߲jAUdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlmZddlmZmZmZmZmZmZddlmZmZddlmZmZej>dZ d Z!e jDZ#iZ$d e%d <gZ&d e%d <dZ'd?dZ(d@dZ)dAdZ*dBdZ+dCdZ,dDdZ-dEdZ.dZ/dZ0dZ1dZ2dZ3dZ4dZ5dZ6dZ7da8dZ9dFdZ:d Z;dGd!Zd$Z?d%Z@dZAd&ZBd'ZCd(ZDGd)d*eEZFdId+ZGdJd,ZHdKd-ZIdLd.ZJdMd/ZKdNd0ZL dOd1ZMdPd2ZNdQd3ZOd(d4d5dRd6ZPd(d4d5dRd7ZQejdSdTd8ZSd4d9dUd:ZTdVd;ZUdWd<ZV dXd=ZWdYd>ZXy)Zastate.db file-level health helpers, split out of ``hermes_state.py``. Header probes (application_id / zeroed-file detection), deleted-WAL-sidecar holder scans, quarantine of zeroed databases, ``collect_state_db_stats`` and holder-process classification. Helpers that hermes_state itself imports and calls (``_connect_tracked_db`` & co) are looked up lazily from ``hermes_state`` at call time, so tests that monkeypatch ``hermes_state.`` keep intercepting. ) annotationsN)Path)AnyCallableDictListOptionalTuple)canonical_sqlite_pathread_only_db_uri)FTS_REBUILD_DEFERRAL_KEYstat_db_file_identity hermes_statecd}tjjdk7r t| ddl}|j d}|j f|_d|_|S#tttf$r}t||d}~wwxYw)aBind a non-finalizing reference before opening a writable SQLite handle. A Python container is cleared during interpreter shutdown. An unmatched CPython C reference keeps the exact connection alive through that cleanup, so SQLite cannot checkpoint its lost WAL generation from a finalizer. This deliberately retains the connection and its descriptors until process exit; it does not make already-unlinked WAL data durable after the last fd closes. zWritable SessionDB on a Python without sqlite3 setconfig (< 3.12) requires CPython with ctypes support to retain a quarantined SQLite connection through interpreter shutdown.cpythonrN Py_IncRef) sysimplementationname RuntimeErrorctypes pythonapi py_objectargtypesrestype ImportErrorAttributeErrorOSError)messagerretainexcs 8/home/ubuntu/.hermes/hermes-agent/hermes_state_dbfile.py_prepare_connection_retirementr#$s a  )+7##-!!+.!++- M  1-7#,-s,AA?. A::A?z!'dict[str, tuple[int, int, int]]'_HEADER_PROBE_FDSz 'list[int]'_RETIRED_HEADER_PROBE_FDS) messages_ftsmessages_fts_trigrammessages_fts_cjkcdddlm}|r`tjt5|j d5}|j ||j|cdddcdddSt|} tj|}t5tj|}|P|d|df|j|jfk7r-t j#tj%|dd}|] tj |tj&} tj(|} || j| jfx}t|<tjt5tj*|d||cdddcdddS#1swYnxYwdddy#1swYyxYw#t$rYywxYw#t$r YdddywxYw#t$r t j#|YdddywxYw#1swYnxYw dddy#1swYyxYw)zLock-safe raw read of a possibly-live SQLite database: POSIX preads from a cached, never-closed fd (rebound when the path names a new inode); Windows reads plainly, since advisory-lock cancellation is a POSIX-only hazard.r _IS_WINDOWSrbN)rr+ contextlibsuppressropenseekreadstrosstat_HEADER_PROBE_LOCKr$getst_devst_inor%appendpopO_RDONLYfstatpread) db_pathoffsetlengthr+handlekeystcachedfdfsts r"_pread_db_rangerIMs)   ) '7<<+= ' KK ;;v& ' ' ' g,C WWW  7"&&s+  6!9fQi"8RYY -B-B3-G-J KF > WWWbkk2 hhrl023::szz.J JF&s+   ) 788F1Ivv6 7 7#77 ' ' ' '  77  )00477  7 7 7#7& '7& sF2"F F25F>A*H&;$G  G$5;H&0H H&F& "F22F;> G  G  G!H& G!!H&$H H& H  H&H H&&H/ct|d|S)z[Lock-safe raw header read of a possibly-live SQLite database (see :func:`_pread_db_range`).rrI)r@rBs r"_pread_db_headerrLrs 7Av ..cddlm}|dz}t||}|t||ks|dddk7ryt t j d|||dS)zRapplication_id from the SQLite header, via the lock-safe :func:`_pread_db_header`.r_STATE_DB_APPLICATION_ID_OFFSETNSQLite format 3>I)hermes_state_errorsrPrLlenintstructunpack)r@rPendheaders r"_read_sqlite_application_idr\ws`C )A -C gs +F ~Vs*fSbk=S.S v}}T6*I##NOPQR SSrMc tj|}dDcic]}|tt||z}}|j Dcic] \}}| || c}}Scc}wcc}}w)z>c tj|}t |j|jf|S#t$r;}|jtjtj fvrYd}~yYd}~yd}~wwxYw)uConfirm a `` (deleted)`` /proc fd target really names an orphaned generation, not the CURRENT watched sidecar. The suffix alone is not proof: on OpenZFS a live, still-linked file whose dentry was unhashed is reported as deleted while it is still the very same inode the watched path names. Conversely ``st_nlink == 0`` is not proof of the opposite — a stale generation can keep a surviving hard link (a backup, an operator copy) after the watched path itself is removed or replaced, leaving ``st_nlink >= 1`` on a truly orphaned inode. So compare identity, not link count: only an exact ``(st_dev, st_ino)`` match between the fd and the CURRENT watched path proves they are the same live file. A mismatch, or a watched path that cannot be stat'd at all, means the fd holds a generation the watched path no longer names — the guard keeps failing closed.NFT) r5r6rerrnoENOENTESRCHrzr9r:)fd_pathrxfd_statr!s r"_fd_is_truly_unlinkedrsd'''" ''G VV  99u{{3 3 s9 A=,A88A=c#vKtjdD]}|jsd|d} tj|}|D]N}t j t5|d|}t |tj||fdddPy#t$rYwxYw#1swYlxYww)zVYield ``(pid, readlink target, fd path)`` for every readable ``/proc//fd`` entry.z/procz/proc/z/fd/N)r5listdirisdigitrr/r0rWreadlink)pid_strfd_dirfdsrGrs r"_iter_proc_fd_targetsrs::g& B '#& **V$C BB$$W- B#HAbT*'lBKK$8'AA B B B B     B Bs@0B9BB9&+B- B9 B*'B9)B**B9-B6 2B9r-r.i ct}||Sddl}|jdd}|j|j_|j |j |j|j f|j_|j|j_|j|j|j|j|jf|j_|j|j_|j|j|j|j|jf|j_|a|S)zlibproc's fd-enumeration entry points, loaded once per process. macOS exports these from libSystem, so this process's own handle resolves them; a failure here propagates to the caller's ``except Exception`` and keeps the guard fail-open.NrT) use_errno) _DARWIN_LIBPROCrCDLLc_int proc_listpidsrc_uint32c_void_pr proc_pidinfoc_uint64proc_pidfdinfo)librs r"_darwin_libprocrs C   ++dd+ +C & C"(//6??FOOU[UdUd!eC%||C!'v||V__foo_e_k_k lC!'C#)<<v||V__^d^j^j"kCO JrMcddl}d} |j|}|jtd||}|dkrgS||kr;t j d|dzd|j Dcgc] }|dkDs | c}S|dz}vcc}w)zZEvery pid ``proc_listpids`` will name (the kernel silently omits ones we may not inspect).rNi1A>c #Kddl}t}t|D]8}d} |j|}|j |t d||}|dkrn ||krn|dz}qAB001GHF!!#r+Ev"8:=>?**C**46KLQO**46KLQOQH/0177CAFMMgW`aFr68+ + ,,sEEctjjtjjtj|}|dz|dzfDcic]}|j |}}g}t D]I\}}}}|j|j } | *t|| s7|j||fK|Scc}w)aThe macOS leg of :func:`iter_deleted_sqlite_sidecar_holders`: libproc enumeration matched against the watched sidecar paths, judged by identity. The watched side is resolved with ``os.path.realpath`` because libproc reports the kernel's path for the vnode, while ``os.path.abspath`` does not resolve symlinks -- a textual compare of the two silently misses every sidecar under a symlinked prefix (on macOS ``/var`` itself).r_r`) r5rjrmrkracasefoldrr8rzr;) r@rdrjrsholdersr_fdrrwrrs r"_iter_darwin_sidecar_holdersr3s 77  BGGOOBIIg,>? @D37-1OPt}}$PGP%'G&=&?*"S&(++foo/0  #>x#Q NNC= )* N QsCctjdk(rgSg} tjdk(r t|}|StjjdrVt |}t D]>\}}}t |}d|vs||vst|||s,|j||f@|S#t$r"}tjd||Yd}~|Sd}~wwxYw)a@Return processes holding an unlinked ``state.db-wal`` / ``-shm`` sidecar for *db_path*. Linux enumerates ``/proc//fd`` (using the `` (deleted)`` suffix as a cheap pre-filter); macOS enumerates descriptors through libproc, because a retired generation there keeps its last pathname and no suffix marks it. Either way the verdict is the same identity comparison: the fd must name a watched sidecar path while its ``(st_dev, st_ino)`` no longer matches what that path holds. Windows returns ``[]`` -- it cannot unlink a held sidecar, so no retired generation can exist; any other platform returns ``[]`` as before. Includes this process: on the open/write refuse path the in-process writer holding the orphan inode must not mint a replacement WAL (``_foreign_state_db_holders`` skips this PID).win32darwinlinuxz (deleted)z)deleted-WAL holder scan failed for %s: %sN) rplatformr startswithrurr rr; Exceptionloggerdebug)r@rrsrrr canonicalr!s r"#iter_deleted_sqlite_sidecar_holdersrFs ||w %'G P <<8 #27;G N\\ $ $W -3GrWr9r:)rwwantedrnamesrrEs r"_own_descriptor_for_identityrs  8_F. JJv&E !D<<> XXc$i( 299%/4y  !      s#BB BB B*)B*c tj}|j|jdz}d} t |d5}||krS||t t ||z }|sn6|j||j||t|z }||krS|jtj|jddd||k7r1|jdt!d|jd|d |d tj"|||j||j%d S#1swYsxYw#t$r|jdwxYw) aStream ``size`` bytes via ``read(offset, length)`` into ``dest`` (temp file, fsync, rename). A short read raises ``RetiredGenerationCaptureError``: a truncated copy with a valid-looking manifest would let the caller settle the handle while the unlinked inode still dies at exit.z.partrwbNT) missing_okzshort read copying :  of uZ bytes — the retired generation is NOT fully captured; the handle stays open for a retry)filebytessha256)hashlibr with_namerr1min_CAPTURE_CHUNK_BYTESwriteupdaterVflushr5rfilenorunlinkrr hexdigest)r3destrdigestpartrAoutchunks r" _copy_rangersV ^^ F >>$))g- .D F  $  #4-VS)=tf}%MN %  e$#e*$ 4- IIK HHSZZ\ " #~ t $+!$))Bvhd4&AG G  JJtTII&:J:J:L MM) # #  t $ s* E AE3EE E E E)c&tfd||S)zIpread ``fd`` (a descriptor SQLite owns; never closed here) into ``dest``.c2tj||SN)r5r?)rArBrGs r"z"_copy_descriptor..sbhhr66.JrMrr)rGrrs` r"_copy_descriptorrs JDW[ \\rMc&tfd||S)zZCopy the live main file through the lock-safe cached descriptor (see ``_pread_db_range``).ct||SrrK)rArBr@s r"rz"_copy_main_image..sogvv.VrMrr)r@rrs` r"_copy_main_imagers VX\cg hhrMc :t|tks|dddk7rddiStjd|ddd}ddlm}d d d |d d }|j Dcic]%\}}|tjd|||dzd'}}}d|dk(rdn|d|Scc}}w)NrRrSvalidFz>HrrOr<\)change_counter page_count user_versionapplication_idversion_valid_forrTrQTr-i)r page_size)rV_SQLITE_HEADER_BYTESrXrYrUrPrc)r[ raw_page_sizerPfieldsroffparseds r"_parse_sqlite_headerrs 6{))VCR[.retired-wal--/`` and holds the retired ``-wal`` (and ``-shm`` when still ours), the main image (or its header past the size cap) and ``manifest.json`` with identities, sizes, digests and the sidecar generation found at the path at capture time. Nothing is merged: whether those frames belong on top of the main file is the operator's decision. Raises :class:`RetiredGenerationCaptureError` when the exact generation cannot be located or written; no descriptor is ever closed, moved or truncated. r_rz(no recorded WAL generation identity for z"; refusing to guess it by pathnameNz3this process no longer holds the retired WAL inode rzcannot stat the retired WAL of r %Y%m%d-%H%M%S-rz.partialr-TFparentsexist_okz%Y-%m-%dT%H:%M:%SZrwrzFrames in the captured WAL were committed by the retired generation. Whether they belong on top of the main file now at the path is an operator decision; inspect the copied image with `hermes sessions recover --inspect-only` first.) versiondatabasetriggerr captured_atpythonsqlitewalshmpath_generation_at_capturenoter`r z%cannot read the main image header of )rwrr[modecopiedz.header header_only)r#rrmain)atomic_json_write) sort_keys) ignore_errorsz.could not write the retired WAL generation of z under )1rrr8rrr5r>st_sizerrRETIRED_GENERATION_DIR_SUFFIXtimestrftimegmtimegetpidrexistsmkdir#RETIRED_GENERATION_MANIFEST_VERSIONr4rrrsqlite3sqlite_versionlistrrhrcr/r0rIr r6rbr'RETIRED_GENERATION_MAIN_IMAGE_MAX_BYTESrr write_bytesrrVutilsr'RETIRED_GENERATION_MANIFESTrparentshutilrmtree)r@sidecar_identityr wal_identitywal_fdwal_sizer!stemfinalnstagingrergmanifest shm_identityshm_fdr[ main_sizer& header_filer's r"capture_retired_wal_generationrJs7mG)--f5;/2WX_W`0ab bGGG$,, ,01G1P1VTV,W,_[_(1=QRX=Y [ ? ? DKK kX k)9'7W\\CY`i)j k!W\\I%=>K  # #F +  $ KK]1A1AVK U+'$??UYZG 7E"ELL! L i+.MgYVXY\X],^_ehhi0+i _ _. ) gT2 h gT2+sg 4? 4 c} c\b cc 4 CDH Js4y3F334s">A#"A#c |jsy|jddlm}m}|s ||ry||t d||S#t $rYywxYw)uFirst ``probe_bytes`` of *path* read WITHOUT opening a SQLite connection, or None when the probe must not run: special files (a FIFO would block), unreadable paths, or — unless ``force`` — a path this process already has a connection to (``close()`` cancels every POSIX lock, even a running VACUUM's EXCLUSIVE; see #97568). ``force=True`` only for offline files (quarantined copies, snapshots).Nr)has_live_connectionread_header_bytes_preopenrR)rBforce)is_filer6rOrTrUmaxr)rj probe_bytesrVrTrUs r"_preopen_headerrZNsV ||~ ^,T2(c"k6JRWXX sA "A A AAFrYrVctjt5ddlm}||||cdddS#1swYnxYwt |||}|duxr&|j d xrtd|DS)zDetect the zeroed state.db signature (0-byte or NUL header). Prefers ``hermes_cli.backup.is_zeroed_sqlite_file``; this copy keeps SessionDB openable without the CLI package in constrained embed paths.r)is_zeroed_sqlite_filer[NSQLite format 3c3&K|] }|dk( ywrNr).0bs r" z%is_zeroed_state_db..hsOe[\PQUVPVOes)r/r0rhermes_cli.backupr]rZrall)rjrYrVr]heads r"is_zeroed_state_dbrg_sx   Y 'Q;$T{%PQQQ 4e 4D t  eDOO4F$G G eCOe`dOeLees5>cLt|||}|duxr|jd S)zA pre-existing state.db whose first page is not SQLite: 0-byte, NUL, or clobbered page 0 (#102198). Zeroed files are the subset :func:`is_zeroed_state_db` names.Nr^)rZr)rjrYrVrfs r"!has_invalid_sqlite_header_preopenriks/ 4e 4D t  GDOO4F$G GGrMc# Kddl}|j|jdz}|jj dd|j d d} |j dk(rddl fd  fd } fd }nddl fd } fd }tj|z}|s |d}|s | |r| jy#t$r1tj|k\rYAtjdY[wxYw#ttf$rY_wxYw# jwxYw# |rn#ttf$rYnwxYw jw# jwxYwxYww)z8Acquire the cross-process lock for path.quarantine.lock.rNz.quarantine.lockTrza+bFWindowscjjdjj|dy)Nrr-)r2lockingr)r#rCmsvcrts r"_lockz,quarantine_cross_process_lock.._lock}s$ Av}}a8rMc(jSr)LK_NBLCKrornsr"rz/quarantine_cross_process_lock..sfoo 6rMc(jSr)LK_UNLCKrrsr"rz/quarantine_cross_process_lock..seFOO4rMcrjjjjzSr)flockrLOCK_EXLOCK_NBfcntlrCsr"rz/quarantine_cross_process_lock..s% FMMOU]]U]]=Z [rMcXjjjSr)rvrLOCK_UNrysr"rz/quarantine_cross_process_lock..sekk&--/5==IrMg{Gz?)rrrr:r1r1systemrnrzr, monotonicrsleeprr) rjtimeoutr lock_pathacquired _try_lock_unlockdeadlinerorzrCrns @@@@r"quarantine_cross_process_lockrrsWtyy+==>I 4$7 ^^E "FH ??  )  97I4G [IIG>>#g- "    LLN ">>#x/ 5! "(    LLN   (    LLNFLLNsAF AE. C7E:E? DF  D9E;DEDED(%D+'D((D++D==F F E  E2 EE2EE2!F2FFF )already_lockedcfd}|r|St5}|s tjd dddy|cdddS#1swYyxYw)aMove a non-SQLite state.db (zeroed or clobbered page 0) aside with its -wal/-shm sidecars, preserving bytes; return the quarantine path. A cross-process lock stops two concurrent startups racing: the second re-checks under the lock and finds the file gone (or fresh).c jstjdytstjdyt rdnd} t j d}jd|d|dtj}j|d }d }|jr-|d z }j|d|d }|jr- j|d D]r}tt!|z}|js+t#j$t5|jtt!||zdddt|S#t$rd}YwxYw#t$r!}tjd |Yd}~yd}~wwxYw#1swYxYw)Nz@quarantine_invalid_state_db: %s already moved by another processzpquarantine_invalid_state_db: %s is no longer invalid (another process quarantined it and a fresh DB was created)zeroednotadbrunknown.rz.bakrr-z#Failed to quarantine invalid %s: %sr^)r0rinforirgr,r-rrr5r/rrenamerrrr4r/r0) kindtsrArrCr!residerjs r"_do_quarantinez3quarantine_invalid_state_db.._do_quarantines{{} KKZ\` a06 KKMNR T-d3x /B))AdV1RD"))+7~~dm, kkm FA>>TF!A3d"34Dkkm  KK ' :FD F*+D{{}((1:KKSY%7 89:: :  % B   LL>c J  ::s6E7-F 'F67 FF F3F..F36F? uMquarantine lock for %s not acquired within 5s — refusing to quarantine without the cross-process lock. The invalid file is left in place. If sessions fail to load, run `hermes sessions recover --source --inspect-only`, or restore a snapshot with `/snapshot list` / `/snapshot restore ` (terminal `hermes` chat only).N)rrr)rjrrrs` r"quarantine_invalid_state_dbrsf> &t ,   LLf           sAAAcH ddlm}tjd}t j t 5tt|dz}|jr|jjnd|d<ddd |t|t|dd d$d%fd d$d&fd d' fd }  d|d< d|d<|d|d|d|dz|d< d|d<d}| t|nd|d< d|d< d|d<t j t5j!dt"j%Dchc]}|d }}t"D cic]} | | |v c} |d<ddd|d|d<|dx|d<} |dx|d<} | d n| xsd| k|d!<t j t5j!d"t&fj)}|rt+j,|dnd} t/| tr| |d#<dddt j t5j1ddd|S#1swYxYw#t$r#}tjd |||cYd}~Sd}~wwxYwcc}wcc} w#1swY1xYw#1swYxYw#1swY|SxYw#t j t5j1dddw#1swYwxYwxYw)(u*Best-effort, strictly read-only stats snapshot of a state.db file: ``mode=ro`` with a short timeout so it can run against a *live* database without taking a write lock. Every field is collected independently (a failed pragma/SELECT yields ``None`` for it); never raises. Deliberately does NOT instantiate :class:`SessionDB` — its constructor runs DDL. ``wal_size_bytes`` is 0 when the sidecar is absent; ``fts_storage_version`` None means the legacy inline layout; ``fts_rebuild_deferral`` is the durable blocked-repair diagnostic.r)rR)rr freelist_countlogical_size_byteswal_size_bytes journal_modemessagessessions fts_tablesfts_storage_versionfts_rebuild_pendingfts_rebuild_high_waterfts_rebuild_progressfts_rebuild_deferralr_rNTg@)rMurirz4collect_state_db_stats: cannot open %s read-only: %scv j||j}|r|dSdS#t$rYywxYw)Nr)executefetchoner)sqlparamsrowconns r"_scalarz'collect_state_db_stats.._scalarsD ,,sF+446C 3q6 *d *  s&,, 88c4||}| t|SdSr)rW)rrvaluers r"_intz$collect_state_db_stats.._ints#V$".s5z8D8rMc8 d|fS#t$rYywxYw)Nz*SELECT value FROM state_meta WHERE key = ?)r)rDrs r" _meta_intz)collect_state_db_stats.._meta_ints* DsfM M  s zPRAGMA page_countrzPRAGMA page_sizer rzPRAGMA freelist_countrzPRAGMA journal_moderzSELECT COUNT(*) FROM messagesrzSELECT COUNT(*) FROM sessionsrzISELECT name FROM sqlite_master WHERE type = 'table' AND name IN (?, ?, ?)rrrrFrz2SELECT value FROM state_meta WHERE key = ? LIMIT 1r)r)rr4returnr)rr4r Optional[int])rDr4rr)rrRdictfromkeysr/r0rrr4r0r6r*r rrrr_FTS_TABLE_NAMESfetchallr rjsonloads isinstancer)r@rRstatswal_pathr!rjmrrt high_waterprogressrrrrs @@@r"collect_state_db_statsrs/1 MM+RSE   W %VG v-.=E__=N(--/"9"9TUV##3G#"? * ++->Btn !@Aj !@Aj  + N'+||[ (""*(*.SV.E.=M"Mq1qEz>"ME,   N (11F'G#$7@AY7ZZ&'*3<=S3TT$%0:0BuUVZdHd#$   + 7,,S 8:<.#N  N N 7 7  L  +  JJL   sAI5J;BK!='J;$ J10 J;: J6J; AK!"AK9K!K5I? J. J)#J.)J.1 J;;KK!K K!K!L!;L L!L L!c  tjjt|}tj dk(r_tj |}|j|jf}ttDchc]\}}}}||k(s|c}}}}Stj jdsyttD chc]\}}} ||k(s |c} }}Scc}}}}wcc} }}w#t$rYywxYw)zBest-effort count of distinct PIDs holding ``db_path`` open (``/proc/*/fd`` on Linux, libproc on macOS); ``None`` on any error or other host, never raises. Uninspectable processes (other users' without root) are skipped, so this is a lower bound.rrN)r5rjrmr4rrr6r9r:rVrrrr) r@rrErwrr_pathrglink_fd_paths r"count_db_holdersrs !!#g,/ <<8 #B 299-H:Q:Sii 6S%W\`hWhij j||&&w/3H3J]]/CxdV\nC]^^j^ sHAC+C+ C:C:<C:C3 C3 "C:+C:: DDc,|dvxr||k\xr|xrd|vS)z9Pure safety predicate for the narrow Desktop holder reap.)rr- ESTABLISHEDr)ppid age_secondsmin_age_secondsephemeral_backendconnection_statusess r""_is_inactive_orphan_desktop_holderr(s2 FN 9{o= 9BS 9%88:rMctjjtjjtj|}||dz|dzht t jfd|DS)zAReturn unique PIDs proven to hold this DB or one of its sidecars.r_r`c3PK|]\}}|dkDs t|vs|ywr`)r )rarrjrss r"rcz1_concrete_state_db_holder_pids..3s0\Ta4I$4OSZ4Z\s & &&)r5rjnormcaserkrar5rr)r@r canonical_dbrss @r"_concrete_state_db_holder_pidsr/sm77##BGGOOBIIg4F$GHL\F2L64IJG  \$\\ ]]rM)r@rrArWrBrWr'Optional[bytes]')r@rrBrWrr)r@rr'Optional[int]')r@rrDict[str, tuple])rzDict[str, str])rwz'Tuple[int, int]'rxr4rbool)rr4rxr4rr)r List[int])rList[Tuple[int, str]])rNone)rjrrr)rr)r3z%Callable[[int, int], Optional[bytes]]rrrrWrDict[str, Any])rGrWrrrrWrr)r@rrrrrWrr)r[rrr)r=rrr4rrr)rjrrYrWrVrrzOptional[bytes])rjrrYrWrVrrr)g@)rjrrfloat)rjrrrrzOptional[Path])r@rrr)r@rrr) rrWrrrrrrrz List[str]rr)r@rrrrr)Yr __future__rr/r|rrloggingr5r;r3rXr threadingr,pathlibrtypingrrrrr r hermes_state_holdersr r hermes_state_commonr rrb getLoggerrr#Lockr7r$__annotations__r%rrIrLr\rhrurzrrrrrrrrrrrrrrrrrr+r9r2r6rr rrrrrrrrrJrRrZrgricontextmanagerrrrrrrrrMr"rs #     ==H   > *F$Y^^%7949)+;+O"J/ TT.BW2 B4 , ,D&<A*!0-&'# +<'&YLY 4N@] i bV"2V=@V Vr d ":=E fIL[`H %%PGL. bFR&::>:U^:cg:]rM