+ jHjl4VRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI Ht^RIHt^RIHt]P&!]4tRtR8tR9tRR] P2P4 23tR] P2P4 2RR 3t!R R ]4tR R ltRRlt RRlt!R:RRllt"RRlt#RRlt$RRlt%RRlt&RRlt'RRlt(R R!lt)R"R#lt*R$R%/R&R'llt+R(R)lt,R*R+lt-R,R-lt.R$R%/R.R/llt/R0R1lt0R2R3lt1R:R4R5llt2R:R6R7llt3R#);uStable macOS TCC anchor for the uv-managed Python interpreter. macOS TCC grants are keyed to the interpreter binary's path; a venv ``bin/python`` that symlinks into uv's store changes identity on every interpreter upgrade. The anchor replaces it with a signed real-file copy, gated on a real boot, with uv's alias names (``python3``, ``python3.N``) materialized as real-file copies too (never symlinks — the #95541 crash shape) and the store's ``libpython*`` hardlinked into ``venv/lib/`` (existing ``LC_RPATH`` already points at ``@executable_path/../lib``). All functions are no-ops off macOS and for non-uv interpreters, and never raise to callers. ) annotationsN)Path) venv_python)atomic_write_textz.tcc-anchor-sourcepython3zpython3.pythonc]tRt^)tRtRtR#)_BootGateFailedz?Staged copy refused to boot; the live venv must stay untouched.N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r @/home/ubuntu/.hermes/hermes-agent/hermes_cli/macos_tcc_anchor.pyr r )sIrr c V^8dQhRRRR/#) source_filerreturnstrr )formats"r __annotate__r-s..t..rcR\PP\V44#)zMFully resolved so symlinked spellings of the same store binary compare equal.)ospathrealpathrrs&r _marker_valuer-s 77  C , --rcV^8dQhRR/#)rrboolr )rs"rrr2s))$)rc2\P!4R8H#)Darwin)platformsystemr rris_macosr&2s ??  ((rc V^8dQhRRRR/#)rrrrr!r )rs"rrr6sGGSGTGrc@aVPRR4o\;QJd#V3Rl\4F 'dK RM RM!V3Rl\44'gR#\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)\/c3,<"TF qS9xK R#5iNr .0marker normalizeds& r %_is_uv_macos_store..8sH2G#2GFTc3,<"TF qS9xK R#5ir,r r-s& rr1r2:sF2E#2Er3)replaceall_STORE_COMMON_MARKERSany_STORE_ROOT_MARKERS)rr0s&@r_is_uv_macos_storer:6sddC(J 3H2GH333H2GH H H 3F2EF33F3F3F2EF FFrc V^8dQhRRRR/#r project_root Path | Nonerr )rs"rrr=s``K`;`rcaVe \V4M-\\4P4P^,o\ V3RlR4R4#)Nc3|<"TF1p\\SV, 44'gK&SV, xK3 R#5ir,)_presentr)r.nroots& rr1_venv_dir..?s,X#4aTTUXAV8W#4s#<<)venvz.venv)r__file__resolveparentsnext)r=rCs&@r _venv_dirrJ=sB!-!94 tH~?U?U?W?_?_`a?bD X#4XZ^ __rc V^8dQhRRRR/#)rrrrr!r )rs"rrrBs//4/D/rcRVP4;'gVP4#r,)is_file is_symlink)rs&rrArABs <<> . .T__..rc V^8dQhRRRR/#)rsrcz str | Pathrr>r )rs"rrrFs  : + rcR\V4pVP4'dV#VP4'gR#\Uu.uF q!V, NK up\ RVP R444,p\ RV4R4#uupi \dR#i;i)z3Return the interpreter binary file at/inside *src*.Nc3j"TF)qPPR4'dK%VxK+ R#5i).dSYMN)rSz.txt)nameendswithr.cs& rr1$_interpreter_file..Ns%@ *!&&//BS2TAA*s"3 3z python3.*c3T"TFqP4'gKVxK R#5ir,)rMrVs& rr1rXQs: 1iikQQ s( ()rrMis_dir_STORE_BIN_NAMESsortedglobrIOSError)rPprB candidatess& r_interpreter_fileraFs S Ayy{{ 88::%56%5!ee%56@ vvk*@ :  : :DAA7 s#BB;BB B&%B&c V^8dQhRRRR/#)rvenv_dirrrz str | Noner )rs"rrrVs77$7:7rc\V4pVP4'd\VPRR74#VR, pVP 4'gR#VP RR7P4p\RT4R4pT'd \T4MRpTe \T4#R# \dR#i;i \dR#i;i) z_Return the interpreter file the venv currently resolves to (symlink target or pyvenv.cfg home).FstrictNz pyvenv.cfg utf-8-sigencodingc3"TFQqP4PR4'gK)VPR4^,P4xKS R#5i)home=N)lower startswith partitionstrip)r.ls& rr1&_interpreter_source..es?\ewwy?S?STZ?[,S!!$**,,es &A.A) rrNrrGr^rM read_text splitlinesrIra)rcvenv_pycfglinesrkinterps& r_interpreter_sourcerzVs(#G we45 5 \ !C ;;== { 3>>@ \e\^` aD(, t $$F ,3v;6$6   s#B9 C 9 CC CCc V^8dQhRRRR/#)rr=r>rztuple[Path, Path, str] | strr )rs"rrrjs 3 3 30L 3rc\4'gR#\V4pVfR#\V4pVe\V4'gR#V\ V4V3#)zR``(venv_dir, venv_py, source)`` for a uv-managed macOS venv, else the skip reason.z not macOSzno venv interpreterz(interpreter not uv-managed (stable path))r&rJrzr:r)r=rcsources& r _managed_venvr~jsN ::&H$  *F ~/779 [*F 22rc V^8dQhRRRR/#)rvenv_binrrr )rs"rrrws##T#d#rcV\, #r,) _MARKER_NAME)rs&r_anchor_markerrws l ""rc$V^8dQhRRRRRR/#)rrrexpectedrrr!r )rs"rrr{s!dcdrc\V4pVP4;'d$VPRR7P4V8H# \dR#i;i)rgrhF)rrMrtrpr^)rrr/s&& r_marker_matchesr{sU H %F~~^^F$4$4k$4$J$P$P$RV^$^^ sA#A AAc$V^8dQhRRRRRR/#)rrrrrNoner )rs"rrrs!DtrcT\\V4\V4\ R2R7R#)zAtomic: a concurrent ensure (update + doctor --fix) must never read a torn marker, which would compare unequal and trigger a spurious reinstall..) tmp_prefixN)rrrr)rrs&&r _write_markerrs&x k""^1%rc V^8dQhRRRR/#)rrrrr )rs"rrrs;;T;d;rcNVPRR7PP#)Fre)rGparentrs&r _store_rootrs"   e  , 3 3 : ::rrefreshFc(V^8dQhRRRRRRRR/#)rrcrrrr!rrr )rs"rrrs/!C!C4!Cd!C!CY]!Crc \V4R, pVP4'gR#VR, pVPRRR7VPR4FpVP 4'gKWEP , pVP 4'gVP4'dV'gKcVP4\P!WV4K R# \dKi;i \dG\P!YV4K \d\PRTRR7Ki;ii;i \d\PRRR7R#i;i) zHardlink (else copy) store ``libpython*`` into ``venv/lib/``. Provision-if-present: a surplus hardlink on a statically-linked build is free; a missed detection is the only way the dylib-not-found crash returns. See #95425. libNTrHexist_okz libpython*z!libpython provision failed for %sexc_infozlibpython provision skipped)rrZmkdirr]rMrTexistsrNunlinkr^rlinkshutilcopy2loggerdebug)rcrrsrc_libdst_librPdsts&&$ r_provision_libpythonrs0+&.G >>  GC dT 2<< -C;;==HH$Czz||s~~//JJL Z!. ZZLL*ZLL!DcTXLYYZ Z C 2T BCs~Arrr )rs"rrrs--{-t-rcVe@\P!\4;_uu_4VPRR7RRR4R#R# +'giR#;i)NT) missing_ok) contextlibsuppressr^r)rs&rrrs>   ) ) OOtO ,* ) ) ) )s A A c(V^8dQhRRRRRRRR/#)rrrrTranchorrr!r )rs"rrrs($c4DrcRp\VRV R2V4p\P!W0V, 4R# \d-p\P RY4\ T4Rp?R#Rp?ii;i)zMaterialize *name* as a real-file copy of *anchor* (atomic rename). Returns False (and warns) on failure: a leftover alias *symlink* to the anchor is the exact crash shape, so callers must know when the alias set is incomplete. Nrz.tcc-Tz(TCC anchor alias %s not materialized: %sF)rrr5r^rwarningr)rrTrrexcs&&& r _copy_aliasrsa !Hx1TF%&A 8_- A4Ms.4 A+!A&&A+c(V^8dQhRRRRRRRR/#)rrrrrr!rr )rs"rrrs)44TXrc\\4pVPRVPR444Rp\ V4FXpW, pV'g-VP 4'gVP4'g\WV4;'dTpKXKZ V# \dLxi;i \dRpKi;i)zXMaterialize uv alias names as real-file copies; True only if every needed one succeeded.c3"TF:p\P!RVP4'gK,VPxK< R#5i)zpython3(\.\d+)?N)re fullmatchrT)r.r_s& rr1'_materialize_aliases..s/ 5qFXZ[Z`Z`9aFAFF5s )AAzpython3*TF) set _ALIAS_NAMESupdater]r^r\rNrr)rrrnamesokrTaliass&&$ r_materialize_aliasesrs  E   $MM*5  Bu  %**,,ELLNN 8??R5C I     B s5'B#B4/B4B4B4# B10B14 CCc$V^8dQhRRRRRR/#)rstagedrrcrr!r )rs"rrrs!&,&,d&,d&,t&,rc H\PP4UUu/uFwr#VR 9gKW#bK ppp\P!\ V4RR.RRRR^VRR7pTP^8wdR#TP;'gR P!4P#4pT'gR#\%TR ,4P'4TP'48H#uuppi \ dmpTP\P\P39d\PRY4R p?R#\PR T4R p?R#R p?i\PdR#i;i \ d\ T4TR ,9u#i;i)aLaunch *staged* and demand encodings + the venv prefix. Runs with ``PYTHONHOME``/``PYTHONPATH`` scrubbed: an inherited PYTHONHOME papers over the very prefix failure this gate exists to catch. ``ENOENT``/``ENOEXEC`` (fixture binaries, foreign arch) mean the binary can't run here at all, so the symlinked venv was equally dead: skip. Anything else (notably ``EACCES`` after our own chmod) is a broken install going live: refuse. z-cz(import encodings, sys; print(sys.prefix)Tzutf-8r5F)capture_outputtextrierrorstimeoutenvcheckz)boot gate skipped: cannot execute %s (%s)Nz)boot gate: staged copy not executable: %srs) PYTHONHOME PYTHONPATH PYTHONSTARTUP__PYVENV_LAUNCHER__)renvironitems subprocessrunrr^errnoENOENTENOEXECrrrTimeoutExpired returncodestdoutrprurrG)rrckvrprocrprinteds&& r_passes_boot_gatersbJJ$$& &DA X X &  ~~ [$ J K     !{{  b'')446G ,GBK ((*h.>.>.@@@9   99u}}5 5 LLDf RBCH  $ $ ,8} ++,sF C'C'*C-60E>- E;8AEEE;6E;:E;> F! F!c$V^8dQhRRRRRR/#)rrcrrrrr )rs"rrrs!d$rc ^RIHp\V4pVPpVP RRR7\ WRR7\ VRV4pV!V4\WP4'g\RV R 24h\P!WS4\WCRR7'd\WA4R #\P!R 4R # \d\PRRR7Li;i \d\#T4hi;i) z@Replace ``bin/python`` with a signed copy, gated on a real boot.)sign_managed_pythonTrrz .python-tcc-zanchor copy signing skippedrzstaged copy at z failed encodings/prefix probeznTCC anchor installed but alias materialization was incomplete; leaving anchor unmarked so the next run retriesN)hermes_cli.macos_signingrrrrrr Exceptionrrrr rr5rrrr)rcrrrvrrs&& r_install_anchorrs<(#G~~H NN4$N/=8^[AH G  )!44!OH:=["\] ] 8% 4 @ @ ( 0 NNN  G LL6L F G  s1 CAC*+C*"C'$C*&C''C**Dc V^8dQhRRRR/#r<r )rs"rrr=s  K ; rcJ\V4p\V\4'dR#Vwr#p\V4pVfR#VP 4'g^\ VP \V44'd9\W%RR7\W24'd\VP V4V#\W%4V# \dLi;i \d"p\PRT4Rp?R#Rp?i\ d"p\PRT4Rp?R#Rp?ii;i)uPin a dylib-complete interpreter anchor for macOS TCC. No-op (None) on non-macOS, without a venv interpreter, or when the interpreter is not uv-managed. Idempotent. Best-effort — None (and logs) if the copy or boot-gate fails; callers must never depend on success. See #95596. NFrz.macOS TCC anchor boot-gate refused install: %sz#macOS TCC anchor install failed: %s)r~ isinstancerrarNrrrrrrr^rr rrr)r=foundrcrvr}rrs& rensure_tcc_anchorr=s , 'E% %Hv#F+K     OGNNMR]D^$_$_   F 33$W^^W=4 . N    GM rztuple[str, str]r )rs"rrr`s  ; / rc.\V4p\V\4'dRV3#Vwr#pVP4'dR\V43#\ V4pVe \ V4MTp\ VPV4'dRMRpV\V43#)aReport the anchor state for ``hermes doctor`` as ``(status, detail)``. ``skip`` = not applicable; ``active`` = pinned at a stable real-file anchor; ``stale`` = pinned but the interpreter changed since the last copy; ``missing`` = uv-managed with no anchor. skipmissingactivestale)r~rrrNrarrr)r=r_venvrvr}rrstatuss& rtcc_anchor_stater`s , 'E%u}"EF#g,&&#F+K-8-D}[)&H(BBXF 3w< r)zcpython-z-macos-)z /uv/python/z/.hermes-runtime/python/r,)4r __future__rrrloggingrr$rrrsysrpathlibrpm.environmentsrutilsr getLoggerr rrr7r9 version_infominorrr[rr rr&r:rJrArarzr~rrrrrrrrrrrrrr rrr s( #    '#   8 $# /AXc&6&6&<&<%=>? s//5567HMJiJ. )G` /  7( 3#; !Cu!CH"- "%(&,RD F  r