it:,dZddlZddlZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZmZdZdZd Zejd kZeZd e fd Zd e fd Zd e fdZd efdZdddeded dfdZded efdZdeded e fdZ ded eefdZ!ded eefdZ"ded efdZ#de$eefd efdZ%d e$fdZ&d e$eeffdZ'd e d ee$eeffd!Z(d e d"e$eefd dfd#Z)d ee$fd$Z*d8d%Z+eeeeeeeed&d'ed(ed)ed*ed+ed,ed-ed.ed dfd/Z,d ee$eeffd0Z-d8d1Z.d9deded2ee$eefd e/eee$eefffd3Z0deded dfd4Z1d efd5Z2d eefd6Z3d efd7Z4dS):u Gateway runtime status helpers. Provides PID-file based detection of whether the gateway daemon is running, used by send_message's check_fn to gate availability in the CLI. The PID file lives at ``{HERMES_HOME}/gateway.pid``. HERMES_HOME defaults to ``~/.hermes`` but can be overridden via the environment variable. This means separate HERMES_HOME directories naturally get separate PID files — a property that will be useful when we add named profiles (multiple agents running concurrently under distinct configurations). N)datetimetimezone)Pathget_hermes_home)AnyOptionalzhermes-gatewayzgateway_state.jsonz gateway-lockswin32returnc(t}|dz S)z@Return the path to the gateway PID file, respecting HERMES_HOME.z gateway.pidr)homes 6/home/agentuser/.hermes/hermes-agent/gateway/status.py _get_pid_pathr s   D - cNttS)z5Return the persisted runtime health/status file path.)r with_name_RUNTIME_STATUS_FILErr_get_runtime_status_pathr&s ?? $ $%9 : ::rctjd}|rt|Sttjdtjdz dz }|dz tz S)zBReturn the machine-local directory for token-scoped gateway locks.HERMES_GATEWAY_LOCK_DIRXDG_STATE_HOMEz.localstatehermes)osgetenvrr _LOCKS_DIRNAME)override state_homes r _get_lock_dirr +s`y233HH~~bi 0$)++2H72RSSTTJ  > 11rcbtjtjSN)rnowrutc isoformatrrr _utc_now_isor&4s < % % / / 1 11rF)forcepidr'c|rtr tjddt|ddgddd}n0#t$r#t j|tjYdSwxYw|j d kr6|j p|j pd }t|pd |dS|s tjnttd tj}t j||dS) zTerminate a PID with platform-appropriate force semantics. POSIX uses SIGTERM/SIGKILL. Windows uses taskkill /T /F for true force-kill because os.kill(..., SIGTERM) is not equivalent to a tree-killing hard stop. taskkillz/PIDz/Tz/FT )capture_outputtexttimeoutNrztaskkill failed for PID SIGKILL) _IS_WINDOWS subprocessrunstrFileNotFoundErrorrkillsignalSIGTERM returncodestderrstdoutstripOSErrorgetattr)r(r'resultdetailssigs r terminate_pidrB8s    ^VSXXtT:# FF !    GC ( ( ( FF    ! !}; ;BBDDG'E%E%E%EFF F % U&..769fn+U+UCGCs*6)A#"A#identityctj|dddS)Nutf-8)hashlibsha256encode hexdigest)rCs r _scope_hashrKSs3 >(//'22 3 3 = = ? ? DDrscopecJt|dt|dz S)N-z.lock)r rK)rLrCs r_get_scope_lock_pathrOWs* ??DD H(=(=DDD DDrctd|d} t|dS#tt t ttf$rYdSwxYw)z:Return the kernel start time for a process when available./proc/z/statN) rint read_textsplitr5 IndexErrorPermissionError ValueErrorr=)r( stat_paths r_get_process_start_timerZ[sx(c((())I9&&((..004555 z?J Ptts8A#A54A5ctd|d} |}n#tttf$rYdSwxYw|sdS|ddddS) zz._looks_like_gateway_process..~(::gw'!::::::r)reany)r(patternsrls @r_looks_like_gateway_processrqrsI#C((G uH ::::::: : ::rrecordc|dtkrdS|d}t|tr|sdSdd|Dd}t fd|DS)zMValidate gateway identity from PID-file metadata when cmdline is unavailable.kindFargv c34K|]}t|VdSr")r4)rjparts rrmz-_record_looks_like_gateway..s(22Ts4yy222222rrgc3 K|]}|vV dSr"rris rrmz-_record_looks_like_gateway..rnr)get _GATEWAY_KIND isinstancelistjoinro)rrrurprls @r_record_looks_like_gatewayrs zz&]**u ::f  D dD ! !uhh22T22222GH ::::::: : ::rctjtttjt tjdS)N)r(rtru start_time)rgetpidr{r}sysrurZrrr_build_pid_recordrs9y{{SX-bikk::   rc rt}|dddditd|S)NstartingFr) gateway_state exit_reasonrestart_requested active_agents platforms updated_at)rupdater&)payloads r_build_runtime_status_recordrsJ!!G NN#""nn  Nrpathc2|sdS |}n#t$rYdSwxYw|sdS t j|}n#tj$rYdSwxYwt|tr|ndSr") existsrTr<r=jsonloadsJSONDecodeErrorr|dict)rrdrs r_read_json_filers ;;==tnn$$&& tt t*S//  tt $// 977T9s!&? A  A A**A=<A=rc|jdd|tj|dS)NTparentsexist_ok)parentmkdir write_textrdumps)rrs r_write_json_filers?KdT222OODJw''(((((rct}|sdS|}|sdS t j|}n9#tj$r' dt|icYS#t$rYYdSwxYwwxYwt|trd|iSt|tr|SdS)Nr() rrrTr<rrrrSrXr|r)pid_pathrdrs r_read_pid_recordrsH ??  t      $ $ & &C t*S//   3s88$ $ $ $   444  '3 w'4   4s0A%%B5BB BBBBcVtttdS)zCWrite the current process PID and metadata to the gateway PID file.N)rrrrrrwrite_pid_filers#]__&7&9&9:::::r)rrrrplatformplatform_state error_code error_messagerrrrrrrrct}t|p t} | di| dtt j| d<tt j| d<t| d<|tur|| d<|tur|| d<|turt|| d<|tur td t|| d <|turb| d |i} |tur|| d <|tur|| d <|tur|| d <t| d<| | d|<t|| dS)zBPersist gateway runtime health information for diagnostics/status.rrtr(rrrrrrrrrrN)rrr setdefaultr{rrrZr&_UNSETboolmaxrSrzr) rrrrrrrrrrplatform_payloads rwrite_runtime_statusrs $ % %Dd##E'C'E'EG {B''' v}---Y[[GEN3BIKK@@GL(NNGLF""#0 &  !, &&'+,='>'>#$F""#&q#m*<*<#=#= v";/33HbAA  ' '(6 W % V # #-7 \ *  & &0= _ -)5&)9 X&T7#####rc8ttS)z=Read the persisted gateway runtime health/status information.)rrrrrread_runtime_statusrs 355 6 66rc6 t}t|}|Q t|d}n#ttt f$rd}YnwxYw||t jkrdS|ddS#t$rYdSwxYw)ahRemove the gateway PID file, but only if it belongs to this process. During --replace handoffs, the old process's atexit handler can fire AFTER the new process has written its own PID file. Blindly removing the file would delete the new process's record, leaving the gateway running with no PID file (invisible to ``get_running_pid()``). Nr(T missing_ok) rrrSKeyError TypeErrorrXrrunlink Exception)rrrfile_pids rremove_pid_filer s   &&   ve}--i4    #BIKK(?(? t $$$$$      s7B 8B AB AB 2B BBmetadatact||}|jddit|t ||pit d}t |}|<|r( |dn#t$rYnwxYw|r t|d}n#tttf$rd}YnwxYw|tjkr@|d|dkrt#||d|fS|du}|s tj|dt'|}|d|||dkrd}|s t)d |d } | r`| D]9} | d r"| d } | d vrd}n:n1#tt2f$rYnwxYwn#t4t2f$rd}YnwxYw|r( |dn#t$rYnwxYwd|fS tj|tjtjztjz} n!#t>$rdt |fcYSwxYw tj | dd5} tCj"|| dddn #1swxYwYn7#tF$r* |dn#t$rYnwxYwwxYwdS)zAcquire a machine-local lock keyed by scope + identity. Used to prevent multiple local gateways from using the same external identity at once (e.g. the same Telegram bot token across different HERMES_HOME dirs). Tr)rL identity_hashrrNrr(rrrQz/statuszState:)TtFwrE)encoding)TN)$rOrrrrKr&rrrr=rSrrrXrrrzrr6rZrrT splitlines startswithrUrWProcessLookupErroropenO_CREATO_EXCLO_WRONLYFileExistsErrorfdopenrdumpr)rLrCr lock_pathrrexisting existing_pidstale current_start _proc_status_line_statefdhandles racquire_scoped_lockr$sn %UH55I 4$777   $X..N"nn Fy))HI,,..       - - - -    D -# x//LL)Z0   LLL  29;; & &8<< +E+ET`IaIa+a+a Y / / /> !$   a(((!8 E E LL..:%1%l)C)CCC E  '+,J\,J,J,J'K'K '..00*)5)?)?)A)A)L)L)N)N**#(#3#3H#=#=!*-2[[]]1-=F'-';';04$)E !* $_5 '8    2  #   D 1111    (? "1 WY RY 6 D E E 111oi0000001 Yr3 1 1 1 &V Iff % % % & & & & & & & & & & & & & & &       - - - -    D   :sB B)(B)0CC"!C"H=BH%%H98H9=III00 I=<I=9J??KK!L&8L L&LL&!L"L&& M1MM MMMMcft||}t|}|sdS|dtjkrdS|dt tjkrdS |ddS#t$rYdSwxYw)zDRelease a previously-acquired scope lock when owned by this process.Nr(rTr)rOrrzrrrZrr=)rLrCrrs rrelease_scoped_lockr}s$UH55Iy))H ||Ebikk))||L!!%rs     '''''''',,,,,,  + lg%  t    ;$;;;; 2t22222c2222.3sdt6E#E#EEEEEEsEtEEEE# Os Ox} O O O O ;S ;T ; ; ; ;;tCH~;$;;;;&4 d38n     :$ :8DcN#; : : : : )4)$sCx.)T)))) (4.0;;;; # ($($($($($ ($  ($  ($($($($ ($($($($V7Xd38n57777     0VVsVcVXd3PS8n=UVafgkmuvz{~AD|DwEnFhFbGVVVVr  s  c  d     #&"#""""J)D))))))r