߲j UdZddlmZddlZddlZddlZddlZddlZddlm Z m Z m Z m Z ejdZdZedzZdZd Zej&d k(rdZdZd ed <dxZxZZnx ddlZeed dddj7ej8j;dZej<ej>ej@cZZZe!eeddse"d ej8dk(sdej8vrdndZ$e e%e%fZ&e e&e e%e%ffZ'ejPZ)iZ*ded<d"dZ+d#dZ,d$dZ-d%dZ.d&dZ/d'dZ0d(d)d Z1d*d!Z2y#e"e#f$r dZdZdxZxZZYwxYw)+uHold a state.db writer's WAL-mode file locks in a form a stray ``close()`` cannot cancel. SQLite protects a live WAL generation with two POSIX advisory locks: a SHARED lock on the main file's lock range and a shared lock on the DMS byte of ``state.db-shm``. A sibling process may checkpoint and unlink ``-wal``/``-shm`` at its close only after taking both EXCLUSIVE. POSIX locks are per process, so any ``open()``/``close()`` of those two files inside the holder — a raw probe, a plugin, a tool reading ``~/.hermes`` — cancels both (sqlite.org/howtocorrupt.html §2.2) and the next foreign close strands the holder on a deleted generation (``DeletedWalGenerationError``). This module adds the same two ranges as *open file description* locks (``F_OFD_SETLK``) on the descriptors SQLite itself holds. OFD locks belong to the description, not the process: a stray ``close()`` elsewhere cannot cancel them, they die with the connection's own descriptor (nothing extra to track or retire), and they conflict with a foreign EXCLUSIVE exactly like SQLite's own, so the sibling's close-time unlink is refused while a guarded handle is open. The guard is lifted before the handle's own close so a true last close still ends the generation normally. No-op on Windows and on runtimes without OFD locks. Ownership model: the guard is a property of the *descriptor*, and a descriptor number is reusable. Each ``hold()`` therefore locks every matching descriptor unconditionally (an OFD re-lock on an already-locked description is idempotent) and ``release()`` unlocks only while another handle in this process still needs the range — tracked by handle count per INODE, not per fd, so a recycled fd number can never be mistaken for a surviving lock. ) annotationsN)DictOptionalSetTuple hermes_statei@intz Optional[int] _F_OFD_SETLK F_OFD_SETLK%Z)linuxdarwin 0123456789fcntlz$fcntl module has no fcntl() callablerbsd@qqihhz@hhqqizDict[Identity, int]_HANDLESctduSN)r ;/home/ubuntu/.hermes/hermes-agent/hermes_state_lockguard.py supportedrSs t ##rctdk(r"tjt||d|tStjt|t||dS)Nrr) _FLOCK_FORMATstructpack _SEEK_SET) lock_typestartlengths r_flockr%Ws< {{=%IyQQ ;;}iE61 MMrc ttJ tj|tt|||y#t$rYywxYw)zPApply a non-blocking OFD lock; False when the range is held EXCLUSIVE elsewhere.FT)rr r%BlockingIOError)fdr"r#r$s r _ofd_lockr)]sJ  !99 9 B fYv&FG  s&7 AAc| tj|}|j|jfS#t$rYywxYwr)osstatOSErrorst_devst_ino)pathsts r _identityr2gs= WWT] IIryy !! s / ;;c#<KdD]u} tj|}|D]W}|jst |} tj |}|j |jf}||vsR||fYyy#t$rYwxYw#t$rYxwxYww)zYield ``(fd, identity)`` for every descriptor of this process on one of *identities* (SQLite's own connection descriptors; the cached header-probe fd too, harmless).)z /proc/self/fdz/dev/fdN)r+listdirr-isdigitintfstatr.r/) identitiesfd_dirnamesnamer(r1idents r _own_fds_forr=os/ JJv&E D<<>TB XXb\YY *E "%i  !     sQBA>!BB B2 B> B B B  B BBBBctj|}i}|ttff|dztdfffD]\}}t |}||||<|S)Nz-shm)r+fspath _SHARED_FIRST _SHARED_SIZE _SHM_DMS_BYTEr2)db_pathbaserangesr0rngr<s r _guard_rangesrHse 99W DFm\:;dVmm]^M_=`a c$  F5M  Mrc|in|}ts|St|} t5tt |D]M\}}||\}}t |t ||s!||vs&||||<tj|ddzt|<O ddd|S#1swY|SxYw#t$r/tjdtj|dY|SwxYw)atLock the guard ranges on every descriptor this process has open on ``state.db`` and its ``-shm``. Returns the record :func:`release` needs; pass it back to extend an existing one (a ``-shm`` minted after open, a reopened connection). Idempotent per handle: an inode already in *held* is re-locked (cheap, covers a new descriptor) without a second handle count.Nrr?z!WAL lock guard unavailable for %sT)exc_info)rrH_LOCKr=setr)_F_RDLCKrgetr-loggerdebugr+r@)rDheldrFr(r<r#r$s rholdrRs 24D ; 7 #F]  A)#f+6 A E &u vR5&9e4>O"(-DK&.ll5!&rus0# --   > * !   77d? E"&L-&&''H'x), =B""="A"A#,,BUBUVbBc"df (- u}}bkk%(Iw56DE E7 LLH48MS[ c? HeCHo %&   " "$N ",*E  (, *+++8i,s'A6E E E