+ jHjT"Rt^RIHt^RIHt^RIt^RIt^RIt^RIt^RI t ^RI H t ]P!] 4t^tRtRRltRR ltR R ltR R ltRRltRRltRRlt!RR4tRRltRRltR#)aBounded home maintenance after an installed revision changes. A per-install, per-profile record and lock remain because config migrations must not retry a broken migration on every launch, and the full SQLite integrity guard is too expensive to run every time. Steps still own their idempotence and rollback; failure is recorded until the next revision (or an explicit post-update run). PM owns runtime diagnosis, not this record. ) annotations)install_state_dirN)PathiXc V^8dQhRRRR/#)rootrreturn str | None)formats">/home/ubuntu/.hermes/hermes-agent/hermes_cli/boot_bootstrap.py __annotate__r s****c @\4pVfR#\P!VR\V4RR.RRRR^ RR 7pTP ^8wdR#TPP4p\T4^8dT#R# \\P 3dR#i;i) uThe commit SHA of the checkout at ``root``. Asks git, rather than reimplementing it: parsing ``.git`` by hand (worktree gitfiles, symbolic HEAD, packed-refs, commondir) is a reimplementation of ``git rev-parse HEAD`` that reftable breaks wholesale. The managed git comes first, a PATH git second; with neither, the answer is None and boot carries on — fail-open. Cost: one ~10ms subprocess. Only checkouts pay it — a sealed tree reads its stamp and never gets here — and it happens once per boot. Nz-Cz rev-parseHEADTutf-8replaceF)capture_outputtextencodingerrorstimeoutcheck) _git_binary subprocessrunstrOSErrorSubprocessError returncodestdoutstriplen)rgitoutshas& r read_git_headr&s -C { nn $D ; 7    ~~ **   Cc(a-3)T) Z// 0s+A>>BBcV^8dQhRR/#)rrr r )r s"r r r =sZrc^RIHpV!R4pVe$VPe\VP4#^RIpTPR4# \d!p\ P RT4Rp?L;Rp?ii;i)uThe git to run, or None when this machine has no usable one. pm's pinned git first (the win32 Git-for-Windows package — where it is installed, it is the one whose bash contract the rest of the tree already trusts), then a PATH git. The imports are local: this module is loaded early enough that a module-level import would widen the boot import graph for a lookup most platforms answer from PATH. )installed_packager#Nzpm git lookup failed: %s) pmr)binaryr Exceptionloggerdebugshutilwhich)r) installedexcr/s r rr=sn6(%e,  Y%5%5%Ay''( ( <<  6 /556s4A A7A22A7c V^8dQhRRRR/#r project_rootrrr r )r s"r r r Ss9949J9rc\^RIHp\V4pVR, P4'd \ V4#V!V4pVP R4p\ V\4'd\V4^8dV#VP R4p\ V\4'd V'dV#R#)zWhat code this install is: stamp commit for sealed trees, git HEAD for checkouts, None for broken trees (never bootstrap, never write).)read_install_stampz.gitcommittagN) hermes_cli.stewardr7rexistsr&get isinstancerr")r5r7rstampr8r9s& r current_install_identityr?Ss6  D v T"" t $E YYx F&#3v;!#3  ))E CS#&&338D8rc V^8dQhRRRR/#)rr5rrr )r s"r r r isJJdJtJrch^RIHpV!4;'gRp\V4R, V R2, #)zFEach profile completes its own home maintenance for this installation.)get_active_profile_namedefault bootstrapz.json)hermes_cli.profilesrBr)r5rBnames& r record_pathrGis0; " $ 1 1 D \ *[ 8dV5> IIrc V^8dQhRRRR/#)rpathrrdictr )r s"r r r qs22$242rc\P!\V4PRR74p\ T\4'dT#/# \\ 3d/u#i;i) utf-8-sigr)jsonloadsr read_textr ValueErrorr=rJ)rIdatas& r read_last_knownrSqs[zz$t*.. .DEdD))41r1 Z  s/A A! A!c(V^8dQhRRRRRRRR/#) rrIridentityrresultsrJrNoner )r s"r r r ys(    d t rcTR\RVR\P!R4RV/pVPP RRR7VP VP R,4pVP\P!V^R7R ,R R 7\P!W@4R #) schemaVersionrUbootstrappedAtz%Y-%m-%dT%H:%M:%S%zrVTparentsexist_okz.tmp)indent rrMN) RECORD_SCHEMA_VERSIONtimestrftimeparentmkdir with_namerF write_textrNdumpsosr)rIrUrVpayloadtmps&&& r _write_recordrkys.H$--(=>7 G  KKdT2 ..V+ ,CNN4::ga047'NJJJsrc V^8dQhRRRR/#r4r )r s"r r r s  $ : rc\V4pV'gR#\\V44pVPR4V8XdR#V#)z}The new identity when this install changed since its last bootstrap, else None. None identity (broken tree) never bootstraps.NrU)r?rSrGr<)r5rUknowns& r needs_bootstrapros<( 5H  K 5 6E yy( OrcV]tRt^tRtRRltRRltRRltRR ltR R lt R t R #) _RecordLockuaO_CREAT|O_EXCL existence-as-mutex next to a record file. Losers skip (boot never waits on another process's bootstrap; the steps are idempotent, so a botched winner only costs redundant work later). A stale lock — older than LOCK_STALE_SECONDS — is broken and re-tried once: a crashed winner died before its record write, so re-running is correct. cV^8dQhRR/#)rrecordrr )r s"r r _RecordLock.__annotate__strc bVPVPR,4VnRVnR#)z.lockFN)rerFrIacquired)selfrss&&r __init___RecordLock.__init__s$$$V[[7%:;  rcV^8dQhRR/#rrboolr )r s"r r rts  T rc  rVPPPRRR7\P!VP\P \P ,\P,4p\P!T\P!R\P!4R\P!4/4PR44\P !T4R# \dR#\dR#i;i \P !T4i;i)Tr[Fpid startedAtr)rIrcrdrhopenO_CREATO_EXCLO_WRONLYFileExistsErrorrwriterNrggetpidraencodeclose)rwfds& r _try_create_RecordLock._try_creates  II   " "4$ " ?BJJ$:R[[$HIB   HHRUBIIKdiik$RSZZ[bc d HHRL    HHRLs+BC?A$D? D DDDD6cV^8dQhRR/#r{r )r s"r r rts < <4 >      "!! $    sA22 BBcV^8dQhRR/#)rrrWr )r s"r r rtsrc VP'gR#VPP4RVnR# \dLi;i)NF)rvrIrrrs&r release_RecordLock.releases@}}}   II       s9 AA)rvrIN) __name__ __module__ __qualname____firstlineno____doc__rxrrrr__static_attributes__r rr rqrqs%  < rrqc V^8dQhRRRR/#)rr5rrrJr )r s"r r r sTdrc^RIHp\V4pV'gRR/#\V4p\ V4pVP 4'gRR/#\ V4PR4V8XdRR/VP4#\PRVR,4VPVP4p\W2V4RV/VP4# TP4i;i) z=Bound home maintenance to one attempt per installed revision.) post_updatehomeskippedz lost-racerUz done-by-otherz3home maintenance: code changed to %s, running steps:N N) hermes_clirrorGrqrrSr<rr-info run_stepsBOOT_HOME_STEPSrk)r5rrUrslockrVs& r run_boot_bootstraprs&|,H  ""  &F v D <<>> $$  6 " & &z 2h >O,   I8TW=Y'' (C(CDf0   s"CACC,c V^8dQhRRRR/#)rr5rrrWr )r s"r r r sKK4KDKrc\\V44R# \d"p\P RT4Rp?R#Rp?ii;i)zqThe one call boot paths use. Never raises: a bootstrap problem must not stop the gateway/serve/CLI from starting.z+boot bootstrap failed (continuing boot): %sN)rrr,r-warning)r5r2s& r maybe_run_boot_bootstraprs9K4 -. KDcJJKs A?A)r __future__rpm.environmentsrrNloggingrhrrapathlibr getLoggerrr-r`rr&rr?rGrSrkrorqrrr rr rsz#-      8 $*>,9,J2   ==H.Kr