+ Wjlva0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI H t ^RIHt^RIHtHt^RIHt^RIHtHtHt^RIHt]P6!]4tR tR tR t ]!!0RWm4t"]"R 0, t#]PH!4R 8Ht%Rs&] PN!4t(RXRRllt)RRlt*RXRRllt+]!RR7!RR44t,RR/RRllt-RR/RRllt.RRlt/]!RR 44t0R!R"lt1R#R$lt2R%R&lt3R'R(lt4R)R*/R+R,llt5RRR-R/R.R/llt6RXR0R1llt7]!R2R*R37t8R4]9R5&] R6R7l4t:R8R9lt;R:R;ltR?lt>R@RAlt?RR/RBRCllt@RRRDR*RER*/RFRGlltARHRIltBRJRKltCRLRMltDRNR/RORPlltERRRNR/RQRRlltFRSRTltGRURVltHR#)Yu-Process identity: spawn tags, the machine-wide spawn ledger, and the Windows job-object self-attach. Three layers make every long-lived Hermes process positively identifiable, so reapers (``hermes update``, Desktop startup sweeps) never guess lineage from PPID archaeology or cmdline matching: 1. spawn tags (``HERMES_SPAWN`` env stamped by the spawner); 2. a ``(pid, create_time)`` ledger; 3. Windows job-object self-attach with ``KILL_ON_JOB_CLOSE`` so the whole child tree dies with the root — no launcher→worker chains left holding ``.pyd`` locks. ) annotationsN)contextmanager) ContextVar)asdict dataclass)Path)IteratorOptionalSequence)atomic_json_write HERMES_SPAWNv1zspawn-ledger.json mcp-helperWindowsc V^8dQhRRRR/#) project_rootOptional[Path]returnstr)formats"OC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\process_identity.py __annotate__r2s Q Q^ Qs QcVf^RIHp\V4p\\V4P 44P4p\P!VPRR44P4R,# \d5\\4P 4P P pLi;i \d\T4P4pLi;i)zBStable 12-hex identifier for THIS install (derived from its path).) PROJECT_ROOTzutf-8replace:N N)hermes_constantsrr Exception__file__resolveparentrlowerOSErrorhashlibsha256encode hexdigest)r_root canonicals& r install_idr,2s B >;L.\*2245;;=  >>)**7I> ? I I KC PP  B>113::AAL B . %++- .s"B0CfSfrc \4pVeVR MRpRP\\V4V\ \ P !44V34#)zGValue for the child's ``HERMES_SPAWN`` env var, stamped by the spawner.z.3f-:)rBjoin _TAG_VERSIONr,rr@rA)rGrcreate create_parts&$ rbuild_spawn_tagrYnsE ! #F%+%7VCLSK 88\:l#;Wc"))+FVXcd eerc$V^8dQhRRRRRR/#)rrGrrrrzdict[str, str]r)rs"rrrus&PPsP^P~Prc&\\WR7/#)z9Env fragment a spawner merges into a child's environment.r) SPAWN_ENV_VARrY)rGrs&$r spawn_envr^us ?7N OOrc V^8dQhRRRR/#)rrawobjectrzOptional[SpawnTag]r)rs"rrrzs H H H$6 HrcZ\V\4'dVPR4M.p\V4^8wgV^,\8wdR#Vwr#rEpV'd V'gR#\ V4pVR8XdRM \ V4pT^8d \Y4Yx4#R# \dR#i;i)z@Parse a ``HERMES_SPAWN`` value; ``None`` for anything malformed.rTNrS) isinstancersplitlenrVrHr. ValueErrorrE) r`parts_rFrGpid_screate_sr;rWs & rparse_spawn_tagrkzs(c22CIIcNE 5zQ%(l2+0(A '%j!SeHo7:Ag8Gc 2G4G s'B B*)B*c]tRt^t$R]R&R]R&R]R&R]R&R]R &R]R &R ]R &R]R &RtR]R&RtR]R&RtR]R&RtR]R&Rt R]R&Rt R#) LedgerEntryrHr;r=r5rrGrFr<rIrJr. registered_atargvhostNportprofile hermes_homeFboolisolatedr) rKrLrMrNrOrqrrrsrtrvrPrrrrmrmsc H  L L## ID#ND-GSKHdrrmcV^8dQhRR/#)rrrr)rs"rrrs 9 9d 9rc^RIHp\V!44\, # \d%^RIHp\T!44\, u#i;i)zCMachine-root ledger path (shared by every profile of this install).)get_default_hermes_root)get_hermes_home)rryrLEDGER_FILENAMEr hermes_cli.configrz)ryrzs r _ledger_pathr}sC9<+-.@@ 95O%&889s #,AAc V^8dQhRRRR/#rpathrrzOptional[list[dict]]r)rs"rrrs\\t\ 4\rcVPRR7pTP 4'g.#\ P !T4p\T\4'd+TUu.uFp\T\4'gKTNK up#R# \d.u#\\3dR#i;i \\3dR#i;iuupi)zEntries list, ``[]`` for empty/missing, ``None`` for CORRUPT (never silently an empty roster). Mirrors the #89298 contract: corrupt is a distinct state that must never be silently treated as an empty roster. z utf-8-sig)encodingN) read_textFileNotFoundErrorr% UnicodeErrorstripjsonloadsrfr6rclistdict)rtextparsedes& r _read_ledgerrs ~~{~3 ::<< D!:DFD9Q9Qv 5v!At!4AAv 5[W[[  \ "  " 5s:BB+C:C B(B(#B('B(+C?Cc V^8dQhRRRR/#rr)rs"rrrs  T .B rc\V4pVfRVPVPR,4p\P!W4\ P RV4V#V# \dT#i;i)zULedger entries; ``None`` after parking a corrupt file. Caller holds ``_LEDGER_LOCK``.z.corruptz(spawn ledger was unreadable; moved to %s)r with_suffixsuffixr@rloggerwarningr%)rentriesparkeds& r_read_ledger_or_quarantinersn4 G!!$++ ":;  JJt $ NNEv N N7N   N s,A## A21A2c V^8dQhRRRR/#)rr5r=rrur)rs"rrrsVVVTVrchVRJ;'g(\\V4\V4, 4R8#)zZDoes the live ``proc`` match a recorded ``create_time`` (2 s tolerance; ``None`` matches)?N@)absr9r.)r7r5s&&r_same_incarnationrs/ $  U U#mD&9E+,rc#"\P\V4;'g\P44pRx\P V4R# \P T4i;i5i)z_Mark the enclosed activity (and threads it hands its context to) as work for the local Desktop.N)rsetrurreset)rtokens& rserving_local_desktopr%sR # & &tF|'S'S7M7Q7Q7S TE, $$U+$$U+s;A3AA3A00A3cV^8dQhRR/#rrrur)rs"rrr/s(($(rc*\P4#N)rrrrrserves_local_desktop_nowr/s ! % % ''rc$V^8dQhRRRRRR/#)ridentityrdeclaredrarrur)rs"rrr3s!::>:V::rcVRJ;'dH\V\4;'d0VPR4R8H;'dVPR4RJ#)aA connected client is the Desktop app on this machine when it says so (it knows its connection mode) AND it redeemed a native ticket, which only this machine's private control socket mints, for this OS user. Neither alone: the CLI and TUI hold native tickets too, and the claim is the client's word. A remote Desktop reaches a backend through SSH, URL or Cloud credentials, never a native ticket.Tproviderlocalnative_bootstrap)rcrr)rrs&&rlocal_desktop_clientr3s[   9 9Hd!; 9 9 Z@X\c@c 9 9 /0D8:rcV^8dQhRR/#)rrz%tuple[Optional[int], Optional[float]]r)rs"rrr<s!!#H!rc\\PPRR44pV^8:dR#\PPRR4pVP R4'gVR3#V\VPR^4^,4R, 3# \\ 3d^pLi;i \ \3dTR3u#i;i) zSpawner ``(pid, create_time)`` from the Electron app's HERMES_PARENT_PID (+ optional ``winms:`` start marker) parent-death watchdog vars, so ledger lineage works with every Desktop version without a TS change. ``(None, None)`` when absent/malformed.HERMES_PARENT_PIDrpNHERMES_PARENT_START_MARKERzwinms:rTg@@)NN) rHr@rrr6rf startswithr.rd IndexError)rImarkers rrr<s"**..)D ,T288b !!%%,, %EII% #1U8QUU=-AB%O Aw   fUm$  @ #DKK 0 dT J!    LL4tL D' " # sLD+'C5C59#C5!C5'D+&C:5D+:"D(D+'D((D++ D< c(V^8dQhRRRRRRRR/#) rr;rHrGrrrrrur)rs"rrrws)   c N VZ rc \V4pT^8d \T4MRpTfR#\ YY\ P !4\44p^RIpRPTPT4P4R,4Tn \T4# \\3dR#i;i \dL0i;i)aRecord a CHILD process this process just spawned. Best-effort. Mirror of :func:`register_self` for children that cannot register themselves (stdio MCP helpers: arbitrary ``npx``/binary servers never import Hermes code). Records the child's ``(pid, create_time)`` with THIS process as spawner, so a helper whose spawner is provably gone is a reapable orphan and one whose spawner is alive is never reaped. FNrr)rHr6rfrBrr@rAr3rUr?cmdlineror r)r;rGr child_createrr3s&&$ rregister_childrws#h14a',TL s'NbNd eE XXfnnS199;C@A    z "    s# B>B2B/.B/2 C?C all_installs verified_onlyc(V^8dQhRRRRRRRR/#)rrrrrurrz list[dict]r)rs"rrrs,#:>W[rc \V4p\;_uu_4\\44pRRR4Xf.#VUu.uFpV'gVP R4V8XgK#\ VP R4\ 4'gKJV'd,\VR,VP R4RR7RJgK|M(\VR,VP R44RJgKVNK up# +'giL;iuupi)uNLedger entries for this install, or all installs when explicitly requested. ``verified_only`` requires an exact live PID/create-time pair. The default preserves unknown processes for reapers, which must not mistake missing proof for a dead process. Entries whose ``(pid, create_time)`` no longer matches a live process are excluded (PID reuse reads as dead, thanks to the create-time pair). A corrupt ledger is quarantined and read as empty — identical philosophy to the backend-ownership fix (#89298): never let corruption erase or fake a roster; never let it block the caller either. NrFr;r5T)rF)r,rrr}rrcrHr)rrr want_installrrs$$$ rledger_entriesrsl+L ,\^<   a AEE), < quuU|S )  %!%% *>t LPT T U#5ahm@T#U]b#b 7   s5C0 D D%"D D%D>$D'D0 D c V^8dQhRRRR/#)rrrrrr)rs"rrrs0040N0rcVPR4p\V\4'dV^8:dR#\WPR44pVfR#V'*#)zYIs the recorded spawner of this entry provably gone? ``None`` when unrecorded/unprovable.rINrJ)rrcrHr)rrIalives& rspawner_is_deadrsL))M*K k3 ' ';!+; {II6F,G HE=4/%i/rc$V^8dQhRRRRRR/#)rr;rHr5r=rrur)rs"rrrs!cDrcB^RIpVPV4p\W14'gR#VP4VP RR7R# TP dTP 4R#i;i \d\PRTRR7R#i;i)zYSIGTERM, 2 s grace, then SIGKILL. False when the incarnation moved on or is already gone.NFrtimeoutTz"orphan terminate failed for pid %sr) r3r?r terminatewaitTimeoutExpiredkillr rr)r;r5r3r7s&& r_terminate_then_killrs~~c" 33   IIcI "$$  IIK   93 Ns3&A7A7A!A40A73A44A77#BBc V^8dQhRRRR/#)rr;rHrrur)rs"rrrsCDrc^RIHpHpHpV!V4R9dR#Y!4;'gR9dR#^RIp^RIp\ RVP 4VPV4P4, 4V8# \dR#i;i)uNull-spawner owner with no live supervisor: reparented to init, old, lock-unclaimed. Mirrors ``_reap_orphaned_desktop_local_serves``: operator-managed remote backends legitimately sit at ppid 1 (systemd, an exited sshd), so ppid alone is never proof — the SSH-lock claim and the 180 s lock-write grace exclude live-supervised backends. Windows: the ppid probe is unavailable there, so this rung never fires (desktop tree-kill reaps instead). )_REAP_MIN_AGE_SECONDS_lock_owned_serve_pids _process_ppidFNg)rr) hermes_cli.dashboard_procsr r r rr3maxr?r5r )r;r r r _timer3s& r_reparented_orphanrs  J J  V + )+11r 23 v~~c':'F'F'HHIMbbb s!A; A;A;AA;; B  B kill_fnc$V^8dQhRRRRRR/#)rr;rHr5r=rr<r)rs"rrrs$-- -*-@M-rcvaa\S4oS^8:gS\P!48XdR#\ TT3Rl\ 44R4pTfR#\T4RJd'TPR4f\S4'gR#Te T!S4M$\STPR44'gR#\PRTPR 4S4S# \\3dR#i;i \dR#i;i \d\PRTRR7R#i;i) uLKill the conflicting host owner when the ledger PROVES it is a dead session's orphan. HELD_BY_OTHER rung for #121964: the owner PID is alive (re-parented to init), so ``record_is_stale()`` never fires and a fresh backend would loop observe-only against the same orphan forever. Reaped only with a live ``serve``/``dashboard``/``gateway`` entry for THIS install whose spawner is provably dead — or whose spawner was never recorded and which is reparented to init, old, and claimed by no Desktop SSH lock. Live-spawned, lock-claimed, young, interactive, self, or unprovable owners are never touched. Returns the reaped pid, else ``None``; never raises. # ponytail: a dead session's surviving backend.lock.json still shields its orphan (the lock # has no session liveness); clearing stale locks is a Desktop-side lifecycle job, not this rung. Nc3"<"TFpVPR4S8XgKVPR4\9gK7VPR4e7Se3\\VR,4\S4, 4R8gKVxK R#5i)r;rGr5Nr)r_BACKEND_OWNER_PURPOSESrr.).0rr5r;s& r .reap_orphaned_backend_owner..s~ O(1e #y!%<<%% &.+2Eq/053EEFL Q(sBBAB BTrIr5z backend owner reap failed for %srz'reaped orphaned %s backend owner pid %srG)rHr6rfr@rAnextrr rrrrrrinfo)r;r5rrsff$ rreap_orphaned_backend_ownerrs(#h ax3"))+%  O( O   }uT) IIm $ ,1CC1H1H   CL%c599]+CDDE  KK9599Y;OQTU J9 z "   7 Ns: C'C? D!D'C<;C<? D D#D87D8c V^8dQhRRRR/#)rrrrz list[int]r)rs"rrrs,,~,W`,rcV.p\VR7p\P!4pTFpTP R4pTP R4R8wg$\ T\ 4'dT^8:gYd8XdKP\T4RJdKaTe T!T4Mr^RIpTPT4p\YP R44'gK\'d \T4M#TP4TPRR 7TP#T4K T'd!\$P)R \+T4T4T# \dTu#i;i TPdTP!4Lui;i \d\$P'R TRR 7EKi;i) u.Kill ledger-registered stdio MCP helpers whose spawner is provably dead. Ledger-driven startup-sweep rung (not cmdline-heuristic): a helper is reaped ONLY when it has a live ``mcp-helper`` entry for THIS install AND ``spawner_is_dead`` is ``True`` — never ``None``/unprovable, never a live spawner. r\r;rGrTNr5rrz$mcp-helper orphan reap failed for %srz*reaped %d orphaned stdio MCP helper(s): %s)rr r@rArrcrHrr3r?r _IS_WINDOWS_kill_process_tree_windowsrrrrrrrrre) rrreapedrown_pidrr;r3r7s $$ rreap_orphaned_mcp_helpersr#soF l;iikG W))E"Cyy#|3:c3;O;OSVZ[S[_b_mu%T1" ~~c*(yy/GHH;.t4NN$$ # . MM# 5: @#f+vV ME  6"00$ $ W LL?QUL V V Ws` EA F7FAF FF5EF EE!E=:F<E==F#F('F(cV^8dQhRR/#)rrNoner)rs"rrr@src^RIpVPRR7pVFpVP 4K VP 4VPW .,RR7wrETFpTP4K R# TPTP\3d.pLi;i \ dKi;i \ dLi;i \ dR#i;i \ dKi;i)uTerminate *proc* and every still-alive descendant (npx.cmd → node.exe), Windows-only (#61059): without a pgid there is no group-kill, and grandchildren reparent to nothing (ParentId=null) once the direct child exits, so they must be reached through the tree.NT) recursiverr) r3childrenr AccessDeniedr%rr wait_procsr)r7r3 descendantschildrhrsurvivors& rr r @smmdm3   OO    $$[6%93$G  MMO  &"5"5w ?              sWA<B&B8C &C<$B#"B#& B54B58 CC CC C*)C*cV^8dQhRR/#rr)rs"rrr^s::$:rc a a a a \'d \e \RJ#^RIo ^RIHo S P RRR7pRpRpRp^ p!V 3R lR S P 4o !V V 3R lR S P 4o !V V V 3R lRS P 4pVP RR4pV'gR#V!4pW,V,VPnVPWdS PV4S PV44pV'd&VPW`P44'gVPV4R#Vs\P!R4R# \"d\P!RRR7R#i;i)zPlace this process in a job that dies (whole tree) when we die. Windows-only, idempotent. ``BREAKAWAY_OK`` keeps children spawned with ``CREATE_BREAKAWAY_FROM_JOB`` (gateway relaunch during update, detached watchers) escaping exactly as before. N)wintypeskernel32T)use_last_errori iic\<]tRtRtRUu.uFqSP3NK uptRtR#uupi)5attach_self_to_kill_on_close_job..IO_COUNTERSirrN)ReadOperationCountWriteOperationCountOtherOperationCountReadTransferCountWriteTransferCountOtherTransferCount)rKrLrMrN c_ulonglong_fields_rP)nctypess0r IO_COUNTERSr4rs7:QR:QAF../:QRHRs)r?c 8<]tRtRtRZP3RZP3RZP 3RZP 3RZP 3RZP 3RZPZP43R ZP 3R ZP 3. t R t R #) Kattach_self_to_kill_on_close_job..JOBOBJECT_BASIC_LIMIT_INFORMATIONiwPerProcessUserTimeLimitPerJobUserTimeLimit LimitFlagsMinimumWorkingSetSizeMaximumWorkingSetSizeActiveProcessLimitAffinity PriorityClassSchedulingClassrN) rKrLrMrN LARGE_INTEGERDWORDc_size_tPOINTERULONGr<rP)r>r0sr!JOBOBJECT_BASIC_LIMIT_INFORMATIONrAws*H,B,BCF[]e]s]sEtx~~.1H&//0Z(&//:=QS[SaSa_"HNN3 HrrPcD<]tRtRtRZ3RZ3.V3RlR4OtRtR#)Nattach_self_to_kill_on_close_job..JOBOBJECT_EXTENDED_LIMIT_INFORMATIONiBasicLimitInformationIoInfoc3 ><"TFqSP3xK R#5ir)rM)rr=r>s& rrXattach_self_to_kill_on_close_job..JOBOBJECT_EXTENDED_LIMIT_INFORMATION.s#k1j1foo&1jsrN)ProcessMemoryLimitJobMemoryLimitPeakProcessMemoryUsedPeakJobMemoryUsed)rKrLrMrNr<rP)r?rPr>sr$JOBOBJECT_EXTENDED_LIMIT_INFORMATIONrRs2(*KL;'k1jkHrr[Fz$attached to kill-on-close job objectzjob object self-attach failedr)r _JOB_HANDLEr>r0WinDLL StructureCreateJobObjectWrSrDSetInformationJobObjectbyrefsizeofAssignProcessToJobObjectGetCurrentProcess CloseHandlerrr ) r1"JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSEJOB_OBJECT_LIMIT_BREAKAWAY_OK$JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK!JobObjectExtendedLimitInformationr[jobrokr?rPr>r0s @@@@r attach_self_to_kill_on_close_jobrl^sb ;+1$&&1#==D=A-3*(.%/5,,-) R&** R   0@0@   63C3C ''d335 . NQu u ""- - -cV\VbVbcgVhjpjwjwx|j} ~::3@Z@Z@\]]   %  ;<  4t DsB E.BEE"FF>servegateway dashboardrr)I__conditional_annotations____doc__ __future__rr&rloggingr@platformr threadingr contextlibr contextvarsr dataclassesrrpathlibrtypingrr r utilsr getLoggerrKrr]rVr{ frozensetREAPABLE_PURPOSESrsystemrr\Lockrr,r9rBrErYr^rkrmr}rrrrrrrrOrrrrrrrrrrrrr#r rl)rps@rrs#    %")//#   8 $  %MN,|n<oo9,  ~~  Q %. $$$$fDfPdP H&  ( 9\* V QV, $ ae BU,,66T^c+d(d,,(:!&> T 2&*AF^c60&.-7;-`,,d,d<:r