+ jHj,a0t$Rt^RIHt^RIt^RIt^RIt^RIHt^RI H t H t H t H t HtHtHt]P"!]4tR%t^)rDrEderiveds&& r _tick_secondsrKcs0 x1}""@@G 7=P9Z [[rc$V^8dQhRRRRRR/#)r tick_secondsr. floor_secondsrr)rs"rrrks&PP3PsPsPrc.\W\,4#)zLife a credential needs to be left alone this tick: it must survive until the next tick (nothing looks at it again before then), hence tick + skew rather than the bare skew. )rHr)rMrNs&&r_refresh_horizon_secondsrPks }-NN OOrc V^8dQhRRRR/#)rentryobjectrr"r)rs"rrrrs```4`rc DRUu/uFq\WR4bK up#uupi) agent_keyN)rUagent_key_expires_atscope)getattr)rRks& r _entry_staterZrs&0^ _0^1wu& &0^ __ _smin_access_ttl_secondsc$V^8dQhRRRRRR/#)rmin_key_ttl_secondsr.r[r-rzOptional[bool]r)rs"rrrvs#Vco}rc,^RIHpV!R4pT'dTP 4'gR#TP 4pTfR#Tf\p\\TRR4T4p\\T4T4pT'g T'g*TP4fR#\P R4R # \d"p\P RT4Rp?R#Rp?ii;i \d"p\P RT4Rp?R#Rp?ii;i) zRefresh the current pool entry when stale. True = usable/refreshed; False = pool exists but no usable entry; None = no Nous pool. ) load_poolr%z4Nous auth keepalive: credential pool unavailable: %sNz9Nous auth keepalive: credential pool selection failed: %sF expires_atz4Nous auth keepalive: refreshed credential pool entryT) agent.credential_poolr_r)r4debughas_credentialsselectrrrXrrZtry_refresh_current)r]r[r_poolexcrRaccess_expiring key_usables$$ r_refresh_selected_pool_entryrjvs3  t++--  }%!B"75,#EG]^O%l5&9;NOJj  # # % - KL )  KSQ  PRUVs.B8C'8 C$CC$' D2DDr]timeout_secondsc(V^8dQhRRRRRRRR/#) rr]r.r[r-rkrrboolr)rs"rrrs.&&&)&CR& &rc ^RIHpV!4;_uu_4\\^<\ V44VR7pVe VuuRRR4#\ R4pV'g RRR4R#^RIHpV!V4'd RRR4R#^RIH pV!4;_uu_4\\V4R7RRR4\PR 4RRR4R # +'giL0;i \dip\T\ 4'd*TP"'d\P%R T4M\PR T4Rp?RRR4R#Rp?ii;i +'giR#;i) z^Refresh Nous auth once if credentials are configured (pool entry first, then singleton state).)#launch_profile_scope_if_multiplexed)r]r[Nr%Fis_guest_state)background_caller)rkz3Nous auth keepalive: refreshed singleton auth stateTz)Nous auth keepalive requires re-login: %szNous auth keepalive failed: %s)!tui_gateway.launch_profile_policyrorjrHr.r hermes_cli.anon_authrqhermes_cli.anon_challengerrr r r4rbr)r(rrelogin_requiredinfo) r]r[rkro pool_resultr?rqrrrgs $$$ r refresh_nous_auth_keepalive_oncerysV , . .2 #B,?(@ AZp   " / . (/ / . 8 %  / .  D"$$0AQRaAbc% LLN O- / .&%$ #y))c.B.B.B GM =sC9 / .. / / . .s_&E!E!%E!9E!C+C 0C+ C( #C++ E6'E-E E!EE!! E2 c 0V^8dQhRRRRRRRRRRR R /#) r stop_eventzthreading.Eventinterval_secondsr.initial_delay_secondsr]rkrrNoner)rs"rrrs>69RU/> rcV^8dVPV4'dR#VP4'g@\V\44p\ WS4p\ WfVR7VPV4KUR#)N)r]r[rk)waitis_setrKrBrPry)r{r|r}r]rktickhorizons&$$$$ r_keepalive_looprskq Z__5J%K%K!!-/I/KL*4E( 'Yh  "rr|r}c ,V^8dQhRRRRRRRRRR /#) rr|r-r}r.r]rkrrr r)rs"rrrs<&!&!&&!&!&!Ra&! &!rc^RIHpV!4\V4pV^8:dR#^RIHpV!\ R44'd\ PR4R#\;_uu_4\e+\P4'd\uuRRR4#\P4\P!\ \3RRR\#V4R \%^\#V44R \%^<\#V44R V/R 7s \P'4\ PR 4\uuRRR4# \dLi;i +'giR#;i)zSStart the process-wide Nous auth keepalive thread (idempotent; None when disabled).) start_workerNrpr%z;Nous auth keepalive skipped: free tier has no refresh tokenTznous-auth-keepaliver|r}r]rk)targetargsdaemonnamekwargszNous auth keepalive started)hermes_cli.guest_handoffrr7rtrqr r4rbr)_keepalive_lockr is_alive_keepalive_stopclear threadingThreadrr.rHstart)r|r}r]rkrrqs$$$$ rstart_nous_auth_keepalivers!6N()9:14 1&9 : : LLV W ;   (->-G-G-I-I$  %,,"/);DOd"C(8$9'Q4I0J)K%s2s3F/G'H!?   ! 23       s*,E&"E EBE EE E# c V^8dQhRRRR/#)rtimeoutrrr~r)rs"rrrs % %e %d %rcp^RIHpV!V4\;_uu_4\p\P 4RRR4Xe)VP 4'dVPVR7\;_uu_4\VJdRsRRR4R# +'giLa;i +'giR#;i)z@Stop the keepalive thread. Intended for graceful shutdown/tests.) stop_workerN)r)rrrr rsetrjoin)rrthreads& rstop_nous_auth_keepaliversv4 " foo// G $   & $    sB: B$ B! $ B5 i)g@)+__conditional_annotations____doc__ __future__rloggingrrtypingrhermes_cli.authrrrrrr r getLogger__name__r4r0rIrG)NOUS_AUTH_KEEPALIVE_INITIAL_DELAY_SECONDSr1LockrEventrr __annotations__r r+r7rBrKrPrZrjryrrr)rs@rrs ?"    8 $(/$+-()*&,.)*F'.."//#04-44, ( \P`fj>&"A&,0&UY&R"&!)-&!!J&! ?&!dh&!R % %r