+ jHjkaR$t/0tRt^RIt^RIt^RIHt^RIHt^RIH t ^RI H t ^RI H t ^RIHt]P !]4t]!RRR 7t]!R R R 7t]!R RR 7t]^k]!R RR 7t]!RRR 7t]!0R%m4tRtRtRtR&tRtRtRt Rt!Rt"Rt#Rt$Rt%Rt&Rt'Rt(Rt)Rt*Rt+R t,R!R /R"lt-R#t.R#)'zLTrusted messaging admission and the existing TurnRunner invocation boundary.N) ContextVar) nullcontext)replace) MessageEvent)restore_native)RuntimeStoreErroradmission_author)defaultexecuting_admissionF viewer_turnbusy_acceptance busy_commituh⏳ Too many messages are already waiting in this conversation; send this again after the current reply.c"^RIHp\P4\P4rC\P R4\P R4TP VfRMT4pVP V4GRjxL pVe(VP4'gVPR4TPT4TPR 8XdR#TP P#TP$4TP&P)TP$\*P,!4P/44p \1T4p \3TR R 4'dYTP$&^RIHp T !TP8TP$R7p T fR MT R,p T R9dTP P;TP$4TP&PTP$4T JdTP&TP$T PTP$4TJd YP$T R 8XdR#\=YP>R4#Te(TP4'gTPR4\*P@!T 4GRjxL T PTP$4TJdYP$##ELK \dpTPR8Xd)TPR8XdRp?TPT4R#TPR8XdkTP'dYTP\9dTP RTP 2M TPpRT R 2uRp?TPT4#TPR 8wdh\uRp?TPT4#Rp?ii;i TPT4i;iEL? \dWp\=YP>TP4uRp?T PTP$4TJdYP$##Rp?ii;i T PTP$4TJdYP$ii;i5i))messaging_admissionNTstale_generationrouteinvalid_paramsz: u$⚠️ Hermes refused this message (zJ), so it was not saved or answered. Ask the operator to check gateway.log. queue_fullterminal_turn_marker_handoffF)get_session_admission) admission_idstatusunknown_execution)runknown)!gateway.session_authorityrr getr set admit_nativedone set_resultrreasonfieldreset_CONTENT_CLAUSESQUEUE_FULL_REPLYrnative_waitersaddrwaiters setdefaultasyncioget_running_loop create_future_marker_adoptersgetattrhermes_state_runtimerdbdiscard pause_noticerefshield) authorityeventraccepted committedingressreceiptexcnamedwaiteradoptersrrowrs&& dHMG+!..u55  )9)9   & !!'*~~#   !5!56    ) )'*>*>@X@X@Z@h@h@j kF *Hu,e44*/%%&;  7;O;O PC;ZCMF ((  (()=)=>    !5!5 6& @!!'"6"67 <<,, - 6--.+tjiVi1jjHMMOOD!/^^F++ <<,, - 6--. 7a6   ::+ + W0D !!'* ::) )ciii58IIAQ4Qszzl"SYYK0WZWaWaE:5'BJJ K !!'* :: % !!'*   !!'*4, @I{{CJJ?? <<,, - 6--. 7@ <<,, - 6--. 7sA/Q72KKK%K6F>Q75Q7O" O!O"$-Q7K O"OO Q7"O;AO<O=O Q7O*O+O /Q7OO OQ7O"" Q-P> Q Q-Q7>QQ.Q44Q7c8\VRR4pVf /;qnV#)marker_adoptersN)r/rD)r6r?s& rAr.r.^s'y"3T:H/11, Oc"\V4PV4pVe\W#4R#WP9dV\ V4V&R#\ W4GRjxL R#L5i)a The executed turn's durable active-turn marker outlives the handler, as the in-process turn's does on main, and is released only once its reply is in the delivery ledger (or nothing is owed). A kill between the terminal commit and that ledger write then leaves a marked turn whose persisted reply the next unclean boot ledgers and sends once, without new inference, instead of a settled answer nobody owes. The waiting adapter lifecycle adopts it; a recovered no-waiter reply keeps it until ``deliver_settled``; any other turn releases it here.N)r.r _move_markerpending_deliveries _held_markers_release_turn_marker)r6rr7adopters&&& rA_hand_over_turn_markerrLhsYy)--l;GU$33316 i . y 000sAA%A#A%c \F6p\W4'gK\W\W44\ W4K8 R#N)_MARKER_FIELDShasattrsetattrr/delattr)sourcetargetnames&& rArGrGzs. 6 F'&"7 8 F !rEc8\VRR4pVf /;qnV#)held_turn_markersN)r/rW)r6helds& rArIrIs& 914 8D |-//* KrEcB\WR4pVf/p\WV4V#rN)r/rQ)r6rUfounds&& rA _registryr[s' IT *E } ' LrEc\VR4#)zadmission -> the reply a live native waiter is about to send, kept only until the drain settles the turn, so a turn fenced ``unknown`` can still owe it to the chat.waiter_replies)r[)r6s&rAr]r]s Y 0 11rEc2\V4PVR4pVeG\V4PV4pVe(\ W2^,4V^,\ V4V&MVP PVR4pVeV\VR4V&R#R#)a!Settlement could not commit and the turn is fenced ``unknown``, but this owner keeps its captured answer for Discard (``resolve_unknown``). The reply stays owed to its destination, and so does the turn's crash marker: the live waiter is released with a pause notice, so the marker is taken back from it. Restart while unknown clears the marker (no answer is owed, ``release_unknown_turn_markers``); a Discard that commits the captured answer makes it owed, sent once by ``deliver_resolved`` or, after a kill before that send, by the boot ledger.Nunsettled_deliveries)r]popr.rrGrIrHr[)r6rdeliveryrKs&& rAretain_unsettled_deliveryrbsi(,,\4@H"9-11,?   1+ .5=a[M) $\ 2//33L$GEM )34\BrEc"\VR4PVR4pVfR#V'dW0PV&\W4GRjxL R#L5i)a After a Discard committed: send the retained reply when its captured answer committed with the resolution (``owed``), else release its marker and drop it. Popped first, so a repeated resolution never sends twice; a turn the drain still owns is delivered by the drain.r_N)r[r`rHdeliver_settled)r6rowedras&&$ rAdeliver_resolvedrfsI$:;?? dSH 5=$$\2 ) 222s*AA A Ac"\VRR4'd&VPPV4GRjxL R#R#L5i)_gateway_active_turn_tokenN)r/runner_clear_durable_active_turn)r6r7s&&rArJrJs7u2D9999%@@@:@s 2?= ?c*VPVP,pVP'dR#RVnVR8XdR#VR8XdR#VR8Xd8\\VPRR4R R4R 8HpV'dR MR pR V R2#RV R2pRV R2#)aThe committed input stays queued behind a paused FIFO (a turn lost across an owner restart, or a head the preflight refused). Tell the platform user once per pause episode through the ordinary reply path; later messages onto the same pause are admitted silently.NTruntime_draininguX⏳ Hermes is restarting — your message is saved and will be answered when it is back. session_busyuc⏳ Your message is saved and will be answered when the work running in this conversation finishes.rplatformvalueslackz/hermes discardz/discardu⏸️ This conversation is paused: a previous turn did not finish when Hermes restarted, and only you know whether to send it again. Your message is saved. Send z` to drop the lost turn and continue (it is not re-run), or /reset to start a fresh conversation.z-a queued message could not be re-authorized ()u$⏸️ This conversation is paused: z. Your message is saved but will not be answered here. Send /reset to start a fresh conversation, or ask the operator to resume this one.)sessions session_idpause_notifiedr/rS)r6r4r"liverpr2causes&&& rAr3r3s   cnn -D D ##i t $$ Z>NRYY',#*[[bZcdjj k$execute_admission..#s,*vDWD[c[cdj[kou[u<4< gateway.session_completion_notesrgateway.session_policyrrirrrsrSgateway.session_cronrgateway.session_managed_workerrrr'r2rgateway.session_ingress_mediarrgateway.session_automationrinternalmetadataphysical_targetrgateway.session_ingress_contextrgateway.configrgateway.session_api_turnrrgateway.session_resultsrrn API_SERVERLOCAL_claimed_ownerrrrgateway.session_operatorrr r r_execution_scope isinstancerlistjoinallow_gateway_control_handle_message get_commandpending_results_adapter_for_sourcerr]rHrLrJr$)&r6r4r@rnotedrrr local_policyrrrunativer7rrrhomerrrrris_apir author_tokenr viewer_token api_tokencaptured result_tokentokenhandedpreparedresponseradapterras&&&& rAexecute_admissionrsA"937 7E  8 y//1C1CCNN1S1Z1Z [F fmmv50YS999LL I +F "93???   cnn -D  I$<$< )s9~y/?/?@Ed#i."8dd(+N(;d?RSVW`Sa?bd C N 2 K,YSAE ~~~.%..@/?#i..PI % %c *V[VdVdeyVz 23Y##$4b9==lKJ DF!)"2"2ELL*M'M8 [[ ! !X%8%8 8F NNNf (<(<(N!$L0AB ^^   .F#''&2D/ZfJlmL8???3+?+?4TJL!!$'IH#''1L  # #D )E!%E F5(#It4 4 4 40YP!!(+ejj$//"&*vHYDW*v!vEJ.3+!%&--==eDDH\\"3X\\(5KLF~+HNNJKc)n00:dB5K\K\K^K^.JHdT_af%x'N'N3NPF &'8<<+D>iCRV^C^OXo%>?df>iI % %c.&9 :h#**>>u||L& !( HdKHIQy1#n2EFLT 44S5HIF(4GO O OY5 4\&y8 8 8!!%(|,I&|,,'W 8: @V5E@ P 9_5 4 4\&y8 8 8!!%(|,I&|,,' &y8 8 8!!%(|,I&|,,'s] X#A/] X&&] ,X)-C6] $C*] ] B ] 8A ] [ X, [ BX69X/:2X6- X6;1X6-X6?A X6 X6BX6X2X6 [ &] <X4=A'] &] )] ,[ /X62X64] 6 Y [ ] ]  Y#!A(]  ] [#!A']] c^RIHp^RIHpV!\ VP 44pVP 4'dV!V4'g \4#^RIH pV!4#)aA standalone owner's turn binds nothing, but the launch profile's is marked at entry: a second profile switching this gateway to multiplexing mid-turn must not fail its later credential reads closed. Any other owner (a hosted named profile) stays unmarked, never reading the launch env.Path)_is_process_home) launch_body) pathlibragent.secret_scoperstr profile_id is_absoluter!tui_gateway.launch_profile_policyr)r6rrownerrs& rA_launch_body_if_launch_ownerrRsL3 Y))* +E     &6u&=&=}= =rEcaaa"\\SPRR4RR4pSfV'g \S4#^RIHoHpVVV3Rlp\ P!V4GRjxL wrVVf \4#V!WV4#L5i)agUnder multiplex, owner-side execution runs under the OWNING profile's home (agent build, config, secrets, state.db), never the launch profile's ambient scope; native provenance (``home``) refines it. A single-profile gateway keeps its ambient scope byte-for-byte. Secret sources (external CLIs) hydrate off the loop, as main's per-message scope does (#99519).configNmultiplex_profilesF)_load_profile_secret_scope_profile_runtime_scopec<^RIHpSpVfLV!\SP44pVP 4'dVP 4'dTMRpY;'d S!V43#)rrN)rrrrris_dir)r scope_homerrr6rs rAload_execution_scope..loadis\   Y1123E"'"3"3"5"5%,,..dJPP*DZ*PPPrE) r/rir gateway.runrrr+ to_threadr)r6r multiplexrrrsecretsrsff @rArr_sw  0 0(DACWY^_I |I+I66NQ!( 1 1$ 77J&.;=_4J:4__8s.B4B(B)Bct"\V4PVR4pVPPV4pVexWP9dhVPP V4VPPV4\ V4PV4pVeVe\W$4RpRpVfVe\W4GRjxL R#VwrVrxp \W 4GRjxL ;_uu_4\WVWx4GRjxL RRR4TPPTR4\Y4GRjxL R#LvL\LA +'giLG;i \d\PRT4Lmi;iLF TPPTR4\Y4GRjxL i;i5i)zSend a recovered no-waiter turn's reply after its terminal outcome committed. A send failure cannot rewrite that outcome; it is logged, and inference never runs again.Nz'Delivery of settled admission %s failed)rIr`rHrr'r2r.rGrJrdeliver_response Exceptionlogger exception) r6rrXrarKrr7 session_keyrrs && rArdrdus~  # ' ' d ;D++// =H 0H0H H   ((6$$((6"9-11,?   3  'D  &y7 7 72:/GK4 5#I4 4 4 4"7;I I I5 $$((t<"9444 85 I5 4 RBLQR 5 $$((t<"9444sCF8 E F8E&E' E3EEEE*F8:F;F8EE E EFE!E>;F=E>>FF8+F5.F1/F55F8c "^RIHpHpVPV4wrgV'gR#VP WaW'^8R7GRjxL pV!V!V44p .p VP 'd4VP WVP W^8WzP4GRjxL VPWV \V 4V PR7GRjxL R#LL8L 5i)r)_thread_metadata_for_event_mark_notify_metadataN)is_ephemeral_response) anything_sentrecord_delivery) gateway.platforms.baserr_unwrap_ephemeral_extract_response_content text_content_send_final_textappend_deliver_attachmentsbool) rr7rrrrrttl extractedrresultss &&&& rArrsX))(3ID 77[noho7ppI$%?%FGHG&&u9;Q;Q'/q#~~O O O  & &uQUV]Q^7>~~ ' GGG q OGs;?CC %C(.CC/CCCCCdurablecaaaa a "\S\SP4R7o \P!4P 4o \P!4P 4pV VV VV3Rlp\ P S 4\P V4rv\P!V!44p\ PV4\PV4SPPV4VPSPP4\P!S V0\PR7GRjxL V'dFVP!4'g0\P!WH0\PR7GRjxL TP!4'dTP'4R#TP!4'g\)SYH4R#R# \ PT4\PT4i;iLL \P"d)S P!4'gTP%4hi;i5i)a2Serial receive loops (IRC, Signal) await this before reading their next frame, so return once the follow-up is committed to the FIFO, or queued behind an earlier input of its chat still capturing (its position is then fixed; acceptance still waits for the commit); a tracked observer delivers its one reply. *durable*: return only once the row is committed (or the input was refused, fenced or answered), never on the earlier position release: a busy burst's commit task, which a command barrier (``/restart`` closing admission) waits on. Otherwise an input released before its commit is held until it commits or its handler ends, and a serial reader's next command waits for that too (``burst_gate``): a non-burst busy input (a second video, a voice note, text outside queue mode) has no burst commit task to wait on.)rSc<"\SRR4RJSnSPS4GRjxL p\SS4SPSn\ SSSV4GRjxL SPS4GRjxL SPS4GRjxL R#LkL: \ d`pSP 4'gh\PRSPTRR7SPST4GRjxL Rp?LRp?ii;iLLy SPS4GRjxL SPS4GRjxL i;i5i)gateway_runnerNz%[%s] Queued busy follow-up failed: %sT)exc_info) r/r_message_handlerrGrrr rrrU_notify_turn_errorrJ)rr<r8rdelivery_eventr7rs rAobserve%dispatch_shared_busy..observes&-W6F%MUY%Y" 6$55e< > >..u5 5 5= S B==?? LL@',,PS^bL c,,^SA A A  B ? 5..~> > >..u5 5 5sEBB2B B!B%E9D :ED EBB D(AD7C:8D=DDD E EE#D&$E=E>EE) return_whenN)rrSr+r,r-r rr create_taskr$_background_tasksr(add_done_callbackr2waitFIRST_COMPLETEDr CancelledErrorcancelr_hold_until_committed) rr7rr r9rr commit_tokentaskr8rs fff$ @@rAdispatch_shared_busyrsU75<<+@AN'')779H((*88:I66**--h79S<(""79-e$,' !!$'744<<=llHd+9P9PQQQ 499;;,, 0g>U>UV V V  yy{{ ^^  gy7 e$,' R V  ! !}} KKM syBI&"G3=A*I&(+H&H" H& H&6*H& H$!H&%I&;'I&#I&3,HI&"H&$H&&*I#I##I&c>a\P!4P4oV3RlpVPV4VPV4VPP R\ 44pVPS4SPVP4R#)a Released before its commit: the reader reads on, but this input is not durable yet. A serial reader's next command waits for its commit or its handler's end (``burst_gate``), so /restart never closes admission, and /new never cancels the chat's rows, before it lands.cZ<SP4'gSPR4R#R#rN)r r!)_settleds&rAsettle%_hold_until_committed..settles!||~~   t $rE_uncommitted_inputsN) r+r,r-r__dict__r*rr(r2)rr9rr#rXr"s&&& @rArrsx&&(668G%'6"    & &' r auto_skill media_urls media_typeschannel_promptreply_expectedchannel_contextmedia_text_inlinedmedia_types_lengthmedia_text_inlined_length) _gateway_active_turn_session_keyrh)0r)__doc__r+logging contextvarsr contextlibr dataclassesrgateway.platforms.eventrgateway.session_enveloperr0r getLogger__name__rrr r r r frozensetr%r&rBr.rOrLrGrIr[r]rbrfrJr3rrrrrdrrrr+)r)s@rAr@sR""032   8 $0$? !6F$]DA A.=5  ?8/vT1$"2 N& 3A b8 "m(` `,5B G68u68r ,rE