߲j<dZddlmZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z e jdk(Z dadZdZddZdd Z d dd Zdd ZGd d ej*j,ej*j.ZddZddZddZdddZddZddZeeeeey)uProcess bootstrap for Hermes entry points: Windows UTF-8 stdio, import-path hardening, durable lazy-install target, and dual-stack (Happy Eyeballs) connects. Windows binds stdio to the console code page (cp1252), so ``print("café")`` raises ``UnicodeEncodeError``, and Python children inherit the same default unless ``PYTHONUTF8``/``PYTHONIOENCODING`` are set. Import this module first in every entry point (``hermes``, ``hermes-agent``, ``hermes-acp``, ``gateway.run``, ``batch_runner``, ``cron/scheduler``). It does NOT re-exec with ``-X utf8``: ``open()`` in the current process still needs an explicit ``encoding="utf-8"`` (ruff ``PLW1514``). POSIX is left alone deliberately — users' ``LANG``/``LC_*`` choices are respected. Stdlib only: entry points import this before ``harden_import_path()`` runs, so nothing here may pull in a Hermes package that a project-local directory could shadow. ) annotationsNwin32Fg?zurllib3.util.connectioncpi}t}|D]I}|\}}}}}||||f|vs|j||||f|j|gj|Kg} t |j r@| j d|j Dt |j r@| S)z[Round-robin the resolved address families (deduped), preserving resolver order within each.c3DK|]}|s|jdyw)rN)pop).0queues 5/home/ubuntu/.hermes/hermes-agent/hermes_bootstrap.py z(_interleave_addrinfos..,sNE599Q<Ns  )setadd setdefaultappendanyvaluesextend) addrinfosqueuesseenaddrinfofamilysocktypeproto _canonnamesockaddr interleaveds r _interleave_addrinfosr!s%'FuD;8@5%X HeX .d : HHfhx8 9   fb ) 0 0 : ; "K fmmo NV]]_NN fmmo  cF |j|y#t$rYywxYwN) unregister Exception)selectorsocks r _quiet_unregisterr%0s' D!    s   c |\}}ttj||tj}|st d|t j td}d}|dn tjt|dz} tj} t|} dtjtjtjtj t#tddhfd} | sr`tj} | | | k\rtj$d | r*| | k\r% | | j'd}|n | t(z} | dntd| | z }| rtd| | z }||n t+||}j-|D]\}}|j.}|j1tj2tj4}j7|j9||dk(r|}n1|j;t |t=j>|}|n s| rtj} | r\r`|||t d |d |tA|j9||jC||xsd D]}|jD||jEtjFtjHd |D]}tA||j; j;S#t$r}|}s| } Yd}~=d}~wwxYw#D]}tA||j; j;wxYw)zRFC 8305-style connect: staggered non-blocking attempts across families. ``socket.create_connection`` tries addresses serially, so broken-but- advertised IPv6 can burn the whole timeout per AAAA record before IPv4. )typez&getaddrinfo returned no addresses for NgrWSAEWOULDBLOCKi3'c6|\}}}}}tj|||} Ltj d d||}|std|d d|j|dd|j d|j |}|dt jfvr|S| vrt|tj| j|tj j|y#t$r|jwxYw)Nr)rr'zgetaddrinfo returned no local z address for F)socket getaddrinfoOSErrorbind setblocking connect_exerrnoEISCONNosstrerrorregister selectors EVENT_WRITEr r"close) rrrrrr candidate local_infosresultactive in_progressr#source_addresss r start_attemptz8_happy_eyeballs_create_connection..start_attemptLs 8@5%XMM&(E:  )$001BNSTDU^dkst "!$B6(-XfghXiWj"kll{1~a01  ! !% ())(3F!U]]++  [(fbkk&&9::   i)>)> ? JJy !  OO   sBC=(AC==Dz timed outzCould not connect to :r*)%rr,r- SOCK_STREAMr.r7DefaultSelectorr time monotonicmaxlistr2 EINPROGRESS EWOULDBLOCKEALREADYEINTRgetattrtimeoutr_HAPPY_EYEBALLS_DELAY_SECONDSminselectfileobj getsockopt SOL_SOCKETSO_ERRORr!discardr9r4r5r% settimeout setsockopt IPPROTO_TCP TCP_NODELAY)addressrNr?socket_optionshostportrwinner last_errordeadline next_launchpendingr@nowexc wait_timeout until_launchkey_maskr: error_codeoptionr=r>r#s ` @@@r !_happy_eyeballs_create_connectionrl7sHJD$%f&8&8t&J\J\&]^I >tfEFF((*H!$F F!%JtDNN,:F %!$AA #+#34S(S.9QL"3 c(9: /;/C|\[gIh &ool; J UKK &11&2C2CV__U ##I.y)?&F!$ZZ1HI  J!g"nn. AD > * 6* jGF[\`[aabcgbhDiM M  M 5Nc|t|jddry|jddffd }d|_||_y)zYPoint ``urllib3.util.connection.create_connection`` (its own serial walker) at the racer._hermes_happy_eyeballsFNc p|urtjn|}t|||t|xsdS)NrB)r?r\)r,getdefaulttimeoutrltuple)r[rNr?r\ effectiveurllib3_sentinels r _urllib3_racerz8_patch_urllib3_create_connection.._urllib3_racersB29=M2MF,,.SZ 1 Y~eTbThfhNik krT)rMcreate_connection_DEFAULT_TIMEOUTrn)modulertrss @r _patch_urllib3_create_connectionrxsEv'')A5I..(8^bk-1N)-Frc$eZdZdZddZdZdZy)_Urllib3ConnectionPatcherzOne-shot import hook: patch urllib3's connect walker the moment the module loads. Importing urllib3 eagerly costs ~50 ms on every CLI start, and ``hermes`` / the TUI gateway never load it unless something actually calls ``requests``. Nc|tk7ry|tjvrtjj|tj j |}| |jy|j|_||_|Sr ) _URLLIB3_CONNECTION_MODULEsys meta_pathremove importlibutil find_specloader_inner)selffullnamepathtargetspecs r rz#_Urllib3ConnectionPatcher.find_specsh 1 1 3== MM  &~~''1 <4;;.kk   rc8|jj|Sr )r create_module)rrs r rz'_Urllib3ConnectionPatcher.create_modules{{((..rcP|jj|t|yr )r exec_modulerx)rrws r rz%_Urllib3ConnectionPatcher.exec_modules '(0rr )__name__ __module__ __qualname____doc__rrrrBrr rzrzs /1rrzcttjddrytjdfddd}d|_|t_t j jt}| t|ytdt jDs)t jjdtyy) uRace IPv6/IPv4 for every sync TCP connect in the process (RFC 8305, #114265). The startup path does not build its HTTP clients in one place: the model catalog fetch goes through ``requests``/``urllib3``, sync LLM and OAuth clients through httpcore, plugins through ``urllib``/``http.client``. All of them funnel their TCP connect into ``socket.create_connection`` (``http.client`` re-reads it per connection; httpcore looks it up at call time) or into urllib3's own serial copy in ``urllib3.util.connection``. The stock implementations walk the ``getaddrinfo`` results serially — on a network whose advertised IPv6 route is blackholed, each AAAA record burns the full connect timeout before IPv4 answers. Idempotent, best-effort. rnFN) all_errorscn|tjurtjn|}t|||S)N)r?)r,_GLOBAL_DEFAULT_TIMEOUTrprl)r[rNr?rrrs r _socket_racerz._socket_racers43:V=[=[2[F,,.ah 1)TbccrTc3<K|]}t|tywr ) isinstancerz)rfinders r r z8install_happy_eyeballs_socket_connect..s[6F$=>[sr)rMr,rurrnr}modulesgetr|rxrr~insertrz)rurllib3_connections r %install_happy_eyeballs_socket_connectrsv'')A5I'-'E'EVZdjod,0M(,F)CD%();< [S]][ [ Q 9 ;<\rc.trtrytjj ddtjj dddD],}t t t |ddd}|" |dd .d ay #ttf$rYCwxYw) zPApply the Windows UTF-8 bootstrap once; True only when it was applied this call.F PYTHONUTF81PYTHONIOENCODINGzutf-8)stdoutstderrstdinN reconfigurereplace)encodingerrorsT) _IS_WINDOWS_bootstrap_appliedr4environrrMr}r. ValueError) stream_namers r apply_windows_utf8_bootstraprs ,JJ,,JJ,g65 gc;=}dS      ;   $   s3 BBBcntsy ddl}t|dr dd}||_yy#t$rYywxYw)uStub ``platform._syscmd_ver`` on Windows — decode-crash + console-flash guard. ``platform.win32_ver()`` (reached via ``platform.platform()``, which the OpenAI SDK calls) shells out ``cmd /c ver`` with ``shell=True`` and no ``CREATE_NO_WINDOW``: a windowless parent (pythonw gateway, slash/kanban workers) flashes a console per call, and Python 3.11.0/3.11.1 (no ``encoding="locale"`` fix) strict-utf-8-decodes the OEM code page output under PEP 540 mode and raises (#69413). Returning the inputs makes ``win32_ver()`` fall back to ``sys.getwindowsversion()`` — same data, no subprocess. Mirrors ``hermes_cli._subprocess_compat.suppress_platform_ver_console`` for callers that never import ``hermes_cli.main``; double application is harmless. Nr _syscmd_verc |||fSr rB)systemreleaseversionsupported_platformss r _quiet_syscmd_verz8suppress_platform_ver_console.._quiet_syscmd_versw//r)rr)rwin16dos)rplatformhasattrrr")rrs r suppress_platform_ver_consolersJ    8] +AC6O 0$5H ,    s ( 44cl|xsatjjdxs@tjj tjj t }tjDcgc] }|dvs| c}tjddtjj |}tjDcgc]'}tjj ||k7s&|)c}tjddtjjd|ycc}wcc}w)aStop a package in the current directory from shadowing Hermes modules. Hermes ships top-level modules with common names (``utils``, ``proxy``, ``ui``); a project with its own ``utils/`` launched from its directory would win the import. The cwd reaches ``sys.path`` as ``""``/``"."`` (script/``-m`` launches) AND as an absolute path (venv activation, PYTHONPATH), so both are handled: relative forms are dropped and the Hermes root is *relocated* to the front, not merely inserted when absent. ``src_root`` defaults to this module's directory (the repo root for every shipped entry point), so no spawner env var is required. HERMES_PYTHON_SRC_ROOT)r.Nr) r4rrrdirnameabspath__file__r}r)src_rootrootproot_abss r harden_import_pathrs  rzz~~&>? 277?? !DD"hh=!9*<1=CHHQKwwt$H!hhI"''//!*<*H1ICHHQKHHOOAt >Js8 D,D, 'D13D1ctjjddjsy ddlm}|j y#t$rYywxYw)aPut the durable lazy-install dir (``HERMES_LAZY_INSTALL_TARGET``) on ``sys.path``. Immutable Docker images seal the venv and redirect lazy installs to the data volume; packages installed there on a previous run must be importable before any backend imports its SDK. Appends to the END of ``sys.path`` so the core venv always wins name collisions (see ``tools.lazy_deps``). Never raises; unset target is a no-op. HERMES_LAZY_INSTALL_TARGETrNr lazy_deps)r4rrstriptoolsractivate_durable_lazy_targetr"rs r rr1sI ::>>6 ; A A C #..0    sA AAc> ddlm}|y#t$rYywxYw)aPoint ``TMPDIR``/``TMP``/``TEMP`` at ``HERMES_HOME/cache/scratch`` unless the user set them. System temp is tmpfs on most Linux hosts and containers; Hermes' browser profiles, PTY probes and every ``tempfile`` default a child script makes would eat RAM there. Runs at import so every entry point and every child they spawn inherits it; ``hermes_cli.main`` re-runs it after ``--profile`` re-homes the process. Never raises. r)export_scratch_tmp_envN)hermes_constantsrr")_exports r rrBs! F    s  )r list[tuple]returnr)rNone)NrB)r[ztuple[str, int]rNz float | Noner?ztuple[str, int] | None)rboolr )rz str | Nonerr)r __future__rr2 importlib.abcrimportlib.utilr4r7r,r}rErrrrOr|rr%rlrxabcMetaPathFinderLoaderrzrrrrrrrBrr rs #   llg%  $6  eg[6L[|."1 < R>R16=D: 6, "  %'r