yjC-dZddlmZddlZddlZddlmZddlmZm Z dZ e hdZ e hdZ d,d Zd-dZd.dZd/d0dZd1dZd2dZd3dZd4d Zd5d#Zdd$d%d6d)Zd*d+gZdS)7aTurn-end verification guard for coding edits. This module is intentionally policy-only. It never runs checks itself; it turns the passive verification ledger into a bounded follow-up when the model tries to finish immediately after editing code without fresh evidence. ) annotationsN)Path)AnyIterable> .md.csv.log.mdx.org.rst.tsv.txt.adoc.text .asciidoc .markdown>noticeauthorslicencelicense changelog codeowners contributorsrawstrreturnboolc tt|}n#t$rYdSwxYw|j}|t vrdS|s"|jtvrdSdS)zNReturn True when a changed path is documentation/prose with nothing to verify.FT)rr Exceptionsuffixlower_NON_CODE_VERIFY_EXTENSIONSname_NON_CODE_VERIFY_FILENAMES)rpr!s =/home/ragecks/.hermes/hermes-agent/agent/verification_stop.py_is_non_code_pathr(8s SNN uu X^^  F ,,,t afllnn(BBBt 5s  --paths Iterable[str] list[str]cd|DS)zODrop documentation/prose paths; keep paths that could have verifiable behavior.c4g|]}|t||S)r(.0r&s r' z,_filter_verifiable_paths..Hs+ ? ? ?! ?*;A*>*> ?A ? ? ?r.)r)s r'_filter_verifiable_pathsr3Fs ? ?u ? ? ??r2cF ddlm}|S#t$rYdSwxYw)uWhether this turn is delivered over a human messaging channel. Verify-on-stop defaults ON for the interactive coding surfaces and programmatic callers, and OFF on a conversational platform (Telegram, Discord, Slack, ...) where the verification narrative reaches a human as chat noise. The surface classification itself is shared with the other consumers of this distinction — see ``gateway.session_context.session_is_messaging_surface``. rsession_is_messaging_surfaceF)gateway.session_contextr6r r5s r'_session_is_messaging_surfacer8KsLHHHHHH++--- uus   configdict[str, Any] | Nonectjd}|(|dvS|$ ddlm}|}n#t$ri}YnwxYwt|tr|pidnd}t|tr|dnd}t|tr|St|trG|}|dvrd S|dvrd S|d krt St S) uReturn whether edit -> verify-before-finish behavior is enabled. Precedence: an explicit ``HERMES_VERIFY_ON_STOP`` env var wins, then an explicit ``agent.verify_on_stop`` config value. The config default is ``"auto"`` (see ``DEFAULT_CONFIG``) — surface-aware: ON for interactive coding surfaces (CLI, TUI, desktop) and programmatic callers, OFF for conversational messaging surfaces (Telegram, Discord, etc.) where the verification narrative would reach a human as chat noise. An explicit bool forces the behavior in either direction. A missing or unrecognized value falls back to the surface-aware ``"auto"`` default. HERMES_VERIFY_ON_STOPN>0noofffalser)load_config_readonlyagentverify_on_stop>1onyestrueTFauto) osenvirongetstripr"hermes_cli.configrAr isinstancedictrrr8)r9envrA agent_cfgcfg_valtokens r'verify_on_stop_enabledrT_sj *..0 1 1C yy{{  ""*EEE ~  > > > > > >))++FF   FFF /9&$/G/GQ2""7+++TI1;It1L1LVimm,---RVG'4  '37 %%'' . . .4 / / /5 F??4666 6,.. ..s A A-,A- list[Path]cg}t}|D]}|s t|}|r|n|j}t |}n#t$rYrwxYw||vr7||| t||SN) setr expanduseris_dirparentrresolver addappend)r) candidatesseenrpath candidateresolveds r'_candidate_cwdsrdsJUUD . .   99''))D $ >4;I9,,..//HH    H  4   HHX      d8nn - - - sAA99 BB session_id str | None changed_paths,tuple[dict[str, Any], dict[str, Any]] | Nonec  ddlm}ddlm}n#t$rYdSwxYwd}t |D]Q}||}|s|||}||f}||}t |dpddkr|cSR|S) zHReturn ``(status, facts)`` for the first edited workspace needing proof.r)project_facts_for)verification_statusN)recwdstatus unverifiedpassed)agent.coding_contextrjagent.verification_evidencerkr rdrrK) rergrjrkfirst_snapshotrlfactsrmsnapshots r'_verification_snapshotrus ::::::CCCCCCC ttDHN}--  !!#&&  $$ DDDE?  !%N vzz(##3| 4 4 @ @OOO A s  c|dt}d|D}t|t|z }|dkr|d|dd|S)Ncg|]}d|d S)z- ``r.)r0ras r'r1z)_format_changed_paths..s - - -t]4]]] - - -r2rz - ... and z more )_MAX_CHANGED_PATHS_IN_NUDGElenr^join)r)shownlines remainings r'_format_changed_pathsrsu ... /E - -u - - -EE SZZ'I1}} 2)222333 99U  r2rootrc|sdS tt|}ddlm}||rdSddlm}||}t|duo|jS#t$rYdSwxYw)uWhether the workspace has a runtime verify recipe ``hermes verify`` can run. True when a saved ``.hermes/environment.json`` manifest exists, or when cheap static detection (:func:`agent.verify.recipes.detect_recipe`) finds a recipe with a start command. Deliberately fail-silent and cheap — this only decorates the nudge text; it must never break or slow the nudge path. Fr) manifest_pathT) detect_recipeN) rragent.verify.environmentris_fileagent.verify.recipesrrstartr )r root_pathrrrecipes r'_workspace_has_runnable_recipers u TOO :::::: = # # + + - - 4666666y))F$&76<888 uus?A0(A00 A>=A>rmdict[str, Any]ct|dpd}t|dtr|dnd}|s|S|dp|d}t|dpd}|g}|r|d|d |rLd }t ||kr|d|d z}|d |d |S)Nrmrnevidencecanonical_commandcommandoutput_summaryzlast command `rxiz ... [truncated]z last output: ry) rrKrNrOrLr^r{rstripr|)rmstaterrsummaryparts max_summarys r'_status_detailrsE  8$$4 5 5E)3FJJz4J4JD)Q)Q[vzz*%%%W[H  ll.//J8<< 3J3JG(,,/006B77==??G GE2 0g0001111 w<<+ % %l{l+22447JJG /g//000 99U  r2)attempts max_attemptsrintrc ptdt|D}|r||krdSt||}|dS|\}}d|dpgD}t |dpd} | dkrdS d d lm} | } n#t$rd} YnwxYw| rd | nd } |rmd dd|ddDzt|dkrdnd zdz} t|dr| dz } n[tj tj}t|drd} nd|d} dt!|dt#|d | d| d S)zGReturn a synthetic follow-up when edited code lacks fresh verification.c,h|]}t|Sr.)rr/s r' z-build_verify_on_stop_nudge..sLLLqCFFLLLr2N)rergcg|]D}t|#t|ESr.)rrLr0cmds r'r1z.build_verify_on_stop_nudge..sN  s88>>   Cr2verifyCommandsrmrnror)coding_verify_guidancez rz+Run the relevant verification command now (z, c3"K|] }d|dV dS)rxNr.rs r' z-build_verify_on_stop_nudge..s*BBs C BBBBBBr2z, ...z@), read any failure, repair the code, and summarize what passed.ru For a full check including a runtime boot (build + test + start + readiness), prefer `hermes verify --json` — a passing run records verification evidence for this workspace.a4No canonical test/lint/build command was detected, but the project has a runnable verification recipe. Run `hermes verify --json` (detect -> build -> test -> boot -> readiness poll); a passing run records verification evidence for this workspace. Read any failure, repair the code, and summarize what passed.ziNo canonical test/lint/build command was detected. Create a focused temporary verification script under `z` using an OS-safe `tempfile` path with a `hermes-verify-` filename prefix, run it against the changed behavior, clean it up when possible, and summarize it explicitly as ad-hoc verification rather than suite green.z[System: You edited code in this turn, but the workspace does not have fresh passing verification evidence yet. Verification status: z Changed paths: zn If verification is not possible, explain the concrete blocker instead of claiming the work is fully verified.])sortedr3rurKragent.verify_hooksrr r|r{rrIrarealpathtempfile gettempdirrr)rergrrr)rtrmrsverify_commandsrrguidanceaddendumcommand_instructiontemp_dirs r'build_verify_on_stop_nudgers LL$<]$K$KLLL M ME H ,,t%5QQQHtMFEII.//52O  8$$4 5 5E t======))++ $,4 h   "H 9iiBBobqb.ABBBBB Co..22ww <Q Q  *%))F*;*; < <  H   7##H$7$9$9:: )%))F*;*; < < P 8@   .v 6 6  177           sB** B98B9rrT)rrrr)r)r*rr+)rrrW)r9r:rr)r)r*rrU)rerfrgr+rrh)r)r+rr)rrrr)rmrrr) rerfrgr*rrrrrrf)__doc__ __future__rrIrpathlibrtypingrrrz frozensetr#r%r(r3r8rTrdrurrrr__all__r.r2r'rs#"""""   (i   &'Y      @@@@ (#/#/#/#/#/L$40. PPPPPPf ()A Br2