+ jHjp  a0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI H t H t ^RI H t HtHt^RIHt^RIHtHtHtHtHt^RIt^RIHt^RIHt^R IHtH t H!t!^R I"H#t#R t$R t%R t&RRRRR]$3t'R](R&]])!0Rgm4,t*R](R&Rht+RRlt,!RR]-4t.RiRRllt/] !RR44t0] !RR 44t1R!R"lt2R#R$lt3]Ph!R%4t5R&]PlR']PnR(]PpR)]PrR*]PtR+]Pv/tR0R1lt?]Ph!R24t@R3R4ltAR5R6ltBR7R8ltCR9R:ltD] !R;R<44tER=R>ltFRjR?R@lltGRARBltHRCRDltIRERFltJRGRHltKRIRJltLRKRLltMRMRNltNRORPltORQRRltPRSRTltQRURVltRRWRXltSRYRZltTR[R\ltUR]R^ltVRkR_R`lltWRaRbltXRlRcRdlltYReRfltZR#)muProfile distributions — shareable, packaged Hermes profiles via git. Sources: a git URL (``github.com/user/repo``, ``https://...``, ``git@...``, ``ssh://``, ``git://``) or a local directory that already contains ``distribution.yaml`` (profile development before the first push). ) annotationsN) dataclassfield)datetimetimezoneUTC)Path)AnyDictListOptionalTuple)noninteractive_git_env)normalize_archive_parts)DEFAULT_EXPORT_EXCLUDE_ROOT#profile_path_contains_private_storeprofile_path_is_private)rmtree_readonlyzdistribution.yamlz .env.templatez .env.EXAMPLEzSOUL.md config.yamlzmcp.jsonskillscrontuple[str, ...]DEFAULT_DIST_OWNED frozensetUSER_OWNED_EXCLUDEc V^8dQhRRRR/#)partsrreturnbool)formats"D/home/ubuntu/.hermes/hermes-agent/hermes_cli/profile_distribution.py __annotate__r#2s Q QO Q Qc \V4'dR#\V4^8dR#V^,R8XdVR,\8g#V^,R8H;'d/\V4^8H;'dV^,PR4#)zEntries a distribution never writes: credential stores (and Hermes' copies of them) at any depth, and runtime-owned entries nested under otherwise distribution-owned roots.TFr:NrNr.)rlen_CRON_STORE_REL startswith)rs&r"_is_installer_owned_pathr*2ssu%% 5zA~ Qx6RyO++ 8x  P PCJ!O P Pa8K8KC8PPr$c]tRt^AtRtRtR#)DistributionErrorz0Raised for distribution install/update failures.r N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r r$r"r,r,As:r$r,c(V^8dQhRRRRRRRR/#)rdatadictkeystrdefaultrr )r!s"r"r#r#Gs())t)#))S)r$cJ\VPV4;'gT4#N)r7get)r4r6r8s&&&r"_strr<Gs txx}'' ((r$cn]tRt^Kt$R]R&RtR]R&RtR]R&RtR ]R &]R R l4t R Rlt Rt R#)EnvRequirementr7name descriptionTrrequiredN Optional[str]r8c V^8dQhRRRR/#)rr4r rr>r )r!s"r"r#EnvRequirement.__annotate__Ss   S  ^  r$c  F\V\4'g"\R\V4P 24h\ VR4P 4pV'g \R4hV!V\ VR4\VPRR44VPR4R7#)z*env_requires entry must be a mapping, got r?z!env_requires entry missing 'name'rArBTr8r?rArBr8) isinstancer5r,typer-r<striprr;)clsr4r?s&& r" from_dictEnvRequirement.from_dictRs$%%#&PQUVZQ[QdQdPe$fg gD&!'')#$GH H4m#r>KsA IKHd!G]!    r$r>c]tRt^gt$R]R&RtR]R&RtR]R&RtR]R&RtR]R&Rt R]R &] !] R 7t R ]R &] !] R 7t R ]R&RtR]R&RtR]R&]RRl4tRRltRtR#)DistributionManifestr7r?0.1.0versionr@rAhermes_requiresauthorlicense)default_factoryzlist[EnvRequirement] env_requiresz list[str]distribution_ownedsource installed_atc V^8dQhRRRR/#)rr4r rrYr )r!s"r"r#!DistributionManifest.__annotate__ws  S %9 r$c \V\4'g(\\ R\ V4P 24h\ VR4P4pV'g\\ R24hVPR4;'g.p\V\4'g \R4hVPR4;'g.pV'd"\V\4'g \R4hT!T\ VRR4\ VR 4\ VR 4\ VR 4\ VR 4VUu.uFp\PV4NK upVUu.uFLp\V4P4'gK$\V4P4PR 4NKN up\ VR4\ VR4R7 #uupiuupi)z must be a mapping, got r?z missing 'name'r`zenv_requires must be a listraz!distribution_owned must be a listr[rZrAr\r]r^/rbrc) r?r[rAr\r]r^r`rarbrc) rHr5r,MANIFEST_FILENAMErIr-r<rJr;listr>rLr7)rKr4r?env_rawdist_owned_raweps&& r"rLDistributionManifest.from_dictvs$%%#'8&99QRVW[R\ReReQf$gh hD&!'')#'8&9$IJ J((>*00b'4((#$AB B"67==2 *^T"B"B#$GH HtD)W=4PTVcKd '89$tXBVy)^e8f^eYZ9Q9QRS9T^e8fCQd>aUXYZU[UaUaUc 9A  4 4S 9>dh'd46P   9gds1G!G ;,G cV^8dQhRR/#rOr )r!s"r"r#res   r$c  RVPRVP/pRVP3RVP3RVP3RVP 3RVP Uu.uFq"P4NK up3RVP3RVP3R VP33pVPR V44V#uupi) r?r[rAr\r]r^r`rarbrcc3@"TFwrV'gKW3xK R#5ir:r ).0kvs& r" /DistributionManifest.to_dict..s4hda!6A6hs  ) r?r[rAr\r]r^r`rTrarbrcupdate)rRrSrloptionals& r"rTDistributionManifest.to_dicts%tyy)T\\JD,, -0A4CWCW/X t{{ #i%> 43D3DE3Daiik3DE F !4#:#: ;h =T T.. /   4h44 FsB<r N)r-r.r/r0rVr[rAr\r]r^rrir`rarbrcrWrLrTr2r r$r"rYrYgs IGSKOSFCGS).t)DL&D$)$$? ?FCL#  (  r$rYc V^8dQhRRRR/#)r profile_dirrrzOptional[DistributionManifest]r )r!s"r"r#r#s 6 6t 6(F 6r$c"V\, pVP4'gR#\P!VP RR74p\PT;'g/4# \ dp\ RT RT 24ThRp?ii;i)zJReturn the manifest for *profile_dir*, or None if it isn't a distribution.Nz utf-8-sigencodingzFailed to parse : ) rhis_fileyaml safe_load read_text Exceptionr,rYrL)r{mf_pathr4excs& r" read_manifestrs--G ??  N~~g///EF ) )$**" 55 N"27)2cU CD#MNs&A,, B7B  Bc$V^8dQhRRRRRR/#)rr{rmanifestrYrr )r!s"r"r#r#s"   0D  r$c`V\, p^RIHpV!W!P4RRRR7V#)zAtomically write ``distribution.yaml``. A bare write_text() truncates before the dump lands and read_manifest() treats a missing/unparseable manifest as "not a distribution", so an interrupted install/update would silently demote the profile.)atomic_yaml_writeFi) sort_keysdefault_flow_style create_mode)rhutilsrrT)r{rrrs&& r"write_manifestrs2--G' g//1UW\jop Nr$z!^\s*(>=|<=|==|!=|>|<)\s*(.+?)\s*$>=z<=z==z!=>CGHs74B,, C 7CC c$V^8dQhRRRRRR/#)rspecr7current_versionrNoner )r!s"r"r#r#s&tttctdtr$cHV'dVP4'gR#\PV4pV'dVP4MRVP43wr4\V,!\ V4\ V44'g\ RV V RV R24hR#)zaRaise DistributionError if ``current_version`` does not satisfy ``spec`` (bare version = ``>=``).Nrz"This distribution requires Hermes z, but you have r&)rJ_VERSION_OP_REmatchgroups _VERSION_OPSrr,)rrmoptargets&& r"check_hermes_requiresrs tzz||T"A tTZZ\&:JB  M/:M&,3,r$c.ROpVPFpVP'dVPRVP 24VPe VPMRpVP'dVRVP RV 2R., pK~VRRVP RV 2R., pK RP V4P4R,#)z4Generate a ``.env.template`` body from env_requires.r@z# z # (required)=z # (optional) )z=# Environment variables required by this Hermes distribution.z<# Copy to `.env` and fill in your own values before running.r@)r`rAappendr8rBr?joinrstrip)rlinesreq default_vals& r"_env_template_from_manifestrs E$$ ??? LL2coo./ 0%([[% to install under a new profile.seconds)timespec)rrrrrrr)hermes_cli.profilesrrhermes_cli.version_inforrrrr,rhrr\ base_versionr?rbrnowr isoformatrcrrr) rbrrrrrrrrcanonrrs &&& r" plan_installr:sA8&v7F!&)V$H#$$q r  (224D4F4S4ST 77(-- 8E  \  M O$LL-777KH 'J  "H em!N6,B r$c V^8dQhRRRR/#)rrrrrYr )r!s"r"r#r#Xs!!4!+?!r$c#>"RVP4Uu.uFq"'gK VNK ppV'g_VP4FHpVP\9gK\ VP34'dK8WDP33xKJ R#VFjp\ \ V44pT^,\9g\ T4'dK=TP!T!pTP4'gKeYv3xKl R#uupi \dKi;i5i)zGYield ``(src, rel_parts)`` for every staged path the distribution owns.c3^"TF#qP4PR4xK% R#5i)rgN)rJrrrms& r"ru!_owned_entries..Zs"!\@[1'')//#"6"6@[s+-N) raiterdirr?rr*tuplerrrexists)rrrmexplicit_ownedrr rel_partssrcs&& r"_owned_entriesr Xs!\@[@[!\b!\A`aaa!\Nb ^^%Ezz!33DD .AD;D DDDDc V^8dQhRRRR/#rpathrrrr )r!s"r"r#r#ps4Dr$cVP4'd/VP4'g\P!V4R#\P P V4'dVP4R#R#)zERemove one destination entry without following a destination symlink.N)rrshutilrmtreeosrlexistsunlinkrs&r"_remove_existingrpsF {{}}T__.. d     r$c$V^8dQhRRRRRR/#)rr rrrrr )r!s"r"r#r#ys!   D T r$c\V4VP4'd\P!W4R#\P!W4R#)zReplace *dest* with *src* wholesale so files retired upstream disappear and file<->directory transitions cannot raise or leave stale content behind.N)rrrcopytreecopy2)r rs&&r"_replace_entryrys/T zz||" Sr$c V^8dQhRRRR/#)rentriesz"list[tuple[Path, tuple[str, ...]]]rzOptional[Path]r )r!s"r"r#r#s!Cr$cVFfwrV\8XdVu#V\R,8XgK(V\^,, P4'gKRV\^,, u# R#)z^Return the staged ``cron/jobs.json`` when the distribution owns it (via ``cron/`` or exactly).:NNN)r(r)rr r s& r"_shipped_cron_storer!sU!  'J + +q7I1I0R0R0T0T++ + " r$c$V^8dQhRRRRRR/#)rr rhomerrr )r!s"r"r#r#s&ZZ4ZtZZr$c 4^RIHp^RIHpVP!\ p\ P!RR7;_uu_4p\V4R, pVP4\P!WR, 4VPV4;_uu_4VP4Uu/uF>p\V\4'gKVP!R4'gK4VR,VbK@ ppRRR4RRR4VPV4;_uu_4V!XR R 7RRR4R#uupi +'giLK;i +'giLV;i +'giR#;i \"\$3dp \'R T R T 24T hRp ? ii;i) zMerge a distribution's cron store into profile *home* by job id; new jobs arrive paused. Nothing is written when a shipped job cannot be scheduled (unparseable schedule, past one-shot for a job the installer resumed); the error names the job.)jobs)import_job_definitionshermes_dist_cron_prefixr jobs.jsonidNz>Installed from a profile distribution; review it, then resume.) paused_reasonzCould not merge cron jobs into r)rr%cron.job_definitionr&rr(tempfileTemporaryDirectoryrmkdirrruse_cron_store load_jobsrHr5r; RuntimeErrorrr,) r r# cron_jobsr&rtmp staged_storejobshippedrs && r"_merge_cron_storer9sJ ': ==/ *DZ  ( (0C D D9v-L    LL[8 9))#...7.A.A.C.Cs!#t,#14#CIsN.C/ E % %d + + "'g i, + /. E D, + + * %Z "A$r# OPVYYZsE/AED5 ,D0 D0 "D0 0D5 2E:!E/ E&E/0D5 5 E E E E/ E, &E/,E//FFFc$V^8dQhRRRRRR/#)rbaserrrrr )r!s"r"r#r#s!DTr$cTpVF_pW#, p\V4VP4'd"VP4'g \V4VP RR7Ka V#)avReturn ``base/parts`` as a chain of real directories. A user could have swapped an ancestor for a file; writing through it is impossible, so a file is replaced by a real directory. A symlinked ancestor is refused rather than silently unlinked: it is deliberate user configuration (a shared skills dir, say) and writing through it would land the payload outside the profile.T)exist_ok)_refuse_symlinkrrrr0)r;rrparts&& r" _real_dirr@sT D{ ;;== T " D !  Kr$c V^8dQhRRRR/#rr )r!s"r"r#r#s  $ 4 r$cNVP4'd\V R24hR#)uj is a symlink; refusing to replace it — remove the link (or replace it with a real directory) and re-runN)rr,rs&r"r>r>s0 f? ?  r$c$V^8dQhRRRRRR/#)rrrrrrrr )r!s"r"r#r#s!   ? t r$c VP4'gR#V^,R8Xd\;QJdFRV.VPR\V4^, O4F'gK R'*# R'*#!RV.VPR\V4^, O44'*#\;QJd4RVP 44F'gK R'*# R'*#!RVP 444'*#)aGA container of roots, not a root itself. Under ``skills/`` that is a dir with no SKILL.md in it or above it (a category, whatever metadata it ships: DESCRIPTION.md, README.md, LICENSE; a dir inside a skill, like its ``scripts/``, belongs to that skill); elsewhere, a dir holding no files other than DESCRIPTION.md and dotfiles.Frc3N"TFqR, P4xK R#5i)zSKILL.mdN)rrs& r"ru _is_container..s a;`aJ//11;`s#%NTc3"TFSqP4;'d8VPR8g;'d!VPPR4'*xKU R#5i)zDESCRIPTION.mdr&N)rr?r)rs& r"rurFsH[iVW QQ"22QQ166;L;LS;Q7QQ[isAA)A)ranyparentsr'r)rrs&&r" _is_containerrJs ;;== 1v3aD;`4<_refuse_symlinked_containers"_refuse_store_ancestor_replacementrPs&&& r"rTrTsq"#"uzz" #E * *  E ) ) D::- . (uzz0A5 I .tjj/@% Hr$c$V^8dQhRRRRRR/#)rrrr rrrr )r!s"r"r#r#s"   T  o  RV  r$c\V4'dQVP4'd9VP4'g!\V RRP V4 R24hR#R#R#)aQA payload file where the profile has a directory that holds credential stores (``platforms`` shipped as a file over ``platforms/``) would be a whole-directory replace, taking ``platforms/pairing`` with it. Refused before the first write. Only called for entries ``_merges_per_root`` rejected, so a store ancestor reaching here is a file.zV is a directory that holds credential stores, and the distribution ships a file named rgz; refusing to replace itN)rrrr,r)rr s&&r"rUrUsc +955$++--PTP_P_PaPaf((9-..F H  Qb-5r$c$V^8dQhRRRRRR/#)rr rr rrrr )r!s"r"r#r#s& P P$ P? Pt Pr$cVP4;'d5\V4^8H;'g\W4;'g \V4#)a4An owned top-level dir, or an owned container (``skills/research/``, see ``_is_container``), is merged per authored root instead of replaced whole, so skills the installer added to it (``hermes skills install`` and agent-created skills land in ``skills//``) survive. The pre-write symlink guard and the copy loop both use this, so the guard covers exactly what the copy merges. An ancestor of a credential store (``platforms`` of ``platforms/pairing``) is merged too, so replacing it whole can neither delete the installer's store nor plant the author's.)rr'rJr)r r s&&r"rNrNsQ ::< P PS^q0OOM#4QOO CI NPr$c V^8dQhRRRR/#rrrrrr )r!s"r"r#r#sPPdPPr$c4VFwr#VP4'd \V4M\V4^, pTpVRVFpWV, p\V4K \W#4'd\ W%V4Kx\ WSR,, V4K R#)zRefuse before the first write. The per-entry check in ``_real_dir`` fires mid-loop, after earlier entries were already replaced and before the manifest is rewritten, leaving a half-updated profile that fails identically on every retry.N)rr'r>rNrTrU)rrr r depthrr?s&& r"_refuse_symlinked_targetsr_s}"#&**,,IC NQ4Ffu%D;D D !& C + + (I > .tm/CY O"r$c ,V^8dQhRRRRRRRRRR /#) rrrrrrYpreserve_configrrrr )r!s"r"r#r#s2*%*%t*%T*%=Q*%dh*%mq*%r$c 0VPRRR7\\W44p\W4\ V4pVe\ V\ RR4\WQ4VFwrgV\ 8XdK\V4^8Xd[V^,pV\8Xd\Wa\, 4KNVR8Xd(V'd VR, P4'dK|\Wg4'd\V\ W4V4K\V\ WRR4VR,, 4K VP'dIV\, P4'g(V\, P!\#V4RR7\%W4R#)a$Copy distribution-owned files (see ``_owned_entries``) from *staged* into *target*. User-owned paths are never touched. ``config.yaml`` is replaced only when ``preserve_config`` is False (fresh install / ``--force-config``). ``.env.template`` lands as ``.env.EXAMPLE`` so it never shadows a real ``.env``. A top-level owned directory, and an owned container (``_is_container``), is merged per authored root. ``cron/jobs.json`` is special: it is one multi-record runtime store, so shipped definitions merge by job id instead of replacing the file.TrIr=Nrrr}r])r0rir r_r!r@r(r9r'ENV_TEMPLATE_FILENAMErENV_EXAMPLE_FILENAMErrNrOr` write_textrr) rrrrar cron_storer r r?s &&&& r"_copy_dist_payloadrhsE LLL->&34Gf.%W-J&/#2./*-!  '  y>Q QT=\=\=^=^ C + + sIf8) D sIfn= " MN""f/C&C%K%K%M%M & &223Nx3Xcj2k6$r$c V^8dQhRRRR/#r[r )r!s"r"r#r#As888$8r$cV^RIHpVFpW, PRRR7K R#)zSCreate the bootstrap dirs a fresh profile expects (same set as ``create_profile``).) _PROFILE_DIRSTrcN)rrkr0)rrkds& r"_bootstrap_user_dirsrmAs$1  4$7r$c ,V^8dQhRRRRRRRRRR /#) rrbr7r?rCforcer create_aliasrrr )r!s"r"r#r#Hs4 $48PTr$c \^RIHpHp\P!RR7;_uu_4p\ V\ V4VR7pVP'd9V'g1\RVPP RVP R24h\VP4\VPVPVPRR 7V'd;V!VPP4fV!VPP4VuuR R R 4# +'giR #;i) zInstall a distribution from *source* into a new profile; returns the resolved plan. Use :func:`plan_install` first to preview + prompt.)check_alias_collisioncreate_wrapper_scripthermes_dist_install_r(r Profile 'z' already exists at zP. Use `hermes profile update` to upgrade in place, or pass --force to overwrite.FraN)rrrrsr.r/rrrr,rr?rrmrhr)rbr?rorprrrsr5plans&&&& r"install_distributionryHs Q  $ $,B C CsFDITB ===#DMM..//CDOOCTUaa  T__-4??DOOT]]\ab 1$--2D2DEM !$--"4"4 5 D C C Cs1DB5D D+ c V^8dQhRRRR/#)r profile_namer7rztuple[str, Path]r )r!s"r"r#r#_s33C3,<3r$cp^RIHpV!V4# \dp\\ T44ThRp?ii;i)zOReturn ``(canonical_name, profile_dir)`` or raise if the profile doesn't exist.)_existing_profile_dirN)rr}rr,r7)r{r}rs& r"_existing_profiler~_s693$\22 3C)s23s 505c$V^8dQhRRRRRR/#)rr{r7 force_configrrrr )r!s"r"r#r#is!c+r$c \V4wr#\V4pVf\RV R\ R24hVP'g\RV R24h\ P !RR7;_uu_4p\VP\V4VR7pV'*Vn \VPVPVPVPR 7VuuRRR4# +'giR#;i) zRe-pull from the installed manifest's ``source:`` and apply: dist-owned files overwritten, user data never touched, ``config.yaml`` preserved unless ``force_config``.Nrvz' is not a distribution (no zG). Only profiles installed via `hermes profile install` can be updated.zd' has no recorded source. Re-install with `hermes profile install --name {canon} --force`.hermes_dist_update_r(rurw)r~rr,rhrbr.r/rrrrhrrr)r{rrrexisting_manifestr5rxs&& r"update_distributionris&l3ME%f- w:;L:MNS S    # # #wH H    $ $,A B Bc-44d3iuU$0 04??DOOT]]\`\q\qr C B B Bs 3A&C$$ C5 c V^8dQhRRRR/#)rr{r7rrPr )r!s"r"r#r#s::::r$cd\\V4^,4pVf/#VP4#)zYReturn a structured view of a profile's distribution metadata ({} if not a distribution).)rr~rT)r{rs& r"describe_distributionrs0.|r#cachelocalplansbackupsmemoriessessions workspace)rr*)r@r:)NFF)F)[__conditional_annotations__r1 __future__roperatorrrr subprocessr. dataclassesrrrrrpathlibrtypingr r r r r hermes_yamlrhermes_cli._subprocess_compatrhermes_cli.archive_saferrrrrrrrhrdrerrVrrr(r*rr,r<r>rYrrcompilergeleeqnegtltrrrrrrrrrrrrr rrr!r9r@r>rJrOrTrUrNr_rhrmryr~rr)rs@r"rs# (,,33@;"('%(1-XW]_p&qOq! Y  7<!0 Z8"   5 I   PP$*%Z8.3,:r$