+ jHj8, aER<t0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIt^RIHt^RIHtHtHt^RIHt^RIHtHtHtHt^RIHt^RIH t H!t!H"t"^RI#H$t$H%t%H&t&^R I'H(t(^R I)H*t*H+t+^R I,H-t-]P\R 8Xd^RI/t/M^RI0t0R t1Rt2Rt3]P\R 8Ht4]5!4t6Rt7Rt8ER=t9Rt:]Pv!4tRRlltIER>RRlltJ!RR]4tKER?RR /R!R"llltLR#R$ltMR%R&ltNR'R(ltOR)R/R*R+lltP] P!R,4tRR-R.ltSR/R0ltTR1R2ltUER@R3R4lltVR5R6ltWR7R8ltXR9R:ltYR;tZR<R=lt[]\!R>R?04t]R@RAlt^RBRCRDR/RERFllt_RGRHlt`^ta]a3RIRJlltbRKRLltcRMRNltdRORPlteRQRRltfRSRTltgRURVlthRWRXltiRYRZltjR[R\ltkR]R^ltlR_R`ltmRaRbltnRcRdlto] P!Re4tpRfRgltqRhRiltrRjRkltsRlRmlttR)R/RnRolltuRpRqltvRrRsltwRtRultxRvRwltyRxRyltzRzRC/R{R|llt{R}R~lt|RRlt}ER@RRllt~ER@RRlltERARRlltRRltRRltRRltRRltRR/RRlltRRltRRltRRltRRltRRltRRltRRltER@RRlltRRltRRltRRltRRltRRltRRltR]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6R]6RRCRRRRRRC/RRlltRRltRRCRR/RRlltRRltER@RRllt^xt]3RRlltRRltRRltRRlt]\!RR04tRRltRRlt]!RR7!RR44tRRltRRltRRltRRltRRR]6RRRRRRRRRR/RRlltER@R)R/RRllltRRltRRltRRltER@RRlltRRltRt^ _$$Y$7W_1A1A1M&&&___sAC5%%C5 C55 D c&<V^8dQhRS[RS[/#rrNr<rOrP)r"r#s"r$r%r&jsIIUITIr'cVP;_uu_4VPpRRR4X^8H;'gVPW!R7# +'giL/;i)NrS)r,r/rX)r5rNrJs&& r$flush_RuntimeStatusWriter.flushjs@ ___33JQHH$))J)"HH_s A  A c6<V^8dQhRS[RS[S[,/#)rrJr<)r=r rP)r"r#s"r$r%r&os 3 3# 3(4. 3r'c 0VP;_uu_4VPV8d RRR4R#VPV8;'d&VP^8H;'dVPRJpV'dRMRuuRRR4# +'giR#;i)zW``True`` once ``generation`` persisted, ``False`` once it can no longer, else ``None``.NTF)r,r1r0r.r-)r5rJ no_more_works&& r$rW_RuntimeStatusWriter.settledos{ ___**j8_**j8**,,1**MMT)  )5d___s"BBBB6B B c<V^8dQhRR/#rr<N)r"r#s"r$r%r&{sTTdTr'cVP;_uu_4VPfVPP4K*VPwrpRVnWnRRR4RpVP;'g\ !X\ VX44VP;_uu_4^Vn\VPX4Vn Vf$\VPV4Vn RVn MW@n VPP4RRR4Vf5VP'd \PR4RVn EKMEKPVP'g!\P!RV4RVn EK\P#RV4EK +'giELH;i \dpTpRp?EL0Rp?ii;i +'giL;i)TNz,Gateway runtime-status persistence recoveredFzFFailed to persist gateway runtime status; later updates will retry: %sz,Failed to persist gateway runtime status: %s)r,r-rXr.r)_write_json_file_merge_over_on_disk BaseExceptionrVr0r1r2rIr3loggerinfowarningdebug)r5rJr:r;errorexcs& r$rG_RuntimeStatusWriter._run{shmm+OO((*,0MM) ' $ +5( ! .2E 33#33T;NtU\;]^+,(-01K1KZ-X*=25d6Q6QS]2^D/'+D$',$**,!}'''KK NO+0D(()))\^ce'+$ KUS;!!   s7AF(F0;F0'A*G  F- 0 G;GG G ) r0r,r3r2r-r/r1r4r)r.N@) __name__ __module__ __qualname____firstlineno____doc__r6rKrXrarWrG__static_attributes____classdictcell__r#s@r$rr:sJ 8 8   II 3 3TTr'rcV^8dQhR\R\\\3,R\\\3,/#r9rr r!r)r"s"r$r%r%s6NNdNT#s(^NS#XNr'cT\V4p\V\4'd/VCVC#T#)a Lay the canonical snapshot over whatever is on disk right before writing. Out-of-process writers (the migration's compensator clearing multiplex-owned status, container_boot seeding ``desired_state``) stamp this file directly; the gateway's fields win, theirs survive.)_read_json_file isinstancer )r:r;existings&& r$rlrls0t$H&04&@&@ "h "' "MgMr'c$V^8dQhR\/#rr<)r)r"s"r$r%r%s&&$8&r'c\;_uu_4\f \4s\uuRRR4# +'giR#;i)zULazily create the single writer; callers serialise on ``_runtime_status_state_lock``.N)_runtime_status_state_lock_runtime_status_writerrrir'r$_get_runtime_status_writerrs+ $ # ! )%9%; "% $ # # #s 2 A rwc0V^8dQhR\R\/#r^r_)r"s"r$r%r%sEE%E$Er'c>\pVfR#VPVR7#)z?Wait boundedly for all runtime-status updates submitted so far.TrS)rrarNwriters& r$flush_runtime_statusrs! #F>4Dv||G|'DDr'c0V^8dQhR\R\/#r^r_)r"s"r$r%r%sSSeSdSr'c"\pVfR#\P!VP\ \ V4R4R7GRjxL #L5i)zDAwait the current writer generation without blocking the event loop.NTrRrS)rasyncio to_threadrarVrOrs& r$flush_runtime_status_asyncrs: #F ~""6<<U7^S9QR RR RsAAA Ac0a]tRt^toRtV3RltRtVtR#) StormInfozFRespawn-storm check result: start count, window, and backoff to sleep.c><V^8dQh/S[;R&S[;R&S[;R&#)rcountwindow_s backoff_s)r=rO)r"r#s"r$r%StormInfo.__annotate__s* JO   r'riN)rxryrzr{r|__annotate_func__r}r~rs@r$rrsPr'r backoff_cap_sgr@c ^V^8dQhR\R\R\R\\,/#)r max_startsrrr<)r=rOr r)r"s"r$r%r%s1   #( DI  i r'c \4R, p\VPRRR7\P!\ 4P 4p.pVP4'd]VPRR7P4F8pVP4pV'gKVP\V44K: VPV4VUu.uFqtV, V8:gKVNK ppV\V^,^(4)Rp VPR4p V P!RP#R V 44R,R R7\$P&!W4\)V4V8:dR#\+VR ^\+\)V4V, ^4,,4p \-\)V4WR 7# \dEKFi;iuupi \.d"p \0P3R T 4Rp ? R#Rp ? ii;i)zRecord this start; :class:`StormInfo` when > ``max_starts`` landed in ``window_s``. Best-effort: a broken ``gateway-starts.log`` ledger is logged and swallowed, never fatal.zgateway-starts.logTparentsexist_ok utf-8-sigencodingNz.tmp c38"TFp\V4xK R#5iru)repr).0tss& r$ /record_start_and_check_storm..s =HbbHutf-8@)rrrz8respawn-storm breaker bookkeeping failed (non-fatal): %s)rr parentrnowr timestampexists read_text splitlinesstripappendrO ValueErrorrV with_suffix write_textjoinosreplacelenminr Exceptionrnrq) rrrr:rrlinerrecentto_writetmpbackoff_es &&$ r$record_start_and_check_stormrs  #77dkk4$?ll3))+ " ;;== <GGIzz|OOE$K0 J '@x8x+?""x@Sa4456v& tyy =H ==DwW 3 v;* $mSAS[:5Mq1Q,Q%RSs6{XQQ"A  OQSTsVB&G)GGG0G6BG8A G G GGG H%HHc$V^8dQhR\/#rr)r"s"r$r%r%s%%$%r'c\4#)zLaunch-home HERMES_HOME for identity files (PID, lock, status, markers): ``get_hermes_home()`` honors the per-session ``_HERMES_HOME_OVERRIDE`` and would misroute them.)rrir'r$_get_process_hermes_homers  # $$r'cFV^8dQhR\\,R\/#rr:r<)rr!)r"s"r$r%r%s9999r'cT\V4P4PRR7#)z=Stable absolute HERMES_HOME path for persisted identity data.F)strict)r expanduserresolver:s&r$_canonical_hermes_homers# : " * *% * 88r'chV^8dQhR\\,R\\,R\/#)rleftrightr<rr!rP)r"s"r$r%r%s.JJD3JJtczJdJr'c\PP\\ V444pV\PP\\ V4448H#)zBCompare HERMES_HOME paths with the host platform's case semantics.)rr:normcaser!r)rrleft_cs&& r$_same_hermes_homersF WW  c"8">? @F RWW%%c*@*G&HI IIr' expected_homecV^8dQhR\\\\3,,R\\\,,R\ /#)rrecordrr<)r r r!rrrP)r"s"r$r%r%s: T#s(^ $8@8L r'c\V\4'dVPR4MRp\V\4'dVP 4'gR#VeTM \ 4p\ W#4'*# \dR#i;i)a(True when a persisted gateway record names a DIFFERENT HERMES_HOME (cross-profile kill guard: profile B's stop must never SIGTERM profile A). ``expected_home`` overrides the comparison base. Legacy records without ``hermes_home`` prove nothing -> False; a comparison failure fails closed -> True. hermes_homeNFT)rr getr!rrrr)rr recorded_homebases&$ r$recorded_gateway_home_conflictsrss2/profiles/`` -> name, root home -> "default", else None.Nprofilesdefault) rrrrB_PROFILE_LABEL_REmatchhermes_constantsget_default_hermes_rootr contextlibsuppressr)r canonicalr default_homes default_homes& r$_profile_label_for_homers*40  */@/F/Fy~~/V/V~~%==?`aM%   + + LN;; , +;, +&  , + +s CC CC C+ c~V^8dQhR\\\\3,,R\\,/#rrr<r r r!r)r"s"r$r%r%)s/ ] ]HT#s(^$< ]# ]r'c\V\4'gR#VPR4p\V\4'd:\P VP 44'dVP 4#VPR4p\V\4'd"VP 4'd \V4#R#)zProfile label of a scoped-lock owner (None: PID-only wording): the validated ``profile`` field stamped by :func:`acquire_scoped_lock`, else inferred from ``hermes_home`` (old locks).Nprofiler)rr rr!rrrr)rrrs& r$scoped_lock_owner_labelr)s fd # #jj#G'3$5$;$;GMMO$L$L}} ::m $D,6tS,A,Adjjll "4 (\X\\r'c$V^8dQhR\/#rr)r"s"r$r%r%5s66t6r'c$\4R, #) gateway.pid)rrir'r$ _get_pid_pathr5s # % 55r'cFV^8dQhR\\,R\/#rpid_pathr<r r)r"s"r$r%r%9s"KKXd^KtKr'cPT;'g \4P\4#ru)r with_name_GATEWAY_LOCK_FILENAMErs&r$_get_gateway_lock_pathr9s  ' '  2 23I JJr'c$V^8dQhR\/#rr)r"s"r$r%r%=s==$=r'c,\4\, #ru)r_RUNTIME_STATUS_FILErir'r$_get_runtime_status_pathr =s # %(< < 11r'c$V^8dQhR\/#rr!)r"s"r$r%r%Ts))c)r'cR\P!\4P4#ru)rrr isoformatrir'r$ _utc_now_isorTs <<  & & ((r'g6AcFV^8dQhR\R\\,/#)rvaluer<)rr r!)r"s"r$r%r%\s r'c<\V\4'dVP4pVPR4'd VRRR,p\P !V4pTP'dTP4#TP\R7P4#\V\\34'd\V\4'g\V4p\P!\4P4p\ P"!V4'dV\$8gW4R,8dR#\P&!V\R7P4#R# \ dR#i;i \(\*\ 3dR#i;i)a3Coerce a persisted ``updated_at`` (ISO string, legacy epoch, hand edit, garbage) to the RFC3339 ``string | null`` that ``/api/status`` promises. ``str``: iff fromisoformat parses (trailing ``Z`` tolerated; naive -> UTC). Epoch: before 2000-01-01, > 1 day ahead or non-finite -> None. ``bool``/other -> None.Nz+00:00)tzinfoiQ)tz)Zz)rr!rendswithr fromisoformatrr"rrrr=rOrPrrmathisfinite_EPOCH_MIN_PLAUSIBLE fromtimestamp OverflowErrorOSError)r rawparsedsecondsrs& r$normalize_updated_atr2\s8 %kkm << # #cr(X%C ++C0F!---RRTTV^^3^-GRRTT%#u&&z%/F/F,ll3))+}}W%%3G)G7[`U`K` ))'c:DDF F   w 3  s$ E/)F/ E>=E>FFloop_liveness_watchdogshutdown_watchdogc0V^8dQhR\R\/#)rruntimer<)rr!)r"s"r$r%r%|sCCr'c\V\4'dTM/pVPR4R8wdKVPR4R8XdR#VPR4R8XdVPR4\9dR#R#)alWhat a NOT-running gateway's retained ``gateway_state.json`` says about it now: ``"startup_failed"`` (or a watchdog-stamped ``"degraded"``) only while the operator still wants it running, else ``"stopped"``. ``hermes gateway stop`` keeps the last ``startup_failed`` + ``exit_reason`` on disk for diagnostics and records the durable stop intent as ``desired_state``; a profile the operator stopped is "stopped", not a current failure. A watchdog exit (``degraded`` + an exit_reason in ``WATCHDOG_EXIT_REASONS``) is the same kind of current failure as ``startup_failed`` and is kept under the same rule, so the dashboard agrees with ``hermes gateway status``. Any other retained state of a dead process (``running``, ``starting``, missing) is just "stopped". Shared by ``/api/status`` and ``/api/messaging/platforms`` so the sidebar strip and the Channels page cannot disagree. desired_statestopped gateway_statestartup_faileddegraded exit_reason)rr rWATCHDOG_EXIT_REASONS)r6rts& r$retained_gateway_stater@|sew--2B vvo)+ 66/ "&6 6# 66/ "j 0RVVM5JNc5c r'forceFexpected_start_timecVV^8dQhR\R\R\\,RR/#)rpidrArBr<N)r=rPr rO)r"s"r$r%r%s6'C'C 'C'C;CE?'C 'Cr'c V'dd\'gVeTVf\RV R24h\V4pVf\RV R24h\W24'g\RV R24hV'd \'gN\ P!Y'g\PM\\R\P44R#^RI H p\P!R R \V4R R .R R RR^ V!4RR7pTP"^8wdQTP$;'gTP&;'gRP)4p\T;'gRT 24hR# \\ 3dp\RT R24ThRp?ii;i \ d*\ P!T\P4R#i;i)uTerminate a PID; POSIX SIGTERM/SIGKILL, Windows taskkill /T /F for force. Identity guard: Windows ``force`` REQUIRES a matching ``expected_start_time`` (taskkill on a recycled PID has killed svchost.exe); POSIX optional, but a provided mismatch refuses the kill everywhere. On POSIX an expectation is optional, but when the caller provides one and it no longer matches the live process, the kill is refused on every platform — a mismatched fingerprint always means the PID was recycled. See #89614. Nzrefusing to force-kill PID z# without a process start-time guardz#; process start time is unavailablez; process identity changedz; malformed start timeSIGKILL)windows_hide_flagstaskkillz/PIDz/Tz/FTrrF)capture_outputtextrerrorsrN creationflagscheckrztaskkill failed for PID ) _IS_WINDOWSr._get_process_start_time_start_times_agree TypeErrorrrkillsignalSIGTERMgetattrhermes_cli._subprocess_compatrG subprocessrunr!FileNotFoundError returncodestderrstdoutr)rDrArBcurrent_start_timersrGresultdetailss&$$ r$ terminate_pidr`s ++!4!@  &7u<_`a a4S9  %7u<_`a a ^%&8NN ;C5@Z[\\O kk 5V^^gfiQWQ_Q_6`a@ S4 6tRVYJ\J^ A==77FMM77R>>@gAA#;C5!ABB#:& ^7u 0 and within 1ms of ``current``; raises on junk.c3f<"TF&q^8;'d\VS, 4R8*xK( R#5i)gMbP?N)abs)rrcurs& r$r%_start_times_agree..s-YDXqq5::SS\U%::DXs11FT)rOallmap)rbrcrjs&*@r$rPrPsO .C 7 Y YssYCxDXYssYsYsYCxDXYYYr'cHV^8dQhR\R\R\R\/#)rrcrb tolerancer<)rr=rP)r"s"r$r%r%s)::C:#:#:os:r'cP\\V4\V4, 4V8*#)aLiveness-reconciliation comparator for :func:`get_process_start_time` fingerprints: the recorded owner and the current reading are the same incarnation when they agree within ``tolerance``. Raises on junk; callers decide what an unreadable (``None``) side means.)rhr=)rcrbros&&&r$start_time_fingerprints_matchrqs! s7|c(m+ , 99r'c0V^8dQhR\R\/#)ridentityr<r)r"s"r$r%r%sEE#E#Er'cv\P!VPR44P4R,#)r:NN)hashlibsha256encode hexdigest)rss&r$ _scope_hashrzs( >>(//'2 3 = = ? DDr'c<V^8dQhR\R\R\/#)rscopersr<)r!r)r"s"r$r%r%s&EEEsEtEr'cB\4V R\V4 R2, #)-z.lock)rrz)r|rss&&r$_get_scope_lock_pathrs" ?wa H(='>eD DDr'cFV^8dQhR\R\\,/#rrDr<r=r )r"s"r$r%r%s   # r'cV\RV R24p\VPRR7P4^,4# \\ \ \\3dMi;i^RI p^RI H p\T!TPT44^d,4# \dR#i;i)uReturn a stable per-process start-time fingerprint, or None. Used as a PID-reuse guard: a ``(pid, start_time)`` pair uniquely identifies a process, so a recycled PID (same number, different process) yields a different value and is never mistaken for the original. On Linux this is field 22 of ``/proc//stat`` (start time in clock ticks since boot, an int). On platforms without ``/proc`` (macOS, Windows) we fall back to ``psutil.Process(pid).create_time()`` — a float epoch timestamp — quantized to an int (centiseconds) for stable equality. The two sources are never mixed on a single platform: ``/proc`` always succeeds first on Linux, and always fails on macOS/Windows so psutil is always used there. Because the guard only compares the value recorded at spawn against the live value *on the same host*, the differing units across platforms are irrelevant — only same-source equality matters. /proc/z/statrrN) process_birth)rr=rsplitrY IndexErrorPermissionErrorrr.psutilhermes_cli.process_identityrroundProcessr)rD stat_pathrrs& r$rOrOs$vcU%()I 9&&&8>>@DEE z?J P   =]6>>##67#=>> s#/A A$#A$(0B B('B(cFV^8dQhR\R\\,/#rr)r"s"r$r%r%s((( (r'c\V4#)zBPublic wrapper for retrieving a process start time when available.)rOrDs&r$get_process_start_timers "3 ''r'cFV^8dQhR\R\\,/#r)r=r r!)r"s"r$r%r%ssx}r'c \P!\4;_uu_4\RV R24P 4pV'd<VP RR4P RRR7P4uuRRR4#RRR4\P!\4;_uu_4^RI pVPV4P4pV'dR PV4uuRRR4#RRR4\'g\P!\\P4;_uu_4\P !R R \#V4R R .RRRR^RR7pVP$^8XdEVP&P4'd%VP&P4uuRRR4#RRR4R#R# +'giELM;i +'giL;i +'giR#;i)uProcess command line as one string: /proc, then psutil, then ``ps``. Order is by cost, and this runs per live gateway on every roster/status poll. ``psutil`` reads the process table in-process (a ``sysctl`` on macOS) where ``ps`` costs a fork+exec — measured 0.02ms against 4.2ms on macOS for the same string. It cannot always answer: on macOS it raises ``AccessDenied`` for a process owned by another user, which ``ps`` still reports, so ``ps`` stays as the fallback rather than being replaced.rz/cmdline rignore)rKN ps-pz-ozcommand=TrF)rIrJrrKrNrM)rrr.r read_bytesrdecoderrrrcmdlinerrNrWTimeoutExpiredrXr!rZr\)rDr/r cmdline_partsr^s& r$_read_process_cmdlinerso   W % %VC5)*557 ;;w-44WX4NTTV & %  &   Y ' 's+335 88M* ( '  ( ;  **C*C D D^^tSXtZ8#$\]F   A%&--*=*=*?*?}}**,E D D % & % % ( ' E D s+AG /.Bs) R6a A AAJJ/@$A A6s,,TrXc3r<"TF,pSV,R8H;'dSV^,,R8HxK. R#5i)z-mz gateway.runNri)ritokenss& r$rrDs4 `I_A6!9  ? ?A-!? ?I_s77c3*"TF qR8HxK R#5i)zdesktop-gateway.pyNrirbs& r$rrJs 8i$ $ic3*"TF qR9xK R#5i)rN)rzhermes-gateway.exerirs& r$rrLs L)Q8 8)rrhermes_cli.mainzhermes_cli/main.pyc3*"TF qR9xK R#5i)rN)rz hermes.exerirs& r$rrOsZ/8! %%yrgatewayr&) --profiler) --profile=z-p=)shlexrrrrlowerrsplitr ranyrangerr startswithr enumerate) r raw_tokensr cased_tokens basenamesjoinedfiltered skip_nexttokenrrs & @r$_gateway_command_subcommandrs %[[6 @JJz!GGEN**45zLJ!- .Aggi .F /56v!#q!"%%vI6'|44-\:  %12\'')\239:6aXXc1%b))6 :|{"  s R6 Rsss R6 RRR s `sSY{]^I_ `sss `sSY{]^I_ ```  s 8i 8sss 8i 888 s L) Lsss L) LLL XXf F&+?v+MVYVYZ/8ZVYVYVYZ/8ZWWHI I ) )I!!"788 OOE " h' I &'!ec(m&;8E? F F( u %]]_ %K .73:s.L6)MM!M" M')!M,6MMcLV^8dQhR\R,R\R,/#rr)r"s"r$r%r%ds"S4ZC$Jr'c\V4pVf V'gV#\P!VRR7pVUu.uF#q3P R4P RR4NK% pp\ V4pVfR#V^,p\V\V44F'p\RPW'R44pVfK%Vu# R# \dTP4pLi;iuupi)uGateway lifecycle subcommand a command line would EVENTUALLY launch, or None. The identity matcher (``_gateway_command_subcommand``) deliberately refuses ``python -c …``: the trailing argv is the inline program's data, not that process's own identity (#107002). Callers that inspect a command line as SPAWN INTENT — "if I launch this, does a gateway runtime eventually appear?" — need the opposite answer, because ``gateway._spawn_gateway_restart_watcher`` hides a real ``… -m hermes_cli.main gateway run`` behind exactly that wrapper. ``tests/_fixtures/live_system_guard.py`` is the canonical caller. Still no substring matching: the wrapper is peeled token-wise and each remaining suffix is handed to the same canonical matcher. NFrrrrr) rrrrrrrrrr) rdirectrrr flag_indexrHrnesteds & r$gateway_spawn_intent_subcommandrds) 1F  %[[6 @JJz!GGEN**45zLJ),7J NE 5#l+ ,,SXXjn-EF  M-  %]]_ %JsB>)C>CCc>V^8dQhR\R,R\/#rr!rP)r"s"r$r%r%s99S4Z9D9r'c\V4R8H#)z:True only for a real ``gateway run`` process command line.rXrrs&r$looks_like_gateway_command_liners &w /5 88r'c>V^8dQhR\R,R\/#rr)r"s"r$r%r%s"FFS4ZFDFr'c\V4R9#)aTrue for command lines that can host the runtime (``run`` or ``restart``: without a service manager the manual restart fallback runs ``run_gateway()`` in-process). For validating Hermes-owned records / cleanup scans only; ``looks_like_gateway_command_line`` stays strict.>rXrestartrrs&r$'looks_like_gateway_runtime_command_liners 'w /3E EEr'c0V^8dQhR\R\/#rr=rP)r"s"r$r%r%sFFSFTFr'cT\V4p\V4;'d \V4#)z;True when the live PID still looks like the Hermes gateway.)rrPr)rDrs& r$_looks_like_gateway_processrs$#C(G = E E.s;WRV$CIIRVr)r _GATEWAY_KINDrlistrr)rrs& r$_record_looks_like_gatewayrsN ::f D zz&]**T42H2HPT 2388;WRV;W3W XXr'cFV^8dQhR\R\\,/#r profile_homer<rr r!)r"s"r$r%r%s"QQQ(3-Qr'cTVPPR8Xd VP#R#)zYProfile id for ``/profiles/``; None for the root/default home (bare gateway).rN)rrB)rs&r$_profile_name_for_homers& , 3 3 8 8J F<  PDPr'cFV^8dQhR\R\\,/#rrr<)r!r )r"s"r$r%r%s    r'c\VP44;'gVP4Uu.uFqP4NK pp\V4Fgwr4VP R4'dVP R4^,u#VR9gK?V^,\ V48gKXW#^,,u# R#uupi)zLowercased ``-p``/``--profile`` argument of a case-preserved command line (a bootstrap's interpreter ``-P`` is no ``-p``, #127865), or None. Token equality: ``-p ops`` must not claim ``-p ops-2``.r=N)rr)rrrrr partitionr)rrrrtoks& r$profile_flag_valuers"7w}}!G!Z!Z7==?!Z [!ZAggi!ZF [F# >>, ' '==%a( ( % %!a%#f+*=a%= $  \sCz4(?:^|\s)hermes_home=(?:\"([^\"]*)\"|'([^']*)'|(\S+))cFV^8dQhR\R\\,/#r)r!r)r"s"r$r%r%s  S T#Y r'c\PV4Uu.uF2p\RVP444P R4NK4 up#uupi)a<Values of every ``HERMES_HOME=`` assignment in ``command`` (the caller lowercases and normalizes separators). Values are token-bounded, quotes stripped: the substring test this replaces let ``HERMES_HOME=/root/profiles/ops`` claim a ``/root/profiles/ops2`` gateway. The name is token-bounded too (``FOO=hermes_home=/x`` is not an assignment), and a trailing separator on the value is stripped -- ``HERMES_HOME=/root/.hermes/`` (systemd ``Environment=`` or a shell wrapper spelling) is the same home as ``/root/.hermes``; callers strip the profile home the same way.c30"TF qfKVxK R#5iruri)rgs& r$r*hermes_home_assignments..s 4 1QQ s r)_HERMES_HOME_ASSIGNMENT_REfinditernextgroupsrstrip)rms& r$hermes_home_assignmentsrsP,44W= =A 4 44;;C@=  s8Ac<V^8dQhR\R\R\/#)r command_lchome_lcr<r)r"s"r$r%r%s&eeseSeTer'cV\V49dR#\P!R\P!V4 R2V4RJ#)aXTrue when ``command_lc`` carries ``HERMES_HOME=`` (both lowercased, ``/``-separated, no trailing separator). Argv reaches us space-joined, so an unquoted value with a space in it (``HERMES_HOME=C:/Users/John Doe/.hermes``) is cut at the space by the token parser; a token-bounded literal match of the whole home recovers that spelling.Tz(?:^|\s)hermes_home=z /?(?=\s|$)N)rresearchescape)rrs&&r$command_line_names_hermes_homers@ )*55 99,RYYw-?,@ KZ X`d ddr'c<V^8dQhR\R\R\/#)rrrr<)r!rrP)r"s"r$r%r%s&jjcjj$jr'cVP4PRR4p\V4p\V4P4PRR4P R4pVe3VR8wd,\ V4VP48XdR#\ W$4#\ V4R9dR#\V4'*;'g \ W$4#)aMTrue when a gateway command line belongs to ``profile_home`` (mirrors ``hermes_cli.gateway._matches_current_profile``): a stale state file can record a PID recycled onto ANOTHER profile's live gateway. Named profiles carry ``-p``/``--profile `` or ``HERMES_HOME=`` on argv; the default gateway runs bare. Separators normalized.rrrTF)Nr)rrrr!rrrr)rrr profile_namers&& r$ _command_line_belongs_to_profiler s ((s3J),7L,%%'//c:AA#FGLI$= g &,*<*<*> >-jBB'"*;;&z2 2 i i6TU_6iir'c<V^8dQhR\R\R\/#)rrDrr<)r=rrP)r"s"r$r%r%s&hh3hdhthr'c^RIHpHpV!4pTRJ;'d/TPT8H;'dTP T!T44# \dR#i;i)uDoes the ONE host gateway — PID ``pid`` — serve ``profile_home``'s profile? Argv cannot answer this: the host singleton runs ONE home's (usually bare/default) command line while multiplexing every profile, so :func:`_command_line_belongs_to_profile` rejects every secondary and the profile reads as "not running" while its messages are being served. The live served set is the only proof; the argv rule stays as the fallback when no record exists. ) host_gatewayprofile_name_for_homeFN)gateway.host_attachrrrrDserves)rDrrrowners&& r$_host_gateway_serves_homers[K   g gc!1 g gellCXYeCf6gg sA AAcV^8dQhR\\\3,R\R\\ ,R\ /#)rrrDrr<)r r!rr=r rrP)r"s"r$r%r%s>bb cNb!$b8@b br'c\V4pV'g \V4#\V4'gR#Ve\W4'dR#VRJ;'g \ W24#)u>True when a live PID still identifies as this gateway record. The live command line wins (a stale record's argv must not make a recycled PID count as a gateway; with ``expected_home`` it must also belong to that profile — or serve it as the host multiplexer); unreadable cmdline (Windows/EACCES) -> persisted record.FNT)rrrrr )rrDr live_cmdlines&&$ r$ _record_matches_live_gateway_pidrsW)-L )&11 2< @ @ %>s%R%R D a a$D\$aar'c:V^8dQhR\\,/#r)rr!)r"s"r$r%r%s  d3i r'c\\P4p\PP R4pVR,R.8Xd#\ VRR4'dVP V^&V#)u{``sys.argv`` with the inline-source placeholder replaced by the entry point this process runs. The published launcher script (``_launchers._launcher_script``: the POSIX ``bin/hermes`` shell launcher and the Windows ``.cmd``) imports ``hermes_cli.main`` inside ``python -I -c