+ WjRt^RIHt^RIHt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI H t ^RIHt^RIHtRtRR ltR R ltR R lt]!0R\m4t]!^^}04tRRltRRlt^tR^/RRlltRRltRRltRRltRRlt RRlt!RR lt"R!R"lt#R#R$lt$R%R&lt%R'R(lt&R)R*lt'R+R,lt(R-R./R/R0llt)R1R2lt*R3R4/R5R6llt+R7R8lt,R9R:lt-R;R<lt.R=R>lt/R?R@lt0R]RAR4RBR./RCRDlllt1REt2RFt3RGRHlt4RIRJlt5RKRLlt6RMt7RNROlt8R^RPRQllt9RRt:RSt;R];RTRRURVRWR/RXRYllt`` (Aqua), then ``user/`` (Background/SSH), else the ``launchctl managername`` heuristic. Sibling profiles may live in different domains, so never reuse the cached ``_launchd_domain()`` for another label.zgui/zuser/ launchctlprint/T)checktimeoutcapture_output managernamer#r"FAqua) osgetuid subprocessCalledProcessErrorTimeoutExpiredFileNotFoundErrorrunr _CAPTURE_TEXTstdout)ruid gui_domain user_domainlaunchctl_errorsdomainresults& r _probe_launchd_domain_for_labelr7"s ))+C $SEleC5M "55z7P7PRcd+  NNKVHAeW2EFd\]nr sM, m <lal35K^K^lfkl fmm))r *  +         s+ #C4AC9CCCCCcV^8dQhRR/#rr)rs"r rr<s ' ' 'rc\4pVPf\VP44VnVP#)ztDomain managing the current profile's gateway; cached per process so start/stop/restart agree. See #40831, #23387. )r_resolved_launchd_domainr7r)gws r _launchd_domainr<<s9 B ""*&EbFZFZF\&]# & &&rc V^8dQhRRRR/#)rexcsubprocess.CalledProcessErrorrboolr)rs"r rrWs>>+H>T>rc(VP\9#)zJTrue when launchctl failed because the job isn't loaded (retry bootstrap).) returncode _LAUNCHD_JOB_UNLOADED_EXIT_CODES)r>s&r !_launchd_error_indicates_unloadedrDWs >>= ==rc V^8dQhRRRR/#)rrBintrr@r)rs"r rr\s==c=d=rcV\9#)umTrue when launchctl can't manage the domain even after a fresh bootstrap (macOS 26+) — degrade to detached.)#_LAUNCHCTL_DOMAIN_UNSUPPORTED_CODES)rBs&r _launchctl_domain_unsupportedrI\s < <s&&&$ r _launchctl_bootstraprResk63z?CI ?yg>  ( ( ? >>5 5   )xq%8 9 A A!( A,/E,?,? A yg>> ?s,B0A$B++B0cV^8dQhRR/#rrrr)rs"r rrxsCC$CrcN\4P4R, R, #)zGPath the launchd reload watchdog tails for persistent-orphan detection.logszlaunchd-reload.logrget_hermes_homerrr _launchd_reload_log_pathrYxs 5 "V +.B BBrc V^8dQhRRRR/#rmessagerrrKr)rs"r rr}s       rc \4pVPPRRR7^RIHpVP 4P 4P R4pVPRRR7;_uu_4pVPRV R V R 24R R R 4R # +'giR #;i \dR #i;i) zBAppend a timestamped line to the launchd reload log (best-effort).Tparentsexist_ok)datetimez%Y-%m-%d %H:%M:%S %zautf-8encoding[z]  N) rYparentmkdirranow astimezonestrftimeopenwriteOSError)r\path_dtstampfhs& r _append_launchd_reload_logrt}s # %D  $6, $$&//0FG YYsWY - - HHqr'"- .. - - -    s0A+B.7BB. B+ %B.+B.. B=<B=cV^8dQhRR/#)rrfloatr)rs"r rrs999rcF\R\4P44#)zBootstrap retry window for a plist reload: the failure happens while the old gateway is still draining (default 180s), so size it to the drain timeout with a 30s floor.g>@)maxr_get_restart_drain_timeoutrrr _launchd_reload_budgetrzs tSU557 88rc V^8dQhRRRR/#)rrrr int | Noner)rs"r rrs D DS DZ Drc\P!RRV.3RRR^ /\4PBpTP ^8wdR#\4PTP4# \P\ 3dR#i;i)uPID launchd currently runs for ``label``, or None when it runs none. ``launchctl list`` exits 0 for a mere registered definition (``state = not running`` on macOS 26+), so a PID — not the exit code — is the answer. Domain-agnostic on purpose: ``launchctl print`` domain probes fail on macOS-26 per-user domains, which is why the invoking profile verifies through this and not ``_launchd_print_service_pid``.rlistr"Fr#N) r*r.rr/r,rorB#_parse_launchd_pid_from_list_outputr0)rr6s& r _launchctl_supervised_pidrs fe <mEmSUmY\Y^YlYlmA 5 4 4V]] CC  % %w /s0A((BBc V^8dQhRRRR/#)rrrrr@r)rs"r rrs>>>>rc8\4PV4RJ#)zs&&&$ r +_retry_launchctl_bootstrap_until_registeredrs G 1  8 E & &v5" & Mu99%@@%fXQug5`aG ((+=gYayP])^_ >> x ' 1 ,, K#CNN#36&5'JG(( 8&vhaw7G 8s);B( B((C:=CC:. C:9C:cV^8dQhRR/#rTr)rs"r rrsDD$Drc@\4P4R, #)z.gateway-launchd-unsupportedrWrrr _launchd_unsupported_marker_pathrs 5 "%C CCrcV^8dQhRR/#rrrKr)rs"r rrs]]4]rc@^RIHpHpRVP\4P 4RR/p\ P !\4;_uu_4\4P\P!V4RR7RRR4R# +'giR#;i)z?Persist that launchd cannot supervise the gateway on this host.)ratimezone written_atreasonz'launchd domain unsupported (exit 5/125)rcrdN) rarrjr isoformat contextlibsuppressror write_textjsondumps)rarpayloads r !_write_launchd_unsupported_markerrsk+hll3'113;G   W % %(*55djj6IT[5\ & % % %s 0B  B cV^8dQhRR/#rr)rs"r rrsCC4Crc\P!\4;_uu_4\4P RR7RRR4R# +'giR#;i)z=Clear the unsupported marker when launchd bootstrap succeeds.T) missing_okN)rrrorunlinkrrr !_clear_launchd_unsupported_markerrs6   W % %(*11T1B & % % %s A A cV^8dQhRR/#rrr@r)rs"r rrs77D7rc2\4P4#)N)rexistsrrr "_launchd_unsupported_marker_existsrs + - 4 4 66rcV^8dQhRR/#)rr list[str]r)rs"r rrs ; ;i ;rc|^RIHp^RIHp\P !\ 4P44pV'gC\ 4P4P4V!4P48XdRR.pV!\ 4P.VORNRNRN\ 4P4R7#) r )runtime_command)get_default_hermes_rootz --profiledefaultr r. --replacepython) hermes_cli._launchersrhermes_constantsrshlexsplitr _profile_argrXresolve PROJECT_ROOTget_python_path)rrselectors r _gateway_run_commandrs58{{35--/0H --/779=T=V=^=^=``+ 35--/Y/Y9/Ye/Y[/Y"%%"7"7"9 ;;rc(V^8dQhRRRRRRRR/#)rcommandr stdout_logr stderr_logrr)rs"r rrs0HHyHdHPTHYbHrc R\P!V4 R\P!\V44 R\P!\V44 2pR\P !V4 R2pRRRR V.#) uWlaunchd ``ProgramArguments`` that run ``command`` with a Local Network identity macOS accepts (#71206). macOS Local Network Privacy attributes a socket to the process launchd spawned for the job. A bare venv Python has no application ID and is not platform-entitled, so every LAN connect from the launchd gateway dies with ``EHOSTUNREACH`` while the same code works from Terminal (whose grant it inherits). An ad-hoc-signed helper .app does not help: nehelper never prompts for it and denies (#57812 dead-end table, re-verified live on macOS 26.3). ``/usr/bin/osascript`` spawning the child makes it osascript-responsible — an Apple platform binary — so the child is exempt; ``/bin/sh -c exec …`` and ``/usr/bin/time`` wrappers are NOT (the launchd job identity is the non-entitled first executable). Standard Additions' ``do shell script`` polls WindowServer for a user-cancel event while it waits. That is appropriate for a short interactive script but, for the gateway's process lifetime, burns CPU and keeps a WindowServer event connection busy (external-display wake stalls ~10s on macOS 27, #123595). JXA calling libc ``system()`` waits in the kernel instead while retaining osascript as the responsible process. The shell's ``exec`` keeps the gateway in the launchd job's process group, so ``launchctl bootout`` / ``kickstart -k`` still deliver SIGTERM to it. stdout/stderr are appended inside the shell command because ``system()`` otherwise inherits osascript's plist log handles. The encoded wait status is translated back to a process exit code so KeepAlive's ``SuccessfulExit`` semantics are preserved. zexec z >> z 2>> z-ObjC.import("stdlib"); const status=$.system(zl); const signal=status & 127; $.exit(status === -1 ? 1 : signal === 0 ? (status >> 8) & 255 : 128 + signal);z/usr/bin/osascript-l JavaScript-e)rjoinquoterrr)rrrshell javascripts&&& r launchd_program_argumentsrs*EJJw'(U[[Z-I,J%PUP[P[\_`j\kPlOm nE !!%E!2 34Y Y !$ dJ GGrexternal_supervisorFc$V^8dQhRRRRRR/#)r error_logrrr@rrr)rs"r rrs(YY4YQUYbkYrc ^RIHpHp\4P 4pV'dV!\4P .\ P!\4P44ORNRN\4P4R7pVUu.uF qUR8wgK VNK ppRV9dVPR4V'dTMTpV!\4P R\V4R.VOR \4P4R 7#uupi) uWrap gateway run so raw stderr lines are timestamped before file write. ``external_supervisor`` (launchd ProgramArguments only) adds ``--external-supervisor`` so ``hermes update`` hands back to launchd, and drops ``--replace``: KeepAlive respawns would re-arm takeover, so two profiles sharing a token would kill each other forever. ``external_supervisor=True`` is for launchd ProgramArguments only: the inner ``gateway run`` must carry ``--external-supervisor`` so ``hermes update`` sees the flag on the live grandchild argv and hands the process back to launchd instead of starting a detached watcher (#86893 / #87005). The detached nohup fallback stays unmarked. Supervised starts also drop ``--replace`` (issue #79048): a launchd service is respawned by KeepAlive, so takeover authority would be re-armed on every respawn — two profiles legitimately sharing one platform token would each terminate the sibling, and launchd would revive the victim forever. Bounded replacement is the lifecycle commands' job (``launchctl kickstart -k``, drain in ``launchd_restart()``, bootout+bootstrap in install/refresh), which run before supervision resumes. Mirrors ``generate_systemd_unit``, whose ExecStart also runs ``gateway run`` without ``--replace``. )installation_commandrr r.rrz--external-supervisorz --error-log--zhermes_cli.stderr_timestamp)moduler) rrrrrrrrrrappendr)rrrrinnerpartrs&$ r #_timestamped_stderr_gateway_commandrs"L E & & (E$SU%7%79o5;;suGYGYG[;\9o^g9oin9o,/E,A,A,CE"'?%$;+>%? "% / LL0 1&9"G 35%% s9~t'Te'T7@U@U@W YY @s D D cV^8dQhRR/#rr)rs"r rrsrc ^RIHp^RIHp^RIHp\ 4P4R, pVPRRR7V!V!4RR7pVPRR 4\VR , R 4;_uu_4p\P!\VR , 43R \PRVR\PRV/V!4BR R R 4R# +'giR#;i \dR#i;i)u7Launch the gateway detached (launchd fallback for macOS 26+). CLI-managed nohup equivalent: stdout → gateway.log, timestamped stderr → gateway.error.log, PID via gateway.pid so stop/status work. Used when launchctl can no longer bootstrap/kickstart the gateway on macOS 26+ (issue #23387). Mirrors the `nohup hermes gateway run --replace` workaround but keeps it CLI-managed: stdout goes to gateway.log, stderr is timestamped into gateway.error.log, and the PID is tracked via the gateway.pid file that `run_gateway` writes, so stop/status/restart keep working. )windows_detach_popen_kwargs)rX)served_profile_child_envrVTr^) target_homeinherit_credentials_HERMES_GATEWAYN gateway.logabgateway.error.logstdinr0stderrenvF)hermes_cli._subprocess_compatrrrXtools.environments.localrrripoprmr*PopenrDEVNULLro)rrXrlog_dir child_envouts r _spawn_detached_gatewayrsJ0Ae##%.G MM$M.(#%4IMM#T*  'M)4 0 0C   3G>Q4QR  (( 14 =G=O=O  ./  1 1 0  s1'C1ACC1 C. (C1.C11 D?Dexit_on_failureTc$V^8dQhRRRRRR/#)rrrrr@rr)rs"r rr=s"#4SWrc^RIHp\4P4\ RV R24\4P 4'd8\ R4\ R4\ RV!4 R24\ R4R #\4P R 4\ R V!4 R 24V'd\P!^4R #)zxStart the gateway detached when launchd can't manage it; on failure print the manual workaround and (by default) exit 1.display_hermes_homeu=⚠ launchd cannot manage the gateway on this macOS version (z).u3✓ Started gateway as a background process insteadz; It will NOT auto-start at login or auto-restart on crash.z Logs: z/logs/gateway.logz# Stop it with: hermes gateway stopTz4Failed to start the gateway as a background process.z5 Try manually: nohup hermes gateway run --replace > z/logs/gateway.log 2>&1 &F) rrrrr r print_errorsysexit)rr_dhhs&$ r _launchd_fallback_to_detachedr=s=E++- I&QS TU u$$&& CD KL  123 34ELM A$&Ia bc  rc$V^8dQhRRRRRR/#)rr>r?whatrrrKr)rs"r rrPs(CC#@CCPTCrcN\VP4'gVh\4P4p\4P V4'd7\ RV RVP RV 24\ R4\ R4Vh\ V RVP 24R#)uVShared launchctl failure policy: domain unmanageable (5/125) → detached fallback; else re-raise. A 5/125 exit is evidence about the *domain* only when launchd is not already supervising this job. EIO (5) is ``launchctl bootstrap``'s answer for a label that is already loaded, so the ordinary "reinstall/restart over the live gateway" case lands here with the service up and supervised. Degrading there is not a graceful fallback: it writes the permanent launchd-unsupported marker and starts a detached gateway *beside* the supervised one, and the marker makes :func:`wait_for_launchd_gateway_supervision` answer True unconditionally — so no later install/update can tell that nothing ties the gateway to launchd any more. A live supervised PID is direct evidence this macOS does manage the job, so surface the failure instead of branding the host. u⚠ z failed (exit z ), but launchd still supervises uG Not switching to the detached fallback — this host manages the job.zR Apply the definition with: hermes gateway stop && hermes gateway install --forcez exit N)rIrBrrrr r)r>rrs&& r _launchd_degrade_or_raiserPs ) 8 8 E # # %E u11%88 TF.(88XY^X_`a WX bc !TF&0@"ABrcV^8dQhRR/#rr)rs"r rrgsjjjrca^RIHo\4P4p\ \4P 4P 44p\4P 4R, pVPRRR7\4P4p\4P4p\4PV4RP\PT\PP!RR4P#R4Uu.uFqU'gK VNK up,44pVR, VR , r\%VRR 7p R PV3R l\'WV444p Rp ^R IHp V !4p V 'dRV R2p RV RV RV RV RV RV RV RV R2#uupi \,dRp L=i;i)r rrVTr^:PATHr'rr)rz c3<<"TFpRS!V4 R2xK R#5i)zz Nr).0rrs& r )generate_launchd_plist..zs"&7qt(6$<. *7qs)configured_nofile_soft_limitNz` SoftResourceLimits NumberOfFiles z z Label z? ProgramArguments z? WorkingDirectory zf EnvironmentVariables PATH z: HERMES_HOME u_ HERMES_SUPERVISED_CHILD 1 LimitLoadToSessionType Aqua Background RunAtLoad KeepAlive SuccessfulExit ThrottleInterval 30 ExitTimeOut 60 z, StandardOutPath z< StandardErrorPath z )htmlrr_stable_service_working_dirrrXrrir_build_service_path_dirs_append_node_dir_for_servicerdictfromkeysr(environgetrrrhermes_cli.resource_limitsr Exception) working_dir hermes_homerr priority_dirsp sane_pathrrr prog_args_xml nofile_blockr nofile_targetrs @r generate_launchd_plistrgs%335Kce++-5578Ke##%.G MM$M. E # # %EE224ME&&}5}2::>>RXZ\C]CcCcdgCh7nChalmCh7n'nopI%}4g@S6S 1*RVWG %%&7PQXfp7q&M LK46  !   G   M   %J L LB B78o  s F7$F7 F<< G  G cV^8dQhRR/#rr)rs"r rrsCC$Crc\4P4pVP4'gR#VPRR7p\4PpV!V4V!\4P 448H#)zICheck if the installed launchd plist matches the currently generated one.Fz utf-8-sigrd)rget_launchd_plist_pathr read_text'_normalize_launchd_plist_for_comparisonr)rQ installednorms r launchd_plist_is_currentrsc--/J     $$k$:I 5 8 8D  ?d35#?#?#AB BBrc 0V^8dQhRRRRRRRRRRR R /#) rr5rrtargetrQr gateway_pidrFrr@r)rs"r rrsDAAAA(+A9=ALOA Arc \4p\P!\4;_uu_4VPP RRR7RRR4\ 4PRV 24\\44p\P!V4\P!V4\P!\V44rpRp RV R2p V R\P!4 R \\P!44 2p R P!.R NV NR NV NR NV NRNV NRNV NRNV NRNV NRNV NRN\P!V4 NRN\P!\V44 NRNV NRNV NRNV NRNV NRNV NRNV NRNV NRNV NRNV NRN\P!V 4 NRN4p \"P$!R R!R"V R#\V4R$\V4R%R&R'V . \"P&\"P&R(7R# +'giEL;i \(dPp\ 4P*P-R)T4\ 4PR*T R+T R,24Rp?R-#Rp?ii;i).a Hand the bootout/bootstrap cycle to a transient ``launchctl submit`` job; True if spawned. The helper waits for the OLD gateway to exit (bootstrap during drain fails EIO), then retries bootstrap until ``launchctl list`` shows a positive PID or the drain budget elapses.Tr^Nz"Launchd reload helper started for z$(date '+%Y-%m-%d %H:%M:%S %z')zlaunchctl list z+ 2>/dev/null | grep -qE '\"PID\" = [0-9]+;'z.reload..r'zsleep 2; launchctl bootout z. 2>/dev/null; _wait_deadline=$(($(date +%s) + z)); while kill -0 zK 2>/dev/null; do if [ $(date +%s) -ge $_wait_deadline ]; then echo "[z] old gateway pid  still alive after u*s drain wait — bootstrapping anyway" >> zH; break; fi; sleep 1; done; sleep 1; _deadline=$(($(date +%s) + z&)); while :; do launchctl bootstrap rz 2>/dev/null; if z; then break; fi; echo "[z#] bootstrap not yet registered for u — retrying" >> zM; if [ $(date +%s) -ge $_deadline ]; then break; fi; sleep 2; done; if ! z; then echo "[z] FAILED launchd reload for u" — service NOT registered after zs of retries" >> z; fi; launchctl remove z 2>/dev/nullrsubmitrz-orrz /bin/bashz-c)r0rz0Deferred launchd reload could not be spawned: %sz*FAILED to spawn launchd reload helper for z: u1 — falling back to in-process bootout/bootstrapF)rYrrrorhrirrtrFrzrrrr(getpidrrr*rrr loggerwarning)r5rrrQr reload_log_path_reload_budgetq_targetq_labelq_logrrlisted submit_label reload_scriptes$$$$$ r _spawn_deferred_launchd_reloadr1s /0O   W % %$$TD$A &E$$'I&%RS/12N${{62EKK4F TWXgThHiuH -Ewi'V WFWHRYY[M3tyy{3C2DEL D D  D%J D'+ D,:*: D; D%  D&  D g  D 0  D 1<}  D =P  D Q_O_  D `K  D LQKR  D R/  D0>.> D?! D"'V!4 5 D67 D8={{3z?7S6T DU Dx D DG D? D@Hj DI\ D]b[b Dc Dx D DG D8 D9Az DBd Descs DtF DGLFM DM D""KK 56# D"7C# D( Xt\4_AUW[]`ap]qk4 %%%%   u & % %f   OQRS ((81#Ev w  s%H AH3 H0 3 J >AJJ cV^8dQhRR/#rr)rs"r rr"sBBBrc P\4P4pVP4'd\4P4'dR#^RIHpV!V\4P 4R4'gR#\4P4p\P!VR4'dR#\4P4VPVRR7\4P4p\4P4pV RV 2p^RIHpV!4pVe8\#\$R 4'd"\'WCWPVR 7'd\)R 4R #\*P,!RRV.3RRR^Z/\4P.B\14pVeL\4P3Wx4'g-\4P5RV R\7V4 RV R24\8P:!4V,p \4P=W@W9R7'gc\4P5RV R\7V4 R24\4P>PARV\7V4\C44R#\)R4R # \ dR pELi;i)zvRewrite the installed plist when the generated one differs, then bootout/bootstrap so launchd re-reads it immediately.Fdefinition_belongs_to_homerewrite launchd plistrcrdr!get_running_pidNsetsid)r5rrrQr u↻ Updated gateway launchd service definition; reload deferred to a transient launchd job (survives the bootout of this process)TrrOr"r#zold gateway pid r#us drain wait — bootstrapping z anyway)rzFAILED launchd reload of u/ — service NOT registered after retrying for zs (in-process fallback path)uSlaunchd reload of %s failed — service not registered after %ds of retries; see %suR↻ Updated gateway launchd service definition to match the current Hermes install)"rrrr hermes_cli.gateway_service_ownerr5rXrrrefuse_temp_home_service_write_prepare_service_launcherrrr<gateway.statusr9r hasattrr(r1r r*r.r/rz_wait_for_pid_exitrtrFrrrr&errorrY) rQr5 new_plistrr5rr9r r) _deadlines r refresh_launchd_plist_if_neededrD"sK--/J     #%"@"@"B"BK %j#%2G2G2I9 U U,,.I;;IWWE##%)g6 E # # %E U " " $Fxq F2%'   B ! ! (6Va    M  NNKF3d5d"dPSPUPcPcd+-Nsu'?'? '\'\ (({m+>>"##B6(' S  >1I 5 < ?< Jtvh< =>  ( ( ''+@As=2LM-M  Mcj\P!R4\4P4p\P !RR\ 4 R\4 2.3RRR^Z/\4PBVP4'dVP4\RV 24\R4R #) uninstallrrOr!r"Fr#u ✓ Removed u✓ Service uninstalledN) rrefuse_foreign_launchd_plistrrr*r.r<rr/rrr )rQs r launchd_uninstallrPs66{C--/JNN iO$5#6a8I8K7L!MN888#&5#6#68 ZL)* #$rc@\P!R4\4P4p\4P 4pVP 4'g\4P 4p\P!VR4'd\P!^4\R4VPPRRR7\4P4VPVRR7\W4'd \!R4R#\4P#4\%V4\!R4R# \&P(d?p\+T4'gh\R 4\Y4'gRp?R#Rp?L[Rp?ii;i) startr7u:↻ launchd plist missing; regenerating service definitionTr^rcrdu✓ Service startedNu:↻ launchd job was unloaded; reloading service definition)rrOrrrrrr<rrr rhrir=r _launchd_bootstrap_and_kickstart _launchd_okrD_launchctl_kickstart_currentr*r+rD)rQrrBr0s r launchd_startrVs266w?--/J E # # %E     E002 ? ? ? [ [ HHQK JKt< '')i': +J > > - .E))+$U+%&  ( (033  JK/ BB C s2 E F.FFc V^8dQhRRRR/#)rrrrrKr)rs"r rrsggggrcX\P!RR\4 RV 2.R^R7R#)r kickstartr!TrNN)r*r.r<rs&r rUrUs*NNK1B0C1UG.LMUYcefrc$V^8dQhRRRRRR/#)rrQrrrrr@r)rs"r rrs!cdrc\4P\4P4W^R7\V4R# \P d&p\4P TR4Rp?R#Rp?ii;i)ziBootstrap then kickstart; False after degrading to detached (domain unsupported). Other errors propagate.rrNFT)rrRr<rUr*r+r)rQrr0s&& r rSrSsd ""35#8#8#:JWY"Z$U+   ( ( '';7s=AA;A66A;c V^8dQhRRRR/#r[r)rs"r rrs....rcL\V4\4P4R#)zaPrint a launchd success line and clear the unsupported marker (an OS fix recovers automatically).N)r rr)r\s&r rTrTs 'NE++-rc\P!R4\4 R\4 2p\ 4P 4\ P!RRV.3RRR^Z/\ 4PB\ 4PRR R 7\R 4R# \ Pd8p\T4'g\TP4'ghRp?LoRp?ii;i) stopr!rrOr"Tr#N$@g@)r# force_afteru✓ Service stopped)rrOr<rr_mark_planned_stopr*r.r/r+rDrIrB_wait_for_gateway_exitr )rr0s r launchd_stoprds66v>!"!$5$7#8 9FE   Y7gtgRgSVSXSfSfgE  3 ?    ( (2!448UVWVbVb8c8c  s0BC+4-C&&C+c$V^8dQhRRRRRR/#)rrrr5rrKr)rs"r rrs&yycy3y4yrcr\P!RRRV RV 2.3RRR^Z/\4PBR#) z\``launchctl kickstart -k domain/label``; raises so callers own per-label failure accounting.rrY-kr!r"Tr#N)r*r.rr/)rr5s&&r _launchd_kickstartrhs=NNKdvhaw4GHxPTx^`xdgdidwdwxrc ,V^8dQhRRRRRRRRRR /#) rrrold_pidr|r#rvr5rr@r)rs"r rrs4    # .3 GJ   rc\P!4\VR4,p\4P W04wrVVeV^8d Wa8wdR#\P!4V8dR#\P !R4Kc)uPoll ``domain/label`` (0.5s) until it runs on a fresh PID or ``timeout`` passes — KeepAlive respawn isn't instantaneous. launchctl ``TimeoutExpired`` propagates; callers own failure accounting.?TF)rrrxr_launchd_print_service_pidr)rrjr#r5r_loadedpids&&&$ r _wait_for_launchd_service_pidrpsb ~~#gs"33H u77F  ?sQw3> >> x ' 3rcP\P!R4\4P4p\4P 4pV RV 2p\4P 4p^RIHpV!4pVe-\4PV4'd\R4R#Ve[\4PV4\4P8Xd+\RV R24\4PV4RpVe\4P4p\RV RVR R 24^R IHp\4P#WVV!VR 7R 7'd<\4P%WRVR7'd\R4R#\R4M\RVR R24V'g\4P'4P)4'd\4P+4'g\R4\-\4P'44p\.P0!RR\4P 4V.R^R7\.P0!RRV.R^R7\R4R#\4P34\.P0!RRRV.3RRR^Z/\4P4B\R4R# \.P6Ed6p \9T 4'g!\4P;T R4Rp ? R#\R4\.P0!RRT.3RR R^Z/\4P4B\-\4P'44p\.P0!RR\4P 4T.R^R7\.P0!RRT.R^R7MA \.P6d*p \4P;T R4Rp ? Rp ? R#Rp ? ii;i\R4Rp ? R#Rp ? ii;i)!restartr!r8Nu✓ Service restart requestedu⚠ Gateway PID uL event loop is unresponsive — skipping drain and forcing a bounded stop...u→ Stopping gateway (PID u%) — draining in-flight runs (up to z.0fzs)...)drain_progress_reporter)budget_s) on_progressg.@)r#r5uR⚠ launchd did not revive the gateway after its graceful exit — forcing restartu"⚠ Gateway drain timed out after us — forcing launchd restartuE↻ launchd job was not re-registered by the plist refresh; reloadingrrMTrNrYu✓ Service restartedrgr"r#zlaunchctl kickstartu'↻ launchd job was unloaded; reloadingrOF)rrOrrr<rDr>r9_request_gateway_self_restartrTprobe_gateway_loop_livenessGATEWAY_LOOP_WEDGEDr _escalate_wedged_gateway_get_restart_exit_wait_budget"hermes_cli.update_cmd_drain_reportrs_graceful_restart_via_sigusr1rprrrrr*r._wait_for_api_server_port_freer/r+rDr) rr5r refresh_okr9ro wait_budgetrsrQr0e2s r launchd_restartrsP66yA E # # %E U " " $Fxq F668J.>- ?suBB3GG 7 8  ?su@@EIbIbb $SE)yy z E * *3 /C ?%==?K .se3XYdehXiino p Ru223Qhr}Q~2566u4X^6__ ?@jk:;s:KKhijce::<CCEEceNlNlNnNn Y ZSU99;> x ' 3}d+,rcV^8dQhRR/#)rdeepr@r)rs"r rrs>T>T>Trc\4P4p\4P4p\P!RRV.3R^ /\4P BRR/BpVP ^8HpVPpV'd\4PV4MRp^RI H pV!RR7pVe W8XdRp\4P4p \R V 24\4P4'd \R 4M\R 4\R 4V'g:\R 4\R4\R 4V'd\RV R24MVe/\RV R24\R4V 'd \R4MV 'd\\R4\R4V'd\RV R24\R4M\R4\R 4\R4M-\R4\V4V'd\RV R24V'd{\4P4R, R, p V P!4'd=\4\R4\P!RR \#V 4.^ RR!7R#R#R# \Pd RpRpELGi;i)"rr~r#r"Fr'Nr8) cleanup_stalezLaunchd plist: u9✓ Service definition matches the current Hermes installuF⚠ Service definition is stale relative to the current Hermes installz Run: hermes gateway startu!✗ Gateway service is not loadedzB Service definition exists locally but launchd has not loaded it.z3 Note: a detached gateway process is running (PID )u*✓ Gateway is supervised by launchd (PID z> Auto-start at login and auto-restart on crash are available.z@ (launchd domain was previously unavailable but is now working)uC⚠ Gateway service is registered but launchd is not supervising itz: launchd cannot manage the gateway on this macOS version.u.✓ Detached fallback process is running (PID z5 Cron jobs will fire. Stop with: hermes gateway stopu"✗ No fallback process is runninguF ⚠ Auto-start at login and auto-restart on crash are NOT available.u.✓ Gateway service is registered with launchdz+ Detached gateway process is running (PID rVrz Recent logs:tailz-20)r#r")rrrr*r.r/rBr0r,rr>r9rr rrXrr) rrQrr6service_listed list_output launchd_pidr9 fallback_pidlaunchd_unsupportedlog_files & r launchd_statusrsK--/J E # # %Efe <mbmCEL_L_mglm**a/mm M[#%;;KH`dK/"7L<#> %BBD OJ< () u%%'' IJ VW +,  12 RS +,  G ~UVW X   :;-qIJ NO  T U  ST JK  B<.PQR S I J 6 7 / 0 VW >? k  ? ~QO P 5((*V3mC ??   G . ! NNFE3x=92U S  e  $ $ sA J**KK>q})F)r`)>__doc__ __future__rpathlibrrrr(rr*rrxml.sax.saxutilsrrarr rrrr7r< frozensetrCrHrDrIrPrRrYrtrzrrrrrrrrrrrrrrrr1rDrLrPrVrUrSrTrdrhrpr"LAUNCHD_SUPERVISION_VERIFY_TIMEOUTrrrrr rs #  #, L 4 '$-]#; '0C&9#> = ?PR?&C  9 D> 2D]C 7 ;H>YX]Y<>$&C.jZCAHBJB?dB?\aB?B?J %'>g. !&y N-d&*"#-7#-#- #-  #-L>T>Tr