+ jHj! aERMt0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIHtHt^RIHt^RIHtHtHtHt^RIHt^RIHtHtHtHt^RIH t ^RI!H"t"H#t#H$t$^R I%H&t&H't'H(t(H)t)H*t*H+t+H,t,]PZ!].4t/]'t0.ERNOt1.EROOt2R R.t3.ERPOt4]^k]5!0ERQm4]&,t6]^k]5!0ERRm4t7]^kRt8R t9R!R"lt:R#R$lt;.]OR%N5t<]5!0R&kR kR'kR(kR)kR*kR+kR,kR-kR.kR/kR0kR1kR2kR3kR4kR5kR6kR7kR8kR9kR:kR;kRkR?kR@kRAkRBkRCkRDkREkRFkRGkRHkRIkRJkRKkRLkRMkR kRkRk];QJd.RN]=4FNK 5M !RN]=44t?]P!RO4tARPRQltBRRRSltCRTRUltD]5!0RkRkRkRkRkRkRkRkRkRkRVkRWkRXkRYkRkRkRkR&kR kRZkR[kR\kR]kR^kR_kR`kRakRbkRckRkRdkR k4] ,;tEtF]5!0ERSm4tG]5!0ERTm4tH]5!0ERUm4tIRfRgltJRhRiltKRjRkltLRlRmltMRnRoltNRpRqltORrRsltPRtRultQRvRwltRRxRyltSRztTR{R|ltUR}R~ltVRRltWRRltXRRltYRRltZRRlt[RRlt\RRlt]ERVRRllt^RR/RRllt_RRlt`RRltaRRltbERVRRlltcRRltdRRlteRRltfRtgRRlth]!RR44tiRRltj/tk]^kRtlRRltmRRltnRRltoRRltpRRltqRRltrRRlts/tt]^kRtuRtv/tw]^k] P!4ty/tz]^kRRlt{RRlt|RRlt}RRlt~RRltRRltRRRRRRRR/RRlltRRltRRltRRRR/RRlltRR/RRllt/t]^kRsRtRRltRRltRRltRRlt]!4t]^kRRRR/RRlltRRltERVRRlltRRltERWtRRltRRltERXRRlltRRltRRltRRltRRltRRltERXRRlltERYRRlltRRltRERltERERltERERltERXERERlltERXERERllt]5!0ERZm4tER[t]P!ER 4t]5!0ER\m4tER ER ltER ER ltERERltERER/ERERlltERERltERERltERERlt!ERER]4tERXERERlltERtERER ltER!ER"ltER#ER$ltER%ER&ltERVER'ER(lltER)ER*ltER+ER,ltER-ER.ltERVER/ER0lltER1ER2ltER3ER4ltER5R/ER6ER7lltER8ER9lt]5!0ER]m];QJd.ER:]4FNK 5M!ER:]44tER;ER<lt]5!0ER^m4t]5!Re04tER=ER>ltER?ER@ltERVERAERBlltERVERCERDlltEREERFltERGERHltERIERJltERKERLltR#(_z:Profile management for multiple isolated Hermes instances.N) dataclassfieldPath)DictListOptionalTuple)HOME_CREDENTIAL_DIRS)archive_root_dirs make_targznormalize_archive_partssafe_extract_targz)PM_RUNTIME_ROOT_DIRS)_rmtree_make_writable_rmtree_with_retrywait_profile_unowned)LOCAL_RUNTIME_ROOT_DIRS PROFILE_ID_REclear_named_profile_deletedmark_named_profile_deletednamed_profile_has_identitynamed_profile_is_deletednamed_profile_is_livelogshome.envzmemories/MEMORY.mdzmemories/USER.md gateway.pidgateway_state.jsonprocesses.json hermes-agent .worktreesprofilesbin node_modules.hermes-runtimenodestate.db state.db-wal state.db-shmbackupsstate-snapshots checkpointsz.no-bundled-skillsz# Per-profile secrets for this Hermes profile. # API keys and tokens set here override the shell environment. # Behavioral settings belong in config.yaml, not here. c<V^8dQhR\R\R\/# directorycontentsreturnstrlistset)formats"8/home/ubuntu/.hermes/hermes-agent/hermes_cli/profiles.py __annotate__r9hs!sdsc(\4pVFpVR8XgVPR4'dVPV4K4\P!\P P W44Pp\P!T4'dK\P!T4'dK\P!T4'dKTPT4K V# \dTPT4EKi;i)uEntries under *directory* that must never be copied out of a profile: bytecode caches, ``*.sock``/``*.tmp`` names, and anything that is not a regular file, directory, or symlink. :func:`shutil.copytree` cannot copy special files, so a single live Unix socket without a ``.sock`` name (or a FIFO, or a device node) would abort the whole export or clone with ``[Errno 6] No such device or address``. Symlinks survive — copytree recreates them. __pycache__)z.sock.tmpz.pycz.pyo) r6endswithaddoslstatpathjoinst_modeOSErrorstatS_ISREGS_ISDIRS_ISLNK)r0r1ignoredentrymodes&& r8_non_exportable_entriesrMhs 5G M !U^^4U%V%V KK   88BGGLL:;CCD T""dll4&8&8DLL.__annotate__s%  3 tCy S r:c<\V4P4S8Hp\ W4pV'd"VP S\ V4,4V# \\3dRpLKi;iF)rresolverE ValueErrorrMupdater6)r0rSat_rootrJ root_excludesource_resolveds&& r8_ignore+_clone_all_copytree_ignore.._ignorese 9o--/?BG *);  NN<#e*4 5$ G sAA+*A+)rWr6_CLONE_ALL_HISTORY_EXCLUDE_ROOT_get_default_hermes_home_CLONE_ALL_DEFAULT_EXCLUDE_ROOT)rOr]r[r\s& @@r8_clone_all_copytree_ignorerb}sO!((*O67L24<<>>77    Nr:z.envrc auth.jsonzauth/google_oauth.jsonz.op.envnpmrcz.anthropic_oauth.jsonzgoogle_token.jsonzgoogle_oauth_pending.jsonzgoogle_client_secret.jsongoogle_chat_user_tokensz#google_chat_user_client_secret.jsonz#google_chat_user_oauth_pending.jsonzgoogle_chat_user_token.jsongoogle_chat_user_oauth_pendingzslack_tokens.jsonz honcho.jsonz mem0.jsonzwebhook_subscriptions.jsonzteams_pipeline_store.jsonz mcp-tokensvaultzbrowser-profile browser_auth bot-desktopzbrowser-profilesbrowser_profilespairingzplatforms/pairingzfeishu_comment_pairing.jsonzwhatsapp/sessionzplatforms/whatsapp/sessionz matrix/storezplatforms/matrix/storezcache/bws_cache.jsonzcache/bws_cache.enc.jsonz"workspace/meetings/node_token.jsonzweixin/accountsz.copilot_jwt.jsonzruntime/photon-sidecar.jsonproxyz chrome-debugc#r"TF-p\VP4PR44xK/ R#5i/N)tuplecasefoldsplit.0ps& r8 rvs+`G_!uQZZ\%7%7%<==G_s57zpauth\.json\..+|\.env\.bak.*|config\.yaml\.(?:bak-\d{8}t\d{6}z(?:\.\d+)?|bak\.\d+|corrupt\..*|bak-pre-migrate-.*)cdV^8dQhR\\R3,R\\R3,/#r/parts.r2)rpr4)r7s"r8r9r9s*44sCx4U38_4r:cZ\;QJd.RV4FNK 5#!RV44#)c3@"TFqP4xK R#5iN)rq)rtparts& r8rv_fold..s3UTUsrp)rys&r8_foldrs$ 53U35353U3 33r:cJV^8dQhR\\R3,R\/#rxrpr4bool)r7s"r8r9r9s&QQ5c?QtQr:ca\V4o\S4^8Xd%\PS^,4'dR#\;QJd#V3Rl\ 4F 'gK R# R#!V3Rl\ 44#)zTrue for a PROFILE_CREDENTIAL_PATHS store, anything below one, or a root copy of one. Case-folded: on a case-insensitive filesystem ``Platforms/Pairing`` IS the pairing store.Tc3F<"TFpSR\V4V8HxK R#5ir|lenrtstorefoldeds& r8rv*profile_path_is_private..s#P9Ovks5z"e+9Os!F)rr_STORE_COPY_RE fullmatchany_CREDENTIAL_PATH_PARTSryrs&@r8profile_path_is_privaters\5\F 6{aN44VAY?? 3P9OP33P3P3P9OP PPr:cJV^8dQhR\\R3,R\/#rxr)r7s"r8r9r9s&oouS#Xo4or:ca\V4o\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)zRTrue for a strict ancestor of a store (``platforms`` holds ``platforms/pairing``).c3<"TF5p\V4\S48;'dVR\S4S8HxK7 R#5ir|rrs& r8rv6profile_path_contains_private_store..s;nWmes5zCK'IIE,3v;,?6,IIWms "AATF)rrrrs&@r8#profile_path_contains_private_storers7 5\F 3nWmn33n3n3nWmn nnr:zhermes_state.dbzresponse_store.dbzresponse_store.db-shmzresponse_store.db-walz auth.lockactive_profilez .update_checkz source-checksz errors.logz.hermes_history image_cache audio_cachedocument_cachebrowser_screenshots sandboxes .cursorrulesc$V^8dQhR\/#r/r2r)r7s"r8r9r9s33D3r:c$\4R, #)zNamed-profiles root, anchored to the hermes root (NOT the current HERMES_HOME, which may itself be a profile) so ``coder profile list`` sees all profiles.r"r`r:r8_get_profiles_rootrs $ % 22r:c$V^8dQhR\/#rr)r7s"r8r9r9!s%%$%r:c^RIHpV!4#)zzDefault (pre-profile) HERMES_HOME: ``~/.hermes``, or HERMES_HOME itself in Docker/custom deployments (e.g. ``/opt/data``).get_default_hermes_root)hermes_constantsrrs r8r`r`!s9 " $$r:c$V^8dQhR\/#rr)r7s"r8r9r9(s99$9r:c$\4R, #)rrrr:r8_get_active_profile_pathr(s # %(8 88r:c$V^8dQhR\/#rr)r7s"r8r9r9,s**$*r:cH\P!4R, R, #)z.localr#)rrrr:r8_get_wrapper_dirr,s 99; !E ))r:c0V^8dQhR\R\/#r/aliasr2r4r)r7s"r8r9r90sWWWWr:cd\4\PR8Xd V R2, #T, #)zQWrapper script path for *alias*: ``.bat`` on Windows, bare name elsewhere.win32.bat)rsysplatform)rs&r8 _wrapper_pathr0s*  3<<73JE7$ VVPU VVr:cFV^8dQhR\R\\,/#rr4rr)r7s"r8r9r95s"EESEXd^Er:c\PR8Xd\V4\4V, .M \V4.p\ RV4R4#)z\The Hermes wrapper for *alias*: :func:`_wrapper_path`, else a pre-``.bat`` bare Windows one.rc3L"TFp\V4'gKVxK R#5ir|)_is_our_wrapperrss& r8rv$_find_our_wrapper..8s=Jq/!*<Js$ $N)rrrrnext)r candidatess& r8_find_our_wrapperr5sEGJ||W^G^-&(8(:U(BCersxeydzJ =J=t DDr:c0V^8dQhR\R\/#r/rBr2rr)r7s"r8r9r9;s$4r:c\VRR7;_uu_4pRVP\49uuRRR4# +'giR#;i \dR#i;i)zQTrue when *path* reads as a Hermes-generated wrapper (``hermes -p`` in its head). utf-8-sigencodingz hermes -pNF)openread_WRAPPER_READ_LIMIT Exception)rBfs& r8rr;sH $ - -!&&)<"==. - - - s+A: A A A A AAc0V^8dQhR\R\/#r/canonr2r4FileNotFoundError)r7s"r8r9r9Dsqq#q*;qr:c$\RV RV 24#) Profile 'z8' does not exist. Create it with: hermes profile create rrs&r8_missing_profile_errorrDs y/ghmgno ppr:c0V^8dQhR\R\/#rr)r7s"r8r9r9Hsii#i*;ir:c \RV R24#)zKFor delete/rename/export of a name that matches no profile (likely a typo).zNo profile named 'z.'. See your profiles with: hermes profile listrrs&r8_unknown_profile_errorrHs 1%8fg hhr:c0V^8dQhR\R\/#r)r4FileExistsError)r7s"r8r9r9Msr:c&\RV RV R24#)zA profile named 'z8' already exists. Switch to it with `hermes profile use zK`, see all profiles with `hermes profile list`, or choose a different name.)rrs&r8_profile_exists_errorrMs,  E7"Z[`ZabS S r:zaUse lowercase letters, numbers, '-' or '_', starting with a letter or number, up to 64 charactersc0V^8dQhR\R\/#r/namer2r4)r7s"r8r9r9ZsGGGGr:c\P!RRVP4P44PR4R,p\P V4'dV#R#)ziBest-effort valid id derived from *name* (``'My Work'`` -> ``'my-work'``); ``my-work`` if nothing usable.z [^a-z0-9_-]+-z-_:N@Nzmy-work)resubstriplower_PROFILE_ID_REmatch)r candidates& r8_suggest_profile_namerZsNTZZ\-?-?-ABHHNsSI&,,Y779FYFr:c0V^8dQhR\R\/#r)r4rX)r7s"r8r9r9`scjr:c P\V4p\V: R\ RV RV R24#)z is not a valid profile name. z (for example: z#). Then run `hermes profile create z`.)rrX_PROFILE_NAME_RULE)r suggestions& r8_invalid_profile_name_errorr`sA&t,J  (01C0DOT^S_`++5,b : r:c0V^8dQhR\R\/#rr)r7s"r8r9r9jsr:c \V\4'g&\R\V4P RV: 24hVP 4pV'g \R4hVP 4R8XdR#VP4#)uCanonical profile id used on disk and in ``-p`` argv: lowercase, ``default`` matched case-insensitively. Dashboards/tools may pass title-cased labels — normalize before validation, assignment, and subprocess spawn. Named profiles are stored lowercase under ``profiles//``. The special alias ``default`` is matched case-insensitively (``Default`` → ``default``). Dashboards and tools may pass title-cased display labels; normalize before validation, assignment, and subprocess spawn (see issue #18498). Raises ``ValueError`` for non-string input: a numeric profile id (e.g. a DB row id or a falsy sentinel) silently coerced via ``str()`` becomes a real on-disk profile directory (``profiles/0/``, #88842). Callers that hold a numeric id must resolve it to an actual profile name first. z#profile name must be a string, got : zprofile name cannot be emptydefault) isinstancer4rXtype__name__rrqr)rstrippeds& r8normalize_profile_namerjsy dC  1Dz""#2dX /  zz|H 788i' >> r:c(V^8dQhR\RR/#r/rr2Nr)r7s"r8r9r9s    r:cVR8XdR#\PV4'g \V4hV\9d\ RV: R24hR#)uRaise ``ValueError`` unless *name* is a valid profile id (strict as-given lowercase — normalize mixed-case input first) and not in ``_RESERVED_NAMES``; ``default`` passes. Callers that accept mixed-case or title-cased input from users (dashboard UI, CLI args) should call :func:`normalize_profile_name` first. This separation keeps validate honest about what the on-disk directory name must look like, while ingress-point normalization handles UX flexibility (see #18498). rNz Profile name uz is reserved — it collides with either the Hermes installation itself or a common system binary. Pick a different name.)rrr_RESERVED_NAMESrXrs&r8validate_profile_namersV y    % %)$// D8$% &  r:c(V^8dQhR\RR/#rr)r7s"r8r9r9sPPcPdPr:cj\PV4'g\RV: R\ R24hR#)zRaise ``ValueError`` unless *name* is a safe wrapper filename: it is used verbatim under ``~/.local/bin``, so ``../../.bashrc`` must never escape the wrapper dir.zInvalid alias name z. .N)rrrXrrs&r8validate_alias_namers7    % %.thb9K8LANOO &r:c0V^8dQhR\R\/#rr)r7s"r8r9r9sssr:c2\V4p\V4V#)z;normalize + validate in one step; returns the canonical id.)rrrrs& r8 _canon_validr s "4 (E% Lr:cRV^8dQhR\R\\\3,/#r)r4rpr)r7s"r8r9r9s#c4i(8r:cv\V4p\V4pVP4'g \V4hW3#)zN``(canon, profile_dir)`` for an existing profile; FileNotFoundError otherwise.)r get_profile_diris_dirrrr profile_dirs& r8_existing_profile_dirrs9  E!%(K     $U++  r:c0V^8dQhR\R\/#rr)r7s"r8r9r9s ( (# ($ (r:c\V4pVR8Xd \4#\PV4'g \ V4h\ 4V, #)z4Resolve a profile name to its HERMES_HOME directory.r)rr`rrrrrs& r8r r sI "4 (E '))    & &)%00  % ''r:c0V^8dQhR\R\/#rr4r)r7s"r8r9r9s . . . .r:c|\V4p\V4pTR8XdR#\T4# \dR#i;i)z?Check whether a live (non-tombstoned) profile directory exists.FrT)rr rXrrs& r8profile_existsrsG&t,%e,    -- s , ;;cJV^8dQhR\R\R,R\/#)r/rrNr2r4rr)r7s"r8r9r9s%  s $+  r:c\V4pVf^RIHpV!4p\V4P 4P RR7\V4P 4P RR78H# \ dR#i;i)aMTrue when *name* refers to the profile served from *home* (default: current home). Lets single-profile gateways decide whether a ``/p//`` URL prefix is self-referential (safe on the bare route) or names a different profile, which must fail closed rather than silently resolve the owner's config. Invalid names return False.get_hermes_homeF)strict)r rrr expanduserrWr)rrtargetrs&& r8profile_matches_homersu  & < 8"$DF|&&(000>$t*BWBWBYBaBainBaBooo sA.A11 B?B live_onlyTcFV^8dQhR\R\\,/#)r/r r2)rr5r)r7s"r8r9r9s44:r:c\4pVP4'g.#\VP44Uu.uFpVP4'gKVPR8wgK.\ P VP4'gKU\V4'gKhV'd\V4'dKVNK up#uupi)uSorted named-profile dirs (valid ids, never ``default``); ``live_only`` skips tombstones. A dir is a profile only when it carries an identity marker (``named_profile_has_identity``): cron/logging side-effects and pre-tombstone ghost shells leave marker-less dirs that must not be listed, served, ticked, or ``.env``-seeded — that seeding is what turned a ghost shell into a "real" profile on the next ``hermes update`` (#95188, #94823, #99392).r) rr sortediterdirrrrrr)r  profiles_rootrKs$ r8_iter_named_profile_dirsr&s'(M    ! ! !-"7"7"9: :% <<>  JJ) #    ,  'u -  7> :  s)C C ."C C (C 0C C c:V^8dQhR\\,/#rr5r4)r7s"r8r9r9sDIr:cR.p\P!\4;_uu_4VPR\ 444RRR4V# +'giT#;i)ugCheap name-only listing (``default`` + LIVE profile dirs). Unlike :func:`list_profiles` this reads NO per-profile config — safe for hot paths (cron target listings, create validation). Tombstoned shells are skipped like everywhere else: a stale process that re-mkdirs a deleted profile's directory must not resurface it as a ``bot-chat:`` cron target.rc38"TFqPxK R#5ir|rrtrKs& r8rv%list_profile_names..sH-GEZZ-GsN) contextlibsuppressrEextendr&)rSs r8list_profile_namesr0sJ KE   W % % H-E-GHH & L & % Ls !A A" cFV^8dQhR\R\\,/#rr4r)r7s"r8r9r9s r:c `\V4p\V4T\9dRT R2#T\ 9dRT R2#\ P!\PR8XdRMRT.RRR R ^R R 7pTP^8XdgTPP4P4^,p\T4pT\T48Xd\T4'dR#RT R T R2#R# \dp\T4uRp?#Rp?ii;i \ \ P"3dR#i;i)zGReturn a human-readable collision message, or None if the name is safe.N'z' is a reserved namez$' conflicts with a hermes subcommandrwherewhichTutf-8replaceF)capture_outputtextrerrorstimeoutcheckz&' conflicts with an existing command ())rrrXr4r_HERMES_SUBCOMMANDS subprocessrunrr returncodestdoutr splitlinesrrrTimeoutExpired)rrexcresult existing_pathexpecteds& r8check_alias_collisionrJs3 "4 (EE" 5'-.. ##5'=>>   /WWe DdWYXY     !"MM//1<<>qAM$U+HH -/(2K2KugCM?RST T " ) 3x$ z88 9   s5 C+B"DD+ D 6 DD D D-,D-c$V^8dQhR\/#rr)r7s"r8r9r9sSSSr:c\\44\PP RR4P \P 49#)PATH)r4rr@environgetrrpathseprr:r8_is_wrapper_dir_in_pathrSs4 ! "bjjnnVR&@&F&Frzz&R RRr:chV^8dQhR\R\\,R\\,/#)r/rrr2r)r7s"r8r9r9s)Xc]htnr:c \V4pV'd \V4MTp\V4\4pVPRRR7\ T4p\PR8XdTPRT R2R R 7T#\P!R 4;'gR pTPR \P!T4 R T R2R R 7TPTP4P \P",\P$,\P&,4T# \dp\ RT RT 24Rp?R#Rp?ii;i \dp\ RT RT 24Rp?R#Rp?ii;i)zCreate ``~/.local/bin/`` activating profile *target* (default: *name*), so a custom alias can point at a differently-named profile without a post-hoc rewrite.Tparentsexist_oku⚠ Could not create rNrz@echo off hermes -p z %* r7rhermesz#!/bin/sh exec z -p z "$@" u ⚠ Could not create wrapper at )rrrmkdirrEprintrrr write_textshutilr6shlexquotechmodrFrDS_IEXECS_IXGRPS_IXOTH)rrrprofile wrapper_dire wrapper_path hermes_exes&& r8create_wrapper_scriptrisg #4 (E06$V,EG"$K$6!'L  <<7 "  # #&=gYg$NY` # a  h/;;8J  # #&6u{{:7N6OtT[S\\c$dov # w   |002::T\\IDLLX[_[g[gg h  %k]"QC89  0bDEs<D<-E&E&!BE&< E#EE#& F 1FF c0V^8dQhR\R\/#rr)r7s"r8r9r97sr:c\V4p\V4\T4pTfR#\P !\ 4;_uu_4TP4RRR4R# \dR#i;i +'giR#;i)zARemove the wrapper script for a profile. Returns True if removed.FNT)rrrXrr-r.runlink)rrrgs& r8remove_wrapper_scriptrm7sx "4 (EE"%U+L   Y ' ' ( '  ( ' s A' A9' A65A69 B c(V^8dQhR\RR/#r/rr2Nr)r7s"r8r9r9Is..T.d.r:cdVR, P4'gR#\P!\4;_uu_4^RIHpHp^RIHpH pV!\V44pV!4wrgWg8d V!RRR7V!V4RRR4R# T!T4i;i +'giR#;i)zMigrate a copied config.yaml to the current schema (non-interactive, scoped to the new profile); otherwise the first desktop/doctor view shows a scary ``v0 -> latest`` warning. config.yamlNreset_hermes_home_overrideset_hermes_home_override)check_config_versionmigrate_configFT) interactivequiet) existsr-r.rrrsrthermes_cli.configrurvr4)rrsrtrurvtoken current_ver latest_vers& r8#_migrate_profile_config_if_outdatedr~Is - ' / / 1 1   Y ' 'YJ([)9: .&:&< #K'5= &u - ( ' 'u - ( ' 's$"B%B>B BB B/ cFV^8dQhR\R\\,/#r/ profile_namer2r2)r7s"r8r9r9\s"GGG#Gr:cF\4P\V44#)a Alias name of the wrapper activating *profile_name*, or None. For listing ALL profiles prefer :func:`build_alias_map`: per-profile calls re-read every wrapper N times (O(N*M)), which on a ``~/.local/bin`` full of large binaries meant multi-second ``list_profiles``.)build_alias_maprQr)rs&r8find_alias_for_profiler\s   !7 !E FFr:i cFV^8dQhR\\\3,/#r)dictr4)r7s"r8r9r9js%%c3h%r:c\4p/pVP4'gV#\PR8HpRp\ VP 44EF?pVP 4'gKVP'dV'dVPR8XgKI\VRRRR7;_uu_4pVP\4pRRR4XPT4pTR 8XdKYg\T4,RpTP4'd(TP!R^4^,P4MR p T 'gK\#T 4p T'd TP$M TP&p Y8XdTP)Y4EK;YT &EKB V# +'giL;i \\3dEKni;i) a Single-pass reverse map ``{canonical_profile -> alias_name}``. Scans the wrapper dir ONCE, reading only a head slice of each candidate and skipping binaries. A custom alias (file name != profile) wins over the profile-named wrapper; deterministic via sorted iteration.rz hermes -p rrrr)rr;NrO)rr rrr#r$is_filesuffixrrrrEUnicodeDecodeErrorfindrrrrrstemr setdefault) rerG is_windowsprefixrKrcontentidxrestrrs r8rrjs_ #$KF      (J F ++-.}}  <<< 0F  eS;xHHA&&!45Ill6" "9 S[()*26**,, 4#A&,,.B &u-( ejj >   e +!5M1/2 M%IH+,   s0F,4F F, F) $F,)F,,GGcva]tRtRtoRtRtRtRt^tRt Rt Rt Rt Rt RtRtRtRt]!]R7tV3RltRtVtR#) ProfileInfoiz$Summary information about a profile.NFrO)default_factorycr<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[S[,;R&S[S[,;R&S[;R&S[;R&S[S[,;R &S[S[,;R &S[S[,;R &S[S[,;R &S[S[,;R &S[;R&S[;R&S[;R&S[;R&S[S[,;R&#)r/rrB is_defaultgateway_runningmodelproviderhas_env skill_count alias_path alias_namedistribution_namedistribution_versiondistribution_source descriptiondescription_auto display_name bot_titleprevious_names)r4rrrintr5)r7 __classdict__s"r8r9ProfileInfo.__annotate__s I J      C=sm"% $  }+!"#3-.#$"#-%*+0"145:;BI;Cr:r)r __module__ __qualname____firstlineno____doc__rrrrrrrrrrrrrrr5r__annotate_func____static_attributes____classdictcell__)rs@r8rrsk.  E"HGK!%J!%J'+*.)-K#LI!&d ;NCr:rcFV^8dQhR\R\\,/#r)rrr)r7s"r8r9r9s 4 4$ 48D> 4r:cVP4'gR#^RIpVPVPRR74;'g/p\ T\ 4'dT#R# \dR#i;i)zQReturn the mapping in a YAML file, or None when missing/unreadable/not a mapping.Nrr)r hermes_yaml safe_load read_textrrr)rByamldatas& r8_load_yaml_dictrsf <<>>"~~dnnknBCIIrdD))43t3 s+A#A## A21A2icFV^8dQhR\R\\,/#r)rrrp)r7s"r8r9r9s99$98E?9r:cVP4pTPTPTP3# \dR#i;i)z``(mtime_ns, size, inode)``, or None when the file is absent. The atomic writers rename a temp file into place, so a rewrite always lands a new inode even within one mtime tick.N)rFrE st_mtime_nsst_sizest_ino)rBrFs& r8_profile_file_signaturersCyy{   dllDKK 88 s5 AAc0V^8dQhR\R\/#)r/rBkindrr4)r7s"r8r9r9st3r:c&\V4pVfV!4#\V4V3p\PV4pVeV^,V8Xd V^,#V!4p\ \4\ 8d\P 4W63\V&V#)z``compute()``'s value, reused while *path* has not changed. A missing file is never cached: reading it costs nothing, and one created later must be picked up.)rr4_PROFILE_FILE_CACHErQr_PROFILE_FILE_CACHE_MAXclear)rBrcompute signaturekeycachedvalues&&& r8_cached_profile_readrs(-Iy t9d C $ $S )F fQi94ay IE #::!!# )1 Lr:c0V^8dQhR\R\/#r/rr2rrp)r7s"r8r9r9sZZZ%Zr:c>aRV3Rllp\SR, RV4#)zY``(name, version, source)`` from ``distribution.yaml``; ``(None, None, None)`` if absent.c$V^8dQhR\/#rr)r7s"r8r9-_read_distribution_meta..__annotate__sII5Ir:c<\SR, 4pVfR#VPR4VPR4VPR43#)distribution.yamlrversionsource)NNN)rrQ)rrs r8_read&_read_distribution_meta.._readsF{-@@A <# #xx)!4dhhx6HHHr:r distribution)r)rrsf r8_read_distribution_metars'II .A A>SX YYr:c0V^8dQhR\R\/#rr)r7s"r8r9r9sDDDDUDr:craVR, oSP4'gR#RV3Rllp\SRV4#)zLRead model/provider from a profile's config.yaml. Returns (model, provider).rqc$V^8dQhR\/#rr)r7s"r8r9(_read_config_model..__annotate__s  5 r:cB<^RIHpV!S4PR/4p\V\4'dVR3#\V\ 4'd<VPR4;'gVPR4VPR43#R# \ dR#i;i)read_user_config_rawrNrrNN)rzrrQrr4rr)r model_cfg config_paths r8r!_read_config_model.._reads  >,[9==grJI)S)) $&)T** }}Y/II9==3I9==YcKddd+   s!3BB-B)"B BBz config-modelr)ryr)rrrs& @r8_read_config_modelrs= -K        ^U CCr:c(V^8dQhR\RR/#ror)r7s"r8r9r9 s 3 3D 3T 3r:cvVR, pVP4'dR#\P!\4;_uu_4^RIHp^RIHpHp^RI H pV!4R, pVP4'dV!V!V44M/pV'd V!W4RRR4R# +'giR#;i)zCopy (not link) the active profile's model block into a fresh profile so it is usable; profiles stay independent islands afterwards.rqNr)atomic_config_writer)launch_model_seed) ryr-r.rrrrzrrhermes_cli.profile_model_seedrr)rrrrrrrseeds& r8_seed_model_configr s -K   Y ' '4OC "]2BH..BRBR !5f!=>XZ   2 ( ' ' 'sAB'B'' B8 c0V^8dQhR\R\/#rr)r7s"r8r9r9s S S S Sr:cFa^RIHoHpV!VRV3RlR7P#)a{Gateway liveness for a profile dir, never mutating HERMES_HOME. Primary signal is ``gateway.pid`` verified against the runtime lock (fails closed when the lock isn't held by *this* reader: dashboard as a separate s6 service, launch-service gateways with no live PID file); fallback validates the PID in ``gateway_state.json`` against the process table, matching ``/api/status``.)get_running_pidresolve_gateway_livenessFc<S!VRR7#)F) cleanup_staler)rBrs&r8(_check_gateway_running..%s t5Ir:)r use_cache pid_probe)gateway.statusrrrunning)rrrs& @r8_check_gateway_runningrs%I #5I KKR7Sr:c0V^8dQhR\R\/#rr)r7s"r8r9r9(s    r:cD^RIHpV!V4# \dR#i;i)zTrue when the live default gateway multiplexes ``profile_name`` (such a profile has no gateway.pid of its own, so ``_check_gateway_running`` alone reports it stopped). Single shared lookup with the named-profile start guard and cron liveness (#97120). )+named_profile_served_by_running_multiplexerF)hermes_cli.gatewayrr)rrs& r8_served_by_running_multiplexerr(s' R:<HH s  g@gN@c0V^8dQhR\R\/#r/ skills_dirr2)rfloat)r7s"r8r9r9Fsdur:c VP4Pp\P!T4;_uu_4pTFCpTP RR7'd(\ YPRR7P4pKCKE RRR4T# \dR#i;i \dKqi;i +'giT#;i \dT#i;i)zMax mtime of ``skills_dir`` and its immediate children (adding/removing a category bumps the root, a skill bumps its category). One scandir: O(#categories), not O(#files).F)follow_symlinksN)rFst_mtimerEr@scandirr max)rsigitrKs& r8_skills_dir_signaturerFsoo((  ZZ # #r||E|::!#zz%z'H'Q'QR;$ J  $ # J   J scBCB3=B!?B3C BB! B0 ,B3/B0 0B33 C >CC CCc0V^8dQhR\R\/#rrr)r7s"r8r9r9ZsJJ$J3Jr:c@^RIHp\RV!VR444#)uWOne ``os.walk`` over the skills tree (prunes ``.git``/``node_modules``/support dirs instead of statting them). Best-effort: a subtree that vanishes mid-walk (a concurrent skill install/update) is skipped, never raised — ``os.walk`` (``onerror=None``) swallows scandir errors itself, so one profile's churn cannot abort the whole enumeration.)iter_skill_index_filesc3&"TFp^xK R#5i)Nr)rt_s& r8rv$_walk_skill_count..`sIHQqHszSKILL.md)agent.skill_utilsrsum)rrs& r8_walk_skill_countrZs 9 I0ZHI IIr:c0V^8dQhR\R\/#rr)r7s"r8r9r9cstr:cZVR, pVP4'g^#\V4p\V4p\P V4pVeDV^,V8Xd6\ P !4V^,, \ 8d V^,#\;_uu_4\PV\P!44pRRR4X;_uu_4\V4p\P V4pVeNV^,V8Xd@\ P !4V^,, \ 8dV^,uuRRR4#\V4pV\ P !4V3\V&VuuRRR4# +'giL;i +'giR#;i)uCount installed skills in a profile (cached by skills-dir signature + TTL). Walks synchronously when stale — detail surfaces (``hermes profile info``, ``profiles.describe``) want the fresh number; polled lists go through :func:`_cached_skill_count`.skillsN) r r4r_SKILL_COUNT_CACHErQtime_SKILL_COUNT_TTL_SECONDS_SKILL_COUNT_LOCK_SKILL_COUNT_SCAN_LOCKSr threadingLockr)rrrrr scan_lockcounts& r8 _count_skillsr&cs.x'J      j/C%j1I  # #C (F fQi94$))+q :QUm9may  +66sINNUYq=q!9  "*-#,diik5"A3    s"*FA'F+F F  F* c0V^8dQhR\R\/#rr)r7s"r8r9r9}s22T2c2r:c\VR, 4p\P!4p\;_uu_4\P VR4V8*pV'dV\ ,\V&RRR4X'd.\ P!\V3RRR7P4\P V4pVe V^,#^# +'giLi;i)a2Last known skill count with ZERO skill-tree I/O on the calling thread. A never-counted or aged entry schedules one background :func:`_count_skills` per profile per recheck window (which itself re-walks only on signature change / TTL); the next poll picks the result up. ``0`` until the first refresh lands.rrNzhermes-skill-countT)rargsrdaemon) r4rr _SKILL_COUNT_NEXT_CHECKrQ_SKILL_COUNT_RECHECK_SECONDSr"Threadr&startr)rrnowduers& r8_cached_skill_countr1}s kH$ %C ))+C  %))#s3s: +.1M+M #C (   [N24 AAF  # #C (F*6!911  s 6C  C c0V^8dQhR\R\/#r)rr)r7s"r8r9r9s4Dr:c~aRV3Rllp\\SR, RV44p\VR,4VR&V#)uRead ``profile.yaml`` -> ``{description, description_auto, display_name, previous_names}`` (empty defaults when missing/unreadable). Never raises — a corrupt file on one profile must not break ``hermes profile list``.c$V^8dQhR\/#r)r)r7s"r8r9'read_profile_meta..__annotate__s  4 r:cz<\SR, 4;'g/pVPR4pRp\V\4'dZVPR4p\V\4'd3\ VPR4;'gR4P 4pR\ VPR4;'gR4P 4R\ VPRR44R\ VPR4;'gR4P 4R VR \VPR 44/#) profile.yamlui_metarOz hermes-botstitlerrFrrr)rrQrrr4rr_clean_previous_names)rr8r hermes_botsrs r8r read_profile_meta.._reads{^;<BB((9% gt $ $!++m4K+t,,  8 > >B?EEG 3txx 6<<"=CCE TXX.@%%H I C 8 > >B?EEG  3DHH=M4NO   r:r7z profile-metar)rrr5)rrmetasf r8read_profile_metar>sD  $ $[>%A>SXY ZD!$'7"89D  Kr:c:V^8dQhR\\,/#rr()r7s"r8r9r9s  $s) r:c\V\4'g.#.p\4pVFZp\T;'gR4P 4pV'gK0WB9gK8VP V4VP V4K\ V#)zNormalize the ``previous_names`` list from ``profile.yaml``: strings only, stripped, de-duplicated preserving order. Never raises.rO)rr5r6r4rr?append)rawcleanedseenitemrs& r8r:r:sl c4  G 5D4::2$$& 4D$ HHTN NN4  Nr:rrrrc V^8dQhR\R\\,R\\,R\\,R\\\,,RR/#)r/rrrrrr2N)rrr4rr5)r7s"r8r9r9sT 7 7 7'/} 7OWX\~ 73- 78@c8K 7  7r:cVP4'g\RV 24hVR, p\V4;'g/pVeVP4VR&Ve\ V4VR&Ve=VP4'dVP4VR&MVP RR4Ve+\ V4pV'dWvR&MVP RR4^RIHpV!WVR R 7R#) zUpdate ``profile.yaml`` in place: only passed fields are overwritten; the file is created if missing. The profile directory itself must exist.z"profile directory does not exist: r7Nrrrr)atomic_yaml_writeF) sort_keys) r rrrrpopr:utilsrH) rrrrrrBexistingrCrHs &$$$$ r8write_profile_metarMs     "D[M RSS  'D$T*00bH"-"3"3"5#'+,<'=#$     '3'9'9';H^ $ LL .!(7 )0% & LL)4 0(d6r:cRV^8dQhR\R\\,R\/#)r/rrr2r2)r7s"r8r9r9s%;;s;(3-;C;r:cfT;'gRP4pV'dW 8wd V RV R2#T#)u``display_name (canonical_id)``, or the bare id when no display name is set (or it equals the id) — byte-for-byte the pre-feature rendering.rO (r>)r)rrdns&& r8format_profile_labelrRs8   " # # %B!bjbTD6 :d:r:c<V^8dQhR\R\R\/#)r/rrr2r)r7s"r8r9r9s!3ccr:c\V4wr#T;'gRP4p\V4^@8d\R\V4 R24h\ W4R7V#)z|Set (or clear, with ``""``) a presentation-only display name. Returns the stored value; raises ``ValueError`` over 64 chars.rOzDisplay name too long (z chars, max 64).)r)rrrrXrM)rr_canonrrCs&& r8set_profile_display_namerVsZ0 =F!!r((*G 7|b23w<.@PQRR{9 Nr:rlazy_skill_countFc vV^8dQhR\R\R\R\\,R\R\/#)r/rrBrrrWr2)r4rrrr)r7s"r8r9r9s=4(SV-$(5@r:cx\V4wrV\V4wrxp \V4p V'd \V4MRp \ V4p V'gT ;'g \ V4p V'd \ V4M \V4p \RRVRVRVRV RVRVRVR , P4R V R V R VR VRVRV / V B#)z8Build one :class:`ProfileInfo` from a profile directory.NrrBrrrrrrrrrrrrr) rrr>rrrr1r&rry)rrBrrrWrr dist_name dist_version dist_sourcer=rrrs&&$$$ r8 _profile_infor]s).OE+B4+H(I[ T "D2<":.$J,T2O )QQ-KD-Q/?%d+]SWEXK     )3 ET \a  $(6M#9#9#; IT  +5 IR *  @K     r:cFV^8dQhR\R\\,/#)r/rWr2)rr5r)r7s"r8r9r9 st[8Ir:c j.p\4pVP4'dVP\RVRVR74\ 4pV'da\ 4pVFPpVP \VP44pVP\VPVRVVR74KR V#)a@Return info for all profiles, including the default. ``lazy_skill_count=True`` is for POLLED callers (``GET /api/profiles``, ``profiles.list``): ``skill_count`` is the last known value, refreshed off-request, so the request never walks a skill tree (#114041). Default ``False`` counts synchronously (CLI, detail views).rT)rrWF)rrrW) r`r rAr]r&rrQrr)rWr" default_homenamed alias_maprKrs$ r8 list_profilesrc s H+-L i$7GI J $ &E #% E"'=ejj'IJJ OOM%**eZd;KM N Or:zLgateway.standalone is ignored on the default profile: it is the host gatewayc0V^8dQhR\R\/#r/rr2r)r7s"r8r9r9)s////r:cb^RIHp^RIHp\ V4pVR, p\ V4pV!VP 44p\PT4pTe#T^,T8XdT^,e T^,#RpTeW^RIHp T !T4;'g/p \'T PR 4\(4'dT R ,PR 4p\+T4p T\-48Xd2T 'd(\.'g\P\04R sRp Y[3\T&T # \dRpL\dkpRTP3p\PT4TR38wd+\PRT\T4P4TR3\T&Rp?R#Rp?ii;i T\\$3dfpTeT^,T8wd+\PRT\T4P4T\'Ya4'dRMR3\T&Rp?R#Rp?ii;i) uDoes ``home``'s own config.yaml opt this profile out of the host multiplexer (``gateway.standalone: true``)? Memoised by file signature. The DEFAULT profile is never standalone — it IS the host — and warns once per process if the key is set there.) YAMLError)file_signaturerqNz stat-errorFzGCannot read gateway.standalone from %s (%s); treating as not standalonergateway standaloneT)rrgrKrhrr4rFrrEerrno_STANDALONE_MEMOrQloggerwarningrrrzr UnicodeErrorrr_standalone_truthyr`_STANDALONE_WARNED_STANDALONE_DEFAULT_WARNING) rrgrhcfg_pathrrrFrrrcfgrGs & r8profile_is_standaloneru)s &$ :Dm#H d)C "8==?3  ! !# &F fQi949Nay E: &x066BC cggi($ / / N&&|4E  &F ')) ,, NN6 7!% &/S ME  !399-    $E(: : NNd#T#Y%7%7 9!*E 2 7L1 ~i!7h'c););=&/C9S9SY]$^ S ! sCD1 F7F71 F4F4 F4 AF//F47H. AH))H.c0V^8dQhR\R\/#)r/rr2)objectr)r7s"r8r9r9[sfr:cd^RIHp\V\4'd V!V4RJ#\ V4#)z``gateway.standalone`` truthiness via the shared bool parser; only the ``gateway:`` section's ``standalone`` key is read (no top-level alias).) _bool_tokenT)gateway.configryrr4r)rrys& r8rprp[s.+%5!T)) ;r:c0V^8dQhR\R\/#rer)r7s"r8r9r9ds))T)d)r:c&\V4R, #)zgateway.parkedrrs&r8parked_marker_pathr~ds :( ((r:c0V^8dQhR\R\/#rer)r7s"r8r9r9hs--D-T-r:c4\V4P4#)zHMarker contents are deliberately irrelevant, including for provisioning.)r~ryr}s&r8profile_is_parkedrhs d # * * ,,r:include_standaloneinclude_parkedc V^8dQhR\R\R\R\\\\3,,/#)r/ multiplexrrr2)rr5rpr4r)r7s"r8r9r9ps8d&*7;E#t).s?G2L'/DU/K%$,=e,D%%**e$2Ls AAAAA) get_active_profile_namer`r_parked_default_warnedrmrnr?r r/r&)rrractiverserves&dd r8profiles_to_serverps% & 3 3)F&(G!!g5K&Kgh""7+ 0122&/%9$:E LLG2J2LGG Lr:cFV^8dQhR\\,R\/#)r/ clone_fromr2)rr4r)r7s"r8r9r9s  hsm  r:cVf^RIHpV!4pM\V4p\V4pVP 4'g\ RT;'gR RV 24hV#)zPDirectory to clone from: the named profile, or the active profile when ``None``.rzSource profile 'rz' does not exist at )rrr r r r)rrrOs& r8_resolve_clone_sourcersa4$& !*- $Z0     "2:3I3I2JJ^_i^j kll r:cVV^8dQhR\R\R\\,RR/#)r/rBr:rLr2N)rr4rr)r7s"r8r9r9s-&&&C&x}&PT&r:c"VP4'dR#\P!\4;_uu_4VP VRR7Ve!\ P !\V4V4RRR4R# +'giR#;i)zKBest-effort: write *text* to *path* unless it already exists; never raises.Nr7r)ryr-r.rEr\r@r`r4)rBr:rLs&&&r8_seed_file_if_missingrsX {{}}   W % % w/   HHSY % & % % %s 8A== B c@V^8dQhR\R\R\RR/#)r/rOrrelpathr2Nr)r7s"r8r9r9s( & &D &t &c &d &r:cW, pVP4'gR#W, pVPPRRR7\P!W44VR8XdN\ P !\4;_uu_4\P!\V4R4RRR4R#R# +'giR#;i)zCopy one profile-relative file if it exists. ``.env`` is tightened to owner-only: ``copy2`` preserves source mode bits, so a loose source (umask 0o644) would leak.NTrVr) ryparentrZr]copy2r-r.rEr@r`r4)rOrrsrcdsts&&& r8 _clone_filers  C ::<<  CJJTD1 LL&   ) ) HHSXu %* ) ) ) )s !B22 C cFV^8dQhR\R\\,/#rrr5r4)r7s"r8r9r9s  d tCy r:cN.p\FpW, pVP4'gK#\\PP V44pVP 4VP4'd\P!WC4VPV4K V#)zReplace symlinked root files the clone will edit with private copies of their targets (a dangling link is dropped). Returns the relative names materialized.) _CLONE_MATERIALIZE is_symlinkrr@rBrealpathrlrr]rrA)rdonerrBrs& r8_materialize_symlinked_filesrsyD"!  bgg&&t,- >>   LL & D# Kr:cFV^8dQhR\R\\,/#rr2)r7s"r8r9r9s**3*8C=*r:c\\PR8wdR#\P!V4P\P 8wdR#\P !V4pTPR4'dRTR,,#TPR4# \dR#i;i)zTarget of an NTFS directory junction, else ``None``. A junction is a reparse point, not a symlink: ``os.path.islink()`` is False and ``shutil.copytree(symlinks=True)`` descends into it.ntNz\\?\UNC\\:NNz\\?\) r@rrAst_reparse_tagrFIO_REPARSE_TAG_MOUNT_POINTreadlinkrE startswith removeprefix)rBrs& r8_junction_targetrs ww$ 88D> ( (D,K,K KT"((fRj    y )) s3BB B+*B+c@V^8dQhR\R\R\RR/#)r/rr dirs_exist_okr2Nr)r7s"r8r9r9s/WW$WTW$W[_Wr:c aa /o RVV 3Rllp\P!WRW4R7S 'd^RIpS P4FSwrgXP V\ P PV\ P PW`444KU R# \d#p\PRYgT4Rp?KRp?ii;i)a_``shutil.copytree(symlinks=True)`` that re-creates NTFS junctions as junctions instead of traversing them. A ``skills/foo`` junction into a ``skills.external_dirs`` root copied as a physical tree is a second same-named candidate and ``locate_skill`` refuses to guess (#113471). A junction whose target is gone is skipped with a warning, never a crash.cRV^8dQhR\R\\,R\/#rRr3)r7s"r8r9._copytree_keep_junctions..__annotate__s%3tCySr:c<\S!W44pVFdp\\PP W44pVfK1VS\PP W4&VP V4Kf V#r|)r6rr@rBrCr?)r0rSrJrrignore junctionss&& r8r])_copytree_keep_junctions.._ignorescfY./D%bggll9&CDF!;A "'',,y78 D!  r:T)symlinksrrNz%clone: skipped junction %s -> %s (%s)) r]copytree_winapiitemsCreateJunctionr@rBrCrrErmrn) rrrrr]rlinkrrFrs &&f& @r8_copytree_keep_junctionsrs !#I OOCt=Y!)  W  " "6277<<RWW__T=W+X Y* W NNBDRU V V Ws A B C (CC c@V^8dQhR\R\R\RR/#)r/rOrrr2Nr)r7s"r8r9r9s(   4   r:c\W\V44\V4pV'd\P RW#V4\ FpW, P RRR7K \FpW, PRR7K ^RI H pV!V4p\VP44'd\P RW'4R#R#)zu--clone-all: full copytree minus infrastructure/history, then strip runtime files and cloned single-use OAuth grants.zMprofile %s: materialized symlinked %s so the clone never writes through to %sTrV missing_ok)$strip_cloned_single_use_oauth_grantszWprofile %s: dropped cloned single-use OAuth grants %s (inherits the root grant instead)N) rrbrrminfo _PROFILE_DIRSrZ_CLONE_ALL_STRIPrlhermes_cli.authrrvalues)rOrr materializedsubdirstalerrs&&& r8_clone_all_intorsZ6PQ[6\]/ .__annotate__%s%3tCySr:cf<a\SV4pSS8XdVPV3RlV44V#)c3<"TFdqPR4'gK\PP\PP SV44'gK`VxKf R#5i) .install-N)rz.update-)rr@rBisdirrC)rtnr0s& r8rv9_clone_plugins_ignore.._ignore..)sDJe||._ignore%s7))U;   NNJeJ Jr:r)rr]rs& @r8_clone_plugins_ignorer s  | D Nr:c4V^8dQhR\R\RR/#)r/rOrr2Nr)r7s"r8r9r9/s& \ \t \$ \4 \r:cVR, pVP4'd!\W!R, \V4RR7R#R#)aXCopy the source's user-installed plugins (``plugins/`` with ``.install-metadata.json``). ``config.yaml`` already carries ``plugins.enabled`` and ``memory.provider``; without the code a catalog-installed memory provider resolves nowhere in the clone, so the clone silently runs without its memory (or, with lazy installs on, re-fetches the latest catalog pin instead of the revision the source runs). The copy keeps each plugin's tree, revision and catalog provenance (the install record). Python dependencies live in the shared venv, where the source's selection of the same plugin already put them.pluginsTrN)r rr)rOrsource_pluginss&& r8_clone_pluginsr/s= )+N y1H!6~!FVZ \r:cFV^8dQhR\R\\,/#rr)r7s"r8r9r9>sTd3ir:cx\RVR, P444# \d.u#i;i)z@Plugins a clone now carries in ``plugins/``, for the CLI notice.c3"TFbpVPPR4'dK&VP4'gVP4'gKTVPxKd R#5i)rN)rrr rrss& r8rv&cloned_plugin_names..AsHX&IVV..s39:q||~aff&Is#A,A,A,A,r)r#r$rE)rs&r8cloned_plugin_namesr>sFX{Y'>&G&G&IXX X  s &) 99cVV^8dQhR\R\\,R\RR/#)r/rrO sync_importsr2N)rrr)r7s"r8r9r9Gs4AAA(4.A)-A:>Ar:c "VPRRR7\FpW, PRRR7K Vf\V4R#\Fp\ WV4K \ VR, 4VR, pVP 4'd\WPR, \RR7\Fp\ WV4K \W4^RI H pH pV!WV!\VR, 444V'd\ WR4R#R#) ahFresh layout: bootstrap dirs, then either seed a model block (no source) or clone config files, installed skills (the dashboard's "clone from default" must keep bundled AND user-installed skills), and memory/identity files from *source_dir*. ``sync_imports`` also copies the source's ``import-sync.json`` (the manifest the agent-importers plugin's ``hermes import-agent`` writes) so the clone stays registered against the same external trees and ``hermes -p import-agent --sync`` keeps pulling from them. The link is to the external tree, never to the source profile: both profiles stay independent islands.TrVNrqrr)active_memory_providerclone_memory_provider_configzimport-sync.json)rZrr_CLONE_CONFIG_FILESrrr rrM_CLONE_SUBDIR_FILESr hermes_cli.profile_memory_configrrr)rrOrrr source_skillsrrs&&& r8_bootstrap_profile_dirrGsdT2  $$TD$A ;'&JW5'+ 56)M h0FH_ost&JW5':+e !7 UbHb8c!dfJ-?@r:cV^8dQhR\R\\,R\R\R\R\R\\,R\R \R \\,R \/ #) r/rr clone_all clone_configno_alias no_skillsrclone_channelsrsoulr2)r4rrr)r7s"r8r9r9gsTT T#C=T<@TX\TT'+TBJ3-TT15TEMSMT Tr:c V'd VfV'g V'd \R4hV'dV'gV'g \R4hVRJ;'g T;'gTp V'dV 'g \R4h\V4p V R8Xd \R4h\V 4p V P4'dp\ V 4'g_\ V 4'd<\ V ^R7'g\RV R V 24h\P!V 4M\RV R V R 24hV P4'd \V 4hV 'd \V4MRp V eFV'd>^R I H pT!Y;'g\4;'gR4pV'd \V4h\V 4\!V 4pV'dV 'd\#V VV 4M \%VWR 7V e8V'g0^RI HpV!VW-R7pV'd\(P+RV V4^RIHpV!VWRWiR7\0P2!VV 4\7T 4\9T 4T # \4d\P!TRR7hi;i)uCreate a new profile directory and return its path. ``clone_from`` defaults to the active profile when cloning. ``clone_all`` copies all state; ``clone_config`` copies config.yaml/.env/SOUL.md, installed skills, and identity files. Either clone strips the source's messaging channels — bot tokens, allowlists, platform sections, pairing/session state — unless ``clone_channels`` opts in: a copied bot credential makes two gateways fight over one bot (``hermes_cli.profile_channels``; callers list what was left behind with ``channel_platforms_configured(source_dir)``). ``no_skills`` creates an empty profile and writes a marker so ``hermes update`` skips re-seeding its skills; it is mutually exclusive with the clone options, which copy skills. ``sync_imports`` (``--clone`` only; ``--clone-all`` copies the file anyway) also copies the ``import-agent`` sync manifest so the clone can keep pulling the same external agent trees.Nz--no-skills is mutually exclusive with --clone / --clone-from / --clone-all (cloning explicitly copies skills from the source profile).zu--sync-imports requires --clone or --clone-from (there is no import manifest to carry over without a source profile).zP--clone-channels only applies to a clone (--clone, --clone-from or --clone-all).ruSCannot create a profile named 'default' — it is the built-in profile (~/.hermes).)r<zCannot create profile 'z ': a running gateway still owns ': zt exists but carries no profile identity file, so it is not listed as a profile. Move or remove that directory first.)clone_channels_refusal)r)strip_channel_settings) include_staterOz0profile %s: cloned without messaging channels %s)finish_profile_layout)rrrrT ignore_errors)rXr r ryrrrrr]rmtreerrhermes_cli.profile_channelsrrr_clone_staging_dirrrrrmr"hermes_cli.profiles_initializationrr@rename BaseException_maybe_register_gateway_service_notify_multiplexer)rrrrrrrrrrcloningrrrOrrefusalstagingrrrs&&&&&&&&&& r8create_profilergs7"j,  J  \YMN N$AA AA\Ggkll  E noo!%(K$>{$K$K #K 0 0( Q??%(?wFfgrfs&tuu MM+ &")%K=A__ #E**6=&z24J.F(5i5iCZC\5i5i`ij W% % , !-G  J 7 "7J R  !. J-gYfH NPUW_`Lg]ht ';'$E*   gT2 sI'&I'8AI''%J c0V^8dQhR\R\/#rr)r7s"r8r9r9s  D T r:cVPRVP R\P!4 2, pVPP RRR7VP 4'gVP 4'dVP4V#VP4'd\P!VRR7V#)zFresh ``profiles/..staging-`` beside the final dir (same filesystem, so the publish rename is atomic). A leftover from a crashed create is discarded.rz .staging-TrVr) rrr@getpidrZrrrlr r]r)rrs& r8rrs  Q{'7'7&8 "))+#OOGTD9w00 N    gT2 Nr:c(V^8dQhR\RR/#)r/rr2Nr)r7s"r8r9r9s//s/t/r:c"^RIHpV!V4R#)r)#notify_multiplexer_profiles_changedN)#hermes_cli.gateway_multiplex_servedr)rrs& r8r r s W'.r:c0V^8dQhR\R\/#rr)r7s"r8r9r9s))3)4)r:c^RIHpV!V4#)uSettle a deleted profile's durable identity (``profile_identity.purge_profile_identity``). False means the filesystem delete happened but the identity settlement did not — the caller reports that as a pending settlement rather than a clean success.)purge_profile_identity)hermes_cli.profile_identityr)rrs& r8_purge_identityrs C !% ((r:c$V^8dQhR\/#rrL)r7s"r8r9r9s4r:cF^RIHpV!4RJ# \dR#i;i)zTrue when a live default gateway has recorded a served-profile set: every dir under profiles/ is then served by it, so a profile-identity change must be unrouted first.recorded_served_profilesNF)rr!rr s r8_live_default_multiplexerr"s*P')55 s   cRV^8dQhR\R\R\\,/#)r/rrxr2)rrrr)r7s"r8r9r9s%T$8D>r:c `\\4PPP4p\P !\ PRR./\PCR\V4/C\V4RRRR^((//779L ^^TA B@2::?}c+.>?L!dWYXZ     !fmm&9&9&;&;::fmm1134 4 9&:K:K9LM N}}""$$6==..06789  $ $ 5 6  .qc2 3s=BE:-E(E0A%EF-4 F-F- F- F((F-cFV^8dQhR\R\\,/#)r/rxr2)rr5r4)r7s"r8r9r9s$s)r:c.p\4R, p\4FpVR, pVP4'dK$VP4'd\P !W$4MVP \RR7\P!\V4R4VPVP4K V# \d5pT'g"\RTP RT 24Rp?KRp?KRp?ii;i)uGive every named profile predating per-profile ``.env`` one (copy of the default's, or the placeholder header). Never overwrites an existing profile ``.env``. Profiles created before the dashboard/CLI started seeding a ``.env`` (PR #44792) have none, so once the Channels/Keys endpoints became profile-scoped those profiles stopped inheriting the root install's credentials and showed everything as unconfigured. To avoid breaking anyone on update, copy the DEFAULT install's ``.env`` into each named profile that lacks one — that preserves the effective credentials those profiles were already running with (they previously read the root ``.env`` via the process environment). Users can then diverge per profile from there. rr7rru%⚠ Could not seed .env for profile 'rN)r`r&ryrr]rr\_PLACEHOLDER_ENVr@r`r4rArrEr[)rx backfilled default_envrKenv_pathrfs& r8backfill_profile_envsr6sJ*,v5K)+6> ??    R""$$ [3##$4w#G HHS]E *   ejj ),  R=ejj\QCPQQ RsCA)C D#DDz^python[\d.]*w?(\.exe)?$c0V^8dQhR\R\/#)r/argvr2)r5r)r7s"r8r9r9-s  $ 4 r:cdaRPV4o\PPV^,4P 4p\ ;QJd#V3Rl\ 4F 'gK RM RM!V3Rl\ 44'gVPR4'dR#\V4^8dy\PV4'd^\PP\V^,44P 4pVPR^4^,\9#R#)zTrue for a Hermes process: entrypoint marker in argv, executable named ``hermes*``, or a python interpreter directly exec'ing a known ``hermes`` console-script shim. c3,<"TF qS9xK R#5ir|r)rtmarkerjoineds& r8rv"_is_hermes_argv..2s ?*>V *>sTFrYr)rCr@rBbasenamerr_HERMES_ARGV_MARKERSrr_PYTHON_INTERPRETER_RErr4rsplit_HERMES_CONSOLE_SCRIPT_NAMES)r8exe_name script_namer=s& @r8_is_hermes_argvrF-sXXd^FwwQ(..0H s ?*> ?sss ?*> ???8CVCVW_C`C` 4yA~066x@@gg&&s47|4::< !!#q)!,0LLL r:c$V^8dQhR\/#)r/r8)r5)r7s"r8r9r9:s''$'r:c#"\V4FjwrVR9d+V^,\V48dW^,,xK6VPR4'gKOVPR^4^,xKl R#5i)zSYield every profile name selected via ``-p X`` / ``--profile X`` / ``--profile=X``.z --profile==N>-p --profile) enumeraterrrr)r8itoks& r8_argv_profile_selectorsrO:s^D/ % %!a%#d)*;1u+  ^^L ) )))C#A& & "s AA>!A>cRV^8dQhR\R\R\\,/#)r/rrr2)r4rr5r)r7s"r8r9r9Cs%33s33$s)3r:cXa^RIpTP4p\P !40p\ P!\4;_uu_4TP\P !44P4pTe.TPTP4TP4pK1RRR4TP\P !44P4p.pTP.R O4EFpTPp T PR4p T eY9dK.TeT PR4T8wdKJT PR4;'g.p T 'd\!T 4'gKT U u0uFqP#4kK up \$,'gK\&;QJd(T3Rl\)T 44F 'gK RM RM!T3Rl\)T 444p T 'g\ P!\4;_uu_4TP+4;'g/PRR 4p\-T4;'d\/T4P4T8Hp RRR4T 'dTP1T 4EKEK T# \d.u#i;i \dTpELi;i +'giEL-;i \dRpEL i;iuup i +'giL;i \dEK#i;i) a)PIDs of running Hermes *backends* bound to this profile (``gateway.pid`` only tracks the messaging gateway). Tightly scoped: current-user processes, backend subcommands only (never an interactive ``chat``/``tui``), never this process or its ancestors. Empty when ``psutil`` can't inspect anything.Npidusernamecmdlinec3@<"TFp\V4S8HxK R#5ir|)r)rtselrs& r8rv._profile_bound_backend_pids..msfHe.s3u2K- 'L3LL' L2LL L!L7 LL"(L "L-=K>L L L L)(L)waitg$@c^V^8dQhR\\,R\R\R\/#)r/r_ start_timesrdr2)r5rrrr)r7s"r8r9r9ys-  S  u X\ r:c a^RIHoHpHp\ \ VR, 44F\p\ P!R4\;QJdV3RlV4F 'gK RM RM!V3RlV44'dK[R# VFhpS!V4'gK\P!\\\4;_uu_4V!VRVPWc!V44R7RRR4Kj R# +'giK;i)zAfter a graceful ``terminate_pid``, wait up to *wait* seconds (0.5s polls) for *pids* to exit, then force-kill stragglers. True when every pid exited gracefully. ``start_times`` pins each force kill to the same process incarnation (PID reuse guard).) _pid_existsget_process_start_time terminate_pidg?c34<"TF pS!V4xK R#5ir|r)rtrRrhs& r8rv(_wait_then_force_kill..s4t;s##tsTF)forceexpected_start_timeN)rrhrirjrangerrsleeprr-r.ProcessLookupErrorPermissionErrorrErQ)r_rfrdrirjrrRrhs&&$ @r8_wait_then_force_killrsysRQ 3tcz? # 3s4t4sss4t444$ s  $$%7'RRc;??SVXnorXsCtuSR SRRs !C77 D c4V^8dQhR\R\RR/#)r/rrr2Nr)r7s"r8r9r9s&BB#BDBTBr:c\W4pV'gR#^RIHpTF pT!T4K \T/4\R\T4 R24R# \dR#i;i \\ \ 3dKai;i)zTerminate Desktop-spawned / stray backends bound to this profile. Complements ``_stop_gateway_process`` (which only knows ``gateway.pid``): a live ``serve``/``dashboard`` keeps creating files while ``rmtree`` walks, so the final rmdir fails ENOTEMPTY.N)rju ✓ Stopped z profile backend process(es)) rcrrjrrqrrrErsr[r)rrr_rjrRs&& r8_stop_profile_backendsrvs 'u :D 0  #  $# LT #? @A  #OW=   s"AA' A$#A$'BBc(V^8dQhR\RR/#ror)r7s"r8r9r9s**4*D*r:cX^RIHpHp^RIHpVP 4'gR#V!V4pVP 4'd"\R4^RIHpVP4T!T4R# \d!p\PRY4Rp?L0Rp?ii;i T!T4i;i)a}Stop the profile's Bot Desktop (Xvnc + Xfce launcher) before its directory is removed or renamed; gateway shutdown does not reach it (its own session, its own pid file). Scoped through the hermes-home override so the runtime reads THIS profile's bot-desktop/ state, whichever profile invoked the op. A failure here is logged, never fatal: the profile op is what the user asked for.rr)runtimeNu✓ Bot Desktop stopped)leasez(Could not stop the Bot Desktop of %s: %s) rrsrttools.bot_desktopryis_supported_hoststopr[rzreleaserrmrn)rrsrtryr{rzrfs& r8_stop_bot_desktoprs V)  $ $ & & $[ 1E * <<>> + , 0 MMO #5) SA;RRS #5)s)7A11 B<BBBB B)c bV^8dQhR\R\R\R\\,RR/#)r/rr gw_runningrgr2N)r4rrr)r7s"r8r9r9s>BBB4BTBYabfYgBlpBr:c\V4wrE\V4p\V4wrxp \RV 24\RV 24V'd$\RV 2V'dRV R2MR,4V'd\RV 24V'd2\RT R T;'gR 24V 'd\R V 24\R 4\R 4Ve\RV R24V'd\R4R#R#)z0Show what ``delete_profile`` is about to remove.z Profile: z Path: z Model: rPr>rOz Skills: zDistribution: @?zInstalled from: z This will permanently delete:uA • All config, API keys, memories, sessions, skills, cron jobsNu • Command alias (u0 ⚠ Gateway is running — it will be stopped.)rr&rr[) rrrrgrrrrZr[r\s &&&& r8_print_delete_summaryrs(5OE ,K+B;+O(I[ Kw   Ik] #$  %!r(1%5rJK +'( yk<+>+>3*?@A  $[M2 3 +, MN %l^156 @Ar:cBaa]tRtRtoRtV3RlV3RlltRtVtV;t#) ProfileIdentitySettlementPendingiuThe profile's directory was deleted, but its durable session/routing identity was not settled (``hermes_cli.profile_identity.purge_profile_identity`` returned False). Subclasses ``RuntimeError`` so delete-failure handling that treats the error as fatal (the CLI's ``hermes profile delete``) keeps working unchanged; surfaces that can report a partial success (the dashboard's ``DELETE /api/profiles/{name}``) catch this type — it carries the profile, its now-removed path, and the retry command — instead of matching on the message. c&<V^8dQhRS[RS[/#)r/rdrBr)r7rs"r8r9-ProfileIdentitySettlementPending.__annotate__s<<<4:;AACG   ,  U0%e, k*5.k"{+ &u-1={;<   Y ' '9*='BNN``alm  M),\] ^ (   Y ' 'U*;7  M'*^_ ` (   Y ' '?5kB  M.!11]^ _ (-e44 \N+,&*L $K00lm m;(=> [M*+ UI/TU@ RP\~^_eqq Kwj )*  /uBB o"8, G G L ( ' ' ( ' ' ( ' '&  %k]"QC89 sO K-AK$&K8'&L ?:L K! K!$ K5 8 L L M+MMc^RIHpHpV!4R8wdR#V!4pTP 4'dT#R# \dR#i;i)zThe s6 service manager inside the container, else None. Silent on host: a failing/ absent detector must never print a confusing s6 warning to non-container users.)detect_service_managerget_service_managers6N)hermes_cli.service_managerrrrsupports_runtime_registration)rrmgrs r8_s6_runtime_managerrGsOZ ! #t +!#33553?4? s99 AAc(V^8dQhR\RR/#r/rr2Nr)r7s"r8r9r9TsCC#C$Cr:c\4pVfR#VPVRR7R# \dR#\dp\ RT 24Rp?R#Rp?ii;i)uRegister a profile's gateway with s6 inside the container. Best-effort: profile creation must not fail over a supervision-tree hiccup; `gateway start` re-registers. Port selection: each supervised profile gateway loads its own ``HERMES_HOME`` and binds the port resolved by ``gateway/config.py`` from that profile's environment — ``API_SERVER_PORT`` (or ``platforms.api_server.extra.port`` in the profile's ``config.yaml``), defaulting to 8642. There is no ``[gateway] port`` key and no Python-side allocator (PR #30136 review item I5 retired the SHA-256-derived range [9200, 9800) as dead code), so two profiles that both leave the port at its default will both try to bind 8642 — give each profile a distinct ``API_SERVER_PORT`` in its ``.env``. NF) start_nowu+⚠ Could not register s6 gateway service: )rregister_profile_gatewayrXrr[rrrFs& r8r r Ts]  C {C $$\U$C   C ;C5ABBCs' AAAAAc(V^8dQhR\RR/#rr)r7s"r8r9r9jsEECEDEr:c\4pVfR#VPV4R# \dp\RT 24Rp?R#Rp?ii;i)zVTear down a profile's s6 gateway service inside the container; host no-op, idempotent.Nu-⚠ Could not unregister s6 gateway service: )runregister_profile_gatewayrr[rs& r8rrjsK  C {E &&|4 E =cUCDDEs% A AA c<V^8dQhR\R\R\/#)r/rrr2r)r7s"r8r9r9us!3333T3d3r:c^RIp^RIHpHp\P P R4pV!\V44p\V4\P R&^RIH pH pH p RRlp ^RI H p Hp Hp VP!4pRpVR 8XdV!4pV !4V R 2, pVP#4'dSV !VV4'dDV !R R R V4V !R R RV4VP%RR7V !R R R4\'RV R24RpV !V4;'gTpMtVR8Xd`V!4pVP#4'dBV !VV4'd3V !RR\V44VP%RR7\'R4RpMVR8XdV !4pTV!V4\P P)RR4VeV\P R&## \*dp\'RT 24Rp?MRp?ii;iT!T4\P P)RR4TeT\P R&R# T!T4\P P)RR4TeT\P R&ii;i)zWDisable and remove systemd/launchd service for a profile; True when a unit was removed.Nrrr%)get_service_nameget_launchd_plist_pathuser_systemd_unit_dirc(V^8dQhR\RR/#)r/cmdr2Nr)r7s"r8r9._cleanup_gateway_service..__annotate__s T Ts Tt Tr:cL\P!\V4RR^ R7R#)TF)r9r=r<N)r@rAr5)rs*r8_run&_cleanup_gateway_service.._runs NN49TPR Sr:)owned_by_profileremove_system_systemd_unitremove_windows_taskFLinuxz.service systemctlz--userdisabler}Trz daemon-reloadu ✓ Service z removedDarwin launchctlunloadu✓ Launchd service removedWindowsu⚠ Service cleanup: )rrrsrtr@rPrQr4rrrr#hermes_cli.profiles_service_cleanuprrrsystemryrlr[rJr)rr _platformrsrtold_home home_tokenrrrrrrrrremovedsvc_namesvc_file plist_pathrfs&& r8rrus> Vzz~~m,H)#k*:;J(1$' $4 =!ff T zy!!# W ')H,.H:X1FFH  %5h %L%L[(Ix@[(FH=40[(O< XJh781=HHG x /1J  ""'7 K'P'P[(C O<!!T!234 y )+G #:. }d+  (0BJJ} % + %aS)**+*":. }d+  (0BJJ} %  #:. }d+  (0BJJ} % sKA4G99H>>AJc(V^8dQhR\RR/#ror)r7s"r8r9r9s!2!2t!2!2r:cVR, pVP4'gR#VPRR7P4pVPR4'd\P !V4M R\ V4/p\ VR,4p^RIHpH pH pV!W0R7'd\R V R V R 24R#VPR 4pVf V!V4pV!V4\V.WH/4'd\R V R24R#\RV R24R# \\3d\R4R#\ dp \RT 24Rp ? R#Rp ? ii;i)z0Stop a running gateway process via its PID file.rNrr{rR)rirecorded_gateway_home_conflictsrj) expected_homeu✗ Refusing to stop PID z?: its recorded HERMES_HOME belongs to a different profile than z% (stale/poisoned PID record, #89315). start_timeu✓ Gateway stopped (PID r>u✓ Gateway force-stopped (PID u✓ Gateway already stoppedu⚠ Could not stop gateway: )ryrrrr+r,rrrirrjr[rQrsrqrrr) rpid_filerBrrRrirrjrnrfs & r8rrsG]*H ??  2  + 6<<>"%.."5"5tzz#E3s8;L$u+ ji *4 K K +C5177BmD77  #hh|4  &"8"= c #(B C C -cU!4 5 3C5: ;  0- +, 2 ,QC0112s76DA DV^8dQhR\R,R\/#)r/rNr2r)r7s"r8r9r9s  TD[ C r:cVe VR, M \4pVPRR7P4pV'gR#V# \\\ 3dR#i;i)zURead the sticky active profile name (of *root*, default: this process's Hermes root).rrrr)rrrrrrE)rrBrs& r8get_active_profilers[&*&64" "Set the sticky active profile (``default`` = remove the file).rTrVrr= r7rN) r rrrrrZrl with_suffixr\r8)rrrBtmps& r8set_active_profilers  E ."7"7$U++ # %DKKdT2  t $v& ut|g6 Dr:c@V^8dQhR\R\R\RR/#)r/oldnewmessager2Nr)r7s"r8r9r9s(#C#$r:c\P!\4;_uu_4\4V8Xd\ V4\ V4RRR4R# +'giR#;i)z[If the sticky active profile is *old*, point it at *new* and print *message*. Never raises.N)r-r.rrrr[)rrrs&&&r8rrs<   Y ' '  3 & s # 'N ( ' ' 's &A A$ c$V^8dQhR\/#rr)r7s"r8r9r9sr:c|^RIHpV!4P4pV\4P48XdR#\ 4P4pVP V4P p\V4^8Xd,\PV^,4'd V^,#R# \dR#i;i)zProfile name inferred from HERMES_HOME: ``"default"`` when unset or ``~/.hermes``, the name under ``~/.hermes/profiles/``, ``"custom"`` for any other path.rrcustom) rrrWr`r relative_toryrrrrX)rresolvedr%rys r8rrs1 ((*H+-5577&(002M $$]399 u:?~33E!H==8O     sA B,!B,, B;:B;cLV^8dQhR\R,R\R,/#)r/rNr2r)r7s"r8r9r9s"#*d r:c^RIHpV!4fMRFFp\PP V4;'gRP 4pV'gKDVu# \ 4;'gT# \dTu#i;i)a Identity of the profile the current task runs FOR: the ``HERMES_HOME`` override when one is bound (a multiplexed cron tick, a routed gateway turn), else a launcher-pinned ``HERMES_PROFILE_NAME``/``HERMES_PROFILE`` (the kanban dispatcher pins it on its workers), else the name derived from the process's ``HERMES_HOME``; *default* when nothing names a profile. The env pin is read only outside an override: ``os.environ`` is the LAUNCH profile's, so under an override it would re-label a served profile's board writes with the host's identity. )get_hermes_home_overriderO)HERMES_PROFILE_NAMEHERMES_PROFILE)rrr@rPrQrrr)rrenv_namers& r8current_profile_namersr:!)AHZZ^^H-33::.$s!\>[F"**,,>[s#%F)rWrErrrW)rBrs& r8_inside_git_checkoutr sr<<> 3\x>[(JZJZ>[\33\3\3\x>[(JZJZ>[\ \\ \ "sA A54A5c$V^8dQhR\/#rr)r7s"r8r9r9's4r:c^RIp\4R, p\V4'gV#\\R4'dR\P !4 2MRp\ P!4R, \ VP44RV 2, 3pVFp\V4'dKVu# \R4h) z@Choose an export directory that cannot become source-tree input.Nzprofile-exportsgetuidrrOz.hermes-profile-exportszhermes-profile-exportszNo safe automatic export destination: every candidate directory is inside a Git checkout. Provide an explicit output path outside the checkout (CLI: -o /path/outside/repo/profile.tar.gz).) tempfiler`r hasattrr@r rr gettempdirrX)r  export_dir uid_suffixrrs r8_profile_export_directoryr's)+.??J  + + '.b(&;&;1RYY[M"J //h6I6I6K1LQghrgsOt1tJ #I..   @ r: timestampcRV^8dQhR\R\\,R\/#)r/rrr2r)r7s"r8r9r9Cs%22#2Xc]2d2r:c\V4p\4pVPRRR7VP4'd\ RV R24h\ \ R4'dBVP4P\ P!48wd\ RV R24hT;'g\P!R4pW2 RV R 2, #) uManaged destination for an export with no explicit output — outside the cwd and every profile, since a ``.tar.gz`` default in a source checkout got committed by accident.TrVzExport directory z_ is a symlink; refusing to write a profile archive through it. Provide an explicit output path.r zf is owned by another user; refusing to write a profile archive there. Provide an explicit output path.z %Y%m%d-%H%M%Sr.tar.gz) r rrZrrXrr@rFst_uidr rstrftime)rrrrstamps&$ r8get_profile_export_pathrCs  E*,JTD1 |,M M  r8!2!9!9RYY[!H |,Z Z    7 77E '5'1 11r:c$V^8dQhR\/#)r/root_dirr)r7s"r8r9r9YsTr:caRV3RllpV#)u copytree ignore for the default-profile export: root-level allow-list (``_DEFAULT_EXPORT_INCLUDE_ROOT``) plus universal exclusions. Surviving text files are then force-redacted by :func:`_scrub_export_secrets`. * **Root-level allow-list** — only entries whose name appears in ``_DEFAULT_EXPORT_INCLUDE_ROOT`` survive. Everything else (such as an unrelated ``x11-dev/`` directory in a Docker deployment where HERMES_HOME equals the cwd) is excluded. Blacklisting was tried first and proved unable to anticipate every non-Hermes file the user may have lying alongside HERMES_HOME (#58394). * **Universal exclusions at any depth** — ``__pycache__``, sockets and other special files, temp files (:func:`_non_exportable_entries`); plus npm lockfiles, which may appear at the root. c<V^8dQhR\R\R\/#r.r3)r7s"r8r9,_default_export_ignore..__annotate__fs!3$3r:c<\W4pVPRR0\V4,4VP\W44\ V4S8XdVPRV44V#)z package.jsonzpackage-lock.jsonc3>"TFq\9gKVxK R#5ir|)_DEFAULT_EXPORT_INCLUDE_ROOTr+s& r8rv:_default_export_ignore.._ignore..lsdhUGc:c55hs  )rMrYr6_export_credential_entriesr)r0r1rJrs&& r8r]'_default_export_ignore.._ignorefs]))>(;Vqwws|!4!4>Vs')c<V^8dQhR\R\R\/#r.r3)r7s"r8r9r9zs&YY#YY#Yr:c \V4PpVUUu0uFPp\FCpW4R,8XgKV\V4^,\V4, RVRR8XgKAVkKE KR upp#uuppi)zEntries of *directory* that are an _EXPORT_CREDENTIAL_FILES store: matched on trailing path components, so ``.config/gh`` drops at any depth while the rest of ``.config`` ships.Nr)rry_EXPORT_CREDENTIAL_PARTSr)r0r1ryrKrs&& r8r$r$zs~ O ! !E' Yxe5MEb ! &+CJNSZ,G,H&IUSVTVZ&W E5MEx YY YsA5*A5' A5c0V^8dQhR\R\/#rr)r7s"r8r9r9sTdr:cVPpV\9;'gpVP4PR4;'gIVP4P R4;'g"VP P4\ 9#)z .env.examplez config.yaml.)r_EXPORT_REDACT_NAMESrr>rr_EXPORT_REDACT_SUFFIXES)rBrs& r8_should_redact_export_filer/sw 99D $$ : : ::<  0 : : ::< " "> 2 : : ;;   "9 9 r:c(V^8dQhR\RR/#)r/stagedr2Nr)r7s"r8r9r9s44$444r:c^RIHpVPR4FpVP4pVP 4'gK,\ T4'gK@TPRR7pT!TRR7pYT8XdKeT'dTP4TPTRR7K R# \ dKi;i \\ 3dKi;i) aForce-redact secret-shaped strings in a staged export tree (same pass as ``hermes sessions export --redact``). Runs on the staged copy only; symlinks to text files are materialized when content changes so redaction never follows a link back into the source.)redact_sensitive_text*rrT)rmr7N) agent.redactr3rglobrrrEr/rrrlr\)r1r3rBis_linkr:redacteds& r8_scrub_export_secretsr9s3 S! oo'G<<>>"*$//  >>;>7D)T:     KKM 73%"     #G,   s#&B.C. B=<B=CCc V^8dQhR\R\R\\\\3,,R\/#)r/r output_path extra_filesr2)r4rrr)r7s"r8r9r9s755535Xd3PS8n=U5ae5r:c a ^RIp\V4wpo \\V44P R4P R4pRV 3RllpVR8Xd \ S 4MTpVP 4;_uu_4p\V4V, p \P!S V RVR7T;'g/P4FNwrV P!\V 4!p V PPRRR 7V PV R R 7KP \V 4\\!WXV44uuRRR4# +'giR#;i) zExport a profile to a tar.gz archive; credential files are excluded and staged text is force-redacted first. Returns the output file path.Nrz.tgzc<V^8dQhR\R\R\/#r.r3)r7s"r8r9$export_profile..__annotate__s!sdsr:c,<a\W4pVP\W44\V4P S4P oVPV3RlV44\V4S8XdV\ \V4,,pV#)c3X<"TFp\.SOVN54'gKVxK! R#5ir|)r)rtrfrels& r8rv>export_profile.._ignore_credentials..s#Q(Q.EiiQi.Pqq(s* *)rMrYr$rrryrr6)r0r1rJrBrs&& @r8_ignore_credentials+export_profile.._ignore_credentialssp))>1)FG9o))+6<<Q(QQ  ?k ) +c(m; ;Gr:rT)rrrVr7r)r rr4r removesuffixr&TemporaryDirectoryr]rrjoinpathr rrZr\r9r )rr;r<r rbaserDrtmpdirr1rBrrrs&&& @r8export_profilerKs.t4E; tK ! . .y 9 F Fv ND 5:Y4F #K 0L_F  $ $ & &&f% Vd6J(..B557LC__&=c&BCF MM  t  <   g  88 f%JtU34 ' & & &s ;B8D>> E cRV^8dQhR\R\\,R\/#)r/ archive_pathrr2r)r7s"r8r9r9s%000HSM0T0r:cH^RIp\V4pVP4'g\RV 24h\ V4p\ V4^8XdVP 4MRpT;'gTpV'g \R4hVf \R4h\V4pVR8Xd \R4h\V4pVP4'd \V4h\4PRRR7VPR R 7;_uu_4p \V 4p \W:4W, p V P4'g\R V 24hT p WW8wdW, p V P!V 4V P#4FXp V P$\&9gKV P4'd\(P*!V 4KHV P-4KZ \(P.!\1V 4\1V44RRR4V# +'giT#;i) z'Import a profile from a tar.gz archive.NzArchive not found: zpCannot determine profile name from archive. Specify it explicitly: hermes profile import --name z=Profile archive must contain exactly one top-level directory.ruCannot import as 'default' — that is the built-in root profile (~/.hermes). Specify a different name: hermes profile import --name TrVhermes_profile_import_)rz,Profile archive root is missing or invalid: )r rryrr rrJrXr r rrrZrGrr r r$rrr]rrlmover4)rMrr archivetop_dirs archive_root inferred_namerrrJ staging_root extracted final_sourcechilds&& r8import_profilerYs< G >>  "5gY ?@@ )H%(]a%78<<>TL((LM  S  XYY  'E  V  "%(K#E**td;  $ $,D $ E EF| 71 / !!KL>Z[ [  '/L   \ *"))+Ezz11<<>>MM%(LLN ,  C %s;'78% F& ' F E& s B HH1AH H! c4V^8dQhR\R\RR/#)r/new_dir old_canonr2Nr)r7s"r8r9r9 s& m mD mS mT mr:c\V4PR4;'g.pW9d.VOVNp\WR7R# \d#p\P RYT4Rp?R#Rp?ii;i)u:Append ``old_canon`` to the renamed profile's ``previous_names`` history. Best-effort: never raises, so a metadata write failure cannot fail the rename. Only reached for a real slug change — ``rename_profile`` returns early for the default profile (display-name only) and refuses ``old == new`` (target exists).r)rz;profile rename: could not record previous name %r in %s: %sN)r>rQrMrrmdebug)r[r\historyrFs&& r8_record_profile_renamer` sk m#G,001ABHHb  #+++G7; m RT]hkllms AA A- A((A-c<V^8dQhR\R\R\/#)r/old_namenew_namer2r)r7s"r8r9r9 s&ggSgCgDgr:c\V4pVR8XdQT;'gRP4'g \R4h\RV4p\ RV R24\ 4#\V4pVR8Xd \R4h\ V4p\ V4pVP4'g \V4hVP4'd \V4h\V4p\W%4p\V4V'd \V4\V4\!4p V 'd\#V4\%V4^RIHp ^RIHp V !V !V4R 7V 'd\/V4'g \1R 4hVP3V4\ R TP: RTP: 24T 'd \7T4\=Yb4^RIH p T !Y$T4\CT4\ET4p T 'g\GT4\ RT 24M\ RT RT 24\IY$RT 24^RI%H&pT!Y$T 4T 'd \%T4\9T4T'd\ R T R 24T# \4dCT 'd\7T4\%T4\9T4T'd\ R T R 24hi;i)uRename a profile: directory, wrapper script, service, active_profile. The default profile's home IS the installation root, so "renaming" it sets a presentation-only ``display_name`` instead — the canonical id stays ``default``.rrOzDisplay name cannot be empty.u✓ Display name set: z! (canonical id remains 'default')u.Cannot rename to 'default' — it is reserved.rrrzKa running gateway still owns this profile; retry the rename once it settlesuB⚠ The gateway service was removed. Reinstall it with: hermes -p z gateway installu ✓ Renamed u → )migrate_honcho_profile_hostu✓ Alias updated: u⚠ Cannot create alias 'u' — u✓ Active profile updated: )_migrate_profile_identity)'r rrXrVr[r`r r rryrrrrrrr"rr rrrrrrr rrr rr`hermes_cli.profiles_honchorermrJrirrrf)rbrcr\rC new_canonold_dirr[rservice_removedlive_muxrrre collisionrfs&& r8rename_profilerm szX&IIB%%''<= =*9h? &wi/PQR'))X&IIIJJi(Gi(G >>  $Y//~~#I.. (0J.yBO%i0g&g)*H"7+I& 1=w78  099lm mw LeGLL> :;#G, 7.G g>)$%i0I i( #I;/0 ))F9+FGY5QR[Q\3]^ FiH=I&#I. RS\R]]mno N_   ' 0  *' 2  VW`Vaaqr s sJ#-JK :K c<V^8dQhR\R\R\/#)r/rb default_rootr2r)r7s"r8r9r9 s&VVV4VDVr:cVP4pV'gV#\V4pVPPR8XdVPP#T#)aHermes root named by an exported ``HERMES_HOME``: the grandparent of a profile-shaped value (``/profiles/``, mirrors ``get_default_hermes_root()``), the value itself otherwise, *default_root* when unset. Pure: callers pass any process's env, not only ``os.environ``.r")rrrr)rbror5s&& r8profile_root_for_env_homerq sH~~H H~H%-__%9%9Z%G8?? ! !UXUr:c0V^8dQhR\R\/#rr)r7s"r8r9r9 sccr:c\V4p\\PP RR4\ 44pVR8Xd \ V4#VR, V, p\V4'g \V4h\ V4#)aYResolve a profile name to a HERMES_HOME path string. Called early in the CLI entry point, before hermes modules are imported, to set HERMES_HOME. When HERMES_HOME is already set, the configured spelling IS the launch root (it may be a junction/symlink alias of the platform default). Keep that spelling so profile re-home does not destroy the launcher's lexical provenance -- the subprocess sanitizer needs it to match Hermes-owned PYTHONPATH entries written in the same spelling (#82581 junction follow-up). Physically the paths are identical (junction-transparent); only the spelling is preserved. r%rOrr") r rqr@rPrQr`r4rr)rrrrs& r8resolve_profile_envrt so  &E $RZZ^^M2%FH`Hb cD 4y#e+K  - -$U++ { r:cV^8dQh/^\9d\\,;R&^\9d\\,;R&^\9d\\,;R&^\9d\\ \ 3,;R&^\9d1\\\ \ \ \3,3,;R&^\9d\\\ 3,;R&^\9d%\\\P3,;R&^\9dB\\\ \\ ,\\,3,3,;R&^\9d\\,;R &#) r/rrar_rrr+r!rlr)__conditional_annotations__r5r4 frozensetrrprrr"r#rrr6r)r7s"r8r9r9s4@@X  $s) YAD  3 EAj3kAR-,T%,',SAv=>127EAB!IH$sE(5/8D>"ABBCHC!AX#*)D )Y#Ar:) memoriessessionsrskinsrplans workspacecronr)rqrSOUL.md) rrrzbot-desktop/launcher.pidzbot-desktop/envzbot-desktop/rfb.sockzbot-desktop/lease.jsonzbot-desktop/lease.lockz.bot-desktop/browser-profile/DevToolsActivePortz)bot-desktop/browser-profile/SingletonLockz+bot-desktop/browser-profile/SingletonCookiez+bot-desktop/browser-profile/SingletonSocket>r#r&r"r$r!r r%>r}r*ryr,r'r)r(r+>r}rrscriptsrxry knowledge preferencesr~USER.md AGENTS.md CLAUDE.md MEMORY.md todo.jsonrqr desktop.jsonsystem_prompt.md>rrsudotestrYr>acpmcpchatr}dumploginrsetuptoolsconfigdoctorhonchologoutrstatusrYrirkrrdrinsightsrywhatsapp uninstall connectorsr|)rrqrcr~rV) NFFFFNFFN>rri dashboard)zhermes_cli.mainzhermes-gateway tui_gateway>rY hermes-acpr >rrcri>.js.md.py.sh.ts.cfg.css.csv.ini.jsx.tsx.txt.xml.yml.zsh.bash.conf.html.json.toml.yaml.jsonl)rvrr-r+loggingr@rr^r]rFr@rr"r dataclassesrrpathlibrtypingrrrr agent.file_safetyr hermes_cli.archive_safer r r rhermes_cli.home_data_layoutrhermes_cli.profiles_removerrrrrrrrrrr getLoggerrrmrrrrrrwrar_NO_BUNDLED_SKILLS_MARKERr2rMrb_OS_CREDENTIAL_STORESPROFILE_CREDENTIAL_PATHSrprcompilerrrr_DEFAULT_EXPORT_EXCLUDE_ROOTDEFAULT_EXPORT_EXCLUDE_ROOTr"rr?rr`rrrrrrrrrrrrrrr rr rrr&r0rJrSrirmr~rrrrrrrrrrrrrrrrr,r+r#r r!rrr&r1r>r:rMrRrVr]rcrlrqrrrurpr~rr6rrrrrrrrrrrrrrrrrr rr"r/r6r[r@rArCrFrOrcrsrvrrrrrrr rrrrrrrrr rrr&_EXPORT_CREDENTIAL_FILESr*r$r.r-r/r9rKrYr`rmrqrtr9)rvs@r8rs@    (..2nn<ff   8 $ j 9,-?@  ,4= > 4 4 &3<=30?*0:.99 %&&&1& & & &  & 5 & 7R &  & E & Gl &"&$D&&&&!& && &&&&(5& !& +!&"#&"##&"%B#&$%&$5%&$7E%&$G_%&&'&&7'&())&*+&,-&."/&0 1&23&4 5&67&6!7&89&<`G_``G_`` ] 4Qo>GHHH H  H  HH HHH!/HHH1H3JHH(H*:HH H !H "!H $3!H 5D!H"#H$%H()H(!)H(#3)H*+H*)+H,-H. /H>01>:F ) * PQ !3 %9*W E qi  G 8 (P ( .   $(8S4$.&G%T  < <  K $?@ ))QR '3l t   B(*0B.<|<&eeP @C,E3l!2L   ".]82T22,:%%aK`%ab 5 W>V W55 W>V WWY$% !.!124455@00j mgXVr: