+ jHjV96Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI H t ^RI H t H t HtHtHtHtHtRRutt!RR4t]P,R R /R R ll4tRR RlltRR/RRlltRRltRRltRRltRRltRRltRRRlltR#) aHSettles a ZIP ``hermes update`` swap whose owner died: its journal, owner lock and recovery. Split out of ``_early_recovery`` (stdlib-only, like it). ``_early_recovery.restore_interrupted_pull`` imports this only when the journal exists, so the git-marker repair and its published closure (``RECOVERY_CLOSURE``) never need it. ) annotationsN)Path)_CLAIM_HELD_ERRNOSZIP_SWAP_JOURNAL _keep_aside_lock_fd _project_root_pytest_owns_live_checkoutwrite_durable_textz.hermes-update-stagingz.hermes-update-oldc:]tRt^tRtRtRRRlltRRltRtR#) ZipSwapLockz``zip_swap_owner_lock``'s verdict: truthy only while this process holds the kernel lock. ``reason`` names a refusal: ``busy`` (a live owner holds it) or why no lock could be taken at all. c$V^8dQhRRRRRR/#)ownedboolreasonstrreturnNone)formats"C/home/ubuntu/.hermes/hermes-agent/hermes_cli/_early_recovery_zip.py __annotate__ZipSwapLock.__annotate__$s!00d0C00c "WuVnVnR#Nrr)selfrrs&&&r__init__ZipSwapLock.__init__$s"' DKrcV^8dQhRR/#)rrrr)rs"rrr's$rc VP#r)r)rs&r__bool__ZipSwapLock.__bool__'s zzrrN)) __name__ __module__ __qualname____firstlineno____doc__ __slots__rr#__static_attributes__rrrr r s $I0rr waitgc V^8dQhRRRR/#)rrootrr-floatr)rs"rrr,s''d'U'rc #"\V4\R,, p\P!V\P\P ,R4p\P!4T,p\PR8XdH^RI p\P!T^\P4TP!Y6P"^4M0^RIpTP'Y7P(TP*,4\R4x\5TR4\P0!T4R# \ d4p\RRT RTP;'gT 24xRp?R#Rp?ii;i \ ddpTP,\.9dE\RR T RTP;'gT 24xRp?\P0!T4R#Rp?MRp?ii;i\P!4T8d(\RR 4x\P0!T4R#\P2!R 4EK \5TR4i;i \P0!T4i;i5i) a{Yields a truthy ``ZipSwapLock`` while this process owns the ZIP swap lock, a falsy one otherwise. The lock file is a stable sidecar: never unlinked, so every process locks the same inode (an unlink lets a waiter keep the old inode while a newcomer locks a fresh one). No lock, no admission: a root where the file cannot be opened or locked refuses with the reason (fail closed).z.lockiFzcannot open the ZIP swap lock z: NTwin32zcannot lock the ZIP swap lock busyg?)rrosopenO_RDWRO_CREATOSErrorr strerrortime monotonicsysplatformmsvcrtlseekSEEK_SETlockingLK_NBLCKfcntlflockLOCK_EXLOCK_NBerrnorclosesleepr)r/r- lock_pathfdexcdeadliner>rCs&$ rzip_swap_owner_lockrN+sT .89I WWY BJJ 6 >>>#d* <<7*!HHRBKK0NN2: KKMMEMM$AB d# # R   = %#A)Bs||ObOb_bNc!dee" 99$66%e/Mi[XZ[^[g[g[n[nknZo-pqq  7 ~~8+!%00  JJt  R   sI3;D;I;B E<I I I#I3; E9(E4.I34E99I3< G*1G%9 G%II3 I%G**+II3.IIII00I3c 0V^8dQhRRRRRRRRRR R R /#) rr/rphaserentrieslistgentempsz dict | Nonerrr)rs"rrrVs@eeeceDeseS^ejnerc^RIp\\V4\, TP R\ P !4RTRTRTRT;'g//44R#)aPublish the swap journal: ``entries`` are ``[name, existed, staged_id, live_id]`` (ids from ``zip_entry_identity``, "" while unknown); ``gen`` is the run's random tag (its backup temps); ``temps`` maps each backup temp the swap created (its file name) to its ``filling`` identity.NpidrSrPrQrT)jsonr rrdumpsr4getpid)r/rPrQrSrTrWs&&&&& rwrite_zip_swap_journalrZVsPtDz$44djj  UC%GWV[VaVa_ab7derfillingFc V^8dQhRRRR/#)rr[rrrr)rs"rrr`sddd#drc\P!V4pTP'gR#TP RTP R\ P !TP4R 2pT'g'\ P!TP4'dT#T RTP RTP 2# \dR#i;i)aThe entry's own identity (lstat, never its target); "" when absent or unidentifiable. The ZIP journal's provenance: recovery deletes only an entry whose identity it recorded when the swap made it (a staging copy, or the live entry its backup links/renames), never a lookalike. A non-directory adds size and mtime: a file deleted and recreated often gets the same inode back. A directory, or a file still being written (``filling``), is ``dev:ino:type`` only: its own size and mtime move while it is being filled.r%:o) r4lstatr8st_inost_devstatS_IFMTst_modeS_ISDIRst_size st_mtime_ns)pathr[stbases&$ rzip_entry_identityrl`s XXd^ 999ii["))Adkk"**&=a%@ ADdll2::664ctfAbjj\QRSUSaSaRb>%00(>(>(DE%&)\\W%4_parse_zip_swap_journal...s:jWiRS:a;M;MWiFT/\N)r%.z..)rrRlenallr)res& rr*_parse_zip_swap_journal..s!1!T"sss1v{ssss:jXYZ[X\^_`a^bdefgdhWi:jsss:jXYZ[X\^_`a^bdefgdhWi:j7jssadD)ss./d/.IssNQYZ[\Y]ossbfnopqnrbrss-C<C< C<)C<,3C< C<?'C<'C<FTrTc3B"TFp\V\4xK R#5irrrs& rrrs-Y.QjC.@.@.r)stagingswapping committed) rWloads ValueErrorrdictgetrRrre fullmatchrvalues) rrWdatarQrSrTrexistedstagedlives & r_parse_zip_swap_journalrsLzz# dD ! !TXXg%6>b%b88I&S gt $ $JsC,@,@ UdfiHjHj 3!!333!! ! ! HHWb !E eT " "##-Y%,,.-Y###-Y%,,.-Y*Y*Y =#ahiahB]$QW =ahikp pp  jsF<F& F#"F#c(V^8dQhRRRRRRRR/#) rriridentityrkept list[Path]rrr)rs"rrrs('''':'$'rc\PPV4'gR#V'd\V4V8Xd\ V4R#VP \ V44R#)zDelete ``path`` only when it is provably the entry the swap recorded; anything else (a later user file at the suffix, a foreign journal's victim) is renamed aside, never deleted (review Z1).N)r4rilexistsrlrappendr)rirrs&&&r_discard_unless_ownedrsC 77??4 &t,84 K%&rc4V^8dQhRRRRRRRRRR R R R R /#)rr/rrPrrSentryztuple[str, bool, str, str]rTzdict[str, str]rrrrr)rs"rrrsA**D**3*?Y*bp*&*+/*rcZVwrgr\PPp W, p \V \ 24\V \ 24rRpVR8XEd T;'g V !V 4pV'dV !V 4'dV 'd\ V 4V 8XgV P4'd\V P4'gFV'd>\ V 4V8Xd.V P4'g\P!W4M"\WV4\P!W4RpMoV'g+V !V 4'dV !V 4'g\WV4RpM>>;K;V;VWZWeWeWg;hjrc V^8dQhRRRR/#)r project_rootz Path | Nonerrr)rs"rrrs<<{<d<rc aaVf \4M \V4oS\, pVP4'd\ S4'dR#\ S4;_uu_4pV'g;VP R8wd*\RVP R2\PR7V'dVP4'g RRR4R#VPRR7p\T4pTf+\R T R 2\PR7RRR4R#TwrgrRp Rp .p \T4Fp \SYgYT 4;'gT p K T 'd=\RRP\!\"T 44 R2\PR7\$\&\& RT R23pTUau.uFPo\(;QJd TT3RlT4F 'gK R M RM!TT3RlT44'gKGS^,NKR ppT 'g T'dNT'd:T 'g2\RRPT4 RT R2\PR7T uuRRR4#TP+R R7RRR4X 'd\R\PR7T # \d3p\R T R 2\PR7Rp?RRR4R#Rp?ii;i \d7pR p \RT ^, RT 2\PR7Rp?EKRp?ii;iuupi +'giL;i)aFinish or roll back a ZIP swap whose owner died; True when the tree changed (relaunch). ``committed``: every rename landed, only backups remain -> drop them (finish). ``swapping``: put each moved-aside entry back and remove entries the swap added (roll back to the old tree, which the venv was built for; ``hermes update`` redoes it). ``staging``: nothing live moved -> drop the staging copies. Either way no ``*.hermes-update-staging``/``-old`` sibling is left to wedge the next run's free-space or dirty-tree checks. A live owner (lock held) is never second-guessed. Provenance (review Z1): a sibling or entry is deleted only when its identity is the one the journal recorded; anything else is kept aside under a ``.hermes-update-kept`` name and reported. NFr3u1⚠ An interrupted ZIP update cannot be settled: r)filez utf-8-sig)encodingu9⚠ Could not read the interrupted ZIP update's journal (z); the next launch retries.u)⚠ The interrupted ZIP update's journal z is unreadable or from another version; it and every `*.hermes-update-old` backup were kept. Put back what each backup replaced (or reinstall), then delete the journal.Tu⚠ Could not settle z" after an interrupted ZIP update: u⚠ An interrupted ZIP update's recovery found entries it could not prove were its own and kept them aside instead of deleting them: z, z,. Delete each once you know it is not yours.rc3<"TF6p\PPSS^,, V 24xK8 R#5i)roN)r4rir)rxrr/s& rr/restore_interrupted_zip_swap..s71i`h[\"''//TAaD[MRSQTBU2V2V`hs>Au$⚠ The interrupted ZIP update left z unsettled; its journal z# stays and the next launch retries.) missing_oku|⚠ A previous ZIP `hermes update` was interrupted mid-swap; the old install was put back. `hermes update` updates it again.)rrrrr rNrprintr<stderr read_textr8rreversedrrymaprrranyr~)rjournalrrrLparsedrPrSrQrTrfailedrrsiblingsr unsettledr/s& ` @rrestore_interrupted_zip_swaprs+2=?\8JD%%G ??   :4 @ @ T " "e/ Eell^STU\_\f\f gGOO-- # "  ##[#9C )- > =gYG==CF:: O# # "$&,"Gg&E r+D%eDQ\\U\'  ??CyySRV?X>YZ..47JJ @ (_rs# (@AU$_   'S''Tedd$:q0'*Zj <<r