+ lHjRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI Ht^RIHtHtHtHt^RIHtHtHt^RIHt]P4!]4tRtRtR tR t R t!R t"^xt#R t$Rt%^t&^t']#]%]&,,]',t(](^<,t)])](,^<,t*Rbt+Rt,!RR]-4t.]P^!R4t0RRlt1RRlt2RR/RRllt3RRlt4RRlt5RRlt6R R!lt7R"R#lt8R$R%lt9R&R'lt:R(R)lt;]ltHR?R@RAR@RBR@/RCRDlltIRERFltJRGR/RHRIlltKRcRJRKlltLRLRMltMRNROltN!RPRQ4tORcRRRSlltPRTRUltQRVRWltRRcRXRYlltS!RZR[]-4tTR\R]ltUR^R_ltV]PRcR`Rall4tXR#)duBot Mode cross-connection relay — connections ARE the peer set. Gateway-side half of the relay letting agents on ANY Desktop-connected gateway message agents on ANY other. Plain file plumbing under ``/bot_relay/`` — no network; the Desktop owns every socket: ``roster.json`` (union roster of agents on OTHER connections, pushed via ``bot_relay.roster.sync``), ``outbox/`` (envelopes queued by ``message_agent``, drained via ``bot_relay.outbox.drain``), ``replies/`` (one JSON per envelope via ``bot_relay.reply``; a waiter spawned at send time watches it so the reply wakes the sender like a local DM). Public helpers never raise, except ``enqueue_envelope`` → ``EnvelopeRefusedError`` when the target is definitively offline (fail fast instead of queueing a DM nobody will drain). ) annotationsN)Path)AnyIteratorMappingOptional) _default_home _hermes_root alias_formsatomic_json_write bot_relayz roster.jsonoutboxclaimedreplieslocksiiXc2a]tRt^EtRtRV3RlltRtV;t#)EnvelopeRefusedErrora``enqueue_envelope`` refused to queue (nothing written); ``reason`` is a stable machine code. ``reason`` is a stable machine code; ``str(exc)`` is the human text. 'runtime_offline' matches the #93091 item-1 failure-reason enum (plain literal here so the branches merge cleanly). c V^8dQhRRRR/#)reasonstrmessage)formats"4/home/ubuntu/.hermes/hermes-agent/tools/bot_relay.py __annotate__!EnvelopeRefusedError.__annotate__LssSc 2<\SV`V4WnR#N)super__init__r)selfrr __class__s&&&rr"EnvelopeRefusedError.__init__Ls ! r)r)__name__ __module__ __qualname____firstlineno____doc__r"__static_attributes__ __classcell__r$s@rrrEs rrz ^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$c V^8dQhRRRR/#rroot Path | strreturnrr)rs"rrrVs''Z'D'rc.\V4\, #r )rRELAY_DIR_NAME)r0s&r relay_rootr5Vs : &&rc V^8dQhRRRR/#r/r)rs"rrrZszdrct\V4p\\\3Fp^RIHpV!W, 4K V#))mkdir_under_hermes_home)r5 OUTBOX_DIR CLAIMED_DIR REPLIES_DIRhermes_constantsr9)r0basesubr9s& r _ensure_dirsr@Zs1 d DK5< +6 Kr sort_keysFc(V^8dQhRRRRRRRR/#) rtargetrpayloadrrAboolr2Noner)rs"rrrbs/UUtUcUURVUrc$\WRVRR7R#)N)indentrAmoder )rCrDrAs&&$r_atomic_write_jsonrKbsfdieTrc$V^8dQhRRRRRR/#)rkeyrloaderr2rr)rs"rrrfs!  s s s rc^RIHp\W!4!4;'g/pVPR4;'g/PV4# \d\ P RTRR7R#i;i)z``bot_mode.`` from config, read lazily (tools/ must not import CLI config at import time); None when absent or the config is unreadable.Nbot_modezbot_mode.%s config read failedTexc_info)hermes_cli.configconfiggetattrget Exceptionloggerdebug)rMrNcfgmodcfgs&$ r _bot_mode_cfgr\fsf*f%'--2 #))r..s33  5sT JsA A A #A32A3c V^8dQhRRRR/#)rrowrr2Optional[dict]r)rs"rrrsss~rc,\V\4'gR#\VPR4;'gR4P 4p\VPR4;'gR4P 4P R4;'g VR8XdRMTp\VPR4;'gR4P 4pV'dGV'd?\ ;QJdR W!V34F 'dK R M R M!R W!V344'gR#RTRTRTR \VPR 4;'gR4P 4R ,R\VPR4;'gR4P 4R,RRP\VPR4;'gR4P44R,/p\VPR4\4'd VR,VR&V#)uhValidated, minimal roster row or None. Rows come from the Desktop over RPC — treat as untrusted input.Nprofilehandle@defaulthermes connection_idc3L"TFp\PV4xK R#5ir ) _HANDLE_REmatch).0vs& r (_normalize_roster_row..{s 2qPp1:3C3CA3F3FPps"$FTconnection_label:NPNtitle:NxN description :NNonline) isinstancedictrrVstriplstripalljoinsplitrE)r^rarcrgouts& r_normalize_roster_rowrss c4 #'')$**+113G "((b ) / / 1 8 8 = p pgYbNb(hoF066B7==?M -ss2qQWboPp2qsss2qQWboPp2q/q/q7Hfo}C(: ; A ArBHHJ3OSWWW%++,224T:sxxCGGM$:$@$@b A G G IJ4P  C#''(#T**H H Jrc$V^8dQhRRRRRR/#)rr0r1rowsrr2intr)rs"rrrs!jrc \V4p/p\R\\\ V\ 4'dTM.44F%pVP VR,VR,3V4K' \V4Uu.uF qSV,NK pp\V\, R\\P!44RV/RR7\V4#uupi)zCAtomically persist the Desktop-pushed remote roster. Returns count.Nrgra updated_atagentsT)rA) r@filtermaprrwlist setdefaultsortedrK ROSTER_FILErtimelen)r0rr>by_keynormkcleaneds&& rwrite_remote_rosterrs  D*,FtS!6 4QU@V@V\^_`40$y/BDIa"(.1.Qayy.G1tk)L#diik:JHV]+^jno w<2s6C c V^8dQhRRRR/#rr0r1r2 list[dict]r)rs"rrrs  Z J rc\V4\, PRR7p\P!V4p\ V\ 4'dVPR4MRp\ V\4'd*\\V4Uu.uFqD'gK VNK up#.#uupi \d.u#\d\PRRR7.u#i;i)z9The current remote roster (possibly empty). Never raises. utf-8-sigencodingrNzbot_relay roster read failedTrQ)r5r read_textjsonloadsrwrxrVrrrFileNotFoundErrorrWrXrY)r0rawdatarrs& rread_remote_rosterrs $+-88+8Nzz#'1$'='=(#4GQRXZ^G_G_34f=C=a=CgeggC   3d C s<B B- B(B(#B-&B-(B-- C"<C"C"!C"c V^8dQhRRRR/#rr^rxr2zset[str]r)rs"rrrs;;T;h;rc^VR,P4VR,P40#)zKLower-cased routing ids of a roster row: its @handle and profile folder id.rcralowerr^s&r _target_idsrs' M   !3y>#7#7#9 ::rc V^8dQhRRRR/#rr)rs"rrrsBBB(Brcj\V4\VPR4;'gR4,#)u%Every lower-cased bare form that addresses ``row``: routing ids plus the Bot Mode title's mention slugs (``"CoS Bot"`` → ``cos-bot``/``cosbot``, what the Desktop picker inserts). A remote ``default`` is ``@hermes`` on every gateway, so its title is the only bare form that can single it out.rqrb)rr rVrs&r_target_aliasesrs* s k#'''*:*@*@bA AArc$V^8dQhRRRRRR/#)r raw_targetrrosterrr2rr)rs"rrrs! < @``; ``"ambiguous"`` for a bare form on several connections; None otherwise. An exact handle/profile match beats a title slug, so a title colliding with another row's handle never steals it.c3@"TFqP4xK R#5ir )ry)rkps& rrm(resolve_remote_target..sb)aAggii)asrbrdNrg ambiguous)rryrz partitionrrrr)rrwantatconnr^rmatchess&& rresolve_remote_targetrs cZ-=-=2)>)D)D)F)M)Mc)R)\)\]`)abNDd Bt ::&>ssd?xxSWCxSWCcrsvcw[wCCSWCxG W*71:; ; _?Cxs$:3D-2D->D2D2)D7?D7c V^8dQhRRRR/#rr^rxr2rr)rs"rrrs66T6c6rc\VPR4;'gR4p\P!RRVP 4P 44P R4pV\ V49dV#R#)uThe Bot Mode title's slug form (``"CoS Bot"`` → ``cos-bot``, what the picker inserts); "" when the title is empty, reserved (a bot titled "Hermes") or not a valid handle.rqrbz [^a-z0-9_-]+-)rrVrer?ryrr )r^rqslugs& r _title_slugrsb  &&B 'E 66/3 (;(;(= > D DS ID;u--4525rc$V^8dQhRRRRRR/#)rrr local_takenset[str] | frozenset[str]r2z list[str]r)rs"rrrs#** *9R*en*rcpaaaVUu0uFq"P4kK upo/o/oVF_p\V4FpSPV^4^,SV&K! \V4FpSPV^4^,SV&K! Ka RVVV3RllpVUu.uF q4!V4NK up#uupiuupi)aOne unambiguous target string per row, shortest first: the bare handle when no other remote row and no LOCAL profile (``local_taken``: this gateway's handles and friendly-name slugs) answers to it; else the title slug under the same test (a remote ``default`` titled "CoS Bot" is ``@cos-bot``, since bare ``@hermes`` is always this gateway's own default); else ``handle@connection``. Mirrors ``resolve_remote_target``.c V^8dQhRRRR/#rr)rs"rr)remote_target_forms..__annotate__s9949C9rc<VR,S3\V4S33FOwrV'gKVP4S9gK&VPVP4^4^8XgKMVu# VR, RVR, 2#)rcrdrg)rrrV)r^ candidateclaims alias_claims id_claimstakens& r_form"remote_target_forms.._forms}$'x=)"<{3?OQ]>^!_ IyY__.e; 9??K\^_@`de@e  "`h-#o"6!788r)rrrVr)rrformr^rrrrs&& @@@rremote_target_formsrs '2 2kdZZ\k 2E "I#%L$D'mmD!4q8IdO%#C(D!-!1!1$!:Q!>L ) 99#) )&3E#J& ))# 3" *s B.B3u2^(Message from 🤖 .+? \(@)([A-Za-z0-9_-]+)(\): )c 0V^8dQhRRRRRRRRRR R R/#) rrr from_handlerfrom_connectionrrrrr2r)rs"rrrsA L L# LC L# LWa L&? LRU Lrc \T;'gR4P4PR4\T;'gR4P4re\P \T;'gR44pV'd?V'd7\ P V4'd\ P V4'gV#\ \RV4\W4444pVPVP4VP434;'gV RV 2p VP^4 V VP^4 WP4R 2#)ucRewrite a relayed DM's ``Message from 🤖 (@):`` stamp so the handle is the form THIS gateway can reply to: the sender's row in the local relay roster as ``remote_target_forms`` renders it, else ``handle@connection``. A relayed ``@hermes`` is another machine's default — left bare, a reply lands on the recipient's own default (#103731).rbrdc3|"TF2qR,P4VR,P43xK4 R#5i)rgrcNr)rkrs& rrm'qualify_sender_stamp..s0XQWA)//11X;3D3D3FGQWs:<N) rryrz_SENDER_STAMP_RErjrirxziprrVrgroupend) rrrrrrcrrjformsrs &&&&& rqualify_sender_stamprs {((b)//188=s?CXCXVX?Y?_?_?aD  " "3w}}"#5 6E J$4$4V$<$. s&Sv!O*envelopes&$$$$ renqueue_envelopers%.VZZ)IIVZZ -BIIcJ$JJ12XXfjj6QXXUXY["#4@\7\] ]  D djjl c$))+.>@WY] }VO46FyHY)9g H tj(htn-=U+CCXN Orc ,V^8dQhRRRRRRRRRR /#) rr0r1pathrttlfloatnowr2rEr)rs"rrr)s/:TEdrc\P!VPRR74p\V\4'g"\ R\ V4P 24h\VPR4;'gVP4P4pY5, T8:dR#\P!\\ 4;_uu_4\T\!TPR4;'gR4RR TPR 4;'gR R TPR 4;'gR RT R2R7RRR4R# \\ 3dR#i;i +'giR#;i)zTrue when the outbox envelope is older than ``ttl``; writes the 'queued_expired' reply so the sender's waiter resolves (best effort). Unreadable envelopes are left for the claim.rrexpected a JSON object, got rFrrbqueued_expiredzqueued message to @rrrrz expired after ucs waiting for the Desktop to drain it — it was NOT delivered. Resend once the Desktop reconnects.rerrorNT)rrrrwrxrtyper&r rVrrr contextlibsuppress write_replyr)r0r r r envcreateds&&&& r_expire_if_staler)s1jj=>#t$$;DI\P!\4;_uu_4VP4RRR4KZV\, VP, p\V4p\P!\\4;_uu_4\ P"!WV4\$P&!VP)RR74p\+V\,4'g"\R\/V4P0 24hVP3Wx34RRR4EK; VU U u0uFwrV R,kK p p p VP5\7WW44\ VRR7U Uu.uFwrVNK upp # +'giELO;i +'giEK;iuup p iuupp i) unDrain the outbox (rename → claimed/ so a second drain can't double-deliver). TTL-expired envelopes get a 'queued_expired' reply and are removed instead. Envelopes older than ``bot_mode.envelope_ttl_seconds`` are NOT delivered: each gets an error reply (reason ``'queued_expired'``) so the sender's waiter resolves, and its outbox file is removed (#93091 item 2). *.jsonrMNrrrrcV^,#)r8r)items&r)claim_pending_envelopes..gs$q'r)r@ _sweep_stalerrrr:globrrrrrunlinkr;rrosreplacerrrrwrxrr&appendextend_replay_unanswered) r0r>r r r~r rorderr_orderr^seens & rclaim_pending_envelopesr2Fs  D  !C ))+C02Cz)//9zJJ 7'C==$$W-- . $tyy04   * 5 5 JJt %zz'"3"3["3"IJHh-- #?X@W@W?X!YZZ JJ( ) 6 5K*- -+&CIID -JJ!$d89-3C=Q-R S-R)H-R SS.-- 6 5 5 . Ts%"G9 BH %H"( H(9 H H c ,V^8dQhRRRRRRRRR R /#) rr0r1r>rr1setr r r2z$list[tuple[tuple[float, str], dict]]r)rs"rrrjs0##Z#t#3#U#Os#rc .p\V\, PR4\R7EFpV\, VP , P 4'dK8\P!\\4;_uu_4\P!VPRR74p\V\4'g"\R\!V4P" 24hVP%R4V9d RRR4K\'VP%R4;'gR4pR VP%R 4;'gR R VP%R 4;'gR 2pVP%R4RJd\)WWxV4RRR4EKj\+VP%R4;'gVP-4P.4p W9, \08d&\3WRRV R\0 R2R7RRR4EKVP5\V4V34RRR4EK V# +'giEK;i)u``claimed/`` canonical envelopes whose reply has not landed yet, replayed on EVERY drain. A drained envelope is not "delivered": its stable id is handed out again until the target's terminal reply is written under that id, so a Desktop that disconnects between ``outbox.drain`` and ``bot_relay.deliver`` (#111021, #111207) or loses the drain result cannot drop the DM. The replay is safe because ``bot_relay.deliver`` forwards the SAME id to the target profile's authority, which admits one turn per id and answers a retry with the existing record — never a second turn. Once ``created_at + REPLY_WAIT_SECONDS`` passes with no reply the waiter is gone (or about to be): a ``delivery_timeout`` reply is written so it learns, and the envelope is never handed out again. Each envelope comes back with its ``_queued_at`` enqueue key so the drain can merge it with fresh outbox rows in send order. r!r"rrrrNrbrdrrrrrTrdelivery_timeoutzno reply from z within us of sending — the Desktop picked the message up but never reported a delivery. It will not be retried; resend if it matters.r)rr;r(rr<rexistsrrrrrrrrwrxrr&rVr_settle_pre_upgrade_claimr rrREPLY_WAIT_SECONDSrr,) r0r>r1r r~r renv_idrrs &&&& rr.r.js13C{*00: KK ;  * 2 2 4 4   * 5 5zz$..+."FGHh-- #?X@W@W?X!YZZ||D!T) 6 5 d+11r2F _5<<=T(,,ObBcBjBjgjAklE||34D@)$fSI6 5HLL6NN$))+:N:NOG}11D1C$UG84F3GHrrt!6 5" JJ 4((3 4#6 5L* J%6 5 5s8 A5H5 H5)H5 H5%(H5H55A H5 H55 I c 0V^8dQhRRRRRRRRRR R R /#) rr0r1r rr:rrr r r2rFr)rs"rrrs9,,J,d,C,PS,Z_,dh,rc^RIHpWAP4P, \8dR#\ WVRV R2R7R#)uOA ``claimed/`` envelope from before canonical delivery (no ``canonical_delivery_v1``) is never replayed: its old lane ran a CLI turn the authority has no record of, so re-admitting the id could run the DM twice. Left alone, though, its sender's waiter watched a reply that never came. Once the old drain's own re-offer point passes (``REOFFER_AFTER_SECONDS`` after its claim — the claim mtime — by which time a live delivery has posted the Desktop's timeout reply) the outcome is settled as ``unknown``: the waiter resolves, the envelope is never offered again, and nothing auto-resends.)UNKNOWNNzthe message to u was picked up before this gateway was upgraded and its delivery was never reported — it may or may not have been delivered. It will not be retried; check with the recipient before resending.r)tools.bot_failure_reasonsr=rrREOFFER_AFTER_SECONDSr)r0r r:rr r=s&&&&& rr8r8s?2 YY[ ! !!$99W %!* *,rreplyrbrrc 0V^8dQhRRRRRRRRRRRR /#) rr0r1 envelope_idrr@rrr2rr)rs"rrrs8jscsadnrrc 0\V4p\T;'gR4P4p\P!RV4'g\ RV: 24hV\ , V R2, pVP4'dV#\T;'gR4\T;'gR4rV 'gV'd^RIH p V !V4p \TRTR\\P!44R\T;'gR4R VR V /4V#) uPersist the relayed reply (or delivery error) for the waiter. ``reason`` (typed code, ``tools.bot_failure_reasons``) is classified from ``error`` when omitted. Idempotent by envelope id — the first settled reply stands, error or not. That is safe because a replayed envelope (``_replay_unanswered``) carries the SAME id into the target authority, which admits one turn per id, so a later write is a duplicate or a bookkeeping timeout, never a truer answer.rbz^[0-9a-f]{32}$zinvalid envelope id: r)classify_agent_errorrrr@rr) r@rryrrjrr<r7r>rDrKrr) r0rBr@rrr>safer errcoderDs &&$$$ rrrs  D {  b ! ' ' )D 88%t , ,0@AA + 4& .D {{}} EKKR #fll"3 CB#C(tdD$DIIK0@'3u{{XZK[]dfiksuyz{ Krc(V^8dQhRRRRRRRR/#) r directoryrpatternrcutoffr r2rr)rs"rrrs(  t c 5 S rc ^p\P!\4;_uu_4VPV4F|p\P!\4;_uu_4VP 4'd9VP 4P V8dVP4V^, pRRR4K~ RRR4V# +'giK;i +'giT#;i)zdUnlink regular files matching ``pattern`` with mtime before ``cutoff``; returns count. Never raises.N)rrrr(is_filerrr))rIrJrKremovedr s&&& runlink_files_older_thanrOsG   W % %NN7+D$$W--<<>>diik&:&:V&CKKMqLG.-, & N .-- & % Ns$7CAC + C C C C& r c$V^8dQhRRRRRR/#)rr>rr  float | Noner2rr)rs"rrrs&xxtx\xSxrcaaVf\P!4MT\, o\VV3Rl\\\ 344#)Nc3L<"TFp\SV, RS4xK R#5i)r!N)rO)rkr?r>rKs& rrm_sweep_stale..s$wPv&tcz8VDDPvs!$)rSTALE_AFTER_SECONDSsumr;r<r:)r>r rKsf$@rr'r's5 [diikc5H HF wQ\^ikuPvw wwrc V^8dQhRRRR/#)r max_age_hoursrQr2rr)rs"rrrs  | s rc?\\\\4444pVP 4'd \ V4#^# \ d\PRRR7^#i;i)zHourly sweep of stale relay artifacts (DM plaintext; ``_sweep_stale`` otherwise runs only on Desktop drains). ``max_age_hours`` is for ``cleanup_*_cache`` signature parity only.zbot_relay artifact sweep failedTrQ) r5r rris_dirr'rWrXrY)rXr>s& rcleanup_bot_relay_artifactsr[s_ ,tMO'<=>%)[[]]|D!99  6 FsAA A "A10A1c$V^8dQhRRRRRR/#)rr0r1rrxr2rr)rs"rrrs!trc\\V4\, VR, R2, 4pRVPRR4 RVPRR4 2p\\ \ 4P 4PR44p\P;'gR VR W#\\4.p\PR 8Xd!VUu.uFqfPR R 4NK pp\P!V4#uupi)uShell command that blocks until the reply file appears, then prints it; spawned via ``terminal_tool(background=True, notify_on_complete=True)`` so its stdout arrives as the same completion notification local DMs use. A ``tools/bot_mode_dm.py --wait-reply`` entrypoint, like the local delivery runner — not ``python -c``. The approval gate flags inline interpreter code ("script execution via -e/-c flag"), and ``approvals.single_query_mode`` defaults to ``deny`` for the one-shot ``-Q`` turn a bot replies from, so the reply waiter was refused exactly when a bot answered a teammate: the message was delivered, the reply never woke the sender. Roster fields ride as argv (``shlex`` quoted), never as source text, so a hostile handle or connection id stays data. rrrdrrbrrzbot_mode_dm.pypython3z --wait-replywin32\/)rr5r<rVr__file__resolve with_namesys executabler9platformr+shlexr|)r0r reply_pathrrunnerargvparts&& rwaiter_commandrmsZ% 3$8H6NNOJ _b12$x||DWY[7\6] ^E h'')334DE FF NN ' 'iTWXjTk lD ||w599DD T3'D9 ::d :sDcV^8dQhRR/#rr2rr)rs"rrrsUUSUrc\PR8XdRMRp\\4P 4P ^,R, R, V, pVP 4'd \V4#\\P;'gR4PV, pVP 4'd \V4#\P!R4;'gR#)avPrefer this install's published launcher, then interpreter/PATH fallbacks. A long-lived caller can still run in an older dependency generation. Its sibling console script pins that generation, whereas the published launcher selects current dependencies at child start. Keep the historical fallbacks for external/developer installs that have no published launcher (#93590). r_z hermes.exerfz.hermesbinrb) rergrrbrcparentsrMrrfparentshutilwhich)r publishedsiblings r _hermes_clirxs<<72<DX&&(003i?%G$NI9~3>>''R(//$6G"??,,3w<T&,,x2H2T2THTrcB]tRtRtRtR tRRltRRltRRltR t R #) DeliveryAuthoria!A relayed turn's author as an in-process object. ``bot_relay.deliver`` builds it from the sender fields an admitted gateway client relays for another connection; nothing verifies the sender itself. A JSON client cannot build one, so ``prompt.submit`` accepts the object and refuses a dict.c V^8dQhRRRR/#)rauthorrxr2rFr)rs"rrDeliveryAuthor.__annotate__s##t##rc &\V4VnR#r )rxr|)r#r|s&&rr"DeliveryAuthor.__init__s 6l rc V^8dQhRRRR/#)rotherobjectr2rEr)rs"rrr} sQQFQtQrc d\V\4;'dVPVP8H#r )rwrzr|)r#rs&&r__eq__DeliveryAuthor.__eq__ s$%0PPU\\T[[5PPrcV^8dQhRR/#ror)rs"rrr}s22#2rc $RVP: R2#)zDeliveryAuthor()r|)r#s&r__repr__DeliveryAuthor.__repr__s q11rrN) r&r'r(r)r* __slots__r"rrr+rrrrzrzs$\I#Q22rrzc(V^8dQhRRRRRRRR/#)rrrrrr2r_r)rs"rrrs)  s  s ^l rc^RIHp\T;'gR4P4pV'gR#RT!T\T;'gR44R\T;'gR4P4;'gTRR/#)a\The author of a relayed DM's recipient turn, built from the sender fields as the relaying client reports them. A relayed DM always comes from another gateway, so the id carries the Desktop's id for the sender's connection (``local`` included) and only the recipient's own profiles are bare ``bot:``. None when the envelope names no sender. bot_author_idrbNrris_botTagent.turn_authorrrry)rrrrras&&& rdelivery_turn_authorrsu 0,$$"%++-G  -_-B-B)CDfcR]RcRcacNdNjNjNlNwNwpw d rcV^8dQhRR/#)rr2ztuple[str, ...]r)rs"rrr s?rc$^RIHp\V4#)aSession-bound env names to strip from a delivery child, from ``gateway.session_context``. Synced with the session binding surface as vars are added; deliberately NOT a ``HERMES_SESSION_*`` prefix match, which would also strip non-identity knobs (e.g. ``HERMES_SESSION_STALL_TIMEOUT``)._VAR_MAP)gateway.session_contextrtuplers r!_delivery_child_session_env_namesr s 1 ?rc V^8dQhRRRR/#)r principalrr2rxr)rs"rrr+s t t t trcn^RIHpRT!R\T;'gR4P44RRRR/#) u8The author of a relayed DM whose sender fields cannot be trusted: a logged-in client named them. Server-derived and unspoofable — the id is built from the caller's minted identity digest, never from anything the client sent — and still a BOT author, because the recipient's memory routes on that: Honcho writes a bot-authored turn into the bot's own a2a session and refuses conclusion / profile / mirror writes for it, while an unattributed turn is treated as the human's (#107598 review). The human-facing signature stays in the message text the sender composed.rrrelayrbrzrelayed teammaterTr)rrs& rrelaying_principal_authorr+s80 -Y__")=)C)C)EFPbdlnr ssrc$V^8dQhRRRRRR/#)rr|r_ profile_homezstr | Path | Noner2zdict[str, str]r)rs"rrr8s#7HTbrc^RIHpHp^RIHpHp^RIHpHp^RI H pTp V 'g+V!4'dV!4'gV!4fV!4p V!\PV RR7p V PVR4\4Fp V PV R4K V'dV PV!V44V #)aEnvironment for one delivery turn's ``hermes -p `` child. The dispatcher's own HERMES_TURN_AUTHOR is dropped first so a delivery without an author never inherits the author of the turn that sent it. Dispatcher session identity (the canonical ``gateway.session_context`` session env names) is dropped too: a nested recipient that ``message_agent``s onward must not stamp that grandchild notify with the grandparent's key, or the live recipient never resumes. The child runs the target profile's Bot Chat turn, so it starts from THAT profile's env (``served_profile_child_env``: launch profile ``.env`` / TERMINAL_* residue dropped, target secrets overlaid), never the multiplexer's raw ``os.environ``; ``-p`` alone only pinned HERMES_HOME. ``profile_home`` is the target's home when the caller knows it (relay RPC, roster); otherwise the active override, and under multiplex the launch home.)current_secret_scopeis_multiplex_active)TURN_AUTHOR_ENVturn_author_env)get_hermes_home_overrideget_routing_process_hermes_home)served_profile_child_envNT)r> target_homeinherit_credentials)agent.secret_scoperrrrrr=rrtools.environments.localrr*environpoprupdate) r|rrrrrrrrrrrs && r delivery_envr8sMBZAK /11:R:T:T$&.57 " ae fCGGOT"13 d4  ?6*+ Jrc6a]tRtRtRtRtRV3RlltRtV;t#) TurnBusyErrorihuA delivery turn is already running for the target profile (``waited_seconds`` ≈ time queued). ``reason`` is 'target_busy' — extends the #93091 item-1 structured refusal enum. ``waited_seconds`` is roughly how long the caller queued behind the current turn before giving up. target_busyc V^8dQhRRRR/#)rrarwaited_secondsr r)rs"rrTurnBusyError.__annotate__qsJJJUJrc b<WuVnVn\SV` RV R\ V4 R24R#)zCtarget_busy: another delivery turn is already running for profile 'u' — queued behind it for ~zEs without it finishing. The message was NOT delivered; retry shortly.N)rarr!r"round)r#rarr$s&&&rr"TurnBusyError.__init__qsG,3) d) ^_f^gh2272G1HIII Jr)rar) r&r'r(r)r*rr"r+r,r-s@rrrhs FJJrrcV^8dQhRR/#)rr2r r)rs"rrrxsVV5Vrcl\RRR7pVf\\4#\R\V44#)z=Wait budget for a queued delivery turn (config, lazily read).turn_wait_seconds load_configrr)r\r TURN_WAIT_SECONDS_FALLBACKmaxrs rrrxs0 +M BC03 5+ ,US%PS*AUUrc$V^8dQhRRRRRR/#)rr0r1rarr2rr)rs"rrr~s!999c9d9rc\P!RR\T;'gR44R,;'gRp\V4\, V R2, #)u?Per-profile lockfile path (short — safe on macOS temp roots).z[^a-zA-Z0-9_-]_rb:N@Nz.lock)rr?rr5 LOCKS_DIR)r0rarEs&& rturn_lock_pathr~sH 66#S#gmm*< =c B I IcD d i 'TF%. 88rc(V^8dQhRRRRRRRR/#) rr0r1rartimeout_secondsrQr2zIterator[Path]r)rs"rrrs)##J##|#_m#rc #"^RIpTf \ 4M\ R\T44p\ Y4pTPPRRR7\P!T\P\P,R4p\P!4pYt,pTP!YcP"TP$,4Tx\.P0!\&4;_uu_4TP!YcP24RRR4\P4!T4R# \d'\PR4\ Y4xR#i;i \&dc\P!4p Y8d\)YT, 4h\P*!\-R\ RY, 444EK2i;i +'giL;i \.P0!\&4;_uu_4TP!YcP24RRR4i +'gii;i;i \P4!T4i;i5i) uHold ``profile``'s cross-process turn lock for the ``with`` body: non-blocking flock probe + short-sleep retry up to the budget (``bot_mode.turn_wait_seconds`` unless ``timeout_seconds``); raises :class:`TurnBusyError` when exhausted. No ordering among waiters, but every waiter is bounded. Without ``fcntl`` (Windows) the lock is a no-op — those installs never had this race path.Nz:bot turn lock disabled: fcntl unavailable on this platformrT)rrexist_okrHg?g{Gzt?)fcntl ImportErrorrXrYrrrr rsmkdirr*openO_RDWRO_CREATr monotonicflockLOCK_EXLOCK_NBrrsleepminrrLOCK_UNclose) r0rarrbudgetr fdstartdeadliner s &&& racquire_turn_lockrs %4$;  S%P_J`AaF $ (DKKdT2 ryy2::-u 5B > A B  =>  /J$$W-- B ..  7  QRT++  Ann&?'u== 3sCx~$>?@@  A.-$$W-- B ..---  sI.D>BI.I.,E2IG5 "IG"I&I.>-E/+I..E//I.2A(GIGI" G2 -I5#IH= 4 I= I III++I.i`Tr )Yr* __future__rrrloggingr*rrhrtrerrpathlibrtypingrrrrtools.bot_mode_proberr r utilsr getLoggerr&rXr4rr:r;r<rrrTURN_ATTEMPT_TIMEOUT_SECONDSTURN_MAX_ATTEMPTS)DESKTOP_DELIVER_SETTLEMENT_MARGIN_SECONDSDESKTOP_DELIVER_TIMEOUT_SECONDSr?r9rUr RuntimeErrorrcompilerir5r@rKr\rrrrrrr frozensetrDOTALLrrrrrrrr2r.r8rrOr'r[rmrxrzrrrrrrrcontextmanagerrrrrrs+ #  33II#   8 $     !" #,/)!=@Q!QQT}} 8"<+-LLrQ < ZZ; < 'UU , ; B < 6V_U`*4::SUWU^U^_CL+ L ,,((!TH#L,"BUWgi4 xDx .U$22"  t` JL J V 9  ##r