OKi}SrSSKJr SSKrSSKrSSKrSSKrSSKrSSKrSSK r SSK r SSK r SSK r SSK r SSKJrJr SSKJr SSKJrJrJrJrJr SSKJr SSKJr SS KJr SS KJ r SS K!J"r"J#r# SS K$J%r% SS K&J'r'J(r( SSK)J*r*J+r+J,r,J-r-J.r. SSK/J0r0J1r1J2r2J3r3 SSK4J5r5J6r6J7r7J8r8J9r9 SSK:J;r;Jr>J?r? SSK@JArA \R"\C5rDSrESrFSrGS'SjrH\"SS55rI"SS\6\95rJ\"SS9"SS 55rK"S!S5rL"S"S#\"5rM"S$S%\5\J\9\7\945rN/S&QrOg)(z:Middleware that exposes a persistent shell tool to agents.) annotationsN) dataclassfield)Path) TYPE_CHECKING AnnotatedAnyLiteralcast) ToolMessage)run_in_executor) ToolException)UntrackedValue) BaseModelmodel_validator)SkipJsonSchema) NotRequiredoverride)SHELL_TEMP_PREFIXBaseExecutionPolicyCodexSandboxExecutionPolicyDockerExecutionPolicyHostExecutionPolicy)PIIDetectionErrorPIIMatch RedactionRuleResolvedRedactionRule)AgentMiddleware AgentStateContextTPrivateStateAttr ResponseT) ToolRuntimetool)MappingSequence)Runtime__LC_SHELL_DONE__aGExecute a shell command inside a persistent session. Before running a command, confirm the working directory is correct (e.g., inspect with `ls` or `pwd`) and ensure any parent directories exist. Prefer absolute paths and quote paths containing spaces, such as `cd "/path/with spaces"`. Chain multiple commands with `&&` or `;` instead of embedding newlines. Avoid unnecessary `cd` usage unless explicitly required so the session remains stable. Outputs may be truncated when they become very large, and long running commands will be terminated once their configured timeout elapses.shell ShellSessionc[R"[5 URU5 SSS5 Ub4[R"[5 UR 5 SSS5 gg!,(df  NF=f!,(df  g=fN) contextlibsuppress Exceptionstopcleanup)sessiontempdirtimeouts h/var/www/html/dynamic-report/venv/lib/python3.13/site-packages/langchain/agents/middleware/shell_tool.py_cleanup_resourcesr6Gs`   Y ' W (   + OO , + ( ', +sA-A>- A;> B cZ\rSrSr%SrS\S'S\S'S\S'\"S S S 9rS \S 'SS jrSr g)_SessionResourcesQz&Container for per-run shell resources.r*r2'tempfile.TemporaryDirectory[str] | Noner3rpolicyF)initreprzweakref.finalize finalizerc[R"U[URURUR R 5Ulgr,)weakreffinalizer6r2r3r;termination_timeoutr>selfs r5 __post_init___SessionResources.__post_init__Zs5 ))   LL LL KK + +  )r>NreturnNone) __name__ __module__ __qualname____firstlineno____doc____annotations__rr>rE__static_attributes__rGr5r8r8Qs.0  44 "'U"?I? rGr8c$\rSrSr%SrS\S'Srg)ShellToolStatedzAgent state extension for tracking shell session resources. Type Parameters: ResponseT: The type of the structured response. Defaults to `Any`. zRNotRequired[Annotated[_SessionResources | None, UntrackedValue, PrivateStateAttr]]shell_session_resourcesrRNrKrLrMrNrOrPrQrRrGr5rTrTds rGrTT)frozenc`\rSrSr%SrS\S'S\S'S\S'S\S 'S\S 'S \S 'S \S 'Srg)CommandExecutionResultpz)Structured result from command execution.stroutput int | None exit_codebool timed_outtruncated_by_linestruncated_by_bytesint total_lines total_bytesrRNrWrRrGr5rZrZps-3 KOrGrZc\rSrSrSrSSjrSSjrSSjrSSjrSSjr SSjr SS jr SS jr SS jr SS jrSSS jjr\SSj5rSrg)r*}zDPersistent shell session that supports sequential command execution.cXlX lX0l[U5UlSUlSUl[R"5Ul [R"5Ul SUl SUlSUlg)NF) _workspace_policy_commanddict _environment_process_stdinqueueQueue_queue threadingLock_lock_stdout_thread_stderr_thread _terminated)rD workspacer;command environments r5__init__ShellSession.__init__sa$   -6:  ;@;;= ^^% 7;7; rGcJUR(aURR5cgURRURUR UR S9UlURRb.URRbURRc Sn[U5eURRUl SUl [R"5Ul[ R""UR$URRS4SS9Ul[ R""UR$URRS4SS9UlUR&R+5 UR(R+5 g) z|Start the shell subprocess and reader threads. Raises: RuntimeError: If the shell session pipes cannot be initialized. N)rzenvr{z)Failed to initialize shell session pipes.FstdoutT)targetargsdaemonstderr)ropollrkspawnrjrnrlstdinrr RuntimeErrorrpryrqrrrsrtThread_enqueue_streamrwrxstartrDmsgs r5rShellSession.startsD ==T]]//19  **oo!!MM+  MM   '}}##+}}##+=Cs# #mm))  kkm '..''--&&1  (..''--&&1  !!# !!#rGcnURURR5 UR5 g)zRestart the shell process.N)r0rkrBrrCs r5restartShellSession.restarts! $,,223 rGcrUR(dgURR5cGUR(d6URR S5 URR 5 URRUS9cUR5 SUl[R"[ 5 URR#5 SSS5 SUlg![ [4a [RSSS9 Nf=f![Ra UR5 Nf=f!,(df  Nj=f!SUl[R"[ 5 URR#5 SSS5 SUlf!,(df  SUlf=f=f)zStop the shell subprocess.Nzexit z8Failed to write exit command; terminating shell session.Texc_infor4)rorryrpwriteflushBrokenPipeErrorOSErrorLOGGERdebugwait _kill_process subprocessTimeoutExpiredr-r.r/close)rDr4s r5r0ShellSession.stopsG}}  ==    '0@0@  !!(+ !!# !}}!!'!2:""$ $D $$Y/ !!#0 DM$W-  N! (( !     !0/ $D $$Y/ !!#0 DM0/ DMsZ5C,6*DE,$DD$D=:E<D==E E"F63FF6 F3 (F6cUR(aURR5b Sn[U5e[[R "5R 3n[R"5U-nUR UR5 URS5(aUOUS3nURRU5 URRSUS35 URR5 UR%XEU5sSSS5 $![[ 4a UR#U5ssSSS5 $f=f!,(df  g=f)z*Execute a command in the persistent shell.NzShell session is not running. zprintf 'z %s\n' $? )rorr_DONE_MARKER_PREFIXuuiduuid4hextime monotonicrv _drain_queueendswithrprrrr_collect_output_after_exit_collect_output)rDr{r4rmarkerdeadlinepayloads r5executeShellSession.executes}} 2 2 4 @1Cs# #'()9)9(:;>>#g- ZZ    !(!1!1$!7!7gy^G A !!'* !!HVHL"AB !!# '''BZ$W- A66x@@Z AZs1.E4AD#E#!EEEE E!c /nSnSnSnSnSn Sn U[R"5- n U S::aSn GO`URRU S9upU cMDU S:Xa[U R U5(aEU RS5u pURUR55n URXB5 OUS- nU RSS 5nU[U5- nXPRR:aSnMURRbX`RR:aSnGMU S :XaMU R!S 5nUR#S U35 U R%S 5(aUR#S 5 OUR#U 5 GMU (a5[&R)S U5 UR+5 [-SSSUUUUS9$SR/U5n[-UU SUUUUS9$![R a Sn Muf=f)NrFTrr utf-8replacerr [stderr] z?Command timed out after %.2f seconds; restarting shell session.r]r_rarbrcrerf)rrrsgetrqEmpty startswith partition _safe_intstrip_drain_remaining_stderrencodelenrkmax_output_linesmax_output_bytesrstripappendrrwarningrrZjoin)rDrrr4 collectedrerfrbrcr_ra remainingsourcedata_statusencodedstrippedr]s r5rShellSession._collect_outputs "   "" $   4>>#33IA~  #{{yA  |!doof&=&=#~~c2 1 NN6<<>: ,,YA 1 Kkk'95G 3w< 'K\\:::%)" --9,,"?"??%)"!;;t,  9XJ!78==&&$$T*  &Y\  NNQ  LLN)#5#5'' #%11##  q;;   sG..HHc j/nSnSnSnSnSn[[R"5U-U5nU[R"5- n U S::aOURR U S9upU cMAUS- nU RSS 5n U[U 5- nX0RR:aSnMURRbX@RR:aSnMU S :XaMU RS 5n URS U 35 U RS 5(aURS 5 OURU 5 GMSnUR(aURR!5nS R#U5n[%UUSUUUUS9$![ R a Mdf=f)a\Collect output after the shell exited unexpectedly. Called when a `BrokenPipeError` occurs while writing to stdin, indicating the shell process terminated (e.g., due to an 'exit' command). Args: deadline: Absolute time by which collection must complete. Returns: `CommandExecutionResult` with collected output and the process exit code. rFg?TrNrrrrrrrr)minrrrsrrqrrrrkrrrrrrorrrZ)rDrrrerfrbrc drain_timeoutdrain_deadlinerrrrrr_r]s r5r'ShellSession._collect_output_after_exitGs "   "" T^^- =xH&)99IA~ #{{yA | 1 Kkk'95G 3w< 'K\\:::%)" --9,,"?"??%)"!;;t,  9XJ!78==&&$$T*  &EJ!% == **,I#%11##  I;;  sFF21F2cUR(dg[[S5(aq[R"[ 5 [R "[R"URR5[R5 SSS5 g[R"[ 5 URR5 SSS5 g!,(df  g=f!,(df  g=f)Nkillpg) rohasattrosr-r.ProcessLookupErrorrgetpgidpidsignalSIGKILLkillrCs r5rShellSession._kill_processs}}  2x $$%78 "**T]]%6%67H98$$%78 ""$989898sAC3C( C%( C6c[URS5HnURRX#45 M! URRUS45 g)Nr)iterreadlinersput)rDstreamlabellines r5rShellSession._enqueue_streams="-D KKOOUM *.  &rGcrURR5 M![Ra gf=fr,)rs get_nowaitrqrrCs r5rShellSession._drain_queues7  &&(;;  s 66c[[R"5U-U5nU[R"5- nUS::agURR US9upgUbUS:waMGURS5nURSU35 URS5(aURS5 M![ R a gf=f)aDrain any stderr output that arrived concurrently with the done marker. The stdout and stderr reader threads run independently. When a command writes to stderr just before exiting, the stderr output may still be in transit when the done marker arrives on stdout. This method briefly polls the queue to capture such output. Args: collected: The list to append collected stderr lines to. deadline: The original command deadline (used as an upper bound). drain_timeout: Maximum time to wait for additional stderr output. rrNrrr) rrrrsrrqrrrr) rDrrrrrrrrs r5r$ShellSession._drain_remaining_stderrsT^^- =xH&)99IA~ #{{yA |v1{{4(H   y 3 4}}T""  & ;;  sB88CCc[R"[5 [U5sSSS5 $!,(df  g=fr,)r-r. ValueErrorrd)values r5rShellSession._safe_ints&   ,u:- , ,s 0 >) rlrnrvrkrorsrxrprwryrjN) rzrr;rr{tuple[str, ...]r|zMapping[str, str]rIrJrH)r4floatrIrJ)r{r\r4rrIrZ)rr\rrr4rrIrZ)rrrIrZ)rr rr\rIrJ)g?)rz list[str]rrrrrIrJ)rr\rIr^)rKrLrMrNrOr}rrr0rrrrrrr staticmethodrrQrRrGr5r*r*}sN!!$!! ! ' !  !&%$N !4C.U U U  U U nH T %' MQ'"'.3'DI' '>rGcf\rSrSr%SrSrS\S'SrS\S'SrS\S '\ "S S 9SS j5r S r g)_ShellToolInputiz+Input schema for the persistent shell tool.N str | Noner{z bool | Nonerz Annotated[Any, SkipJsonSchema()]runtimeafter)modecURcUR(d Sn[U5eURbUR(a Sn[U5eU$)Nz2Shell tool requires either 'command' or 'restart'.z+Specify only one of 'command' or 'restart'.)r{rrrs r5validate_payload _ShellToolInput.validate_payloadsE <<  FCS/ ! << # ?CS/ ! rGrR)rIr) rKrLrMrNrOr{rPrrrrrQrRrGr5rrsH5GZ'G[/04G -4 '"#rGrc ^\rSrSrSr\rSSSSSS\SSS.SU4Sjjjjr\ SSj5r \ SSj5r \ SSj5r \ SS j5rSS jr\ SS j5rSS jrSS jrSSjrSSjrSSjrS SjrS!SjrSS.S"SjjrSrU=r$)#ShellToolMiddlewareiuMiddleware that registers a persistent shell tool for agents. The middleware exposes a single long-lived shell session. Use the execution policy to match your deployment's security posture: * `HostExecutionPolicy` – full host access; best for trusted environments where the agent already runs inside a container or VM that provides isolation. * `CodexSandboxExecutionPolicy` – reuses the Codex CLI sandbox for additional syscall/filesystem restrictions when the CLI is available. * `DockerExecutionPolicy` – launches a separate Docker container for each agent run, providing harder isolation, optional read-only root filesystems, and user remapping. When no policy is provided the middleware defaults to `HostExecutionPolicy`. N)startup_commandsshutdown_commandsexecution_policyredaction_rulestool_description tool_name shell_commandrc<>^[T T]5 U(a [U5OSTlUTlTR U5TlTRU 5TlUbUTl O[5Tl U=(d Sn [SU 55Tl TRU5TlTRU5TlU=(d [ n [#TR[$U S9SSS.SU4Sjjj5n U TlTR&/Tlg) aInitialize an instance of `ShellToolMiddleware`. Args: workspace_root: Base directory for the shell session. If omitted, a temporary directory is created when the agent starts and removed when it ends. startup_commands: Optional commands executed sequentially after the session starts. shutdown_commands: Optional commands executed before the session shuts down. execution_policy: Execution policy controlling timeouts, output limits, and resource configuration. Defaults to `HostExecutionPolicy` for native execution. redaction_rules: Optional redaction rules to sanitize command output before returning it to the model. !!! warning Redaction rules are applied post execution and do not prevent exfiltration of secrets or sensitive data when using `HostExecutionPolicy`. tool_description: Optional override for the registered shell tool description. tool_name: Name for the registered shell tool. Defaults to `"shell"`. shell_command: Optional shell executable (string) or argument sequence used to launch the persistent session. Defaults to an implementation-defined bash command. env: Optional environment variables to supply to the shell session. Values are coerced to strings before command execution. If omitted, the session inherits the parent process environment. NrRc3@# UHoR5v M g7fr,)resolve).0rules r5 /ShellToolMiddleware.__init__..7sI ',tLLNNus) args_schema descriptionFr{rct>TRUR5nTRUXS.URS9$)Nr) tool_call_id)_get_or_create_resourcesstate_run_shell_toolr)rr{r resourcesrDs r5 shell_tool0ShellToolMiddleware.__init__..shell_tool@sC55gmmDI''#8$11( rG)rz!ToolRuntime[None, ShellToolState]r{rrr`rIToolMessage | str)superr}r_workspace_root _tool_name_normalize_shell_command_shell_command_normalize_envrn_execution_policyrtuple_redaction_rules_normalize_commands_startup_commands_shutdown_commandsDEFAULT_TOOL_DESCRIPTIONr$r _shell_tooltools)rDworkspace_rootrrrrrrr rrulesrr __class__s` r5r}ShellToolMiddleware.__init__s.b 7EtN34#";;MJ //4  '%5D "%8%:D "%2CHI ',I D "&!9!9:J!K"&":":;L"M'B*B doo? T#'! 6       U &&&' rGcPUcg[U[5(aU4$[U5$)NrR) isinstancer\r$)commandss r5r&'ShellToolMiddleware._normalize_commandsQs,   h $ $; XrGc|Ucg[U[5(aU4O [U5nU(d Sn[U5eU$)N)z /bin/bashz1Shell command must contain at least one argument.)r1r\r$r)r  normalizedrs r5r ,ShellToolMiddleware._normalize_shell_command[sA  !)3M3)G)Gm%US`Ma ECS/ !rGcUcg0nUR5H4up#[U[5(d Sn[U5e[U5X'M6 U$)Nz+Environment variable names must be strings.)itemsr1r\ TypeError)rr5keyrrs r5r""ShellToolMiddleware._normalize_envgsP ;%' ))+JCc3''Cn$!%jJO & rGc,URU5nSU0$)zStart the shell session and run startup commands. Args: state: The current agent state. runtime: The runtime context. Returns: Shell session resources to be stored in the agent state. rV)rrDrrrs r5 before_agent ShellToolMiddleware.before_agentss11%8 )955rGcL# [SURX5IShvN $N7f)zAsync start the shell session and run startup commands. Args: state: The current agent state. runtime: The runtime context. Returns: Shell session resources to be stored in the agent state. N)r r>rDrrs r5 abefore_agent!ShellToolMiddleware.abefore_agents"%T4+<+r=s r5 after_agentShellToolMiddleware.after_agentsVII78 )%677  "  ' ' (9(9 :    !I   !s AA'c,# URX5$7f)zJAsync run shutdown commands and release resources when an agent completes.)rFrAs r5 aafter_agent ShellToolMiddleware.aafter_agents//scURS5n[U[5(aU$UR5nU[ SU5S'U$)aGet existing resources from state or create new ones if they don't exist. This method enables resumability by checking if resources already exist in the state (e.g., after an interrupt), and only creating new resources if they're not present. Args: state: The agent state which may contain shell session resources. Returns: Session resources, either retrieved from state or newly created. rVdict[str, Any])rr1r8_create_resourcesr )rDrr new_resourcess r5r,ShellToolMiddleware._get_or_create_resourcessNII78 i!2 3 3 ..0 CP u%&?@rGc^URnSnUc.[R"[S9n[ UR 5nOUnUR SSS9 [UURURUR=(d 05nUR5 [RSU5 URU5 [)XBURS9$![aO [R!S5 UR#URR$5 UbUR'5 ef=f)N)prefixT)parentsexist_okzStarted shell session in %sz5Starting shell session failed; cleaning up resources.)r2r3r;)rtempfileTemporaryDirectoryrrnamemkdirr*r#r!rnrrinfo_run_startup_commands BaseException exceptionr0rBr1r8)rDrzr3workspace_pathr2s r5rM%ShellToolMiddleware._create_resourcess(( ;?  119JKG!',,/N&N   =   " "       #    MMO KK5~ F  & &w /!$J`J`aa    T U LL//CC D"!   s 7CAD,cUR(dgURHdnURX RRS9nUR(dUR S;dMISUSUR 3n[ U5e g)NrNrzStartup command 'z' failed with exit code )r'rr#startup_timeoutrar_r)rDr2r{resultrs r5rY)ShellToolMiddleware._run_startup_commandssu%% --G__W6L6L6\6\_]FF$4$4I$E)'2J6K[K[J\]"3'' .rGc UR(dgURHnURX RRS9nUR(a[ R SU5 MPURS;a"[ R SX#R5 MM g![[[4a n[ R SX$SS9 SnAMSnAff=f)Nrz Shutdown command '%s' timed out.r_z%Shutdown command '%s' exited with %s.z'Failed to run shutdown command '%s': %sTr) r(rr#command_timeoutrarrr_rrr)rDr2r{raexcs r5rE*ShellToolMiddleware._run_shutdown_commandss&& ..G  :P:P:`:`a##NN#EwO%%Y6NN?JZJZ7 /!-9 =wVZ sA B&/0B&&C;CCc0nUnURHJnURU5up5U(dMURUR/5R U5 ML X24$)z3Apply configured redaction rules to command output.)r%apply setdefaultpii_typeextend)rDcontentmatches_by_typeupdatedrmatchess r5_apply_redactions%ShellToolMiddleware._apply_redactionss\57))D#zz'2 Gw**4=="=DDWM*''rGc LURnURS5(aI[RS5 UR 5 UR U5 SnURXsSS9$URS5nU(a[U[5(d S n[U5e[RS U5 URXRRS 9n U R(a2URRn S U S S3nURUUSSSS.S9$UR!U R"5upU =(d Sn U R.(a7U R15SURR2SU R4S3n U R6(aNURR8b7U R15SURR8SU R:S3n U R*S;a"U R15SU R*3n SnOSnSU R*U R.U R6U R4U R:U S.nURU UUUS9$![ a(n[RS5 Sn[U5UeSnAff=f![$apn [R'SU R(5 SU R(S3nURUUSSU R*U R(U R,0S.S9sSn A $Sn A ff=f) Nrz$Restarting shell session on request.z=Restarting shell session failed; session remains unavailable.z Failed to restart shell session.zShell session restarted.success)rr{zDShell tool expects a 'command' string when restart is not requested.zExecuting shell command: %srzError: Command timed out after z.1fz seconds.errorT)rar_)rartifactz+Blocking command output due to detected %s.zOutput blocked: detected .F)rar_roz z ... Output truncated at z lines (observed z).z bytes (observed r_z Exit code: )rar_rbrcrerfredaction_matches)r2rrrXrrYrZr[r_format_tool_messager1r\rr#rdrarpr]rrrjr_rorbrrrercrrf)rDrrrr2errrmessager{ratimeout_secondssanitized_outputrort final_statusrus r5r#ShellToolMiddleware._run_shell_tools6## ;;y ! ! KK> ? 2!**73 1G,,W9,U U++i(j#66XC$ $ 17;2H2H2X2XY   "44DDO77LIVG,,!%!% -  (,(>(>v}}(M % ,<}  $ $#**,-.++/+A+A+R+R*ST#//04   $ $)?)?)P)P)\#**,-.++/+A+A+R+R*ST#//04    9 ,"2"9"9";! -   s6!I4#J)4 J&>#J!!J&) L#3A%LL#L#)rucPU=(d 0nUcU$[UUURUUS9$)N)rlrrVrru)r r)rDrlrrrus r5rx(ShellToolMiddleware._format_tool_messageXs8>r  N%   rG) rnr#r%r!r*r(r'rrr+r,)r,zstr | Path | Noner(tuple[str, ...] | list[str] | str | NonerrrzBaseExecutionPolicy | Nonerz6tuple[RedactionRule, ...] | list[RedactionRule] | Nonerrrr\r Sequence[str] | str | NonerMapping[str, Any] | NonerIrJ)r2rrIr)r rrIr)rrrIzdict[str, str] | None)rShellToolState[ResponseT]rRuntime[ContextT]rIdict[str, Any] | None)rrrrrIrJ)rrrIr8)rIr8)r2r*rIrJ)rlr\rIz%tuple[str, dict[str, list[PIIMatch]]])rr8rrLrrrIr ) rlr\rrrzLiteral['success', 'error']rurrIr)rKrLrMrNrOrT state_schemaSHELL_TOOL_NAMEr}rr&r r"rr>rBrFrIrrMrYrErprrxrQ __classcell__)r.s@r5rrs "L-1S(FJFJ7;RV'+(48(,S()S(C S( D S( 5 S(PS(%S(S(2S(&S( S(S(j:  1       6. 69J 6  6 6 N. N9J N  N " "0.09J0 0 *b:("(] $]  ] ! ] ] J+/   ! ,  (     rGr)rrrrr)r2r*r3r:r4rrIrJ)PrO __future__rr-loggingrrqrrrTrtrrr@ dataclassesrrpathlibrtypingrrr r r langchain_core.messagesr langchain_core.runnablesr langchain_core.tools.baser"langgraph.channels.untracked_valuerpydanticrrpydantic.json_schemartyping_extensionsrr&langchain.agents.middleware._executionrrrrr&langchain.agents.middleware._redactionrrrr!langchain.agents.middleware.typesrrr r!r"langchain.toolsr#r$collections.abcr%r&langgraph.runtimer' getLoggerrKrrr)rr6r8rTrZr*rr__all__rRrGr5rsP@"  (??/43=//3 .1)   8 $)Q $KV[      $ Z *  $   NNb i6@ /.*CXy*XY@ F  rG