+ jHjH?Rt^RIHt^RIHtHt^RIHt^RIH t ^RI t ^RI t ^RI t ^RI Ht^RIHtHt^RIHt] P(!]4tR tR tR t] P4!R 4t] P4!R 4tRRltRRltRRltR6RRllt RRlt!RRlt"R6RRllt#RRlt$R6RRllt%R R!lt&R6R"R#llt'R7R$R%llt(R6R&R'llt)R(R)lt*] R*R+l4t+R,R-lt,R.RR/R/R0R1llt-R2R3lt.R4R5lt/R#)8u0Per-install update-channel records. Channel storage — per install, never home-global:: update: installs: a4f3b2c1d0e9f8a7: # install id (sha16 of the path: /home/u/.hermes/hermes-agent # canonical install root) channel: canary One config.yaml serves many installs (host + docker gateway + desktop all bind-mount one ``~/.hermes``), so a home-global ``update.channel`` key is UNSAFE and does not exist: setting canary for a dev checkout must not flip the desktop app's feed. The id is sha16 of the canonical install-root PATH — the same key that names the ``installs//`` state folder (``boot_bootstrap._install_key``; a byte-identical helper is inlined below until that module lands). Path-derived on purpose: an electron-updater update replaces the artifact (new stamp bytes) at the same path, and the channel opt-in must survive that. * Written by ``hermes update --set-channel `` from inside an install (it knows its own id — the user never types a sha). * Shown by ``hermes update --install-id`` and the desktop About page. * Source installs select an R2 channel name, or use an explicit branch override. Unconfigured official checkouts track ``stable``; forks and mirrors keep ``main``. Bundles derive their channel from their baked identity, never these records. ``external`` installs have no configurable channel; the steward owns updates. Pure-stdlib leaf module (plus hermes-internal imports done lazily): the installers and boot paths read it before the full config machinery loads. ) annotations) install_key installs_root) validate_name)contextmanagerN)Path)AnyOptional) install_rootmainstablecanaryzM^v(?:0|[1-9]\d{0,2})\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\+canary\.20\d{6}T\d{6}Z$z5^v(?:0|[1-9]\d{0,2})\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$c V^8dQhRRRR/#)tagrreturnbool)formats">/home/ubuntu/.hermes/hermes-agent/hermes_cli/update_channel.py __annotate__rFs11s1t1c\V\4'gR#VP4p\\P V44#)z,True for a canonical canary source identity.F) isinstancestrstripr_CANARY_TAG_RE fullmatch)rvalues& r is_canary_tagrFs3 c3   IIKE ((/ 00rc V^8dQhRRRR/#)rrrrz str | Noner)rs"rrrNs//#/*/rcv\V4'gR#VP4PR^4^,#)z9Return the UTC receipt stamp from a canonical canary tag.N+canary.)rrsplit)rs&rcanary_timestampr$Ns.    99;  Z +A ..rc$V^8dQhRRRRRR/#)rversionrdate_utcrr)rs"rrrUs! ( ( ( ( (rcVPR4p\PRV,4'g\RV: 24h\P!RV4'g\RV: 24hRV RV 2#)zReturn ``v+canary.``. The stable core is unchanged. The suffix is build metadata, so the source identity compares equal to the stable and only the R2 channel head moves a canary subscriber. vz#invalid stable version for canary: z20\d{6}T\d{6}Zzinvalid canary UTC timestamp: r") removeprefix STABLE_TAG_REr ValueErrorre)r&r'cores&& rcanary_tag_for_dater/Ust    $D  " "3: . .>wkJKK <<)8 4 49(FGG tfHXJ ''rc V^8dQhRRRR/#r project_rootOptional[Path]rrr)rs"rrres++^+s+rcFVf \4p\\V44#)zThe sha16 id of the install at ``project_root`` (default: this one). Same identity as the ``installs//`` state folder key. )r rr)r2s&r install_idr5es! #~ tL) **rc V^8dQhRRRR/#)rrootrrdictr)rs"rrros$$d$t$rc^RIHpV!V4#)zEThe install stamp of ``root``, or ``{}`` (tolerant, like steward.py).)read_install_stamp)hermes_cli.stewardr:)r7r:s& r _read_stampr<os5 d ##rc V^8dQhRRRR/#)rconfigOptional[dict]rr8r)rs"rrrvs::^::rc\V\4'g/#VPR4p\V\4'g/#VPR4p\V\4'dV#/#)updateinstalls)rr8get)r> update_cfgrBs& r_install_recordsrEvsY fd # # H%J j$ ' ' ~~j)H!(D1189r9rc$V^8dQhRRRRRR/#)rr>r?r2r3rr8r)rs"rrrs"66>66SW6rc|\V4P\V44p\V\4'dV#/#)zAThis install's ``{path, channel}`` record from config, or ``{}``.)rErCr5rr8)r>r2records&& rchannel_recordrIs3 f % ) )*\*B CF--6525rc V^8dQhRRRR/#)rstampr8rrr)rs"rrrsDTrcbVPR4R9;'gVPR4R9#)payloadupdateMechanism)bundledlightruntime)zelectron-updaterz app-installerzmicrosoft-store)rC)rKs&r_package_channelrRs; 99Y #B B  eiiPaFbgGrc V^8dQhRRRR/#r1r)rs"rrrsQQ.QCQrcVe \V4M \4p\V4p\V4'g\ V4'd\ #\ #VPR4R8XdMVPR4p\V\4'g \R4h\VPR44#\VPR44'd\#\ #)u The channel an unconfigured install tracks. A source checkout of the official repository follows the latest published stable release. Forks, mirrors and checkout-less trees keep following main. ``electron-updater`` and ``app-installer`` bundles report their artifact channel: a canary artifact tracks canary, every other bundle tracks stable. The stamp's ``tag`` is the authority, the same fact apps/desktop/product-identity.cjs keys the published feed name on — so the feed a canary artifact asks for and the feed it was published to can never disagree. Deriving stable here instead would send a fresh canary install to look for its ``canary.yml`` feed file under the newest STABLE release, where that file does not exist (404), leaving the install unable to update at all. sourcez channel-build channelBuildz(Channel bundle has no baked subscriptionchannelr)rr r<rR_tracks_official_originCHANNEL_STABLE CHANNEL_MAINrCrr8r,rrCHANNEL_CANARY)r2r7rKrequests& rdefault_channelr]s".!94 |~D  E E " "!8!>!>~PLP yyo-))N+'4((GH HW[[344*599U+;<<>P.Prc V^8dQhRRRR/#)rr7rrrr)rs"rrrs$4rcz^RIHpHp^RIHpV!V4pV'd(VR, P RR7P 4M.pRpTFpTP4pTPR4'dTR8HpK1T'gK;TPR 4^,P4R 8XgKhTPTPR 4^,P44p \T 4;'d)T ^,P4TP48Hu# R# \dR#i;i) zTrue when ``root`` is a git checkout whose ``remote.origin.url`` is the official repo. Read from the git config file (no git process: the banner and boot paths call this). Forks, mirrors and local-path origins publish no official releases. )_GITHUB_ORIGINOFFICIAL_REPOSITORY)_git_common_dirr>z utf-8-sig)encodingF[z[remote "origin"]=url)hermes_cli.source_releasesr`rahermes_cli.update_lockrb read_text splitlinesOSErrorr startswith partitionrrlower) r7r`rarbcommonlines in_originlinetextmatchs & rrXrXs O6 T "FTZ("--{-CNNP`bIzz| ??3   33I Y4>>#.q1779UB",,T^^C-@-C-I-I-KLE;RR58>>#37J7P7P7R#R R   sD+)D++ D:9D:c(V^8dQhRRRRRRRR/#) rrHr8rWrr2r3rrr)rs"rrrs/VV$VVNV^bVrcTVPR4RJ;'dV\V48H#)aTrue when no channel was ever persisted (``record``) and ``channel`` is the default. Such an install never consented to a release switch, so it only moves forward: a checkout already newer than the latest release waits for the next one. A transient ``--channel`` naming the default (the Desktop passes the channel its check reported) is still the default; only ``--set-channel`` consents to a downgrade. rWN)rCr])rHrWr2s&&&rrides_default_channelrws* ::i D ( U UW 8U-UUrc$V^8dQhRRRRRR/#)rr>r?r2r3rrr)rs"rrrs& ! !  !  !  !rcVe \V4M \4p\\V44'd \ V4#\ W4P R4pVe \V4#\ V4#)zISource records select releases or main; package tags fix bundle identity.rW)rr rRr<r]rIrCr)r>r2r7 configureds&& rresolve_update_channelr{sc ".!94 |~D D)**t$$$V266yAJZ(( 4  rc$V^8dQhRRRRRR/#)rrWrr2r3rr)rs"rrrs&   rc^RIHpHpVe \V4M \ 4pV!V4'd \ V4h\ V4p\V4p\V4'gVPR4R8Xd*VPR4;'gRp\ RV 24h\V4p\V\V4V4V#)a Persist ``channel`` for THIS install in config.yaml. Returns the id. Refuses when the update source belongs to the OS or package owner, including Microsoft Store, rather than this configuration. Raises ``ValueError`` for an invalid channel or an OS-owned install. )COMMIT_BUILD_UPDATE_MESSAGEis_commit_buildrNexternal distributionzan external stewardz0channels don't apply here; updates are owned by ) hermes_cli.update_contractr~rrr r,rr<rRrCr5_write_channel_recordr)rWr2r~rr7rKrsha16s&& rset_install_channelrsX!-!94 |~Dt455G$G  E%)),=">*"Lyy0II4I >|n M   t E%TG4 Lrc V^8dQhRRRR/#)rr2rrrr)rs"rrrsTdrcz\VRR4'd\\V44R#\VRR4pVfR#\W!4p\RT RT 24T\8Xd\R4R#T\8Xd \R 4R# \d&p\\ T44\ ^4ThRp?ii;i) zCHandle metadata-only update commands before any update side effect.r5FT set_channelNzUpdate channel for z: zWCanary builds can write forward-incompatible state. Back up your data before switching.zcSwitching to an older stable release may not read state written by canary. Back up your data first.) getattrprintr5rr,r SystemExitr[rY)argsr2rWkeyexcs&& rhandle_metadata_argsrst\5)) j&'dM40G%!'8 uBwi 01.  gh  N " st  % c#hm$%s B B: B55B:cV^8dQhRR/#)r config_pathrr)rs"rrr s::T:rc #z"^RIHpVPPRRR7T;_uu_4VP R4P R4;_uu_4p\ PR8Xdc^RIpVPR4VP4VP^4VPVP4VP^4M.^RIpVP!VP4VP"4Rx\ PR8Xd>VP^4XPVP4VP$^4M+XP!VP4VP&4RRR4RRR4R# \ PR8Xd>TP^4XPTP4TP$^4iXP!TP4TP&4i;i +'giL;i +'giR#;i5i) z@Serialize channel selection and retirement across CLI processes.) _CONFIG_LOCKT)parentsexist_okz.channels.lockza+bntN)hermes_cli.configrparentmkdir with_suffixopenosnamemsvcrtwriteflushseeklockingfilenoLK_LOCKfcntlflockLOCK_EXLK_UNLCKLOCK_UN)rrlockrrs& r_channel_write_lockr s`/TD9 {../?@EEeLLPT 77d?  JJu  JJL IIaL NN4;;=&..! <  KK u}} 5 : ww$ ! t{{}fooqA DKKM5==9#Mww$ ! t{{}fooqA DKKM5==9#MLsO.H;)H'B&H FA=H H' H;A>H H  H$ H'' H8 2 H;c V^8dQhRRRR/#)rr\r8rrr)rs"rrr%s\\4\D\rc VPR4pVfR#\\\VR,44VR,\ VR,4VR,\VR,4R, R7#) zKAfter verified completion, adopt only an unchanged persistent subscription.channel_retirementFrU destinationoriginalhomez config.yaml)expectedr)rCrr5rr)r\ retirements& radopt_retired_channelr%sg12J 4)*+WX->j/0J'T'&/5J]5Z \\rrrc 0V^8dQhRRRRRRRRRRR R /#) rrrpathrWr dict | Nonerz Path | Nonerrr)rs"rrr0sAYYYCY#Y$/YEPY\`Yrc ^RIHpVeTMV!4p\V4;_uu_4\WW#V4uuRRR4# +'giR#;i))get_config_pathN)rrr_write_channel_record_locked)rrrWrrrs&&&$$ rrr0s:1!,!8+o>OK [ ) )+EKX * ) ) )s ? A c 0V^8dQhRRRRRRRRRRR R /#) rrrrrWrrrrrrr)rs"rrr9s93+6EINRrc&^RIHp^RIHpV!V4pVP R4pVe"\ V\ 4'g \R4h\ V\ 4'dVP R4MRp V e"\ V \ 4'g \R4h\ V \ 4'dV P V4MRp VeT ;'g/V8wdR#\ V \ 4'd \ V 4M/p WR &W+R &V!VR V 2V 4R #) uWrite ``update.installs.`` into config.yaml, preserving the rest. Persists through the shared comment-preserving atomic writer (:func:`utils.atomic_roundtrip_yaml_update` — the same ruamel round-trip path ``hermes config set`` uses), fail-closed via :func:`hermes_cli.config.require_readable_config_before_write`. Malformed ``update`` / ``update.installs`` values are refused, never replaced — the dotted writer would otherwise turn a scalar into a mapping and destroy whatever the user had there. )atomic_roundtrip_yaml_update)$require_readable_config_before_writerANz$config key 'update' is not a mappingrBz-config key 'update.installs' is not a mappingFrrWzupdate.installs.T)utilsrrrrCrr8r,) rrrWrrrrexistingrDrBrH new_records &&&&& rrr9s3F3K@Hh'JjT&B&B?@@-7 D-I-Iz~~j)tHJx$>$>HII$.x$>$>X\\% DF2( :!+FD!9!9frJv#y 0@.H*U rc V^8dQhRRRR/#)rr>r?rzlist[tuple[str, dict, str]]r)rs"rrrYs&&.&5P&rc.p\V4P4Fwr#\V\4'gKVP R4p\V\ 4'd V'gRpVe\\ V4pVP4'gVPW#R34K\V4V8wdVPW#R34K\4V, R, P4'gVPW#R34KK V# \d#p\PRT4Rp?EKRp?ii;i)uDoctor's staleness triad over ``update.installs``. Returns ``(sha16, record, reason)`` where reason is one of: * ``"replaced"`` — the recorded path exists but the install there keys to a DIFFERENT sha16 (the tree moved / was recreated elsewhere and a new record claimed it; this one is a leftover). * ``"missing"`` — nothing at the recorded path: offer GC (keep-on-doubt). * ``"unclaimed"`` — the sha16 matches no live install record (``installs//install.json``): offer GC. rNmissingreplacedz install.json unclaimedzinstalls root unavailable: %s)rEitemsrr8rCrrexistsappendrris_file Exceptionloggerdebug)r>stalerrH recorded_pathrrs& rstale_channel_recordsrYs*,E)&1779 &$''  6* ---] M  $ &D;;== eY784 E) eZ89  ?!Oe+n<EEGG e[9:H+:2 L ? LL8# > > ?s ?D D>D99D>)N)NN)0__doc__ __future__rpm.environmentsrrhermes_cli.release_channelsr contextlibrloggingrr-pathlibrtypingrr pm.pathsr getLogger__name__rrZrYr[compilerr+rr$r/r5r<rErIrRr]rXrwr{rrrrrrrrrrrs@#65%  !   8 $ ! ST 1/ ( +$:6  Q62V !:*::2\Y26YSWY@&r