JjIxUdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z ddlmZejdkrhdZeejddejZeez ZerOejddejzejeezejd<eejjZdd lm Z dd l!m"Z"m#Z#m$Z$dd l%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,dd l-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5dd l6m7Z7m8Z8ej9e:Z;e dGddZ<e dGddZ=defdZ>de?de?dzfdZ@de?deAfdZBde?deAfdZCde?deDdeAfdZEdee?fdZFdeGe?de?dzdee?ddfd ZH d[dee?d"eAd#eAdeGe?fd$ZIdeGe?deGe?fd%ZJ d\dedzd"eAdeGfd&ZK d]dedzdeGe=fd'ZLd(eMdeGeMfd)ZNde?deGeMdzfd*ZOd+e?d,eGeMdeAfd-ZPd(eMd+e?deAfd.ZQd+e?d,eGeMdeAfd/ZRd^d0eAdeSeAeAffd1ZTd^d0eAdeUeMeMffd2ZVd0eAddfd3ZW d_d0eAd5eSeMd6fdeUeMeMffd7ZXd8eUeMeMfde?dzfd9ZYd^d0eAde?dzfd:ZZdeUdzfd;Z[de?dzdeUdzfd<Z\d!dd=d>d0eAd?e?dzd@eDdeAfdAZ]d8eUeMeMfdeAfdBZ^dCej_deAfdDZ`d^d0eAdeAfdEZad^d0eAddfdFZb d`d0eAd?e?dzdeAfdGZcdHeMde?dzfdIZddeAfdJZed^d0eAded=d?d!d@ddAdBddCdgdgZdeGeUfdDZdEeUdeMfdFZdeGeMfdGZdHeMdIeMddfdJZdEeUfdKZdeAfdLZdeAfdMZdNZdOZdPZdQeMfdRZdEeUddfdSZdTZ d]deMd(eMdzdeAfdUZdeMdeAfdVZdWZdeAfdXZdadYZdZZdS(kzu Gateway subcommand for hermes CLI. Handles: hermes gateway [run|start|stop|restart|status|install|uninstall|setup] N) dataclass)Pathposix>/bin/sbin/usr/bin /usr/sbinPATH) terminate_pid)%DEFAULT_GATEWAY_RESTART_DRAIN_TIMEOUT!GATEWAY_SERVICE_RESTART_EXIT_CODEparse_restart_drain_timeout) get_env_valueget_hermes_home is_managed managed_errorread_raw_configsave_env_valuewrite_platform_config_field) print_header print_info print_success print_warning print_errorprompt prompt_choice prompt_yes_no)ColorscolorT)frozenceZdZUeed<dZeed<dZeed<dZe e dfed<dZ edzed <e d efd Z e d efd ZdS) GatewayRuntimeSnapshotmanagerFservice_installedservice_running. gateway_pidsN service_scopereturnc8|jpt|jSN)r&boolr(selfs 8/home/rurouni/.hermes/hermes-agent/hermes_cli/gateway.pyrunningzGatewayRuntimeSnapshot.runningMs#>tD,='>'>>c.|jo|jo|j Sr,)r%r1r&r.s r0has_process_service_mismatchz3GatewayRuntimeSnapshot.has_process_service_mismatchQs%S$,St?S;SSr2)__name__ __module__ __qualname__str__annotations__r%r-r&r(tupleintr)propertyr1r4r'r2r0r#r#Es LLL#t###!OT!!!$&L%S/&&& $M3:$$$ ????X?TdTTTXTTTr2r#c.eZdZUeed<eed<eed<dS)ProfileGatewayProcessprofilepathpidN)r5r6r7r8r9rr;r'r2r0r>r>Vs+ LLL JJJ HHHHHr2r>r*c t}tr,ddgdgfD]#} tj|gdzddd}|jD]}|}|r|dds4|d} tj|d |d d gzddd}t|j}|dkr| |#ttj f$rYwxYw#ttj f$rY!wxYwtr' t}tjd d |gddd}|jdkrt#|j}||dkr| |n|jD]w}|}t%|dkrN|d|krB t|d}|dkr| |g#t$rYswxYwxn#ttj f$rYnwxYw|S)aoReturn PIDs currently managed by systemd or launchd gateway services. Used to avoid killing freshly-restarted service processes when sweeping for stale manual gateway processes after a service restart. Relies on the service manager having committed the new PID before the restart command returns (true for both systemd and launchd in practice). systemctl--user)z list-unitszhermes-gateway*z--plainz --no-legend --no-pagerTcapture_outputtexttimeoutr.serviceshowz--property=MainPID--value launchctllistN)setsupports_systemd_services subprocessrunstdoutstrip splitlinessplitendswithr;add ValueErrorTimeoutExpiredFileNotFoundErroris_macosget_launchd_label returncode#_parse_launchd_pid_from_list_outputlen) pids scope_argsresultlinepartssvcrLrAlabels r0_get_service_pidsrk]sD!"""'2[MB! ! J #$(   #M//11<<>>D JJLLE !a(9(9*(E(E! (C )~&KY)WW+/!%$%     "$+"3"3"5"56677 HHSMMM& (AB"&z'@A    zz %''E^fe,# F  A%%9&-HH?sQwwHHSMMMM!' 3 3 5 5 @ @ B B%% $ u::??uQx5/@/@%&)%(mm#&77$(HHSMMM#-%%% $%!:#<=    D  KsnBD-.A DD-D(%D-'D((D--EECI$!0II$ II$II$$I=<I=rAc |dkrdS ddl}||pdS#t$rYnt$rYdSwxYwt rdSt jdsdS tj ddddt|gddd }n#ttj f$rYdSwxYw|j dkrdS|j}|sdS t!|d }n#t$$rYdSwxYw|dkr|ndS) uReturn the parent PID for ``pid``, or ``None`` when unavailable. Uses psutil (core dependency) which works on every platform. The older implementation shelled out to ``ps -o ppid= -p ``, which silently fails on Windows (no ``ps``) so the ancestor walk terminated at self — the caller's dedup / exclude logic then couldn't distinguish "hermes CLI that invoked this scan" from "real gateway process". Nrps-ozppid=z-pTrFrG)psutilProcessppid ImportError Exception is_windowsshutilwhichrTrUr8r^r]rarVrWr;rXr\)rArqrfraw parent_pids r0_get_parent_pidr{s axxt ~~c""''))1T1      tt ||t <  t 4$C 1     z8 9tt At -    C t))"-335566 tt#a::T1s9,7 A AA:*B%%B?>B?-9D'' D54D5 target_pidc|dkrdStj}t}|r8||vr4||krdS||t |pd}|r||v4dS)zHReturn True when ``target_pid`` is this process or one of its ancestors.rFT)osgetpidrRr[r{)r|rAseens r0#_is_pid_ancestor_of_current_processrs~Qu )++CUUD (#T// *  4  c""'a (#T// 5r2cttdsdSt|sdS tj|tjn#t ttf$rYdSwxYwdS)z@Ask a running gateway ancestor to restart itself asynchronously.SIGUSR1FT) hasattrsignalrr~killrProcessLookupErrorPermissionErrorOSError)rAs r0_request_gateway_self_restartrsx 69 % %u .s 3 3u V^$$$$  9uu 4sA A%$A% drain_timeoutcttdsdS|dkrdS tj|tjn$#t $rYdSt tf$rYdSwxYwddl}| t|dz}ddl m }| |kr:||sdS| d| |k:dS) a=Send SIGUSR1 to a gateway PID and wait for it to exit gracefully. SIGUSR1 is wired in gateway/run.py to ``request_restart(via_service=True)`` which drains in-flight agent runs (up to ``agent.restart_drain_timeout`` seconds), then exits. Both systemd (``Restart=always``) and launchd (unconditional ``KeepAlive``) restart on any exit. This is the drain-aware alternative to ``systemctl restart`` / ``SIGTERM``, which SIGKILL in-flight agents after a short timeout. Args: pid: Gateway process PID (systemd MainPID, launchd PID, or bare process PID). drain_timeout: Seconds to wait for the process to exit after sending SIGUSR1. Should be slightly larger than the gateway's ``agent.restart_drain_timeout`` to allow the drain loop to finish cleanly. Returns: True if the PID was signalled and exited within the timeout. False if SIGUSR1 couldn't be sent or the process didn't exit in time (caller should fall back to a harder restart path). rFrTNg? _pid_exists?)rrr~rrrrrtime monotonicmaxgateway.statusrsleep)rAr_timedeadliners r0_graceful_restart_via_sigusr1rs!0 69 % %u axxu V^$$$$ tt W %uu  3}c#:#::H +***** //  h & &{3 4 C //  h & & 5sA A"A"!A"ct}tj}tdD]6}||t |}| |dks||vrn|}7|S)ahReturn the set of PIDs in the current process's ancestor chain. Walks from the current PID up to PID 1 (init) so that process-table scans never match the calling CLI process or any of its parents. This prevents ``hermes gateway status`` from falsely counting the ``hermes`` CLI that invoked it as a running gateway instance (see #13242). @Nr)rRr~rranger[r{) ancestorsrA_parents r0_get_ancestor_pidsr.su%%I )++C 2YY c %% >Vq[[Fi,?,? E r2rd exclude_pidsc||dkrdS|tjks||vs||vrdS||dS)Nr)r~rappend)rdrArs r0_append_unique_pidrBsV {cQhh bikkSL00C4KKKKr2F all_profilesinclude_restart_managersc J  |tz}g}ddlmm t t }|t|}|r| dnddtdtffd }dtdtf fd } trdd l m }d |i} tjd } d } d } | = t!j| ddddgfdddddd| } n#t$t jf$rd } YnwxYw| | jdks| jsm tjdptjd} | gSd} t!j| dd|gfdddddd| } n#t$t jf$rgcYSwxYwd} | jdks| jgSd}| j dD]}|}|dr|t1dd }C|dra|t1dd }||r=|s ||r0 t3|t5||n#t6$rYnwxYwd}nd }t8jd r t9j}t9j d D]}|!st5|}||ks||vr1 tEd!|d"d#5}|#$dd$%}d d d n #1swxYwY|%d&d'}||r|s ||rt3|||#t$tLf$rYwxYwd}n#tN$rYnwxYw|s`t!jgd(ddd)} | jdkrgS| j dD]}|}|rd*|vrd }d}| d d+}t1|d,kr1 t5|d}|d+}n#t6$rd }YnwxYw|s| }t1|dkrL|d+!r2t5|d+}d'(|dd }|||r|s ||rt3|||n#t$t jf$rgcYSwxYwtr"t1|d+krtS|}|S)-a Best-effort process-table scan for gateway PIDs. This supplements the profile-scoped PID file so status views can still spot a live gateway when the PID file is stale/missing, and ``--all`` sweeps can discover gateways outside the current profile. r)looks_like_gateway_command_line'looks_like_gateway_runtime_command_linerpr commandr*c|}rd|vp d|vpd|vSd|vsd|vrdSd|vr d|vrdSdS)N --profile z-p z hermes_home=z -p FT)lower)r command_lccurrent_home_lccurrent_profile_namecurrent_profile_name_lcs r0_matches_current_profilez4_scan_gateway_pids.._matches_current_profilems]]__  6466*DB2022j@B3/33zA  : % %:)=)=5 j ( (000 BB5tr2c8|rdSo |S)NTr')rrrrs r0_matches_gateway_runtimez4_scan_gateway_pids.._matches_gateway_runtimes3 * *7 3 3 4'\,S,ST[,\,\\r2)windows_hide_flags creationflagswmicFNprocessgetzProcessId,CommandLinez /FORMAT:LISTTutf-8ignore )rHrIencodingerrorsrJ powershellpwshzGet-CimInstance Win32_Process | ForEach-Object { 'CommandLine=' + ($_.CommandLine -replace "`r`n",' ' -replace "`n",' '); 'ProcessId=' + $_.ProcessId; '' }z -NoProfilez-Command z CommandLine=z ProcessId=z/procz/proc/z/cmdlinerbreplacer )rnz-Aewwroz pid=,command=rGgreprmrQ)*rrrrr8rresolver _profile_argrYr-rvhermes_cli._subprocess_compatrrwrxrTrUrr]rarVrW startswithrcrr;r\r~r@isdirrlistdirisdigitopenreaddecoderrrujoin_filter_venv_launcher_stubs)!rrrrd current_homecurrent_profile_argrrr _no_window wmic_path used_fallbackrfrps_cmd current_cmdrgpid_str_found_via_procmy_pidentryrA_fcmdlinestrippedrrh aux_partsrrrrrs! ` @@@@@r0_scan_gateway_pidsrLs "4"6"66LD ((002233L"((**O&|44+>F!!##B''B388::#$.]#]$]]]]]]]] P <<M D I H H H H H)+=+=+?+?@J V,,I!MF$"'^%%!3* (,!!(' "%FF !:;"""!FFF"~!2a!7!7 !7!7$\,77O6<;O;O %I '^#\:vF'+!!(' " %FF !:;III $  A%%)> K ++D11 % %zz||??>22 %"&s>':':'<'<"=KK__\22 %"3|#4#4#6#67G// <<!$!(@(@(M(M!!.tS\\<PPPP)!!! D!"$K %"$Ow}}W%% Y[[F!#G!4!4%%$}}%$!%jj&==C<,?,?$ %!%&>>#'  $))I"M//55DDD#zz||H#!v'9'9 C G$NN433E5zzQ'"%eAh--C&+AhGG)'''"&CCC'{$,NN$4$4 y>>B..9Q<3G3G3I3I."%il"3"3C&)hhy~&>&>G{ //88D$D(@(@(I(ID+4lCCC Z. / ||1D A *400 Ks&;U D+*U+EUEAU U F*)U*GUGUB#UJ! U! J.+U-J..*UAO!2O*M<0 O<N ON AOO!OO!OO! U! O.+U-O..,UA%URU R.+U-R..B&UU0/U0c ddl}n#t$r|cYSwxYwt|}i}|D]I} ||||<.#|j|jf$rd||<YFwxYwt|D] \}}|||vr|!fd|DS)a.Drop venv-launcher ``pythonw.exe`` stubs that are parents of the real interpreter process. See comment at the tail of ``_scan_gateway_pids``. Uses ``psutil`` (core dependency). Safe on any platform; only invoked on Windows by the caller because the stub pattern is Windows-specific. rNcg|]}|v| Sr'r').0pdrops r0 z/_filter_venv_launcher_stubs..Gs - - -!q}}A}}}r2) rqrtrRrrrs NoSuchProcess AccessDenieditemsr[)rdrqpid_set parent_ofrArsrs @r0rr,s  $iiG')I"" "#^^C005577IcNN$f&9: " " "!IcNNN "UUD__&& T   HHTNNN - - - -t - - --s *AA43A4ct|p t}g}|s1 ddlm}t|||n#t$rYnwxYwt D]}t||| t }n#t$rd}YnwxYwt|||D]}t||||S)aFind PIDs of running gateway processes. Args: exclude_pids: PIDs to exclude from the result (e.g. service-managed PIDs that should not be killed during a stale-process sweep). all_profiles: When ``True``, return gateway PIDs across **all** profiles (the pre-7923 global behaviour). ``hermes update`` needs this because a code update affects every profile. When ``False`` (default), only PIDs belonging to the current Hermes profile are returned. rget_running_pidF)rr)rRrrrrurkrSr)rr_excluderdrrArs r0find_gateway_pidsrJs&<(355))HD   6 6 6 6 6 6 t__%6%6 A A A A    D  ""004h////)'@'B'B#B  )))#(   )!!!900 4h//// Ks#A AA6B BBct|p t}g} ddlm}ddlm}n#t $r|cYSwxYwt}|D]~} ||jdz d}n#t $rY%wxYw||dks||vs||vr:|||t|j |j||S) zDReturn running gateway PIDs mapped to Hermes profiles via PID files.rr) list_profiles gateway.pidF cleanup_staleN)r?r@rA) rRrrhermes_cli.profilesrrur@r[rr>name)rr processesrrrr?rAs r0find_profile_gateway_processesrps><(355))H-/I2222225555555 UUD =??    !/',">eTTTCC    H  ;#((cXoo    !',W\s S S S     s . ==A11 A>=A>r?ctddg}|dkr|d|g|gd|S)N-mhermes_cli.maindefaultz --profilegatewayrUz --replace)get_python_pathextend)r?argss r0_gateway_run_args_for_profilersU   t%6 7D) ['*+++KK///000 Kr2c|dkrdS ddl}n#t$rYdSwxYw t||pg}n*#|j|j|jf$rYdSt$rYdSwxYw|sdS ddl m }|d |sdSn#t$rYnwxYw|S)uMReturn the live argv of a running gateway process, or ``None``. Used to respawn gateways that have no profile→PID-file mapping (e.g. a Windows Scheduled Task running ``pythonw.exe -m hermes_cli.main gateway run``). ``_pause_windows_gateways_for_update`` force-kills such gateways before mutating the venv; without their original command line we cannot bring them back, so we snapshot it here before the kill. Best-effort: returns ``None`` if psutil is unavailable, the process is gone, access is denied, or the argv doesn't look like a gateway command. rmNr)rr) rqrtrOrrrrr ZombieProcessrurrr)rArqargvrs r0_capture_gateway_argvr s0 axxt ttFNN3''//117R88  &"5v7K Ltt tt t BBBBBB..sxx~~>> 4       Ks5 6AA?2 A?>A?$B.. B;:B;old_pidrun_argvcP|dks|sdSt|t|S)uRelaunch a gateway by replaying its captured command line after exit. Companion to ``launch_detached_profile_gateway_restart`` for gateways that have no profile→PID-file mapping (Scheduled-Task / manually-launched ``gateway run`` whose HERMES_HOME or argv doesn't match a known profile). Uses the identical detached-watcher mechanism; only the respawn argv differs (the process's own argv instead of a profile-derived one). rF)_spawn_gateway_restart_watcherrO)r r s r0*launch_detached_gateway_restart_by_cmdliners,!||8|u )'4>> B BBr2cL|dkrdSt|t|S)zDRelaunch a manually-run profile gateway after its current PID exits.rF)rr)r?r s r0'launch_detached_profile_gateway_restartrs*!||u )'3PQX3Y3Y Z ZZr2c|dks|sdSddlm}m}d}i}tjdkr8 ddlm}|t|\}}}n#t$rd}i}YnwxYwtj |}tj |}tj d ||} tjd | t!|g|} t#j| ft"jt"jd |nm#t($r` tjdkr d |ind d i} t#j| ft"jt"jd | n#t($rYYdSwxYwYnwxYwd S)zMSpawn the detached watcher that respawns ``run_argv`` once ``old_pid`` exits.rF)&windows_detach_flags_without_breakawaywindows_detach_popen_kwargsr win32)windowless_gateway_restart_specuj import os import subprocess import sys import time from hermes_cli._subprocess_compat import ( windows_detach_flags, windows_detach_flags_without_breakaway, ) pid = int(sys.argv[1]) cmd = sys.argv[2:] _respawn_cwd = {respawn_cwd_literal} _respawn_env_overlay = {respawn_env_literal} deadline = time.monotonic() + 120 while time.monotonic() < deadline: # ``os.kill(pid, 0)`` is not a no-op on Windows — use the # cross-platform existence check. from gateway.status import _pid_exists if not _pid_exists(pid): break time.sleep(0.2) # Platform-appropriate detach for the respawned gateway. On POSIX # start_new_session=True maps to os.setsid; on Windows we need # explicit creationflags because start_new_session is a no-op there. # CREATE_BREAKAWAY_FROM_JOB is critical: the watcher itself may have # been spawned inside a job object (Electron/Tauri parent), and # without breakaway the respawned gateway would die when that job # tears down. See _subprocess_compat.windows_detach_flags(). _popen_kwargs = {{ "stdout": subprocess.DEVNULL, "stderr": subprocess.DEVNULL, }} # Anchor the respawned gateway at the stable working dir and overlay # the env (VIRTUAL_ENV / PYTHONPATH / HERMES_HOME) the windowless # base interpreter needs to import hermes_cli. Empty on POSIX, where # the venv python resolves imports without help. if _respawn_cwd: _popen_kwargs["cwd"] = _respawn_cwd if _respawn_env_overlay: _popen_kwargs["env"] = {{**os.environ, **_respawn_env_overlay}} if sys.platform == "win32": try: _popen_kwargs["creationflags"] = windows_detach_flags() subprocess.Popen(cmd, **_popen_kwargs) except OSError: # CREATE_BREAKAWAY_FROM_JOB can be rejected with # ERROR_ACCESS_DENIED when the parent's job object refuses # breakaway. Retry without it — DETACHED_PROCESS et al. # alone are enough in most setups. Mirrors the canonical # fallback in gateway_windows._spawn_detached. _popen_kwargs["creationflags"] = windows_detach_flags_without_breakaway() subprocess.Popen(cmd, **_popen_kwargs) else: _popen_kwargs["start_new_session"] = True subprocess.Popen(cmd, **_popen_kwargs) )respawn_cwd_literalrespawn_env_literal-c)rVstderrrstart_new_sessionT)rrrsysplatformhermes_cli.gateway_windowsrrOrujsondumpstextwrapdedentrWformat executabler8rTPopenDEVNULLr) r r rr respawn_cwdrespawn_env_overlayrrrwatcher watcher_argvfallback_kwargss r0rrsn!||8|u&K*, |w %       0/X?? 7Hk#6#6 % % %K"$     %*[11*%899o9 ;;v eggff//w B   G   L  %%  *)++      <7**!"H"H"J"JKK)40    !)!)  "         555    ( 4sH"A AA"1D E>A E)(E>) E83E>7E88E>=E>systemc6t|}t|}|s|dfS tdt g|ddd}n #t t jf$r|dfcYSwxYw||j dkfS)Nr,F is-activeTrr,rHrIrJactive) _select_systemd_scopeget_systemd_unit_pathexists_run_systemctlget_service_name RuntimeErrorrTr]rVrW)r,selected_system unit_existsrfs r0_probe_systemd_service_runningr:ts+F33O'???FFHHK &%% & *,, -"     *3 4&&&%%%%& FM//11X= ==s"AA98A9ct|} tdtdddg|ddd}n$#ttjt f$ricYSwxYw|jdkriSi}|j D]{}| d s|td d  }| D]%}d |vr| d d \}}|||<&||S) aParse the gateway unit's ``Environment=`` directives. ``systemctl show -p Environment`` returns a single line of space-separated ``KEY=VALUE`` pairs; values are not quoted in the output even when the unit file quoted them. We split on whitespace and ``=``. rLrE --property EnvironmentTrr0rz Environment=N=rm)r2r5r6r7rTr]rrarVrXrrcrWrY) r,r8rfparsedrgbodytokenkeyvalues r0_read_systemd_unit_environmentrDsG,F33O ""  #     *3W =  A F ((**  ~..  C''))*0022ZZ\\  E%S!,,JCF3KK  Ms%7AAc|sdStd}|dd}|sdStjdd}||krdS|tjd<dS)uWhen acting on a system-scope unit, adopt its ``HERMES_HOME``. Under ``sudo``, ``HERMES_HOME`` is stripped and ``HOME=/root``, so :func:`get_hermes_home` falls back to ``/root/.hermes`` — the wrong profile. The unit file pins ``HERMES_HOME`` for the actual gateway process, so we mirror that into our own environment to make ``read_runtime_status`` / ``get_running_pid`` read the correct files. NTr. HERMES_HOMEr )rDrrWr~environ)r,env unit_homecurrents r0#_sync_hermes_home_from_systemd_unitrKs  ( 5 5 5C r**0022I jnn]B//5577G) )BJ}r2 ActiveStateSubStateResultExecMainStatusMainPID properties.c t|} tdtddd|g|ddd}n$#tt jtf$ricYSwxYw|jdkriSi}|j D]7}d |vr| d d \}}| ||<8|S) zCReturn selected ``systemctl show`` properties for the gateway unit.rLrEr<,Trr0rr>rm) r2r5r6rr7rTr]rrarVrXrYrW)r,rRr8rfr?rgrBrCs r0_read_systemd_unit_propertiesrUs,F33O ""$$  #     *3W = A F ((**$$ d?? ZZQ'' Ukkmms Ms8A A+*A+propsc t|ddpd}n#ttf$rYdSwxYw|dkr|ndS)NrQ0r)r;r TypeErrorr\)rVrAs r0_systemd_main_pid_from_propsrZsb%))Is++2s33 z "tt''33t#s %(==c<tt|SNr.)rZrUr.s r0_systemd_main_pidr]s '(EV(T(T(T U UUr2cz ddlm}|}n#t$rYdSwxYwt|tr|ndS)Nrread_runtime_status)rr`ru isinstancedict)r`states r0_read_gateway_runtime_statusrdsd666666##%% ttud++ 5555s  !!c|sdSt}|sdS t|ddpd}n#ttf$rYdSwxYw||kr|ndS)NrAr)rdr;rrYr\)rArc state_pids r0_gateway_runtime_status_for_pidrgs t ( * *E t %++0q11 z "tt$$55$.s%>AAgN@)r, previous_pidrJrhrJc ddl}t}t|}|j|z}d}|j|kr}t |}|dd} |dd} d} ddlm} | } n#t$rd} YnwxYw| st|} | d kr| r|| |krt| } | pid }|d krtd |d | ddS|dkr3| pidpd}td|d| d|dS|std|d| dd}| dkr| dkr|j dLt|rt|dS|j d|j|k}td|dt!|d|rdndd |sd!ndd"|d# dS)$zFWait for the gateway service to become active after a restart handoff.rNFr.rMr rNrr1 gateway_stater1✓ z service restarted (PID )Tstartup_failed exit_reasonzstartup failed⚠ z service process restarted (PID z), but gateway startup failed: ⏳ z service process started (PID z!); waiting for gateway runtime... activating auto-restartrmrQz& service did not become active within zs. Check status: sudo z1hermes gateway status Check logs: journalctl --user -u z -l --since '2 min ago')rr6_service_scope_label capitalizerrUrrrrurZrgprintr_systemd_unit_is_start_limited_print_systemd_start_limit_waitr;)r,rhrJrri scope_labelrprinted_runtime_waitrV active_state sub_statenew_pidr runtime_staterjreasons r0!_wait_for_systemd_service_restartrsKKK   C&v..99;;Kt~')H  $.  X % %-V<<<yy33 IIj"--   6 6 6 6 6 6%o''GG   GGG  :2599G 8 # # 0L0G|4K4K ? H H !.!4" 9 9/ J J  I--PPPgPPPQQQ4 $444+1r66%*)|{||G||tz||!5+0t{tt'ttt,0( < ' 'I,G,G DJqMMM  )% 0 0  +6 : : : :5 1 W $.  X % %Z  g{ g g#g,, g g&,477" g g7=&Eii2 g gJM g g g 5sB,, B;:B;c|dd}|dd}|dkp|dkS)NrOr rNstart-limit-hit)rr)rVrfr~s r0ryryQsW YYx $ $ * * , ,F *b))//11I & & H)7H*HHr2excc8g}dD]c}t||d}|st|tr|d}|t |dd|}d|vpd|vpd|vS)N)rrVoutputrrrrz"start request repeated too quicklyz start-limit)getattrrabytesrrr8rr)rrhattrrCrIs r0$_systemd_error_indicates_start_limitrWsE.!!T4((   eU # # 3LL L22E SZZ    99U   ! ! # #DT! ! /4 7 ! D r2c<tt|Sr\)ryrUr.s r0!_systemd_service_is_start_limitedrhs )*Gv*V*V*V W WWr2cTt}t|}|rdnd}|rdnd}|rdnd}td|dtd td |rd ndd |td |d|td|d|ddS)N --systemr z systemctl zsystemctl --user z journalctl zjournalctl --user rpz0 service is temporarily rate-limited by systemd.zC systemd is refusing another immediate start after repeated exits.z7 Wait for the start-limit window to expire, then run: rshermes gateway restartz& Or clear the failed state manually: reset-failed z Check logs: ruz -l --since '5 min ago')r6rvrwrx)r,rir{ scope_flagsystemctl_prefixjournal_prefixs r0rzrzls   C&v..99;;K &.BJ'-F||3F&,F]]2FN N N N NOOO OPPP VB[''Y[s} W3C W WRU W WXXX J> J Jc J J JKKKKKr2ct|}|sdS ddlm}n#t$rYdSwxYw|pi}|dsdS|dd}|dd}|d d}|d d}|d kr&|d kr t d t ||S|dkr|ttks|dkrt} t| } t d| dtd| g|ddtd| g|ddt ||SdS)zARecover a planned service restart that is stuck in systemd state.r.Frr_restart_requestedrMr rNrPrOrqrruG⏳ Service restart already pending — waiting for systemd relaunch...r,rhfailedz exit-codeu&↻ Clearing failed state for pending z service restart... reset-failedr,checkrJstartZ)rUrr`rurrxrr8rr6rvrwrr5) r,rhrVr`rr}r~exec_main_statusrfrir{s r0 _recover_pending_systemd_restartr{s * 8 8 8E u6666666 uu('))/RM   0 1 1u99]B//L *b))Iyy!1266 YYx $ $F|## ^(C(C WXXX0%    xC ABBBB [   *622==??  ][5F5F5H5H ] ] ]     S !      cN     1%    5s  ++rc|D]}|}|ds|dr|dd}t |dkrn|ddd} t |}|dkr|nd cS#t$rYd SwxYwd S) aExtract the PID from ``launchctl list