+ Wjr Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ] PR8Ht RsRtRtRRltR R ltR>R R lltR Rlt!RR]P*P,]P*P.4tRRltRRlt^tR?RRlltRRltRRltRRltR?RRllt RR lt!]!4]!4]!4]!4^R!I"H#t#]#!]$4PK4PLt']PP!4R"R#lt+] !],!]'44R$R%lt-]-!4R&R'lt.].!4]+!] P^R(,4t0]0e^R)I1H2t2]0wt3t4]5!]2!]3]4R*74h!R+R,]54t6^R-I7H8t8H9t9^R.I:H;t;^R/I]>'g^R3I?H@t@HAtA]@!]'] P^R(,4tB]Be]C!] PPR44R5R4tF]A!]B]'] P^] P]C!]FR6R44tH]PR78Xd^RIJtJ]6!]JP!]H44h]P!],!]B4]H4];!]'4]8!]'4]!4]!!4R# ])d]PT!]'4ELi;i ]MdctN]O!]N]P4'd2]9!]']N4;tQ'd!]R!R8]Q 2] PR97]5!^4Rh]R!R:]N R;2] PR97RtNANLRtNANii;i ]T]U3dtN]O!]N]P4'd2]9!]']N4;tQ'd!]R!R8]Q 2] PR97]5!^4Rh]=!] P^R(,4R<,R1.8wd"]R!R8]N R=2] PR97]5!^4RhRtNANEL2RtNANii;i)@uProcess bootstrap for Hermes entry points: Windows UTF-8 stdio and ANSI console, import-path hardening, durable lazy-install target, and dual-stack (Happy Eyeballs) connects. Windows binds stdio to the console code page (cp1252), so ``print("café")`` raises ``UnicodeEncodeError``, and Python children inherit the same default unless ``PYTHONUTF8``/``PYTHONIOENCODING`` are set. Import this module first in every entry point (``hermes``, ``hermes-agent``, ``hermes-acp``, ``gateway.run``, ``batch_runner``, ``cron/scheduler``). It does NOT re-exec with ``-X utf8``: ``open()`` in the current process still needs an explicit ``encoding="utf-8"`` (ruff ``PLW1514``). POSIX is left alone deliberately — users' ``LANG``/``LC_*`` choices are respected. Stdlib only: entry points import this before ``harden_import_path()`` runs, so nothing here may pull in a Hermes package that a project-local directory could shadow. ) annotationsNwin32Fg?zurllib3.util.connectionc V^8dQhRRRR/#) addrinfosz list[tuple]return)formats"DC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_bootstrap.py __annotate__r !s  [ [ cL/p\4pVFHpVwrErgpWEWh3V9gKVPWEWh34VPV.4PV4KJ .p \ VP 44'd)V P RVP 444KGV #)z[Round-robin the resolved address families (deduped), preserving resolver order within each.c3V"TFq'gK VP^4xK! R#5iN)pop).0queues& r (_interleave_addrinfos..,sN_E<599Q<<_s )))setadd setdefaultappendanyvaluesextend) rqueuesseenaddrinfofamilysocktypeproto _canonnamesockaddr interleaveds & r _interleave_addrinfosr&!s%'FuD8@5%X e .d : HHf8 9   fb ) 0 0 :  "K fmmo  NV]]_NN r cV^8dQhRR/#rrNoner)r s"r r r 0s   r cNVPV4R# \dR#i;iN) unregister Exception)selectorsocks&&r _quiet_unregisterr00s' D!    s  $$c$V^8dQhRRRRRR/#)raddressztuple[str, int]timeoutz float | Nonesource_addressztuple[str, int] | Noner)r s"r r r 7s'[[[[6L[r c aaaaVwrE\\P!WE\PR74pV'g\ RV 24h\ P !4o\4oRpRpVfRM%\P!4\VR4,p \P!4p \V4p ^\P\P\P\P \#\RR40oVVVV3Rlp V 'g S'Ed\P!4p V eW8d \%R4hV 'd2W8d,V !V P'^44pTeEM6T \(,p V fRM\RW, 4pV 'd%\RW, 4pVfTM \+VV4pSP-V4FwppVP.pVP1\P2\P44pSP7V4SP9V4V^8XdTpM4VP;4\ V\<P>!V44pK VeM.S'dEKzV 'gEK\P!4p EKVfVeVh\ R V R V 24h\ASV4SP9V4VPCV4T;'gR FpVPD!V!K VPE\PF\PH^4TSFp\ASV4VP;4K! SP;4# \dpTpS'gT p Rp?EKRp?ii;i SFp\AST4TP;4K! SP;4i;i) zRFC 8305-style connect: staggered non-blocking attempts across families. ``socket.create_connection`` tries addresses serially, so broken-but- advertised IPv6 can burn the whole timeout per AAAA record before IPv4. )typez&getaddrinfo returned no addresses for NgWSAEWOULDBLOCKi3'c~<Vwrr4p\P!WV4pS eg\P!S ^,S ^,WR7pV'g\RV RS ^, 24hVPV^,^,4VP R4VP V4pV^\ P39dV#VS 9d!\V\P!V44hS PV\P4S PV4R# \dTP4hi;i)N)r r6zgetaddrinfo returned no local z address for F)socket getaddrinfoOSErrorbind setblocking connect_exerrnoEISCONNosstrerrorregister selectors EVENT_WRITErr-close) rr r!r"r#r$ candidate local_infosresultactive in_progressr.r4s & r start_attempt8_happy_eyeballs_create_connection..start_attemptLs8@5%XMM&E:  )$001BNSTDU^dt "!$B6(-XfghXiWj"kll{1~a01  ! !% ())(3F!U]]++  [(fbkk&&9::   i)>)> ? JJy !  OO   sB$DADD<z timed outzCould not connect to :r)%r&r9r: SOCK_STREAMr;rDDefaultSelectorrtime monotonicmaxlistr? EINPROGRESS EWOULDBLOCKEALREADYEINTRgetattr TimeoutErrorr_HAPPY_EYEBALLS_DELAY_SECONDSminselectfileobj getsockopt SOL_SOCKETSO_ERRORr,discardrFrArBr0 settimeout setsockopt IPPROTO_TCP TCP_NODELAY)r2r3r4socket_optionshostportrwinner last_errordeadline next_launchpendingrLnowexc wait_timeout until_launchkey_maskrG error_codeoptionrJrKr.s&&f& @@@r !_happy_eyeballs_create_connectionrw7s&JD%f&8&8&J\J\&]^I >tfEFF((*H!$F F!%JtDNN,:F %!$AA #+#34S(.9QL"3 (9: /;/C|\[gIh &ool; UKK &11&2C2CV__U ##I.y)?&F!$ZZ1HI <!6gg"nn. > * 6* jGF[\`[aabcgbhDi._urllib3_racersC29=M2MF,,.SZ 1 ~eTbThThfhNik kr T)rYcreate_connection_DEFAULT_TIMEOUTrz)modulerrs& @r _patch_urllib3_create_connectionrsFv'')A5II..(8^bk-1N)-r c0]tRt^tRtRRltRtRtRtR#)_Urllib3ConnectionPatcherzOne-shot import hook: patch urllib3's connect walker the moment the module loads. Importing urllib3 eagerly costs ~50 ms on every CLI start, and ``hermes`` / the TUI gateway never load it unless something actually calls ``requests``. Nc V\8wdR#V\P9d \PPV4\P P V4pVeVPfR#VPVnWnV#r+) _URLLIB3_CONNECTION_MODULEsys meta_pathremove importlibutil find_specloader_inner)selffullnamepathtargetspecs&&&& r r#_Urllib3ConnectionPatcher.find_specsf 1 1 3== MM  &~~''1 <4;;.kk   r c 8VPPV4#r+)r create_module)rrs&&r r'_Urllib3ConnectionPatcher.create_modules{{((..r c RVPPV4\V4R#r+)r exec_moduler)rrs&&r r%_Urllib3ConnectionPatcher.exec_modules '(0r )rr+) __name__ __module__ __qualname____firstlineno____doc__rrr__static_attributes__rr r rrs /1r rcV^8dQhRR/#r(r)r s"r r r s==t=r c \\PRR4'dR#\PR3RR/RllpRVnV\n\ P P\4pVe\V4R#\;QJd*R\ P4F 'gK RM RM!R\ P44'g+\ PP^\44R#R#)uRace IPv6/IPv4 for every sync TCP connect in the process (RFC 8305, #114265). The startup path does not build its HTTP clients in one place: the model catalog fetch goes through ``requests``/``urllib3``, sync LLM and OAuth clients through httpcore, plugins through ``urllib``/``http.client``. All of them funnel their TCP connect into ``socket.create_connection`` (``http.client`` re-reads it per connection; httpcore looks it up at call time) or into urllib3's own serial copy in ``urllib3.util.connection``. The stock implementations walk the ``getaddrinfo`` results serially — on a network whose advertised IPv6 route is blackholed, each AAAA record burns the full connect timeout before IPv4 answers. Idempotent, best-effort. rzFN all_errorscrV\PJd\P!4MTp\WVR7#))r4)r9_GLOBAL_DEFAULT_TIMEOUTr|rw)r2r3r4rr~s&&&$ r _socket_racer._socket_racers23:V=[=[2[F,,.ah 1Tbccr Tc3B"TFp\V\4xK R#5ir+) isinstancer)rfinders& r r8install_happy_eyeballs_socket_connect..s[]6F$=>>]s)rYr9rrrzrmodulesgetrrrrinsertr)rurllib3_connections r %install_happy_eyeballs_socket_connectrsv'')A5II'-'E'EVZdjod,0M(,F)CD%();< S[S]][SSS[S]][ [ [ Q 9 ;<\r cV^8dQhRR/#rrboolr)r s"r r r sdr cZ\'d \'dR#\PP RR4\PP RR4R F0p\ \ \ VR4RR4pVfK%V!RRR 7K2 R sR # \\3dKLi;i) zPApply the Windows UTF-8 bootstrap once; True only when it was applied this call.F PYTHONUTF81PYTHONIOENCODINGzutf-8N reconfigurereplace)encodingerrorsT)stdoutstderrstdin) _IS_WINDOWS_bootstrap_appliedrAenvironrrYrr; ValueError) stream_namers r apply_windows_utf8_bootstraprs ;,,JJ,,JJ,g65 gc;=}dS      ; 5  $   s BB*)B*cV^8dQhRR/#rr)r s"r r r s##t#r c\'gR#^RIp^RIp^RIHpVP RRR7pRpVf!\ P \ P3MTFpVPVP44pTP4pTPYqPT44'gK[TP \",'dKzTP%YxP \",4'dKRpK V'g!\&P(P+RR4V# \\\3dKi;i) uOpt the console behind stdout/stderr in to ANSI escape processing. ``hermes_cli.colors`` and the skins emit raw SGR codes whenever stdout is a TTY. A conhost console (PowerShell 5.1, cmd.exe, the installer's ``hermes setup``) prints them as ``←[35m`` until the output handle has ENABLE_VIRTUAL_TERMINAL_PROCESSING, and shells hand native children a console with it off. The mode belongs to the console buffer, so setting it here also covers the relaunched child. Handles that are not a console (pipes, files, NUL, a windowless pythonw) fail GetConsoleMode and are left alone. A console that refuses VT (pre-Windows 10) gets NO_COLOR instead, which ``should_use_color`` and rich honour, so it shows plain text rather than garbage. Returns False only in that fallback case. TN)wintypeskernel32)use_last_errorFNO_COLORr)rctypesmsvcrtrWinDLLrrr get_osfhandlefilenoAttributeErrorr;rDWORDGetConsoleModebyrefvalue#_ENABLE_VIRTUAL_TERMINAL_PROCESSINGSetConsoleModerArr) streamsrrrrenabledstreamhandlemodes & r enable_windows_vtrs ;}}Z}=HG.5o3::szz*7J ))&--/:F~~&&v||D/ABB  ::; ; ; &&vzz<_/_``GK  j#. N4   sD00E  E cV^8dQhRR/#r(r)r s"r r r )s  t r c\'gR#^RIp\VR4'dRRlpWnR#R# \dR#i;i)uStub ``platform._syscmd_ver`` on Windows — decode-crash + console-flash guard. ``platform.win32_ver()`` (reached via ``platform.platform()``, which the OpenAI SDK calls) shells out ``cmd /c ver`` with ``shell=True`` and no ``CREATE_NO_WINDOW``: a windowless parent (pythonw gateway, slash/kanban workers) flashes a console per call, and Python 3.11.0/3.11.1 (no ``encoding="locale"`` fix) strict-utf-8-decodes the OEM code page output under PEP 540 mode and raises (#69413). Returning the inputs makes ``win32_ver()`` fall back to ``sys.getwindowsversion()`` — same data, no subprocess. Mirrors ``hermes_cli._subprocess_compat.suppress_platform_ver_console`` for callers that never import ``hermes_cli.main``; double application is harmless. N _syscmd_verc WV3#r+r)systemreleaseversionsupported_platformss&&&&r _quiet_syscmd_ver8suppress_platform_ver_console.._quiet_syscmd_ver;s //r )rr)rwin16dos)rplatformhasattrrr-)rrs r suppress_platform_ver_consoler)sG ;   8] + + 0$5 ,    s!5 AAcV^8dQhRR/#rr)r s"r r r Ds  d r c\PPR4'gR#\P!R4;'gRP R4wrpVR8H;'d\\ ;QJd*.RVPR4R ,4FNK 5M#!RVPR4R ,44R 8# \\\\3dR#i;i) zTrue on glibc < 2.41, whose ``setenv`` of a NEW name reallocs the ``environ`` array and frees the old one (2.41+ never frees it, so a concurrent ``getenv`` stays safe).linuxFCS_GNU_LIBC_VERSIONr glibcc38"TFp\V4xK R#5ir+)int)rps& r r'_glibc_frees_environ..Ks(P9OAQ9Os.NrN)r)) rr startswithrAconfstr partitionr}splitrr; TypeErrorr)libc_rs r _glibc_frees_environrDs << " "7 + +JJ'<=CCNNsSwZZ55(Ps9KB9O(P55(Ps9KB9O(P#PSZ#ZZ GY ;s$C C' C3ACC"!C"cV^8dQhRR/#r(r)r s"r r r Ps_0_0D_0r c aaaaaa a a a \\PRR4'g\4'gR#^RIp^RIoSP R4pSPPVR4oVPoSPSP.uSnSn\P\P uo o TP#4o \P$!S P&S P(S P(R7/o .o^.oRTTTTTT T T 3RllpRTT T 3R llpR TnR TnY#u\n\nR# \\\3dR#i;i) aMake ``os.environ`` writes safe against native ``getenv`` in other threads. On glibc < 2.41 adding a name reallocs ``environ`` and frees the old array while a thread that dropped the GIL (``getaddrinfo``, OpenSSL's ``SSL_CERT_FILE`` lookup) may still be walking it; the freed slots hold tcache pointers, so the walk segfaults the whole process. Hermes writes new names at runtime from many places (``session.create`` turns on gateway prompts, the agent build sets ``HERMES_SESSION_ID``) while background threads fetch catalogs, so the tui_gateway died with SIGSEGV. This is glibc 2.41's own fix: entry strings are cached per ``NAME=value`` and never freed; a new name is appended in place to an array with spare room, and only a full array is replaced by a bigger one, the old one kept forever. Set/del churn of the same names therefore allocates nothing after the first cycle. Residual: a NEW-name ``setenv`` from native code (a C or Rust extension, not ``os.environ``) bypasses the lock and still reallocs glibc's own last array, so a ``getenv`` that started walking that array before our swap can still fault. None of the gateway's crash paths do this. _hermes_never_free_environFNr)beforeafter_in_parentafter_in_childcV^8dQhRR/#r(r)r s"r r 0install_never_free_environ..__annotate__ys-+-+t-+r c<\P!V4\P!V4r2V'dRV9gRW#,9d S!W4R#\P!RW#4VR,pS;_uu_4SP WC,4;pf#SP WC,4;pSWC,&SP V4pS^,pS!V4pV'dV\V4, MRp SP'd6SPSPSPSP44MRp ^RrV 'd%W,;p 'dW8XdRp M V ^, p K,S'd SR,MRwrV '*;'d>VRJ;'d-SPV8H;'dV ^,\V48*'*pV'dhSP\^V ^,,^@4,!.V 'dV RV MROVN5!pSPVSP4PpS^,V8XgEKS^;;,^, uu&T 'dYjT &M2T'gRY^,&YnT &MSPXX34TSnRRR4R# +'giR#;i) =Nz os.putenvTF)NNr)rAfsencoderauditrcreate_string_buffer addressoflenrcastPOINTERc_void_prSr)rsrnamevalprefixlineentrystartfoundrlivenhitcurrentownown_addrgrowfresh fresh_addrarraysrrgengetenvlineslock real_putenvs&& r _putenv+install_never_free_environ.._putenvys&KK$bkk%&8ctt|u ':  #  +t) T &,//8-3-H-H-VVuV\*$$T*EAt 05V,4V]VcVcVcv{{7==&..2QRimE347 2 2("FA.4r , wll4(k(kGMMX*J22 K cV^8dQhRR/#r(r)r s"r r r s$r c<S;_uu_4S!V4S^;;,^, uu&RRR4R# +'giR#;irr)rsr*r- real_unsetenvs&r _unsetenv-install_never_free_environ.._unsetenvs) T #  FaKFTTTs 4 A T)rYrAputenvr_threadrCDLLrin_dllr+rr;rc_char_prestypeargtypesunsetenvRLockregister_at_forkacquirerr) r7rr/r4r)rrr*r+r,r-r.r3s @@@@@@@@@r install_never_free_environrAPs&ryy6>>FZF\F\{{4 //((y9'-oo7H#FNFO!#BKKK ==?Dt||T\\Z^ZfZfg')E-/F #C-+-+^ *.G&+/I($BIr{G GZ 0s9EE-,E-c V^8dQhRRRR/#)rsrc_rootz str | Nonerr)r)r s"r r r str cT;'gh\PPR4;'gA\PP \PP \ 44p\PUu.uF q"R9gK VNK up\PR&\PP V4p\PUu.uF+p\PP V4V8wgK)VNK- up\PR&\PP^V4R#uupiuupi)aqStop a package in the current directory from shadowing Hermes modules. Hermes ships top-level modules with common names (``utils``, ``proxy``, ``ui``); a project with its own ``utils/`` launched from its directory would win the import. The cwd reaches ``sys.path`` as ``""``/``"."`` (script/``-m`` launches) AND as an absolute path (venv activation, PYTHONPATH), so both are handled: relative forms are dropped and the Hermes root is *relocated* to the front, not merely inserted when absent. ``src_root`` defaults to this module's directory (the repo root for every shipped entry point), so no spawner env var is required. HERMES_PYTHON_SRC_ROOT:NNNN)rr) rArrrdirnameabspath__file__rr)rCrootrroot_abss& r harden_import_pathrKs   rzz~~&>?  277?? !DD"hh=h9*<11h=CHHQKwwt$H!hhIh"''//!*<*H11hICHHQKHHOOAt >JsEE&EEcV^8dQhRR/#r(r)r s"r r r s     r cF^RIHpV!4R# \dR#i;i)aPoint ``TMPDIR``/``TMP``/``TEMP`` at ``HERMES_HOME/cache/scratch`` unless the user set them. System temp is tmpfs on most Linux hosts and containers; Hermes' browser profiles, PTY probes and every ``tempfile`` default a child script makes would eat RAM there. Runs at import so every entry point and every child they spawn inherits it; ``hermes_cli.main`` re-runs it after ``--profile`` re-homes the process. Never raises. )export_scratch_tmp_envN)hermes_constantsrNr-)_exports r rNrNs! F    s   )Pathc V^8dQhRRRR/#)rargvz list[str]rztuple[Path, list[str]] | Noner)r s"r r r s 2 2y 25R 2r cV'dV^,R8wdR#VPR^4pT^,\T48wdR#\Y^,,4T^T3# \dR#i;i)zGRecognize the exact fresh-checkout command emitted by shipped updaters.updateNz --post-swap)indexrrrQ)rSmarkers& r _legacy_post_swap_invocationrXsn 47h&M1-zSY aZ !4&> 11 sA"" A10A1cV^8dQhRR/#r(r)r s"r r r s**D*r c ^RIHpTP\4'dTP4R#R# \Ed\R, R, p\R, P 4'dTP 4'gR#^RIpTP R4p\TP4\\R, 4.Tn T\PR&^RIHpTP\4'dTP4\PUu.uF$qDR8XgTPR4'gK"TNK& MuupiupFp\PTK Mb \PUu.uF$qDR8XgTPR4'gK"TNK& MuupiupFp\PTK i;iR#i;i)aPut back the tree a killed ``hermes update`` left half-moved, before PM, launch preparation or any Hermes package imports from it (``hermes_cli._early_recovery``; ``hermes_cli.main`` repeats the call for entries that never reach this module). A killed ZIP swap can leave ``hermes_cli/`` itself moved aside: the journal-driven restore then runs from that moved-aside copy, the code that wrote the journal. Root files are never absent mid-swap (``update_cmd_zip._commit_staged_replacements``).)_early_recoveryzhermes_cli.hermes-update-oldz_early_recovery.pyz.hermes-update-zip-swapN hermes_cliz hermes_cli.)r\r[ ImportError_rootis_filetypes ModuleTypestrparent__path__rrrestore_interrupted_pullrelaunch_after_restorer)recovery moved_asider`packager!rs r _settle_interrupted_updaterjs^ :,((//'')0+ <0077//1$'KKdKq 3D UbHcKdKK%eCKKdKq 3D UbHcKdKK%e)sY7AG8GAG*1E9G-EE"G9G F7 0F7 6"GGGcV^8dQhRR/#r(r)r s"r r r #sCCDCr c\\RR4'dQ\PP R4'g*^RIHp\V!44\PR&R#R#R#)afA minted launcher (``hermes_cli._launchers``) pins ``HERMES_HOME`` to the install's default root. That needs ``hermes_constants`` from the checkout, so the launcher asks for it here, after the repair above: a merge killed while writing ``hermes_constants.py`` must not keep the repair from ever running. The flag name is ``_launchers.PIN_DEFAULT_HOME_FLAG``._hermes_pin_default_homeF HERMES_HOMEget_default_hermes_rootN)rYrrArrrOrprbros r _pin_launcher_homerq#sJ s.66rzz~~m?\?\<$'(?(A$B =!@]6r :NN)_continue_legacy_post_swap) argv_tailc]tRtRtRtRtRtR#) RelaunchExiti;zExit carrying a relaunched child's status: that child already produced this run's output, so callers that report their own boot failures (the Bot Chat delivery runner) must not.TrN)rrrrr relaunchedrrr r rvrv;s _Jr rv)activate_dependencies install_state_permission_message)recover_if_needed) command_argvrpmrepair)prepare_launchrelaunch_command__main____spec__rntzhermes: )filez)hermes: source-update completion failed: uM; running with the previous dependencies — run `hermes update` to finish it:NrrNz; run `hermes pm repair`)Nrr+)Vr __future__rr? importlib.abcrimportlib.utilrArDr9rrQrrrr[rr&r0rwrabcMetaPathFinderLoaderrrrrrrrrArKrNpathlibrQrHresolvercr^getcwdFileNotFoundErrorchdirrXrbrjrqrS_legacy_post_swaphermes_cli.update_handoffrs _handoff_path _argv_tail SystemExitrvpm.environmentsrxryhermes_cli._early_recoveryrzhermes_cli._parserr{ _pm_repairhermes_cli.venv_syncr~r_launch_pythonrYrr _main_spec orig_argv_commandr subprocesscallexecvr-rprPermissionErrormessageprintr RuntimeErrorr;rr r rs #   llg%  $6  [|."1 < R>R16=D:'-##L 6 _0D,  & X ''IIK 2 3u:*BC0"> E 1M: / T UU: T8+#((2, ' +h/? ? E'sxx|<  % !=J>L*L%(8L%%L*- O6OA'OO