+ jHj-|Ja0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI H t ^RI HtHtHt]R;,t]P$!R 4t^tR R lt]!R R ]44tRRltRRlt!RR4t!RR]4t!RR]4t!RR]4tRRlt] !R4tRtRRlt R R!lt!R"R#lt"R$R%lt#R&t$R'^R(R)/R*R+llt%R,t&R,t'R-R.lt(R/R0lt)!R1R2]*4t+!R3R4]+4t,!R5R6]+4t-!R7R84t.R]R]R]R]./t/R9]0R:&R#) )z1profile name must match [a-z0-9][a-z0-9_-]*, got N) ValueErrorlen_MAX_PROFILE_LEN_VALID_PROFILE_REmatchrs&rvalidate_profile_namersi 9:: 4y##23t9+SAQ@RRSTUU  " "4 ( (LTHUVV )rc]tRt^ t$RtR]R&RRltRRltRR ltR R lt R R lt RRRR/RRllt RRlt RRlt RtR#)ServiceManageruInit-system-specific service operations. Lifecycle methods exist on every backend. Runtime registration (register/unregister/ list_profile_gateways) is s6-only — check ``supports_runtime_registration()`` first. ServiceManagerKindkindc V^8dQhRRRR/#r r)rs"rrServiceManager.__annotate__*s++#+$+rc R#Nrselfrs&&rstartServiceManager.start*src V^8dQhRRRR/#r r)rs"rrr%+s****rc R#r'rr(s&&rstopServiceManager.stop+ssrc V^8dQhRRRR/#r r)rs"rrr%,s--C-D-rc R#r'rr(s&&rrestartServiceManager.restart,s#rc V^8dQhRRRR/#r rrrboolr)rs"rrr%-s00s0t0rc R#r'rr(s&&r is_runningServiceManager.is_running-sSrcV^8dQhRR/#r rr6r)rs"rrr%/s 88t8rc R#r'rr)s&rsupports_runtime_registration,ServiceManager.supports_runtime_registration/sSr extra_envN start_nowTc(V^8dQhRRRRRRRR/# r profilerr@zdict[str, str] | NonerAr6rrr)rs"rrr%0s,*?SW rc R#r'rr)rDr@rAs&&$$rregister_profile_gateway'ServiceManager.register_profile_gateway0src V^8dQhRRRR/#r rDrrrr)rs"rrr%3sCC#C$Crc R#r'rr)rDs&&runregister_profile_gateway)ServiceManager.unregister_profile_gateway3srcV^8dQhRR/#r rz list[str]r)rs"rrr%4s 55y5rc R#r'rr=s&rlist_profile_gateways$ServiceManager.list_profile_gateways4s#rr)__name__ __module__ __qualname____firstlineno____doc____annotations__r*r.r2r8r>rGrMrR__static_attributes__rrrr!r! s? +*-08BFZ^D55rr!cV^8dQhRR/#)r rr"r)rs"rrr7s 2rc^RIHpHpHp\ 4'dR#V!4'dR#V!4'dR#V!4'dR#R#)uLReturn "s6" (s6-svscan is PID 1), "windows", "launchd", "systemd" (working bus) or "none". This function does NOT replace ``supports_systemd_services()`` — host call sites continue to use that. It exists for new backend- agnostic code (profile create/delete hooks, the s6 dispatch path in ``hermes gateway start/stop/restart``). is_macos is_windowssupports_systemd_servicesr r rrnone)hermes_cli.gatewayr^r_r` _s6_runningr]s rdetect_service_managerrd7s:SR }}||zz "" rcV^8dQhRR/#r;r)rs"rrrQsDDTDrc\R4PRR7P4pTR8H;'d\R4P 4# \dR#i;i)uBTrue when s6-svscan is PID 1 in this container. Must work for the unprivileged hermes user too: ``/proc/1/exe`` is unreadable for other UIDs (``resolve()`` silently yields the literal ``exe``), which made runtime registration inert in production. Probe the world-readable ``/proc/1/comm`` AND ``/run/s6/basedir`` — either alone can false-positive. The obvious probe — ``Path('/proc/1/exe').resolve()`` — only works as root: for any other UID, the symlink at ``/proc/1/exe`` is unreadable and ``resolve()`` silently returns the path unchanged, so the resolved name is the literal ``"exe"`` and detection always fails. Since every Hermes runtime call inside the container drops to hermes via ``s6-setuidgid``, that silent failure made the entire service-manager runtime-registration path inert in production (PR #30136 review). z /proc/1/commutf-8encodingFz s6-svscanz/run/s6/basedir)r read_textstripOSErroris_dir)comms rrcrcQs`N#--w-?EEG ;  C C4(9#:#A#A#CC s)A A A c]tRt^nt$RtR]R&R]R&RtR]R&RtR R ltR R lt R Rlt RRlt RRlt RRlt RRRR/RRlltRRltRRltRtR#) _HostServiceManagerz``start``/``stop``/``restart`` resolve to ``<_fn_prefix>`` on ``hermes_cli.<_backend>`` at call time (lazy import; tests monkeypatch the submodule or its functions). Runtime registration is unsupported on every host backend. r"r#r_backend _fn_prefixc x^RIp^RIpVPRVP 24\ W P4#)Nz hermes_cli.) importlib hermes_cli import_modulerqgetattr)r)rvrws& r_backend_module#_HostServiceManager._backend_modulexs0+dmm_ =>z==11rc V^8dQhRRRR/#)r oprrrr)rs"rr _HostServiceManager.__annotate__~sDDDDrc `\VP4VP V 24!4R#r')ryrzrs)r)r}s&&r_call_HostServiceManager._call~s&$$&4??*;B4(@ACrc V^8dQhRRRR/#r r)rs"rrr~s#$rc (VPR4R#)r*Nrr(s&&rr*_HostServiceManager.starts 7rc V^8dQhRRRR/#r r)rs"rrr~src (VPR4R#)r.Nrr(s&&rr._HostServiceManager.stops 6rc V^8dQhRRRR/#r r)rs"rrr~sCDrc (VPR4R#)r2Nrr(s&&rr2_HostServiceManager.restarts 9rcV^8dQhRR/#r;r)rs"rrr~strc R#)Frr=s&rr>1_HostServiceManager.supports_runtime_registrationsrc V^8dQhRRRR/#)r verbrrNotImplementedErrorr)rs"rrr~s   )< rc J\\V4P RV R24#)z* does not support runtime profile gateway z (container-only feature))rtyperT)r)rs&&r _unsupported _HostServiceManager._unsupporteds,"Dz""##MdVSl m  rr@NrATc(V^8dQhRRRRRRRR/#rCr)rs"rrr~s,000*?0SW0 0rc $VPR4h) registrationrrFs&&$$rrG,_HostServiceManager.register_profile_gateways//rc V^8dQhRRRR/#rJr)rs"rrr~s22#2$2rc $VPR4h)unregistrationrrLs&&rrM._HostServiceManager.unregister_profile_gateways 011rcV^8dQhRR/#rPr)rs"rrr~syrc .#r'rr=s&rrR)_HostServiceManager.list_profile_gatewayss rr)rTrUrVrWrXrYrsrzrr*r.r2r>rrGrMrRrZrrrrprpnsf MJ2 D 0BF0Z^0 2rrpc>]tRt^t$RtRtR]R&RtRtRRlt R t R #) SystemdServiceManagerzWraps the ``systemd_*`` functions in hermes_cli.gateway (host call sites still use those directly; this exists for backend-agnostic code such as the profile create/delete hooks).rr"r#gatewaysystemd_c V^8dQhRRRR/#r5r)rs"rr"SystemdServiceManager.__annotate__sstrc FVP4P4wr#V#r')rz_probe_systemd_service_running)r)r_runnings&& rr8 SystemdServiceManager.is_runnings ))+JJL rrN rTrUrVrWrXr#rYrqrsr8rZrrrrrs)a )D (HJrrc>]tRt^t$RtRtR]R&RtRtRRlt R t R #) LaunchdServiceManagerz8Wraps the ``launchd_*`` functions in hermes_cli.gateway.rr"r#rlaunchd_c V^8dQhRRRR/#r5r)rs"rr"LaunchdServiceManager.__annotate__sGGsGtGrc >VP4P4#r')rz_probe_launchd_service_runningr(s&&rr8 LaunchdServiceManager.is_runnings##%DDFFrrNrrrrrrs&B(D (HJGGrrcZ]tRt^t$RtRtR]R&RtRRRR R R R R/R R lltRRlt Rt R #)WindowsServiceManageruWraps ``hermes_cli.gateway_windows`` (Scheduled Task / Startup-folder fallback). Not a true init service but the lifecycle protocol is the same. ``install`` takes Windows-specific kwargs passed straight through — non-Windows callers must never call it. r r"r#gateway_windowsforceFrANstart_on_loginelevated_handoffc ,V^8dQhRRRRRRRRRR/#) r rr6rAz bool | Nonerrrrr)rs"rr"WindowsServiceManager.__annotate__s>       $       rc HVP4PWW4R7R#))rrArrN)rzinstall)r)rrArrs&$$$$rrWindowsServiceManager.installs% &&^ ' rc V^8dQhRRRR/#r5r)rs"rrrs))s)t)rc z^RIHpVP4P4'gR#\ V!44#)ru)find_gateway_pidsF)rbrrz is_installedr6)r)rrs&& rr8 WindowsServiceManager.is_runnings/8##%2244%'((rr) rTrUrVrWrXr#rYrqrr8rZrrrrrsP )D ( H    "&  '+  "'  ))rrcV^8dQhRR/#)r rr!r)rs"rrrs^rch\P\44pVf \R4hV!4#)z?Return the ServiceManager instance for the current environment.z%no supported service manager detected)_MANAGER_CLASSESgetrd RuntimeError)clss rget_service_managerrs.   57 8C {BCC 5Lrz /run/servicegateway-c V^8dQhRRRR/#)r rrrr)rs"rrrs0000rc,VP\4#)zPStrip the ``gateway-`` prefix back off (matches what the user typed via ``-p``).) removeprefixS6_SERVICE_PREFIXrs&r_profile_from_servicers   . //rc V^8dQhRRRR/#)r rrrrr)rs"rrrs I I3 I4 Irc\V4p\V4\\PP RR44pVP PR8XdVP P MTpVR8XdV#VR, V, #)a5Resolve ``gateway-`` to its persistent profile directory. s6 lifecycle commands may run from any active profile (``gateway stop --all``), so never write the caller's HERMES_HOME blindly: derive the shared profile root and map the suffix to the root default profile or ``/profiles/``. HERMES_HOMEz /opt/dataprofilesdefault)rrrosenvironrparentr)rrD hermes_homeroots& r _profile_dir_for_gateway_servicersr$D)G'"rzz~~m[ABK(3(:(:(?(?:(M;   $ $S^Di'4HTJ->-HHrc$V^8dQhRRRRRR/#)r rr desired_staterrr)rs"rrrs!s34rc\V4pVR, pVP4'gR#VP4'd'\P!VP RR74M/p\ V\ 4'g/pYR&\\P!44TR&TPTPR,4pTP\P!TR R7R ,R R7TPT4R# \\P3d/pLi;i \dR#i;i) aPersist the operator's start/stop intent (``desired_state``) next to the gateway's volatile ``gateway_state`` so boot reconciliation can restore s6 want-up/down after pod recreation. Best-effort: a failed write must not block immediate s6 lifecycle control. zgateway_state.jsonNz utf-8-sigrhr updated_at.tmp) separators rg),:)rexistsjsonloadsrj isinstancedictrlJSONDecodeErrorinttime with_suffixsuffix write_textdumpsreplace)rr profile_dir state_filedatatmps&& r_write_gateway_desired_staters 348K33J!!##  MWM^M^M`M`4::j22K2HIfhDdD))!._ -\$$Z%6%6%?@ tzz$:>EPWX J --. D  s<D2DADBD2D/,D2.D//D22 EEc$V^8dQhRRRRRR/#)r mgrr!rDrrr6r)rs"rrrs"~PTrc\\ V 24pVR, P4'gR#VPVRR7R#)uRegister a ``down`` s6 slot for a profile whose directory exists but was never registered. `hermes profile create` can only register a slot when it runs inside the container; created from the host against a bind-mounted home, the directory lands where the container reads it but no ``/run/service/gateway-`` exists, and the boot reconciler only notices on the next container restart. Returns False without touching anything unless the directory carries ``SOUL.md`` — the reconciler's own "real profile" marker — so a mistyped ``-p`` name cannot mint a phantom slot. ``start_now=False``: the caller's ordinary ``start`` stays the single owner of the ``desired_state`` write. zSOUL.mdF)rAT)rrrrG)rrDrs&& r%register_unregistered_profile_gatewayrsF36G5H 3RSK ) # + + - -  E : rz/commandtimeoutcheckFc(V^8dQhRRRRRRRR/#)r cmdrargsrfloatrr6r)rs"rrr,s(S5Trc T\P!\ RV 2.VOVRRRRVR7#)zJRun an s6 binary by absolute path with the shared capture/decode settings./Trgr)rcapture_outputtextrierrorsr) subprocessrun _S6_BIN_DIR)rrrrs&$$*r_s6_runr ,s7 >> =# '$'Dtgi ri'c V^8dQhRRRR/#)r pathrrrr)rs"rrr;s    rcl\P!V\\4R# \dR#i;ir')rchown _HERMES_UID _HERMES_GIDPermissionError)r s&r _chown_hermesr;s+  {K0    s $ 33c V^8dQhRRRR/#)r svc_dirrrrr)rs"rrrDs,,d,t,rcaRRloRV3RllpV!V4VR, pVP4'd V!V4R#R#)uPre-create hermes-owned ``supervise/`` and top-level ``event/`` inside a service directory. s6-supervise (root) creates ``event/``/``supervise/`` 0700 and the control FIFO 0600, so the hermes user gets EACCES on every ``s6-svc``/``s6-svstat``. s6 treats EEXIST as success and skips its chown/chmod fix-up, so seeding before ``s6-svscanctl -a`` makes s6-supervise inherit our ownership. ``log/`` gets the same skeleton (its own supervise instance) or unregister teardown EACCESes on the logger. Idempotent: existing entries (possibly live FIFOs) are left untouched. The PR #30136 review surfaced this as a real product gap: the entire S6ServiceManager lifecycle (``register/start/stop/unregister _profile_gateway``) was inert in production because every operation is dispatched as the hermes user. Reference --------- Discussed at length on the skarnet `skaware` mailing list in 2020 (``_); see also just-containers/s6-overlay#130. The pre-creation pattern was historically called out as forward-compatibility-fragile, but the EEXIST handling in s6-supervise has been stable since 2015 — it's the same pattern ``s6-svperms`` and ``fix-attrs.d`` rely on. c$V^8dQhRRRRRR/#)r r rmoderrrr)rs"rr._seed_supervise_skeleton..__annotate__Ws!4strcVP4'dR#VPRRR7VPV4\V4R#)NF)parentsexist_ok)rmkdirchmodr)r rs&&r _mkdir_owned._seed_supervise_skeleton.._mkdir_ownedWs4 ;;==  55 1 4drc V^8dQhRRRR/#)r rrrrr)rs"rrr^s # #D #T #rc<S!VR, R4VR, pS!VR4S!VR, R4VR, pVP4'g6\P!VR4VPR4\ V4R#R#)eventi supervisecontroliN)rrmkfiforr)rr$r&rs& r_seed'_seed_supervise_skeleton.._seed^stTG^V,;& Y&Y(&1i'~~ IIgu % MM% ' " rlogN)rm)rr(log_dirrs& @r_seed_supervise_skeletonr,Ds=& # # 'NoG~~ grc:a]tRtRtRtRR/RV3RllltRtV;t#)S6ErroriszBase for S6ServiceManager lifecycle failures; carries the slot name so the CLI can render an actionable message instead of a raw ``CalledProcessError``.serviceNc$V^8dQhRRRRRR/#)r messagerr/z str | Nonerrr)rs"rrS6Error.__annotate__ws!trc 2<\SV`V4W nR#r')super__init__r/)r)r1r/ __class__s&&$rr5S6Error.__init__ws ! rr/rTrUrVrWrXr5rZ __classcell__r6s@rr.r.ssCdrr.c2a]tRtRtRtRV3RlltRtV;t#)GatewayNotRegisteredErrori|zuA lifecycle method targeted a missing slot. ``profile`` is unprefixed so callers can phrase "no such gateway 'typo'".c V^8dQhRRRR/#rJr)rs"rr&GatewayNotRegisteredError.__annotate__s    rc L<Wn\SV` RV: RV R2RV 2R7R#)zno such gateway z*: register it with `hermes profile create z9` first, or pass an existing profile name via `-p `rr8N)rDr4r5)r)rDr6s&&rr5"GatewayNotRegisteredError.__init__sA  wk*&&-Y/7 7wi(  r)rDr9r;s@rr=r=|s!  rr=c2a]tRtRtRtRV3RlltRtV;t#)S6CommandErrorizAn s6 command failed for a reason other than a missing slot (EACCES on the control FIFO, unexpected non-zero exit); carries the command's stderr.c ,V^8dQhRRRRRRRRRR/#) r r/raction returncoderstderrrrr)rs"rrS6CommandError.__annotate__s0333333c3VZ3rc <W nW0nW@nRV RV: RV R2pVP4'dVRVP4 2, p\SV`WQR7R#)zs6-svc z on z failed (rc=rz: r8N)rErFrGrkr4r5)r)r/rErFrGr1r6s&$$$$ rr5S6CommandError.__init__s_ $ F84{,zl!L <<>> FLLN+, ,G 2r)rErFrGr9r;s@rrCrCs@33rrCc]tRtRt$RtRtR]R&]3RRlltRR lt ] R R l4t ] R R l4t ] RRl4t RRltRRltRRltRRltRRltRRltRRltRRltR R!R"R#/R$R%lltR&R'ltR(R)ltR*tR!#)+S6ServiceManagerizPer-profile gateway supervision via s6-overlay, for runtime-registered services under ``S6_DYNAMIC_SCANDIR`` only (static services are managed by s6-rc at image-build time).r r"r#c V^8dQhRRRR/#)r scandirrrrr)rs"rrS6ServiceManager.__annotate__sdrc WnR#r'rN)r)rNs&&rr5S6ServiceManager.__init__s rc V^8dQhRRRR/#)r rDrrrr)rs"rrrOs>>C>D>rc N\V4VP\ V 2, #r')rrNrrLs&&r _service_dirS6ServiceManager._service_dirs$g&||!2 3G9===rc$V^8dQhRRRRRR/#)r rDrr@zdict[str, str]rr)rs"rrrOs!4'4'C4'N4's4'rc  .R Op\VP44F0wr4VPRV R\P!V4 24K2 VPR4VPR4VR8XdRpMR\P!V4 R2pVPR V 24VPR V 24R P V4R ,#) uQRun script for a profile-gateway s6 service. Sources HERMES_HOME via with-contenv (run time, not baked in), resets ``HOME`` before the privilege drop so root's HOME does not leak, activates the venv, drops to hermes. ``profile == "default"`` emits NO ``-p`` flag: it is the sentinel for the root HERMES_HOME profile and ``-p default`` would look up ``profiles/default/``. Port comes from the profile's own env (``API_SERVER_PORT``, default 8642); two profiles that both leave it unset collide. Port selection: the gateway binds the port resolved by ``gateway/config.py`` from the profile's own environment — ``API_SERVER_PORT`` (or ``platforms.api_server.extra.port`` in that profile's ``config.yaml``), defaulting to 8642. There is no ``[gateway] port`` key and no Python-side allocator: because each supervised profile gateway loads its own ``HERMES_HOME``, two profiles that both leave the port unset will both try to bind 8642 — give each profile a distinct ``API_SERVER_PORT`` in its ``.env``. Previously this method took a ``port`` parameter that was passed in but never substituted into the rendered script (carried for "API parity" with a deterministic SHA-256 allocator in ``hermes_cli.profiles._allocate_gateway_port``). PR #30136 review item I5 retired both the allocator and the parameter because they were dead code through the entire stack. zexport =z#export HERMES_S6_SUPERVISED_CHILD=1z export HERMES_SUPERVISED_CHILD=1rzhermes gateway run --replacez hermes -p z gateway run --replacez[ "$(id -u)" = 0 ] || exec zexec s6-setuidgid hermes r)z#!/command/with-contenv shz# shellcheck shell=shzset -ezexport HOME=/opt/dataz cd /opt/data)sorteditemsappendshlexquotejoin)rDr@lineskv gateway_cmds&& r_render_run_script#S6ServiceManager._render_run_scripts, 9??,-DA LL71#Qu{{1~&67 8.  :;  78 i 8K&u{{7';&<?yy$&&rcV^8dQhRR/#)r rrr)rs"rrrOs  3 rc $^RIHpTpRV RV R2#)uFinish script: exit 78 (EX_CONFIG, fatal config) and clean exit 0 (intentional stop — restarting would turn every normal exit into a reconnect storm) both map to 125 so s6 stops restarting; only other non-zero exits let s6 restart normally. When the gateway exits with EX_CONFIG (78) — a fatal configuration error such as a token collision or no messaging platforms — we tell s6-supervise to stop restarting by exiting 125 (permanent failure). A clean exit 0 is an intentional stop, not a crash: restarting after it turns any normal gateway exit into a reconnect loop (the ashriel-discord storm in #76435 — 1,000+ connections and a provider token reset). See #51228, #76435. )GATEWAY_FATAL_CONFIG_EXIT_CODEz^#!/command/with-contenv sh # shellcheck shell=sh # $1 = exit code from the run script. # Exit u~ (EX_CONFIG) = fatal config error — don't restart. # Exit 0 (clean stop) = intentional stop — don't restart. if [ "$1" = "zE" ]; then exit 125 fi if [ "$1" = "0" ]; then exit 125 fi exit 0 )gateway.restartrh)rhcodes r_render_finish_script&S6ServiceManager._render_finish_scripts2 C- V 6"  rc V^8dQhRRRR/#)r rDrrr)rs"rrrOs    rc :\P!V4pRV R2#)zlog/run script. s6-log directives apply per line in order; ``T`` (timestamp) is non-sticky and only prefixes lines for the next action directive, so it sits between ``1`` and the log dir rather than before ``1``.zs#!/command/with-contenv sh # shellcheck shell=sh : "${HERMES_HOME:=/opt/data}" log_dir="$HERMES_HOME/logs/gateways/a$" if [ "$(id -u)" = 0 ]; then s6-setuidgid hermes mkdir -p "$log_dir" s6-setuidgid hermes rm -f "$log_dir/lock" else mkdir -p "$log_dir" rm -f "$log_dir/lock" fi [ "$(id -u)" = 0 ] || exec s6-log 1 n10 s1000000 T "$log_dir" exec s6-setuidgid hermes s6-log 1 n10 s1000000 T "$log_dir" )r]r^)rDprofs& r_render_log_run S6ServiceManager._render_log_runs/ {{7#348&9L M rc(V^8dQhRRRRRRRR/#)r action_flagr action_labelrrrr)rs"rrrOs(  C s # $ rc FVPV, pVP4'g\\V44h\ RV\ V4RR7R# \ Pd3p\Y2TPTP;'gRR7ThRp?ii;i)z``s6-svc ``; a missing service dir raises ``GatewayNotRegisteredError`` (instead of s6-svc's opaque failure) and any other failure ``S6CommandError``.s6-svcT)rrr)r/rErFrGN) rNrmr=rr rrCalledProcessErrorrCrFrG)r)rsrtr service_direxcs&&&& r_run_svcS6ServiceManager._run_svcsllT) !!##+,A$,GH H  Hk3{+;4 H,,  cnnUXU_U_UeUece  sAB .-BB c V^8dQhRRRR/#r r)rs"rrrO$s66#6$6rc DVPRRV4\VR4R#)z-ur*rNrzrr(s&&rr*S6ServiceManager.start$s dGT*$T95rc$V^8dQhRRRRRR/#)r rrfieldsrzlist[str] | Noner)rs"rrrO(s" > >3 > >9I >rc  \RRRPV4\VPV, 44pVP^8wdR#VP P 4p\V4\V48XdV#R#)a ``s6-svstat -o `` values for ``name``, or None on a nonzero rc or a count mismatch. Never parse the human status line: s6 2.15 prints ``up (pid N pgid N) Ss``, which the old ``(pid N)`` regex never matched, so the planned-stop marker was silently skipped. z s6-svstatz-orN)r r_rrNrFstdoutsplitr)r)rrresultvaluess&&* r_svstat_fieldsS6ServiceManager._svstat_fields(si dCHHV,VW    !$$&VF 3v==rc V^8dQhRRRR/#)r rrrz int | Noner)rs"rrrO4s((C(J(rc VPVR4pV'd\V^,4M^pT^8dT#R# \\P\ 3dR#i;i)zbPID of the supervised gateway per ``s6-svstat -o pid`` (``-1`` when down), or None on any failure.pidN)rrrlrSubprocessErrorr)r)rrrs&& r_supervised_pid S6ServiceManager._supervised_pid4s^ ((u5F$*#fQi.CAgs'4'33Z@  s;; AAc V^8dQhRRRR/#r r)rs"rrrO>s 6 6 6 6rc VPV4pVe^RIHpV!V4VP RRV4\ VR4R# \dL.i;i)z``s6-svc -d``, after writing a planned-stop marker for the supervised PID so the gateway's shutdown handler classifies this SIGTERM as operator-initiated and persists ``gateway_state=stopped``.N)write_planned_stop_marker-dr.stopped)rgateway.statusr Exceptionrzr)r)rrrs&& rr.S6ServiceManager.stop>sY""4( ? D)#. dFD)$T95  sA AAc V^8dQhRRRR/#r r)rs"rrrOLs66C6D6rc DVPRRV4\VR4R#)z``s6-svc -t`` (SIGTERM).-tr2rNr~r(s&&rr2S6ServiceManager.restartLs dIt,$T95rc V^8dQhRRRR/#r5r)rs"rrrOQs""s"t"rc 2VPVR4pVR.8H#)uptrue)r)r)rrs&& rr8S6ServiceManager.is_runningQs!$$T40&!!rcV^8dQhRR/#r;r)rs"rrrOWstrc R#)Trr=s&rr>.S6ServiceManager.supports_runtime_registrationWsrr@NrATc(V^8dQhRRRRRRRR/#rCr)rs"rrrOZs2/Y/Y/Y*?/YSW/Y /Yrc DVPV4pVP4'd\RV: RV 24hVPRVP,R,4pVP4'd\ P !VRR7VPRR7RR lpVR , PR R R 7T!VR, TPY;'g/44V!VR, VP44VR, P4V!VR, R, VPV44\V4V'gVR, P4VPV4\!RR\#TP$44pTP&^8wdE\ P !TRR7\)RTP*;'g TP, 24hR# \d\ P !TRR7hi;i)a,Create the s6 service directory and ``s6-svscanctl -a`` so it is picked up immediately. ``start_now=False`` writes a ``down`` marker so the service stays stopped until an explicit ``gateway start``. Raises ValueError on an invalid name or existing directory, RuntimeError if ``s6-svscanctl`` fails. zprofile gateway z already registered at .rT ignore_errors)rc$V^8dQhRRRRRR/#)r r rrrrrr)rs"rr?S6ServiceManager.register_profile_gateway..__annotate__qs!   C D rcNVPVRR7VPR4R#)rgrhr%N)rr)r rs&&r _write_script@S6ServiceManager.register_profile_gateway.._write_scriptqs OOD7O 3 JJu rrzlongrun rgrhr finishr*down s6-svscanctlz-azs6-svscanctl failed: N)rUrr with_namershutilrmtreerrrdrkrpr,touchrenamerr rrNrFrrGr)r)rDr@rArtmp_dirrrs&&$$ rrG)S6ServiceManager.register_profile_gatewayZs##G, >>  /{:QRYQZ[\ \##C',,$6$?@ >>   MM' 6 d #   v  ) )+ ) H 'E/4+B+B7OOY[+\ ] 'H,d.H.H.J K u_ # # % 'E/E143G3G3P Q %W -6!((* NN7 #s4<VPP \ 4'gKeVP\\ 4RNK up#uupi)z;Profile names of all currently-registered gateway services.rN)rNriterdirr startswithrmrr)r)entrys& rrR&S6ServiceManager.list_profile_gatewayss||""$$I--/ /::((- 0  0 %%&78 0EJJs,-. //   s#C 'C ?"C & C rQ)rTrUrVrWrXr#rYS6_DYNAMIC_SCANDIRr5rU staticmethodrdrkrprzr*rrr.r2r8r>rGrMrRrZrrrrLrLs_ $D #'9>4'4'l  8  : 6 >( 66 " /YBF/YZ^/Yb3(   rrLzdict[str, type]r)rrr r ra)1__conditional_annotations__rX __future__rrrrer]rrrpathlibrtypingrrrr"compilerrrr!rdrcrprrrrrrrrrrr r rrrr,rr.r=rCrLrrY)rs@rrsfO"  77JKJJ78W6X66,4D:--` / G/G)/): .)0 I2, 1E   ,^l     3W 3Q Q j$ $ $  %/r