+ lHjNTa0t$Rt^RIHt^RIHt^RIHtHt]!4t RRlt RRlt Rs R ] R &R R ltR RltRRltRRltRRltRRlt/tR] R&RRltRRltRRltRR ltR!R"ltR#tR$R%ltR&R'ltRSt/tR(] R)&R*R+lt] !4t!R,t"R-t#R.t$R/t%R0t&Rs'R1] R2&R3R4lt(^s)R5t*R6t+R7R8]]3R9R:R;],3RR8R?],3R@R8]$],3RAR8]%],3RBR8]+],3RCR:]*],3/t-RD] RE&RRF/t./t/RG] RH&/t0RI] RJ&/t1RI] RK&RTRLRMllt2RNs3RORPlt4RQRRlt5R#)UzSkin + config-change watcher: on-disk signatures for skin/pet/cron/sessions/platforms/ pairing/bot-relay state and the broadcast loop that pushes *.changed events. Bodies are rebound onto server.py's globals at install time (method_ctx.bind_module).) annotations)Path)HandlerRegistry bind_modulecV^8dQhRR/#returndict)formats"?/home/ubuntu/.hermes/hermes-agent/tui_gateway/change_watcher.py __annotate__rs%%d%c(\\44#N) skin_payload _load_cfgr rr resolve_skinrs  $$rc V^8dQhRRRR/#)rconfigr r r )r s"r rrs$rc^RIHpHpV!V4V!4pRVPRVPRVP RVP RVPRVPRVPR VPR VP;'g/PR R 4R VP/ # \d/u#i;i) zThe ``skin.changed`` / ``gateway.ready`` skin for ``config``'s ``display.skin`` (``{}`` when the skin engine fails). Pure of server state: the shared owner calls it under the profile's scope.)init_skin_from_configget_active_skinnamecolors light_colors dark_colorsbranding banner_logo banner_hero tool_prefix help_header customCSS)hermes_cli.skin_enginerrrrrrrrr r!get custom_css Exception)rrrskins& r rrsQf%  DIIx D--}d>N>N  }d6F6F 4++]DActive profile home for the change watcher's signature probes.)get_hermes_home_overrider isinstancestr _hermes_home)overrides r _watcher_homer2+s+')H Jx55( UU UUrcV^8dQhRR/#)rpathrr )r s"r rr1sDrc\VP4P# \dR#i;i)z?``st_mtime_ns`` of ``path``, or None when it cannot be stat'ed.N)stat st_mtime_nsOSError)r4s&r _watcher_mtime_nsr91s+yy{&&& s  ++cV^8dQhRR/#)rpartsr/r )r s"r rr9s??3?rcD\\4P!V!4#r)r9r2joinpath)r;s*r _home_mtime_nsr>9s ]_55u= >>rcV^8dQhRR/#)rr z int | Noner )r s"r rr=sZZzZrcF\R\\V44RR7#)zSMax ``st_mtime_ns`` across ``paths`` (unstat-able ignored); None when none stat'ed.c30"TF qfKVxK R#5irr ).0ms& r #_newest_mtime_ns..?sJ8a8s Ndefault)maxmapr9)pathss&r _newest_mtime_nsrK=s J30%8JTX YYrcV^8dQhRR/#rr tupler )r s"r rrBs " " "rc>.pVFnp\P\4;_uu_4VP4pVP \ V4VP VP34RRR4Kp \\V44# +'giK;i)zSorted ``(path, mtime_ns, size)`` per stat-able file in ``paths``. For multi-file signatures, unlike a newest-mtime max: a file added, removed or rewritten in the same timestamp tick as the current newest one (coarse-mtime filesystems) still moves it. N) contextlibsuppressr8r6appendr/r7st_sizerNsorted)rJentriesr4sts& r _files_sigrWBss G   ) )B NNCIr~~rzzB C* )  !!* ) )s AB  B cV^8dQhRR/#)rr ztuple[str, float | None]r )r s"r rrPs+rc"\\4PR4;'g/PR4;'gR4pV\4R, V R2, P 4P 3# \ dTR3u#i;i)z(active skin name, its user-file mtime). Built-ins have no file, so only their name moves; a user skin's mtime lets an in-place color edit repaint too.displayr)rGskinsz.yamlN)r/rr&r2r6st_mtimer8)rs r _skin_sigr]Ps~   *00b55f=JJ KDmo/TF%.@FFHQQQQ Tzs4A<<B Bz#dict[str, tuple[str, float | None]]_skin_sig_by_homecV^8dQhRR/#)rr z str | Noner )r s"r rr`s*rc\P\4;_uu_4\\ V44pVP 4'd\VP 4'dFVP4\\4P48wd\ V4uuRRR4#RRR4R# +'giR#;i)zXThe profile home a peer's skin follows, or None for the launch home (the ambient scope).N) rPrQr(rr/ is_absoluteis_dirresolver0) profile_idhomes& r _skin_home_forrf`sz   Y ' 'C O$     $++--DLLNdp\P\4;_uu_4VPV4RRR4K@ RRR4K R#uuppi +'giL;i +'giKz;i +'giEK;i)zEmit ``skin.changed`` when the active skin moved, via the SAME live path as ``/skin`` so every surface repaints. The check is a dict lookup + one stat per home.z skin.changedskipNr#)r~rPrQr(r]r*_broadcast_global_eventrvaluesitemsrmr^r& _event_framewrite)by_homesigr|peerreseenframes r _broadcast_skin_if_changedrs@"#G   Y ' 'k .  N #NLN.sZ*CPYGYuu*Cs zmtime-fallbackidz ORDER BY idr#zSELECT z, z FROM sessions) digest_sizezutf-8backslashreplace)rK with_namerr/rr&rhashlib hermes_staterhermes_state_holdersrexecuterN_SESSION_SIGNATURE_FIELDSjoinblake2bupdatereprencodedigestr(close_settled_mtime)rmtime cache_keycachedconnrrrrowfields signatureorderrowsrrs& @r _session_db_content_sigrs- g'8'8GLL>9N'OP QEG I # ' ' 2F fQi50ay >>  -2DMy) D49"#3G# (J9% 7T .  &)"7F1IaLL\<\!9    JJL &u- .   JJL sa 5G,G' G,6G,G,IB!G,<I'G,,8I$I;I?IIIIcB^RIHpVeV!V4'd\#V#)zX``mtime`` when it is old enough to trust as a cache key, else a never-matching sentinel.) mtime_is_racy)utilsr _RACY_MTIME)rrs& r rrs# } e,, Lrc\;QJd#.R\4.\O4FNK 5#!R\4.\O44#)a[Session-table content across the active and served profile stores. Messaging-gateway turns and cron runs are written by other processes that never touch this gateway's transports, so their session rows are the shared change signal. Hashing only those rows avoids false Desktop refreshes from unrelated state.db writes such as gateway heartbeats. c3F"TFp\VR, 4xK R#5i)zstate.dbN)r)rBroots& r rD _sessions_sig..s$=D z 122=s!)rNr2_served_profile_homesr rr _sessions_sigrsL 5"_='<=55"_='<= rcD\R\4.\O44#)u,Per-file stat signature of projects.db (+ WAL) for the watcher home and every served sibling profile. The CLI and other windows write projects.db directly — nothing in their process touches this gateway's transports — so the file is the only shared signal, exactly like state.db (#53046, #56757).c3D"TFpRF pW, xK K R#5i) projects.dbN)rzprojects.db-walr )rBrrs& r rD _projects_sig..)s(8=D6D 6 =s )rWr2rr rr _projects_sigr$s) 8"_='<=8 88rc h.p\\44Fvp\P\4;_uu_4TVP 4Uu.uF'q"P PR4'gK%VNK) up, pRRR4Kx \V4#uupi +'giK;i)zPer-file stat signature of every profile's pairing ledgers (legacy ``pairing/`` and ``platforms/pairing/``): the gateway process writes pending codes, so the files are the only shared signal (a pairing request moves nothing in gateway_state.json).N)z -pending.jsonz-approved.json) _pairing_rootsr2rPrQr8iterdirrendswithrW)rUres r _pairing_sigr/sG}/   ) ) <<>c)aVV__=`-a>c cG* )0 g c* ) )s#B "B 5B ; B B  B1 g>@z+tuple[Path, int | None, float, list] | None_pairing_roots_cachec V^8dQhRRRR/#)rrerr rwr )r s"r rrDs$rc.VR, p\V4\P4r2\pVe>V^,V8Xd0V^,V8Xd"W4^,, \8d V^,#^RIHpVR, VR, R, .p\P\4;_uu_4VP4F2pV!V4'gKWgR, VR, R, ., pK4 RRR4WW63sV# +'giL;i)profilesN)named_profile_is_livepairing platforms) r9time monotonicr_PAIRING_ROOTS_TTL_Shermes_constantsrrPrQr8r)re profiles_dir dir_mtimenowrrroots profile_dirs& r rrDs*$L&|4dnn6Fs !F fQi4/F1I4Js\]U^auOuay6 I tk1I= >E   W % %'//1K$[11 1;3Ly3XYY2 &!S8 L & %s/D#D D c \4pVPPR8XdVPPMTp\P \ 4;_uu_4VR, R, P 4FIpVPPR4'gK&\\\V4;'g^4s KK RRR4\;'gR# +'giL ;i)uNewest mtime across pending bot-relay outbox envelopes (monotone). Written by the AGENT process, so the files are the only shared signal; the Desktop reacts with a debounced drain. Envelopes are written by the AGENT process (``message_agent`` → ``tools.bot_relay.enqueue_envelope``) — a different process that never touches this gateway's transports — so the files are the only shared signal, exactly like the pairing store. See #92760, #93091. r bot_relayoutboxz.jsonN) r2parentrrPrQr8rrrH_bot_relay_outbox_seenr9)rerentrys r _bot_relay_outbox_sigrZs ?D!%!1!1Z!?4;;  TD   W % %[(83<<>Ezz""7++),-CEVW\E]EbEbab)c&? & " ) )T) & %sAC#$C# C## C3 c^RIHpV!4#)aThe skill roots' stat signature for every scope a session resolved commands in (each profile home and session repo, not only the launch one: ``agent.skill_commands.published_scopes_signature``): a skill installed or removed from another terminal (``hermes skills install``, a dropped SKILL.md, nested under a category) moves it, and attached clients refetch ``commands.catalog`` from this gateway instead of rescanning disk.published_scopes_signature)agent.skill_commandsrrs r _skills_sigrls @ % ''rz pet.changedg@z cron.changedg?c\RR4#)cronz jobs.jsonr>r rr r|s ."Erzsessions.changed?zplatforms.changedc\R4#)zgateway_state.jsonrr rr rrs ~6J'Krzprojects.changedzpairing.changedzskills.changedzbot_relay.outbox.pendingz!dict[str, tuple[float, Any, Any]]_CHANGE_WATCHESg@zdict[str, Any] _change_sigszdict[str, float]_change_checked_at_change_broadcast_atc V^8dQhRRRR/#)rrz float | Noner rpr )r s"r rrs99L9D9rcVf\P4MTp\P4Fwpwr#pV\P W)4, V8dK-V\V&V!4pT\9d T\T&KT\P TR4pT\T,8XdK~T'd%T\P Y)4, T8dKT\T&T\T&\P\ 4;_uu_4\Y!44RRR4K R# \ dEK i;i +'giEK!;i)zOne pass: recompute due signatures, broadcast events whose signature moved. First sighting seeds silently so a gateway boot never fires a refresh storm.Ng) rrrrrr&r(r_CHANGE_BROADCAST_FLOOR_SrrPrQr)reventintervalsig_fn payload_fnrfloors& r _broadcast_watched_changesrs"k$.. sC1@1F1F1H--* #''y9 9H D $'5! (C  $"%L  )--eS9 ,u% %  S/33E6BBUJ ! U&)U#   + + #E:< 8, +%2I    , + +s&D+ D>+ D;:D;> E FcV^8dQhRR/#ror )r s"r rrsVVdVrc\'dR#Rs\4RRlp\PVRRR7P 4R#)uStart the process's one change watcher (named for its original skin-only duty): cheap on-disk signatures → broadcast events, so changes go live without client polling. Idempotent.NTcV^8dQhRR/#ror )r s"r r*_ensure_skin_watcher..__annotate__s))4)rcZ\PR4\4\4K,)Tr)rsleeprrr rr _loop#_ensure_skin_watcher.._loops JJsO & ( & (rzhermes-change-watcher)targetrdaemon)_skin_watcher_startedrr threadingThreadstart)rs r _ensure_skin_watcherr s? ) E(?MSSUrcV^8dQhRR/#ror )r s"r rrs000rc2\\4VRR7R#)zQPublish this module's helpers + handlers onto ``server``, rebound to its globals.rN)_)rglobals)servers&r registerr&s 6/r)rsource session_keyrmodelparent_session_id started_atended_at end_reason message_counttool_call_countcwd git_branch git_repo_roottitle title_source profile_namearchivedpinnedhidden last_read_at handoff_stater)6__conditional_annotations____doc__ __future__rpathlibr method_ctxrr _registryrrr*__annotations__r2r9r>rKrWr]r^rfrmrrr~rrrrrrrobjectrrrrrrrrrrrr rr rrrrrr r&)r;s@r rCsN#4   %,37/6V ?Z ":<6;*)&0P  BD>C7|h  8 "DHAH&*$(C#78SEtLmT2#KTRmT2\40sK.&;T B 6D2 D"06I3O! n!')$))+&+94V"0r