+ WjNkRt^RIHt^RIHt^RIt^RIt^RIt^RIH t ^RI H t H t ^RI Ht] 'd^RIHtRt]!R R 7!R R 44t]!R R 7!R R44tRRltRRltRRltRRltR;RRlltRRltRRltRRltRR ltR!R"ltR#R$lt]P>R%8Ht R&R'lt!R(] /R)R*llt"R+R,/R-R.llt#R/R0lt$R1R2lt%R3t&]'!R4R504t(R6R7lt)R+]R4R8/R9R:llt*R#)r?r@s&r gateway_profile_homerEEs% tDz446>>@ AArc V^8dQhRRRR/#)r)r7rr+r)r-s"r r.r.Msdtrcj\PR8XdV#^RIHpHpHpVR, pV!VRRR7VP RR7pVP4'dVPR8wdV#V!VPRRR7V!V4VP# \\T3dTu#i;i)zJReturn the owner named by a private overlay's gateway lock, if it has one.nt)DiscoveryError _private_lock _private_node gateway.lock directoryT)kindr7)strict) r;name$hermes_cli.gateway_runtime_discoveryrIrJrKr? is_symlinkparentFileNotFoundErrorOSError)r7rIrJrKlocktargets& r rDrDMs ww$ aa . D  d48T*  FKK>$AKfmm+DAf == w 7 s2BB2BB21B2c(V^8dQhRRRRRRRR/#) r)payloaddictr7rr Path | Noner+r"r)r-s"r r.r.bs/6B6Bt6B46B{6BN^6Brc8 \VPR44\JgVR,^8wd\RRR7#VPR4p\ V\ 4'g\RRR7#\ V4pVUu.uF]p\ V\4'gK\ VPR4\4'gKB\ VR,4V8XgK[VNK_ pp\V4^8wgC\ V^,PR4\4'dV^,R,'g\RRR7#TPR4p^R I H pVR 8H;'dVPR 4V8Hp VR9dEV 'g=VR 8H;'dVPR 4R 8Hp \Yz'dR R7#R R7#VR8wdV 'g\RRR7#VPR4p \ V \ 4'dB\;QJdRV 4F 'dK RM RM !RV 44'dRV 9d\RRR7#VPR4VPR4r\V 4\Jg&V ^8:g\ V \4'd V 'g\RRR7#VPR4p\ V\4'g\RRR7#\V4pVPR 9gVP'dVP fVP"fyVP$'ggVP&'gUVP('gCVP*'d1\,P.!VP4P0'g\RRR7#TPR4pTR!9d\RRR7#\T 'dR MR\5T^,R,T T ^TT\7T 4Te \T4MR \ TPR4;p\4'd T'dTMR R7 T 'dTR7#R R7#uupi \2d\RRR7u#i;i)"r incompatibler&served_profiles inaccessibleprofile_mismatchr7r r#r0r3 drain_reason idle_exitNr2invalid_runtime_staterc3B"TFp\V\4xK R#5ir:) isinstancer ).0cs& r _endpoint..}s5_R^QjC6H6HR^sFTzsession-authority-v1session_authority_unavailablerrinvalid_runtime_identityrinvalid_api_originrinvalid_supervisorr) r rrrrrrrr>conflictr3starting>httphttps>nonelaunchdsystemdwindowsexternal)typegetrr"rflistrArZr lenr4r1allrschemehostnameusernamepasswordr<queryfragmentport ipaddress ip_address is_loopback ValueErrorr frozenset)rYr7rprofileswantedpmatchesr#r1 restart_waitidlerepochinstanceoriginparsedrrs&&& r _endpointrbs GKK* +,C77CU;VZ[;[>,+G M MU\]^U_`lUmUm'Bk'Q$;QQDQQ  "-Q>Q>"Q>4Q>/Q>6 Q>>RRc$V^8dQhRRRRRR/#)r)r7rr%r$r+r)r-s"r r.r.s"4+Adrc\Ve(VP'd\VP4#V#)z`Home whose control socket mints tickets for *endpoint* (the multiplexer's for a served profile).)rr)r7r%s&&r control_home_forrs) 5 5 5H))** Krc V^8dQhRRRR/#)r)r7rr+r[r)r-s"r r.r.sZZTZkZrcT^RIHp^RIHpV!V4pVeV!V4R8XdV#R#)adThe root whose reservation is pending AND whose boot policy would serve *home*, else None. A ``gateway.standalone: true`` secondary is never served by it, so a reserved (or ready) root must not make its client wait out the deadline instead of starting the profile's own owner. One uncached config parse plus a lock probe: call it once per ensure iteration.)missing_owner_state)implied_host_rootNrp)rQr$hermes_cli.gateway_runtime_multiplexr)r7rrroots& r _starting_multiplexer_rootrs3 IF T "D#(;D(AZ(O4YUYYrc V^8dQhRRRR/#)r)rrr+rr)r-s"r r.r.s , , ,* ,rcR^RIHpV!VR, 4pV'd VR,#R#)aA live host's reason for not serving its named profiles, if it published one. A held root lock ordinarily means that a named profile should wait for its multiplexer. A host which published a guard refusal is different: it is a standalone gateway and can never add the named profile during that boot. Read with the same liveness rules as ``hermes gateway status``'s standalone box. )recorded_standalone_reasonzgateway_state.jsonNiNN)!hermes_cli.gateway_multiplex_moder)rrreasons& r _standalone_multiplexer_reasonrs)M '/C(C DF!6$<+t+rc$V^8dQhRRRRRR/#)r)rYrZr7rr+GatewayDiscovery | Noner)r-s"r r.r.s' l lD l l9P lrc.aaVPR4p\V\4'gR#^RIHoS!VP 4o\ VV3RlVP44R4pVfR#\RR\V4R,;'gRR7#) a A secondary the multiplexer could not serve (unusable store, home owned elsewhere) is published under ``parked_profiles`` (name -> reason). That is a terminal verdict for its clients: waiting for a ``served_profiles`` entry that will never appear is the wrong answer.parked_profilesN)normalize_profile_namec3\<"TF!wrS!\V44S8XgKVxK# R#5ir:)r )rgnrrPrs& r ri)_parked_by_multiplexer..s'Z3I#a&3QUY3Y11s, ,r`profile_parkedrr&r') ryrfrZhermes_cli.profilesrrPnextitemsr"r )rYr7parkedrrPrs&& @@r _parked_by_multiplexerrs|[[* +F fd # #: !$)) ,D ZZ\` aF ~ N8HQTU[Q\]aQbQjQjfj kkrc V^8dQhRRRR/#)r)excPermissionErrorr+rr)r-s"r r.r.s4Krcv^RIHp\W4'd"\RVP\ V4R7#R#)zWThe named refusal when the client proved the boundary from the control pipe, else None.) RefusedOwnerr`rN)!gateway.runtime_bootstrap_windowsrrfr"r&r )rrs& r _refused_owner_verdictrs->#$$COOTWX[T\]] rc$V^8dQhRRRRRR/#)r)r7rtimeoutfloatr+rr)r-s"r r.r.s"5=Trc ^RIHpHp^RIHpV!V4pVfR#V!WQR7p\Y`TR7p T P R8XdT P"R 8Xd \%Y`4#T # \ d:p\ T4pTfRp?R#^RIHp T !YP4RJdRp?R#TuRp?#Rp?i\\\T\\\3dR#i;i) aA served secondary has no socket of its own: the default multiplexer's control socket answers for it, and its ``identify`` lists the home under ``served_profiles``. Only the multiplexer's live descriptor proves service; a held ``gateway.lock`` alone does not.)rIquery_identify)multiplexer_root_forNr)host_serves_named_profileF)rr`ra)rQrIrrrrrrrrTConnectionRefusedError TimeoutErrorrUr TypeErrorrr#r&r) r7rrIrrrrYrnamedrr*s &$ r _served_by_multiplexerrsTI  %D | 7w4 8F ||~%&*<*<@R*R%g44 M#  's+ =O $T 0E 9 5|^ Z ,s5 A## C.B"B"B"C"'C CCrHc V^8dQhRRRR/#)r)r7rr+z int | Noner)r-s"r r.r.sTjrc0^RIHpHpHpHpHpRFpV!W, RR7pV!V4pVeV\ P!48XdK;VPR4p V e W!V48wdK^V!WpR7'dKoV!Wx4'gKVu# R#)aThe PID a refusal may name: one of *home*'s gateway records whose process is provably that gateway, else None (the caller keeps the generic ``authorization``). Proof is the shared identity chain: alive, its recorded start time known and equal to the live one (a recycled PID differs), its recorded home not another profile's, and its live command line (or, when that is unreadable across the elevation boundary, its record) a gateway's. A stale ``gateway.pid`` falls through to ``gateway.lock`` instead of masking it.)_get_process_start_time_live_pid_from_record_read_json_file _record_matches_live_gateway_pidrecorded_gateway_home_conflictsT) bare_pid_okN start_time) expected_home)z gateway.pidrL) gateway.statusrrrrrr;getpidry) r7rrrrrrPrecordpidrecordeds & r _owner_pidrs0 $?#F+ ;#, ::l+  x+B3+GG  *6 F F /<<  0 rrvc$V^8dQhRRRRRR/#)r)r7rrvr,r+r"r)r-s"r r.r.s' I I4 IT I@P IrcV'd?\V4;pe0^RIHpV!V4pVe\ RV^,V^,R7#\ RRR7# \dRpL?? tOL$AB CDT>EE 5 6 ''>  M#D) N "rww$ J1$2GHHvH';OX^__&& O&s+)ux~= Z +Tliveours) time hermes_clir MARKER_NAME read_bytesstatst_mtimeEMPTY_MARKER_GRACE_SECONDSrTrU judge_markercheckout_lock_held)homesrr fence_homer<raws& r _update_fencedrEs& 333 //#C99;!5!55 8^8^^  # #C ( +/? ?;CaCaCcCc  !    sAB88 CCCCc$V^8dQhRRRRRR/#)r)r7rrrr+r"r)r-s"r r.r.cs'EE$EE3CErc|\WR7pVPR8Xd\V4'dV#\RRR7#)abWhat ensure answers while an update owns the install. The update's own drain (``pause-for-update``) is a restart's after-turn wait whose owner may hold a turn parked on approval/clarify, so it is handed out for clients to answer it (#139041). Discovery only: nothing is started or replaced while fenced, and any other owner state stays ``update_paused``.rr3 update_pausedr^)rr#r5r")r7robserveds&& r _fenced_verdictrcs6 )?H~~# 8(<(< JO DDrzVan older Hermes gateway still owns this profile after a stop; run: hermes gateway stoprcreplacedc(V^8dQhRRRRRRRR/#) r)r7rdeadlinerrz set[Path]r+r"r)r-s"r r.r.ts/@@4@5@I@Rb@rcv^RIHp\W!V4R7pVPR8wgVPR8wdV#W9d\ RR\ R7#^RIHpVPV4VPWR7pVe-\ RRVPPV\ 4R7#\ RR R 7#) zDiscovery, except that a gateway an older Hermes left on this home is stopped once (like ``hermes gateway stop``) and reported as retiring; a refusal keeps ``incompatible`` + its remedy.) remainingrr]rr)gateway_runtime_replacerr3rr^) "hermes_cli.gateway_runtime_servicerrr#r&r"_REPLACE_FAILED_DETAILrraddreplace_incompatible_ownerREFUSAL_DETAILry)r7rrrrreplacerefusals&&& r _observe_replacing_stalerts=(y7JKH~~'8+?+?CU+U VP*\09d)RRRrpVP3\5R V!V 444KVP.R9dV#Ve8VP.R8Xd'^RIHp\-RRV!WVV P:4R7#VP.R 8Xd V'gRp VP.R8XdRpVP.R8XdV 'g \=V 4MRpVe"\?V4;p'd\-RRVR7#VeRp VP.R8XdV 'g^RI H!pH"pV!V 4;'gT pV!VV R7pVf VV 8XdV!V 4;pe TpV!VV R7p\GW!V 4R7pVP.R8wdEKVe V!VV R7M^RIH$pH%pTV!V4rV!VWR7p Rp VP3\5VV!V 444\5VR,R4pEKs \Ld\-R R R 7u#Td,p\-TP.TPNR 7uRp?#Rp?i\Pd\ST 4u#\Td\-RRR 7u#i;i)aEnsure once; pending remains pending at deadline. Never installs anything. The one owner it replaces is a gateway an older Hermes left running on this install's own home (``incompatible``/``runtime_protocol``, the upgrade case): it is stopped the way ``hermes gateway stop`` stops it, once, and the current one started like any absent owner. Another install's or a newer Hermes's gateway stays refused, with the reason in ``detail`` (``hermes_cli.gateway_runtime_replace``). A successful service command or Popen is not session readiness. After an owner/start request is observed this invocation never launches another. ``idle_exit``: an unmanaged daemon this call starts ends itself once idle (client entrypoints: chat, TUI, cron/kanban/ACP clients). A gateway that is ending that way reports ``draining`` (``idle_exit``); this call waits for it to go and starts the replacement transparently. N)RuntimeStartError!discover_existing_gateway_servicerstart_existing_gateway_service)get_default_hermes_rootget_process_hermes_homerFg?Trrprr^r3g?absent)startup_failure_reportr`runtime_exitedrr)rmultiplexer_serves_homer r)spawn_unmanaged_gatewaystdio_log_size)rrcg?g?runtime_start_failed>rrp)+rr rrrrhermes_constantsrrrrr monotonicrDrrAsetrrpollrr&r"r# _RETIRINGsleepmin hermes_cli.gateway_runtime_startrrrrrrrrrrrrrrrU) rrrcrrrrrrrrr7 requestedchild child_home child_offsetretiringrdelaystatusrrreservedrrrrWservicehostrrrs &$$ r ensure_gateway_runtimer2s: R == ! !W\>??~~')H tOL$AB CDI E#Q H%H EETt%<%>@W@YZ[[&tYx-@AA&+%6UZZ\DF/IH##'88' KK~~+0D0D 0Q-15$U 3sIh$789~~%;;!hnn&@T'DT/Ej`fhmhqhq/rtt~~+H ~~) ;C>>X;U^g1$7mqH#3QRZ3[)[)['DT]cdd# ~~))l06>>$;FXV?v~CTUYCZ;Z4:g"F?QYZG4T9XCVW>>X-&27XNh/5~f7M 3FXcE JJs5)H"56 7 T*E D CC C szzBB ~ TM?r:)+__doc__ __future__r dataclassesrrrr;pathlibrtypingrr urllib.parsergateway.runtime_contractrDEFAULT_ENSURE_TIMEOUTr r"r5rArErDrrrrrrrrP_NATIVE_WINDOWSrrrrrr rr$rr2rrr r<s&N"! )!5  $   " $ qDB*6BrZ , l>''T/> IO I!TC!TH<Er {J/ 0 @$iTI_iT-2iTiTr