`gj ~dZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z ddlmZddlmZmZmZdZdZej,d ej.Zej,d ej.Zd Zd Zd ZdZdZdOdZdPdZ dQdZ!dRdZ"dRdZ#dSdZ$dTdZ%dUdZ&dVdZ'dWdZ(dXdYdZ) dZddd d[dZ*dVdZ+dOdZ,dRd Z-d\d!Z.d\d"Z/d\d#Z0d\d$Z1d]d%Z2 d^d&Z3dRd'Z4 d^d(Z5d_d)Z6d\d*Z7d`d+Z8dad,Z9dbd-Z:dcd.Z;ddd/Zdgd2Z?dhd3Z@did4ZA djd5ZBdXdkd6ZCdld7ZD dm dnd8ZEdod9ZF dZdddd: dpd;ZGdqdrd<ZHdsd=ZIdPd>ZJdPd?ZKdVd@ZLdVdAZMdVdBZNdtdCZOdudDZPdPdEZQdZdvdFZRdPdGZSdwdHZTdxdIZUdydJZVdXdzdKZWdPdLZXd{d|dMZYdPdNZZy)}a<Windows gateway service backend (Scheduled Task + Startup-folder fallback). This mirrors the contract exposed by ``launchd_install`` / ``launchd_start`` / ``launchd_status`` etc. on macOS and ``systemd_install`` / ``systemd_start`` on Linux. It uses ``schtasks`` under the hood with ``/SC ONLOGON`` and restart-on- failure XML settings, and falls back to a ``%APPDATA%\...\Startup\.vbs`` dropper when Scheduled Task creation is denied (locked-down corporate boxes). Design notes ------------ * ``schtasks /Create /SC ONLOGON /RL LIMITED`` means the task runs at the CURRENT USER's next logon without any elevation prompt. Manual starts and install ``--start-now`` use the direct detached ``pythonw`` launcher instead of ``schtasks /Run`` so start/restart behavior is consistent. * We write a shared ``gateway.cmd`` wrapper plus a console-less ``gateway.vbs`` launcher. Scheduled Task and Startup-folder persistence both route through VBS/wscript; immediate manual starts route through direct ``subprocess`` spawn. * Status = merge of "is the schtasks entry registered?" + "is the startup login item present?" + "is there a gateway process running?" so the status command keeps working regardless of which install path was taken. * Quoting is tricky: schtasks parses ``/TR`` itself and cmd.exe parses the generated ``gateway.cmd``. Those are DIFFERENT parsers. We keep two separate quote helpers (same pattern OpenClaw uses) and never cross them. * All of this is Windows-only. ``import`` paths are still safe on POSIX but the functions raise if called on non-Windows. ) annotationsN)Path)escape)windows_detach_flags&windows_detach_flags_without_breakawaywindows_hide_flagsuh(access is denied|acceso denegado|přístup byl odepřen|schtasks timed out|schtasks produced no output)z"(access is denied|acceso denegado)Hermes_Gatewayz5Hermes Agent Gateway - Messaging Platform IntegrationPT30SPT1MicT tjdxsdS#t$rYywxYw)adBest-effort console encoding for decoding ``schtasks.exe`` output. On localized Windows (e.g. Chinese), ``schtasks`` emits text in the OEM/ANSI code page rather than UTF-8. Decoding with the wrong codec raised ``UnicodeDecodeError`` inside ``subprocess``' reader threads. Prefer the locale's preferred encoding and fall back to UTF-8. Futf-8)localegetpreferredencoding ExceptionM/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/gateway_windows.py_schtasks_encodingrAs/**51   y> sC)D DDcd|vsd|vrtd||sytjd|s|Sd|jddzdzS)aQuote a single argument for use INSIDE a .cmd file, for cmd.exe parsing. cmd.exe splits on spaces/tabs outside of double quotes. Embedded quotes are doubled. We also refuse line breaks because they'd terminate the logical command line mid-script.   z,refusing to quote value containing newline: ""[ \t"]") ValueErrorresearchreplacevalues r_quote_cmd_script_argr<usX u} GyQRR  99Y & sD) )C //rcbtjd|s|Sd|jddzdzS)zQuote a single argument for schtasks.exe's /TR parser. Schtasks uses a different quoting convention than cmd.exe: embedded quotes are backslash-escaped, and the whole thing is wrapped in double quotes if it contains whitespace or quotes. r4r5z\")r7r8r9r:s r_quote_schtasks_argr>s2 99Y & sE* *S 00rc ttjd}|y tj|g|ddt dt t}|j|jxsd|jxsdfS#tj$rddd t d fcYSt$r}d dd |fcYd}~Sd}~wwxYw) uRun ``schtasks.exe`` with a hard timeout. Return (code, stdout, stderr). If schtasks wedges, returns code=124 with a synthetic stderr string — same convention OpenClaw uses, so the fallback detection regex matches. schtasksN)zschtasks.exe not found on PATHTr9)capture_outputtextencodingerrorstimeout creationflagsrB|zschtasks timed out after srAzschtasks invocation failed: ) rshutilwhich subprocessrunr_SCHTASKS_TIMEOUT_Sr returncodestdoutstderrTimeoutExpiredOSError)argsr@proces r_exec_schtasksrXs ||J'H8;~~    ()'-.  !2DKK4E2FF  $ $MR45H4IKLL ;25aS9::;s$AB B>$B>,B93B>9B>cT|dk(xs"ttj|xsdS)NrIrB)bool_FALLBACK_PATTERNSr8)codedetails r_should_fall_backr^s& 3; G$1882FGGrcFttj|xsdS)NrB)rZ_ACCESS_DENIED_PATTERNr8)r]s r_is_access_deniedras &--fl; <>:O &&44       | %gY.UV\U]]^_`   6wiyNOs.C D)C??DF) start_nowstart_on_loginctjjd}tjjd}tjjd} ||rdndtjd<||rdndtjd<dtjd<dg}|r|jd||j|rd nd ||j|rd nd t d |d|fd|fd|ffD];\}}|!tjj |d)|tj|<=S#d|fd|fd|ffD];\}}|!tjj |d)|tj|<=wxYw)zFLaunch an elevated gateway install via UAC and return True on handoff. HERMES_GATEWAY_INSTALL_START_NOW%HERMES_GATEWAY_INSTALL_START_ON_LOGINHERMES_GATEWAY_ELEVATED_HANDOFFN10z--elevated-handoffz--forcez --start-nowz--no-start-nowz--start-on-loginz--no-start-on-logininstall)r"environgetappendrpop) forcerr old_start_nowold_start_on_login old_handoffrkeyolds r_launch_elevated_installrsJJNN#EFM(OP**..!BCK&  DMSSVBJJ9 :  %IW#]`BJJ> ?8; 45*+    i (    ym>N O  %   N0H] ^/ :F0 ? 46H I . <  &HC { sD)"% 3 & / ? 46H I . <  &HC { sD)"% 3 &sBD==A FctdS)zHLaunch an elevated gateway uninstall via UAC and return True on handoff. uninstall)rrrr_launch_elevated_uninstallrs +K 88rcVtddlm}|}|stStd|S)zScheduled Task name, scoped per profile. Default profile: ``Hermes_Gateway`` Named profile X: ``Hermes_Gateway_`` r)_profile_suffix_)rrjr_TASK_NAME_DEFAULT)rsuffixs r get_task_namers0 2  F !! !6( ++rc0tjdd|S)z/Remove characters illegal in Windows filenames.z[<>:"/\\|?*\x00-\x1f]r)r7subr:s r_sanitize_filenamer-s 66*C 77rctddlm}t|dz }|j dd|t t dz S)aThe generated ``gateway.cmd`` wrapper kept beside the VBS launcher. Lives under ``%LOCALAPPDATA%\hermes\gateway-service\.cmd`` (or ``/gateway-service/.cmd`` so per-profile Hermes installs stay self-contained). rrzgateway-serviceTparentsexist_ok.cmd)rr rrmkdirrr)r script_dirs rget_task_script_pathr2sN1o'(+<?tD DDrctjjddj}|rt |dz dz dz dz dz Stjjddjxs.tjjd dj}|s t d t |d z d z dz dz dz dz dz S) NAPPDATArB MicrosoftWindowsz Start MenuProgramsStartup USERPROFILEHOMEuHneither APPDATA nor USERPROFILE is set — cannot resolve Startup folderAppDataRoaming)r"rrstriprr)appdata userprofiles r _startup_dirrAsjjnnY+113GG}{*Y6E RU^^^**..399;arzz~~fVX?Y?_?_?aK eff [                  rcXttttdz S)N.vbsrrrrrrrget_startup_entry_pathrT% >1-/BC4H HHrcXttttdz S)Nrrrrr_legacy_startup_entry_pathrYrrcddlm} |}|r&t|}|jr t |St |S#t $r Yt |SwxYw)aReturn a stable cwd for detached/startup gateway runs. Mirror the POSIX service invariant: anchor at ``HERMES_HOME`` whenever it exists so Scheduled Task / Startup launches do not fail at the ``cd`` step after a transient checkout or worktree is moved away. Fall back to the source checkout only if ``HERMES_HOME`` cannot be used yet. Preserve the configured spelling instead of resolving symlinks so AppData installs backed by a junction/symlink still identify themselves as AppData. rr)r rris_dirr%r) project_rootrr) home_paths r_stable_gateway_working_dirrbsb2   T I!9~% |    |  s.A AAc&ddtg}|jdt||jd|d|jd|jdt|\}}}|jdt |dt t t jjjg|Dcgc] }t |c}} |jd d jg| d d|d d g} |r| j|j| jddg|jdjd| D|jddj|dzScc}w)u,Build the ``gateway.cmd`` wrapper content (CRLF-terminated). The script: - cd's into a stable working directory - exports HERMES_HOME, PYTHONIOENCODING, VIRTUAL_ENV - invokes ``pythonw -m hermes_cli.main [--profile X] gateway run`` directly so the wrapper cmd.exe exits without a visible gateway console We intentionally do NOT inline PATH overrides here — cmd.exe inherits the per-user PATH the Scheduled Task was created with, and forcibly rewriting PATH tends to break Homebrew/nvm-style installations. z @echo offzrem zcd /d zset "HERMES_HOME=r5zset "PYTHONIOENCODING=utf-8"zset "HERMES_GATEWAY_DETACHED=1"zset "VIRTUAL_ENV=zset "PYTHONPATH=;z %PYTHONPATH%rprqrrrN c32K|]}t|ywN)r<).0as r z,_build_gateway_cmd_script..sFq/2Fsz exit /b 0 ) _TASK_DESCRIPTIONrr<_resolve_detached_pythonr/rrxr!ryjoinrvrl) python_path working_dir hermes_homermlines pythonw_pathvenv_dirextra_pythonpathentrypythonpath_entries prog_argss r_build_gateway_cmd_scriptr}s$D!2 34 5E LL6/ <=>? LL$[M34 LL/0 LL23/G /T,L(, LL$%?%I$J!LM"4>#9#9#;#B#B#I#IJ9I J $U + J LL#CHH-R/A-R>-R$S#TTUVWt%67I**,- i'( LLFIFFG LL ;;u  &&! Ks Fc^d|vsd|vrtd|d|jddzdzS)zQuote a value as a VBScript double-quoted string literal. VBScript escapes an embedded double-quote by doubling it. A newline cannot appear inside a literal, so refuse it (same guard as ``_quote_cmd_script_arg``). r1r2z5refusing to quote VBScript value containing newline: r5r3)r6r9r:s r_quote_vbs_stringrsA  u} PQVPYZ[[ sD) )C //rct|\}}}|ddg}|r|j|j|jddgtj|}t t tjjj} tjj| g|D cgc] } t | c} } dtdddd d td d t|d td d tdd tdd tdd tdd tt |dtddddtdd t| tjzdddtdd t| ddt|dt|dg} dj| dzScc} w)uBuild a console-less ``gateway.vbs`` launcher (CRLF-terminated). The Scheduled Task runs this through ``wscript.exe`` instead of ``cmd.exe``. Why: issue #45599 root cause #1. Driving the gateway through ``cmd.exe`` allocates a console, and during logon Windows broadcasts ``CTRL_CLOSE_EVENT`` to console process groups — reaping cmd.exe and the half-initialized gateway with ``STATUS_CONTROL_C_EXIT`` (``0xC000013A``). Task Scheduler treats that code as a user cancel, so the ``RestartOnFailure`` policy never fires and the gateway silently disappears on every reboot. ``wscript.exe`` and ``pythonw.exe`` are both GUI-subsystem executables with no console, so this launcher receives no console control events. It mirrors ``_build_gateway_cmd_script`` (same env + argv via ``_resolve_detached_python``) but sets the environment on the WScript.Shell process and ``Run``s pythonw directly — no cmd.exe anywhere in the chain. rprqrrrN' Option ExplicitzDim sh, env, existing_pp&Set sh = CreateObject("WScript.Shell")z#Set env = sh.Environment("PROCESS")z env.Item( HERMES_HOMEz) = PYTHONIOENCODINGrHERMES_GATEWAY_DETACHEDr VIRTUAL_ENVzexisting_pp = env.Item( PYTHONPATHruzIf Len(existing_pp) > 0 Thenz env.Item(z & existing_ppElsezEnd Ifzsh.CurrentDirectory = sh.Run , 0, Falser)rrvrlrMrwr/rrxr!ryr"pathseprrr) rrrrmrrrr command_line repo_rootrstatic_pythonpathrs r_build_gateway_vbs_scriptrs.0H /T,L(,t%67I**,- i'(**95L*4>+A+A+C+J+J+Q+QRI  WEUVE07VW   "0- %m45T:KK:X9YZ %&89:$?PQX?Y>Z[ %&?@AFWX[F\E]^ %m45T:KLfgoLp:q9rs ""3L"A!B!D& ' 56d;LM^acakakMk;l:mm{| ' 56d;LM^;_:`a !2;!? @A #L12*=+ E. ;;u  &&5Ws7G c t|jd}tjd|g}dtdddt |ddd d t |d g}d j |d zS) aThe tiny .vbs that goes in the Startup folder and chains hidden. Defense-in-depth: bail out silently if the target script is gone. Test fixtures historically wrote Startup entries pointing at pytest tmp_path directories that vanish after the test session. Without the existence guard, every subsequent Windows login could attempt a stale launcher. The check + ``WScript.Quit 0`` keeps that case silent. rz wscript.exerrzDim fso, sh, targetz target = z4Set fso = CreateObject("Scripting.FileSystemObject")z1If Not fso.FileExists(target) Then WScript.Quit 0rrrr)r% with_suffixrMrwrrr) script_pathtargetr~rs r_build_startup_launcherrs((0 1F%%}f&=>G    %f-./>;0 #G,-Z8 E ;;u  &&rctddlm}ddlm}m}m}t|}t|}tt|}||}t||||}t} | jd} | j|dd| j| t!||||} | jd} | j#| j$dz} | j| dd| j| | S) zEGenerate and write the gateway.cmd wrapper. Return its absolute path.rr PROJECT_ROOTriget_python_path.tmprrBrEnewliner)rr rrjrrirr/rr%rrrr write_textr9r with_namename)rrrirrrrrmcontentrtmp vbs_contentvbs_pathvbs_tmps r_write_task_scriptrs1 -_->?K-l;Kd?,-.K{+K' [+{[G&(K  ! !& )CNN7WbN9KK  ,KkS^_K&&v.H  !78G {WbA OOH rc*tjjdxs@tjjdxstjjd}|syd|vr|Stjjd}|r|d|S|S)zCReturn ``DOMAIN\USER`` if available, else bare USERNAME, else None.USERNAMEUSERLOGNAMEN\ USERDOMAIN)r"rr)usernamedomains r_resolve_task_userr4svzz~~j)`RZZ^^F-C`rzz~~V_G`H  x ZZ^^L )F&,fXRz ":(:rc|rdt|dnd}dttdtd|dtdtd tt |d S) uRender a Task Scheduler XML definition with safe long-running defaults. ``launcher_path`` is the console-less ``.vbs`` the task runs via ``wscript.exe`` — not the ``.cmd`` (see ``_build_gateway_vbs_script`` / issue #45599 root cause #1). z z rBz zp true zU a InteractiveToken LeastPrivilege IgnoreNew false false true true false false false true true false false false PT0S 7 z z wscript.exe //B //Nologo "z/" )rr_TASK_LOGON_DELAY_TASK_RESTART_INTERVAL_TASK_RESTART_COUNTr%) task_name launcher_pathuseruser_principals r_build_scheduled_task_xmlr?sDH't ~Y?RN*+,-  !++,0(()! "# !'s='9 :;<W/ /rcf|jd}|jt|||dd|S)Nz .task.xmlzutf-16rBr)rrr)rrrxml_paths r_write_scheduled_task_xmlrys>((5H !)]DA Orc0tddd|g\}}}|xs|xsdj}|dk7r)|r'd|jvrt|r dd|d |fSt }|j d }t |||}d dd|d t|g} |r g| d |ddgng} | j| d} d} | D]>} t| \}}}|dk(rdd|fc |jdS||xs|xsd} } @ |jd|r(d|jvr| jd|d} dd| d | jfS#t$rYSwxYw#t$rY\wxYw# |jdw#t$rYwwxYwxYw)arCreate or replace the Scheduled Task. Returns (success, detail). Always recreate instead of ``/Change``. Older Hermes builds and failed experiments may have left repeat/restart settings on the task; ``/Change`` preserves those stale triggers and can make the gateway relaunch every minute. Delete+create gives us a clean ONLOGON task every install. /Delete/F/TNrBrz cannot findFzschtasks /Delete failed (code z): rz/Createz/XMLz/RUz/NPz/ITrATzCreated Scheduled Task ) missing_okz (delete detail: ruzschtasks /Create failed (code ) rXrlowerrarrrr%runlinkrT)rr delete_code delete_out delete_err delete_detailrrrbasevariants last_codelast_errargvr\outerrs r_install_scheduled_taskr.s+9)T5R[9\*]'KZ3:3:: YYsA& U&+kkmsyy{  "# 4 M  s A;; B B cFt|}|jj}t|}t|}|j dd}d|vrP|rNt|dz }|dz dz }|j r(|j rt ||t |gfS||gfS)aReturn (windowed_python, venv_dir, extra_pythonpath) for detached runs. uv-created Windows venv launchers are special: ``venv\Scripts\pythonw.exe`` starts hidden, but then respawns the base interpreter as console ``python.exe``. That child opens a visible Windows Terminal tab. For uv venvs, use the base ``pythonw.exe`` directly and put the repo + venv site-packages on ``PYTHONPATH`` so imports still resolve without the venv launcher. r)rBuvz pythonw.exeLibz site-packages)rryrzr@rr0r%)r6r7rwindowedcfgr) base_pythonw site_packagess rrrs ZAxxH#J/H 8 $C 7762 D s{tDzM1  5(?:    ]%9%9%; %x#m2D1EF F h ##rc|Dcgc]}|s| }}|sytjjdd}|r|j|tjj ||d<ycc}w)NrrB)r"rrrrr) env_overlayentriesr clean_entriesexistings r_prepend_pythonpathrMs^(/9u5U9M9 zz~~lB/HX& "  >K  :s A,A,c tddlm}ddlm}m}m}tt|\}}}t|}t|}tt|} || } |ddg} | r| j| j| jddg| dd t|d } t| |r|g|D cgc] } t| c} n|g| || fScc} w) uBuild (argv, working_dir, env_overlay) for the gateway subprocess. Same logical command as what gateway.cmd runs, but assembled as a native argv for direct ``subprocess.Popen`` invocation — no cmd.exe layer in between. rrrrprqrrrNrr)rrrr)rr rrjrrirrr/rr%rrvrlrM)rrrirr6rrrrrrmr+rIrs r_build_gateway_argvrOs1 .F"?#45.*J*.l;L-l;Kd?,-.K{+K / 0D K%%'(KKE"####&1(; K   ZHXYu3E:YZ^  k )) ZsC( c|s|difStjdk7r|difSddlm}ddlm}|d}|dd} t |\}}}|g|}t|} t|} tt|j} dd t|d } | r| | d <t| |r| g|n| g|| | fS#t$r|difcYSwxYw#t$rd} YPwxYw) u*Rewrite a console-``python.exe`` gateway argv into a windowless one. The post-update restart paths build their respawn command from ``get_python_path()`` which returns the venv's console ``python.exe``. On Windows — especially with uv-created venvs — launching that interpreter (even with ``CREATE_NO_WINDOW``) leaves a persistent console window: ``venv\Scripts\python.exe`` is a launcher shim that re-execs the *base* console interpreter, which allocates its own conhost. ``CREATE_NO_WINDOW`` cannot suppress that second window. See ``_resolve_detached_python`` for the gory details. This mirrors what ``_build_gateway_argv`` / ``_spawn_detached`` do for a clean start: swap the interpreter for the windowless ``pythonw.exe`` (base interpreter for uv venvs) and return the cwd + env overlay (VIRTUAL_ENV, PYTHONPATH) the base interpreter needs to resolve the ``hermes_cli`` package without the venv launcher's site config. Returns ``(new_argv, working_dir, env_overlay)``. ``new_argv`` preserves every argument after the interpreter (``-m hermes_cli.main [--profile X] gateway run [--replace]``) verbatim. On non-Windows, or if ``run_argv`` doesn't start with a resolvable python, the argv is returned unchanged with an empty overlay. rBrrr)rrANrr)rrrr) rrr rrjrrrrr%rr!rM) run_argvrrr6restwindowless_pythonrrnew_argvrrrrIs rwindowless_gateway_restart_specrU,s)4 R ||wR1/!J AB [+ --/  R   s#B8"'C 8C C  CCc tt\}}}itj|}t }ddlm}t|dz }|jdd|dz } t|dd5} tj||||dtj| | } d d d | jS#1swY jSxYw#t$rgt} t|dd5} tj|||| dtj| | } d d d n #1swYnxYwY jSwxYw) uLaunch the gateway as a fully detached background process. We spawn ``pythonw.exe -m hermes_cli.main gateway run`` directly — NOT through a cmd.exe shim — because on Windows a cmd.exe child inherits the parent session's console handle and tends to get reaped when the spawning shell exits. pythonw.exe has no console, and combined with DETACHED_PROCESS | CREATE_NEW_PROCESS_GROUP | CREATE_NO_WINDOW + DEVNULL stdio + a fresh env, the resulting process is independent of whichever shell started it. Arg ``script_path`` is accepted for API symmetry with older callers but ignored — we don't need it now that we go direct. Returns the spawned PID so callers can verify the process actually came up. rrlogsTrzgateway-stdio.logab) buffering)renvrH close_fdsstdinrQrRN)rrOr"rrr rrropenrMPopenDEVNULLrTrpid) rr+rrIrZflagsrlog_dir stray_loglog_fhrVflags_no_breakaways r_spawn_detachedrfssI"%8%:"D+{ (RZZ '; 'C ! "E 2?$%.G MM$M.--I )TQ / 6### (( D 8 88O9 8 88O#  DE )TQ / 6##0 (( D    88O#sH)C7,B7#C7C <C C!D>/,D$ D>$D- )D>=D>ctjj|}|y|jj }|dvry|dvryy)N>ryonyestrueT>rnnoofffalseF)r"rrrr!)rr?r;s r_install_choice_from_envrpsK **.. C { IIK   E // 00 rctd}td}||}||}||||fSddlm}| |dd}| |dd}||fS)zEReturn (start_now, start_on_login), asking before any UAC escalation.rrr prompt_yes_noz$Start the gateway now after install?TzGStart the gateway automatically on Windows login with a Scheduled Task?)rphermes_cli.setuprs)rr env_start_nowenv_start_on_loginrss r_prompt_install_choicesrws --OPM12YZ! +!;.((.!"H$O & U   n $$rc td|jddt|}td|td|ddlm}m}t |}|r7tddjtt|d ty|r$t}td |d ty|}|rd |d nd } tdtd| ty)z>Install the Startup-folder fallback and optionally start once.$↻ Scheduled Task install blocked (r#) — using Startup folder fallback"✓ Installed Windows login item:  Task script: find_gateway_pidsri"✓ Gateway already running (PID: , rudirect spawn (PID hermes  gateway starthermes gateway start8ℹ Startup fallback installed; gateway not started now. Start manually with: N) r}r<r2rjr~rilistrmapr%rf_report_gateway_start_print_next_steps) rrr]rr~ri running_pidsr`rm start_cmds r_install_startup_fallbackrs 01B1B1DQ1G0HHk lm "; /E .ug 67 OK= )* C)+,L 2499Sl=S3T2UUVWX  23%q9:  #n =Hgk].9Nd  HI ' {34r)rrelevated_handoffc 0tt||\}}|swtd|rSt}|r-tddj t t |dyt}td|dytdtdyt}t}ts|s}d d l m }td td |d dr?t|||r%td|r tdytdytdn tdt||dyt!||\} } | rtd| td|td|rgt}|r7tddj t t |dt#yt}td|dt#ytdtdt#yt%| rtsd d l m }td| j'd dtd |d dr?t|||r%td|r tdytdytdn tdt)d| rtd| j'd dt+|} td| td|d d lm} m} t3| }|r7tddj t t |dt#y|r$t}td|dt#y| }|rd!|d"nd#}td$td%|t#yt5d&| )'u/Install the gateway as a Windows Scheduled Task (with Startup fallback). Idempotent: re-running updates the task to point at the current python/ project paths. ``force`` is accepted for API parity with ``launchd_install`` / ``systemd_install`` but isn't needed — we always reconcile. u-ℹ Skipped Windows login auto-start install.rrruru<ℹ Gateway not started and no auto-start service installed.z& Run later with: hermes gateway startNrrruS↻ Scheduled Task install may need administrator approval on this Windows account.zZ UAC is Windows' admin approval prompt; it is needed to create/update the Scheduled Task. Open the UAC prompt now?F)rrru4✓ Launched elevated Hermes gateway install prompt.zY Approve the Windows UAC prompt; the elevated install will start the gateway afterwards.A Approve the Windows UAC prompt, then run: hermes gateway statusuR⚠ Falling back to Startup folder because elevation was unavailable or cancelled.z4 Skipped elevation. Falling back to Startup folder.z#administrator approval was not usedu✓ r|u3ℹ Gateway auto-start installed for Windows login.uℹ Gateway not started now.z+ Start manually with: hermes gateway startu9↻ Scheduled Task install needs administrator approval (rAryrzr{r}rrrrrz Windows gateway install failed: )rrwr} _gateway_pidsrrr%rfrrrrgrtrsrrr.rrar<r^r2rjr~rirr)rrrrrr`rrrsokr]rr~rirmrs rrrs 7 > RI~  => (?L:499SlE[;\:]]^_`  &'%(:3%q&AB  P Q : ;I$&K !*:2 cd jk 5u ='eyYghLMuv]^ f g H I!+y:_`(K@JB  VHo  }-. CD (?L:499SlE[;\:]]^_`  &'%(:3%q&AB  0 1 ? @  )=)?2 I&J[J[J]^_J`Iaabcd jk 5u ='eyYghLMuv]^ f g H IF# 4V5F5F5H5K4LLopq&{3 25':;  }-. G-/0  6tyyS,AW7X6YYZ[ \ !#C !$6se1"= >  '.KAL'+n=RhI L M +I;7 8 9&B CCrcddlm}tj|z}tj|krAt|}|r|Stj|tj|krAgS)uPoll for a live gateway process for up to ``timeout_s`` seconds. Returns the list of PIDs found. Empty list means nothing came up in time — the caller should surface that to the user as a failed start. rr~)rjr~timersleep) timeout_s interval_sr~deadlinepidss r_wait_for_gateway_readyr~s^ 5yy{Y&H ))+ %'( K : ))+ Irc 0t}|r0td|ddjtt|dytd|dtddd lm}td t|d td t|d y) Nu✓ Gateway started via z (PID: rruu⚠ Launched gateway via z#, but no process detected after 6s.z# Check the log for startup errors:rrz type z\logs\gateway.logz\logs\gateway-stdio.log)rr}rrr%r rr)viarrs rrrs " $D  (WTYYs3~5N4OqQR )#.QRS 345 $0122EFG $0122KLMrcddlm}t|}ttdtdtd|dy)Nrrz Next steps:z; hermes gateway status # Check statusz type z#\logs\gateway.log # View logs)r rrr})rrs rrrs:1()K G - GH GK= E FGrctt}t}|jd}t }t }d}t rtddd|g\}}}|j} |dk(rd}td|nt| rptsfdd l m } td | xsd d td | ddr-trtdtdytdntdntd|d| |df|df|df|dffD]'\} } | jtd| d| )t r|std|yyy#t $rYRwxYw)zKRemove both the Scheduled Task and the Startup-folder fallback, if present.rFrrrrTu✓ Removed Scheduled Task rru;↻ Scheduled Task uninstall needs administrator approval (z access deniedruzS UAC is Windows' admin approval prompt; it is needed to remove the Scheduled Task.ru6✓ Launched elevated Hermes gateway uninstall prompt.rNu;⚠ Elevated uninstall prompt was unavailable or cancelled.z4 Skipped elevation. Scheduled Task was not removed.u#⚠ schtasks /Delete returned code : zWindows login itemzlegacy Windows login itemz Task scriptz Task launcheru ✓ Removed u%⚠ Scheduled Task still registered: )rrrrrris_task_registeredrXrr}rargrtrsrr"FileNotFoundError) rrvbs_script_path startup_entrylegacy_startup_entryscheduled_task_removedr\_outr-r]rsr#labels rrrsI&(K!--f5O*,M57"()T5))LMdC 19%) " / }= > v &/C/E 6 OPVPiZiOjjkl m g h95A-/RS]^STLM 7vRxH I ,- :; m$ /*   e   KKM Lr$0 1 $: 5i[AB%;!   s*!E** E65E6c@tddtg\}}}|dk(S)N/Queryrr)rXr)r\r_errs rrrs&%x &HID$ 19rcftjxstjSr)rr0rrrris_startup_entry_installedrs& ! # * * , U0J0L0S0S0UUrc.txs tS)zGTrue when either the schtasks entry or the Startup fallback is present.)rrrrr is_installedrs   ?#=#??rcttddtdddg\}}}|dk7riSi}|jD]~}|j}|rd|vr|j d\}}}|jj }|j}|dvsb|d k(r|j d |z|||<|S) zDParse ``schtasks /Query /V /FO LIST`` and pull the interesting keys.rrz/Vz/FOLISTr:>status last result last run timelast run resultrr)rXrr<r partitionr! setdefault) r\r,r-infor?linerrr;s rquery_task_statusrs#XumotUTZ$[\ND#s qy D~~ "yy{s$ s+ Qiik!  O Om# 159!S  " Krc.ddlm}t|S)z3Reuse the cross-platform PID scanner in gateway.py.rr)rjr~rrs rrrs4 !# $$rc  ddl}ddlm}m}ddlm}t |}|dz }|dz }|dz }|dz d z }t t d dGd } |j} d} | rl |j|jd } | jdt| jdnd} t d| ddd|d| dnt d| ddd|d}|j}|r( ddl m}||}t d| |dd|nt d| ddd|d} ddl m}|d}t d| |dudd |||n| }|4 dd"l m}t#||}t d#| |dd$|d%|nt d#| ddd'|jr |j|jd }|jd(}|jd)}d*}|r_ |j%|j'd+d,}|j)|j*}t||z j-}d-|d.}|d/k(}t d0| |dd1||nt d0| ddd3||jr) t/|d45}|j1dd5|j3}|j1t5d|d6z |j7j9d d78j;} dddt=d9t? Dd*}!|!rk |j|!}"|"jd:d;}#|"jdd;}$|"jd| |&dd?|#d@|$dA|%nt d>| dddD|yyyt d>| dddF|y#t$r#} t d| ddd| Yd} ~ ;d} ~ wwxYw#t$r#} t d| ddd| Yd} ~ d} ~ wwxYw#t$r#} t d| ddd!| Yd} ~ d} ~ wwxYw#t$r#} t d#| ddd&| Yd} ~ d} ~ wwxYw#t$rYSwxYw#t$r#} t d0| ddd2| Yd} ~ Fd} ~ wwxYw#1swYxYw#t$rt d>| dddB|!ddCYJwxYw#t$r"} t d>| dddE| Yd} ~ yd} ~ wwxYw)HuPrint PASS/FAIL per individual probe of gateway liveness. The default ``status`` output collapses several signals into one ✓ / ✗ line, which is great when they agree and confusing when they don't. The deep-probe block shows each underlying check independently so the user can see exactly which signal is wrong. Probes: [1] PID file present [2] Lock file present and held by some process [3] gateway.status.get_running_pid() returns a PID [4] _pid_exists(pid) — OS confirms the process is alive [5] gateway_state.json exists and parses (and is fresh-ish) [6] Last lifecycle event in gateway-exit-diag.log rN)datetimetimezonerz gateway.pidz gateway.lockzgateway_state.jsonrWzgateway-exit-diag.logz Deep probes:c|rdSdS)NPASSFAILr)rs r_markz!_print_deep_probes.._mark"sv''rrr9r`z [1] T4sz PID file present: z (pid=ruFz# PID file present but unreadable: z PID file missing: )is_gateway_runtime_lock_activez [2] z$ Lock file held by a live process: z Could not probe lock: z Lock file missing: get_running_pid) cleanup_stalez [3] z get_running_pid() => z get_running_pid() raised: ) _pid_existsz [4] z _pid_exists(z) => z _pid_exists raised: z No candidate PID to verify gateway_state updated_atrBZz+00:00z (updated zs ago)runningz [5] z gateway_state.json state=z- gateway_state.json present but unreadable: z gateway_state.json missing: rbir9)rFc3BK|]}|js|ywr)r)rlns rrz%_print_deep_probes..vsIbbhhjrIstag?ts)z gateway.startz [6] z Last lifecycle event: tag=z pid=z ts=z Last lifecycle line not JSON: xz exit-diag log empty: z exit-diag log unreadable: z exit-diag log missing: )rrZreturnr%) jsonrrr rrr}r0loadsr;rintrgateway.statusrrrrZ fromisoformatr9nowutc total_secondsr]seektellmaxreaddecoder<nextreversed)'rrrrr)pid_path lock_path state_path diag_pathr pid_exists pid_valuedatar lock_held lock_presentr running_pidr candidate_pidralive state_datarrage_str updated_dtr age_secondsrfhsizetail last_eventeventrr`rhealthys' r_print_deep_probesrs +1 ! "Dm#H~%I,,Jv 77I G .("J I V::h00'0BCD040KDHHUO,QUI F5;r**>xjykYZ[ \ uU|B'';H:FGI##%L K E6yAI F5+B//ST]S^_ ` uU|B''-eWU V uU|B''CDE `J$8$8'$8$JKJ&NN?;M# 5JG!)!7!7 8J8J3PX8Y!ZJ",,x||4C"%sZ'7&F&F&H"IK *;-v>G)+B F59R.(CMCTU\T]^ _ uU|B''Ej\RS Oi& P"1 wwyAtd{+,wwy'' 'BMMO  P IHTNI2NJh JJz2E))E3/C))E3/C4-B!%77GF5>""55QRUQVV[\_[``degdhijuU|B//FykRShk uU|B''@ LMs V F5<++NseT U U V K F5<++CC5I J J K M uU|B''CC7KLLM K F5<++A#I J J K$! ` F5<++XY\X]^ _ _ ` P P!hF5<"33ST^_c`cTdSefgh O F5<++GuM N N Os(A*O?&P.)Q42R AS AR;4S > T2 A0S::&T2!A)T T2? P+P&&P+. Q7QQ R &RR  R8R33R8; SS SS S7S22S7:T?T2$T/+T2.T//T22 U;UUc tt}t}t}t }|rIt d|t }|rodD])}||vst d|jd||+n@|r3t}|js t}t d|n t d|r-t ddjtt|d n t d |rNt t d |t d tt d tt|s'|s$|s!t t dt dyyyy)z6Print a status report for the Windows gateway service.u✓ Scheduled Task registered: )rrrz ru"✓ Windows login item installed: u!✗ Gateway service not installedu"✓ Gateway process running (PID: rruu✗ No gateway process detectedz Task name: z Task script: z Startup entry: z To install:z hermes gateway installN)rrrrrr}rtitlerr0rrrr%rr)deeprtask_installedstartup_installedrrrrs rrrsRI')N24 ?D / {;< " E ;$;Bsyy{m2d3i[9: ; &(||~.0E 25':; 12  2499Sd^3L2MQOP /0   $YK01 $%9%;$<=> $%;%=$>?@  "3D  m ()=A"3>rc tt}|r-tddjt t |dyt }t}|sc|saddlm }td|dd s td ytd t }t}|s|std tdyt}td|dy)zCStart the gateway using the canonical detached Windows launch path.rrruNrrru$✗ Gateway service is not installedz0 Install it now so the gateway starts on login?Tz Run: hermes gateway installFru5⚠ Gateway install did not complete in this process.zD If a UAC prompt opened, approve it, then run: hermes gateway startr) rrr}rrr%rrrtrsrrfr)rrrrsr`s rstartrs ?L 2499Sl=S3T2UUVWX')N24 "32 45OQUV 1 2 e+-68&7 I J X Y   C.se156rcL|dkry ddlm}m} ||t j t|dz}t j |kr6||syt jdt j |kr6y#t$rYywxYw#t$rYwxYw)aWrite the planned-stop marker and wait for the gateway PID to exit. Windows cannot deliver POSIX signals to a Python asyncio loop (``loop.add_signal_handler`` raises NotImplementedError), so writing the marker is the ONLY way to ask a running gateway to drain in-flight agents and persist ``resume_pending`` before exit. The gateway's planned-stop watcher thread (gateway/run.py) polls for the marker and drives the same shutdown path the SIGTERM handler would have on POSIX. Returns True if the PID exited within the timeout, False if it didn't (caller should escalate to schtasks /End + taskkill). rF)write_planned_stop_markerr?T?) rrr ImportErrorrr monotonicrr)r` drain_timeoutrrrs r_drain_gateway_pidr s axI !#& ~~#mS"99H .. X %3 3 .. X %      s"BB BB B#"B#c ddlm}t|xsd}t dt |dS#t$rd}Y#wxYw)z3Return a bounded Windows gateway stop grace period.r)_get_restart_drain_timeout>@r)rjrfloatrrmin)r configureds r_windows_stop_drain_timeoutrsIA57?4@ sC D) **  s2 AAc ddlm}m}t j }d}t }|D];}|dks ||k(s||vr|j| ||s-||d|dz }=|S#t$rYywxYw#t$rYZt$rtd|Yrt$r}td|d|Yd }~d }~wwxYw) z 6se< = 6 'uBse4 5 5 6s;A,A;A;, A87A8; CCC&B<<Ccg}||dkDr|j| tD]}|dkDs ||vs|j|  |S#t$rY|SwxYw)zFCollect gateway PIDs for the active profile, preserving primary first.r)rrr) primary_pidrr`s r_collect_gateway_stop_pidsr""snD;? K   ? !CQw3d? C  ! K   K sA A A AActddlm}|}t|d}|t |t }|}t rWtddtg\}}}|dk(rd}n5d|xsd jvrtd |d |jjfd tDt}|rd}td |d|r|r tdytdytdy)uStop the gateway. Writes the planned-stop marker first so the gateway can drain in-flight agents and persist ``resume_pending`` before exit (the gateway's marker-watcher thread picks this up — Windows asyncio can't deliver SIGTERM to the loop, so the marker is our only IPC). Then escalates with bounded Windows process termination against the known gateway PID(s). rrFNz/EndrTz not runningrBu ⚠ schtasks /End returned code rc3,K|] }|vs| ywrr)rr` stop_pidss rrzstop..SsYSCyDXSYs u ✓ Killed z gateway process(es)u%✓ Gateway stopped (drained cleanly)u✓ Gateway stoppedu✗ No gateway was running)rrrr"r rrrXrr!r}rrvr) rr`drained stopped_anyr\rr-rr%s @rstopr(0s.  C*3/IG $S*E*GHK(&%)IJdC 19K 39""3"3"5 5 4TF"SYY[MJ K Y$>$@YY 0 ;F   F8#789  9 : ' ( *+rc(ddlm}tjt ||z}tj|kr?| t sytj |tj|kr?|duxr t S)aBlock until no gateway process is detectable, or the timeout elapses. ``stop()`` can return while the previous gateway is still draining in-flight agents (the drain runs up to the restart-drain timeout). Uses the authoritative ``get_running_pid()`` (lock + liveness + start-time + gateway-shape) plus the now-strict ``_gateway_pids()`` scan so a relaunch never races a still-alive old process. rrNT)rrrr rrr)rrrrs r_wait_for_gateway_absentr*asu/~~#i"<rXr^rargrnrrrrrrrrrrrrrrrrrrr.r2rzr@rrMrOrUrfrprwrrrrrrrrrrrrrrr rrr"r(r*r,rrrr<s6#  # "RZZoMM$$I2==Y%K $> : 0 1 ;DH=;B!&""& !& !&!& !&  !&H9 , 8 E&I I6-'-'-'-' -'  -'`0<'<'<'<' <'  <'~'0J;7t'VX   $2?(*VD.D.*D.NIX ""&%%%%48{D""&" {D {D{D {D  {D  {D|" NH-Ch V@ ,%BNJ(*V7B!H +8 .,b=& r