+ kHjRt^RIHt^RIt^RIt^RIHt^RIHt^RI H t ^RI H t ^RI Ht^RIHtR t] !]4P$t] R 2tR tR t!R R]4tRRltR1RRlltR1RRllt]!RR7!RR44t]P:!R4tRRltRRlt RRlt!R R!lt"R"R#lt#]!RR7!R$R%44t$]!RR7!R&R'44t%R(R)lt&R*R+lt'R,R/R-R.llt(R/R0lt)R#)2uTermux pool pins: the runtime-lib table and lock.json's bionic rows. ``scripts/termux/stage_runtime_libs.py`` merges their .debs into one flat ``lib/`` inside the sealed Termux payload, and ``scripts/ci/archive_inputs.py`` mirrors the same bytes into R2. Both are chained to the pin table that lives beside this module. The pool is rolling: rebuilding a package DELETES the previous archive from ``pool/main/``, so a pin rots silently until a payload build downloads it and gets a 404. The library set is the payload's recursive DT_NEEDED closure, so a pin may not simply track "newest" — a repin is a repair: hermes pm update --termux --check # what the pool no longer serves hermes pm update --termux # repin exactly those rows Nothing here resolves versions. "Move to the newest" is a different job with a different blast radius (a repin can land a rebuilt library under a moved soname), so an alive pin is left alone even when the pool has moved on. ) annotationsN) dataclass)Path)Optional)urlsplit)hash_url) _get_textz,https://packages.termux.dev/apt/termux-main/z)dists/stable/main/binary-aarch64/Packagesz/apt/termux-main/pool/main/ztermux_runtime_libs.jsonc]tRt^)tRtRtR#) PinMismatchz:The pool serves bytes the package index does not describe.N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r 3/home/ubuntu/.hermes/hermes-agent/pm/termux_libs.pyr r )sDrr cV^8dQhRR/#)returnrr )formats"r __annotate__r-s88D8rcf\\4P4P\, #N)r__file__resolveparent TABLE_NAMEr rr table_pathr-s > ! ! # * *Z 77rc V^8dQhRRRR/#)rpathOptional[Path]rdictr )rs"rrr1sRR^RtRrc\P!\T;'g \44P RR74#)z utf-8-sig)encoding)jsonloadsrr read_text)r!s&r load_tabler)1s. ::d4//:<0::K:P QQrc$V^8dQhRRRRRR/#)rtabler#r!r"rNoner )rs"rrr5s!d.Drc\T;'g \44P\P!V^R7R,RRR7R#)r)indent zutf-8)r%newlineN)rr write_textr&dumps)r+r!s&&r save_tabler35s;  )) 5#d*Wd*rT)frozenc@]tRt^@t$R]R&R]R&R]R&R]R&RtR#) PoolPackagestrnameversionurlsha256r Nr r rr__annotations__rr rrr6r6@s I L H Krr6z"^([A-Za-z][A-Za-z0-9-]*):[ ]?(.*)$c V^8dQhRRRR/#)rtextr7rdict[str, PoolPackage]r )rs"rrrKsc4rc/p/p.VP4ORNFpVP4'g"\V4pVeWAVP&/pK:V^,P 4'dKY\ P V4pV'gKxVP^4P4W%P^4&K V#)zPackage -> the archive the pool currently serves. RFC822-ish stanzas: one field per line, indented continuation lines (long descriptions) ignored. A stanza without a filename or hash is not installable evidence and is dropped. ) splitlinesstrip_packager8isspace_FIELDmatchgroup)r?poolfieldslinerowrHs& r parse_indexrNKs$&DF($//#(R(zz||6"C!$SXXFa""LL&Eu).Q)=)=)?{{1~&) Krc V^8dQhRRRR/#)rrKzdict[str, str]rOptional[PoolPackage]r )rs"rrrasQQ^Q(=QrcVPR4pVPR4pVPR4pV'dV'd V'gR#\WPRR4\V,V4#)PackageFilenameSHA256NVersionrB)getr6POOL)rKr8filenamer;s& rrErEasT ::i Dzz*%H ZZ !F xv tZZ 26x PPrcV^8dQhRR/#)rrr@r )rs"rrrjs--%-rc2\\\44#r)rNr INDEX_URLr rrindexr\js y+ ,,rc V^8dQhRRRR/#)rr:r7rz Optional[str]r )rs"rrrns  C M rcd\V4pVPR8wgVP\8wdR#VPP \ 4'gR#VP\\ 4RPR4p\V4^8wg\V4'gR#V^,#)zBThe pool package a pinned URL names, or None for any other source.httpsN/) rschemenetloc POOL_HOSTr! startswithPOOL_PATH_PREFIXlensplitall)r:parsedpartss& r package_ofrkns c]F }}6==I#= ;; ! !"2 3 3 KK,-. / 5 5c :E 5zQc%jj 8Orc V^8dQhRRRR/#)rr:r7rr )rs"rrr{s""3"3"rc4VPR^4R,#)r`)rsplit)r:s&r _filenamerp{s ::c1 b !!rc@]tRt^t$R]R&R]R&R]R&R]R&RtR#)Pinr7scoper8r:r9r Nr<r rrrrrrs J I H Lrrrc,]tRt^t$R]R&R]R&RtR#)RetiredrrpinrP replacementr Nr<r rrrurus H'&rruc V^8dQhRRRR/#)rr+r#rz list[Pin]r )rs"rrrs9rc $VPR4;'g/P4UUu.uF)wr#\RW#R,VPRR44NK+ pppVPR4pV'd5VP\RRVR,VPRR444VP 4FpVP V4P4Fwrg\ V\4'dTMV.Fp\ V\4'gK\VPRR44'gK>TP\R V R V 2VR,VPV4;'gR44K K K V#uuppi) u3Every pinned URL the Termux pool serves, from both authorities. The table owns the payload's libraries and its license package; the lockfile owns the cross-target tools whose bionic arm is a pool .deb (python, node, uv). Other lock sources — GitHub tarballs, OCI digests — are not the pool's business. libslibraryr:r9rBlicenseslicenseztermux-licensestool@) rVitemsrrappendnamespinned_artifacts isinstancelistr#rkr9)r+lockfiler8rMoutr|targetrowss&& rpinsrsM ))F+11r88: :ID ItZB)?@: yy$H 3y"3Xe_hllS\^`Fabc $55d;AACLF)$55tD6Ac4((Zr8J-K-KJJs6dV1VH+=s5z8K[K[\`KaKgKgeghiBD! J s/F c$V^8dQhRRRRRR/#)rr+r#rJr@r list[Retired]r )rs"rrrs"4)?Mrc$.p\W4F~pTP\VP4;'gR4pVe0\ VP4\ VP48wgKdVP \ WE44K V#)z6Pins whose archive the pool has replaced (or dropped).rB)rrVrkr:rprru)r+rrJrrventrys&&& rretiredrsk CE$CGG,223 =Ieii0Icgg4FF JJws* +% Jrverifyc$V^8dQhRRRRRR/#)rr+r#stalerrintr )rs"rrrs!$3rczT;'g\p^pVFpVPfKV!VPP4pWePP8wdE\ \ VP P4 RV RVPP 24h\WV4V^, pK V#)uRepin every retired row to the pool's current archive. The index's SHA256 is not taken on faith: the replacement's bytes are fetched and hashed first — the same evidence `pm lock` pins with. Rows the pool no longer carries are left exactly as they are. z: the pool serves z, the index declares )rrwr:r;r rkrv_repoint)r+rrrappliedrserveds&&&$ rrepairrs  xFG    $ ))--. &&-- -eiimm,--?xH&&+&7&7&>&>%?A  %(1  Nrc$V^8dQhRRRRRR/#)rr+r#rrurr,r )rs"rrrs!D7trcVPVPrCVPR8XdVPP R^4wrVVP V4pWv,p\ V\4'dTMV.FWp \V PRR44\VP48XgK8VPVPuV R&V R&KY VPWQPV4V4R#VPR8XdVR,VP,MVR,p VPVPVPuV R&V R&V R &R#) r~rr:rBr;Nr{rzr|r9)rvrwrsr8rgrrrrkrVr:r;set_pinr9) r+rrrvrwr8r artifactsrrMs &&& rrrsyy%"3"3 yyFxx~~c1- --d3  %dD114v=C#''%,-CGG1DD,7OO[=O=O)E CM> //5yA%(YY)%;%- !zARC.CJH s9~rr)*r __future__rr&re dataclassesrpathlibrtypingr urllib.parserpm.storer pm.updaterrWhostnamercr[rer RuntimeErrorr rr)r3r6compilerGrNrEr\rkrprrrurrrrr rrrs(# !!5 TN # # f= > 0 ' E,E8R $ 9 :,Q- " $ $'''.$.r