+ lHj4I0aRt0tRt^RIt^RIHt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIt^RIHt]P&!4R8Ht]P&!4R8Ht^RIHtHtHtHt^RIHt^RIHtHt^R I H!t!H"t"H#t#H$t$H%t%H&t&^R I'H(t(^R I)H*t*H+t+H,t,H-t-^R I.H/t/^R I0H1t1H2t2H3t3H4t4^RI5H6t6^RI7H8t8H9t9^RI:H;t;^RIR?ltnR@RAltoRBRCltpRDREltq]!RFRG44trRts.RORI]s4ORJNRKNRLNRMNRNNRONRPNRQN5tt]rPP4Uu/uF@pVP]t9gKVPVPRN8Xd.M VPbKB uptyRRtz!RSRT]6]/]14t{]{!4t|^RUI}H~t~HtRVRWRXRYRZR[R\R]R^R[R_R`.RO/RhR[R_RXRi/RjR[R_RXRk/RlR[RmRXRnRo^/RpR[RmRXRq/RrR[RmRXRsRo^//RtR^.//tRHRu/RvRwlltRxRyltRzR{ltRaR|R3RbR}R3RcR~R3RdRR3ReRR.3RfRR.3RgRR.3/tRRlt^tRt]~EP!RWR]]RR7R#uupi)aKProcess Registry -- in-memory registry for background processes spawned via terminal(background=true): rolling 200KB output buffer, poll/log/wait/kill, JSON checkpoint for crash recovery, session-scoped tracking for gateway reset protection. Nothing runs on the host unless TERMINAL_ENV=local; other backends run in their sandbox. N)suppressPathWindowsLinux) _find_shell_resolve_safe_cwd_sanitize_subprocess_env _terminal_env)windows_hide_flags) dataclassfield)AnyDictListLiteral NamedTupleOptional)get_hermes_home)format_process_notificationheartbeat_output_tailis_child_process_notificationshould_surface_notification)ProcessCheckpointMixin)ProcessOutputLogMixinopen_output_logrecord_exit_commandworker_output_log)ProcessTerminationMixin)load_completed_resultssave_completed_result)log_delta_command)_is_wsl_launcher_commandprocesses.jsonc$V^8dQhR\/#returnr)formats";/home/ubuntu/.hermes/hermes-agent/tools/process_registry.py __annotate__r*3svv$vcN\\8wd\#\4R, #)u+Active profile's checkpoint file at call time: the patched ``CHECKPOINT_PATH`` when a test changed it, else live profile-scoped HERMES_HOME — the multiplexed gateway serves every profile from one process, so the import-time constant would pin every profile's process checkpoint to the launch home.r#)CHECKPOINT_PATH_CHECKPOINT_PATH_AT_IMPORTrr+r)_checkpoint_pathr03s! .1KK?uQ`QbeuQuur+i@ i?gN@Tc$V^8dQhR\/#r%int)r(s"r)r*r*}s3M3M#3Mr+cRp\P!RR4P4pV'dK\V4R,R,pV\ 8dTpM"\ PRV\ R,4.p\R4PRR7P4FpVPR 4'gKVPR 4^,PR 4p\R 4V, R , PRR7P4pVP4'd(\V4pV\ 8dVPV4M \\P"!R44\\P"!R44,p\%\&\)\ V^,44p VPV 4V'd \%V4M\,p V'd \%W 4#T # \dRpELi;i \ \3dLi;i \ \\*3dLqi;i)aFinite per-worker cgroup limit that can never widen host risk. ``TERMINAL_LOCAL_MEMORY_MAX_MB`` is honored only when it *tightens* the safe bound (min of the gateway's cgroup-v2 ``memory.max`` and half of physical RAM, capped at 4 GiB), so an oversized override cannot exceed the enclosing slice. The proposed local-memory-guard environment override is honored when it tightens the safe bound, so this isolation composes with PR #57121 instead of inventing a second knob. NTERMINAL_LOCAL_MEMORY_MAX_MBizbIgnoring invalid TERMINAL_LOCAL_MEMORY_MAX_MB=%r; expected an integer representing at least %d MiBz/proc/self/cgrouputf-8)encodingz0::z::/z/sys/fs/cgroupz memory.maxz utf-8-sig SC_PHYS_PAGES SC_PAGE_SIZE)osgetenvstripr6 ValueError_MIN_WORKER_MEMORY_MAX_BYTESloggerwarningr read_text splitlines startswith partitionlstripisdigitappendOSErrorsysconfmin_WORKER_MEMORY_MAX_CAP_BYTESmax TypeError _DEFAULT_WORKER_MEMORY_MAX_BYTES) override_boundoverrideparsed candidateslinerelative raw_limit cgroup_limitphysical_bytesphysical_bound safe_bounds r)_worker_memory_max_bytesra}s%)Nyy7<BBDH ]T)D0F 1 1#N NNC6;G IJ  ,-777ITTVDu%%>>$/299#>)*X5 D)[)1%%'$$&&#&y>L#'CC")),7W  RZZ89C JJ~ &=   ( ,n.A B  .)%/Z4TJ.<3~ *L*LK F , Z     Z +   sDH =AHBHH#A9H5 HHH21H25I Ic ^V^8dQhR\R\R\R\\,/#)r&binary unit_nameargvr')strlist)r(s"r)r*r*s,    C DI r+cn\'dR.M.pVRRR.VORNVNRNRNRNRNR \4 2NR NVO#) a,``systemd-run --user --scope`` argv shared by the probe and real spawns. ``--collect`` self-cleans the scope after exit; ``--unit`` names it for systemctl. No ``OOMPolicy=``: transient scopes reject it on systemd <253 (#102486). ``--expand-environment=no`` keeps the command byte-identical (#132385).z--expand-environment=no--userz--scopez--quietz--unitz --collectz --propertyzMemoryAccounting=yesz MemoryMax=z--)_SYSTEMD_RUN_NO_EXPANDra)rcrdre no_expands&&* r)_systemd_scope_argvrls 0F/E*+2I)Y 1: ``; a function so tests can point it at a temp dir with a real socket.z /run/user/)rrAgetuidr/r+r)_default_user_runtime_dirrps *RYY[M* ++r+c0V^8dQhR\R\/#)r&pathr')rbool)r(s"r)r*r*s  4 D r+cHVP4pVP4;'di\P!VP4;'dAVP \ P!48H;'dVP^,^8H# \dR#i;i)zR>Rs$S!16.%-!' 1 1Q 6I$ Q"-- 0D0D/L/LWV_/`/f/f/h $- #'>>#3 I # "@ P I3OO PA # " "sYG/G/ G(B(GG%%G -G9%GG/ G, G'"G/'G,,G// H c$V^8dQhR\/#r%r)r(s"r)r*r*6sr+c"\PPR4R8wdR#^RIHp^RIHpV!4;'d V!RR7\P!48H# \d"p\PRT4Rp?R#Rp?ii;i) uWhether this process is the live, supervised Hermes gateway itself. Supervisor markers and ``_HERMES_GATEWAY`` are inherited by every descendant (and importing ``gateway.run`` sets the latter), so also require ownership of the live gateway PID file — scopes are for the gateway, not terminal children or CLIs. Reads the launch marker (``HERMES_SUPERVISED_CHILD`` included), not the restart-route probe: a Windows Scheduled-Task gateway sets only that marker, and the self-kill guards gated here must protect it too (#113667)._HERMES_GATEWAY1F)is_supervised_gateway_launch)get_running_pid) cleanup_stalez8Could not verify supervised gateway process identity: %sN) rArrgateway.restartrgateway.statusrrrrFr)rrrs r)_is_supervised_gateway_processr6sq zz~~'(C/@2+-ee/PU2VZ\ZcZcZe2ee  OQTUsA"A"" B-B  BchV^8dQhR\\,R\R\\,/#)r& shell_argv unit_suffixr')rgrf)r(s"r)r*r*Js. T T$s) T# T$s) Tr+cZ^RIpVPR4pVfV#\VRV 2.VO5!#)a;Wrap *shell_argv* in a ``systemd-run --user --scope`` invocation with its own memory accounting, so an OOM in the worker cannot kill the gateway cgroup. ``--collect`` makes the transient scope self-clean after exit; ``--unit`` gives it a recognisable name for ``systemctl --user status`` / journalctl. See #70716. Nrhermes-worker-)rrrl)rrrrcs&& r)_build_systemd_scope_argvrJs9 \\- (F ~ v }'E S SSr+Fc]tRtRtRtRtR#)RestartSafeScopeUnavailablei]a.A ``require_restart_safe_scope=True`` child could not get its transient scope. Host-level (no user D-Bus / no ``systemd-run``), never a property of the child being launched: callers that keep per-job retry budgets must not charge it (a kanban card parked ``blocked`` for an unreachable bus, #114720). r/N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r/r+r)rr]sr+rc4V^8dQhR\R\RR/#)r&detail consequencer'Nrf)r(s"r)r*r*fs!22c23242r+cR\'dR#Rs\PRW4R#)zWarn once per process: the condition is host-level and the probe verdict is cached, so this would otherwise fire on every cron dispatch.NTz%s; %s)_scope_degraded_warnedrFrG)rrs&$r)_warn_scope_degraded_oncerfs!! NN8V1r+zcron children are dispatched as direct external subprocesses without restart-safe cgroup isolation (killed if the gateway restarts mid-job). Set cron.require_restart_safe_scope=true in config.yaml to fail closed instead.a2workers are spawned unmanaged inside this systemd unit's cgroup and will be KILLED when the unit exits (Type=oneshot dispatch timers lose every worker within a second). Give the unit's user a session bus (`loginctl enable-linger `) so workers get their own scope, or set KillMode=process on the unit.c0a]tRtRtoRtV3RltRtVtR#)GatewayChildDispatchi}uHow a managed-gateway child is launched. ``in_process``: not a managed systemd gateway, ``argv is command``, the caller keeps its in-process path. ``scoped``: ``argv`` is the systemd-run wrapper. ``degraded``: no user scope could be created; ``argv`` is the direct command but the caller MUST still launch it as an external subprocess — the distinct mode exists so this case can never collapse into ``in_process`` and recreate the restart interruption #101940 closed. cP<V^8dQh/S[R,;R&S[S[,;R&#)r&modere) in_processscopeddegraded)rrgrf)r( __classdict__s"r)r*!GatewayChildDispatch.__annotate__}s( 4 55 s)Or+r/N)rrrrr__annotate_func__r__classdictcell__rs@r)rr}sr+rcRV^8dQhR\\\3,R\/#)r& spawn_envr'rrfrs)r(s"r)r*r*s"$sCx.Tr+c\V4pVPRR4R\V49dR#\;_uu_4Rs\ P !4sRRR4R# +'giR#;i)auAfter a ``systemd-run --user --scope`` wrapper exits before its child could start: True when the user bus is gone (:func:`systemd_user_bus_env` derives nothing), in which case the cached True verdict is replaced so the next dispatch re-probes and degrades instead of consuming another occurrence on the same dead wrapper (#110803). *spawn_env* is the environment the wrapper was launched with: re-deriving from it (minus the bus address it carried) honours a configured ``XDG_RUNTIME_DIR`` exactly as the spawn did, so an unrelated wrapper exit on a host whose bus lives outside ``/run/user/`` is not misread as a lost bus.rNFT)rpoprrrrrr)rr~s& r)scoped_spawn_lost_user_busrs^IH LL+T2!%9(%CC " "#( #'>>#3  #  # " s A  A1 outlives_parentc jV^8dQhR\\,R\R\R\R\/#)r&commandrrequire_restart_safe_scoperr')rgrfrsr)r(s"r)r*r*s:5252 #Y52(+52IM525252r+caaa\'g \RS4#\PP R4'g \RS4#\ 4oS'gV'g \RS4#RVVV3Rllp\ 4'g V!R\P!4 R24#\SVR7pVS8Xd V!R4#\R V4#) uPlace a managed-systemd gateway child outside the gateway cgroup. A systemd-supervised gateway restart kills every process in the service cgroup, so children that must survive it run in a transient user scope. Hosts with no user systemd session (containers, LXCs without linger) cannot create one; hard-failing there is a silent cron outage, so callers state the policy: ``require_restart_safe_scope=True`` raises :class:`RestartSafeScopeUnavailable` (kanban's long-lived workers), ``False`` degrades to a direct external subprocess with a once-per-process warning (cron, behind ``cron.require_restart_safe_scope``). ``outlives_parent=True`` (fire-and-forget kanban workers): any *other* systemd unit — a ``Type=oneshot`` dispatch timer, an operator's sequencer service — tears its cgroup down when it exits, so the child is scope-wrapped there too (#113612). Whether that unit actually kills its children (``KillMode``, lifetime) is not knowable here, so without a user bus it degrades with a loud warning instead of refusing: a long-lived ``Type=simple`` sequencer without linger keeps working. A cron job blocks its caller until it finishes and never needs this. r INVOCATION_IDc0V^8dQhR\R\/#)r&rr')rfr)r(s"r)r*5restart_safe_gateway_child_argv..__annotate__s 9 9 9!5 9r+c<S'd,S'd\RV 24h\RV 2\R7M\RV 2\R7\ RS4#)z._degradesW )1RSYRZ[ &(9&&BPj k %(?x&HVp q#J88r+z`systemd-run --user --scope is unavailable (usually no reachable user D-Bus session at /run/user/zs/bus). On a system-level service install, run `sudo loginctl enable-linger ` and restart the gateway.rz4systemd-run disappeared after the availability prober) rrrArrrrror)rrrrrrrsf$d$ @r)restart_safe_gateway_child_argvrs0 9#L':: ::>>/ * *#L'::79 o#L':: 9 9 - . .  &T T  'wK HF NOO & 11r+c0V^8dQhR\R\/#)r&rdr'rfrs)r(s"r)r*r*s  # $ r+c ^a^RIpVPR4pVfR#\P!VRRV.R^\P\ 4RR7pVP ^8wdVP;'gRPR R 7P4o\;QJdV3R lR4F 'gK RM RM!V3R lR44'dR#\PR WP S4R#R# \d"p\PR Y4Rp?R#Rp?ii;i)uPStop a transient systemd user scope by unit name. Reaps the *entire* cgroup — catching double-forked descendants reparented to init inside the scope that survive a plain PID signal (SIGTERM all, SIGKILL after ``TimeoutStopSec``). True if stopped or already gone; False if ``systemctl`` is unavailable or the stop failed. See #70716. N systemctlFristopT)rrrrrr+rerrorsc3H<"TFqSP49xK R#5iN)lower).0markerrs& r) %_stop_systemd_unit..sh:gV\\^+:gs"z&systemctl --user stop %s exited %d: %sz#systemctl --user stop %s failed: %s)z not loadedz not foundzdoes not exist)rrrrrrrrrrCanyrFrr)rdrrcrrrs& @r)_stop_systemd_unitr s \\+ &F ~ Xvy 1$$$&      !mm**s22)2DJJLFsh:ghsssh:ghhh LLA9N_N_ag h  :IKs0AD8+D$D;D!D D, D''D,c0V^8dQhR\R\/#)r&secondsr'r6rf)r(s"r)r*r*sr+c\^\V44pV^<8dV R2#\V^<4wr#V^<8d V RV R2#\V^<4wrBV RV R2#)szm zh m)rSr6divmod)r rminssecshourss& r)format_uptime_shortrsl As7|A2vAw2JD byr$q!!r"KEWBtfA r+c0V^8dQhR\R\/#r& session_idr'rfr)r(s"r)r*r*sPP3P4Pr+cRRRRV 2/#)status not_founderrorzNo process with ID r/)rs&r) _not_foundrs k7.A*,N OOr+c4V^8dQhRRR\R\/#)r&sessionProcessSessionnr'r )r(s"r)r*r* s"22*2s2s2r+c:^RIHpV!VPV)R4#)zBLast *n* chars of the session output with ANSI sequences stripped. strip_ansiN)tools.ansi_stripr% output_buffer)r r"r%s&& r) _output_tailr( s+ g++QBC0 11r+c(V^8dQhRRR\/#)r&r r!r'r)r(s"r)r*r*s`` 0`T`r+cVP;'g\p\VP4V, pR\ W4/V^8dRV/C#/C#)a[``output`` sized by the session's ``completion_output_chars`` plus ``output_cut`` when trimmed. Shared by the completion notification AND the wait/poll/kill snapshots: a bot in an api_server or one-shot session cannot receive notifications and polls instead, so the polled result must carry the same whole reply and the same cut marker (#115334).output output_cut)completion_output_charsCOMPLETION_OUTPUT_CHARSlenr'r()r limitcuts& r)_completion_outputr3sW  + + F F/FE g## $u ,C l72 _cTUg c7J __[] __r+ca]tRtRtoRtRtRtRtRtRt Rt Rt Rt Rt RtRtRtRtRtRt]tRtRtRtRtRtRtRtRtRtRtRt Rt!Rt"^t#Rt$Rt%^t&]'!](R 7t)^t*^t+]'!RRR 7t,]'!^RR 7t-]'!^RR 7t.]'!^RR 7t/]'!^RR 7t0]'!RRR 7t1]'!RRR 7t2]'!RRR 7t3]'!^RR 7t4]'!]5PlRR 7t7]'!RRR 7t8]'!RRR 7t9]'!]5PtR 7t;]'!RRR 7t<]'!]5PlRR 7t=]'!RRR 7t>]'!RRR 7t?R t@V3R lRltAV3RlRltBV3RlRltCRV3RlRlltDV3RltERtFVtGR#)r!iz3A tracked background process with output buffering.r9Nr3Fexitedhost)default_factory)defaultrepr)r7r9cPVP'gVPVnR#R#r) owner_task_idtask_idselfs&r) __post_init__ProcessSession.__post_init__ds!!!!!%D "r+c$<V^8dQhRS[RR/#r&textr'Nr)r(rs"r)r*ProcessSession.__annotate__js&&#&$&r+c VP;_uu_4VPV4RRR4R# +'giR#;i)zMAppend to the rolling output buffer under the session lock, keeping the tail.N)_lock_append_lockedr>rCs&&r) append_outputProcessSession.append_outputjs% ZZZ    %ZZZs 1 A c&<V^8dQhRS[RS[/#r&rCr'r)r(rs"r)r*rDosSTr+c VP;_uu_4VP'd RRR4R#VPV4RRR4R# +'giR#;i)zAppend unless the session has exited. Decided under the lock a kill holds while it snapshots the output and sets ``exited``, so a chunk is either in the kill's receipt or dropped, never added after it.NFT)rFr5rGrHs&&r)append_output_if_running'ProcessSession.append_output_if_runningosGZZZ{{{Z    % ZsAA A c$<V^8dQhRS[RR/#rBr)r(rs"r)r*rDysMM3M4Mr+cV;PV, unV;P\V4, un\VP4VP8d"VPVP)RVnR#R#r)r'total_output_charsr0max_output_charsrHs&&r)rGProcessSession._append_lockedyse d" 3t9, t!! "T%:%: :!%!3!3T5J5J4J4K!LD  ;r+c*<V^8dQhRS[RS[RR/#)r&reasonsourcer'Nr)r(rs"r)r*rDs#11S1S1RV1r+c rRVnVPR8wdWnW nV'd W0nR#R#R#)zmRecord an exit. A kill that raced the observer already recorded its own exit_code/reason; never overwrite it.TkilledN)r5completion_reason exit_codetermination_source)r>r[rVrWs&&&&r) mark_exitedProcessSession.mark_exiteds7  ! !X -&N%+ "*0' .r+c<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[;R&S[S[,;R&S[S[P,;R&S[;R&S[S[,;R &S[;R &S[S[,;R &S[;R &S[;R &S[S[,;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R &S[;R!&S[;R"&S[;R#&S[S[,;R$&S[;R%&S[;R&&S[;R'&S[;R(&S[;R)&S[;R*&S[;R+&S[;R,&S[;R-&S[;R.&S[;R/&S[ P;R0&S[;R1&S[;R2&S[ P;R3&S[S[ P,;R4&S[ P;R5&S[;R6&S[;R7&#)8r&idrr<r; session_keypidprocessenv_refcwd started_athost_start_timer5 exited_atr[rZr\r'rSdetached pid_scope systemd_unit wsl_chain handoff_notepersist_on_release output_logwatcher_platformwatcher_chat_idwatcher_user_idwatcher_user_namewatcher_thread_idwatcher_message_idwatcher_intervalparent_session_idnotify_on_completer.watch_patternsheartbeat_secondsrR_heartbeat_last_heartbeat_total_at_last_heartbeat_seq _watch_hits_watch_suppressed_watch_disabled_watch_cooldown_until_watch_strike_candidate_watch_consecutive_strikes_completion_event_finish_claimed_scope_stop_pendingrF_reader_thread_reader_finish_requested_reader_selectable_pty) rfrr6rPopenrfloatrsrg threadingEventLockThread)r(rs"r)r*rDs@ GL    #j&& '. #c]) !"#$}#%&%'( )*+,,-./01234589:$;>?BCDEFGHIJKL MNOTUV$WX!$YZI;[\]^_`;ab"@cd6ef3gh9ij>ACDY--.PEF(oobGH?IJ /Kr+)rZr[r5r'r;r\r5r9)Hrrrrrr<r;rarbrcrdrerfrgr5rhr[rZr\r'MAX_OUTPUT_CHARSrSrirjrkrlrmrnrorprqrrrsrtrurvrwrxr.r rgryrzrRr{r|r}r~rrrrrrrrrrrrFrrrrr?rIrNrGr]rrrrs@r)r!r!s=GMKC*.GGCJ%)OFI#I% M,HILIL$JOO  $#$ %d ;N"3U;O$)!%$@6NQU3K"159!%eRDR>RER>RFR>RGRH/V3RIlRJllt(RV3RKlRLllt)V3RMlRNlt*V3ROlRPlt+] !],4t-V3RQlRRlt.V3RSlRTlt/RUR/V3RVlRWllt0RV3RXlRYllt1V3RZlR[lt2V3R\lR]lt3] V3R^lR_l4t4V3R`lRalt5] V3RblRcl4t6V3RdlRelt7V3RflRglt8RRhR=RiRj/V3RklRllllt9] V3RmlRnl4t:RoRH/V3RplRqllt;] V3RrlRsl4t<] V3RtlRul4t=V3RvlRwlt>RRoRH/V3RxlRylllt?^t@V3RzlR{ltAV3R|lR}ltBV3R~lRltC] V3RlRl4tDV3RlRltERV3RlRlltFRV3RlRlltG] V3RlRl4tHRRRRH/V3RlRlltI] V3RlRl4tJV3RlRltKV3RlRltLV3RlRltMRV3RlRlltNV3RlRltOV3RlRltPV3RlRltQRRR/V3RlRllltRV3RlRltSV3RlRltTV3RlRltUV3RlRltVRR>/V3RlRlltWRV3RlRlltXV3RlRltYV3RlRltZ][!0Rm4t\V3RlRlt]RR][!4RRRR/V3RlRlllt^Rt_Rt`VtaR=#)ProcessRegistryizIn-memory registry of running and finished background processes. Thread-safe: accessed from executor threads (terminal_tool, process handlers), the gateway asyncio loop (watchers, reset checks) and the cleanup thread.Fcp/Vn/Vn\P!4Vn.Vn^RIpVP4Vn^RI p\4Vn \4Vn \P!4Vn R;VnVn^;VnVnRVnRVnRVnR#)rNr3)_running _finishedrrrFpending_watchersqueueQueuecompletion_queuetools.async_delegationset_completion_consumed_poll_observed_global_watch_lock_global_watch_window_start_global_watch_tripped_until_global_watch_window_hits$_global_watch_suppressed_during_trip on_outputon_close_heartbeat_thread)r> _queue_modtoolss& r)__init__ProcessRegistry.__init__s35 46^^% 68 #2<2B2B2D &*-!$'5"+.."2MPP'$*JUVV&)R =Ar+c,<V^8dQhRS[RS[RS[/#)r&r r r')r!r6)r(rs"r)r*ProcessRegistry.__annotate__s"  ^ c c r+c \\V4\4pW!n\P!4VnVP 4V#)zQEnable periodic heartbeat events for ``session``; returns the effective interval.)rSr6HEARTBEAT_MIN_SECONDSrzrr{_ensure_heartbeat_thread)r>r r s&&&r) arm_heartbeatProcessRegistry.arm_heartbeats:c'l$9:$+!"&))+ %%'r+c<V^8dQhRR/#r&r'Nr/)r(rs"r)r*rs++$+r+c^VP;_uu_4VPe,VPP4'd RRR4R#\P!VP RRR7VnVPP 4RRR4R# +'giR#;i)Nzprocess-heartbeatT)targetnamedaemon)rFris_aliverr_heartbeat_loopstartr=s&r)r(ProcessRegistry._ensure_heartbeat_threadsw ZZZ%%1d6L6L6U6U6W6WZ&/%5%5++2Ed&TD "  " " ( ( * ZZZs.BBAB B, c<V^8dQhRR/#rr/)r(rs"r)r*rs 3 3 3r+c \P!\4\P!4pVP;_uu_4VPP 4Uu.uFOpVP ^8gKVP'dK*WP, VP 8gKMVNKQ ppRRR4XFpVPWA4K Kuupi +'giL1;i)zOne daemon thread for every heartbeat session: reader threads block on the pipe and cannot keep time, and a per-process timer would leak one thread per job.N) rsleepHEARTBEAT_TICK_SECONDSrFrvaluesrzr5r{_emit_heartbeat)r>nowrduer s& r)rProcessRegistry._heartbeat_loops JJ- .))+C"&--"6"6"8K"8Q--1:;((!2!22a6I6IIq"8K$$W2Ks0C""C:CC1C7C"C"" C2 c*<V^8dQhRS[RS[RR/#)r&r rr'N)r!r)r(rs"r)r*rs"00~0E0d0r+c W!nVP;_uu_4VPVP, pV^8dVPV)RMRpVPVnRRR4X'gR#\ V4wrEV;P ^, un/VPV4CRRRVP RVPRVP'd\W!P, 4M^RVR VR VP/Cp\V4VPPV4R# +'giL;i) aQueue a heartbeat carrying the output since the last one. A tick with nothing new is skipped outright: every queued event costs the owner a full model turn, and "still running, no output" is already visible on the process surfaces (status stack, /agents dock).Nr9type heartbeatseqintervalelapsedr,omittedrf)r{rFrRr|r'rr}_watch_event_baserzrfr6_redact_process_resultrput)r>r rdeltar,r notifications&&& r)rProcessRegistry._emit_heartbeats#& ]]]..1Q1QQE7.sc;b%U1X-;bsTF)splitrr_SHELL_NOISE_SUBSTRINGSrjoin)rCrs&@r)_clean_shell_noise"ProcessRegistry._clean_shell_noises\ 4 c?;b;bcc?;b;bccc IIaLyyr+c*<V^8dQhRS[RS[RR/#)r&r chunkr'Nr!rf)r(rs"r)r*rs"!!N!3!4!r+c VPpVe V'gR#\\4;_uu_4V!W4RRR4R# +'giR#;i)zRForward a chunk to the live-output sink; called from reader threads, never raises.N)rrr)r>r rsinks&&& r) _emit_outputProcessRegistry._emit_outputs7~~ .-s4_H^1$YH^sTFc38<"TFqS9gK VxK R#5irr/rs& r)rr,sA3Dy!!3s z7 consecutive rate-limit windows triggered (min spacing zs). r:NNr1:NiNz ...(truncated)r watch_matchpatternr, suppressedzreached the lifetime cap of z delivered matches. )ryrr5rIrnextrstriprrFrrr0rrWATCH_STRIKE_LIMITrx_emit_watch_disabledWATCH_MIN_INTERVAL_SECONDSr~WATCH_LIFETIME_MAX_HITSr_global_watch_admitrrrr) r>r rrZhitsmatched_pattern_ matched_linesrrlifetime_exhaustedr,rs &&&` r)_check_watch_patterns%ProcessRegistry._check_watch_patternss %%%)@)@)@  >>> !++-a-4_H^H^4_4_H^H^4_1_ RTAW33A A4;;= Q- a q'!*-12T'!T 2iik ]]],,,7T7T1T))S-??)222 ]37/22a72558JJ]+/'.2*))66)*+$$>#?tEF'],,,,W5T5T5T562.3G +,/2L,LG )   1 $  22J()G %!(!4!48O!O !*.'-1*EF=-. v; E]%77F  # #C ( (((1 ?&j L #< 0  ! ! % %l 3   % %:;R:SSgh  sa 3 ]sPM6M6%M6*3M6> M;7AN6N9NN.NA&N'N N c0<V^8dQhRS[RS[RS[RR/#)r&r rwhyr'N)r!r6rf)r(rs"r)r*ris+   N    RU  Z^  r+c  VPP/VPV4CRRRVRRVP RV R2/C4R#) zNQueue the one-shot watch_disabled summary (strike-limit or lifetime-cap path).rwatch_disabledrmessagez$Watch patterns disabled for process u — ziFalling back to notify_on_complete semantics; you'll get exactly one notification when the process exits.N)rrrr`)r>r rrs&&&&r)r$ProcessRegistry._emit_watch_disabledis^ !!# $$W-# $ * 6wzzl%uCD #  r+c&<V^8dQhRS[RS[/#r&r r'r!r)r(rs"r)r*rvs   >  d  r+c <R\P!4PRVPRVPRVP RVP RVPRVPRVP/\Uu/uFq\VR V 24bK upC#uupi) zFSession identity + watcher routing fields shared by every watch event.event_idrfrwrrar<r;rr) rrrrfrwr`rar<r;r_WATCHER_ROUTE_KEYSgetattr)r keys& r)r!ProcessRegistry._watch_event_baseus  (( ',, !:!: '** 7.. w W22 w  CVVBU3GGxu%566BUV  Ws=Bc,<V^8dQhRS[RS[RS[/#)r&type_rr'r)r(rs"r)r*rs"  3  $ r+c 6RRRRRRRV/VCRVRRRRR RR RR R/C#) z/Unaddressed (all-sessions) watch breaker event.rr9rarrrplatformchat_iduser_id user_name thread_idr/)rrextras&&,r)_global_watch_event#ProcessRegistry._global_watch_eventsG "mRB QV w Ir9b+r;XZ  r+c&<V^8dQhRS[RS[/#)r&rr')rrs)r(rs"r)r*rs((u((r+c .pVP;_uu_4VP'dhWP8dXVPpRVn^VnV^uVnVnV^8d(VP VP RRV R2VR74VP'd-WP8dV;P^, unRpMWP, \8dV^uVnVnVP\8pV'dV;P^, unMbV\,VnV;P^, unVP VP RR\ R \ R \ R 244R R R 4VFpVPPV4K X# +'giL6;i) a True if this watch_match may pass the global breaker. In cooldown: drop and count. Otherwise slide the rolling window; exceeding the cap trips the breaker for WATCH_GLOBAL_COOLDOWN_SECONDS with ONE "tripped" summary, and the cooldown's end emits ONE "released" summary.r3watch_overflow_releasedz%Watch-pattern notifications resumed. z1 match event(s) were suppressed during the flood.)rFwatch_overflow_trippedzWatch-pattern overflow: >z notifications in zCs across all processes. Suppressing further watch_match events for s.N) rrrrrrNrWATCH_GLOBAL_WINDOW_SECONDSWATCH_GLOBAL_MAX_PER_WINDOWWATCH_GLOBAL_COOLDOWN_SECONDSrr)r>reventsradmitmsgs&& r)r#ProcessRegistry._global_watch_admits   $ $ $///C;[;[4[!FF 360<=9RUWXO/1O>MM$":":1?%,&WY#- #;#/0 ///C:Z:Z4Z99Q>9888?5%@C  ! ! % %c * E% $sB F>#A0F>A> G c6<V^8dQhRS[S[,RS[/#r&rbr'rr6rs)r(rs"r)r*rs    $ r+c 2V'gR#^RIHpV!V4#)z1Best-effort liveness check for host-visible PIDs.F) _pid_exists)rr.)rbr.s& r)_is_host_pid_alive"ProcessRegistry._is_host_pid_alives /3r+cF<V^8dQhRS[S[,RS[S[,/#r+)rr6)r(rs"r)r*rs#8C=Xc]r+c X^RIHpV'd V!V4#R# \dR#i;i)zrbr8currents&&& r)_detached_host_fate#ProcessRegistry._detached_host_fatesW  ! !# 6 6$11#66  !,,S1 ?g7r+cF<V^8dQhRS[S[,RS[S[,/#r )rr!)r(rs"r)r*rs&.1IhWeNfr+c PVeHVP'g6VP'd$VPR8wgVP'dV#VP VP VP 4pVR8XdV#VR8XdVPV4#VPV4V#)zRe-attach, close, or prune a recovered host-PID session. A completion is not queued here: recovery has no waitable handle, so it never collected an exit status. r6r?r@) r5rirjrorCrbrg_prune_uncollected_detached_close_reused_detached)r>r fates&& r)_refresh_detached_session)ProcessRegistry._refresh_detached_sessions ?gnnnG4D4D4DHYHY]cHcgngygygyN'' W5L5LM 9 N 6>33G< < ##G,r+c$<V^8dQhRS[RR/#r&r r'Nr!)r(rs"r)r*rs((n((r+c HVP;_uu_4VP'd RRR4R#RVnRRR4VP;_uu_4VPVP9dA\P!4VnVPP VPR4WPVP&RRR4VP4VPP4R# +'giL;i +'giLO;i)zClose an entry whose PID was recycled onto another process. The stranger is not signalled, and no completion is queued: we never collected an exit status for the process we spawned. NT) rFr5r`rrrhrr_write_checkpointrrr>r s&&r)rH&ProcessRegistry._close_reused_detacheds ]]]~~~]"GNZZZzzT]]*$(IIK! !!'**d3)0NN7:: &   !!%%']ZsC>C>A4D> D  D! c6<V^8dQhRS[RS[S[,/#r )r!r)r(rs"r)r*r s 99>9h~F^9r+c >VP;_uu_4RVnRRR4VP;_uu_4VPPVPR4VP 'dWP VP&M&VP PVPR4RRR4VP4VPP4VP 'dV#R# +'giL;i +'giLc;i)zDrop a recovered entry whose PID is gone, without inventing an exit. An owned systemd scope stays reachable so kill can still reap it. A scope-less entry is removed: poll/list must not report a collected exit. TN) rFr5rrr`rkrrPrrrQs&&r)rG+ProcessRegistry._prune_uncollected_detached s ]]]!GN ZZZ MM  gjj$ /###-4wzz*""7::t4   !!%%'!...w8D8] ZsC9A8D 9 D D c6<V^8dQhRS[S[,RS[/#r )rr!rs)r(rs"r)r*rs ::.)A:d:r+c \VRJ;'dvVP;'dbVPRJ;'dLVP;'d8VPR8H;'d!VP VP 4'*4#)zTrue when a detached entry was closed without a collected exit status and the PID is no longer alive. List/poll must not report that as exited.Nr6)rsr5r[rirjr/rbrQs&&r)_uncollected_gone!ProcessRegistry._uncollected_gones 4  9 9GNN 9 9w7H7HD7P 9 9   9 9%,%6%6&%@ 9 9++GKK88: :r+c&<V^8dQhRS[RS[/#)r&sectionrr)r(rs"r)r*r%sDDsDDr+c \^RIHpHpHpV!V!4W4pVfW0,V,#T#)z``config.yaml`` value for ``section.key``, else the DEFAULT_CONFIG value. Raises if config is unreadable; callers wrap with their own hard fallback so registry code paths never crash on a broken config file.)DEFAULT_CONFIGcfg_getread_raw_config)hermes_cli.configr]r^r_)r[rfallbackr]r^r_vals&&& r) _config_valueProcessRegistry._config_value$s1 ONo'6/2{~&s+CCr+c,<V^8dQhRS[RS[RS[/#)r&rrar')rfr)r(rs"r)r*r/s"SEer+c  |\\\PRW44R4# \dTu#i;i)zR``terminal.`` as a non-negative float (0 disables); *fallback* if unreadable.terminalr3)rSrrrcr)rras&&r)_config_secondsProcessRegistry._config_seconds.s; u_:::sUVX[\ \ O s (+ ;;c <V^8dQhRS[/#r%r)r(rs"r)r*r7sQQQr+c .\PRR4#)zGGrace (s) between SIGTERM and escalated SIGKILL; 0 disables escalation.daemon_term_grace_secondsg@rrhr/r+r)_daemon_term_grace_seconds*ProcessRegistry._daemon_term_grace_seconds6s../JCPPr+c <V^8dQhRS[/#r%rN)r(rs"r)r*r>s--Tb-r+c ^RIHp\RRR\P!4P R, 2RVRVRVRVR VR V!R R 4R \ V4R\P!4/ VB#)r)get_session_envr`proc_:N Nrr<r;rarerwHERMES_SESSION_IDr9rlrfr/)gateway.session_contextrsr!rrrr"r)rr<r;rarerrss&&&&&, r) _new_sessionProcessRegistry._new_session=s;-tzz|'',-.-8?-IP-'-5@-FI-..A2F-/w7 - yy{ - ', - -r+c&<V^8dQhRS[RS[/#)r&rr')rrf)r(rs"r)r*rIs % %3 %3 %r+c d\VRR4p\V4'dQV!4p\V\4'd3VP R4'dVP R4;'gR#\P!4# \ d!p\PRT4Rp?L;Rp?ii;i)zEReturn the writable sandbox temp dir for env-backed background tasks. get_temp_dirNr<z*Could not resolve environment temp dir: %s) rcallable isinstancerfrJrrrFrtempfile gettempdir)rr|temp_dirrs& r) _env_temp_dirProcessRegistry._env_temp_dirHssND9 L ! ! P'>h,,1D1DS1I1I#??3/6636""$$ P I3OO Ps#3BB,B B/B**B/c H<V^8dQhRS[RS[RS[RS[RS[S[,/#)r&r  safe_commandrlabelr')r!rfrg)r(rs"r)r*rUs9>SV_bgklogpr+c \4RRV 2.p\;'d \4pV'd(\4'dRV R2Vn\ WSR7#V'd\ PRV4V#)aLogin-shell argv for *safe_command* (parity with LocalEnvironment: rc files sourced, user tools on PATH), wrapped in a transient systemd scope when we are the supervised gateway (own cgroup: an OOM kills only the worker, not the gateway and its messaging control plane).z-liczset +m; rz.scoperzz%s background executor not isolated in a systemd scope (systemd-run --user unavailable); worker shares the gateway cgroup.)rrrrrkrrFr)r>r rrrrein_supervised_gateways&&&&& r) _scope_argvProcessRegistry._scope_argvUsu  v,'@A ) N N.L.N %F%H%H%3K=#GG ,TK K  LLVW\ ^ r+c&<V^8dQhRS[RS[/#)r&env_varsr'r*)r(rs"r)r*risTdr+c P^RIHp\\V!4V44pRVR&V#)z`Sanitized child env from the session's client toolchain; PYTHONUNBUFFERED so poll sees progress.)toolchain_environrPYTHONUNBUFFERED)agent.session_client_envrr r )rrrs& r) _spawn_envProcessRegistry._spawn_envhs- ?45F5H(ST"%  r+c*<V^8dQhRS[RS[RR/#)r&r  reader_namer'Nr)r(rs"r)r*rps$!!n!RU!im!r+c h^RIHp\P!V!4PW!.VO5RVR7pWanVP ;_uu_4VP4VP4WPVP&RRR4VP4R# +'giL";i)zLRegister before the reader can publish completion, even for an exited child.) copy_contextT)rargsrrN) contextvarsrrrrrrF_prune_if_neededrrr`rP)r>r  reader_targetr extra_argsrreaders&&&&& r)_track_startedProcessRegistry._track_startedps,!!););=Bg\fBg)-KA!' ZZZ  ! ! # LLN(/MM'** %   Zs 9B!! B1 c2<V^8dQhRS[RS[RS[RS[/#)r&r rrr'r!rfr)r(rs"r)r*rs+cUY^lr+c \'d^RIHpM^RIHpVP WVP R4pVP V4pVP'd \V4pVPRR4VPRR4VPWQPVRR7pVPVn VPVP4VnWqnVP!WP"RVP 24V#) zPTY spawn for interactive CLI tools (Codex, Claude Code, REPLs). Raises ImportError when no PTY backend is installed and re-raises any spawn failure; ``spawn_local`` falls back to pipe mode in both cases.) PtyProcessPTY GIT_PAGERcatPAGER)rer dimensionszproc-pty-reader-)x) _IS_WINDOWSwinptyr ptyprocessrr`rrkr setdefaultspawnrerbr4rgrr_pty_reader_loop)r>r rr_PtyProcessClspty_argvpty_envpty_procs&&&& r)_spawn_local_pty ProcessRegistry._spawn_local_ptys ; ; ?##G7::uM//(+    *73G ;.7E*!''kkw[d'ell "&"<"Nwzzl<[\r+Nr9cl<V^8dQhRS[RS[R,RS[RS[RS[R,RS[RS[R S[R S[/ #) r&rreNr<raruse_ptyr;rnr')rfrrsr!)r(rs"r)r*rslAAA!$tA=@ATWA+A/3ALOA!A.<Ar+c  ^RIHp V !V4p TPYYt\T;'g\P !44VR7p Rp \ V P4p V'dV fVPWV4#\ 'd R \#4/M/pV 'dV P R 2M V PpTP%Y'd \'W4MT VR 4pVP)V4pV P'd \+V4pV 'd \-V 4M\.P0p\.P2!V3R RRV P4RVRRRRRVR\.P6R\.P8RR/ VBpV 'd\P:!V4T\=T ;'gR 4uT nT n TPBT n!TPET PB4T n#TPIY'd TPJM TPLRT P 24T # \d\PR4EL\ddp\PRT4T P'd1Rp \T P4'g \R4ThR T n Rp?EL@Rp?ii;i T 'd\P:!T4ii;i \dTPOT T4hi;i)aASpawn a background process locally (TERMINAL_ENV=local; other backends use spawn_via_env()). ``use_pty`` requests a pseudo-terminal via ptyprocess/pywinpty for interactive CLIs, falling back to a plain pipe when unavailable or failing. ``persist_on_release`` keeps the process out of agent-lifecycle kill sweeps (#41225).)_rewrite_compound_background)rnFNz3ptyprocess not installed, falling back to pipe modez0PTY spawn failed (%s), falling back to pipe modeTzZPTY scope could not be reaped; refusing pipe fallback to avoid duplicate command executionr9 creationflagsz-pipe-fallbackLocalrCrerr;r:rrstdoutrrstart_new_session proc-reader-)(tools.terminal_tool_sudorrxrrAgetcwdrr`r ImportErrorrFrGrrkr  RuntimeErrorrr rrrrrrPIPErreSTDOUTrcloserfrcrorbr4rgr_log_reader_loop _reader_loop_reap_untracked)r>rrer<rarrr;rn _rewrite_bgrr pty_scope_attemptedloge _popen_kwargsr spawn_argvrr,procs&&&&&&&&& r) spawn_localProcessRegistry.spawn_locals Y"7+ ##GmRcdgdvdvkmktktkvRw7I$K# + s{ .,,WHMMDO;*<*>?TV 7J N3PWPZPZ %%gY\/B3/Ubn&17< OOH-    ,Y7I *-%*// !##9!%9+2;;9)>4K\K\`lmtmwmwlx^y zU VTU .QSTU'''*.'-g.B.BCC*C !!,.G( .<    $ /  s>.H55AK6=K,5 KK!K"AKK!K),L c><V^8dQhRS[RS[PRR/#)r&r rr'N)r!rr)r(rs"r)r*rs) ! !~ !Z=M=M !RV !r+c \\4;_uu_4VP'd\VP4VP VP VP 4RRR4\\4;_uu_4VP^R7RRR4R# +'giLD;i +'giR#;i)znPost-Popen setup failed: kill the orphaned subprocess (and any setsid descendants) so nothing leaks untracked.Nr)rrrkr _terminate_host_pidrbrgwait)r>r rs&&&r)rProcessRegistry._reap_untrackedsi ####7#7#78  $ $TXXw/F/F G!i IIaI ! ! ! sAB"B5" B2 5 C r<rar; output_so_farrxTct<V^8dQhRS[PRS[RS[S[,RS[RS[RS[RS[RS[R S[/ #) r&rrrer<rar;rrxr')rrrfrrsr!)r(rs"r)r*rsc$$25rrrer<rar;rrxr s &&$$$$$$$ r) adopt_localProcessRegistry.adopt_locals}##GmRUVhh "&"<".s)(v_uX[H:[ AcU)S_us!$z mkdir -p z && ( nohup bash -lc z > z$ 2>&1; rc=$?; printf '%s\n' "$rc" > z ) & echo $! > z && cat r9F)rerrewrite_compound_backgroundr,c3f"TF'qP4'gK\V4xK) R#5ir)rMr6)rlns& r)rrs#b.QU_U_UaGCGG.Qs11Nzlaunch wrapper exited rz without a PID: z (no output)z proc-poller-)rrbexit)rxrshlexquoteexecuterrCrmaprfrIrbrr_env_poller_loopr`)r>rrrer<rarr;rnlog_pathpid_path exit_pathq bg_commandrr,r rs&&&&&&&&& @@r) spawn_via_envProcessRegistry.spawn_via_envsw##GmRUnw7I$K%%c*(v_u(v%I KK( }% !' |3q{m.__annotate__.s 0 0 0r+c<S'd'SPV4pVP4'*oSPSV4R#r)rrC_ingest_output)r head_noiser>r s&r) _append_chunk3ProcessRegistry._reader_loop.._append_chunk.s4//6!&.    /r+NProcessc0<SPP#r)rcrr sr).ProcessRegistry._reader_loop..tsgoo.H.Hr+bufferread1c<SfSPR4;'gR#S!R4pV'dSPV4#R#)zLOne 4 KiB read: decoded text ('' for a partial multibyte tail), None at EOF.N)readr)rawdecoderraw_readrs r) _read_once0ProcessRegistry._reader_loop.._read_once<s?#!;;t,444tn.1w~~c*;t;r+)open_fd_waiterg?zProcess stdout reader ended: %s)codecsgetincrementaldecoderrcrr_finish_readerrrrfilenorr~r6tools.environments.fd_waitrrris_setpollr0_FINAL_DRAIN_MAX_CHARSrFr)r>r r_waiterrr fdridle_after_exitdrained_after_requestwait_sreadyrrr rr rsff @@@@r)rProcessRegistry._reader_loops ..w7yI 0 0 ? J??D|t{{2p"    -$$&H Js[[Fwvx>NH < (0(<[[V]]_VZr3''B!G A,.NnR(G)0) > ?"    -$$&H JsI$,I$II&A$I$ I$(I$J "I$+J, I$9J:I$'I$*I$JI$ I!I$ I!!I$$ J/J J JJAKc<V^8dQhRR/#rr/)r(rs"r)r*rvs22RV2r+c \\4;_uu_4VPRRR7pV'd V!V4RRR4V!4VP W!44R# +'giL0;i \dFpT!4f\P RYH4Rp?R#\P RYH4Rp?LvRp?ii;i)azReader-thread teardown: flush the decoder (a truncated multibyte tail becomes one U+FFFD instead of vanishing), reap the child (no zombies), record the exit. A process may close stdout long before it exits. The reader owns a dedicated daemon thread, so it must keep waiting rather than publish a false completion and discard the only ``Popen`` handle that can reap the child. r+T)finalNz+%s wait failed; leaving process tracked: %sz/%s wait failed; recording known exit status: %s)rrrrFrG_finish_exited) r>r r rNrrr[tailrs &&&&&&& r)rProcessRegistry._finish_readervsi >>#T>2Dt ! X F GY[1!  X{"LeW NNLe W W  Xs)$A$A7$ A4 7 CC'CCc 8<V^8dQhRS[RS[RS[RS[RS[/#)r&r rrrr)r!rrf)r(rs"r)r*rs2:::S:C:[^:kn:r+c j\Pp^pVP'Eg\P!^4VP VP V!V4V4^ R7PRR4pVPR4wrp V P4wr\V 4p\V 4pVeJW8dBVP;_uu_4VP'd RRR4R#RVn RRR4TpV 'dVP;_uu_4VP'd RRR4R#V;PV , un \VP4VP8d VPVP)RVn RRR4VP!W4VP#W4VP RV!V4 R2^R7pVPRR4P%4pV'dVP'4R,P%4R8wdVP R V!V4 R 2^R7PRR4P%4p\VP'4R,P%44pVP+VV4R#EKEKR# \d RpRpRp ELi;i +'giEL;i +'giELT;i \\(3dRpLqi;i \,dTP+TRR R R 7R#i;i)zBBackground thread: poll a sandbox log file for non-local backends.rr,r9rNzkill -0 "$(cat z# 2>/dev/null)" 2>/dev/null; echo $?0zcat 2>/dev/nulllost backend_lost)rVrWr?)rrr5rrr_log_delta_commandrrKrr6rDrFr'r0rSrrrCrI IndexErrorr!r)r>r rrrrrprev_output_bytesr headerrrsize_str offset_strnew_size used_offsetr check_outputexit_strr[s&&&&&& r)r ProcessRegistry._env_poller_loops KK... JJqM3 kk$"9"9!H+GX"Y*,"..1c(B.?#&==#6 5 +1<<>(H"8}H"%j/K'"6$]]]&~~~ &+]57G1+)1%!">>>"' --6-w4458P8PP4;4I4I7KcKcJcJd4eG1 ' ..w>%%g5 &q{m3WXbc$e$yy26<<> L$;$;$=b$A$G$G$IS$P"{{T!I,|+LVW{X\\]egijpprH'$'(;(;(=b(A(G(G(I$J '';%Q.__annotate__s C C C Cr+c0<SPSVRR7R#)T) unless_exitedN)r)rCr>r s&r)ingest0ProcessRegistry._pty_reader_loop..ingests   T  Br+rzPTY query response write failedT)exc_infozPTY stdout reader ended: %srcD<\SR4'd SP#R#) exitstatusr?)hasattrrBptysr)r2ProcessRegistry._pty_reader_loop..s\0J0JcnnRPRRr+)rrrrtools.pty_query_responderr7isaliverr~bytesrcwriterrFrrfrflushrr) r>r r  responderr7r>rrepliesrCrr"rEs ff @r)r ProcessRegistry._pty_reader_loopsll..w7yI  { C)r->u-ENE&!&$'IIg$6 )35#(>(>uGNNSXDY"4L  ,  >>)//"34Dt   We HHR T#(1!&$*LL(I15%1%&!&! ; LL6 : : ;slF-F 5F <E% 0F >F F%"F F F  F FFFF G *GG r=c0<V^8dQhRS[RS[RS[RR/#)r&r rCr=r'N)r!rfrs)r(rs"r)r*rs+))n)C)SW)dh)r+c V'gVPV4MVPV4'gR#VPW4VPW4R#)zBuffer a freshly-read chunk, then scan watch patterns and stream it live. ``unless_exited`` drops the chunk once the session has exited (atomically with a kill).N)rIrNrr)r>r rCr=s&&&$r)rProcessRegistry._ingest_outputsE  ! !$ '11$77  ""71 '(r+c0<V^8dQhRS[RS[RS[RR/#)r&r rVrWr'Nr)r(rs"r)r*r s+((n((ad(nr(r+c VP;_uu_4VPW#V4RRR4VPV4R# +'giL#;i)zMark a reader-observed exit (a raced kill keeps its own code/reason) and finish. Under the session lock, like kill_process's commit: otherwise the kill can land between mark_exited's ``killed`` check and its writes, and the reader overwrites the kill.N)rFr]_move_to_finished)r>r r[rVrWs&&&&&r)r!ProcessRegistry._finish_exited s8]]]    6 : w']s A A c&<V^8dQhRS[RS[/#r r!rs)r(rs"r)r*rsDr+c |VP;_uu_4VPVP9pV'dRRVn\P!4Vn\ V4VPPVP4WPVP&RRR4VPVX4V'gVP'gVPP4V# +'giLY;i X'gTP'gTPP4ii;i)zMove a session from running to finished. Idempotent: kill_process() and the reader thread can both call this; only the FIRST move enqueues the completion notification, so no duplicates. Returns True when this call is the one that persisted the session.TN) rFr`rrrrhr rr_publish_finishedrr)r>r  was_runnings&& r)rT!ProcessRegistry._move_to_finisheds ZZZ!** 5K*.'$(IIK!&g. !!'**-)0NN7:: && 0  " "7K 8'"9"9"9))--/5Z0'"9"9"9))--/#:sB C1)D1 D D;D;c*<V^8dQhRS[RS[RR/#)r&r rZr'NrW)r(rs"r)r*r4s"444d4t4r+c VPV4VP4V'dVP'dRRRVPRVPRVP RVP RVP/VP'dRVP/M/CVPV4C\V4CRVP/Cp\V4VPPV4R #R #R #) r completionrrar<r;rrmrfN)_release_finished_handlesrPrxr`rar<r;rrm _exit_fieldsr3rfrrr)r>r rZrs&&& r)rY!ProcessRegistry._publish_finished4s &&w/  7555 gjjw227??!6!67?? >E=Q=Q=QNG$8$89WY##G,%W-g00L #< 0  ! ! % %l 3#6;r+c&<V^8dQhRS[RS[/#r r )r(rs"r)r*rKs  n  r+cNRVPRVPRVP/#r[rZr\rdrs&r)r`ProcessRegistry._exit_fieldsJs/ ** !:!: '"<"<  r+c <V^8dQhRS[/#rrN)r(rs"r)r*rRs%%%r+c nVPpVefVPVPVP3F>pVfK \ \ \ 4;_uu_4VP4RRR4K@ VPeVPp\'g6Ve2VP4'dV\P!4JdR#\ \4;_uu_4VPP4RRR4R#R# +'giK;i +'giR#;i)uClose a finished session's OS handles (Popen pipes / PTY master). Best-effort and idempotent: the session may have no local Popen (env backends, detached recovery), or the handles may already be closed by the reader loop / kill path. Closing a Popen's stream objects does not kill anything — the child has already exited — it only releases the parent's pipe FDs, which is exactly the retained-resource leak. N)rcrrrrrOrDrrrrrrcurrent_threadr)r>r rstreamrs&& r)r_)ProcessRegistry._release_finished_handlesRs  ;; TZZ@%!':66 76A << #++FKF$66??;L;Li&>&>&@@)$$ ""$%$ $766"%$$sD(D# D # D4 c&<V^8dQhRS[RS[/#r rW)r(rs"r)r*rvs>>N>t>r+c VPpVPP4;'dDVPP4'*;'dVRJ;'dVP 4#)zA reconcile saw the direct child exit and set ``exited``, but the reader that owns the output is still on its final drain: the buffer is not the whole output yet, so nothing may consume it as the completion.N)rrrrr)r rs& r)_reader_finalizing"ProcessRegistry._reader_finalizingusj ''00779=='B[B[BbBbBd>d==$&==+1??+< >r+c&<V^8dQhRS[RS[/#rr)r(rs"r)r*r~s7777r+c WP9#)zECheck if a completion notification was already consumed via wait/log.)r)r>rs&&r)is_completion_consumed&ProcessRegistry.is_completion_consumed~s6666r+c&<V^8dQhRS[RS[/#rr)r(rs"r)r*rs``S`T`r+c \VP;_uu_4V'd?VPPV4;'gVPPV4MRpRRR4XfR#\ \ 4;_uu_4VP V4pVf RRR4R#TpRRR4VP'*;'dBVP;'d)VP'*;'dVP^8'*# +'giL;i +'giL};i)a6Whether a goal loop (``hermes_cli.goals`` wait barrier) should stay parked on this session: still running AND, with ``watch_patterns``, none matched yet (a long-lived watcher unblocks on its trigger, not on exit). Unknown/exited/ already-fired sessions return False so a stale barrier can never wedge the loop.NF) rFrrrrrrJr5ryrr~)r>rr  refresheds&& r)is_session_waiting"ProcessRegistry.is_session_waitings ZZZ[et}}((4VV8J8J:8VkoG ? i 66w?I !  G ! >>!``  " " ^ ^7+B+B'B ^ ^wGZGZ]^G^'` `Z! s#*DDD$D D  D+ r poll_intervalr2cP<V^8dQhRS[S[,RS[R,RS[RS[/#)r&r<rNrxr')rrfrr)r(rs"r)r*rs;QQ}Q9>Q]bQ Qr+c  VfVP4pR.R.R./pVP;_uu_4VPVP3UUu.uFhqUP 4FRpVP 'gKVP P4'dK9VeVPV8XgKPVNKT Kj pppRRR4X'dV^8:dV#VUu.uFqfPNK upVR&\PRV\V4RPRV444\P!4\!\#V4R4,p\!\#V4R 4p ^R IHp R p VEF;p V P P4'gV 'gV !4'dR p MV\P!4, p V ^8:dM\+\(4;_uu_4VP-V 4VP/V 4f RRR4MQRRR4V P P4'dM'V P P1\3W44KYLP P4'dRMR,P7V P4EK> VR,'d?\P9RV\VR,4RPVR,44V#uuppi +'giEL[;iuupi \(dR p ELi;i +'giEL$;i \4dR p Li;i)u-Bounded linger for ``notify_on_complete`` background processes at one-shot exit. A one-shot CLI run (``hermes -q/-Q/-z``) exits when its turn ends; a background process it spawned still holds a stdout pipe owned by the dying parent and dies of SIGPIPE seconds later (Bot Mode handoff replies were the visible casualty). Only ``notify_on_complete`` processes carry a completion contract — servers/daemons/ watchers aren't the parent's to wait for. ``task_id=None`` waits on every tracked process; ``timeout=None`` reads ``terminal.oneshot_completion_wait_seconds`` (``<= 0`` disables). Each pass re-reconciles child state so an orphaned-pipe exit can't wedge the linger. Returns ``{"waited", "completed", "timed_out"}`` id lists. Bot Mode handoff REPLIES are the visible casualty (#90879): a recipient invoked as ``hermes -p chat -Q --query-file ...`` dispatches its reply via ``message_agent`` / ``bot_relay`` exactly this way, then exits, and the reply process is destroyed ~3s later. The sender waits forever for a reply that was already killed. See #17327. Nwaited completed timed_outzZOne-shot exit lingering (bounded %ss) for %d notify_on_complete background process(es): %s, c38"TFqPxK R#5irrrrs& r)r?ProcessRegistry.wait_for_pending_completions..s,C7aTT7r3g?)is_interruptedcR#)Fr/r/r+r)r>ProcessRegistry.wait_for_pending_completions..ser+FTuOne-shot exit linger timed out after %ss with %d background process(es) still running: %s — they may be killed when this process exits.) _oneshot_completion_wait_secondsrFrrrrxrrr;r`rFinfor0rrrrSrtools.interruptrrr_reconcile_local_exitrJrrQKeyboardInterruptrNrG)r>r<rrxrstorerpendingdeadliner_is_interrupted interruptedr  remainings&&$$ r)wait_for_pending_completions,ProcessRegistry.wait_for_pending_completionss& ?;;=G "k2{BG ZZZ !% t~~>>e 1''010C0C0J0J0L_7(B>  'Q,M*12'QDD'2x  ) S\499,C7,C#C E>>#c%.#&>>u]+T2 , I G #!33::<<"o&7&7&*  (4>>+; ;I A~!),,227;99'BJ!-,K-007799--223y3KL-=6 ";";"B"B"D"D;+ V ] ]^e^h^h i;< +   NN!VK01499VK=P3Q  S  o ZZ3 ,+O ,-,,% ##  #sL &L 8L L 1 L ;LL$1L)M M( M5M8#MM3&L>M#'M &M L L! )L;:L;> M M M"!M"c <V^8dQhRS[/#r%rk)r(rs"r)r*rsYYeYr+c .\PRR4#)zTLinger (s) for one-shot exits with pending notify_on_complete processes; 0 disables.oneshot_completion_wait_secondsg@rnr/r+r)r0ProcessRegistry._oneshot_completion_wait_secondss../PRWXXr+skip_poll_observedc,<V^8dQhRS[RS[RS[/#)r&rrr'r)r(rs"r)r*rs( u uS u uY] ur+c ^WP9;'gT;'dWP9#)uSkip a completion the CLI agent already has this turn — consumed via wait/log or observed inline via poll(). Gateway/tui watchers check only ``is_completion_consumed`` so a read-only poll never suppresses their turn. Skips when the agent has either truly consumed the output (wait/log → ``_completion_consumed``) or observed the exit inline via poll() (``_poll_observed``). In both cases the CLI agent already has the result this turn, so injecting a [SYSTEM: ...] completion would be a duplicate (#8228). )rr)r>rrs&&$r)_drain_should_skip"ProcessRegistry._drain_should_skips.666tt;M;s;sR\`s`sRstr+c <V^8dQhRS[/#r%r)r(rs"r)r*rs$r+c h\\PRRR44# \dR#i;i)um``delegation.surface_child_process_notifications``; False on any config error — never crash the drain loop. delegation#surface_child_process_notificationsF)rsrrcrr/r+r)$_surface_child_process_notifications4ProcessRegistry._surface_child_process_notificationss5 55lDikpqr r  s " 11c2<V^8dQhRS[RS[RS[RS[/#)r&evtrais_async_delegationr'r)r(rs"r)r*rs1 A A AC ARV A[_ Ar+c n\VPR4;'gR4pT;'g%\T;'gVPR44pVeV'd\V!V44#V'd V'dWA8H#T;'dVPR4'*# \dR#i;i)zQRouting verdict for one drained event (see drain_notifications); False = requeue.rar9origin_ui_session_idFrestored)rfrrsr)rra owns_eventrevt_session_keyrequires_positive_proofs&&&& r) _owns_eventProcessRegistry._owns_eventscggm4::;"5"q"qo>p>pQTQXQXYoQp9q  !&= JsO,, 2"1 1(??CGGJ,?@@   s B%% B43B4c <V^8dQhRS[/#r%r5)r(rs"r)r*rs..S.r+c "VP'd^#RVn^RIHpHpV!R4p^RIHpV!VP 4V!V4# \d*p\PRT4Rp?T!T4^#Rp?ii;i T!T4i;i)aSRehydrate durable delegation completions from the LAUNCH profile's ledger, once per process. Called by the first consumer that drains the queue (CLI/TUI drain, gateway boot, TUI poller) so a mere ``import model_tools`` never touches state.db (#123265). The replay always runs in the launch scope: the TUI poller / prompt_turn drain call this under the session's profile binding, and a once-per-process replay taken under a secondary's scope would leave the launch ledger unreplayed for the life of the process. Secondaries are replayed by the gateway's ``_restore_secondary_completion_ledgers``.T)reset_hermes_home_overrideset_hermes_home_overrideN)restore_undelivered_completionsz2Could not restore async delegation completions: %s) _completions_restoredhermes_constantsrrrrrrrFrG)r>rrtokenrrs& r)restore_completions#ProcessRegistry.restore_completionss  % % %%)"Y(. . N243H3HI 'u -   NNOQT U &u -   'u -s)A BA<.B<BB Bc R<V^8dQhRS[RS[RS[S[S[S[3,,/#)r&rarr')rfrsrgtupler)r(rs"r)r*r%s3555MQ5 eD#I 5r+c VP4.p.pRpVPP4'EgfVPP4pTP R4R8HpTP YqY(4'gTPT4K{TP RR4p TP R4R8XdTPYR7'dK\TP R4;'gTP R 4;'gR4p \T4'dQTfTP4p\YvR 7'g+\PR TP RR4Y4EK[\T4;p 'gEKqTPY{34EKVFpVPP!V4K V# \dK4i;i) ahPop all pending events and return ``(raw_event, formatted_text)`` pairs. Skips completions per ``_drain_should_skip`` (gateway/TUI pass ``skip_poll_observed=False``). Routing (``_owns_event``): async-delegation events always need ownership proof, ordinary events once they carry ``session_key`` or ``origin_ui_session_id``; ``owns_event(evt)`` (strongest; the TUI passes a compression-chain-aware check) consumes ONLY on True, ``session_key`` uses plain equality; non-owned events are re-queued for their owner. No filter consumes everything (legacy single-session) except restored delegation payloads (fail-closed).Nrasync_delegationrr9r^)rr;r<) surface_childzSuppressed subagent-owned process notification (delegation.surface_child_process_notifications=false): type=%s session_id=%s task_id=%s)rrempty get_nowaitrrrrNrrfrrrrFrrr) r>rarrresultsrequeuerrr_evt_sid _evt_task_idrCs &&&$ r)drain_notifications#ProcessRegistry.drain_notifications%s   "*, &* ''--// ++668#&''&/5G"G ##CjVVs#ww|R0Hwwv,.43J3J4K4A4Asww7SS3779;MSSQSTL,S11 ($($M$M$OM23TTLL; 5x O 2377t77{+C  ! ! % %c *C  sG GGc6<V^8dQhRS[RS[S[,/#rrfrr!)r(rs"r)r*r_s$ t tc th~&> tr+c \V\4'd V'gR#VP;_uu_4VPP V4;'gVP P V4pRRR4Xf\ V4P V4pTPVeV4#VPV44# +'giLX;i)zSession by full ID or unique prefix (``proc_4dae`` / bare ``4dae``, like git short hashes); ambiguous or too-short prefixes resolve to None, never a guess.N) r~rfrFrrrrrJ_resolve_prefix)r>rr s&& r)rProcessRegistry.get_s*c*** ZZZmm'' 3UUt~~7I7I*7UG ?,Z8<2JKr+c  \V\4'dVP4MRpV'gR#VPR4'gRV 2p\ V4\ R4, VP 8dR#\ V4pVP;_uu_4TPVPVP3UUUu/uF7pVP4F wrVVPV4'gKWVbK" K9 uppp4RRR4\ V4^8Xd#\\VP444#R#uupppi +'giLK;i)zuResolve a unique session-ID prefix (a bare hex tail is normalized to ``proc_``); :meth:`get` tries exact first.r9Nrt)r~rfrCrJr0_MIN_PREFIX_CHARSrrFupdaterritemsriterr)r>rquerymatchesrsidrs&& r)rProcessRegistry._resolve_prefixjs'1S&A&A   "r((E7OE u:G $t'='= =(/ ZZZ NN%)]]DNN$C$C5#kkmFCs~~e/D+$C  037|q/@tD)*+JdJ Zs$(E .E5 E? E E  E c$<V^8dQhRS[RR/#rMrN)r(rs"r)r*r|sI(I(^I(I(r+c  DVeVP'dR#\VRR4pVfR#VP4pTfR#TPp\ 'gTP 'dTeTP4'dTPP4TPP\4'dR#TP;_uu_4TPT4RRR4\P!RTP"T4R#\TRR4pTEe(\ 'Eg^RIpTP'4pTP%YvP(4pTP%YvP*T\,P.,4\1\2\4\64;_uu_4TP94p T 'd;TP;\=T \>4'dT MT PARRR74RRR4\1\4;_uu_4TP%YvP*T4RRR4TP;_uu_4TPT4RRR4\P!R TP"T4TPET4R# \dR#i;i +'giEL;i +'giL;i +'giL;i \1\4;_uu_4TP%YvP*T4RRR4i +'gii;i;i \d-p \PCRTP"T 4Rp ? EL4Rp ? ii;i +'giEL;i) u=Reconcile ``session.exited`` against the real child state. The reader flips ``exited`` only at EOF; when the direct child has exited but a descendant (e.g. a daemon from ``hermes update``) holds the pipe open, poll() would report "running" forever. If ``Popen.poll()`` has an exit code, drain readable bytes non-blocking and flip ``exited``. No-op for env/PTY, exited and detached sessions. The reader thread (`_reader_loop`) sets `session.exited = True` only in its `finally` block, which runs when `stdout.read()` returns EOF. If the direct `Popen` child has exited but a descendant process (e.g. a daemon spawned by `hermes update` restarting the gateway) is still holding the stdout pipe open, the reader blocks forever and poll() keeps returning "running" indefinitely (issue #17327 — 74 polls over 7 minutes on Feishu). NrczxReconciled session %s: direct child exited with code %s; reader will publish the owned completion after its final drain.rr:rrz$Non-blocking drain failed for %s: %szxReconciled session %s: direct child exited with code %s but reader was still blocked (orphaned pipe). Flipped to exited.)#r5rrrrrrrrrrr _READER_FINAL_DRAIN_WAIT_SECONDSrFr]rFrr`fcntlrF_GETFLF_SETFLrA O_NONBLOCKrBlockingIOErrorrOrDrrIr~rfrrrT) r>r rrcrrrrflagsrrs && r)r%ProcessRegistry._reconcile_local_exit|s ?gnnn w 40 <  B : '' ***"!!  , , 0 0 2((--.NOO##B' KKR B  x.  kk T]]_ B 6 B ur}}/DE>!/7JGG &  #11:eS;Q;Q%W\WcWcdkt}WcW~H "),, B u=-]]]    #  D JJ  w'i   * HG -,),, B u=-,,, T CWZZQRSS T ]]sJ4K9A M!L;AKLM-K- M&N4 KK K  K* %L- K= 8M=MML> 5 M> M MM N !NN  N c&<V^8dQhRS[RS[/#r r )r(rs"r)r*rs{{n{{r+cdRVPRVPRVP'dR/#R/#)rrrr5r?)r`rr5rs&r) _status_headProcessRegistry._status_heads3gjj)W__h\c\j\j\jPXzzpyzzr+c&<V^8dQhRS[RS[/#rr)r(rs"r)r*rsstr+c VPV4pVeVPV4'd \V4#VPV4VP;_uu_4\ VR4pVP VPV4rTRRR4/VPV4CRVPR\\P!4VP, 4RX/CpX'dDVPVPV44X'gVPP!V4VP"'d&VP$'gVPRRR7V# +'giL;i) z9Check status and get new output for a background process.Nrbuptime_secondsoutput_previewTz=Process recovered after restart -- output history unavailable)rinote)rrXrrrFr(r5rmrrbr6rrfrr`raddriro)r>rr rr5 finalizingrs&& r)rProcessRegistry.polls&((:& ?d44W==j) ) ""7+]]])'48N!(1H1H1QJg(g*/ c$))+0B0B"BCEUWeg  MM$++G4 5 ##'' 3    G$6$6$6 MM4.mM n !]s )E$$ E4 c@<V^8dQhRS[RS[R,RS[RS[/#)r&roffsetNr1r'rfr6r)r(rs"r)r*rs.3d #X\r+c  .^RIHpVPV4pVf \V4#VP;_uu_4V!VP 4pVP VPV4rRRR4XP4p \V 4p Vf&V^8dW)Rp \V 4;'gV ^8Hp MbT;'g^pWW#,p \W"V,4PV 4^,p V ^8H;'g\V 4;'dW8Hp /VPV4CRRPV 4RV R\V 4 R2/CpX'd,V 'd$X'gVPP!V4V# +'giEL";i)z;Read the full output log with optional pagination by lines.r$Nr,r total_linesshowingz lines)r&r%rrrFr'r5rmrIr0rssliceindicesrrrr)r>rrr1r%r  full_outputr5rrrselectedobserved_completion_outputrrs&&&& r)read_logProcessRegistry.read_logsh/((:& ?j) ) ]]]$W%:%:;K!(1H1H1QJ&&(%j  >eaiVW~H)-h)K)K;!;K &[[qFFN3H%088EaHD)4)9)e)ed8n>d>dQUQd &M(M*2DIIh4G ; c(m_F3KM 0  % % ) )* 5 +]]s /F F c:<V^8dQhRS[RS[R,RS[/#)r&rrNr'r)r(rs"r)r*rs+EEsES4ZE4Er+c  ^RIHpHp\\P !RR44pVeV^8:d RRRRV R2/#RpT;'gTpV'dW%8d TpR V R V R 2pVPV4pVf \V4#\P!4V,p \P!4V 8EdaVPV4pVf \V4#VPV4Rp VP'dFVPV4'g/VP P#V4VP%VR 4p MwV!4'd RR RVP&R\)VR4RR/p MKV!\*P,!4P.4'd!RR RVP&R\)VR4RRRR/p V eV'dWjR&V #V \P!4, p V ^8:dM)VP0P3\5RV 4R7EK{RRRVP&R\)VR4RR/p RV R2p VP6'd;V R\\P!4VP6, 4 R2, p T VP8'dRMR, p V'dV R V 2MT V R&V # \ \3d^pELi;i)!u9Block until the process exits, the timeout elapses, the user interrupts, or a mid-turn user message (steer/redirect → ``request_yield``) releases the wait. ``timeout`` defaults to (and is clamped by) TERMINAL_TIMEOUT. Returns a dict with status exited|timeout|interrupted|not_found|error and an output snapshot.) consume_yieldrTERMINAL_TIMEOUT180Nrrztimeout must be positive (got )zRequested wait of z%s was clamped to configured limit of rr5rrr,rrz+User sent a new message -- wait interruptedprocess_runningTzUser sent a new message -- wait released; the process is still running and you will be notified on exit. Respond to the user now. timeout_noter2rrzWait window of uAs elapsed — the process is still running. This is not an error.z Uptime: r"uc notify_on_complete is set: you will be notified on exit — do more work instead of waiting again.zq Poll again later or use terminal(background=true, notify_on_complete=true) next time for automatic notification.z. )rrrr6rArBrDrTrrrrrJrr5rmrr_exit_snapshotrr(rrhidentrrrQrfrx) r>rr_consume_yieldr max_timeoutreffective_timeoutr rrr base_notes &&& r)rProcessRegistry.waits g bii(:EBCK  7a<gw2PQXPYYZ0[\ \ #22{ w, + /y8]^i]jjklL((:& ?j) )>>#&77nn)44W=G!*--  & &w /F~~~d&=&=g&F&F))--j9,,Wh? ""mYS_`gimSnIK 8 8 : @ @AA mYS_`gimSn%tbd !-9>*  4>>#33IA~  % % * *3sI3F * G iGOOX|T[]aGb t% /00q r      9Sw7I7I)I%J$K2N NI))) r M N DPL>I;!?U^~ yI& K s KKKc,<V^8dQhRS[RS[RS[/#)r&r rr'r)r(rs"r)r*rKs'TTTTTr+c bRVRVP/\PV4C\V4C#)zTResult dict for an exited session: exit metadata + the completion-sized output tail.rr)rrr`r3)r rs&&r)rProcessRegistry._exit_snapshotJs? fiT**73T7I'7RT Tr+rWz process.killconsume_outputc2<V^8dQhRS[RS[RS[RS[/#)r&rrWr r')rfrsr)r(rs"r)r*rQs3^8^8^8*-^8PT^8 ^8r+c  VPV4pVf \V4#VP'dVPV4pVP;_uu_4VP VR4pVP V4pRRR4V'gVPXR&V'd$X'gVPPV4X#VPWAV4pVeV#VPV4pVP;_uu_4VPp RRR4X 'd.MVPV4p V 'dqRP\\V 44p \P!RVP"\%V 4V 4RRRR\%V 4 R V R 2R VP"R V R R/#V'gVP;_uu_4VPp RRR4\P!RVP"VP4RRRRVP R2R VP"RVPR X '*/#VP;_uu_4\'V4p V'dVPPV4RVnRVnRVnW$nRRR4VP/V4'g \1V4VP34RRR VP"RVP*RVP,/X C# +'giEL;i +'giEL ;i +'giELY;i +'giL;i \4dpRRR\T4/uRp?#Rp?ii;i)ulKill a background process and return its output snapshot. ``consume_output`` is true for explicit tool/RPC kills (the caller sees the output). Bulk cleanup passes false so it doesn't suppress an autonomous completion notification — except abandoned-turn reaping (``kill_started_since``), which passes true so a killed abandoned process can't revive stopped work.Nalready_exitedscope_stop_failedr~uPKill incomplete for %s: %d process(es) still alive (%s) — session kept runningrrzKill incomplete: z process(es) still alive (z); session runningr survivorsrTz5Kill incomplete for %s: systemd scope %s did not stopzKill incomplete: systemd scope z did not stoprYrZr\i)rrr5 _stop_scoperFrrmrkrr _signal_kill_post_kill_survivorsrrrfrFrGr`r0r3r[rZr\rTr rPr)r>rrWr r  scope_stoppedrrearlysignal_race_exitedralive root_exitedr,rs&&$$ r) kill_processProcessRegistry.kill_processQs((:& ?j) ) >>>!,,W5M,,W6FG!44W= !.5.B.B*+j))--j9M? 8%%g>JE  !,,W5M %,^^"1d6O6OPW6XI #c9"56fJJI7g+C N+;<!7"46 '**k9%t --!]]]")..K#V&zz7+?+?Ag>w?S?S>TTab '**.A7CWCW%; 88+G4!--11*=!%$'!,4)-3*))'22%g.  " " $(L'**>QSZSlSl$g&@&@LDJL LK,*#]]$ 8gwA7 7 8s$K? M!%M LM#M>A/M.M6M L'A%M=MA L;M:AM? L  L$  M' L8 2 M; M M M2M-'M2-M2c&<V^8dQhRS[RS[/#r rW)r(rs"r)r*rs^r+c pVP'gR#\VP4pV'*VnV#)zStop the session's systemd scope: True when it has none or the stop worked. Every kill path stops the scope through here, so a failed stop always leaves it marked for retry.T)rkr r)r stoppeds& r)rProcessRegistry._stop_scopes2###$W%9%9:*1k#r+c B<V^8dQhRS[RS[RS[RS[S[,/#)r&r rr r')r!rfrsrr)r(rs"r)r*rs122N22UY2^fgk^l2r+c VP'd VPPRR7R#VP'd3VPVPPVP4R#VP'd@VP'd.VPPRVP R2^R7R#VP'EdVPR8XdVP'dVPVPVP4R8wdVP!V4pVP";_uu_4\%V4pRRR4V'dVP&P)V4VP+V4R R R VP,/XCpV'gVP.VR &V#VPVP4R#R R R R/# \dFTP'd0\P !TP\ P4R#i;i +'giL;i)zDeliver the kill via PTY, local Popen tree, sandbox exec or recovered host PID. Returns a final result dict when the kill cannot proceed (recycled/dead recovered PID, or no runtime handle), else None.T)forcezkill r'rr6r?Nrr r[rrzkRecovered process cannot be killed after restart because its original runtime handle is no longer available)r terminaterrbrAkillsignalSIGTERMrcrrgrdrrirjrCrrFr3rrrHr[rk)r>r rr rr,rs&&&& r)rProcessRegistry._signal_kills <<< 9 &&T&2XQ___  $ $W__%8%8':Q:Q RJI___ OO # #eGKK= $Eq # QFE   '"3"3v"='+++'' W5L5LMQZZ $ 0 0 9 ]]]/8F#!--11*=++G4"$4k7CTCT_X^_$292F2FF./   $ $W[[ 1 'N  E 9;;;GGGKK8RW 9$#]s#G# H6#H3/H32H36 I c,<V^8dQhRS[RS[RS[/#)r&rokr'r)r(rs"r)r*rs"88C8d8t8r+c VPV4pVf \V4#VP'dRRRR/#VP'dV!VP4V#VP'dVPP 'gRRRR/#V!VPP 4V# \ dpRRR\T4/uRp?#Rp?ii;i)uRun a stdin operation on a running session — ``pty_op(pty)`` under PTY mode, else ``pipe_op(stdin)`` on the Popen pipe — and return *ok* on success.Nrr rzProcess has already finishedz?Process stdin not available (non-local backend or stdin closed))rrr5rrcrrrf)r>rpty_oppipe_opr'r rs&&&&& r) _stdin_opProcessRegistry._stdin_ops((:& ?j) ) >>>.9WX X 8|||w||$ I ___GOO,A,A,A '74uvv--.I 8gwA7 7 8s;B2 B2 B22B2B2B22 C=C CCc,<V^8dQhRS[RS[RS[/#r&rdatar'r)r(rs"r)r*r s'kkckkkr+c  \aV3RlpV3RlpVPWVRRR\S4/4#)zASend raw data to a running process's stdin (no newline appended).c<\'dDTP\S\4'dSP R4M \ S44R#TP\S\ 4'dSP RR4MS4R#)r:surrogateescapeN)rrJr~rIrrfencode)rEr/s&r)via_pty,ProcessRegistry.write_stdin..via_pty s[{ *T52I2I$++g.sSWyY ZPTVYEZEZ$++g/@A`der+cJ<VPS4VP4R#r)rJrK)rr/s&r)via_pipe-ProcessRegistry.write_stdin..via_pipe s KK  KKMr+rr' bytes_written)r+r0)r>rr/r4r7s&&f r) write_stdinProcessRegistry.write_stdin s3 f ~~j8ho_bcg_h=ijjr+c,<V^8dQhRS[RS[RS[/#r.r)r(rs"r)r*r s'ssss#stsr+c VPV4pTPY\'d'V'dVP'd R,4#R,4#)ulSend data + newline to stdin (like pressing Enter). On a Windows PTY, Enter is a carriage return: ConPTY treats ``\r`` as end-of-line and a bare ``\n`` through pywinpty is NOT a line terminator — the child's blocking line read (``readline()``, Go ``bufio.Scanner``) never returns and the process hangs looking healthy. ``\r\n`` gives it both; POSIX keeps ``\n``.z r)rr:rr)r>rr/r s&&& r) submit_stdinProcessRegistry.submit_stdin sF ((:& kkgZaZfZfZfF,qrrlp,qrrr+c&<V^8dQhRS[RS[/#rr)r(rs"r)r*r s....r+c VPfRRRR/#VPVPV4V4RRRTRR/# \dpRRR\T4/uRp?#Rp?ii;i) uAsk the desktop GUI to close this process's read-only terminal tab. Does NOT kill the process — output keeps buffering and the tab can be reopened from the status stack. Errors when no UI close sink is wired.Nrrz;close_terminal is only available in the Hermes desktop app.r'closedrzClosed the read-only terminal tab. The process was not killed; its output remains available and the user can reopen the tab from the status stack.)rrrrf)r>rrs&& r)request_close_terminal&ProcessRegistry.request_close_terminal s| == gw0mn n 8 MM$((:. ; dHj -. . 8gwA7 7 8s!? A# AA#A#c&<V^8dQhRS[RS[/#rr)r(rs"r)r*r. srrcrdrr+c  VPV4pVeVP'dRMRpVPVRRRRRV/4#)zGClose a running process's stdin / send EOF without killing the process.zEOF sentz stdin closedc"VP4#r)sendeofrDs&r)r-ProcessRegistry.close_stdin..3 s CKKMr+c"VP4#r)r)rs&r)rrI3 s r+rr'r)rrr+)r>rr r(s&& r) close_stdinProcessRegistry.close_stdin. sO((:&#/GLLLjn~~ 13NQY[_ajloPpr rr+c <V^8dQhRS[/#r%r5)r(rs"r)r*r5 s""s"r+c ,\VP4#)zMO(1) running count for status-bar polling; dict ``len()`` is atomic, no lock.)r0rr=s&r) count_runningProcessRegistry.count_running5 s4==!!r+include_retainedcN<V^8dQhRS[R,RS[R,RS[RS[/#)r&r<NrarQr')rfrsrg)r(rs"r)r*r9 s=@@S4Z@S4Z@mq@C@r+c aV'd \4M/pSP;_uu_4VPSP4VPSP4RRR4V3RlVP 44Uu.uF$pVfK SP V4'dK"VNK& ppV'g V'dHVUu.uF;pV'dVPV8XgV'gK&VPV8XgK9VNK= pp.pVEF:pSPV4RVPRVPR,RVPRVPRVPR \P!R \P !VP"44R \%\P!4VP", 4R VP&'dR MRRVP('dVP(RRMR/ p V'd0V'd(VPV8wdVPV8XdRV R&VP*'dRV R&\,V R&VP.'dFVP0'g4V P\3VP.4VP4^8R7VP6'dRV R&VP8'dRV R&VP&'d.VP:V R&VP<V R&VP>V R&VP@'dRV R&VPCV 4EK= V# +'giEL;iuupiuupi)uZRunning and recently-finished processes for ``task_id`` and/or ``session_key``; cross-task entries sharing the gateway session (a forgotten preview server blocking session reset) are flagged ``"session_scoped": true``. When ``task_id`` is given, processes that task spawned (its ``owner_task_id``) are included. When ``session_key`` is also given, session-scoped background processes (``background: true``) registered under that gateway session are surfaced too, even if they belong to a different task — so the agent can discover a forgotten preview server that is blocking session reset (#29177). Nc3F<"TFpSPV4xK R#5ir)rJ)rrr>s& r)r0ProcessRegistry.list_sessions..J s#(;La..q11;Ls!rr:NNrerbr;rfz%Y-%m-%dT%H:%M:%Srrr5r?rr9Tsession_scopedrlwsl_note)ry watch_hitrxrnr[rhrZrii8)"rrFrrrrrXr;rarr`rrerbrstrftime localtimerfr6r5r'rl_WSL_CHAIN_NOTEryrrgr~rxrnr[rhrZrirN) r>r<rarQsessionsru all_sessionsrrentrys f&&$ r) list_sessionsProcessRegistry.list_sessions9 s0@)+R ZZZ OODNN + OODMM *(;C??;L( () /3/E/Ei/P I(  k''a7 :$%MM[$@<  A  & &q )add199T?quuquudmm,?PQP\P\A]^ #diikALL&@"Aahhh(I AOOO!//$%"8QS E;1??g+E!--[fJf*.&'{{{%)k"$3j!(9(9(9 D1A1A,Bamm^_N_ `###.2*+###.2*+xxx%&[[k"%&[[k"-.-@-@)*zzz$(j! MM% GH gZZ s57M M!M!)M! M&M&-M&M& M c <V^8dQhRS[/#r%r)r(rs"r)r*r} sVVVr+c aVP;_uu_4\VPP44pRRR4XFpVP V4K VP;_uu_4\ ;QJd7V3RlVPP44F 'gK RM, RM(!V3RlVPP444uuRRR4# +'giL;i +'giR#;i)zTrue if any still-running session satisfies *predicate*, after refreshing detached sessions so a finished-but-unreaped process reads as inactive.Nc3d<"TF%qP'*;'d S!V4xK' R#5ir)r5)rr predicates& r)r/ProcessRegistry._any_running.. s&U>T88|44 ! 4>Ts00TF)rFrgrrrJr)r>rer]r s&f r) _any_runningProcessRegistry._any_running} sZZZDMM0023HG  * *7 3 ZZZ3Udmm>R>R>TU333Udmm>R>R>TUUZ ZZZs$C%08C8+/C8% C5 8 D c&<V^8dQhRS[RS[/#r&r<r'r)r(rs"r)r*r sGGCGDGr+c .aVPV3Rl4#)aNWhether any process for ``task_id`` is still running. Ownership is ``owner_task_id`` (the raw spawning id) like the other task-scoped queries: ``task_id`` on a session is the collapsed container key, shared across turns and delegate children, so a container-key match alone would miss a delegate child's own background work (#120546).c"<VPS8H#r)r;)rr<s&r)r6ProcessRegistry.has_active_processes.. s1??g+Er+rgr>r<s&fr)has_active_processes$ProcessRegistry.has_active_processes s   !EFFr+c6<V^8dQhRS[RS[S[,/#r&r;r'rfrgr!)r(rs"r)r*r s$llcld>6Jlr+c VP;_uu_4VPP4Uu.uF+q"PV8XgKVP'dK)VNK- upuuRRR4#uupi +'giR#;i)z@Running processes whose RAW spawning owner is ``owner_task_id``.N)rFrrr;r5r>r;rs&& r)running_owned_by ProcessRegistry.running_owned_by sV ZZZ#}}335k5!M9YAbcbjbjAA5kZkZZs(A5A0 A0A0#A50A55 B c6<V^8dQhRS[RS[S[,/#rsrt)r(rs"r)r*r s$cccnAUcr+c VP;_uu_4VPP4Uu.uFvpVPV8XgKVP'gK*VP fK:VP VP9gKWVP VP9gKtVNKx upuuRRR4#uupi +'giR#;i)zExited ``notify_on_complete`` processes of ``owner_task_id`` whose result nobody read (no wait/log/poll). A child's completion notice is suppressed in the parent, so an unread exit is otherwise lost silently.N) rFrrr;rxr[r`rrrvs&& r)unread_completions_owned_by+ProcessRegistry.unread_completions_owned_by sZZZ#~~446c6!-7<=rr~rrrrr s&&$$$$$ r)transfer_ownership"ProcessRegistry.transfer_ownership sg ((:& ZZZ'...G4I4IZ4WZ%- !(O"0 #' ZZZsA=A=A== B c<<V^8dQhRS[RS[S[,RS[/#)r&ramax_active_ager')rfrrrs)r(rs"r)r*r s-SS#SxPUSbfSr+c `aaa\P!4oVPVVV3Rl4#)zActive processes for a gateway session key. Processes older than ``max_active_age`` seconds are ignored as stale so a forgotten ``http.server`` can't freeze session idle/daily reset forever; ``None`` keeps legacy behaviour (any running process blocks).cv<VPS8H;'d#SRJ;'gSVP, S8#r)rarf)rrrras&r)r8ProcessRegistry.has_active_for_session.. s>amm{2RR4'PPC!,,,>.+PRr+)rrg)r>rarrs&ff@r)has_active_for_session&ProcessRegistry.has_active_for_session s+ iik   RS Sr+c <V^8dQhRS[/#r%r)r(rs"r)r*r s111r+c &VPR4#)uWhether ANY background process is running — scale-to-zero must not suspend a gateway with live background work or the process is lost.cR#)Tr/)rs&r)r0ProcessRegistry.has_any_active.. s4r+rnr=s&r)has_any_activeProcessRegistry.has_any_active s  00r+c6<V^8dQhRS[RS[S[,/#rj)rf frozenset)r(rs"r)r*r s#GGCGIcNGr+c D\RVPV444#)udRunning IDs owned by ``task_id`` — a turn-boundary marker: on timeout only processes absent from the starting snapshot belong to the abandoned turn; older ones intentionally span turns and must survive. Ownership is ``owner_task_id``: ``task_id`` is the container key (``session:``, ``default``), shared across turns and sessions, not the turn's id.c38"TFqPxK R#5irrrs& r)r7ProcessRegistry.snapshot_running_ids.. sF'E!'Er)rrwros&&r)snapshot_running_ids$ProcessRegistry.snapshot_running_ids s Ft'<'r< baseline_idsrWs&&&$r)kill_started_since"ProcessRegistry.kill_started_since s*}}W)LrYr )r)rrs& r)r+ProcessRegistry.kill_all.. s7 EE(O; ; \ \@S[\@\ \s00) _LIFECYCLE_KILL_SOURCESrFrrrr;r`r5rrnrsum) r>r<rrWr  lifecyclertargetsrs &&$$$ r)rProcessRegistry.kill_all s::: ZZZNT]]113Ndnn6K6K6MNNaOq''ADD +56XXXAVAV#q';';N cjjbi]^$$QTT&$Xbij ZksG9DD8D DD1D9D DD!%D2D D/ c  a^RIHp\P!4pSPP 4UUu/uF,wr4\ VRR4'dKV!V4'dK*W4bK. pppVP 4UUu.uF$wr4W$P , \8gK"VNK& ppp\SP4\SP4,\V4, \8pV'dCVUu.uF q3V9gK VNK up;p'd!VP\VV3RlR74VF2pSPSPV,4SPVK4 SPP4SPP4,p S;PV ,unS;P V ,unR#uuppiuuppiuupi)ztDrop expired, then oldest-over-cap finished sessions (hold _lock); keep pending scope stops and unpublished notices.)retained_for_deliveryrFc><SPV,P#r)rrf)rr>s&r)r2ProcessRegistry._prune_if_needed.. s$..:M:X:Xr+)rN)tools.process_registry_awaitingrrrrrrfFINISHED_TTL_SECONDSr0r MAX_PROCESSESrNrQr_keysrr) r>rrrrprunableexpiredover_caprtrackeds f r)r ProcessRegistry._prune_if_needed srIiik)-)=)=)?f)?vs"1&;UCLabcLdCF)?f%-^^%5e%563# :LPd9d33%5et}}%DNN(;;c'lJm[ h&UhsWBTssh&UUU NN3y.XY ZC  * *4>>#+> ?s#--$$&)<)<)>> !!W,! w&'fe&Us)G$ G$&G$G*&G*G0G0)rrrrrrrrrrFrrrrrr)zno job control in this shellz!cannot set terminal process groupz)tcsetattr: Inappropriate ioctl for device)r/)Nr9r9NFr9F)Nr9r9 r9Frr)r9N)NrV)r9)NN>r agent_closegateway_turn_timeout)brrrrrrrrrrrr staticmethodrrrrrrrr/r4 classmethodr;rCrJrHrGrXrcrhrorxrrrrrrrrrrrr!r*rrrr!rTrYr`r_rmrqrvrrrrrrrrrrrrrrrrrrrr+r:r>rCrKrOr`rgrprwr{rrrrrrrrrrrrs@r)rrsQ5 "$BN  ++ 3 3004  !!HHT         ((T  XX( (($99$::DDQQ -- % %&!! .AAF ! !Z\46MO$(&@XJXJt22.&&78::x4T4Tl)Z_))((B44,  %%F>>77``"QHLQehQQfYY uPT u u A A..,5TX55p t tKK$I(I(V{{4^8W[^8^8@22h88&kk"ss..$rr""@ty@@HVVGGll cc<> SS11 GG(([\uu IR 9>8''r+r)registry tool_errorrprocess_manage descriptionu Poll, wait on, or kill background terminal processes (from terminal(background=true)). Completed results remain retrievable by session_id when resuming their owning conversation (up to 7 days, newest 64 results per profile; rolling output tail). poll: status + new output. log: full output, paged. wait: block until exit or timeout (partial output on timeout). write vs submit: submit appends Enter — use it to answer prompts; write sends raw bytes, no newline. close: EOF stdin. kill: terminate. handoff (subagents only): transfer a running process you started to your parent agent, which then receives its completion; `data` = one sentence on its purpose. Subagent-owned processes are otherwise killed when the subagent finishes and their notifications never reach the parent. parametersrobject propertiesactionstringenumrrrr"rJsubmitrrztFrom terminal background output; any unique prefix works ('4dae' for proc_4dae56ca81f6). Required except for 'list'.r/z:Stdin text for write/submit; purpose sentence for handoff.rintegerzMax seconds for 'wait'.minimumrz$Log line offset (default: last 200).r1zMax log lines.requiredr9c jV^8dQhR\R\R\\,R\R\/#)r&r,rrr<r')rfrr6)r(s"r)r*r*C s=XXSXcXxPS}X_bXloXr+c6^RIHpT!YY#;'gRR4#)u ``transform_terminal_output`` seam for background-process output — the poll/wait/log/kill results and the completion/heartbeat/watch notifications — so a plugin that rewrites terminal output sees the same command output whether it ran in the foreground or not (#70760). Same helper as the foreground path; callers redact AFTER it, never before, so a replacement the plugin returns is still masked. ``returncode`` is None while the process is running and ``env_type`` is not recorded per process, so it is passed empty.)_apply_output_transform_hookr9)tools.terminal_tool_resultr)r,rrr<rs&$$$ r)transform_process_outputrC sH ']]PRTV WWr+c0V^8dQhR\R\/#)r&rr'r*)r(s"r)r*r*N s4Dr+c\V\4'gV#^RIHpHpVP R4;'gRp\ VP R4;'gR4pV'g\\P \ VP R4;'gR44;pe!\ \VRR4;'gR4pR F]p\VP V4;p\ 4'gK,V'gK6\WsVP R4VR7pV!Ws4W&K_ \V\ 4'dV'dV!VRR 7VR&V#) aTransform, then redact secrets from background-process output before it reaches the model, session.db and CLI, mirroring the foreground ``terminal`` pipeline (hook first, redaction after) so the two surfaces can't diverge. Respects ``security.redact_secrets``; ``redact_terminal_output`` picks ``code_file`` from the recorded command. The command string itself is also redacted in case it carried an inline credential. See #43025. )redact_sensitive_textredact_terminal_outputrr9r<rr[)rrr<T) code_file)r,r) r~r agent.redactrrrrfprocess_registryrr)rrrrr<r rvalues& r)rrN s  fd # # Jjj#))rG&**Y'--2.G #3#7#7FJJ|r+c `\PV\VPRR444#r/r9)rr:rfrrs&&r)rr} s#-99#s155QSCT?UVr+c `\PV\VPRR444#r)rr>rfrrs&&r)rr~ s#.;;CQUU6SUEVAWXr+c,\PV4#r)rrKrs&&r)rr s-99#>r+c^V^8dQhR\R\R\\,R\/#)r&rrr<r')rfrr)r(s"r)r*r* s,#-#-#-D#-8C=#-T#-r+c ^RIHpHp^RIHpT;_uu_4TP \ T;'gR44pRRR4X'dVP R4MRp\VRR4p\V4'dV!4MRp V fRR/#\ \V R R4;'g\V R R4;'gR4p V 'gRR /#\VR R4p V f .;qn \V 4\8d RR \ R2/#\ VP R4;'gR4P4p V 'gRR/#\PT\ T;'gR4T V!V 4\ \V R R4;'gR4V R7p V f RRV R2/#V PR V P RV P"RV /4RRR V P RV P"RR/# +'giEL;i)aSubagent-only: transfer a running background process to the parent agent so its completion is delivered THERE (child-owned process notices are suppressed and child teardown kills what it owns). Validated against the live spawn tree: the caller must be a registered child and must own the process; anything else is an error, never a silent no-op, so a PID mentioned in prose can't masquerade as a transfer.)_active_subagents_active_subagents_lock)_resolve_container_task_idr9Nagent_delegate_parent_refrzThandoff is only available to a running subagent with a live parent; you are not one._current_task_idrzNparent has no process owner id yet; retry after the parent's turn has started._handed_off_processeszhandoff cap reached (z2 per subagent); wait on or kill the rest yourself.r/zshandoff requires `data`: one sentence saying what the process is for and what the parent should do with its result.)r~rrrrzcannot hand off zf: not a running process you own (already exited? read its result with poll/log and report it instead).rrr handed_offzzYour parent now owns this process and will receive its completion; you will not. Mention the handoff in your final answer.)tools.delegate_tool_registryrrtools.terminal_toolrrrfrr}rr0_MAX_HANDOFFS_PER_CHILDrCrrrNr`r)rrr<rrrrecordchild parent_refparent parent_ownerhandedrr s&&& r)_handoff_processr s W>  "&&s7==b'9: #)FJJw tE 6=J%j11Z\tF ~oppwv'92>ii'&R^`bBciigijL ijj U3T :F ~/11, 6{--01H0II{|}} txx%%2 & , , .D OP P11s7==b1L-l;76<<BBC$2PG+J<8AAB B MM<YQUVW lL'**i , --5  s %G// H c VPRR4pVPR4e\VPRR44MRpVR8Xd1\P!\ VPR44RR7#VR8XdEV'g \ R4#\P!\ W0VPR44RR7#V\9dlV'g\ R V 24#\V,wrE^R IH pV!W#V!W044p\P!V'd\V4RR7#TRR7#\ R V R 24#) rr9rrgr<F) ensure_asciihandoffz"session_id is required for handoffzsession_id is required for )apply_wait_poll_policyzUnknown process action: zA. Use: list, poll, log, wait, kill, write, submit, close, handoff) rrfjsondumpsrrr_SESSION_ACTIONS"tools.process_registry_wait_policyrr)rkwrrhandlerredactrrs&, r)_handle_processr s XXh #F48HH\4J4VTXXlB/0\^J zz/"&&*;<5QQ BC Czz*:RVVI=NO^cdd !! ;F8DE E*62M'GJr$s     oo9,  OO  ( ll<(AA-ttD||FX<?   8 $"#&66,v   !#& !  ",0/%NN,$( /#5 53Ml , "J72j( T ,2R $ : *52!52p FP2` i1i1 i1Za=312=5G= =. =0I =K[ =  = . = 0< = 0 0 7 7 9 9vv##=AFF166--R199< 9,a'-/EG\a'L;#$0  \ f  V [  81  E  /1- 8 XJ=%2jXegX4 W" 6 = lnr s PRV W > E VX] ^ XZ_` > F#-L|(       YAs L+.L