+ jHj)`Rt^RIHt^RIt^RIt^RIHt^RIHtH t ^RI t ^RI t ^RI t ^RI t ^RIHt^RIt^RIt^RIt^RIHtHtHt^RIHtHtHtHt] P@!]!4t"Rt#]R ]#/R R ll4t$R R lt%RRlt&RRlt'RRlt(RRlt)RR/RRllt*RRlt+RRlt,R#)zHStdlib-only recovery and lifetime protection for dependency generations.) annotationsN)Callable)contextmanagersuppressPath)dependency_home_rootinstall_state_dirruntime_facts_path)durable_write_bytes file_digestlock_fdread_bytes_or_noneg$@timeoutc V^8dQhRRRR/#)projectrrz float | None)formats"=/home/ubuntu/.hermes/hermes-agent/hermes_cli/runtime_state.py __annotate__r(s$Lc#"\V4pVPRRR7\P!VR, \P\P ,R4p\ VRVR7'g;\PRWR, 4Rx\P!V4R#Rx\P!V4R# \P!T4i;i5i) uqHold the per-install dependency lock; yields True when held, False when the wait expired. Callers decide what a lost race means: readers skip the work the lock guards and carry on (``activate_dependencies`` still selects and leases the committed generation), writers that cannot be skipped pass ``timeout=None`` — an install the user asked for is theirs to wait on. T)parentsexist_okz .install.lock)waitrz@dependency lock still held after %ss; continuing without it (%s)FN) r mkdirosopenO_CREATO_RDWR_lockLOGwarningclose)rrstatefds&$ r runtime_lockr('s g &E KKtK, ("**ryy*@% HB RdG44 KKR0 2K       s*A!C)$5CC)2C6C)C&&C)c(V^8dQhRRRRRRRR/#)rrrrowdictjournalreturnNoner)rs"rrr>s(D4Drca^RIHpV3RlR4wrEp\4P4pVP4P V4'doVP P R8wgTVP VP 8wg9VP PR4'dWdP R, 8wd \R4hSPR4;'g\\V44SR,8gpV'd!VP4'd V!V4EMSR ,e \P!SR ,R R 7MR p \V4p \P!SR ,R R 7p WV 39d \R4hVP4'd6VP4'd V!V4\ P"!WT4M-SR,'gVP4'd V!V4V fVP%R R7M \'Wi4VP%4R #)) rmtree_forcec3H<"TFp\SV,4xK R#5iNr).0keyr*s& r ._recover_plugin_publication..As[:Z3SX:Zs"pluginsz .previous-z.install-metadata.jsonz*plugin publication paths escape their home committed facts_beforemetadata_beforeNTvalidatemetadata_afterzJplugin metadata changed after publication; preserve it for manual recoverytarget_existed missing_ok)targetbackupmetadata)hermes_cli.fs_utilsr1rresolveis_relative_toparentname startswith ValueErrorget_digestr existsbase64 b64decode_bytesrreplaceunlink _atomic_bytes) rr*r,r1rBrCrDhomer9oldcurrentnews &f& r_recover_plugin_publicationrY>s0[:Z[FH  ! ) ) +D NN  + +D 1 1V]]5G5G95T}} -V[[5K5KL5Y5Y==+CCCEFF $cc0B70K(LPSTbPc(cI ==??  ILM^I_Ikfs#45Equ"s#34tD * $ij j ==??}}V$ JJv &%&&6==??  ; OOtO , ( ( NNrc V^8dQhRRRR/#rrrr-r.r)rs"rrr^s!`!`!`$!`rcf\V4R, p\V4pVfR#\P!V4pVP R4R8Xd\ WV4R#RV9d VR,MV.p.pVFp\ VR,4pVPR8wg<VP4P\4P44'g \R4hVR ,e \P!VR ,R R 7MRpVPWxVP R 434K VP R 4'g\\!V44VR,8XdVFLwrxp Ve%\"P$!V4P'4MRp \V4W39gKC\R4h VF)wrxp VfVP)R R7K\+Wx4K+ VP)4R# \\,\.\03dp \3RT RT 24T hRp ? ii;i)zGRecover while holding runtime_lock, before activation or another write.publication.jsonNkindpluginconfigsconfigz config.yamlz#config path is outside Hermes statepreviousTr< config_afterr9r:zGconfig changed after publication began; preserve it for manual recoveryr@z'cannot recover dependency publication: z: )r rQjsonloadsrLrYrrIrFrGrrKrOrPappendrMr hashlibsha256 hexdigestrSrTKeyError TypeErrorOSError RuntimeError) rr,datar*entriesr`entryrarbafterprior_afterexcs & rrecover_publicationru^s(+==G '?D |`jj 776?h & 'g > $-$4#i.3%E%/*F{{m+6>>3C3R3RSgSiSqSqSs3t3t !FGGMRS]M^Mjv''j(9DIptH NNFeii.GH I  ww{##0B70K(LPSTbPc(c+2'%@H@Tx0::C+G> A G>0A G>>H0H++H0c V^8dQhRRRR/#r[r)rs"rrrs!!!!rc\V4R, p\P!VP44pRVR&\ V\P !V4P 44\V4R#)zHPersist a commit even when code/config changed without a new generation.r]Tr9N)r rdre read_bytesrTdumpsencoderu)rr,r*s& rfinish_publicationr{sV(+==G **W'') *CC '4::c?1134 rc V^8dQhRRRR/#)r environmentrr-Callable[[], None]r)rs"rrrs//$/+=/rc,\VP4#)aRHold a kernel lock until process exit; the returned callable releases it early. Call under ``runtime_lock`` at boot. Without the lock (``runtime_lock`` timed out) the caller must re-read the selection after leasing: an installer may have moved it in between, and an unselected, unleased generation is exactly what the collector removes. )lease_directoryrH)r}s&rlease_generationrs ;-- ..rc V^8dQhRRRR/#)r generationrr-r~r)rs"rrrs   ); rcaaaVR, P4'gR#VR, pVPRR7\V4V\P!4P , o\ P!S\ P\ P,\ P,R4o\SRR7SP4'dM\ P!S4KRTTT3R llo\P !S4S# \d\ P!S4hi;i) zEPin a lease-managed generation directory for this process's lifetime..lease-managedcR#r3rrrr!lease_directory..str.leasesT)rrrcV^8dQhRR/#)rr-r.r)rs"rr%lease_directory..__annotate__sTrc<\P!S4\P!S4\ \ 4;_uu_4SP 4RRR4R# +'giR#;ir3)atexit unregisterrr%rrlrS)r'leasereleasesrr lease_directory..releasesA'"  g   LLN   s A  A1 )is_filer_prune_unlocked_leasesuuiduuid4hexrrr O_EXCLr!r" BaseExceptionr%rNrregister)rleasesr'rrs& @@@rrrs ) ) 2 2 4 4 ) #F LL$L6" ))) WWUBJJ2RYY> F  "4  <<>>    OOG N)  HHRL  s  D!!#Emin_age_secondsiQc$V^8dQhRRRRRR/#)rrrrfloatr-z list[Path]r)rs"rrrs!5Zrcl^RIHp.p\V4pVP4'gV#\ V4;_uu_4pV'g VuuRRR4#\ V4V!V4P P4pVR, pVP4'g VuuRRR4#VP4FpVP4'g,VP4'dVP4V8XdKFVR, p V P4'd:\P!4V P4P, V8dK\V4'dK\ P"!V4VP%V4K RRR4V# +'giT#;i)zERemove unselected lease-managed generations after their readers exit.) selected_venvN environmentsr)pm.environmentsrr rNr(rurHrFis_diriterdir is_symlinkrtimestatst_mtime leases_heldshutilrmtreerf) rrrremovedrootheldselected generationsrmarkers &$ rcollect_generationsrsD-G W %D ;;== g  $   G$ )0088:^+ !!##  &--/J$$&&j.?.?.A.AZEWEWEY]eEe"22F>>##tyy{V[[]5K5K'Ko']z** j)z*0 " N#  " Ns+ F"A F"*>F")5F"A F"-+F"" F3 c V^8dQhRRRR/#)rrrr-boolr)rs"rrrs::D:T:rc&\VR, 4#)zHTrue while any process still holds a lease taken by ``lease_directory``.r)r)rs&rrrs !*y"8 99rc V^8dQhRRRR/#)rrrr-rr)rs"rrrs4DrcRpVPR4Fp\P!V\P4p\ TRR7'gRpM0\\ 4;_uu_4TP4RRR4\P!T4K V# \dK\ dRpKi;i +'giLM;i \P!T4i;i)aRemove abandoned lease files and report whether any live lock remains. Kernel locks disappear even when ``execv``, ``os._exit`` or a crash bypasses ``atexit``. Cleaning those unlocked files whenever a reader arrives bounds leaks in the selected generation too, which generation GC intentionally never visits. Fail closed: a lease this user cannot open (root-owned 0o600 from a ``sudo hermes`` on the same checkout) is held, never a boot failure. F*TrN) globrrr!FileNotFoundErrorrlr"rrSr%)rrrr's& rrrs DS!  *B  %((g&&LLN' HHRL" K!   D  '& HHRLs@%B -C+C<C B>.B>7B>=B> C CC,)-__doc__ __future__rrrOcollections.abcr contextlibrrrgrdloggingrpathlibrrrrrrr r pm.filesystemr rTr rMr r"rrQ getLogger__name__r#INSTALL_LOCK_TIMEOUT_SECONDSr(rYrur{rrrrrrrrrsN" $/   WW! $;W,@!`H!/ F56: r