+ jHjmRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI H t ^RI H t ^RI H t ^RIt^RIHt] 'd^RIHtR_tRR ltR tR ] R 2tR tRRltRRltR] 2tRRltR] 2tR] 2tRR/RRlltRRltRRlt RR lt!R!R"lt"R#R$lt#R%R&lt$R'R(lt%R)R*lt&R+R,lt'R-R.lt(R`R/R0llt)R1R2lt*R3R4lt+R5t,R6t-R7R8lt.R9R:lt/R;R<lt0R=R>lt1R?R@lt2RARBlt3RCRDlt4RERFlt5RGRHlt6RIRJlt7RKRLlt8RMRNlt9RORPlt:RQRRlt;RSR/RTRUlltRZR[lt?R\R]lt@^R^IAHBtCR#)aayTask workspace lifecycle: scratch/dir/worktree resolution (incl. git worktree creation), post-completion cleanup with containment guards, worker tmux teardown and the first-use scratch-workspace tip. Split out of ``hermes_cli.kanban_db``; origin-resident helpers are reached late-bound via ``_kb`` (import-cycle breaking) so monkeypatching ``kanban_db.`` keeps working. ) annotationsN)Path)Optional) TYPE_CHECKING)release_lsp_clients)Taskc V^8dQhRRRR/#)pathzPath | str | Nonereturnstr)formats"C/home/ubuntu/.hermes/hermes-agent/hermes_cli/kanban_db_workspace.py __annotate__rs O O% O# OcNVe!\P!R\V44#R#)uUnicode-form-insensitive identity for a filesystem path. macOS hands back DECOMPOSED path strings (NFD: ``o`` + U+0308) for names the user typed in composed form (NFC: ``ö``) — a OneDrive/FileProvider path like ``OneDrive-Persönlich`` round-trips through ``git rev-parse --show-toplevel`` as NFD while the DB row holds NFC. Raw ``Path`` equality then reports a real repo root as "not a repo" purely on Unicode form, so every path identity check here goes through this key. NFC) unicodedata normalizer r s&r _path_keyrs%7;6F; D 2NBNrz+('done', 'archived', 'failed', 'cancelled')zgSELECT 1 FROM task_links l JOIN tasks t ON t.id = l.child_id WHERE l.parent_id = ? AND t.status NOT IN z LIMIT 1zJSELECT workspace_kind, workspace_path, branch_name FROM tasks WHERE id = ?c(V^8dQhRRRRRRRR/#) r repo_rootrargsr timeoutintr zsubprocess.CompletedProcessr )rs"rrr7s)Ds7Rrc ^RIHpHpV!V4pVf(\P!RR\ V4.VO^RV4#\P !RR\ V4.VORRRRVR\PVR 7 #) z``git -C repo_root args``; never raises on a non-zero exit. :func:`noninteractive_repo_git_env` (GHSA-7x36-8jrh-v4pw): the dispatcher runs ``worktree add`` unattended, which executes the repo's hooks, ``core.fsmonitor`` and smudge filters. )FILTER_DISCOVERY_FAILEDnoninteractive_repo_git_envgitz-CrTutf-8replaceF)capture_outputtextencodingerrorsrcheckstdinenv)hermes_cli._subprocess_compatrr subprocessCompletedProcessr runDEVNULL)rrrrr r*s&$* r_gitr07s c %i 0C {**E4Y+O$+OQRTVXopp >> c)n,t, GI   rc$V^8dQhRRRRRR/#r connsqlite3.Connectiontask_idr r boolr )rs"rrrLs'QQ1QCQDQrcPVP\V34P4RJ#N)execute_ACTIVE_CHILDREN_SQLfetchoner3r5s&&r_has_active_childrenr=Ls$ <<,wj 9 B B DD PPrz/SELECT 1 FROM tasks WHERE id = ? AND status IN c$V^8dQhRRRRRR/#r2r )rs"rrrUs'OO.OOOrcPVP\V34P4RJ#r8)r9_TERMINAL_TASK_SQLr;r<s&&r_is_terminal_taskrAUs$ <<*WJ 7 @ @ B$ NNrz`SELECT workspace_path FROM tasks WHERE id != ? AND workspace_path IS NOT NULL AND status NOT IN zTSELECT workspace_path FROM tasks WHERE workspace_path IS NOT NULL AND status NOT IN exclude_task_idTc ,V^8dQhRRRRRRRRRR/#) r r3r4r5r keyrBr6r r )rs"rrrgs4 '*14JN rc|V'd'VP\V34P4pM#VP\4P4pVFRpVR,pV'gK\ \ V4P 4PRR74pYr8XgKQR# R# \dKfi;i)workspace_pathFstrictT) r9_OTHER_LIVE_PATHS_SQLfetchall_ANY_LIVE_PATHS_SQLrr expanduserresolveOSError)r3r5rDrBrowsrowother other_keys&&&$ r_conn_uses_pathrSgs||1G:>GGI||/099;$%  !$u+"8"8":"B"B%"B"PQI       s+2B,, B;:B;c V^8dQhRRRR/#)r r3r4r z list[Path]r )rs"rrr{s"4rcl^RIHpV!V4pV'd\V4P4MRp\P !4R, .p\P !4pVP4'dHVP4F3pVP4'gKVPVR, 4K5 .p\4pVFap V P4'gKV P4p Ve W8XdK7W9dK?VPV 4VPV 4Kc V#)aBEvery other board's ``kanban.db``. Raises ``OSError`` when the set is unknown. ``kanban_db_path`` follows ``HERMES_KANBAN_DB`` and would collapse every slug onto the pinned file, so the scan uses the on-disk layout: the default board at ``/kanban.db`` and named boards at ``/kanban/boards//kanban.db``. ) _main_db_fileNz kanban.db) hermes_cli.kanban_db_connectrVrrM_kb kanban_home boards_rootis_diriterdirappendsetis_fileadd) r3rV current_filecurrent candidatesrootchildfoundseenr resolveds & r_sibling_board_db_filesri{s; &L.:d< ((*G//#k12J ?? D {{}}\\^E||~~!!%+"56$EeD||~~ <<>  8#6      X Lrc(V^8dQhRRRRRRRR/#)r db_filerr5r rDr r6r )rs"rrrs(D3STrcVP4R,p\P!VRRR7p\PVn\ WAVRR7VP 4# TP 4i;i)z?mode=roTg?)urirF)rB)as_urisqlite3connectRow row_factoryrSclose)rkr5rDrmrQs&&& r_other_board_uses_pathrtsU .. Z 'C OOCT3 7E#KKusEJ  s "A%%A7c(V^8dQhRRRRRRRR/#) r r3r4r5r r Path | strr Optional[str]r )rs"rrrs,)) )'*)2<))rc\\V4P4PRR74pT'gR#\YT4'dR#\T4pTFp\YaT4'dR#K R# \d-p\ P PRY!T4Rp?R#Rp?ii;i \Pd,p\ P PRY4Rp?R#Rp?ii;i \d,p\ P PRY4Rp?R#Rp?ii;i \\P3d.p\ P PR YaT4Rp?R#Rp?ii;i) a&Why *path* must be kept: ``"shared"``, ``"unknown"``, or None when free. ``gc``, completion and deferred parent cleanup used to ``rmtree`` a shared ``workspace_path`` as soon as one of its tasks went terminal. Compare the resolved path: a row may store ``~`` or a symlinked spelling. The connection covers one board. A ready task on a named board can point at the same directory. If that set of databases cannot be read, refuse the delete (``"unknown"``) and log the board DB that failed, so one broken sibling DB is not reported as a live sharer. FrGz+Cannot resolve workspace %s for task %s: %sNunknownsharedz+Cannot read live workspaces for task %s: %sz)Cannot list kanban boards for task %s: %sz'Cannot read board db %s for task %s: %s) rrrLrMrNrX_logwarningrSroErrorrirt)r3r5r rDexcsiblingsrks&&& r_workspace_in_use_by_otherrsCT --/77u7EF  4# . . / *40 %g<<= 3  FWZ[ == FU  DgS'  HH  97S   s^2BB; C>&D7 B8 !B33B8;C; C66C;> D4 D//D47E?!E::E?c(V^8dQhRRRRRRRR/# r r3r4r5r r rvr r6r )rs"rrrs, '*2< rc >\WV4pVfR#VR8Xd"\PPRW4M \PPRW4\P!WRR\ V4RV/4R# \ PdR#i;i) zJSkip removal and record why, when *path* may still be used by a live task.FrzzVDeferring workspace cleanup for task %s: %s is still used by another non-terminal taskzWDeferring workspace cleanup for task %s: cannot tell whether another task still uses %s!workspace_cleanup_deferred_sharedr reasonT)rrXr{r| _append_eventr ror})r3r5r rs&&& r_defer_shared_workspace_cleanuprs(t SY& 1  ==   s%BBBc(V^8dQhRRRRRRRR/#rr )rs"rrrs,    '* 2<   rc\V4P4pVP4;'d \V4;'d \ WV4#)zDefer removing a linked worktree another live task may still use. Only a real linked worktree is ever removed, so the sharing scan runs just for those. )rrLr[_is_linked_worktree_checkoutr)r3r5r wts&&& r_defer_shared_worktree_cleanuprsN d   B  A A ( , A A +D4 @rc V^8dQhRRRR/#)r r rvr rr )rs"rrrs22 2t2rcd\\\PP V444#)zJAbsolute, ``..``-collapsed, NFC form of *path* WITHOUT following symlinks.)rrosr abspathrs&r _lexical_pathrs  "''//$/0 11rc V^8dQhRRRR/#)r prr ztuple[bool, Optional[str]]r )rs"rrrsHH$H+EHrc a aVPRR7p\T4o .oRT3Rllp\PP RR4P 4pT'dw\T4P4p\P!\4;_uu_4TPpT!TTPRR7TP3R4RRR4\P!4pTPRR7pTeT!TXR\P4.p\P!\4;_uu_4\!TR, R , PRR7P#44pRRR4TFfp \P!\4;_uu_4T P%4'd#T!YgRR T PR 3T P4RRR4Kh SFnwrp Y8XdKTP'T 4'dI\(;QJdT 3R lT 4F 'gK R M RM!T 3R lT 44'dR T 3u#KnKp R # \dR u#i;i +'giEL;i \dRpELi;i +'giEL.;i +'giEKA;i \*dKi;i)aTReturn whether *p* is managed scratch storage and the matching board. *p* must be strictly below a managed root both after resolving symlinks AND lexically (as spelled, without resolving). Resolved containment alone is not enough: when a root is itself a symlink to a broad directory (relocated storage, or a planted link), every path inside the link target would resolve "under" the root, so a scratch task naming such a path directly would get it rmtree'd. Tasks created through the root are spelled through it, so the lexical check keeps them managed. A root's lexical form is accepted both as configured and with its anchor (kanban home, or the override's parent) resolved, so a process spelling a symlinked home by its real path still matches; the managed ``kanban/.../workspaces`` components themselves are never resolved for the lexical check. FrGNc ,V^8dQhRRRRRRRRRR /#) r anchorr anchor_realpartsztuple[str, ...]boardrwr Noner )rs"rr0_managed_scratch_path_info..__annotate__s4   #' 0? HU   rc 2<VP!V!p\P!\4;_uu_4SP VP RR7\ V4\ VP!V!43V34RRR4R# +'giR#;iFrGN)joinpath contextlibsuppressrNr]rMr)rrrrrdrootss&&&& r _add_root-_managed_scratch_path_info.._add_rootsr&   ) ) LL E *t$mK4H4H%4P&QR * ) ) )s AB B HERMES_KANBAN_WORKSPACES_ROOTrkanban workspacesboardsc3`<"TF#pSV8g;'dSPV4xK% R#5ir8)is_relative_to).0lexp_lexs& r -_managed_scratch_path_info..Fs.2FSs ::!5!5c!::ms..T)FN)rr)rMrNrrenvirongetstriprrLrrparentnamerXrY DEFAULT_BOARDlistr\r[rany ValueError)rp_absroverride override_rootoverride_parenthome home_realentriesentryrd lexical_rootsrrrs& @@r_managed_scratch_path_inforse  ' ! E@BE  zz~~=rBHHJHX113   ) )+22O ''u'5##%  * LLL.  $ #;S=N=NO    ) )D8Oh6??u?MUUWXG*E$$W--<<>>(Hejj,)WY^YcYc.- ',"U =  ##D))cc2FS2ccc2FS2//U{"/) ', o (* ) )  * ) ).--   sqI#3I6'J 8J(9J2>K K K7KK# I32I36 J JJ J/ 2 K  KKc$V^8dQhRRRRRR/#)r r3r4r5r r Optional[Path]r )rs"rrrOs"44/4#4.4rcVPRV34P4pV'dVR,R8wgVR,'gR#\VR,4P4#)zRExpanded ``workspace_path`` when the task uses a scratch workspace, else ``None``.z=SELECT workspace_kind, workspace_path FROM tasks WHERE id = ?workspace_kindscratchrFN)r9r;rrL)r3r5rPs&& r_scratch_workspacerOs^ ,,G   hj #&'94C@P/kanban/workspaces``, or ``/kanban/boards//workspaces``). A path equal to a root is not managed (deleting it would wipe every task's scratch dir); ``/kanban``, ``.../logs`` and ``.../boards/`` hold Hermes' own DB and metadata. :func:`_cleanup_workspace` refuses ``rmtree`` outside managed storage — a board ``default_workdir`` on a real source tree paired with ``workspace_kind='scratch'`` would otherwise make task completion delete user data. See #28818. )r)rs&r_is_managed_scratch_pathrZs &a ( ++rc$V^8dQhRRRRRR/#r r3r4r5r r rr )rs"rrrjs"= = /= #= $= rclVP\V34P4pV'gR#VR,pVR,pV\9g V'g\ W4R#\ W4'd$\ PPRW1V4R#VR8Xd>\W4\WV4'g\WVR,4\ W4R#\V4pVP4'd\V4'd`\WV4'gM\!\#V44\$P&!VRR7\ PPR V4M \ PP)R W4\W4\ W4R# \*dR#i;i) aaRemove a task's scratch workspace dir and kill its stale tmux session. Called from :func:`complete_task` after the transaction commits; best-effort so cleanup never blocks completion. ``scratch`` is removed; ``worktree`` only when provably free of work (clean tree, every commit reachable from a remote-tracking ref); ``dir`` is intentionally preserved.NrrFzVDeferring %s workspace cleanup for task %s: active children still need workspace at %sworktree branch_nameT ignore_errorszRemoved scratch workspace: %szRefusing to remove out-of-scratch workspace for task %s: %s (workspace_kind='scratch' but path is outside any kanban-managed workspaces root))r9_WORKSPACE_ROW_SQLr;_REMOVABLE_KINDS_try_cleanup_parent_workspacesr=rXr{debug_cleanup_worker_tmuxr_cleanup_worktree_workspacerr[rrrr shutilrmtreer| Exception)r3r5rPkindr wps&& r_cleanup_workspacerjsZ 7 ll-z:CCE !"23!"23 ' 't +4 9   . . HHNN=t   :   /1$FF+G3};MN *4 9  $Z 99;; (++6tdKK'B0MM"D9HHNN#BBG  6  T+ 't5    s0,F$$F$ F$#2F$AF$CF$$ F32F3c(V^8dQhRRRRRRRR/#)r r5r r rrwr rr )rs"rrrs2F F F F *7F  F rch^RIHpHp\ T4P 4pTP 4'gR#\T4pTeTPR8wdR#TPp\TPRR74\TPRR748XdR#T!\T4\T44'gT!\T44'd#\PPRY4R#TPRR7p\P !4PRR7p T eY8XgT P%T4'd\&P(!T4\-\T44\/TR R \T4^`` branch is deleted with it; custom branches are kept. Best-effort.)_worktree_has_unpushed_commits_worktree_is_dirtyNz.gitFrGz=Preserving worktree for task %s: dirty or unpushed work at %sz;Preserving worktree for task %s: cannot leave %s for %s: %sz rremoverg?z0git worktree remove failed for task %s at %s: %srzRemoved worktree workspace: %swt/branchz-D) hermes_cli.worktree_opsrrrrrLr[_git_common_dirrrrrMr rXr{infocwdrNrrchdirr|rr0 returncodetimesleepstderrstdoutrr startswith) r5r rrrrcommonr worktree_pathrr~resultrs &&& rrrs^9 $Z " " $yy{{  $ >V[[F2 MM RZZuZ- .)I49   ! ) ) ) 7HDHrc V^8dQhRRRR/#rr )rs"rrrs33$3>3rc\VR4#)--git-common-dir)r#rs&rrrs 1 22rc V^8dQhRRRR/#)r r rr rwr )rs"rrrs::d:}:rc2\P!VRR4#)rz--show-current)rXrrs&r_git_current_branchr)s <<h(8 99rc V^8dQhRRRR/#)r r rr r6r )rs"rrrs  t  rc \P!VRRRR4pV'dVP4M.p\V4^8H;'dF\ V^,4P RR7\ V^,4P RR78g#)z{True when *path* is a linked worktree (git-dir differs from common-dir). One ``rev-parse`` call answers both directories. rr"z --git-dirr&FrG)rXr splitlineslenrrM)r rliness& rrrs ,, k3[BT C!$CNN E u:?   U1Xe,U1X0F0Fe0F0TTrc V^8dQhRRRR/#)r r rr r )rs"rrrs$rcrTpVP4'gWP8wdVPpK4V#r8)rr)r rbs& r_nearest_existing_pathr1s+Gnn7nn#<.. Nrc V^8dQhRRRR/#rr )rs"rrrs!!!.!rc\V4PRR7p\V4pVeV#WP8XdR#VPpK2r)r1rMrr)r rbrs& r_repo_root_for_worktree_targetr4sI$T*22%2@G !'*    nn $..rc(V^8dQhRRRRRRRR/#)r rrtargetrr r rr )rs"rrrs(  D $ S T rc.VP4p\V4pVP4'd)Ve%\\V44\V48XdR#VPP RRR7\ W4'dRR\V4V.pMRRRV\V4R.p\V.VO5R^/.worktrees/`` worktree. .worktrees)r;)rr5rr6s&&& r_anchored_worktreer@s$  % /FK8  rrc$V^8dQhRRRRRR/#)r taskrrrwr r=r )rs"rrrs'E"E"dE"mE"O_E"rc 8VP;'gRP4;'gRVP 2pVP'Eg V'dTM\P !4p\P !V4PR4;'gRP4pV'g\RVP RV: R24h\V4P4pVP4'g\RV: RV: R 24h\V4pVf"\RVP R V: RV: R 24h\W`PV4#\VP4P4pVP4'g(\RVP R VP: R 24hVPRR7pVP4'd\!V4'd\#V4p W8XdW3#\%VP&4p V edV R, VP, p \)V PRR74\)V48wd!\+WV4V PRR7V3#Y;'gT3#\V4pVe0\)V4\)V48Xd\W`PV4#\%VP&4pVf(\RVP RVP: R24h\+WgV4Wr3#)ajResolve + materialize a linked git worktree for ``task``. With no ``task.workspace_path`` the anchor is the board's ``default_workdir`` so every worktree lands under a board-owned repo (``/.worktrees/``) instead of the dispatcher's incidental CWD (whatever dir the gateway was launched from); with no anchor configured we fail loudly rather than guess.rrdefault_workdirtask z> has workspace_kind=worktree but no workspace_path, and board z has no default_workdir set. Set a board default workdir (a git repo) or create the task with --workspace worktree:.zboard z default_workdir z4 is not absolute; use an absolute path to a git repoz' has workspace_kind=worktree but board z is not inside a git repoz has non-absolute worktree path z; use an absolute pathFrGr?z worktree path z? is not inside a git repo and does not point at a git repo root)rridrFrXget_current_boardread_board_metadatarrrrL is_absoluterr@rMrrr)r4rrr;) rBrr board_slug board_defaultrr requestedrequested_resolved actual_branch fallback_rootfallbacks &$ r_resolve_worktree_workspacerQs ##))r002EEDGG9oK    #U)>)>)@ 00<@@ARSYYWY``b y!'N+==  m$//1!!##&7 7HI?? "&)  y G. 1-1BB[] ")WWkBBT(()446I  " "DGG9<""%%; =  #**%*8:9EE+I6  '%4 4 7y7G7GH  $$|3dgg=H)))78IFX)IBV!V!)WWkBB.y/?/?@IDGG9OD,?,?+BC4 4  {;  !!rc$V^8dQhRRRRRR/#)r rBrrrwr rr )rs"rrrs!& & D& M& T& rc$VP;'gRpVR8Xd\WR7^,#VR8Xd=VP'g+\P!VR7VP , pEM VR8Xdb\ VP4P4pVP4'g(\RVP RVP: R24hMVR8XdVP'g\RVP R24h\ VP4P4pVP4'g(\RVP RVP: R 24hM\R V 24hVPR R R 7V#) uEResolve (and create if needed) the workspace for a task. ``scratch``: ``/workspaces//`` — path-stable across the dispatcher and every profile worker. ``dir``: ``workspace_path``, created if missing; MUST be absolute (relative paths would resolve against the dispatcher's CWD — confused-deputy traversal). ``worktree``: a linked git worktree; a repo-root ``workspace_path`` anchors ``/.worktrees/``, a concrete path is created/reused, none -> the board's ``default_workdir`` (raises if unset rather than guessing). Persist via ``set_workspace_path``. rr)rrEz! has non-absolute workspace_path z"; workspace paths must be absolutedirz- has workspace_kind=dir but no workspace_pathzR; use an absolute path (relative paths are ambiguous against the dispatcher's CWD)zunknown workspace_kind: Tr ) rrQrFrXworkspaces_rootrFrrLrIrr )rBrrrs&$ rresolve_workspacerVsr    + +)D z*4=a@@ y!4!4!4   e ,tww 6   $$ % 0 0 2}}y A&&))KM  """uTWWI-Z[\ \ $$ % 0 0 2}}y A&&)*NO 3D6:;;GGD4G( Hrc ,V^8dQhRRRRRRRRRR/#) r r3r4r5r columnvaluer rr )rs"rrr<s9VV-VVSVQTVY]Vrc\P!V4;_uu_4VPRV R2W134RRR4R# +'giR#;i)zUPDATE tasks SET z = ? WHERE id = ?N)rXrr9)r3r5rXrYs&&&&r_set_task_columnr[<s< t   (0ABUDTU    s A A c(V^8dQhRRRRRRRR/#) r r3r4r5r r rvr rr )rs"rrrAs0AA/A#AZATXArc2\WR\V44R#)rFNr[r )r3r5r s&&&rset_workspace_pathr_AsT$4c$i@rc(V^8dQhRRRRRRRR/#)r r3r4r5r rr rr )rs"rrrEs0EE,EsEEQUErc2\WR\V44R#)rNr^)r3r5rs&&&rset_branch_namerbEsTM3{3CDr) kanban_db)rrr8)D__doc__ __future__rrrror,rrpathlibrtypingrrrrrhermes_cli.kanban_dbrrr_TERMINAL_STATUSES_SQLr:rr0r=r@rArIrKrSrirtrrrrrrrrrrrrrrrrrrrr#rr)rr1r4r;r@rQrVr[r_rb hermes_clircrXr rrrks#   7)* OG11G0HIb*Q 66L5MN O /02/02QU(B)X:  2 HV4 , = @F R& R ,2J:  "8&"I 3: ! &E"dE"P& D& RV AE (r