+ jHj1Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt ^RI H t ^RI H t HtHt]P !]4tRtRtRtRtR tR s^t0R1mt]P6P9R R 4tR RltR2RRllt]3RRllt RRlt!RRlt"RRlt#R2RRllt$R2RRllt%R2RR/RRlllt&R2R R!llt'R2R"R#llt(R2R$R%llt)R&t*R't+R(t,R)]*R*R/R+R,llt-R2R-]R)R./R/R0lllt.R#)3aScale-to-zero idle detection + dormant-quiesce for the gateway. Owns the *decision* to go idle, drives the relay transport's ``go_dormant()``, then SUSPENDS the machine via the local Fly Machines API socket; wake stays platform-side (autostart on wakeUrl). Self-suspend because Fly Proxy only sees INBOUND proxied connections: it would suspend mid-turn or before ``go_dormant()`` flipped the relay destination (buffered-event black hole). Enable is gated SOLELY by the NAS "Labs" toggle env stamp (not config); the idle timeout IS config.yaml. Quiesce uses ``go_dormant()`` (never disconnect/drain); ``mark_resume_pending`` is NOT called: suspend preserves RAM.) annotationsN)Path)AnyIterableOptionalHERMES_SCALE_TO_ZERO FLY_APP_NAMEFLY_MACHINE_IDz /.fly/apiGATEWAY_RELAY_SLEEP_URLFstatezdashboard_clients.heartbeatc$V^8dQhRRRRRR/#)envOptional[dict]keystrreturn)formats":/home/ubuntu/.hermes/hermes-agent/gateway/scale_to_zero.py __annotate__r.s&JJ.JsJsJc|\Vf\PMTPVR44P 4#)N)rosenvirongetstrip)rrs&&r_env_strr.s- ck s77R@ A G G IIrc V^8dQhRRRR/#r rrrboolr)rs"rrr2sCC>CTCrcL\V\4P4\9#)zFWhether the Labs toggle stamp is set. Absent/blank/falsey -> disabled.)rSCALE_TO_ZERO_ENVlower_TRUTHYrs&rscale_to_zero_enabledr'2s G. / 5 5 77 BBrc$V^8dQhRRRRRR/#)r cfg_valuerdefault_minutesintrfloatr)rs"rrr7s(HH#H03HW\Hrc\V4pV^8:d\V4R,#TR,# \\3dRpL7i;i)zCoerce ``scale_to_zero.idle_timeout_minutes`` to seconds. Non-numeric / non-positive degrades to the default (never <= 0: instant dormancy).ggN@)r, TypeError ValueError)r)r*minutess&& rparse_idle_timeout_secondsr17sN "'.lE/ "4 GG4 GG z "s /AAc V^8dQhRRRR/#)r platformsz Iterable[Any]rr!r)rs"rrrBs4rc VUu0uF5p\\VRV44P4P4kK7 ppVP R4V'*#uupi)zTrue iff the only connected platform is RELAY, or there is none. A directly-connected platform holds a live socket and cannot scale to zero. Compared by ``.value``/name so this module stays enum-import-free.valuerelay)rgetattrrr$discard)r3pnamess& r!messaging_is_relay_only_or_absentr;BsTCL L)QSGQ' ( . . 0 6 6 8)E L MM'9 Ms;Ac(V^8dQhRRRRRRRR/#)r enabledr!relay_only_or_absentwake_url Optional[str]rr)rs"rrrKs/KK4KtK}KY]Krcd\V4;'d\V4;'d \V4#)zArm only if ALL hold: flag on, relay-only/absent messaging, wakeUrl registered (a suspended instance with no wake target is a black hole). Otherwise the watcher never starts, so a non-opted instance behaves exactly as before.)r!)r=r>r?s$$$r should_armrBKs( = J JT"67 J JDNJrc ,V^8dQhRRRRRRRRRR/#) r active_work_countr+seconds_since_last_inboundr,idle_timeout_secondshas_live_background_workr!rr)rs"rrrRs9DD#D5D"'DCGDLPDrcBV^8*;'dV'*;'dW8#)u]Pure idle predicate: no active work, no inbound within the window, no live background work. ``active_work_count`` is the BROAD aggregate (agent turns + cron + API runs) — passing only ``len(_running_agents)`` reopens the mid-cron-job suspend hole. Callers that cannot read a work source must fail AWAKE (pass a positive sentinel), never fail to 0.r)rDrErFrGs$$$$ris_idlerIRs6  " C C+C'C C C*BDrcV^8dQhRR/#)r hermes_homeOptional[os.PathLike | str]r)rs"rrr\s>>1L>rcPVf^RIHpV!4p\V4\, #)z?Path of the dashboard-client liveness marker under HERMES_HOME.)get_hermes_home)hermes_constantsrNrDASHBOARD_CLIENT_HEARTBEAT_REL)rKrNs& rdashboard_client_heartbeat_pathrQ\s$4%'  = ==rc V^8dQhRRRR/#)r pathrLrr!r)rs"rrrds  +F RV rcJVf \4MTp\P!\PP V4RR7\ VRRR7P 4\P!VR4R# \d\PRRR7R #i;i) zKMark "a dashboard client is attached right now". Best-effort, never raises.NT)exist_okautf-8)encodingz/scale-to-zero: dashboard heartbeat touch failed)exc_infoF) rQrmakedirsrSdirnameopencloseutime Exceptionloggerdebug)rSr9s& r touch_dashboard_client_heartbeatrbds{15 + -4 BGGOOA&6 Qg&,,. D  FQU VsA8A<<"B"!B"nowc$V^8dQhRRRRRR/#)r rSrLrczOptional[float]rr)rs"rrrqs$  %@ $3 ?N rcVf\P!4MTpVf \4MTp\\P!V4P V4# \ dR#\dTu#i;i)uHEpoch seconds a dashboard client last sent a WS frame, or None if never. Missing marker -> None (steady state when nobody has the dashboard open — NOT fail-awake, or no instance would ever sleep). Unreadable marker -> ``now`` (fail-awake, as in ``is_idle``). Clamped to now: an NTP step-back can leave the mtime in the future.N)timerQminrstatst_mtimeFileNotFoundErrorOSError)rSrccurrentr9s&$ rdashboard_client_last_seenrmqsc ![diikcG-1\')tA2771:&&00  s)A A4%A4.A43A4c V^8dQhRRRR/#r r)rs"rrrs44N4d4rc\\V\4;'d<\V\4;'d$\P P \44#)zTrue iff Fly machine identity is present AND the local Machines API socket exists. Off-Fly this is False; see ``suspend_available`` for whether some OTHER lever exists before concluding the watcher must abstain.)r!rFLY_APP_NAME_ENVFLY_MACHINE_ID_ENVrrSexistsFLY_API_SOCKETr&s&rself_suspend_availablertsI "2333J\8]33GGNN>2 44rc V^8dQhRRRR/#)r rrrr@r)rs"rrrs-rcxVeTM\Pp\VP\R44P 4pV'gR#\ PPV4pVPR8wgVP'g+\'gRs \PR\4R#V#)a(The NAS sleep endpoint to POST, or None when this backend has no broker. Validated here rather than at POST time: a malformed value would otherwise let the watcher mark draining, hold the re-dial and flip the connector before urllib rejected it, quiescing for a suspend that could never happen. NrhttpsTzAscale-to-zero: ignoring malformed %s (want an absolute https URL))rrrr SLEEP_URL_ENVrurllibparseurlsplitschemenetloc_malformed_sleep_url_loggedr`warning)rrurlparseds& rbrokered_sleep_urlrs('bjjC cggmR( ) / / 1C  \\ " "3 'F }}v}}} +**. ' NNS  Jrc V^8dQhRRRR/#r r)rs"rrrsNN~NNrcnVeTM\Pp\V4;'g\V4RJ#)zWhether ANY suspend lever exists, in-guest or brokered. Quiescing without one is worse than not quiescing: the re-dial clears the flip. N)rrrtr)rrs& rsuspend_availablers2 ('bjjC !# & M M*+D//'E9E9E44E9 socket_pathg$@c(V^8dQhRRRRRRRR/#) r rrrrrr,rr!r)rs"rrrs*!!.!!!+/!rc\V\4\V\4rCV'd V'g\P R4R#RV RV R2p\ P !\ P \ P4;_uu_4pVPV4VPV4VPVPR44Rp\V4R8d$VPR 4;p'd Wx, pK3R R R 4XPR ^4^,P!RR 4p T P4p \T 4^8;'dFT ^,P#4;'d'^\%T ^,4u;8*;'dR8Mup T 'd\P'RT 4T #TPR^4R,R,P!RR 4p \P RT \(P*!T 4R,4T # +'giEL);i \d"p \P R T 4R p ? R#R p ? ii;i)uPOST /v1/apps/{app}/machines/{id}/suspend on the local flaps socket (the socket is the credential). Returns True when flaps accepted (2xx); the kernel then freezes this process shortly after, so treat as fire-and-forget. Never raises: a failed suspend leaves the machine running (fail-awake). stdlib-only on purpose — a plain unix-socket HTTP/1.1 request, no async plumbing to freeze mid-await.z?scale-to-zero: suspend_self called without Fly machine identityFzPOST /v1/apps/z /machines/zH/suspend HTTP/1.1 Host: flaps Content-Length: 0 Connection: close asciiriiNz/scale-to-zero: flaps suspend request failed: %ss replacerz5scale-to-zero: machine suspend accepted by flaps (%s)s :NiNrWz,scale-to-zero: flaps suspend rejected: %s %s)rrprqr`rsocketAF_UNIX SOCK_STREAM settimeoutconnectsendallencodelenrecvrksplitdecodeisdigitr+rjsondumps)rrrapp machine_idrsockrchunkr status_linepartsrbodys&$$ r suspend_selfrsw(898GM_;` jXYuJzl;OOG  ]]6>>6+=+= > >$ OOG $ LL % LL0 1Hh-%'diio-EU-E! ?..!,Q/66w JK    E Uq N NU1X--/ N NC3uQx=4N4N34NB  K[Y I~~k1-b1$7>>w RE{zz$'- / I'? > > H#Ns=;H8 A-H$: H$H8$ H5 /H85H88 I$II$>1onyestrue)N)/__doc__ __future__rrloggingrrrf urllib.parserypathlibrtypingrrr getLogger__name__r`r#rprqrsrxr~DEFAULT_IDLE_TIMEOUT_MINUTESr%rSjoinrPrr'r1r;rBrIrQrbrmrtrrBROKERED_SUSPEND_TIMEOUT_SFLY_FREEZE_GRACE_SFLY_FREEZE_GRACE_TICK_Srrrrrrs##  **   8 $*!%* # ! $ "$g7T!UJC 7SHKD>  6:   46N"#0# #L!~!"&!!r