epj  dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z ddlmZddlmZddlmZejeZdZd Zdd Zd Zd edzfd Zd eeedzedzffdZdZ d eeedzedzffdZ!ddedede"d efdZ#de ded efdZ$de d efdZ%de d ee dffdZ&ddZ'dd Z(dd!Z)d"ed efd#Z*d$e+ed dfd%Z,d&ed'ed dfd(Z-d&ed'ed efd)Z.dd*Z/dd+Z0d,Z1d-e+ed.e d eefd/Z2d-e+ed.e d0ed eefd1Z3 dd0ed2eed dfd3Z4d4ed efd5Z5 dd-e+ed.e d0ed7ed ef d8Z6d-e+ed.e d0ed efd9Z7hd:Z8d;Z9deed efd?Zd-e+ed.e dBedCed e?f dDZ@d efdEZAdFZBd-e+ed.e d efdGZCd-e+ed.e d dfdHZDdIZEdJe dKed dfdLZFddMZGddNZHdOe+ee?efdPe d efdQZIddRdSe+edTeJeefdzd dfdUZK dddRdSe+edzdTeJeefdzd efdVZLddWZMd efdXZNddRdSe+edTeJeefdzd dfdYZOdZe+ed edzfd[ZPd ee dffd\ZQd edzfd]ZRd^e d efd_ZSd^e d dfd`ZTd e+efdaZUdbed dfdcZVdddddeZWdd6dgdhediefdjZXddkZYddlZZdmZ[dnZ\d efdoZ]d eefdpZ^dqe dre?d efdsZ_dte+e?de"d e`e?fduZad eeeffdvZbddwdxe`e?dzd e+ee?eeffdyZcdOe+ee?eefd efdzZddte+e?d e+e?fd{ZedOe+ee?eefd e+e?dzfd|Zfd eJdzfd}Zgdd~Zhded dfdZide+d dfdZjddZkdeJdzd dfdZldZmdZndefdZoddZp dde+dede"d efdZq dde+dede"d e"fdZrdS)uHermes update pipeline — extracted from ``hermes_cli/main.py``. Mechanical move (main.py decomposition): ``_cmd_update_impl``, ``_cmd_update_check`` and every module-level helper used only by the update path, plus the update-only constants they read. Function bodies are lifted verbatim; the only mechanical change is that references to helpers/constants that STAY in ``hermes_cli.main`` (and to moved-but-test-patched siblings) are routed through ``_m()`` — a lazy ``hermes_cli.main`` reference — so existing call sites and test monkeypatches that target ``hermes_cli.main.`` (``PROJECT_ROOT``, ``_is_windows``, ``_run_pre_update_backup``, ...) keep working unchanged. ``main.py`` re-imports every public-ish name from here (``# noqa: F401``) so the argparse wiring and the test-patch surface still resolve on ``hermes_cli.main``. Three self-contained closures nested inside ``_cmd_update_impl`` (``_print_items``, ``_wait_for_service_active``, ``_service_restart_sec``) were hoisted to module level; they capture no enclosing state (verified via ``symtable``). ``_restart_one_systemd_gateway_unit``, ``_resolve_manage_cmd`` and ``_on_unit_timeout`` DO capture enclosing locals and stay nested, byte-identical. Imports are one-way: ``hermes_cli.main`` imports this module, never the reverse at import time (``_m()`` resolves lazily at call time, when main.py is fully loaded, so there is no import cycle). N)datetime)Path)Optionalget_hermes_home)venv_python_pathcddlm}|S)a$Lazy ``hermes_cli.main`` reference. Lets callers keep patching ``hermes_cli.main.`` (the historical test surface) and have those patches reach this code path, and defers the import so ``hermes_cli.main`` -> ``hermes_cli.update_cmd`` stays one-way at import time. rmain) hermes_clir r s ;/home/thesage/.hermes/hermes-agent/hermes_cli/update_cmd.py_mr-s  K)hermes_constantsztools.environments.localztools.lazy_depsreturnc ddl}|tD]y}tjj|}|0 ||G#t$r&}t d||Yd}~rd}~wwxYwdS#t$r&}t d|Yd}~dSd}~wwxYw)aReload update-sensitive modules after the checkout changes in-place. ``hermes update`` keeps running in the pre-pull Python process. After a large update, modules already present in ``sys.modules`` can still expose old symbols even though their source files on disk are new. Refresh the small module set used by lazy-backend refresh before that step imports newly-updated code paths. rNz&Could not reload updated module %s: %sz,Could not refresh update runtime modules: %s) importlibinvalidate_caches_UPDATE_RUNTIME_RELOAD_MODULESrsysmodulesgetreload Exceptionloggerdebug)r module_namemoduleexcs r _reload_updated_runtime_modulesr @s J##%%%9 Y YKTTX%))+66F~ Y  (((( Y Y Y E{TWXXXXXXXX Y  Y Y JJJ CSIIIIIIIIIJsBABA('B( B2BBBB C 'CC ) zhermes_cli/main.pyzhermes_cli/config.pyzhermes_cli/__init__.pyzhermes_cli/web_server.pyzcli.pyz run_agent.pyzmodel_tools.pyz toolsets.pyzhermes_constants.pyc  tj|ddgz|ddddd}|jpdS#tjt f$rYdSwxYw)z=Return the current HEAD SHA, or None if it can't be resolved. rev-parseHEADTutf-8replacecwdcapture_outputtextencodingerrorscheckN) subprocessrunstdoutstripCalledProcessErrorOSErrorgit_cmdr'results r _capture_head_shar6js  {F+ +     }""$$,,  )7 3tts:=AAcddl}ddl}t|}|d5}tD]}||z }|st||dddzz } |t|t|d y#|j $r7}d t|t|fcYd}~ccdddSd}~wt$r-}d t|d |fcYd}~ccdddSd}~wwxYw dddn #1swxYwYd S) uCompile each file in ``_UPDATE_CRITICAL_FILES`` to catch SyntaxErrors. These are the files imported on every ``hermes`` startup; if any of them has a syntax error (orphan merge-conflict markers, bad ref to a name that no longer exists, etc.) the CLI can't bootstrap at all. We validate them after a successful ``git pull`` so we can auto-roll-back instead of leaving the user with a bricked install. The compiled ``.pyc`` is written to a temp directory rather than the source tree's ``__pycache__/`` so we don't race with concurrent test workers that walk the same dir, and so we don't leave a stale pyc behind in production if the next interpreter run picks a different Python version. The pyc is discarded on function return either way — we only care about the compile-or-not signal. Returns ``(ok, failing_path, error_message)``. ``ok=True`` means every file parsed cleanly. rNzhermes-syntax-check-prefix/__cT)cfiledoraiseFzcould not read: TNN) py_compiletempfilerTemporaryDirectory_UPDATE_CRITICAL_FILESexistsr%compilestrPyCompileErrorr2)rootr@rAtmpdirrelpathpathr=rs r _validate_critical_files_syntaxrLxs'&OOO ::D  $ $,B $ C CBv- B BG'>D;;== LLGOOC$>$>$DEE B""3t99CJJ"MMMM, 2 2 2c$iiS11111111BBBBBBBB B B Bc$ii)AC)A)AAAAAAAAABBBBBBBB B BBBBBBBBBBBBBBBB  sZA D5<2B/.D5/ D%9C+D%D5+ D%8D  D% D5 D%%D55D9<D9)hermes_cli.main run_agent model_toolstoolsetsc ddlm}dtdtt |d} t j} tt|dz t }| rt|}n#t$rYnwxYwtj|d|gt|d d d d d }n#t tjf$rYdSwxYw|jdkrm|jpddd}|dpd}t-|dkr|dnd}d||fSdS)uImport each module in ``_UPDATE_CRITICAL_MODULES`` in a subprocess. ``_validate_critical_files_syntax`` only *parses* files, so it cannot see cross-module breakage: a partially-updated tree where ``agent/`` is new but ``tools/`` is old parses perfectly and still dies at startup with ``ImportError: cannot import name 'TODO_INJECTION_HEADER' from 'tools.todo_tool'``. Every file is valid Python; the *combination* is not. That skew is reachable on the Windows ZIP-update path, whose copy loop walks top-level entries in ``os.listdir`` order and replaces each one independently — ``agent/`` lands long before ``tools/``, so a failure or interruption between them leaves exactly that mismatch on disk. Runs in a subprocess because importing these modules into the running updater would pollute ``sys.modules`` and execute import-time side effects against the half-updated tree. Costs ~0.4s. Uses the project venv's interpreter when there is one (matching ``_venv_core_imports_healthy``): ``hermes update`` can be driven by a different Python than the install's own, and probing the wrong interpreter would test a tree the user never runs. Returns ``(ok, failing_module, error_message)``. r)FIRST_PARTY_MODULE_ROOTSz"import importlib, sys for name in z: try: importlib.import_module(name) except ModuleNotFoundError as exc: missing = (getattr(exc, 'name', '') or '').split('.')[0] if missing in a or missing.startswith('hermes_'): sys.stdout.write(name + '\n' + str(exc)) raise SystemExit(3) except ImportError as exc: sys.stdout.write(name + '\n' + str(exc)) raise SystemExit(3) except Exception: pass raise SystemExit(0) venvwindows-cTr$r%x)r'r(r)r*r+timeoutr? unknownF)rrR_UPDATE_CRITICAL_MODULEStuplesortedr executablerrr _is_windowsrDrFrr-r.r2SubprocessError returncoder/splitr0len) rHrRprobe interpreter venv_pythonr5partsrdetails r !_validate_critical_modules_importrls2:999999, $ # #U62J+K+K%L%L%L%L' N , n  *T V#RTT-=-=-?-?K!!## /!+..     D  $ &D     Z/ 0    A$"++D!44q!!.Y%(ZZ!^^q!!!ff$$  s5 CA"B C B-*C,B--.CC65C6rZr@ prompt_textdefaultrXcddl}ddl}ddlm}|}|dz }|dz }|d||t |d} |d } | | | d | |tj |z} tj | kr| rr |d } |d|d| r| n|S#t t"f$rYnwxYwtjd tj | k|d|dt'd t)|d|d|S)awFile-based IPC prompt for gateway mode. Writes a prompt marker file so the gateway can forward the question to the user, then polls for a response file. Falls back to *default* on timeout. Used by ``hermes update --gateway`` so interactive prompts (stash restore, config migration) are forwarded to the messenger instead of being silently skipped. rNrz.update_prompt.jsonz.update_responseT) missing_ok)promptroidz.tmpr$r*?z (no response after zs, using default: ))jsonuuidrrunlinkrFuuid4 with_suffix write_textdumpsr%_time monotonicrD read_textr0r2 ValueErrorsleepprintint) rnrorX_json_uuidrhome prompt_path response_pathpayloadtmpdeadlineanswers r _gateway_promptrs 000000 ?  D..K--MD)))%++--  G  ! !& ) )CNN5;;w'''N:::KK   7*H /  h & &    ! !  &00'0BBHHJJ$$$555""d"333!'4vvW4Z(     C /  h & &$'''D))) N#g,, N N' N N NOOO Ns4AEE"!E"bin_dirnamecTtfd||d|d|dfDS)z?True when an npm bin shim for *name* exists (POSIX or Windows).c3FK|]}|z VdSNrD).0 candidaters r z"_npm_bin_exists../sH  9 $$&&rz.cmdz.ps1z.exeany)rrs` r _npm_bin_existsr-sV 4 $}}}mmmL  rrootscdd|DDtotfddDS)zTrue when ``tsc`` and ``vite`` shims are reachable from any of *roots*. Callers must pass every root the build would search; checking only one reports a healthy tree as broken. c:g|]}||Sis_dir)rrs r z._web_build_toolchain_ready..:s8  >>  rc3&K|] }|dz dz V dS) node_modulesz.binNr)rrHs r rz-_web_build_toolchain_ready..<s,II4~-6IIIIIIrc3PK|]tfdDV dS)c38K|]}t|VdSr)r)rrtools r rz7_web_build_toolchain_ready...@s- C CwOGT * * C C C C C CrNr)rrbin_dirss @r rz-_web_build_toolchain_ready..?sU""  C C C C( C C CCC""""""r)tscvite)boolall)rrs @r _web_build_toolchain_readyr4sv II5IIIH >> c""""#"""rweb_dir.c||jfS)a%Roots whose ``node_modules/.bin`` can satisfy the web build. ``npm run build`` prepends ``node_modules/.bin`` for the package and each of its ancestors, so shims hoisted to the workspace root and shims nested under a package that owns its lockfile (#42973) are equally valid. )parent)rs r _web_toolchain_rootsrDs W^ $$rc ddlm}n#t$rYdSwxYw |sdS|}n#t$rYdSwxYw|drdS |}n#t$rd}YnwxYwtd|dz}ttdtd |d td td td dS)aPrint a short heads-up about the skill curator after `hermes update`. Only fires when the curator is enabled AND has no recorded run yet, which is exactly the window where the gateway ticker used to fire Curator against a fresh skill library immediately after an update. We defer the first real pass by one ``interval_hours``; this notice tells the user how to preview or disable before then. Silent on steady state. rcuratorN last_run_atr\uℹ Skill curatorzC Background skill maintenance is enabled. First pass is deferred ~zwd after installation; only agent-created skills are in scope and nothing is ever auto-deleted (archive is recoverable).z, Preview now: hermes curator run --dry-runz$ Pause it: hermes curator pausezV Docs: https://hermes-agent.nousresearch.com/docs/user-guide/features/curator) agentrr is_enabled load_staterget_interval_hoursmaxr)rstatehoursdayss r _print_curator_first_run_noticerMs}!!!!!!! !!##  F""$$  yy**,,  q%2+  D GGG   L  L L L  8999 0111 `s4 AA AA/B BBcd} ddlm}t|pidpidd}n#t $rd}YnwxYw|dkrdS ddlm}dd l m }n#t $rYdSwxYw|d z }| sdS | j d z }n#t$rYdSwxYw|d krdSd}d } ||d}|jd}t%|jdpW|jdp+|jd}n;#t $r.Y|( |dS#t $rYdSwxYwdSwxYw |& |n>#t $rYn2wxYwn-#|& |w#t $rYwwxYwwxYw|r|dndpd} | rd| vr|sdS|r=t)t)dt)dt)ddS|dz} t)|dkr(t)dt)d| dd|ddn't)d t)d!| dd|dd"t)d#t)d$dS)%aAdvertise the opt-in v23 search-index optimization after `hermes update`. Only fires when the current profile's state.db is still on the legacy (pre-v23) inline FTS layout. Leads with the reclaimable-space figure and points at the exact command. Honors ``sessions.fts_optimize_notice``: ``advise`` (default) prints an advisory notice, ``require`` prints a firmer required-upgrade notice, ``off`` suppresses it. Silent for fresh/already-optimized installs. adviser load_configsessionsfts_optimize_noticeoffNr) SessionDBstate.db@ruFT)db_path read_onlyzLSELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'messages_fts'zESELECT 1 FROM state_meta WHERE key = 'fts_rebuild_high_water' LIMIT 1zfSELECT 1 FROM sqlite_master WHERE type = 'table' AND name LIKE 'fts\_v22\_trash\_%' ESCAPE '\' LIMIT 1z]SELECT 1 FROM state_meta WHERE key IN ('fts_cjk_rebuild_high_water', 'fts_cjk_stale') LIMIT 1rZ tool_nameu,◆ Session database optimization incompletez A previous `hermes sessions optimize-storage` run was interrupted. Search still works; re-run the command to resume and finish reclaiming disk:z$ hermes sessions optimize-storageg333333?requireu%◆ Session database upgrade requiredu| Your search index uses the OLD storage layout and should be upgraded. The new layout typically frees ~60% of state.db (≈.1fz GB of your current z5 GB) and is required for continued optimal operation.u.◆ Reclaim ~60% of your session database diskui Your search index uses the old storage layout. Upgrading it typically frees ~60% of state.db — about z GB.z8 Run when convenient: hermes sessions optimize-storagezs It runs in the foreground with a progress bar, is safe to interrupt/re-run, and never changes your conversations.)hermes_cli.configrrFrr0lowerrrr hermes_staterrDstatst_sizer2_connexecutefetchonercloser) moderrrrsize_gbdb interruptedrowsql est_reclaims r $_print_fts_optimize_available_noticerus D 111111kmm!r & &z 2 2 8b = =%x     %''%%''   u}}444444******* o*,G >>  ,,..(I6 }} BK Yw$ 7 7 7h =   (**  H  ?  hjj xLhjj xJhjj     >       > " >       2>         3q66b 'RC ;#%%k%   <===  *   4555C-K GGG y 5666  9 Q 9 98? Q 9 9 9     >???  1:E O 1 1& 0 1 1 1    DEEE  BsA,A11 B?B B B'&B'C++ C98C9 C GH9 H H9"G88 HH H  H9H(( H54H59I#=II# II#II#c ddlm}n#t$rYdSwxYw |}n#t$rYdSwxYw|d}|sdS|d|krdS|dpd}|sdSd|vr. ||d<||n#t$rYnwxYwdSt |}ttd ||D]}td |td  ||d<||dS#t$rYdSwxYw) uPrint the most recent curator run summary, exactly once. The curator runs in the background (gateway tick + CLI session start), so users learn about skill consolidations only by stumbling into a rename. ``hermes update`` is a high-attention surface — surface the most recent run's rename map here, once. Show-once: state stamps ``last_run_summary_shown_at`` after printing. Subsequent ``hermes update`` invocations skip the block until a newer curator run lands. Silent when the curator has never run, when the most recent summary has already been shown, or when the summary has no rename information to display (no archives). rrNrlast_run_summary_shown_atlast_run_summaryrZr[uℹ Skill curator — last run  zP (This message shows once per curator run. View anytime: hermes curator status)) rrrrr save_state_format_time_agor splitlines)rrrsummarywhenlines r _print_curator_recent_run_noticers!!!!!!! ""$$ ))M**K  yy,--<<ii*++1rG   7 1>B00 B=<B=*E EEiso_tsc ddlm}m}|j|dd}|j||j}|j|j|z }t|}|dkrdS|d kr|dzd S|d kr|d zd S|d zd S#t$rYdSwxYw)zGRender an ISO timestamp as `Xh ago` / `Xd ago` / `Xm ago`. Best effort.rrtimezoneZz+00:00N)tzinfo<zjust nowizm agoiQzh agozd agorecently) rr fromisoformatr%rutcnowr total_secondsr)rrrtsdeltasecss r rr's//////// #X #FNN3$A$A B B 9 8<00B X\**R/5&&(()) "99: $;;bj''' ' %<<dl))) )%-&&&& zzs$B B5 B5 B5-B55 CC node_failurescN|r.ttdtddStd}|dsdSttdtdtd dS) zERefresh managed dashboards or stop stale manual ones after an update.uA ℹ Leaving running dashboard process(es) untouched because thez0 Node.js dependency refresh did not complete.NT)restart_managed unrecoveredu\⚠ A web dashboard/serve process was stopped during update and could not be auto-restarted.z- Re-launch it when you want the web UI back:z" hermes dashboard --port )rr_kill_stale_dashboard_processesr)r stop_results r _finish_dashboard_update_cleanupr:s  QRRR @AAA$$66t6LLK ??= ) ) GGG  ! 9::: ./////rsrcdstcFtt|||fgdS)uReplace directory *dst* with *src* without leaving *dst* half-deleted. The naive ``rmtree(dst); copytree(src, dst)`` has a destructive window: if the copy fails partway (common on the Windows ZIP-update path, which only runs because file I/O is already flaky on that machine), the old directory is already gone and nothing replaced it — the install is left with a deleted tree (issue #49145, where ``ui-tui/`` vanished and broke the TUI). Now a thin single-entry alias over the two-phase helpers below, which generalise the same stage-then-swap discipline across every entry the ZIP update touches (#76104). Retained because it is part of the mechanical ``hermes_cli.main`` re-export surface and guards the #49145 regression. N)_commit_staged_replacements_stage_replacement)rrs r _atomic_replace_dirrNs+ "4S#">">!D EFFFFFrc4|d}|d}tj|s4tj|rtj||||fD]k}tj|rt j|d8tj|rtj|ltj|rt j||nt j |||S)zCopy *src* to a sibling staging path for *dst*; return the staging path. Phase 1 of the two-phase replace. Handles both directories and plain files. Touches nothing live, so a failure here leaves the whole install untouched. z.hermes-update-staging.hermes-update-oldT ignore_errors) osrKrDrenameisdirshutilrmtreeremovecopytreecopy2)rrstagingbackupleftovers r rr_s ,,,G ' ' 'F 7>>#  27>> #9 &#f%   7== " " M($ 7 7 7 7 7 W^^H % % Ih    w}}S#W%%%% S'""" NrcP|D]\}} tj|rtj|dn3tj|rtj|p#t$r&}t d||Yd}~d}~wwxYwdS)uRemove staging paths for entries that were never committed. Without this a phase-1 failure (typically disk exhaustion) orphans one staging copy per entry already processed — up to a full second copy of the tree. The user then follows the "re-run `hermes update`" advice with *less* free space than before and the retry fails harder than the original attempt. Tr z$could not remove staging path %s: %sN) r rKr rrrDrr2rwarning)stagedr_dstrs r _discard_stagedr|s QQ  Qw}}W%% # gT:::::(( # '""" Q Q Q NNA7C P P P P P P P P Q QQsA)A33 B#=BB#cg} |D]\}}|d}tj|r-tj|||||fn||dftj||n#t $rt |D]\}} tj|rtj |dn3tj|rtj ||r4tj|rtj||#t $r&}t d||Yd}~d}~wwxYwwxYw|D]\}}|r6tj|rtj |d=|rEtj|r& tj |t#t $rYwxYwdS)uPhase 2: swap every staged entry into place, rolling back all on failure. ``_atomic_replace_dir`` makes each *individual* directory swap safe, but the ZIP update replaces ~90 top-level entries in a loop, and nothing made the loop atomic *as a whole*. A failure partway left some entries at the new version and the rest at the old one — every file valid Python, the combination unbootable (issue #76104; the ``ImportError`` in #76091 and the field report in #63717 are both this). This covers plain files as well as directories: the repo root holds 20 first-party modules (``run_agent.py``, ``cli.py``, ``hermes_constants.py`` …), so a files-only failure reproduces exactly the bug class we are closing. Every swap is an ``os.rename`` onto a path that was just moved aside — a same-filesystem rename is atomic on POSIX and NTFS alike, so a file swap can never leave a half-written module the way ``copy2`` onto a live path can. Splitting stage-all-then-swap-all shrinks the failure window from "the duration of a full tree copy" to "the duration of N renames", and makes the remaining window recoverable: if a swap fails we restore every entry already swapped, so the tree lands wholly new or wholly old. rrZTr zrollback failed for %s: %sN) r rKrDr appendr2reversedr rrrrr)rswappedrrrrrs r rrs[.&(G" $ $LGS///Fw~~c"" * #v&&&V}----Ry))) Igs # # # # $ #G,, G GKC G7==%%#M#T:::::W^^C((#IcNNN+bgnnV44+Ifc*** G G G;S#FFFFFFFF  G "  f  bgmmF++  M& 5 5 5 5 5  v..   &!!!!     sIBB E>)BE E> E9E4/E>4E99E>"G77 HHc 45ddl}ddl}ddlm}t |}|dkrLt d|dt d|dt jd d |d }t d | d } tj |d|d }|||t dddl }||d5} tj |} | D]} tj tj || j} | | tjzs| | krt)d| jd| jdz dz} || rt)d| j| |dddn #1swxYwYtj |d|4tj 4s`tj|D]K}tj ||}tj |r |dkr|4nLhd55fdtj4D}t54fd|Dt54fd|Dz}t7|dz}t9jt=t jj }||krtCd|dzd|dzd g} |D]}tj 4|}tj t=t j|}|"tG|||fn#tH$rtK|wxYw tM|n#tH$rtK|wxYwtO|}t d!|d"nm#tH$r`}t d#|t d$t d%t jd Yd}~nd}~wwxYwt9j(|d&'n#t9j(|d&'wxYwt )t j}|rt d(|d)|d krd*nd+t *t d,dd-l+m,}m-}||}t jj.d.d/g}|st_|}|ritj0d0t=t jd1z i}t 1|r,|2d2d|2d3dt 3|d/g|4n tij5|d5gzt jd&d&6nX#thj6$rFtij5t jj.d.d7d8d9gt jd&:YnwxYwt 3|t 7tqt j\} }!}"| st t d;t d<|!d=|"t t d>t d?t jd ts}#t :t jd@z  ddAl;m<}$t dB|$d&C}%|%dDrAt dEtO|%dDdFdG |%dD|%=dHrAt dItO|%dHdJdG |%dH|%=dKr5t dLtO|%dKdMt dN|%=dOr&t dPtO|%dOdQ|%=dRrAt dStO|%dRdTdG |%dR|%dDs$|%=dHst dUn#tH$rYnwxYw ddVl>m?}&|&t jrt dWn2#tH$r%}tAdX|Yd}~nd}~wwxYw ddYlBmC}'mD}(tdZz })|)Fr|(|)d&d&[}*|*=d\s^t t d]|*=d^d_z|'t}+|+Frtd`|+HDd&a},|,D]}-|-dZz }.|.Fr|(|.d&d&[}/|/=d\r ddl}0|0I|.|)|(|)d&d&[}1|1=d\rt db|-jJnt dcn+#t$r}2t dd|2Yd}2~2n d}2~2wwxYwn2#tH$r%}3tAde|3Yd}3~3nd}3~3wwxYwt |#rEt dfdG |#dgt dht dint dj tn2#tH$r%}tAdk|Yd}~nd}~wwxYw tn2#tH$r%}tAdl|Yd}~nd}~wwxYwt|#dS)mzUpdate Hermes Agent by downloading a ZIP archive. Used on Windows when git file I/O is broken (antivirus, NTFS filter drivers causing 'Invalid argument' errors on file creation). rN) urlretriever u ✗ --branch=z: is not supported on the Windows ZIP-fallback update path.z This path runs when git file I/O is broken on the system. Either resolve the git-side breakage (typically an antivirus or NTFS filter holding files open) and rerun `hermes update --branch z/`, or update against main with `hermes update`.r\z@https://github.com/NousResearch/hermes-agent/archive/refs/heads/z.zipu!→ Downloading latest version...zhermes-update-r8z hermes-agent-u→ Extracting...rzZip-slip detected: z escapes extraction directoryiz)ZIP contains unsupported symlink member: __MACOSX>.envrSr.gitcg|]}|v| Srr)ripreserves r rz#_update_via_zip..s#IIIq7H7H17H7H7Hrc 3K|]}tjtj|D]J\}}}|D]A}tjtj||VBKdSr)r walkrKjoingetsize)rentrydirpath_dirsfilesf extracteds r rz"_update_via_zip..'s  )+i1O1O)P)P  &    GOOBGLL!44 5 5        rc3 K|]~}tjtj|?tjtj|VdSr)r rKisfiler+r,)rer2s r rz"_update_via_zip..,sy  w~~bgll9a8899 GOOBGLLA66 7 7      rg333333?z=not enough free disk space to stage the update safely (need ~iz MB, have z MB)u ✓ Updated z items from ZIPu✗ ZIP update failed: z* Your existing install was left in place.zq Re-run `hermes update` to retry; if the agent won't start, reinstall from https://hermes-agent.nousresearch.comTr  ✓ Cleared  stale __pycache__ directoryies#→ Updating Python dependencies... ensure_uvupdate_managed_uv-mpip VIRTUAL_ENVrS PYTHONPATH PYTHONHOMEenv --versionr'r,r( ensurepip --upgrade --default-pipr'r,u5✗ Update left the install in an unimportable state:r: z> This usually means the copy was interrupted partway through.z( Re-run `hermes update` to complete it.web sync_skills→ Syncing bundled skills...quietcopied +  new: , updated ↑ updated: user_modified ~  user-modified (kept)M → see them: hermes skills list-modified (diff/reset to resume updates)cleaned −  removed from manifest relocated →  moved to new upstream paths:  ✓ Skills are up to dateseed_cache_from_checkout1 ✓ Model catalog cache refreshed from checkoutz/Model catalog seed during zip update failed: %s_quick_snapshot_rootverify_sqlite_integrityr check_header run_pragmavalid(⚠ state.db is corrupted after update: message unknown errorc3BK|]}||VdSrr)rds r rz"_update_via_zip..s/GGqAHHJJGGGGGGGr)reverseu" ✓ Auto-restored from snapshot A ✗ Auto-restore FAILED — restored copy also failed integrity% ✗ Auto-restore file copy failed: z:Post-update state.db integrity check (zip path) failed: %s;⚠ Update partially complete — Node.js dependencies for  did not refresh.= Code and Python deps are updated, but the dashboard/TUI may6 be in a mixed state until the Node deps are rebuilt.✓ Update complete!#Curator first-run notice failed: %s$Curator recent-run notice failed: %s)OrAzipfileurllib.requestr r_resolve_update_branchrrexitmkdtempr rKr+rZipFilerealpathinfolistfilename startswithsepr external_attrS_ISLNK extractallr listdirsumrr disk_usagerF PROJECT_ROOTfree RuntimeErrorrrrrrrfr_clear_bytecode_cache_record_bytecode_fingerprinthermes_cli.managed_uvr<r=ra_ensure_uv_for_termuxenviron_is_termux_envpop3_install_python_dependencies_with_optional_fallbackr-r.r1,_refresh_active_memory_provider_dependenciesrl_update_node_dependencies _build_web_uitools.skills_syncrNrhermes_cli.model_catalogrerrhermes_cli.backuprhrirrDr`iterdirrrr2rrr)6argsrAr}r branchzip_urltmp_dirzip_path_statzf tmp_dir_realmember member_pathrrrrentriesneedrequiredrritemrr update_countr5removedr<r=uv_binpip_cmduv_env import_okfailing_module import_errorrrNr5rerhri _state_path _state_ok _snap_root _snap_dirs _snap_dir _snap_state_snap_ok_shutil _restored_ok_excrr2r(s6 @@r _update_via_ziprs OOONNN******TT ( ( . .F   F        P P P P    aW6WWW  -...&677G{37<<)E)E)E)EFF GX&&& !""" __Xs + + #r 7++G44L++--   g..rw||GV_/U/UVV #..|bf/DEE#|33$\fo\\\ ,2h>==&&$UFOUU MM' " " "/ # # # # # # # # # # # # # # #4GLL*B&*B*BCC w}}Y'' Z((  GLL!44 7==++Z )IE<;;IIIIbj33III                    tcz?? RTT%6!7!788= (??/"{3//K(///  )+  C Cgll9d33gll3rtt'8#9#94@@ 1#s;;SABBBB C    F # # #     ' / / / /    F # # #  6{{  :\:::;;;;     +++,,, :;;;  C     a   gT22222 gT22222dd(():;;G  aW a aST Z_ a a   DD%%'''  /000BBBBBBBB Y[[Fttx"D%0G 0&w// JOBJO s2443Dv3M/N/NOO 44  v & & + JJ|T * * * JJ|T * * * @@&%V\@]]]]  N;-'DD%#       ,    N$dKoVDD%        @@III DD55777/P //+I~|   EFFF 3>33\33444  NOOO 8999  a-//MDDrtt(50111 111111 -...4((( (  U SVH-..SSdiix@P6Q6QSS T T T ::i   YVI.//YY499VIEV;W;WYY    ::o & &  LVO455LLL M M M 1    ::i  K I3vi011III J J J ::k " "  4VK0114499VK01144   h 1 9(=(= 1 / 0 0 0      KEEEEEE # #BDD$5 6 6 G E F F F KKK FJJJJJJJJK 7 SSSSSSSS%''*4     / *//$4I==))+ *>mmI??@21/2C2CDD $$&&$*!'GGJ$6$6$8$8GGG $"""J&0** &/*&< &--//*'>'> +$4(((H (||G44*!*$<$<$<$<$+MM+{$K$K$K3J3J(359374&4&4&L (4'7'7'@'@ %*(--@/8~-@-@)*)*)*)* ).-I)*)*)*%*E'.!*!*!*$)(VPT(V(V%&%&%&%*EEEEE !*     H#          GGG&  ;yy'' ; ; ;    MNNN FGGGG $%%%?')))) ??? :A>>>>>>>>?@(**** @@@ ;Q????????@%]33333s;0AR DH R H  R #H $E-R BPR P66R :Q R Q%%%R T S5AS0+T0S55TT'-[ A\\Gh h%$h%)1i j %jj Dp?-A$pp? p:p5/p?5p::p?? q. q))q.s%% t/ttt'' u1uur4r'c tj|ddgz|ddddd}|jsdStj|ddgz|dddd }|jr*t d tj|d gz|d d dlm}m}|j|j d}t dtj|gdz|dddd j}tj|dddd|gz|dddd }|jr&t |jtj|gdz|dddd } | j} | j d kot| o| |k} |j d kr | rz|j r&t |j t dt dtj|gdz|d nt d|j rAt d|j  d t dtj|j |j|j|j | S)Nstatusz --porcelainTr$r%r&zls-filesz --unmergedr'r(r)r*r+u?→ Clearing unmerged index entries from a previous conflict...resetr'r(rrz%hermes-update-autostash-%Y%m%d-%H%M%Su8→ Local changes detected — stashing before update...)r"--verifyz refs/stashstashpushz--include-untrackedr>uZ ⚠ Some untracked files could not be removed from the working tree (permission denied).u[ They were still saved to the stash and were left in place — the update will continue.r--hardr#u5✗ Could not stash local changes — update aborted.rzV Commit, stash, or clean up your local changes manually, then re-run `hermes update`.)outputstderr)r-r.r/r0rrrrrstrftimerdrrrr1r) r4r'runmergedrr stash_name prev_stashr stash_probe stash_ref stash_createds r _stash_local_changes_if_neededr3s ^8]++  GI F =   t ~:|,,  GI H J OPPPw'*DIIII++++++++hl++44/J DEEE9999  GI   UUWW  >7F$94LL  GI    D  {# dk!!""".9999  GI K "((**I!#SYSI@@AAA /   /4;t{  rrc  tj|gdz|ddddd}|jD]I}|d\}}}||kr|cSJdS)N)rlistz--format=%gd %HTr$r%r& )r-r.r/r partitionr0)r4r'r stash_listrselector_commits r _resolve_stash_selectorrs6666  GI J!,,..$$"nnS11!V <<>>Y & &>>## # # # ' 4rstash_selectorctdtd|rtd|dStd|ddS)NzS Check `git status` first so you don't accidentally reapply the same change twice.z@ Find the saved entry with: git stash list --format='%gd %H %s'z! Remove it with: git stash drop z Look for commit z7, then drop its selector with: git stash drop stash@{N})r)rrs r _print_stash_cleanup_guidancersy ] LMMM  B.BBCCCCC e e e e     rrcd|pdD}|sdSd}|D](}d|vrd} d|vrd}|dr&dS|S)aTrue when a ``git stash apply`` failure is ONLY about untracked files that already exist in the working tree. This is the tail end of the permission-denied autostash class: ``git stash push --include-untracked`` swept undeletable files (e.g. a root-owned ``packaging/`` directory) into the stash but could not remove them from disk. On restore, git applies all tracked changes, then refuses to overwrite those still-present files (``already exists, no checkout`` / ``could not restore untracked files from stash``) and exits non-zero even though nothing was lost. Any other error line (e.g. ``would be overwritten by merge`` / ``Aborting``) means the tracked apply itself failed and this returns False. c^g|]*}||+Srr0)rlns r rzB_stash_apply_failed_only_on_existing_untracked..s- L L LB LRXXZZ L L LrrZFzalready exists, no checkoutTz,could not restore untracked files from stash)zwarning:zhint:)rr)rlinessaw_untracked_errorrs r ._stash_apply_failed_only_on_existing_untrackedrs M L6rZr8yesz Skipped restoring local changes.z.Your changes are still preserved in git stash.z'Restore manually with: git stash apply Fu→ Restoring local changes...rapplyTr$r%r)diff --name-onlyz--diff-filter=UruY ⚠ Some stashed untracked files already exist in the working tree and were kept as-is.uF✗ Update pulled new code, but restoring local changes hit conflicts.z Conflicted files:u • u8 Your stashed changes are preserved — nothing is lost.z Stash ref: rrz"Working tree reset to clean state.z1Restore your changes later with: git stash apply uR⚠ Local changes were restored, but Hermes couldn't find the stash entry to drop.zT The stash was left in place. You can remove it manually after checking the result.dropuP⚠ Local changes were restored, but Hermes couldn't drop the saved stash entry.u?⚠ Local changes were restored on top of the updated codebase.zB Review `git diff` / `git status` if Hermes behaves unexpectedly.)rinputr0rr-r.rr/rdrrrrr) r4r'rrinput_fnresponserestorer has_conflictsconflicted_filesr1rrs r _restore_stashed_changesrss  ?@@@ Z    MNNN 0111  x BCHHHHww}},,..H + + + 4 5 5 5 B C C C GIGG H H H5 *+++n7GY//  GI G~<<<<  GI H ..0011MQ}6w~FF  (      q M  VWWW >   ! ! * '.&&(( ) ) ) >   ! ! * '.&&(( ) ) )$?0022  $ ' ( ( (%0022 $ $lqll#### IJJJ )i))***  111 1    2333 M)MMNNNu,Wc9EEN `     b    &i0000~ w7 7     ?a   b   {  "" +dk''))***{  "" +dk''))*** f    *)^ D D D KLLL NOOO 4rct|||}| tdt|dStj|dd|gz|dddd }|jd kr{td |jrAtd |jd t||dStd dS)uThrow away a stash created before an update, without applying it. Used only on a NON-interactive update when the user has set ``updates.non_interactive_local_changes: discard`` — i.e. they've opted out of keeping local source edits on this machine. Drops the stash entry instead of re-applying it, so the working tree stays clean at the freshly pulled HEAD. Unlike ``git reset --hard`` + ``git clean -fd``, this only affects what was stashed (tracked changes + the untracked files we explicitly captured) — ignored paths like node_modules/venv/build outputs are never touched, since they were never stashed. Returns True if the stash was dropped, False on a git failure (in which case the stash is left in place for safety). Nut⚠ Configured to discard local changes on non-interactive update, but Hermes couldn't find the stash entry to drop.FrrTr$r%rruX⚠ Configured to discard local changes, but Hermes couldn't drop the saved stash entry.ruS→ Discarded local source changes (updates.non_interactive_local_changes=discard).) rrrr-r.rdrr0r)r4r'rrrs r _discard_stashed_changesrHs&-Wc9EEN  @    &i000u >7FN33  GI    D  !  %    ;     > (git@github.com:NousResearch/hermes-agent,git@github.com:NousResearch/hermes-agent.git,https://github.com/NousResearch/hermes-agent0https://github.com/NousResearch/hermes-agent.gitrz.skip_upstream_promptc tj|gdz|dddd}|jdkr|jSn#t $rYnwxYwdS)z5Get the URL of the origin remote, or None if not set.)remoteget-urloriginTr$r%rrN)r-r.rdr/r0rr3s r _get_origin_urlrs   555 5       ! !=&&(( ( "      4sAA AA origin_urlc|sdS|d}|dr |dd}tD]?}|d}|dr |dd}||krdS@dS)zDCheck if the origin remote points to a fork (not the official repo).Fr:r%NT)rstripendswithOFFICIAL_REPO_URLS)r normalizedofficialofficial_normalizeds r _is_forkr s u""3''J6""%_ &&ooc22  ' ' / / ;"5crc":  , , ,55 - 4rcz tj|gdz|dddd}|jdkS#t$rYdSwxYw)z-Check if an 'upstream' remote already exists.rrupstreamTr$r%rrFr-r.rdrr3s r _has_upstream_remotersk  777 7      A%% uu ), ::c tj|dddtgz|dddd}|jdkS#t$rYd SwxYw) zHAdd the official repo as the 'upstream' remote. Returns True on success.raddr Tr$r%rrF)r-r.OFFICIAL_REPO_URLrdrr3s r _add_upstream_remotersn  x 4EF F      A%% uus03 AAbaseheadc tj|dd|d|gz|dddd}|jdkr&t|jSn#t $rYnwxYwd S) zDCount commits on `head` that are not on `base`. Returns -1 on error.rev-list--countz..Tr$r%rr)r-r.rdrr/r0r)r4r'rrr5s r _count_commits_betweenrs   z9.?.?.?.?@ @       ! !v}**,,-- - "      2sAA A&%A&cVddlm}|tz S)z2Check if user previously declined to add upstream.rr)rrSKIP_UPSTREAM_PROMPT_FILErDrs r _should_skip_upstream_promptrs4000000 O   9 9 A A C CCrc~ ddlm}|tz dS#t$rYdSwxYw)z3Create marker file to skip future upstream prompts.rrN)rrrtouchrrs r _mark_skip_upstream_promptr!sa 444444   6 6==?????      s *. <<cz tj|gdz|dddd}|jdkS#t$rYdSwxYw)znAttempt to push updated main to origin (sync fork). Returns True if push succeeded, False otherwise. )rrr z--force-with-leaseTr$r%rrFrr3s r _sync_fork_with_upstreamr#sk  FFF F      A%% uurct||}|s trdSttdtdt td}n'#t tf$rtd}YnwxYw|dvrBtdt||rtdd }n0td dStd tdSttd  tj |gd z|d d n%#tj $rtdYdSwxYwt||dd}t||dd}|dks|dkrtddS|dkrPttd|dtdtdtddS|dkrtddSttd|dtd tj |gdz|d n%#tj $rtdYdSwxYwtd td!t||rtd"dStd#td$dS)%a[Check if fork is behind upstream and sync if safe. This implements the fork upstream sync logic: - If upstream remote doesn't exist, ask user if they want to add it - Compare origin/main with upstream/main - If origin/main is strictly behind upstream/main, pull from upstream - Try to sync fork back to origin if possible Nu=ℹ Your fork is not tracking the official Hermes repository.zA This means you may miss updates from NousResearch/hermes-agent.z/Add official repo as 'upstream' remote? [Y/n]: n>rZr8ru→ Adding upstream remote...uF ✓ Added upstream: https://github.com/NousResearch/hermes-agent.gitTu< ✗ Failed to add upstream remote. Skipping upstream sync.zg Skipped. Run 'git remote add upstream https://github.com/NousResearch/hermes-agent.git' to add later.u→ Fetching upstream...)fetchr r --quietr'r(r,u7 ✗ Failed to fetch upstream. Skipping upstream sync.z upstream/mainz origin/mainru9 ✗ Could not compare branches. Skipping upstream sync.uℹ Your fork has z commit(s) not on upstream.z2 Skipping upstream sync to preserve your changes.z- If you want to merge upstream changes, run:z git pull upstream mainu& ✓ Fork is up to date with upstreamu → Fork is z commit(s) behind upstreamu→ Pulling from upstream...)pull --ff-onlyr r rJuO ✗ Failed to pull from upstream. You may need to resolve conflicts manually.u ✓ Updated from upstreamu→ Syncing fork...u ✓ Fork synced with upstreamuL ℹ Got updates from upstream but couldn't push to fork (no write access?)zF Your local repo is updated, but your fork on GitHub may be behind.)rrrrr0rEOFErrorKeyboardInterruptrr!r-r.r1rr#)r4r' has_upstreamr origin_aheadupstream_aheads r _sync_with_upstream_if_neededr0s(55L ! ' ) )  F  MNNN QRRR  GHHNNPPVVXX H+,    GGGHHH  ' ' ' 1 2 2 2#GS11 \ $ TUUU y    ' ( ( ( F  GGG $%%%  >>> >       ( GHHH *'3WWL+m_Na>A-- IJJJa  L<LLLMMM BCCC =>>> *+++ 6777 GGG C C C CDDD ()))  ??? ?      ( ]       '(((    --X /00000 Z    VWWWWWs63B!B76B7=EE=<E=I<<JJcg}ddlm}|}|||dz }|r@|D]+}|r||,|D]@} |dz }|r|1#t$rY=wxYwdS)uDelete the update-check cache for ALL profiles so no banner reports a stale "commits behind" count after a successful update. The git repo is shared across profiles — when one profile runs ``hermes update``, every profile is now current. rget_default_hermes_rootprofilesz .update_checkN)rr3rrrrDryr)homesr3 default_home profiles_rootr-r cache_files r _invalidate_update_cacher9\s E888888**,,L LL :-M$"**,, $ $E||~~ $ U### /J  "" $!!###    D  s-B44 CCrKlabelcvt|jrtd|dS |dt jdtj dddS#t$r'}td||Yd}~dSd}~wwxYw) z1Drop an update-recovery breadcrumb. Never raises.z/Skipping %s marker under pytest (live checkout)Nzstarted=z pid=r[r$rtzCould not write %s marker: %s) r_pytest_owns_live_checkoutrrrr|r~timer getpidr2)rKr:rs r _write_marker_filer?ws tt&&t{33 FNNNB  :uz|| : :29;; : : :W       BBB 4eSAAAAAAAAABsAB B8B33B8cdttddS)z;Drop the interrupted core-install breadcrumb. Never raises.zupdate-incompleter:N)r?r_update_marker_pathrrr _write_update_incomplete_markerrCs,rtt//119LMMMMMMrcdttddS)z;Drop the interrupted lazy-refresh breadcrumb. Never raises.zlazy-refresh-incompleterAN)r?r_lazy_refresh_marker_pathrrr %_write_lazy_refresh_incomplete_markerrFs,rtt5577?XYYYYYYrmatches scripts_dirc|dz }dg}|D] \}}|d|d|!|d|d|d|d|d|d |d |d|rwd d |D}|d |d|d|d|d|d|dd|S)zCBuild a human-readable explanation + remediation hint for the user.z hermes.exeu"✗ Another hermes.exe is running:z PID rrZz' Updating now would fail to overwrite z becausez1 Windows blocks REPLACE on a running executable.z9 Close Hermes Desktop, exit any open `hermes` REPLs, andz; stop the gateway (`hermes gateway stop`) before retrying.rc3&K|] \}}d|V dS)z/PID Nr)rpidrs r rz7_format_concurrent_instances_message..s,@@fc1MCMM@@@@@@rz8 If you've already closed everything and these PIDs arez8 stale, terminate them directly, then retry the update:z taskkill z /Fz9 Override with `hermes update --force` if you've alreadyz7 confirmed those processes will not write to the venv.r[)rr+)rGrHshimrrKrpid_argss r $_format_concurrent_instances_messagerNs  %D 1 2E// T ---t--.... LL LLI4IIIJJJ LLDEEE LL LLLMMM LLNOOO LL88@@@@@@@ OPPP OPPP 4x444555 R LLLMMM LLJKKK 99U  rrCinstall_cmd_prefixrDc t|gdz|dS#tj$r&}td|Yd}~dSd}~wwxYw)zUpgrade pip before lazy-backend refreshes. Older pip (e.g. 24.0 on Python 3.11) can fail setuptools-backed source builds during lazy installs and leave a partially-written venv (#57828). Never raises. )installrHr?rCz*pip upgrade before lazy refresh failed: %sN)r_run_package_only_installr-r1rr)rOrDrs r _upgrade_pip_before_lazy_refreshrSsH && !@!@!@ @ '       (HHH A3GGGGGGGGGHs(,A!AA!cL ddlm}n3#t$r&}td|Yd}~dSd}~wwxYw |}n3#t$r&}td|Yd}~dSd}~wwxYw|sdSt t dt|dd } |d }n-#t$r }t d |i}d}Yd}~nd}~wwxYwd | D}d | D}d| D} d| D} |r5t dt|dd ||r t dt|d| rld d| D} | dd ddd} t dt| d| d| | s|sdS| D]V\} }| ddd} t| dkr | dddz} t d| d| W|t d d St ||!}|d"krt d#dS|d$kr t d%t d&dS|d'krt d(d S))uRefresh lazy-installed backends after a code update. When pyproject.toml's ``[all]`` extra was slimmed down (May 2026), most optional backends moved to ``tools/lazy_deps.py`` and only install on first use. ``hermes update`` runs ``uv pip install -e .[all]`` which leaves those packages untouched — so if we bump a pin in :data:`LAZY_DEPS` (CVE response, transitive bug fix), users who already activated the backend keep the stale version forever. This function asks lazy_deps which features the user has previously activated and reinstalls them under the current pins. Features the user never enabled stay quiet — no churn for cold backends. Returns True when the venv is safe to use (refresh succeeded, or no active lazy backends, or post-failure import repair succeeded). Returns False when a failed lazy install left broken core imports that automatic repair could not fix (#57828). Never raises. A failure here must not block the rest of the update. r) lazy_depsz(Lazy refresh skipped (import failed): %sNTz1Lazy refresh skipped (active_features failed): %su→ Refreshing z active lazy backend(s)...F)rru( ⚠ Lazy refresh failed unexpectedly: c$g|] \}}|dk |S) refreshedrrr1ss r rz1_refresh_active_lazy_features..s&CCCtq!!{2B2B2B2B2Brc$g|] \}}|dk |S)currentrrXs r rz1_refresh_active_lazy_features..s!???TQYqrcFg|]\}}|d||fS)zfailed:rrXs r rz1_refresh_active_lazy_features..s1 L L LAALL4K4K Lq!f L L LrcFg|]\}}|d||fS)zskipped:r]rXs r rz1_refresh_active_lazy_features..s1NNN$!QQ\\*5M5MN1vNNNrrWz refreshed: rU ✓ z already currentc3 K|] \}}|V dSrr)rr1rs r rz0_refresh_active_lazy_features..s&001!000000rr\rKru · z skipped (z): ... ⚠ z failed to refresh: u? ⚠ Lazy refresh failed; rerun `hermes update` once resolved.rCrepairedzE Lazy backend(s) keep their previous version until refresh succeeds.healthyzK Lazy backend(s) keep their previous version; probed packages look intact.z< Rerun `hermes update` once the upstream issue is resolved. indeterminateuP ⚠ Leaving `.lazy-refresh-incomplete` until import probes can confirm health.)toolsrUrrractive_featuresrrfrefresh_active_featuresitemsr+rer_repair_venv_via_import_probes)rOrDrUractiveunexpected_failureresultsrWr[failedskippednamesreasonfeaturers r _refresh_active_lazy_featuresrts2#######  ?EEEttttt**,,  H#NNNttttt t GGG CCKK C C CDDD"3353AA """ >>>???! "DCw}}CCCI??W]]__???G L L L L LFNN'--//NNNGK Is9~~II499Y3G3GIIJJJ7 5s7||555666B 0000000A$$T1--b1 @c'll@@f@@@@AAA ,t!>>dA&&r* v;;  DSD\E)F nonebuiltinro)_install_dependenciesz3Memory provider refresh skipped (import failed): %su4→ Refreshing active memory provider dependencies (z)...Tforcercz! dependencies failed to refresh: ) rrrrr isinstancedictrrFr0hermes_cli.memory_setupr{r)rcfgrrx memory_cfgr{s r rrs111111kmm  OQTUUUH#tEWWX&& j$ ' ' E~~i((E11:>>*55;<<BBDDH x#AAAAAAAAAA  JCPPP GGG O O O OPPPIhd333333 III GxGG#GGHHHHHHHHHIsB A>AC&& D0DD; E E4E//E4c:tjjdkS)Nandroid)rrplatformrrr _is_android_pythonrOs 448  ))rc bddl}ddl}ddlm}m}|5}t |}|dz }|j|||||} t |ddt| gz|ddddS#1swxYwYdS)aInstall psutil on Android by patching upstream platform detection. psutil's setup currently gates Linux sources behind ``sys.platform.startswith('linux')``. On Termux Python reports ``sys.platform == 'android'``, so setup aborts with "platform android is not supported" despite compiling fine when using the Linux source path. We patch only the extracted build tree used for this install attempt; nothing is persisted in the repository. Stopgap: remove this once https://github.com/giampaolo/psutil/pull/2762 merges and ships in a release. The standalone installer script uses the same shared helper and should be removed together. rN) PSUTIL_URLprepare_patched_psutil_sdistz psutil.tar.gzrQz--no-build-isolationrC) rAr~hermes_cli.psutil_androidrrrBrrequestr r_run_install_with_heartbeatrF) rOrDrAurllibrrrtmp_patharchivesrc_roots r _install_psutil_android_compatrRs(OOORRRRRRRR  $ $ & &  #99_,"":w777//BB (( )-CS]]!S S )                     sA2B$$B(+B(rcddlm}|}|r|StsdSt jd}|r|S t dtj|gdztj d}|j dkrdSn#t$rYnwxYw|pt jdS) aBest-effort uv bootstrap on Termux for faster update installs. The normal path (``ensure_uv()`` in managed_uv) installs the managed standalone uv into ``$HERMES_HOME/bin/uv``, but on Termux the official installer may not work (glibc vs bionic). Prefer a uv already on PATH (e.g. ``pkg install uv``); only if there is none do we fall back to a wheel-only ``pip install uv`` so we never source-build the Rust crate. r) resolve_uvNuvuL → Termux detected: trying to install uv for faster dependency updates...)rQrz --only-binaryz:all:FrJ) rrrrrwhichrr-r.rrdr)rrexisting system_uvr5s r rrus100000z||H 44   t T""I   \]]] AAA A!      ! !4 "       :<< -6<---sAB B'&B'c~tjdz }tjdz |g} tj|ddg}t |tr|dg}|D]s}ttj t|D]0}|dz }| r| |1tn"#ttjtf$rYnwxYwt!|S)uManifests whose changes must defeat the update-skip. The lockfile alone is NOT a sufficient key: on a local checkout a dev can edit package.json (root or a workspace) without running npm — the lockfile is then unchanged but `hermes update` is exactly the step expected to sync node_modules (via the `npm install` fallback in _run_npm_install_deterministic). The workspace list is pulled from the root package.json's `workspaces` globs (npm's own source of truth) rather than hardcoded, so adding a workspace can never silently escape the skip key. The root install (step 1, --workspaces=false) still hoists shared deps for EVERY workspace — desktop included — so all of them belong in the key, not just the ones step 2 installs. Falls back to hashing just root manifests if package.json is unreadable (never skips more than main would have installed). package.jsonpackage-lock.jsonr$rt workspacespackages)rrrwloadsrrr~rr`globrFis_filerr2JSONDecodeError TypeErrorr_)root_pkgpathsrpatternmatchmanifests r _npm_manifest_pathsrsA$tt >1H TT !4 4h ?E  Z 2 2G 2 D DEEII "   j$ ' ' 8# B77J! + +G 1 6 6s7|| D DEE + + >1##%%+LL*** + + T)9 5     <<sCDD-,D-c tjdz sdStj}t D]}|t|tj  || #t$r|dYwxYw| S)zCombined sha256 over the lockfile + all workspace package.json files. Returns None when the lockfile is missing (never skip then). rNs ) rrrDhashlibsha256rupdaterF relative_toencode read_bytesr2 hexdigest)hps r _npm_manifests_digestrs DD  3 3 ; ; = =tA " "## Q]]244#45566==??@@@ # HHQ\\^^ $ $ $ $ # # # HH\ " " " " " # ;;==s''CC10C1 hermes_rootcxt}|dStjdz sdStjdz }|dz rt t |sdS tjttj  dd}|d|z }| sdS| d|kS#t$rYdSwxYw) NTrrLr .npm_lock_hash_r$rt)rrrrrrrrrrFrrrDrr0r2)rr[r cache_keyr8s r _npm_lockfile_changedrsF#%%Gt DD  . 6 6 8 8t dd%'G. ))++4N g & &5tN3rtt'8#9#9#@#@#B#BCCMMOOPSQSPST  #@Y#@#@@   "" 4##W#55;;==HH ttsA:D+?+D++ D98D9c|t}|dS tjtt jdd}|d|z }||ddS#t$rt dYdSwxYw)Nrrr$rtz'Could not write npm lockfile hash cache) rrrrFrrrrr|r2rr)rdigestrr8s r _record_npm_lockfile_hashrs " $ $F ~@N3rtt'8#9#9#@#@#B#BCCMMOOPSQSPST  #@Y#@#@@ fw77777 @@@ >??????@sA=B$B;:B;ctjdz sgSt}|sddlm}t jd}|r|rt|rotdtdtdtdd g}td d Dr| d |SgSdd lm }|}t |stdgStddt dt"t fd}gd}ddlm}|t} g|d} t|tjt+| d| } | jdkrjtd| jr| jpdnd} | r*td| d|d Sg|dddd} t|tjt+| d| }|jdkr t5|tdgStd|jr|jpdnd} | r*td| d|d S) aRefresh Node deps in the repo root and update workspaces. Returns the list of labels whose npm install failed (empty on success), so the caller can treat a Node refresh failure as a partial update rather than silently reporting ``Update complete!`` (#30271). rr)is_wslnpmu$→ Updating Node.js dependencies...uC ⚠ Skipped: only a Windows npm is reachable from this WSL shell.z@ Install Node.js inside the WSL distro (nvm, or your distro'sz2 package manager), then re-run `hermes update`.z repo rootc3lK|]/}tj|z dz V0dS)rN)rrrD)r workspaces r rz,_update_node_dependencies.. sS"Y.?GGIIr)ui-tuirLzui-tui, web workspacesr2z,npm lockfile unchanged, skipping npm installlabelsrcttdtdtdt|S)Nu> ⚠ Node.js dependency refresh did not complete cleanly; thezB installation may be in a mixed state (updated code, stale Nodez. deps). Fix npm and re-run `hermes update`.)rr)rs r _partial_update_failurez:_update_node_dependencies.._partial_update_failure%sD  NOOO RSSS >???F||r)z --no-fundz --no-auditz--prefer-offlinez--progress=falsewith_hermes_node_pathz--workspaces=falseF) extra_argsr(rDu% ⚠ npm install failed in repo rootrZ rz --workspacerrLu: ✓ repo root + ui-tui, web workspaces (desktop skipped)u" ⚠ npm workspace install failed)rrrD_resolve_node_runtime_npmrrrr_is_windows_npm_pathrrrr3rrinforFrr_nixos_build_env_run_npm_install_deterministicr_rdrr0rr)rrpath_npmror3shared_hermes_rootrrr nixos_env root_args root_resultrws_args ws_results r rrs DD  . 6 6 8 8 $$ ( ( * *C  ,+++++<&& 688  RTT%>%>x%H%H  8 9 9 9 W X X X T U U U F G G G!]F!2 8 6777M 888888 1022 44 % %&8 9 9 BCCC  0111cUTTJ666666%%bdd&;&;&=&=>>I4*323I$$55  ##  6K"" 56667B7IQ+$*11333r  4 2**,,R022 3 3 3&&{333K JMJ8J]JEJG33  >>  4Iq  !"4555 JKKK  .///1:1A Ii$" + + - - -rF 0 .V&&((,../// " "#; < <aImplement ``hermes update --check``: fetch and report without installing. ``branch`` selects which branch the check compares against. Default is "main"; callers can pass another branch to ask "are there new commits on origin/?" without performing the update. ``branch_explicit`` is True iff the caller passed --branch on the CLI. Installs that can't honor non-default branches (e.g. Docker) surface a one-line notice instead of silently dropping the flag. r)detect_install_method%recommended_update_command_for_methoddocker)format_docker_update_messager\>nixnixosr%u6✗ Not a git repository — cannot check for updates.gitwin32rrVwindows.appendAtomically=falser"z--is-shallow-repositoryTr$r%rtruez--depth1r r Nu→ Fetching from upstream...r&r z upstream/u→ Fetching from origin...rForigin/Could not resolve hostunable to access9✗ Network error — cannot reach the remote repository.Authentication failedcould not read UsernameD✗ Authentication failed — check your git credentials or SSH key.u✗ Failed to fetch.rrr' ✗ Branch 'z' not found on r:.r#u✓ Already up to date.u⚕ Update available (behind z).)recommended_update_commandz Run 'z ' to install.rzHEAD..rr&rcommitsu⚕ Update available: rz behind )rrrrrrrrrrDrr-r.r/r0rdrrrerr)rrrrmethodrgit_dirr4 is_shallow depth_argshas_upstream_remote fetch_resultupstream_existscompare_branchr verify_resulthead_sha target_shar rev_resultbehind commits_words r _cmd_update_checkr s_^^^^^^^ " "244#4 5 5F  CBBBBB **,,---   !!! 33F;;<<<  dd&(G >>   FGGG  gG |wAAA  {$=> >!       &07)S!!RJ  N;;;;DD%#GI           1 2 2 2%>7)#j0J3GGDD%#GI L  # (?1(D(D"O111NN / 0 0 0%>7)#j0Hf3EEDD%#GI L $O/v//NN +,,,!~ wi * ,&/A A!     +6++!##$**,, #v - -1Cv1M1M M N N N N $ . .2Kv2U2U X Y Y Y Y ( ) ) ) 536,,..q133444  N; I~FF DD  GI M 1$$ VVVVN4H4Ha4P4PQR4SVVVWWW  > {F+ +!$TG\e      ^ {N3 3!$TG\e       I  Ix:'='= + , , , , D.DDD E E E D D D D D D G6688GGG H H H:888)DD DD  GI J"((** + +F {{ '(((((#)Q;;xxI  WvWW WWnWWWXXX@@@@@@ C2244CCCDDDDDrc tjjdkrdS tjdkrdSn#t $rYdSwxYwt d}|s|sdStj dpd} tj ddd |d tj d d d dddgddddd}n#ttjf$rYdSwxYw|jdkrdSd}d}d}dD]}t ||z }|s* |dd}n#t$$rYOwxYwt'd|D} | r |dd5} | d|zdz|zdzdddn #1swxYwYn,#t$$r} t/d|d| Yd} ~ d} ~ wwxYwt/d |d}|rt/d!dSdS)"aHEnsure /usr/local/bin is on PATH for RHEL-family root non-login shells. Mirrors the post-symlink probe added to ``scripts/install.sh`` so that existing FHS-layout root installs on RHEL/CentOS/Rocky/Alma 8+ get repaired on ``hermes update`` without requiring a reinstall. The installer's assumption that ``/usr/local/bin`` is on PATH for every standard shell breaks on those distros in non-login interactive shells (su, sudo -s, tmux panes, some web terminals): /etc/bashrc doesn't add /usr/local/bin and /root/.bash_profile doesn't either. Symptom: ``hermes`` prints ``command not found`` even though the symlink lives at /usr/local/bin/hermes. Silent no-op on: non-Linux, non-root, non-FHS installs, and any system where ``bash -i -c 'command -v hermes'`` already resolves. Idempotent. linuxNrz/usr/local/bin/hermesHOMEz/rootrDz-izHOME=zTERM=TERMdumbbashrVzcommand -v hermesTr$r% r(r)r*r+rXz"export PATH="/usr/local/bin:$PATH"uK# Hermes Agent — ensure /usr/local/bin is on PATH (RHEL non-login shells)F)z.bashrcz .bash_profile)r+r*c3vK|]4}d|vo+d|vo'|d V5dS)/usr/local/binPATH#N)lstriprrrs r rz)_ensure_fhs_path_guard..u sj    $ 2$ 2KKMM,,S111      rartr[u ⚠ Could not update rKu& ✓ Added /usr/local/bin to PATH in z? (reload your shell or run 'source ~/.bashrc' to pick it up))rrrr geteuidAttributeErrorr is_symlinkrDrrr-r.FileNotFoundErrorTimeoutExpiredrdrrr2rropenrr) fhs_linkrrg path_line path_comment wrote_anyrrralready_guardedr1r5s r _ensure_fhs_path_guardr%0 sZ  ttxG## :<<1   F  +,,H    ):): :>>& ! ! ,WD8 vv6688#       z8 9 14IXI1 4jj9${{}}   }}I}HHHH    H   !++--          #00 GA|+d2Y>EFFF G G G G G G G G G G G G G G G    6C66166 7 7 7 HHHH  >   ! ! # #D 333u &&&v ww h''F 7s9 A</A77A<c t|}|dkr0t|ddrtdtdSd} ddlm}m}m}ddlm}|d tt }|r|d z }| r||d d t }| ds| dd} td| ||} | |z d z } | rR|| d d } | drtdtdntdntdt|rtd|nD#t$r7} tjt d| Yd} ~ nd} ~ wwxYw|dkr|rt|S ddlm}n:#t$r-} td| dt|cYd} ~ Sd} ~ wwxYw ddlm}|pi di dd }n#t$rd }YnwxYwtd!t)j} |t-|"}nH#t$r;} td#| td$t|cYd} ~ Sd} ~ wwxYwt)j|z }|td%t|S |j}n#t2$rd}YnwxYw|d&}d'D]}|d(krn|d(z}|d)d*|} dd+lm}m}|} |d,||}n#t:$rt=|}YnwxYwn#t$rt=|}YnwxYwtd-|d.|d/|d)d0td1|td2t|S)3u3Run the pre-update safety backup and return the quick-snapshot id. Single consolidated mechanism gated on ``updates.pre_update_backup``: - ``off`` — nothing runs. Explicit user opt-out is honored fully. - ``quick`` (default) — a state snapshot of critical small files (pairing JSONs, cron jobs, config, auth; see ``_QUICK_STATE_FILES``) under ``state-snapshots/``. Files over 1 GiB are skipped with a warning so a bloated state.db can never stall the update (issues #15733, #34600 are the reason this safety net exists). - ``full`` — the quick snapshot PLUS a full zip of HERMES_HOME under ``backups/`` (restorable via ``hermes import``; the #48200 wrong-path wipe is the reason this level exists). ``--backup`` forces ``full`` for one run; ``--no-backup`` forces ``off``. Never raises — a backup failure should not block the update itself. Returns the quick-snapshot id (used by the post-update cron-jobs restore safety net), or ``None`` when mode is ``off`` or the snapshot failed. rr/Fu,◆ Pre-update backup: skipped (--no-backup)Nr)rhcreate_quick_snapshotrirz pre-update)r:keep max_file_sizerT)rkrl max_bytesrmrorpu6 ⚠ state.db integrity check FAILED after snapshot: rju3 ✓ Snapshot copy is valid — continuing update.z> If state.db is lost after update it will be auto-restored.ua ✗ Snapshot copy ALSO failed integrity — the source was already corrupted before the backup.uD ⚠ Snapshot does not contain state.db (was skipped or too large).u◆ Pre-update snapshot: zPre-update snapshot failed: %sr0)create_pre_update_backupu5⚠ Pre-update backup: could not load backup module (z); continuing update.rr1 backup_keepu!◆ Creating pre-update backup...)r?u ⚠ Backup failed: z Continuing with update.uI ⚠ Backup skipped (no files found or write failed); continuing update.z B)KBMBGBirr)rdisplay_hermes_homer:z Saved:  (rUzs)z Restore: hermes import zH Disable: set updates.pre_update_backup: quick (or off) in config.yaml)r<rrrrhr>rirr_PRE_UPDATE_SNAPSHOT_KEEP"_PRE_UPDATE_SNAPSHOT_MAX_FILE_SIZErDrrr7r8r9rrBrr~rrrrr2rrHrrrF)rr snapshot_idrhr>ri _get_home _src_path _integrity_msgrrrrrBr_keept0out_pathelapsed size_bytessize_strunitrrHr display_paths r _run_pre_update_backuprY s., +4 0 0D u}} 4e , ,  @ A A A GGGtKBQ           CBBBBB++*<    % ! j0I!!# 44!%#@  "~~g..%>>)_EEDWQUWW"6!5iikk!B!BJ",{":Z"GK"))++#:#:'dt$$$$<<00 ! U" `"!V bGGG  = ;k;; < < < QQQ(##))*JCPPPPPPPPQ v~~   GGG>>>>>>>  ^C ^ ^ ^     111111$")))R88<<]ANN  -...   B++U<<<  +c++,,, )***   o"$G YZZZ ]]__,     H"..    Ed  ---t-- %IIIIIIII   )1133RRh6J6J46P6PRRLL ) ) )x==LLL ) %%%8}} % D D D D DW D D D DEEE 1x 1 1222 TUUU GGG s EF G#-GG6G== H4"H/)H4/H48:I33 JJ(K L 0L<LLM M+*M+O$!"OO$O O$O  O$$P?P profile_pathrKc. ddlm}ddlm}ddlm}|||t jtj|j  d}|t|dz |dd d S#ttf$rYd SwxYw) z9Write a planned-stop marker into a specific profile home.r)r)_get_process_start_time)atomic_json_write) target_pidtarget_start_time stopper_pid written_atz.gateway-planned-stop.jsonN),:)indent separatorsTF)rrgateway.statusr\utilsr]r r>rr isoformatrr2PermissionError)rZrKrr\r]records r !_write_update_planned_stop_markerrk s%%%%%%::::::++++++!8!8!=!=9;;",x|44>>@@       != = !     t _ %uusA;A??BBpidsc`|stSddlm}t|}tjt |dz}|rtj|krt |D]H} ||s||$#t$r||YEwxYw|rtj d|rtj|kt}|D]3} ||r| |$#t$rY0wxYw|S)z=Wait for the given gateway PIDs to exit, returning survivors.r) _pid_existsg?) setrfrnr~rrrdiscardrrr)rlrXrn remainingrrK survivorss r %_wait_for_windows_update_gateway_exitrt s| uu ******D I  3w#4#44H ))H44 ?? ' 'C '"{3''+%%c*** ' ' '!!#&&&&& '   K    ))H44%%I {3 # c"""    D  s$5 BB87B8= D D+*D+c ltjdz }t|t}|sYtjdz tf}t d|Drdd|dfSdSd } tjt|d |gd d d d dtj}n3#t$r&}t d|Yd}~dSd}~wwxYwd|j pdD}|jdkr=|s;|jpd}d|r|dndfS|rdd|ddfSdS)uNProbe the project venv for the core imports the backend needs to boot. Runs a tiny import check inside the venv interpreter (NOT this process — ``hermes update`` may be driven by a different Python). Catches the half-updated-venv state: git checkout current but a dependency sync that failed or was killed partway (e.g. Windows access-denied on a loaded .pyd), leaving imports like ``fastapi``'s new transitive deps missing. Without this probe, ``hermes update`` on a current checkout prints "Already up to date!" and returns without ever re-syncing dependencies — the user's install stays broken no matter how many times they update (ryanc's incident, July 2026). Returns ``(healthy, detail)``. Never raises; unknown states report healthy so a probe failure can't force needless reinstalls. rSrTz.hermes-bootstrap-completec3>K|]}|VdSrr)rms r rz-_venv_core_imports_healthy.. s*33aqxxzz333333rFzvenv python missing (rv)TrZzimport importlib mods = ['fastapi', 'uvicorn', 'pydantic', 'openai', 'yaml'] missing = [] for m in mods: try: importlib.import_module(m) except Exception as e: missing.append(f'{m}: {e}') print('\n'.join(missing)) rVTr$r%r)r(r)r*r+rXr'z#venv health probe failed to run: %sNc^g|]*}||+Srrrs r rz._venv_core_imports_healthy.. s-[[[djjll[tzz||[[[rrZrzvenv python failed to runz; )rrrrbrDrBrr-r.rFrrrr/rrdrr0r+)venv_dirrimanaged_markersr,r5rmissingrks r _venv_core_imports_healthyr} s tt 6)H"8RTT5E5E5G5GHHHK      DD  < < DD $ $ & &  33?333 3 3 A@+@@@@ @x  '     tU + !      :C@@@xxxxx\[)<"(H(H(J(J[[[G Ag-%2,,..99;;6JfQii/JJJ-dii ,,,, 8s6ProcessparentsrrK process_iterrrrrr+rrr)rrrz venv_prefix root_prefixskipancrG proc_iterprocrrKrexe_norm cmdline_raw cmdline_lowcwd_low is_holderrs r _detect_venv_python_processesr s& 44       tt 6)HD(**,,--3355<>EEbfMMPRPVV MMM"$$+,,2244;;BFCCbfL M.//DHHRY[[ >>##++-- # #C HHS\\ " " " " #      +-G''(P(P(PQQ  !A!A 9DD    H hhuoohhuoo ckSXX%5%5  (499,,..//5577HH$ ( ( (3xx~~''HHH (hhtxx 228b99 !'')) dhhuoo+,,2244;;BFCCbfL'' 44  [K77I !.+==k))W-?-? -L-L)   xx1499>C#d))[#->?@@@@ Ns~) 88AB00ADD A.E;;A&G$#G$+AI<< J J J'' J65J6?K KKAM2N Nc Vdg}|ddD]M\}}}d}|}d|vsd|vrd}nd|vrd }|d |d |d ||Nt|dkr)|d t|dz d |d|d|d|d|d|dd|S)zDExplain which venv processes block the update and how to clear them.u@✗ Other Hermes processes are running from this install's venv:NrZserve dashboardu4 ← Hermes Desktop backend (close the desktop app)gatewayu ← gatewayz PID rz ... and  morezD On Windows these keep native extension files (.pyd) locked, so thezB dependency update would fail partway and leave a broken install.zE Close the Hermes desktop app / other Hermes terminals, then re-run:z hermes updatezJ (or use `hermes update --force-venv` to proceed anyway at your own risk)r[)rrrfr+)rGrrKrrhintlows r #_format_venv_python_holders_messagere ss K E&bqbk>>T7mmoo c>>[C//IDD #  "D rrrrrKrrprrr) rlrrzrrrfoundrKrppidrs r _venv_launcher_ancestorsr s0 44    T   tt 6)HD(**,,--3355<>##++-- # #C HHS\\ " " " " #      E ^^CHH--4466FF    H  > 6: 4<<45==DCII,=,=  ::<<%2,,..CC    H  >>+ & &  LL    LsW+ ::AB22AD  D "AE33 F?F 4F?? G  G (H** H76H7cvddlm} ddl}n#t$rd}YnwxYwg}|D]\}}}|}|[ d|t |p|}n#t$rYnwxYw||sdS|t ||S)uPIDs from *matches* when every remaining venv holder is a pausable gateway. ``_pause_windows_gateways_for_update()`` stops every gateway its discovery finds, but the venv-holder guard downstream sees the process table as it is *now*: a gateway respawned by its supervisor (Scheduled Task, login watchdog) inside the pause→guard window, or one started through a spawn path the discovery does not map, still holds venv ``.pyd`` files and would dead-end the update — an abort pointed at exactly the kind of process the pause machinery exists to stop. Holders are classified with the same matcher the Desktop preflight uses to exempt them (``_is_pausable_gateway``), so the preflight's exemption and this guard's tolerance cannot drift apart — matcher drift between two views of the same process table is what produced the launcher/worker dead-end fixed above. The scan captures only a 120-char cmdline prefix, so the live argv is re-read where psutil allows; an unreadable argv falls back to the captured prefix. Returns ``None`` when any holder is not a pausable gateway — an operator REPL, a stray script, or the Desktop backend has no pause machinery downstream, and the guard must keep refusing exactly as before. r)_is_pausable_gatewayNr) hermes_cli._scan_venv_blockersrrrr+rrrr)rGrrrlrK_namerargvs r _leftover_pausable_gateway_pidsr s2DCCCCC D&  UG   xxs3xx 8 8 @ @ B BCCNw    ##D)) 44 CHH Ks A A88 BBctsdS ddlm}ddlm}m}m}m}n3#t$r&}t d|Yd}~dSd}~wwxYw tt|d}n3#t$r&}t d|Yd}~dSd}~wwxYw|sX dd lm}|rdiggdd Sn2#t$r%}t d |Yd}~nd}~wwxYwdSi d |Dn2#t$r%}t d |Yd}~nd}~wwxYwi}g} |D]} | } | t'| |t)| j<| t'| t/t1| jt'| t| } t7d t9t;|d} n#t$rd} YnwxYwt| | }fd|D}g}|D]v} d} |t'| }n3#t$r&}t d| |Yd}~nd}~wwxYw|t'| |dwg}t?tA|!|!| D]\} |t'| d|t'| @#tDtFtHf$rYYwxYw|r2t7dd%t?||r t7dtM|d|r[tOd|D}t7dtM|d|tM|krt7dd|||dS)aStop running Windows gateways before mutating the checkout or venv. Windows scheduled/startup gateways run through pythonw.exe, so the generic hermes.exe concurrent-instance guard does not see them. They still import from the checkout and can keep files locked while ``git`` or ``uv`` updates the install. Stop only PIDs that the gateway discovery code identifies. Nr terminate_pid)_capture_gateway_argv_get_restart_drain_timeoutfind_gateway_pidsfind_profile_gateway_processesz6Could not prepare Windows gateway pause for update: %sT all_profilesz9Could not discover Windows gateway PIDs before update: %sgateway_windows) resume_neededr4 unmapped_pidsunmappedcold_start_if_installedzACould not check Windows gateway autostart state before update: %sci|] }|j| SrrK)rrs r z6_pause_windows_gateways_for_update.., s)   #DHd   rz2Could not map Windows gateway PIDs to profiles: %suB→ Stopping Windows gateway process(es) before updating Hermes...?$@rXcg|]}|v| Srr)rrKprofile_processess r rz6_pause_windows_gateways_for_update..S s$QQQSC?P4P4PS4P4P4Prz2Could not capture argv for unmapped gateway %s: %s)rKrr|u! ✓ Paused gateway profile(s): rUu → Force-stopped z gateway process(es)c3DK|]}|ddVdS)rr\Nrrus r rz5_pause_windows_gateways_for_update..w s1??v?!??????r → Stopped z, gateway process(es) without profile mappingz5 Restart manually after update: hermes gateway run)rr4rr)(rrbrfrhermes_cli.gatewayrrrrrrrrrfromkeysr r is_installedrrrFprofilerrkrrKrrrfloatrtr`rpunionProcessLookupErrorrir2r+rfr)rrrrrr running_pidsrr4 mapped_pidsrKr launcher_pids drain_timeoutrsrrr force_killed respawnablers @r "_pause_windows_gateways_for_updater s 44    t 000000              MsSSStttttDMM*;*;*N*N*NOOPP  PRUVVVttttt   2 2 2 2 2 2++-- %) "%' "/3      LLS          tP  'E'E'G'G    PPP I3OOOOOOOOP "HKEE $$S)) < &)#hhT\""#3s88$$$)$ty//3s88DDDDDD11+>>M NOOOE"<"<">">??EE  ::;IRQQQLQQQMH99 Y((S22DD Y Y Y LLMsTW X X X X X X X X YC$778888Lc)nn**=99?? NNOO  M#c(($ / / / /   C ) ) ) )"OW=    D Q O$))F8=N>cHtsdS ddlm}ddlm}n3#t $r&}td|Yd}~dSd}~wwxYw t|drdSn3#t $r&}td|Yd}~dSd}~wwxYw | }n3#t $r&}td |Yd}~dSd}~wwxYw|r#ttd |d dSdS) uStart a fresh detached gateway after update when one is installed but down. Invoked from ``_resume_windows_gateways_after_update`` for the ``cold_start_if_installed`` case: no gateway was running when the update began, but an autostart entry (Scheduled Task / Startup-folder login item) is installed, signalling the user wants a gateway. Unlike the relaunch paths — which watch an old PID and respawn once it exits — this is a direct fresh spawn via the same hidden-console + breakaway path that ``hermes gateway start`` uses (``gateway_windows._spawn_detached``). Best-effort and idempotent: re-checks that nothing is running first so a concurrent start (e.g. the autostart entry firing) can't produce a duplicate gateway. Nrr)rz5Could not load Windows gateway cold-start helpers: %sTrz9Could not re-check gateway liveness before cold-start: %sz5Could not cold-start Windows gateway after update: %su1 ✓ Starting Windows gateway after update (PID rv) rrbr rrrrrrr_spawn_detachedr)rrrrKs r (_cold_start_windows_gateway_after_updater s 44    ......8888888  LcRRR !!t444 5 5  F   PRUVVV--//  LcRRR J  H#HHHIIIIIJJsD 1 A!AA!%B B1 B,,B15C C:C55C:list_units_stdoutc|pdD]}|}|s|d}|ds7|dsM|d} ||o#t j$r}|||Yd}~d}~wwxYwdS)a Process each ``hermes-gateway*.service`` from ``systemctl list-units``. ``subprocess.TimeoutExpired`` raised by ``process_unit`` is isolated to that unit via ``on_unit_timeout`` so one wedged systemctl call cannot abort the rest of the fleet (#68523). rZrz.servicezhermes-gatewayN)r0rrerr removesuffixr-r)r process_uniton_unit_timeoutrrjrWsvc_namers r _for_each_systemd_gateway_unitr s#(b//11<<>>++   Qx}}Z((  /00  $$Z00 + L " " " "( + + + OHc * * * * * * * * +++s BB=' B88B= failed_unitsc|sdSt}g}|D]1}||vr||||2ttd|D]}td|tdtdtdtdtddS) zBPrint an explicit incomplete-update warning for unrestarted units.Nu@⚠ Update incomplete — some gateway units were not restarted:z - z; Skipped units may still be running pre-update code (mixedz3 sys.modules). Restart them manually, then verify:z hermes gateway statusz2 systemctl --user restart # user-scopez4 sudo systemctl restart # system-scope)rprrr)rseenorderedrs r &_warn_incomplete_gateway_fleet_restartr s  55DG 4<<  t GGG LMMM otoo GHHH ?@@@ %&&& >??? @AAAAArc0tsdS ddlm}|sdS|t ddS#t$r&}t d|Yd}~dSd}~wwxYw)uRegenerate installed Windows gateway launcher scripts after update. The Scheduled Task / Startup-folder launchers (``gateway.cmd`` + ``gateway.vbs``) are persistence artifacts written once at install time — ``hermes update`` never touched them, so installs created before the hidden-console rework (aa2ae36c3f) kept launching the gateway through ``pythonw.exe`` forever: every descendant spawn flashed a conhost (#54220/#56747) and, since #70344, the console-less gateway died at startup with ``RuntimeError: sys.stderr is None`` (#71671). The task's /TR points at a stable script path, so rewriting the files in place retargets the task without any schtasks call (no UAC needed). ``_write_task_script`` is idempotent and renders from current code, so this is a no-op for modern installs. Best-effort: a failed refresh must never fail the update. Nrru0 ✓ Refreshed Windows gateway launcher scriptszRestart Windows profile gateways previously paused for update.rNFr4rrc3@K|]}|dVdS)rNrrs r rz8_resume_windows_gateways_after_update.. s,@@!f @@@@@@rr)*launch_detached_gateway_restart_by_cmdline'launch_detached_profile_gateway_restartz1Could not load Windows gateway restart helper: %sz=Could not restart Windows gateway profile %s after update: %srrKr\zDCould not restart unmapped Windows gateway (pid %s) after update: %su- ✓ Restarting Windows gateway profile(s): rUu ✓ Restarting z% unmapped Windows gateway process(es))rrrbrrrrrrrrrrr`rjrFrrrrr+) rr4r cold_startrrr relaunchedrold_pidunmapped_relaunchedr-rs r %_resume_windows_gateways_after_updater s  /22"E/ 44     DD++---yy$$*Hyy$$*Heii 9::;;J C@@x@@@@@  < DD 9 9 ; ; ;           H#NNNJ"8>>#3#344   66s7||S\\RR 0!!#g,,///    LLO           yy  ))E"" 7   99#g,,T SS )#q(#    LLV         W  Udii >S>SUUVVV   GGG Z 3 Z Z Z       sI1C:: D*D%%D*AF G)G  G+H44 I$>II$c  tj|ddgz|dddd}|jdkrdSd |jDfd |jD}|sdStj|d d g|z|ddddd t dt |ddS#t$rYdSwxYw)avRestore tracked ``package-lock.json`` files that npm dirtied locally. npm rewrites lockfiles non-deterministically at install/build time. On a managed install those diffs are never intentional, so we discard them so ``hermes update`` sees a clean tree instead of autostashing every run. Best-effort; only ever touches files named ``package-lock.json``. rrTr$r%rrNch|]O}|d)t|jPS)rr0rrrrs r z*_discard_lockfile_churn..Z sW   zz||$$^44    %   rcg|]e}|dr._ sn   zz||$$%899 TZZ\\"")1CCC JJLLDCCrcheckout--Fr&u"→ Discarded npm lockfile churn ( file(s)))r-r.rdr/rrrfr)r4 repo_rootrdirtyrs @r _discard_lockfile_churnrI sC  ~ v}- -     ?a   F   ..00         ..00      F z40%0 0       H3u::HHHIIIII      s*B?A B?;AB?? C  C c 8|ddgzfdfdfd} tj|gdzdddd }|jd krd S|}|d S|rmtjgd zdt |dddd d|rd Stdt|dtj|gdzddd S#t$rYd SwxYw)ubTake a managed checkout off ``core.autocrlf=true`` without leaving it dirty. Git for Windows ships ``core.autocrlf=true`` in its system config, which renormalizes this repo's LF text files to CRLF in the working tree. That breaks ``git checkout`` on update with "Your local changes would be overwritten", so ``install.ps1`` pins ``core.autocrlf=false`` on the managed clone (#67730). Checkouts created before that landed never got the pin and cannot receive it — the bootstrap installer reuses its build-pinned ``install.ps1`` forever — so ``hermes update``, which ships with the checkout itself, is the only path left that can fix them. The pin and the cleanup are one operation. Under ``autocrlf=true`` git compares normalized content, so a CRLF working tree reads clean; pinning alone would expose every text file as modified and hand the update an autostash of the whole tree. So the pin is written only after the tree is verified clean under it, and a checkout we cannot fully normalize is left exactly as it was. Best-effort: never blocks an update. rVzcore.autocrlf=falsectjdddg|zdddd}|jdkrdSd |jd DS) Nrz-zrTr$r%rrch|]}||Srr)rrs r rz9_normalize_managed_eol.._dirty.. s777aQ7777r)r-r.rdr/re)extraoutrgrs r _dirtyz&_normalize_managed_eol.._dirty srn VT=959 9     >Q  4773:++D117777rcvtjgdzdddd}|jdkrdSt}|jD]c}|s|dd}t|d kr#|dr| |dd|S) N)rVzcore.quotepath=falserz --numstatz--ignore-cr-at-eolTr$r%rr rY) r-r.rdrpr/rr0rerfr)rrrrjrgrs r _real_dirtyz+_normalize_managed_eol.._real_dirty sn @@@ @     >Q  4J))++ $ $D::<< JJtQ''E5zzQ58 %(### rcB}}||dS||z Srr) all_dirty real_dirtyrrs r _eol_onlyz)_normalize_managed_eol.._eol_only s3 &++--:   24:%%r)configz--get core.autocrlfTr$r%rrN)rz--pathspec-from-file=-z--pathspec-file-nulrrF)r'rr(r)r*r+r,u"→ Normalized line-ending churn (r)rr r4r() r-r.r/r0rr+r`rrfr)r4rr effectiveeol_onlyrrrgs ` @@@r _normalize_managed_eolr s s* t23 3E 8 8 8 8 8 88&&&&&& ) N ::: :       ! ! # # ) ) + +v 5 5 F9;;   F  Q NUUUViix 0 011#GI    y{{  Os8}}OOO P P P ::: :            s%AD / D =A D =D DD gateway_modec l_|rd^dnd}tt|dd}|p>|pt!d+t!|rd"|3dndnSd,|vsd-|vrt!d.n;t!d/|r*t!d"|3dtjdtQj)|gd0zt#j%ddd&d'd1}|j2}||kr|d2krd3nd4|d5}t!d6|d7|d8t#4|t#j%}tQj)|d9|gzt#j%ddd&d'(}|j0dkrtQj)|d9d:|d;|gzt#j%ddd&d'(} | j0dkr|7t#5|t#j%|d|<t!d=|d>| j12rAt!d"| j123dtjdn3t#4|t#j%}|duo@| o=|p;tjotj}!tQj)|d?d@|dAgzt#j%ddd&d'd1}tC|j2}"|"dkrutm|r9|dBkr3t#7|t#j%|7t#5|t#j%||!|<||d2hvr1tQj)|d9|gzt#j%ddd&d'd1ddCl8m9}#m:}$g}%|$|%j;D|#|%j;DtydE|%Dd}&t{\}'}(|'st!dFt!d"|(t!dGt}ddHl8m9}#|#})tt#j%dIz t#J& }*|*r<|)r:t!dKtQj)|)dIdIgt#j%dL|)rZitjAdMtt#j%dIz i}+t#B|)dNg|+dOPn0t#BtjCdQdNgdORt#Dt{\},}-|,rt!dSn1t!dT|-t!dUnt!dV|&[t#s;t!t!dWt!dXt!dYt#| dSt!dZ|"d[t!d\d}.t|t#j%}/ tQj)|d]d^d;|gzt#j%ddd&d'(}0|0j0dkrt!d_tQj)|d`dad;|gzt#j%ddd&d'(}1|1j0dkr{t!db|dc|1j12r)t!d"|1j12t!dd|tjdtt#j%\}2}3}4|2st!t!det!d"|3|4r>t|43ddfD]}5t!dg|5|/rt!t!dh|/ddidjtQj)|d`da|/gzt#j%ddd&d'(}6|6j0dkrt!dkt!dlnt!dmt!dnt#j%do|/|6j12rBt!dp|6j123ddqnAt!t!drt!dnt#j%dstjdd}.||.s$t!dt|dqt!dun |r5t#G|t#j%|nt#5|t#j%||!|<n#||.s#t!dt|dqt!duw|r5t#G|t#j%|wt#5|t#j%||!|<wwxYwtmt#Ht#j%}7|7rt!dv|7dw|7dkrdxndyt#I|r9|dBkr3t#7|t#j%t}t!dzddCl8m9}#m:}$|$|#}8tjCdQdNg}9|8st|9}8dO}:|8r itjAdMtt#j%dIz i};t#K|;r=|;Ld{d|;Ld|dd}}:t!d~t#K|;r0tr"t!dt|8dNg|;t#B|8dNg|;|:Pn*tjCdQdNg}9 tQj)|9dgzt#j%ddnL#tPjO$r:tQj)tjCdQdddgt#j%dLYnwxYwt#Krd}}:t!dt#Kr,trt!dt|9t#B|9|:R|8r|8dNgn|9}<|8r|;nd}=t#Dt#Ht#j%}7|7rt!dv|7dw|7dkrdxndyt#It#Ptt#R|<|=t#S|<|=}>|>r!t#Tnt!dt#Utt#j%\}?}@}A|?sQt!t!d|@dt!d|At!dt!dt}Bt#Xt#j%dz t#j%dz dz }Ct#Y|Cdup t#Z|C}D|Cdz &rt#[r|Drt!dd}E t#\|Ct#j%d }En#t$rd}EYnwxYw|Ert!dn:tjCdQdddg}Fddl]m^}G|G}Ht#_|Ft#j%|H}I|Ij0dkr5t#_|Ft#j%|H}I|Ij0dkrt!dd`|Ijpd23dd}J|Jrt!|Jddl]ma}Kt!d|Kdnt!dt!t!d ddlbmc}Lmd}Mtdz }N|N&r|M|Ndd}O|Odr0td|OdnTt!t!d|Oddz| }P|Pr|Lt|Pz dz }Q|Q&r|M|Qdd}R|Rdr ddlf}S|Sg|Q|N|M|Ndd}T|Tdrt!d|Pdqnt!dnX#t$r}Ut!d|UYd}U~Un7d}U~UwwxYwt!dnt!dnt!dt!n2#t$r%} td| Yd} ~ nd} ~ wwxYw ddlimj}V|Vt#j%rt!dn2#t$r%}Wtd|WYd}W~Wnd}W~WwwxYw ddlkml}Xt!t!d|Xd}|drAt!dtA|ddd`|d|drAt!dtA|ddd`|d|dr5t!dtA|ddt!d|dr&t!dtA|dd|drAt!dtA|ddd`|d|ds$|dst!dæn2#t$r%}Wtd|WYd}W~Wnd}W~WwwxYw ddlmmn}Ymo}Z|Y}[|[rxt!t!dƦ|[D]W}\ |Z|\jpd}]|]r|]dǦrd}^n|]rtA|]dg}_tA|]dg}`tA|]dg}ag}b|_r|b;d|_dʝ|`r|b;d|`d̝|ar|b;d|adΝ|brd`|bnd}^nd}^t!d"|\jqd|^&#t$r&}ct!d"|\jqd|cdqYd}c~cQd}c~cwwxYwn#t$rYnwxYw ddlmmr}d|dd}e|erCt!t!dtA|edd`|en#t$rYnwxYw ddlsmt}f|f}g|grt!d|gd؝n#t$rYnwxYwt!t!d٦ddlmu}hmv}imw}jmx}k|hdۦ}l|i}m|j\}n}ot|lp|m}p|p o|n|ok}q|pp|n|ok}r|qr|t!t!d|nd|odޝ |kddߦt!dn;#t$r,}st!d|st!dYd}s~sn d}s~swwxYw|rrt!d_d}t|lr-t!dtA|ld|t|ldd|mr-t!dtA|md|t|mddt!|rt!ddx}un|r5tdd2 }untjrtjst!dd}unG td2 }un#t$rd}uYnwxYw|udvrot!|p|p|udk }v|k|vdߦ}w|wds|wdrt!t!d|s|s|udkr|lrt!dn-t!t!dnt!d ddlbm|}x|x| }y|yr0t!t!d|ydd|yddcn2#t$r%} td| Yd} ~ nd} ~ wwxYwt!|BrHt!dd`|Bdt!dt!dnt!d tn3#t$r&}Wtd|WYd}W~Wnd}W~WwwxYw tn3#t$r&}Wtd|WYd}W~Wnd}W~WwwxYw tn3#t$r&}Wtd|WYd}W~Wnd}W~WwwxYw tn3#t$r&}Wtd|WYd}W~Wnd}W~WwwxYw tn3#t$r&}Wtd|WYd}W~Wnd}W~WwwxYw d}z ddlm}|pidi}t|tr$t|d d}zn3#t$r&}{td |{Yd}{~{nd}{~{wwxYw|zrXtj'd vrItjd r4dd lm}|t!t!d||dddn3#t$r&}Wtd|WYd}W~Wnd}W~WwwxYw|r=tdz }} |}dd&n#t$rYnwxYwd}~ ddlm}m}m}m}m}m}m}mm}ddl} d`dt"dtdt$dtfd dadt"dtdt$dt$fdidtdt"dtffd dd lm}t)t%|d!n#t$rd!YnwxYwggt+g}g}|r |n#t$rYnwxYwd"d#d$gfd%d#gffD]\ tQj)gd&zddd&d'di'}nP#t,$rY5tPj$r2} t!d(d)| jr| jnd*d+Yd} ~ pd} ~ wwxYwd,tddff d- }d,td.tPjddffd/ }t3|j||0|r dd1lm}m}m}|}|&rtQj)d2d3|gddd&d'd4'}|j0dkr~ |;|nU#tPjO$rC}Wt|Wd5dpd2}t!d6|Yd}W~Wnd}W~WwwxYwn$#t,tPjt:f$rYnwxYw|}||d7fd8||9D}|D]\}}||j|}|t!d|jd:|d;tCd<|=}|s5 tj||jn#tDtFf$rYnwxYw|d>d?||d@kr|;|j|;|j퉭D]P}||vr tj||j|8#tDtFf$rYMwxYwsrt!D]}t!dA||r(d`|}t!dB||r(d`|}t!dC|tAtA|z tA|z }|r;t!dD|dEt!dF|dkrt!dGrAd}~|r=tdz }} |}dHd&n#t$rYnwxYwtKss tEj#dI|}||d7}fdJ|D}|r|t!t!dtA|dKddlm}|D]/} ||d#tDtFtf$rY,wxYwtEj#dLn3#t$r&}tdM|Yd}~nd}~wwxYwn3#t$r&}WtdN|WYd}W~Wnd}W~WwwxYwt#|  ddOlm}m}m}|r|rt!t!dP|D]&\}}}|rd%nd"t!dg|dQdR't!t!dSt!dTt!dUt!t!dVt!t!dWn3#t$r&}WtdX|WYd}W~Wnd}W~WwwxYwtQ|Bt!t!dYt!dZ|~rtjddSdS#tPjO$r}Wtj'dkrAt!d[|Wt!d\t!t]|n-t!d]|WtjdYd}W~WdSYd}W~WdSd}W~WwwxYw(bujBody of ``cmd_update`` — kept separate so the wrapper can always restore stdio even on ``sys.exit``.rZc"t||Sr)r)rrros r z"_cmd_update_impl.. sOFG$D$DrNrFrrr1non_interactive_local_changesrrqz8Could not read updates.non_interactive_local_changes: %su⚕ Updating Hermes Agent...r}r force_venvrrczG gateway process(es) still hold the venv after the pause; stopping themTr|z&Could not stop leftover gateway %s: %srr%ru+✗ Not a git repository. Please reinstall:zD curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bashr\)rrVrrzwindows.appendAtomicallyr4rFrru⚠ Updating from fork:ru→ Fetching updates...r&rr$r%rrrrrrru(✗ Failed to fetch updates from origin.)r"z --abbrev-refr#r&r#z detached HEADzbranch ''u ⚠ Currently on u — switching to z for update...rz-Br)rrrz&' does not exist locally or on origin.rz HEAD..origin/rr r;)repair_observerc3(K|] }|j |VdSr)rd)rr5s r rz#_cmd_update_impl..s)IIFIIIIIIIru3⚠ Checkout is current, but the venv is unhealthy:u$→ Repairing Python dependencies...)r<rSrTu%→ Recreating virtual environment...rJr@r?r)rDgroupr>)ru✓ Dependencies repaired!u'⚠ Venv still unhealthy after repair: z= Close all Hermes windows/gateways and re-run: hermes updateu✓ Already up to date!uA⚠ Restart required to finish the managed Python runtime repair.zn Any running Hermes gateways, Desktop backends, or other long-lived processes still use the previous runtime.z7 Restart each of them to pick up the repaired runtime.u → Found z new commit(s)u→ Pulling updates...merger*uP ⚠ Fast-forward not possible (history diverged), resetting to match remote...rru✗ Failed to reset to origin/rz< Try manually: git fetch origin && git reset --hard origin/u6✗ Pulled code has a syntax error in a critical file:rru→ Rolling back to rrbu6 ✓ Rollback complete — your install is unchanged.z5 Try ``hermes update`` again later once a fix lands.u- ✗ Rollback failed. Recover manually with:z cd z && git reset --hard z (rvu; Could not capture pre-pull SHA — recover manually with:z- && git reflog && git reset --hard u1 ℹ️ Local changes preserved in stash (ref: z( Restore manually with: git stash applyr6r7r8r9r:rArBz termux-alluH → Termux detected: using uv + curated termux-all optional profile...uY → Termux/Android detected: prebuilding psutil with Linux source path compatibility...rCrErGrHrIuC → Termux detected: using curated termux-all optional profile...ua ⚠ Lazy-refresh recovery incomplete — run `hermes` again to finish import-based venv repair.z& still fails to import after updating:z u< Run `hermes update` again — if it persists, reinstall:z) https://hermes-agent.nousresearch.comrLappsdesktopru/→ Checking if desktop app needs rebuilding...) source_modeu ✓ Desktop app up to daterMz --build-onlyrruE ⚠ Desktop build failed (non-fatal; run `hermes desktop` to retry)r[i)rHz Full build log: z/logs/update.logu✓ Code updated!rgrrjrmz(Post-update state.db integrity check: %srornrpu. ✓ Auto-restored from pre-update snapshot (rtruu/ ✗ Pre-update snapshot also failed integrityu3 ⚠ Pre-update snapshot does not contain state.dbu& ⚠ No pre-update snapshot was takenz/Post-update state.db integrity check failed: %srdrfz+Model catalog seed during update failed: %srMrOrPrRrSrTrUrVrWrXrYrZr[r\r]r^r_r`rarbrcz$Skills sync during update failed: %s) list_profilesseed_profile_skillsu-→ Syncing bundled skills to all profiles...skipped_opt_outzopted out (--no-skills)+z newu↑z updated~z user-modifiedz up to datez sync failedrKz : error ()backfill_profile_envsu→ Seeded .env for z# profile(s) (copied from default): )sync_honcho_profiles_quietz -> Honcho: synced z profile(s)u-→ Checking configuration for new options...)get_missing_env_varsget_missing_config_fieldscheck_config_versionmigrate_config) required_onlyu ℹ Updating config format (vu → vu)…) interactiverQu: ✓ Config format updated (no new settings to configure)u' ⚠️ Config format update failed: z* Run 'hermes config migrate' to retry.c|sdStd|d|dd}|D]}t|trX||p|r||pd}|dpd}nt |}d}|rtd|d|td|t |t |z }|d krtd |d dSdS Nrrc? descriptionrZu • u — ru … and rrr~rrr0rFrf rjr:key fallback_keyshownitrdescrs r _print_itemsz&_cmd_update_impl.._print_itemss>Fm5mmm$$$bqb  3 3B!"d++"!vvc{{\|/T|@T@T\Y\ "} 5 5 ;BBDD #2ww!3<4<rZr8rr5 env_added config_addedu✓ Configuration updated!u: ℹ API keys require manual entry: hermes config migratez8Skipped. Run 'hermes config migrate' later to configure.u! ✓ Configuration is up to date)restore_cron_jobs_if_emptieduC ⚠️ cron/jobs.json lost jobs during this update — restored job_countz! job(s) from pre-update snapshot rLz'Cron jobs auto-restore check failed: %srvrwrxryrzzFTS optimize notice failed: %sr{r|zFHS PATH guard check failed: %sz(hermes-acp launcher self-heal failed: %srefresh_cua_driverz-Could not read updates.refresh_cua_driver: %s)darwinrr z cua-driver)install_cua_driveru+→ Refreshing cua-driver (Computer Use)...)upgraderequire_confirmed_updateshow_installer_progresszcua-driver refresh failed: %sz.update_exit_code0rt) is_macossupports_systemd_services_ensure_user_systemd_envrr'_prepare_profile_gateway_update_restart_get_service_pids_graceful_restart_via_sigusr1_wait_for_gateway_exitr scope_cmd_ svc_name_rXrc`tjt|dz} tj|d|gzddddd}|jdkrdSn#ttjf$rYnwxYwtj|krd Stj d) azPoll ``systemctl is-active`` until the unit reports active. systemd's Stopped -> Started transition after a graceful exit (or a hard restart) is not instantaneous; a one-shot check races that window and falsely reports the unit as down. Poll every 0.5s up to ``timeout`` seconds before giving up. ruT is-activer$r%rDrrlF r~rrr-r.r/r0rrrrHrIrXr_verifys r _wait_for_service_activez2_cmd_update_impl.._wait_for_service_activevs!?,,s7C/@/@@% ",.&+y)AA+/!% $% ### #>//11X==#'4>-z/HI((H44$uK$$$%A?roroc  tj|d|ddgzddddd}n#ttjf$r|cYSwxYw|jpd }|r|d kr|Sd }d }|D]`}d D][\}} ||rA |t|dt| | zz }d}n#t$rYnwxYwn\a|r|n|S)aRead the unit's ``RestartUSec`` (RestartSec) in seconds. After a graceful exit-75, systemd waits ``RestartSec`` before respawning the unit. Callers that poll for ``is-active`` must use a timeout >= ``RestartSec`` + transition slack, or they'll give up *during* the cooldown window and wrongly conclude the unit didn't relaunch. show--property=RestartUSec--valueTr$r%rDrrZinfinityroF)msgMbP?)usgư>)mingN@)rYrN r-r.rrr/r0rerrrfr rHrIro_showr;totalmatchedpart_suf_mults r _service_restart_secz._cmd_update_impl.._service_restart_secsb#&N""%4% (,!GI !   EE*:+DE###"NNN#|)r0022#cZ//"NIIKK " "D( " " e  ==.."% %tLs4yyjL/A)B)BU)J J*.#-%%% $%!E "!(4uuW4!$??-C  CCscope_c|vr|S|dgz}|dkrttdrtjdkrddg|zdgz}d} tjgdd d }|jdk}|s'tj|d |gzd d }|jdk}n#t tjf$rd}YnwxYw|r|nd }||<|S)uResolve the command prefix for manage-units operations. Read-only systemctl calls (``is-active``, ``show``, ``list-units``) work unprivileged, but manage-units verbs (``reset-failed``, ``start``, ``restart``) on a *system* service trigger a polkit ``org.freedesktop.systemd1.manage-units`` authentication prompt when run as a non-root user. That interactive prompt runs inside our captured subprocess with a 10-15s timeout — the user sees the prompt flash and "exit directly" before they can answer, and the resulting TimeoutExpired used to be swallowed silently. Strategy: if root, plain systemctl. If not root, try non-interactive sudo (``sudo -n``) — first a blanket probe, then a targeted ``systemctl reset-failed`` probe so a least-privilege sudoers entry scoped to ``systemctl ... hermes-gateway*`` also qualifies (``reset-failed`` is an idempotent no-op we run before every privileged restart anyway). If neither works, return None — the caller must SKIP the restart (without draining the gateway first!) and tell the user how to restart manually. ``--no-ask-password`` guarantees polkit can never hang a captured subprocess on this path. z--no-ask-passwordsystemrrsudo-nF)rgrhrTrD)r(rX reset-failedN)hasattrr rr-r.rdrr)rdrHrIrsudo_cmdsudo_ok_probe_manage_cmd_caches r _resolve_manage_cmdz-_cmd_update_impl.._resolve_manage_cmds:2...,V44 $7#88h&&I..' )) &~ :>Q=RRH#G(!+222+/$%""" #)"3q"8& =&0^ (NI+F F/3()&&&F '-&71&._restart_one_systemd_gateway_unit<s| *%h(??+/!% $% !!! !<--//8;;"F':&9!9h'' %& *$.N )$*$,$8$- #"!"04%)GI() % % %E),U\-?R,F,F,H,H,MA(N(NII&&5- *** )*III *(- $q==! ^ ^ ^SEWEW ^ ^ ^,I+H ).;,,,L (T8 +6 *$/>82L$L37)- ,. !"!"!"!" !+$/7H2E$E37)- ,. !"!"!"!"$<#;$-$,,0$"$"$"!+ %7$=$=h$G$G$G$*F ,@+? ) ((+,,,L 36 $ ,t 333/ +2|c7I7I %%KX%K%K69,6G6G%K%K%K!"!"!" 87 ) ((;   ' !3 9 9( C C C & " c c c c'.188BBB!!b!b!b@H!b!b!b#F$#'>8*DD+/!% $&  #-.'9h*??+/!% $& ### #-22 87 ) ((,   -& !3 9 9( C C C C C!&$WX$W$W$W!"!"!"!+$/>82L$L37)- ,. !"!"!"!" !+$/9h2G$G37)- ,. !"!"!"!" $<#;$-$,,0$"$"$"!& %7$=$=h$G$G$G$)*P8*P*P*P$Q$Q$Q$Q$Q$9$@$@$J$J$J?D))TVK._on_unit_timeout2sl.44X>>>BHBB+.7 I8IBBBr)rr)launchd_restartget_launchd_labelget_launchd_plist_path launchctlrrDru ⚠ Gateway restart failed: )rrc2i|]}|jv |j|Srr)rr manual_pidss r rz$_cmd_update_impl..fs4!!!8{**$***rr~z: draining gateway PID z (up to rurvry)rX force_afterzexternal-supervisoru ✓ Restarted u, ✓ Restarting manual gateway profile(s): uC ✓ Handed gateway profile(s) back to their external supervisor: rz manual gateway process(es)z( Restart manually: hermes gateway runz; (or: hermes -p gateway run for each profile)rg@cg|]}|v| Srr)rrK killed_pidss r rz$_cmd_update_impl..s#JJJ#sk7I7I#7I7I7Iru6 gateway process(es) ignored SIGTERM — force-killingg?z&Post-restart survivor sweep failed: %sz(Gateway restart during update failed: %s)has_legacy_hermes_units_find_legacy_hermes_unitsrBu+⚠ Legacy Hermes gateway unit(s) detected:z (z scope)z; These pre-rename units (hermes.service) fight the currentz< hermes-gateway.service for the bot token and cause SIGTERMz flap loops. Remove them with:z! hermes gateway migrate-legacyz) (add `sudo` if any are in system scope)z*Legacy unit check during update failed: %sz-Tip: You can now select a provider and model:z7 hermes model # Select provider and modelu⚠ Git update failed: u#→ Falling back to ZIP download...u✗ Update failed: )rZrrro)rrrstdinisattyr/rrrr~rrFrrrrrrrb_venv_scripts_dir#_detect_concurrent_hermes_instancesrNrrYratexitregisterrrrrfrrfrr~rrrrDrr-r.rr rr rrrdrr0rrrr9r0rr<r=rnextr}rCrr rrra_clear_update_incomplete_markerr6rLrrrrrrrrr1r rFrSrt%_clear_lazy_refresh_incomplete_markerrrlrr_desktop_packaged_executable_desktop_dist_existsr_desktop_build_neededrrrr+rHrrhrirrrr2rrerrNhermes_cli.profilesrrrKrr plugins.memory.honcho.clir!r"r#r$r%rrr+r8rrrr%r-rhermes_cli.tools_configr<r|rrArBrCrrrDrErFrGsignalrrrprrprrrrrrr ImportErrorrjrkillSIGTERMrrirrrrr)rr  gw_input_fn assume_yes_non_interactive_updatediscard_local_changesr _update_cfg_moderrH concurrentpre_update_snapshot_id_windows_gateway_resume_atexit _venv_holders_gateway_holdersr_piduse_zip_updaterr4ris_forkrrrr5current_branchr:auto_stash_refcheckout_result track_resultprompt_for_restore commit_countr<r=runtime_repairsruntime_repairedrerk repair_uvvenv_python_missing repair_env healthy_after detail_afterupdate_succeeded pre_pull_sha pull_result reset_result syntax_ok failing_path syntax_errorrrollback_resultrrr install_grouprinstall_prefixlazy_envlazy_okrrrr desktop_dirhas_desktop_app_skip_desktop_build_desktop_build_cmdr _build_env build_resulttail_dhhrhrirr _pre_snap_idrrrrrrer5rNrrrrr!rrRrVmodifiedrjper  backfilledr!syncedr"r#r$r% missing_envmissing_config current_ver latest_verhas_new_optionsversion_bump_onlyneeds_migration_mig_errr4rinteractive_migrationrnr8 cron_restorer:cfg_excr<_exit_code_path gateway_fleet_restart_incompleterArBrCrrrDrErG_signalrprelaunched_profilesexternally_supervised_profilesrrrrr plist_pathr, service_pidsrrKr restart_modedrainedsvcrqunmapped_count_service_pids_after _surviving_stuck_terminate_pid _sweep_excrrrrKis_sysrrFrnrorbrOrrrrrrs @@@@@@@@@@@@r _cmd_update_implr s;   D D D D  gdE51122J  <  <   "":sz'8'8':': ; " * * 5 5 5 5 5 5&;==.B33IrBBK+t,, ;KOO,KWUUVV\\^^(-(:% * * * LLSUX Y Y Y$) ! ! ! ! ! ! *  ())) GGG  tt'$"?"?dd,,..  "AA+NNJ ::{SSTTT  TT88>> ddEEGG      DD 6 #    tt'$ e"D"D::<<  E!ttCCMRR +988888CS!122CCC-D% c$iit<<<<<$ DdC C   " B B D D   5mDD E E E DD 6 67N O O O HQKKKNdd&(G >>   <7 " "!NN ? @ @ @ V    HQKKK |w7>>#3#3   ! gG |wAAAGRTT%67777BDD$5666%%grtt/@AAJz""G '((( :     P D ! ! ! DD 6 67N O O O OBDD 6 67N O O O Ob,,T22 '(((!~ w&1 1!     "a ' '!(..00F'6115G65Q5QQRRRvE36,,..q13332FFFF'6115NRX5X5XZ@AAA97v00221577888 HQKKK ;;; ;!      ,,.. V # #"V++ 1111  WWWWWW X X XTT@@"$$J[\\N(n:v..DD%#GI O )Q.. *~z49K69K9KLL)#'      *a//&155#DD-*(-%0 6WWWWXXX#*0022RP<#6#<#<#>#>#I#I#K#KA#NPPQQQHQKKKTT@@"$$J[\\N $ & O OM#)"2"2"4"4"L9J9J9L9L  z#;6#;#;YG G!     6=..0011 1   $ & & & O6V++227BDD::)#'   K J J J J J J J O  o.D E E E E Io&< = = = =#IIoIII   9::OGV( 1KLLLm6mm$$$<===/111;;;;;;%IKK %)F2BDD#>@@AAA_W]__HQKKK5T!55 1I|\ NOOO)<))***-!$L 1 1 < < > >rr B--mTmm,,,,fGGGGcrc1BGGGHHH&0n7Hl"CCDD-'+!GI '''O '1Q66VWWWUVVVVMNNN^(9^^P\^^___*17799]!"[/*@*F*F*H*H*S*S*U*UVW*X"["["[\\\GGGWXXXdBDD$5dddeee # )(]N]]]DEEEE*DD11)& DD11)&$6!, 2%)(]N]]]DEEEE*DD11)& DD11)&$6!, 2%*4 !""" $$,,RTT->??   eeeGWXLLSS^cee    ))+++  Kv'' DD . .w8I J J J ())) 3444FFFFFFFF >4/ 4*733F & cS SM3rtt7H67Q3R3RSSFtt""6** b <... <... , `aaatt""6** L/A/C/C Lqrrr.FKKKK DD D DV= E    ~tU3G {m+)#'  0   ^T; _U)  tt""$$ ] , [\\\tt""$$ 8);)=)= 8qrrr.w777 DD D DWTa D b b b,2?&%#-66 ,,...$$,,RTT->??   eeeGWXLLSS^cee    ))+++ ,,... ./// --n(-KKK$$44^4RR   DD 6 6 8 8 8 8 6    99;;;3T DD 3 3 / >< ? GGG Q>QQQ R R R )<)) * * * P Q Q Q = > > >133  244,u4555dd'&09< $$;;KHHPTT~XZX\X\XqXqr}X~X~ . ( 0 0 2 2. :rtt7U7U7W7W. :\k. : C D D D#(  ,*,$$*D*D!2+E++'## , , ,&+### ," :45555&)nd#>?QWYW[W[Whnx#>#y#yL*a//abbb99l&9&?R%F%F%H%H%S%S%U%UVYVZVZ%[\\D$d LLLLLLGttvvGGGHHHH8999  !"""D Q W W W W W W W W)++j8K!!##> 33!%# ==))8LLB! i00 GGGB#-- ?CCD$:L#+H001B1BCC*+()$ '--//#'>'> +$4(((H (||G44"!&$<$<$<$<$+MM+{$K$K$K3J3J(359374&4&4&L (4'7'7'@'@ %*(--I9E-I-I-I)*)*)*)* ).-I)*)*)*(/!&!&!&$)(VPT(V(V%&%&%&%&%&%&%&%&!& !&$U!"!"!"!"" UFGGGGGG Q Q Q LLJC P P P P P P P P Q K I I I I I I''(9:: KIJJJ K K K LLF J J J J J J J J K D 5 5 5 5 5 5 GGG 1 2 2 2 [t,,,Fh YWS!122WW$))F8DT:U:UWWXXXzz)$$ ]S !233]]tyyPYIZ?[?[]]zz/** PS!899PPPQQQ5zz)$$ OMs6)#455MMMNNNzz+&& 8S !45588yy !45588(# 5FJJy,A,A 53444 D D D LL? C C C C C C C C D!          )=??L ;EFFF%;;A;//dCCC3'8!9!93%>FF 3%(x)<)<%=%=F&)!%% 2*>*>&?&?G'*155"+E+E'F'FH$&E%? % -=-=-=-= > > >&F % -D7-D-D-D E E E'K % -I-I-I-I J J J9>%PTYYu%5%5%5LFF%2F51655V556666$;;;91699B999::::::::;    D   A A A A A A..T:::J F3z??FF.2ii .C.CFF    D   L L L L L L//11F B@V@@@AAA    D   =>>>            +*>>> 2244"6"6"8"8 Z{->-@-@ #Z[[[!#MNNH  ###"HHH#333!DJD(f2D)%).5JRWXXX;'87>+B8GGG6777 XJX(f2D2D+2DVWWWPQQQQ 5 6 6 6 I F F F F F F778NOOL J ,[ 9JJ+7 +FJJJ  I I I LLBC H H H H H H H H I   * ?99]++???    Q R R R J K K K K ( ) ) ) > 0 2 2 2 2 > > > LL91 = = = = = = = = > C + - - - - C C C LL> B B B B B B B B C D , . . . . D D D LL? C C C C C C C C D  ? " $ $ $ $ ? ? ? LL:A > > > > > > > > ?  H " " " " H H H LLCQ G G G G G G G G H# =!%  W999999*{}}277 2FF k400)-#(VVVWWWDEEE%))Y% 370&5&7&7:M&MO'2232IIII" 23H I I I% k  S C   &7&7&9&9#..!4!% KJJJJJJ%GGGdVdddONNNNN%!!! +N3d;;;;; 2OWM!!! D!K$$$ S S S EzRRRRRRRR S H H H LLCQ G G G G G G G G H 223JKKK J           )(** C/F/F/H/H CCDDD*C*C*E*E::&D$(.:HHFE888%8889999STTTTUUU78889:::ABBB J J J LLEq I I I I I I I I J )777  =>>> GHHH +  HQKKKKK     ( <7 " " /A// 0 0 0 7 8 8 8 GGG D ! ! ! ! +++ , , , HQKKKKKKKKK " ! ! ! ! ! sz:A6C11 D";DD":L MMMV#V28]B|AB|L ADA*BB|DBAFFH4B|O-AO<O;B|OQ=B|Q> BR.RBR)R$B|R)BR.R.B|R2BSSB|S BS2S BS-S(B|S-BS2S2B|S6BTTB|T BT6TBT1T,B|T1BT6T6B|T:BX+T=ABVVBX+V BW V'BWWBX+WBW W ABX+X*B|X+ BYX5BYYB|YBYYB|Y3BZ Z B|Z BZZB|ZBZZB|Z BBu\3/B]#]"Bu]# B]3]0Bu]2B]3]3$Bu^ B^#^"Bu^# B^0^-Bu^/B^0^0Bu_ !B_+_*Bu_+ B`8_6Bu_8B`8`(B`3`.Bu`3B`8`8A!BubABe6c8'Bd dBe6d Be2d/9Be-e(Be6e-Be2e2Be6e5Bue6BffBufBffB Buh8BiiBuiBi)i&Bui(Bi)i)A-Buk/BllBulBllBulBllDBup#Bp=p<Bup= Bq qBuq Bq q Buq#A7Bts Bs)s(Bts)BttBttBttBttBut But(Bu uBuu BuuBuuB|u BvuBu=u8B|u=Bvv$B|v'C(BzzB|z B{zBz;z6B|z;B{{AB||B~3|*A8B~.~.B~3c|sdStd|d|dd}|D]}t|trX||p|r||pd}|dpd}nt |}d}|rtd|d|td|t |t |z }|d krtd |d dSdSr)r-r.s r r4r46s=  -u--- "1"IE ' ' b$   66#;;P<#HBFF<4H4HPSDFF=))/R6688DDr77DD  ' 0t00$00 1 1 1 1 %t%% & & & & JJU #E qyy +u+++,,,,,yrrrHrIc`tjt|dz} tj|d|gzddddd}|jdkrdSn#ttjf$rYnwxYwtj|krd Stj d) a>Poll ``systemctl is-active`` until the unit reports active. systemd's Stopped -> Started transition after a graceful exit (or a hard restart) is not instantaneous; a one-shot check races that window and falsely reports the unit as down. Poll every 0.5s up to ``timeout`` seconds before giving up. ruTrKr$r%rDrrlFrLrMs r rOrOKs  3w#4#44H  nk955#GI G ~##%%11t2!:#<=    D  ?   ( (5 CrProc  tj|d|ddgzddddd}n#ttjf$r|cYSwxYw|jpd }|r|d kr|Sd }d }|D]`}d D][\}} ||rA |t|dt| | zz }d}n#t$rYnwxYwn\a|r|n|S)abRead the unit's ``RestartUSec`` (RestartSec) in seconds. After a graceful exit-75, systemd waits ``RestartSec`` before respawning the unit. Callers that poll for ``is-active`` must use a timeout >= ``RestartSec`` + transition slack, or they'll give up *during* the cooldown window and wrongly conclude the unit didn't relaunch. rRrSrTTr$r%rDrrZrUroFrVNrZr[s r rbrbhsb (         z8 9 < 2 $ $ & &C ### EG    KD% }}T"" U4 3t99* #566>>E"GG!D   (55(rc)rN)rZrmr)FNr rr)s__doc__rrwr7r shlexrr-rr=r~rpathlibrtypingrrrrrr8r9rrrr rCrFr6r_rrLr^rlrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrr!r#r0r9r?rCrFrNrrSrtrrrrrrrrrrrr r%r-rJrKr<rYrkrprtr}rrrrrrrrrrrr rr4rOrbrrr rs 2   ------------  8 $ $   " JJJJ<  sTz    'U4tS4Z3O-P''''\LuT3:sTz5Q/RLLLL\///s/%/TW////bTt %$%5s+;%%%%&&&&Poooob? ? ? ? BSS&0DI0$0000(GSGsGtGGGG"Ccc:QQQQ&9999xf4f4f4P aDIaDaXc]aaaaF #Y!.1 c]"59     $,SM        34B  uu #Yu uu u  uuuun- #Y- -- ----^G3 T#Y T hsm    #4 $s) $ 4     $s) $ 4     DI D  3 SV    DdDDDD    d3idt qX49qX4qXDqXqXqXqXf6 BT BS BT B B B BNNNNZZZZ %S/ "158"&HHHS H c3h$ H HHHH(,0f"&fffS D(f c3h$ f ffffP.I.I.I.I`*D**** "&! ! ! S !  c3h$ !  ! ! ! ! F".49".t".".".".H!U49-!!!!FsTz t6 @4 @D @ @ @ @h=49h=h=h=h=T # $    ,(,(hEuhEhEhEchEhEhEhEhETVQVQVQVQp-D-D-D-D^&-"*S****XhHSMhhhhTDst0 s)!&X