+ jHjRt^RIt^RIHtHt^RIHt^RIHtH t ^RI H t ^RI t ^RI t ^RIt^RIt^RIHt^RIHt^RIt^RIt^RIt^RIHtHtHt^R IHt^R IHt^;M;Ml;[;[L#i.6 7ac=f;M;Ml;[;[L#i.6 7ac =fgG B.y$++BUBUVGN I .Fv4::f+=DJJW^L_%)ZZ%9$bfhH q&)"6"6 fX& 3CIW]3^ dlC N6*gtzz \HX[^_h[iGi #i.1A"BCoq \ t{{**It{{7J7J ?67 ))+?AZAZ  \\rcDVPV4p\\VP44pVP'gVP 4'gV#^RIHpV!VR, 4pVPRR4VPR4e VR,VR&V#)aThe frozen session config the child binds as its only config (``bind_worker_policy``). ``command_allowlist`` is approval state rather than launch policy: an ``always`` grant an earlier worker of an ordinary session persisted, or one the operator removed by hand, comes from the live profile file, as it did before the child's config was frozen. Bypass sessions never read the profile.)_load_gateway_configz config.yamlcommand_allowlistN) r-r strr]r+ is_absolute gateway.runrfpopr.)r3r5r-rKrfrbs&& rr[r[Xs ]]9 %F I(() *D    (8(8(:(: 0 } 4 5D JJ"D) xx#$0&*+>&?"# Mrc^RIHp^RIHp\ VP RR4pVeVP V4MRpV!V\ VRR4\VP4R7V!V4#)zThe route's bypass as the in-process turn arms it on the owner, the one place a revocation is recorded: a ``--yolo`` launch seeded once per boundary, then the persisted ``/yolo`` copy.)is_session_yolo_enabled)restore_gateway_yolo session_storeNr@)launch) tools.approvalrmtools.approval_yolorngetattrr'lookup_by_session_keyboolr@)r3rOr5rmrnstoreentrys&&& rrYrYjs^78 I$$ot $worker_turn_scope..s?147$&s TF invalid_managed_worker_bootstrap)enable_session_yolorOrL execution_id)rArB>r@r=r?)gateway.session_finiterygateway.session_displayrzr{gateway.session_surfacer|r}r/r0r. isinstancerXrWsetanyvalues ValueErrorrrqr)frameryrzr{r|r}turnkrflagssurfacedisplayexcrs& rworker_turn_scoperus 9KK ::eHo)).9AAT B F Fy QD | XbcgimXnXndjjl Tldaa7S.STQTl TtxE U'GGs? ?sss? ???DDVDV_cdl_m_m;<<F9E9M/$|"45SW9E9M/$|"45SW F||6E'N+ 4>4 += > >@RSZ@[@[ uW~n=w G G  HA\ > > U F;<#EF H GA\@[ > > >sBI% H!H'&I%I%0(I%I%(I%7 I%0H 3I%4I%6I H> 'H+ ,H> 4I<I% H( H##H((I%+ H;6H> > I I I"  I%cza]tRt^toRtRtRtRtRtRt Rt Rt R t R t R tR tR tRtRtRtVtR#) ManagedWorkercWnRVn\P!4Vn\ P !^R7Vn\P!4Vn \P!4Vn RVn RVn \P!VPRRR7VnRVn\P$!^4VnRVn\+4VnRVnRVn.VnR#)N)maxsizezmanaged-control-writerT)targetnamedaemonF)processworker threadingLock write_lockqueueQueuecommandsEventclosedasynciostop stopped_at stop_causeThread_write_controlswriterreader Semaphore_demand _requestedr_frames_arrived stderr_drainsecrets)selfrs&&r__init__ManagedWorker.__init__s  #..* B/ oo' MMO &&d.B.BIajno   **1- w    rcDVPP4'g1VPPRR7pTP T4KPR# \P dKji;i \\3dTPP4R#i;i)g?timeoutN) ris_setrr.rEmptysendOSErrorrrrrs& rrManagedWorker._write_controlss kk((** MM--b-9E % +{{$  KKOO  s3A0AA0A-)A0,A--A00+BBc VPP4'dVPP4'g}\ VP P 4pVPVPV4\T\ 4'gKTP P P4R#VP P P4R# \\\\3d pTpRp?LRp?ii;i \d)TP P P4R#i;i TP P P4i;i)zWReader thread body. It owns ``stdout``: no other thread closes it under a blocked read.N)racquirerrr rstdoutEOFErrorrrRecursionErrorcall_soon_threadsafe_deliver RuntimeErrorcloser Exception)rloopitemrs&& r _read_framesManagedWorker._read_framess (,,&&((1C1C1E1E%dll&9&9:D--dmmTBdI.. LL   % % 'DLL   % % '!*g~FD$ LL   % % '  LL   % % 'sXEEC$#D?E$D ?DED  E EEEE&E*cpVPPV4VPP4R#r)rappendrrrrs&&rrManagedWorker._delivers$ D! rcVP^,p\V\4'dVhVPP4RVnVP'gVP P 4V#)r9F)rrrpopleftrrclearrs& r_takeManagedWorker._takesV||A dI & &J ||| MM   ! rc  a^RIHp^RIHpV!VRSPP VSPP V3Rl3R7SnSPP4R#)zRoute the child's stderr (its tracebacks and redirected prints) into the profile's bounded, redacted, private log instead of discarding it.spawn_context_thread)drain_worker_stderrzmanaged-stderr-drainc<SP#r)rrsr,ManagedWorker.drain_stderr..s lplxlxrrargsN) agent.memory_providerr"gateway.session_managed_worker_logrrstderrpidrstart)rr`rrsf& r drain_stderrManagedWorker.drain_stderrsU ?J01DKa7;||7J7JDRVR^R^RbRbdx6y{ !rc|VPP4'd \R4hVRR/8XdCVPf\P !4VnVP P4VPPV4R# \Pdp\R4ThRp?ii;i)managed_worker_lostrrNworker_control_backpressure) rrrrtime monotonicrrr put_nowaitrFull)rrrs&& rcontrolManagedWorker.controls ;;    #$9: : VV$ $&"&.."2 IIMMO L MM $ $U +zz L#$AB K Ls8BB;* B66B;c \VPV,\P!4, #)zSeconds left of the ``ack`` window that opened at the first Stop. Pure: only ``control`` stamps ``stopped_at``, so a read before any Stop (the hello) never starts the window a later Stop must receive in full.)rrr)racks&&r _stop_budgetManagedWorker._stop_budgets$t~~'777rc "VPfi\P!4Vn^RIHpV!VP R\P!43R7VnVPP4VP'g4VP'g"RVn VPP4\P!VPP44p\P!VPP44pVP'gVPP!4'gn\P!WE0V\P"R7GRjxL VP'g,VPP!4'g \%R4hVP'g:VP'V4pV^8d"\P!V0VR7GRjxL VP'g \%R 4hVP)4VP+4VP+4#LLS TP+4TP+4i;i5i) zRead one frame. A requested Stop bounds supervision to ``ack`` seconds TOTAL from the first Stop: a child that keeps emitting valid frames is escalated on the same deadline as a silent one, instead of leaving the turn started behind it.Nrzmanaged-frame-readerrT)r return_whenmanaged_worker_hello_timeoutrmanaged_worker_stopped)rrrrrrrget_running_looprrrrrelease ensure_futurewaitrrFIRST_COMPLETEDrrrcancel)rrrrarrivedstopper remainings&&& r next_frameManagedWorker.next_frames ;; #MMODM B.t/@/@G]5<5M5M5O4QSDK KK   |||DOOO"DO LL "'' (:(:(<='' (89 <<< (8(8(:(:llG#5wT[TkTklll|||DII,<,<,>,>+,JKK<<< --c2 q=!,,y)DDD<<<'(@AA::< NN  NN mE NN  NN ssBI; I;A=I;I-I +I8I9II/I 4IIII1!I;II"I88I;c,VPRR/4R#)rrNrrs&r interruptManagedWorker.interrupts ff%&rc4VPRVRVRV/4R#)r prompt_idraNr )rkindrras&&&&rrespondManagedWorker.responds fdKGUKLrc VP;_uu_4VPPP\ V44VPPP 4RRR4R# +'giR#;ir)rrstdinwriter flushrs&&rrManagedWorker.sendsJ ___ LL   $ $\%%8 9 LL   $ $ &___s AA22 B c ^RIpVPe-VP^,VPP8XdR#VP VP^,4p^RIHpV!V4VP^,8Xd(V'd VPM VP!4R#R# TPdR#i;i)zSignal the verified interpreter, not only the handle: a launcher that exec-chained or exited leaves the real worker outside the Popen's reach.N) process_birth) psutilrrrProcesshermes_cli.process_identityrkill terminateError)rrrprocrs&& r_signal_workerManagedWorker._signal_worker s  ;; $++a.DLL4D4D"D  >>$++a.1D AT"dkk!n4"695||   sA B1B11CCc 0\PR8wdVPP4f^RIp\P !VPP 4VPP 8XdL\P!VPP V'd VPM VP4R#V'dVPPMVPP!4R# \\3dLNi;i)aPOSIX: signal the worker's whole process group (it leads one, WORKER_POPEN), so the tool children a killed worker never reaps with _die_with_owner go too. Only while the leader is unreaped and still leads its group; otherwise (Windows, gone) the handle alone.ntN)osrrpollsignalgetpgidrkillpgSIGKILLSIGTERMProcessLookupErrorPermissionErrorrr)rrr&s&& r _signal_groupManagedWorker._signal_group.s 77d?t||002:  ::dll../4<<3C3CCIIdll..$FNN[D #   (>(> >A'8  sA/D'DDDcVPP4VPP4VPP 4f%VP RR7VPRR7VPP^R7VP RR7TPPeTPP^R7TPPP!4TP"f&TPP$P!4MTP"P^R7TP&eTP&P^R7R#TPP(e'TPP(P!4R#R# \PdTP RR7TPRR7\\P4;_uu_4TPP^R7RRR4EK +'giEL;ii;i)NF)rrT)rrrrrr%r r-r subprocessTimeoutExpiredrridentjoinrrrrrrrs&rrManagedWorker.close<s   <<    &   U  +   E  * + LL  a  (   T  * ;;   ( KK  Q  '   " ;;  LL   % % ' KK  Q  '    (    " "1 " - \\ , LL   % % '-#(( -   T  *   D  )*3344 !!!!,5444  -s+6F77AIH:.I: I I I)rrrrrrrrrrrrrrrrN)rrrrrrrrrrrrrr rrr r-rr__classdictcell__) __classdict__s@rrrsY8 ("" L8 @'M'  B((rrc\VR/4PVP4pVfR#VPWR4VP VPV4VP RR/4R#)_managed_workersFzsession:controlrrT)rsr.r) authorizecheck_approval_generationr)r3actorr4 generationrs&&&& rinterrupt_managedr=Ysa Y 2B 7 ; ;CNN KF ~ $56 '' C NNFF#$ rcnVPVP,pVPpVPR4pVR8Xd\ V4RR08XdVR,pVP P VR4VPP VR4p V 'dIVPPVPRVRVR,/V ^,R,R,R7R #VR9dR #\VP 4^8d \R 4hVR 8Xds0Rmp VPR4p \ V4RR08wg/\V \4'd\ V 4V , 'd \R4hV PR 4pM\ V40Rm8wg\VR,\4'd\VR,\4'dc\ ;QJd#RVR,4F 'gK R M R M!RVR,44'g\#VR,4\$Jd \R4hVR,p\V\4'dV'dWP9d \R4hVP&VP V&VR 8Xd2VP)VPVR,VP*X 4R #\-WR,VR,VR,\.P0!4R7p VP3VPVR,V 4R #)rprompt_settledrNexecution_generationr<rz.settled) event_typeTapprovalFr request_iddatainvalid_worker_framequestionchoices multi_selectc3L"TFp\V\4'*xK R#5irrrh)rcs& rr _prompt_frame..|sH7G!:a---7Gs"$) clarify_idrFrGrHevent>clarifyrB>editcommandrC description smart_denied allow_sessionallow_permanent>rrGrFrrH)r(r)controlsr.rremote_respondersrkpending event_streampublishlenrrrXrhlistrrrurregister_approvalrOrrrregister_clarify) r3r4r^rrrbrVrrsavedfieldsrDrws &&&&& r _prompt_frameracs   cnn -D}}H 99V D CJ6;2G$G+& ""&&y$7  $$Y5     % %cnn{I&L(97;GLQxPVGWZdGd & f ** 8 % %&", =>> zuyy  u:&&) )D$1G1G3t9W]K]K]#$:; ;HH\* JV V!% "3S99ER[L\^bAcAc3HuY7GH333HuY7GHHHDQVWeQfLgosLs#$:; ;+& i % %Y)GWGW:W 677,2NNHy) z##CNNC 4EtzzSWX  9Z?PZ_`iZj-2>-B)//J[]""3>>3|3DeL rcR^RIHp^RIHp^RIHpV!\ VP44pVP4'gR#V!V4pV'gV!4'gR#^RIH p^RIH pH pH p V!V !\PP4V4RR7p V!V4p V'd V!V R R 7M/\!WJ4CV Cp T P#V P%4U U u/uF wrV fK WbK up p 4\ V4V R &^R IHpV!V 4V #uup p i) uChild env for the OWNING profile under multiplex: its HERMES_HOME plus its ``.env`` secrets over a scrubbed base, never the launch profile's process environment (the same rule MCP stdio children and shell hooks follow) — except for the launch profile's own worker, whose scope legitimately includes its frozen launch env. Single-profile gateways inherit the process env byte-for-byte, exactly as before.r )is_multiplex_active)_is_routed_homeN)build_profile_secret_scope)_scrub_credentialsbuild_subprocess_envstrip_launch_profile_envT)base scrub_secretsFinherit_credentials HERMES_HOME)apply_subprocess_home_env)pathlibr agent.secret_scoperctools.environments.localrdrhr]rirerfrgrhr$environcopy_launch_env_only_credentialsupdaterWhermes_constantsrn)r3r rcrdrKroutedrerfrgrhenvrrrrns& r _worker_envrys 68 I(() *D     T "F -//=kk $^RIHp^RIHp^RIHpV!V4P 4UUu/uFwrVWQ9gK V!V4'dKWVbK! pppV!\V4RR7pVP 4UUu/uFwrVWX9gK WVbK upp#uuppiuuppi)uJCredentials the LAUNCH profile's owner resolves from its frozen launch env (``launch_secret_scope``: systemd ``Environment=`` / ``op run`` keys with no ``.env`` line) that the scrub removed from *env* — the same mapping the owner's own ``get_secret`` reads for this profile. Credential names only: non-credential names the constructor removed on purpose (unbound session context, venv markers) stay removed, and Hermes-internal secrets (``AUXILIARY_*_API_KEY``, relay auth) never reach a child. Only the launch home's worker calls this; a routed home's worker sees its own files only.)rf)_is_hermes_internal_secret)launch_secret_scopeFrk)rqrf#tools.environments.local_env_policyr{!tui_gateway.launch_profile_policyr|rWrX) rKrxrfr{r|rrmissingplains && rrtrts<NE 3D 9 ? ? AF A,'A!'Dqt AGF tG}% HE$]]_ ?_TQDAD_ ??F @s B B B: B Bc^RRRRR/V'dRV/M/CR//VPVR,&R#)resultfinal_response interruptedTinterrupt_messageusage admission_id)pending_results)r3r^causes&&&r_interrupted_before_bootstraprsD#RpafBUW\A]lnp6Ic.12 rc~\VR/4PVR4pV'dV^,V8Xd V^,#R#)zThe gateway restart/shutdown cause latched for this generation before its worker existed (``run_runtime._stop_spawning_managed``), consumed once; None for a user's Stop.pending_stop_causesN)rsrk)r3r)r<latcheds&&& r_latched_stop_causers<i!6;?? DQG WQZ:%=71:G4Grc|VPR4'd%VP'd/VCRVP/C#V#)zUThe wire result carries no interruption cause; the owner recorded which stop it sent.rr)r.r)acceptedrs&&r_with_stop_causers:||M""v'8'8'8C(C/1B1BCC Orca ^RIpVPp\WS4pV'dWa8wd \WQV4MRp\ \ P .\WQ4OT;'gV.O44pVU u.uFqPV 4;'g/NK p p RU a u/uFo S \T 3RlT 44bK p p T R,T R,,T R,,p R/T CRT R T R,R YR,,R \R T 44R \TPR 4;'g#T R,PR 4;'gR4/C/#uup i TPd/u#i;iuup i)aA managed turn's ``message.complete.usage``: the worker exits with its turn, so the session-cumulative counters come from the rows its usage writes committed. A worker that compresses mid-turn ends on a child of this reservation's session; the owner's execution row records that tip (compression moves it in the same transaction), so the path from the tip back to the reservation plus the reservation's own compression ancestors is summed, and stale siblings or the conversation a branch came from never count.N input_tokens output_tokenscache_read_tokenscache_write_tokensc3l<"TF)p\VPS4;'g^4xK+ R#5i)r9Nintr.)rr^keys& rr)_settled_session_usage..s)>#s3773<,,1--s!44 session_usage prompt_tokenscompletion_tokens total_tokens api_callsc3j"TF)p\VPR4;'g^4xK+ R#5i)api_call_countNr)rr^s& rrrs..c^bWZs377;K3L3Q3QPQ/R/R^bs!33modelr)rrrrreasoning_tokens) sqlite3db_execution_tip_continuation_pathr\rXfromkeys_compression_ancestors get_sessionrsumrhr.)r3r)rrrrtipr`idssidrowsrcountsprompts&&&& ` r_settled_session_usagers BR.:=#BS!"#6Y]4==!c#9"#I!cTMaMaV`Ua!cde589Scs#))r)S9KhiKh3c3>>>>KhFi N #f-@&A AFK_D` `F bbATV\]lVm,fo7N.N)3.c^b.c+c%s8<<+@+_+_DHLLQXDY+_+_]_'`b cc : == is0A!E!4EEE!E:E!!E76E7cV'gR#VP4;_uu_4pVPRV34P4pRRR4X'd V^,#R# +'giL#;i)zRThe session this worker execution last wrote to, as the owner's ledger records it.Nz=SELECT session_id FROM worker_executions WHERE execution_id=?) _read_ctxexecutefetchone)rrconnr^s&& rrrsQ  4llZ]i\kluuw 3q6"d" s "A  A0 cV.TrCWA8wd_\V4^8:dOVPV4pV'dVPV4'gR#VR,pVPV4KdWA8Xd VRRR1,#R#)zgIds from *start* to *tip* when *tip* reaches *start* through compression continuations only, else None.Nparent_session_idr)r[r_is_compression_child_rowr)rrrr`currentr^s&&& rrrsoE3'  s4yC/nnW%"66s;;)* G )4":3t3rc.VPV4r2V'dbVPV4'dK\V4^8d;VR,pWB9gWA8XdM$VPV4VPV4pKiVRRR1,#)zWRoot-first ids of the sessions *session_id* continues by compression, excluding itself.rNr)rrr[r)rr) ancestorsrparents&& rrrstR^^J7w b227;;IQT@T,-  &"6  ..( TrT?rcr\VRR4pVf /;q0nVPR4W1P&V#)zMark the generation pre-worker: until the worker registers, a gateway stop has nothing to signal, so it latches for this generation instead (#134889 GW-22). Set before ``@`` expansion, which may await the network, so a Stop there is never lost._managed_spawningNr<)rsrr.r))r3r4r^spawnings&&& r_mark_spawningr s>y"5t>GGJ@F"9#7#78' (8(83>>4Qg:h``%??`03`>`  ! ! S^^T*%i6I)UcUceo6pq  S^^T* sfH-F.F&4F.4F)5B+F. F,!F.%BH-&F.)F.,F..AH*?H-H* H**H-c"^RIHpHpV!V4'g,V!V4pRVR//VPVR,&VR,#\ WW#4GRjxL #L5i)zThe ingress route into a managed worker. A removed folder is refused before a worker exists, like the in-process runner: a worker failing in its policy scope reads as a LOST execution (``unknown``) and parks every follower behind it.)workspace_readyworkspace_unavailable_resultrrrrN)r&rrrexecute_managed)r3r4r^r5rrrs&&&& r admit_managedrFs^U 6 " "-f5:BFGUW9X !!#n"56&'' = == =sAAAAc"^RIHp^RIHpHp\ WV4V!WV4GRjxL wrxTeITPPTPR4RT!Y(4R//TPTR,&T#\YT4'dR#\YT4GRjxL p T fR#T wrTPp TPTPTR,T 4R;rRpT P\ ^R 7GRjxL pT P"P%4'd \'R 4h^R IHpT!T\-\.TTR,YR ,TR 74GRjxL pTR,TR,3T n\2P4!\6YY#Y4GRjxL pT P8P;RTR,TR,344\2P4!T P<T4GRjxL T P>PA4T PR\BR 7GRjxL pTPDPGTP4TR,8wd \'R4hTPHTP,PJPL;_uu_4\OYY*T4'd RRR4KRRR4TRRRR/8Xd \'R4hTPGR4pTR8Xd+\QT4RR08XdTR,TR,8XdEKTR8Xda\QT4RR08XdO\STR,\T4'd2TPWTPTR,RRTR,/4EK|T!YPTR,T4'dEKTR8Xd\QT4RR08XdT f\YTR,4wrTPHTP,P\P_TPR4\2P4!T P<RR/4GRjxL EKATRR/8XEdT e\a\bPd4;_uu_4\2P4!T Pf^ 4GRjxL RRR4\iY4p R/T CR R/CRT/\2P4!\jYR!,YR",4GRjxL CTPTR,&T R#,T PTPR4\2P4!T Pl4GRjxL #\'R$4hELD \ d)TPPTPR4hi;iELELELLELELEL +'giEL;i \Zdp\'R4ThRp?ii;iELELC +'giELJ;iEL L \n\2Pp3EdYp^RI9pTPu\v4PyR%\ST\&4'd TPzM\}T4Pv4Tf\ST\2Pp4'g(\ST\&4'drTPzR 8Xda\YT P4uRp?T PTPR4\2P4!T Pl4GRjxL #h^R&IAHBp^R IHpT!T\-TYT44GRjxL TPHTP,pTPJPL;_uu_4TP\P_TPR4TPT4TPJPTPRR'R(R'RTR,R)R*R+R/4RRR4M +'giM;iTPPTR,R4pTe(TP4'gTPR'4\R,4ThRp?ii;i T PTPR4\2P4!T Pl4GRjxL i;i5i)-r9)publish_worker_tool_event)managed_turn_textrefused_turn_resultNrrrrr<)rr) tracked_write principal_id)rrrhellorbirthc3j"TF)p\V\4'gKV'gK%VxK+ R#5irrJrs& rr"execute_managed..zs%i)LAPZ[\^aPbaghaa)Ls 33 3rMsecretTstale_generationrerrorreasonmanaged_worker_failedreadydeltarNz message.deltainvalid_worker_resultfinishfinished local_viewerr)rrrEzManaged worker lost: %s)lose_admission_workerzWorker execution is unknown.contentoutcomeunknownstatusmanaged_worker_unknown)Igateway.run_turn_progressrgateway.session_context_refsrrrrrrkr)rrrr8 adopt_agentr HELLO_SECONDSrrrgateway.session_runtime_workersrrrrrrrdrextendrrrSTOP_ACK_SECONDS executingr.r(rYlockrarrrhpublish_executionr rrVsnapshotrr0r1rrrrrrlogging getLoggerrwarningrrrr"gateway.session_worker_reservationr_publish_pendingrZwaitersdone set_resultr)r3r4r^r5rrrrNrefusalspawnedrrrrrrLrrrrrr rrbwaiters&&&& rrrRsXCS93'/ GG ##''=:BDWX[Degnpr9s !!#n"56YS11,YSAAGOF((G#..#l*;VDH ET.'' 1'== ;;    #$<= =A#Iw7OQZ!$^!4gXfTgot0vwwuuW~6 '' ICQV]]i% *:E(O)Lii U333  ++D6F+GGE""&&s~~6#l:KK'(:;;##CNN3@@EEE eDDFEDF(4KLL'(?@@99V$Dw3u:&%#@U5\UZ[`UaEaw3u:&&1A#AjQVW]Q^`cFdFd++CNNC >2;;DDS^^UYZ'' fh5GHHH,,1Ej7788!++GLL"===9+H=@@>4@'5BH#--.DiWcQdfnwEqFGGBH ))#n*=> 01<  CNND) ---=$$:; ;UH ##''= B> w^3HFEE "N+,CD#MNI >988 G@ .; w-- .I(#++,E$S*;<>4 8  & &s +    % %cnnv?]9>3~K^`ikt'7# $$ # # # ""&&s>':DA  fkkmm   < =&&>?SH5I8  CNND) ---sc  U1U.U1A/c  V'!Ac %X ?V*#X $=X !V-";X V0AX 8V399X 2V63A9X ,V9 X DX W )A'X W,6X %W2,W/-W21A X <X=!X ?c X c # X .U113V$$c *X -X 0X 3X 6X 9 W  X W) W$$W))X /W22 X = X c  a?'B>a:%a?&b*?c )\,*c 0$a:]Aa:A/`  a: ` Aa:a::a??bAc cc  c r):rr contextlibrr collectionsr dataclassesrr functoolsrr/r$rrtypesrror r0rragent.managed_workerr r r r rhermes_state_runtimerrrrrrr7rdr[rYrrr=raryrtrrrrrrrrrrrrrrrrsO/' ! HHG2 $T;= ZlZ(\@$*:C(C(L%P#L@"Hc(# 4  D >n.r