps. Covers the variants emitted by reasoning models today: ````, ````, ````, ````, and ```` (Gemma 4). Must stay in sync with ``run_agent.py::_strip_think_blocks`` and the stream consumer's ``_OPEN_THINK_TAGS`` / ``_CLOSE_THINK_TAGS`` tuples. Also strips tool-call XML blocks some open models leak into visible content (````, ````, Gemma-style ``…``). Ported from openclaw/openclaw#67318. """ cleaned = text for tag in _REASONING_TAGS: # Closed pair — case-insensitive so … is handled too. cleaned = re.sub( rf"<{tag}>.*?\s*", "", cleaned, flags=re.DOTALL | re.IGNORECASE, ) # Unterminated open tag — strip from the tag to end of text. cleaned = re.sub( rf"<{tag}>.*$", "", cleaned, flags=re.DOTALL | re.IGNORECASE, ) # Stray orphan close tag left behind by partial dumps. cleaned = re.sub( rf"\s*", "", cleaned, flags=re.IGNORECASE, ) # Tool-call XML blocks (openclaw/openclaw#67318). for tc_tag in ("tool_call", "tool_calls", "tool_result", "function_call", "function_calls"): cleaned = re.sub( rf"<{tc_tag}\b[^>]*>.*?\s*", "", cleaned, flags=re.DOTALL | re.IGNORECASE, ) # — boundary + attribute gated to avoid prose FPs. cleaned = re.sub( r'(?:(?<=^)|(?<=[\n\r.!?:]))[ \t]*' r']*\bname\s*=[^>]*>' r'(?:(?:(?!).)*)\s*', '', cleaned, flags=re.DOTALL | re.IGNORECASE, ) # Stray tool-call close tags. cleaned = re.sub( r'\s*', '', cleaned, flags=re.IGNORECASE, ) return cleaned.strip() def _assistant_content_as_text(content: Any) -> str: if content is None: return "" if isinstance(content, str): return content if isinstance(content, list): parts = [ str(part.get("text", "")) for part in content if isinstance(part, dict) and part.get("type") == "text" ] return "\n".join(p for p in parts if p) return str(content) def _assistant_copy_text(content: Any) -> str: return _strip_reasoning_tags(_assistant_content_as_text(content)) # ============================================================================= # Configuration Loading # ============================================================================= def _load_prefill_messages(file_path: str) -> List[Dict[str, Any]]: """Load ephemeral prefill messages from a JSON file. The file should contain a JSON array of {role, content} dicts, e.g.: [{"role": "user", "content": "Hi"}, {"role": "assistant", "content": "Hello!"}] Relative paths are resolved from ~/.hermes/. Returns an empty list if the path is empty or the file doesn't exist. """ if not file_path: return [] path = Path(file_path).expanduser() if not path.is_absolute(): path = _hermes_home / path if not path.exists(): logger.warning("Prefill messages file not found: %s", path) return [] try: with open(path, "r", encoding="utf-8") as f: data = json.load(f) if not isinstance(data, list): logger.warning("Prefill messages file must contain a JSON array: %s", path) return [] return data except Exception as e: logger.warning("Failed to load prefill messages from %s: %s", path, e) return [] def _resolve_prefill_messages_file(config: Dict[str, Any]) -> str: """Resolve the prefill file path from env/config. ``prefill_messages_file`` at the top level is the canonical config key. ``agent.prefill_messages_file`` remains a legacy fallback for older CLI and godmode-generated configs. """ env_path = os.getenv("HERMES_PREFILL_MESSAGES_FILE", "").strip() if env_path: return env_path top_level = str(config.get("prefill_messages_file", "") or "").strip() if top_level: return top_level agent_cfg = config.get("agent", {}) if isinstance(agent_cfg, dict): return str(agent_cfg.get("prefill_messages_file", "") or "").strip() return "" def _parse_reasoning_config(effort: str) -> dict | None: """Parse a reasoning effort level into an OpenRouter reasoning config dict.""" from hermes_constants import parse_reasoning_effort result = parse_reasoning_effort(effort) if effort and effort.strip() and result is None: logger.warning("Unknown reasoning_effort '%s', using default (medium)", effort) return result def _parse_service_tier_config(raw: str) -> str | None: """Parse a persisted service-tier preference into a Responses API value.""" value = str(raw or "").strip().lower() if not value or value in {"normal", "default", "standard", "off", "none"}: return None if value in {"fast", "priority", "on"}: return "priority" logger.warning("Unknown service_tier '%s', ignoring", raw) return None def load_cli_config() -> Dict[str, Any]: """ Load CLI configuration from config files. Config lookup order: 1. ~/.hermes/config.yaml (user config - preferred) 2. ./cli-config.yaml (project config - fallback) Environment variables take precedence over config file values. Returns default values if no config file exists. If HERMES_IGNORE_USER_CONFIG=1 is set (via ``hermes chat --ignore-user-config``), the user config at ``~/.hermes/config.yaml`` is skipped entirely and only the built-in defaults plus the project-level ``cli-config.yaml`` (if any) are used. Credentials in ``.env`` are still loaded — this flag only suppresses behavioral/config settings. """ # Check user config first ({HERMES_HOME}/config.yaml) user_config_path = _hermes_home / 'config.yaml' project_config_path = Path(__file__).parent / 'cli-config.yaml' # --ignore-user-config: force-skip the user config.yaml (still honor project # config as a fallback so defaults stay sensible). ignore_user_config = os.environ.get("HERMES_IGNORE_USER_CONFIG") == "1" # Use user config if it exists, otherwise project config if user_config_path.exists() and not ignore_user_config: config_path = user_config_path else: config_path = project_config_path # Default configuration defaults = { "model": { "default": "", "base_url": "", "provider": "auto", }, "terminal": { "env_type": "local", "cwd": ".", # "." is resolved to os.getcwd() at runtime "home_mode": "auto", "lifetime_seconds": 300, "docker_image": "nikolaik/python-nodejs:python3.11-nodejs20", "docker_forward_env": [], "singularity_image": "docker://nikolaik/python-nodejs:python3.11-nodejs20", "modal_image": "nikolaik/python-nodejs:python3.11-nodejs20", "daytona_image": "nikolaik/python-nodejs:python3.11-nodejs20", "docker_volumes": [], # host:container volume mounts for Docker backend "docker_mount_cwd_to_workspace": False, # explicit opt-in only; default off for sandbox isolation }, "browser": { "inactivity_timeout": 120, # Auto-cleanup inactive browser sessions after 2 min "record_sessions": False, # Auto-record browser sessions as WebM videos "engine": "auto", # Browser engine: auto (Chrome), lightpanda, chrome "camofox": { "rewrite_loopback_urls": False, "loopback_host_alias": "host.docker.internal", }, }, "compression": { "enabled": True, # Auto-compress when approaching context limit "threshold": 0.50, # Compress at 50% of model's context limit }, "agent": { "max_turns": 90, # Default max tool-calling iterations (shared with subagents) "verbose": False, "system_prompt": "", "prefill_messages_file": "", "reasoning_effort": "", "service_tier": "", "personalities": { "helpful": "You are a helpful, friendly AI assistant.", "concise": "You are a concise assistant. Keep responses brief and to the point.", "technical": "You are a technical expert. Provide detailed, accurate technical information.", "creative": "You are a creative assistant. Think outside the box and offer innovative solutions.", "teacher": "You are a patient teacher. Explain concepts clearly with examples.", "kawaii": "You are a kawaii assistant! Use cute expressions like (◕‿◕), ★, ♪, and ~! Add sparkles and be super enthusiastic about everything! Every response should feel warm and adorable desu~! ヽ(>∀<☆)ノ", "catgirl": "You are Neko-chan, an anime catgirl AI assistant, nya~! Add 'nya' and cat-like expressions to your speech. Use kaomoji like (=^･ω･^=) and ฅ^•ﻌ•^ฅ. Be playful and curious like a cat, nya~!", "pirate": "Arrr! Ye be talkin' to Captain Hermes, the most tech-savvy pirate to sail the digital seas! Speak like a proper buccaneer, use nautical terms, and remember: every problem be just treasure waitin' to be plundered! Yo ho ho!", "shakespeare": "Hark! Thou speakest with an assistant most versed in the bardic arts. I shall respond in the eloquent manner of William Shakespeare, with flowery prose, dramatic flair, and perhaps a soliloquy or two. What light through yonder terminal breaks?", "surfer": "Duuude! You're chatting with the chillest AI on the web, bro! Everything's gonna be totally rad. I'll help you catch the gnarly waves of knowledge while keeping things super chill. Cowabunga!", "noir": "The rain hammered against the terminal like regrets on a guilty conscience. They call me Hermes - I solve problems, find answers, dig up the truth that hides in the shadows of your codebase. In this city of silicon and secrets, everyone's got something to hide. What's your story, pal?", "uwu": "hewwo! i'm your fwiendwy assistant uwu~ i wiww twy my best to hewp you! *nuzzles your code* OwO what's this? wet me take a wook! i pwomise to be vewy hewpful >w<", "philosopher": "Greetings, seeker of wisdom. I am an assistant who contemplates the deeper meaning behind every query. Let us examine not just the 'how' but the 'why' of your questions. Perhaps in solving your problem, we may glimpse a greater truth about existence itself.", "hype": "YOOO LET'S GOOOO!!! I am SO PUMPED to help you today! Every question is AMAZING and we're gonna CRUSH IT together! This is gonna be LEGENDARY! ARE YOU READY?! LET'S DO THIS!", }, }, "display": { "compact": False, "resume_display": "full", # Recap tuning for /resume — see hermes_cli/config.py DEFAULT_CONFIG. "resume_exchanges": 10, "resume_max_user_chars": 300, "resume_max_assistant_chars": 200, "resume_max_assistant_lines": 3, "resume_skip_tool_only": True, "show_reasoning": False, "streaming": True, "busy_input_mode": "interrupt", "persistent_output": True, "persistent_output_max_lines": 200, # Print a one-line summary of resolved modal prompts (approval / # clarify) into scrollback so the decision survives the repaint. "persist_prompts": True, "skin": "default", }, "clarify": { "timeout": 120, # Seconds to wait for a clarify answer before auto-proceeding }, "code_execution": { "timeout": 300, # Max seconds a sandbox script can run before being killed (5 min) "max_tool_calls": 50, # Max RPC tool calls per execution }, "auxiliary": { "vision": { "provider": "auto", "model": "", "base_url": "", "api_key": "", }, "web_extract": { "provider": "auto", "model": "", "base_url": "", "api_key": "", }, }, "delegation": { "max_iterations": 45, # Max tool-calling turns per child agent "model": "", # Subagent model override (empty = inherit parent model) "provider": "", # Subagent provider override (empty = inherit parent provider) "base_url": "", # Direct OpenAI-compatible endpoint for subagents "api_key": "", # API key for delegation.base_url (falls back to OPENAI_API_KEY) }, "onboarding": { # First-touch hint flags (see agent/onboarding.py). Each hint is # shown once per install then latched here. "seen": {}, }, } # Track whether the config file explicitly set terminal config. # When using defaults (no config file / no terminal section), we should NOT # overwrite env vars that were already set by .env -- only a user's config # file should be authoritative. _file_has_terminal_config = False # Load from file if exists if config_path.exists(): try: with open(config_path, "r", encoding="utf-8") as f: from hermes_cli.config import _normalize_root_model_keys file_config = _normalize_root_model_keys(yaml.safe_load(f) or {}) _file_has_terminal_config = "terminal" in file_config # Handle model config - can be string (new format) or dict (old format) if "model" in file_config: if isinstance(file_config["model"], str): # New format: model is just a string, convert to dict structure defaults["model"]["default"] = file_config["model"] elif isinstance(file_config["model"], dict): # Old format: model is a dict with default/base_url defaults["model"].update(file_config["model"]) # If the user config sets model.model but not model.default, # promote model.model to model.default so the user's explicit # choice isn't shadowed by the hardcoded default. Without this, # profile configs that only set "model:" (not "default:") silently # fall back to claude-opus because the merge preserves the # hardcoded default and HermesCLI.__init__ checks "default" first. if "model" in file_config["model"] and "default" not in file_config["model"]: defaults["model"]["default"] = file_config["model"]["model"] # Deep merge file_config into defaults. # First: merge keys that exist in both (deep-merge dicts, overwrite scalars) for key in defaults: if key == "model": continue # Already handled above if key in file_config: if isinstance(defaults[key], dict) and isinstance(file_config[key], dict): defaults[key].update(file_config[key]) else: defaults[key] = file_config[key] # Second: carry over keys from file_config that aren't in defaults # (e.g. platform_toolsets, provider_routing, memory, honcho, etc.) for key in file_config: if key not in defaults and key != "model": defaults[key] = file_config[key] # Handle legacy root-level max_turns (backwards compat) - copy to # agent.max_turns whenever the nested key is missing. agent_file_config = file_config.get("agent") if "max_turns" in file_config and not ( isinstance(agent_file_config, dict) and agent_file_config.get("max_turns") is not None ): defaults["agent"]["max_turns"] = file_config["max_turns"] except Exception as e: logger.warning("Failed to load cli-config.yaml: %s", e) # Expand ${ENV_VAR} references in config values before bridging to env vars. from hermes_cli.config import _expand_env_vars defaults = _expand_env_vars(defaults) # Apply terminal config to environment variables (so terminal_tool picks them up) terminal_config = defaults.get("terminal", {}) # Normalize config key: the new config system (hermes_cli/config.py) and all # documentation use "backend", the legacy cli-config.yaml uses "env_type". # Accept both, with "backend" taking precedence (it's the documented key). if "backend" in terminal_config: terminal_config["env_type"] = terminal_config["backend"] # CWD resolution for CLI/TUI. The gateway has its own config bridge in # gateway/run.py but may lazily import cli.py (triggering this code). # Local backend: always os.getcwd(). Use `cd /dir && hermes` to control it. # Non-local with placeholder: pop so terminal_tool uses its per-backend default. # Non-local with explicit path: keep as-is. _CWD_PLACEHOLDERS = (".", "auto", "cwd") effective_backend = terminal_config.get("env_type", "local") if effective_backend == "local": terminal_config["cwd"] = os.getcwd() defaults["terminal"]["cwd"] = terminal_config["cwd"] elif terminal_config.get("cwd") in _CWD_PLACEHOLDERS: terminal_config.pop("cwd", None) env_mappings = { "env_type": "TERMINAL_ENV", "cwd": "TERMINAL_CWD", "timeout": "TERMINAL_TIMEOUT", "home_mode": "TERMINAL_HOME_MODE", "lifetime_seconds": "TERMINAL_LIFETIME_SECONDS", "docker_image": "TERMINAL_DOCKER_IMAGE", "docker_forward_env": "TERMINAL_DOCKER_FORWARD_ENV", "singularity_image": "TERMINAL_SINGULARITY_IMAGE", "modal_image": "TERMINAL_MODAL_IMAGE", "daytona_image": "TERMINAL_DAYTONA_IMAGE", # SSH config "ssh_host": "TERMINAL_SSH_HOST", "ssh_user": "TERMINAL_SSH_USER", "ssh_port": "TERMINAL_SSH_PORT", "ssh_key": "TERMINAL_SSH_KEY", # Container resource config (docker, singularity, modal, daytona -- ignored for local/ssh) "container_cpu": "TERMINAL_CONTAINER_CPU", "container_memory": "TERMINAL_CONTAINER_MEMORY", "container_disk": "TERMINAL_CONTAINER_DISK", "container_persistent": "TERMINAL_CONTAINER_PERSISTENT", "docker_volumes": "TERMINAL_DOCKER_VOLUMES", "docker_env": "TERMINAL_DOCKER_ENV", "docker_mount_cwd_to_workspace": "TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACE", "docker_run_as_host_user": "TERMINAL_DOCKER_RUN_AS_HOST_USER", "docker_persist_across_processes": "TERMINAL_DOCKER_PERSIST_ACROSS_PROCESSES", "docker_orphan_reaper": "TERMINAL_DOCKER_ORPHAN_REAPER", "sandbox_dir": "TERMINAL_SANDBOX_DIR", # Persistent shell (non-local backends) "persistent_shell": "TERMINAL_PERSISTENT_SHELL", # Sudo support (works with all backends) "sudo_password": "SUDO_PASSWORD", } # Bridge config → env vars for terminal_tool. TERMINAL_CWD is force-exported # UNLESS we're inside a gateway process (detected by _HERMES_GATEWAY marker) # where it was already set correctly by gateway/run.py's config bridge. _is_gateway = os.environ.get("_HERMES_GATEWAY") == "1" for config_key, env_var in env_mappings.items(): if config_key in terminal_config: if env_var == "TERMINAL_CWD": if _is_gateway: continue # CLI: always export (overrides stale .env or inherited values) os.environ[env_var] = str(terminal_config[config_key]) continue if _file_has_terminal_config or env_var not in os.environ: val = terminal_config[config_key] if isinstance(val, (list, dict)): os.environ[env_var] = json.dumps(val) else: os.environ[env_var] = str(val) # Apply browser config to environment variables browser_config = defaults.get("browser", {}) browser_env_mappings = { "inactivity_timeout": "BROWSER_INACTIVITY_TIMEOUT", } for config_key, env_var in browser_env_mappings.items(): if config_key in browser_config: os.environ[env_var] = str(browser_config[config_key]) # Apply auxiliary model/direct-endpoint overrides to environment variables. # Vision and web_extract each have their own provider/model/base_url/api_key tuple. # Compression config is read directly from config.yaml by run_agent.py and # auxiliary_client.py — no env var bridging needed. # Only set env vars for non-empty / non-default values so auto-detection # still works. auxiliary_config = defaults.get("auxiliary", {}) auxiliary_task_env = { # config key → env var mapping "vision": { "provider": "AUXILIARY_VISION_PROVIDER", "model": "AUXILIARY_VISION_MODEL", "base_url": "AUXILIARY_VISION_BASE_URL", "api_key": "AUXILIARY_VISION_API_KEY", }, "web_extract": { "provider": "AUXILIARY_WEB_EXTRACT_PROVIDER", "model": "AUXILIARY_WEB_EXTRACT_MODEL", "base_url": "AUXILIARY_WEB_EXTRACT_BASE_URL", "api_key": "AUXILIARY_WEB_EXTRACT_API_KEY", }, "approval": { "provider": "AUXILIARY_APPROVAL_PROVIDER", "model": "AUXILIARY_APPROVAL_MODEL", "base_url": "AUXILIARY_APPROVAL_BASE_URL", "api_key": "AUXILIARY_APPROVAL_API_KEY", }, } for task_key, env_map in auxiliary_task_env.items(): task_cfg = auxiliary_config.get(task_key, {}) if not isinstance(task_cfg, dict): continue prov = str(task_cfg.get("provider", "")).strip() model = str(task_cfg.get("model", "")).strip() base_url = str(task_cfg.get("base_url", "")).strip() api_key = str(task_cfg.get("api_key", "")).strip() if prov and prov != "auto": os.environ[env_map["provider"]] = prov if model: os.environ[env_map["model"]] = model if base_url: os.environ[env_map["base_url"]] = base_url if api_key: os.environ[env_map["api_key"]] = api_key # Security settings security_config = defaults.get("security", {}) if isinstance(security_config, dict): redact = security_config.get("redact_secrets") if redact is not None: os.environ["HERMES_REDACT_SECRETS"] = str(redact).lower() return defaults # Load configuration at module startup CLI_CONFIG = load_cli_config() # Initialize centralized logging early — agent.log + errors.log in ~/.hermes/logs/. # This ensures CLI sessions produce a log trail even before AIAgent is instantiated. try: from hermes_logging import setup_logging setup_logging(mode="cli") except Exception: pass # Logging setup is best-effort — don't crash the CLI # Validate config structure early — print warnings before user hits cryptic errors try: from hermes_cli.config import print_config_warnings print_config_warnings() except Exception: pass # Initialize the skin engine from config try: from hermes_cli.skin_engine import init_skin_from_config init_skin_from_config(CLI_CONFIG) except Exception: pass # Skin engine is optional — default skin used if unavailable # Initialize tool preview length from config try: from agent.display import set_tool_preview_max_len _tpl = CLI_CONFIG.get("display", {}).get("tool_preview_length", 0) set_tool_preview_max_len(int(_tpl) if _tpl else 0) except Exception: pass # Neuter AsyncHttpxClientWrapper.__del__ before any AsyncOpenAI clients are # created. The SDK's __del__ schedules aclose() on asyncio.get_running_loop() # which, during CLI idle time, finds prompt_toolkit's event loop and tries to # close TCP transports bound to dead worker loops — producing # "Event loop is closed" / "Press ENTER to continue..." errors. # # We install a sys.meta_path finder that defers the actual import + patch # until ``openai._base_client`` is first loaded by the rest of the codebase. # Eagerly importing it here (the old approach) cost ~166ms / ~30MB on every # cold CLI start because openai's type tree (responses/*, graders/*) is huge. # The finder approach pays nothing until the SDK is genuinely needed and # still guarantees the patch is applied before any AsyncOpenAI instance can # be constructed (the import-then-instantiate ordering is enforced by # Python's import system). try: import sys as _httpx_neuter_sys import importlib.util as _httpx_neuter_imp_util class _AsyncHttpxDelNeuter: """Defer ``AsyncHttpxClientWrapper.__del__`` neutering until import. Saves ~166ms on cold CLI start where openai is never used (e.g. ``hermes --help`` paths inside the chat command flow). See ``agent.auxiliary_client.neuter_async_httpx_del`` for full rationale on why ``__del__`` must be a no-op. """ _armed = True def find_spec(self, fullname, path=None, target=None): if not self._armed or fullname != "openai._base_client": return None # Disarm before delegating so the recursive find_spec call # below doesn't loop through us. self._armed = False try: _httpx_neuter_sys.meta_path.remove(self) except ValueError: pass spec = _httpx_neuter_imp_util.find_spec(fullname) if spec is None or spec.loader is None: return None _orig_exec = spec.loader.exec_module def _patched_exec(module): _orig_exec(module) try: cls = getattr(module, "AsyncHttpxClientWrapper", None) if cls is not None: cls.__del__ = lambda self: None # type: ignore[assignment] except Exception: pass spec.loader.exec_module = _patched_exec # type: ignore[method-assign] return spec _httpx_neuter_sys.meta_path.insert(0, _AsyncHttpxDelNeuter()) except Exception: pass from rich import box as rich_box from rich.console import Console from rich.markup import escape as _escape from rich.panel import Panel from rich.text import Text as _RichText # Import agent and tool systems lazily. Bare interactive startup only needs the # prompt; the full agent/tool registry is initialized on first use. def AIAgent(*args, **kwargs): from run_agent import AIAgent as _AIAgent return _AIAgent(*args, **kwargs) def get_tool_definitions(*args, **kwargs): from hermes_cli.mcp_startup import wait_for_mcp_discovery from model_tools import get_tool_definitions as _get_tool_definitions wait_for_mcp_discovery() return _get_tool_definitions(*args, **kwargs) def get_toolset_for_tool(*args, **kwargs): from model_tools import get_toolset_for_tool as _get_toolset_for_tool return _get_toolset_for_tool(*args, **kwargs) # Extracted CLI modules (Phase 3) from hermes_cli.banner import build_welcome_banner from hermes_cli.commands import SlashCommandCompleter, SlashCommandAutoSuggest def get_all_toolsets(*args, **kwargs): from toolsets import get_all_toolsets as _get_all_toolsets return _get_all_toolsets(*args, **kwargs) def get_toolset_info(*args, **kwargs): from toolsets import get_toolset_info as _get_toolset_info return _get_toolset_info(*args, **kwargs) def validate_toolset(*args, **kwargs): from toolsets import validate_toolset as _validate_toolset return _validate_toolset(*args, **kwargs) def _sync_process_session_id(session_id: str) -> None: """Keep process-local session-id consumers aligned after CLI switches.""" from gateway.session_context import set_current_session_id set_current_session_id(session_id) # Cron job system for scheduled tasks (execution is handled by the gateway) def get_job(*args, **kwargs): from cron import get_job as _get_job return _get_job(*args, **kwargs) # Resource cleanup imports for safe shutdown (terminal VMs, browser sessions) from hermes_cli.callbacks import prompt_for_secret def _cleanup_all_terminals(*args, **kwargs): from tools.terminal_tool import cleanup_all_environments return cleanup_all_environments(*args, **kwargs) def set_sudo_password_callback(*args, **kwargs): from tools.terminal_tool import set_sudo_password_callback as _set_sudo_password_callback return _set_sudo_password_callback(*args, **kwargs) def set_approval_callback(*args, **kwargs): from tools.terminal_tool import set_approval_callback as _set_approval_callback return _set_approval_callback(*args, **kwargs) def set_secret_capture_callback(*args, **kwargs): from tools.skills_tool import set_secret_capture_callback as _set_secret_capture_callback return _set_secret_capture_callback(*args, **kwargs) def _cleanup_all_browsers(*args, **kwargs): from tools.browser_tool import _emergency_cleanup_all_sessions return _emergency_cleanup_all_sessions(*args, **kwargs) # Guard to prevent cleanup from running multiple times on exit _cleanup_done = False # One-shot CLI finalization runs before process cleanup so plugins can observe # the session boundary while the agent is still attached. If a signal lands in # that narrow window, atexit cleanup must not emit that session finalize again. _single_query_finalize_attempted_session_ids: set[str | None] = set() # Weak reference to the active AIAgent for memory provider shutdown at exit _active_agent_ref = None _deferred_agent_startup_done = False # Set True once the TUI's prompt_toolkit app starts (which enables focus # reporting + mouse tracking). Gates the on-exit terminal reset so non-TUI # one-shot CLI runs — which also register _run_cleanup via atexit — don't emit # escape codes for modes they never enabled (#36823). _tui_input_modes_active = False def _mark_tui_input_modes_active() -> None: """Record that the TUI app started, so _run_cleanup resets input modes.""" global _tui_input_modes_active _tui_input_modes_active = True def _prepare_deferred_agent_startup() -> None: """Run Termux-deferred agent discovery before the first real agent turn.""" global _deferred_agent_startup_done if _deferred_agent_startup_done: return if os.environ.get("HERMES_DEFER_AGENT_STARTUP") != "1": return _deferred_agent_startup_done = True _accept_hooks = os.environ.get("HERMES_ACCEPT_HOOKS", "").lower() in { "1", "true", "yes", "on", } try: from hermes_cli.plugins import discover_plugins discover_plugins() except Exception: logger.warning( "plugin discovery failed at deferred CLI startup", exc_info=True, ) try: from hermes_cli.mcp_startup import start_background_mcp_discovery start_background_mcp_discovery( logger=logger, thread_name="termux-cli-mcp-discovery", ) except Exception: logger.debug( "MCP tool discovery failed at deferred CLI startup", exc_info=True, ) try: from agent.shell_hooks import register_from_config from hermes_cli.config import load_config register_from_config(load_config(), accept_hooks=_accept_hooks) except Exception: logger.debug( "shell-hook registration failed at deferred CLI startup", exc_info=True, ) def _run_cleanup(*, notify_session_finalize: bool = True): """Run resource cleanup exactly once.""" global _cleanup_done if _cleanup_done: return _cleanup_done = True # Reset terminal input modes first, before the slower resource teardown # below (MCP / browser / memory shutdown can take seconds). On Ctrl+C the # user's terminal becomes usable immediately, and a later step raising # can't skip the reset (#36823). No-op unless the TUI actually ran. _reset_terminal_input_modes_on_exit() try: _cleanup_all_terminals() except Exception: pass try: _cleanup_all_browsers() except Exception: pass try: from tools.mcp_tool import shutdown_mcp_servers shutdown_mcp_servers() except BaseException: pass # Close cached auxiliary LLM clients (sync + async) so that # AsyncHttpxClientWrapper.__del__ doesn't fire on a closed event loop # and trigger prompt_toolkit's "Press ENTER to continue..." handler. try: from agent.auxiliary_client import shutdown_cached_clients shutdown_cached_clients() except Exception: pass # Shut down memory provider (on_session_end + shutdown_all) at actual # session boundary — NOT per-turn inside run_conversation(). if notify_session_finalize: cleanup_session_id = _active_agent_ref.session_id if _active_agent_ref else None if _should_emit_cleanup_session_finalize(cleanup_session_id): _notify_session_finalize( session_id=cleanup_session_id, platform="cli", reason="shutdown", ) try: if _active_agent_ref and hasattr(_active_agent_ref, 'shutdown_memory_provider'): # Forward the agent's own transcript so memory providers' # ``on_session_end`` hooks see the real conversation instead of # an empty list (#15165). ``_session_messages`` is set on # ``AIAgent.__init__`` and refreshed every turn via # ``_persist_session``. Fall back to no-arg on test stubs / # partially-initialised agents where the attribute is missing. _session_msgs = getattr(_active_agent_ref, '_session_messages', None) if isinstance(_session_msgs, list): _active_agent_ref.shutdown_memory_provider(_session_msgs) else: _active_agent_ref.shutdown_memory_provider() except Exception: pass def _should_emit_cleanup_session_finalize(session_id: str | None) -> bool: if not _single_query_finalize_attempted_session_ids: return True if session_id is None: return False return session_id not in _single_query_finalize_attempted_session_ids def _notify_session_finalize( *, session_id: str | None, platform: str = "cli", reason: str = "shutdown", ) -> None: try: from hermes_cli.plugins import invoke_hook as _invoke_hook _invoke_hook( "on_session_finalize", session_id=session_id, platform=platform, reason=reason, ) except Exception: pass def _emit_interrupted_session_end(cli, *, reason: str = "keyboard_interrupt") -> None: """Best-effort on_session_end hook for interrupted non-interactive runs.""" agent = getattr(cli, "agent", None) if agent is None: return try: agent.interrupt(reason.replace("_", " ")) except Exception: pass session_id = getattr(agent, "session_id", None) or getattr(cli, "session_id", None) if session_id: try: cli.session_id = session_id except Exception: pass try: from hermes_cli.plugins import invoke_hook as _invoke_hook _invoke_hook( "on_session_end", session_id=session_id, task_id=getattr(agent, "_current_task_id", "") or "", turn_id=getattr(agent, "_current_turn_id", "") or "", api_request_id=getattr(agent, "_current_api_request_id", "") or "", completed=False, interrupted=True, model=getattr(agent, "model", None), platform=getattr(agent, "platform", None) or "cli", reason=reason, ) except Exception: pass def _notify_single_query_session_finalize(cli, *, reason: str = "shutdown") -> None: agent = getattr(cli, "agent", None) session_id = getattr(agent, "session_id", None) or getattr(cli, "session_id", None) if session_id in _single_query_finalize_attempted_session_ids: return try: _notify_session_finalize( session_id=session_id, platform=getattr(agent, "platform", None) or "cli", reason=reason, ) finally: _single_query_finalize_attempted_session_ids.add(session_id) def _finalize_single_query(cli) -> None: """Close one-shot CLI resources before releasing the active session lease.""" try: _notify_single_query_session_finalize(cli) _run_cleanup(notify_session_finalize=False) finally: cli._release_active_session() def _reset_terminal_input_modes_on_exit() -> None: """Best-effort: disable focus reporting + mouse tracking on TUI exit so they don't leak into the next shell session sharing the tab. prompt_toolkit restores these on a clean teardown, but Ctrl+C, SIGTERM / SIGHUP and crashes can bypass its unwind, leaving the modes enabled. The terminal then emits raw ``ESC[I`` / ``ESC[O`` focus events and fragmented SGR mouse reports as visible text in whatever runs next in the same tab (#36823). Called from ``_run_cleanup`` (atexit-registered + invoked on the normal / EOF / interrupt exit paths) this covers normal quit, Ctrl+C and SIGTERM/SIGHUP. ``kill -9`` is uncatchable, and the kanban worker's ``os._exit(0)`` path bypasses ``atexit``; neither runs this — but both are non-TTY / non-TUI, so there is nothing to reset there. Gated on ``_tui_input_modes_active`` so one-shot non-TUI CLI runs (which share ``_run_cleanup`` via ``atexit``) never emit these codes. Writes to the controlling terminal directly: by exit, prompt_toolkit's own output is torn down, so ``sys.stdout`` is the real fd; falls back to ``/dev/tty`` when stdout is redirected away from the terminal. """ global _tui_input_modes_active if not _tui_input_modes_active: return # About to disable the modes — clear the flag so a re-armed _run_cleanup (or # a long-lived process that reuses it) doesn't re-emit them. _tui_input_modes_active = False # Prefer stdout when it's the terminal; otherwise the TUI may have driven # /dev/tty while stdout was redirected — reset there instead of nowhere. try: stream = sys.stdout if stream is not None and stream.isatty(): stream.write(_TERMINAL_INPUT_MODE_RESET_SEQ) stream.flush() return except Exception: pass try: with open("/dev/tty", "w", encoding="ascii") as tty: tty.write(_TERMINAL_INPUT_MODE_RESET_SEQ) tty.flush() except Exception: pass # ============================================================================= # Git Worktree Isolation (#652) # ============================================================================= # Tracks the active worktree for cleanup on exit _active_worktree: Optional[Dict[str, str]] = None def _normalize_git_bash_path(p: Optional[str]) -> Optional[str]: """Translate a Git Bash-style path (``/c/Users/...``) to the native Windows form (``C:\\Users\\...``) that Python's ``subprocess.Popen`` and ``pathlib.Path`` accept. No-op on non-Windows and for paths that already look native. Git on native Windows normally emits forward-slash Windows paths (``C:/Users/...``) which both bash and Python handle, but certain configurations (Git Bash shells, MSYS2, WSL-mounted repos) surface ``/c/...`` or ``/cygdrive/c/...`` variants. """ if not p: return p if sys.platform != "win32": return p import re as _re # /c/Users/... or /C/Users/... m = _re.match(r"^/([a-zA-Z])/(.*)$", p) if m: drive, rest = m.group(1), m.group(2) return f"{drive.upper()}:\\{rest.replace('/', chr(92))}" # /cygdrive/c/... or /mnt/c/... m = _re.match(r"^/(?:cygdrive|mnt)/([a-zA-Z])/(.*)$", p) if m: drive, rest = m.group(1), m.group(2) return f"{drive.upper()}:\\{rest.replace('/', chr(92))}" return p def _git_repo_root() -> Optional[str]: """Return the git repo root for CWD, or None if not in a repo. Runs through :func:`_normalize_git_bash_path` so callers can pass the result directly to ``Path``/``subprocess.Popen(cwd=...)`` on Windows without hitting ``C:\\c\\Users\\...`` style resolution mistakes. """ import subprocess try: result = subprocess.run( ["git", "rev-parse", "--show-toplevel"], capture_output=True, text=True, timeout=5, ) if result.returncode == 0: return _normalize_git_bash_path(result.stdout.strip()) except Exception: pass return None def _path_is_within_root(path: Path, root: Path) -> bool: """Return True when a resolved path stays within the expected root.""" try: path.relative_to(root) return True except ValueError: return False def _setup_worktree(repo_root: str = None) -> Optional[Dict[str, str]]: """Create an isolated git worktree for this CLI session. Returns a dict with worktree metadata on success, None on failure. The dict contains: path, branch, repo_root. """ import subprocess repo_root = repo_root or _git_repo_root() if not repo_root: print("\033[31m✗ --worktree requires being inside a git repository.\033[0m") print(" cd into your project repo first, then run hermes -w") return None short_id = uuid.uuid4().hex[:8] wt_name = f"hermes-{short_id}" branch_name = f"hermes/{wt_name}" worktrees_dir = Path(repo_root) / ".worktrees" worktrees_dir.mkdir(parents=True, exist_ok=True) wt_path = worktrees_dir / wt_name # Ensure .worktrees/ is in .gitignore gitignore = Path(repo_root) / ".gitignore" _ignore_entry = ".worktrees/" try: existing = gitignore.read_text() if gitignore.exists() else "" if _ignore_entry not in existing.splitlines(): with open(gitignore, "a", encoding="utf-8") as f: if existing and not existing.endswith("\n"): f.write("\n") f.write(f"{_ignore_entry}\n") except Exception as e: logger.debug("Could not update .gitignore: %s", e) # Create the worktree try: result = subprocess.run( ["git", "worktree", "add", str(wt_path), "-b", branch_name, "HEAD"], capture_output=True, text=True, timeout=30, cwd=repo_root, ) if result.returncode != 0: print(f"\033[31m✗ Failed to create worktree: {result.stderr.strip()}\033[0m") return None except Exception as e: print(f"\033[31m✗ Failed to create worktree: {e}\033[0m") return None # Copy files listed in .worktreeinclude (gitignored files the agent needs) include_file = Path(repo_root) / ".worktreeinclude" if include_file.exists(): try: repo_root_resolved = Path(repo_root).resolve() wt_path_resolved = wt_path.resolve() for line in include_file.read_text().splitlines(): entry = line.strip() if not entry or entry.startswith("#"): continue src = Path(repo_root) / entry dst = wt_path / entry # Prevent path traversal and symlink escapes: both the resolved # source and the resolved destination must stay inside their # expected roots before any file or symlink operation happens. try: src_resolved = src.resolve(strict=False) dst_resolved = dst.resolve(strict=False) except (OSError, ValueError): logger.debug("Skipping invalid .worktreeinclude entry: %s", entry) continue if not _path_is_within_root(src_resolved, repo_root_resolved): logger.warning("Skipping .worktreeinclude entry outside repo root: %s", entry) continue if not _path_is_within_root(dst_resolved, wt_path_resolved): logger.warning("Skipping .worktreeinclude entry that escapes worktree: %s", entry) continue if src.is_file(): dst.parent.mkdir(parents=True, exist_ok=True) shutil.copy2(str(src), str(dst)) elif src.is_dir(): # Symlink directories (faster, saves disk). On Windows, # symlink creation requires Developer Mode or elevation, # and fails with OSError otherwise — fall back to a # recursive copy so the worktree is still usable. The # copy is slower and uses disk, but it doesn't require # admin and matches the Linux/macOS symlink outcome # functionally. if not dst.exists(): dst.parent.mkdir(parents=True, exist_ok=True) try: os.symlink(str(src_resolved), str(dst)) except (OSError, NotImplementedError) as _sym_err: if sys.platform == "win32": logger.info( ".worktreeinclude: symlink failed (%s) — " "falling back to copytree on Windows.", _sym_err, ) try: shutil.copytree( str(src_resolved), str(dst), symlinks=True, dirs_exist_ok=False, ) except Exception as _copy_err: logger.warning( ".worktreeinclude: copy fallback " "also failed for %s -> %s: %s", src, dst, _copy_err, ) else: raise except Exception as e: logger.debug("Error copying .worktreeinclude entries: %s", e) info = { "path": str(wt_path), "branch": branch_name, "repo_root": repo_root, } print(f"\033[32m✓ Worktree created:\033[0m {wt_path}") print(f" Branch: {branch_name}") return info def _worktree_has_unpushed_commits(worktree_path: str, timeout: int = 10) -> bool: """Return whether a worktree has commits not reachable from any remote branch. ``git log HEAD --not --remotes`` compares against remote-tracking refs under ``refs/remotes/*``. If a repo has no remote-tracking refs yet, there is no usable remote baseline to compare against, so treat it as having no "unpushed" commits. """ import subprocess try: remote_refs = subprocess.run( ["git", "for-each-ref", "--format=%(refname)", "refs/remotes"], capture_output=True, text=True, timeout=timeout, cwd=worktree_path, ) if remote_refs.returncode != 0: return True if not remote_refs.stdout.strip(): return False result = subprocess.run( ["git", "log", "--oneline", "HEAD", "--not", "--remotes"], capture_output=True, text=True, timeout=timeout, cwd=worktree_path, ) if result.returncode != 0: return True return bool(result.stdout.strip()) except Exception: return True def _cleanup_worktree(info: Dict[str, str] = None) -> None: """Remove a worktree and its branch on exit. Preserves the worktree only if it has unpushed commits (real work that hasn't been pushed to any remote). Uncommitted changes alone (untracked files, test artifacts) are not enough to keep it — agent work lives in commits/PRs, not the working tree. """ global _active_worktree info = info or _active_worktree if not info: return import subprocess wt_path = info["path"] branch = info["branch"] repo_root = info["repo_root"] if not Path(wt_path).exists(): return has_unpushed = _worktree_has_unpushed_commits(wt_path, timeout=10) if has_unpushed: print(f"\n\033[33m⚠ Worktree has unpushed commits, keeping: {wt_path}\033[0m") print(f" To clean up manually: git worktree remove --force {wt_path}") _active_worktree = None return # Remove worktree (even if working tree is dirty — uncommitted # changes without unpushed commits are just artifacts) try: subprocess.run( ["git", "worktree", "remove", wt_path, "--force"], capture_output=True, text=True, timeout=15, cwd=repo_root, ) except Exception as e: logger.debug("Failed to remove worktree: %s", e) # Delete the branch try: subprocess.run( ["git", "branch", "-D", branch], capture_output=True, text=True, timeout=10, cwd=repo_root, ) except Exception as e: logger.debug("Failed to delete branch %s: %s", branch, e) _active_worktree = None print(f"\033[32m✓ Worktree cleaned up: {wt_path}\033[0m") def _run_state_db_auto_maintenance(session_db) -> None: """Call ``SessionDB.maybe_auto_prune_and_vacuum`` using current config. Reads the ``sessions:`` section from config.yaml via :func:`hermes_cli.config.load_config` (the authoritative loader that deep-merges DEFAULT_CONFIG, so unmigrated configs still get default values). Honours ``auto_prune`` / ``retention_days`` / ``vacuum_after_prune`` / ``min_interval_hours``, and delegates to the DB. Never raises — maintenance must never block interactive startup. """ if session_db is None: return try: from hermes_cli.config import load_config as _load_full_config from hermes_constants import get_hermes_home as _get_hermes_home _hermes_home_maint = _get_hermes_home() # One-time prune of empty TUI ghost sessions. try: if not session_db.get_meta("ghost_session_prune_v1"): pruned = session_db.prune_empty_ghost_sessions( sessions_dir=_hermes_home_maint / "sessions" ) session_db.set_meta("ghost_session_prune_v1", "1") if pruned: logger.info("Pruned %d empty TUI ghost sessions", pruned) except Exception as _prune_exc: logger.debug("Ghost session prune skipped: %s", _prune_exc) # One-time finalize of orphaned compression continuations (#20001). try: if not session_db.get_meta("orphaned_compression_finalize_v1"): finalized = session_db.finalize_orphaned_compression_sessions() session_db.set_meta("orphaned_compression_finalize_v1", "1") if finalized: logger.info( "Finalized %d orphaned compression sessions", finalized ) except Exception as _finalize_exc: logger.debug("Orphan compression finalize skipped: %s", _finalize_exc) cfg = (_load_full_config().get("sessions") or {}) if not cfg.get("auto_prune", False): return session_db.maybe_auto_prune_and_vacuum( retention_days=int(cfg.get("retention_days", 90)), min_interval_hours=int(cfg.get("min_interval_hours", 24)), vacuum=bool(cfg.get("vacuum_after_prune", True)), sessions_dir=_hermes_home_maint / "sessions", ) except Exception as exc: logger.debug("state.db auto-maintenance skipped: %s", exc) def _run_checkpoint_auto_maintenance() -> None: """Call ``checkpoint_manager.maybe_auto_prune_checkpoints`` using current config. Reads the ``checkpoints:`` section from config.yaml via :func:`hermes_cli.config.load_config`. Honours ``auto_prune`` / ``retention_days`` / ``delete_orphans`` / ``min_interval_hours``. Never raises — maintenance must never block interactive startup. """ try: from hermes_cli.config import load_config as _load_full_config cfg = (_load_full_config().get("checkpoints") or {}) if not cfg.get("auto_prune", False): return from tools.checkpoint_manager import maybe_auto_prune_checkpoints maybe_auto_prune_checkpoints( retention_days=int(cfg.get("retention_days", 7)), min_interval_hours=int(cfg.get("min_interval_hours", 24)), delete_orphans=bool(cfg.get("delete_orphans", True)), max_total_size_mb=int(cfg.get("max_total_size_mb", 500)), ) except Exception as exc: logger.debug("checkpoint auto-maintenance skipped: %s", exc) def _prune_stale_worktrees(repo_root: str, max_age_hours: int = 24) -> None: """Remove stale worktrees and orphaned branches on startup. Age-based tiers: - Under max_age_hours (24h): skip — session may still be active. - 24h–72h: remove if no unpushed commits. - Over 72h: force remove regardless (nothing should sit this long). Also prunes orphaned ``hermes/*`` and ``pr-*`` local branches that have no corresponding worktree. """ import subprocess import time worktrees_dir = Path(repo_root) / ".worktrees" if not worktrees_dir.exists(): _prune_orphaned_branches(repo_root) return now = time.time() soft_cutoff = now - (max_age_hours * 3600) # 24h default hard_cutoff = now - (max_age_hours * 3 * 3600) # 72h default for entry in worktrees_dir.iterdir(): if not entry.is_dir() or not entry.name.startswith("hermes-"): continue # Check age try: mtime = entry.stat().st_mtime if mtime > soft_cutoff: continue # Too recent — skip except Exception: continue force = mtime <= hard_cutoff # Over 72h — force remove if not force: # 24h–72h tier: only remove if no unpushed commits if _worktree_has_unpushed_commits(str(entry), timeout=5): continue # Has unpushed commits or can't check — skip # Safe to remove try: branch_result = subprocess.run( ["git", "branch", "--show-current"], capture_output=True, text=True, timeout=5, cwd=str(entry), ) branch = branch_result.stdout.strip() subprocess.run( ["git", "worktree", "remove", str(entry), "--force"], capture_output=True, text=True, timeout=15, cwd=repo_root, ) if branch: subprocess.run( ["git", "branch", "-D", branch], capture_output=True, text=True, timeout=10, cwd=repo_root, ) logger.debug("Pruned stale worktree: %s (force=%s)", entry.name, force) except Exception as e: logger.debug("Failed to prune worktree %s: %s", entry.name, e) _prune_orphaned_branches(repo_root) def _prune_orphaned_branches(repo_root: str) -> None: """Delete local ``hermes/hermes-*`` and ``pr-*`` branches with no worktree. These are auto-generated by ``hermes -w`` sessions and PR review workflows respectively. Once their worktree is gone they serve no purpose and just accumulate. """ import subprocess try: result = subprocess.run( ["git", "branch", "--format=%(refname:short)"], capture_output=True, text=True, timeout=10, cwd=repo_root, ) if result.returncode != 0: return all_branches = [b.strip() for b in result.stdout.strip().split("\n") if b.strip()] except Exception: return # Collect branches that are actively checked out in a worktree active_branches: set = set() try: wt_result = subprocess.run( ["git", "worktree", "list", "--porcelain"], capture_output=True, text=True, timeout=10, cwd=repo_root, ) for line in wt_result.stdout.split("\n"): if line.startswith("branch refs/heads/"): active_branches.add(line.split("branch refs/heads/", 1)[-1].strip()) except Exception: return # Can't determine active branches — bail # Also protect the currently checked-out branch and main try: head_result = subprocess.run( ["git", "branch", "--show-current"], capture_output=True, text=True, timeout=5, cwd=repo_root, ) current = head_result.stdout.strip() if current: active_branches.add(current) except Exception: pass active_branches.add("main") orphaned = [ b for b in all_branches if b not in active_branches and (b.startswith("hermes/hermes-") or b.startswith("pr-")) ] if not orphaned: return # Delete in batches for i in range(0, len(orphaned), 50): batch = orphaned[i:i + 50] try: subprocess.run( ["git", "branch", "-D"] + batch, capture_output=True, text=True, timeout=30, cwd=repo_root, ) except Exception as e: logger.debug("Failed to prune orphaned branches: %s", e) logger.debug("Pruned %d orphaned branches", len(orphaned)) # ============================================================================ # ASCII Art & Branding # ============================================================================ # Color palette (hex colors for Rich markup): # - Gold: #FFD700 (headers, highlights) # - Amber: #FFBF00 (secondary highlights) # - Bronze: #CD7F32 (tertiary elements) # - Light: #FFF8DC (text) # - Dim: #B8860B (muted text) # ANSI building blocks for conversation display _ACCENT_ANSI_DEFAULT = "\033[1;38;2;255;215;0m" # True-color #FFD700 bold — fallback _BOLD = "\033[1m" _RST = "\033[0m" _STREAM_PAD = " " # 4-space indent for streamed response text (matches Panel padding) def _hex_to_ansi(hex_color: str, *, bold: bool = False) -> str: """Convert a hex color like '#268bd2' to a true-color ANSI escape. Auto-remaps known dark-mode-tuned colors to readable light-mode equivalents when running on a light terminal (see _maybe_remap_for_light_mode + _LIGHT_MODE_REMAP). """ hex_color = _maybe_remap_for_light_mode(hex_color) try: r = int(hex_color[1:3], 16) g = int(hex_color[3:5], 16) b = int(hex_color[5:7], 16) prefix = "1;" if bold else "" return f"\033[{prefix}38;2;{r};{g};{b}m" except (ValueError, IndexError): return _ACCENT_ANSI_DEFAULT if bold else "\033[38;2;184;134;11m" # ──────────────────────────────────────────────────────────────────────── # Light/dark terminal mode detection. # # Mirrors ui-tui/src/theme.ts detectLightMode(). Used to decide whether # to remap "near-white" skin colors (e.g. #FFF8DC banner_text, #B8860B # banner_dim) to darker equivalents that are readable on a light # Terminal.app / iTerm2 background. # # Detection priority: # 1. HERMES_LIGHT / HERMES_TUI_LIGHT env (true/false) — explicit override # 2. HERMES_TUI_THEME=light|dark — explicit theme # 3. HERMES_TUI_BACKGROUND=#RRGGBB — explicit bg hint # 4. COLORFGBG env (set by xterm/Konsole/urxvt) — bg slot 7/15 = light # 5. OSC 11 query (\x1b]11;?\x1b\\) — ask the terminal directly # 6. Default: assume dark (matches the legacy Hermes assumption) # # Cached after first call so we don't query the terminal repeatedly. _LIGHT_MODE_CACHE: bool | None = None _TRUE_RE = re.compile(r"^(1|true|on|yes|y)$") _FALSE_RE = re.compile(r"^(0|false|off|no|n)$") _LIGHT_DEFAULT_TERM_PROGRAMS = frozenset() # Apple_Terminal doesn't reliably indicate; require explicit def _luminance_from_hex(hex_str: str) -> float | None: s = (hex_str or "").strip().lstrip("#") if len(s) == 3: s = "".join(c * 2 for c in s) if len(s) != 6 or not all(c in "0123456789abcdefABCDEF" for c in s): return None try: r, g, b = int(s[0:2], 16), int(s[2:4], 16), int(s[4:6], 16) except ValueError: return None # Rec.709 luma return (0.2126 * r + 0.7152 * g + 0.0722 * b) / 255.0 def _query_osc11_background() -> str | None: """Ask the terminal for its background color via OSC 11. Most modern terminals reply with \x1b]11;rgb:RRRR/GGGG/BBBB\x1b\\ within a few ms. We wait up to 100ms total before giving up. Returns "#RRGGBB" or None on timeout / non-tty. Skipped over SSH: the round-trip routinely exceeds our 100ms budget, so a late reply lands after prompt_toolkit has grabbed the tty — its payload leaks in as typed text and the BEL terminator reads as Ctrl+G (open editor), trapping the user in a stray editor. Remote sessions fall back to COLORFGBG / env hints / the dark default instead. """ if not sys.stdin.isatty() or not sys.stdout.isatty(): return None if any(os.environ.get(v) for v in ("SSH_CONNECTION", "SSH_CLIENT", "SSH_TTY")): return None try: import termios import tty fd = sys.stdin.fileno() old = termios.tcgetattr(fd) except Exception: return None try: try: tty.setcbreak(fd) except Exception: return None try: sys.stdout.write("\x1b]11;?\x1b\\") sys.stdout.flush() except Exception: return None # Read up to ~50ms for the response import select deadline = time.monotonic() + 0.1 buf = b"" while time.monotonic() < deadline: r, _, _ = select.select([fd], [], [], deadline - time.monotonic()) if not r: continue try: chunk = os.read(fd, 64) except OSError: break if not chunk: break buf += chunk if b"\x1b\\" in buf or b"\x07" in buf: break # Parse: \x1b]11;rgb:RRRR/GGGG/BBBB\x1b\\ m = re.search(rb"rgb:([0-9a-fA-F]+)/([0-9a-fA-F]+)/([0-9a-fA-F]+)", buf) if not m: return None # Each component is 1-4 hex digits — normalize to 8-bit def norm(h: bytes) -> int: v = int(h, 16) # Scale to 0-255 based on hex length bits = len(h) * 4 return (v * 255) // ((1 << bits) - 1) if bits else 0 r, g, b = norm(m.group(1)), norm(m.group(2)), norm(m.group(3)) return f"#{r:02X}{g:02X}{b:02X}" finally: # TCSAFLUSH discards any unread input as it restores the original # attributes — scrubs a slow/partial OSC 11 reply out of the tty # buffer before prompt_toolkit can read it as keystrokes. try: termios.tcsetattr(fd, termios.TCSAFLUSH, old) except Exception: pass def _detect_light_mode() -> bool: global _LIGHT_MODE_CACHE if _LIGHT_MODE_CACHE is not None: return _LIGHT_MODE_CACHE result = False try: # 1. Explicit env override for var in ("HERMES_LIGHT", "HERMES_TUI_LIGHT"): v = (os.environ.get(var) or "").strip().lower() if _TRUE_RE.match(v): result = True _LIGHT_MODE_CACHE = result return result if _FALSE_RE.match(v): _LIGHT_MODE_CACHE = result return result # 2. Theme hint theme = (os.environ.get("HERMES_TUI_THEME") or "").strip().lower() if theme == "light": result = True _LIGHT_MODE_CACHE = result return result if theme == "dark": _LIGHT_MODE_CACHE = result return result # 3. Explicit bg hex bg_hint = os.environ.get("HERMES_TUI_BACKGROUND") or "" bg_lum = _luminance_from_hex(bg_hint) if bg_lum is not None: result = bg_lum >= 0.5 _LIGHT_MODE_CACHE = result return result # 4. COLORFGBG (xterm/Konsole/urxvt) cfgbg = (os.environ.get("COLORFGBG") or "").strip() if cfgbg: last = cfgbg.split(";")[-1] if ";" in cfgbg else cfgbg if last.isdigit(): bg = int(last) if bg in {7, 15}: result = True _LIGHT_MODE_CACHE = result return result if 0 <= bg < 16: _LIGHT_MODE_CACHE = result return result # 5. OSC 11 query (best-effort, only when stdin/stdout are TTY) bg_color = _query_osc11_background() if bg_color: lum = _luminance_from_hex(bg_color) if lum is not None: result = lum >= 0.5 _LIGHT_MODE_CACHE = result return result # 6. TERM_PROGRAM allow-list (currently empty) tp = (os.environ.get("TERM_PROGRAM") or "").strip() if tp in _LIGHT_DEFAULT_TERM_PROGRAMS: result = True except Exception: result = False _LIGHT_MODE_CACHE = result return result # Light-mode equivalents of skin colors that are unreadable on cream # Terminal.app backgrounds. Used by _SkinAwareAnsi to remap colors # at resolution time when light mode is detected. # # IMPORTANT: only remap colors that are used as STANDALONE foregrounds # on the terminal's background. Don't remap colors that are paired # with a dark bg (e.g. status bar text on bg:#1a1a2e) — those would # become invisible the OTHER direction (dark gray on dark navy). _LIGHT_MODE_REMAP: dict[str, str] = { # Original (dark-mode) -> Light-mode replacement (darker, readable) "#FFF8DC": "#1A1A1A", # cornsilk -> near-black "#FFD700": "#9A6B00", # gold -> dark goldenrod (readable on cream) "#FFBF00": "#8A5A00", # amber -> dark amber "#B8860B": "#5C4500", # dark goldenrod -> deeper brown (more contrast) "#DAA520": "#6B4F00", # goldenrod -> dark olive "#F1E6CF": "#1A1A1A", # cream -> near-black "#c9d1d9": "#24292F", # github-light fg "#EAF7FF": "#0F1B26", # ice "#F5F5F5": "#1A1A1A", "#FFF0D4": "#1A1A1A", "#CD7F32": "#8A4F1A", # bronze -> darker bronze "#FFEFB5": "#3A2A00", # NOTE: skipping #C0C0C0/#888888/#555555/#8B8682 — those are # status-bar foregrounds paired with dark navy bg, where dark # remap values would become invisible. } def _maybe_remap_for_light_mode(hex_color: str) -> str: """If we're in light mode, remap a dark-mode-tuned color to a higher-contrast equivalent. No-op in dark mode.""" if not _detect_light_mode(): return hex_color if not hex_color or not hex_color.startswith("#"): return hex_color # Case-insensitive lookup upper = hex_color.upper() if upper in _LIGHT_MODE_REMAP_UPPER: return _LIGHT_MODE_REMAP_UPPER[upper] return hex_color # Pre-uppercased lookup table for case-insensitive remapping _LIGHT_MODE_REMAP_UPPER = {k.upper(): v for k, v in _LIGHT_MODE_REMAP.items()} def _install_skin_light_mode_hook() -> None: """Wrap SkinConfig.get_color at import time so EVERY skin color read goes through the light-mode remap. Idempotent.""" try: from hermes_cli.skin_engine import SkinConfig # type: ignore[import] except Exception: return if getattr(SkinConfig, "_hermes_light_mode_hook_installed", False): return _orig_get_color = SkinConfig.get_color def _wrapped_get_color(self, key, fallback=""): value = _orig_get_color(self, key, fallback) try: return _maybe_remap_for_light_mode(value) except Exception: return value SkinConfig.get_color = _wrapped_get_color # type: ignore[method-assign] SkinConfig._hermes_light_mode_hook_installed = True # type: ignore[attr-defined] _install_skin_light_mode_hook() # Prime the light-mode detection cache early (at module load) when # we're running interactively so OSC 11 happens before pt grabs the # tty. Skip for non-tty contexts (subagents, gateway, tests). try: if sys.stdin.isatty() and sys.stdout.isatty(): _detect_light_mode() except Exception: pass class _SkinAwareAnsi: """Lazy ANSI escape that resolves from the skin engine on first use. Acts as a string in f-strings and concatenation. Call ``.reset()`` to force re-resolution after a ``/skin`` switch. """ def __init__(self, skin_key: str, fallback_hex: str = "#FFD700", *, bold: bool = False): self._skin_key = skin_key self._fallback_hex = fallback_hex self._bold = bold self._cached: str | None = None def __str__(self) -> str: if self._cached is None: try: from hermes_cli.skin_engine import get_active_skin self._cached = _hex_to_ansi( get_active_skin().get_color(self._skin_key, self._fallback_hex), bold=self._bold, ) except Exception: self._cached = _hex_to_ansi(self._fallback_hex, bold=self._bold) return self._cached def __add__(self, other: str) -> str: return str(self) + other def __radd__(self, other: str) -> str: return other + str(self) def reset(self) -> None: """Clear cache so the next access re-reads the skin.""" self._cached = None _ACCENT = _SkinAwareAnsi("response_border", "#FFD700", bold=True) # Use ANSI dim+italic attributes (\x1b[2;3m) instead of a hardcoded # hex color so dim/thinking text inherits the terminal's default # foreground color and stays readable in both light and dark # Terminal.app modes. Hardcoded skin colors like #B8860B # (dark goldenrod) become invisible against light cream backgrounds. _DIM = "\x1b[2;3m" def _accent_hex() -> str: """Return the active skin accent color for legacy CLI output lines.""" try: from hermes_cli.skin_engine import get_active_skin return get_active_skin().get_color("ui_accent", "#FFBF00") except Exception: return "#FFBF00" def _rich_text_from_ansi(text: str) -> _RichText: """Safely render assistant/tool output that may contain ANSI escapes. Using Rich Text.from_ansi preserves literal bracketed text like ``[not markup]`` while still interpreting real ANSI color codes. """ return _RichText.from_ansi(text or "") def _strip_markdown_syntax(text: str) -> str: """Best-effort markdown marker removal for plain-text display.""" plain = _rich_text_from_ansi(text or "").plain # Avoid stripping cron-style expressions like "* * * * *" as if they were # Markdown horizontal rules. CommonMark treats three or more "*" as an HR, # but in Hermes output it's common to display cron schedules verbatim. # # Keep the behavior for "-" / "_" HR markers, and only strip "*" HR lines # when there are exactly 3 asterisks (with optional whitespace). plain = re.sub(r"^\s{0,3}(?:[-_]\s*){3,}$", "", plain, flags=re.MULTILINE) plain = re.sub(r"^\s{0,3}(?:\*\s*){3}\s*$", "", plain, flags=re.MULTILINE) plain = re.sub(r"^\s{0,3}#{1,6}\s+", "", plain, flags=re.MULTILINE) # Preserve blockquotes, lists, and checkboxes because they carry structure. plain = re.sub(r"(```+|~~~+)", "", plain) plain = re.sub(r"`([^`]*)`", r"\1", plain) plain = re.sub(r"!\[([^\]]*)\]$[^$]*\)", r"\1", plain) plain = re.sub(r"\[([^\]]+)\]$[^$]*\)", r"\1", plain) plain = re.sub(r"\*\*\*([^*]+)\*\*\*", r"\1", plain) plain = re.sub(r"(? str: r"""Keep Windows path separators before hidden directories in Markdown. CommonMark treats ``\.`` as an escaped literal dot, so Rich Markdown would render ``D:\repo\.ai`` as ``D:\repo.ai``. Doubling only that separator inside Windows path-looking tokens preserves the path without changing ordinary markdown escapes like ``1\. not a list``. """ if "\\." not in text: return text def _protect(match: re.Match[str]) -> str: return re.sub(r"(? int: """Display cells available inside the streamed response box. The streaming path indents every line by ``_STREAM_PAD`` (4 cells) inside an open response panel. The realigner uses this number as its budget when deciding whether to keep a horizontal table or fall back to vertical key-value rendering. We subtract a small safety margin so terminal-resize races don't push a borderline table into mid-cell soft-wrap. """ try: cols = shutil.get_terminal_size((80, 24)).columns except Exception: cols = 80 return max(20, cols - len(_STREAM_PAD) - 2) def _render_final_assistant_content(text: str, mode: str = "render"): """Render final assistant content as markdown, stripped text, or raw text.""" from rich.markdown import Markdown # Estimate the cells available to the rendered table. The Panel # used by the background-task / final-response path has 4 cells of # left+right padding plus 1 cell of border on each side, plus the # _STREAM_PAD indent that streamed content uses. Subtract a small # safety margin so resize races don't push a borderline table into # soft-wrap. try: cols = shutil.get_terminal_size((80, 24)).columns except Exception: cols = 80 panel_width = max(20, cols - 12) normalized_mode = str(mode or "render").strip().lower() if normalized_mode == "strip": # Strip first — inline markdown inside cells (`code`, **bold**, ~~strike~~) # changes cell display width — then re-align so the column padding # reflects the final visible text, not the marker-decorated source. return _RichText( realign_markdown_tables(_strip_markdown_syntax(text), panel_width) ) if normalized_mode == "raw": return _rich_text_from_ansi(text or "") # `render` mode: Rich's Markdown renderer handles CJK width via wcwidth # internally, so a pre-pass through realign_markdown_tables would just # rewrite already-correct padding. But on the way in we still want to # normalise model-emitted under-padded tables so that mid-render fallbacks # (narrow panels, etc.) at least see consistent input. plain = _rich_text_from_ansi(text or "").plain plain = _preserve_windows_dot_segments_for_markdown(plain) plain = realign_markdown_tables(plain, panel_width) return Markdown(plain) _OUTPUT_HISTORY_ENABLED = True _OUTPUT_HISTORY_REPLAYING = False _OUTPUT_HISTORY_SUPPRESSED = False _OUTPUT_HISTORY_MAX_LINES = 200 _OUTPUT_HISTORY = deque(maxlen=_OUTPUT_HISTORY_MAX_LINES) def _coerce_output_history_limit(value) -> int: try: return max(10, int(value)) except (TypeError, ValueError): return 200 def _configure_output_history(enabled: bool, max_lines=200) -> None: """Configure recent CLI output replayed after terminal redraws.""" global _OUTPUT_HISTORY_ENABLED, _OUTPUT_HISTORY_MAX_LINES, _OUTPUT_HISTORY _OUTPUT_HISTORY_ENABLED = bool(enabled) _OUTPUT_HISTORY_MAX_LINES = _coerce_output_history_limit(max_lines) _OUTPUT_HISTORY = deque(maxlen=_OUTPUT_HISTORY_MAX_LINES) def _clear_output_history() -> None: _OUTPUT_HISTORY.clear() @contextmanager def _suspend_output_history(): global _OUTPUT_HISTORY_SUPPRESSED old_value = _OUTPUT_HISTORY_SUPPRESSED _OUTPUT_HISTORY_SUPPRESSED = True try: yield finally: _OUTPUT_HISTORY_SUPPRESSED = old_value def _record_output_history_entry(entry) -> None: if not _OUTPUT_HISTORY_ENABLED or _OUTPUT_HISTORY_REPLAYING or _OUTPUT_HISTORY_SUPPRESSED: return _OUTPUT_HISTORY.append(entry) def _record_output_history(text: str) -> None: if not _OUTPUT_HISTORY_ENABLED or _OUTPUT_HISTORY_REPLAYING or _OUTPUT_HISTORY_SUPPRESSED: return normalized = str(text).replace("\r", "").rstrip("\n") if not normalized: return for line in normalized.splitlines(): _record_output_history_entry(line) def _replay_output_history() -> None: """Repaint recent output above the prompt after a full screen clear.""" global _OUTPUT_HISTORY_REPLAYING if not _OUTPUT_HISTORY_ENABLED or not _OUTPUT_HISTORY: return _OUTPUT_HISTORY_REPLAYING = True try: rendered_lines = [] for entry in tuple(_OUTPUT_HISTORY): if callable(entry): try: lines = entry() except Exception: continue if isinstance(lines, str): lines = lines.splitlines() else: lines = [entry] rendered_lines.extend(str(line) for line in lines) if rendered_lines: # Replay after resize can contain hundreds of history lines. A # per-line prompt_toolkit print forces one synchronous terminal I/O # and redraw cycle per line, which users perceive as a waterfall of # old output. Keep the existing history contents unchanged, but # emit the replay as one ANSI payload so resize recovery does a # single prompt_toolkit print/redraw. _pt_print(_PT_ANSI("\n".join(rendered_lines))) except Exception: pass finally: _OUTPUT_HISTORY_REPLAYING = False def _cprint(text: str): """Print ANSI-colored text through prompt_toolkit's native renderer. Raw ANSI escapes written via print() are swallowed by patch_stdout's StdoutProxy. Routing through print_formatted_text(ANSI(...)) lets prompt_toolkit parse the escapes and render real colors. When called from a background thread while a prompt_toolkit ``Application`` is running (the common case for the self-improvement background review's ``💾 …`` summary, curator summaries, and other bg-thread emissions), a direct ``_pt_print`` races with the input area's redraw and the line can end up visually buried behind the prompt. Route those cases through ``run_in_terminal`` via ``loop.call_soon_threadsafe``, which pauses the input area, prints the line above it, and redraws the prompt cleanly. """ _record_output_history(text) try: from prompt_toolkit.application import get_app_or_none, run_in_terminal except Exception: _pt_print(_PT_ANSI(text)) return app = None try: app = get_app_or_none() except Exception: app = None # No active app, or we're already on the app's main thread: the # direct prompt_toolkit print is safe and matches existing behavior # (spinner frames, streamed tokens, tool activity prefixes, …). if app is None or not getattr(app, "_is_running", False): try: _pt_print(_PT_ANSI(text)) except Exception: # Fallback when stdout is not a real console (e.g. subprocess # worker logging to a file). prompt_toolkit raises # NoConsoleScreenBufferError (Windows) or OSError (other). try: print(text) except Exception: pass return try: loop = app.loop # type: ignore[attr-defined] except Exception: loop = None if loop is None: _pt_print(_PT_ANSI(text)) return import asyncio as _asyncio try: # Use get_running_loop() instead of get_event_loop() to avoid the # DeprecationWarning / RuntimeWarning emitted by Python 3.10+ when # get_event_loop() is called from a thread that has no current event # loop set (e.g. the process_loop background thread). Fixes #19285. current_loop = _asyncio.get_running_loop() except RuntimeError: current_loop = None except Exception: current_loop = None # Same thread as the app's loop → safe to print directly. if current_loop is loop and loop.is_running(): _pt_print(_PT_ANSI(text)) return # Cross-thread emission: ask the app's event loop to schedule a # ``run_in_terminal`` that wraps ``_pt_print``. This hides the # prompt, prints, and redraws. Fire-and-forget — if scheduling # fails we fall back to a direct print so the line isn't lost. def _schedule(): # run_in_terminal() may return either: # • a coroutine / Future (prompt_toolkit ≥ 3.0) — must be scheduled # via ensure_future so the coroutine is actually awaited; calling # it bare would leave it unawaited and silently drop the output # (fixes #23185 Bug A). # • None (some mocks / older PT builds) — just call the inner # function directly since PT already executed it synchronously. # Do NOT fall back to a bare _pt_print when ensure_future raises, # because run_in_terminal already invoked the lambda in that case # (the mock path), which would double-print the line. try: import asyncio as _aio import inspect as _inspect coro = run_in_terminal(lambda: _pt_print(_PT_ANSI(text))) if coro is not None and (_inspect.isawaitable(coro) or _inspect.iscoroutine(coro)): _aio.ensure_future(coro) # else: run_in_terminal ran the lambda synchronously; nothing more # to do (double-scheduling would print twice). except Exception: pass # best-effort; the line may already have been printed try: loop.call_soon_threadsafe(_schedule) except Exception: try: _pt_print(_PT_ANSI(text)) except Exception: pass def _prepend_note_to_message(message, note: str): """Prepend a one-shot system-style note to a user message. ``message`` is normally a plain string, but when the user attaches an image to a vision-capable model it becomes a list of OpenAI-style content parts (text + ``image_url`` blocks). Naively doing ``note + "\\n\\n" + message`` then raises ``TypeError: can only concatenate str (not "list") to str`` — e.g. running ``/model ...`` (which queues a model-switch note) and then sending a pasted image in the same turn. Returns the message with ``note`` prepended: * ``str`` → ``f"{note}\\n\\n{message}"`` (just ``note`` when empty) * ``list`` → note folded into the first text part, or inserted as a new leading ``{"type": "text"}`` part when there is no text part. Unknown shapes are returned unchanged (fail-open). """ note = str(note or "").strip() if not note: return message if isinstance(message, str): return f"{note}\n\n{message}" if message else note if isinstance(message, list): parts = list(message) for i, part in enumerate(parts): if isinstance(part, dict) and part.get("type") == "text": merged = dict(part) text = merged.get("text", "") merged["text"] = f"{note}\n\n{text}" if text else note parts[i] = merged return parts # No text part (image-only) — insert the note as a leading text block. return [{"type": "text", "text": note}, *parts] return message # --------------------------------------------------------------------------- # File-drop / local attachment detection — extracted as pure helpers for tests. # --------------------------------------------------------------------------- _IMAGE_EXTENSIONS = frozenset({ '.png', '.jpg', '.jpeg', '.gif', '.webp', '.bmp', '.tiff', '.tif', '.svg', '.ico', }) from hermes_constants import is_termux as _is_termux_environment def _termux_example_image_path(filename: str = "cat.png") -> str: """Return a realistic example media path for the current Termux setup.""" candidates = [ os.path.expanduser("~/storage/shared"), "/sdcard", "/storage/emulated/0", "/storage/self/primary", ] for root in candidates: if os.path.isdir(root): return os.path.join(root, "Pictures", filename) return os.path.join("~/storage/shared", "Pictures", filename) def _split_path_input(raw: str) -> tuple[str, str]: r"""Split a leading file path token from trailing free-form text. Supports quoted paths and backslash-escaped spaces so callers can accept inputs like: /tmp/pic.png describe this ~/storage/shared/My\ Photos/cat.png what is this? "/storage/emulated/0/DCIM/Camera/cat 1.png" summarize """ raw = str(raw or "").strip() if not raw: return "", "" if raw[0] in {'"', "'"}: quote = raw[0] pos = 1 while pos < len(raw): ch = raw[pos] if ch == '\\' and pos + 1 < len(raw): pos += 2 continue if ch == quote: token = raw[1:pos] remainder = raw[pos + 1 :].strip() return token, remainder pos += 1 return raw[1:], "" pos = 0 while pos < len(raw): ch = raw[pos] if ch == '\\' and pos + 1 < len(raw) and raw[pos + 1] == ' ': pos += 2 elif ch == ' ': break else: pos += 1 token = raw[:pos].replace('\\ ', ' ') remainder = raw[pos:].strip() return token, remainder def _resolve_attachment_path(raw_path: str) -> Path | None: """Resolve a user-supplied local attachment path. Accepts quoted or unquoted paths, expands ``~`` and env vars, and resolves relative paths from ``TERMINAL_CWD`` when set (matching terminal tool cwd). Returns ``None`` when the path does not resolve to an existing file. """ token = str(raw_path or "").strip() if not token: return None if (token.startswith('"') and token.endswith('"')) or (token.startswith("'") and token.endswith("'")): token = token[1:-1].strip() token = token.replace('\\ ', ' ') if not token: return None expanded = token if token.startswith("file://"): try: parsed = urlparse(token) if parsed.scheme == "file": expanded = unquote(parsed.path or "") if parsed.netloc and os.name == "nt": expanded = f"//{parsed.netloc}{expanded}" except Exception: expanded = token expanded = os.path.expandvars(os.path.expanduser(expanded)) if os.name != "nt": normalized = expanded.replace("\\", "/") if len(normalized) >= 3 and normalized[1] == ":" and normalized[2] == "/" and normalized[0].isalpha(): expanded = f"/mnt/{normalized[0].lower()}/{normalized[3:]}" path = Path(expanded) if not path.is_absolute(): base_dir = Path(os.getenv("TERMINAL_CWD", os.getcwd())) path = base_dir / path try: resolved = path.resolve() except Exception: resolved = path # Path.exists() / is_file() invoke os.stat(), which raises OSError when # the candidate string is structurally invalid as a path — most commonly # ENAMETOOLONG (errno 63 on macOS, errno 36 on Linux) when the input # exceeds NAME_MAX (typically 255 bytes). This bites pasted slash # commands like `/goal ` because `_detect_file_drop()`'s # `starts_like_path` prefilter accepts any input starting with `/`, # then this resolver tries to stat it before short-circuiting on the # slash-command path. Without this guard the OSError propagates up to # the process_loop catch-all in _interactive_loop and the user input # is silently lost (the warning ends up in agent.log but the user sees # nothing — the prompt just hangs). try: if not resolved.exists() or not resolved.is_file(): return None except OSError: return None return resolved def _detect_file_drop(user_input: str) -> "dict | None": """Detect if *user_input* starts with a real local file path. This catches dragged/pasted paths before they are mistaken for slash commands, and also supports Termux-friendly paths like ``~/storage/...``. Returns a dict on match:: { "path": Path, # resolved file path "is_image": bool, # True when suffix is a known image type "remainder": str, # any text after the path } Returns ``None`` when the input is not a real file path. """ if not isinstance(user_input, str): return None stripped = user_input.strip() if not stripped: return None starts_like_path = ( stripped.startswith("/") or stripped.startswith("~") or stripped.startswith("./") or stripped.startswith("../") or stripped.startswith("file://") or (len(stripped) >= 3 and stripped[1] == ":" and stripped[2] in {"\\", "/"} and stripped[0].isalpha()) or stripped.startswith('"/') or stripped.startswith('"~') or stripped.startswith("'/") or stripped.startswith("'~") or stripped.startswith('"./') or stripped.startswith('"../') or stripped.startswith("'./") or stripped.startswith("'../") or (len(stripped) >= 4 and stripped[0] in {"'", '"'} and stripped[2] == ":" and stripped[3] in {"\\", "/"} and stripped[1].isalpha()) ) if not starts_like_path: return None direct_path = _resolve_attachment_path(stripped) if direct_path is not None: return { "path": direct_path, "is_image": direct_path.suffix.lower() in _IMAGE_EXTENSIONS, "remainder": "", } first_token, remainder = _split_path_input(stripped) drop_path = _resolve_attachment_path(first_token) if drop_path is None and " " in stripped and stripped[0] not in {"'", '"'}: space_positions = [idx for idx, ch in enumerate(stripped) if ch == " "] for pos in reversed(space_positions): candidate = stripped[:pos].rstrip() resolved = _resolve_attachment_path(candidate) if resolved is not None: drop_path = resolved remainder = stripped[pos + 1 :].strip() break if drop_path is None: return None return { "path": drop_path, "is_image": drop_path.suffix.lower() in _IMAGE_EXTENSIONS, "remainder": remainder, } def _format_image_attachment_badges(attached_images: list[Path], image_counter: int, width: int | None = None) -> str: """Format the attached-image badge row for the interactive CLI. Narrow terminals such as Termux should get a compact summary that fits on a single row, while wider terminals can show the classic per-image badges. """ if not attached_images: return "" width = width or shutil.get_terminal_size((80, 24)).columns def _trunc(name: str, limit: int) -> str: return name if len(name) <= limit else name[: max(1, limit - 3)] + "..." if width < 52: if len(attached_images) == 1: return f"[📎 {_trunc(attached_images[0].name, 20)}]" return f"[📎 {len(attached_images)} images attached]" if width < 80: if len(attached_images) == 1: return f"[📎 {_trunc(attached_images[0].name, 32)}]" first = _trunc(attached_images[0].name, 20) extra = len(attached_images) - 1 return f"[📎 {first}] [+{extra}]" base = image_counter - len(attached_images) + 1 return " ".join( f"[📎 Image #{base + i}]" for i in range(len(attached_images)) ) def _should_auto_attach_clipboard_image_on_paste(pasted_text: str) -> bool: """Auto-attach clipboard images only for image-only paste gestures.""" return not pasted_text.strip() def _strip_leaked_bracketed_paste_wrappers(text: str) -> str: """Strip leaked bracketed-paste wrapper markers from user-visible text. Defensive normalization for cases where terminal/prompt_toolkit parsing fails and bracketed-paste markers end up in the buffer as literal text. We strip canonical wrappers unconditionally and also handle degraded visible forms like ``[200~`` / ``[201~`` and ``00~`` / ``01~`` when they look like wrapper boundaries, not arbitrary user content. """ if not text: return text text = ( text.replace("\x1b[200~", "") .replace("\x1b[201~", "") .replace("^[[200~", "") .replace("^[[201~", "") ) text = re.sub(r"(^|[\s\n>:\]\)])\[200~", r"\1", text) text = re.sub(r"\[201~(?=$|[\s\n<\[:;.,!?])", "", text) text = re.sub(r"(^|[\s\n>:\]\)])00~", r"\1", text) text = re.sub(r"01~(?=$|[\s\n<\[:;.,!?])", "", text) return text def _apply_bracketed_paste_timeout_patch() -> None: """Patch prompt_toolkit to recover from torn bracketed-paste sequences. prompt_toolkit's ``Vt100Parser.feed()`` buffers all input while waiting for the ESC[201~ end mark. If a terminal drops that end mark (terminal race, torn write, SSH glitch, macOS sleep/wake), input appears frozen forever — the only recovery used to be killing the tab. This patch wraps ``Vt100Parser.feed`` so that bracketed-paste mode flushes buffered content as a normal ``BracketedPaste`` event after ``_BP_TIMEOUT_S`` seconds without an end marker, then resumes normal parsing. See upstream issue #16263. The patch is idempotent — repeated calls are no-ops via the ``_hermes_bp_timeout_patched`` sentinel on the module. """ try: import prompt_toolkit.input.vt100_parser as _vt100_mod from prompt_toolkit.keys import Keys as _PtKeys from prompt_toolkit.key_binding.key_processor import KeyPress as _PtKeyPress if getattr(_vt100_mod, "_hermes_bp_timeout_patched", False): return _BP_TIMEOUT_S = 2.0 # max time to wait for ESC[201~ before flushing def _patched_vt100_feed(self_parser, data: str) -> None: if self_parser._in_bracketed_paste: self_parser._paste_buffer += data end_mark = "\x1b[201~" if end_mark in self_parser._paste_buffer: end_index = self_parser._paste_buffer.index(end_mark) paste_content = self_parser._paste_buffer[:end_index] self_parser.feed_key_callback( _PtKeyPress(_PtKeys.BracketedPaste, paste_content) ) self_parser._in_bracketed_paste = False remaining = self_parser._paste_buffer[ end_index + len(end_mark): ] self_parser._paste_buffer = "" self_parser._hermes_bp_start = None if remaining: _patched_vt100_feed(self_parser, remaining) else: bp_start = getattr(self_parser, "_hermes_bp_start", None) now = time.monotonic() if bp_start is None: self_parser._hermes_bp_start = now elif now - bp_start > _BP_TIMEOUT_S: paste_content = self_parser._paste_buffer self_parser._in_bracketed_paste = False self_parser._paste_buffer = "" self_parser._hermes_bp_start = None if paste_content: self_parser.feed_key_callback( _PtKeyPress(_PtKeys.BracketedPaste, paste_content) ) logger.warning( "Bracketed-paste timeout (%.1fs) — flushed %d bytes " "without end mark. Terminal may have dropped ESC[201~ " "(see #16263).", now - bp_start, len(paste_content), ) else: # Normal mode — re-inline prompt_toolkit's normal feed path. # Calling the original feed here would double-buffer after the # bracketed-paste entry transition. for i, c in enumerate(data): if self_parser._in_bracketed_paste: _patched_vt100_feed(self_parser, data[i:]) break self_parser._input_parser.send(c) _vt100_mod.Vt100Parser.feed = _patched_vt100_feed _vt100_mod._hermes_bp_timeout_patched = True logger.debug("Applied Vt100Parser bracketed-paste timeout patch (#16263)") except Exception as exc: # noqa: BLE001 — defensive: never break startup logger.debug("Bracketed-paste timeout patch skipped: %s", exc) # Cursor Position Report (CPR / DSR) response, format ``ESC[;R``. # prompt_toolkit's _on_resize() + renderer send ``ESC[6n`` queries to the # terminal; under resize storms or tab switches the terminal's reply can # race past the input parser and end up in the input buffer as literal # text (see issue #14692). Also matches the visible-form ``^[[;R`` # that appears when the ESC byte was stripped by a prior filter. _DSR_CPR_ESC_RE = re.compile(r"\x1b\[\d+;\d+R") _DSR_CPR_VISIBLE_RE = re.compile(r"\^\[\[\d+;\d+R") _SGR_MOUSE_ESC_RE = re.compile(r"\x1b\[<\d+;\d+;\d+[Mm]") _SGR_MOUSE_VISIBLE_RE = re.compile(r"\^\[\[<\d+;\d+;\d+[Mm]") # Some terminals/filters can drop ESC and literal "^[[", leaving only # "4m" # reset modifyOtherKeys "\x1b[0m" # reset text attributes "\x1b[?25h" # ensure cursor visible ) def _preserve_ctrl_enter_newline() -> bool: """Detect environments where Ctrl+Enter must produce a newline, not submit. Windows Terminal, WSL, SSH sessions, Ghostty, and some modern terminals deliver Ctrl+Enter/Ctrl+J as bare LF (c-j). On those terminals c-j must NOT be bound to submit; binding it to submit makes Ctrl+Enter (intended as 'newline like Alt+Enter') submit instead. Local POSIX TTYs that deliver Enter as LF (docker exec, some thin PTYs without SSH) still need c-j bound to submit, so we keep that binding for those. See issue #22379. """ if sys.platform == "win32": return True if any(os.environ.get(v) for v in ("SSH_CONNECTION", "SSH_CLIENT", "SSH_TTY")): return True if os.environ.get("WT_SESSION"): return True if os.environ.get("GHOSTTY_RESOURCES_DIR") or os.environ.get("GHOSTTY_BIN_DIR"): return True if os.environ.get("TERM", "").lower() == "xterm-ghostty": return True if os.environ.get("TERM_PROGRAM", "").lower() == "ghostty": return True if "microsoft" in os.environ.get("WSL_DISTRO_NAME", "").lower(): return True # WSL detection — env vars can be scrubbed under sudo, also peek /proc. for p in ("/proc/version", "/proc/sys/kernel/osrelease"): try: with open(p, "r", encoding="utf-8", errors="ignore") as f: if "microsoft" in f.read().lower(): return True except OSError: continue return False def _bind_prompt_submit_keys(kb, handler) -> None: """Bind terminal Enter forms to the submit handler. Enter is always submit. On POSIX we also bind c-j (LF) to submit because some thin PTYs (docker exec, certain SSH flavors) deliver Enter as LF instead of CR — without this, Enter appears dead on those terminals. Exception: on Windows, WSL, SSH sessions, Windows Terminal, and Ghostty, c-j is the wire encoding of Ctrl+Enter (a distinct keystroke from plain Enter / c-m). We leave c-j unbound there so the c-j newline handler registered separately can fire — giving the user an Enter-involving newline keystroke without terminal settings changes. See _preserve_ctrl_enter_newline() and issue #22379. """ kb.add("enter")(handler) if sys.platform != "win32" and not _preserve_ctrl_enter_newline(): kb.add("c-j")(handler) def _disable_prompt_toolkit_cpr_warning(app) -> None: """Let prompt_toolkit fall back from CPR without printing into the prompt.""" try: app.renderer.cpr_not_supported_callback = None except Exception: pass def _strip_leaked_terminal_responses_with_meta(text: str) -> tuple[str, bool]: """Strip leaked terminal control-response sequences from user input. Covers Cursor Position Report (CPR / DSR) responses — ``ESC[;R`` and the visible ``^[[;R`` form. These are replies the terminal sends back to queries prompt_toolkit makes during ``_on_resize`` / ``_request_absolute_cursor_position``. When the input parser drops one (resize storms, multiplexer focus changes, slow PTYs) the response lands in the input buffer as literal text and corrupts what the user typed. Also strips leaked SGR mouse-report fragments (``ESC[<...M/m`` and degraded visible forms). Returns ``(cleaned_text, had_mouse_reports)`` so callers can trigger an in-place terminal mode recovery when needed. """ if not text: return text, False has_esc = "\x1b[" in text has_visible = "^[" in text has_bare_mouse = "<" in text and ";" in text and ("M" in text or "m" in text) if not (has_esc or has_visible or has_bare_mouse): return text, False had_mouse_reports = False if has_esc: text = _DSR_CPR_ESC_RE.sub("", text) text, count = _SGR_MOUSE_ESC_RE.subn("", text) had_mouse_reports = had_mouse_reports or count > 0 if has_visible: text = _DSR_CPR_VISIBLE_RE.sub("", text) text, count = _SGR_MOUSE_VISIBLE_RE.subn("", text) had_mouse_reports = had_mouse_reports or count > 0 if has_bare_mouse: text, count = _SGR_MOUSE_BARE_RE.subn("", text) had_mouse_reports = had_mouse_reports or count > 0 return text, had_mouse_reports def _strip_leaked_terminal_responses(text: str) -> str: """Compatibility wrapper returning only cleaned text.""" cleaned, _ = _strip_leaked_terminal_responses_with_meta(text) return cleaned def _estimate_tui_input_height( lines: list[str] | tuple[str, ...], prompt_text: str, terminal_columns: int, *, max_height: int = 8, ) -> int: """Estimate classic prompt_toolkit input rows using live terminal cells. The TextArea prompt is injected with prompt_toolkit's BeforeInput processor, which means it consumes cells only on logical line 0. After a narrow resize, that first row can leave only one input cell beside an icon prompt such as ``⚔ ``, while continuation rows use the full terminal width. Never substitute a fake wide fallback here: under- or over-allocating the TextArea height leaves stale prompt/input cells visible at the bottom of the terminal. """ try: from prompt_toolkit.utils import get_cwidth except Exception: get_cwidth = lambda value: len(value or "") # type: ignore[assignment] try: columns = int(terminal_columns or 0) except (TypeError, ValueError): columns = 0 columns = max(1, columns) prompt_width = max(0, get_cwidth(prompt_text or "")) visual_lines = 0 for index, line in enumerate(lines or [""]): # prompt_toolkit's TextArea injects ``prompt`` via BeforeInput, which # applies only to logical line 0. Wrapped continuation rows, and later # logical lines, use the full terminal width. Count the display cells # after that same transformation rather than subtracting the prompt from # every wrapped row. line_width = get_cwidth(line or "") display_width = line_width + (prompt_width if index == 0 else 0) if display_width <= 0: visual_lines += 1 else: visual_lines += max(1, -(-display_width // columns)) return min(max(visual_lines, 1), max(1, int(max_height or 1))) def _collect_query_images(query: str | None, image_arg: str | None = None) -> tuple[str, list[Path]]: """Collect local image attachments for single-query CLI flows.""" message = query or "" images: list[Path] = [] if isinstance(message, str): dropped = _detect_file_drop(message) if dropped and dropped.get("is_image"): images.append(dropped["path"]) message = dropped["remainder"] or f"[User attached image: {dropped['path'].name}]" if image_arg: explicit_path = _resolve_attachment_path(image_arg) if explicit_path is None: raise ValueError(f"Image file not found: {image_arg}") if explicit_path.suffix.lower() not in _IMAGE_EXTENSIONS: raise ValueError(f"Not a supported image file: {explicit_path}") images.append(explicit_path) deduped: list[Path] = [] seen: set[str] = set() for img in images: key = str(img) if key in seen: continue seen.add(key) deduped.append(img) return message, deduped # Strip OSC escape sequences (e.g. OSC-8 hyperlinks) that prompt_toolkit's # ANSI parser can't handle — it strips \x1b but passes the payload through # as literal text, garbling the TUI output. _OSC_ESCAPE_RE = re.compile(r"\x1b\][\s\S]*?(?:\x07|\x1b\\)") class ChatConsole: """Rich Console adapter for prompt_toolkit's patch_stdout context. Captures Rich's rendered ANSI output and routes it through _cprint so colors and markup render correctly inside the interactive chat loop. Drop-in replacement for Rich Console — just pass this to any function that expects a console.print() interface. """ def __init__(self): from io import StringIO self._buffer = StringIO() self._inner = Console( file=self._buffer, force_terminal=True, color_system="truecolor", highlight=False, ) def print(self, *args, **kwargs): self._buffer.seek(0) self._buffer.truncate() # Read terminal width at render time so panels adapt to current size self._inner.width = shutil.get_terminal_size((80, 24)).columns self._inner.print(*args, **kwargs) output = self._buffer.getvalue() # Strip OSC escape sequences (e.g. OSC-8 hyperlinks) before # routing through prompt_toolkit's ANSI parser, which only # handles CSI/SGR and passes OSC payload through as literal text. output = _OSC_ESCAPE_RE.sub("", output) for line in output.rstrip("\n").split("\n"): _cprint(line) @contextmanager def status(self, *_args, **_kwargs): """Provide a no-op Rich-compatible status context. Some slash command helpers use ``console.status(...)`` when running in the standalone CLI. Interactive chat routes those helpers through ``ChatConsole()``, which historically only implemented ``print()``. Returning a silent context manager keeps slash commands compatible without duplicating the higher-level busy indicator already shown by ``HermesCLI._busy_command()``. """ yield self # ASCII Art - HERMES-AGENT logo (full width, single line - requires ~95 char terminal) HERMES_AGENT_LOGO = """[bold #FFD700]██╗ ██╗███████╗██████╗ ███╗ ███╗███████╗███████╗ █████╗ ██████╗ ███████╗███╗ ██╗████████╗[/] [bold #FFD700]██║ ██║██╔════╝██╔══██╗████╗ ████║██╔════╝██╔════╝ ██╔══██╗██╔════╝ ██╔════╝████╗ ██║╚══██╔══╝[/] [#FFBF00]███████║█████╗ ██████╔╝██╔████╔██║█████╗ ███████╗█████╗███████║██║ ███╗█████╗ ██╔██╗ ██║ ██║[/] [#FFBF00]██╔══██║██╔══╝ ██╔══██╗██║╚██╔╝██║██╔══╝ ╚════██║╚════╝██╔══██║██║ ██║██╔══╝ ██║╚██╗██║ ██║[/] [#CD7F32]██║ ██║███████╗██║ ██║██║ ╚═╝ ██║███████╗███████║ ██║ ██║╚██████╔╝███████╗██║ ╚████║ ██║[/] [#CD7F32]╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝ ╚═════╝ ╚══════╝╚═╝ ╚═══╝ ╚═╝[/]""" # ASCII Art - Hermes Caduceus (compact, fits in left panel) HERMES_CADUCEUS = """[#CD7F32]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣀⡀⠀⣀⣀⠀⢀⣀⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#CD7F32]⠀⠀⠀⠀⠀⠀⢀⣠⣴⣾⣿⣿⣇⠸⣿⣿⠇⣸⣿⣿⣷⣦⣄⡀⠀⠀⠀⠀⠀⠀[/] [#FFBF00]⠀⢀⣠⣴⣶⠿⠋⣩⡿⣿⡿⠻⣿⡇⢠⡄⢸⣿⠟⢿⣿⢿⣍⠙⠿⣶⣦⣄⡀⠀[/] [#FFBF00]⠀⠀⠉⠉⠁⠶⠟⠋⠀⠉⠀⢀⣈⣁⡈⢁⣈⣁⡀⠀⠉⠀⠙⠻⠶⠈⠉⠉⠀⠀[/] [#FFD700]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣴⣿⡿⠛⢁⡈⠛⢿⣿⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#FFD700]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠿⣿⣦⣤⣈⠁⢠⣴⣿⠿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#FFBF00]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠉⠻⢿⣿⣦⡉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#FFBF00]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⢷⣦⣈⠛⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#CD7F32]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣴⠦⠈⠙⠿⣦⡄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#CD7F32]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠸⣿⣤⡈⠁⢤⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#B8860B]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⠷⠄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#B8860B]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣀⠑⢶⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#B8860B]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⠁⢰⡆⠈⡿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#B8860B]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠳⠈⣡⠞⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/] [#B8860B]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/]""" def _build_compact_banner() -> str: """Build a compact banner that fits the current terminal width.""" try: from hermes_cli.skin_engine import get_active_skin _skin = get_active_skin() except Exception: _skin = None skin_name = getattr(_skin, "name", "default") if _skin else "default" border_color = _skin.get_color("banner_border", "#FFD700") if _skin else "#FFD700" title_color = _skin.get_color("banner_title", "#FFBF00") if _skin else "#FFBF00" dim_color = _skin.get_color("banner_dim", "#B8860B") if _skin else "#B8860B" if skin_name == "default": line1 = "⚕ NOUS HERMES - AI Agent Framework" tiny_line = "⚕ NOUS HERMES" else: agent_name = _skin.get_branding("agent_name", "Hermes Agent") if _skin else "Hermes Agent" line1 = f"{agent_name} - AI Agent Framework" tiny_line = agent_name if os.environ.get("HERMES_FAST_STARTUP_BANNER") == "1": from hermes_cli import __release_date__ as _release_date from hermes_cli import __version__ as _version version_line = f"Hermes Agent v{_version} ({_release_date})" else: version_line = format_banner_version_label() w = min(shutil.get_terminal_size().columns - 2, 88) if w < 30: return f"\n[{title_color}]{tiny_line}[/] [dim {dim_color}]- Nous Research[/]\n" inner = w - 2 # inside the box border bar = "═" * w content_width = inner - 2 # Truncate and pad to fit line1 = line1[:content_width].ljust(content_width) line2 = version_line[:content_width].ljust(content_width) return ( f"\n[bold {border_color}]╔{bar}╗[/]\n" f"[bold {border_color}]║[/] [{title_color}]{line1}[/] [bold {border_color}]║[/]\n" f"[bold {border_color}]║[/] [dim {dim_color}]{line2}[/] [bold {border_color}]║[/]\n" f"[bold {border_color}]╚{bar}╝[/]\n" ) # ============================================================================ # Slash-command detection helper # ============================================================================ def _looks_like_slash_command(text: str) -> bool: """Return True if *text* looks like a slash command, not a file path. Slash commands are ``/help``, ``/model gpt-4``, ``/q``, etc. File paths like ``/Users/ironin/file.md:45-46 can you fix this?`` also start with ``/`` but contain additional ``/`` characters in the first whitespace-delimited word. This helper distinguishes the two so that pasted paths are sent to the agent instead of triggering "Unknown command". """ if not text or not text.startswith("/"): return False first_word = text.split()[0] # After stripping the leading /, a command name has no slashes. # A path like /Users/foo/bar.md always does. return "/" not in first_word[1:] # ============================================================================ # Skill Slash Commands — dynamic commands generated from installed skills # ============================================================================ _skill_commands = None _skill_bundles = None def _ensure_skill_commands() -> dict: global _skill_commands if _skill_commands is None: from agent.skill_commands import scan_skill_commands _skill_commands = scan_skill_commands() return _skill_commands def get_skill_commands() -> dict: return _ensure_skill_commands() def build_skill_invocation_message(*args, **kwargs): from agent.skill_commands import build_skill_invocation_message as _impl return _impl(*args, **kwargs) def build_preloaded_skills_prompt(*args, **kwargs): from agent.skill_commands import build_preloaded_skills_prompt as _impl return _impl(*args, **kwargs) def get_skill_bundles() -> dict: global _skill_bundles if _skill_bundles is None: from agent.skill_bundles import get_skill_bundles as _impl _skill_bundles = _impl() return _skill_bundles def build_bundle_invocation_message(*args, **kwargs): from agent.skill_bundles import build_bundle_invocation_message as _impl return _impl(*args, **kwargs) def _get_plugin_cmd_handler_names() -> set: """Return plugin command names (without slash prefix) for dispatch matching.""" try: from hermes_cli.plugins import get_plugin_commands return set(get_plugin_commands().keys()) except Exception: return set() def _parse_skills_argument(skills: str | list[str] | tuple[str, ...] | None) -> list[str]: """Normalize a CLI skills flag into a deduplicated list of skill identifiers.""" if not skills: return [] if isinstance(skills, str): raw_values = [skills] elif isinstance(skills, (list, tuple)): raw_values = [str(item) for item in skills if item is not None] else: raw_values = [str(skills)] parsed: list[str] = [] seen: set[str] = set() for raw in raw_values: for part in raw.split(","): normalized = part.strip() if not normalized or normalized in seen: continue seen.add(normalized) parsed.append(normalized) return parsed def save_config_value(key_path: str, value: any) -> bool: """ Save a value to the active config file at the specified key path. Respects the same lookup order as load_cli_config(): 1. ~/.hermes/config.yaml (user config - preferred, used if it exists) 2. ./cli-config.yaml (project config - fallback) Args: key_path: Dot-separated path like "agent.system_prompt" value: Value to save Returns: True if successful, False otherwise """ # Use the same precedence as load_cli_config: user config first, then project config user_config_path = _hermes_home / 'config.yaml' project_config_path = Path(__file__).parent / 'cli-config.yaml' config_path = user_config_path if user_config_path.exists() else project_config_path try: # Ensure parent directory exists (for ~/.hermes/config.yaml on first use) config_path.parent.mkdir(parents=True, exist_ok=True) # Save back atomically while preserving comments, ordering, quotes, and # readable Unicode in user-edited config.yaml. from utils import atomic_roundtrip_yaml_update atomic_roundtrip_yaml_update(config_path, key_path, value) # Enforce owner-only permissions on config files (contain API keys) try: os.chmod(config_path, 0o600) except (OSError, NotImplementedError): pass return True except Exception as e: logger.error("Failed to save config: %s", e) return False # ============================================================================ # HermesCLI Class # ============================================================================ class HermesCLI(CLIAgentSetupMixin, CLICommandsMixin): """ Interactive CLI for the Hermes Agent. Provides a REPL interface with rich formatting, command history, and tool execution capabilities. """ def __init__( self, model: str = None, toolsets: List[str] = None, provider: str = None, api_key: str = None, base_url: str = None, max_turns: int = None, verbose: Optional[bool] = None, compact: bool = False, resume: str = None, checkpoints: bool = False, pass_session_id: bool = False, ignore_rules: bool = False, ): """ Initialize the Hermes CLI. Args: model: Model to use (default: from env or claude-sonnet) toolsets: List of toolsets to enable (default: all) provider: Inference provider ("auto", "openrouter", "nous", "openai-codex", "zai", "kimi-coding", "minimax", "minimax-cn") api_key: API key (default: from environment) base_url: API base URL (default: OpenRouter) max_turns: Maximum tool-calling iterations shared with subagents (default: 90) verbose: Enable verbose logging compact: Use compact display mode resume: Session ID to resume (restores conversation history from SQLite) pass_session_id: Include the session ID in the agent's system prompt """ # Initialize Rich console self.console = Console() self.config = CLI_CONFIG self.compact = compact if compact is not None else CLI_CONFIG["display"].get("compact", False) # tool_progress: "off", "new", "all", "verbose" (from config.yaml display section) # YAML 1.1 parses bare `off` as boolean False — normalise to string. _raw_tp = CLI_CONFIG["display"].get("tool_progress", "all") self.tool_progress_mode = "off" if _raw_tp is False else str(_raw_tp) # resume_display: "full" (show history) | "minimal" (one-liner only) self.resume_display = CLI_CONFIG["display"].get("resume_display", "full") # bell_on_complete: play terminal bell (\a) when agent finishes a response self.bell_on_complete = CLI_CONFIG["display"].get("bell_on_complete", False) # show_reasoning: display model thinking/reasoning before the response self.show_reasoning = CLI_CONFIG["display"].get("show_reasoning", False) _configure_output_history( enabled=CLI_CONFIG["display"].get("persistent_output", True), max_lines=CLI_CONFIG["display"].get("persistent_output_max_lines", 200), ) # busy_input_mode: "interrupt" (Enter interrupts current run), # "queue" (Enter queues for next turn), or "steer" (Enter injects # mid-run via /steer, arriving after the next tool call). _bim = str(CLI_CONFIG["display"].get("busy_input_mode", "interrupt")).strip().lower() if _bim == "queue": self.busy_input_mode = "queue" elif _bim == "steer": self.busy_input_mode = "steer" else: self.busy_input_mode = "interrupt" # self.verbose ONLY controls global DEBUG logging (root logger level). # display.tool_progress="verbose" controls tool-call rendering (full args, # results, think blocks) and is independent — see _apply_logging_levels. # Coupling the two (PR #6a1aa420e) caused all module DEBUG logs to spew # to console whenever a user set tool_progress: verbose in config. self.verbose = bool(verbose) if verbose is not None else False # streaming: stream tokens to the terminal as they arrive (display.streaming in config.yaml) self.streaming_enabled = CLI_CONFIG["display"].get("streaming", False) # show_timestamps: prefix user and assistant labels with [HH:MM] self.show_timestamps = CLI_CONFIG["display"].get("timestamps", False) self.final_response_markdown = str( CLI_CONFIG["display"].get("final_response_markdown", "strip") ).strip().lower() or "strip" if self.final_response_markdown not in {"render", "strip", "raw"}: self.final_response_markdown = "strip" # Inline diff previews for write actions (display.inline_diffs in config.yaml) self._inline_diffs_enabled = CLI_CONFIG["display"].get("inline_diffs", True) # Submitted multiline user-message preview (display.user_message_preview in config.yaml) _ump = CLI_CONFIG["display"].get("user_message_preview", {}) if not isinstance(_ump, dict): _ump = {} try: _ump_first_lines = int(_ump.get("first_lines", 2)) except (TypeError, ValueError): _ump_first_lines = 2 try: _ump_last_lines = int(_ump.get("last_lines", 2)) except (TypeError, ValueError): _ump_last_lines = 2 self.user_message_preview_first_lines = max(1, _ump_first_lines) self.user_message_preview_last_lines = max(0, _ump_last_lines) # Streaming display state self._stream_buf = "" # Partial line buffer for line-buffered rendering self._stream_started = False # True once first delta arrives self._stream_box_opened = False # True once the response box header is printed self._reasoning_preview_buf = "" # Coalesce tiny reasoning chunks for [thinking] output # Table-row buffer. When a streamed line looks like it could be # part of a markdown table, hold it here until the block ends so # we can re-pad with wcwidth-aware widths. Empty by default; # populated only while `_in_stream_table` is True. self._stream_table_buf: list[str] = [] self._in_stream_table = False self._pending_edit_snapshots = {} self._last_input_mode_recovery = 0.0 self._input_mode_recovery_notice_shown = False # Configuration - priority: CLI args > env vars > config file # Model comes from: CLI arg or config.yaml (single source of truth). # LLM_MODEL/OPENAI_MODEL env vars are NOT checked — config.yaml is # authoritative. This avoids conflicts in multi-agent setups where # env vars would stomp each other. _model_config = CLI_CONFIG.get("model", {}) _config_model = (_model_config.get("default") or _model_config.get("model") or "") if isinstance(_model_config, dict) else (_model_config or "") _DEFAULT_CONFIG_MODEL = "" self.model = model or _config_model or _DEFAULT_CONFIG_MODEL # Read max_tokens from config (env var override: HERMES_MAX_TOKENS) _env_mt = os.environ.get("HERMES_MAX_TOKENS") if _env_mt: try: self.max_tokens = int(_env_mt) except (ValueError, TypeError): self.max_tokens = None elif isinstance(_model_config, dict): _mt = _model_config.get("max_tokens") self.max_tokens = _mt if isinstance(_mt, int) else None else: self.max_tokens = None # Auto-detect model from local server if still on default if self.model == _DEFAULT_CONFIG_MODEL: _base_url = (_model_config.get("base_url") or "") if isinstance(_model_config, dict) else "" if "localhost" in _base_url or "127.0.0.1" in _base_url: from hermes_cli.runtime_provider import _auto_detect_local_model _detected = _auto_detect_local_model(_base_url) if _detected: self.model = _detected # Track whether model was explicitly chosen by the user or fell back # to the global default. Provider-specific normalisation may override # the default silently but should warn when overriding an explicit choice. # A config model that matches the global fallback is NOT considered an # explicit choice — the user just never changed it. But a config model # like "gpt-5.3-codex" IS explicit and must be preserved. self._model_is_default = not model and ( not _config_model or _config_model == _DEFAULT_CONFIG_MODEL ) self._explicit_api_key = api_key self._explicit_base_url = base_url # Provider selection is resolved lazily at use-time via _ensure_runtime_credentials(). self.requested_provider = ( provider or CLI_CONFIG["model"].get("provider") or os.getenv("HERMES_INFERENCE_PROVIDER") or "auto" ) self._provider_source: Optional[str] = None self.provider = self.requested_provider self.api_mode = "chat_completions" self.acp_command: Optional[str] = None self.acp_args: list[str] = [] self.base_url = ( base_url or CLI_CONFIG["model"].get("base_url", "") or os.getenv("OPENROUTER_BASE_URL", "") ) or None # Match key to resolved base_url: OpenRouter URL → prefer OPENROUTER_API_KEY, # custom endpoint → prefer OPENAI_API_KEY (issue #560). # Note: _ensure_runtime_credentials() re-resolves this before first use. if self.base_url and base_url_host_matches(self.base_url, "openrouter.ai"): self.api_key = api_key or os.getenv("OPENROUTER_API_KEY") or os.getenv("OPENAI_API_KEY") else: self.api_key = api_key or os.getenv("OPENAI_API_KEY") or os.getenv("OPENROUTER_API_KEY") # Max turns priority: CLI arg > config file > env var > default if max_turns is not None: # CLI arg was explicitly set self.max_turns = max_turns elif CLI_CONFIG["agent"].get("max_turns"): self.max_turns = CLI_CONFIG["agent"]["max_turns"] elif CLI_CONFIG.get("max_turns"): # Backwards compat: root-level max_turns self.max_turns = CLI_CONFIG["max_turns"] elif os.getenv("HERMES_MAX_ITERATIONS"): try: self.max_turns = int(os.getenv("HERMES_MAX_ITERATIONS", "")) except (TypeError, ValueError): self.max_turns = 90 else: self.max_turns = 90 # Parse and validate toolsets self.enabled_toolsets = toolsets self.disabled_toolsets = CLI_CONFIG["agent"].get("disabled_toolsets") or [] if toolsets and "all" not in toolsets and "*" not in toolsets: # Validate each toolset — MCP server names are resolved via # live registry aliases (registered during discover_mcp_tools), # but discovery hasn't run yet at this point, so exclude them. mcp_names = set((CLI_CONFIG.get("mcp_servers") or {}).keys()) invalid = [t for t in toolsets if not validate_toolset(t) and t not in mcp_names] if invalid: self._console_print(f"[bold red]Warning: Unknown toolsets: {', '.join(invalid)}[/]") # Filesystem checkpoints: CLI flag > config cp_cfg = CLI_CONFIG.get("checkpoints", {}) if isinstance(cp_cfg, bool): cp_cfg = {"enabled": cp_cfg} self.checkpoints_enabled = checkpoints or cp_cfg.get("enabled", False) self.checkpoint_max_snapshots = cp_cfg.get("max_snapshots", 20) self.checkpoint_max_total_size_mb = cp_cfg.get("max_total_size_mb", 500) self.checkpoint_max_file_size_mb = cp_cfg.get("max_file_size_mb", 10) self.pass_session_id = pass_session_id # --ignore-rules: honor either the constructor flag or the env var set # by `hermes chat --ignore-rules` in hermes_cli/main.py. When true we # pass skip_context_files=True and skip_memory=True to AIAgent so # AGENTS.md/SOUL.md/.cursorrules and persistent memory are not loaded. self.ignore_rules = ignore_rules or os.environ.get("HERMES_IGNORE_RULES") == "1" # Ephemeral system prompt: env var takes precedence, then config self.system_prompt = ( os.getenv("HERMES_EPHEMERAL_SYSTEM_PROMPT", "") or CLI_CONFIG["agent"].get("system_prompt", "") ) self.personalities = CLI_CONFIG["agent"].get("personalities", {}) # Ephemeral prefill messages (few-shot priming, never persisted) self.prefill_messages = _load_prefill_messages( _resolve_prefill_messages_file(CLI_CONFIG) ) # Reasoning config (OpenRouter reasoning effort level) self.reasoning_config = _parse_reasoning_config( CLI_CONFIG["agent"].get("reasoning_effort", "") ) self.service_tier = _parse_service_tier_config( CLI_CONFIG["agent"].get("service_tier", "") ) # OpenRouter provider routing preferences pr = CLI_CONFIG.get("provider_routing", {}) or {} self._provider_sort = pr.get("sort") self._providers_only = pr.get("only") self._providers_ignore = pr.get("ignore") self._providers_order = pr.get("order") self._provider_require_params = pr.get("require_parameters", False) self._provider_data_collection = pr.get("data_collection") # OpenRouter Pareto Code router knob — coding-score floor (0.0-1.0). # Only applied when model.model == "openrouter/pareto-code". # Empty string / None / out-of-range = unset (let OR pick strongest coder). _or_cfg = CLI_CONFIG.get("openrouter", {}) or {} _raw_score = _or_cfg.get("min_coding_score") self._openrouter_min_coding_score: Optional[float] = None if _raw_score not in {None, ""}: try: _f = float(_raw_score) if 0.0 <= _f <= 1.0: self._openrouter_min_coding_score = _f except (TypeError, ValueError): pass # Fallback provider chain — tried in order when primary fails after retries. # Merge new ``fallback_providers`` entries with any legacy # ``fallback_model`` entries so old configs still participate. self._fallback_model = get_fallback_chain(CLI_CONFIG) # Signature of the currently-initialised agent's runtime. Used to # rebuild the agent when provider / model / base_url changes across # turns (e.g. after /model or credential rotation). self._active_agent_route_signature = None # Agent will be initialized on first use self.agent: Optional[Any] = None self._tool_callbacks_installed = False self._tirith_security_checked = False self._app = None # prompt_toolkit Application (set in run()) # Conversation state self.conversation_history: List[Dict[str, Any]] = [] self.session_start = datetime.now() self._resumed = False # Per-prompt elapsed timer — started at the beginning of each chat turn, # frozen when the agent thread completes, displayed in the status bar. self._prompt_start_time: Optional[float] = None # time.time() when turn started self._prompt_duration: float = 0.0 # frozen duration of last completed turn self._last_turn_finished_at: Optional[float] = None # time.time() when the last agent loop finished # Initialize SQLite session store early so /title works before first message self._session_db = None try: from hermes_state import SessionDB self._session_db = SessionDB() except Exception as e: logger.warning("Failed to initialize SessionDB — session will NOT be indexed for search: %s", e) # Opportunistic state.db maintenance — runs at most once per # min_interval_hours, tracked via state_meta in state.db itself so # it's shared across all Hermes processes for this HERMES_HOME. # Never blocks startup on failure. _run_state_db_auto_maintenance(self._session_db) # Opportunistic shadow-repo cleanup — deletes orphan/stale # checkpoint repos under ~/.hermes/checkpoints/. Opt-in via # checkpoints.auto_prune, idempotent via .last_prune marker. _run_checkpoint_auto_maintenance() # Deferred title: stored in memory until the session is created in the DB self._pending_title: Optional[str] = None # Session ID: reuse existing one when resuming, otherwise generate fresh if resume: self.session_id = resume self._resumed = True else: timestamp_str = self.session_start.strftime("%Y%m%d_%H%M%S") short_uuid = uuid.uuid4().hex[:6] self.session_id = f"{timestamp_str}_{short_uuid}" # History file for persistent input recall across sessions self._history_file = _hermes_home / ".hermes_history" self._last_invalidate: float = 0.0 # throttle UI repaints self._app = None # State shared by interactive run() and single-query chat mode. # These must exist before any direct chat() call because single-query # mode does not go through run(). self._agent_running = False self._pending_input = queue.Queue() self._interrupt_queue = queue.Queue() # Tracks whether the turn that just finished was interrupted via # Ctrl+C. Consumed by _maybe_continue_goal_after_turn so /goal loops # don't auto-queue another continuation on top of a user-cancelled # turn (which would make Ctrl+C feel like it did nothing). self._last_turn_interrupted = False self._should_exit = False # /exit --delete: when True, the current session's SQLite history and # on-disk transcripts are deleted during shutdown. Set by # process_command() when the user runs /exit --delete or /quit --delete. # Ported from google-gemini/gemini-cli#19332. self._delete_session_on_exit = False # /update: when set, run() executes relaunch() after prompt_toolkit # has fully exited and cleaned up terminal modes. Set by # _handle_update_command() so the relaunch happens on the main thread, # not the background process_loop thread. self._pending_relaunch: list[str] | None = None self._last_ctrl_c_time = 0 self._clarify_state = None self._clarify_freetext = False self._clarify_deadline = 0 self._sudo_state = None self._sudo_deadline = 0 self._modal_input_snapshot = None self._approval_state = None self._approval_deadline = 0 self._approval_lock = threading.Lock() self._slash_confirm_state = None self._slash_confirm_deadline = 0 self._model_picker_state = None # Armed when a bare `/resume` prints the recent-sessions list so the # very next bare numeric input (e.g. `3`) resolves to that session. # Holds the exact list used for index resolution; one-shot (cleared on # the next submitted input, whether it's the selection or anything # else). See #34584. self._pending_resume_sessions = None # One-shot agent seed set by a slash handler (e.g. /blueprint ) # that wants its output run as the next agent turn. Consumed and cleared # by the interactive loop immediately after process_command() returns. self._pending_agent_seed = None self._secret_state = None self._secret_deadline = 0 self._spinner_text: str = "" # thinking spinner text for TUI self._tool_start_time: float = 0.0 # monotonic timestamp when current tool started (for live elapsed) self._pending_tool_info: dict = {} # function_name -> list of (preview, args) for stacked scrollback self._last_scrollback_tool: str = "" # last tool name printed to scrollback (for "new" dedup) self._command_running = False self._command_status = "" self._attached_images: list[Path] = [] self._image_counter = 0 self.preloaded_skills: list[str] = [] self._startup_skills_line_shown = False self._active_session_lease = None # Voice mode state (also reinitialized inside run() for interactive TUI). self._voice_lock = threading.Lock() self._voice_mode = False self._voice_tts = False self._voice_recorder = None self._voice_recording = False self._voice_processing = False self._voice_continuous = False self._voice_tts_done = threading.Event() self._voice_tts_done.set() # Status bar visibility (toggled via /statusbar) self._status_bar_visible = True # When True, the input separator rules and the dynamic status bar are # hidden until the next user input. Set by _recover_after_resize() so a # SIGWINCH cannot stamp a freshly-drawn status bar on top of one that # the terminal just reflowed into scrollback — the cause of duplicated # bars / "blank line flooding" reports (#19280, #22976). self._status_bar_suppressed_after_resize = False self._resize_recovery_lock = threading.Lock() self._resize_recovery_timer = None self._resize_recovery_pending = False # Background task tracking: {task_id: threading.Thread} self._background_tasks: Dict[str, threading.Thread] = {} self._background_task_counter = 0 def _claim_active_session(self, surface: str = "cli", *, stderr: bool = False) -> bool: """Claim a global active-session slot for this CLI process.""" if self._active_session_lease is not None: return True try: from hermes_cli.active_sessions import try_acquire_active_session lease, message = try_acquire_active_session( session_id=self.session_id, surface=surface, config=self.config, ) except Exception as exc: logger.warning("Failed to claim active session slot: %s", exc) return True if message: if stderr: print(message, file=sys.stderr) else: self._console_print(f"[bold red]{message}[/]") return False self._active_session_lease = lease try: atexit.register(self._release_active_session) except Exception: pass return True def _release_active_session(self) -> None: lease = getattr(self, "_active_session_lease", None) if lease is None: return try: lease.release() except Exception: logger.debug("Failed to release active session slot", exc_info=True) finally: self._active_session_lease = None def _invalidate(self, min_interval: float = 0.25) -> None: """Throttled UI repaint for high-frequency background updates. Use this for spinner frames, streaming token flushes, and other repaints that can fire many times per second — the throttle prevents terminal blinking on slow/SSH connections, and the resize-recovery guard avoids stamping footer/status-bar chrome into scrollback while a SIGWINCH reflow is in flight. Do NOT use this for user-blocking modal prompts (approval / clarify / sudo). Those are rare, one-shot, user-blocking events that must paint immediately; route them through ``self._app.invalidate()`` directly, the same way the modal key-binding handlers already do. Sending a modal's entry paint through this throttle lets an unrelated background repaint within the 250ms window — or an in-flight resize — silently drop it, so the prompt never renders and times out unseen (#41098). """ if getattr(self, "_resize_recovery_pending", False): return now = time.monotonic() if hasattr(self, "_app") and self._app and (now - self._last_invalidate) >= min_interval: self._last_invalidate = now self._app.invalidate() def _paint_now(self) -> None: """Immediate, unthrottled repaint for user-blocking modal prompts. Background-thread callbacks (approval / clarify / sudo) set their modal state then call this to make the panel visible at once. It deliberately bypasses the ``_invalidate`` throttle and resize-recovery guard — a modal the user is actively waiting on must never be dropped — mirroring the direct ``event.app.invalidate()`` the modal key-binding handlers already use. See ``_invalidate`` for why the throttle must not gate these paints (#41098). """ app = getattr(self, "_app", None) if app is not None: try: app.invalidate() except Exception: pass def _force_full_redraw(self) -> None: """Force a clean full-screen repaint of the prompt_toolkit UI. Used to recover from terminal buffer drift caused by external redraws we can't detect — e.g. macOS cmux / tmux tab switches, ``clear`` issued from a subshell, or SSH window restores. These wipe or repaint the terminal without firing SIGWINCH, so prompt_toolkit's tracked ``_cursor_pos`` no longer matches reality and the next incremental redraw stacks on top of stale content (ghost status bars, duplicated prompts). Bound to Ctrl+L and exposed as the ``/redraw`` slash command, matching the standard terminal-UX convention (bash, zsh, fish, vim, htop). """ app = getattr(self, "_app", None) if not app: return self._clear_prompt_toolkit_screen(app) _replay_output_history() try: app.invalidate() except Exception: pass def _clear_prompt_toolkit_screen(self, app, *, rebuild_scrollback: bool = False) -> None: """Clear the terminal and reset prompt_toolkit renderer state.""" try: renderer = app.renderer out = renderer.output out.reset_attributes() out.erase_screen() if rebuild_scrollback: try: out.write_raw("\x1b[3J") except Exception: pass out.cursor_goto(0, 0) out.flush() # Drop prompt_toolkit's cached screen + cursor state so the # next _redraw() starts from a known (0, 0) origin and # re-renders every cell rather than diffing against stale. renderer.reset(leave_alternate_screen=False) except Exception: pass def _recover_after_resize(self, app, original_on_resize) -> None: """Recover a resized classic CLI without desynchronizing cursor state. Unlike _force_full_redraw, we do NOT clear the physical screen or scrollback here. The startup banner and tool summary are printed before prompt_toolkit owns the live chrome, so they live in normal terminal scrollback. Erasing the screen on SIGWINCH removes that startup UI and ``_replay_output_history`` cannot reconstruct it (the banner was never added to ``_OUTPUT_HISTORY``). Let prompt_toolkit's own resize path run with its renderer cursor cache intact. Its Application._on_resize() starts with renderer.erase(leave_alternate_screen=False), which needs the cached cursor position to move back to the live prompt origin before erase_down(). Resetting the renderer before that erase loses the origin and can leave stale prompt glyphs after a narrow resize. We also flag ``_status_bar_suppressed_after_resize`` so the dynamic status bar and input separator rules stay hidden until the next user input. On column shrink the terminal reflows already-rendered status bar rows into scrollback before prompt_toolkit can erase them; drawing a fresh full-width bar immediately makes the old and new versions look duplicated (#19280, #22976). Clearing the suppression on the next prompt restores the bar cleanly. """ self._status_bar_suppressed_after_resize = True original_on_resize() def _schedule_resize_recovery(self, app, original_on_resize, delay: float = 0.12) -> None: """Debounce resize redraws so footer chrome is not stamped into scrollback.""" try: old_timer = getattr(self, "_resize_recovery_timer", None) lock = getattr(self, "_resize_recovery_lock", None) if lock is None: lock = threading.Lock() self._resize_recovery_lock = lock def _timer_fired(timer_ref): def _run_recovery(): with lock: if getattr(self, "_resize_recovery_timer", None) is not timer_ref: return self._resize_recovery_timer = None self._resize_recovery_pending = False self._recover_after_resize(app, original_on_resize) try: loop = app.loop # type: ignore[attr-defined] except Exception: loop = None if loop is not None: try: loop.call_soon_threadsafe(_run_recovery) return except Exception: pass _run_recovery() with lock: if old_timer is not None: try: old_timer.cancel() except Exception: pass self._resize_recovery_pending = True timer = threading.Timer(delay, lambda: _timer_fired(timer)) timer.daemon = True self._resize_recovery_timer = timer timer.start() except Exception: self._resize_recovery_pending = False self._recover_after_resize(app, original_on_resize) def _status_bar_context_style(self, percent_used: Optional[int]) -> str: if percent_used is None: return "class:status-bar-dim" if percent_used >= 95: return "class:status-bar-critical" if percent_used > 80: return "class:status-bar-bad" if percent_used >= 50: return "class:status-bar-warn" return "class:status-bar-good" @staticmethod def _compression_count_style(count: int) -> str: """Return a style class reflecting context compression pressure.""" if count >= 10: return "class:status-bar-bad" if count >= 5: return "class:status-bar-warn" return "class:status-bar-dim" def _build_context_bar(self, percent_used: Optional[int], width: int = 10) -> str: safe_percent = max(0, min(100, percent_used or 0)) filled = round((safe_percent / 100) * width) return f"[{('█' * filled) + ('░' * max(0, width - filled))}]" @staticmethod def _format_prompt_elapsed(prompt_start_time: Optional[float], prompt_duration: float, live: bool = False) -> str: """Format per-prompt elapsed time for the status bar. Always returns a string — shows 0s on fresh start before first turn. Keeps seconds visible at all scales so it increments smoothly: 59s → 1m → 1m 1s → ... → 1m 59s → 2m → 2m 1s → ... 59m 59s → 1h → 1h 0m 1s → ... 23h 59m 59s → 1d → 1d 0h 1m → ... Emoji prefix: ⏱ when turn is live, ⏲ when frozen or fresh start. Uses width-1 (no variation selector) glyphs so the status bar stays aligned in monospace terminals. """ if prompt_start_time is None and prompt_duration == 0.0: return "⏲ 0s" elapsed = time.time() - prompt_start_time if prompt_start_time is not None else prompt_duration elapsed = max(0.0, elapsed) days = int(elapsed // 86400) remaining = elapsed % 86400 hours = int(remaining // 3600) remaining = remaining % 3600 minutes = int(remaining // 60) seconds = int(remaining % 60) if days > 0: time_str = f"{days}d {hours}h {minutes}m" elif hours > 0: time_str = f"{hours}h {minutes}m {seconds}s" if seconds else f"{hours}h {minutes}m" elif minutes > 0: time_str = f"{minutes}m {seconds}s" if seconds else f"{minutes}m" else: time_str = f"{int(elapsed)}s" emoji = "⏱" if live else "⏲" return f"{emoji} {time_str}" @staticmethod def _format_idle_since(last_finished_at: Optional[float], turn_live: bool) -> str: """Format time since the last final agent response for the status bar. Returns an empty string while a turn is live (the per-prompt elapsed timer covers that case) or before the first turn has completed. Compact read-out: ``✓ 42s`` / ``✓ 3m`` / ``✓ 1h 12m``. """ if turn_live or last_finished_at is None: return "" idle = max(0.0, time.time() - last_finished_at) return f"✓ {format_duration_compact(idle)}" def _get_status_bar_snapshot(self) -> Dict[str, Any]: # Prefer the agent's model name — it updates on fallback. # self.model reflects the originally configured model and never # changes mid-session, so the TUI would show a stale name after # _try_activate_fallback() switches provider/model. agent = getattr(self, "agent", None) model_name = (getattr(agent, "model", None) or self.model or "unknown") model_short = model_name.split("/")[-1] if "/" in model_name else model_name if model_short.endswith(".gguf"): model_short = model_short[:-5] if len(model_short) > 26: model_short = f"{model_short[:23]}..." elapsed_seconds = max(0.0, (datetime.now() - self.session_start).total_seconds()) snapshot = { "model_name": model_name, "model_short": model_short, "duration": format_duration_compact(elapsed_seconds), "prompt_elapsed": self._format_prompt_elapsed( getattr(self, "_prompt_start_time", None), getattr(self, "_prompt_duration", 0.0), live=getattr(self, "_prompt_start_time", None) is not None, ), "idle_since": self._format_idle_since( getattr(self, "_last_turn_finished_at", None), turn_live=getattr(self, "_prompt_start_time", None) is not None, ), "context_tokens": 0, "context_length": None, "context_percent": None, "session_input_tokens": 0, "session_output_tokens": 0, "session_cache_read_tokens": 0, "session_cache_write_tokens": 0, "session_prompt_tokens": 0, "session_completion_tokens": 0, "session_total_tokens": 0, "session_api_calls": 0, "compressions": 0, "active_background_tasks": 0, "active_background_processes": 0, } # Count live /background tasks. The dict entry is removed in the # task thread's finally block, so len() reflects truly-running tasks. # len() on a CPython dict is atomic; safe to read without a lock. try: bg_tasks = getattr(self, "_background_tasks", None) if bg_tasks: snapshot["active_background_tasks"] = len(bg_tasks) except Exception: pass # Count live background terminal processes (terminal tool background # sessions tracked by tools.process_registry). Cheap O(1) read. try: from tools.process_registry import process_registry snapshot["active_background_processes"] = process_registry.count_running() except Exception: pass if not agent: return snapshot snapshot["session_input_tokens"] = getattr(agent, "session_input_tokens", 0) or 0 snapshot["session_output_tokens"] = getattr(agent, "session_output_tokens", 0) or 0 snapshot["session_cache_read_tokens"] = getattr(agent, "session_cache_read_tokens", 0) or 0 snapshot["session_cache_write_tokens"] = getattr(agent, "session_cache_write_tokens", 0) or 0 snapshot["session_prompt_tokens"] = getattr(agent, "session_prompt_tokens", 0) or 0 snapshot["session_completion_tokens"] = getattr(agent, "session_completion_tokens", 0) or 0 snapshot["session_total_tokens"] = getattr(agent, "session_total_tokens", 0) or 0 snapshot["session_api_calls"] = getattr(agent, "session_api_calls", 0) or 0 compressor = getattr(agent, "context_compressor", None) if compressor: # last_prompt_tokens is parked at the -1 sentinel right after a # compression, until the next real API call reports a prompt count # (awaiting_real_usage_after_compression). The status bar must not # render that sentinel verbatim — it produced "-1/200K" / "-1%". # Clamp it to 0 so the one transitional turn reads as empty context. context_tokens = getattr(compressor, "last_prompt_tokens", 0) or 0 if context_tokens < 0: context_tokens = 0 context_length = getattr(compressor, "context_length", 0) or 0 if context_length < 0: context_length = 0 snapshot["context_tokens"] = context_tokens snapshot["context_length"] = context_length or None snapshot["compressions"] = getattr(compressor, "compression_count", 0) or 0 if context_length: snapshot["context_percent"] = max(0, min(100, round((context_tokens / context_length) * 100))) return snapshot @staticmethod def _status_bar_display_width(text: str) -> int: """Return terminal cell width for status-bar text. len() is not enough for prompt_toolkit layout decisions because some glyphs can render wider than one Python codepoint. Keeping the status bar within the real display width prevents it from wrapping onto a second line and leaving behind duplicate rows. """ try: from prompt_toolkit.utils import get_cwidth return get_cwidth(text or "") except Exception: return len(text or "") @classmethod def _trim_status_bar_text(cls, text: str, max_width: int) -> str: """Trim status-bar text to a single terminal row.""" if max_width <= 0: return "" try: from prompt_toolkit.utils import get_cwidth except Exception: get_cwidth = None if cls._status_bar_display_width(text) <= max_width: return text ellipsis = "..." ellipsis_width = cls._status_bar_display_width(ellipsis) if max_width <= ellipsis_width: return ellipsis[:max_width] out = [] width = 0 for ch in text: ch_width = get_cwidth(ch) if get_cwidth else len(ch) if width + ch_width + ellipsis_width > max_width: break out.append(ch) width += ch_width return "".join(out).rstrip() + ellipsis @staticmethod def _get_tui_terminal_width(default: tuple[int, int] = (80, 24)) -> int: """Return the live prompt_toolkit width, falling back to ``shutil``. The TUI layout can be narrower than ``shutil.get_terminal_size()`` reports, especially on Termux/mobile shells, so prefer prompt_toolkit's width whenever an app is active. """ try: from prompt_toolkit.application import get_app return get_app().output.get_size().columns except Exception: return shutil.get_terminal_size(default).columns def _use_minimal_tui_chrome(self, width: Optional[int] = None) -> bool: """Hide low-value chrome on narrow/mobile terminals to preserve rows.""" if width is None: width = self._get_tui_terminal_width() return width < 64 @staticmethod def _scrollback_box_width(width: Optional[int] = None) -> int: """Return the full viewport width for printed scrollback box rules. Previously this clamped to ``max(32, min(width, 56))`` as a defense against terminal-emulator reflow on column-shrink (#25975, salvaging #24403). That clamp made response/reasoning borders look stubby on any modern wide terminal. We now trust the prompt_toolkit ``_output_screen_diff`` monkey-patch landed in #26137 (salvaging #25981) to keep chrome out of scrollback in the first place, and accept that an aggressive column-shrink may visually reflow already printed Panel borders — that's a cosmetic artifact of stamped scrollback history, not a live-render bug. A small floor (32 cols) is kept so the box still renders on tiny terminals without negative ``'─' * (w - 2)`` math. """ if width is None: try: width = shutil.get_terminal_size((80, 24)).columns except Exception: width = 80 return max(32, int(width or 80)) def _tui_input_rule_height(self, position: str, width: Optional[int] = None) -> int: """Return the visible height for the top/bottom input separator rules.""" if position not in {"top", "bottom"}: raise ValueError(f"Unknown input rule position: {position}") if getattr(self, "_status_bar_suppressed_after_resize", False): return 0 if position == "top": return 1 return 0 if self._use_minimal_tui_chrome(width=width) else 1 def _agent_spacer_height(self, width: Optional[int] = None) -> int: """Return the spacer height shown above the status bar while the agent runs.""" if not getattr(self, "_agent_running", False): return 0 return 0 if self._use_minimal_tui_chrome(width=width) else 1 def _spinner_widget_height(self, width: Optional[int] = None) -> int: """Return the visible height for the spinner/status text line above the status bar.""" spinner_line = self._render_spinner_text() if not spinner_line: return 0 if self._use_minimal_tui_chrome(width=width): return 0 width = width or self._get_tui_terminal_width() if width and width > 10: import math text_width = self._status_bar_display_width(spinner_line) return max(1, math.ceil(text_width / width)) return 1 def _render_spinner_text(self) -> str: """Return the live spinner/status text exactly as rendered in the TUI.""" txt = getattr(self, "_spinner_text", "") if not txt: return "" t0 = getattr(self, "_tool_start_time", 0) or 0 if t0 > 0: elapsed = time.monotonic() - t0 if elapsed >= 60: _m, _s = int(elapsed // 60), int(elapsed % 60) # Fixed-width timer to avoid status-line wrap jitter while # scrolling/repainting (e.g. 01m05s, 12m09s). elapsed_str = f"{_m:02d}m{_s:02d}s" else: # Keep width stable before the 60s rollover as well. elapsed_str = f"{elapsed:5.1f}s" return f" {txt} ({elapsed_str})" return f" {txt}" def _voice_record_key_label(self) -> str: """Return the configured voice push-to-talk key formatted for UI. Shared helper so every voice-facing status line / placeholder / recording hint advertises the SAME label as the registered prompt_toolkit binding. Cached at startup (see ``set_voice_record_key_cache``) rather than re-read per render. Two reasons (Copilot round-13 on #19835): * The prompt_toolkit binding is registered once at session start via ``@kb.add(_voice_key)``; re-reading config per render meant the status bar could advertise a new shortcut after a config edit while the actual binding was still the startup chord — exactly the display/binding drift this PR is trying to eliminate. * The label is on the hot render path (status bar + composer placeholder invalidated every 150ms during recording), so reading config on every call added avoidable UI overhead. """ return getattr(self, "_voice_record_key_display_cache", None) or "Ctrl+B" def set_voice_record_key_cache(self, raw_key: object) -> None: """Populate the voice label cache from a raw ``voice.record_key``. Called at CLI startup after the prompt_toolkit binding is registered so the cached label always matches the live binding. """ try: from hermes_cli.voice import format_voice_record_key_for_status self._voice_record_key_display_cache = format_voice_record_key_for_status(raw_key) except Exception: self._voice_record_key_display_cache = "Ctrl+B" def _get_voice_status_fragments(self, width: Optional[int] = None): """Return the voice status bar fragments for the interactive TUI.""" width = width or self._get_tui_terminal_width() compact = self._use_minimal_tui_chrome(width=width) label = self._voice_record_key_label() if self._voice_recording: if compact: return [("class:voice-status-recording", " ● REC ")] return [("class:voice-status-recording", f" ● REC {label} to stop ")] if self._voice_processing: if compact: return [("class:voice-status", " ◉ STT ")] return [("class:voice-status", " ◉ Transcribing... ")] if compact: return [("class:voice-status", f" 🎤 {label} ")] tts = " | TTS on" if self._voice_tts else "" cont = " | Continuous" if self._voice_continuous else "" return [("class:voice-status", f" 🎤 Voice mode{tts}{cont} — {label} to record ")] def _build_status_bar_text(self, width: Optional[int] = None) -> str: """Return a compact one-line session status string for the TUI footer.""" try: snapshot = self._get_status_bar_snapshot() if width is None: width = self._get_tui_terminal_width() percent = snapshot["context_percent"] percent_label = f"{percent}%" if percent is not None else "--" duration_label = snapshot["duration"] yolo_active = self._is_session_yolo_active() if width < 52: text = f"⚕ {snapshot['model_short']} · {duration_label}" if yolo_active: text += " · ⚠ YOLO" return self._trim_status_bar_text(text, width) if width < 76: parts = [f"⚕ {snapshot['model_short']}", percent_label] compressions = snapshot.get("compressions", 0) if compressions: parts.append(f"🗜️ {compressions}") bg_count = snapshot.get("active_background_tasks", 0) if bg_count: parts.append(f"▶ {bg_count}") bg_proc_count = snapshot.get("active_background_processes", 0) if bg_proc_count: parts.append(f"⚙ {bg_proc_count}") parts.append(duration_label) if yolo_active: parts.append("⚠ YOLO") return self._trim_status_bar_text(" · ".join(parts), width) if snapshot["context_length"]: ctx_total = _format_context_length(snapshot["context_length"]) ctx_used = format_token_count_compact(snapshot["context_tokens"]) context_label = f"{ctx_used}/{ctx_total}" else: context_label = "ctx --" compressions = snapshot.get("compressions", 0) parts = [f"⚕ {snapshot['model_short']}", context_label, percent_label] if compressions: parts.append(f"🗜️ {compressions}") bg_count = snapshot.get("active_background_tasks", 0) if bg_count: parts.append(f"▶ {bg_count}") bg_proc_count = snapshot.get("active_background_processes", 0) if bg_proc_count: parts.append(f"⚙ {bg_proc_count}") parts.append(duration_label) prompt_elapsed = snapshot.get("prompt_elapsed") if prompt_elapsed: parts.append(prompt_elapsed) idle_since = snapshot.get("idle_since") if idle_since: parts.append(idle_since) if yolo_active: parts.append("⚠ YOLO") return self._trim_status_bar_text(" │ ".join(parts), width) except Exception: return f"⚕ {self.model if getattr(self, 'model', None) else 'Hermes'}" def _get_status_bar_fragments(self): if not self._status_bar_visible or getattr(self, '_model_picker_state', None): return [] try: snapshot = self._get_status_bar_snapshot() # Use prompt_toolkit's own terminal width when running inside the # TUI — shutil.get_terminal_size() can return stale or fallback # values (especially on SSH) that differ from what prompt_toolkit # actually renders, causing the fragments to overflow to a second # line and produce duplicated status bar rows over long sessions. width = self._get_tui_terminal_width() duration_label = snapshot["duration"] yolo_active = self._is_session_yolo_active() if width < 52: frags = [ ("class:status-bar", " ⚕ "), ("class:status-bar-strong", snapshot["model_short"]), ("class:status-bar-dim", " · "), ("class:status-bar-dim", duration_label), ] if yolo_active: frags.append(("class:status-bar-dim", " · ")) frags.append(("class:status-bar-yolo", "⚠ YOLO")) frags.append(("class:status-bar", " ")) else: percent = snapshot["context_percent"] percent_label = f"{percent}%" if percent is not None else "--" if width < 76: compressions = snapshot.get("compressions", 0) bg_count = snapshot.get("active_background_tasks", 0) bg_proc_count = snapshot.get("active_background_processes", 0) frags = [ ("class:status-bar", " ⚕ "), ("class:status-bar-strong", snapshot["model_short"]), ("class:status-bar-dim", " · "), (self._status_bar_context_style(percent), percent_label), ] if compressions: frags.append(("class:status-bar-dim", " · ")) frags.append((self._compression_count_style(compressions), f"🗜️ {compressions}")) if bg_count: frags.append(("class:status-bar-dim", " · ")) frags.append(("class:status-bar-strong", f"▶ {bg_count}")) if bg_proc_count: frags.append(("class:status-bar-dim", " · ")) frags.append(("class:status-bar-strong", f"⚙ {bg_proc_count}")) frags.extend([ ("class:status-bar-dim", " · "), ("class:status-bar-dim", duration_label), ]) if yolo_active: frags.append(("class:status-bar-dim", " · ")) frags.append(("class:status-bar-yolo", "⚠ YOLO")) frags.append(("class:status-bar", " ")) else: if snapshot["context_length"]: ctx_total = _format_context_length(snapshot["context_length"]) ctx_used = format_token_count_compact(snapshot["context_tokens"]) context_label = f"{ctx_used}/{ctx_total}" else: context_label = "ctx --" bar_style = self._status_bar_context_style(percent) compressions = snapshot.get("compressions", 0) bg_count = snapshot.get("active_background_tasks", 0) bg_proc_count = snapshot.get("active_background_processes", 0) frags = [ ("class:status-bar", " ⚕ "), ("class:status-bar-strong", snapshot["model_short"]), ("class:status-bar-dim", " │ "), ("class:status-bar-dim", context_label), ("class:status-bar-dim", " │ "), (bar_style, self._build_context_bar(percent)), ("class:status-bar-dim", " "), (bar_style, percent_label), ] if compressions: frags.append(("class:status-bar-dim", " │ ")) frags.append((self._compression_count_style(compressions), f"🗜️ {compressions}")) if bg_count: frags.append(("class:status-bar-dim", " │ ")) frags.append(("class:status-bar-strong", f"▶ {bg_count}")) if bg_proc_count: frags.append(("class:status-bar-dim", " │ ")) frags.append(("class:status-bar-strong", f"⚙ {bg_proc_count}")) frags.extend([ ("class:status-bar-dim", " │ "), ("class:status-bar-dim", duration_label), ]) # Position 7: per-prompt elapsed timer (live or frozen) prompt_elapsed = snapshot.get("prompt_elapsed") if prompt_elapsed: frags.append(("class:status-bar-dim", " │ ")) frags.append(("class:status-bar-dim", prompt_elapsed)) # Position 8: idle time since the last final agent response idle_since = snapshot.get("idle_since") if idle_since: frags.append(("class:status-bar-dim", " │ ")) frags.append(("class:status-bar-dim", idle_since)) if yolo_active: frags.append(("class:status-bar-dim", " │ ")) frags.append(("class:status-bar-yolo", "⚠ YOLO")) frags.append(("class:status-bar", " ")) total_width = sum(self._status_bar_display_width(text) for _, text in frags) if total_width > width: plain_text = "".join(text for _, text in frags) trimmed = self._trim_status_bar_text(plain_text, width) return [("class:status-bar", trimmed)] return frags except Exception: return [("class:status-bar", f" {self._build_status_bar_text()} ")] def _normalize_model_for_provider(self, resolved_provider: str) -> bool: """Normalize provider-specific model IDs and routing.""" current_model = (self.model or "").strip() changed = False try: from hermes_cli.model_normalize import ( _AGGREGATOR_PROVIDERS, normalize_model_for_provider, ) if resolved_provider not in _AGGREGATOR_PROVIDERS: normalized_model = normalize_model_for_provider(current_model, resolved_provider) if normalized_model and normalized_model != current_model: if not self._model_is_default: self._console_print( f"[yellow]⚠️ Normalized model '{current_model}' to '{normalized_model}' for {resolved_provider}.[/]" ) self.model = normalized_model current_model = normalized_model changed = True except Exception: pass if resolved_provider == "copilot": try: from hermes_cli.models import copilot_model_api_mode, normalize_copilot_model_id canonical = normalize_copilot_model_id(current_model, api_key=self.api_key) if canonical and canonical != current_model: if not self._model_is_default: self._console_print( f"[yellow]⚠️ Normalized Copilot model '{current_model}' to '{canonical}'.[/]" ) self.model = canonical current_model = canonical changed = True resolved_mode = copilot_model_api_mode(current_model, api_key=self.api_key) if resolved_mode != self.api_mode: self.api_mode = resolved_mode changed = True except Exception: pass return changed if resolved_provider in {"opencode-zen", "opencode-go"}: try: from hermes_cli.models import normalize_opencode_model_id, opencode_model_api_mode canonical = normalize_opencode_model_id(resolved_provider, current_model) if canonical and canonical != current_model: if not self._model_is_default: self._console_print( f"[yellow]⚠️ Stripped provider prefix from '{current_model}'; using '{canonical}' for {resolved_provider}.[/]" ) self.model = canonical current_model = canonical changed = True resolved_mode = opencode_model_api_mode(resolved_provider, current_model) if resolved_mode != self.api_mode: self.api_mode = resolved_mode changed = True except Exception: pass return changed if resolved_provider != "openai-codex": return changed # 1. Strip provider prefix ("openai/gpt-5.4" → "gpt-5.4") if "/" in current_model: slug = current_model.split("/", 1)[1] if not self._model_is_default: self._console_print( f"[yellow]⚠️ Stripped provider prefix from '{current_model}'; " f"using '{slug}' for OpenAI Codex.[/]" ) self.model = slug current_model = slug changed = True # 2. Replace untouched default with a Codex model if self._model_is_default: fallback_model = "gpt-5.3-codex" try: from hermes_cli.codex_models import get_codex_model_ids available = get_codex_model_ids( access_token=self.api_key if self.api_key else None, ) if available: fallback_model = available[0] except Exception: pass if current_model != fallback_model: self.model = fallback_model changed = True return changed def _on_thinking(self, text: str) -> None: """Called by agent when thinking starts/stops. Updates TUI spinner.""" if not text: self._flush_reasoning_preview(force=True) self._spinner_text = text or "" self._tool_start_time = 0.0 # clear tool timer when switching to thinking self._invalidate() def _on_notice(self, notice) -> None: """Queue an out-of-band AgentNotice for rendering at the next clean boundary. Notices fire from inside the agent turn (cold-start seed during _init_agent, per-turn _capture_credits after the API call) — printing immediately races the streaming response and the line gets buried behind the prompt (see _cprint's bg-thread caveat). So we QUEUE here and flush in _flush_credit_notices(), called right after run_conversation returns. Fail-soft: never break the turn. """ try: text = getattr(notice, "text", "") or "" if not text: return level = getattr(notice, "level", "info") or "info" if not hasattr(self, "_pending_credit_notices"): self._pending_credit_notices = [] self._pending_credit_notices.append((level, text)) except Exception: pass def _flush_credit_notices(self) -> None: """Print any queued credit notices as level-colored lines. Called at turn end (after run_conversation) where _cprint paints cleanly above the prompt.""" try: pending = getattr(self, "_pending_credit_notices", None) if not pending: return self._pending_credit_notices = [] for level, text in pending: color = { "error": "\033[31m", "warn": "\033[33m", "success": "\033[32m", "info": _DIM, }.get(level, _DIM) _cprint(f" {color}{text}{_RST}") except Exception: pass def _on_notice_clear(self, key: str) -> None: """Notice cleared. The REPL prints lines (no persistent slot to wipe), so this drops any still-queued notice with that key is not tracked by key here; it's a no-op for rendering — kept so the agent's clear callback is bound symmetrically with the show callback (and so future REPL UIs can hook it).""" return # ── Streaming display ──────────────────────────────────────────────── def _current_reasoning_callback(self): """Return the active reasoning display callback for the current mode.""" if self.show_reasoning and self.streaming_enabled: return self._stream_reasoning_delta if self.verbose and not self.show_reasoning: return self._on_reasoning return None def _emit_reasoning_preview(self, reasoning_text: str) -> None: """Render a buffered reasoning preview as a single [thinking] block.""" preview_text = reasoning_text.strip() if not preview_text: return try: term_width = shutil.get_terminal_size().columns except Exception: term_width = 80 prefix = " [thinking] " wrap_width = max(30, term_width - len(prefix) - 2) paragraphs = [] raw_paragraphs = re.split(r"\n\s*\n+", preview_text.replace("\r\n", "\n")) for paragraph in raw_paragraphs: compact = " ".join(line.strip() for line in paragraph.splitlines() if line.strip()) if compact: paragraphs.append(textwrap.fill(compact, width=wrap_width)) preview_text = "\n".join(paragraphs) if not preview_text: return if self.verbose: _cprint(f" {_DIM}[thinking] {preview_text}{_RST}") return lines = preview_text.splitlines() if len(lines) > 5: preview = "\n".join(lines[:5]) preview += f"\n ... ({len(lines) - 5} more lines)" else: preview = preview_text _cprint(f" {_DIM}[thinking] {preview}{_RST}") def _flush_reasoning_preview(self, *, force: bool = False) -> None: """Flush buffered reasoning text at natural boundaries. Some providers stream reasoning in tiny word or punctuation chunks. Buffer them here so the preview path does not print one `[thinking]` line per token. """ buf = getattr(self, "_reasoning_preview_buf", "") if not buf: return try: term_width = shutil.get_terminal_size().columns except Exception: term_width = 80 target_width = max(40, term_width - len(" [thinking] ") - 4) flush_text = "" if force: flush_text = buf buf = "" else: line_break = buf.rfind("\n") min_newline_flush = max(16, target_width // 3) if line_break != -1 and ( line_break >= min_newline_flush or buf.endswith("\n\n") or buf.endswith(".\n") or buf.endswith("!\n") or buf.endswith("?\n") or buf.endswith(":\n") ): flush_text = buf[: line_break + 1] buf = buf[line_break + 1 :] elif len(buf) >= target_width: search_start = max(20, target_width // 2) search_end = min(len(buf), max(target_width + (target_width // 3), target_width + 8)) cut = -1 for boundary in (" ", "\t", ".", "!", "?", ",", ";", ":"): cut = max(cut, buf.rfind(boundary, search_start, search_end)) if cut != -1: flush_text = buf[: cut + 1] buf = buf[cut + 1 :] self._reasoning_preview_buf = buf.lstrip() if flush_text else buf if flush_text: self._emit_reasoning_preview(flush_text) def _format_submitted_user_message_preview(self, user_input: str) -> str: """Format the submitted user-message scrollback preview.""" ts_suffix = ( f" [dim]{datetime.now().strftime('%H:%M')}[/]" if getattr(self, "show_timestamps", False) else "" ) lines = user_input.split("\n") if len(lines) <= 1: return f"[bold {_accent_hex()}]●[/] [bold]{_escape(user_input)}[/]{ts_suffix}" first_lines = int(getattr(self, "user_message_preview_first_lines", 2)) last_lines = int(getattr(self, "user_message_preview_last_lines", 2)) first_lines = max(1, first_lines) last_lines = max(0, last_lines) head = lines[:first_lines] remaining_after_head = max(0, len(lines) - len(head)) tail_count = min(last_lines, remaining_after_head) tail = lines[-tail_count:] if tail_count else [] hidden_middle_count = len(lines) - len(head) - len(tail) if hidden_middle_count < 0: hidden_middle_count = 0 tail = [] preview_lines = [ f"[bold {_accent_hex()}]●[/] [bold]{_escape(head[0])}[/]{ts_suffix}" ] preview_lines.extend(f"[bold]{_escape(line)}[/]" for line in head[1:]) if hidden_middle_count > 0: noun = "line" if hidden_middle_count == 1 else "lines" preview_lines.append(f"[dim]... (+{hidden_middle_count} more {noun})[/]") preview_lines.extend(f"[bold]{_escape(line)}[/]" for line in tail) return "\n".join(preview_lines) def _expand_paste_references(self, text: str | None) -> str: """Expand [Pasted text #N -> file] placeholders into file contents.""" if not isinstance(text, str) or "[Pasted text #" not in text: return text or "" paste_ref_re = re.compile(r'\[Pasted text #\d+: \d+ lines \u2192 (.+?)\]') def _expand_ref(match): path = Path(match.group(1)) # Use try/except instead of path.exists() to avoid TOCTOU race: # the paste file may be deleted between check and read, causing # the input to be silently dropped (#17666). try: return path.read_text(encoding="utf-8") except (OSError, IOError): logger.warning("Paste file gone or unreadable, returning placeholder: %s", path) return match.group(0) return paste_ref_re.sub(_expand_ref, text) def _print_user_message_preview(self, user_input: str) -> None: """Render a user message using the normal chat scrollback style.""" ChatConsole().print(f"[{_accent_hex()}]{'─' * 40}[/]") text = str(user_input or "") if "\n" in text: ChatConsole().print(self._format_submitted_user_message_preview(text)) else: ChatConsole().print(f"[bold {_accent_hex()}]●[/] [bold]{_escape(text)}[/]") def _stream_reasoning_delta(self, text: str) -> None: """Stream reasoning/thinking tokens into a dim box above the response. Opens a dim reasoning box on first token, streams line-by-line. The box is closed automatically when content tokens start arriving (via _stream_delta → _emit_stream_text). Once the response box is open, suppress any further reasoning rendering — a late thinking block (e.g. after an interrupt) would otherwise draw a reasoning box inside the response box. """ if not text: return self._reasoning_shown_this_turn = True if getattr(self, "_stream_box_opened", False): return # Open reasoning box on first reasoning token if not getattr(self, "_reasoning_box_opened", False): self._reasoning_box_opened = True w = self._scrollback_box_width() r_label = " Reasoning " r_fill = w - 2 - len(r_label) _cprint(f"\n{_DIM}┌─{r_label}{'─' * max(r_fill - 1, 0)}┐{_RST}") self._reasoning_buf = getattr(self, "_reasoning_buf", "") + text # Emit complete lines, and force-flush long partial lines so # reasoning is visible in real-time even without newlines. while "\n" in self._reasoning_buf: line, self._reasoning_buf = self._reasoning_buf.split("\n", 1) _cprint(f"{_DIM}{line}{_RST}") if len(self._reasoning_buf) > 80: _cprint(f"{_DIM}{self._reasoning_buf}{_RST}") self._reasoning_buf = "" def _close_reasoning_box(self) -> None: """Close the live reasoning box if it's open.""" if getattr(self, "_reasoning_box_opened", False): # Flush remaining reasoning buffer buf = getattr(self, "_reasoning_buf", "") if buf: _cprint(f"{_DIM}{buf}{_RST}") self._reasoning_buf = "" w = self._scrollback_box_width() _cprint(f"{_DIM}└{'─' * (w - 2)}┘{_RST}") self._reasoning_box_opened = False # Flush any content that was deferred while reasoning was rendering. deferred = getattr(self, "_deferred_content", "") if deferred: self._deferred_content = "" self._emit_stream_text(deferred) def _stream_delta(self, text) -> None: """Line-buffered streaming callback for real-time token rendering. Receives text deltas from the agent as tokens arrive. Buffers partial lines and emits complete lines via _cprint to work reliably with prompt_toolkit's patch_stdout. Reasoning/thinking blocks (, , etc.) are suppressed during streaming since they'd display raw XML tags. The agent strips them from the final response anyway. A ``None`` value signals an intermediate turn boundary (tools are about to execute). Flushes any open boxes and resets state so tool feed lines render cleanly between turns. """ if text is None: self._flush_stream() self._reset_stream_state() return if not text: return self._stream_started = True # ── Tag-based reasoning suppression ── # Track whether we're inside a reasoning/thinking block. # These tags are model-generated (system prompt tells the model # to use them) and get stripped from final_response. We must # suppress them during streaming too — unless show_reasoning is # enabled, in which case we route the inner content to the # reasoning display box instead of discarding it. _OPEN_TAGS = ("", "", "", "", "", "") _CLOSE_TAGS = ("", "", "", "", "", "") # Append to a pre-filter buffer first self._stream_prefilt = getattr(self, "_stream_prefilt", "") + text # Check if we're entering a reasoning block. # Only match tags that appear at a "block boundary": start of the # stream, after a newline (with optional whitespace), or when nothing # but whitespace has been emitted on the current line. # This prevents false positives when models *mention* tags in prose # like "(/think not producing tags)". # # _stream_last_was_newline tracks whether the last character emitted # (or the start of the stream) is a line boundary. It's True at # stream start and set True whenever emitted text ends with '\n'. if not hasattr(self, "_stream_last_was_newline"): self._stream_last_was_newline = True # start of stream = boundary if not getattr(self, "_in_reasoning_block", False): for tag in _OPEN_TAGS: search_start = 0 while True: idx = self._stream_prefilt.find(tag, search_start) if idx == -1: break # Check if this is a block boundary position preceding = self._stream_prefilt[:idx] if idx == 0: # At buffer start — only a boundary if we're at # a line start (stream start or last emit ended # with newline) is_block_boundary = getattr(self, "_stream_last_was_newline", True) else: # Find last newline in the buffer before the tag last_nl = preceding.rfind("\n") if last_nl == -1: # No newline in buffer — boundary only if # last emit was a newline AND only whitespace # has accumulated before the tag is_block_boundary = ( getattr(self, "_stream_last_was_newline", True) and preceding.strip() == "" ) else: # Text between last newline and tag must be # whitespace-only is_block_boundary = preceding[last_nl + 1:].strip() == "" if is_block_boundary: # Emit everything before the tag if preceding: self._emit_stream_text(preceding) self._stream_last_was_newline = preceding.endswith("\n") self._in_reasoning_block = True self._stream_prefilt = self._stream_prefilt[idx + len(tag):] break # Not a block boundary — keep searching after this occurrence search_start = idx + 1 if getattr(self, "_in_reasoning_block", False): break # Could also be a partial open tag at the end — hold it back if not getattr(self, "_in_reasoning_block", False): # Check for partial tag match at the end safe = self._stream_prefilt for tag in _OPEN_TAGS: for i in range(1, len(tag)): if self._stream_prefilt.endswith(tag[:i]): safe = self._stream_prefilt[:-i] break if safe: self._emit_stream_text(safe) self._stream_last_was_newline = safe.endswith("\n") self._stream_prefilt = self._stream_prefilt[len(safe):] return # Inside a reasoning block — look for close tag. # Keep accumulating _stream_prefilt because close tags can arrive # split across multiple tokens (e.g. "..."). if getattr(self, "_in_reasoning_block", False): for tag in _CLOSE_TAGS: idx = self._stream_prefilt.find(tag) if idx != -1: self._in_reasoning_block = False # When show_reasoning is on, route inner content to # the reasoning display box instead of discarding. if self.show_reasoning: inner = self._stream_prefilt[:idx] if inner: self._stream_reasoning_delta(inner) after = self._stream_prefilt[idx + len(tag):] self._stream_prefilt = "" # Process remaining text after close tag through full # filtering (it could contain another open tag) if after: self._stream_delta(after) return # When show_reasoning is on, stream reasoning content live # instead of silently accumulating. Keep only the tail that # could be a partial close tag prefix. max_tag_len = max(len(t) for t in _CLOSE_TAGS) if len(self._stream_prefilt) > max_tag_len: if self.show_reasoning: # Route the safe prefix to reasoning display safe_reasoning = self._stream_prefilt[:-max_tag_len] self._stream_reasoning_delta(safe_reasoning) self._stream_prefilt = self._stream_prefilt[-max_tag_len:] return def _emit_stream_text(self, text: str) -> None: """Emit filtered text to the streaming display.""" if not text: return # When show_reasoning is on and reasoning is still rendering, # defer content until the reasoning box closes. This ensures the # reasoning block always appears BEFORE the response in the terminal. if self.show_reasoning and getattr(self, "_reasoning_box_opened", False): self._deferred_content = getattr(self, "_deferred_content", "") + text return # Close the live reasoning box before opening the response box self._close_reasoning_box() # Open the response box header on the very first visible text if not self._stream_box_opened: # Strip leading whitespace/newlines before first visible content text = text.lstrip("\n") if not text: return self._stream_box_opened = True try: from hermes_cli.skin_engine import get_active_skin _skin = get_active_skin() label = _skin.get_branding("response_label", "⚕ Hermes") _text_hex = _skin.get_color("banner_text", "#FFF8DC") except Exception: label = "⚕ Hermes" _text_hex = "#FFF8DC" # Build a true-color ANSI escape for the response text color # so streamed content matches the Rich Panel appearance. try: _r = int(_text_hex[1:3], 16) _g = int(_text_hex[3:5], 16) _b = int(_text_hex[5:7], 16) self._stream_text_ansi = f"\033[38;2;{_r};{_g};{_b}m" except (ValueError, IndexError): self._stream_text_ansi = "" if self.show_timestamps: label = f"{label} {datetime.now().strftime('%H:%M')}" w = self._scrollback_box_width() fill = w - 2 - HermesCLI._status_bar_display_width(label) _cprint(f"\n{_ACCENT}╭─{label}{'─' * max(fill - 1, 0)}╮{_RST}") self._stream_buf += text # Emit complete lines, keep partial remainder in buffer _tc = getattr(self, "_stream_text_ansi", "") def _emit_one(printed_line: str) -> None: _cprint(f"{_STREAM_PAD}{_tc}{printed_line}{_RST}" if _tc else f"{_STREAM_PAD}{printed_line}") def _flush_table_buf() -> None: buf = self._stream_table_buf self._stream_table_buf = [] self._in_stream_table = False if not buf: return # Strip cell-level markdown (`code`, **bold**, ~~strike~~) FIRST # so the realigner pads to the final visible cell width, not # the marker-decorated source width. Otherwise a body row # like `` | Bold | `**bold**` | `` lands narrower than its # header column once the markers are removed. joined = "\n".join(buf) if self.final_response_markdown == "strip": joined = _strip_markdown_syntax(joined) block = realign_markdown_tables(joined, _terminal_width_for_streaming()) for ln in block.split("\n"): _emit_one(ln) while "\n" in self._stream_buf: line, self._stream_buf = self._stream_buf.split("\n", 1) # Hold table-shaped lines in a side-buffer so we can re-pad # the whole block once it ends. Streaming line-by-line, we # cannot re-align mid-table without reflowing already-printed # rows; the cost is that the user sees the table appear in a # single batch when the block closes instead of row-by-row. if self._in_stream_table: if looks_like_table_row(line) or is_table_divider(line): self._stream_table_buf.append(line) continue # Block ended — flush the realigned table, then fall # through to print the current (non-table) line. _flush_table_buf() elif looks_like_table_row(line): self._stream_table_buf.append(line) self._in_stream_table = True continue if self.final_response_markdown == "strip": line = _strip_markdown_syntax(line) _emit_one(line) def _flush_stream(self) -> None: """Emit any remaining partial line from the stream buffer and close the box.""" # If we're still inside a "reasoning block" at end-of-stream, it was # a false positive — the model mentioned a tag like in prose # but never closed it. Recover the buffered content as regular text. if getattr(self, "_in_reasoning_block", False) and getattr(self, "_stream_prefilt", ""): self._in_reasoning_block = False self._emit_stream_text(self._stream_prefilt) self._stream_prefilt = "" # Close reasoning box if still open (in case no content tokens arrived) self._close_reasoning_box() _tc = getattr(self, "_stream_text_ansi", "") # If the stream buffer has a trailing partial line that looks like # a table row, fold it into the table buffer so the whole block # gets re-aligned together. Otherwise the final row prints raw # (with the model's original under-padded spacing) while the rows # above it are aligned. if ( self._stream_buf and getattr(self, "_in_stream_table", False) and (looks_like_table_row(self._stream_buf) or is_table_divider(self._stream_buf)) ): self._stream_table_buf.append(self._stream_buf) self._stream_buf = "" # Flush any buffered table rows first so their padding is # finalised before the stream remainder lands. if getattr(self, "_stream_table_buf", None): joined = "\n".join(self._stream_table_buf) self._stream_table_buf = [] self._in_stream_table = False if self.final_response_markdown == "strip": joined = _strip_markdown_syntax(joined) block = realign_markdown_tables(joined, _terminal_width_for_streaming()) for ln in block.split("\n"): _cprint(f"{_STREAM_PAD}{_tc}{ln}{_RST}" if _tc else f"{_STREAM_PAD}{ln}") if self._stream_buf: line = _strip_markdown_syntax(self._stream_buf) if self.final_response_markdown == "strip" else self._stream_buf _cprint(f"{_STREAM_PAD}{_tc}{line}{_RST}" if _tc else f"{_STREAM_PAD}{line}") self._stream_buf = "" # Close the response box if self._stream_box_opened: w = self._scrollback_box_width() _cprint(f"{_ACCENT}╰{'─' * (w - 2)}╯{_RST}") def _reset_stream_state(self) -> None: """Reset streaming state before each agent invocation.""" self._stream_buf = "" self._stream_started = False self._stream_box_opened = False self._stream_text_ansi = "" self._stream_prefilt = "" self._in_reasoning_block = False self._stream_last_was_newline = True self._reasoning_box_opened = False self._reasoning_buf = "" self._reasoning_preview_buf = "" self._deferred_content = "" self._stream_table_buf = [] self._in_stream_table = False def _slow_command_status(self, command: str) -> str: """Return a user-facing status message for slower slash commands.""" cmd_lower = command.lower().strip() if cmd_lower.startswith("/skills search"): return "Searching skills..." if cmd_lower.startswith("/skills browse"): return "Loading skills..." if cmd_lower.startswith("/skills inspect"): return "Inspecting skill..." if cmd_lower.startswith("/skills install"): return "Installing skill..." if cmd_lower.startswith("/skills"): return "Processing skills command..." if cmd_lower == "/reload-mcp": return "Reloading MCP servers..." if cmd_lower == "/reload-skills" or cmd_lower == "/reload_skills": return "Reloading skills..." if cmd_lower.startswith("/browser"): return "Configuring browser..." return "Processing command..." def _command_spinner_frame(self) -> str: """Return the current spinner frame for slow slash commands.""" frame_idx = int(time.monotonic() * 10) % len(_COMMAND_SPINNER_FRAMES) return _COMMAND_SPINNER_FRAMES[frame_idx] @contextmanager def _busy_command(self, status: str): """Expose a temporary busy state in the TUI while a slash command runs.""" self._command_running = True self._command_status = status self._invalidate(min_interval=0.0) try: print(f"⏳ {status}") yield finally: self._command_running = False self._command_status = "" self._invalidate(min_interval=0.0) def _open_external_editor(self, buffer=None) -> bool: """Open the active input buffer in an external editor.""" app = getattr(self, "_app", None) if not app: _cprint(f"{_DIM}External editor is only available inside the interactive CLI.{_RST}") return False if self._command_running: _cprint(f"{_DIM}Wait for the current command to finish before opening the editor.{_RST}") return False if self._sudo_state or self._secret_state or self._approval_state or getattr(self, "_slash_confirm_state", None) or self._clarify_state: _cprint(f"{_DIM}Finish the active prompt before opening the editor.{_RST}") return False target_buffer = buffer or getattr(app, "current_buffer", None) if target_buffer is None: _cprint(f"{_DIM}No active input buffer is available for the external editor.{_RST}") return False try: existing_text = getattr(target_buffer, "text", "") expanded_text = self._expand_paste_references(existing_text) if expanded_text != existing_text and hasattr(target_buffer, "text"): self._skip_paste_collapse = True target_buffer.text = expanded_text if hasattr(target_buffer, "cursor_position"): target_buffer.cursor_position = len(expanded_text) # Set skip flag (again) so the text-change event fired when the # editor closes does not re-collapse the returned content. self._skip_paste_collapse = True target_buffer.open_in_editor(validate_and_handle=False) return True except Exception as exc: _cprint(f"{_DIM}Failed to open external editor: {exc}{_RST}") return False def _install_tool_callbacks(self) -> None: """Install tool callbacks that need the live prompt UI.""" if getattr(self, "_tool_callbacks_installed", False): return set_sudo_password_callback(self._sudo_password_callback) set_approval_callback(self._approval_callback) set_secret_capture_callback(self._secret_capture_callback) try: from tools.computer_use_tool import set_approval_callback as _set_cu_cb _set_cu_cb(self._computer_use_approval_callback) except ImportError: pass self._tool_callbacks_installed = True def _ensure_tirith_security(self) -> None: """Check tirith availability once before tools can run terminal commands.""" if getattr(self, "_tirith_security_checked", False): return self._tirith_security_checked = True try: from tools.tirith_security import ensure_installed, is_platform_supported tirith_path = ensure_installed(log_failures=False) if tirith_path is None and is_platform_supported(): security_cfg = self.config.get("security", {}) or {} tirith_enabled = security_cfg.get("tirith_enabled", True) if tirith_enabled: _cprint( f" {_DIM}⚠ tirith security scanner enabled but not available " f"— command scanning will use pattern matching only{_RST}" ) except Exception: pass def _show_security_advisories(self): """Show a startup banner if any unacked security advisories match. Renders a single bold-red box on stderr (so piped stdout remains clean) listing the worst hit and pointing at ``hermes doctor``. Banner-cache rate-limits this to once per 24h per advisory; full remediation lives behind ``hermes doctor`` so the banner stays small. """ try: from hermes_cli.security_advisories import ( detect_compromised, startup_banner, ) hits = detect_compromised() banner = startup_banner(hits) if banner: # Print to stderr — keeps stdout clean for piped automation, # and Rich's banner rendering already wrote to stdout above. print(banner, file=sys.stderr, flush=True) except Exception: # Never let the security banner block startup. Failures are # logged at DEBUG by the advisory module. pass def show_banner(self): """Display the welcome banner in Claude Code style.""" self.console.clear() ctx_len = None if hasattr(self, 'agent') and self.agent and hasattr(self.agent, 'context_compressor'): ctx_len = self.agent.context_compressor.context_length # Auto-compact for narrow terminals — the full banner with caduceus # + tool list needs ~80 columns minimum to render without wrapping. term_width = shutil.get_terminal_size().columns use_compact = self.compact or term_width < 80 if use_compact: self._console_print(_build_compact_banner()) self._show_status() else: # Get tools for display tools = get_tool_definitions(enabled_toolsets=self.enabled_toolsets, quiet_mode=True) # Get terminal working directory (where commands will execute) cwd = os.getenv("TERMINAL_CWD", os.getcwd()) # Build and display the banner build_welcome_banner( console=self.console, model=self.model, cwd=cwd, tools=tools, enabled_toolsets=self.enabled_toolsets, session_id=self.session_id, context_length=ctx_len, ) # Tool discovery is intentionally deferred on the Termux bare prompt # path; availability warnings are shown once tools are initialized. if os.environ.get("HERMES_DEFER_AGENT_STARTUP") != "1": self._show_tool_availability_warnings() # Warn about low context lengths (common with local servers). Keep # this tied to the runtime guard so guidance cannot drift again. from agent.model_metadata import MINIMUM_CONTEXT_LENGTH if ctx_len and ctx_len < MINIMUM_CONTEXT_LENGTH: self._console_print() self._console_print( f"[yellow]⚠️ Context length is only {ctx_len:,} tokens — " f"this is likely too low for agent use with tools.[/]" ) self._console_print( f"[dim] Hermes needs at least {MINIMUM_CONTEXT_LENGTH:,} tokens. Tool schemas + system prompt use a large fixed prefix.[/]" ) base_url = getattr(self, "base_url", "") or "" if "11434" in base_url or "ollama" in base_url.lower(): self._console_print( f"[dim] Ollama fix: OLLAMA_CONTEXT_LENGTH={MINIMUM_CONTEXT_LENGTH} ollama serve[/]" ) elif "1234" in base_url: self._console_print( "[dim] LM Studio fix: Set context length in model settings → reload model[/]" ) else: self._console_print( "[dim] Fix: Set model.context_length in config.yaml, or increase your server's context setting[/]" ) # Warn if the configured model is a Nous Hermes LLM (not agentic) from hermes_cli.model_switch import is_nous_hermes_non_agentic model_name = getattr(self, "model", "") or "" if is_nous_hermes_non_agentic(model_name): self._console_print() self._console_print( "[bold yellow]⚠ Nous Research Hermes 3 & 4 models are NOT agentic and are not " "designed for use with Hermes Agent.[/]" ) self._console_print( "[dim] They lack tool-calling capabilities required for agent workflows. " "Consider using an agentic model (Claude, GPT, Gemini, DeepSeek, etc.).[/]" ) self._console_print( "[dim] Switch with: /model sonnet or /model gpt5[/]" ) self._console_print() def _restore_session_cwd(self, session_meta: dict, *, quiet: bool = False) -> None: """Relaunch a resumed session in the directory it was started from. Idempotent and safe to call from every resume path. When the stored ``cwd`` differs from the current process directory, we both ``os.chdir()`` (so the process and any ``os.getcwd()`` fallback agree) and retarget ``TERMINAL_CWD`` (so the terminal tool, code-exec tool, and relative-path resolution all land in the same place — the local terminal backend snapshots cwd on first use, which happens after this). No-ops when: the session recorded no cwd (gateway/remote/older sessions), the directory no longer exists, or we're already there. A missing directory degrades to a single dim warning rather than a crash — repos get moved and deleted. """ recorded = (session_meta or {}).get("cwd") if not recorded: return recorded = os.path.expanduser(str(recorded)) try: current = os.getcwd() except OSError: current = None if current and os.path.realpath(recorded) == os.path.realpath(current): return # Already where the session lived — nothing to announce. if not os.path.isdir(recorded): msg = f"⚠ Session's working directory is gone: {recorded} — staying in {current or '.'}" if quiet: print(msg, file=sys.stderr) else: self._console_print(f"[dim]{_escape(msg)}[/dim]") return try: os.chdir(recorded) except OSError as e: msg = f"⚠ Could not enter session's working directory {recorded}: {e}" if quiet: print(msg, file=sys.stderr) else: self._console_print(f"[dim]{_escape(msg)}[/dim]") return # Retarget the terminal/code-exec tools to match the process cwd. os.environ["TERMINAL_CWD"] = recorded msg = f"↻ Working directory: {recorded}" if quiet: print(msg, file=sys.stderr) else: self._console_print(f"[dim]{_escape(msg)}[/dim]") def _render_resume_history_panel_lines(self, panel) -> list[str]: """Render the resume panel at the current terminal width for resize replay.""" from io import StringIO buf = StringIO() width = shutil.get_terminal_size((80, 24)).columns console = Console( file=buf, force_terminal=True, color_system="truecolor", highlight=False, width=width, ) with _suspend_output_history(): console.print(panel) return buf.getvalue().rstrip("\n").splitlines() def _try_attach_clipboard_image(self) -> bool: """Check clipboard for an image and attach it if found. Saves the image to ~/.hermes/images/ and appends the path to ``_attached_images``. Returns True if an image was attached. """ from hermes_cli.clipboard import save_clipboard_image img_dir = get_hermes_home() / "images" self._image_counter += 1 ts = datetime.now().strftime("%Y%m%d_%H%M%S") img_path = img_dir / f"clip_{ts}_{self._image_counter}.png" if save_clipboard_image(img_path): self._attached_images.append(img_path) return True self._image_counter -= 1 return False def _resolve_checkpoint_ref(self, ref: str, checkpoints: list) -> str | None: """Resolve a checkpoint number or hash to a full commit hash.""" try: idx = int(ref) - 1 # 1-indexed for user if 0 <= idx < len(checkpoints): return checkpoints[idx]["hash"] else: print(f" Invalid checkpoint number. Use 1-{len(checkpoints)}.") return None except ValueError: # Treat as a git hash return ref def _write_osc52_clipboard(self, text: str) -> None: """Copy *text* to terminal clipboard via OSC 52.""" payload = base64.b64encode(text.encode("utf-8")).decode("ascii") seq = f"\x1b]52;c;{payload}\x07" out = getattr(self, "_app", None) output = getattr(out, "output", None) if out else None if output and hasattr(output, "write_raw"): output.write_raw(seq) output.flush() return if output and hasattr(output, "write"): output.write(seq) output.flush() return sys.stdout.write(seq) sys.stdout.flush() def _recover_terminal_input_modes(self, *, reason: str) -> None: """Best-effort reset when leaked mouse reports indicate mode drift.""" now = time.monotonic() # Rate-limit to avoid thrashing if a terminal floods reports. if now - self._last_input_mode_recovery < 0.5: return self._last_input_mode_recovery = now out = getattr(self, "_app", None) output = getattr(out, "output", None) if out else None try: if output and hasattr(output, "write_raw"): output.write_raw(_TERMINAL_INPUT_MODE_RESET_SEQ) output.flush() elif output and hasattr(output, "write"): output.write(_TERMINAL_INPUT_MODE_RESET_SEQ) output.flush() else: sys.stdout.write(_TERMINAL_INPUT_MODE_RESET_SEQ) sys.stdout.flush() except Exception: return logger.warning("Recovered terminal input modes after leak: %s", reason) if not self._input_mode_recovery_notice_shown: self._input_mode_recovery_notice_shown = True _cprint( f" {_DIM}Recovered terminal input modes after leaked mouse reports. " f"If this repeats, run /new or restart this tab.{_RST}" ) def _preprocess_images_with_vision(self, text: str, images: list, *, announce: bool = True) -> str: """Analyze attached images via the vision tool and return enriched text. Instead of embedding raw base64 ``image_url`` content parts in the conversation (which only works with vision-capable models), this pre-processes each image through the auxiliary vision model (Gemini Flash) and prepends the descriptions to the user's message — the same approach the messaging gateway uses. The local file path is included so the agent can re-examine the image later with ``vision_analyze`` if needed. """ import asyncio as _asyncio from tools.vision_tools import vision_analyze_tool analysis_prompt = ( "Describe everything visible in this image in thorough detail. " "Include any text, code, data, objects, people, layout, colors, " "and any other notable visual information." ) enriched_parts = [] for img_path in images: if not img_path.exists(): continue size_kb = img_path.stat().st_size // 1024 if announce: _cprint(f" {_DIM}👁️ analyzing {img_path.name} ({size_kb}KB)...{_RST}") try: result_json = _asyncio.run( vision_analyze_tool(image_url=str(img_path), user_prompt=analysis_prompt) ) result = json.loads(result_json) if result.get("success"): description = result.get("analysis", "") enriched_parts.append( f"[The user attached an image. Here's what it contains:\n{description}]\n" f"[If you need a closer look, use vision_analyze with " f"image_url: {img_path}]" ) if announce: _cprint(f" {_DIM}✓ image analyzed{_RST}") else: enriched_parts.append( f"[The user attached an image but it couldn't be analyzed. " f"You can try examining it with vision_analyze using " f"image_url: {img_path}]" ) if announce: _cprint(f" {_DIM}⚠ vision analysis failed — path included for retry{_RST}") except Exception as e: enriched_parts.append( f"[The user attached an image but analysis failed ({e}). " f"You can try examining it with vision_analyze using " f"image_url: {img_path}]" ) if announce: _cprint(f" {_DIM}⚠ vision analysis error — path included for retry{_RST}") # Combine: vision descriptions first, then the user's original text user_text = text if isinstance(text, str) and text else "" if enriched_parts: prefix = "\n\n".join(enriched_parts) return f"{prefix}\n\n{user_text}" if user_text else prefix return user_text or "What do you see in this image?" def _show_tool_availability_warnings(self): """Show warnings about disabled tools due to missing API keys.""" try: from model_tools import check_tool_availability available, unavailable = check_tool_availability() # Filter to only those missing API keys (not system deps) api_key_missing = [u for u in unavailable if u["missing_vars"]] if api_key_missing: self._console_print() self._console_print("[yellow]⚠️ Some tools disabled (missing API keys):[/]") for item in api_key_missing: tools_str = ", ".join(item["tools"][:2]) # Show first 2 tools if len(item["tools"]) > 2: tools_str += f", +{len(item['tools'])-2} more" self._console_print(f" [dim]• {item['name']}[/] [dim italic]({', '.join(item['missing_vars'])})[/]") self._console_print("[dim] Run 'hermes setup' to configure[/]") except Exception: pass # Don't crash on import errors def _show_status(self): """Show compact startup status line.""" # Avoid pulling the full tool registry into the bare Termux prompt path. if os.environ.get("HERMES_DEFER_AGENT_STARTUP") == "1": tool_status = "tools deferred" else: tools = get_tool_definitions(enabled_toolsets=self.enabled_toolsets, quiet_mode=True) tool_count = len(tools) if tools else 0 tool_status = f"{tool_count} tools" # Format model name (shorten if needed) model_short = self.model.split("/")[-1] if "/" in self.model else self.model if len(model_short) > 30: model_short = model_short[:27] + "..." # Get API status indicator if self.api_key: api_indicator = "[green bold]●[/]" else: api_indicator = "[red bold]●[/]" # Build status line with proper markup — skin-aware colors try: from hermes_cli.skin_engine import get_active_skin skin = get_active_skin() separator_color = skin.get_color("banner_dim", "#B8860B") accent_color = skin.get_color("ui_accent", "#FFBF00") label_color = skin.get_color("ui_label", "#DAA520") except Exception: separator_color, accent_color, label_color = "#B8860B", "#FFBF00", "cyan" toolsets_info = "" if self.enabled_toolsets and "all" not in self.enabled_toolsets: toolsets_info = f" [dim {separator_color}]·[/] [{label_color}]toolsets: {', '.join(self.enabled_toolsets)}[/]" provider_info = f" [dim {separator_color}]·[/] [dim]provider: {self.provider}[/]" if self._provider_source: provider_info += f" [dim {separator_color}]·[/] [dim]auth: {self._provider_source}[/]" self._console_print( f" {api_indicator} [{accent_color}]{model_short}[/] " f"[dim {separator_color}]·[/] [bold {label_color}]{tool_status}[/]" f"{toolsets_info}{provider_info}" ) def _show_session_status(self): """Show gateway-style status for the current CLI session.""" session_meta = {} if self._session_db: try: session_meta = self._session_db.get_session(self.session_id) or {} except Exception: session_meta = {} title = (session_meta.get("title") or "").strip() created_at = self.session_start started_at = session_meta.get("started_at") if started_at: try: created_at = datetime.fromtimestamp(float(started_at)) except Exception: created_at = self.session_start updated_at = created_at for field in ("updated_at", "last_updated_at", "last_activity_at"): value = session_meta.get(field) if not value: continue try: updated_at = datetime.fromtimestamp(float(value)) break except Exception: pass agent = getattr(self, "agent", None) total_tokens = getattr(agent, "session_total_tokens", 0) or 0 provider = getattr(self, "provider", None) or "unknown" model = getattr(self, "model", None) or "(unknown)" is_running = bool(getattr(self, "_agent_running", False)) lines = [ "Hermes CLI Status", "", f"Session ID: {self.session_id}", f"Path: {display_hermes_home()}", ] if title: lines.append(f"Title: {title}") lines.extend([ f"Model: {model} ({provider})", f"Created: {created_at.strftime('%Y-%m-%d %H:%M')}", f"Last Activity: {updated_at.strftime('%Y-%m-%d %H:%M')}", f"Tokens: {total_tokens:,}", f"Agent Running: {'Yes' if is_running else 'No'}", ]) self._console_print("\n".join(lines), highlight=False, markup=False) def _fast_command_available(self) -> bool: try: from hermes_cli.models import model_supports_fast_mode except Exception: return False agent = getattr(self, "agent", None) model = getattr(agent, "model", None) or getattr(self, "model", None) return model_supports_fast_mode(model) def _command_available(self, slash_command: str) -> bool: if slash_command == "/fast": return self._fast_command_available() return True def show_help(self): """Display help information with categorized commands.""" from hermes_cli.commands import COMMANDS_BY_CATEGORY try: from hermes_cli.skin_engine import get_active_help_header header = get_active_help_header("(^_^)? Available Commands") except Exception: header = "(^_^)? Available Commands" header = (header or "").strip() or "(^_^)? Available Commands" inner_width = 55 if len(header) > inner_width: header = header[:inner_width] _cprint(f"\n{_BOLD}+{'-' * inner_width}+{_RST}") _cprint(f"{_BOLD}|{header:^{inner_width}}|{_RST}") _cprint(f"{_BOLD}+{'-' * inner_width}+{_RST}") for category, commands in COMMANDS_BY_CATEGORY.items(): _cprint(f"\n {_BOLD}── {category} ──{_RST}") for cmd, desc in commands.items(): if not self._command_available(cmd): continue ChatConsole().print(f" [bold {_accent_hex()}]{cmd:<15}[/] [dim]-[/] {_escape(desc)}") skill_commands = _ensure_skill_commands() if skill_commands: _cprint(f"\n ⚡ {_BOLD}Skill Commands{_RST} ({len(skill_commands)} installed):") for cmd, info in sorted(skill_commands.items()): ChatConsole().print( f" [bold {_accent_hex()}]{cmd:<22}[/] [dim]-[/] {_escape(info['description'])}" ) _bundles_now = get_skill_bundles() if _bundles_now: _cprint(f"\n ▣ {_BOLD}Skill Bundles{_RST} ({len(_bundles_now)} installed):") for cmd, info in sorted(_bundles_now.items()): skill_count = len(info.get("skills", [])) desc = info.get("description") or f"Load {skill_count} skills" ChatConsole().print( f" [bold {_accent_hex()}]{cmd:<22}[/] [dim]-[/] " f"{_escape(desc)} [dim]({skill_count} skills)[/]" ) quick_commands = self.config.get("quick_commands", {}) if quick_commands: _cprint(f"\n ⚡ {_BOLD}Quick Commands{_RST} ({len(quick_commands)} configured):") for name, qcmd in sorted(quick_commands.items()): desc = qcmd.get("description", qcmd.get("type", "")) ChatConsole().print( f" [bold {_accent_hex()}]{('/' + name):<22}[/] [dim]-[/] {_escape(desc)}" ) _cprint(f"\n {_DIM}Tip: Just type your message to chat with Hermes!{_RST}") _cprint(f" {_DIM}Multi-line: Alt+Enter for a new line{_RST}") _cprint(f" {_DIM}Draft editor: Ctrl+G (Alt+G in VSCode/Cursor){_RST}") if _is_termux_environment(): _cprint(f" {_DIM}Attach image: /image {_termux_example_image_path()} or start your prompt with a local image path{_RST}\n") else: _cprint(f" {_DIM}Paste image: Alt+V (or /paste){_RST}\n") def show_tools(self): """Display available tools with kawaii ASCII art.""" tools = get_tool_definitions(enabled_toolsets=self.enabled_toolsets, quiet_mode=True) if not tools: print("(;_;) No tools available") return # Header print() title = "(^_^)/ Available Tools" width = 78 pad = width - len(title) print("+" + "-" * width + "+") print("|" + " " * (pad // 2) + title + " " * (pad - pad // 2) + "|") print("+" + "-" * width + "+") print() # Group tools by toolset toolsets = {} for tool in sorted(tools, key=lambda t: t["function"]["name"]): name = tool["function"]["name"] toolset = get_toolset_for_tool(name) or "unknown" if toolset not in toolsets: toolsets[toolset] = [] desc = tool["function"].get("description", "") # First sentence: split on ". " (period+space) to avoid breaking on "e.g." or "v2.0" desc = desc.split("\n")[0] if ". " in desc: desc = desc[:desc.index(". ") + 1] toolsets[toolset].append((name, desc)) # Display by toolset for toolset in sorted(toolsets.keys()): print(f" [{toolset}]") for name, desc in toolsets[toolset]: print(f" * {name:<20} - {desc}") print() print(f" Total: {len(tools)} tools ヽ(^o^)ノ") print() def show_toolsets(self): """Display available toolsets with kawaii ASCII art.""" all_toolsets = get_all_toolsets() # Header print() title = "(^_^)b Available Toolsets" width = 58 pad = width - len(title) print("+" + "-" * width + "+") print("|" + " " * (pad // 2) + title + " " * (pad - pad // 2) + "|") print("+" + "-" * width + "+") print() for name in sorted(all_toolsets.keys()): info = get_toolset_info(name) if info: tool_count = info["tool_count"] desc = info["description"] # Mark if currently enabled marker = "(*)" if self.enabled_toolsets and name in self.enabled_toolsets else " " print(f" {marker} {name:<18} [{tool_count:>2} tools] - {desc}") print() print(" (*) = currently enabled") print() print(" Tip: Use 'all' or '*' to enable all toolsets") print(" Example: python cli.py --toolsets web,terminal") print() def show_config(self): """Display current configuration with kawaii ASCII art.""" # Get terminal config from environment (which was set from cli-config.yaml) terminal_env = os.getenv("TERMINAL_ENV", "local") terminal_cwd = os.getenv("TERMINAL_CWD", os.getcwd()) terminal_timeout = os.getenv("TERMINAL_TIMEOUT", "60") user_config_path = _hermes_home / 'config.yaml' project_config_path = Path(__file__).parent / 'cli-config.yaml' if user_config_path.exists(): config_path = user_config_path else: config_path = project_config_path config_status = "(loaded)" if config_path.exists() else "(not found)" # ``self.api_key`` may be a callable (Azure Foundry Entra ID bearer # provider). Never invoke it; just identify the auth surface. from agent.azure_identity_adapter import is_token_provider if is_token_provider(self.api_key): api_key_display = "Microsoft Entra ID" elif isinstance(self.api_key, str) and len(self.api_key) > 12: api_key_display = f"{self.api_key[:8]}...{self.api_key[-4:]}" else: api_key_display = "Not set!" print() title = "(^_^) Configuration" width = 50 pad = width - len(title) print("+" + "-" * width + "+") print("|" + " " * (pad // 2) + title + " " * (pad - pad // 2) + "|") print("+" + "-" * width + "+") print() print(" -- Model --") print(f" Model: {self.model}") print(f" Base URL: {self.base_url}") print(f" API Key: {api_key_display}") print() print(" -- Terminal --") print(f" Environment: {terminal_env}") if terminal_env == "ssh": ssh_host = os.getenv("TERMINAL_SSH_HOST", "not set") ssh_user = os.getenv("TERMINAL_SSH_USER", "not set") ssh_port = os.getenv("TERMINAL_SSH_PORT", "22") print(f" SSH Target: {ssh_user}@{ssh_host}:{ssh_port}") print(f" Working Dir: {terminal_cwd}") print(f" Timeout: {terminal_timeout}s") print() print(" -- Agent --") print(f" Max Turns: {self.max_turns}") print(f" Toolsets: {', '.join(self.enabled_toolsets) if self.enabled_toolsets else 'all'}") print(f" Verbose: {self.verbose}") print() print(" -- Session --") print(f" Started: {self.session_start.strftime('%Y-%m-%d %H:%M:%S')}") print(f" Config File: {config_path} {config_status}") print() def _list_recent_sessions(self, limit: int = 10) -> list[dict[str, Any]]: """Return recent CLI sessions for in-chat browsing/resume affordances.""" if not self._session_db: return [] try: sessions = self._session_db.list_sessions_rich( source="cli", exclude_sources=["tool"], limit=limit, ) except Exception: return [] return [s for s in sessions if s.get("id") != self.session_id] def _show_recent_sessions(self, *, reason: str = "history", limit: int = 10) -> bool: """Render recent sessions inline from the active chat TUI. Returns True when something was shown, False if no session list was available. """ sessions = self._list_recent_sessions(limit=limit) if not sessions: return False from hermes_cli.main import _relative_time print() if reason == "history": print("(._.) No messages in the current chat yet — here are recent sessions you can resume:") else: print(" Recent sessions:") print() print(f" {'#':<3} {'Title':<32} {'Preview':<40} {'Last Active':<13} {'ID'}") print(f" {'─' * 3} {'─' * 32} {'─' * 40} {'─' * 13} {'─' * 24}") for idx, session in enumerate(sessions, start=1): title = session.get("title") or "—" preview = (session.get("preview") or "")[:38] last_active = _relative_time(session.get("last_active")) print(f" {idx:<3} {title:<32} {preview:<40} {last_active:<13} {session['id']}") print() print(" Use /resume , /resume , or /resume to continue.") print(" Example: /resume 2") print() return True def show_history(self): """Display conversation history.""" if not self.conversation_history: if not self._show_recent_sessions(reason="history"): print("(._.) No conversation history yet.") return preview_limit = 400 visible_index = 0 hidden_tool_messages = 0 def flush_tool_summary(): nonlocal hidden_tool_messages if not hidden_tool_messages: return noun = "message" if hidden_tool_messages == 1 else "messages" print("\n [Tools]") print(f" ({hidden_tool_messages} tool {noun} hidden)") hidden_tool_messages = 0 print() print("+" + "-" * 50 + "+") print("|" + " " * 12 + "(^_^) Conversation History" + " " * 11 + "|") print("+" + "-" * 50 + "+") for msg in self.conversation_history: role = msg.get("role", "unknown") if role == "tool": hidden_tool_messages += 1 continue if role not in {"user", "assistant"}: continue flush_tool_summary() visible_index += 1 content = msg.get("content") content_text = "" if content is None else str(content) if role == "user": print(f"\n [You #{visible_index}]") print( f" {content_text[:preview_limit]}{'...' if len(content_text) > preview_limit else ''}" ) continue print(f"\n [Hermes #{visible_index}]") tool_calls = msg.get("tool_calls") or [] if content_text: preview = content_text[:preview_limit] suffix = "..." if len(content_text) > preview_limit else "" elif tool_calls: tool_count = len(tool_calls) noun = "call" if tool_count == 1 else "calls" preview = f"(requested {tool_count} tool {noun})" suffix = "" else: preview = "(no text response)" suffix = "" print(f" {preview}{suffix}") flush_tool_summary() print() def _notify_session_boundary(self, event_type: str) -> None: """Fire a session-boundary plugin hook (on_session_finalize or on_session_reset). Non-blocking — errors are caught and logged. Safe to call from any lifecycle point (shutdown, /new, /reset). """ try: from hermes_cli.plugins import invoke_hook as _invoke_hook _invoke_hook( event_type, session_id=self.agent.session_id if self.agent else None, platform=getattr(self, "platform", None) or "cli", reason="new_session" if event_type == "on_session_reset" else "session_boundary", ) except Exception: pass def _discard_session_if_empty(self, session_id: Optional[str]) -> bool: """Drop a just-ended session row when it never gained content. Starting the CLI and immediately quitting (or rotating with /new, /clear) used to leave an empty untitled row behind that clutters ``/resume`` and ``hermes sessions list``. Delegates the check-and-delete to ``SessionDB.delete_session_if_empty``, which only removes rows with no messages, no title, and no child sessions. Ported from google-gemini/gemini-cli#27770. """ if not self._session_db or not session_id: return False # In-memory transcript is authoritative: if this CLI object holds # conversation messages (flushed to the DB or not), the session is # not empty. Protects against pruning a real conversation whose DB # flush failed or hasn't happened yet. if getattr(self, "conversation_history", None): return False try: from hermes_constants import get_hermes_home as _ghh return self._session_db.delete_session_if_empty( session_id, sessions_dir=_ghh() / "sessions" ) except Exception: logger.debug( "Could not prune empty session %s", session_id, exc_info=True ) return False def new_session(self, silent=False, title=None): """Start a fresh session with a new session ID and cleared agent state.""" if self.agent and self.conversation_history: # Trigger memory extraction on the old session before session_id rotates. self.agent.commit_memory_session(self.conversation_history) self._notify_session_boundary("on_session_finalize") elif self.agent: # First session or empty history — still finalize the old session self._notify_session_boundary("on_session_finalize") old_session_id = self.session_id if self._session_db and old_session_id: try: self._session_db.end_session(old_session_id, "new_session") except Exception: pass # Don't let immediately-rotated empty sessions pile up in # /resume and `hermes sessions list` (gemini-cli#27770 port). self._discard_session_if_empty(old_session_id) self.session_start = datetime.now() timestamp_str = self.session_start.strftime("%Y%m%d_%H%M%S") short_uuid = uuid.uuid4().hex[:6] self.session_id = f"{timestamp_str}_{short_uuid}" self.conversation_history = [] self._pending_title = None self._resumed = False _sync_process_session_id(self.session_id) if self.agent: self.agent.session_id = self.session_id self.agent.session_start = self.session_start self.agent.reset_session_state() if hasattr(self.agent, "_last_flushed_db_idx"): self.agent._last_flushed_db_idx = 0 if hasattr(self.agent, "_todo_store"): try: from tools.todo_tool import TodoStore self.agent._todo_store = TodoStore() except Exception: pass if hasattr(self.agent, "_invalidate_system_prompt"): self.agent._invalidate_system_prompt() if self._session_db: try: self.agent._session_db_created = False self._session_db.create_session( session_id=self.session_id, source=os.environ.get("HERMES_SESSION_SOURCE", "cli"), model=self.model, model_config={ "max_iterations": self.max_turns, "reasoning_config": self.reasoning_config, }, ) self.agent._session_db_created = True except Exception: pass if title and self._session_db: from hermes_state import SessionDB try: sanitized = SessionDB.sanitize_title(title) except ValueError as e: _cprint(f" Title rejected: {e}") sanitized = None title = None if sanitized: try: self._session_db.set_session_title(self.session_id, sanitized) self._pending_title = None title = sanitized except ValueError as e: _cprint(f" {e} — session started untitled.") title = None except Exception: title = None elif title is not None: # sanitize_title returned empty (whitespace-only / unprintable) _cprint(" Title is empty after cleanup — session started untitled.") title = None # Notify memory providers that session_id rotated to a fresh # conversation. reset=True signals providers to flush accumulated # per-session state (_session_turns, _turn_counter, _document_id). # Fires BEFORE the plugin on_session_reset hook (shell hooks only # see the new id; Python providers see the transition). See #6672. try: _mm = getattr(self.agent, "_memory_manager", None) if _mm is not None: _mm.on_session_switch( self.session_id, parent_session_id=old_session_id or "", reset=True, reason="new_session", ) except Exception: pass self._notify_session_boundary("on_session_reset") if not silent: if title: print(f"(^_^)v New session started: {title}") else: print("(^_^)v New session started!") def _consume_pending_resume_selection(self, text: str) -> bool: """Resolve a bare numeric reply that follows a bare ``/resume`` prompt. After ``/resume`` (no args) prints the recent-sessions list it arms ``self._pending_resume_sessions``. The next submitted input is given one chance to be a bare session number (``3``); if so we resume that session here. Anything else (another command, free text, blank) simply disarms the prompt and is handled normally by the caller. Returns True if the input was consumed as a resume selection (caller must not treat it as chat); False otherwise. The pending state is always one-shot: it is cleared on the first submitted input regardless of outcome. See #34584. """ pending = self._pending_resume_sessions if not pending: return False # One-shot: disarm now so a non-matching input can't leave the prompt # armed and hijack a later number the user meant as chat. self._pending_resume_sessions = None if not isinstance(text, str): return False stripped = text.strip() # Only a pure number selects; let "/resume 3", titles, or any other # text fall through to normal handling. if not stripped.isdigit(): return False index = int(stripped) if index < 1 or index > len(pending): _cprint(f" Resume index {index} is out of range.") _cprint(" Use /resume with no arguments to see available sessions.") return True self._handle_resume_command(f"/resume {index}") return True def save_conversation(self): """Save the current conversation to a JSON snapshot under ~/.hermes/sessions/saved/. The snapshot is a convenience export for sharing or off-line inspection; every message is already persisted incrementally to the SQLite session DB, so the live session remains resumable via ``hermes --resume `` regardless of whether the user ever runs ``/save``. """ if not self.conversation_history: print("(;_;) No conversation to save.") return timestamp = datetime.now().strftime("%Y%m%d_%H%M%S") saved_dir = get_hermes_home() / "sessions" / "saved" try: saved_dir.mkdir(parents=True, exist_ok=True) except Exception as e: print(f"(x_x) Failed to create save directory {saved_dir}: {e}") return path = saved_dir / f"hermes_conversation_{timestamp}.json" try: with open(path, "w", encoding="utf-8") as f: json.dump({ "model": self.model, "session_id": self.session_id, "session_start": self.session_start.isoformat(), "messages": self.conversation_history, }, f, indent=2, ensure_ascii=False) print(f"(^_^)v Conversation snapshot saved to: {path}") if self.session_id: print(f" Resume the live session with: hermes --resume {self.session_id}") except Exception as e: print(f"(x_x) Failed to save: {e}") def retry_last(self): """Retry the last user message by removing the last exchange and re-sending. Removes the last assistant response (and any tool-call messages) and the last user message, then re-sends that user message to the agent. Returns the message to re-send, or None if there's nothing to retry. """ if not self.conversation_history: print("(._.) No messages to retry.") return None # Walk backwards to find the last user message last_user_idx = None for i in range(len(self.conversation_history) - 1, -1, -1): if self.conversation_history[i].get("role") == "user": last_user_idx = i break if last_user_idx is None: print("(._.) No user message found to retry.") return None # Extract the message text and remove everything from that point forward last_message = self.conversation_history[last_user_idx].get("content", "") self.conversation_history = self.conversation_history[:last_user_idx] print(f"(^_^)b Retrying: \"{last_message[:60]}{'...' if len(last_message) > 60 else ''}\"") return last_message def undo_last(self, n: int = 1, prefill: bool = True): """Back up N user turns: truncate history, soft-delete on disk, prefill. Walks backwards N user messages and discards everything from the Nth-from-last user message onward (its assistant response, tool calls, etc.). ``n`` defaults to 1 (the last exchange); ``/undo 3`` backs up three user turns. If ``n`` exceeds the number of user turns, it backs up to the oldest one. Beyond the in-memory ``conversation_history`` slice, this also: • soft-deletes the truncated rows in SessionDB (``active=0``) so they're hidden from re-prompts and search but kept for audit; • notifies memory providers via ``on_session_switch(rewound=True)``; • mirrors /branch's agent surgery (system-prompt invalidation + flush-index reset); • when ``prefill`` is set and an input buffer is available, pre-fills the composer with the backed-up message text so it can be edited and resubmitted. ``prefill=False`` is used by callers that drive the undo programmatically (e.g. checkpoint rollback) and don't want to touch the user's input buffer. """ if not self.conversation_history: print("(._.) No messages to undo.") return if n < 1: n = 1 # Walk backwards collecting the indices of the last N user messages. user_indices = [] for i in range(len(self.conversation_history) - 1, -1, -1): if self.conversation_history[i].get("role") == "user": user_indices.append(i) if len(user_indices) >= n: break if not user_indices: print("(._.) No user message found to undo.") return # The oldest of the collected user messages is our truncation point. cut_idx = user_indices[-1] turns_undone = len(user_indices) removed_count = len(self.conversation_history) - cut_idx removed_msg = self.conversation_history[cut_idx].get("content", "") removed_text = self._undo_content_to_text(removed_msg) # Truncate the in-memory history to before that user message. self.conversation_history = self.conversation_history[:cut_idx] # Soft-delete the truncated rows on disk so re-prompts and search # see the clean transcript while the rows survive for audit. rewound_rows = 0 if self._session_db is not None and self.session_id: try: recents = self._session_db.list_recent_user_messages( self.session_id, limit=max(turns_undone, 10) ) if recents: target_idx = min(turns_undone - 1, len(recents) - 1) target_id = recents[target_idx]["id"] result = self._session_db.rewind_to_message( self.session_id, target_id ) rewound_rows = result.get("rewound_count", 0) # Prefer the DB's decoded target text for the prefill — # it's the canonical persisted copy. db_text = self._undo_content_to_text( (result.get("target_message") or {}).get("content") ) if db_text: removed_text = db_text except ValueError as e: # Non-user target / cross-session — keep the in-memory undo # but skip the soft-delete; surface a debug-level note. logger.debug("undo: soft-delete skipped: %s", e) except Exception as e: logger.debug("undo: soft-delete failed: %s", e) # Agent surgery: invalidate the system-prompt cache and reset the # flush index so the next turn re-flushes from the truncated head. if self.agent is not None: if hasattr(self.agent, "_invalidate_system_prompt"): try: self.agent._invalidate_system_prompt() except Exception: pass if hasattr(self.agent, "_last_flushed_db_idx"): try: self.agent._last_flushed_db_idx = len(self.conversation_history) except Exception: pass # Notify memory providers — same hook /branch fires, with the # rewound flag so per-turn document caches invalidate (#6672, #21910). try: _mm = getattr(self.agent, "_memory_manager", None) if _mm is not None and self.session_id: _mm.on_session_switch( self.session_id, parent_session_id="", reset=False, rewound=True, ) except Exception: pass turn_word = "turn" if turns_undone == 1 else "turns" msg_count = rewound_rows or removed_count print( f"(^_^)b Undid {turns_undone} {turn_word} ({msg_count} message(s)). " f"Backed up to: \"{removed_text[:60]}{'...' if len(removed_text) > 60 else ''}\"" ) remaining = len(self.conversation_history) print(f" {remaining} message(s) remaining in history.") # Pre-fill the composer with the backed-up message so the user can # edit and resubmit (Claude-Code-style). Editable, not auto-sent. if prefill and removed_text: self._prefill_input_buffer(removed_text) @staticmethod def _undo_content_to_text(content) -> str: """Flatten message content (str or content-part list) to plain text.""" if isinstance(content, str): return content if isinstance(content, list): parts = [ p.get("text", "") for p in content if isinstance(p, dict) and p.get("type") == "text" ] return "\n".join(t for t in parts if t) return "" def _prefill_input_buffer(self, text: str) -> None: """Place ``text`` in the active prompt_toolkit buffer, editable.""" app = getattr(self, "_app", None) if app is None: return try: buf = app.current_buffer buf.text = text if hasattr(buf, "cursor_position"): buf.cursor_position = len(text) app.invalidate() except Exception as e: logger.debug("undo: prefill buffer failed: %s", e) def _run_curses_picker(self, title: str, items: list[str], default_index: int = 0) -> int | None: """Run curses_single_select via run_in_terminal so prompt_toolkit handles terminal ownership cleanly.""" import threading from hermes_cli.curses_ui import curses_single_select result = [None] def _pick(): result[0] = curses_single_select(title, items, default_index=default_index) # run_in_terminal requires an asyncio event loop — only exists in the # main prompt_toolkit thread. If we're in a background thread (e.g. # process_loop), fall back to direct curses call. in_main_thread = threading.current_thread() is threading.main_thread() if self._app and in_main_thread: from prompt_toolkit.application import run_in_terminal was_visible = self._status_bar_visible self._status_bar_visible = False self._app.invalidate() try: run_in_terminal(_pick) finally: self._status_bar_visible = was_visible self._app.invalidate() else: _pick() return result[0] def _prompt_text_input(self, prompt_text: str) -> str | None: """Prompt for free-text input safely inside or outside prompt_toolkit. Mirrors the thread-aware guard in ``_run_curses_picker``: ``run_in_terminal`` returns a coroutine that must be awaited by the prompt_toolkit event loop, which only exists on the main thread. Slash commands are dispatched from the ``process_loop`` daemon thread (see issue #23185), so calling ``run_in_terminal`` from there orphans the coroutine — ``_ask`` never runs, and user keystrokes leak into the composer instead. Fall back to a direct ``input()`` when we're off the main thread. """ import threading result = [None] def _ask(): try: result[0] = input(prompt_text).strip() or None except (KeyboardInterrupt, EOFError): pass in_main_thread = threading.current_thread() is threading.main_thread() if self._app and in_main_thread: from prompt_toolkit.application import run_in_terminal was_visible = self._status_bar_visible self._status_bar_visible = False self._app.invalidate() try: run_in_terminal(_ask) except Exception: # WSL / Warp / certain terminal emulators silently drop the # scheduled coroutine. Fall back to a direct input() so the # user's keystrokes don't leak into the agent buffer. try: _ask() except Exception: pass finally: self._status_bar_visible = was_visible self._app.invalidate() else: _ask() return result[0] def _prompt_text_input_modal( self, *, title: str, detail: str, choices: list[tuple[str, str, str]], timeout: float = 120, ) -> str | None: """Prompt through the prompt_toolkit composer instead of raw input(). This is for CLI slash-command confirmations. The old raw input() path fought prompt_toolkit's active stdin ownership: in some terminals the prompt appeared above the TUI, choices were redrawn later, and Enter could be interpreted as EOF/exit. A first-class modal state keeps the choices visible and lets the normal Enter key binding submit the typed or highlighted choice. **Platform note (Windows — issue #33961):** Earlier code bypassed the modal on ``sys.platform == "win32"`` and fell back to a raw ``input()`` prompt. When the confirm was triggered from the ``process_loop`` daemon thread (the normal case) that ``input()`` ran off the main thread and deadlocked against prompt_toolkit's stdin ownership — the user saw a frozen cursor and Ctrl-C was swallowed (bare ``/reset`` froze; ``/reset now`` worked only because it skips the prompt entirely). Native Windows now uses the same path as Linux/macOS: the modal is set up on ``self._app.loop`` via ``call_soon_threadsafe`` and answered by the normal prompt_toolkit key bindings (the same input channel that already handles ordinary typing on Windows). The raw ``input()`` fallback is kept only for the genuinely safe cases: no running app (unit tests / non-interactive), no resolvable event loop, or a scheduling failure. """ import threading import time as _time if not choices: return None # If prompt_toolkit is not running (unit tests / non-interactive calls), # keep the simple stdin fallback. if not getattr(self, "_app", None): return self._prompt_text_input("Choice [1/2/3]: ") try: app_loop = self._app.loop except Exception: app_loop = None in_main_thread = threading.current_thread() is threading.main_thread() def _stdin_fallback() -> str | None: # On native Windows a raw input() from a non-main thread deadlocks # against prompt_toolkit's stdin ownership (#33961). With an app # running we cannot safely prompt off the main thread, so cancel # cleanly (None) rather than hang the terminal. if sys.platform == "win32" and not in_main_thread: self._invalidate() return None return self._prompt_text_input("Choice [1/2/3]: ") if not in_main_thread and app_loop is None: return _stdin_fallback() response_queue = queue.Queue() def _setup_modal() -> None: self._capture_modal_input_snapshot() self._slash_confirm_state = { "title": title, "detail": detail, "choices": choices, "selected": 0, "response_queue": response_queue, } self._slash_confirm_deadline = _time.monotonic() + timeout self._invalidate() def _teardown_modal() -> None: self._slash_confirm_state = None self._slash_confirm_deadline = 0 self._restore_modal_input_snapshot() self._invalidate() def _run_on_app_loop(fn) -> bool: if in_main_thread or app_loop is None: fn() return True ready = threading.Event() def _wrapped() -> None: try: fn() finally: ready.set() try: app_loop.call_soon_threadsafe(_wrapped) except Exception: return False return ready.wait(timeout=5) if not _run_on_app_loop(_setup_modal): return _stdin_fallback() _last_countdown_refresh = _time.monotonic() try: while True: try: result = response_queue.get(timeout=1) _run_on_app_loop(_teardown_modal) return result except queue.Empty: remaining = self._slash_confirm_deadline - _time.monotonic() if remaining <= 0: break now = _time.monotonic() if now - _last_countdown_refresh >= 5.0: _last_countdown_refresh = now self._invalidate() finally: if self._slash_confirm_state is not None: _run_on_app_loop(_teardown_modal) return None def _submit_slash_confirm_response(self, value: str | None) -> None: state = self._slash_confirm_state if not state: return state["response_queue"].put(value) self._slash_confirm_state = None self._slash_confirm_deadline = 0 self._invalidate() def _normalize_slash_confirm_choice( self, raw: str | None, choices: list[tuple[str, str, str]], ) -> str | None: if raw is None: return None choice_raw = raw.strip().lower() if not choice_raw: return None aliases = { "1": "once", "once": "once", "approve": "once", "yes": "once", "y": "once", "ok": "once", "2": "always", "always": "always", "remember": "always", "3": "cancel", "cancel": "cancel", "nevermind": "cancel", "no": "cancel", "n": "cancel", } allowed = {choice[0] for choice in choices} normalized = aliases.get(choice_raw) if normalized in allowed: return normalized if choice_raw in allowed: return choice_raw return None def _get_slash_confirm_display_fragments(self): """Render the /new-/clear-style confirmation panel.""" state = self._slash_confirm_state if not state: return [] title = state.get("title") or "Confirm action" detail = state.get("detail") or "" choices = state.get("choices") or [] selected = state.get("selected", 0) def _panel_box_width(title_text: str, content_lines: list[str], min_width: int = 56, max_width: int = 86) -> int: term_cols = shutil.get_terminal_size((100, 20)).columns longest = max([len(title_text)] + [len(line) for line in content_lines] + [min_width - 4]) inner = min(max(longest + 4, min_width - 2), max_width - 2, max(24, term_cols - 6)) return inner + 2 def _wrap_panel_text(text: str, width: int, subsequent_indent: str = "") -> list[str]: wrapped = textwrap.wrap( text, width=max(8, width), replace_whitespace=False, drop_whitespace=False, subsequent_indent=subsequent_indent, ) return wrapped or [""] def _append_panel_line(lines, border_style: str, content_style: str, text: str, box_width: int) -> None: inner_width = max(0, box_width - 2) lines.append((border_style, "│ ")) lines.append((content_style, text.ljust(inner_width))) lines.append((border_style, " │\n")) def _append_blank_panel_line(lines, border_style: str, box_width: int) -> None: lines.append((border_style, "│" + (" " * box_width) + "│\n")) preview_lines = [] for line in detail.splitlines(): preview_lines.extend(_wrap_panel_text(line, 72)) for idx, (_value, label, desc) in enumerate(choices): marker = "❯" if idx == selected else " " preview_lines.extend(_wrap_panel_text(f"{marker} [{idx + 1}] {label} — {desc}", 72, subsequent_indent=" ")) preview_lines.append("Type 1/2/3 or use ↑/↓ then Enter. ESC/Ctrl+C cancels.") box_width = _panel_box_width(title, preview_lines) inner_text_width = max(8, box_width - 2) detail_wrapped = [] for line in detail.splitlines(): detail_wrapped.extend(_wrap_panel_text(line, inner_text_width)) choice_wrapped: list[tuple[int, str]] = [] for idx, (_value, label, desc) in enumerate(choices): marker = "❯" if idx == selected else " " for wrapped in _wrap_panel_text(f"{marker} [{idx + 1}] {label} — {desc}", inner_text_width, subsequent_indent=" "): choice_wrapped.append((idx, wrapped)) term_rows = shutil.get_terminal_size((100, 24)).lines reserved_below = 6 chrome_full = 6 available = max(0, term_rows - reserved_below) max_detail_rows = max(1, available - chrome_full - len(choice_wrapped)) max_detail_rows = min(max_detail_rows, 8) if len(detail_wrapped) > max_detail_rows: keep = max(1, max_detail_rows - 1) detail_wrapped = detail_wrapped[:keep] + ["… (detail truncated)"] lines = [] lines.append(('class:approval-border', '╭' + ('─' * box_width) + '╮\n')) _append_panel_line(lines, 'class:approval-border', 'class:approval-title', title, box_width) _append_blank_panel_line(lines, 'class:approval-border', box_width) for wrapped in detail_wrapped: _append_panel_line(lines, 'class:approval-border', 'class:approval-desc', wrapped, box_width) _append_blank_panel_line(lines, 'class:approval-border', box_width) for idx, wrapped in choice_wrapped: style = 'class:approval-selected' if idx == selected else 'class:approval-choice' _append_panel_line(lines, 'class:approval-border', style, wrapped, box_width) _append_blank_panel_line(lines, 'class:approval-border', box_width) _append_panel_line(lines, 'class:approval-border', 'class:approval-cmd', 'Type 1/2/3 or use ↑/↓ then Enter. ESC/Ctrl+C cancels.', box_width) lines.append(('class:approval-border', '╰' + ('─' * box_width) + '╯\n')) return lines def _open_model_picker(self, providers: list, current_model: str, current_provider: str, user_provs=None, custom_provs=None) -> None: """Open prompt_toolkit-native /model picker modal.""" self._capture_modal_input_snapshot() default_idx = next((i for i, p in enumerate(providers) if p.get("is_current")), 0) self._model_picker_state = { "stage": "provider", "providers": providers, "selected": default_idx, "current_model": current_model, "current_provider": current_provider, "user_provs": user_provs, "custom_provs": custom_provs, } self._invalidate(min_interval=0.0) def _confirm_expensive_model_switch(self, result) -> bool: """Ask for explicit confirmation before applying costly model switches.""" if not getattr(result, "success", False): return True try: from hermes_cli.model_cost_guard import expensive_model_warning warning = expensive_model_warning( result.new_model, provider=result.target_provider, base_url=result.base_url or self.base_url or "", api_key=result.api_key or self.api_key or "", model_info=result.model_info, ) except Exception: warning = None if warning is None: return True choices = [ ("once", "Switch anyway", "Use this model for the current Hermes session."), ("cancel", "Cancel", "Keep the current model."), ] raw = self._prompt_text_input_modal( title="!!! Expensive Model Warning !!!", detail=warning.message, choices=choices, timeout=120, ) choice = self._normalize_slash_confirm_choice(raw, choices) return choice == "once" def _confirm_and_apply_model_switch_result(self, result, persist_global: bool) -> None: try: if result.success and not self._confirm_expensive_model_switch(result): _cprint(" Model switch cancelled.") return self._apply_model_switch_result(result, persist_global) except Exception as exc: _cprint(f" ✗ Model selection failed: {exc}") def _close_model_picker(self) -> None: self._model_picker_state = None self._restore_modal_input_snapshot() self._invalidate(min_interval=0.0) @staticmethod def _compute_model_picker_viewport( selected: int, scroll_offset: int, n: int, term_rows: int, reserved_below: int = 6, panel_chrome: int = 6, min_visible: int = 3, ) -> tuple[int, int]: """Resolve (scroll_offset, visible) for the /model picker viewport. ``reserved_below`` matches the approval / clarify panels — input area, status bar, and separators below the panel. ``panel_chrome`` covers this panel's own borders + blanks + hint row. The remaining rows hold the scrollable list, with the offset slid to keep ``selected`` on screen. """ max_visible = max(min_visible, term_rows - reserved_below - panel_chrome) if n <= max_visible: return 0, n visible = max_visible if selected < scroll_offset: scroll_offset = selected elif selected >= scroll_offset + visible: scroll_offset = selected - visible + 1 scroll_offset = max(0, min(scroll_offset, n - visible)) return scroll_offset, visible def _apply_model_switch_result(self, result, persist_global: bool) -> None: if not result.success: _cprint(f" ✗ {result.error_message}") return old_model = self.model self.model = result.new_model self.provider = result.target_provider self.requested_provider = result.target_provider # Always overwrite explicit overrides so stale credentials from the # previous provider (e.g. Ollama api_key/base_url) don't leak into # the new provider's credential resolution on the next turn. self._explicit_api_key = result.api_key self._explicit_base_url = result.base_url if result.api_key: self.api_key = result.api_key if result.base_url: self.base_url = result.base_url if result.api_mode: self.api_mode = result.api_mode if self.agent is not None: try: self.agent.switch_model( new_model=result.new_model, new_provider=result.target_provider, api_key=result.api_key, base_url=result.base_url, api_mode=result.api_mode, ) except Exception as exc: _cprint(f" ⚠ Agent swap failed ({exc}); change applied to next session.") self._pending_model_switch_note = ( f"[Note: model was just switched from {old_model} to {result.new_model} " f"via {result.provider_label or result.target_provider}. " f"Adjust your self-identification accordingly.]" ) provider_label = result.provider_label or result.target_provider _cprint(f" ✓ Model switched: {result.new_model}") _cprint(f" Provider: {provider_label}") # Context: always resolve via the provider-aware chain so Codex OAuth, # Copilot, and Nous-enforced caps win over the raw models.dev entry # (e.g. gpt-5.5 is 1.05M on openai but 272K on Codex OAuth). mi = result.model_info try: from hermes_cli.model_switch import resolve_display_context_length ctx = resolve_display_context_length( result.new_model, result.target_provider, base_url=result.base_url or self.base_url or "", api_key=result.api_key or self.api_key or "", model_info=mi, config_context_length=getattr(self.agent, "_config_context_length", None) if self.agent else None, ) if ctx: _cprint(f" Context: {ctx:,} tokens") except Exception: pass if mi: if mi.max_output: _cprint(f" Max output: {mi.max_output:,} tokens") if mi.has_cost_data(): _cprint(f" Cost: {mi.format_cost()}") _cprint(f" Capabilities: {mi.format_capabilities()}") cache_enabled = ( (base_url_host_matches(result.base_url or "", "openrouter.ai") and "claude" in result.new_model.lower()) or result.api_mode == "anthropic_messages" ) if cache_enabled: _cprint(" Prompt caching: enabled") if result.warning_message: _cprint(f" ⚠ {result.warning_message}") if persist_global: save_config_value("model.default", result.new_model) if result.provider_changed: save_config_value("model.provider", result.target_provider) _cprint(" Saved to config.yaml (--global)") else: _cprint(" (session only — add --global to persist)") def _handle_model_picker_selection(self, persist_global: bool = False) -> None: state = self._model_picker_state if not state: return selected = state.get("selected", 0) stage = state.get("stage") if stage == "provider": providers = state.get("providers") or [] if selected >= len(providers): self._close_model_picker() return provider_data = providers[selected] # Use the curated model list from list_authenticated_providers() # (same lists as `hermes model` and gateway pickers). # Only fall back to the live provider catalog when the curated # list is empty (e.g. user-defined endpoints with no curated list). model_list = provider_data.get("models", []) if not model_list: try: from hermes_cli.models import provider_model_ids live = provider_model_ids(provider_data["slug"]) if live: model_list = live except Exception: pass state["stage"] = "model" state["provider_data"] = provider_data state["model_list"] = model_list state["selected"] = 0 self._invalidate(min_interval=0.0) return if stage == "model": provider_data = state.get("provider_data") or {} model_list = state.get("model_list") or [] back_idx = len(model_list) cancel_idx = len(model_list) + 1 if selected == back_idx: state["stage"] = "provider" state["selected"] = next((i for i, p in enumerate(state.get("providers") or []) if p.get("slug") == provider_data.get("slug")), 0) self._invalidate(min_interval=0.0) return if selected >= cancel_idx: self._close_model_picker() return if selected < len(model_list): from hermes_cli.model_switch import switch_model chosen_model = model_list[selected] result = switch_model( raw_input=chosen_model, current_provider=self.provider or "", current_model=self.model or "", current_base_url=self.base_url or "", current_api_key=self.api_key or "", is_global=persist_global, explicit_provider=provider_data.get("slug"), user_providers=state.get("user_provs"), custom_providers=state.get("custom_provs"), ) self._close_model_picker() if getattr(self, "_app", None): threading.Thread( target=self._confirm_and_apply_model_switch_result, args=(result, persist_global), daemon=True, ).start() else: self._confirm_and_apply_model_switch_result(result, persist_global) return self._close_model_picker() def _handle_model_switch(self, cmd_original: str): """Handle /model command — switch model for this session. Supports: /model — show current model + usage hints /model — switch for this session only /model --global — switch and persist to config.yaml /model --provider — switch provider + model /model --provider — switch to provider, auto-detect model """ from hermes_cli.model_switch import switch_model, parse_model_flags from hermes_cli.providers import get_label # Parse args from the original command parts = cmd_original.split(None, 1) # split off '/model' raw_args = parts[1].strip() if len(parts) > 1 else "" # Parse --provider, --global, and --refresh flags model_input, explicit_provider, persist_global, force_refresh = parse_model_flags(raw_args) # --refresh: wipe the on-disk picker cache before building the # provider list. Forces a live re-fetch of every authed provider's # /v1/models endpoint on this open. if force_refresh: try: from hermes_cli.models import clear_provider_models_cache clear_provider_models_cache() _cprint(" Cleared model picker cache. Refreshing...") except Exception: pass # Single inventory context — replaces the inline config-slice the # dashboard / TUI used to duplicate. Overlay live session state # via with_overrides (truthy-only) so empty self.* attrs don't # clobber disk config. from hermes_cli.inventory import build_models_payload, load_picker_context try: ctx = load_picker_context().with_overrides( current_provider=self.provider or "", current_model=self.model or "", current_base_url=self.base_url or "", ) except Exception: ctx = None # switch_model() + _open_model_picker still need the raw provider # dicts; ConfigContext is the canonical source for both. user_provs = ctx.user_providers if ctx is not None else None custom_provs = ctx.custom_providers if ctx is not None else None # No args at all: open prompt_toolkit-native picker modal if not model_input and not explicit_provider: model_display = self.model or "unknown" provider_display = get_label(self.provider) if self.provider else "unknown" try: if ctx is None: raise RuntimeError("inventory context unavailable") providers = build_models_payload(ctx, max_models=50)["providers"] except Exception: providers = [] if not providers: _cprint(" No authenticated providers found.") _cprint("") _cprint(" /model switch model") _cprint(" /model --provider switch provider") _cprint(" /model --refresh re-fetch live model lists") return self._open_model_picker( providers, model_display, provider_display, user_provs=user_provs, custom_provs=custom_provs, ) return # Perform the switch result = switch_model( raw_input=model_input, current_provider=self.provider or "", current_model=self.model or "", current_base_url=self.base_url or "", current_api_key=self.api_key or "", is_global=persist_global, explicit_provider=explicit_provider, user_providers=user_provs, custom_providers=custom_provs, ) if not result.success: _cprint(f" ✗ {result.error_message}") return if not self._confirm_expensive_model_switch(result): _cprint(" Model switch cancelled.") return # Apply to CLI state. # Update requested_provider so _ensure_runtime_credentials() doesn't # overwrite the switch on the next turn (it re-resolves from this). old_model = self.model self.model = result.new_model self.provider = result.target_provider self.requested_provider = result.target_provider # Always overwrite explicit overrides so stale credentials from the # previous provider (e.g. Ollama api_key/base_url) don't leak into # the new provider's credential resolution on the next turn. self._explicit_api_key = result.api_key self._explicit_base_url = result.base_url if result.api_key: self.api_key = result.api_key if result.base_url: self.base_url = result.base_url if result.api_mode: self.api_mode = result.api_mode # Apply to running agent (in-place swap) if self.agent is not None: try: self.agent.switch_model( new_model=result.new_model, new_provider=result.target_provider, api_key=result.api_key, base_url=result.base_url, api_mode=result.api_mode, ) except Exception as exc: _cprint(f" ⚠ Agent swap failed ({exc}); change applied to next session.") # Store a note to prepend to the next user message so the model # knows a switch occurred (avoids injecting system messages mid-history # which breaks providers and prompt caching). self._pending_model_switch_note = ( f"[Note: model was just switched from {old_model} to {result.new_model} " f"via {result.provider_label or result.target_provider}. " f"Adjust your self-identification accordingly.]" ) # Display confirmation with full metadata provider_label = result.provider_label or result.target_provider _cprint(f" ✓ Model switched: {result.new_model}") _cprint(f" Provider: {provider_label}") # Context: always resolve via the provider-aware chain so Codex OAuth, # Copilot, and Nous-enforced caps win over the raw models.dev entry # (e.g. gpt-5.5 is 1.05M on openai but 272K on Codex OAuth). mi = result.model_info from hermes_cli.model_switch import resolve_display_context_length ctx = resolve_display_context_length( result.new_model, result.target_provider, base_url=result.base_url or self.base_url or "", api_key=result.api_key or self.api_key or "", model_info=mi, config_context_length=getattr(self.agent, "_config_context_length", None) if self.agent else None, ) if ctx: _cprint(f" Context: {ctx:,} tokens") if mi: if mi.max_output: _cprint(f" Max output: {mi.max_output:,} tokens") if mi.has_cost_data(): _cprint(f" Cost: {mi.format_cost()}") _cprint(f" Capabilities: {mi.format_capabilities()}") # Cache notice cache_enabled = ( (base_url_host_matches(result.base_url or "", "openrouter.ai") and "claude" in result.new_model.lower()) or result.api_mode == "anthropic_messages" ) if cache_enabled: _cprint(" Prompt caching: enabled") # Warning from validation if result.warning_message: _cprint(f" ⚠ {result.warning_message}") # Persistence if persist_global: save_config_value("model.default", result.new_model) if result.provider_changed: save_config_value("model.provider", result.target_provider) _cprint(" Saved to config.yaml (--global)") else: _cprint(" (session only — add --global to persist)") def _handle_codex_runtime(self, cmd_original: str) -> None: """Handle /codex-runtime — toggle the codex app-server runtime opt-in. Usage: /codex-runtime — show current state /codex-runtime auto — Hermes default (chat_completions) /codex-runtime codex_app_server — hand turns to codex subprocess /codex-runtime on / off — synonyms for the above """ from hermes_cli import codex_runtime_switch as crs parts = cmd_original.split(None, 1) raw_args = parts[1].strip() if len(parts) > 1 else "" new_value, errors = crs.parse_args(raw_args) if errors: for err in errors: _cprint(f"❌ {err}") return # Load + persist via the existing config helpers try: from hermes_cli.config import load_config, save_config except Exception as exc: _cprint(f"❌ could not load config: {exc}") return cfg = load_config() result = crs.apply( cfg, new_value, persist_callback=(save_config if new_value is not None else None), ) prefix = "✓" if result.success else "✗" for line in result.message.splitlines(): _cprint(f" {prefix} {line}" if line.startswith("openai_runtime") else f" {line}") if result.success and result.requires_new_session: _cprint(" Tip: `/reset` starts a new session immediately.") def _should_handle_model_command_inline(self, text: str, has_images: bool = False) -> bool: """Return True when /model should be handled immediately on the UI thread.""" if not text or has_images or not _looks_like_slash_command(text): return False try: from hermes_cli.commands import resolve_command base = text.split(None, 1)[0].lower().lstrip('/') cmd = resolve_command(base) return bool(cmd and cmd.name == "model") except Exception: return False def _should_handle_steer_command_inline(self, text: str, has_images: bool = False) -> bool: """Return True when /steer should be dispatched immediately while the agent is running. /steer MUST bypass the normal _pending_input → process_loop path when the agent is active, because process_loop is blocked inside self.chat() for the duration of the run. By the time the queued command is pulled from _pending_input, _agent_running has already flipped back to False, and process_command() takes the idle fallback — delivering the steer as a next-turn message instead of injecting it mid-run. Dispatching inline on the UI thread calls agent.steer() directly, which is thread-safe (uses _pending_steer_lock). """ if not text or has_images or not _looks_like_slash_command(text): return False if not getattr(self, "_agent_running", False): return False try: from hermes_cli.commands import resolve_command base = text.split(None, 1)[0].lower().lstrip('/') cmd = resolve_command(base) return bool(cmd and cmd.name == "steer") except Exception: return False def _output_console(self): """Use prompt_toolkit-safe Rich rendering once the TUI is live.""" if getattr(self, "_app", None): return ChatConsole() return self.console def _console_print(self, *args, **kwargs): """Print through the active command-safe console.""" self._output_console().print(*args, **kwargs) @staticmethod def _resolve_personality_prompt(value) -> str: """Accept string or dict personality value; return system prompt string.""" if isinstance(value, dict): parts = [value.get("system_prompt", "")] if value.get("tone"): parts.append(f'Tone: {value["tone"]}' ) if value.get("style"): parts.append(f'Style: {value["style"]}' ) return "\n".join(p for p in parts if p) return str(value) def _show_gateway_status(self): """Show status of the gateway and connected messaging platforms.""" from gateway.config import load_gateway_config, Platform print() print("+" + "-" * 60 + "+") print("|" + " " * 15 + "(✿◠‿◠) Gateway Status" + " " * 17 + "|") print("+" + "-" * 60 + "+") print() try: config = load_gateway_config() print(" Messaging Platform Configuration:") print(" " + "-" * 55) platform_status = { Platform.TELEGRAM: ("Telegram", "TELEGRAM_BOT_TOKEN"), Platform.DISCORD: ("Discord", "DISCORD_BOT_TOKEN"), Platform.SLACK: ("Slack", "SLACK_BOT_TOKEN"), Platform.WHATSAPP: ("WhatsApp", "WHATSAPP_ENABLED"), } for platform, (name, env_var) in platform_status.items(): pconfig = config.platforms.get(platform) if pconfig and pconfig.enabled: home = config.get_home_channel(platform) home_str = f" → {home.name}" if home else "" print(f" ✓ {name:<12} Enabled{home_str}") else: print(f" ○ {name:<12} Not configured ({env_var})") print() print(" Session Reset Policy:") print(" " + "-" * 55) policy = config.default_reset_policy print(f" Mode: {policy.mode}") print(f" Daily reset at: {policy.at_hour}:00") print(f" Idle timeout: {policy.idle_minutes} minutes") print() print(" To start the gateway:") print(" python cli.py --gateway") print() print(f" Configuration file: {display_hermes_home()}/config.yaml") print() except Exception as e: print(f" Error loading gateway config: {e}") print() print(" To configure the gateway:") print(" 1. Set environment variables:") print(" TELEGRAM_BOT_TOKEN=your_token") print(" DISCORD_BOT_TOKEN=your_token") print(f" 2. Or configure settings in {display_hermes_home()}/config.yaml") print() def process_command(self, command: str) -> bool: """ Process a slash command. Args: command: The command string (starting with /) Returns: bool: True to continue, False to exit """ # Lowercase only for dispatch matching; preserve original case for arguments cmd_lower = command.lower().strip() cmd_original = command.strip() # Resolve aliases via central registry so adding an alias is a one-line # change in hermes_cli/commands.py instead of touching every dispatch site. from hermes_cli.commands import resolve_command as _resolve_cmd _base_word = cmd_lower.split()[0].lstrip("/") _cmd_def = _resolve_cmd(_base_word) canonical = _cmd_def.name if _cmd_def else _base_word # A bare `/resume` prompt is one-shot: any command other than the # resume/sessions handlers (which manage the pending state themselves) # disarms it so a later number isn't swallowed as a stale selection. # See #34584. if canonical not in {"resume", "sessions"}: self._pending_resume_sessions = None if canonical in {"quit", "exit"}: # Parse --delete flag: /exit --delete also removes the current # session's transcripts + SQLite history. Ported from # google-gemini/gemini-cli#19332. _rest = cmd_original.split(None, 1) _args = (_rest[1] if len(_rest) > 1 else "").strip().lower() if _args in {"--delete", "-d"}: self._delete_session_on_exit = True elif _args: _cprint(f" {_DIM}✗ Unknown argument: {_escape(_args)}. Use /exit --delete to also remove session history.{_RST}") return True return False elif canonical == "help": self.show_help() elif canonical == "profile": self._handle_profile_command() elif canonical == "tools": self._handle_tools_command(cmd_original) elif canonical == "toolsets": self.show_toolsets() elif canonical == "config": self.show_config() elif canonical == "redraw": # Manual recovery for terminal buffer drift from multiplexer # tab switches, subshell ``clear``, SSH window restores, etc. # See issue #8688 (cmux). Ctrl+L is bound to the same helper. self._force_full_redraw() _cprint(f" {_DIM}✓ UI redrawn{_RST}") elif canonical == "clear": if self._confirm_destructive_slash( "clear", "This clears the screen and starts a new session.\n" "The current conversation history will be discarded.", cmd_original=cmd_original, ) is None: return True # confirmation cancelled — command handled, keep REPL alive self.new_session(silent=True) _clear_output_history() # Clear terminal screen. Inside the TUI, Rich's console.clear() # goes through patch_stdout's StdoutProxy which swallows the # screen-clear escape sequences. Use prompt_toolkit's output # object directly to actually clear the terminal. if self._app: out = self._app.output out.erase_screen() out.cursor_goto(0, 0) out.flush() else: self.console.clear() # Show fresh banner. Inside the TUI we must route Rich output # through ChatConsole (which uses prompt_toolkit's native ANSI # renderer) instead of self.console (which writes raw to stdout # and gets mangled by patch_stdout). if self._app: cc = ChatConsole() term_w = shutil.get_terminal_size().columns if self.compact or term_w < 80: cc.print(_build_compact_banner()) else: tools = get_tool_definitions(enabled_toolsets=self.enabled_toolsets, quiet_mode=True) cwd = os.getenv("TERMINAL_CWD", os.getcwd()) ctx_len = None if hasattr(self, 'agent') and self.agent and hasattr(self.agent, 'context_compressor'): ctx_len = self.agent.context_compressor.context_length build_welcome_banner( console=cc, model=self.model, cwd=cwd, tools=tools, enabled_toolsets=self.enabled_toolsets, session_id=self.session_id, context_length=ctx_len, ) _cprint(" ✨ (◕‿◕)✨ Fresh start! Screen cleared and conversation reset.\n") # Show a random tip on new session try: from hermes_cli.tips import get_random_tip _tip = get_random_tip() try: from hermes_cli.skin_engine import get_active_skin _tip_color = get_active_skin().get_color("banner_dim", "#B8860B") except Exception: _tip_color = "#B8860B" cc.print(f"[dim {_tip_color}]✦ Tip: {_tip}[/]") except Exception: pass else: self.show_banner() print(" ✨ (◕‿◕)✨ Fresh start! Screen cleared and conversation reset.\n") # Show a random tip on new session try: from hermes_cli.tips import get_random_tip _tip = get_random_tip() try: from hermes_cli.skin_engine import get_active_skin _tip_color = get_active_skin().get_color("banner_dim", "#B8860B") except Exception: _tip_color = "#B8860B" self._console_print(f"[dim {_tip_color}]✦ Tip: {_tip}[/]") except Exception: pass elif canonical == "history": self.show_history() elif canonical == "title": parts = cmd_original.split(maxsplit=1) if len(parts) > 1: raw_title = parts[1].strip() if raw_title: if self._session_db: # Sanitize the title early so feedback matches what gets stored try: from hermes_state import SessionDB new_title = SessionDB.sanitize_title(raw_title) except ValueError as e: _cprint(f" {e}") new_title = None if not new_title: _cprint(" Title is empty after cleanup. Please use printable characters.") elif self._session_db.get_session(self.session_id): # Session exists in DB — set title directly try: if self._session_db.set_session_title(self.session_id, new_title): _cprint(f" Session title set: {new_title}") else: _cprint(" Session not found in database.") except ValueError as e: _cprint(f" {e}") else: # Session not created yet — defer the title # Check uniqueness proactively with the sanitized title existing = self._session_db.get_session_by_title(new_title) if existing: _cprint(f" Title '{new_title}' is already in use by session {existing['id']}") else: self._pending_title = new_title _cprint(f" Session title queued: {new_title} (will be saved on first message)") else: from hermes_state import format_session_db_unavailable _cprint(f" {format_session_db_unavailable()}") else: _cprint(" Usage: /title ") # Show current title and session ID if no argument given elif self._session_db: _cprint(f" Session ID: {self.session_id}") session = self._session_db.get_session(self.session_id) if session and session.get("title"): _cprint(f" Title: {session['title']}") elif self._pending_title: _cprint(f" Title (pending): {self._pending_title}") else: _cprint(" No title set. Usage: /title ") else: from hermes_state import format_session_db_unavailable _cprint(f" {format_session_db_unavailable()}") elif canonical == "handoff": if not self._handle_handoff_command(cmd_original): return False elif canonical == "new": # Strip inline-skip tokens (now/--yes/-y) before deriving the title # so "/new now My Session" yields title="My Session" instead of # title="now My Session". See _split_destructive_skip. _new_args, _ = self._split_destructive_skip(cmd_original) title = _new_args.strip() or None if self._confirm_destructive_slash( "new", "This starts a fresh session.\n" "The current conversation history will be discarded.", cmd_original=cmd_original, ) is None: return True # confirmation cancelled — command handled, keep REPL alive self.new_session(title=title) elif canonical == "resume": self._handle_resume_command(cmd_original) elif canonical == "sessions": self._handle_sessions_command(cmd_original) elif canonical == "model": self._handle_model_switch(cmd_original) elif canonical == "codex-runtime": self._handle_codex_runtime(cmd_original) elif canonical == "gquota": self._handle_gquota_command(cmd_original) elif canonical == "personality": # Use original case (handler lowercases the personality name itself) self._handle_personality_command(cmd_original) elif canonical == "retry": retry_msg = self.retry_last() if retry_msg and hasattr(self, '_pending_input'): # Re-queue the message so process_loop sends it to the agent self._pending_input.put(retry_msg) elif canonical == "undo": # Parse optional turn count: "/undo" → 1, "/undo 3" → 3. _undo_n = 1 _undo_parts = cmd_original.split() if len(_undo_parts) > 1: try: _undo_n = int(_undo_parts[1]) except ValueError: print(f"(._.) Invalid count {_undo_parts[1]!r} — use /undo or /undo N.") return if _undo_n < 1: _undo_n = 1 _undo_desc = ( "This removes the last user/assistant exchange from history." if _undo_n == 1 else f"This removes the last {_undo_n} user turns from history." ) if self._confirm_destructive_slash( "undo", _undo_desc, cmd_original=cmd_original, ) is None: return True # confirmation cancelled — command handled, keep REPL alive self.undo_last(_undo_n) elif canonical == "branch": self._handle_branch_command(cmd_original) elif canonical == "save": self.save_conversation() elif canonical == "cron": self._handle_cron_command(cmd_original) elif canonical == "suggestions": self._handle_suggestions_command(cmd_original) elif canonical == "blueprint": self._handle_blueprint_command(cmd_original) elif canonical == "curator": self._handle_curator_command(cmd_original) elif canonical == "kanban": self._handle_kanban_command(cmd_original) elif canonical == "skills": with self._busy_command(self._slow_command_status(cmd_original)): self._handle_skills_command(cmd_original) elif canonical == "memory": self._handle_memory_command(cmd_original) elif canonical == "platforms": self._show_gateway_status() elif canonical == "status": self._show_session_status() elif canonical == "statusbar": self._status_bar_visible = not self._status_bar_visible state = "visible" if self._status_bar_visible else "hidden" self._console_print(f" Status bar {state}") elif canonical == "verbose": self._toggle_verbose() elif canonical == "footer": self._handle_footer_command(cmd_original) elif canonical == "yolo": self._toggle_yolo() elif canonical == "reasoning": self._handle_reasoning_command(cmd_original) elif canonical == "fast": self._handle_fast_command(cmd_original) elif canonical == "compress": self._manual_compress(cmd_original) elif canonical == "usage": self._show_usage() elif canonical == "credits": self._show_credits() elif canonical == "insights": self._show_insights(cmd_original) elif canonical == "copy": self._handle_copy_command(cmd_original) elif canonical == "debug": self._handle_debug_command() elif canonical == "update": if self._handle_update_command(): return False elif canonical == "version": from hermes_cli.main import _print_version_info _print_version_info(check_updates=True) elif canonical == "paste": self._handle_paste_command() elif canonical == "image": self._handle_image_command(cmd_original) elif canonical == "reload": from hermes_cli.config import reload_env count = reload_env() print(f" Reloaded .env ({count} var(s) updated)") elif canonical == "reload-mcp": # Interactive reload: confirm first (unless the user has opted out). # The auto-reload path (file watcher) calls _reload_mcp directly # without this confirmation. self._confirm_and_reload_mcp(cmd_original) elif canonical == "reload-skills": with self._busy_command(self._slow_command_status(cmd_original)): self._reload_skills() elif canonical == "bundles": self._handle_bundles_command(cmd_original) elif canonical == "browser": self._handle_browser_command(cmd_original) elif canonical == "plugins": try: # Discover from disk (bundled + user), matching `hermes plugins # list` — so installed-but-not-enabled plugins are visible here # too. The plugin manager only knows about *loaded* plugins, so # using it alone made freshly-installed, not-yet-enabled plugins # look like "nothing installed". from hermes_cli.plugins_cmd import ( _discover_all_plugins, _get_disabled_set, _get_enabled_set, _plugin_status, ) entries = _discover_all_plugins() enabled = _get_enabled_set() disabled = _get_disabled_set() # `/plugins` is a quick glance — default to user-installed # plugins (what the user actually added). Bundled provider/ # platform plugins are summarized on one line; the full # catalog lives behind `hermes plugins list`. user_entries = [e for e in entries if e[3] != "bundled"] bundled_count = len(entries) - len(user_entries) if not user_entries: print("No user plugins installed.") print(" Install one: hermes plugins install owner/repo") print(f" Or drop a plugin directory into {display_hermes_home()}/plugins/") if bundled_count: print(f" ({bundled_count} bundled plugins available — see: hermes plugins list)") else: # Loaded-plugin details (tools/hooks/commands counts, errors) # keyed by name, when available. loaded: dict = {} try: from hermes_cli.plugins import get_plugin_manager for p in get_plugin_manager().list_plugins(): loaded[p["name"]] = p except Exception: loaded = {} print(f"User plugins ({len(user_entries)}):") for name, version, _desc, source, _dir, key in sorted(user_entries): state = _plugin_status(name, enabled, disabled, key=key) glyph = {"enabled": "✓", "disabled": "✗"}.get(state, "○") ver = f" v{version}" if version else "" info = loaded.get(name) or {} bits = [] if info.get("tools"): bits.append(f"{info['tools']} tools") if info.get("hooks"): bits.append(f"{info['hooks']} hooks") if info.get("commands"): bits.append(f"{info['commands']} commands") detail = f" ({', '.join(bits)})" if bits else "" label = "" if state == "enabled" else f" [{state}]" error = f" — {info['error']}" if info.get("error") else "" print(f" {glyph} {name}{ver}{label}{detail}{error}") if bundled_count: print(f" (+{bundled_count} bundled — see: hermes plugins list)") print(" Enable/disable: hermes plugins enable/disable ") except Exception as e: print(f"Plugin system error: {e}") elif canonical == "rollback": self._handle_rollback_command(cmd_original) elif canonical == "snapshot": self._handle_snapshot_command(cmd_original) elif canonical == "stop": self._handle_stop_command() elif canonical == "agents": self._handle_agents_command() elif canonical == "background": self._handle_background_command(cmd_original) elif canonical == "queue": # Extract prompt after "/queue " or "/q " parts = cmd_original.split(None, 1) payload = parts[1].strip() if len(parts) > 1 else "" if not payload: _cprint(" Usage: /queue ") else: self._pending_input.put(payload) if self._agent_running: _cprint(f" Queued for the next turn: {payload[:80]}{'...' if len(payload) > 80 else ''}") else: _cprint(f" Queued: {payload[:80]}{'...' if len(payload) > 80 else ''}") elif canonical == "steer": # Inject a message after the next tool call without interrupting. # If the agent is actively running, push the text into the agent's # pending_steer slot — the drain hook in _execute_tool_calls_* # will append it to the next tool result's content. If no agent # is running, fall back to queue semantics (same as /queue). parts = cmd_original.split(None, 1) payload = parts[1].strip() if len(parts) > 1 else "" if not payload: _cprint(" Usage: /steer ") elif self._agent_running and self.agent is not None and hasattr(self.agent, "steer"): try: accepted = self.agent.steer(payload) except Exception as exc: _cprint(f" Steer failed: {exc}") else: if accepted: _cprint(f" ⏩ Steer queued — arrives after the next tool call: {payload[:80]}{'...' if len(payload) > 80 else ''}") else: _cprint(" Steer rejected (empty payload).") else: # No active run — treat as a normal next-turn message. self._pending_input.put(payload) _cprint(f" No agent running; queued as next turn: {payload[:80]}{'...' if len(payload) > 80 else ''}") elif canonical == "goal": self._handle_goal_command(cmd_original) elif canonical == "subgoal": self._handle_subgoal_command(cmd_original) elif canonical == "skin": self._handle_skin_command(cmd_original) elif canonical == "voice": self._handle_voice_command(cmd_original) elif canonical == "busy": self._handle_busy_command(cmd_original) else: # Check for user-defined quick commands (bypass agent loop, no LLM call) base_cmd = cmd_lower.split()[0] skill_commands = _ensure_skill_commands() skill_bundles = get_skill_bundles() quick_commands = self.config.get("quick_commands", {}) if base_cmd.lstrip("/") in quick_commands: qcmd = quick_commands[base_cmd.lstrip("/")] if qcmd.get("type") == "exec": import subprocess exec_cmd = qcmd.get("command", "") if exec_cmd: try: # shell=True is intentional: quick_commands are user-defined # shell snippets from config.yaml — not agent/LLM controlled. result = subprocess.run( exec_cmd, shell=True, capture_output=True, text=True, timeout=30 ) output = result.stdout.strip() or result.stderr.strip() if output: self._console_print(_rich_text_from_ansi(output)) else: self._console_print("[dim]Command returned no output[/]") except subprocess.TimeoutExpired: self._console_print("[bold red]Quick command timed out (30s)[/]") except Exception as e: self._console_print(f"[bold red]Quick command error: {e}[/]") else: self._console_print(f"[bold red]Quick command '{base_cmd}' has no command defined[/]") elif qcmd.get("type") == "alias": target = qcmd.get("target", "").strip() if target: target = target if target.startswith("/") else f"/{target}" user_args = cmd_original[len(base_cmd):].strip() aliased_command = f"{target} {user_args}".strip() return self.process_command(aliased_command) else: self._console_print(f"[bold red]Quick command '{base_cmd}' has no target defined[/]") else: self._console_print(f"[bold red]Quick command '{base_cmd}' has unsupported type (supported: 'exec', 'alias')[/]") # Check for plugin-registered slash commands elif base_cmd.lstrip("/") in _get_plugin_cmd_handler_names(): from hermes_cli.plugins import ( get_plugin_command_handler, resolve_plugin_command_result, ) plugin_handler = get_plugin_command_handler(base_cmd.lstrip("/")) if plugin_handler: user_args = cmd_original[len(base_cmd):].strip() try: result = resolve_plugin_command_result( plugin_handler(user_args) ) if result: _cprint(str(result)) except Exception as e: _cprint(f"\033[1;31mPlugin command error: {e}{_RST}") # Skill bundles take precedence over individual skills — / # loads multiple skills at once. Rescans cheaply when files change. elif base_cmd in skill_bundles: user_instruction = cmd_original[len(base_cmd):].strip() bundle_result = build_bundle_invocation_message( base_cmd, user_instruction, task_id=self.session_id ) if bundle_result: msg, loaded_names, missing = bundle_result bundle_info = skill_bundles[base_cmd] print( f"\n⚡ Loading bundle: {bundle_info['name']} " f"({len(loaded_names)} skills)" ) if missing: ChatConsole().print( f"[yellow]Skipped missing skills: {', '.join(missing)}[/]" ) if hasattr(self, '_pending_input'): self._pending_input.put(msg) else: ChatConsole().print( f"[bold red]Failed to load bundle for {base_cmd}[/]" ) # Check for skill slash commands (/gif-search, /axolotl, etc.) elif base_cmd in skill_commands: user_instruction = cmd_original[len(base_cmd):].strip() msg = build_skill_invocation_message( base_cmd, user_instruction, task_id=self.session_id ) if msg: skill_name = skill_commands[base_cmd]["name"] print(f"\n⚡ Loading skill: {skill_name}") if hasattr(self, '_pending_input'): self._pending_input.put(msg) else: ChatConsole().print(f"[bold red]Failed to load skill for {base_cmd}[/]") else: # Prefix matching: if input uniquely identifies one command, execute it. # Matches against both built-in COMMANDS and installed skill commands so # that execution-time resolution agrees with tab-completion. from hermes_cli.commands import COMMANDS typed_base = cmd_lower.split()[0] all_known = set(COMMANDS) | set(skill_commands) | set(skill_bundles) matches = [c for c in all_known if c.startswith(typed_base)] if len(matches) > 1: # Prefer an exact match (typed the full command name) exact = [c for c in matches if c == typed_base] if len(exact) == 1: matches = exact else: # Prefer the unique shortest match: # /qui → /quit (5) wins over /quint-pipeline (15) min_len = min(len(c) for c in matches) shortest = [c for c in matches if len(c) == min_len] if len(shortest) == 1: matches = shortest if len(matches) == 1: # Expand the prefix to the full command name, preserving arguments. # Guard against redispatching the same token to avoid infinite # recursion when the expanded name still doesn't hit an exact branch # (e.g. /config with extra args that are not yet handled above). full_name = matches[0] if full_name == typed_base: # Already an exact token — no expansion possible; fall through _cprint(f"\033[1;31mUnknown command: {cmd_lower}{_RST}") _cprint(f"{_DIM}{_ACCENT}Type /help for available commands{_RST}") else: remainder = cmd_original.strip()[len(typed_base):] full_cmd = full_name + remainder return self.process_command(full_cmd) elif len(matches) > 1: _cprint(f"{_ACCENT}Ambiguous command: {cmd_lower}{_RST}") _cprint(f"{_DIM}Did you mean: {', '.join(sorted(matches))}?{_RST}") else: _cprint(f"\033[1;31mUnknown command: {cmd_lower}{_RST}") _cprint(f"{_DIM}{_ACCENT}Type /help for available commands{_RST}") return True @staticmethod def _try_launch_chrome_debug(port: int, system: str) -> bool: """Try to launch a Chromium-family browser with remote debugging enabled. Uses a dedicated user-data-dir so the debug instance doesn't conflict with an already-running browser using the default profile. Returns True if a launch command was executed (doesn't guarantee success). """ return try_launch_chrome_debug(port, system) # ──────────────────────────────────────────────────────────────── # /goal — persistent cross-turn goals (Ralph-style loop) # ──────────────────────────────────────────────────────────────── def _get_goal_manager(self): """Return the GoalManager bound to the current session_id. Cached on ``self._goal_manager`` and rebound lazily when ``session_id`` changes (e.g. after /new or a compression-driven session split). """ try: from hermes_cli.goals import GoalManager from hermes_cli.config import load_config except Exception as exc: logging.debug("goal manager unavailable: %s", exc) return None sid = getattr(self, "session_id", None) or "" if not sid: return None existing = getattr(self, "_goal_manager", None) if existing is not None and getattr(existing, "session_id", None) == sid: return existing try: cfg = load_config() or {} goals_cfg = cfg.get("goals") or {} max_turns = int(goals_cfg.get("max_turns", 20) or 20) except Exception: max_turns = 20 mgr = GoalManager(session_id=sid, default_max_turns=max_turns) self._goal_manager = mgr return mgr def _maybe_continue_goal_after_turn(self) -> None: """Hook run after every CLI turn. Judges + maybe re-queues. Safe to call when no goal is set — returns quickly. Preemption is automatic: if a real user message is already in ``_pending_input`` we skip judging (the user's new input takes priority and we'll re-judge after that turn). If judge says done, mark it done and tell the user. If judge says continue and we're under budget, push the continuation prompt onto the queue. Interrupt handling: if the turn was user-cancelled (Ctrl+C), we AUTO-PAUSE the goal instead of judging + re-queuing. Otherwise Ctrl+C feels like it did nothing — the judge runs on whatever partial output landed, almost always says "continue", and the loop keeps going. Auto-pause keeps the goal recoverable via ``/goal resume`` once the user has sorted out what they want. The empty-response skip mirrors the gateway guard at ``_handle_message`` in ``gateway/run.py``. """ mgr = self._get_goal_manager() if mgr is None or not mgr.is_active(): return # If a real user message is already queued, don't inject a # continuation prompt on top — let the user's turn go first. # Slash commands don't count as "real user messages" for this # check: they're inspection/mutation (e.g. /subgoal added mid- # run) and the process_loop dispatches them via process_command, # not via chat(). If we treat a queued /subgoal as preempting, # the goal loop silently stalls — we'd return here, then the # slash command consumes its queue slot via process_command() # which never re-fires the goal hook. Peek at all queued entries # and only defer when there's a non-slash payload. try: pending = getattr(self, "_pending_input", None) if pending is not None and not pending.empty(): has_real_message = False try: # Queue.queue is the underlying deque — direct peek # without disturbing FIFO order. for entry in list(pending.queue): # Bundled payloads are (text, images) tuples; # unpack for inspection. if isinstance(entry, tuple) and entry: entry = entry[0] if isinstance(entry, str) and _looks_like_slash_command(entry): continue has_real_message = True break except Exception: # Fallback: if we can't introspect the queue, behave # like the old check and defer to be safe. has_real_message = True if has_real_message: return except Exception: pass # If the turn was user-interrupted (Ctrl+C), auto-pause the goal # and bail. The judge call would almost always return "continue" # on the partial output and immediately re-queue another turn, # which is exactly what the user cancelled. Pausing (rather than # silently skipping) is the observable, recoverable behavior. if getattr(self, "_last_turn_interrupted", False): try: mgr.pause(reason="user-interrupted (Ctrl+C)") except Exception as exc: logging.debug("goal pause-on-interrupt failed: %s", exc) _cprint( f" {_DIM}⏸ Goal paused — turn was interrupted. " f"Use /goal resume to continue, or /goal clear to stop.{_RST}" ) return # Extract the agent's final response for this turn. last_response = "" try: hist = self.conversation_history or [] for msg in reversed(hist): if msg.get("role") == "assistant": content = msg.get("content", "") if isinstance(content, list): # Multimodal content — flatten text parts. parts = [ p.get("text", "") for p in content if isinstance(p, dict) and p.get("type") in {"text", "output_text"} ] last_response = "\n".join(t for t in parts if t) else: last_response = str(content or "") break except Exception: last_response = "" # Skip judging on empty/whitespace-only responses. These are almost # always transient failures (API error, empty stream) where the # judge would say "continue" and trip the consecutive-parse-failures # backstop unnecessarily. Mirrors the gateway guard. if not last_response.strip(): return decision = mgr.evaluate_after_turn(last_response, user_initiated=True) msg = decision.get("message") or "" if msg: _cprint(f" {msg}") if decision.get("should_continue"): prompt = decision.get("continuation_prompt") if prompt: try: self._pending_input.put(prompt) except Exception as exc: logging.debug("goal continuation enqueue failed: %s", exc) def _toggle_verbose(self): """Cycle tool progress mode: off → new → all → verbose → off. Tool-progress display (full args / results / think blocks at the ``verbose`` step) is INDEPENDENT of global DEBUG logging. Cycling through here does not change ``self.verbose`` or the agent's ``verbose_logging`` / ``quiet_mode`` — those remain under the explicit ``-v``/``--verbose`` flag and the ``/verbose-logging`` toggle. See PR #6a1aa420e for the history that decoupled them. """ cycle = ["off", "new", "all", "verbose"] try: idx = cycle.index(self.tool_progress_mode) except ValueError: idx = 2 # default to "all" self.tool_progress_mode = cycle[(idx + 1) % len(cycle)] if self.agent: self.agent.reasoning_callback = self._current_reasoning_callback() # Keep the live agent's tool_progress_mode in sync so the # tool_executor rendering path reflects the new mode this turn, # without waiting for an agent rebuild. self.agent.tool_progress_mode = self.tool_progress_mode # Use raw ANSI codes via _cprint so the output is routed through # prompt_toolkit's renderer. self.console.print() with Rich markup # writes directly to stdout which patch_stdout's StdoutProxy mangles # into garbled sequences like '?[33mTool progress: NEW?[0m' (#2262). from hermes_cli.colors import Colors as _Colors labels = { "off": f"{_Colors.DIM}Tool progress: OFF{_Colors.RESET} — silent mode, just the final response.", "new": f"{_Colors.YELLOW}Tool progress: NEW{_Colors.RESET} — show each new tool (skip repeats).", "all": f"{_Colors.GREEN}Tool progress: ALL{_Colors.RESET} — show every tool call.", "verbose": f"{_Colors.BOLD}{_Colors.GREEN}Tool progress: VERBOSE{_Colors.RESET} — full args, results, and think blocks.", } _cprint(labels.get(self.tool_progress_mode, "")) def _transfer_session_yolo(self, old_session_id: str, new_session_id: str) -> None: """Move YOLO bypass state from an old session key to a new one. Called whenever ``self.session_id`` is reassigned mid-run — ``/branch`` forks into a new session, and auto-compression rotates the agent's session id into a fresh continuation session. Without this transfer the user's ``/yolo ON`` toggle would silently revert on the very next turn (the same UX failure mode that motivated this entire fix), since ``_session_yolo`` is keyed by session id. Mirrors ``tui_gateway/server.py`` (~line 1297-1305) which performs the same transfer for the TUI's session-rename path. No-op when YOLO wasn't enabled or when the ids match. """ if not old_session_id or not new_session_id or old_session_id == new_session_id: return try: from tools.approval import ( disable_session_yolo, enable_session_yolo, is_session_yolo_enabled, ) except Exception: return if is_session_yolo_enabled(old_session_id): enable_session_yolo(new_session_id) disable_session_yolo(old_session_id) def _is_session_yolo_active(self) -> bool: """Whether YOLO bypass is currently enabled for this CLI session. Reads from ``tools.approval._session_yolo`` (the same set that ``enable_session_yolo`` / ``disable_session_yolo`` write to) so the status bar reflects the actual bypass state instead of a stale env var. Also honors the process-start ``--yolo`` flag, which freezes ``HERMES_YOLO_MODE`` into ``_YOLO_MODE_FROZEN`` before tool imports happen. """ try: from tools.approval import ( _YOLO_MODE_FROZEN, is_session_yolo_enabled, ) except Exception: return False if _YOLO_MODE_FROZEN: return True # Use ``getattr`` so test fixtures that build a CLI via ``__new__`` # (skipping ``__init__``) don't trip an AttributeError here; the # status-bar builders swallow exceptions silently but lose every # field after the failure. session_key = getattr(self, "session_id", None) or "default" return is_session_yolo_enabled(session_key) def _toggle_yolo(self): """Toggle YOLO mode — skip all dangerous command approval prompts. Per-session toggle that mirrors the gateway and TUI ``/yolo`` handlers (see ``gateway/run.py:_handle_yolo_command`` and ``tui_gateway/server.py`` key=="yolo"). We deliberately do NOT mutate ``HERMES_YOLO_MODE`` here — that env var is read once at module import time into ``tools.approval._YOLO_MODE_FROZEN`` to keep prompt-injected skills from flipping the bypass mid-session, so setting it after CLI startup is a silent no-op. Routing through ``enable_session_yolo`` / ``disable_session_yolo`` gives the same auditable, per-session bypass the other surfaces have. ``run_conversation`` binds ``self.session_id`` as the active approval session key via ``set_current_session_key`` so the bypass takes effect on the very next dangerous command in this run. """ from hermes_cli.colors import Colors as _Colors from tools.approval import ( disable_session_yolo, enable_session_yolo, is_session_yolo_enabled, ) session_key = self.session_id or "default" if is_session_yolo_enabled(session_key): disable_session_yolo(session_key) _cprint( f" ⚠ YOLO mode {_Colors.BOLD}{_Colors.RED}OFF{_Colors.RESET}" " — dangerous commands will require approval." ) else: enable_session_yolo(session_key) _cprint( f" ⚡ YOLO mode {_Colors.BOLD}{_Colors.GREEN}ON{_Colors.RESET}" " — all commands auto-approved. Use with caution." ) def _on_reasoning(self, reasoning_text: str): """Callback for intermediate reasoning display during tool-call loops.""" if not reasoning_text: return self._reasoning_preview_buf = getattr(self, "_reasoning_preview_buf", "") + reasoning_text self._flush_reasoning_preview(force=False) def _manual_compress(self, cmd_original: str = ""): """Manually trigger context compression on the current conversation. Two modes: * ``/compress []`` — compress the *whole* history. An optional focus topic guides the summariser to preserve information related to *focus* while being more aggressive about discarding everything else. Inspired by Claude Code's ``/compact `` feature. * ``/compress here [N]`` — boundary-aware compression. Summarize everything *except* the most recent ``N`` exchanges (default 2), which are preserved verbatim. Inspired by Claude Code's Rewind "Summarize up to here" action (v2.1.139, May 2026, https://code.claude.com/docs/en/whats-new/2026-w20). Lets the user pick the compression boundary instead of leaving it to the automatic token-budget heuristic. """ if not self.conversation_history or len(self.conversation_history) < 4: print("(._.) Not enough conversation to compress (need at least 4 messages).") return if not self.agent: print("(._.) No active agent -- send a message first.") return if not self.agent.compression_enabled: print("(._.) Compression is disabled in config.") return from hermes_cli.partial_compress import ( parse_partial_compress_args, rejoin_compressed_head_and_tail, split_history_for_partial_compress, ) # Args after the command word (e.g. "/compress here 3" -> "here 3"). raw_args = "" if cmd_original: _parts = cmd_original.strip().split(None, 1) if len(_parts) > 1: raw_args = _parts[1].strip() partial, keep_last, focus_topic = parse_partial_compress_args(raw_args) focus_topic = focus_topic or "" original_count = len(self.conversation_history) with self._busy_command("Compressing context..."): try: from agent.model_metadata import estimate_request_tokens_rough from agent.manual_compression_feedback import summarize_manual_compression original_history = list(self.conversation_history) # Boundary-aware split: only the head is summarized; the # most recent `keep_last` exchanges ride along verbatim. tail: list = [] head = original_history if partial: head, tail = split_history_for_partial_compress( original_history, keep_last ) if not tail: # Split degenerated (everything would be kept, or # no head left to compress). Fall back to full # compression so the user still gets an action. partial = False head = original_history # Include system prompt + tool schemas in the estimate — # a transcript-only number understates real request pressure # and can even appear to grow after compression because a # dense handoff summary replaces many short turns (#6217). _sys_prompt = getattr(self.agent, "_cached_system_prompt", "") or "" _tools = getattr(self.agent, "tools", None) or None approx_tokens = estimate_request_tokens_rough( original_history, system_prompt=_sys_prompt, tools=_tools, ) if partial: print(f"🗜️ Summarizing up to here: compressing {len(head)} of " f"{original_count} messages (~{approx_tokens:,} tokens), " f"keeping last {keep_last} exchange(s) verbatim...") elif focus_topic: print(f"🗜️ Compressing {original_count} messages (~{approx_tokens:,} tokens), " f"focus: \"{focus_topic}\"...") else: print(f"🗜️ Compressing {original_count} messages (~{approx_tokens:,} tokens)...") # Pass None as system_message so _compress_context rebuilds # the system prompt from scratch via _build_system_prompt(None). # Passing _cached_system_prompt caused duplication because # _build_system_prompt appends system_message to prompt_parts # which already contain the agent identity — resulting in the # identity block appearing twice (issue #15281). compressed, _ = self.agent._compress_context( head, None, approx_tokens=approx_tokens, focus_topic=focus_topic or None, force=True, ) # Re-append the verbatim tail after the compressed head. # The split guarantees `tail` begins on a user turn, so the # compressed-head -> tail boundary is normally valid # (the head's compressed output ends on assistant/tool). # rejoin_compressed_head_and_tail() additionally guards the # seam against any illegal user->user / assistant->assistant # adjacency, defending provider role-alternation rules. if partial and tail: compressed = rejoin_compressed_head_and_tail(compressed, tail) self.conversation_history = compressed # _compress_context ends the old session and creates a new child # session on the agent (run_agent.py::_compress_context). Sync the # CLI's session_id so /status, /resume, exit summary, and title # generation all point at the live continuation session, not the # ended parent. Without this, subsequent end_session() calls target # the already-closed parent and the child is orphaned. if ( getattr(self.agent, "session_id", None) and self.agent.session_id != self.session_id ): self.session_id = self.agent.session_id self._pending_title = None # Manual /compress replaces conversation_history with a new # compressed handoff for the child session. Persist it from # offset 0 so resume can recover the continuation after exit. self.agent._flush_messages_to_session_db(self.conversation_history, None) new_tokens = estimate_request_tokens_rough( self.conversation_history, system_prompt=_sys_prompt, tools=_tools, ) summary = summarize_manual_compression( original_history, self.conversation_history, approx_tokens, new_tokens, ) icon = "🗜️" if summary["noop"] else "✅" print(f" {icon} {summary['headline']}") print(f" {summary['token_line']}") if summary["note"]: print(f" {summary['note']}") except Exception as e: print(f" ❌ Compression failed: {e}") def _show_usage(self): """Rate limits + session token usage (when a live agent exists) + Nous credits. The Nous credits block is agent-independent (a portal fetch), so it runs even with no live agent — important for the TUI, where /usage runs in a slash-worker subprocess that resumes the session WITHOUT building an agent (self.agent is None), which would otherwise early-return before any credits showed. """ if not self.agent: if not self._print_nous_credits_block(): print("(._.) No active agent -- send a message first.") return agent = self.agent calls = agent.session_api_calls if calls == 0: if not self._print_nous_credits_block(): print("(._.) No API calls made yet in this session.") return # ── Rate limits (shown first when available) ──────────────── rl_state = agent.get_rate_limit_state() if rl_state and rl_state.has_data: from agent.rate_limit_tracker import format_rate_limit_display print() print(format_rate_limit_display(rl_state)) print() # ── Session token usage ───────────────────────────────────── input_tokens = getattr(agent, "session_input_tokens", 0) or 0 output_tokens = getattr(agent, "session_output_tokens", 0) or 0 cache_read_tokens = getattr(agent, "session_cache_read_tokens", 0) or 0 cache_write_tokens = getattr(agent, "session_cache_write_tokens", 0) or 0 reasoning_tokens = getattr(agent, "session_reasoning_tokens", 0) or 0 prompt = agent.session_prompt_tokens completion = agent.session_completion_tokens total = agent.session_total_tokens compressor = agent.context_compressor last_prompt = compressor.last_prompt_tokens ctx_len = compressor.context_length pct = min(100, (last_prompt / ctx_len * 100)) if ctx_len else 0 compressions = compressor.compression_count msg_count = len(self.conversation_history) cost_result = estimate_usage_cost( agent.model, CanonicalUsage( input_tokens=input_tokens, output_tokens=output_tokens, cache_read_tokens=cache_read_tokens, cache_write_tokens=cache_write_tokens, ), provider=getattr(agent, "provider", None), base_url=getattr(agent, "base_url", None), ) elapsed = format_duration_compact((datetime.now() - self.session_start).total_seconds()) print(" 📊 Session Token Usage") print(f" {'─' * 40}") print(f" Model: {agent.model}") print(f" Input tokens: {input_tokens:>10,}") print(f" Cache read tokens: {cache_read_tokens:>10,}") print(f" Cache write tokens: {cache_write_tokens:>10,}") print(f" Output tokens: {output_tokens:>10,}") if reasoning_tokens: print(f" ↳ Reasoning (subset): {reasoning_tokens:>10,}") print(f" Prompt tokens (total): {prompt:>10,}") print(f" Completion tokens: {completion:>10,}") print(f" Total tokens: {total:>10,}") print(f" API calls: {calls:>10,}") print(f" Session duration: {elapsed:>10}") print(f" Cost status: {cost_result.status:>10}") print(f" Cost source: {cost_result.source:>10}") if cost_result.amount_usd is not None: prefix = "~" if cost_result.status == "estimated" else "" print(f" Total cost: {prefix}${float(cost_result.amount_usd):>10.4f}") elif cost_result.status == "included": print(f" Total cost: {'included':>10}") else: print(f" Total cost: {'n/a':>10}") print(f" {'─' * 40}") print(f" Current context: {last_prompt:,} / {ctx_len:,} ({pct:.0f}%)") print(f" Messages: {msg_count}") print(f" Compressions: {compressions}") if cost_result.status == "unknown": print(f" Note: Pricing unknown for {agent.model}") # Account limits -- fetched off-thread with a hard timeout so slow # provider APIs don't hang the prompt. provider = getattr(agent, "provider", None) or getattr(self, "provider", None) base_url = getattr(agent, "base_url", None) or getattr(self, "base_url", None) api_key = getattr(agent, "api_key", None) or getattr(self, "api_key", None) # Lazy import — pulls the OpenAI SDK chain, only needed here. from agent.account_usage import fetch_account_usage, render_account_usage_lines account_snapshot = None if provider: with concurrent.futures.ThreadPoolExecutor(max_workers=1) as _pool: try: account_snapshot = _pool.submit( fetch_account_usage, provider, base_url=base_url, api_key=api_key, ).result(timeout=10.0) except (concurrent.futures.TimeoutError, Exception): account_snapshot = None account_lines = [f" {line}" for line in render_account_usage_lines(account_snapshot)] if account_lines: print() for line in account_lines: print(line) # Nous credits magnitudes + monthly-grant gauge (agent-independent — also # runs at the no-agent / no-calls early-returns above). See the helper. self._print_nous_credits_block() if self.verbose: logging.getLogger().setLevel(logging.DEBUG) for noisy in ('openai', 'openai._base_client', 'httpx', 'httpcore', 'asyncio', 'hpack', 'grpc', 'modal'): logging.getLogger(noisy).setLevel(logging.WARNING) else: logging.getLogger().setLevel(logging.INFO) # NOTE: We deliberately do NOT raise per-logger levels for # tools/run_agent/etc. in quiet mode. Setting logger.setLevel # above the file handler level filters records before they # reach handlers, so agent.log / errors.log lose visibility # into stream-retry events, credential rotations, etc. # Console quietness is enforced by hermes_logging not # installing a console StreamHandler in non-verbose mode. def _print_nous_credits_block(self) -> bool: """Print the Nous credits magnitudes + monthly-grant gauge when a Nous account is logged in. Returns True if it printed anything. Delegates to the shared ``agent.account_usage.nous_credits_lines`` helper — the single source for the /usage credits block across CLI, gateway, and TUI. It's agent-independent (a portal fetch gated on "a Nous account is logged in", NOT the inference-provider string), so /usage shows the block even in the TUI slash-worker subprocess that resumes WITHOUT a live agent. Fail-open and wall-clock-bounded inside the helper; also honors HERMES_DEV_CREDITS_FIXTURE for offline testing — same behavior as every other surface. """ from agent.account_usage import nous_credits_lines lines = nous_credits_lines() if not lines: return False print() for line in lines: print(f" {line}") return True def _show_credits(self): """`/credits` — focused Nous credit balance + top-up handoff. Interactive CLI: balance block + identity line + a 3-button panel (Open top-up / Copy link / Cancel). Non-interactive contexts — the TUI slash-worker subprocess and any place without a live prompt_toolkit app (``self._app is None``) — render a text variant (balance + tappable top-up URL), because the modal would try to read the RPC stdin and crash the worker. The terminal never confirms or polls payment (billing phase 2a). Fail-open: a portal hiccup or logged-out account degrades to a clear message, never a crash. """ from agent.account_usage import build_credits_view view = build_credits_view() if not view.logged_in: print() print(f" 💳 {_DIM}Not logged into Nous Portal.{_RST}") print(" Run `hermes portal` to log in, then /credits.") return print() print(" 💳 Nous credits") print(f" {'─' * 41}") for line in view.balance_lines: # Drop the helper's own "📈 Nous credits" header — we print our own. if line.lstrip().startswith("📈"): continue print(f" {line}") print(f" {'─' * 41}") if view.identity_line: print(f" {view.identity_line}") if not view.topup_url: return # Non-interactive (TUI slash-worker, piped, no live app): the # prompt_toolkit modal can't run here — it would read the worker's # JSON-RPC stdin and crash the command. Render the text variant: the # tappable URL IS the affordance, same as the messaging surfaces. if not getattr(self, "_app", None): print() print(f" Top up: {view.topup_url}") print(" Complete your top-up in the browser — credits will appear in /credits shortly.") return choices = [ ("open", "Open top-up in browser", "launch the portal billing page"), ("copy", "Copy link", "copy the top-up URL to your clipboard"), ("cancel", "Cancel", "do nothing"), ] raw = self._prompt_text_input_modal( title="💳 Add credits?", detail=f"Top-up page:\n{view.topup_url}", choices=choices, ) choice = self._normalize_slash_confirm_choice(raw, choices) if choice == "open": opened = False try: import webbrowser opened = webbrowser.open(view.topup_url) except Exception: opened = False if not opened: print(f" Open this URL to top up: {view.topup_url}") print() print(" Complete your top-up in the browser — credits will appear in /credits shortly.") elif choice == "copy": try: self._write_osc52_clipboard(view.topup_url) print(f" 📋 Copied: {view.topup_url}") except Exception: print(f" Top-up URL: {view.topup_url}") else: print(" 🟡 Cancelled. No credits added.") def _show_insights(self, command: str = "/insights"): """Show usage insights and analytics from session history.""" # Parse optional --days flag parts = command.split() days = 30 source = None i = 1 while i < len(parts): if parts[i] == "--days" and i + 1 < len(parts): try: days = int(parts[i + 1]) except ValueError: print(f" Invalid --days value: {parts[i + 1]}") return i += 2 elif parts[i] == "--source" and i + 1 < len(parts): source = parts[i + 1] i += 2 elif parts[i].isdigit(): days = int(parts[i]) i += 1 else: i += 1 try: from hermes_state import SessionDB from agent.insights import InsightsEngine db = SessionDB() engine = InsightsEngine(db) report = engine.generate(days=days, source=source) print(engine.format_terminal(report)) db.close() except Exception as e: print(f" Error generating insights: {e}") def _check_config_mcp_changes(self) -> None: """Detect mcp_servers changes in config.yaml and auto-reload MCP connections. Called from process_loop every CONFIG_WATCH_INTERVAL seconds. Compares config.yaml mtime + mcp_servers section against the last known state. When a change is detected, triggers _reload_mcp() and informs the user so they know the tool list has been refreshed. """ import yaml as _yaml CONFIG_WATCH_INTERVAL = 5.0 # seconds between config.yaml stat() calls now = time.monotonic() if now - self._last_config_check < CONFIG_WATCH_INTERVAL: return self._last_config_check = now from hermes_cli.config import get_config_path as _get_config_path cfg_path = _get_config_path() if not cfg_path.exists(): return try: mtime = cfg_path.stat().st_mtime except OSError: return if mtime == self._config_mtime: return # File unchanged — fast path # File changed — check whether mcp_servers section changed self._config_mtime = mtime try: with open(cfg_path, encoding="utf-8") as f: new_cfg = _yaml.safe_load(f) or {} except Exception: return new_mcp = new_cfg.get("mcp_servers") or {} if new_mcp == self._config_mcp_servers: return # mcp_servers unchanged (some other section was edited) self._config_mcp_servers = new_mcp # Notify user and reload. Run in a separate thread with a hard # timeout so a hung MCP server cannot block the process_loop # indefinitely (which would freeze the entire TUI). print() print("🔄 MCP server config changed — reloading connections...") _reload_thread = threading.Thread( target=self._reload_mcp, daemon=True ) _reload_thread.start() _reload_thread.join(timeout=30) if _reload_thread.is_alive(): print(" ⚠️ MCP reload timed out (30s). Some servers may not have reconnected.") # Inline-skip tokens that bypass the destructive-slash confirmation modal. # A general escape hatch for non-interactive use (scripting/automation) and # for the degraded path where the modal can't be marshaled onto the app loop # — lets users self-serve without flipping approvals.destructive_slash_confirm # in config. (Native Windows now drives the modal normally — see #33961.) _DESTRUCTIVE_SKIP_TOKENS = frozenset({"now", "--yes", "-y"}) @classmethod def _split_destructive_skip(cls, cmd_text: Optional[str]) -> tuple[str, bool]: """Split inline-skip tokens out of a destructive slash command. Returns ``(remainder, skip)`` where ``remainder`` is the original text with the command word and any recognized skip tokens removed, and ``skip`` is True iff at least one skip token was found. Examples: "/reset now" -> ("", True) "/reset --yes My title" -> ("My title", True) "/new My title" -> ("My title", False) "/clear" -> ("", False) """ if not cmd_text: return "", False tokens = cmd_text.strip().split() if not tokens: return "", False # Drop leading "/cmd" word — callers pass the full command text. if tokens[0].startswith("/"): tokens = tokens[1:] skip = False kept: list[str] = [] for tok in tokens: if tok.lower() in cls._DESTRUCTIVE_SKIP_TOKENS: skip = True continue kept.append(tok) return " ".join(kept), skip def _confirm_destructive_slash( self, command: str, detail: str, cmd_original: Optional[str] = None, ) -> Optional[str]: """Prompt the user to confirm a destructive session slash command. Used by ``/clear``, ``/new``/``/reset``, and ``/undo`` before they discard conversation state. Three-option prompt: 1. Approve Once — proceed this time only 2. Always Approve — proceed and persist ``approvals.destructive_slash_confirm: false`` so future destructive commands run without confirmation 3. Cancel — abort Gated by ``approvals.destructive_slash_confirm`` (default on). If the gate is off the function returns ``"once"`` immediately without prompting. Inline-skip: if ``cmd_original`` contains ``now``, ``--yes``, or ``-y`` as an argument (e.g. ``/reset now``, ``/new --yes My title``), the modal is bypassed and ``"once"`` is returned immediately. This is an escape hatch for non-interactive use and for the degraded path where the modal can't be marshaled onto the app loop (native Windows itself now drives the modal normally — see #33961). Callers are responsible for stripping the skip tokens from any remaining argument parsing (see :meth:`_split_destructive_skip`). Returns ``"once"``, ``"always"``, or ``None`` (cancelled). Callers proceed with the destructive action when the result is non-None. """ # Inline-skip escape hatch — works regardless of platform/modal state. # See class-level _DESTRUCTIVE_SKIP_TOKENS for the accepted tokens. if cmd_original: _, _skip = self._split_destructive_skip(cmd_original) if _skip: return "once" # Gate check — respects prior "Always Approve" clicks. try: cfg = load_cli_config() approvals = cfg.get("approvals") if isinstance(cfg, dict) else None confirm_required = True if isinstance(approvals, dict): confirm_required = bool(approvals.get("destructive_slash_confirm", True)) except Exception: confirm_required = True if not confirm_required: return "once" # Render a prompt_toolkit-native confirmation panel. This keeps option # labels visible above the composer and avoids raw input()/EOF races with # the running TUI. choices = [ ("once", "Approve Once", "proceed this time only"), ("always", "Always Approve", "proceed and silence this prompt permanently"), ("cancel", "Cancel", "keep current conversation"), ] raw = self._prompt_text_input_modal( title=f"⚠️ /{command} — destroys conversation state", detail=detail, choices=choices, ) if raw is None: print(f"🟡 /{command} cancelled (no input).") return None choice = self._normalize_slash_confirm_choice(raw, choices) if choice is None: print(f"🟡 Unrecognized choice '{raw}'. /{command} cancelled.") return None if choice == "cancel": print(f"🟡 /{command} cancelled. Conversation unchanged.") return None if choice == "always": if save_config_value("approvals.destructive_slash_confirm", False): print("🔒 Future /clear, /new, /reset, and /undo will run without confirmation.") print(" Re-enable via `approvals.destructive_slash_confirm: true` in config.yaml.") else: print("⚠️ Couldn't persist opt-out — proceeding once.") return choice def _confirm_and_reload_mcp(self, cmd_original: str = "") -> None: """Interactive /reload-mcp — confirm with the user, then reload. Reloading MCP tools invalidates the provider prompt cache for the active session (tool schemas are baked into the system prompt). The next message re-sends full input tokens — can be expensive on long-context or high-reasoning models. Three options: Approve Once, Always Approve (persists ``approvals.mcp_reload_confirm: false`` so future reloads run without this prompt), Cancel. Gated by ``approvals.mcp_reload_confirm`` — default on. """ # Gate check — respects prior "Always Approve" clicks. try: cfg = load_cli_config() approvals = cfg.get("approvals") if isinstance(cfg, dict) else None confirm_required = True if isinstance(approvals, dict): confirm_required = bool(approvals.get("mcp_reload_confirm", True)) except Exception: confirm_required = True if not confirm_required: with self._busy_command(self._slow_command_status(cmd_original)): self._reload_mcp() return # Render warning + prompt. Use the same prompt_toolkit-native composer # modal as destructive slash confirmations so choices stay visible. choices = [ ("once", "Approve Once", "reload now"), ("always", "Always Approve", "reload now and silence this prompt permanently"), ("cancel", "Cancel", "leave MCP tools unchanged"), ] raw = self._prompt_text_input_modal( title="⚠️ /reload-mcp — Prompt cache invalidation warning", detail=( "Reloading MCP servers rebuilds the tool set for this session and\n" "invalidates the provider prompt cache. The next message will\n" "re-send full input tokens (can be expensive on long-context or\n" "high-reasoning models)." ), choices=choices, ) if raw is None: print("🟡 /reload-mcp cancelled (no input).") return choice = self._normalize_slash_confirm_choice(raw, choices) if choice is None: print(f"🟡 Unrecognized choice '{raw}'. /reload-mcp cancelled.") return if choice == "cancel": print("🟡 /reload-mcp cancelled. MCP tools unchanged.") return if choice == "always": if save_config_value("approvals.mcp_reload_confirm", False): print("🔒 Future /reload-mcp calls will run without confirmation.") print(" Re-enable via `approvals.mcp_reload_confirm: true` in config.yaml.") else: print("⚠️ Couldn't persist opt-out — reloading once.") with self._busy_command(self._slow_command_status(cmd_original)): self._reload_mcp() def _reload_mcp(self): """Reload MCP servers: disconnect all, re-read config.yaml, reconnect. After reconnecting, refreshes the agent's tool list so the model sees the updated tools on the next turn. """ try: from tools.mcp_tool import shutdown_mcp_servers, discover_mcp_tools, _servers, _lock # Capture old server names with _lock: old_servers = set(_servers.keys()) if not self._command_running: print("🔄 Reloading MCP servers...") # Shutdown existing connections shutdown_mcp_servers() # Reconnect (reads config.yaml fresh) new_tools = discover_mcp_tools() # Compute what changed with _lock: connected_servers = set(_servers.keys()) added = connected_servers - old_servers removed = old_servers - connected_servers reconnected = connected_servers & old_servers if reconnected: print(f" ♻️ Reconnected: {', '.join(sorted(reconnected))}") if added: print(f" ➕ Added: {', '.join(sorted(added))}") if removed: print(f" ➖ Removed: {', '.join(sorted(removed))}") if not connected_servers: print(" No MCP servers connected.") else: print(f" 🔧 {len(new_tools)} tool(s) available from {len(connected_servers)} server(s)") # Refresh the agent's tool list so the model can call new tools if self.agent is not None: self.agent.tools = get_tool_definitions( enabled_toolsets=self.agent.enabled_toolsets if hasattr(self.agent, "enabled_toolsets") else None, quiet_mode=True, ) self.agent.valid_tool_names = { tool["function"]["name"] for tool in self.agent.tools } if self.agent.tools else set() # Inject a message at the END of conversation history so the # model knows tools changed. Appended after all existing # messages to preserve prompt-cache for the prefix. change_parts = [] if added: change_parts.append(f"Added servers: {', '.join(sorted(added))}") if removed: change_parts.append(f"Removed servers: {', '.join(sorted(removed))}") if reconnected: change_parts.append(f"Reconnected servers: {', '.join(sorted(reconnected))}") tool_summary = f"{len(new_tools)} MCP tool(s) now available" if new_tools else "No MCP tools available" change_detail = ". ".join(change_parts) + ". " if change_parts else "" self.conversation_history.append({ "role": "user", "content": f"[IMPORTANT: MCP servers have been reloaded. {change_detail}{tool_summary}. The tool list for this conversation has been updated accordingly.]", }) # Persist session immediately so the session log reflects the # updated tools list (self.agent.tools was refreshed above). if self.agent is not None: try: self.agent._persist_session( self.conversation_history, self.conversation_history, ) except Exception: pass # Best-effort print(f" ✅ Agent updated — {len(self.agent.tools if self.agent else [])} tool(s) available") except Exception as e: print(f" ❌ MCP reload failed: {e}") def _reload_skills(self) -> None: """Reload skills: rescan ~/.hermes/skills/ and queue a note for the next user turn. Skills don't need to live in the system prompt for the model to use them (they're invoked via ``/skill-name``, ``skills_list``, or ``skill_view`` at runtime), so this does NOT clear the prompt cache. It rescans the slash-command map, prints the diff for the user, and — if any skills were added or removed — queues a one-shot note that gets prepended to the next user message. This preserves message alternation (no phantom user turn injected out of band) and keeps prompt caching intact. """ try: from agent.skill_commands import reload_skills, get_skill_commands if not self._command_running: print("🔄 Reloading skills...") result = reload_skills() # Sync cli.py's module-level _skill_commands so all consumers # (help display, command dispatch, Tab-completion lambda) see the # updated dict without needing to restart the session. global _skill_commands _skill_commands = get_skill_commands() added = result.get("added", []) # [{"name", "description"}, ...] removed = result.get("removed", []) # [{"name", "description"}, ...] total = result.get("total", 0) if not added and not removed: print(" No new skills detected.") print(f" 📚 {total} skill(s) available") return def _fmt_line(item: dict) -> str: nm = item.get("name", "") desc = item.get("description", "") return f" - {nm}: {desc}" if desc else f" - {nm}" if added: print(" ➕ Added Skills:") for item in added: print(f" {_fmt_line(item)}") if removed: print(" ➖ Removed Skills:") for item in removed: print(f" {_fmt_line(item)}") print(f" 📚 {total} skill(s) available") # Queue a one-shot note for the NEXT user turn. The CLI's agent # loop prepends ``_pending_skills_reload_note`` (if set) to the # API-call-local message at ~L8770, then clears it — same # pattern as ``_pending_model_switch_note``. Nothing is written # to conversation_history here, so message alternation stays # intact and no out-of-band user turn is persisted. # # Format matches how the system prompt renders pre-existing # skills (`` - name: description``) so the model reads the # diff in the same shape as its original skill catalog. sections = ["[USER INITIATED SKILLS RELOAD:"] if added: sections.append("") sections.append("Added Skills:") for item in added: sections.append(_fmt_line(item)) if removed: sections.append("") sections.append("Removed Skills:") for item in removed: sections.append(_fmt_line(item)) sections.append("") sections.append("Use skills_list to see the updated catalog.]") self._pending_skills_reload_note = "\n".join(sections) except Exception as e: print(f" ❌ Skills reload failed: {e}") # ==================================================================== # Tool-call generation indicator (shown during streaming) # ==================================================================== def _on_tool_gen_start(self, tool_name: str) -> None: """Called when the model begins generating tool-call arguments. Closes any open streaming boxes (reasoning / response) exactly once, then prints a short status line so the user sees activity instead of a frozen screen while a large payload (e.g. 45 KB write_file) streams. """ if getattr(self, "_stream_box_opened", False): self._flush_stream() self._stream_box_opened = False self._close_reasoning_box() from agent.display import get_tool_emoji emoji = get_tool_emoji(tool_name, default="⚡") _cprint(f" ┊ {emoji} preparing {tool_name}…") # ==================================================================== # Tool progress callback (audio cues for voice mode) # ==================================================================== def _on_tool_progress(self, event_type: str, function_name: str = None, preview: str = None, function_args: dict = None, **kwargs): """Called on tool lifecycle events (tool.started, tool.completed, reasoning.available, etc.). Updates the TUI spinner widget so the user can see what the agent is doing during tool execution (fills the gap between thinking spinner and next response). On tool.started, records a monotonic timestamp so get_spinner_text() can show a live elapsed timer (the TUI poll loop already invalidates every ~0.15s, so the counter updates automatically). When tool_progress_mode is "all" or "new", also prints a persistent stacked line to scrollback on tool.completed so users can see the full history of tool calls (not just the current one in the spinner). """ if event_type == "tool.completed": self._tool_start_time = 0.0 # Print stacked scrollback line for "all" / "new" modes if function_name and self.tool_progress_mode in {"all", "new"}: duration = kwargs.get("duration", 0.0) is_error = kwargs.get("is_error", False) # Pop stored args from tool.started for this function stored = self._pending_tool_info.get(function_name) stored_args = stored.pop(0) if stored else {} if stored is not None and not stored: del self._pending_tool_info[function_name] # "new" mode: skip consecutive repeats of the same tool if self.tool_progress_mode == "new" and function_name == self._last_scrollback_tool: self._invalidate() return self._last_scrollback_tool = function_name try: from agent.display import get_cute_tool_message line = get_cute_tool_message(function_name, stored_args, duration, result=kwargs.get("result")) _cprint(f" {line}") except Exception: pass # First-touch onboarding: on the first tool in this process # that takes longer than the threshold while we're in the # noisiest progress mode, print a one-time hint about # /verbose. Latched on self so it fires at most once per # process; persisted to config.yaml so it never fires again # across processes either. try: if ( not getattr(self, "_long_tool_hint_fired", False) and self.tool_progress_mode == "all" and duration >= 30.0 ): from agent.onboarding import ( TOOL_PROGRESS_FLAG, is_seen, mark_seen, tool_progress_hint_cli, ) if not is_seen(CLI_CONFIG, TOOL_PROGRESS_FLAG): self._long_tool_hint_fired = True _cprint(f" {_DIM}{tool_progress_hint_cli()}{_RST}") mark_seen(_hermes_home / "config.yaml", TOOL_PROGRESS_FLAG) CLI_CONFIG.setdefault("onboarding", {}).setdefault("seen", {})[TOOL_PROGRESS_FLAG] = True except Exception: pass self._invalidate() return if event_type != "tool.started": return if function_name and not function_name.startswith("_"): from agent.display import get_tool_emoji emoji = get_tool_emoji(function_name) label = preview or function_name from agent.display import get_tool_preview_max_len _pl = get_tool_preview_max_len() if _pl > 0 and len(label) > _pl: label = label[:_pl - 3] + "..." self._spinner_text = f"{emoji} {label}" self._tool_start_time = time.monotonic() # Store args for stacked scrollback line on completion self._pending_tool_info.setdefault(function_name, []).append( function_args if function_args is not None else {} ) self._invalidate() def _on_tool_start(self, tool_call_id: str, function_name: str, function_args: dict): """Capture local before-state for write-capable tools.""" try: from agent.display import capture_local_edit_snapshot snapshot = capture_local_edit_snapshot(function_name, function_args) if snapshot is not None: self._pending_edit_snapshots[tool_call_id] = snapshot except Exception: logger.debug("Edit snapshot capture failed for %s", function_name, exc_info=True) def _on_tool_complete(self, tool_call_id: str, function_name: str, function_args: dict, function_result: str): """Render file edits with inline diff after write-capable tools complete.""" snapshot = self._pending_edit_snapshots.pop(tool_call_id, None) try: from agent.display import render_edit_diff_with_delta render_edit_diff_with_delta( function_name, function_result, function_args=function_args, snapshot=snapshot, print_fn=_cprint, ) except Exception: logger.debug("Edit diff preview failed for %s", function_name, exc_info=True) # ==================================================================== # Voice mode methods # ==================================================================== def _voice_start_recording(self): """Start capturing audio from the microphone.""" if getattr(self, '_should_exit', False): return from tools.voice_mode import create_audio_recorder, check_voice_requirements reqs = check_voice_requirements() if not reqs["audio_available"]: if _is_termux_environment(): details = reqs.get("details", "") if "Termux:API Android app is not installed" in details: raise RuntimeError( "Termux:API command package detected, but the Android app is missing.\n" "Install/update the Termux:API Android app, then retry /voice on.\n" "Fallback: pkg install python-numpy portaudio && python -m pip install sounddevice" ) raise RuntimeError( "Voice mode requires either Termux:API microphone access or Python audio libraries.\n" "Option 1: pkg install termux-api and install the Termux:API Android app\n" "Option 2: pkg install python-numpy portaudio && python -m pip install sounddevice" ) raise RuntimeError( "Voice mode requires sounddevice and numpy.\n" f"Install with: {sys.executable} -m pip install sounddevice numpy" ) if not reqs.get("stt_available", reqs.get("stt_key_set")): raise RuntimeError( "Voice mode requires an STT provider for transcription.\n" "Option 1: uv pip install faster-whisper " "(free, local; `pip install faster-whisper` also works if pip is on PATH)\n" "Option 2: Set GROQ_API_KEY (free tier)\n" "Option 3: Set VOICE_TOOLS_OPENAI_KEY (paid)" ) # Prevent double-start from concurrent threads (atomic check-and-set) with self._voice_lock: if self._voice_recording: return self._voice_recording = True # Load silence detection params from config. Shape-safe: a # hand-edited ``voice: true`` / ``voice: cmd+b`` leaves # ``load_config()['voice']`` as a non-dict; coerce to {} so # continuous recording falls back to the documented defaults # instead of crashing on ``.get()``. voice_cfg: dict = {} try: from hermes_cli.config import load_config _cfg = load_config().get("voice") voice_cfg = _cfg if isinstance(_cfg, dict) else {} except Exception: pass if self._voice_recorder is None: self._voice_recorder = create_audio_recorder() # Apply config-driven silence params (numeric-guarded so YAML # scalar corruption doesn't break recording start-up). # # ``bool`` is explicitly excluded from the numeric check — in # Python bool is a subclass of int, so a hand-edited # ``silence_threshold: true`` would otherwise be forwarded as # ``1`` instead of falling back to the 200 default (Copilot # round-12 on #19835). _threshold = voice_cfg.get("silence_threshold") _duration = voice_cfg.get("silence_duration") self._voice_recorder._silence_threshold = ( _threshold if isinstance(_threshold, (int, float)) and not isinstance(_threshold, bool) else 200 ) self._voice_recorder._silence_duration = ( _duration if isinstance(_duration, (int, float)) and not isinstance(_duration, bool) else 3.0 ) def _on_silence(): """Called by AudioRecorder when silence is detected after speech.""" with self._voice_lock: if not self._voice_recording: return _cprint(f"\n{_DIM}Silence detected, auto-stopping...{_RST}") if hasattr(self, '_app') and self._app: self._app.invalidate() self._voice_stop_and_transcribe() # Audio cue: single beep BEFORE starting stream (avoid CoreAudio conflict) if self._voice_beeps_enabled(): try: from tools.voice_mode import play_beep play_beep(frequency=880, count=1) except Exception: pass try: self._voice_recorder.start(on_silence_stop=_on_silence) except Exception: with self._voice_lock: self._voice_recording = False raise _label = self._voice_record_key_label() if getattr(self._voice_recorder, "supports_silence_autostop", True): _recording_hint = f"auto-stops on silence | {_label} to stop & exit continuous" elif _is_termux_environment(): _recording_hint = f"Termux:API capture | {_label} to stop" else: _recording_hint = f"{_label} to stop" _cprint(f"\n{_ACCENT}● Recording...{_RST} {_DIM}({_recording_hint}){_RST}") # Periodically refresh prompt to update audio level indicator def _refresh_level(): while True: with self._voice_lock: still_recording = self._voice_recording if not still_recording: break if hasattr(self, '_app') and self._app: self._app.invalidate() time.sleep(0.15) threading.Thread(target=_refresh_level, daemon=True).start() def _voice_stop_and_transcribe(self): """Stop recording, transcribe via STT, and queue the transcript as input.""" # Atomic guard: only one thread can enter stop-and-transcribe. # Set _voice_processing immediately so concurrent Ctrl+B presses # don't race into the START path while recorder.stop() holds its lock. with self._voice_lock: if not self._voice_recording: return self._voice_recording = False self._voice_processing = True submitted = False transcription_failed = False wav_path = None try: if self._voice_recorder is None: return wav_path = self._voice_recorder.stop() # Audio cue: double beep after stream stopped (no CoreAudio conflict) if self._voice_beeps_enabled(): try: from tools.voice_mode import play_beep play_beep(frequency=660, count=2) except Exception: pass if wav_path is None: _cprint(f"{_DIM}No speech detected.{_RST}") return # _voice_processing is already True (set atomically above) if hasattr(self, '_app') and self._app: self._app.invalidate() _cprint(f"{_DIM}Transcribing...{_RST}") # Get STT model from config stt_model = None try: from hermes_cli.config import load_config stt_config = load_config().get("stt", {}) stt_model = stt_config.get("model") except Exception: pass from tools.voice_mode import transcribe_recording result = transcribe_recording(wav_path, model=stt_model) if result.get("success") and result.get("transcript", "").strip(): transcript = result["transcript"].strip() self._attached_images.clear() if hasattr(self, '_app') and self._app: self._app.invalidate() self._pending_input.put(transcript) submitted = True elif result.get("success"): _cprint(f"{_DIM}No speech detected.{_RST}") else: error = result.get("error", "Unknown error") _cprint(f"\n{_DIM}Transcription failed: {error}{_RST}") transcription_failed = True except Exception as e: _cprint(f"\n{_DIM}Voice processing error: {e}{_RST}") transcription_failed = wav_path is not None finally: with self._voice_lock: self._voice_processing = False if hasattr(self, '_app') and self._app: self._app.invalidate() # Clean up temp file unless transcription failed. On failure, keep # the source recording so long dictation is not lost. try: if wav_path and os.path.isfile(wav_path): if transcription_failed: _cprint(f"{_DIM}Recording preserved at: {wav_path}{_RST}") else: os.unlink(wav_path) except Exception: pass # Track consecutive no-speech cycles to avoid infinite restart loops. if not submitted: self._no_speech_count = getattr(self, '_no_speech_count', 0) + 1 if self._no_speech_count >= 3: self._voice_continuous = False self._no_speech_count = 0 _cprint(f"{_DIM}No speech detected 3 times, continuous mode stopped.{_RST}") return else: self._no_speech_count = 0 # If no transcript was submitted but continuous mode is active, # restart recording so the user can keep talking. # (When transcript IS submitted, process_loop handles restart # after chat() completes.) if self._voice_continuous and not submitted and not self._voice_recording: def _restart_recording(): try: self._voice_start_recording() if hasattr(self, '_app') and self._app: self._app.invalidate() except Exception as e: _cprint(f"{_DIM}Voice auto-restart failed: {e}{_RST}") threading.Thread(target=_restart_recording, daemon=True).start() def _voice_speak_response_async(self, text: str) -> None: """Schedule TTS and mark it pending before continuous recording can restart.""" if not self._voice_tts or not text: return self._voice_tts_done.clear() threading.Thread( target=self._voice_speak_response, args=(text,), daemon=True, ).start() def _voice_speak_response(self, text: str): """Speak the agent's response aloud using TTS (runs in background thread).""" if not self._voice_tts: return self._voice_tts_done.clear() try: from tools.tts_tool import text_to_speech_tool from tools.voice_mode import play_audio_file # Strip markdown and non-speech content for cleaner TTS tts_text = text[:4000] if len(text) > 4000 else text tts_text = re.sub(r'```[\s\S]*?```', ' ', tts_text) # fenced code blocks tts_text = re.sub(r'\[([^\]]+)\]$[^)]+$', r'\1', tts_text) # [text](url) -> text tts_text = re.sub(r'https?://\S+', '', tts_text) # URLs tts_text = re.sub(r'\*\*(.+?)\*\*', r'\1', tts_text) # bold tts_text = re.sub(r'\*(.+?)\*', r'\1', tts_text) # italic tts_text = re.sub(r'`(.+?)`', r'\1', tts_text) # inline code tts_text = re.sub(r'^#+\s*', '', tts_text, flags=re.MULTILINE) # headers tts_text = re.sub(r'^\s*[-*]\s+', '', tts_text, flags=re.MULTILINE) # list items tts_text = re.sub(r'---+', '', tts_text) # horizontal rules tts_text = re.sub(r'\n{3,}', '\n\n', tts_text) # excessive newlines tts_text = tts_text.strip() if not tts_text: return # Use MP3 output for CLI playback (afplay doesn't handle OGG well). # The TTS tool may auto-convert MP3->OGG, but the original MP3 remains. os.makedirs(os.path.join(tempfile.gettempdir(), "hermes_voice"), exist_ok=True) mp3_path = os.path.join( tempfile.gettempdir(), "hermes_voice", f"tts_{time.strftime('%Y%m%d_%H%M%S')}.mp3", ) text_to_speech_tool(text=tts_text, output_path=mp3_path) # Play the MP3 directly (the TTS tool returns OGG path but MP3 still exists) if os.path.isfile(mp3_path) and os.path.getsize(mp3_path) > 0: play_audio_file(mp3_path) # Clean up try: os.unlink(mp3_path) ogg_path = mp3_path.rsplit(".", 1)[0] + ".ogg" if os.path.isfile(ogg_path): os.unlink(ogg_path) except OSError: pass except Exception as e: logger.warning("Voice TTS playback failed: %s", e) _cprint(f"{_DIM}TTS playback failed: {e}{_RST}") finally: self._voice_tts_done.set() def _voice_beeps_enabled(self) -> bool: """Return whether CLI voice mode should play record start/stop beeps.""" try: from hermes_cli.config import load_config voice_cfg = load_config().get("voice", {}) if isinstance(voice_cfg, dict): return bool(voice_cfg.get("beep_enabled", True)) except Exception: pass return True def _enable_voice_mode(self): """Enable voice mode after checking requirements.""" if self._voice_mode: _cprint(f"{_DIM}Voice mode is already enabled.{_RST}") return from tools.voice_mode import check_voice_requirements, detect_audio_environment # Environment detection -- warn and block in incompatible environments env_check = detect_audio_environment() if not env_check["available"]: _cprint(f"\n{_ACCENT}Voice mode unavailable in this environment:{_RST}") for warning in env_check["warnings"]: _cprint(f" {_DIM}{warning}{_RST}") return reqs = check_voice_requirements() if not reqs["available"]: _cprint(f"\n{_ACCENT}Voice mode requirements not met:{_RST}") for line in reqs["details"].split("\n"): _cprint(f" {_DIM}{line}{_RST}") if reqs["missing_packages"]: if _is_termux_environment(): _cprint(f"\n {_BOLD}Option 1: pkg install termux-api{_RST}") _cprint(f" {_DIM}Then install/update the Termux:API Android app for microphone capture{_RST}") _cprint(f" {_BOLD}Option 2: pkg install python-numpy portaudio && python -m pip install sounddevice{_RST}") else: _cprint(f"\n {_BOLD}Install: {sys.executable} -m pip install {' '.join(reqs['missing_packages'])}{_RST}") return with self._voice_lock: self._voice_mode = True # Check config for auto_tts (shape-safe — malformed ``voice:`` YAML # leaves ``voice_config`` as a non-dict, so guard before .get()). try: from hermes_cli.config import load_config _raw_voice = load_config().get("voice") voice_config = _raw_voice if isinstance(_raw_voice, dict) else {} if voice_config.get("auto_tts", False): with self._voice_lock: self._voice_tts = True except Exception: pass # Voice mode instruction is injected as a user message prefix (not a # system prompt change) to avoid invalidating the prompt cache. See # _voice_message_prefix property and its usage in _process_message(). tts_status = " (TTS enabled)" if self._voice_tts else "" # Use the startup-pinned cache so the advertised shortcut always # matches the live prompt_toolkit binding — reading live config # here would drift after a mid-session config edit (Copilot # round-14 on #19835, same class as round-13). _ptt_display = self._voice_record_key_label() _cprint(f"\n{_ACCENT}Voice mode enabled{tts_status}{_RST}") _cprint(f" {_DIM}{_ptt_display} to start/stop recording{_RST}") _cprint(f" {_DIM}/voice tts to toggle speech output{_RST}") _cprint(f" {_DIM}/voice off to disable voice mode{_RST}") def _disable_voice_mode(self): """Disable voice mode, cancel any active recording, and stop TTS.""" recorder = None with self._voice_lock: if self._voice_recording and self._voice_recorder: self._voice_recorder.cancel() self._voice_recording = False recorder = self._voice_recorder self._voice_mode = False self._voice_tts = False self._voice_continuous = False # Shut down the persistent audio stream in background if recorder is not None: def _bg_shutdown(rec=recorder): try: rec.shutdown() except Exception: pass threading.Thread(target=_bg_shutdown, daemon=True).start() self._voice_recorder = None # Stop any active TTS playback try: from tools.voice_mode import stop_playback stop_playback() except Exception: pass self._voice_tts_done.set() _cprint(f"\n{_DIM}Voice mode disabled.{_RST}") def _toggle_voice_tts(self): """Toggle TTS output for voice mode.""" if not self._voice_mode: _cprint(f"{_DIM}Enable voice mode first: /voice on{_RST}") return with self._voice_lock: self._voice_tts = not self._voice_tts status = "enabled" if self._voice_tts else "disabled" if self._voice_tts: from tools.tts_tool import check_tts_requirements if not check_tts_requirements(): _cprint(f"{_DIM}Warning: No TTS provider available. Install edge-tts or set API keys.{_RST}") _cprint(f"{_ACCENT}Voice TTS {status}.{_RST}") def _show_voice_status(self): """Show current voice mode status.""" from tools.voice_mode import check_voice_requirements reqs = check_voice_requirements() _cprint(f"\n{_BOLD}Voice Mode Status{_RST}") _cprint(f" Mode: {'ON' if self._voice_mode else 'OFF'}") _cprint(f" TTS: {'ON' if self._voice_tts else 'OFF'}") _cprint(f" Recording: {'YES' if self._voice_recording else 'no'}") # Display the startup-pinned label so /voice status always # matches the live prompt_toolkit binding (Copilot round-14 on # #19835, same class as round-13). Reading live config here # would drift after a mid-session config edit. _cprint(f" Record key: {self._voice_record_key_label()}") _cprint(f"\n {_BOLD}Requirements:{_RST}") for line in reqs["details"].split("\n"): _cprint(f" {line}") def _persist_prompt_summary(self, icon: str, label: str, detail: str, outcome: str) -> None: """Print a one-line scrollback summary of a resolved modal prompt. Modal panels (approval / clarify) live in the prompt_toolkit layout and vanish on the next repaint, so the question and the decision leave no trace in the terminal scrollback. When display.persist_prompts is on (default), emit a dim single line after the prompt resolves so the decision survives in chat history. """ if not CLI_CONFIG.get("display", {}).get("persist_prompts", True): return detail = " ".join(detail.split()) if len(detail) > 120: detail = detail[:119] + "…" outcome = " ".join(outcome.split()) if len(outcome) > 120: outcome = outcome[:119] + "…" _cprint(f"\n{_DIM}{icon} {label}: {detail} → {outcome}{_RST}") def _clarify_callback(self, question, choices): """ Platform callback for the clarify tool. Called from the agent thread. Sets up the interactive selection UI (or freetext prompt for open-ended questions), then blocks until the user responds via the prompt_toolkit key bindings. If no response arrives within the configured timeout the question is dismissed and the agent is told to decide on its own. """ import time as _time timeout = CLI_CONFIG.get("clarify", {}).get("timeout", 120) response_queue = queue.Queue() is_open_ended = not choices self._clarify_state = { "question": question, "choices": choices if not is_open_ended else [], "selected": 0, "response_queue": response_queue, } self._clarify_deadline = _time.monotonic() + timeout # Open-ended questions skip straight to freetext input self._clarify_freetext = is_open_ended # Trigger an immediate prompt_toolkit repaint from this (non-main) # thread. Modal prompts must paint at once and must not be gated by the # _invalidate throttle / resize guard — see _paint_now / _invalidate (#41098). self._paint_now() # Poll for the user's response. The countdown in the hint line updates # on each repaint; refresh it once a second so the timer stays visible # while we wait. Selection changes (↑/↓) trigger instant repaints via # the key bindings. _last_countdown_refresh = _time.monotonic() while True: try: result = response_queue.get(timeout=1) self._clarify_deadline = 0 self._persist_prompt_summary("?", "Clarify", question, str(result)) return result except queue.Empty: remaining = self._clarify_deadline - _time.monotonic() if remaining <= 0: break now = _time.monotonic() if now - _last_countdown_refresh >= 1.0: _last_countdown_refresh = now self._paint_now() # Timed out — tear down the UI and let the agent decide self._clarify_state = None self._clarify_freetext = False self._clarify_deadline = 0 self._paint_now() _cprint(f"\n{_DIM}(clarify timed out after {timeout}s — agent will decide){_RST}") return ( "The user did not provide a response within the time limit. " "Use your best judgement to make the choice and proceed." ) def _sudo_password_callback(self) -> str: """ Prompt for sudo password through the prompt_toolkit UI. Called from the agent thread when a sudo command is encountered. Uses the same clarify-style mechanism: sets UI state, waits on a queue for the user's response via the Enter key binding. """ import time as _time timeout = 45 response_queue = queue.Queue() self._capture_modal_input_snapshot() self._sudo_state = { "response_queue": response_queue, } self._sudo_deadline = _time.monotonic() + timeout # Modal prompt — paint immediately, bypassing the throttle/resize guard # so the prompt can't be dropped and time out unseen (#41098). self._paint_now() while True: try: result = response_queue.get(timeout=1) self._sudo_state = None self._sudo_deadline = 0 self._restore_modal_input_snapshot() self._paint_now() if result: _cprint(f"\n{_DIM} ✓ Password received (cached for session){_RST}") else: _cprint(f"\n{_DIM} ⏭ Skipped{_RST}") return result except queue.Empty: remaining = self._sudo_deadline - _time.monotonic() if remaining <= 0: break self._paint_now() self._sudo_state = None self._sudo_deadline = 0 self._restore_modal_input_snapshot() self._paint_now() _cprint(f"\n{_DIM} ⏱ Timeout — continuing without sudo{_RST}") return "" def _approval_callback(self, command: str, description: str, *, allow_permanent: bool = True) -> str: """ Prompt for dangerous command approval through the prompt_toolkit UI. Called from the agent thread. Shows a selection UI similar to clarify with choices: once / session / always / deny. When allow_permanent is False (tirith warnings present), the 'always' option is hidden. Long commands also get a 'view' option so the full command can be expanded before deciding. Uses _approval_lock to serialize concurrent requests (e.g. from parallel delegation subtasks) so each prompt gets its own turn and the shared _approval_state / _approval_deadline aren't clobbered. """ import time as _time with self._approval_lock: timeout = int(CLI_CONFIG.get("approvals", {}).get("timeout", 60)) response_queue = queue.Queue() self._approval_state = { "command": command, "description": description, "choices": self._approval_choices(command, allow_permanent=allow_permanent), "selected": 0, "response_queue": response_queue, } self._approval_deadline = _time.monotonic() + timeout # Modal prompt — paint immediately, bypassing the throttle/resize # guard. A throttled paint here can be silently dropped (250ms # window collision or in-flight resize), leaving the panel unseen so # the command is denied on timeout without the user ever seeing it # (#41098). The countdown refreshes below paint the same way. self._paint_now() _last_countdown_refresh = _time.monotonic() while True: try: result = response_queue.get(timeout=1) self._approval_state = None self._approval_deadline = 0 self._paint_now() _outcome_labels = { "once": "allowed once", "session": "allowed for session", "always": "added to allowlist", "deny": "denied", } self._persist_prompt_summary( "⚠", "Approval", command, _outcome_labels.get(result, str(result)), ) return result except queue.Empty: remaining = self._approval_deadline - _time.monotonic() if remaining <= 0: break now = _time.monotonic() if now - _last_countdown_refresh >= 1.0: _last_countdown_refresh = now self._paint_now() self._approval_state = None self._approval_deadline = 0 self._paint_now() _cprint(f"\n{_DIM} ⏱ Timeout — denying command{_RST}") return "deny" def _approval_choices(self, command: str, *, allow_permanent: bool = True) -> list[str]: """Return approval choices for a dangerous command prompt.""" choices = ["once", "session", "always", "deny"] if allow_permanent else ["once", "session", "deny"] if len(command) > 70: choices.append("view") return choices def _computer_use_approval_callback(self, action: str, args: dict, summary: str) -> str: """Adapt the generic approval UI for the computer_use tool. The computer_use handler expects verdicts of the form `approve_once` | `approve_session` | `always_approve` | `deny`. The CLI's built-in approval UI returns `once` | `session` | `always` | `deny`. Translate between the two. """ # Build a command-ish string so the existing UI renders something # meaningful. `summary` is already a one-line human description. verdict = self._approval_callback( command=f"computer_use: {summary}", description=f"Allow computer_use to perform `{action}`?", ) return { "once": "approve_once", "session": "approve_session", "always": "always_approve", "deny": "deny", }.get(verdict, "deny") def _handle_approval_selection(self) -> None: """Process the currently selected dangerous-command approval choice.""" state = self._approval_state if not state: return selected = state.get("selected", 0) choices = state.get("choices") if not isinstance(choices, list): choices = [] if not (0 <= selected < len(choices)): return chosen = choices[selected] if chosen == "view": state["show_full"] = True state["choices"] = [choice for choice in choices if choice != "view"] if state["selected"] >= len(state["choices"]): state["selected"] = max(0, len(state["choices"]) - 1) self._invalidate() return state["response_queue"].put(chosen) self._approval_state = None self._invalidate() def _get_approval_display_fragments(self): """Render the dangerous-command approval panel for the prompt_toolkit UI. Layout priority: title + command + choices must always render, even if the terminal is short or the description is long. Description is placed at the bottom of the panel and gets truncated to fit the remaining row budget. This prevents HSplit from clipping approve/deny off-screen when tirith findings produce multi-paragraph descriptions or when the user runs in a compact terminal pane. """ state = self._approval_state if not state: return [] def _panel_box_width(title_text: str, content_lines: list[str], min_width: int = 46, max_width: int = 76) -> int: term_cols = shutil.get_terminal_size((100, 20)).columns longest = max([len(title_text)] + [len(line) for line in content_lines] + [min_width - 4]) inner = min(max(longest + 4, min_width - 2), max_width - 2, max(24, term_cols - 6)) return inner + 2 def _wrap_panel_text(text: str, width: int, subsequent_indent: str = "") -> list[str]: wrapped = textwrap.wrap( text, width=max(8, width), replace_whitespace=False, drop_whitespace=False, subsequent_indent=subsequent_indent, ) return wrapped or [""] def _append_panel_line(lines, border_style: str, content_style: str, text: str, box_width: int) -> None: inner_width = max(0, box_width - 2) lines.append((border_style, "│ ")) lines.append((content_style, text.ljust(inner_width))) lines.append((border_style, " │\n")) def _append_blank_panel_line(lines, border_style: str, box_width: int) -> None: lines.append((border_style, "│" + (" " * box_width) + "│\n")) command = state["command"] description = state["description"] choices = state["choices"] selected = state.get("selected", 0) show_full = state.get("show_full", False) title = "⚠️ Dangerous Command" cmd_display = command choice_labels = { "once": "Allow once", "session": "Allow for this session", "always": "Add to permanent allowlist", "deny": "Deny", "view": "Show full command", } preview_lines = _wrap_panel_text(description, 60) preview_lines.extend(_wrap_panel_text(cmd_display, 60)) for i, choice in enumerate(choices): prefix = '❯ ' if i == selected else ' ' preview_lines.extend(_wrap_panel_text( f"{prefix}{choice_labels.get(choice, choice)}", 60, subsequent_indent=" ", )) box_width = _panel_box_width(title, preview_lines) inner_text_width = max(8, box_width - 2) # Pre-wrap the mandatory content — command + choices must always render. cmd_wrapped = _wrap_panel_text(cmd_display, inner_text_width) if not show_full and "view" in choices and len(cmd_wrapped) > 4: cmd_wrapped = cmd_wrapped[:3] + _wrap_panel_text( "… (choose Show full command)", inner_text_width, ) # (choice_index, wrapped_line) so we can re-apply selected styling below choice_wrapped: list[tuple[int, str]] = [] for i, choice in enumerate(choices): label = choice_labels.get(choice, choice) # Show number prefix for quick selection (1-9 for items 1-9, 0 for 10th item) if i < 9: num_prefix = str(i + 1) elif i == 9: num_prefix = '0' else: num_prefix = ' ' # No number for items beyond 10th if i == selected: prefix = f'❯ {num_prefix}. ' else: prefix = f' {num_prefix}. ' for wrapped in _wrap_panel_text(f"{prefix}{label}", inner_text_width, subsequent_indent=" "): choice_wrapped.append((i, wrapped)) # Budget vertical space so HSplit never clips the command or choices. # Panel chrome (full layout with separators): # top border + title + blank_after_title # + blank_between_cmd_choices + bottom border = 5 rows. # In tight terminals we collapse to: # top border + title + bottom border = 3 rows (no blanks). # # reserved_below: rows consumed below the approval panel by the # spinner/tool-progress line, status bar, input area, separators, and # prompt symbol. Measured at ~6 rows during live PTY approval prompts; # budget 6 so we don't overestimate the panel's room. term_rows = shutil.get_terminal_size((100, 24)).lines chrome_full = 5 chrome_tight = 3 reserved_below = 6 available = max(0, term_rows - reserved_below) mandatory_full = chrome_full + len(cmd_wrapped) + len(choice_wrapped) # If the full-chrome panel doesn't fit, drop the separator blanks. # This keeps the command and every choice on-screen in compact terminals. use_compact_chrome = mandatory_full > available chrome_rows = chrome_tight if use_compact_chrome else chrome_full # If the command itself is too long to leave room for choices (e.g. user # hit "view" on a multi-hundred-character command), truncate it so the # approve/deny buttons still render. Keep at least 1 row of command. max_cmd_rows = max(1, available - chrome_rows - len(choice_wrapped)) if len(cmd_wrapped) > max_cmd_rows: keep = max(1, max_cmd_rows - 1) if max_cmd_rows > 1 else 1 cmd_wrapped = cmd_wrapped[:keep] + _wrap_panel_text( "… (command truncated — use /logs or /debug for full text)", inner_text_width, ) # Allocate any remaining rows to description. The extra -1 in full mode # accounts for the blank separator between choices and description. mandatory_no_desc = chrome_rows + len(cmd_wrapped) + len(choice_wrapped) desc_sep_cost = 0 if use_compact_chrome else 1 available_for_desc = available - mandatory_no_desc - desc_sep_cost # Even on huge terminals, cap description height so the panel stays compact. available_for_desc = max(0, min(available_for_desc, 10)) desc_wrapped = _wrap_panel_text(description, inner_text_width) if description else [] if available_for_desc < 1 or not desc_wrapped: desc_wrapped = [] elif len(desc_wrapped) > available_for_desc: keep = max(1, available_for_desc - 1) desc_wrapped = desc_wrapped[:keep] + ["… (description truncated)"] # Render: title → command → choices → description (description last so # any remaining overflow clips from the bottom of the least-critical # content, never from the command or choices). Use compact chrome (no # blank separators) when the terminal is tight. lines = [] lines.append(('class:approval-border', '╭' + ('─' * box_width) + '╮\n')) _append_panel_line(lines, 'class:approval-border', 'class:approval-title', title, box_width) if not use_compact_chrome: _append_blank_panel_line(lines, 'class:approval-border', box_width) for wrapped in cmd_wrapped: _append_panel_line(lines, 'class:approval-border', 'class:approval-cmd', wrapped, box_width) if not use_compact_chrome: _append_blank_panel_line(lines, 'class:approval-border', box_width) for i, wrapped in choice_wrapped: style = 'class:approval-selected' if i == selected else 'class:approval-choice' _append_panel_line(lines, 'class:approval-border', style, wrapped, box_width) if desc_wrapped: if not use_compact_chrome: _append_blank_panel_line(lines, 'class:approval-border', box_width) for wrapped in desc_wrapped: _append_panel_line(lines, 'class:approval-border', 'class:approval-desc', wrapped, box_width) lines.append(('class:approval-border', '╰' + ('─' * box_width) + '╯\n')) return lines def _secret_capture_callback(self, var_name: str, prompt: str, metadata=None) -> dict: return prompt_for_secret(self, var_name, prompt, metadata) def _capture_modal_input_snapshot(self) -> None: """Temporarily clear the input buffer and save the user's in-progress draft.""" if self._modal_input_snapshot is not None or not getattr(self, "_app", None): return try: buf = self._app.current_buffer self._modal_input_snapshot = { "text": buf.text, "cursor_position": buf.cursor_position, } buf.reset() except Exception: self._modal_input_snapshot = None def _restore_modal_input_snapshot(self) -> None: """Restore any draft text that was present before a modal prompt opened.""" snapshot = self._modal_input_snapshot self._modal_input_snapshot = None if not snapshot or not getattr(self, "_app", None): return try: buf = self._app.current_buffer buf.text = snapshot.get("text", "") buf.cursor_position = min(snapshot.get("cursor_position", 0), len(buf.text)) except Exception: pass def _submit_secret_response(self, value: str) -> None: if not self._secret_state: return self._secret_state["response_queue"].put(value) self._secret_state = None self._secret_deadline = 0 # Modal teardown — paint directly so the secret panel clears at once and # isn't held by the _invalidate throttle/resize guard (#41098). self._paint_now() def _cancel_secret_capture(self) -> None: self._submit_secret_response("") def _clear_secret_input_buffer(self) -> None: if getattr(self, "_app", None): try: self._app.current_buffer.reset() except Exception: pass def chat(self, message, images: list = None) -> Optional[str]: """ Send a message to the agent and get a response. Handles streaming output, interrupt detection (user typing while agent is working), and re-queueing of interrupted messages. Uses a dedicated _interrupt_queue (separate from _pending_input) to avoid race conditions between the process_loop and interrupt monitoring. Messages typed while the agent is running go to _interrupt_queue; messages typed while idle go to _pending_input. Args: message: The user's message (str or multimodal content list) images: Optional list of Path objects for attached images Returns: The agent's response, or None on error """ # Single-query and direct chat callers do not go through run(), so # register secure secret capture here as well. set_secret_capture_callback(self._secret_capture_callback) # Reset the per-turn interrupt flag. Any subsequent path that # discovers an interrupt (below, after run_conversation) will flip # this to True. Early returns (credential refresh failure, etc.) # leave it False, which is correct — those aren't user interrupts. self._last_turn_interrupted = False # Refresh provider credentials if needed (handles key rotation transparently) if not self._ensure_runtime_credentials(): return None turn_route = self._resolve_turn_agent_config(message) if turn_route["signature"] != self._active_agent_route_signature: self.agent = None # Initialize agent if needed if self.agent is None: _cprint(f"{_DIM}Initializing agent...{_RST}") if not self._init_agent( model_override=turn_route["model"], runtime_override=turn_route["runtime"], request_overrides=turn_route.get("request_overrides"), ): return None # Route image attachments based on the active model's vision capability. # "native" → pass pixels as OpenAI-style content parts (adapters # translate for Anthropic/Gemini/Bedrock). # "text" → pre-analyze each image with vision_analyze and prepend the # description as text — works with non-vision models. # See agent/image_routing.py for the decision table. if images: try: from agent.image_routing import ( build_native_content_parts, decide_image_input_mode, ) from hermes_cli.config import load_config _img_mode = decide_image_input_mode( (self.provider or "").strip(), (self.model or "").strip(), load_config(), ) except Exception as _img_exc: logging.debug("image_routing decision failed, defaulting to text: %s", _img_exc) _img_mode = "text" if _img_mode == "native": try: _text_for_parts = message if isinstance(message, str) else "" _img_str_paths = [str(p) for p in images] _parts, _skipped = build_native_content_parts( _text_for_parts, _img_str_paths, ) if _skipped: _cprint( f" {_DIM}⚠ skipped {len(_skipped)} unreadable image path(s){_RST}" ) if any(p.get("type") == "image_url" for p in _parts): _img_names = ", ".join(Path(p).name for p in _img_str_paths) _cprint( f" {_DIM}📎 attaching {len(images)} image(s) natively " f"(model supports vision): {_img_names}{_RST}" ) message = _parts else: # All images unreadable — fall back to text enrichment. message = self._preprocess_images_with_vision( message if isinstance(message, str) else "", images ) except Exception as _img_exc: logging.warning("native image attach failed, falling back to text: %s", _img_exc) message = self._preprocess_images_with_vision( message if isinstance(message, str) else "", images ) else: message = self._preprocess_images_with_vision( message if isinstance(message, str) else "", images ) # Expand @ context references (e.g. @file:main.py, @diff, @folder:src/) if isinstance(message, str) and "@" in message: try: from agent.context_references import preprocess_context_references from agent.model_metadata import get_model_context_length _ctx_len = get_model_context_length( self.model, base_url=self.base_url or "", api_key=self.api_key or "", config_context_length=getattr(self.agent, "_config_context_length", None) if self.agent else None) _ctx_result = preprocess_context_references( message, cwd=os.getcwd(), context_length=_ctx_len) if _ctx_result.expanded or _ctx_result.blocked: if _ctx_result.references: _cprint( f" {_DIM}[@ context: {len(_ctx_result.references)} ref(s), " f"{_ctx_result.injected_tokens} tokens]{_RST}") for w in _ctx_result.warnings: _cprint(f" {_DIM}⚠ {w}{_RST}") if _ctx_result.blocked: return "\n".join(_ctx_result.warnings) or "Context injection refused." message = _ctx_result.message except Exception as e: logging.debug("@ context reference expansion failed: %s", e) # Sanitize surrogate characters that can arrive via clipboard paste from # rich-text editors (Google Docs, Word, etc.). Lone surrogates are invalid # UTF-8 and crash JSON serialization in the OpenAI SDK. if isinstance(message, str): from run_agent import _sanitize_surrogates message = _sanitize_surrogates(message) # Add user message to history self.conversation_history.append({"role": "user", "content": message}) ChatConsole().print(f"[{_accent_hex()}]{'─' * 40}[/]") print(flush=True) try: # Run the conversation with interrupt monitoring result = None # Reset streaming display state for this turn self._reset_stream_state() # Separate from _reset_stream_state because this must persist # across intermediate turn boundaries (tool-calling loops) — only # reset at the start of each user turn. self._reasoning_shown_this_turn = False # --- Streaming TTS setup --- # When ElevenLabs is the TTS provider and sounddevice is available, # we stream audio sentence-by-sentence as the agent generates tokens # instead of waiting for the full response. use_streaming_tts = False _streaming_box_opened = False text_queue = None tts_thread = None stream_callback = None stop_event = None if self._voice_tts: try: from tools.tts_tool import ( _load_tts_config as _load_tts_cfg, _get_provider as _get_prov, _import_elevenlabs, _import_sounddevice, stream_tts_to_speaker, ) _tts_cfg = _load_tts_cfg() if _get_prov(_tts_cfg) == "elevenlabs": # Verify both ElevenLabs SDK and audio output are available _import_elevenlabs() _import_sounddevice() use_streaming_tts = True except (ImportError, OSError): pass except Exception: pass if use_streaming_tts: text_queue = queue.Queue() stop_event = threading.Event() def display_callback(sentence: str): """Called by TTS consumer when a sentence is ready to display + speak.""" nonlocal _streaming_box_opened if not _streaming_box_opened: _streaming_box_opened = True w = self._scrollback_box_width(getattr(self.console, "width", 80)) label = " ⚕ Hermes " if self.show_timestamps: label = f"{label}{datetime.now().strftime('%H:%M')} " fill = w - 2 - HermesCLI._status_bar_display_width(label) _cprint(f"\n{_ACCENT}╭─{label}{'─' * max(fill - 1, 0)}╮{_RST}") _cprint(f"{_STREAM_PAD}{sentence.rstrip()}") tts_thread = threading.Thread( target=stream_tts_to_speaker, args=(text_queue, stop_event, self._voice_tts_done), kwargs={"display_callback": display_callback}, daemon=True, ) tts_thread.start() def stream_callback(delta: str): if text_queue is not None: text_queue.put(delta) # When voice mode is active, prepend a brief instruction so the # model responds concisely. The prefix is API-call-local only — # run_conversation persists the original clean user message. _voice_prefix = "" if self._voice_mode and isinstance(message, str): _voice_prefix = ( "[Voice input — respond concisely and conversationally, " "2-3 sentences max. No code blocks or markdown.] " ) def run_agent(): nonlocal result # Set callbacks inside the agent thread so thread-local storage # in terminal_tool is populated for this thread. The main thread # registration (run() line ~9046) is invisible here because # _callback_tls is threading.local(). Matches the pattern used # by acp_adapter/server.py for ACP sessions. set_sudo_password_callback(self._sudo_password_callback) set_approval_callback(self._approval_callback) try: set_secret_capture_callback(self._secret_capture_callback) except Exception: pass # Bind this turn's approval session key into the contextvar so # ``tools.approval.is_current_session_yolo_enabled()`` resolves # against the same key that ``/yolo`` toggles under (see # ``_toggle_yolo`` → ``enable_session_yolo(self.session_id)``). # Mirrors ``tui_gateway/server.py`` and ``gateway/run.py`` which # bind the same contextvar before invoking the agent. try: from tools.approval import ( reset_current_session_key, set_current_session_key, ) _approval_session_token = set_current_session_key( self.session_id or "default" ) except Exception: reset_current_session_key = None # type: ignore[assignment] _approval_session_token = None agent_message = _voice_prefix + message if _voice_prefix else message # Prepend pending notes via _prepend_note_to_message, which # handles both plain-string and multimodal content-parts list # messages. Naive ``note + "\n\n" + agent_message`` crashed with # TypeError when an image was attached (agent_message is a list) # and a /model or /reload-skills note was queued for the turn. _msn = getattr(self, '_pending_model_switch_note', None) if _msn: agent_message = _prepend_note_to_message(agent_message, _msn) self._pending_model_switch_note = None # Prepend pending /reload-skills note so the model sees which # skills were added/removed before handling this turn. Same # one-shot queue pattern as the model-switch note above. _srn = getattr(self, '_pending_skills_reload_note', None) if _srn: agent_message = _prepend_note_to_message(agent_message, _srn) self._pending_skills_reload_note = None try: result = self.agent.run_conversation( user_message=agent_message, conversation_history=self.conversation_history[:-1], # Exclude the message we just added stream_callback=stream_callback, task_id=self.session_id, persist_user_message=message if _voice_prefix else None, ) except Exception as exc: logging.error("run_conversation raised: %s", exc, exc_info=True) _summary = getattr(self.agent, '_summarize_api_error', lambda e: str(e)[:300])(exc) result = { "final_response": f"Error: {_summary}", "messages": [], "api_calls": 0, "completed": False, "failed": True, "error": _summary, } finally: # Surface any credit notices queued during the turn (cold-start # seed / per-turn capture) now that the response is done — printing # at this boundary paints cleanly above the prompt instead of being # buried behind the streaming output. self._flush_credit_notices() # Clear thread-local callbacks so a reused thread doesn't # hold stale references to a disposed CLI instance. try: set_sudo_password_callback(None) set_approval_callback(None) set_secret_capture_callback(None) except Exception: pass # Release the per-turn approval session key. ``_session_yolo`` # state itself is preserved across turns (so /yolo persists # for the whole CLI run); we just unbind the contextvar so a # reused thread doesn't see stale identity on its next run. if _approval_session_token is not None and reset_current_session_key is not None: try: reset_current_session_key(_approval_session_token) except Exception: pass # Start agent in background thread (daemon so it cannot keep the # process alive when the user closes the terminal tab — SIGHUP # exits the main thread and daemon threads are reaped automatically). # Start per-prompt elapsed timer — frozen after the agent thread # finishes; reset on the next turn. self._prompt_start_time = time.time() self._prompt_duration = 0.0 agent_thread = threading.Thread(target=run_agent, daemon=True) agent_thread.start() # Monitor the dedicated interrupt queue while the agent runs. # _interrupt_queue is separate from _pending_input, so process_loop # and chat() never compete for the same queue. # When a clarify question is active, user input is handled entirely # by the Enter key binding (routed to the clarify response queue), # so we skip interrupt processing to avoid stealing that input. interrupt_msg = None while agent_thread.is_alive(): if hasattr(self, '_interrupt_queue'): try: interrupt_msg = self._interrupt_queue.get(timeout=0.1) if interrupt_msg: # If clarify is active, the Enter handler routes # input directly; this queue shouldn't have anything. # But if it does (race condition), don't interrupt. if self._clarify_state or self._clarify_freetext: continue print("\n⚡ New message detected, interrupting...") # Signal TTS to stop on interrupt if stop_event is not None: stop_event.set() self.agent.interrupt(interrupt_msg) # Debug: log to file (stdout may be devnull from redirect_stdout) try: _dbg = _hermes_home / "interrupt_debug.log" with open(_dbg, "a", encoding="utf-8") as _f: _f.write(f"{time.strftime('%H:%M:%S')} interrupt fired: msg={str(interrupt_msg)[:60]!r}, " f"children={len(self.agent._active_children)}, " f"parent._interrupt={self.agent._interrupt_requested}\n") for _ci, _ch in enumerate(self.agent._active_children): _f.write(f" child[{_ci}]._interrupt={_ch._interrupt_requested}\n") except Exception: pass break except queue.Empty: # Force prompt_toolkit to flush any pending stdout # output from the agent thread. Without this, the # StdoutProxy buffer only flushes on renderer passes # triggered by input events — on macOS this causes # the CLI to appear frozen until the user types. (#1624) self._invalidate(min_interval=0.15) else: # Fallback for non-interactive mode (e.g., single-query) agent_thread.join(0.1) # Wait for the agent thread to finish. After an interrupt the # agent may take a few seconds to clean up (kill subprocess, persist # session). Poll instead of a blocking join so the process_loop # stays responsive — if the user sent another interrupt or the # agent gets stuck, we can break out instead of freezing forever. if interrupt_msg is not None: # Interrupt path: poll briefly, then move on. The agent # thread is daemon — it dies on process exit regardless. for _wait_tick in range(50): # 50 * 0.2s = 10s max agent_thread.join(timeout=0.2) if not agent_thread.is_alive(): break # Check if user fired ANOTHER interrupt (Ctrl+C sets # _should_exit which process_loop checks on next pass). if getattr(self, '_should_exit', False): break if agent_thread.is_alive(): logger.warning( "Agent thread still alive after interrupt " "(thread %s). Daemon thread will be cleaned up " "on exit.", agent_thread.ident, ) else: # Normal completion: agent thread should be done already, # but guard against edge cases. agent_thread.join(timeout=30) # Freeze per-prompt elapsed timer once the agent thread has # exited (or been abandoned as a daemon after interrupt). if self._prompt_start_time is not None: self._prompt_duration = max(0.0, time.time() - self._prompt_start_time) self._prompt_start_time = None # Record when this agent loop finished so the status bar can show # idle time since the last final response. self._last_turn_finished_at = time.time() # Proactively clean up async clients whose event loop is dead. # The agent thread may have created AsyncOpenAI clients bound # to a per-thread event loop; if that loop is now closed, those # clients' __del__ would crash prompt_toolkit's loop on GC. try: from agent.auxiliary_client import cleanup_stale_async_clients cleanup_stale_async_clients() except Exception: pass # Flush any remaining streamed text and close the box self._flush_stream() # Signal end-of-text to TTS consumer and wait for it to finish if use_streaming_tts and text_queue is not None: text_queue.put(None) # sentinel if tts_thread is not None: tts_thread.join(timeout=120) # Drain any remaining agent output still in the StdoutProxy # buffer so tool/status lines render ABOVE our response box. # The flush pushes data into the renderer queue; the short # sleep lets the renderer actually paint it before we draw. sys.stdout.flush() time.sleep(0.15) # Update history with full conversation self.conversation_history = result.get("messages", self.conversation_history) if result else self.conversation_history # If auto-compression fired mid-turn, the agent created a new # continuation session and mutated self.agent.session_id. Sync # the CLI's session_id so /status, /resume, title generation, # and the exit summary all target the live child session rather # than the ended parent. Mirrors the gateway's post-run sync # (gateway/run.py around line 9983). if ( self.agent and getattr(self.agent, "session_id", None) and self.agent.session_id != self.session_id ): self._transfer_session_yolo(self.session_id, self.agent.session_id) self.session_id = self.agent.session_id self._pending_title = None # Get the final response response = result.get("final_response", "") if result else "" # Auto-generate session title after first exchange (non-blocking) if response and result and not result.get("failed") and not result.get("partial"): try: from agent.title_generator import maybe_auto_title # Route title-generation failures through the agent's # user-visible warning channel so a depleted auxiliary # provider doesn't silently leave sessions untitled # (issue #15775). _title_failure_cb = getattr( self.agent, "_emit_auxiliary_failure", None ) if self.agent else None maybe_auto_title( self._session_db, self.session_id, message, response, self.conversation_history, failure_callback=_title_failure_cb, main_runtime={ "model": self.model, "provider": self.provider, "base_url": self.base_url, "api_key": self.api_key, "api_mode": self.api_mode, }, ) except Exception: pass # Handle failed or partial results (e.g., non-retryable errors, rate limits, # truncated output, invalid tool calls). Both "failed" and "partial" with # an empty final_response mean the agent couldn't produce a usable answer. if result and (result.get("failed") or result.get("partial")) and not response: error_detail = result.get("error", "Unknown error") response = f"Error: {error_detail}" # Stop continuous voice mode on persistent errors (e.g. 429 rate limit) # to avoid an infinite error → record → error loop if self._voice_continuous: self._voice_continuous = False _cprint(f"\n{_DIM}Continuous voice mode stopped due to error.{_RST}") # Handle interrupt - check if we were interrupted pending_message = None _interrupted_this_turn = bool(result and result.get("interrupted")) # Expose the flag for post-turn hooks (e.g. goal continuation) # so they can skip themselves when the turn was user-cancelled. self._last_turn_interrupted = _interrupted_this_turn if _interrupted_this_turn: pending_message = result.get("interrupt_message") or interrupt_msg # Add indicator that we were interrupted if response and pending_message: response = response + "\n\n---\n_[Interrupted - processing new message]_" response_previewed = result.get("response_previewed", False) if result else False # Display reasoning (thinking) box if enabled and available. # Skip when streaming already showed reasoning live. Use the # turn-persistent flag (_reasoning_shown_this_turn) instead of # _reasoning_stream_started — the latter gets reset during # intermediate turn boundaries (tool-calling loops), which caused # the reasoning box to re-render after the final response. _reasoning_already_shown = getattr(self, '_reasoning_shown_this_turn', False) if self.show_reasoning and result and not _reasoning_already_shown: reasoning = result.get("last_reasoning") if reasoning: w = self._scrollback_box_width() r_label = " Reasoning " r_fill = w - 2 - len(r_label) r_top = f"{_DIM}┌─{r_label}{'─' * max(r_fill - 1, 0)}┐{_RST}" r_bot = f"{_DIM}└{'─' * (w - 2)}┘{_RST}" # Collapse long reasoning: show first 10 lines lines = reasoning.strip().splitlines() if len(lines) > 10: display_reasoning = "\n".join(lines[:10]) display_reasoning += f"\n{_DIM} ... ({len(lines) - 10} more lines){_RST}" else: display_reasoning = reasoning.strip() _cprint(f"\n{r_top}\n{_DIM}{display_reasoning}{_RST}\n{r_bot}") if response and not response_previewed: # Use skin engine for label/color with fallback try: from hermes_cli.skin_engine import get_active_skin _skin = get_active_skin() label = _skin.get_branding("response_label", "⚕ Hermes") _resp_color = _maybe_remap_for_light_mode(_skin.get_color("response_border", "#CD7F32")) _resp_text = _maybe_remap_for_light_mode(_skin.get_color("banner_text", "#FFF8DC")) except Exception: label = "⚕ Hermes" _resp_color = _maybe_remap_for_light_mode("#CD7F32") _resp_text = _maybe_remap_for_light_mode("#FFF8DC") is_error_response = result and (result.get("failed") or result.get("partial")) already_streamed = self._stream_started and self._stream_box_opened and not is_error_response if use_streaming_tts and _streaming_box_opened and not is_error_response: # Text was already printed sentence-by-sentence; just close the box w = self._scrollback_box_width() _cprint(f"\n{_ACCENT}╰{'─' * (w - 2)}╯{_RST}") elif already_streamed: # Response was already streamed token-by-token with box framing; # _flush_stream() already closed the box. Skip Rich Panel. pass else: _chat_console = ChatConsole() _chat_console.print(Panel( _render_final_assistant_content(response, mode=self.final_response_markdown), title=f"[{_resp_color} bold]{label}[/]", title_align="left", border_style=_resp_color, style=_resp_text, box=rich_box.HORIZONTALS, padding=(1, 4), width=self._scrollback_box_width(), )) # Play terminal bell when agent finishes (if enabled). # Works over SSH — the bell propagates to the user's terminal. if self.bell_on_complete: sys.stdout.write("\a") sys.stdout.flush() # Notify when iteration budget was hit if result and not result.get("completed") and not result.get("interrupted"): _api_calls = result.get("api_calls", 0) if _api_calls >= getattr(self.agent, "max_iterations", 90): _max_iter = getattr(self.agent, "max_iterations", 90) _cprint( f"\n{_DIM}⚠ Iteration budget reached " f"({_api_calls}/{_max_iter}) — " f"response may be incomplete{_RST}" ) # Speak response aloud if voice TTS is enabled # Skip batch TTS when streaming TTS already handled it if self._voice_tts and response and not use_streaming_tts: self._voice_speak_response_async(response) # Re-queue the interrupt message (and any that arrived while we were # processing the first) as the next prompt for process_loop. # Only reached when busy_input_mode == "interrupt" (the default). # In "queue" mode Enter routes directly to _pending_input so this # block is never hit. if pending_message and hasattr(self, '_pending_input'): all_parts = [pending_message] while not self._interrupt_queue.empty(): try: extra = self._interrupt_queue.get_nowait() if extra: all_parts.append(extra) except queue.Empty: break combined = "\n".join(all_parts) n = len(all_parts) preview = combined[:50] + ("..." if len(combined) > 50 else "") if n > 1: print(f"\n⚡ Sending {n} messages after interrupt: '{preview}'") else: print(f"\n⚡ Sending after interrupt: '{preview}'") self._pending_input.put(combined) # If a /steer was left over (agent finished before another tool # batch could absorb it), deliver it as the next user turn. _leftover_steer = result.get("pending_steer") if result else None if _leftover_steer and hasattr(self, '_pending_input'): preview = _leftover_steer[:60] + ("..." if len(_leftover_steer) > 60 else "") print(f"\n⏩ Delivering leftover /steer as next turn: '{preview}'") self._pending_input.put(_leftover_steer) return response except Exception as e: print(f"Error: {e}") return None finally: # Ensure streaming TTS resources are cleaned up even on error. # Normal path sends the sentinel at line ~3568; this is a safety # net for exception paths that skip it. Duplicate sentinels are # harmless — stream_tts_to_speaker exits on the first None. if text_queue is not None: try: text_queue.put_nowait(None) except Exception: pass if stop_event is not None: stop_event.set() if tts_thread is not None and tts_thread.is_alive(): tts_thread.join(timeout=5) def _clear_terminal_on_exit(self): """Clear screen + scrollback so nothing is stranded above the exit summary. Called from ``_print_exit_summary`` after ``app.run()`` has returned and prompt_toolkit has torn down its renderer + restored terminal modes — so a direct write to the real stdout fd is safe (the StdoutProxy / patch_stdout layer is gone by now). Sequence: ``ESC[3J`` (erase scrollback) + ``ESC[2J`` (erase visible screen) + ``ESC[H`` (cursor home). Modern terminals on Linux, macOS and Windows (Terminal / conhost with VT processing, which prompt_toolkit already enables) all honor these. Best-effort: skip silently when stdout isn't a real console, and fall back to the platform ``clear`` / ``cls`` command if the escape write fails. """ try: stream = sys.stdout if stream is None or not stream.isatty(): return except Exception: return try: stream.write("\033[3J\033[2J\033[H") stream.flush() return except Exception: pass # Fallback: shell clear command (rarely needed — escapes work on every # VT-capable terminal, but this covers exotic stdout wrappers). try: os.system("cls" if os.name == "nt" else "clear") except Exception: pass def _print_exit_summary(self): """Print session resume info on exit, similar to Claude Code.""" # Clear the screen + scrollback before printing the summary so the # live bottom chrome (status bar, input box, separator rules) and the # rest of the session transcript don't get stranded above the exit # summary (#38252). By this point app.run() has returned and # prompt_toolkit has restored terminal modes, so writing raw escapes # to stdout is safe. ESC[3J clears scrollback, ESC[2J clears the # visible screen, ESC[H homes the cursor — so the summary prints at a # clean top-left. Falls back to the platform clear command if stdout # isn't a TTY-capable stream. Honors NO_COLOR/dumb terminals by # skipping silently when there's no real console. self._clear_terminal_on_exit() print() msg_count = len(self.conversation_history) if msg_count > 0: user_msgs = len([m for m in self.conversation_history if m.get("role") == "user"]) tool_calls = len([m for m in self.conversation_history if m.get("role") == "tool" or m.get("tool_calls")]) elapsed = datetime.now() - self.session_start hours, remainder = divmod(int(elapsed.total_seconds()), 3600) minutes, seconds = divmod(remainder, 60) if hours > 0: duration_str = f"{hours}h {minutes}m {seconds}s" elif minutes > 0: duration_str = f"{minutes}m {seconds}s" else: duration_str = f"{seconds}s" # Look up session title for resume-by-name hint session_title = None if self._session_db: try: session_title = self._session_db.get_session_title(self.session_id) except Exception: pass print("Resume this session with:") # Session IDs are profile-constrained, so the resume hint must # include `-p ` for non-default profiles. Without this, # copying the hint from a non-default profile fails to find the # session on the next invocation. The "default" and "custom" # profile names use the standard HERMES_HOME, so no -p needed. try: from hermes_cli.profiles import get_active_profile_name _active_profile = get_active_profile_name() except Exception: _active_profile = "default" profile_flag = ( "" if _active_profile in ("default", "custom") else f" -p {_active_profile}" ) print(f" hermes --resume {self.session_id}{profile_flag}") if session_title: print(f" hermes -c \"{session_title}\"{profile_flag}") print() print(f"Session: {self.session_id}") if session_title: print(f"Title: {session_title}") print(f"Duration: {duration_str}") print(f"Messages: {msg_count} ({user_msgs} user, {tool_calls} tool calls)") else: try: from hermes_cli.skin_engine import get_active_goodbye goodbye = get_active_goodbye("Goodbye! ⚕") except Exception: goodbye = "Goodbye! ⚕" print(goodbye) def _get_tui_prompt_symbols(self) -> tuple[str, str]: """Return ``(normal_prompt, state_suffix)`` for the active skin. ``normal_prompt`` is the full ``branding.prompt_symbol``. ``state_suffix`` is what special states (sudo/secret/approval/agent) should render after their leading icon. When a profile is active (not "default"), the profile name is prepended to the prompt symbol: ``coder ❯`` instead of ``❯``. """ try: from hermes_cli.skin_engine import get_active_prompt_symbol symbol = get_active_prompt_symbol("❯ ") except Exception: symbol = "❯ " symbol = (symbol or "❯ ").rstrip() + " " # Prepend profile name when not default try: from hermes_cli.profiles import get_active_profile_name profile = get_active_profile_name() if profile not in {"default", "custom"}: symbol = f"{profile} {symbol}" except Exception: pass stripped = symbol.rstrip() if not stripped: return "❯ ", "❯ " parts = stripped.split() candidate = parts[-1] if parts else "" arrow_chars = ("❯", ">", "$", "#", "›", "»", "→") if any(ch in candidate for ch in arrow_chars): return symbol, candidate.rstrip() + " " # Icon-only custom prompts should still remain visible in special states. return symbol, symbol def _audio_level_bar(self) -> str: """Return a visual audio level indicator based on current RMS.""" _LEVEL_BARS = " ▁▂▃▄▅▆▇" rec = getattr(self, "_voice_recorder", None) if rec is None: return "" rms = rec.current_rms # Normalize RMS (0-32767) to 0-7 index, with log-ish scaling # Typical speech RMS is 500-5000, we cap display at ~8000 level = min(rms, 8000) * 7 // 8000 return _LEVEL_BARS[level] def _get_tui_prompt_fragments(self): """Return the prompt_toolkit fragments for the current interactive state.""" symbol, state_suffix = self._get_tui_prompt_symbols() compact = self._use_minimal_tui_chrome(width=self._get_tui_terminal_width()) def _state_fragment(style: str, icon: str, extra: str = ""): if compact: text = icon if extra: text = f"{text} {extra.strip()}".rstrip() return [(style, text + " ")] if extra: return [(style, f"{icon} {extra} {state_suffix}")] return [(style, f"{icon} {state_suffix}")] if self._voice_recording: bar = self._audio_level_bar() return _state_fragment("class:voice-recording", "●", bar) if self._voice_processing: return _state_fragment("class:voice-processing", "◉") if self._sudo_state: return _state_fragment("class:sudo-prompt", "🔐") if self._secret_state: return _state_fragment("class:sudo-prompt", "🔑") if self._approval_state: return _state_fragment("class:prompt-working", "⚠") if getattr(self, "_slash_confirm_state", None): return _state_fragment("class:prompt-working", "⚠") if self._clarify_freetext: return _state_fragment("class:clarify-selected", "✎") if self._clarify_state: return _state_fragment("class:prompt-working", "?") if self._command_running: return _state_fragment("class:prompt-working", self._command_spinner_frame()) if self._agent_running: return _state_fragment("class:prompt-working", "⚕") if self._voice_mode: return _state_fragment("class:voice-prompt", "🎤") return [("class:prompt", symbol)] def _get_tui_prompt_text(self) -> str: """Return the visible prompt text for width calculations.""" return "".join(text for _, text in self._get_tui_prompt_fragments()) def _build_tui_style_dict(self) -> dict[str, str]: """Layer the active skin's prompt_toolkit colors over the base TUI style. Also rewrites any hex-color tokens in the resulting style strings to their light-mode equivalents (via _LIGHT_MODE_REMAP) when the terminal is detected as light. This makes the chrome readable on cream Terminal.app backgrounds without per-skin overrides. """ style_dict = dict(getattr(self, "_tui_style_base", {}) or {}) try: from hermes_cli.skin_engine import get_prompt_toolkit_style_overrides style_dict.update(get_prompt_toolkit_style_overrides()) except Exception: pass # Light-mode remap on the style strings. Each value is a pt # style string like "bg:#1a1a2e #C0C0C0 bold" — split on space, # rewrite any "#XXX" tokens (including "bg:#XXX") through the # light-mode remap, rejoin. # # CRITICAL: skip the remap entirely when a style string already # specifies its own bg (e.g. status-bar / completion-menu styles # with `bg:#1a1a2e ...`). Those colors were tuned for that # specific dark bg and remapping the FG to a dark equivalent # would produce dark-on-dark (invisible). The terminal's BG # mode is irrelevant — what matters is the bg the style itself # paints. try: if _detect_light_mode(): def _remap_value(v: str) -> str: if not v: return v tokens = v.split() has_explicit_bg = any(t.startswith("bg:") for t in tokens) if has_explicit_bg: # The style paints its own bg — leave its fg alone. return v return " ".join( _maybe_remap_for_light_mode(t) if t.startswith("#") else t for t in tokens ) style_dict = {k: _remap_value(v or "") for k, v in style_dict.items()} except Exception: pass return style_dict def _apply_tui_skin_style(self) -> bool: """Refresh prompt_toolkit styling for a running interactive TUI.""" if not getattr(self, "_app", None) or not getattr(self, "_tui_style_base", None): return False self._app.style = PTStyle.from_dict(self._build_tui_style_dict()) self._invalidate(min_interval=0.0) return True # --- Protected TUI extension hooks for wrapper CLIs --- def _get_extra_tui_widgets(self) -> list: """Return extra prompt_toolkit widgets to insert into the TUI layout. Wrapper CLIs can override this to inject widgets (e.g. a mini-player, overlay menu) into the layout without overriding ``run()``. Widgets are inserted between the spacer and the status bar. """ return [] def _register_extra_tui_keybindings(self, kb, *, input_area) -> None: """Register extra keybindings on the TUI ``KeyBindings`` object. Wrapper CLIs can override this to add keybindings (e.g. transport controls, modal shortcuts) without overriding ``run()``. Parameters ---------- kb : KeyBindings The active keybinding registry for the prompt_toolkit application. input_area : TextArea The main input widget, for wrappers that need to inspect or manipulate user input from a keybinding handler. """ def _build_tui_layout_children( self, *, sudo_widget, secret_widget, approval_widget, slash_confirm_widget=None, clarify_widget, model_picker_widget=None, spinner_widget=None, spacer, status_bar, input_rule_top, image_bar, input_area, input_rule_bot, voice_status_bar, completions_menu, ) -> list: """Assemble the ordered list of children for the root ``HSplit``. Wrapper CLIs typically override ``_get_extra_tui_widgets`` instead of this method. Override this only when you need full control over widget ordering. """ return [ item for item in [ Window(height=0), sudo_widget, secret_widget, approval_widget, slash_confirm_widget, clarify_widget, model_picker_widget, spinner_widget, spacer, *self._get_extra_tui_widgets(), status_bar, input_rule_top, image_bar, input_area, input_rule_bot, voice_status_bar, completions_menu, ] if item is not None ] def run(self): """Run the interactive CLI loop with persistent input at bottom.""" if not self._claim_active_session("cli"): return # Detect light/dark terminal mode now (before pt grabs the tty). # Caches the result so subsequent _hex_to_ansi / style calls # don't risk re-querying mid-render. try: _detect_light_mode() except Exception: pass # Push the entire TUI to the bottom of the terminal so the banner, # responses, and prompt all appear pinned to the bottom — empty # space stays above, not below. This prints enough blank lines to # scroll the cursor to the last row before any content is rendered. try: _term_lines = shutil.get_terminal_size().lines if _term_lines > 2: print("\n" * (_term_lines - 1), end="", flush=True) except Exception: pass self.show_banner() # Surface any active supply-chain security advisories right after the # welcome banner. Quiet/single-query paths call this themselves. self._show_security_advisories() # If resuming a session, load history and display it immediately # so the user has context before typing their first message. if self._resumed: if self._preload_resumed_session(): self._display_resumed_history() try: from hermes_cli.skin_engine import get_active_skin _welcome_skin = get_active_skin() _welcome_text = _welcome_skin.get_branding("welcome", "Welcome to Hermes Agent! Type your message or /help for commands.") _welcome_color = _welcome_skin.get_color("banner_text", "#FFF8DC") except Exception: _welcome_text = "Welcome to Hermes Agent! Type your message or /help for commands." _welcome_color = "#FFF8DC" self._console_print(f"[{_welcome_color}]{_welcome_text}[/]") # Warm the /model picker's provider-models cache off-thread during this # idle window (banner shown, user about to type). The no-args picker # otherwise blocks ~1-2s on serial /v1/models fetches the first time # it's opened in a session. Fire-and-forget, guarded once-per-process. try: from hermes_cli.model_switch import prewarm_picker_cache_async prewarm_picker_cache_async() except Exception: pass # Redaction opt-out warning (#17691): ON by default, loud when off. # The redactor snapshots its state at import time so any toggle now # won't affect the running process — we just want the operator to # see that they're running without the safety net. try: _redact_raw = os.getenv("HERMES_REDACT_SECRETS", "true") if _redact_raw.lower() not in {"1", "true", "yes", "on"}: self._console_print( "[bold red]⚠ Secret redaction is DISABLED[/] " f"(HERMES_REDACT_SECRETS={_redact_raw}). " "API keys and tokens may appear verbatim in chat output, " "session JSONs, and logs. Set " "[cyan]security.redact_secrets: true[/] in config.yaml " "to re-enable." ) except Exception: pass # First-time OpenClaw-residue banner — fires once if ~/.openclaw/ exists # after an OpenClaw→Hermes migration (especially migrations done by # OpenClaw's own tool, which doesn't archive the source directory). try: from agent.onboarding import ( OPENCLAW_RESIDUE_FLAG, detect_openclaw_residue, is_seen, mark_seen, openclaw_residue_hint_cli, ) if not is_seen(self.config, OPENCLAW_RESIDUE_FLAG) and detect_openclaw_residue(): try: _resid_color = _welcome_skin.get_color("banner_dim", "#B8860B") except Exception: _resid_color = "#B8860B" self._console_print(f"[{_resid_color}]{openclaw_residue_hint_cli()}[/]") try: from hermes_cli.config import get_config_path as _get_cfg_path_resid mark_seen(_get_cfg_path_resid(), OPENCLAW_RESIDUE_FLAG) except Exception: pass # best-effort — banner will fire again next session except Exception: pass # banner is non-critical — never break startup # Show a random tip to help users discover features try: from hermes_cli.tips import get_random_tip _tip = get_random_tip() try: _tip_color = _welcome_skin.get_color("banner_dim", "#B8860B") except Exception: _tip_color = "#B8860B" self._console_print(f"[dim {_tip_color}]✦ Tip: {_tip}[/]") except Exception: pass # Tips are non-critical — never break startup # Curator — kick off a background skill-maintenance pass on startup # if the schedule says we're due. Runs in a daemon thread so it # never blocks the interactive loop. Best-effort; any failure is # swallowed to avoid breaking session startup. try: from agent.curator import maybe_run_curator maybe_run_curator( idle_for_seconds=float("inf"), # CLI startup = fully idle on_summary=lambda msg: self._console_print( f"[dim #6b7684]💾 {msg}[/]" ), ) except Exception: pass if self.preloaded_skills and not self._startup_skills_line_shown: skills_label = ", ".join(self.preloaded_skills) self._console_print( f"[bold {_accent_hex()}]Activated skills:[/] {skills_label}" ) self._startup_skills_line_shown = True self._console_print() # State for async operation self._agent_running = False self._pending_input = queue.Queue() # For normal input (commands + new queries) self._interrupt_queue = queue.Queue() # For messages typed while agent is running # See constructor note. Mirrored here for the run() path that skips # the earlier __init__ branch. self._last_turn_interrupted = False self._should_exit = False self._last_ctrl_c_time = 0 # Track double Ctrl+C for force exit # Give plugin manager a CLI reference so plugins can inject messages from hermes_cli.plugins import get_plugin_manager get_plugin_manager()._cli_ref = self # Config file watcher — detect mcp_servers changes and auto-reload from hermes_cli.config import get_config_path as _get_config_path _cfg_path = _get_config_path() self._config_mtime: float = _cfg_path.stat().st_mtime if _cfg_path.exists() else 0.0 self._config_mcp_servers: dict = self.config.get("mcp_servers") or {} self._last_config_check: float = 0.0 # monotonic time of last check # Clarify tool state: interactive question/answer with the user. # When the agent calls the clarify tool, _clarify_state is set and # the prompt_toolkit UI switches to a selection mode. self._clarify_state = None # dict with question, choices, selected, response_queue self._clarify_freetext = False # True when user chose "Other" and is typing self._clarify_deadline = 0 # monotonic timestamp when the clarify times out # Sudo password prompt state (similar mechanism to clarify) self._sudo_state = None # dict with response_queue when active self._sudo_deadline = 0 self._modal_input_snapshot = None # Dangerous command approval state (similar mechanism to clarify) self._approval_state = None # dict with command, description, choices, selected, response_queue self._approval_deadline = 0 self._approval_lock = threading.Lock() # serialize concurrent approval prompts (delegation race fix) # Destructive slash-command confirmation state (/new, /clear, /undo). # These prompts are answered through the prompt_toolkit composer, not # raw input(), so the option labels stay visible and Enter does not EOF # the whole app. self._slash_confirm_state = None self._slash_confirm_deadline = 0 # Slash command loading state self._command_running = False self._command_status = "" # Secure secret capture state for skill setup self._secret_state = None # dict with var_name, prompt, metadata, response_queue self._secret_deadline = 0 # Clipboard image attachments (paste images into the CLI) self._attached_images: list[Path] = [] self._image_counter = 0 # Voice mode state (protected by _voice_lock for cross-thread access) self._voice_lock = threading.Lock() self._voice_mode = False # Whether voice mode is enabled self._voice_tts = False # Whether TTS output is enabled self._voice_recorder = None # AudioRecorder instance (lazy init) self._voice_recording = False # Whether currently recording self._voice_processing = False # Whether STT is in progress self._voice_continuous = False # Whether to auto-restart after agent responds self._voice_tts_done = threading.Event() # Signals TTS playback finished self._voice_tts_done.set() # Initially "done" (no TTS pending) if os.environ.get("HERMES_DEFER_AGENT_STARTUP") != "1": self._install_tool_callbacks() if os.environ.get("HERMES_DEFER_AGENT_STARTUP") != "1": self._ensure_tirith_security() # Key bindings for the input area kb = KeyBindings() from prompt_toolkit.keys import Keys as _IgnoreKeys @kb.add(_IgnoreKeys.Ignore, eager=True) def handle_ignored_terminal_sequence(event): """Consume parser-level ignored terminal sequences before self-insert. install_ignored_terminal_sequences() in hermes_cli.pt_input_extras registers focus reports (CSI I / CSI O) as Keys.Ignore at the VT100 parser level. Without this no-op binding the default self-insert path would still fire and the bytes would land in the buffer. """ return None def handle_enter(event): """Handle Enter key - submit input. Routes to the correct queue based on active UI state: - Sudo password prompt: password goes to sudo response queue - Approval selection: selected choice goes to approval response queue - Clarify freetext mode: answer goes to the clarify response queue - Clarify choice mode: selected choice goes to the clarify response queue - Agent running: goes to _interrupt_queue (chat() monitors this) - Agent idle: goes to _pending_input (process_loop monitors this) Commands (starting with /) always go to _pending_input so they're handled as commands, not sent as interrupt text to the agent. """ # --- Sudo password prompt: submit the typed password --- if self._sudo_state: text = event.app.current_buffer.text self._sudo_state["response_queue"].put(text) self._sudo_state = None event.app.invalidate() return # --- Secret prompt: submit the typed secret --- if self._secret_state: text = event.app.current_buffer.text self._submit_secret_response(text) event.app.current_buffer.reset() event.app.invalidate() return # --- Approval selection: confirm the highlighted choice --- if self._approval_state: self._handle_approval_selection() event.app.invalidate() return # --- Slash-command confirmation: submit typed or highlighted choice --- if self._slash_confirm_state: text = event.app.current_buffer.text.strip() choices = self._slash_confirm_state.get("choices") or [] choice = self._normalize_slash_confirm_choice(text, choices) if text else None if choice is None: selected = self._slash_confirm_state.get("selected", 0) if 0 <= selected < len(choices): choice = choices[selected][0] self._submit_slash_confirm_response(choice or "cancel") event.app.current_buffer.reset() event.app.invalidate() return # --- /model picker modal --- if self._model_picker_state: try: self._handle_model_picker_selection() except Exception as _exc: _cprint(f" ✗ Model selection failed: {_exc}") self._close_model_picker() event.app.current_buffer.reset() event.app.invalidate() return # --- Clarify freetext mode: user typed their own answer --- if self._clarify_freetext and self._clarify_state: text = event.app.current_buffer.text.strip() if text: self._clarify_state["response_queue"].put(text) self._clarify_state = None self._clarify_freetext = False event.app.current_buffer.reset() event.app.invalidate() return # --- Clarify choice mode: confirm the highlighted selection --- if self._clarify_state and not self._clarify_freetext: state = self._clarify_state selected = state["selected"] choices = state.get("choices") or [] if selected < len(choices): state["response_queue"].put(choices[selected]) self._clarify_state = None event.app.invalidate() else: # "Other" selected → switch to freetext self._clarify_freetext = True event.app.invalidate() return # --- Normal input routing --- text = event.app.current_buffer.text.strip() has_images = bool(self._attached_images) if text or has_images: # Handle /model directly on the UI thread so interactive pickers # can safely use prompt_toolkit terminal handoff helpers. if self._should_handle_model_command_inline(text, has_images=has_images): if not self.process_command(text): self._should_exit = True if event.app.is_running: event.app.exit() event.app.current_buffer.reset(append_to_history=True) # Force a repaint: process_command() prints through # patch_stdout (scrolls output above the prompt) and never # invalidates the app, so the just-cleared input area can # keep showing the submitted text until some unrelated # redraw fires. Every other early-return branch in this # handler invalidates after reset — match them. event.app.invalidate() return # Handle /steer while the agent is running immediately on the # UI thread. Queuing through _pending_input would deadlock the # steer until after the agent loop finishes (process_loop is # blocked inside self.chat()), which turns /steer into a # post-run next-turn message — defeating mid-run injection. # agent.steer() is thread-safe (holds _pending_steer_lock). if self._should_handle_steer_command_inline(text, has_images=has_images): self.process_command(text) event.app.current_buffer.reset(append_to_history=True) # Force a repaint after clearing the buffer. /steer is # dispatched mid-run while the agent streams output through # patch_stdout; process_command() never invalidates the # app, so without this the submitted "/steer " can # linger in the input area (looking unsent) and invite an # accidental re-submit. See issue #34569. event.app.invalidate() return # Snapshot and clear attached images images = list(self._attached_images) self._attached_images.clear() event.app.invalidate() # Bundle text + images as a tuple when images are present payload = (text, images) if images else text if self._agent_running and not (text and _looks_like_slash_command(text)): _effective_mode = self.busy_input_mode if _effective_mode == "steer": # Route Enter through /steer — inject mid-run after the # next tool call. Images can't ride along (steer only # appends text), so fall back to queue when images are # attached. If the agent lacks steer() or rejects the # payload, also fall back to queue so nothing is lost. if images or not text: _effective_mode = "queue" else: accepted = False try: if self.agent is not None and hasattr(self.agent, "steer"): accepted = bool(self.agent.steer(text)) except Exception as exc: _cprint(f" {_DIM}Steer failed ({exc}) — queued for next turn.{_RST}") accepted = False if accepted: preview = text[:80] + ("..." if len(text) > 80 else "") _cprint(f" {_ACCENT}⏩ Steered: '{preview}'{_RST}") else: _effective_mode = "queue" if _effective_mode == "queue": # Queue for the next turn instead of interrupting self._pending_input.put(payload) preview = text if text else f"[{len(images)} image{'s' if len(images) != 1 else ''} attached]" _cprint(f" Queued for the next turn: {preview[:80]}{'...' if len(preview) > 80 else ''}") elif _effective_mode == "interrupt": self._interrupt_queue.put(payload) # Debug: log to file when message enters interrupt queue try: _dbg = _hermes_home / "interrupt_debug.log" with open(_dbg, "a", encoding="utf-8") as _f: _f.write(f"{time.strftime('%H:%M:%S')} ENTER: queued interrupt msg={str(payload)[:60]!r}, " f"agent_running={self._agent_running}\n") except Exception: pass # First-touch onboarding: on the very first busy-while-running # event for this install, print a one-line tip explaining the # /busy knob. Flag persists to config.yaml and never fires # again. Guarded for exceptions so onboarding can't break # the input loop. try: from agent.onboarding import ( BUSY_INPUT_FLAG, busy_input_hint_cli, is_seen, mark_seen, ) if not is_seen(CLI_CONFIG, BUSY_INPUT_FLAG): _cprint(f" {_DIM}{busy_input_hint_cli(self.busy_input_mode)}{_RST}") mark_seen(_hermes_home / "config.yaml", BUSY_INPUT_FLAG) CLI_CONFIG.setdefault("onboarding", {}).setdefault("seen", {})[BUSY_INPUT_FLAG] = True except Exception: pass else: self._pending_input.put(payload) event.app.current_buffer.reset(append_to_history=True) _bind_prompt_submit_keys(kb, handle_enter) @kb.add('escape', 'enter') def handle_alt_enter(event): """Alt+Enter inserts a newline for multi-line input. Works on mac/Linux/WSL. On Windows Terminal this keystroke is intercepted at the terminal layer (toggles fullscreen) and never reaches here — Windows users get newline via Ctrl+Enter instead (bound below as c-j, since WT delivers Ctrl+Enter as LF). """ event.current_buffer.insert_text('\n') if _preserve_ctrl_enter_newline(): @kb.add('c-j') def handle_ctrl_enter_newline(event): """Ctrl+Enter inserts a newline on Windows, WSL, SSH, and WT. Windows Terminal (incl. WSL/SSH sessions through it) delivers Ctrl+Enter as LF (c-j), distinct from plain Enter (c-m). This binding makes Ctrl+Enter the equivalent of Alt+Enter on those terminals, giving an Enter-involving newline keystroke without requiring terminal settings changes. Ctrl+J (the raw LF keystroke) also triggers this by virtue of being the same key code — a harmless side effect since Ctrl+J has no conflicting Hermes binding. See issue #22379. """ event.current_buffer.insert_text('\n') # VSCode/Cursor bind Ctrl+G to "Find Next" at the editor level, so # the keystroke never reaches the embedded terminal. Alt+G is unbound # in those IDEs and arrives here as ('escape', 'g') — register it as # a fallback so the editor handoff works inside Cursor/VSCode too. _editor_filter = Condition( lambda: not self._clarify_state and not self._approval_state and not self._sudo_state and not self._secret_state ) @kb.add('c-g', filter=_editor_filter) @kb.add('escape', 'g', filter=_editor_filter) def handle_open_in_editor(event): """Ctrl+G (or Alt+G in VSCode/Cursor) opens the current draft in an external editor.""" cli_ref._open_external_editor(event.current_buffer) @kb.add('tab', eager=True) def handle_tab(event): """Tab: accept completion, auto-suggestion, or start completions. Priority: 1. Completion menu open → accept selected completion 2. Ghost text suggestion available → accept auto-suggestion 3. Otherwise → start completion menu After accepting a provider like 'anthropic:', the completion menu closes and complete_while_typing doesn't fire (no keystroke). This binding re-triggers completions so stage-2 models appear immediately. """ buf = event.current_buffer if buf.complete_state: # Completion menu is open — accept the selection completion = buf.complete_state.current_completion if completion is None: # Menu open but nothing selected — select first then grab it buf.go_to_completion(0) completion = buf.complete_state and buf.complete_state.current_completion if completion is None: return # Accept the selected completion buf.apply_completion(completion) elif buf.suggestion and buf.suggestion.text: # No completion menu, but there's a ghost text auto-suggestion — accept it buf.insert_text(buf.suggestion.text) else: # No menu and no suggestion — start completions from scratch buf.start_completion() # --- Clarify tool: arrow-key navigation for multiple-choice questions --- @kb.add('up', filter=Condition(lambda: bool(self._clarify_state) and not self._clarify_freetext)) def clarify_up(event): """Move selection up in clarify choices.""" if self._clarify_state: self._clarify_state["selected"] = max(0, self._clarify_state["selected"] - 1) event.app.invalidate() @kb.add('down', filter=Condition(lambda: bool(self._clarify_state) and not self._clarify_freetext)) def clarify_down(event): """Move selection down in clarify choices.""" if self._clarify_state: choices = self._clarify_state.get("choices") or [] max_idx = len(choices) # last index is the "Other" option self._clarify_state["selected"] = min(max_idx, self._clarify_state["selected"] + 1) event.app.invalidate() # Number keys for quick clarify selection (1-9, 0 for 10th item) def _make_clarify_number_handler(idx): def handler(event): if self._clarify_state and not self._clarify_freetext: choices = self._clarify_state.get("choices") or [] # Map index to choice (treating "Other" as the last option) if idx < len(choices): # Select a numbered choice self._clarify_state["response_queue"].put(choices[idx]) self._clarify_state = None self._clarify_freetext = False event.app.invalidate() elif idx == len(choices): # Select "Other" option self._clarify_freetext = True event.app.invalidate() return handler for _num in range(10): # 1-9 select items 0-8, 0 selects item 9 (10thitem) _idx = 9 if _num == 0 else _num - 1 kb.add(str(_num), filter=Condition(lambda: bool(self._clarify_state) and not self._clarify_freetext))(_make_clarify_number_handler(_idx)) # --- Dangerous command approval: arrow-key navigation --- @kb.add('up', filter=Condition(lambda: bool(self._approval_state))) def approval_up(event): if self._approval_state: self._approval_state["selected"] = max(0, self._approval_state["selected"] - 1) event.app.invalidate() @kb.add('down', filter=Condition(lambda: bool(self._approval_state))) def approval_down(event): if self._approval_state: max_idx = len(self._approval_state["choices"]) - 1 self._approval_state["selected"] = min(max_idx, self._approval_state["selected"] + 1) event.app.invalidate() # --- Slash-command confirmation: arrow-key navigation --- @kb.add('up', filter=Condition(lambda: bool(self._slash_confirm_state))) def slash_confirm_up(event): if self._slash_confirm_state: self._slash_confirm_state["selected"] = max(0, self._slash_confirm_state.get("selected", 0) - 1) event.app.invalidate() @kb.add('down', filter=Condition(lambda: bool(self._slash_confirm_state))) def slash_confirm_down(event): if self._slash_confirm_state: max_idx = len(self._slash_confirm_state.get("choices") or []) - 1 self._slash_confirm_state["selected"] = min(max_idx, self._slash_confirm_state.get("selected", 0) + 1) event.app.invalidate() # --- /model picker: arrow-key navigation --- @kb.add('up', filter=Condition(lambda: bool(self._model_picker_state))) def model_picker_up(event): if self._model_picker_state: self._model_picker_state["selected"] = max(0, self._model_picker_state.get("selected", 0) - 1) event.app.invalidate() @kb.add('down', filter=Condition(lambda: bool(self._model_picker_state))) def model_picker_down(event): state = self._model_picker_state if not state: return if state.get("stage") == "provider": max_idx = len(state.get("providers") or []) else: max_idx = len(state.get("model_list") or []) + 1 state["selected"] = min(max_idx, state.get("selected", 0) + 1) event.app.invalidate() @kb.add('escape', filter=Condition(lambda: bool(self._model_picker_state)), eager=True) def model_picker_escape(event): """ESC closes the /model picker.""" self._close_model_picker() event.app.current_buffer.reset() event.app.invalidate() # Number keys for quick approval selection (1-9, 0 for 10th item) def _make_approval_number_handler(idx): def handler(event): if self._approval_state and idx < len(self._approval_state["choices"]): self._approval_state["selected"] = idx self._handle_approval_selection() event.app.invalidate() return handler for _num in range(10): # 1-9 select items 0-8, 0 selects item 9 (10th item) _idx = 9 if _num == 0 else _num - 1 kb.add(str(_num), filter=Condition(lambda: bool(self._approval_state)))(_make_approval_number_handler(_idx)) # Number keys for quick slash-confirm selection (1-9, 0 for 10th item) def _make_slash_confirm_number_handler(idx): def handler(event): if self._slash_confirm_state and idx < len(self._slash_confirm_state.get("choices") or []): choice = self._slash_confirm_state["choices"][idx][0] self._submit_slash_confirm_response(choice) event.app.current_buffer.reset() event.app.invalidate() return handler for _num in range(10): _idx = 9 if _num == 0 else _num - 1 kb.add(str(_num), filter=Condition(lambda: bool(self._slash_confirm_state)))(_make_slash_confirm_number_handler(_idx)) # --- History navigation: up/down browse history in normal input mode --- # The TextArea is multiline, so by default up/down only move the cursor. # Buffer.auto_up/auto_down handle both: cursor movement when multi-line, # history browsing when on the first/last line (or single-line input). _normal_input = Condition( lambda: not self._clarify_state and not self._approval_state and not self._slash_confirm_state and not self._sudo_state and not self._secret_state and not self._model_picker_state ) @kb.add('up', filter=_normal_input) def history_up(event): """Up arrow: browse history when on first line, else move cursor up.""" event.app.current_buffer.auto_up(count=event.arg) @kb.add('down', filter=_normal_input) def history_down(event): """Down arrow: browse history when on last line, else move cursor down.""" event.app.current_buffer.auto_down(count=event.arg) @kb.add('c-l') def handle_ctrl_l(event): """Ctrl+L: force a clean full-screen repaint. Recovers the UI after external terminal buffer drift — tmux / cmux tab switches, ``clear`` from a subshell, SSH window restores, etc. — that prompt_toolkit can't detect on its own. Matches the universal bash/zsh/fish/vim/htop convention. """ self._force_full_redraw() @kb.add('c-c') def handle_ctrl_c(event): """Handle Ctrl+C - cancel interactive prompts, interrupt agent, or exit. Priority: 0. Cancel active voice recording 1. Cancel active sudo/approval/clarify prompt 2. Interrupt the running agent (first press) 3. Force exit (second press within 2s, or when idle) """ now = time.time() # Cancel active voice recording. # Run cancel() in a background thread to prevent blocking the # event loop if AudioRecorder._lock or CoreAudio takes time. _should_cancel_voice = False _recorder_ref = None with cli_ref._voice_lock: if cli_ref._voice_recording and cli_ref._voice_recorder: _recorder_ref = cli_ref._voice_recorder cli_ref._voice_recording = False cli_ref._voice_continuous = False _should_cancel_voice = True if _should_cancel_voice: _cprint(f"\n{_DIM}Recording cancelled.{_RST}") threading.Thread( target=_recorder_ref.cancel, daemon=True ).start() event.app.invalidate() return # Cancel sudo prompt if self._sudo_state: self._sudo_state["response_queue"].put("") self._sudo_state = None event.app.invalidate() return # Cancel secret prompt if self._secret_state: self._cancel_secret_capture() event.app.current_buffer.reset() event.app.invalidate() return # Cancel approval prompt (deny) if self._approval_state: self._approval_state["response_queue"].put("deny") self._approval_state = None event.app.invalidate() return # Cancel slash confirmation prompt if self._slash_confirm_state: self._submit_slash_confirm_response("cancel") event.app.current_buffer.reset() event.app.invalidate() return # Cancel /model picker if self._model_picker_state: self._close_model_picker() event.app.current_buffer.reset() event.app.invalidate() return # Cancel clarify prompt if self._clarify_state: self._clarify_state["response_queue"].put( "The user cancelled. Use your best judgement to proceed." ) self._clarify_state = None self._clarify_freetext = False event.app.current_buffer.reset() event.app.invalidate() return if self._agent_running and self.agent: if now - self._last_ctrl_c_time < 2.0: print("\n⚡ Force exiting...") self._should_exit = True event.app.exit() return self._last_ctrl_c_time = now print("\n⚡ Interrupting agent... (press Ctrl+C again to force exit)") self.agent.interrupt() # If there's text or images, clear them (like bash). # If everything is already empty, exit. elif event.app.current_buffer.text or self._attached_images: event.app.current_buffer.reset() self._attached_images.clear() event.app.invalidate() else: self._should_exit = True event.app.exit() # Ctrl+Shift+C: no binding needed. Terminal emulators (GNOME Terminal, # iTerm2, kitty, Windows Terminal, etc.) intercept Ctrl+Shift+C before # the keystroke reaches the application's stdin — prompt_toolkit never # sees it, and prompt_toolkit's key spec parser doesn't even recognise # 'c-S-c' anyway (the Shift modifier is meaningless on control-sequence # keys). #19884 added a handler for this; #19895 patched the resulting # startup crash with try/except. Both were based on a misreading of how # terminal key events propagate. Deleting the dead handler outright. @kb.add('c-q') # Ctrl+Q def handle_ctrl_q(event): """Alternative interrupt/exit shortcut (Ctrl+Q). Behaves like Ctrl+C: cancels active prompts, interrupts the running agent, or clears the input buffer. Does not support the double-press 'force exit' feature of Ctrl+C. """ # Cancel active voice recording. _should_cancel_voice = False _recorder_ref = None with cli_ref._voice_lock: if cli_ref._voice_recording and cli_ref._voice_recorder: _recorder_ref = cli_ref._voice_recorder cli_ref._voice_recording = False cli_ref._voice_continuous = False _should_cancel_voice = True if _should_cancel_voice: _cprint(f"\n{_DIM}Recording cancelled.{_RST}") threading.Thread( target=_recorder_ref.cancel, daemon=True ).start() event.app.invalidate() return # Cancel sudo prompt if self._sudo_state: self._sudo_state["response_queue"].put("") self._sudo_state = None event.app.invalidate() return # Cancel secret prompt if self._secret_state: self._cancel_secret_capture() event.app.current_buffer.reset() event.app.invalidate() return # Cancel approval prompt (deny) if self._approval_state: self._approval_state["response_queue"].put("deny") self._approval_state = None event.app.invalidate() return # Cancel slash confirmation prompt if self._slash_confirm_state: self._submit_slash_confirm_response("cancel") event.app.current_buffer.reset() event.app.invalidate() return # Cancel /model picker if self._model_picker_state: self._close_model_picker() event.app.current_buffer.reset() event.app.invalidate() return # Cancel clarify prompt if self._clarify_state: self._clarify_state["response_queue"].put( "The user cancelled. Use your best judgement to proceed." ) self._clarify_state = None self._clarify_freetext = False event.app.current_buffer.reset() event.app.invalidate() return if self._agent_running and self.agent: print("\n⚡ Interrupting agent...") self.agent.interrupt() elif event.app.current_buffer.text or self._attached_images: event.app.current_buffer.reset() self._attached_images.clear() event.app.invalidate() else: self._should_exit = True event.app.exit() @kb.add('c-d') def handle_ctrl_d(event): """Ctrl+D: delete char under cursor (standard readline behaviour). Only exit when the input is empty — same as bash/zsh. Pending attached images count as input and block the EOF-exit so the user doesn't lose them silently. """ buf = event.app.current_buffer if buf.text: buf.delete() elif self._attached_images: # Empty text but pending attachments — no-op, don't exit. return else: self._should_exit = True event.app.exit() _modal_prompt_active = Condition( lambda: bool(self._secret_state or self._sudo_state or self._slash_confirm_state) ) @kb.add('escape', filter=_modal_prompt_active, eager=True) def handle_escape_modal(event): """ESC cancels active secret/sudo prompts.""" if self._secret_state: self._cancel_secret_capture() event.app.current_buffer.reset() event.app.invalidate() return if self._sudo_state: self._sudo_state["response_queue"].put("") self._sudo_state = None event.app.invalidate() return if self._slash_confirm_state: self._submit_slash_confirm_response("cancel") event.app.current_buffer.reset() event.app.invalidate() return @kb.add('c-z') def handle_ctrl_z(event): """Handle Ctrl+Z - suspend process to background (Unix only).""" if sys.platform == 'win32': _cprint(f"\n{_DIM}Suspend (Ctrl+Z) is not supported on Windows.{_RST}") event.app.invalidate() return import signal as _sig from prompt_toolkit.application import run_in_terminal from hermes_cli.skin_engine import get_active_skin agent_name = get_active_skin().get_branding("agent_name", "Hermes Agent") msg = f"\n{agent_name} has been suspended. Run `fg` to bring {agent_name} back." def _suspend(): os.write(1, msg.encode()) os.kill(0, _sig.SIGTSTP) run_in_terminal(_suspend) # Voice push-to-talk key: configurable via config.yaml (voice.record_key) # Default: Ctrl+B (avoids conflict with Ctrl+R readline reverse-search). # Config spellings (ctrl/control/alt/option/opt) are normalized to # prompt_toolkit's c-x / a-x format via ``normalize_voice_record_key_for_prompt_toolkit`` # so the same config value binds identically in the TUI and CLI # (Copilot round-9 review on #19835). ``super``/``win``/``windows`` # configs silently fall back to the default here since prompt_toolkit # has no super modifier — log a warning so users notice the # TUI/CLI split instead of a silent mismatch (round-11). _raw_key: object = "ctrl+b" try: from hermes_cli.config import load_config from hermes_cli.voice import ( normalize_voice_record_key_for_prompt_toolkit, voice_record_key_from_config, ) _raw_key = voice_record_key_from_config(load_config()) _voice_key = normalize_voice_record_key_for_prompt_toolkit(_raw_key) if ( isinstance(_raw_key, str) and _raw_key.strip().lower().split("+", 1)[0].strip() in {"super", "win", "windows"} and _voice_key == "c-b" ): logger.warning( "voice.record_key %r uses a TUI-only modifier (super/win); " "CLI fell back to Ctrl+B. Use ctrl+ or alt+ for " "cross-runtime parity.", _raw_key, ) except Exception: _voice_key = "c-b" # Cache the UI label here — same ``_raw_key`` that drives the # prompt_toolkit binding below. Every status / placeholder / # recording-hint render reads this cached value so display can # never drift from the live keybinding even if the user edits # voice.record_key mid-session (Copilot round-13 on #19835). self.set_voice_record_key_cache(_raw_key) @kb.add(_voice_key) def handle_voice_record(event): """Toggle voice recording when voice mode is active. IMPORTANT: This handler runs in prompt_toolkit's event-loop thread. Any blocking call here (locks, sd.wait, disk I/O) freezes the entire UI. All heavy work is dispatched to daemon threads. """ if not cli_ref._voice_mode: return # Always allow STOPPING a recording (even when agent is running) if cli_ref._voice_recording: # Manual stop via push-to-talk key: stop continuous mode with cli_ref._voice_lock: cli_ref._voice_continuous = False # Flag clearing is handled atomically inside _voice_stop_and_transcribe event.app.invalidate() threading.Thread( target=cli_ref._voice_stop_and_transcribe, daemon=True, ).start() else: # Guard: don't START recording during agent run or interactive prompts if cli_ref._agent_running: return if cli_ref._clarify_state or cli_ref._sudo_state or cli_ref._approval_state or cli_ref._slash_confirm_state: return # Guard: don't start while a previous stop/transcribe cycle is # still running — recorder.stop() holds AudioRecorder._lock and # start() would block the event-loop thread waiting for it. if cli_ref._voice_processing: return # Interrupt TTS if playing, so user can start talking. # stop_playback() is fast (just terminates a subprocess). if not cli_ref._voice_tts_done.is_set(): try: from tools.voice_mode import stop_playback stop_playback() cli_ref._voice_tts_done.set() except Exception: pass with cli_ref._voice_lock: cli_ref._voice_continuous = True # Dispatch to a daemon thread so play_beep(sd.wait), # AudioRecorder.start(lock acquire), and config I/O # never block the prompt_toolkit event loop. def _start_recording(): try: cli_ref._voice_start_recording() if hasattr(cli_ref, '_app') and cli_ref._app: cli_ref._app.invalidate() except Exception as e: _cprint(f"\n{_DIM}Voice recording failed: {e}{_RST}") threading.Thread(target=_start_recording, daemon=True).start() event.app.invalidate() from prompt_toolkit.keys import Keys @kb.add(Keys.BracketedPaste, eager=True) def handle_paste(event): """Handle terminal paste — detect clipboard images. When the terminal supports bracketed paste, Ctrl+V / Cmd+V triggers this with the pasted text. We only auto-attach a clipboard image for image-only/empty paste gestures so text pastes and dictation do not accidentally attach stale images. Large pastes (5+ lines) are collapsed to a file reference placeholder while preserving any existing user text in the buffer. """ # Diagnostic canary: measure how long the paste handler blocks # the prompt_toolkit event loop. If this exceeds ~500ms we log # it so recurring "CLI freezes on paste" reports (issue #16263, # macOS Tahoe 26 + iTerm2/Ghostty) arrive with data attached. _paste_handler_start = time.perf_counter() _paste_raw_size = len(event.data or "") pasted_text = event.data or "" # Normalise line endings — Windows \r\n and old Mac \r both become \n # so the 5-line collapse threshold and display are consistent. pasted_text = pasted_text.replace('\r\n', '\n').replace('\r', '\n') pasted_text = _strip_leaked_bracketed_paste_wrappers(pasted_text) pasted_text, _had_mouse_reports = _strip_leaked_terminal_responses_with_meta(pasted_text) if _had_mouse_reports: self._recover_terminal_input_modes(reason="mouse reports leaked into bracketed paste payload") if _should_auto_attach_clipboard_image_on_paste(pasted_text) and self._try_attach_clipboard_image(): event.app.invalidate() if pasted_text: # Sanitize surrogate characters (e.g. from Word/Google Docs paste) before writing from run_agent import _sanitize_surrogates pasted_text = _sanitize_surrogates(pasted_text) line_count = pasted_text.count('\n') buf = event.current_buffer threshold = self.config.get("paste_collapse_threshold", 5) char_threshold = self.config.get("paste_collapse_char_threshold", 2000) lines_hit = threshold > 0 and line_count >= threshold chars_hit = char_threshold > 0 and len(pasted_text) >= char_threshold if (lines_hit or chars_hit) and not buf.text.strip().startswith('/'): _paste_counter[0] += 1 paste_dir = _hermes_home / "pastes" paste_dir.mkdir(parents=True, exist_ok=True) paste_file = paste_dir / f"paste_{_paste_counter[0]}_{datetime.now().strftime('%H%M%S')}.txt" paste_file.write_text(pasted_text, encoding="utf-8") logger.info("Collapsed paste #%d: %d lines, %d chars -> %s", _paste_counter[0], line_count + 1, len(pasted_text), paste_file) placeholder = f"[Pasted text #{_paste_counter[0]}: {line_count + 1} lines \u2192 {paste_file}]" prefix = "" if buf.cursor_position > 0 and buf.text[buf.cursor_position - 1] != '\n': prefix = "\n" _paste_just_collapsed[0] = True buf.insert_text(prefix + placeholder) else: buf.insert_text(pasted_text) _paste_handler_elapsed_ms = (time.perf_counter() - _paste_handler_start) * 1000.0 if _paste_handler_elapsed_ms > 500.0: logger.warning( "Slow bracketed-paste handler: %.1fms to process %d bytes " "(%d lines) on %s. If the input becomes unresponsive after " "this, attach this log line to the bug report.", _paste_handler_elapsed_ms, _paste_raw_size, pasted_text.count('\n') + 1 if pasted_text else 0, sys.platform, ) @kb.add('c-v') def handle_ctrl_v(event): """Fallback image paste for terminals without bracketed paste. On Linux terminals (GNOME Terminal, Konsole, etc.), Ctrl+V sends raw byte 0x16 instead of triggering a paste. This binding catches that and checks the clipboard for images. On terminals that DO intercept Ctrl+V for paste (macOS Terminal, iTerm2, VSCode, Windows Terminal), the bracketed paste handler fires instead and this binding never triggers. """ if self._try_attach_clipboard_image(): event.app.invalidate() @kb.add('escape', 'v') def handle_alt_v(event): """Alt+V — paste image from clipboard. Alt key combos pass through all terminal emulators (sent as ESC + key), unlike Ctrl+V which terminals intercept for text paste. This is the reliable way to attach clipboard images on WSL2, VSCode, and any terminal over SSH where Ctrl+V can't reach the application for image-only clipboard. """ if self._try_attach_clipboard_image(): event.app.invalidate() else: # No image found — show a hint pass # silent when no image (avoid noise on accidental press) # Dynamic prompt: shows Hermes symbol when agent is working, # or answer prompt when clarify freetext mode is active. cli_ref = self def get_prompt(): return cli_ref._get_tui_prompt_fragments() # Create the input area with multiline (Alt+Enter), autocomplete, and paste handling from prompt_toolkit.auto_suggest import AutoSuggestFromHistory _completer = SlashCommandCompleter( skill_commands_provider=lambda: get_skill_commands(), command_filter=cli_ref._command_available, skill_bundles_provider=lambda: get_skill_bundles(), ) input_area = TextArea( height=Dimension(min=1, max=8, preferred=1), prompt=get_prompt, style='class:input-area', multiline=True, wrap_lines=True, read_only=Condition(lambda: bool(cli_ref._command_running)), history=FileHistory(str(self._history_file)), completer=_completer, complete_while_typing=True, auto_suggest=SlashCommandAutoSuggest( history_suggest=AutoSuggestFromHistory(), completer=_completer, ), ) # Keep prompt_toolkit on its simple tempfile path. Setting # buffer.tempfile = "prompt.md" triggers its complex-tempfile branch, # which tries to mkdir() the mkdtemp() directory again and raises # EEXIST. The suffix keeps markdown highlighting without that bug. input_area.buffer.tempfile_suffix = '.md' # Dynamic height: accounts for both explicit newlines AND visual # wrapping of long lines so the input area always fits its content. def _input_height(): try: from prompt_toolkit.application import get_app doc = input_area.buffer.document try: terminal_columns = get_app().output.get_size().columns except Exception: terminal_columns = shutil.get_terminal_size((80, 24)).columns return _estimate_tui_input_height( doc.lines, self._get_tui_prompt_text(), terminal_columns, ) except Exception: return 1 input_area.window.height = _input_height # Paste collapsing: detect large pastes and save to temp file _paste_counter = [0] _prev_text_len = [0] _prev_newline_count = [0] _paste_just_collapsed = [False] self._skip_paste_collapse = False def _on_text_changed(buf): """Detect large pastes and collapse them to a file reference. When bracketed paste is available, handle_paste collapses large pastes directly. This handler is a fallback for terminals without bracketed paste support. Two heuristics (either triggers collapse): 1. Many characters added at once (chars_added > 1) — works when the terminal delivers the paste in one event-loop tick. 2. Newline count jumped by 4+ in a single text-change event — catches terminals that feed characters individually but still batch newlines. Alt+Enter only adds 1 newline per event so it never triggers this. """ text = _strip_leaked_bracketed_paste_wrappers(buf.text) text, _had_mouse_reports = _strip_leaked_terminal_responses_with_meta(text) if _had_mouse_reports: self._recover_terminal_input_modes(reason="mouse reports leaked into prompt buffer") if text != buf.text: cursor = min(buf.cursor_position, len(text)) _paste_just_collapsed[0] = True buf.text = text buf.cursor_position = cursor _prev_text_len[0] = len(text) _prev_newline_count[0] = text.count('\n') return chars_added = len(text) - _prev_text_len[0] _prev_text_len[0] = len(text) if _paste_just_collapsed[0] or self._skip_paste_collapse: _paste_just_collapsed[0] = False self._skip_paste_collapse = False _prev_newline_count[0] = text.count('\n') return line_count = text.count('\n') newlines_added = line_count - _prev_newline_count[0] _prev_newline_count[0] = line_count is_paste = chars_added > 1 or newlines_added >= 4 threshold = self.config.get("paste_collapse_threshold_fallback", 5) char_threshold = self.config.get("paste_collapse_char_threshold", 2000) lines_hit = threshold > 0 and line_count >= threshold chars_hit = char_threshold > 0 and len(text) >= char_threshold if (lines_hit or chars_hit) and is_paste and not text.startswith('/'): _paste_counter[0] += 1 paste_dir = _hermes_home / "pastes" paste_dir.mkdir(parents=True, exist_ok=True) paste_file = paste_dir / f"paste_{_paste_counter[0]}_{datetime.now().strftime('%H%M%S')}.txt" paste_file.write_text(text, encoding="utf-8") logger.info("Collapsed paste #%d: %d lines, %d chars -> %s (fallback)", _paste_counter[0], line_count + 1, len(text), paste_file) _paste_just_collapsed[0] = True buf.text = f"[Pasted text #{_paste_counter[0]}: {line_count + 1} lines \u2192 {paste_file}]" buf.cursor_position = len(buf.text) input_area.buffer.on_text_changed += _on_text_changed # --- Input processors for password masking and inline placeholder --- # Mask input with '*' when the sudo password prompt is active input_area.control.input_processors.append( ConditionalProcessor( PasswordProcessor(), filter=Condition( lambda: bool(cli_ref._sudo_state) or bool(cli_ref._secret_state) ), ) ) class _PlaceholderProcessor(Processor): """Render grayed-out placeholder text inside the input when empty.""" def __init__(self, get_text): self._get_text = get_text def apply_transformation(self, ti): if not ti.document.text and ti.lineno == 0: text = self._get_text() if text: # Append after existing fragments (preserves the ❯ prompt) return Transformation(fragments=ti.fragments + [('class:placeholder', text)]) return Transformation(fragments=ti.fragments) def _get_placeholder(): if cli_ref._voice_recording: _label = cli_ref._voice_record_key_label() return f"recording... {_label} to stop, Ctrl+C to cancel" if cli_ref._voice_processing: return "transcribing..." if cli_ref._sudo_state: return "type password (hidden), Enter to submit · ESC to skip" if cli_ref._secret_state: return "type secret (hidden), Enter to submit · ESC to skip" if cli_ref._approval_state: return "" if cli_ref._slash_confirm_state: return "type 1/2/3, or use ↑/↓ then Enter" if cli_ref._clarify_freetext: return "type your answer here and press Enter" if cli_ref._clarify_state: return "" if cli_ref._command_running: frame = cli_ref._command_spinner_frame() status = cli_ref._command_status or "Processing command..." return f"{frame} {status}" if cli_ref._agent_running: return "msg=interrupt · /queue · /bg · /steer · Ctrl+C cancel" if cli_ref._voice_mode: _label = cli_ref._voice_record_key_label() return f"type or {_label} to record" return "" input_area.control.input_processors.append(_PlaceholderProcessor(_get_placeholder)) # Hint line above input: shown only for interactive prompts that need # extra instructions (sudo countdown, approval navigation, clarify). # The agent-running interrupt hint is now an inline placeholder above. def get_hint_text(): if cli_ref._sudo_state: remaining = max(0, int(cli_ref._sudo_deadline - time.monotonic())) return [ ('class:hint', ' password hidden · Enter to skip'), ('class:clarify-countdown', f' ({remaining}s)'), ] if cli_ref._secret_state: remaining = max(0, int(cli_ref._secret_deadline - time.monotonic())) return [ ('class:hint', ' secret hidden · Enter to skip'), ('class:clarify-countdown', f' ({remaining}s)'), ] if cli_ref._approval_state: remaining = max(0, int(cli_ref._approval_deadline - time.monotonic())) return [ ('class:hint', ' ↑/↓ to select, Enter to confirm'), ('class:clarify-countdown', f' ({remaining}s)'), ] if cli_ref._slash_confirm_state: remaining = max(0, int(cli_ref._slash_confirm_deadline - time.monotonic())) return [ ('class:hint', ' type 1/2/3, or ↑/↓ to select, Enter to confirm'), ('class:clarify-countdown', f' ({remaining}s)'), ] if cli_ref._clarify_state: remaining = max(0, int(cli_ref._clarify_deadline - time.monotonic())) countdown = f' ({remaining}s)' if cli_ref._clarify_deadline else '' if cli_ref._clarify_freetext: return [ ('class:hint', ' type your answer and press Enter'), ('class:clarify-countdown', countdown), ] return [ ('class:hint', ' ↑/↓ to select, Enter to confirm'), ('class:clarify-countdown', countdown), ] if cli_ref._command_running: frame = cli_ref._command_spinner_frame() return [ ('class:hint', f' {frame} command in progress · input temporarily disabled'), ] return [] def get_hint_height(): if cli_ref._sudo_state or cli_ref._secret_state or cli_ref._approval_state or cli_ref._slash_confirm_state or cli_ref._clarify_state or cli_ref._command_running: return 1 # Keep a spacer while the agent runs on roomy terminals, but reclaim # the row on narrow/mobile screens where every line matters. return cli_ref._agent_spacer_height() def get_spinner_text(): spinner_line = cli_ref._render_spinner_text() if not spinner_line: return [] return [('class:hint', spinner_line)] def get_spinner_height(): return cli_ref._spinner_widget_height() spinner_widget = Window( content=FormattedTextControl(get_spinner_text), height=get_spinner_height, wrap_lines=True, ) spacer = Window( content=FormattedTextControl(get_hint_text), height=get_hint_height, ) # --- Clarify tool: dynamic display widget for questions + choices --- def _panel_box_width(title: str, content_lines: list[str], min_width: int = 46, max_width: int = 76) -> int: """Choose a stable panel width wide enough for the title and content.""" term_cols = shutil.get_terminal_size((100, 20)).columns longest = max([len(title)] + [len(line) for line in content_lines] + [min_width - 4]) inner = min(max(longest + 4, min_width - 2), max_width - 2, max(24, term_cols - 6)) return inner + 2 # account for the single leading/trailing spaces inside borders def _wrap_panel_text(text: str, width: int, subsequent_indent: str = "") -> list[str]: wrapped = textwrap.wrap( text, width=max(8, width), break_long_words=False, break_on_hyphens=False, subsequent_indent=subsequent_indent, ) return wrapped or [""] def _append_panel_line(lines, border_style: str, content_style: str, text: str, box_width: int) -> None: inner_width = max(0, box_width - 2) lines.append((border_style, "│ ")) lines.append((content_style, text.ljust(inner_width))) lines.append((border_style, " │\n")) def _append_blank_panel_line(lines, border_style: str, box_width: int) -> None: lines.append((border_style, "│" + (" " * box_width) + "│\n")) def _get_clarify_display(): """Build styled text for the clarify question/choices panel. Layout priority: choices + Other option must always render even if the question is very long. The question is budgeted to leave enough rows for the choices and trailing chrome; anything over the budget is truncated with a marker. """ state = cli_ref._clarify_state if not state: return [] question = state["question"] choices = state.get("choices") or [] selected = state.get("selected", 0) preview_lines = _wrap_panel_text(question, 60) for i, choice in enumerate(choices): # Show number prefix for quick selection (1-9 for items 1-9, 0 for 10th item) if i < 9: num_prefix = str(i + 1) elif i == 9: num_prefix = '0' else: num_prefix = ' ' if i == selected and not cli_ref._clarify_freetext: prefix = f"❯ {num_prefix}. " else: prefix = f" {num_prefix}. " preview_lines.extend(_wrap_panel_text(f"{prefix}{choice}", 60, subsequent_indent=" ")) # "Other" option in preview other_num = len(choices) + 1 if other_num < 10: other_num_prefix = str(other_num) elif other_num == 10: other_num_prefix = '0' else: other_num_prefix = ' ' other_label = ( f"❯ {other_num_prefix}. Other (type below)" if cli_ref._clarify_freetext else f"❯ {other_num_prefix}. Other (type your answer)" if selected == len(choices) else f" {other_num_prefix}. Other (type your answer)" ) preview_lines.extend(_wrap_panel_text(other_label, 60, subsequent_indent=" ")) box_width = _panel_box_width("Hermes needs your input", preview_lines) inner_text_width = max(8, box_width - 2) # Pre-wrap choices + Other option — these are mandatory. choice_wrapped: list[tuple[int, str]] = [] if choices: for i, choice in enumerate(choices): # Show number prefix for quick selection (1-9 for items 1-9, 0 for 10th item) if i < 9: num_prefix = str(i + 1) elif i == 9: num_prefix = '0' else: num_prefix = ' ' if i == selected and not cli_ref._clarify_freetext: prefix = f'❯ {num_prefix}. ' else: prefix = f' {num_prefix}. ' for wrapped in _wrap_panel_text(f"{prefix}{choice}", inner_text_width, subsequent_indent=" "): choice_wrapped.append((i, wrapped)) # Trailing Other row(s) other_idx = len(choices) other_num = other_idx + 1 if other_num < 10: other_num_prefix = str(other_num) elif other_num == 10: other_num_prefix = '0' else: other_num_prefix = ' ' if selected == other_idx and not cli_ref._clarify_freetext: other_label_mand = f'❯ {other_num_prefix}. Other (type your answer)' elif cli_ref._clarify_freetext: other_label_mand = f'❯ {other_num_prefix}. Other (type below)' else: other_label_mand = f' {other_num_prefix}. Other (type your answer)' other_wrapped = _wrap_panel_text(other_label_mand, inner_text_width, subsequent_indent=" ") elif cli_ref._clarify_freetext: # Freetext-only mode: the guidance line takes the place of choices. other_wrapped = _wrap_panel_text( "Type your answer in the prompt below, then press Enter.", inner_text_width, ) else: other_wrapped = [] # Budget the question so mandatory rows always render. # Chrome layouts: # full : top border + blank_after_title + blank_after_question # + blank_before_bottom + bottom border = 5 rows # tight: top border + bottom border = 2 rows (drop all blanks) # # reserved_below matches the approval-panel budget (~6 rows for # spinner/tool-progress + status + input + separators + prompt). term_rows = shutil.get_terminal_size((100, 24)).lines chrome_full = 5 chrome_tight = 2 reserved_below = 6 available = max(0, term_rows - reserved_below) # The compact decision must reserve room for at least one question # row on top of the choices, otherwise full chrome (3 blank # separators) gets kept when there is no room for it and the panel # overflows the viewport — HSplit then clips the panel's tail, # silently dropping the choices (the reported bug). mandatory_full = chrome_full + 1 + len(choice_wrapped) + len(other_wrapped) use_compact_chrome = mandatory_full > available chrome_rows = chrome_tight if use_compact_chrome else chrome_full max_question_rows = max(1, available - chrome_rows - len(choice_wrapped) - len(other_wrapped)) max_question_rows = min(max_question_rows, 12) # soft cap on huge terminals # When the choices alone (plus compact chrome) already exceed the # viewport, drop the question entirely — the choices are the only # thing the user must see to make a selection. Without this the # question would still claim its 1-row floor above and push the # tail of the choices off-screen (HSplit clips the overflow). choices_overflow = chrome_rows + len(choice_wrapped) + len(other_wrapped) >= available if choices_overflow: max_question_rows = 0 question_wrapped = _wrap_panel_text(question, inner_text_width) if max_question_rows <= 0: question_wrapped = [] elif len(question_wrapped) > max_question_rows: # The truncation marker is itself a row, so it must count # against the budget. With a 1-row budget there is no room for # both a question line and the marker — show the marker alone # so the rendered question never exceeds max_question_rows. keep = max(0, max_question_rows - 1) question_wrapped = question_wrapped[:keep] + ["… (question truncated)"] lines = [] # Box top border lines.append(('class:clarify-border', '╭─ ')) lines.append(('class:clarify-title', 'Hermes needs your input')) lines.append(('class:clarify-border', ' ' + ('─' * max(0, box_width - len("Hermes needs your input") - 3)) + '╮\n')) if not use_compact_chrome: _append_blank_panel_line(lines, 'class:clarify-border', box_width) # Question text (bounded) for wrapped in question_wrapped: _append_panel_line(lines, 'class:clarify-border', 'class:clarify-question', wrapped, box_width) if not use_compact_chrome: _append_blank_panel_line(lines, 'class:clarify-border', box_width) if cli_ref._clarify_freetext and not choices: for wrapped in other_wrapped: _append_panel_line(lines, 'class:clarify-border', 'class:clarify-choice', wrapped, box_width) if not use_compact_chrome: _append_blank_panel_line(lines, 'class:clarify-border', box_width) if choices: # Multiple-choice mode: show selectable options for i, wrapped in choice_wrapped: style = 'class:clarify-selected' if i == selected and not cli_ref._clarify_freetext else 'class:clarify-choice' _append_panel_line(lines, 'class:clarify-border', style, wrapped, box_width) # "Other" option (trailing row(s), only shown when choices exist) other_idx = len(choices) # Calculate number prefix for "Other" option other_num = other_idx + 1 if other_num < 10: other_num_prefix = str(other_num) elif other_num == 10: other_num_prefix = '0' else: other_num_prefix = ' ' if selected == other_idx and not cli_ref._clarify_freetext: other_style = 'class:clarify-selected' elif cli_ref._clarify_freetext: other_style = 'class:clarify-active-other' else: other_style = 'class:clarify-choice' for wrapped in other_wrapped: _append_panel_line(lines, 'class:clarify-border', other_style, wrapped, box_width) if not use_compact_chrome: _append_blank_panel_line(lines, 'class:clarify-border', box_width) lines.append(('class:clarify-border', '╰' + ('─' * box_width) + '╯\n')) return lines clarify_widget = ConditionalContainer( Window( FormattedTextControl(_get_clarify_display), wrap_lines=True, ), filter=Condition(lambda: cli_ref._clarify_state is not None), ) # --- Sudo password: display widget --- def _get_sudo_display(): state = cli_ref._sudo_state if not state: return [] title = '🔐 Sudo Password Required' body = 'Enter password below (hidden), or press Enter to skip' box_width = _panel_box_width(title, [body]) lines = [] lines.append(('class:sudo-border', '╭─ ')) lines.append(('class:sudo-title', title)) lines.append(('class:sudo-border', ' ' + ('─' * max(0, box_width - len(title) - 3)) + '╮\n')) _append_blank_panel_line(lines, 'class:sudo-border', box_width) _append_panel_line(lines, 'class:sudo-border', 'class:sudo-text', body, box_width) _append_blank_panel_line(lines, 'class:sudo-border', box_width) lines.append(('class:sudo-border', '╰' + ('─' * box_width) + '╯\n')) return lines sudo_widget = ConditionalContainer( Window( FormattedTextControl(_get_sudo_display), wrap_lines=True, ), filter=Condition(lambda: cli_ref._sudo_state is not None), ) def _get_secret_display(): state = cli_ref._secret_state if not state: return [] title = '🔑 Skill Setup Required' prompt = state.get("prompt") or f"Enter value for {state.get('var_name', 'secret')}" metadata = state.get("metadata") or {} help_text = metadata.get("help") body = 'Enter secret below (hidden), ESC or Ctrl+C to skip' content_lines = [prompt, body] if help_text: content_lines.insert(1, str(help_text)) box_width = _panel_box_width(title, content_lines) lines = [] lines.append(('class:sudo-border', '╭─ ')) lines.append(('class:sudo-title', title)) lines.append(('class:sudo-border', ' ' + ('─' * max(0, box_width - len(title) - 3)) + '╮\n')) _append_blank_panel_line(lines, 'class:sudo-border', box_width) _append_panel_line(lines, 'class:sudo-border', 'class:sudo-text', prompt, box_width) if help_text: _append_panel_line(lines, 'class:sudo-border', 'class:sudo-text', str(help_text), box_width) _append_blank_panel_line(lines, 'class:sudo-border', box_width) _append_panel_line(lines, 'class:sudo-border', 'class:sudo-text', body, box_width) _append_blank_panel_line(lines, 'class:sudo-border', box_width) lines.append(('class:sudo-border', '╰' + ('─' * box_width) + '╯\n')) return lines secret_widget = ConditionalContainer( Window( FormattedTextControl(_get_secret_display), wrap_lines=True, ), filter=Condition(lambda: cli_ref._secret_state is not None), ) # --- Dangerous command approval: display widget --- def _get_approval_display(): return cli_ref._get_approval_display_fragments() approval_widget = ConditionalContainer( Window( FormattedTextControl(_get_approval_display), wrap_lines=True, ), filter=Condition(lambda: cli_ref._approval_state is not None), ) def _get_slash_confirm_display(): return cli_ref._get_slash_confirm_display_fragments() slash_confirm_widget = ConditionalContainer( Window( FormattedTextControl(_get_slash_confirm_display), wrap_lines=True, ), filter=Condition(lambda: cli_ref._slash_confirm_state is not None), ) # --- /model picker: display widget --- def _get_model_picker_display(): state = cli_ref._model_picker_state if not state: return [] stage = state.get("stage", "provider") if stage == "provider": title = "⚙ Model Picker — Select Provider" choices = [] _providers = state.get("providers") for p in _providers if isinstance(_providers, list) else []: count = p.get("total_models", len(p.get("models", []))) label = f"{p['name']} ({count} model{'s' if count != 1 else ''})" if p.get("is_current"): label += " ← current" choices.append(label) choices.append("Cancel") hint = f"Current: {state.get('current_model', 'unknown')} on {state.get('current_provider', 'unknown')}" else: provider_data = state.get("provider_data") or {} model_list = state.get("model_list") or [] title = f"⚙ Model Picker — {provider_data.get('name', provider_data.get('slug', 'Provider'))}" choices = list(model_list) + ["← Back", "Cancel"] if model_list: hint = f"Select a model ({len(model_list)} available)" else: hint = "No models listed for this provider. Use Back or Cancel." box_width = _panel_box_width(title, [hint] + choices, min_width=46, max_width=84) inner_text_width = max(8, box_width - 6) selected = state.get("selected", 0) # Scrolling viewport: the panel renders into a Window with no max # height, so without limiting visible items the bottom border and # any items past the available terminal rows get clipped on long # provider catalogs (e.g. Ollama Cloud's 36+ models). try: from prompt_toolkit.application import get_app term_rows = get_app().output.get_size().rows except Exception: term_rows = shutil.get_terminal_size((100, 24)).lines scroll_offset, visible = HermesCLI._compute_model_picker_viewport( selected, state.get("_scroll_offset", 0), len(choices), term_rows, ) state["_scroll_offset"] = scroll_offset lines = [] lines.append(('class:clarify-border', '╭─ ')) lines.append(('class:clarify-title', title)) lines.append(('class:clarify-border', ' ' + ('─' * max(0, box_width - len(title) - 3)) + '╮\n')) _append_blank_panel_line(lines, 'class:clarify-border', box_width) _append_panel_line(lines, 'class:clarify-border', 'class:clarify-hint', hint, box_width) _append_blank_panel_line(lines, 'class:clarify-border', box_width) for idx in range(scroll_offset, scroll_offset + visible): choice = choices[idx] style = 'class:clarify-selected' if idx == selected else 'class:clarify-choice' prefix = '❯ ' if idx == selected else ' ' for wrapped in _wrap_panel_text(prefix + choice, inner_text_width, subsequent_indent=' '): _append_panel_line(lines, 'class:clarify-border', style, wrapped, box_width) _append_blank_panel_line(lines, 'class:clarify-border', box_width) lines.append(('class:clarify-border', '╰' + ('─' * box_width) + '╯\n')) return lines model_picker_widget = ConditionalContainer( Window( FormattedTextControl(_get_model_picker_display), wrap_lines=True, ), filter=Condition(lambda: cli_ref._model_picker_state is not None), ) # Horizontal rules above and below the input. # On narrow/mobile terminals we keep the top separator for structure but # hide the bottom one to recover a full row for conversation content. input_rule_top = Window( char='─', height=lambda: cli_ref._tui_input_rule_height("top"), style='class:input-rule', ) input_rule_bot = Window( char='─', height=lambda: cli_ref._tui_input_rule_height("bottom"), style='class:input-rule', ) # Image attachment indicator — shows badges like [📎 Image #1] above input cli_ref = self def _get_image_bar(): if not cli_ref._attached_images: return [] badges = _format_image_attachment_badges( cli_ref._attached_images, cli_ref._image_counter, ) return [("class:image-badge", f" {badges} ")] image_bar = Window( content=FormattedTextControl(_get_image_bar), height=Condition(lambda: bool(cli_ref._attached_images)), ) # Persistent voice mode status bar (visible only when voice mode is on) def _get_voice_status(): return cli_ref._get_voice_status_fragments() voice_status_bar = ConditionalContainer( Window( FormattedTextControl(_get_voice_status), height=1, ), filter=Condition(lambda: cli_ref._voice_mode), ) status_bar = ConditionalContainer( Window( content=FormattedTextControl(lambda: cli_ref._get_status_bar_fragments()), height=1, # Prevent fragments that overflow the terminal width from # wrapping onto a second line, which causes the status bar to # appear duplicated (one full + one partial row) during long # sessions, especially on SSH where shutil.get_terminal_size # may return stale values. _get_status_bar_fragments now reads # width from prompt_toolkit's own output object, so fragments # will always fit; wrap_lines=False is the belt-and-suspenders # guard against any future width mismatch. wrap_lines=False, ), filter=Condition( lambda: cli_ref._status_bar_visible and not getattr(cli_ref, "_status_bar_suppressed_after_resize", False) ), ) # Allow wrapper CLIs to register extra keybindings. self._register_extra_tui_keybindings(kb, input_area=input_area) # Layout: interactive prompt widgets + ruled input at bottom. # The sudo, approval, and clarify widgets appear above the input when # the corresponding interactive prompt is active. completions_menu = CompletionsMenu(max_height=12, scroll_offset=1) layout = Layout( HSplit( self._build_tui_layout_children( sudo_widget=sudo_widget, secret_widget=secret_widget, approval_widget=approval_widget, slash_confirm_widget=slash_confirm_widget, clarify_widget=clarify_widget, model_picker_widget=model_picker_widget, spinner_widget=spinner_widget, spacer=spacer, status_bar=status_bar, input_rule_top=input_rule_top, image_bar=image_bar, input_area=input_area, input_rule_bot=input_rule_bot, voice_status_bar=voice_status_bar, completions_menu=completions_menu, ) ) ) # Style for the application self._tui_style_base = { # Input area / prompt: empty style strings inherit the # terminal's default foreground/background, so the typed # text is readable in both light and dark Terminal.app # color schemes. (Hardcoding a near-white #FFF8DC made # input invisible on light backgrounds.) 'input-area': '', 'placeholder': '#888888 italic', 'prompt': '', 'prompt-working': '#888888 italic', 'hint': '#888888 italic', 'status-bar': 'bg:#1a1a2e #C0C0C0', 'status-bar-strong': 'bg:#1a1a2e #FFD700 bold', 'status-bar-dim': 'bg:#1a1a2e #8B8682', 'status-bar-good': 'bg:#1a1a2e #8FBC8F bold', 'status-bar-warn': 'bg:#1a1a2e #FFD700 bold', 'status-bar-bad': 'bg:#1a1a2e #FF8C00 bold', 'status-bar-critical': 'bg:#1a1a2e #FF6B6B bold', 'status-bar-yolo': 'bg:#1a1a2e #FF4444 bold', # Bronze horizontal rules around the input area 'input-rule': '#CD7F32', # Clipboard image attachment badges 'image-badge': '#87CEEB bold', 'completion-menu': 'bg:#1a1a2e #FFF8DC', 'completion-menu.completion': 'bg:#1a1a2e #FFF8DC', 'completion-menu.completion.current': 'bg:#333355 #FFD700', 'completion-menu.meta.completion': 'bg:#1a1a2e #888888', 'completion-menu.meta.completion.current': 'bg:#333355 #FFBF00', # Clarify question panel 'clarify-border': '#CD7F32', 'clarify-title': '#FFD700 bold', 'clarify-question': '#FFF8DC bold', 'clarify-choice': '#AAAAAA', 'clarify-selected': '#FFD700 bold', 'clarify-active-other': '#FFD700 italic', 'clarify-countdown': '#CD7F32', # Sudo password panel 'sudo-prompt': '#FF6B6B bold', 'sudo-border': '#CD7F32', 'sudo-title': '#FF6B6B bold', 'sudo-text': '#FFF8DC', # Dangerous command approval panel 'approval-border': '#CD7F32', 'approval-title': '#FF8C00 bold', 'approval-desc': '#FFF8DC bold', 'approval-cmd': '#AAAAAA italic', 'approval-choice': '#AAAAAA', 'approval-selected': '#FFD700 bold', # Voice mode 'voice-prompt': '#87CEEB', 'voice-recording': '#FF4444 bold', 'voice-processing': '#FFA500 italic', 'voice-status': 'bg:#1a1a2e #87CEEB', 'voice-status-recording': 'bg:#1a1a2e #FF4444 bold', } style = PTStyle.from_dict(self._build_tui_style_dict()) # Create the application app = Application( layout=layout, key_bindings=kb, style=style, full_screen=False, mouse_support=False, # The status bar contains wall-clock read-outs (live prompt elapsed # and idle-since-last-turn). Once a turn finishes there may be no # further events to invalidate the app, so prompt_toolkit would keep # rendering the first post-turn value (usually ``✓ 0s``) forever. # A low-rate refresh keeps the clock honest without reintroducing a # custom repaint thread or touching conversation state. refresh_interval=1.0, # Erase the live bottom chrome (status bar, input box, separator # rules) on exit instead of freezing a final copy into scrollback. # Without this, prompt_toolkit's render_as_done teardown repaints # the chrome one last time and leaves it stranded above the exit # summary — so a dead status bar + empty prompt sit between the # conversation transcript and the "Resume this session" block, and # stack with the next session's UI on resume (#38252). The actual # conversation transcript is printed through patch_stdout into # normal scrollback and is unaffected; only the managed chrome is # erased. Applies to every exit path (/exit, /quit, EOF, Ctrl+C). erase_when_done=True, **({'cursor': _STEADY_CURSOR} if _STEADY_CURSOR is not None else {}), ) _disable_prompt_toolkit_cpr_warning(app) self._app = app # Store reference for clarify_callback # ── Fix ghost status-bar lines on terminal resize ────────────── # Resize handling: monkey-patch prompt_toolkit's _output_screen_diff # to suppress the deliberate "reserve vertical space" scroll-up. # # Background: prompt_toolkit's renderer (renderer.py L232-242) # explicitly moves the cursor to the bottom of the canvas after # painting "to make sure the terminal scrolls up, even when the # lower lines of the canvas just contain whitespace". In # non-fullscreen mode this scrolls chrome content (status bar, # input rules) into terminal scrollback on every render. When # the terminal column-shrinks, the emulator reflows the previously # rendered full-width rows into multiple narrower rows that get # pushed up — leaving ghost duplicates AND polluting scrollback. # Same issue as pt #29 (open since 2014), #1675, #1933. # # Surgical fix: wrap _output_screen_diff so that when its internal # `if current_height > previous_screen.height` branch fires (the # one that does the bottom-cursor-move), we make it fall through # by inflating previous_screen.height first. try: import prompt_toolkit.renderer as _pt_renderer from prompt_toolkit.renderer import _output_screen_diff as _orig_osd if not getattr(_pt_renderer, "_hermes_osd_patched", False): def _patched_output_screen_diff( app, output, screen, current_pos, color_depth, previous_screen, last_style, is_done, full_screen, attrs_for_style_string, style_string_has_style, size, previous_width, ): """Wraps pt's _output_screen_diff to suppress the reserve-vertical-space scroll (renderer.py L232-242). Strategy: ONLY when previous_screen is non-None and its current height is genuinely smaller than the new screen's height, inflate it to match. This prevents the bottom-cursor-move at L242 without changing any other code path's behavior. Critical: do NOT replace a None previous_screen with a fresh Screen() — that would skip the proper reset_attributes()+erase_down() at L178-185 which fires when previous_screen is None (first-paint / width-change). Without that reset, ANSI styles leak between renders. """ try: if previous_screen is not None and hasattr(previous_screen, "height"): if previous_screen.height < screen.height: previous_screen.height = screen.height except Exception: pass return _orig_osd( app, output, screen, current_pos, color_depth, previous_screen, last_style, is_done, full_screen, attrs_for_style_string, style_string_has_style, size, previous_width, ) _pt_renderer._output_screen_diff = _patched_output_screen_diff _pt_renderer._hermes_osd_patched = True except Exception: pass # Apply bracketed-paste timeout recovery so torn ESC[201~ end marks # don't permanently freeze the input (issue #16263). Idempotent. _apply_bracketed_paste_timeout_patch() _original_on_resize = app._on_resize def _resize_clear_ghosts(): self._schedule_resize_recovery(app, _original_on_resize) app._on_resize = _resize_clear_ghosts def spinner_loop(): while not self._should_exit: if not self._app: time.sleep(0.1) continue if self._command_running: self._invalidate(min_interval=0.1) time.sleep(0.1) else: # Do not repaint the idle prompt every second. In non-full-screen # prompt_toolkit mode, background redraws can fight tmux/Ghostty/cmux # viewport restoration after focus changes and visually move the # command input area. Keep idle stable; input/agent events still # invalidate explicitly when the UI actually changes. time.sleep(0.2) spinner_thread = threading.Thread(target=spinner_loop, daemon=True) spinner_thread.start() # Background thread to process inputs and run agent def process_loop(): while not self._should_exit: try: # Check for pending input with timeout try: user_input = self._pending_input.get(timeout=0.1) except queue.Empty: # Periodic config watcher — auto-reload MCP on mcp_servers change if not self._agent_running: self._check_config_mcp_changes() # Check for background process notifications (completions # and watch pattern matches) while agent is idle. try: from tools.process_registry import process_registry for _evt, _synth in process_registry.drain_notifications(): self._pending_input.put(_synth) except Exception: pass continue if not user_input: continue # The user has typed and submitted something, so any # post-resize transient suppression should end here. self._status_bar_suppressed_after_resize = False # Unpack image payload: (text, [Path, ...]) or plain str submit_images = [] if isinstance(user_input, tuple): user_input, submit_images = user_input if isinstance(user_input, str): user_input = _strip_leaked_bracketed_paste_wrappers(user_input) user_input, _had_mouse_reports = _strip_leaked_terminal_responses_with_meta(user_input) if _had_mouse_reports: self._recover_terminal_input_modes(reason="mouse reports leaked into submitted input") # Check for commands — but detect dragged/pasted file paths first. # See _detect_file_drop() for details. _file_drop = _detect_file_drop(user_input) if isinstance(user_input, str) else None if _file_drop: _drop_path = _file_drop["path"] _remainder = _file_drop["remainder"] if _file_drop["is_image"]: submit_images.append(_drop_path) user_input = _remainder or f"[User attached image: {_drop_path.name}]" _cprint(f" 📎 Auto-attached image: {_drop_path.name}") else: _cprint(f" 📄 Detected file: {_drop_path.name}") user_input = ( f"[User attached file: {_drop_path}]" + (f"\n{_remainder}" if _remainder else "") ) # A bare number right after a bare `/resume` prompt selects # that session (see #34584). Checked before chat routing so # the digit isn't sent to the agent as a message. if ( not _file_drop and self._pending_resume_sessions and isinstance(user_input, str) and self._consume_pending_resume_selection(user_input) ): continue if not _file_drop and isinstance(user_input, str) and _looks_like_slash_command(user_input): _cprint(f"\n⚙️ {user_input}") try: if not self.process_command(user_input): self._should_exit = True # Schedule app exit if app.is_running: app.exit() except KeyboardInterrupt: # Ctrl+C during a slow slash command (e.g. /skills browse, # /sessions list with a large DB) should interrupt the # command and return to the prompt, NOT exit the entire # session. Without this guard a KeyboardInterrupt unwinds # to the outer prompt_toolkit loop and the session dies. _cprint("\n[dim]Command interrupted.[/dim]") continue # A slash handler may set a one-shot pending seed (e.g. # /blueprint ) to be run as the next agent turn. # If present, fall through to the chat path with the seed # as the user message instead of looping back to idle. _seed = getattr(self, "_pending_agent_seed", None) if _seed: self._pending_agent_seed = None user_input = _seed else: continue # Expand paste references back to full content _paste_ref_re = re.compile(r'\[Pasted text #\d+: \d+ lines \u2192 (.+?)\]') paste_refs = list(_paste_ref_re.finditer(user_input)) if isinstance(user_input, str) else [] if paste_refs: user_input = self._expand_paste_references(user_input) print() self._print_user_message_preview(user_input) # Show image attachment count if submit_images: n = len(submit_images) _cprint(f" {_DIM}📎 {n} image{'s' if n > 1 else ''} attached{_RST}") # Regular chat - run agent self._agent_running = True app.invalidate() # Refresh status line try: self.chat(user_input, images=submit_images or None) finally: self._agent_running = False self._spinner_text = "" self._tool_start_time = 0.0 self._pending_tool_info.clear() self._last_scrollback_tool = "" app.invalidate() # Refresh status line # Goal continuation: if a standing goal is active, ask # the judge whether the turn satisfied it. If not, and # there's no real user message already queued, push the # continuation prompt back into _pending_input so the # next loop iteration picks it up naturally (and any # user input that arrives in between still preempts). try: self._maybe_continue_goal_after_turn() except Exception as _goal_exc: logging.debug("goal continuation hook failed: %s", _goal_exc) # Continuous voice: auto-restart recording after agent responds. # Dispatch to a daemon thread so play_beep (sd.wait) and # AudioRecorder.start (lock acquire) never block process_loop — # otherwise queued user input would stall silently. if self._voice_mode and self._voice_continuous and not self._voice_recording: def _restart_recording(): try: if self._voice_tts: self._voice_tts_done.wait(timeout=60) time.sleep(0.3) self._voice_start_recording() app.invalidate() except Exception as e: _cprint(f"{_DIM}Voice auto-restart failed: {e}{_RST}") threading.Thread(target=_restart_recording, daemon=True).start() # Drain process notifications (completions + watch matches) # that arrived while the agent was running. try: from tools.process_registry import process_registry for _evt, _synth in process_registry.drain_notifications(): self._pending_input.put(_synth) except Exception: pass # Non-fatal — don't break the main loop except Exception as e: logger.warning("process_loop unhandled error (msg may be lost): %s", e) # Start processing thread process_thread = threading.Thread(target=process_loop, daemon=True) process_thread.start() # Register atexit cleanup so resources are freed even on unexpected exit atexit.register(_run_cleanup) # Register signal handlers for graceful shutdown on SSH disconnect / SIGTERM def _signal_handler(signum, frame): """Handle SIGHUP/SIGTERM by triggering graceful cleanup. Calls ``self.agent.interrupt()`` first so the agent daemon thread's poll loop sees the per-thread interrupt and kills the tool's subprocess group via ``_kill_process`` (os.killpg). Without this, the main thread dies from KeyboardInterrupt and the daemon thread is killed with it — before it can run one more poll iteration to clean up the subprocess, which was spawned with ``os.setsid`` and therefore survives as an orphan with PPID=1. Grace window (``HERMES_SIGTERM_GRACE``, default 1.5 s) gives the daemon time to: detect the interrupt (next 200 ms poll) → call _kill_process (SIGTERM + 1 s wait + SIGKILL if needed) → return from _wait_for_process. ``time.sleep`` releases the GIL so the daemon actually runs during the window. Guarded ``logger.debug``: CPython's ``logging`` module is not reentrant-safe. ``Logger.isEnabledFor`` caches level results in ``Logger._cache``; under shutdown races the cache can be cleared (``_clear_cache``) or mid-mutation when the signal fires, raising ``KeyError: `` (e.g. ``KeyError: 10`` for DEBUG) inside the handler. That KeyError then escapes before ``raise KeyboardInterrupt()`` can fire, which bypasses prompt_toolkit's normal interrupt unwind and surfaces as the EIO cascade from issue #13710. Wrap the log in a bare ``try/except`` so the handler can never raise through it. """ try: logger.debug("Received signal %s, triggering graceful shutdown", signum) except Exception: pass # never let logging raise from a signal handler (#13710 regression) try: if getattr(self, "agent", None) and getattr(self, "_agent_running", False): self.agent.interrupt(f"received signal {signum}") try: _grace = float(os.getenv("HERMES_SIGTERM_GRACE", "1.5")) except (TypeError, ValueError): _grace = 1.5 if _grace > 0: time.sleep(_grace) except Exception: pass # never block signal handling # Prefer a clean prompt_toolkit exit over `raise KeyboardInterrupt()`. # Raising KBI from a signal handler unwinds into whatever Python # frame the interpreter happens to be running — typically an # `await asyncio.sleep()` inside prompt_toolkit's # `_poll_output_size` coroutine. The KBI becomes a Task # exception, prompt_toolkit's `_handle_exception` prints # "Unhandled exception in event loop" + the full traceback, and # parks the terminal on "Press ENTER to continue..." (#13710 # variant — same root cause, different surface). # # `app.exit()` scheduled via `call_soon_threadsafe` lets the # event loop unwind normally; `app.run()` returns and our # existing `except (EOFError, KeyboardInterrupt, BrokenPipeError)` # block at the bottom of the input loop handles the rest. try: from prompt_toolkit.application.current import get_app_or_none _app = get_app_or_none() if _app is not None: _loop = getattr(_app, "loop", None) if _loop is not None: _loop.call_soon_threadsafe(_app.exit) return # clean unwind — no traceback, no ENTER pause except Exception: pass raise KeyboardInterrupt() # fallback for non-prompt_toolkit contexts try: import signal as _signal _signal.signal(_signal.SIGTERM, _signal_handler) if hasattr(_signal, 'SIGHUP'): _signal.signal(_signal.SIGHUP, _signal_handler) # Windows: install a SIGINT handler that absorbs the signal # instead of letting Python's default handler raise # KeyboardInterrupt in MainThread. Windows Terminal / Win32 # delivers spurious CTRL_C_EVENT to the hermes process when # child processes are spawned from background threads (agent # subprocess Popen path). The default Python SIGINT handler # would then unwind prompt_toolkit's app.run(), trigger # _run_cleanup mid-turn, and close browser sessions mid-open # — causing "Daemon process exited during startup" errors. # # The handler is a silent no-op. Real user Ctrl+C still works # because prompt_toolkit binds c-c at the TUI layer and never # reaches this OS-signal path. This matches how Claude Code # handles the same Windows quirk (cancellation is driven by # the TUI key handler, not by OS signals). # # POSIX: leave the default SIGINT handler alone. prompt_toolkit # installs its own handler there and it works as expected. if sys.platform == "win32": def _sigint_absorb(signum, frame): # Absorb silently. Do NOT call agent.interrupt() here: # Windows fires spurious CTRL_C_EVENT whenever a # background thread spawns a .cmd subprocess, and # interrupt() would inject a fake user message each # time. Real user Ctrl+C routes through prompt_toolkit's # own c-c key binding at the TUI layer (same pattern as # Claude Code's Windows handling). return _signal.signal(_signal.SIGINT, _sigint_absorb) except Exception: pass # Signal handlers may fail in restricted environments # Install a custom asyncio exception handler that suppresses the # "Event loop is closed" RuntimeError from httpx transport cleanup # and the "0 is not registered" KeyError from broken stdin (#6393). # The RuntimeError fix is defense-in-depth — the primary fix is # neuter_async_httpx_del which disables __del__ entirely. The # KeyError fix handles macOS + uv-managed Python environments where # fd 0 is not reliably available to the asyncio selector. def _suppress_closed_loop_errors(loop, context): exc = context.get("exception") if isinstance(exc, RuntimeError) and "Event loop is closed" in str(exc): return # silently suppress if isinstance(exc, KeyError) and "is not registered" in str(exc): return # suppress selector registration failures (#6393) if isinstance(exc, OSError) and getattr(exc, "errno", None) == errno.EIO: return # suppress I/O errors from broken stdout on interrupt (#13710) # Fall back to default handler for everything else loop.default_exception_handler(context) # Validate stdin before launching prompt_toolkit — on macOS with # uv-managed Python, fd 0 can be invalid or unregisterable with the # asyncio selector, causing "KeyError: '0 is not registered'" (#6393). try: os.fstat(0) except OSError: print( "Error: stdin (fd 0) is not available.\n" "This can happen with certain Python installations (e.g. uv-managed cPython on macOS).\n" "Try reinstalling Python via pyenv or Homebrew, then re-run: hermes setup" ) _run_cleanup() self._print_exit_summary() return # On macOS with uv-managed Python, kqueue's selector cannot register # fd 0, raising OSError(EINVAL) from kqueue.control() when prompt_toolkit # calls loop.add_reader (#6393). Probe kqueue and, if it can't watch # stdin, switch to a SelectSelector-backed event loop policy. if sys.platform == "darwin": try: import selectors as _selectors if hasattr(_selectors, "KqueueSelector"): _kq = _selectors.KqueueSelector() try: _kq.register(0, _selectors.EVENT_READ) _kq.unregister(0) finally: _kq.close() except (OSError, ValueError, KeyError): import asyncio as _aio_probe import selectors as _selectors class _SelectEventLoopPolicy(_aio_probe.DefaultEventLoopPolicy): def new_event_loop(self): return _aio_probe.SelectorEventLoop(_selectors.SelectSelector()) _aio_probe.set_event_loop_policy(_SelectEventLoopPolicy()) # Run the application with patch_stdout for proper output handling try: with patch_stdout(): # Set the custom handler on prompt_toolkit's event loop try: import asyncio as _aio # Use get_running_loop() to avoid DeprecationWarning on # Python 3.10+ when called outside an async context. _loop = _aio.get_running_loop() _loop.set_exception_handler(_suppress_closed_loop_errors) except RuntimeError: pass # No running loop -- nothing to patch except Exception: pass # The app enables focus reporting + mouse tracking; record that # so _run_cleanup resets them on exit (#36823). _mark_tui_input_modes_active() app.run() except (EOFError, KeyboardInterrupt, BrokenPipeError): pass except (KeyError, OSError) as _stdin_err: # Catch selector registration failures from broken stdin (#6393) # and I/O errors from broken stdout during interrupt (#13710). _errno = getattr(_stdin_err, "errno", None) if isinstance(_stdin_err, OSError) else None _msg = str(_stdin_err) if _errno == errno.EIO: pass # suppress broken-stdout I/O errors on interrupt (#13710) elif ( _errno in {errno.EINVAL, errno.EBADF} or "is not registered" in _msg or "Bad file descriptor" in _msg or "Invalid argument" in _msg ): print( f"\nError: stdin is not usable ({_stdin_err}).\n" "This can happen with certain Python installations (e.g. uv-managed cPython on macOS)\n" "where kqueue cannot register fd 0.\n" "Try reinstalling Python via pyenv or Homebrew, then re-run: hermes setup" ) else: raise finally: self._should_exit = True # Interrupt the agent immediately so its daemon thread stops making # API calls and exits promptly (agent_thread is daemon, so the # process will exit once the main thread finishes, but interrupting # avoids wasted API calls and lets run_conversation clean up). if self.agent and getattr(self, '_agent_running', False): try: self.agent.interrupt() except Exception: pass # Shut down voice recorder (release persistent audio stream) if hasattr(self, '_voice_recorder') and self._voice_recorder: try: self._voice_recorder.shutdown() except Exception: pass self._voice_recorder = None # Clean up old temp voice recordings try: from tools.voice_mode import cleanup_temp_recordings cleanup_temp_recordings() except Exception: pass # Unregister callbacks to avoid dangling references set_sudo_password_callback(None) set_approval_callback(None) set_secret_capture_callback(None) # Close session in SQLite if hasattr(self, '_session_db') and self._session_db and self.agent: try: self._session_db.end_session(self.agent.session_id, "cli_close") except (Exception, KeyboardInterrupt) as e: logger.debug("Could not close session in DB: %s", e) # Started-and-immediately-quit sessions never gained content; # drop the empty row so /resume and `hermes sessions list` # stay clean (gemini-cli#27770 port). No-op for resumed or # titled sessions and anything with messages or children. if not getattr(self, '_delete_session_on_exit', False): try: self._discard_session_if_empty(self.agent.session_id) except (Exception, KeyboardInterrupt) as e: logger.debug("Could not prune empty session: %s", e) # /exit --delete: also remove the current session's transcripts # and SQLite history. Ported from google-gemini/gemini-cli#19332. if getattr(self, '_delete_session_on_exit', False): try: from hermes_constants import get_hermes_home as _ghh _sessions_dir = _ghh() / "sessions" _sid = self.agent.session_id if self._session_db.delete_session(_sid, sessions_dir=_sessions_dir): _cprint(f" {_DIM}✓ Session {_escape(_sid)} deleted{_RST}") else: _cprint(f" {_DIM}✗ Session {_escape(_sid)} not found for deletion{_RST}") except (Exception, KeyboardInterrupt) as e: logger.debug("Could not delete session on exit: %s", e) # Plugin hook: on_session_end — safety net for interrupted exits. # run_conversation() already fires this per-turn on normal completion, # so only fire here if the agent was mid-turn (_agent_running) when # the exit occurred, meaning run_conversation's hook didn't fire. if self.agent and getattr(self, '_agent_running', False): try: from hermes_cli.plugins import invoke_hook as _invoke_hook _invoke_hook( "on_session_end", session_id=self.agent.session_id, completed=False, interrupted=True, model=getattr(self.agent, 'model', None), platform=getattr(self.agent, 'platform', None) or "cli", reason="shutdown", ) except Exception: pass _run_cleanup() self._print_exit_summary() self._release_active_session() # Deferred relaunch: /update sets _pending_relaunch so the exec # happens here — after prompt_toolkit has exited and fully restored # terminal modes — rather than from the background process_loop # thread (which would skip terminal cleanup on POSIX and only exit # the worker thread on Windows). if getattr(self, '_pending_relaunch', None): from hermes_cli.relaunch import relaunch relaunch(self._pending_relaunch, preserve_inherited=False) # ============================================================================ # Main Entry Point # ============================================================================ def _run_kanban_goal_loop_q(cli: "HermesCLI", first_response: str) -> None: """Drive a kanban goal_mode worker through the Ralph-style goal loop. Called from the quiet single-query path AFTER the worker's first turn, only when ``HERMES_KANBAN_GOAL_MODE`` is set (dispatcher-spawned goal_mode card). Wires the worker's ``run_conversation`` and the kanban DB into ``goals.run_kanban_goal_loop``. All errors are swallowed by the caller — a broken goal loop must never wedge a worker, the dispatcher's claim TTL / crash detection is the backstop. """ import os as _os task_id = (_os.environ.get("HERMES_KANBAN_TASK") or "").strip() if not task_id: return from hermes_cli import kanban_db as _kb from hermes_cli.goals import run_kanban_goal_loop as _run_loop, DEFAULT_MAX_TURNS as _DEF_TURNS # Resolve goal text from the card (title + body = the acceptance # criteria the judge evaluates against). conn = _kb.connect() try: task = _kb.get_task(conn, task_id) finally: try: conn.close() except Exception: pass if task is None: return goal_parts = [task.title or ""] if task.body: goal_parts.append(task.body) goal_text = "\n\n".join(p for p in goal_parts if p).strip() if not goal_text: return max_turns = task.goal_max_turns or _DEF_TURNS def _run_turn(prompt: str) -> str: result = cli.agent.run_conversation( user_message=prompt, conversation_history=cli.conversation_history, ) # Keep session_id in sync if mid-run compression rotated it. if ( getattr(cli.agent, "session_id", None) and cli.agent.session_id != cli.session_id ): cli.session_id = cli.agent.session_id resp = result.get("final_response", "") if isinstance(result, dict) else str(result) if resp: print(resp) return resp or "" def _task_status() -> "str | None": c = _kb.connect() try: t = _kb.get_task(c, task_id) return t.status if t is not None else None finally: try: c.close() except Exception: pass def _block(reason: str) -> None: c = _kb.connect() try: _kb.block_task(c, task_id, reason=reason) finally: try: c.close() except Exception: pass _run_loop( task_id=task_id, goal_text=goal_text, run_turn=_run_turn, task_status_fn=_task_status, block_fn=_block, max_turns=max_turns, first_response=first_response or "", log=lambda m: logger.info("%s", m), ) def main( query: str = None, q: str = None, image: str = None, toolsets: str = None, skills: str | list[str] | tuple[str, ...] = None, model: str = None, provider: str = None, api_key: str = None, base_url: str = None, max_turns: int = None, verbose: Optional[bool] = None, quiet: bool = False, compact: bool = False, list_tools: bool = False, list_toolsets: bool = False, gateway: bool = False, resume: str = None, worktree: bool = False, w: bool = False, checkpoints: bool = False, pass_session_id: bool = False, ignore_user_config: bool = False, ignore_rules: bool = False, ): """ Hermes Agent CLI - Interactive AI Assistant Args: query: Single query to execute (then exit). Alias: -q q: Shorthand for --query image: Optional local image path to attach to a single query toolsets: Comma-separated list of toolsets to enable (e.g., "web,terminal") skills: Comma-separated or repeated list of skills to preload for the session model: Model to use (default: anthropic/claude-opus-4-20250514) provider: Inference provider ("auto", "openrouter", "nous", "openai-codex", "zai", "kimi-coding", "minimax", "minimax-cn") api_key: API key for authentication base_url: Base URL for the API max_turns: Maximum tool-calling iterations (default: 60) verbose: Enable verbose logging compact: Use compact display mode list_tools: List available tools and exit list_toolsets: List available toolsets and exit resume: Resume a previous session by its ID (e.g., 20260225_143052_a1b2c3) worktree: Run in an isolated git worktree (for parallel agents). Alias: -w w: Shorthand for --worktree Examples: python cli.py # Start interactive mode python cli.py --toolsets web,terminal # Use specific toolsets python cli.py --skills hermes-agent-dev,github-auth python cli.py -q "What is Python?" # Single query mode python cli.py -q "Describe this" --image ~/storage/shared/Pictures/cat.png python cli.py --list-tools # List tools and exit python cli.py --resume 20260225_143052_a1b2c3 # Resume session python cli.py -w # Start in isolated git worktree python cli.py -w -q "Fix issue #123" # Single query in worktree """ global _active_worktree # Force UTF-8 stdio on Windows before any banner/print() runs — the # Rich console prints Unicode box-drawing characters that would # UnicodeEncodeError on cp1252. No-op on Linux/macOS. try: from hermes_cli.stdio import configure_windows_stdio configure_windows_stdio() except Exception: pass # Signal to terminal_tool that we're in interactive mode # This enables interactive sudo password prompts with timeout os.environ["HERMES_INTERACTIVE"] = "1" # Handle gateway mode (messaging + cron) if gateway: import asyncio from gateway.run import start_gateway print("Starting Hermes Gateway (messaging platforms)...") asyncio.run(start_gateway()) return # Skip worktree for list commands (they exit immediately) if not list_tools and not list_toolsets: # ── Git worktree isolation (#652) ── # Create an isolated worktree so this agent instance doesn't collide # with other agents working on the same repo. use_worktree = worktree or w or CLI_CONFIG.get("worktree", False) wt_info = None if use_worktree: # Prune stale worktrees from crashed/killed sessions _repo = _git_repo_root() if _repo: _prune_stale_worktrees(_repo) wt_info = _setup_worktree() if wt_info: _active_worktree = wt_info os.environ["TERMINAL_CWD"] = wt_info["path"] atexit.register(_cleanup_worktree, wt_info) else: # Worktree was explicitly requested but setup failed — # don't silently run without isolation. return else: wt_info = None # Handle query shorthand query = query or q # Parse toolsets - handle both string and tuple/list inputs # Default to hermes-cli toolset which includes cronjob management tools toolsets_list = None if toolsets: if isinstance(toolsets, str): toolsets_list = [t.strip() for t in toolsets.split(",")] elif isinstance(toolsets, (list, tuple)): # Fire may pass multiple --toolsets as a tuple toolsets_list = [] for t in toolsets: if isinstance(t, str): toolsets_list.extend([x.strip() for x in t.split(",")]) else: toolsets_list.append(str(t)) else: # Coding posture (base Hermes): with no explicit --toolsets, collapse # to the coding toolset (+ enabled MCP servers) when sitting in a code # workspace. See agent/coding_context.py. _coding = None try: from agent.coding_context import coding_selection _coding = coding_selection(platform="cli", config=CLI_CONFIG) except Exception: _coding = None if _coding is not None: toolsets_list = _coding else: # Use the shared resolver so MCP servers are included at runtime from hermes_cli.tools_config import _get_platform_tools toolsets_list = sorted(_get_platform_tools(CLI_CONFIG, "cli")) parsed_skills = _parse_skills_argument(skills) # Create CLI instance cli = HermesCLI( model=model, toolsets=toolsets_list, provider=provider, api_key=api_key, base_url=base_url, max_turns=max_turns, verbose=verbose, compact=compact, resume=resume, checkpoints=checkpoints, pass_session_id=pass_session_id, ignore_rules=ignore_rules, ) if parsed_skills: skills_prompt, loaded_skills, missing_skills = build_preloaded_skills_prompt( parsed_skills, task_id=cli.session_id, ) if missing_skills: missing_display = ", ".join(missing_skills) raise ValueError(f"Unknown skill(s): {missing_display}") if skills_prompt: cli.system_prompt = "\n\n".join( part for part in (cli.system_prompt, skills_prompt) if part ).strip() cli.preloaded_skills = loaded_skills # Inject worktree context into agent's system prompt if wt_info: wt_note = ( f"\n\n[System note: You are working in an isolated git worktree at " f"{wt_info['path']}. Your branch is `{wt_info['branch']}`. " f"Changes here do not affect the main working tree or other agents. " f"Remember to commit and push your changes, and create a PR if appropriate. " f"The original repo is at {wt_info['repo_root']}.]" ) cli.system_prompt = (cli.system_prompt or "") + wt_note # Handle list commands (don't init agent for these) if list_tools: cli.show_banner() cli.show_tools() sys.exit(0) if list_toolsets: cli.show_banner() cli.show_toolsets() sys.exit(0) # Register cleanup for single-query mode (interactive mode registers in run()) atexit.register(_run_cleanup) # Also install signal handlers in single-query / `-q` mode. Interactive # mode registers its own inside HermesCLI.run(), but `-q` runs # cli.agent.run_conversation() below and AIAgent spawns worker threads # for tools — so when SIGTERM arrives on the main thread, raising # KeyboardInterrupt only unwinds the main thread, not the worker # running _wait_for_process. Python then exits, the child subprocess # (spawned with os.setsid, its own process group) is reparented to # init and keeps running as an orphan. # # Fix: route SIGTERM/SIGHUP through agent.interrupt() which sets the # per-thread interrupt flag the worker's poll loop checks every 200 ms. # Give the worker a grace window to call _kill_process (SIGTERM to the # process group, then SIGKILL after 1 s), then raise KeyboardInterrupt # so main unwinds normally. HERMES_SIGTERM_GRACE overrides the 1.5 s # default for debugging. def _signal_handler_q(signum, frame): logger.debug("Received signal %s in single-query mode", signum) try: _agent = getattr(cli, "agent", None) if _agent is not None: _agent.interrupt(f"received signal {signum}") try: _grace = float(os.getenv("HERMES_SIGTERM_GRACE", "1.5")) except (TypeError, ValueError): _grace = 1.5 if _grace > 0: time.sleep(_grace) except Exception: pass # never block signal handling # Kanban worker exit path (#28181): SIGTERM hits a dispatcher-spawned # worker that's likely in a non-daemon thread waiting on a child # subprocess in _wait_for_process. Raising KeyboardInterrupt only # unwinds the main thread; the worker thread keeps running, the # process gets reparented to init, and the dispatcher's _pid_alive # check returns True forever — task stuck in 'running' indefinitely. # Skip the controlled-unwind dance and call os._exit(0) so the kernel # reclaims the PID immediately and detect_crashed_workers can reclaim # the stale claim on the next tick. Flush logging + stdout/stderr # first so the final debug trace isn't lost; SIGALRM deadman guards # the flush against any rare blocking-I/O case (the reporter measured # flush in <1ms; the alarm is a failsafe, not the common path). if os.environ.get("HERMES_KANBAN_TASK"): try: import signal as _sig_mod if hasattr(_sig_mod, "SIGALRM"): # Cancel any pre-existing alarm to avoid colliding with # caller-installed timers. _sig_mod.signal(_sig_mod.SIGALRM, lambda *_: os._exit(0)) _sig_mod.alarm(2) except Exception: pass try: import logging as _lg _lg.shutdown() except Exception: pass for _stream in (sys.stdout, sys.stderr): try: _stream.flush() except Exception: pass os._exit(0) raise KeyboardInterrupt() try: import signal as _signal _signal.signal(_signal.SIGINT, _signal_handler_q) _signal.signal(_signal.SIGTERM, _signal_handler_q) if hasattr(_signal, "SIGHUP"): _signal.signal(_signal.SIGHUP, _signal_handler_q) except Exception: pass # signal handler may fail in restricted environments # Handle single query mode if query or image: if not cli._claim_active_session("cli", stderr=bool(quiet)): sys.exit(1) try: query, single_query_images = _collect_query_images(query, image) # Kanban workers spawn with ``hermes chat -q "work kanban task "``; # the actual task description lives in the task body. Mirror the # gateway/CLI behaviour for inbound images by scanning the body for # local image paths and http(s) image URLs and attaching them to the # worker's first turn. Without this, users who paste a screenshot # path or URL into a kanban task body never get it routed to the # model's vision input. single_query_image_urls: list[str] = [] _kanban_task_id = os.environ.get("HERMES_KANBAN_TASK", "").strip() if _kanban_task_id: try: from hermes_cli import kanban_db as _kb from agent.image_routing import extract_image_refs as _extract_refs _conn = _kb.connect() try: _task = _kb.get_task(_conn, _kanban_task_id) finally: try: _conn.close() except Exception: pass _body = getattr(_task, "body", "") if _task is not None else "" if _body: _kb_paths, _kb_urls = _extract_refs(_body) if _kb_paths: # Dedupe against any --image the user already passed. _seen = {str(p) for p in single_query_images} for _p in _kb_paths: if _p not in _seen: _seen.add(_p) single_query_images.append(Path(_p)) if _kb_urls: single_query_image_urls.extend(_kb_urls) except Exception as _exc: # Best-effort enrichment; never block worker startup on it. logger.debug("kanban image-ref extraction failed: %s", _exc) if quiet: # Quiet mode: suppress banner, spinner, tool previews. # Only print the final response and parseable session info. cli.tool_progress_mode = "off" if cli._ensure_runtime_credentials(): effective_query: Any = query if single_query_images or single_query_image_urls: # Honour the same image-routing decision used by the # interactive path. With a vision-capable model (incl. # custom-provider models declared via # `model.supports_vision: true`), attach images natively # as image_url content parts. Otherwise fall back to the # text-pipeline (vision_analyze pre-description). _img_mode = "text" _build_parts = None try: from agent.image_routing import ( build_native_content_parts as _build_parts, # noqa: F811 ) from agent.image_routing import decide_image_input_mode from hermes_cli.config import load_config _img_mode = decide_image_input_mode( (cli.provider or "").strip(), (cli.model or "").strip(), load_config(), ) except Exception: _img_mode = "text" if _img_mode == "native" and _build_parts is not None: try: _parts, _skipped = _build_parts( query if isinstance(query, str) else "", [str(p) for p in single_query_images], image_urls=list(single_query_image_urls) or None, ) if any(p.get("type") == "image_url" for p in _parts): effective_query = _parts else: # All images unreadable — text fallback. # ``_preprocess_images_with_vision`` only knows # about local files; URLs would be lost there, # so keep the original query text intact when # only URLs were supplied. if single_query_images: effective_query = cli._preprocess_images_with_vision( query, single_query_images, announce=False, ) except Exception: if single_query_images: effective_query = cli._preprocess_images_with_vision( query, single_query_images, announce=False, ) elif single_query_images: effective_query = cli._preprocess_images_with_vision( query, single_query_images, announce=False, ) turn_route = cli._resolve_turn_agent_config(effective_query) if turn_route["signature"] != cli._active_agent_route_signature: cli.agent = None if cli._init_agent( model_override=turn_route["model"], runtime_override=turn_route["runtime"], request_overrides=turn_route.get("request_overrides"), ): cli.agent.quiet_mode = True cli.agent.suppress_status_output = True # Suppress streaming display callbacks so stdout stays # machine-readable (no styled "Hermes" box, no tool-gen # status lines). The response is printed once below. cli.agent.stream_delta_callback = None cli.agent.tool_gen_callback = None try: result = cli.agent.run_conversation( user_message=effective_query, conversation_history=cli.conversation_history, ) except KeyboardInterrupt: _emit_interrupted_session_end(cli, reason="keyboard_interrupt") print(f"\nsession_id: {cli.session_id}", file=sys.stderr) sys.exit(130) # Sync session_id if mid-run compression created a # continuation session. The exit line below reports # session_id to stderr for automation wrappers; without # this sync it would point at the ended parent. if ( getattr(cli.agent, "session_id", None) and cli.agent.session_id != cli.session_id ): cli.session_id = cli.agent.session_id response = result.get("final_response", "") if isinstance(result, dict) else str(result) # Surface backend errors that produced no visible output # (e.g. invalid model slug → provider 4xx). Mirrors the # interactive CLI path. Write to stderr so piped stdout # stays clean for automation wrappers. if ( not response and isinstance(result, dict) and result.get("error") and (result.get("failed") or result.get("partial")) ): print(f"Error: {result['error']}", file=sys.stderr) elif response: print(response) # Kanban goal-loop mode: a worker spawned for a # goal_mode card keeps working in THIS session until an # auxiliary judge agrees the card is done, the worker # terminates the task itself, or the turn budget runs # out (→ sticky block). Gated on the env vars the # dispatcher sets in `_default_spawn`; a no-op for every # normal worker and every non-kanban `-q` run. if os.environ.get("HERMES_KANBAN_GOAL_MODE") == "1": try: _run_kanban_goal_loop_q(cli, response) except Exception as _goal_exc: logger.debug("kanban goal loop failed: %s", _goal_exc) # Session ID goes to stderr so piped stdout is clean. print(f"\nsession_id: {cli.session_id}", file=sys.stderr) # Ensure proper exit code for automation wrappers. # # Kanban workers get a special case: when the run failed # purely because the provider rate-limited / exhausted # quota (not because the task itself is broken), exit with # the EX_TEMPFAIL sentinel instead of the generic 1. The # dispatcher's reap classifier maps that code to a # ``rate_limited`` exit and releases the task back to # ``ready`` WITHOUT incrementing the failure counter, so a # 5-hour quota window can't trip the circuit breaker and # permanently block the card. Non-kanban runs keep the # plain 0/1 contract automation wrappers expect. _exit_code = 0 if isinstance(result, dict) and result.get("failed"): _exit_code = 1 if os.environ.get("HERMES_KANBAN_TASK") and result.get( "failure_reason" ) in ("rate_limit", "billing"): try: from hermes_cli.kanban_db import ( KANBAN_RATE_LIMIT_EXIT_CODE as _RL_CODE, ) _exit_code = _RL_CODE except Exception: _exit_code = 1 sys.exit(_exit_code) # Exit with error code if credentials or agent init fails sys.exit(1) else: # Single-query mode (`hermes chat -q "…"`): skip the welcome # banner. Building the banner takes ~420 ms on cold start — # ~200 ms of that is the version-update check, the rest is # toolset / skill enumeration and Rich panel rendering. None # of that is useful for a one-shot query: the user already # picked the prompt, doesn't need a toolset reference, and # gets the session ID + resume hint from # ``_print_exit_summary()`` after the response prints. # # The fully-quiet ``-Q`` / ``--quiet`` machine-readable path # above was already banner-free; this brings the human- # facing single-query path in line so all non-interactive # invocations are fast. _query_label = query or ("[image attached]" if single_query_images else "") if _query_label: cli.console.print(f"[bold blue]Query:[/] {_query_label}") # Surface security advisories before the agent runs — short # banner, doesn't depend on the welcome banner being shown. cli._show_security_advisories() cli.chat(query, images=single_query_images or None) cli._print_exit_summary() finally: _finalize_single_query(cli) return # Run interactive mode cli.run() if __name__ == "__main__": import fire fire.Fire(main)