i h~SrSSKJr SSKrSSKrSSKrSSKrSSKrSSKrSSK r SSK r SSK r SSK r SSK r SSKrSSKJrJr SSKJr SSK JrJrJrJr SSKJr SSKJrJr SS KJr SS KJ r J!r! SS K"J#r# SS K$J%r%J&r&J'r'J(r(J)r) SS K*J+r+J,r,J-r-J.r. SSK/J0r0J1r1J2r2 \(aSSK3J4r4J5r5 SSK6J7r7 SSK8J9r9 SSK/J:r: \Rv"\<5r=Sr>Sr?S'Sjr@\"SS55rA"SS\15rB\"SS9"SS55rC"SS5rD"S S!\ 5rE"S"S#\5rF"S$S%\0\B\45rG/S&QrHg)(z:Middleware that exposes a persistent shell tool to agents.) annotationsN) dataclassfield)Path) TYPE_CHECKING AnnotatedAnyLiteral) ToolMessage)BaseTool ToolException)UntrackedValue) BaseModelmodel_validator) NotRequired)SHELL_TEMP_PREFIXBaseExecutionPolicyCodexSandboxExecutionPolicyDockerExecutionPolicyHostExecutionPolicy)PIIDetectionErrorPIIMatch RedactionRuleResolvedRedactionRule)AgentMiddleware AgentStatePrivateStateAttr)MappingSequence)Runtime)Command)ToolCallRequest__LC_SHELL_DONE__aGExecute a shell command inside a persistent session. Before running a command, confirm the working directory is correct (e.g., inspect with `ls` or `pwd`) and ensure any parent directories exist. Prefer absolute paths and quote paths containing spaces, such as `cd "/path/with spaces"`. Chain multiple commands with `&&` or `;` instead of embedding newlines. Avoid unnecessary `cd` usage unless explicitly required so the session remains stable. Outputs may be truncated when they become very large, and long running commands will be terminated once their configured timeout elapses. ShellSessionc[R"[5 URU5 SSS5 Ub4[R"[5 UR 5 SSS5 gg!,(df  NF=f!,(df  g=fN) contextlibsuppress Exceptionstopcleanup)sessiontempdirtimeouts `/home/james-whalen/.local/lib/python3.13/site-packages/langchain/agents/middleware/shell_tool.py_cleanup_resourcesr0@s`   Y ' W (   + OO , + ( ', +sA-A>- A;> B cZ\rSrSr%SrS\S'S\S'S\S'\"S S S 9rS \S 'SS jrSr g)_SessionResourcesJz&Container for per-run shell resources.r$r,'tempfile.TemporaryDirectory[str] | Noner-rpolicyF)initreprzweakref.finalize _finalizerc[R"U[URURUR R 5Ulgr&)weakreffinalizer0r,r-r5termination_timeoutr8selfs r/ __post_init___SessionResources.__post_init__Ss5!**   LL LL KK + +  )r8NreturnNone) __name__ __module__ __qualname____firstlineno____doc____annotations__rr8r?__static_attributes__rAr/r2r2Js.0  44 #(e%#@J @ rAr2c$\rSrSr%SrS\S'Srg)ShellToolState]z;Agent state extension for tracking shell session resources.zRNotRequired[Annotated[_SessionResources | None, UntrackedValue, PrivateStateAttr]]shell_session_resourcesrLNrErFrGrHrIrJrKrLrAr/rNrN]sErArNT)frozenc`\rSrSr%SrS\S'S\S'S\S'S\S 'S\S 'S \S 'S \S 'Srg)CommandExecutionResultez)Structured result from command execution.stroutput int | None exit_codebool timed_outtruncated_by_linestruncated_by_bytesint total_lines total_bytesrLNrQrLrAr/rTrTes-3 KOrArTc\rSrSrSrSSjrSSjrSSjrSSjrSSjr SSjr SS jr SS jr SS jr \SS j5rS rg)r$rzDPersistent shell session that supports sequential command execution.cXlX lX0l[U5UlSUlSUl[R"5Ul [R"5Ul SUl SUlSUlg)NF) _workspace_policy_commanddict _environment_process_stdinqueueQueue_queue threadingLock_lock_stdout_thread_stderr_thread _terminated)r> workspacer5command environments r/__init__ShellSession.__init__usa$   -6:  ;@;;= ^^% 7;7; rAcJUR(aURR5cgURRURUR UR S9UlURRb.URRbURRc Sn[U5eURRUl SUl [R"5Ul[ R""UR$URRS4SS9Ul[ R""UR$URRS4SS9UlUR&R+5 UR(R+5 g) z.Start the shell subprocess and reader threads.N)rtenvruz)Failed to initialize shell session pipes.FstdoutT)targetargsdaemonstderr)ripollrespawnrdrhrfstdinr{r RuntimeErrorrjrsrkrlrmrnThread_enqueue_streamrqrrstartr>msgs r/rShellSession.startsB ==T]]//19  **oo!!MM+  MM   '}}##+}}##+=Cs# #mm))  kkm '..''--&&1  (..''--&&1  !!# !!#rAcnURURR5 UR5 g)zRestart the shell process.N)r*rer<rr=s r/restartShellSession.restarts! $,,223 rAcrUR(dgURR5cGUR(d6URR S5 URR 5 URRUS9cUR5 SUl[R"[ 5 URR#5 SSS5 SUlg![ [4a [RSSS9 Nf=f![Ra UR5 Nf=f!,(df  Nj=f!SUl[R"[ 5 URR#5 SSS5 SUlf!,(df  SUlf=f=f)zStop the shell subprocess.Nzexit z8Failed to write exit command; terminating shell session.Texc_infor.)rirrsrjwriteflushBrokenPipeErrorOSErrorLOGGERdebugwait _kill_process subprocessTimeoutExpiredr'r(r)close)r>r.s r/r*ShellSession.stopsG}}  ==    '0@0@  !!(+ !!# !}}!!'!2:""$ $D $$Y/ !!#0 DM$W-  N! (( !     !0/ $D $$Y/ !!#0 DM0/ DMsZ5C,6*DE,$DD$D=:E<D==E E"F63FF6 F3 (F6cfUR(aURR5b Sn[U5e[[R "5R 3n[R"5U-nUR UR5 URS5(aUOUS3nURRU5 URRSUS35 URR5 URXEU5sSSS5 $!,(df  g=f)z*Execute a command in the persistent shell.NzShell session is not running. zprintf 'z %s\n' $? )rirr_DONE_MARKER_PREFIXuuiduuid4hextime monotonicrp _drain_queueendswithrjrr_collect_output)r>rur.rmarkerdeadlinepayloads r/executeShellSession.executes}} 2 2 4 @1Cs# #'()9)9(:;>>#g- ZZ    !(!1!1$!7!7gy^G KK  g & KK   = > KK   '''BZZs BD"" D0c /nSnSnSnSnSn Sn U[R"5- n U S::aSn GOOURRU S9upU cMDU S:XaJU R U5(a4U RS5u pURUR55n OUS- nU RSS 5nU[U5- nXPRR:aSnMURRbX`RR:aSnGM U S :XaMU RS 5nUR!S U35 U R#S 5(aUR!S 5 OUR!U 5 GMqU (a5[$R'S U5 UR)5 [+SSSUUUUS9$SR-U5n[+UU SUUUUS9$![R a Sn Muf=f)NrFTrr{ zutf-8replacerrz [stderr] z?Command timed out after %.2f seconds; restarting shell session.)rWrYr[r\r]r_r`)rrrmgetrkEmpty startswith partition _safe_intstripencodelenremax_output_linesmax_output_bytesrstripappendrrwarningrrTjoin)r>rrr. collectedr_r`r\r]rYr[ remainingsourcedata_statusencodedstrippedrWs r/rShellSession._collect_outputs "   "" $   4>>#33IA~  #{{yA  |!doof&=&=#~~c2 1 NN6<<>:  1 Kkk'95G 3w< 'K\\:::%)" --9,,"?"??%)"!;;t,  9XJ!78==&&$$T*  &QT  NNQ  LLN)#5#5'' #%11##  i;;   sGG76G7cUR(dg[[S5(aq[R"[ 5 [R "[R"URR5[R5 SSS5 g[R"[ 5 URR5 SSS5 g!,(df  g=f!,(df  g=f)Nkillpg) rihasattrosr'r(ProcessLookupErrorrgetpgidpidsignalSIGKILLkillr=s r/rShellSession._kill_process/s}}  2x $$%78 "**T]]%6%67H98$$%78 ""$989898sAC3C( C%( C6c[URS5HnURRX#45 M! URRUS45 g)Nr)iterreadlinermput)r>streamlabellines r/rShellSession._enqueue_stream:s="-D KKOOUM *.  &rAcrURR5 M![Ra gf=fr&)rm get_nowaitrkrr=s r/rShellSession._drain_queue?s7  &&(;;  s 66c[R"[5 [U5sSSS5 $!,(df  g=fr&)r'r( ValueErrorr^)values r/rShellSession._safe_intFs&   ,u:- , ,s 0 >) rfrhrprerirmrrrjrqrsrdN) rtrr5rrutuple[str, ...]rvzMapping[str, str]rCrDrB)r.floatrCrD)rurVr.rrCrT)rrVrrr.rrCrT)rr rrVrCrD)rrVrCrX)rErFrGrHrIrwrrr*rrrrr staticmethodrrKrLrAr/r$r$rsN!!$!! ! ' !  !&!$F !4C$Q Q Q  Q Q f %' rAcR\rSrSr%SrSrS\S'SrS\S'\"SS 9S S j5r S r g) _ShellToolInputiMz+Input schema for the persistent shell tool.N str | Noneruz bool | Nonerafter)modecURcUR(d Sn[U5eURbUR(a Sn[U5eU$)Nz2Shell tool requires either 'command' or 'restart'.z+Specify only one of 'command' or 'restart'.)rurrrs r/validate_payload _ShellToolInput.validate_payloadSsE <<  FCS/ ! << # ?CS/ ! rArL)rCr) rErFrGrHrIrurJrrrrKrLrAr/rrMs05GZG['"#rArcj^\rSrSr%SrSrS\S'\rS\S'\ r S\S'S S U4S jjjr SS jr S r U=r$)_PersistentShellTooli^zBTool wrapper that relies on middleware interception for execution.shellrVname descriptionztype[BaseModel] args_schemacB>[TU]5 XlUbX lggr&)superrw _middlewarer)r> middlewarer __class__s r/rw_PersistentShellTool.__init__es% %  "*  #rAc Sn[U5e)NzNPersistent shell tool execution should be intercepted via middleware wrappers.)r)r>rrs r/_run_PersistentShellTool._runks^3rA)rrr&)rShellToolMiddlewarerrrCrD)rr rCr )rErFrGrHrIrrJDEFAULT_TOOL_DESCRIPTIONrrrrwrrK __classcell__rs@r/rr^s8LD#/K/#2K2++   rArc ^\rSrSrSr\rSSSSSSSSS.SU4Sjjjjr\SSj5r \SSj5r \SSj5r SS jr SS jr SS jrSS jrSS jrS SjrS!SjrS!SjrS"SjrS#SjrS$SjrS%SjrSS.S&SjjrSrU=r$)'ripaMiddleware that registers a persistent shell tool for agents. The middleware exposes a single long-lived shell session. Use the execution policy to match your deployment's security posture: * ``HostExecutionPolicy`` - full host access; best for trusted environments where the agent already runs inside a container or VM that provides isolation. * ``CodexSandboxExecutionPolicy`` - reuses the Codex CLI sandbox for additional syscall/filesystem restrictions when the CLI is available. * ``DockerExecutionPolicy`` - launches a separate Docker container for each agent run, providing harder isolation, optional read-only root filesystems, and user remapping. When no policy is provided the middleware defaults to ``HostExecutionPolicy``. N)startup_commandsshutdown_commandsexecution_policyredaction_rulestool_description shell_commandrzc>[T U]5 U(a [U5OSUlUR U5UlUR U5UlUbX@lO[5UlU=(d Sn [SU 55Ul URU5Ul URU5UlU=(d [n [!X S9UlUR"/Ulg)a^Initialize the middleware. Args: workspace_root: Base directory for the shell session. If omitted, a temporary directory is created when the agent starts and removed when it ends. startup_commands: Optional commands executed sequentially after the session starts. shutdown_commands: Optional commands executed before the session shuts down. execution_policy: Execution policy controlling timeouts, output limits, and resource configuration. Defaults to :class:`HostExecutionPolicy` for native execution. redaction_rules: Optional redaction rules to sanitize command output before returning it to the model. tool_description: Optional override for the registered shell tool description. shell_command: Optional shell executable (string) or argument sequence used to launch the persistent session. Defaults to an implementation-defined bash command. env: Optional environment variables to supply to the shell session. Values are coerced to strings before command execution. If omitted, the session inherits the parent process environment. NrLc3@# UHoR5v M g7fr&)resolve).0rules r/ /ShellToolMiddleware.__init__..sI ',tLLNNus)r)rrwr_workspace_root_normalize_shell_command_shell_command_normalize_envrh_execution_policyrtuple_redaction_rules_normalize_commands_startup_commands_shutdown_commandsrr_tooltools) r>workspace_rootrrrrrrrzrulesrrs r/rwShellToolMiddleware.__init__s< 7EtN34";;MJ //4  '%5 "%8%:D "%2CHI ',I D "&!9!9:J!K"&":":;L"M&B*B )$H jj\ rAcPUcg[U[5(aU4$[U5$)NrL) isinstancerVr)commandss r/r'ShellToolMiddleware._normalize_commandss,   h $ $; XrAc|Ucg[U[5(aU4O [U5nU(d Sn[U5eU$)N)z /bin/bashz1Shell command must contain at least one argument.)rrVrr)r normalizedrs r/r,ShellToolMiddleware._normalize_shell_commandsA  !)3M3)G)Gm%US`Ma ECS/ !rAcUcg0nUR5H4up#[U[5(d Sn[U5e[U5X'M6 U$)Nz+Environment variable names must be strings.)itemsrrV TypeError)rzr#keyrrs r/r"ShellToolMiddleware._normalize_envsP ;%' ))+JCc3''Cn$!%jJO & rAc*UR5nSU0$)z1Start the shell session and run startup commands.rP)_create_resourcesr>stateruntime resourcess r/ before_agent ShellToolMiddleware.before_agents**, )955rAc,# URX5$7f)z$Async counterpart to `before_agent`.)r0r>r-r.s r/ abefore_agent!ShellToolMiddleware.abefore_agents  00cURU5nURUR5 UR5 g!UR5 f=f)zDRun shutdown commands and release resources when an agent completes.N)_ensure_resources_run_shutdown_commandsr,r8r,s r/ after_agentShellToolMiddleware.after_agentsD**51  #  ' ' (9(9 :  "I "s ?Ac,# URX5$7f)z#Async counterpart to `after_agent`.)r:r3s r/ aafter_agent ShellToolMiddleware.aafter_agents//r6c|URS5nUb[U[5(dSnUc Sn[U5eU$)NrPzoShell session resources are unavailable. Ensure `before_agent` ran successfully before invoking the shell tool.)rrr2r )r>r-r/rs r/r8%ShellToolMiddleware._ensure_resourcessLII78  I?P)Q)QI  2  $ $rAc^URnSnUc.[R"[S9n[ UR 5nOUnUR SSS9 [UURURUR=(d 05nUR5 [RSU5 URU5 [)XBURS9$![aO [R!S5 UR#URR$5 UbUR'5 ef=f)N)prefixT)parentsexist_okzStarted shell session in %sz5Starting shell session failed; cleaning up resources.)r,r-r5)rtempfileTemporaryDirectoryrrrmkdirr$rrrhrrinfo_run_startup_commands BaseException exceptionr*r<r+r2)r>rtr-workspace_pathr,s r/r+%ShellToolMiddleware._create_resourcess(( ;?  119JKG!',,/N&N   =   " "       #    MMO KK5~ F  & &w /!$J`J`aa    T U LL//CC D"!   s 7CAD,cUR(dgURHdnURX RRS9nUR(dUR S;dMISUSUR 3n[ U5e g)NrrNzStartup command 'z' failed with exit code )rrrstartup_timeoutr[rYr)r>r,ruresultrs r/rI)ShellToolMiddleware._run_startup_commandssu%% --G__W6L6L6\6\_]FF$4$4I$E)'2J6K[K[J\]"3'' .rAc UR(dgURHnURX RRS9nUR(a[ R SU5 MPURS;a"[ R SX#R5 MM g![[[4a n[ R SX$SS9 SnAMSnAff=f)Nrz Shutdown command '%s' timed out.rOz%Shutdown command '%s' exited with %s.z'Failed to run shutdown command '%s': %sTr) rrrcommand_timeoutr[rrrYrr r)r>r,rurQexcs r/r9*ShellToolMiddleware._run_shutdown_commandss&& ..G  :P:P:`:`a##NN#EwO%%Y6NN?JZJZ7 /!-9 =wVZ sA B&/0B&&C;CCc0nUnURHJnURU5up5U(dMURUR/5R U5 ML X24$)z3Apply configured redaction rules to command output.)rapply setdefaultpii_typeextend)r>contentmatches_by_typeupdatedr matchess r/_apply_redactions%ShellToolMiddleware._apply_redactions-s\57))D#zz'2 Gw**4=="=DDWM*''rAc LURnURS5(aI[RS5 UR 5 UR U5 SnURXsSS9$URS5nU(a[U[5(d S n[U5e[RS U5 URXRRS 9n U R(a2URRn S U S S3nURUUSSSS.S9$UR!U R"5upU =(d Sn U R.(a7U R15SURR2SU R4S3n U R6(aNURR8b7U R15SURR8SU R:S3n U R*S;a"U R15SU R*3n SnOSnSU R*U R.U R6U R4U R:U S.nURU UUUS9$![ a(n[RS5 Sn[U5UeSnAff=f![$apn [R'SU R(5 SU R(S3nURUUSSU R*U R(U R,0S.S9sSn A $Sn A ff=f) Nrz$Restarting shell session on request.z=Restarting shell session failed; session remains unavailable.z Failed to restart shell session.zShell session restarted.success)rruzDShell tool expects a 'command' string when restart is not requested.zExecuting shell command: %srzError: Command timed out after z.1fz seconds.errorT)r[rY)rartifactz+Blocking command output due to detected %s.zOutput blocked: detected .F)r[rYr_z z ... Output truncated at z lines (observed z).z bytes (observed rOz Exit code: )r[rYr\r]r_r`redaction_matches)r,rrrHrrIrJrKr _format_tool_messagerrVrrrTr[r`rWrrrZrYr_r\rrr_r]rr`)r>r/r tool_call_idr,errrmessagerurQtimeout_secondssanitized_outputr_rd final_statusres r/_run_shell_tool#ShellToolMiddleware._run_shell_tool7s6## ;;y ! ! KK> ? 2!**73 1G,,W9,U U++i(j#66XC$ $ 17;2H2H2X2XY   "44DDO77LIVG,,!%!% -  (,(>(>v}}(M % ,<}  $ $#**,-.++/+A+A+R+R*ST#//04   $ $)?)?)P)P)\#**,-.++/+A+A+R+R*ST#//04    9 ,"2"9"9";! -   s6!I4#J)4 J&>#J!!J&) L#3A%LL#L#c[UR[5(aRURUR5nUR UUR SUR RS5S9$U"U5$)zJIntercept local shell tool calls and execute them via the managed session.r}idrirtoolrr8r-ro tool_callrr>requesthandlerr/s r/wrap_tool_call"ShellToolMiddleware.wrap_tool_callst gll$8 9 9..w}}=I''!!&)$..2248(  wrAc# [UR[5(aRURUR5nUR UUR SUR RS5S9$U"U5IShvN $N7f)z:Async interception mirroring the synchronous tool handler.r}rrrsNrtrws r/awrap_tool_call#ShellToolMiddleware.awrap_tool_calls} gll$8 9 9..w}}=I''!!&)$..2248(  W%%%%sA=B?BB)recdU=(d 0nUcU$[UUURRUUS9$)N)r\rirrre)r rr)r>r\rirres r/rh(ShellToolMiddleware._format_tool_messages<>r  N%   rA) rhrrrrrrrrr&)rzstr | Path | Noner(tuple[str, ...] | list[str] | str | NonerrrzBaseExecutionPolicy | Nonerz6tuple[RedactionRule, ...] | list[RedactionRule] | NonerrrSequence[str] | str | NonerzMapping[str, Any] | NonerCrD)r rrCr)rrrCr)rzrrCzdict[str, str] | None)r-rNr.r rCdict[str, Any] | None)r-rNr.r rCrD)r-rNrCr2)rCr2)r,r$rCrD)r\rVrCz%tuple[str, dict[str, list[PIIMatch]]])r/r2rzdict[str, Any]rirrCr )rxr"ryz9typing.Callable[[ToolCallRequest], ToolMessage | Command]rCToolMessage | Command)rxr"ryzKtyping.Callable[[ToolCallRequest], typing.Awaitable[ToolMessage | Command]]rCr) r\rVrirrzLiteral['success', 'error']rerrCzToolMessage | str)rErFrGrHrIrN state_schemarwrrrrr0r4r:r=r8r+rIr9r`rorzr}rhrKrrs@r/rrps "L-1/"FJFJ7;RV'+48(,/")/"C /" D /" 5 /"P/"%/"2/"&/" /"/"b:  1      6 1#0 b:("(] $]  ] ! ] ] ~     K      &  &] &  &*+/   ! ,  (     rAr)rrrrr)r,r$r-r4r.rrCrD)IrI __future__rr'loggingrrkrrrErnrtypingrr: dataclassesrrpathlibrrrr r langchain_core.messagesr langchain_core.tools.baser r "langgraph.channels.untracked_valuerpydanticrrtyping_extensionsr&langchain.agents.middleware._executionrrrrr&langchain.agents.middleware._redactionrrrr!langchain.agents.middleware.typesrrrcollections.abcrrlanggraph.runtimer langgraph.typesr!r" getLoggerrErrrr0r2rNrTr$rrr__all__rLrAr/rsD@"  (99/==/) \[1)'A   8 $)Q $KV[      $Z $   XXvi" 8 $U /.#*=>U p  rA