+ jHjZaRYtF0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI H t ^RIHtHtHtHtHt^RIHtHt^RIHt]P2!R4tRZtRRltR R ltR R[R R\R R]RR^RR_RR`RRaRRbRR]RRc/ t]^k]!0Rdm4t RRlt!RRlt"RRlt#RRlt$RRRRR R/t%]^k]PL!4t'R!t(R"R#lt)R$R%lt*R&R'lt+R(t,R)R*lt-R+R,lt.]!4R-, t/]^kR.R/R0R1R2R3R4R5R6R7/ReUu/uF qR8V R92bK upCt0]^k/t1]^k/t2]^k/t3]^k/t4]^kR:R;lt5R<R=lt6R>R?lt7RfR@RAllt8]!0Rgm4t9RBRClt:RDR/RERFllt;RGRHltRMRNlt?RORPlt@RQRRltARSRTltBRURVltCRhtDRWRXltER#uupi)izGateway/process helpers for the dashboard: per-profile gateway topology (+cache), action subprocess spawning, gateway restart plumbing, system platform display. N)Path)AnyDictListOptionalTuple)windows_detach_flags&windows_detach_flags_without_breakaway)get_hermes_homezhermes_cli.web_serverc$V^8dQhR\/#return)r)formats"B/home/ubuntu/.hermes/hermes-agent/hermes_cli/web_server_gateway.py __annotate__rs++s+cVP\^,4p\V4\8d\R\ R24h\P !VP R44#)zCRead a JSON HTTP response body with a hard size cap (issue #54808).z&dashboard HTTP JSON response exceeded z byteszutf-8)read'_DASHBOARD_JSON_RESPONSE_BODY_MAX_BYTESlen ValueErrorjsonloadsdecode)responseraws& r_read_dashboard_json_responsersZ --?!C DC 3x99 467v ?   ::cjj) **rcTV^8dQhR\\\R,3,/#r rN)tuplebooldict)rs"rrr's!uT4$;%67rc^RIHpHpV'gR#\P!RRVP R44p\ PPRR4P4pV R2V R23Fp\PPVR R 7pV'd-VPR4'dVPR R V 24\PPWPR 7;_uu_4pVP ^8XdR\#V43uuRRR4u#RRR4K R# +'giK;i \$dKi;i)uaProbe the gateway's HTTP health endpoint (cross-container). Blocking — run in an executor. DEPRECATED: driven by the ``GATEWAY_HEALTH_URL`` / ``GATEWAY_HEALTH_TIMEOUT`` env vars, to be replaced by a dashboard config key; do not add callers. Accepts a base URL or an explicit ``/health`` / ``/health/detailed`` path; tries ``/health/detailed`` first. )_GATEWAY_HEALTH_TIMEOUT_GATEWAY_HEALTH_URLNz/health(/detailed)?$/API_SERVER_KEYz/health/detailedz/healthGET)method AuthorizationzBearer )timeoutT)FN)hermes_cli.web_serverr$r%resubrstriposenvirongetstripurllibrequestRequestendswith add_headerurlopenstatusr Exception)r$r%baseapi_keypathreqresps r_probe_gateway_healthrB's%S  66)2/B/I/I#/N ODjjnn-r288:G6)*tfG,<= ..((e(t!DDNM%NM >  NMM   s<6?E6=E3D- EE- D> 8E>E EEwebhook api_servermsgraph_webhookfeishuwecom_callback bluebubblessmswhatsapp_cloudlineteamsctV^8dQhR\R\\,R\\\3,/#r profile_homeruntimer)rrr"strint)rs"rrrQs0))$)$)DQTVYQYN)rcT;'g/PR4;'g/pVP4UUu.uFHwr4V\9gK\V\4'gK*VPR4\ 9gKFVNKJ pppV'g/#/p^RIHpV!VR, 4p\VPR4\4'dVPR4M/p T ;'g/PR4VPR43Fmp \V \4'gKV P4F>wr\V \4'gKVPV /4PV 4K@ Ko /p VFp\V,wrVPV4;'g/p\VPR4\4'dVPR4M/pTPTT;'g/PW44p\V4W&K V #uuppi \d/pLi;i \\3d YT&Ki;i)u[Best-effort ``platform -> host TCP port`` for one profile's live gateway. Ports come from the profile's own config.yaml (``gateway.platforms`` then top-level ``platforms`` — later wins, matching load_gateway_config precedence), falling back to the adapter default. Env-var overrides (e.g. WEBHOOK_PORT in that profile's .env) are not resolved. platformsstate)read_user_config_rawz config.yamlgatewayextra)r3items_PORT_BINDING_PLATFORM_PORTS isinstancer"_PLATFORM_DEAD_STATEShermes_cli.configrV setdefaultupdater<rR TypeErrorr)rOrPrTnamerUactiveblocksrVcfg gateway_cfgsrc plat_name plat_blockportsport_key default_portblockrXrs&& r_profile_platform_portsrmQs B##K066BI ) 1= 1 / / ud #  IIg &; ;  1 =   F :"<-#?@,6swwy7I4,P,Pcggi(VX  &&B++K8#''+:NOCc4((),% j$//%%i4;;JG*5PE!=d!C 4 &&B&071CT&J&J '"PRii5;;B"3"3H"KL 'c(EK  LC=( :& '&$K 'sIH) H)%H)H)AH/-A&H/)H/ I/ H?>H?IIchV^8dQhR\R\\,R\\,/#rN)rrr"r )rs"rrr}s,4(4.U]^cUdrcx^RIHpHpV!WR7pVfR#V!V4pVfR#WE3# \dR#i;i)z``(pid, start_time)`` of the profile's LIVE gateway, or None. Uses the same validated-liveness helper and the same ``_get_process_start_time`` that stamped the record, so equality is exact (no unit/clock-source mismatch). )_get_process_start_timeget_runtime_status_running_pid) expected_homeN)gateway.statusrprqr<)rOrPrprqpid start_times&& r _profile_gateway_writer_identityrv}sK Z,WQ ;,S1 !)t@/@@ s* ** 99cRV^8dQhR\\,R\R\/#)r writer_identityrTr)rr r")rs"rrrs&::huo:$:SW:rcVf/#Vwr#VP4UUu/uFOwrE\V\4'gKVPR4V8XgK5VPR4V8XgKMWEbKQ upp#uuppi)uKeep only platform entries stamped by the profile's CURRENT gateway process. Gateway startup preserves plain platform entries in gateway_state.json across restarts, so the raw map can carry fatal state for platforms since disabled/removed. Cross-profile aggregation has no config context to filter against, so it demands exact ``(pid, start_time)`` writer identity instead. Fail closed: legacy entries without identity, or no live process, yield {} — a false "degraded forever" is the worse failure mode. writer_pidwriter_start_time)rYr[r"r3)rxrTlive_pid live_startkeyvalues&& r_owned_profile_platformsrs *H%.__%6 :%6zs eT "  IIl #x /  II) *j 8  %6 :: :sA7A7A7-A7cFV^8dQhR\\\3,/#r r"rQr)rs"rrrsB0B04S>B0rc ^RIHpHpHp^RIHpV!RRRR7p.p/pR pR pTEFUwrT R8XdT!T 4'gM\T 4'gK0T!T R, 4p T ;'g/PR4;'g.U u.uFp \T 4NK p p T R8Xd\T 4^8dRpT ;'g/PR4'd\T R,4pT ;'g/PR4p/p\T\4'd*T'd"\\!Y4T4pT'dYT &RT R\#T RT/4/pT 'dT TR&TP%T4EKX T'dRpM^R^R/P\T4R4p^RIHpTT8Xg\T4^8dR pRTU Uu.uFwp pT NK upp RTU U u.uF wrT R8wgKT!T 4'gKT NK" up p RTRTR TR T/# \ d%\PRRR7R.RR R .R //u#i;i \ dEK4i;i \ dR p ELi;iuup iuupp iuup p i)uEnumerate profiles and the gateways serving them for ``/api/status``. Returns ``profiles`` (all profile names via the cheap ``profiles_to_serve(True)`` chokepoint), ``gateways`` (one ``{"profile", "ports", "served_profiles"?}`` per LIVE gateway; liveness via ``_check_gateway_running`` so it agrees with the sidebar), ``gateway_mode`` (multiplex / single / multiple / none) and ``profile_platforms`` — ownership-filtered runtime platform maps per live gateway, an internal aggregation input never exposed directly. )_check_gateway_runningprofiles_to_serveprofile_is_parked)read_runtime_statusT)include_standaloneinclude_parkedz+profile/gateway topology enumeration failed)exc_infoprofiles gateway_modeunknowngatewaysprofile_platformsFNdefaultzgateway_state.jsonserved_profilesmultiplex_standalone_reasonrTprofileri multiplexnonesinglemultiple)SINGLE_PROFILE_REASONparked_profiles)hermes_cli.profilesrrrrsrr<_logdebug_has_own_gatewayr3rQrr[r"rrvrmappend!hermes_cli.gateway_multiplex_moder)rrrrhomesrrrstandalone_reasonrahomerPpservedplatsownedentrymoder_homes r!_collect_profile_gateway_topologyrsddd6!$4PTU &(H)+I'+  59I4E*400K[\`KaKa )$1E*EFG%,MMr#6#67H#I#O#OR#OQ#OQ#a&#OQ 9 VqI MMr  < = = #G,I$J K B##K0 eT " "u,-Md-\^cdE*/$'"+D';RSWZeglYm;n o '-E# $9<61h'++CM:FH11SZ!^ U3UkdETU35j5ZTDI 7 I> I> ,I I  II I0/I0tsgdatafng$@chV^8dQhR\R\\\\3,,/#)r rr)rrr"rQ)rs"rrrs+BBCBHT#s(^$<Brc\pVR,VJ;'d+\P!4VR,, \8pV'dVR,e VR,#R#)rrrN)_TOPOLOGY_CACHEtime monotonic_TOPOLOGY_CACHE_TTL)rcfreshs& r_topology_cache_getrsLA dGrM N Ndnn.48;NNE!F)"71V9ATArcFV^8dQhR\\\3,/#r r)rs"rrrs  $sCx. rc&\p\V4pVeV#\;_uu_4\V4pVe VuuRRR4#V!4p\P W \ P !4R7VuuRRR4# +'giR#;i)N)rrr)rr_TOPOLOGY_CACHE_LOCKrr_rr)rcachedrs r(_collect_profile_gateway_topology_cachedrsr *B  $F   $R(    tDDNN4DE    sA?2A?? B c:V^8dQhR\\,/#r )setrQ)rs"rrrs\\CH\rct^RIHpV!4P4Uu0uFqPkK up#uupi)uConnected platform names; synchronous by design — the first ``load_gateway_config()`` does platform discovery and can outlast Desktop's WS connect timeout on Windows, so ``get_status`` runs this in Starlette's worker pool.)load_gateway_config)gateway.configrget_connected_platformsr)rplatforms r"_load_configured_gateway_platformsrs/3+>+@+X+X+Z [+ZxNN+Z [[ [s5iUcRV^8dQhR\R\R\\,/#)r versionplatform_labelr)rQrrR)rs"rrrs%3 rcT;'gRT;'gR3F>p\P!RV4pV'gK$\VP^44u# R#)zAExtract the Windows NT build number from stdlib platform strings.r&z%(?:^|[^\d])10\.0\.(\d{5,})(?:[^\d]|$)N)r.searchrRgroup)rrrmatchs&& r_windows_build_numberrsM--R!5!526 BEJ 5u{{1~& &7 rc vV^8dQhR\R\R\R\R\\\3,/#)r systemreleaserrr)rQr")rs"rrrsDdddcdCdY\daefiknfnaodrcVR8Xd>VR8Xd7\W#4pVe(V\8d\P!RRV^R7pRpRVRVR VR V/#) zQHost OS fields for display; Windows 10 builds >= 22000 are relabelled Windows 11.Windows10z^Windows-10(?=-)z Windows-11)count11r1 os_release os_versionr)r_WINDOWS_11_MIN_BUILDr.r/)rrrrbuilds$$$$ r_display_system_platformrs[ w$%g>  *?!?VV$7~]^_NG &,w Tb ccrlogsgateway-restartzgateway-restart.logz gateway-startzgateway-start.logz gateway-stopzgateway-stop.logzgateway-migratezgateway-migrate.logz hermes-updatezhermes-update.logzaction-z.logcV^8dQhRR/#r)rs"rrr?s   D  rc\PR4pVfR#VP4fVP4R#R# \dR#i;i)zFStop a live gateway restart child when its Desktop backend shuts down.rN) _ACTION_PROCSr3poll terminateOSError)procs r"_terminate_desktop_managed_gatewayr?sM   . /D | 99;  NN      s"A AAc\V^8dQhR\\,R\\,/#r subcommandr)listrQr)rs"rrrKs"  49 # rcv\V4^8d9V^,R9d+\V^,4P4;'gR#V'di\V^,4PR4'dB\V^,4P R^4^,P4;'gR#R#)aReturn the named-profile selector that :func:`_profile_cli_args` puts in front of an action. Deliberately inspects only the leading selector: values after the real subcommand may legitimately contain ``-p`` / ``--profile`` for a nested process (``mcp add --args ...``). N --profile==-p --profile)rrQr4 startswithsplit)rs&r_named_profile_from_actionrKs  :! 1 1D D:a=!'')11T1c*Q-(33LAA:a=!''Q/288:BBdB rcFV^8dQhR\\,R\/#rrrQr!)rs"rrrXs//tCy/T/rc6\V4pVR9dR#\V4pVeYV'dV^,R9d VR,pM8V'd1\V^,4PR4'd VR,p\ V4;'d V^,R8H#)zTrue when *subcommand* starts the host multiplexer, not a named profile's own gateway. ``hermes gateway restart`` and ``hermes -p default gateway restart`` are the host. ``hermes -p coder gateway stop`` is not. F:r NNr:NNrW)Nrr)rrrQrr!)rrargss& r_is_host_gateway_spawnrXs )4G''  D DG228D c$q'l--l;;8D : . .$q'Y..rcV^8dQhR\\,R\\\\3,,R\\\3,/#)r r env_overridesr)rrQrr")rs"rrrjsBEES E*24S>*BE #s(^ErcD\V4p\V4'd^RIHpV!4pEMVf\ \ P 4pM^RIHpH pH p^RI H p^RI Hp Hp ^RIHp Hp V!V4p V !\ P RR7p\%V4p\'V !44\'\)440pVFOpVP-V!\/V4R , 44VP-V!V4P144KQ VFpVP3VR4K V !WM4\'V 4VR &V !V4R VR &^R IHpV!V4VP3RR4V'dVP-V4V# \*d\%4pLi;i)aDEnvironment for a detached ``hermes `` action. The dashboard loads its own profile's ``.env`` into process-global ``os.environ``. Copying that mapping verbatim into ``hermes -p ...`` lets the named child see the dashboard profile's platform credentials and ports *before* its own dotenv loads (``load_hermes_dotenv`` does not override keys already present): a supposedly A2A-only profile then claims the default Discord token and binds the default API/BlueBubbles ports. Named-profile actions therefore start from Hermes' standard scrubbed subprocess env, then drop the profile-managed keys plus every key declared by the dashboard/default profile dotenv files and their hydrated secret sources, and pin ``HERMES_HOME`` to the target profile. The child's normal startup then loads that profile's own ``.env``. A host-gateway verb (bare ``gateway`` or ``-p default gateway``) starts from ``host_gateway_child_env`` so a named-profile dashboard cannot donate its dotenv to the multiplexer. Other actions without a profile selector keep the historical environment exactly. )host_gateway_child_envN)_PROFILE_MANAGED_ENV_KEYS_env_keys_defined_in_dotenvget_secret_source_values_resolve_profile_dir)apply_subprocess_home_envget_default_hermes_root)build_subprocess_envstrip_launch_profile_envT)r= scrub_secretsz.env HERMES_HOME1HERMES_NONINTERACTIVE)drop_bridged_env_HERMES_GATEWAY)rrtools.environments.localrr"r1r2hermes_cli.env_loaderrrrhermes_cli.web_server_profilesrhermes_constantsrrrrrrQr r<r_rkeyspopgateway.config_loaderr)rrrr action_envrrrrrrrr target_home profile_keys source_homes source_homer~rs&& r_profile_action_environmentrjsq&)4Gj))C+- "**%    HW[*73 )rzzN 45  ! 7 9:C@QV&V \@V&V'd V\BV&V #\BP;VR4V # \2dTp \5T RR4^8wdhSPT RT R 2P44T !\74R7p Rp ? LRp ? ii;i \2d<p SPT R"T R2P44SP'4hRp ? ii;i)#zWSpawn ``hermes `` detached (via ``hermes_cli.main``) and record the handle.) PROJECT_ROOTT)parentsexist_okab) bufferingHERMES_ACTION_IDz%Y-%m-%d %H:%M:%S r&z === z started z === ) _atomic_bytesz .action_idascii)runtime_command)_sudo_noninteractive_okz-lz--z targets the system-scope gateway service, which requires root, and passwordless sudo is unavailable for the dashboard user. Run 'sudo hermes z0' on the host, or grant that user NOPASSWD sudo. sudoz-ncDV^8dQhR\R\P/#)r detachr)rr&r')rs"rr*_spawn_hermes_action..__annotate__s    !1!1 rc <\P!S3R\S4R\PRSR\PRS/VB#)cwdstdinstdoutstderrenv)r&r'rQDEVNULLSTDOUT)r7r)rcmdlog_files,r_popen$_spawn_hermes_action.._popensZ  & .8.@.@ IQ ZdZkZk  $  rwin32) creationflagswinerrorNz: breakaway spawn refused (z.); retrying without CREATE_BREAKAWAY_FROM_JOB )start_new_sessionz: spawn failed: )"r-r)_ACTION_LOG_DIRmkdiropen_ACTION_LOG_FILESr3rstrftimewriteencodehermes_cli.runtime_stater0hermes_cli._launchersr2r$rr3joinclose RuntimeErrorrsysrrrgetattrr _ACTION_RESULTSrr _ACTION_COMMANDSr _ACTION_IDS)rrar action_idstampr0r2r3messagerCrexcr)rrArBs&&$ @@@@r_spawn_hermes_actionr^s3$6O&7&==tqQH$$"))*<=I MM- .YAi[/TV WE NNVD65'8??AB ;o4& (;;Y=M=Mg=VW5 , 3C%j11 H&d'9S'9::& # 455eg  NNgYb>002 3 NN w' 't"c"-ZGJ   <<7 " V,@,BCD1D NNd#":.TM$% D K d# K7 V 3 D1Q6f7u>@A sCJ%H-7 J- J 8A JJJ  J K6KKc\V^8dQhR\\,R\\,/#r rrrrQ)rs"rrr0s& D D8C= DXc] DrcT;'gRP4pV'dV#^RIHpHpV!V!44;'gR#)a The profile a lifecycle verb addresses: the explicit selector, else the process's own profile (a pooled Desktop ``hermes --profile X serve`` answers ``/api/gateway/*`` without ``?profile=``; an unscoped verb there is about X). The default home resolves to the literal ``"default"`` selector, never to a bare argv: a selector-less child re-reads the sticky ``active_profile`` and would act on another profile's gateway (and skips the named-target env scrub). ``None`` is reserved for a home that is not a profile home at all.r&)get_process_hermes_homeprofile_name_for_homeN)r4r rcrd)r requestedrcrds& r_own_profile_selectorrf0s;B%%'IO !8!: ; C CtCrchV^8dQhR\\,R\R\\,/#r rr"r)rrQr)rs"rrr>s)$$#$c$d3i$rc^RIHp\V4pV!V4pV'dVR8Xd\W4eRR.pVRV.,#)u``hermes [-p X] gateway `` argv for a dashboard lifecycle action. A profile served by the live default multiplexer has no gateway of its own: ``restart`` targets the multiplexer (the process that actually serves X — a ``-p X gateway restart`` child only exits 78 into the action log while the UI reports "restarted"); ``start``/``stop`` are refused by the caller (``multiplexed_profile_refusal``). The multiplexer is addressed as ``-p default`` explicitly: a bare ``gateway restart`` spawned from a pooled ``--profile X serve`` would inherit X's ``HERMES_HOME`` and hit the same exit-78 refusal. The selector is explicit for the default home too: a bare child re-reads the sticky ``active_profile`` and would restart another profile's gateway.)_profile_cli_argsrestartrrrW)r rjrfmultiplexed_profile_refusal)rr"rjrs&& r_gateway_subcommandrm>sKA#G,G W %D49$)DW)S)_i  9d# ##rc0V^8dQhR\R\/#r`)rQr!)rs"rrrPs@@S@T@rc^RIHpV!V4#))+named_profile_served_by_running_multiplexer)r!rq)rrqs& r_profile_is_multiplexedrrPsN 6w ??rc0V^8dQhR\R\/#)r profile_dirr)rr!)rs"rrrUs::$:4:rca^RIHoHpHp^RIHpV!V4'gR#V!V4pVfR#V!VRV3RlR7pVP ;'dVPV^,8g#)aoA live gateway of the profile's OWN (a ``--force``-started separate one), not the multiplexer that serves it. Gateway liveness reports a served profile as running on the multiplexer's PID (#97120), so reading liveness alone made every served profile look self-hosted and the refusal below never fired while a multiplexer was live, which is the only time it is needed.)get_running_pid multiplexer_liveness_for_profileresolve_gateway_liveness)rFTc<S!VRR7#)F) cleanup_staler)r?rvs&r"_has_own_gateway..cs t5Ir)rt use_cache pid_probe)rsrvrwrxrrrunningrt)rtrwrxrrlivenessrvs& @rrrUse kj: !+ . . -k :F ~'5IKH    9 9 q 99rchV^8dQhR\\,R\R\\,/#rhra)rs"rrrgs.*^*^#*^c*^hsm*^rc\V4;'gRpV'dVP4R9dR#\V4p^RIHpHp^RIHpV!V4pV!V4pV'dV'gR#^RIH p V !V4#VR8Xd V!V4'd^RIH p V !4eR#V'g VR8wdR#\V4'dR#V'dVR8XdR#R V R V R 2#^R I H p V !V4'dR#R V RV R2#)uRefusal text for ``gateway start``/``stop`` on a named profile with no gateway of its own (a ``--force``-started separate one is managed normally), else None. A profile the live host multiplexer serves is parked by ``stop`` and a parked one is unparked by ``start`` (the spawned ``hermes -p X gateway `` runs ``gateway_profile_lifecycle``), so neither is refused; ``start`` on an unparked named profile is — one host gateway serves every profile, so a new per-profile gateway is never the answer (the CLI twin ``_named_profile_refused_under_multiplexer`` exits 78 into an action log nobody reads while the UI shows the verb as done).r&N)rprofile_is_standaloner)standalone_rescan_messagestart host_gatewaystopz,The default gateway already serves profile 'z' as a multiplexer; zL it from the default profile instead of a separate gateway for this profile.)_installed_servicesz Profile 'z' does not get a gateway of its own: one host gateway serves every profile. Install or start it from the default profile (hermes gateway install), or fold an existing per-profile fleet with `hermes gateway migrate --multiplex`; `hermes -p z7 gateway install --force` starts a separate one anyway.>currentr)rflowerrrrrrr rgateway.host_attachrrrhermes_cli.gateway_migrater) rr"rerrrrrt standalonerrrs && rrlrlgs&g.44"I  )-CC $Y /FLC&y1K&{3JA(33 w,[994 > % dgo $$ 6>>ykI]&df g>;'' {#$$[ ]^rchV^8dQhR\\,R\R\\,/#rhra)rs"rrrs) $ $(3- $s $x} $rc^RIHp^RIHpT!\ V4;'gR4.p^RIHpV!4pVe%VP\VP44V!WRV R2R7pR PV4;'gR#) zRefusal text when the gateway ``verb`` would act on has live sessions, else None. Asked before spawning: the child refuses the same way, but into an action log the UI never reads.) refusal_linesrrrNzPOST /api/gateway/z?interrupt=true) flag_hintr4) #hermes_cli.gateway_lifecycle_guardsrr rrfrrrrrrR)rr"rrrrownerliness&& rlive_session_refusalrsxBC !"7"@"M"MI N OE0 NE  T%**%& $3EdV?1[ \E 99U  # #t#rc V^8dQhR\\,R\R\R\\\3,/#)r rwhatlabelr)rrQr"r)rs"rrrs?ccHSMcCccPTUXZ]U]P^crcF^RIHp\VR4pV'dRRRV/#V!V4wrVT'd!\PRY%P4RR R R R TP/# \d0p\P RT4RRR\ T4/uRp?#Rp?ii;i) aBest-effort gateway restart after a config change. The save stays authoritative: a failed spawn is reported (``restart_started: False`` + ``restart_error``) so the UI can fall back to its manual restart banner instead of failing the request. Live sessions refuse it the same way.)_spawn_gateway_restartrkrestart_startedF restart_errorz'Failed to auto-restart gateway after %sNz.%s: reusing in-flight gateway restart (pid %s)Trestart_actionr restart_pid) r-rrr<r exceptionrQinfort)rrrrrefusalrreusedr]s&$$ r_restart_gateway_afterrs="7I6G!5/7CCE-g6  BE88T t%57H-Y]YaYa bb E @$G!5/3s8DDEs A&& B 1$BB B c<V^8dQhR\R\R\/#)r textcapr)rQrRr)rs"rrrs!src^RIHpV'd V^8dTMRp.RrC\\PVP V44Fp\ V4V8dVPVRV4WQRpK*V'd=\ V4\ V4,^,V8dVPV4TpKqV'dV RV 2MTpK V'dVPV4V#)zSplit *text* into provider-cap-sized pieces on sentence boundaries. Deliberately NOT unified with gateway.platforms.helpers' split_text_fence_aware: this reflows whitespace (sentences re-joined with single spaces) and has no fence semantics. )SENTENCE_BOUNDARY_REir&Nr/)tools.tts_streamingrfilterrQr4rrr)rr_SENTENCE_BOUNDARY_REpiecesbufsentences&& r_split_text_for_speak_streamrs Rq#dCbC399&;&A&A$&GH(mc! MM(4C. )~H 3s8c(m+a/#5 MM# C),SE8*%(CI  c MrcV^8dQhR\\\\3,,R\\\\3,,/#)r sessionsr)rr"rQr)rs"rrrs4tDcN';T#s(^@TrcVVF"p\FpVPVR4K K$ V#N)_SESSION_LIST_HEAVY_FIELDSr)rsr~s& r_strip_session_list_rowsrs+ -C EE#t . OrcV^8dQh/^\9d,\\\\\3,3,;R&^\9d\\\ 3,;R&^\9d \ ;R&^\9d\\\3,;R&^\9d%\\\P3,;R&^\9d(\\\\R3,3,;R&^\9d\\\3,;R&^\9d,\\\\\ 3,3,;R &#) r rZrrIrLr.rXrYrW) __conditional_annotations__r"rQr rRrrr&r')rs"rrrsJd3c3h#78KVHGc3hGWL 322M R  4S> S n 0/tC)))*/o p 21$sE#s(O+,1q r ! T#s(^ s v 0/c4S>)*/w ri)porti!)ri!)ri!) webhook_porti=")r!)rr)ri)ri)ri>fatalstopped disconnected) doctorzsecurity-auditbackupimportzcheckpoints-prunezskills-installzskills-uninstallz skills-updatez curator-runz prompt-sizedumpzconfig-migrateztools-post-setupr>rrrk) system_prompt model_config)Gr__doc__loggingrr1r.r&rU threadingrurllib.requestr5pathlibrtypingrrrrrhermes_cli._subprocess_compatrr r]r getLoggerrrrrBrZ frozensetr\rmrvrrrLockrrrrrrrrrIrLrrXrYrWrrrrr r$r^rfrmrrrrlrrrrrr)rars0@rrs   33f-01 +6'+@~|^=NP^ $&6 Wm !#35KVUc ^ <""FG)X":&B0V$(fdD$"GG ~~'B \d()F22,(&,( % //dwtfD !!/ % .0 //11 -//   /$ET!**F G!*HRSWRj D$$@ :$*^Z $c$4?C s F(