eiidZddlZddlZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZmZejdkrddlZnddlZdZd Zd ZejdkZeZd Zdad e fd ZdSdee d e fdZd e fdZd e fdZd efdZ ddde!de"d dfdZ#ded efdZ$deded e fdZ%de!d ee!fdZ&de!d ee!fdZ'de!d eefdZ(de!d e"fdZ)d e*eefd e"fd!Z+d e*fd"Z,d e*eeffd#Z-d$e d ee*eeffd%Z.d$e d&e*eefd dfd'Z/dSdee d ee*fd(Z0dSd)ee d ee*eeffd*Z1d ee*eefd ee!fd+Z2de d,e"d dfd-Z3dTd.Z4d e"fd/Z5dTd0Z6d e"fd1Z7dTd2Z8dSd)ee d e"fd3Z9dTd4Z:eeeeeeeed5d6ed7ed8ed9ed:ed;edZ;d ee*eeffd?Ze"ee*eefffdBZ?deded dfdCZ@dddDdEee!dFee!d e!fdGZAdHZBdIZCd e fdJZDdKe!d e"fdLZEd e"fdMZFdTdNZG dSdOdPdee d,e"d ee!fdQZH dSdOdPdee d,e"d e"fdRZIdS)Uu Gateway runtime status helpers. Provides PID-file based detection of whether the gateway daemon is running, used by send_message's check_fn to gate availability in the CLI. The PID file lives at ``{HERMES_HOME}/gateway.pid``. HERMES_HOME defaults to ``~/.hermes`` but can be overridden via the environment variable. This means separate HERMES_HOME directories naturally get separate PID files — a property that will be useful when we add named profiles (multiple agents running concurrently under distinct configurations). N)datetimetimezone)Pathget_hermes_home)AnyOptionalwin32hermes-gatewayzgateway_state.jsonz gateway-locksz gateway.lockreturnc(t}|dz S)z@Return the path to the gateway PID file, respecting HERMES_HOME.z gateway.pidrhomes 0/home/div/.hermes/hermes-agent/gateway/status.py _get_pid_pathr's   D - pid_pathcj||tSt}|tz S)z1Return the path to the runtime gateway lock file.) with_name_GATEWAY_LOCK_FILENAMEr)rrs r_get_gateway_lock_pathr-s4!!"8999   D ( ((rcNttS)z5Return the persisted runtime health/status file path.)rr_RUNTIME_STATUS_FILErr_get_runtime_status_pathr5s ?? $ $%9 : ::rctjd}|rt|Sttjdtjdz dz }|dz tz S)zBReturn the machine-local directory for token-scoped gateway locks.HERMES_GATEWAY_LOCK_DIRXDG_STATE_HOMEz.localstatehermes)osgetenvrr_LOCKS_DIRNAME)override state_homes r _get_lock_dirr&:s`y233HH~~bi 0$)++2H72RSSTTJ  > 11rcbtjtjSN)rnowrutc isoformatrrr _utc_now_isor,Cs < % % / / 1 11rF)forcepidr-c|rtr tjddt|ddgddd}n0#t$r#t j|tjYdSwxYw|j d kr6|j p|j pd }t|pd |dS|s tjnttd tj}t j||dS) zTerminate a PID with platform-appropriate force semantics. POSIX uses SIGTERM/SIGKILL. Windows uses taskkill /T /F for true force-kill because os.kill(..., SIGTERM) is not equivalent to a tree-killing hard stop. taskkillz/PIDz/Tz/FT )capture_outputtexttimeoutNrztaskkill failed for PID SIGKILL) _IS_WINDOWS subprocessrunstrFileNotFoundErrorr!killsignalSIGTERM returncodestderrstdoutstripOSErrorgetattr)r.r-resultdetailssigs r terminate_pidrHGs    ^VSXXtT:# FF !    GC ( ( ( FF    ! !}; ;BBDDG'E%E%E%EFF F % U&..769fn+U+UCGCs*6)A#"A#identityctj|dddS)Nutf-8)hashlibsha256encode hexdigest)rIs r _scope_hashrQbs3 >(//'22 3 3 = = ? ? DDrscopecJt|dt|dz S)N-z.lock)r&rQ)rRrIs r_get_scope_lock_pathrUfs* ??DD H(=(=DDD DDrctd|d} t|dS#tt t ttf$rYdSwxYw)z:Return the kernel start time for a process when available./proc/z/statN) rint read_textsplitr; IndexErrorPermissionError ValueErrorrC)r. stat_paths r_get_process_start_timer`jsx(c((())I9&&((..004555 z?J Ptts8A#A54A5c t|S)zBPublic wrapper for retrieving a process start time when available.)r`)r.s rget_process_start_timerbts "3 ' ''rctd|d} |}n#tttf$rYdSwxYw|sdS|ddddS) zz._looks_like_gateway_process..(::gw'!::::::r)rmany)r.patternsrws @r_looks_like_gateway_processr|sI#C((G uH ::::::: : ::rrecordc|dtkrdS|d}t|tr|sdSdd|Dd}t fd|DS)zMValidate gateway identity from PID-file metadata when cmdline is unavailable.kindFargv c34K|]}t|VdSr()r:)ruparts rrxz-_record_looks_like_gateway..s(22Ts4yy222222r)rorprqrrc3 K|]}|vV dSr(rrts rrxz-_record_looks_like_gateway..ryr)get _GATEWAY_KIND isinstancelistjoinrz)r}rr{rws @r_record_looks_like_gatewayrs zz&]**u ::f  D dD ! !uhh22T22222GH ::::::: : ::rctjtttjt tjdS)N)r.rr start_time)r!getpidrrsysrr`rrr_build_pid_recordrs9y{{SX-bikk::   rc rt}|dddditd|S)NstartingFr) gateway_state exit_reasonrestart_requested active_agents platforms updated_at)rupdater,)payloads r_build_runtime_status_recordrsJ!!G NN#""nn  Nrpathc2|sdS |}n#t$rYdSwxYw|sdS t j|}n#tj$rYdSwxYwt|tr|ndSr() existsrZrBrCjsonloadsJSONDecodeErrorrdict)rrlrs r_read_json_filers ;;==tnn$$&& tt t*S//  tt $// 977T9s!&? A  A A**A=<A=rc|jdd|tj|dS)NTparentsexist_ok)parentmkdir write_textrdumps)rrs r_write_json_filers?KdT222OODJw''(((((rc|p t}|sdS|}|sdS t j|}n9#tj$r' dt|icYS#t$rYYdSwxYwwxYwt|trd|iSt|tr|SdSNr.) rrrZrBrrrrYr^rr)rrlrs r_read_pid_recordrs*=??H ??  t      $ $ & &C t*S//   3s88$ $ $ $   444  '3 w'4   4s0A''B7B B BBBB lock_pathc<t|p tSr()rr)rs r_read_gateway_lock_recordrs IA)?)A)A B BBrcr|sdS t|dS#tttf$rYdSwxYwr)rYKeyError TypeErrorr^)r}s r_pid_from_recordrsO t6%=!!! i ,tts 66 cleanup_stalec|sdS |dn#t$rYnwxYw t|ddS#t$rYdSwxYw)aDelete a stale gateway PID file (and its sibling lock metadata). Called from ``get_running_pid()`` after the runtime lock has already been confirmed inactive, so the on-disk metadata is known to belong to a dead process. Unlike ``remove_pid_file()`` (which defensively refuses to delete a PID file whose ``pid`` field differs from ``os.getpid()`` to protect ``--replace`` handoffs), this path force-unlinks both files so the next startup sees a clean slate. NT missing_ok)unlink Exceptionrrrs r_cleanup_invalid_pid_pathrs  4((((       x((//4/@@@@@      s **#A A! A!c2|d|tjt || t j|dS#t$rYdSwxYw)Nr) seektruncaterdumprflushr!fsyncfilenorChandles r_write_gateway_lock_recordrs KKNNN OOI!!6*** LLNNN  !!!!!      s &B BBc tr|dtj|dkr)|d||dtj| tj dn>tj | tj tjzdS#tt f$rYdSwxYw)Nr TF)r7rr!SEEK_ENDtellwritermsvcrtlockingrLK_NBLCKfcntlflockLOCK_EXLOCK_NBBlockingIOErrorrCrs r_try_acquire_file_lockrs   H KK2; ' ' '{{}}!! T"""  KKNNN N6==??FOQ ? ? ? ? K )F G G Gt W %uusC.C22DDc, trI|dtj|tjddSt j|t jdS#t$rYdSwxYw)Nrr) r7rrrrLK_UNLCKrrLOCK_UNrCrs r_release_file_lockr*s  8 KKNNN N6==??FOQ ? ? ? ? ? K  7 7 7 7 7      sAB1B BBctdSt}|jddt |dd}t |s|dSt||adS)zClaim the cross-process runtime lock for the gateway. Unlike the PID file, the lock is owned by the live process itself. If the process dies abruptly, the OS releases the lock automatically. NTra+rKencodingF)_gateway_lock_handlerrropenrcloser)rrs racquire_gateway_runtime_lockr5s't ! # #DKdT222 $w / / /F !& ) ) uv&&&! 4rct}|dSdat| |dS#t$rYdSwxYw)z&<&>&>',>BXBZBZ,Z,Zt  $ $ & &u $dW = = =F  !& ) )  v & & &  LLNNNNN    DD    LLNNNNN    DD   LLNNNN    D sTC5B BBB44 CCC,CC, C)&C,(C))C,c(t}|jddtjt } t j|t jt j zt j z}n#t$rwxYw t j |dd5}| |ddddS#1swxYwYdS#t$r* |dn#t $rYnwxYwwxYw)zWrite the current process PID and metadata to the gateway PID file. Uses atomic O_CREAT | O_EXCL creation so that concurrent --replace invocations race: exactly one process wins and the rest get FileExistsError. TrwrKrNr)rrrrrrr!rO_CREATO_EXCLO_WRONLYFileExistsErrorfdopenrrrrC)rr}fdfs rwrite_pid_filerosj ??DKdT222 Z)++ , ,F WT2: 1BK? @ @   Yr3 1 1 1 Q GGFOOO                     KK4K ( ( ( (    D  s` 9B BC-C CCCCC D(C?>D? D  D D  D)rrrrplatformplatform_state error_code error_messagerrrrrrrrct}t|p t} | di| dtt j| d<tt j| d<t| d<|tur|| d<|tur|| d<|turt|| d<|tur td t|| d <|turb| d |i} |tur|| d <|tur|| d <|tur|| d <t| d<| | d|<t|| dS)zBPersist gateway runtime health information for diagnostics/status.rrr.rrrrrrrrrrN)rrr setdefaultrr!rr`r,_UNSETboolmaxrYrr) rrrrrrrrrrplatform_payloads rwrite_runtime_statusrs $ % %Dd##E'C'E'EG {B''' v}---Y[[GEN3BIKK@@GL(NNGLF""#0 &  !, &&'+,='>'>#$F""#&q#m*<*<#=#= v";/33HbAA  ' '(6 W % V # #-7 \ *  & &0= _ -)5&)9 X&T7#####rc8ttS)z=Read the persisted gateway runtime health/status information.)rrrrrread_runtime_statusrs 355 6 66rc6 t}t|}|Q t|d}n#ttt f$rd}YnwxYw||t jkrdS|ddS#t$rYdSwxYw)ahRemove the gateway PID file, but only if it belongs to this process. During --replace handoffs, the old process's atexit handler can fire AFTER the new process has written its own PID file. Blindly removing the file would delete the new process's record, leaving the gateway running with no PID file (invisible to ``get_running_pid()``). Nr.Tr) rrrYrrr^r!rrr)rr}file_pids rremove_pid_filers   &&   ve}--i4    #BIKK(?(? t $$$$$      s7B 8B AB AB 2B BBmetadatact||}|jddit|t ||pit d}t |}|<|r( |dn#t$rYnwxYw|r t|d}n#tttf$rd}YnwxYw|tjkr@|d|dkrt#||d|fS|du}|s tj|dt'|}|d|||dkrd}|s t)d |d } | r`| D]9} | d r"| d } | d vrd}n:n7#tt2f$rYn$wxYwn#t4t2tf$rd}YnwxYw|r( |dn#t$rYnwxYwd|fS tj|tjtjztjz} n!#t>$rdt |fcYSwxYw tj | dd5} tCj"|| dddn #1swxYwYn7#tF$r* |dn#t$rYnwxYwwxYwdS)zAcquire a machine-local lock keyed by scope + identity. Used to prevent multiple local gateways from using the same external identity at once (e.g. the same Telegram bot token across different HERMES_HOME dirs). Tr)rR identity_hashrrNrr.rrrWz/statuszState:r)TtFrrKr)TN)$rUrrrrQr,rrrrCrYrrr^r!rrrr<r`rrZ splitlines startswithr[r]ProcessLookupErrorrrrrrrrrr)rRrIrrr}existing existing_pidstale current_start _proc_status_line_staterrs racquire_scoped_lockrsp %UH55I 4$777   $X..N"nn Fy))HI,,..       - - - -    D .# x//LL)Z0   LLL  29;; & &8<< +E+ET`IaIa+a+a Y / / /> !$   a((( !8 E E LL..:%1%l)C)CCC E  '+,J\,J,J,J'K'K '..00*)5)?)?)A)A)L)L)N)N**#(#3#3H#=#=!*-2[[]]1-=F'-';';04$)E !* $_5 'A    4  #   D 1111    (? "1 WY RY 6 D E E 111oi0000001 Yr3 1 1 1 &V Iff % % % & & & & & & & & & & & & & & &       - - - -    D   :sB B)(B)0CC"!C"H=BH%%H98H9=III66 JJ 9KK#"K#'L,>L  L, L$$L,'L$(L,, M 7M M  MM MM cft||}t|}|sdS|dtjkrdS|dt tjkrdS |ddS#t$rYdSwxYw)zDRelease a previously-acquired scope lock when owned by this process.Nr.rTr)rUrrr!rr`rrC)rRrIrr s rrelease_scoped_lockr*s$UH55Iy))H ||Ebikk))||L!!%rCs    '''''''',,,,,, <7MMMMLLL + lg% ' t    ))Xd^)t))));$;;;; 2t22222c2222.3sdt6E#E#EEEEEEsEtEEEE#(( (((( Os Ox} O O O O ;S ;T ; ; ; ; ;tCH~;$;;;;&4 d38n     :$ :8DcN#; : : : : )4)$sCx.)T)))) x~$0CC$C8DQTVYQYNC[CCCCXd38n5(3-       ,     d         d*     htn.6 # ($($($($($ ($  ($  ($($($($ ($($($($V7Xd38n57777     0WWsWcWXd3PS8n=UWafgkmuvz{~AD|DwEnFhFbGWWWWt  s  c  d     $ $&****}*sm* ****@5,4,,,, cd2>$>>>>B     $2222tn22c] 2222l $NNNNtnNN NNNNNNr