+ lHjRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI H t ^RI Ht^RIHtHt^RIHt^RIHt]P,!]4t]!]4P5R4t^^YuttRtRR RR R R R R RR RRRRRRRRRRR/ RR RR R R R R R R RRRRRRRRRRR/ RR RR R R R R R R RRR RR!RR"RR#RR$/ /tR.ROR.ROR.RO/t R%R&lt!R'R(lt"R)R*lt#R+R,lt$R-R.lt%R/R0lt&R1R2lt'] !R3R444t(R5R6lt)R7R8lt*R9R:lt+R;R<lt,R=R>lt-]!R?4t.]!R@4t/RARBlt0RCRDlt1RERFlt2RGRHlt3RRIRJllt4]!]PjPmRK4;'g]Pn!4RL, 4RM, t8]PrRNROl4t:RPRQlt;RRRSltRXRYlt?RZR[lt@^tAR\R]ltBR^R_ltCR`RaltDRbRcltERdReltFRfRgltGRhRiltHRjRkltIRltJRmRnltKRoRpltLRqRrltMRRsRtlltNRuRvltORwRxltPRyRz/R{R|lltQR}R~ltRRRltSRRltTRRltURRltVRRltWR#)aJBot Desktop runtime: one headless Xfce desktop per Hermes profile, served over RFB on a private Unix socket, viewed and driven from Hermes Desktop. Layout under ``/bot-desktop/``: ``display`` (allocated X display number), ``rfb.sock`` (Xvnc RFB Unix socket, 0600), ``Xauthority``, ``env`` (DISPLAY/XAUTHORITY/DBUS_SESSION_BUS_ADDRESS published by the launcher once Xfce's bus exists), ``launcher.pid``, ``launcher.log``, ``xdg/`` (per-profile XDG_CONFIG_HOME so two profiles never share xfconf). Everything is profile-scoped via ``get_hermes_home()`` so N profiles in one gateway get N desktops: one screen per bot on the shared machine. The launcher is ``launcher.sh`` next to this module; :func:`desktop_env` is what cua-driver and headed Chromium spawns merge in so the agent acts on this profile's screen and nowhere else. ) annotationsN) dataclass)Path)DictOptionalget_hermes_home) placementz launcher.shXvncxfwm4 xfce4-panel xfdesktop xfsettingsddbus-run-sessionxauthxdpyinfo setxkbmapxpropapttigervnc-standalone-server xfdesktop4xfce4-settingsdbus-x11 x11-utils x11-xkb-utilsdnftigervnc-x11-server dbus-daemonxorg-x11-xauthpacmantigervncdbus xorg-xauth xorg-xdpyinfoxorg-setxkbmap xorg-xpropcV^8dQhRR/#)returnr)formats">/home/ubuntu/.hermes/hermes-agent/tools/bot_desktop/runtime.py __annotate__r,Ks--4-c$\4R, #)z bot-desktoprr)r-r+ state_dirr/Ks  } ,,r-cV^8dQhRR/#r'r(boolr))r*s"r+r,r,Os,,4,r-c@\PPR4#)linux)sysplatform startswithr)r-r+is_supported_hostr8Os << " "7 ++r-cV^8dQhRR/#)r'r( list[str]r))r*s"r+r,r,SsEE)Er-cl\Uu.uFp\P!V4eKVNK! up#uupiN)REQUIRED_BINARIESshutilwhich)bs r+missing_binariesrASs(( D(!FLLOAA( DD Ds11cV^8dQhRR/#r'r( Optional[str]r))r*s"r+r,r,Wsr-cnRF.p\P!V4'gK!VR8XdRu#Tu# R#)apt-getrN)rFrr)r>r?)pms r+package_managerrHWs1* <<  )O5 3 3+ r-cV^8dQhRR/#rCr))r*s"r+r,r,^s111r-c\4pVfR#RP\V,4pRRV 2RRV 2RRV 2/V,p\4'dV#R V 2#) a0The distro command that installs the Bot Desktop packages, as the human would type it on THIS host: prefixed with ``sudo`` unless Hermes already runs as root, so it is both what the pane shows and what :mod:`tools.bot_desktop.install` runs. ``None`` when no package manager is present. Not a promise that it can run here: see :func:`installable`. The published Docker image supervises every service under ``s6-setuidgid hermes`` (UID 10000 by default) and ships no ``sudo`` binary, so an install on a hosted instance is impossible no matter what this returns.N rz+apt-get install -y --no-install-recommends rzdnf install -y rzpacman -S --needed --noconfirm zsudo )rHjoinPACKAGESis_root)rGpkgsbodys r+install_commandrQ^sv  B z 88HRL !D r?r)r-r+ installablerZvs.  9 8 8 V,D88r-c]tRt^t$R]R&R]R&R]R&R]R&R]R&R ]R &R ]R &R ]R &R]R&R ]R&R ]R&RtR ]R&RtR ]R&RtR ]R&RtR]R&Rt R]R&RRlt Rt R#) DesktopStatusstrprofiler2 supported installedr:missingrunning Optional[int]pidrDdisplaysocketgeometryrQbrowserNblockermemory_available_mbmemory_limit_mbgatewayr zOptional[dict[str, object]] image_switchcV^8dQhRR/#)r'r(zdict[str, object]r))r*s"r+r,DesktopStatus.__annotate__s##*#r-c ,\VP4#r<)dict__dict__)selfs&r+as_dictDesktopStatus.as_dictsDMM""r-r)) __name__ __module__ __qualname____firstlineno____annotations__rirjrkr rmrt__static_attributes__r)r-r+r\r\s} LOO  M   M"" !G]!)--%)O])Is04L-4##r-r\c V^8dQhRRRR/#)r'pathrr(rDr))r*s"r+r,r,sr-c|VPRR7P4;'gR# \dR#i;i) utf-8-sigencodingN) read_textstripOSErrorr}s&r+_readrs;~~{~399;CCtC s&,, ;;c V^8dQhRRRR/#)r'rdintr(r2r))r*s"r+r,r,sCDr-c^RIpVPV4P4VP8g# TPdR#i;i)zA zombie is dead for our purposes: a SIGKILLed launcher stays a zombie in the gateway until the next Popen reaps it, and reporting it as running would hide its orphaned X server behind a live status.NF)psutilProcessstatus STATUS_ZOMBIEErrorrdrs& r+ _pid_aliversE~~c"))+v/C/CCC <<s+2AAc V^8dQhRRRR/#)r'rdrr(Optional[float]r))r*s"r+r,r,scor-c^RIpVPV4P4# TP\\ 3dR#i;i)N)rr create_timer OverflowError ValueErrorrs& r+ _create_timers?~~c"..00 LL- 4s%AAcV^8dQhRR/#r'r(rcr))r*s"r+r,r,s a a} ar-cv\\4R, 4pT;'gRPR4wrpVP4'd V'gR#\ V4\ V4rT\T4pTe*\Ye, 4R8d\T4'dT#R# \ dR#i;i)aThe live launcher's pid, or None. ``launcher.pid`` holds ``" "``: a recycled pid with a different start time is somebody else's process and must never be reported as ours nor killed by :func:`stop`. The pre-identity single-number format is treated as not running. launcher.pidrKNg{Gz?) rr/ partitionisdigitrfloatrrabsr)rawpid_s_born_srdbornactuals r+ _launcher_pidrs  n, -C r,,S1Ef ==??&Jf T# F$V]);d)BzRU3`\`` sB)) B87B8cV^8dQhRR/#rr))r*s"r+r,r,s>> >r-c\\4R, 4;'gRPR4wrpVP4'dV'd \ V4#R#)zbThe pid ``launcher.pid`` names, alive or not (the orphan sweep matches process groups against it).rrrKN)rr/rrr)rrrs r+_recorded_launcher_pidrsFikN:;AArLLSQEfV3u:==r-z/tmpz/proc/net/unixc V^8dQhRRRR/#)r'numrr(rcr))r*s"r+r,r,sS]r-c\\RV R2, PRR7P44# \\ 3dR#i;i).X-lockrrN)r _X_LOCK_DIRrrrr)rs&r+ _x_lock_pidrsMKBse5/1<`` (abstract namespace) bound for its whole life; the kernel drops it only when the process exits. A /tmp reaper can remove the lock file under a live Xvnc, and only this binding then still says the number is taken (a new server on it dies 'already running').rrFc3<"TFHqP4'gKVP4R,PR4RS 28HxKJ R#5i)@z/tmp/.X11-unix/XN)rsplitlstrip).0liners& r+ "_x_socket_bound..sBjTYD]g]g]iGtzz|B&&s+1A#/GGTYs A4AT) _X_UNIX_TABLEr splitlinesrany)rlinessf r+_x_socket_boundrse'''=HHJ 3jTYj33j3j3jTYj jj s$A!! A0/A0c V^8dQhRRRR/#rr))r*s"r+r,r,sIIIIr-cl\V4pVRJ;'d\V4;'g \V4#)zA live X server owns ``:num``: its lock file names a running pid, or its X11 socket is bound. A lock left by a crashed server (dead pid, no socket) does not count, so the number can be reclaimed.N)rrr)rrds& r+_display_in_users1 c C tO / / 3 H HOC4HHr-c V^8dQhRRRR/#r'sdrr(r2r))r*s"r+r,r,s##d#t#r-caa^RIpRV3Rllo\SR, 4pV'd+VP4'd\\ V44MRpVe\ V4'g-\ V3RlVPR.44R4pVfR#\4p\P!V4pVPV4P4pYT8wdS!T4'gR#\P!RYCT;'gR 4\#YT8XdTMRT4T'd"\$R T R 2, P'R R 7RFpST, P'R R 7K R # \TP3dR#i;i)u$Caller holds ``start.lock`` and has established that no live launcher exists. The launcher runs Xvnc in its own session, so a SIGKILLed launcher leaves the X server alive, holding the display and ``rfb.sock``; ``status()`` keys on the launcher and says stopped, and a naive restart allocates a second server next to it and overwrites the socket path both now claim. The X lock of the recorded display names that server: it is ours when it sits in the dead launcher's process group or its command line binds OUR socket. When a /tmp reaper took the lock too (or the failed launch dropped ``display``), the socket path on the Xvnc command line is the remaining handle — without it one X server leaks per occurrence. Kill it (group first), drop the state it left, and report whether anything was signalled.Nc V^8dQhRRRR/#)r'cmdlinelistr(r2r))r*s"r+r,+_reap_orphaned_server..__annotate__sff4fDfr-c<R\V'd V^,MR4P9;'d\SR, 4V9#)r rrfb.sock)rnamer])rrs&r+_binds_our_socket0_reap_orphaned_server.._binds_our_sockets8Ggaj<AAAeec"z/FZ^eFeer-rec3<"TF<pS!VPR,;'g.4'gK.VPxK> R#5i)rN)inford)rprs& r+r(_reap_orphaned_server..s7r#CaGXYZY_Y_`iYjYpYpnpGqEAEE#Cs A AArFzRBot Desktop launcher %s is gone but its X server (pid %s) survived on :%s; reaping?rrT missing_okrenvr)rrrrrrnext process_iterrrVgetpgidrrProcessLookupErrorrloggerwarning_kill_group_then_waitrunlink) rrrecordedrdlauncherpgidrrrs f @r+_reap_orphaned_serverrsLffR)^$H(0X5E5E5G5G+c(m $TC {*S//r6#6#6 {#Crtxy ;%'Hzz#..%--/  1' : : NNg(//c3$"2$cB H:U+ +33t3D3 dd+4   -s"5E//F  F c(V^8dQhRRRRRRRR/#) r'rrcrdrgracerr(Noner))r*s"r+r,r,s)$$ $C$$PT$r-caaRVV3RllpRVV3RllpRV3RllpV!\P4\P!4V,p\P!4V8d/V!4V!4'gR#\P!R4KHV!\P 4\P!R 4V!4R#) zUSIGTERM the group (or the lone pid), SIGKILL whatever is still there after ``grace``.c V^8dQhRRRR/#)r'sigrr(rr))r*s"r+r,+_kill_group_then_wait..__annotate__s""S"T"r-c<\P!\\4;_uu_4Se\P !SV4M\P !SV4RRR4R# +'giR#;ir<) contextlibsuppressrPermissionErrorrVkillpgkill)rrrds&r+_signal&_kill_group_then_wait.._signalsI  !3_ E E $$S! F E E Es 4A'' A8 cV^8dQhRR/#r1r))r*s"r+r,rs  D r-c<Sf \S4#\P!S^4R# \dR#\dR#i;i)NFT)rrVrrr)rrdsr+_anything_left-_kill_group_then_wait.._anything_leftsK <c? "  IIdA   "   s+ AAAAcV^8dQhRR/#r'r(rr))r*s"r+r,r#s((4(r-c<\P!\\4;_uu_4\P !S\P 4RRR4R# +'giR#;ir<)rrChildProcessErrorrrVwaitpidWNOHANG)rdsr+ _reap_if_ours,_kill_group_then_wait.._reap_if_ours#s: !2G < < JJsBJJ '= < < >?s0 B<0 C+< C(C##C(+ D6DDcV^8dQhRR/#r'r(r]r))r*s"r+r,r,s   r-c\P!4pVP\P8Xd\ VP 4hVP\P 8Xd\P #\4'd \4PR4'g \4\P#)uWhere the browser / cua-driver a tool is about to spawn MUST run: ``placement.GATEWAY`` or ``placement.TERMINAL``. Policy first, liveness second: a ``terminal`` placement whose screen is down gets it started here (raising with the blocker when it cannot come up) and a ``refused`` placement raises its reason. Neither ever yields the host — a screen that happens to be down is not permission to run the agent's browser outside the sandbox the user chose.r<) r r>r?r@rreasonGATEWAYsandbox_screen_runningr3r=rBrA)r?s r+tool_placementrMs}    E {{i'''5<<(( {{i'''   ! # #=?+>+>y+I+I    r-c V^8dQhRRRR/#)r'rr.r(r2r))r*s"r+r,r,s..N.t.r-c(\4'd/VPR4'gVPR4'dR#\4'dR#^RIHpV!4PR4;'g/p\ VPRR44#)r<r0Fload_config_readonly bot_desktop auto_start)r8r=rAhermes_cli.configrQr2)rrQcfgs& r+rDrDsk   #'')"4"4@Q8R8R6  $ $] 3 9 9rC  e, --r-cV^8dQhRR/#rr))r*s"r+r,r,s   r-c\4R, pVP4\P!VR4R# \dR#i;i)activityN)r/touchrVutimerrs r+r4r4s< ; #D   t    s'< A  A cV^8dQhRR/#)r'r(rr))r*s"r+r,r,sor-cRFQp\R\P!4\4V, P4P, 4u# R# \ dKei;i)zSeconds since the last stamped use; None when the screen never recorded one (falls back to the env file's publish time so a screen started and then forgotten still ages).N)rXr)maxrr/statst_mtimer)rs r+ idle_secondsrasZ$ sDIIK9;+=*C*C*E*N*NNO O$    sA A A)(A)cV^8dQhRR/#)r'r(rr))r*s"r+r,r,s""5"r-c^RIHpV!4PR4;'g/p\VPR\44p\RV4^<,# \ \ 3d \pL,i;i)rrPrRidle_stop_minutesr])rTrQr=rDEFAULT_IDLE_STOP_MINUTES TypeErrorrr^)rQrUminutess r+idle_stop_secondsrhsk6  $ $] 3 9 9rC, 35NOP sG r !! z ",+,sAA43A4cV^8dQhRR/#r1r))r*s"r+r,r,s  d r-c6\4pV^8:g\4'gR#\4pVeW8dR#^RIHpVP 4P VP8XdR#\PR\4V^<, 4\4#)zpStop this profile's screen when it has been idle past the limit and no human holds it. True when it was stopped.F)leasez6Bot Desktop for profile %s idle for %.0f min; stopping) rh is_runningratools.bot_desktoprkr=holderHUMANrr _profile_namestop)limitidle _bd_leases r+ stop_if_idlerusn  E z >D |t|4}}0 KKH-/[_bd[de 6Mr-cV^8dQhRR/#r'r(r.r))r*s"r+r,r,s~r-cd^RIHpVP4'd \4#\ 4f/#\ \ 4R, 4pV'g/#/pVP4FApVPR4wrEpV'gK!VP4W$P4&KC V#)adVariables the launcher wrote once Xfce's private bus existed; empty when the desktop is down. Pure file reads on the common path: this is called from every browser / cua-driver env builder, so it must not load config (that initializes HERMES_HOME). A sandbox-hosted screen leaves a host-side marker at start; only its presence routes to the sandbox probe. sandbox_hostr=) rmrz _read_marker_sandbox_published_envrrr/rrr)rzroutrkeysepvalues r+r3r3s /  ""%''  e# $C  C ..-% 3${{}C ! Jr-cV^8dQhRR/#)r'r(zOptional[Path]r))r*s"r+r,r,sKKKr-c^RIHpVP4'dR#\4R, p\ 4eVP 4'dV#R#)zHost path of the RFB socket; None when down OR when the screen lives in a sandbox (use :func:`open_rfb_stream` there: the socket is not on this filesystem).ryNr)rmrzr|r/rexists)rzsocks r+rfb_socket_pathrsA/  "" ; #D ?.4;;==4JdJr-cV^8dQhRR/#r1r))r*s"r+r,r,s;;D;r-cb\P!4P\P8H#)z]True when this profile's screen is placed inside the terminal backend (policy; reads config).)r r>r?rAr)r-r+ in_sandboxrs"     $ $ (:(: ::r-cV^8dQhRR/#r1r))r*s"r+r,r,sr-c^RIHpVP4pV'gR#\RR7eR#VP V4'dR#VP 4P RR7R#)uGTrue when a sandbox-hosted screen is UP for this profile: the start marker exists AND the sandbox it names is alive — registered in this process, or (after a gateway restart emptied the registry) the marker's recorded container still running. Only a sandbox that is provably gone (its container removed out from under us) drops the marker, so the next start rebuilds instead of the browser exec-ing into a dead container; an unregistered-but-alive one is re-attached by ``_sandbox_env(create=True)`` at the next spawn (the terminal planner reuses the persisted container by label).ryFcreateTr)rmrzr| _sandbox_envmarker_sandbox_alive_markerr)rzmarkers r+rLrLsZ/  & & (F 5!-((00!!T!2 r-c^RIHpVP4pV'gR#\RR7pVeV#VP V4'd \RR7#R#)zThe environment hosting the screen the marker records, re-attaching after a restart when the recorded sandbox is still alive; None when there is no marker or its sandbox is gone. Never builds a sandbox for a screen that is not there.ryNFrT)rmrzr|rr)rzrrs r+_owned_sandbox_envr sN/  & & (F  e $C  ((004(( r-cV^8dQhRR/#r1r))r*s"r+r,r,s00D0r-cF\\4PR44#)r<)r2r3r=r)r-r+rlrls  ##I. //r-cV^8dQhRR/#)r'r(zsubprocess.Popenr))r*s"r+r,r, s>>)>r-cx^RIHp\RR7pVf \R4hVP V\ 44#)z]Popen whose stdin/stdout carry RFB bytes for a sandbox-hosted screen (``in_sandbox()`` only).ryFrz.the sandbox hosting this screen is not running)rmrzrropen_rfb_streamrprzrs r+rr s5. e $C {KLL  ' ']_ ==r-cV^8dQhRR/#rHr))r*s"r+r,r,)s22#2r-c^RIHpV!4PR4;'g/p\VPR4;'gR4#)rrPrRrg1440x900)rTrQr=r])rQrUs r+rgrg)s<6  $ $] 3 9 9rC swwz"00j 11r-c V^8dQhRRRR/#r'r^rDr(r\r))r*s"r+r,r,/sM]r-c^RIHp^RIHp^RIHp\P !4pVP \P8XgVP4'd \W4#\4'd \4M\\4p\4p\4pVRJ;'d\!VP#R44p\4'dVP%4MVP'RR4p \)T;'g \+4\4V'*TTTVP#R4\-4'd\/\-44MR\14V'd \34MR\4'dVP54MRV'gV'g\4'gRMVP7V 4V P8V P:R7#)r)rh resourcesryNr<)r^r_r`rarbrdrerfrgrQrhrirjrk)rmrhrrzr r>r?rAr|_sandbox_statusr8rArr=rr3r2r= memory_info MemoryInfor\rprr]rgrQ executablememory_blocker available_mblimit_mb) r^ _bd_browserrrzr?rardrrbmems & r+rr/sU8+.    E {{i(((L,E,E,G,Gw../@/B/B)+M^H_G /C /Co::$swwy'9":G%6%8%8)   !i>R>RSWY]>^C **=?#%+  ")8):):s?$%-4)$,=,?,? &&(T72C2E2E9KcKcdgKh,,  r-c V^8dQhRRRR/#rr))r*s"r+r,r,Ps..].m.r-c^RIHp\4;'g \RR7pVeVP V4M.pVe$TP Y0;'g \ 44M/p\VPR44pRpRpV'dVPVP4;'gRVP RVP R2p R R PV4 R V ^,P4 V R , R 2pVPR8Xd^^RIHp V !4p V eMRV P RV P"R\%V P&4/pRV P RV P" R2p\)R(/RT;'g \ 4bRRbRRbRVbRVbRRbRVPR4bRRbR\+4bR RbR!RbR"VbR#RbR$RbR%\,P. R&VP 2bR'Vb#))zStatus of a sandbox-placed screen. Package presence is only known once the sandbox exists; before that the pane shows "installed" with the image hint carried in ``install_command`` so Start can explain.ryFrNr<zuse z as terminal.z8_image (the default sandbox base plus the desktop stack)z+The terminal backend's sandbox image lacks , z. :rNNz(, or set bot_desktop.placement: gateway.docker)pending current_image target_image containersz"Your sandbox container still runs z%, which has no desktop. Switch it to zh: files in /root and /workspace stay, packages installed inside the container are reinstalled on demand.r^r_Tr`rarbrdrerfrgrQrhrirjrkr :rmr))rmrzrrrAr3rpr2r=plugin_image_advicebackendSANDBOX_IMAGE_HINTrLupperhermes_cli.sandbox_image_switchrrrlenrr\rgr rA) r^r?rzrrar8rbrirmadvicersws && r+rrPsK/   < <,e"SUSbSb ,c"--.@ B ?@P@P?QR++-??*;-lock`` (a second profile picking the same number before that would fail and its stale-lock cleanup could remove our socket). Holding it for the whole Xfce bring-up serialized every profile's start behind one desktop launch.z,Bot Desktop runs on Linux gateway hosts onlyzBot Desktop needs rz on the gateway hostNz, and no supported package manager (apt/dnf/pacman) is available to install them. Install TigerVNC (Xvnc) and the Xfce core components with this distro's own tooling.z, and this host cannot install them: the process is unprivileged and there is no sudo. On the published Docker image the packages have to be baked in, so this needs a newer image rather than an install.z . Install: Tr%r&r# start.lockr<r)needz`Bot Desktop starting with %d MB available; a browser with a few pages open can use most of that.r$rer)%r r>r?r@rrJrA_start_in_sandboxr8rArLrHrZrQr/r*rVchmodrrr3r=rrmr min_free_mbrrrtight_headroom_mbrrrr(r)_spawn_and_waitr) rr?rarrrfloorrris $ r+rBrBsL    E {{i'''5<<(( {{i((( ..   IJJ G#DIIg$6#77KL   $&ggh h}}&667 7dV;/@.ABCC BHHTDH)HHR "|# $ $ ? &=?+>+>y+I+I8 % $ 0%%'##% ///@ @G Mw' '    'C,<,\FPIR#\4V4\K4\M4uuR R R 4#\4PN!R$4EK\QV P2V P24V PS4R+FpVV, PRR7K \AR%VR& R'VR, R(24h +'giR #;i),zcCaller holds ``start.lock``. Takes ``_ALLOC_LOCK`` itself, from picking the number to Xvnc's claim.rerrrTr)served_profile_child_envF)inherit_credentialsHERMES_REAL_HOMEHOMENHERMES_BD_PROFILEHERMES_BD_DISPLAY_NUMHERMES_BD_SOCKETrHERMES_BD_XAUTH XauthorityHERMES_BD_ENV_FILEHERMES_BD_CONFIG_HOMExdgHERMES_BD_GEOMETRY)dock_exec_line dock_launchHERMES_BD_BROWSER_EXECHERMES_BD_BROWSER_EXEC_LINEz launcher.logwbbash)rstdinstdoutstderrstart_new_session close_fdsrrKreplacez!Bot Desktop launcher exited with z: z$Bot Desktop for profile %s up on :%srz/Bot Desktop did not publish its display within z.0fzs (see ))r< XAUTHORITYr0DBUS_SESSION_BUS_ADDRESSSESSION_MANAGERi0r)*r ExitStack enter_contextrr(r  write_textr]rtools.environments.localrr6r5rprgr7rrr subprocessPopen _LAUNCHERDEVNULLcloserrdrr rpoll read_bytesdecoder returncoderrrr4rr rwait)rrallocrenv_filer child_envrrrrhlogprocrr tailrs&& r+rrs     5 H[12o i##CHw#?:4( F,G %&89 &nC MM#t $o  #SX BO 4 s2 #45 #h- #Se_ (*   J"} $G 129!*I. /7Ew7OI3 42&- S^ $):;M;MVY"d4 DHH% n ((DHH:Qt?OtUV6W)Xcj(k>>#l2nn)3+ yy{&^+779%&AHHR[\"%FtFWWZ[_Z`#abb  b:o%=%=%?%? BMOUXY x_ ` JJsO dhh1 7D $Y  $  /8L\Z]L^^efhkyfyezz{|}}q  sJN4N2NBN N$ cV^8dQhRR/#)r'rr2r))r*s"r+r,r, s99D9r-c0\P!VR7#)zThe terminal environment hosting this profile's screen, or None. ``create=False`` for status probes (a status call must never build a container).r)r terminal_environmentrs$r+rr s  ) ) 88r-c V^8dQhRRRR/#rr))r*s"r+r,r,sEmr-c ^RIHp\RR7pVf \R4h\ 4pVP RRR7\ P!VR4\VR, 4;_uu_4^R I H pVPV4pV'dWT!WQPV4RR 73MRpVPV\4\4\!VR 4V^,V^,R 7pRRR4VR , P#RP%RXP'444RR7\)4\+4# +'giLb;i)rryTrNzZthe terminal backend's sandbox could not be started, so there is nowhere to put the screenrr#r)r)sandbox_bypassg4@)rgr browser_execbrowser_exec_linerrc36"TFwrV RV R2xK R#5i)r{ Nr))rkvs& r+r$_start_in_sandbox..s #O=NTQqc1#RL=Nsrr)NN)rmrzrrr/r*rVrrr7rchromium_executablebrowser_profile_dirrBrprgr^rrLitemsr4r)rrzrrrexerhr8s& r+rrs. d #C {wxx BHHTDH)HHR "|# $ $ =..s3lo3s,L,LS,QbfghvB &&sMOhj_bcoqu_v4;AJRYZ[R\'^ %%ZBGG#OY__=N#OOZab 8O % $s 0A;E E cV^8dQhRR/#rwr))r*s"r+r,r,$s<<r?rArrqrprrr/r8r*r _stop_locked)rzrstoppedrrs r+rqrq-s/  ""i&7&7&9&?&?9CUCU&U!"=@_,##C9RW%%%6'D [4  ' '4 ' 8(    BHHTDH) "|# $ $B % $ $ $s  D$$ D5 c V^8dQhRRRR/#rr))r*s"r+r,r,Bs  T d r-c\4pVf'\V4pVR, PRR7V#\WRR7RFpW, PRR7K R#)NrTrg@)r)rrrX)rrrr)rrdreapedrs& r+rrBs\ /C {&r* et, ##.3 d+4 r-) r r r r rrrrrr) rr r rrxfce4-terminalrzx11-xserver-utilsrrrzfonts-dejavu-core)rr r r rrrxsetrootxsetrrrrzdejavu-sans-fonts)r r r r rrr!z xorg-xsetrootz xorg-xsetr#r%r"r$z ttf-dejavu)g@r<)X__doc__ __future__rrloggingrVr>rrr5r dataclassesrpathlibrtypingrrhermes_constantsrrmr getLoggerrvr__file__ with_namerrrr=BINARY_PACKAGESrMr/r8rArHrQrNrZr\rrrrrrrrrrrrr2r=homer(contextmanagerrr r+r9rFrMrDrer4rarhrur3rrrLrrlrrgrrrprBrrrr}rqrr)r-r+r,s #  !!,'   8 $ N $ $] 3   l@ F0'7MS` }6FHZ\f Wj+{OU\^i k  F)7G]M m5EGY[h %z:{KY`bi k vz7G]MS^`k.0BF j/;P`bikwy   !  !  -,E1(8 9 ## #, a > 6l %&  kI#L$T2::>>"34NN h8NORqq  44 K ?:  . "  ,K; &  0>2 B.b:4:z:~z9 *< * r-