+ iHj1P@Rt^RIHt^RIt^RIt^RIHt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIHt^RIHtHtHtHtHt]P,!]4t.R9OtR:t] P6R8Xd]MR tR tR t!R R]4t !R R]4t!RRlt"]!RRR7!RR44t#RRRR/RRllt$RRlt%RRlt&RRlt'RR/R R!llt(R"R#lt)R$R%lt*R&R'lt+R(R)lt,R*R+R,RR-RR.R/R/R0llt-R*R+R1RR.R/R2R3llt.]R4R5l4t/R6R/R7R8llt0R#);u]Unified deadline layer — one bounded-execution primitive, one timeout resolver (#85125). * :func:`resolve_timeout` — ``timeouts:`` in config.yaml > legacy env var > default. * :func:`clamp_timeout` — huge timeouts overflow ``time_t`` in ``Lock.acquire`` / ``Thread.join`` on macOS (#83220), so every timeout is capped. * :func:`run_bounded_async` / :func:`run_bounded_sync` — wall-clock deadlines driven by a daemon ``threading.Timer`` / worker thread, so a blocked event loop cannot disable them. * :func:`kill_process_tree` — portable whole-tree termination. Invariants: operation exceptions propagate unchanged (only the *timeout* outcome is reified as :class:`BoundedResult`); a timeout here is OUR deadline, not the provider's (classify :class:`DeadlineExpired` distinctly from transport timeouts); ``None`` / non-positive means unbounded. ) annotationsN)contextmanager) dataclass)Any AwaitableCallableOptionalProtocol BoundedResultDeadlineExpiredwin32g8~Ag@g?c2a]tRt^GtRtRV3RlltRtV;t#)r zSA deadline enforced by this layer expired (Hermes's own bound, not the provider's).c V^8dQhRRRR/#)labelstr timeout_sfloat)formats"3/home/ubuntu/.hermes/hermes-agent/agent/deadline.py __annotate__DeadlineExpired.__annotate__Js##c#e#c L<\SV`RVR RV 24WnW nR#)zdeadline expired after .1fzs: N)super__init__rr)selfrr __class__s&&&rrDeadlineExpired.__init__Js* 29S/UGLM "rrr)__name__ __module__ __qualname____firstlineno____doc__r__static_attributes__ __classcell__)rs@rr r Gs]##rc2]tRt^PtRtRRltRRltRtR#)SuspectableBackenduvA stateful backend (MCP connection, browser session, LSP client) ``run_bounded_*`` flags via ``mark_suspect`` on timeout so the owner can health-check/recycle it before reuse. ``mark_suspect`` MUST be cheap, non-blocking, and must not acquire locks the guarded operation may hold — it runs inline on the event loop / caller's thread while the wedged worker is still alive.c V^8dQhRRRR/#)rreasonrreturnNoner)rs"rrSuspectableBackend.__annotate__Vs443444rc R#Nr)rr,s&&r mark_suspectSuspectableBackend.mark_suspectVsrcV^8dQhRR/#)rr-boolr)rs"rrr/Xs )))rc R#r1r)rs&rensure_healthy!SuspectableBackend.ensure_healthyXscrrN)r"r#r$r%r&r2r7r'rrrr*r*PsZ 5))rr*c(V^8dQhRRRRRRRR/#) rbackend object | Nonerrrrr-r.r)rs"rrr[s/ D D= D D DSW DrcVfR#\VRR4p\V4'dV!V RVR R24R#R# \d\P RRR7R#i;i) zLBest-effort ``mark_suspect``; never raises, non-adopting backends tolerated.Nr2z timed out after rszdeadline mark_suspect failedTexc_info)getattrcallable Exceptionloggerdebug)r:rrmarks&&& r_mark_backend_suspectrF[sfDw5 D>> E7+Ic?!< =  D 3d CDs-9"AAT)frozenkw_onlycN]tRt^gt$RtR]R&R]R&R]R&R]R &R ]R &R tR #)r zMOutcome of a bounded operation; operation exceptions are never captured here.r5 timed_outrvaluer elapsed_sOptional[float]rrrrN)r"r#r$r%r&__annotations__r'rrrr r gs WO J JrrKrJFc 0V^8dQhRRRRRRRRR R R R /#) rstartrrrMrrrKrrJr5r-r r)rs"rrrrs<5_SCcguBrcR\WC\P!4V, WR7#))rJrKrLrr)r time monotonic)rPrrrKrJs&&&$$r_resultrTrs# DNN4Du4LXa rc V^8dQhRRRR/#)rtimeoutrMr-r)rs"rrrxs B B? B BrcVfR#\V4pY8wd\P R4R#T^8:dR#\ T\ 4# \\3d\P RT4R#i;i)zXNormalize a timeout: None/non-positive/non-numeric/NaN -> None (unbounded), else capped.Nz)hermes_cli.configraget isinstancer_rBrCrD)rasections r_timeouts_sectionrgsY:&(,,Z8$Wd33w;;  Cd S s388$AAc$V^8dQhRRRRRR/#)rrfr_keyrr-rr)rs"rrrs!DssrcTpVPR4F*p\V\4'dW29dR#W#,pK, V#)z=Walk ``a.b.c`` through nested dicts; return None when absent..N)splitrer_)rfrinodeparts&& r_lookup_dottedros<D #$%%)9z Krenv_varc(V^8dQhRRRRRRRR/#)rrirdefaultrMrpz Optional[str]r-r)rs"rrrs)"""/"M"]l"rc\\4V4pVeK\V\4'g\ V4pWD8Xd \ V4#\PRW4V'dC\P!VR4P4pV'd\ \ V44#\ V4# \ \3dL~i;i \d\PRY%4LEi;i)zResolve a timeout (seconds): dotted ``timeouts.`` > ``env_var`` > ``default``; the winner goes through :func:`clamp_timeout`, invalid config/env values fall through with a warning.z6timeouts.%s: invalid value %r in config.yaml; ignoringzinvalid %s=%r; ignoring) rorgrer5rr]rXrYrCrZosgetenvstrip)rirrrprawrKenv_raws&$$ rresolve_timeoutrzs *,c 2C #t$$ c >(//" OQTZ))GR(..0  L$U7^44  !!z*   L8'K Ls#B8C8C  C !C32C3c V^8dQhRRRR/#rtaskzasyncio.Future[Any]r-r.r)rs"rrrs  0 T rc|VP4'gVP4R#R# \dR#i;i)zGObserve an abandoned task's outcome so it never logs 'never retrieved'.N) cancelled exceptionrBr}s&r_consume_abandonedrs5 ~~ NN     s,, ;;c V^8dQhRRRR/#r|r)rs"rrrs//&/4/rcPVP4VP\4R#)zXCancel ``task`` and never await it; its outcome is consumed so it stays unobserved-safe.N)canceladd_done_callbackrrs&r_abandonrsKKM-.rc V^8dQhRRRR/#)r on_abandonzCallable[[], Awaitable[Any]]r-r.r)rs"rrrsGG+GGDGrc"V!4GRjxL R#L \d\PRRR7R#i;i5i)zARun abandonment cleanup fire-and-forget (its failures swallowed).Nzdeadline abandon-cleanup failedTr>)rBrCrD)rs&r_run_abandon_cleanuprs7Gl G 6 FGs,A A"=A=Ac$V^8dQhRRRRRR/#)rrrrrr-r.r)rs"rrrs& J J# J% JD Jrc\PRW\4\P!RR7R# \ d\P RRR7R#i;i)u[deadline] %r deadline (%.0fs) expired but the event loop has not processed the expiry after a further %.0fs — the loop thread appears BLOCKED in a synchronous call, which is why no asyncio timeout can fire. Dumping all thread stacks to stderr to identify the blocking frame.T) all_threadsz"faulthandler traceback dump failedr>N)rCrZ_LOOP_BLOCKED_DUMP_GRACE_S faulthandlerdump_tracebackrBrDr!s&&r_dump_blocked_loop_diagnosticsrsQ NN  4 J##5 J 9D IJs6"AAr operationrdump_on_blocked_loopr:c4V^8dQhRRRRRRRRR R R R R R/#)r awaitablezAwaitable[Any]rVrMrrrz&Optional[Callable[[], Awaitable[Any]]]rr5r:r;r-r r)rs"rrrsN?$?$?$ ?$  ?$ 7 ?$  ?$?$?$rcraa aaaa"\V4o\P!4pSf\TRSVGRjxL R7#\P !V4p\P !4oSP4o\P!4oRVV3Rllo RVVV3Rllp\P!SV V3Rl4.p V'd2V P\P!S\,V44V Fp RV n V P4K \P!VS0\P R 7GRjxL wrY{9dgSP'4'gSP)4\TSSTGRjxL R7T Fp T P)4K SP+4#\%T4Te3\P !\-T44P/\04\3TSS4\4P7R SS4\TSSRR 7T Fp T P)4K SP+4#EL"EL \P"d\%T4hi;iL T Fp T P)4K SP+4i;i5i) uSAwait ``awaitable`` under a wall-clock deadline independent of loop timers. Operation exceptions (incl. ``CancelledError`` from a caller cancelling *us*) propagate unchanged. On timeout the task is cancelled and **abandoned** (never awaited — cancellation-shielded scopes are exactly the paths that wedge); ``on_abandon`` runs detached.NrKcV^8dQhRR/#rr-r.r)rs"rr'run_bounded_async..__annotate__s&&4&rcz<SP4SP4'gSPR4R#R#r1)setdone set_result)deadlineloop_processed_expirysr _mark_expired(run_bounded_async.._mark_expireds-!!#}}    %rcV^8dQhRR/#rr)rs"rrrs==T=rcP<SP4'g\SS4R#R#r1)is_setr)rrrsr_watchdog_check*run_bounded_async.._watchdog_checks!$++-- *5) <.rc&<SPS4#r1)call_soon_threadsafe)rloopsr#run_bounded_async.. s1J1J=1YrT) return_whenz3[deadline] %r timed out after %.1fs; task abandonedrJ)r]rRrSrTasyncio ensure_futureget_running_loop create_future threadingEventTimerappendrdaemonrPwaitFIRST_COMPLETEDCancelledErrorrrrrrrrrFrCrZ)rrVrrrr:rPr}rtimerstr_rrrrrs&&d$$$ @@@@@rrun_bounded_asyncrs!g&I NN EudEyAA   +D  # # %D%)%7%7%9H%OO-&& ==ooi)YZ [F iooi2L&Lo^_   $ #LL$)9wG^G^__GD <==??!5)U*EA HHJ !!#   !  ! !"6z"B C U UVh i gui8LeU^_ui$?A HHJ !!#]2A0`%%  TN   ;EA HHJ !!#sr2J7IBJ7AJ7!+I" I I"J /J J J *J7?A3J 2+J7I"""JJ +J44J7 on_timeoutc 0V^8dQhRRRRRRRRR R R R /#) rfnzCallable[[], Any]rVrMrrrzOptional[Callable[[], None]]r:r;r-r r)rs"rrr0sL6D6D6D 6D  6D - 6D  6D6DrcRaa a a \V4p\P!4pVf\VRVS!4R7#/o \P !4o \ P!4o RV V V V3Rllp\P!VRV 2RR7P4We,pS P4'gFV\P!4, p V ^8:dM!S P\\V 44K[S P4'g=\PRW%4\!WBV4Ve V!4\WeVRR 7#R S 9d S R ,h\WeVS P'R 4R7# \"d\P%R RR 7L_i;i)a|Run ``fn`` in a daemon worker thread under a wall-clock deadline; exceptions re-raise in the caller. On expiry the worker is **abandoned** (every timeout leaks one daemon thread, so do NOT use per-item in hot loops) and ``on_timeout`` runs best-effort in the caller's thread. The worker runs under ``contextvars.copy_context()`` so secret scope / session id survive. See #94285. NrcV^8dQhRR/#rr)rs"rr&run_bounded_sync..__annotate__HsTrc<SPS4SR&SP4R# \dpTSR&Rp?L'Rp?ii;i SP4i;i)rKexcN)run BaseExceptionr)rboxctxrrs r_worker!run_bounded_sync.._workerHsK 772;CL HHJ CJ  HHJs#) A>AAAAz deadline-T)targetnamerz5[deadline] %r timed out after %.1fs; worker abandonedz#deadline on_timeout callback failedr>rrrK)r]rRrSrTrr contextvars copy_contextThreadrPrrr[_BOUNDED_SYNC_WAIT_SLICE_SrCrZrFrBrDrd) rrVrrr:rrPrr remainingrrrs f&$$$ @@@rrun_bounded_syncr0sYg&I NN EudE66C ?? D  " " $CGIeW*=dKQQS Hkkmmt~~// >  #0)<= ;;==NPUa gi8  ! S u$?? |%j 5U#'''2B CC  S BT R Ss?F"F&%F&c V^8dQhRRRR/#)rpidint hard_killr5r)rs"rrrms6h6h6h46hrc #".p.p^RIpVPV4pVPRR7pV'EdV.p\P!40pVUu/uFqP VbK p p\ P!4R,p V'EdVEFpVP V9dKVPVP 4\ P!4V 8d \R4hVP4p WPVP39dKWP8wd"VP4VPV4VP4VP8wd>\ P!4V 8d \R4h\ P !R4K\EK VPRR7FpV P%VP V4K! \'V P)44pVUu.uFqP V9gKVNK ppEKTxTFpTP14K R#uupi TP"dEKi;iuupi \*d\,P/RTRR 7Lhi;i \*d\,P/R RR 7Ki;i TF=pTP14K \*d\,P/R RR 7K;i;i i;i5i) aStop each hard-kill target before discovering its children: a running parent can fork after psutil builds its PID map and escape the final signal. Resume anything we stopped if signalling fails. Graceful signals never stop their recipients, since their handlers must remain able to run. NT) recursiveg?z2process tree did not stop before snapshot deadlinez-process did not stop before snapshot deadlinegMbP?z1kill_process_tree: snapshot incomplete for pid %sr>z8kill_process_tree: target already gone or resume refused)psutilProcesschildrenrugetpidrrRrSadd TimeoutErrorstatus STATUS_ZOMBIE STATUS_DEADSTATUS_STOPPEDsuspendrsleep NoSuchProcess setdefaultlistvaluesrBrCrDresume) rr descendantsstoppedrrootpendingseenprocessknown stop_deadliners &$ r_process_tree_snapshotrlsKG.h& b >>#&D--$-7Ky& }=HI['g-[I $ 03 6 g#*";;$.$->>+}<"./c"dd %%,^^%5F%*>*>@R@R)SS (%)>)>> ' 1 'w 7").."2f6K6K"K#'>>#3}#D*67f*g$g $ 5 1#L$+*$(==4=#@((g>$A"&u||~"6K6A]k7[[X\E\wwkG]G G h EJ( &33%$%^ b LLLc\`L a b h Wbf g hG h  h Wbf g hsK=A I#I+&I#AI#,,II#B I'AI#>III# J5$K=*J :K=I#II#II###J J5J  J5 "J2.K=1J22K=5K:<K K:"K4 0K:3K4 4K::K=sigc$V^8dQhRRRRRR/#)rrrrz Optional[int]r-r5r)rs"rrrs!;;3; ;;rc  \PR8XdW^RIHpV!4p\ P !RRRR\V4.\ PR^RVR 7pVP^8H#^R I pVf VPp\\V4WP8HR 7;_uu_4pRp\!V4F/pVP#4'dVP%V4RpK/K1 \&P(!V4p V eW8Xd\&P0!W4M\&P2!W4RpVuuR R R 4# \d^pEL4i;i \d\PR TRR 7R#i;i \dKi;i \*\,\.3dR p Li;i \*dL\,\.3d\PRTRR 7Li;i +'giR #;i)aTerminate ``pid`` and all its descendants, portably; True when anything was signalled. Windows: ``taskkill /F /T`` (``sig`` ignored). POSIX: snapshot descendants via psutil; for SIGKILL, stop and rescan the live tree so a concurrent fork cannot escape a stale snapshot. Signal identity-checked descendants before their parent, then its group when ``pid`` leads one. Stopping is best-effort with a bounded wait; unavailable psutil still leaves process-group cleanup. Other signals do not suspend recipients. ``sig`` defaults to ``SIGKILL``.r )windows_hide_flagstaskkillz/Fz/Tz/PIDTF)stdincapture_outputrVcheck creationflagsz-kill_process_tree: taskkill failed for pid %sr>N)rz+kill_process_tree: signal failed for pid %s)sysplatformhermes_cli._subprocess_compatrrB subprocessrrDEVNULL returncoderCrDsignalSIGKILLrrreversed is_running send_signalrugetpgidProcessLookupErrorPermissionErrorOSErrorkillpgkill) rrrrproc_signalr signalledchildpgids &$ rkill_process_treers ||w  H.0M >>T4S: ((rQVfsD ??a' '  {oo CC??4J K K{ k*E ##%%%%c* $I&+ ::c?D \DK $$!I ; L K# M   LLH#X\L ] "   #OW= D "  ) \ LLFVZL [ \5 L K Ks EAE*G1<)F%G1,F9F6<G1 EE#FF F G1F G1F30G12F33G16 G.G1G.G.+G1-G..G11 H )r\r r r]rrzrrgGMbPA)1r& __future__rrr contextlibrrloggingrurrrrR dataclassesrtypingrrrrr getLoggerr"rC__all___WINDOWS_MAX_WAIT_Srr\rrrr r*rFr rTr]rgrorzrrrrrrrrrrrrs #%   !??   8 $ 03<<72  ! !#l#** D $%&RVjo B$"TX"N / G J?$ ?$ :> ?$ "& ?$"?$J6D 6D 04 6D " 6Dx6h6hr;;;r