+ jHj^C Rt^RIHt^RIt^RIt^RIt^RIHt^RIH t Rt R RRRRR R/R R lllt RRR R/R R llt RRRR/RRllt RRRR/RRlltRRltRRltRRltR RRlltRRRR/RRlltRRltR#)!aR``hermes plugins update`` plus the provenance verbs around it: ``adopt``, ``trust-update-url`` and the read-only ``check-updates``; the dashboard update path shares the same pull/re-clone core. Sibling of :mod:`hermes_cli.plugins_cmd` (the facade re-exports the names other modules use and is imported late here, never at module level). ) annotationsN)Path)Anyc^RIHpV#)z`The facade, read at call time: tests patch ``plugins_cmd.`` and sibling calls must see it. plugins_cmd) hermes_clirrs B/home/ubuntu/.hermes/hermes-agent/hermes_cli/plugins_cmd_update.py_pcr s &  interactiveFforcescan_decision_cbc(V^8dQhRRRRRRRR/#)targetrr boolr returnstr)formats"r __annotate__rs1jjjaej#jGJjr cp\4P4pVPVP/4pVPR4RJd \4P V!V44h^RIHp V PVPV4VR, P4'gvVPR4p \V \4'd V 'g\4P V!44hVeV!4\W VPR4WVR7#VeV!4^RI H p V !WWVR 7#) uShared ``update`` core: refuse pinned checkouts, ``git pull`` (or re-install from the recorded source when the tree carries no ``.git`` — subdirectory installs), record the new revision. Returns the pull output; raises :class:`PluginOperationError` on any refusal. *pinned_msg(install_record)* / *not_git_msg()* build the caller-specific error text. Both paths scan the candidate tree the same way: *force* or a truthy *scan_decision_cb* accepts a caution verdict, nothing accepts a dangerous one.pinnedTplugins_cmd_catalogz.gitsourcerevision)r r) update_plugin)r r r)r _read_install_metadatagetnamePluginOperationErrorrrrefuse_if_installed_removedexists isinstancer_reclone_plugin_updatehermes_cli.plugins_transactionr) r pinned_msg not_git_msg before_pullr r rmetadatainstall_recordcatalogrrs &&&&$$$ r _pull_plugin_updater.su++-H\\&++r2N(#t+e((N)CDD: '' V< VO # # % %##H-&#&&f%,,[]; ;  " M%fn6H6H6T,1V V <  iir c ,V^8dQhRRRRRRRRR R/#) rrrrrprevious_revisionobjectr rrr)rs"r rr6s8II4III[_I58Ir caa ^RIHo \4PVRVVV V3RlR7wrVp\ \4P 4P VP/4P R4;'gR4p\V\4'dTMRp V'd W8XdR#RV R V R , R VR , 2#) aUpdate a subdirectory install by re-cloning its source and atomically replacing the tree. These installs carry no local ``.git``, so the staged replacement also carries user-owned config/data from *target* before publication instead of silently deleting it (#122006). Replacing the tree needs the install core's ``force``; accepting a caution scan is a separate decision (*force* / *scan_decision_cb*), the same as the git-pull path. )_carry_user_filesTc<S!SVR4#Nr) _manifesttreer3rs&&r (_reclone_plugin_update..Fs,=fdD,Qr )r accept_cautionr before_swaprzAlready up to date.zRe-installed from z: :NNz..) hermes_cli.plugins_cmd_catalogr3r _install_plugin_corerrr r!r%) rrr0r r new_targetr6_namerpreviousr3s f&&$$ @r r&r&6sA#&5#=#=)Q $>$ J535//155joorJNNzZ``^`aH$./@#$F$F BHH($ xr(2,r(2, HHr Tc ,V^8dQhRRRRRRRRRR/#) rr!rrrr rr rr)rs"r rrOs122S2$22UY2fj2r c 6aaa^RIHo^RIHp^RIHpVP V4pV'dVPSWSVR7#\TVV3RlV3RlVV3RlTTV'd V!SR4MR R 7p\VS4\4PV4p V PR 4;'g VPp \4PW4p V 'db^R IHp Hp V !W4'gV !W4'd>V'd\4P%SWR R7MSP'RV RV R24VP)4pRV9dSP'RS R24R#SP'RS R24SP'RV R24R#)aUpdate one installed plugin, printing progress and consent prompts; True when it moved. Every update is scanned. A caution verdict on a git update asks ``Update anyway? [y/N]`` when *interactive*; *force* (``--force``) accepts it without asking. A dangerous verdict always blocks. Refusals raise :class:`~hermes_cli.plugins_cmd_catalog.RepinConsentRequired` or ``PluginOperationError`` with nothing changed; :func:`cmd_update` turns them into exit 1 and ``hermes plugins update`` with no name records them per plugin and moves on. )escaper)interactive_scan_decision)r c x<RS RVPR4 RS!\VPRR444 R2#)Plugin '' is pinned to rz*. To move it, run `hermes plugins install rz* --force --ref <40-character commit SHA>`.)r r)recrEr!s&r r8update_one..`sFtfOCGGJ,?+@A''-c#''(J2O.P'Q&RS0 0r c<RS R2#)rHz@' was not installed from git (no .git directory). Cannot update.rr!sr r8rLds(4& `ar c.<SPRS R24#)z[dim]Updating z ...[/dim])print)consoler!sr r8rLesGMMN4& *JKr UpdateN)r*r r rr!)declared_set_changedpending_capabilitiesupdate)contextz[yellow]Plugin zE has new capabilities; review them with `hermes plugins capabilities z `.[/yellow]Already up to dateu [green]✓[/green] Plugin [bold]z[/bold] is already up to date.Fz[/bold] updated.z[dim][/dim]T) rich.markuprErrhermes_cli.plugins_cmd_installrFcatalog_install_recordcmd_update_catalogr._post_pull_housekeepingr _read_manifestr r!$_declared_capabilities_from_manifesthermes_cli.plugin_capabilitiesrSrT_run_capability_consentrPstrip)r!rrQr r r-rFsidecaroutputupdated_manifest plugin_id declared_capsrSrToutrEsf&f$$ @r update_oneriOs#9H,,V4G))$Va)bb  1 bKIT27HEZ^ `FFG,u++F3 $$V,;; IE>>?O[M]  9 9=QR[=k=k--gyYa-b  {:AJ@KKVWX ,,.Cs" 8>\]^ MM4TF:JKL MME#f%& r c(V^8dQhRRRRRRRR/#)rr!rr rr rNoner)rs"r rrs( 9 9S 9$ 9d 9t 9r c(^RIHp\4P4p\4P V\4P 4V4p\ WWAVR7R# Td,p\4PTRT RT 24Rp?R#Rp?i\4Pd)p\4PTRT 24Rp?R#Rp?i\4Pd)p\4PTRT 24Rp?R#Rp?ii;i)zT``hermes plugins update [--force]``: :func:`update_one`, exit 1 on a refusal.)RepinConsentRequired)r r z[yellow]Update of z not applied:[/yellow] Nz[red]Blocked:[/red] z[red]Error:[/red] ) r>rmr _console_require_installed_plugin _plugins_dirri_failPluginScanBlockedr")r!r r rmrQrexcs&$$ r cmd_updatertsCennG U , ,T353E3E3G QF94O V  G1$7NseTUU 5 " ";  G3C59:: 5 % %9  G1#7889s0A!!D( BD*C  D)D  Dc V^8dQhRRRR/#)rrrrrkr)rs"r rrs//D/d/r cN\V4\4PW4R#)zFAfter publication: drop stale bytecode and copy any new example files.N)_clear_plugin_bytecoder _copy_example_files)rrQs&&r r]r]s6"Ef.r c V^8dQhRRRR/#rr!rrrkr)rs"r rrs77C7D7r c Xa ^RIHpV!4p\4P4p\4P WV4o ^RIHpHp\V 3RlV!V44R4pVf,VPRV R24\P!^4VPVPJdCVPRV RVPP R24\P!^4VP'g,VPRV R 24\P!^4\4P!VP4\4P%4pS P&V9d,VPRV R 24\P!^4\4P)4p V 'd\4P+S V 4MR p R RRV R\4P-VPR4/VS P&&\4P/V4TPRT RVP RV R,;'gR R24R# \"d6pTPR T 24\P!^4Rp?ELSRp?ii;i)u Adopt a self-cloned plugin dir into the provenance sidecar. Reads the dir's git origin URL, validates it, writes the sidecar row — from then on a normal git install (check-updates + update). The ONLY mutation path for self-cloned dirs (settled: explicit verbs). Console)ProvenanceClassplugins_provenancec3`<"TF#qPSP8XgKVxK% R#5ir5rN).0prs& r cmd_adopt..s"U;qvv?T;s. .N[red]Error:[/red] Plugin 'z' not classifiable.z' is u0, not self-cloned — there is nothing to adopt.zU' has no readable git origin remote. Add one (git remote add origin ) and retry.z;[red]Error:[/red] The dir's origin url is not installable: z' already has a provenance row.r<rFrru![green]✓[/green] Adopted [bold]z[/bold] (source: z , revision: N Nunknownz#). It is now a tracked git install.) rich.consoler}r rprohermes_cli.plugins_provenancer~rnextrPsysexitklass SELF_CLONEDvalue origin_url_resolve_git_url ValueErrorrr!_resolve_git_executable_git_head_revision_canonical_source_write_install_metadata) r!r}rQ plugins_dirr~rprover+git_exerrs & @r cmd_adoptrs3%iG%$$&K U , ,T HFQ U.{;UW[ \D | 24&8KLM   zz444 (eDJJ4D4D3EF9 9   ??? (/G G    t/ u++-H {{h 24&8WXY  e++-GR S HHQKK s+F G.G  Gc V^8dQhRRRR/#)rargsz Any | Nonerrkr)rs"r rrs*D*DJ*D$*Dr c ^RIHp^RIHpV!4p\ 4P 4p^RIHp^RIH pH pV!V4pV!V4p V!W4\VRR4'dA\\P!V U u.uFqP4NK up ^R74R#V!R RR 7p V P!R R R 7V P!RRR 7V P!R4V P!R4V P!R4V Fp V P"'dRV P" R2p M6V P$RJdRp M#V P$RJdRp MRV P& R2p T P)V P*V P,V P.;'gRR,V P0;'gRV 4K VP4VPV 4VP4VPR4R#uup i)z;Read-only: is any installed plugin outdated? NEVER mutates.r|)Table) run_checks)record_check_resultssnapshot_installsjsonF)indentNzPlugin updates)title show_linesNamebold)styleClassdimCurrentLatestStatusz[red]needs fixing[/red] [dim]rXTz[green]update available[/green]z[dim]up to date[/dim]z[yellow]unknown[/yellow] [dim]-rzl[dim]Check-only. Apply with: hermes plugins update , or hermes plugins update to update them all[/dim])rr} rich.tablerr rprrhermes_cli.plugins_cadencerrgetattrrPrdumpsto_json add_column needs_fixingupdate_availablereasonadd_rowr!rcurrentlatest) rr}rrQrrrrchecked_installsresultsrtablestatuss & r cmd_check_updatesrs$ iG%$$&K5R(5%G3tVU## djjw7w!))+w7BC (U ;E V6* WE* Y X X  >>>5ann5EVLF   4 '6F   5 (,F6qxxjGF FFAGGaii..34ahhoo#v  MMO MM% MMO MMCD18s>H accept_capabilitiesc(V^8dQhRRRRRRRR/#)rr!rrrr rzdict[str, Any]r)rs"r rr5s0*Z*Zs*ZD*ZY]*Zjx*Zr ca^RIHp^RIHp^RIHp\ 4PS4pVf$RRRRS R \ 4P4 R 2/#VPV4pV'dTPYgV'dR MRR 7p\VP4p VPVP, p VP'd\ 4P!W4M.p VP'dV!VP4M/p RR RVPRVP"RVP'*RV RV /V C#\%VV3RlV3RlVR7p \5T\ 4P744RT 9pT'd/MT!TP*4p RR RSRT RT/T C# TP&d[pRRRR R\)T4RTP*RTP"RTP,RTP/TP,4/uRp?#Rp?i\ 4P0dp/T!T4CRS/CuRp?#Rp?i\ 4P2dpRRR\)T4/uRp?#Rp?ii;i)aThe one non-interactive update for the dashboard and Desktop: ``git pull`` inside ``~/.hermes/plugins/``; catalog installs re-pin instead. Nothing changes on a refusal: a re-pin that widens the plugin returns ``{"ok": False, "consent_required": True, "delta": {...}}`` (retry with *accept_capabilities*), and a git update the security scan blocks returns ``{"ok": False, "scan_blocked": True, "scan_verdict", "scan_findings"}`` (retry a caution verdict with *force* after the user saw the findings; a dangerous verdict never updates).r)activate_plugin_now)scan_blocked_resultNokFerrorrHz' was not found under .cR#)Tr)_deltas&r r8.dashboard_update_user_plugin..FsDr ) consent_cbTr!sha unchangedpython_dependencieswarningsc Z<RS RVPR4 RVPRR4 R2#)rHrIrz; run `hermes plugins install rrJz5 --force --ref <40-character commit SHA>` to move it.)r )rKr!s&r r8rOs<4& 0C/DE//2wwx/L.MN??r c<RS R2#)rHz-' is not a git checkout; cannot pull updates.rrNsr r8rSshtf$QRr )r consent_requireddelta delta_linesrWrd)rrhermes_cli.plugins_activationrrZrr _user_installed_plugin_dirrpr[repin_catalog_pluginlistrparentinstalled_namechanged_python_dependency_summaryrr.rmrr!rsurface_delta_linesrrr"r]rn)r!rr r-rrrrcresultrr@deps activatedmsgrsrsf$$ r dashboard_update_user_pluginr5sK:AB U - -d 3F ~eW6LSUM_M_MaLbbc&dee,,V4G0 11EX-@^b2dFFOO,H)>)>>JMS^^^3533JIacDFLnnn+F,A,ABZ\I$(=(=ufjjR]cicqcq_q)4XTIRT T!  @ SFCENN$45$+I%8%EI $h[) Yy YY  ' '[e/wC&RURZRZ\acfcjcjM73N3Nsyy3Y[ [ 5 " ":9%c*9FD99 5 % %0eWc#h//0sW&F*.BF*=AF*F**I4;AH I4I4, H?9I4?I4I/)I4/I4c V^8dQhRRRR/#)rrrrintr)rs"r rrbs4Cr c^pVPR4FSpVP4'gK\P!VRR7YP 4'd^M^, pKU V# \ dT#i;i)zRemove ``__pycache__`` dirs under a just-updated plugin checkout. Plugin dirs sit outside the repo, so the launch-time bytecode sweep never covers them and stale bytecode after a pull can ImportError in the next process. Never raises. See #60242, #6207. __pycache__T) ignore_errors)rglobis_dirshutilrmtreer$OSError)rremoved cache_dirs& r rwrwbsvG m4I!! it< 0 0 2 2195 N   N s'A.rs#  jhmj&+j>Bjj>IbgI,0I222\a2j 9 9U 9/7t0f*DZ*Z5*Z`e*ZZr