+ Wj9 Rt^RIt^RIt^RIt^RIt^RIHt^RIHt] !RRRRR7t RR lt R R lt R R lt RR/RRlltRRltRRltRRltRR/RRlltRRltRRltRR ltR!R"ltR#R$ltR%R&ltR'R(ltRsR)R*lltR+R/R,R-lltR.R/lt]!0Rtm4tR0R1ltR2R3lt R4R5lt!R6R7lt"R8t#R9t$Rut%R:R;lt&R<R=lt'R>R?lt(R@RAlt)RvRBRRCRRDR/RERFlllt*RGR/RHRIllt+RJRKlt,RLR/RMRNllt-RORPlt.RQRRlt/RS^/RTRUllt0RVRWlt1^t2^t3RXt4RYt5]6!RZ4t7R[R\lt8R]R^lt9R_R`lt:RaRblt;RsRcRdlltRhRilt?RjRkRlRRmRRnRRoRRpR/RqRrllt@R#)wuDashboard process-hygiene helpers — extracted from ``hermes_cli/main.py``. Helpers defined in ``hermes_cli.main_dashboard`` / ``hermes_cli.main_install_repair`` are imported at call time so imports stay one-way (both of those modules import this one lazily). NPath)is_desktop_ssh_backend_argvTutf-8replace)capture_outputtextencodingerrorscFV^8dQhR\\\3,/#return)dictstrlist)formats"NC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\dashboard_procs.py __annotate__rs77tCI7cR.R.R./#)matchedkilledfailedrrr _empty_resultrs r8R2 66rcxV^8dQhR\\\\3,,R\R\RR/#)r rowspid_textcommandrNrtupleintr)rs"rrrs5  d5c?+ s S T rcdVP\V4V34R# \dR#i;iN)appendr" ValueError)rrrs&&&r _append_rowr's.  S]G,-    s  //c\V^8dQhR\\\\3,,/#r r )rs"rrrs %%T%S/2%rc.p\PR8Xd^RIHpV!.RO^ RR7pVe VP^8wgVP fV#RpVP P R4FkpVP4pVPR4'dV\R4RpK:VPR 4'gKS\W\R 4RV4Km V#\P!.RO3R ^ /\BR R /BpVP^8Xdy\VR R4P R4FXpVP4P R^4p\V4^8XgK5RV9gK>\W^,V^,4KZ V#)zW``(pid, cmdline)`` for every process, via wmic (Windows) or ps. Raises on scan failure.win32)bounded_probe_runignore)timeoutr N z CommandLine=z ProcessId=r-checkFstdoutgrep)wmicprocessgetzProcessId,CommandLinez /FORMAT:LIST)ps-A-oz pid=,command=)sysplatformhermes_cli._subprocess_compatr+ returncoder1splitstrip startswithlenr' subprocessrun_PS_RUN_KWARGSgetattr)rr+result current_cmdlinepartss r_iter_process_tablerIsR"$D ||w D" Ox) >V..!3v}}7LK MM''-D:: Kr exclude_pidscV^8dQhR\\,R,R\\\\3,,/#)r rJNr)setr"rr!r)rs"rrrEs2%%s3x$%$uUXZ]U]J_%rc \P!40T;'gRmp^RIHp\ 4UUu.uFwr4W19gK V!V4R 9gKW43NK! ppp\P!\4;_uu_4^RI H pTUUu0uFwr7TkK uppT,pT!4Fp T PR4pT PR4R 9gK,\T\ 4'gKDY89gKLTP#T\%T PR4;'gR434K RRR4T#uuppi \ \ P\3d.u#i;iuuppi +'giT#;i) a``(pid, cmdline)`` of running ``dashboard``/``serve`` processes; empty on any scan error. A forgotten dashboard keeps the old Python backend against the new JS bundle after ``hermes update`` (every API call 401s). *exclude_pids* (Desktop's HERMES_DESKTOP_CHILD_PID backends) are never returned. *exclude_pids* is an optional set of PIDs that must never be returned. This is used by the Hermes Desktop Electron app to protect its own backend child process: when the desktop spawns ``hermes serve`` as a backend and triggers an auto-update, the update must not kill the backend that the desktop itself manages. The desktop sets the environment variable ``HERMES_DESKTOP_CHILD_PID`` on the spawned backend process; ``_kill_stale_dashboard_processes`` reads it and passes it here. (#37532) _hermes_holder_subcommandledger_entriespidpurposeargvr.Nr) dashboardserverVrU)osgetpidhermes_cli.update_cmd_windowsrOrIFileNotFoundErrorrATimeoutExpiredOSError contextlibsuppress Exceptionhermes_cli.process_identityrQr5 isinstancer"r%r) rJskiprOrRcmdfoundrQ_seenentrys $ r_scan_dashboard_processesriEsJ IIK /<--2 /DH,?,Ab,AO(A#(FJ`(`#,Ab   Y ' ' ?"'(%%(4/#%E))E"C )$(>>:cSVCWCW c3uyy'8'>'>B#?@A & ( L%b z88' B ) ( ' Lsd E D; D;D;E E/ E) 9E/E/0E/8(E/!E/;E"E&%E&)E// F chV^8dQhR\\\\\3,3,/#r )rr"r!r)rs"rrrms%T#uS#X"67rc/p\P!\4;_uu_4^RIHpV!4FpVP R4VP R4rCVP R4R9gK<\ V\4'gKT\ V\4'gKlV^8gKu\VP R4;'gR4V3W&K RRR4V# +'giT#;i) a``pid -> (host, port)`` recorded in the spawn ledger for live serve/dashboard backends. The entry is written after the bind, so it carries the real port where argv only says ``--port 0`` (Desktop SSH backends ask the OS for a port). Empty when the ledger is unavailable. rPrRportrShostr.NrW) r^r_r`rarQr5rbr"r)bindsrQrhrRrls r_ledger_serve_bindsroms )+E   Y ' '>#%E %(%))F*; )$(>>:cSVCWCW"4--$(!%))F"3"9"9r:DA & ( L ( ' Ls*AC/CCC(CC C/ c`V^8dQhR\R\\\3,R,/#r rRrN)r"rr)rs"rrr~s'cd38nt3rc\P!\4;_uu_4^RIp\ VP V4P 44uuRRR4# +'giM;i\RT R24P4pM \dR#i;i/pTPR4FGpTPR4wrVpT'gK!TPRRR7Y5PRRR7&KI T#) zNExec-time environment of *pid* (psutil, then /proc); ``None`` when unreadable.N/proc/z/environ=rr)r ) r^r_r`psutilrProcessenvironr read_bytesr]r= partitiondecode)rRrvrawenvpartkeysepvalues& r _pid_environr~s   Y ' 'FNN3'//12 ( ' ' 'VC5)*557 C '"...% 39>gV_9`C 79 5 6# Js,A A* .B BBc>V^8dQhR\R\R,/#rqr"r)rs"rrrs##*rcRp\P!\4;_uu_4^RIpVP V4P 4P pRRR4VfO\P!\4;_uu_4\P!RV 24PpRRR4VfR#\P!\4;_uu_4^RI pVPV4P;'gRuuRRR4# +'giL;i +'giL;i +'giR#;i)aLogin home of the user *pid* runs as, from the password database (psutil, then /proc). A service unit with a scrubbed environment exports no ``HOME``; the target resolves its own default home through ``Path.home()``, which falls back to this entry. The inspecting process's home belongs to a different user and must never stand in for it. ``None`` when the owner or the entry is unreadable, leaving the caller its existing fallback. Nrs)r^r_r`rvrwuidsrealr]rXstatst_uidpwdgetpwuidpw_dir)rRuidrvrs& r_pid_passwd_homersC   Y ' 'nnS!&&(-- ( {   ) )''F3%.)00C* {   Y ' '||C ''//4 ( ' ( '* ) ( ' s#.D $D)D/ D  D, / E require_launch_identityFcJV^8dQhR\R\R\R,/#)r rRrrN)r"boolr)rs"rrrs-8O8Oc8Ot8OPSVZPZ8Orcja\V4oSfR#^RIHp^RIHpHpHpV!V4pV'd(Vf$^RIpVPV4P4pV'd V'gR#T;'g.pSPRR4P4p\V4p V'd\PR8Xd+SPR4;'gSPR4MSPR 4p V'd"\V4P!4'gR#V'g*V 'd \V 4P!4'gR#V fEV'd=\V4P"P$R 8XgSPR 4R 8XdV#\PR8XdSPRR4P4p V 'd \V 4MD\SPR4;'g\P&!44R , R, p V R, p MQ\SPR 4;'g)\)V4;'g\P&!44R, p V!W4p\*;QJdV3RlR4F 'gK RM RM!V3RlR44;'g \-V4pV fV'gV'dR#V!V4p V 'd V!V 4MRpVR8Xd \/V4#\/VR , V, 4#)a7Resolve a process home for discovery, or require pinned launch identity for termination. By default, ``None`` means an unreadable environment (another user, hardened ``/proc``). ``require_launch_identity`` also refuses missing argv, relative/missing home anchors and any profile selection that would depend on today's sticky ``active_profile``. A readable environment always resolves, replaying ``_apply_profile_override`` on the target's exec-time env + argv (``hermes -p X serve`` rewrites ``HERMES_HOME`` in ``os.environ`` AFTER startup, which ``/proc//environ`` never reflects): a profile-shaped ``HERMES_HOME`` without a flag is the home; otherwise the root is ``HERMES_HOME`` (its grandparent when profile-shaped) or the platform default of the process's own ``HOME`` / ``LOCALAPPDATA`` (its owner's password-database home when a scrubbed unit environment exports neither), and the profile is the ``--profile``/``-p`` flag, else the root's sticky ``active_profile`` unless the process has a fixed identity (supervised child, post-swap updater, Desktop SSH backend). N)_dashboard_cmdline_for_pid)get_active_profilenormalize_profile_nameprofile_root_for_env_home HERMES_HOMEr.r* LOCALAPPDATA USERPROFILEHOMEprofilesHERMES_UPDATE_POST_SWAP1AppDataLocalhermesz.hermesc3F<"TFpSPV4xK R#5ir$r5).0kr}s& r '_hermes_home_for_pid..s&V.U.Us!TFdefault)HERMES_SUPERVISED_CHILDHERMES_S6_SUPERVISED_CHILD"HERMES_GATEWAY_EXTERNAL_SUPERVISOR)rhermes_cli.main_dashboardrhermes_cli.profilesrrrrvrwcmdliner5r>_profile_flag_valuer9r:r is_absoluteparentnamehomeranyrr)rRrrrrrrTrvenv_homeprofileanchor local_appdatabase default_homerootfixed_identitycanonr}s&$ @r_hermes_home_for_pidrsg" s C {Dii %c *D4<~~c"**,t ::2Dww}b)//1H!$'GHK X_H_#''.)CCSWW]-Cehelelmset DN6688tF|/G/G/I/I8 X""j0CGGT>c>cX\XaXaXc9dgp9psz9zh CGGFOSS/?/DSS TW`` $X .sRvqC;Q4Qs  N)next enumeraterTs&r_dashboard_subcommand_indexrs R4RTX YYrcTV^8dQhR\\,R\R,/#rrr)rs"rrrs"d3iC$Jrc\V4FowrVR9d2V^,\V48d\W^,,4u#VPR4'gKVVP R^4^,u# R#)zJValue of the first ``--profile X`` / ``-p X`` / ``--profile=X`` in *argv*. --profile==Nz --profile-p)rr@rr?r=)rTrrs& rrrseD/ % %!a%#d)*;tE{# # >>, ' '99S!$Q' ' " rcFV^8dQhR\\,R\/#)r rTr)rrr)rs"rrrs . .$s) . .rca\S4fR#\;QJd(V3Rl\S44F 'gK R# R#!V3Rl\S444#)uTrue for Desktop-style ``serve|dashboard --port 0`` backends — replaying them after ``hermes update`` multiplies listening backends because ``--port 0`` binds a fresh port. See #78821. Fc3J<"TFwrVR8H;'dBV^,\S48;'d%\SV^,,4R8H;'gDVPR4;'d+VPR^4^,P 4R8HxK R#5i)--port0z--port=rN)r@rr?r=r>)rrrrTs& rr2_is_ephemeral_port_zero_backend..s.,61xQQAECI$5QQ#d1q5k:Jc:QVV>>),TT31B11E1K1K1MQT1TV,sB#B##B#B#03B#T)rrrrsfr_is_ephemeral_port_zero_backendrsV #4(0 3.&t_.33.3.3.&t_. ..rc`V^8dQhR\\,R\\R3,/#)r rTr.)rrr!)rs"rrrs&,,tCy,U38_,rcz\V4pVf \V4#.p^pW18d|W,pVR9d:V^,V8d,VPW@V^,,.4V^, pKNVPR4'dVP V4V^, pK\V\ WR4,4#)zACollapse argv to profile flags + serve/dashboard tail for dedupe.Nrr)rr!extendr?r%r)rTidxprefixrrs& r_normalize_dashboard_cmdliners %d +C {T{F A 'g % %!a%#+ MM3QU , - FA  >>, ' ' MM#  Q $tDz** ++rc0V^8dQhR\R\/#r rr)rr)rs"rrrsrc\V4P4# \\\3d\T4u#i;ir$)rresolver] RuntimeErrorr&rs&r_resolved_homers:Dz!!## \: .Dzs !??c0V^8dQhR\R\/#rr)rs"rrrs77s7s7rcd\PP\\ V444#)zcInstall-identity key for *home*: symlinked / differently-spelled roots compare equal. See #94030. )rXpathnormcaserrrs&r_normalized_home_for_comparers# 77  Ct 45 66rchV^8dQhR\\,R\R\\,/#)r pidsrr)rr"r)rs"rrrs)T#Ycd3irc\V4pVUu.uF,p\V4;p'gK\V4V8XgK*VNK. up#uupi)aReturn only *pids* whose resolved Hermes home (``_hermes_home_for_pid``) is ``home``. Dashboard argv is discovery-only: it is not an ownership proof because several Hermes installs and profiles can run the same command on one machine. An unreadable process environment is deliberately not treated as a match, so a stop request fails closed rather than taking down an unrelated backend. )rr)rrtargetrRpid_homes&& r_pids_owned_by_hermes_homersV*$ /F ,S1 1H 1 ( 2f < t  sA AAc`V^8dQhR\\,R\R,R\/#)r rT hermes_homeNrr)rs"rrr/s* ? ?49 ?3: ?QT ?rcV'd]\V4Pp\V4^8d*VR,R8XdVR,'d RVR, 2#R\V4 2#R\ V4;'gR 2#)u Stable owner key: ``HERMES_HOME`` when known, else ``--profile`` / ``-p``. A home ending in ``profiles/`` → ``profile:`` (shares a cap with an explicit ``--profile``); other homes keep a ``home:`` key so unrelated installs never collapse. See #78821. rzprofile:zhome:r)rrHr@rr)rTrrHs&& r_profile_key_for_respawnr/sv{+11 u:?uRyJ6599eBi[) )3K@ABB )$/<<9= >>rown_homecV^8dQhR\\\\\,\R,3,,R\R,R\\\,,/#)r candidatesNrrr )rs"rrr?sI))U3S 3:567)FIDj) $s)_)rc Vf^RIHp\V!44pV'd \ V4MRp.p\ 4p\ 4pVFwrxp V'd\ V4'dK!V'dV 'd\ V 4V8wdKC\V4p \W4p W9gW9dKgVPV 4VPV 4VP\V44K V# \dRpLi;i)uSelect which killed manual backends ``(pid, argv, hermes_home)`` to respawn after update. Rules: never resurrect Desktop ``--port 0`` backends; never replay a backend from a **foreign** ``HERMES_HOME`` (the argv-only respawn would come back on this install's home and steal the foreign install's fixed port → EADDRINUSE crash-loop; unreadable ``None`` stays eligible); dedupe by normalized cmdline; one backend per profile / home. PPID-1 is NOT skipped: a prior respawn detaches, so fixed-port manual backends sit under init. 1. Never resurrect Desktop ephemeral ``serve|dashboard --port 0`` backends — Desktop (``HERMES_DESKTOP_CHILD_PID``) owns their lifecycle. These are also the PPID-1 orphans that previously multiplied across updates because ``--port 0`` always binds a fresh free port. 2. A foreign install's backend is owned by that install's supervisor/user. 3. 4. See #78821, #94030. Intentionally does **not** blanket-skip every PPID-1 process: a prior ``hermes update`` respawn detaches with ``start_new_session=True``, so fixed-port manual backends are reparented to init and must still be eligible for the next update's #40449 restart. )get_hermes_homer.) hermes_constantsrrr`rrLrrraddr%r) rrrown_keyselected seen_cmdlines seen_profiles_pidrTrnorm profile_keys &$ r$_filter_dashboard_respawn_candidatesr?s&  8?,-H9A*84bG "H*-%M!eM#-K6t<<  {'CK'PT['[ +D1.tA  K$@ $+&T #$. O% H sC22 DDc:V^8dQhR\\,/#r rLr")rs"rrrksCrc8\4p\PPRR4P R4FHp\ P !\4;_uu_4VP\V44RRR4KJ V# +'giK_;i)zTPIDs Desktop marks as live backends (``HERMES_DESKTOP_CHILD_PID``, comma-separated).HERMES_DESKTOP_CHILD_PIDr.,N) rLrXrxr5r=r^r_r&rr")outr~s r_exclude_pids_from_envr kskEC 92>DDSI   , , GGCI - ,J J- , ,s B B c:V^8dQhR\\,/#r r)rs"rrr~ss3xrcn^RIpVP4P4Uu0uFqPkK up#uupi \dMi;i\ 4p\ P!4p\R4Fp\RT R24PRRR7pTP4F<pTPR4'gK\TP4^,4pM& Tu# \\ \"3dTuu#i;iT^8:dTu#TP%T4K T#) zPIDs of THIS process's ancestors (self excluded), best-effort; empty on any failure. ``--stop`` and the update sweep must never kill the process tree they were invoked from. psutil is primary; the ``/proc`` walk keeps the answer when psutil is unusable. Nirsz/statusrr)r r zPPid:)rvrwparentsrRr`rLrXrYranger read_text splitlinesr?r"r=r]r& IndexErrorr)rvp ancestorscurrf status_textrGs r_caller_ancestor_pidsr~s  %~~/779:9!9:::    %I ))+C 4[ uG45?? @4K#..0??7++djjl1o.C1 ! Z0    !8  c s>$A=AA AAAC5 !C5/C55DDc>V^8dQhR\R\R,/#rqr)rs"rrrs++C+C$J+rc^RIpVPV4P4pV'd0\PP \ V^,44#\RV R24P4pTPR^4^,PRR4pTPR^4R,;'gR# \dLwi;i \dR#i;i) zLBasename of *pid*'s first argv token, best-effort; ``None`` when unreadable.Nrsz/cmdlinertrr/r)rvrwrrXrbasenamerr`rryr]r=r{rsplit)rRrvrTr|heads& r_argv_head_commandrs ~~c"**, 77##CQL1 1 VC5)*557 99Wa  # * *7I >D ;;sA r " * *d*     s(*C.CC CC C'&C'cRV^8dQhR\R\\,R\/#)r rRrr)r"rLr)rs"rrrs* E E# E#c( Et ErcJW9dR#\V4;'gR\9#)uTrue when *pid* is a caller ancestor headed by a wrapper executable. Root selection is a substring match, so the shell a ``--stop`` was typed into (or a ``bash -c 'hermes dashboard --stop'`` wrapper) matches on its own argv. Ancestor alone is not a spare: the backend hosting a shell-escaped TUI is also the caller's ancestor and must stay stoppable — only a wrapper-headed ancestor is spared. Fr.)r_WRAPPER_HEAD_COMMANDS)rRrs&&r_is_caller_wrapper_shellr"s&  s # ) )r.D DDrc V^8dQhR\\,R\\,R\\\\3,,RR/#r rrrrNrr"r!r)rs"rrrs?))T#Y)S )4cSVhCX)]a)rc ^RIHp^RIHpHpVUu/uF qfV!V4bK ppVFpVP V4pVfVP VR34K.V!WhR7'gVP VR34KR\P!RR\V4R .R \PR R R ^ V!4R R7 p V P^8XdVP V4KTP YiP;'gV P;'gRP434K R#uupi \\P \"3d)p TP T\T 434Rp ? EKKRp ? ii;i)z9``taskkill /F`` each PID after re-verifying its identity.get_process_start_time) pid_is_hermeswindows_hide_flagsNz!could not verify process identity)expected_start_timez,not hermes-owned or process identity changedtaskkillz/PIDz/FTrrF)rstdinrr r r- creationflagsr0r.)gateway.statusr(r;r)r*r5r%rArBrDEVNULLr<stderrr1r>r[r\r]) rrrr(r)r*rRpid_start_timesr+rEes &&& r_kill_pids_windowsr4s>5OCGH4C23774OH )"1"5"5c": "* s$GHI"3PP s$RST#S48$,,4'$b@R@T\ac$$)MM#&MM3)M)M&--)M)M2(T(T(V"WXI"":#<#.__annotate__Bs))3))rc0<\P!W4VSP8XdSPV4R#R# \dSPT4R#\ \ 3d(pSPT\T434Rp?R#Rp?ii;ir$)rXkillSIGKILLr%ProcessLookupErrorPermissionErrorr]r)rRsigr3_signalrrs&& r_send_kill_pids_posix.._sendBsq ) GGC goo% c"&!  MM# ) ) MM3A- ( ( )s!8?BB-B.BBc38<"TFqS9gK VxK R#5ir$r)rrrOs& rr#_kill_pids_posix..Ps7W!!Ws c3*"TF pVR3xK R#5i)z;descendant of the stopped backend still alive after SIGKILLNr)rrRs& rrr`\s(&cUV&s)signalr/r(rDSIGTERMrP_POSIX_TERM_GRACE_SECONDSrrXitemsr^r_r]rXrW_POSIX_DESCENDANT_GRACE_SECONDS)rrrr( descendantsr]rRrfrC_rootstart survivorsr[r\rOs&ff @@r_kill_pids_posixrl4sz5$T*K)) c7??#V$Q6/qaf?Uf!f?U6Uqq$GV w 9 :E MM7W77 c7??#-8,=,=,?N,?(q.5*@*Cu*L,?IN1C$$W--!.-y*IJ 2  MM(&((@VVN.--sBFFF)F2F F& F5FF$ F$ F5 restart_managedalready_restarted_units scope_homec V^8dQhR\R\R\\,R,R\R,R\\\3,/#)r reasonrmrnNror)rrrLrr)rs"rrr`sSi.i. i.i..__annotate__s'ppCp$s)d*:prc><SPWS\V4R7#))r)_launchd_job_owning_backend_process_ancestors)rRr_dash launchd_jobss&&r_launchd_owner7_kill_stale_dashboard_processes.._launchd_owners"00|WijmWn0oorr.u ⟲ Stopping z dashboard process(es) ()u ✓ stopped PID u ✗ failed to stop PID : ) pid_launchdru' ⚠ PID(s) supervised by launchd job zJ: a KeepAlive job restarts itself. To keep it down: launchctl bootout c3,<"TF qS9xK R#5ir$r)rrrs& rr2_kill_stale_dashboard_processes..s4V #VsTFzM Restart the dashboard when you're ready: hermes dashboard --port rrr unrecoveredr) hermes_clirtrrD removesuffix"_restart_managed_dashboard_servicerLr _lock_owned_serve_pids_find_stale_dashboard_pidsrr9r:_loaded_launchd_backend_jobs_get_pid_cgroup_path_get_systemd_service_for_pidrrr5printr@r4rl_restart_killed_backendsrsortedr)rqrmrnro _dash_unitexcluder pid_cgroup pid_service pid_cmdlinerr}rRrjobrrerr_msgrrdlrfjrr{r|rs&$$$ @@@r_kill_stale_dashboard_processesr`s03WU$=?YZ[hhistJ J/L/L"M88@@#&&=&C&C"D |"S$&G )++  + +DU_ + `D (*J)+K:vha HIF$&F<<728HH$X^_ $SE*+ W +C57)<= /. (P[] 6l &j&Q+//RSBT=TQ=TjfgZaZ[]^`a1QCj&jkF ;F8D<:KOs):rcaa^RIHp.p.p\4p .p VEFp VPV 4p T;'g/PV 4p V 'dvW9dK@V P V 4VP WPV 44'd\ RV 24KVPV R34VPV 4KV 'dV wrpV RV 2pVV 9dKV P V4VPWV4'd\ RV 24EKVPR4'd\P!4^8wdRMRpVPVR V R V 234VPV 4EKfV S9d.V PV SV ,VPV 434EKVPV 4EK VFwpp\ R V R V 24K \V 4pV'dVPV4MR oS'dVPVV3RlV44V'g V'd \ R4V#)zUpdate path: restart systemd units, kickstart launchd jobs (macOS), respawn manual argv (detached, headless, logged to logs/dashboard-restart.log; one per profile, no ``--port 0``). Returns PIDs not brought back.rsu" ✓ restarted systemd service z#systemctl restart returned non-zeroru ✓ restarted launchd job systemzsudo r.z1launchd is not supervising a fresh process; run: zlaunchctl kickstart -k u ⚠ rNc3X<"TFpSPV4S9gKVxK! R#5ir$r)rr failed_cmdsrs& rr+_restart_killed_backends..s#Rf 0Bk0Q11fs* *z[ Restart anything not auto-restarted when you're ready: hermes dashboard --port )rrtrLr5r_try_restart_systemd_servicerr%_restart_launchd_jobr?rXgeteuidr_respawn_dashboard_processesr)rrrrrrr{rfailed_restarts seen_servicesrespawn_candidatesrRsvc_name launchd_jobdomainlabelold_pidrsudosvcerr respawn_cmdsrs&&&f&$ @rrrs3K-/O!eMBD??3'"((b--c2 (   h '11(NN3O&P Q   s #CD$S Ru%&$78JKLFR%44\BX\KRfRR+ lm rc$V^8dQhR\/#r r)rs"rrr s!!s!rc\\V4P44P4# \\ 3d\T4P4u#i;i)z5Canonical lower-cased executable path for comparison.)rrrlowerr]r&)rs&r _norm_exer sM!4:%%'(..00 Z !4y  !s/2*AA exclude_pidc V^8dQhR\R\R,R\\\\3,,/#)r scripts_dirrNr)rr"rr!r)rs"rrrs5'*Tz=A%S/=Rrc ^RIHpV!4R#)zHistorical main export: stop old updaters without scanning live shims. PM stages a fresh generation instead of replacing a mapped hermes.exe. Returning an empty list would let old callers continue into that mutation. )stop_for_relaunchN)hermes_cli._old_updaterr)rrrs&$ r#_detect_concurrent_hermes_instancesrs :rc0V^8dQhR\R\/#)r rr)rr)rs"rrrs W WS WT Wrc^RIHpV!V4R8wdR#VP4P4p\ VR4pVR9;'d\ VR4R8H#)uTrue for the Desktop-local shape ``hermes serve [--isolated] --host 127.0.0.1 --port 0``. Long-lived headless serves (``--host --port 9119``) must never match — those are operator-managed remote backends that legitimately run with ppid 1. rNrVFz--hostrr)z 127.0.0.1 localhost)rZrOrr= _flag_value)rrOtokensrms& r_is_desktop_local_serve_cmdliners[ H!)W4 ]]_ " " $F vx (D - - V V+fh2OSV2VVrc`V^8dQhR\\,R\R\R,/#)r rflagrNr)rs"rrr,s)S trc\V4Fkwr#W18Xd)V^,\V48dW^,,u#VPVR,4'gKSVPR4^,u# R#)z=``--flag value`` / ``--flag=value`` from split argv, or None.rN)rr@r?rz)rrrrs&& rrr,s_F# ;1q53v;.a%= >>$* % %==%a( ( $ r max_depthcRV^8dQhR\R\R\\,/#)r rRrr)r"r)rs"rrr6s%  C s 49 rc.pTp\V4V8d;\V4pVeV^8:g W@8XgWB9dV#VPV4TpKJV#)zYParent chain of *pid* (nearest first), stopping at init / a lookup failure / *max_depth*.)r@ _process_ppidr%)rRrchaincurrentrs&$ rrzrz6sWEG e*y w' >Vq[FMV_  L  V Lrc>V^8dQhR\R\R,/#rqrT)rs"rrrCs  s sTz rc \PR8XdR#\P!RRRR\ V4.3R^/\ BRR /BpVP ^8wgVP'gR#\VPP4P4^,4# \\\P\3dR#i;i) zZBest-effort parent pid; None on failure (always None on Windows: desktop tree-kill reaps).r*Nr6r8zppid=rr-r0F)r9r:rArBrrCr<r1r"r>r=r&r[r\r])rRrEs& rrrCs <<7 "tWdCH EpqpTbpjop    !6==&&(..0344 ):+D+Dg NsB%AB%-7B%%%C Cz desktop-sshzbackend.lock.json0123456789abcdefc$V^8dQhR\/#r r)rs"rrr[s%%$%rc^RIHpV!4#)zThe process's Hermes home: remote-backend locks are a process-level asset, so a request scoped to another profile must still see the same lock dir.get_process_hermes_home)rrrs r_hermes_home_dirr[s9 " $$rc<V^8dQhR\R\R\/#)r rlengthr)objectr"r)rs"rrrbs&YY6Y3Y4Yrc\V\4;'d2\V4V8H;'d\V4\, '*#r$)rbrr@rL_HEX32)rrs&&r_is_hexrbs5 eS ! X Xc%jF&: X XCJQWDW?XXrc<V^8dQhR\R\R\/#)r parsed ownership_idr)rrr)rs"rrrfs&UUFU#U$Urca\S\4'dSPR4\8wgsSPR4\8wgYSPR4V8wgC\ SPR4^4'd"\ SPR4^ 4'gR#SPR4SPR4r2\V\ 4'd=^Tu;8dR 8:d.MR#\V\ 4'd^Tu;8:d R 8:gR#R#\;QJdV3R lR4F 'gK R M RM!V3R lR44'dR#SR ,PRV RSR, R24#)zGValidate a parsed ``backend.lock.json`` body, mirroring readLockfile(). schemaVersionprotocolVersion ownershipId spawnNoncetokenFingerprintFrRrli@ic3<"TFFp\SPV4\4'*;'g\SV,4R8xKH R#5i)iN)rbr5rr@)rrhrs& rr*_valid_lockfile_payload..usC USq&**Q-- - F FVAY$1F FSs /AAlogPathTrz.log)r hermesPath hermesHomer startedAt) rbrr5_LOCKFILE_SCHEMA_VERSION_PROTOCOL_VERSIONrr"rendswith)rrrRrlsf& r_valid_lockfile_payloadrfs8 vt $ $ ::o &*B B ::' (,= = ::m $ 4vzz,/44vzz"45r:: 5!6::f#5 sC Q%7%7=GtS/backend.lock.json`` under. The Desktop writes SSH locks beneath the ROOT home (``~/.hermes/desktop-ssh``), but a profile backend (``hermes --profile X serve``) runs with ``HERMES_HOME=/profiles/X`` — scanning only the process home found no lock there and its reaper killed the sibling profile's live SSH backend on every profile switch (#89811).)get_default_hermes_root)rrr_REMOTE_LOCK_SUBDIRr%)rrr<rrs& r_remote_lock_rootsr|sUz8E!#%<%>?))   LL @ LrcTV^8dQhR\R,R\\,/#r)rrLr")rs"rrrs"TD[CHrcP\4p.p\V4F;pTPVP4'dVP 4M.4K= VF7p\ V\, 4pVfKVPVR,4K9 V# \ dKi;i)zPIDs claimed by valid ``{hermes_home}/desktop-ssh//backend.lock.json`` records (best-effort: a bad record contributes no PID; never raises).rR) rLrris_diriterdirr]read_valid_backend_lockBACKEND_LOCK_NAMEr)rownedentriesrrhlocks& rrrseEG"8,  NNT[[]]4<<> C- &u/@'@A   IId5k " L    s7B B%$B%c>V^8dQhR\R\R,/#)r lock_pathrN)rr)rs"rrrs"MMtMt Mrc^RIpVPPp\V^ 4'dVP 4'gR#VP R4;_uu_4pVP R4pRRR4\X4R8dR#VPV4p\YR4'dT#R# +'giLH;i \\\3dR#i;i)zThe validated body of one ``desktop-ssh//backend.lock.json``, or None when it is missing, unreadable, oversized or does not match the writer's schema (never raises).Nrbii) jsonrrris_fileopenreadr@loadsr]UnicodeDecodeErrorr&r)rrrrhdatars& rrrs##((L |R(( 0A0A0C0C ^^D ! !Q66%=D" t9u D!-VBB6LL" ! ' 4s5'CCB11C C1 C <CCCgf@c0V^8dQhR\R\/#r rRr)r"rG)rs"rrrsGGcGeGrc^RIp^RIp\RVP4VPV4P 4, 4#)z9Process age from psutil's cross-platform start timestamp.Ng)rJrvmaxrw create_time)rRrM_psutils& r_process_age_secondsr s2 sEJJL7??3#7#C#C#EE FFrrqz#orphaned desktop-local hermes serve signal_term signal_killsleep_fnlock_owned_pids_fnprocess_age_seconds_fncRV^8dQhR\R\\\3,/#)r rqr)rrr)rs"rrrs/SDSDSDLPQTVZQZOSDrc aa^RIp^RIpVf VPMTpVf\VRVP4MTpT;'g VPpS;'g\ oS;'g\ o\PR8Xd \4#RV3RllpRV3Rllp \4\P!40,V!4,p \P!\4;_uu_4V P!\P"!44RRR4\%V R7p T!4p T U Uu.uFDwr\'T4'gKY9gK \)T 4R9gK2T !T 4'gKBT NKF pp pT'g \4#\+T4p.p.pTFp \P,!Y4K T!R 4^RIpTFKp T T9dK TP7T 4'd\P,!Y4TP3T 4KM ^R IHpTP=4Fhwp wppTT9gKTfKT!T 4T8XgK'\P!\04;_uu_4\P,!Y4RRR4Kj \P!\4;_uu_4\?R \AT4 R T R T;'gT 24RRR4RTRTRT/# +'giEL;i \d\4u#i;iuupp i \.dEK\0dTP3T 4EKi;i \.dTP3T 4EK\0dTP3T 4EKi;i +'giEK;i +'giL;i)aKill leftover Desktop-local ``hermes serve`` backends with no parent. Never raises. When Electron dies uncleanly its ``serve --host 127.0.0.1 --port 0`` children are reparented to pid 1 with their MCP trees alive; each Desktop boot then stacks a fresh backend on the corpses until EMFILE. Reaped only if ALL hold: Desktop-local shape; ppid 0/1; not self / parent / HERMES_DESKTOP_CHILD_PID; not claimed by a valid ``backend.lock.json`` (SSH backends other clients started legitimately sit at ppid 1); older than ``_REAP_MIN_AGE_SECONDS`` with a determinable age (Desktop writes the lock only after HERMES_BACKEND_READY, so a live sibling mid-startup is briefly unowned). NrXr*c:V^8dQhR\\,/#r r)rs"rr9_reap_orphaned_desktop_local_serves..__annotate__sSrc\<\S!44# \d\4u#i;ir$)rLr`)rsr _owned_pids8_reap_orphaned_desktop_local_serves.._owned_pidss- )+, , 5L s ++c0V^8dQhR\R\/#r)r"r)rs"rrrscdrcH<S!V4\8# \dR#i;i)F)_REAP_MIN_AGE_SECONDSr`)rRrs&r_is_stale_orphan=_reap_orphaned_desktop_local_serves.._is_stale_orphans+ )#.2GG G  s  !!)rJg?r'u ⟲ Reaped z* orphaned desktop-local serve backend(s) (z): rrr))!rbrJrcrDrLrr r9r:rr rXrYr^r_r`rgetppidrirrrDrWrYr]r%rv pid_existsr/r(rerr@)rqrrrrrr\rMrrrscanned owned_nowrRrdrrgrrrvr(rrjs$$$$dd r#_reap_orphaned_desktop_local_servesr%s%0%8'//kKBMBU''9goo>[fK&&5;;H+EE/E3KK7K ||w  %&"))+6FG   Y ' ' BJJL! (+A I#*K7xs1#6;>;O %/4DS4Is7GK $W-KFF  GGC % SM &=    %%) MM#  6)//1]dE v %"38Ns8SW\8\$$W--).-2   Y ' ' CK=(RSYRZZ]^d^o^oho]pqr ( w&(F CC_ ( ' ' K"    MM#   "  MM#    MM#   .-- ' 's4%L" L:L0L0 L0. L0>L0.L6#M(:'M(N+ (O L L-,L-6 M%M%M%$M%(N(N(N('N(+ N= O r$>shashcshr}kshzshbashdashfishnicertcshtmuxnohupwatchxargsscreenstdbufr-)?z??-)z:the running backend no longer matches the updated frontend)A__doc__r^rXrAr9pathlibrhermes_cli._startup_fastrrrCrr'rIrirorrrrrrrrrrrrr  frozensetr!rrr"r4rdrfr8r:rDrPrlrrrrrrrzrrrrrrLrrrrrrrrr r%rrrr<s   @TwyY7 %P%%P"".8Oe8OvZ .,&7" ? )SW)X#$@+$ E)B! #& .%P )(Xi.!i.NRi."i.i.X:BF:z!48 W  Q  "#'  %YU,$"M&GSD:SDHLSDZ^SD SD&*SDCGSDSDr