+ lHjo3aR+t0tRt^RIt^RIt^RIt^RIHtHt]P!] 4t ]!4t ] Pt ] PtRt]P !4tRRltRRlt] !R4]R R l44t] !R 4]R R l44t] !R4]RRl44t] !R4]RRl44t]P*!4t]^k]!4t]^kRRltRRltRRlt] !R4]RRl44t] !R4]RRl44t] !R 4]R!R"l44t] !R#4]R$R%l44t] !R&4]R'R(l44tR)R*ltR#),uiBot Desktop JSON-RPC handlers: the Desktop app's door to a profile's headless screen. ``display.status`` reports runtime + lease; ``display.start`` / ``display.stop`` manage the Xvnc/Xfce process; ``display.observe`` mints a single-use ticket the renderer redeems on ``/api/display/ws`` (``hermes_cli.web_routers.display``) to stream raw RFB; ``display.lease.acquire`` / ``release`` are Take over / Hand back. ``display.install`` runs the distro package install on the gateway host: sudo privilege is asked for through the masked ``display.install.sudo`` server→client request (same ``_ask`` bridge as the terminal tool's sudo prompt), stdout streams as ``display.install.log`` and the run ends with ``display.install.done`` carrying a fresh status snapshot. Every handler is profile-scoped so a multiplexed gateway answers for the bot the pane is looking at. Lease transitions fan out as the global ``display.lease`` event so every connected client repaints (badge on the bot row, red border on the viewer, agent handoff prompt). Bodies are rebound onto server.py's globals (method_ctx.bind_module) and reference them bare. N)HandlerRegistry bind_moduleic$V^8dQhR\/#returndict)formats"@/home/ubuntu/.hermes/hermes-agent/tui_gateway/methods_display.py __annotate__r soo4oc^RIHp^RIHpHpVP 4p/VP 4CRVPVP44RV!4/C#)hermes_home_keyleaseruntimer profile_key) hermes_constantsrtools.bot_desktoprrstatusas_dict public_viewget)r _bd_lease _bd_runtimests r _display_snapshotrsG0L    B nbjjl nGY%:%:9==?%K]\k\m nnr cV^8dQhRR/#rrN)r s"r r r &s $ $ $r ca\P4'dR#^RIHoRV3RllpSP V4\P 4R#)zHOnce per process: broadcast every lease change to all connected clients.Nrc(V^8dQhR\RR/#)rrrNstr)r s"r r -_install_lease_listener..__annotate__,svvvtvr c F<\RRVRSPV4/4R#)z display.leaserrN)_broadcast_global_eventr)rrrs&&r _on_change+_install_lease_listener.._on_change,s#-gW`WlWlmrWs1tur )_lease_listener_installedis_setrr on_changeset)r+rs @r _install_lease_listenerr1&s> ''))4vv  #!!#r zdisplay.statusc0V^8dQhR\R\/#rparamsrr)r s"r r r 4s//4/D/r c\4\V\44# \d%p\ T\ \ T44uRp?#Rp?ii;iN)r1_okr Exception_err _DISPLAY_ERRr')ridr4es&& r _r=2sC/3)+,, /Cs1v../s AA A Azdisplay.thumbnailc0V^8dQhR\R\/#r3r)r s"r r r >s//4/D/r c^RIHpVP4pVPVP8Xd\ VRRRR/4#^RIHpV!4pVP4PVP8wd\ VRRRR/4#\ VRV/4# \d%p\T\\T44uRp?#Rp?ii;i)uuOne JPEG grab of the bot's screen (``data_url``: null while stopped). Read-only: no lease change. Suppressed while a human holds the lease — the frame may show what they are typing — and when the lease moved DURING the grab: a takeover racing the framebuffer read means the frame may already be the human's session, so it is dropped rather than shipped to every client.r$data_urlN suppressedhuman_has_control)thumbnail_data_url) rrrholderHUMANr7tools.bot_desktop.thumbnailrCepochr8r9r:r')r;r4rbeforerCr@r<s&& r r=r=<s /8 ==IOO +sZ|=PQR RB%' ==? FLL 0sZ|=PQR R3X.// /Cs1v../s+ABAB B C"C;CCz display.startc0V^8dQhR\R\/#r3r)r s"r r r Ss//4/D/r c\4^RIHpVP4\ V\ 44# \ d%p\T\\T44uRp?#Rp?ii;i)rrN) r1rrstartr7rr8r9r:r')r;r4rr<s&& r r=r=QsR8/3)+,, /Cs1v../s#6 A%A A% A%z display.stopc0V^8dQhR\R\/#r3r)r s"r r r _s//4/D/r c^RIHpHp\VP R44pVP V'*R7P VP8Xd\V\RRR/R7#VP4p\V/\4CRV/C4# \d%p\T\\T44uR p?#R p?ii;i) zStopping kills the screen under whoever is on it, so it obeys the same rule as a bare display.lease.release: refused while a human holds unless the caller says ``force``.rforce unless_humanz=a human holds this screen; pass force: true to stop it anywaycodeviewer_mismatchdatastoppedN)rrrboolrreleaserDrEr9r:stopr7rr8r')r;r4rrrOrVr<s&& r r=r=]s M G$ %E%i0779??JC'f "346 6/""$3C,.C 7CDD /Cs1v../s))B CB=7C=Cc:V^8dQhR\\,/#r)r0r')r s"r r r xs&&SX&r c~\P\4\44# \d \ u#i;ir6)_minted_viewer_ids setdefaultcurrent_transportr0 TypeError_unweakable_minted_idsr"r r _minted_for_this_connectionraxs5&!,,->-@#%HH &%%&s %(<<c0V^8dQhR\R\/#)r requestedrr&)r s"r r r s  s s r cv^RIp\4pW9dV#VP^4pVPV4V#)zServer-minted viewer identity. ``requested`` is honoured only when THIS connection minted it earlier; anything else (including a holder id read off display.status) gets a fresh id.N)secretsra token_urlsafeadd)rcremine viewer_ids& r _mint_viewer_idrjs= & (D%%b)IHHY r c$V^8dQhR\/#)rrir&)r s"r r r s22s2r cNV\49dR#\V\RRR/R7#)uThe error for a viewer id this connection never minted, or None. acquire/release take the id as a capability, so one a caller invented or read off the wire must be refused — otherwise the minting only shapes the honest path and a made-up id still evicts or releases the human.NzHviewer_id was not minted for this connection; call display.observe firstrRrSrT)rar9r:)r;ris&&r _foreign_viewer_idrms0/11 \#m/0 22r zdisplay.observec0V^8dQhR\R\/#r3r)r s"r r r s//4/D/r c ^RIHp^RIHp^RIHpVP 4f(VP4'g\V\R4#\\VPR4;'gR4P44pV!RV 2R R \V!44RV/R 7p\VR VR RRV/\4C4# \ d%p\T\\T44uRp?#Rp?ii;i)aMint a single-use, 30 s ticket for ``/api/display/ws``. The ticket carries the profile home so the bridge dials THIS profile's RFB socket, and a server-minted viewer id (returned to the caller, who passes it to ``display.lease.acquire`` / ``release``) so the lease can name the holder.)get_hermes_home) mint_ticketrKNzCthis profile's Bot Desktop is not running; call display.start firstrizdisplay:z bot-desktop hermes_home)user_idproviderextraticketpathz/api/display/ws)rrp$hermes_cli.dashboard_auth.ws_ticketsrqrrrfb_socket_pathsandbox_screen_runningr9r:rjr'rstripr7rr8)r;r4rprqrrirwr<s&& r r=r=s 1@8 /  & & ( 09[9[9]9]\+pq q#C ;(?(E(E2$F$L$L$NO x {%;m$137H3I;Xa#bd3663DkS\0,.01 1 /Cs1v../s/'CC !C/AC C3C.(C3.C3zdisplay.switchSandboxImagec0V^8dQhR\R\/#r3r)r s"r r r s D D4 DD Dr c ^RIHpHpV!4pVf\V\R4#V!V\ VP RR44R7p\VRV/\4C4#)aThe Screen pane's answer to the pending default-image switch: ``approve`` true pins the new image (the container is recreated on the next terminal call), false pins the current one. Both end the offer. Refused when nothing is pending, so a stale pane cannot rewrite the config.)decidependingz3no sandbox image switch is pending for this profileapproveT)r docker_image) hermes_cli.sandbox_image_switchrrr9r:rWrr7r)r;r4rrswimages&& r r=r=s[ @ B zC'\]] 2tFJJy$$?@ AE s^UB.?.AB CCr zdisplay.installc0V^8dQhR\R\/#r3r)r s"r r r s,m,m4,mD,mr c aa a a ^RIHp^RIHo HpVP 4'g\ V\R4#VP4'd\ V\R4#VP4f\ V\R4#V!4o RV 3RlloR V 3R llo ^RI pVP4pR VV V V 3R llpS P4\P !TP"T3R S 2RR7P%4\'TRRRTP4RS /4# S Pd%p\ T\\T44uRp?#Rp?ii;i)zStart the package install in the background; the renderer follows ``display.install.log`` / ``display.install.done``. Refused while one is already running for this profile.r)installrz,Bot Desktop runs on Linux gateway hosts onlyzthis profile's screen lives inside the terminal backend's sandbox; give that sandbox an image with the desktop stack (nousresearch/hermes-sandbox:desktop) instead of installing on the gateway hostNz@no supported package manager (apt-get, dnf, pacman) on this hostc$V^8dQhR\/#rr&)r s"r r _..__annotate__s[[3[r c&<\RRRS/RR7#)zdisplay.install.sudorrri,)timeout)_ask)rsr _ask_password_.._ask_passwords*B 0LVYZZr c(V^8dQhR\RR/#)rtextrNr&)r s"r r rsccCcDcr c(<\RRSRV/4R#)zdisplay.install.logrlineN)r*)rrs&r _line_.._lines 5 {TZ\`7abr cV^8dQhRR/#r!r")r s"r r rsYY$Yr c <SPSSRR7p\RRSRVR\4/4R# \dpS!RT 24^pRp?L9Rp?ii;i)T) ask_passwordon_lineclaimedzinstall failed: Nzdisplay.install.donerrRr)install_packagesr8r*r)rRr<r _bd_installrrs r _run_.._runso //]TYcg/hD 6 U[]a9ACTCV9X Y  $QC( )D s3 A AAzbot-desktop-install:T)targetargsnamedaemonstartedcommandr)rrrrris_supported_hostr9r: in_sandboxinstall_command contextvars copy_contextclaim InstallBusyr' threadingThreadrunrLr7) r;r4rrrctxrr<rrrrs && @@@@r r=r=sA 1P  ( ( * *C'UVVC(ST T""$,C'ijj!#K[[ cc   " " $CYY/CGG4':N{m8\eijppr sYi1L1L1NP]_jk ll  " "/Cs1v../s>D$$E5EEEzdisplay.lease.acquirec0V^8dQhR\R\/#r3r)r s"r r r s==4=D=r cj^RIHp\VPR4;'gR4P 4pV'g\ V\ R4#\W4;peV#TPT\VPR4;'gR4R7p\VRVPV4/4#)rr$rirrzviewer_id requiredreason)rr) rrr'rr|r9r:rmacquirer7rr;r4rrirefusedrs&& r r=r=s5FJJ{+11r288:I C';<<%c55B   iFJJx4H4N4NB0O  PE sWi33E:; <kg=x   i46G6c6cPVPZPZ[bPcLc  dEU\\Y__<C's "346 6 sWi33E:; <?]c h)(C(i r )r__doc__loggingrr method_ctxrr getLogger__name__logger _registrymethodprofile_scoped_profile_scopedr:Eventr-rr1r=rr\r0r`rarjrmrr )rs@r rs 4   8 $     ** %OO-o $////&////&CJB[B[B]]$'5(& 2//($% D& D,m,m^ =!=  =! =0r