+ lHj}Rt^RIHt^RIt^RIt^RIt^RIt^RIHt^RI H t ^g] !R4, ^@, t ^k] !R4, ^@, t RtRRltRR ltR R ltR R ltRRltRRltRRltR#)a'Per-profile runtime and tmp dirs for browser-harness daemons (Browser Use mode). A multiplexed gateway serves every profile from one process. The harness names a daemon by ``BU_NAME`` alone and reuses any live one, so each served profile gets its own runtime dir (daemon sockets) and tmp dir (screenshots, debug overlays, logs). A runtime dir too long for a 64-character session's AF_UNIX socket moves to a private short dir under the socket temp root. ``browser_use_cli._base_subprocess_env`` applies the result through ``namespace_harness_dirs``. ) annotationsN)Path)Optionalz /bu-.sockc V^8dQhRRRR/#)envdictreturntuple[str, ...])formats"?/home/ubuntu/.hermes/hermes-agent/tools/browser_harness_dirs.py __annotate__rsXXX/XcNa.V3Rl\4OSPRR4N5#)zQ``(*HARNESS_DIR_KEYS values, BU_NAME)`` of the daemon a call with ``env`` drives.c3H<"TFpSPVR4xK R#5i)N)get).0krs& r "daemon_identity.. s 7&6cggann&6s"BU_NAMEdefault)HARNESS_DIR_KEYSr)rsfr daemon_identityrs% W 7&6 7 WI9V WWrc$V^8dQhRRRRRR/#)rrridentityr r r )r s"r rr#s!''D'O''rcVEvr#VP4UUu/uFwrEV\9gKWEbK pppVPR\\V444/VCRV/C#uuppi)zO``env`` re-pointed at the daemon ``identity`` names (its own dirs and BU_NAME).c3@"TFwrV'gKW3xK R#5iNr )rrvs& r rdaemon_env..'sF%@TQA&1&%@s  r)itemsrupdatezip)rrdirsnamerr!targets&& r daemon_envr)#scKT"yy{ H{tqa7G.Gdad{F H MMFS)94%@FF &f &i &&Is A#A#c V^8dQhRRRR/#)rplatformstrr Optional[int]r )r s"r rr+s rcZVR8Xd\#VPR4'd\#R#)zzThe runtime-dir byte budget on ``platform`` (a ``sys.platform`` value) where the harness binds AF_UNIX sockets, else None.darwinlinuxN)_MACOS_SOCKET_DIR_BUDGET startswith_LINUX_SOCKET_DIR_BUDGET)r+s&r socket_dir_budgetr4+s,8''7##'' rc$V^8dQhRRRRRR/#)r resolved_dirr,budgetr-r boolr )r s"r rr5s&BBSB-BDBrcRVRJ;'g\VP44V8*#)zWhether a 64-character session's socket under ``resolved_dir`` (the absolute, symlink-resolved path the harness binds) fits ``budget``; no budget means no sun_path limit.N)lenencode)r6r7s&&r fits_socket_budgetr<5s) T> A AS!4!4!676AArc$V^8dQhRRRRRR/#)rrrtagr,r Noner )r s"r rr;s!###3#4#rc V'gR#VPR4;'gVPR4pV'gVPR4pV'd\\V4R, 4MM\\VPR4;'g\P!44R, R, 4p\\V4P 44pR\ P !VP44P4R , 2pVPR 4;'g5VPR 4;'g\\V4R , 4p\\V4V, 4p\WeV4VR &R VR&\\VPR 4;'g\\V4R, 44V, 4VR &R VR&R#)zGive served profile ``tag`` its own harness runtime and tmp dirs in the child ``env``. An empty ``tag`` (outside a served-profile scope) leaves ``env`` unchanged.NBH_HOMEBROWSER_HARNESS_HOMEXDG_CONFIG_HOMEzbrowser-harnessHOMEz.configzp-N NBH_RUNTIME_DIR BH_TMP_DIRruntime1BH_RUNTIME_DIR_SHAREDtmpBH_TMP_DIR_SHARED) rr,rhome expanduserhashlibsha256r; hexdigestsocket_fit_runtime_dir)rr>rootxdgleafbaserIs&& r namespace_harness_dirsrX;so  779  @ @)?!@D gg'(58s49001c //DIIK 09 ?D 77# $ \ \ (= \ \T$ZR[E[A\D$t*t#$G27#FC#&C D!6!Q!Q#d4j5>P:QRUYYZC "Crc(V^8dQhRRRRRRRR/#)rrIr,rWr>r r )r s"r rrPs(Csrcf\\P4p\\ \ V4P 4P44V4'dV#^RIH p\\RR4p\P!V!4 RV RV 2P44P4R,p\ P#RV!4R344pVFNp\P$P'VRV 24p \W4'gK9\)V 4'gKLV u# V#) a ``runtime`` unless the socket the harness binds under it would be too long for a 64-character session. The harness binds ``Path(BH_RUNTIME_DIR).expanduser().resolve()``, so the length is judged on that path (a short relative or symlinked spelling can still resolve deep); a dir that fits is returned as given. Otherwise the served profile gets a private dir under the short socket temp root (``hbh-<12 hex>``), keyed by uid, base and profile; if none fits or can be claimed safely the long path stays (shorter names only).)socket_safe_tmpdirgetuidc^#)r r rr (socket_fit_runtime_dir..[s1rrEc3`"TF$p\PPV4xK& R#5ir )ospathrealpath)rrs& r r)socket_fit_runtime_dir.._s$V7U!"''**1--7Us,.z/tmpzhbh-)r4sysr+r<r,rrOresolvehermes_constantsr[getattrrcrPrQr;rRrfromkeysrdjoinclaim_private_dir) rIrWr>r7r[r\digestrootsrTshorts &&& r rSrSPss|| ,F#d7m668@@BCVLL3 R9 -F ^^vxj4&3%8??A B L L Ns SF MMV8J8Lf7UV VE TT&?3 e , ,1B51I1IL Nrc V^8dQhRRRR/#)rrdr,r r8r )r s"r rrgs((C(D(rc\P!VR4R# \dM\dR#i;i\P!T4pM \dR#i;i\ P !TP4;'dETP\\RR4!48H;'dTP^?,'*#)zCreate ``path`` 0700, or accept an existing one only when it is a real directory (not a symlink) owned by this uid and closed to group/other: the temp root is world-writable, and the harness resolves symlinks and only chmods a dir it created itself.iTFr\cR#)r r rr r_#claim_private_dir..vsTVr) rcmkdirFileExistsErrorOSErrorlstatstatS_ISDIRst_modest_uidrk)rdsts& r rnrngs u    XXd^  LL $ ' 'gb(J6W6Y)Y ' 'JJ&&(s% 6666A A A )rGrKrHrM)__doc__ __future__rrPrcr|rhpathlibrtypingrr:r1r3rrr)r4r<rXrSrnr rr rs{#  [!11B6[!11B6bX 'B #*.(r