+ jHjta0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIH t ^RI H t ^RI H t ^RIHtHtHtHtHtHtHtHtHtHtHt^RIHt^RIHt]P<!R 4tRs R ]!R &/t"R ]!R &Rs#R]!R&Rs$R]!R&Rs%R]!R&RRlt&RRlt'RRlt(RRlt)RRlt*RR lt+R!R"lt,R#R$lt-R%R&lt.R'R/R(R)llt/R*R+lt0R,R-lt1R.R/lt2R0R1lt3R2R3lt4R4R5lt5R6R7lt6R8R9lt7R:R;lt8R<R=lt9R>t:R?t;R@RRA^RHRIlt?RJRKlt@RLRMltARNROltBRPRQltCRRRSltDRTRUltERVRWltFRXRYltGRZR[ltHR#)\aThe single commit point of a source ``hermes update``: everything the tree move needs armed first. Before git (or the ZIP swap) writes the first file of the new code, three things are durable: * the interrupted-pull marker (``.git/hermes-update-pull``) naming the commit git moves to, for EVERY tree move (branch switch, upstream fork pull, the pull itself) so a launch after any exit that left a torn tree puts the old one back (``_early_recovery.restore_interrupted_pull``); * the source-completion tail (``venv_sync.arm_completion``) and the host fleet-restart obligation, so a kill after the move but before the completion child starts still leaves the tail owed to the next launch (``venv_sync.prepare_launch``) and the restart owed to the next ``hermes update``. Failures before the move are no-ops: ``disarm_commit_obligations`` puts both obligations back the way this run found them once the tree is verified at its pre-update commit again. ) annotationsN)suppress)Path)Optional) RECOVERY_CLOSURERECOVERY_CLOSURE_INITRECOVERY_CLOSURE_MANIFESTblob_id_lock_identityinterrupted_pull_marker is_object_idrecovery_closure_dirrecovery_closure_verifiedrestore_interrupted_pullwrite_durable_text) _record_stop)run_gitzhermes_cli.update_cmdz%Optional[dict[Path, Optional[bytes]]]_armed_snapshotzdict[Path, Optional[bytes]] _armed_bytesz&Optional[tuple[list, tuple[str, str]]] _run_startzOptional[Path]_obligation_rootstr_ownerc V^8dQhRRRR/#rootrreturnbool)formats"A/home/ubuntu/.hermes/hermes-agent/hermes_cli/update_cmd_commit.py __annotate__r#6s11d1t1c:^RIHpV!4PV4#))_m)hermes_cli.update_cmdr'_pytest_owns_live_checkout)rr's& r"_owns_live_checkoutr*6s( 4 * *4 00r$c V^8dQhRRRR/#)rrrrz list[Path]r )r!s"r"r#r#<siiDiZir$cP^RIHp^RIHp^RIHpV!V4V!4V!4.#)r&)"_fleet_restart_pending_marker_path)host_obligation_path)completion_pending_path)hermes_cli.update_cmd_fleetr-!hermes_cli.update_host_obligationr.hermes_cli.venv_syncr/)rr-r.r/s& r"_obligation_pathsr3<s%NF< #D )+M+OQeQg hhr$c V^8dQhRRRR/#)rpathrrzOptional[bytes]r )r!s"r"r#r#Dsr$cHVP4# \dR#i;i)z\The record's bytes, None when absent. Any other read error raises: custody is never guessed.N) read_bytesFileNotFoundError)r5s&r" _read_or_noner9Ds&  s  !!c$V^8dQhRRRRRR/#)rrr expected_sharrNoner )r!s"r"r#r#Ls&QQQSQTQr$c ~^RIp^RIHp^RIHp\ V4p\ V4'dR#\fZ\V4Uu/uFqU\V4bK upsV R\P!4 RVP4P 2sV!V4T!T;'gR\R7p\P!\Uu/uFqU\V4bK up4V'g \#R4hR#uupiuupi \P!\Uu/uFqU\T4bK Muupiup4i;i)aOwe the completion tail and the fleet restart for ``expected_sha`` BEFORE the tree moves. Idempotent within a run (the first call snapshots what to restore on a no-op failure). An unwritable install state, an unreadable record or a fleet restart neither store accepted raises: nothing has moved yet, and moving without the obligation is exactly the tail-never-runs state this exists to prevent. N)#_write_fleet_restart_pending_marker)arm_completion|r)r;ownerz7could not record the pending gateway-restart obligation)uuidr0r>r2r?rr*rr3r9osgetpiduuid4hexrrupdateOSError)rr;rBr>r?r5oweds&& r"arm_commit_obligationsrJLsO3 :D4  ARSWAXYAXt!44AXY6299;-q)9)9(:;Ut2 @R@RPRZ`a?S?4=#66?ST OPP Z T ?S?4=#66?STs*C8D$ DC=D<D/ .D<cV^8dQhRR/#rrr<r )r!s"r"r#r#is''4'r$c^\e`\wpwr\e\\4MRpVe\W4^,MRpVeV'dWA8wdVe \ W44R#^RIHpHpHp\Rups \\4p \P4V!4p T;'g/P4FXwrW8XdV!\4KW9g\V 4W,8wdK8V fV P!RR7KPV!W4KZ R# \"dKli;i)aRestore both obligations to what this run found: the tree never left its pre-update commit. Off the commit this run STARTED from nothing is handed back: a failed later move (CP1 refused or failed after the CP0 branch switch, the upstream fork ff after the origin pull) settles on a commit that is already new code, so the obligations are owed for THAT head instead of the failed move's target, which the checkout does not contain and no restart could discharge. Nr)r.release_host_obligation replace_bytesT missing_ok)rrrhead_and_branch_owe_forr1r.rNrOrdictrclearitemsrr9unlinkrH) git_cmd start_head_branchrheadr.rNrOsnapshotarmedhostr5datas r"disarm_commit_obligationsr`is)3&&*)9)Et$%4484Dw-a0"  ⚠ Could not record the restart this update still owes for z (z8); run `hermes gateway restart` once the update is done.)file) rr rJrHloggerwarningprintsysstderr)rrgexcs&& r"rSrSsl3&7&7Xt) XKSQTXWZ[ NsSVxjXZ[^Z_`FFLOJJ X XXs * BABBc$V^8dQhRRRRRR/#)rrbrtargetrr )r!s"r"r#r#s! 5 53 5 5 5r$cb\e\^,^,MRpV'd W8wdV#T#)acThe commit a fast-forward ``pre`` -> ``target`` arms the obligations for. A later move of this run (the upstream sync after the origin pull) owes ``pre``: the commit the earlier move already owes, which every landing of a fast-forward contains, and the fleet discharge holds the gateways to the checkout's actual HEAD whenever it contains the debt. Its failure then needs no retarget write, which could itself fail and leave the debt naming a commit the checkout never reached (review O4). The run's first move owes its ``target``: its failure hands the obligations back whole (``disarm_commit_obligations``). r)r)rbrsstarts&& r"debt_sha_for_movervs*!+ 6JqM! BECL34f4r$c$V^8dQhRRRRRR/#)rrrr;rrrcr )r!s"r"r#r#s!D r$c V^RIHpV!4;p'dV#\W4\W3/VBR# \dlp\ 4\ e\Y4^,MRpT'd.T\ ^,^,8wdRT RTR, 2uRp?#RT R2uRp?#Rp?ii;i)a[Arm the obligations, then the tree-move marker (``arm_tree_move(**move)``): no marker, no move. ``None`` when both are durable; otherwise why not, with the obligations handed back (``disarm_commit_obligations``), and the caller must stop before git writes a file. Linux/macOS gateways are paused first: this is every route's first checkout move. )pause_at_commit_pointNrzcould not arm the update (z_); this step changed nothing, but an earlier step of this update already moved the checkout to riz); the checkout was not changed)!hermes_cli.update_cmd_posix_pauseryrJ arm_tree_moverHr`rrR)rXrr;moveryrefusedrqr[s&&&, r"arm_commit_pointr~sH'))w) Qt2g,t,  Q!#4>4Jw-a0PR DJqM!,,06DDHI;P Q+C50OPPQs,2 B(-B#+'B#B(B#B(#B(rollbackc 0V^8dQhRRRRRRRRRRR R/#) rrrrbrcrsrstashrrr )r!s"r"r#r#s8z3z&26r$c \V4pRpV'd[\V.RO\V4RRRR\P^ target). ``rollback`` (``branch``/``detach``): a syntax rollback that moves HEAD and the index back to ``pre`` before any file; a kill before that step finds HEAD still on ``target`` and the restore redoes it first, only while HEAD still names the ``ref`` recorded here (empty: detached). rTutf-8replacecwdcapture_outputtextencodingerrorsstdintimeoutNzpid=z pre=z target=z stash= z index_lock= index.lockz rollback=z ref=zgit=)z symbolic-ref-qHEAD)r rr subprocessDEVNULL returncodestdoutstriprrHSubprocessErrorpublish_recovery_closurerrCrDr parent _absolute_git) rXrrbrsrrmarkerrefnamedgits &&$$$$ r"r{r{s?%T *F C!?SY_cjn!(*BTBT^`b&+&6&6!&;ell  " gz99 : : $WC 8; vbiik]& 9VHT\]b]h]hfh\iikl&~fmml6R'S&TTVW XAIIhZvcU"=r S5B'4J-JS-JDR.QS UV M; :s  E E" c$V^8dQhRRRRRR/#)rrrrbrrr )r!s"r"r#r#s!33D3s3t3r$c ba^RIp\S4'g\RS: 24h\\ V4S4p\ VS4'dV#.\ V\4'dV.MTORNp\VRRRSR.\O\V4R\P^xR 7p/pVP^8Xd&VP;'gR PR 4MRF_pVPR R 4P!R4wrp VP4R,R.8XgKFVP4^,Wj&Ka \"R /p \%WS\4p \FQp W9g(W,e\'W,S4Wj,8wd\V RSR, 24hW,W&KS RP)V3RlV P+444P-R 4p VP/RS R\0P2!4 R24pVP5VRR7/V C\6V /CP+4FwrW, P8P;RRR7\=W, R4;_uu_4pVP?V4VPA4\0PB!VPE44RRR4K VR, V3Fp\GV4K VP5VRR7\0PH!W4\GVP84VP5VRR7VP8PK4FpVV8wgK VP5VRR7K! V# +'giEKS;i TP5TRR7i;i)aCopy the launch repair's modules, as committed at ``pre``, beside the marker (outside the tree). The bytes come from the commit the repair restores, never from the working tree: a rollback move starts from a broken tree, and a second move in one run starts from code this process never ran. A manifest names each file's blob id; the launcher runs the closure only when every file hashes to it (``recovery_closure_verified``) and rebuilds it from git's objects otherwise. Files and directory are fsynced before the atomic rename, so a power loss during the move that follows finds the whole closure or none. An older run's closure (another ``pre``) is dropped. Nznot a commit id: z--no-replace-objectszls-tree-zz --full-treez--T)rrrrr$rr :rNblobz is not in rirc3L<"TFwr\VS4 RV R2xK R#5i) rN)r ).0relr_rbs& r" +publish_recovery_closure..s(V 93'$,-Qse26 s!$.z.staging) ignore_errors)parentsexist_okwb hermes_clir )&shutilr rHr rr isinstancerrrrrrrsplitdecode partitionrread_target_filesr joinrVencode with_namerCrDrmtreerrmkdiropenwriteflushfsyncfileno _fsync_dirriterdir)rXrrbrdestlistedidsentrymeta_rblobsshownmanifeststagingr_handle directorystales&&f r"rrs    )#122 T C 0D s++ ]j#66'G]F\]G Wy$ sD\K[\befjbk$( 0B0BCQF C8>8I8IQ8N&--&&3--e4TVV||GY7AA$G  ::<  (zz|ACHW#C (E gS2B CE >UZ/75:s3Ksx3WSESXJ78 8Z  wwV VV]]^efHnnqQryy{m8<=G MM'M. 3GEG#B c$V^8dQhRRRRRR/#)rrraddedrrrr )r!s"r"r#r#@s&JJ4J JdJr$c *a\S4oRpVFpSV, PRR7K \VUUu0uF3p\V4PFp\ V4R8wgKVkK K5 uppRRR7FpSV, P 4K T;'d@\;QJdV3RlV4F 'gK RM RM!V3RlV44'*# \dRpKi;iuuppi \dKi;i)zEvery one is the move's own file: git refuses to move a checkout over an untracked file. False when one of them is still there (the caller keeps the marker; the restore retries).TrPFrc,\VP4#N)lenparts)rs&r""drop_added_files..Ls s177|r$)keyreversec3p<"TF+p\PPSV, 4xK- R#5ir)rCr5lexists)rrrs& r"r#drop_added_files..Qs%I5CBGGOOD3J775s36)rrWrHsortedrrrmdirany)rrgonerrrsf& r"drop_added_filesr@s :D D  CZ  4  0 uYud3i6G6G3q6UX=!!6G!uY3TC  F] ! ! #C  I II5II5IIII D Y   s.C)*C= + C= D) C:9C: DDc$V^8dQhRRRRRR/#)rrrrgrrrr )r!s"r"r#r#Ts& D D DC DD Dr$caaRVV3RllpV!RRRR4pVP^8wgYVPP4V8wg:\\ S44P R, P 4'dR#V!R R R R 4pVP^8H;'d!VPPR 4'*#)zOHEAD is ``sha``, no ``index.lock`` is left and no tracked file differs from it.c V^8dQhRRRR/#)rargsrrzsubprocess.CompletedProcessr )r!s"r"r##tree_whole_at..__annotate__VsWW3W6Wr$c ^<\S.VO\S4RRRR\P^xR7 #)Trrr)rrrr)rrXrs*r"runtree_whole_at..runVs6w$SYtRVah%.j6H6HRUW Wr$ rev-parserz--verifyrrFstatusz --porcelainrz--untracked-files=nor)rrrr rrexists)rXrrgrr[rsff& r" tree_whole_atrTsWW {D*f 5D !t{{002c9>UVZ[_V`>a>h>hkw>w==>B>B =$0F GF    ! C C&--*=*=d*C&CCr$c V^8dQhRRRR/#rr )r!s"r"r#r#as   $  4  r$c\\V44pVP4'gR#\\V4RR7VP4'*#)aGit exited without finishing a tree move: put back what it wrote, keep the marker if we can't. True when the tree is verified whole again (at the pre-move commit, or at the target when git got there anyway); False leaves the marker for the next launch's ``restore_interrupted_pull``. FT) after_failure)r ris_filer)rrs& r"settle_failed_tree_moveras@ %T$Z 0F >>  T$Zt<~~ r$c V^8dQhRRRR/#)r pyprojectbytes | str | Nonerrcr )r!s"r"r#r#ns 3 3%7 3J 3r$cV'gR#^RIp\V\4'dVPR4MTpVP V4R,R,p\T\4'dT#R# \ \ \3dR#i;i)zKThe target's ``requires-python`` specifier, None when absent or unreadable.Nrprojectzrequires-python) tomllibrbytesrloadsKeyError TypeError ValueErrorr)r rrspecs& r"_requires_python_specrns{ ,6y%,H,Hy(i}}T"9-.?@dC((42d2 i ,sAA22B  B c$V^8dQhRRRRRR/#)rrrversionrrr )r!s"r"r#r#|s!  s S T r$c^RIp^RIHpHpT!T4PTRR7# \dTP RT4pTP RT4pT'*;'g]\T4;'dJ\T^,4\T^,43\T^,4\T^,438u#i;i TdR#i;i)r&N)InvalidSpecifier SpecifierSetz>=\s*(\d+)\.(\d+)z (\d+)\.(\d+)T) prereleases) repackaging.specifiersrr ImportErrorsearchmatchrintcontains)rrrrrfloorrs&& r" _spec_admitsr$|s mG D!**7*EE m .5'2yllDKllSq]CaM,JsSXYZS[}^abghibj^kNl,llm s-(C False: keep checking, so a real syntax error is never waved through on a guess. N)platformrr$python_version)r r'rs& r"requires_other_pythonr)s5  +D t  Q QL7N7N7P$Q QQr$z1import platform; print(platform.python_version())a6import base64, json, sys verdict = None for rel, data in json.load(sys.stdin).items(): try: compile(base64.b64decode(data), rel, 'exec', dont_inherit=True) except (SyntaxError, ValueError) as exc: verdict = [rel, f'{type(exc).__name__}: {exc}'] break print(json.dumps(verdict)) rrc(V^8dQhRRRRRRRR/#) rargvrrrrfloatrrcr )r!s"r"r#r#s( 9 9i 93 9e 9Z 9r$c ^RIHp\P!WRRRRW#!4RR7 pTP ^8Xd TP#R# \\P 3dR#i;i)z\Stdout of a read-only interpreter child (it never writes the checkout), None when it failed.)windows_hide_flagsTrrF)inputrrrrr creationflagscheckN)hermes_cli._subprocess_compatr.rrrHrrr)r+rrr.dones&$$ r" _run_pythonr4sk@~~d4Za%.OaOckpr//Q.4;;8D8 Z// 0s"A A('A(c V^8dQhRRRR/#)rrrrrcr )r!s"r"r#r#s  3 : r$c^RIHp\^(\P^,R 4Uu.uF5pV!RV 24;pP 'gK"VP ^,NK7 upR,pVFOp\ VRR\.^R7;'gRP4pV'gK:\W4'gKMVu# R#uupi) aAn installed ``python3.N`` the target's ``requires-python`` admits (newest first), or None when this machine has none. No uv tier: Hermes never resolves the user's uv (tests/test_managed_runtime_resolution.py), and a missing interpreter only means this one judges.)locate_commandzpython3.:NN-I-c)rrN) hermes_platform.resolverr7rangero version_infocommandr4_PYTHON_VERSIONrr$)rr7minorres candidatespythonrs& r"_admitted_pythonrEs8.3B8H8H8KR.PJ.PU+hug,>??cHH!#++a...PJJLNJdODbQWWUW^^` 7|D22M  Js CCc V^8dQhRRRR/#)rsourceszdict[str, bytes]rtuple[str, str] | Noner )r!s"r"r#r#s+0Fr$cVP4Fwr\W!RRR7K R# \\3d)pT\ T4P RT 23uRp?u#Rp?ii;i)execT) dont_inheritz: N)rVcompile SyntaxErrorrtype__name__)rGrr_rqs& r" _compile_hererPsb]]_  7 DvD 9% Z( 749--.b66 6 7s+A$AA$A$c$V^8dQhRRRRRR/#)rrGdict[str, bytes | None]r z bytes | NonerrHr )r!s"r"r#r#s(!m!m"9!ml!mWm!mr$c ^RIp^RIp^RIpVP4UUu/uF wrVVfK WVbK ppp\ V4pVe \ WP 44'd \V4#\V4;p 'dTPVP4UUu/uF%wrVWRPV4PR4bK' upp4p \V RR\.V ^xR7p TPT ;'gRP4P!4R,4p V fR#\'V \(4'd2\+V 4^8Xd"\-V ^,4V ^, RV R 23#\V4p V fR#V ^,V ^, R VP 4 R V R V R 23#uuppiuuppi \"\$3dRp Li;i)a``(path, error)`` for the first startup file that does not compile, else None. Judged by the interpreter that will run the target: this one when the target's ``requires-python`` admits it, else an installed interpreter it admits (review N15: a conflict-marker scan is not a syntax check). With none installed, this interpreter still judges: code it parses is code a newer Python parses, and a refusal names the Python to install so the release can be judged by its own interpreter. ``None`` values (absent files) are skipped. Nasciir9r:)rrrFz (judged by )z Judged by Python z: the target requires Python zM and no installed interpreter satisfies it. Install one (`uv python install 'zJ'`) and re-run `hermes update` so the release is judged by its own Python.r;)base64jsonr'rVrr$r(rPrEdumps b64encoderr4 _COMPILE_ALLrr splitlines IndexErrorrrrrr)rGr rVrWr'rr_presentrrDpayloadoutverdictbrokens&& r"startup_syntax_errorrbs*1--/N/YSTysy/GN  +D ||D*A*A*CDDW%%!$''v'**[b[h[h[jk[jicc#3#3D#9#@#@#II[jkl64|>*F>>GGc$V^8dQhRRRRRR/#)rrr target_refrrrRr )r!s"r"r#r#s"TsI`r$c a\\PV44p\PV4pRPV3RlV44P R4p\ VRR.\ V4VR^xR7pVP^8XdVP;'gRMR^rVFp VPR V 4p V ^8dV#WV P4V ^,r\V 4^8XgKKV ^,P4'gKj\V ^,4p V ^,R 8Xd WW,WZ&W^,, p K V#) z``{rel: bytes}`` of each path as committed at ``target_ref`` (None: absent there or unreadable), in ONE ``git cat-file --batch`` instead of one ``git show`` per file.rc34<"TF pS RV R2xK R#5i):rNr )rrrds& r"r$read_target_files..s?# AcU"-srzcat-filez--batchT)rr/rrr$ sblob)rrTfromkeysrrrrrrfindrrisdigitr!)rXrrdrelpathsnamesrrequestrr_posrendheadersizes&&f& r"rrs! x( )E%)]]5%9Egg???FFwOG :y1s4y`dnq rB%']]a%7   SS!hhuc" 7  L cl((*C!G v;! q 1 1 3 3vay>DayG# SZ0 !8OC Lr$c$V^8dQhRRRRRR/#)rrrrdrrrHr )r!s"r"r#r#s"22t22Ka2r$c\WVR.VO4pTP RR4p\ YE4# \Pd\R4R#i;i)a``(path, error)`` for the first startup-critical file that does not compile at ``target_ref``. Read from the object store, never written to the tree: this runs BEFORE HEAD moves, so a broken release is refused with the install untouched (the post-pull rollback stays as the backstop). ``startup_syntax_error`` judges it under the interpreter the target admits. A file absent at the target (or unreadable) is skipped: the post-pull guard has the last word. pyproject.tomluU ⚠ Syntax preflight skipped (slow object fetch); the post-update check still runs.N)rrTimeoutExpiredrnpoprb)rXrrdrmfilesr s&&&& r"target_syntax_errorrzsb!'>N=ZQY=Z[  *D1I  11  $ $ ef s/ AAc V^8dQhRRRR/#)rrrrrHr )r!s"r"r#r#s b bD b/E br$cl\V4p/pVF:pW, P4'dW, P4MRW#&K< VR, p\ Y%P4'dVP44#R4# \dp\ T4RT 23uRp?u#Rp?ii;i)z\``startup_syntax_error`` for the files in the worktree at ``root`` (the post-move backstop).Nzcould not read: rv)rrr7rHrrb)rrmrGrrqr s&& r"tree_syntax_errorr}s :D')G 69=8L8L8N8NDJ224TXGL ''I CTCTCVCV)=)=)? aa\` aa 6s8/u55 5 6s6B  B3B.&B3.B3c V^8dQhRRRR/#)rrrrztuple[str, str]r )r!s"r"r#r##sNN4NONr$c@aaRVV3RllpV!RR4V!RRR43#)c V^8dQhRRRR/#)rrrrr )r!s"r"r#%head_and_branch..__annotate__$s??3?3?r$c <\S.VO\S4RRRR\P^.out$sS Wgg3t9TPT_fox","4"4bB$&MMQ$6ryy >B>r$rrz --abbrev-refr )rXrr_sff r"rRrR#s*?? {F #Snf%M MMr$c$V^8dQhRRRRRR/#)rrrrurHrrr )r!s"r"r#r#,s" 3 3d 33I 3d 3r$c^RIHpVeV^,'gR#V!4f \V4P4'dR#\ W4V8H#)zTrue when the checkout is exactly where this run found it: same HEAD, same branch, no autostash taken, no tree move armed. Only then may a failed git update fall back to ZIP.)_unrestored_autostash_noticeF)hermes_cli.update_cmd_stashrr rrR)rXrrurs&&& r"checkout_untouchedr,sHI }E!HH#%15LT5R5Z5Z5\5\ 7 )U 22r$cV^8dQhRR/#rLr )r!s"r"r#r#8s  d r$c>RsRs\P4RsRsR#)a\A new ``hermes update`` attempt owns nothing yet: no snapshot, no stake, no run start. The state above is per attempt, not per process: a second update in one interpreter (a long-lived caller) that inherited the first one's snapshot and owner would hand back the first update's committed debt as its own undo when its move is refused (review O5). rN)rrrrUrrr r$r"begin_update_attemptr8s%FOJr$c V^8dQhRRRR/#)rrrrr<r )r!s"r"r#r#Gs""D"T"r$cH\V4\W43s\V4sR#r)rrRrrr)rXrs&&r"record_run_startrGsw-!?@JDzr$c V^8dQhRRRR/#rr )r!s"r"r#r#MsHHH$Hr$cn\fR#\\^,\V4\^,4#)z]``checkout_untouched`` for this run; True before the checkout phase (nothing can have moved).T)rrr)rs&r"run_checkout_untouchedrMs& jmT$ZA GGr$c$V^8dQhRRRRRR/#)rrrrdrrrcr )r!s"r"r#r#Ts!Tszr$cd\V4p\V4'g^RIHpV!V4\WW#4pVeAVwrx\ R4RV R2RPVP4R,4,#R# \dL_\ dp\ R4RT 2uRp?#Rp?ii;i) aWhy this update must not start, checked BEFORE the first tree move; ``None`` to proceed. * a venv owned by another OS user (the completion child used to refuse only after the swap); * a target whose startup-critical modules do not compile (rollback used to be the only guard). )refuse_foreign_owned_venvvenv_foreign_owneru✗ Nrzu?✗ The update target has a syntax error in a critical file: z :NN) rr*r2rr Exceptionrrzrr[) rXrrdcritical_filesrrqrar5errors &&&& r"preflight_refusalrTs :D t $ $ F %d + ! KF  *+RSWRXX^_-- 0 0 22 678 9    - .#<  s)A>> B/ B/B/B*$B/*B/)I__conditional_annotations____doc__ __future__rloggingrCrro contextlibrpathlibrtypingrhermes_cli._early_recoveryrrrr r r r r rrrhermes_cli.update_cmd_commonrhermes_cli.update_custodyr getLoggerrlr__annotations__rrrrr*r3r9rJr`rerSrvr~r{rrrrrrrrr$r)r@rZr4rErPrbrrzr}rRrrrrr)rs@r"rsc #      6-   2 39=6=,. ).59 29#'.'1 iQ:'T$ X 50)-63l  3QJ( D   3  RF#  9 9b 9 !mH*2& bN 3 " Hr$