+ lHjZ aRtS0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI H t H t ^RIHt^RIHtHt^RIHt^RIHtHtHtHtHt^RIHtHt]P<!]4t ]!4R, t!]!t"R R lt#R t$R t%R t&Rt'Rt(Rt)Rt*Rt+.RNRNRNRNRNRNRNRNRNRNRNRNRNR NR!NR"NR#NR$NR%NR&NR'NR(NR)NR*NR+NR,NR-NR.NR/NR0NR1NR2NR3NR4NR5NR6NR7NR8NR9NR:NR;NRNR?NR@NRANRBNRCNRDNt,]-!^ ].!^<]!RE^444t/]^kRFt0]Pb!RG4t2RHRIlt3RJRKlt4RLRMlt5RNROlt6RRPRQllt7RRRSlt8RTRUlt9RVRWlt:RXRYlt;RZR[ltR`Ralt?RbRclt@RdReltARRfRglltB]/RRR3RhRilltCRRjRklltDRlRmltERnRoltFRpRqltGRrRsltHRtRultIRvRwltJRxRyltKRzR{ltLR|R}ltMR~RltNRRltORRltP!RR4tQRRltRR#)u Checkpoint Manager — Transparent filesystem snapshots via a single shared shadow git store. Creates automatic snapshots of working directories before file-mutating operations (``write_file``, ``patch``, ``terminal`` with destructive flags), triggered once per conversation turn. Provides rollback to any previous checkpoint. This is NOT a tool — the LLM never sees it. It's transparent infrastructure controlled by the ``checkpoints`` config flag or ``--checkpoints`` CLI flag. Storage layout (single shared store, git objects deduplicated across projects) ----------------------------------------------------------------------------- ~/.hermes/checkpoints/ store/ — single bare-ish git repo HEAD, config, objects/ — standard git internals (shared) refs/hermes/ — per-project branch tip indexes/ — per-project git index projects/.json — {workdir, created_at, last_touch} info/exclude — default excludes (shared) .last_prune — auto-prune idempotency marker legacy-/ — archived pre-v2 per-project shadow repos (auto-migrated on first init) Why a single store? ------------------- The pre-v2 design kept a full shadow repo per working directory. Each one re-stored most of the project's files under its own ``objects/`` tree, with zero sharing across worktrees of the same project. A single user with a dozen worktrees of the same repo burned ~40 MB each (~500 MB total) storing the same blobs over and over. A single shared store lets git's content- addressable object DB deduplicate across projects and across turns, so adding a new worktree costs near-zero. The shadow store uses ``GIT_DIR`` + ``GIT_WORK_TREE`` + ``GIT_INDEX_FILE`` so no git state leaks into the user's project directory. Auto-maintenance (``tools.checkpoint_maintenance``) --------------------------------------------------- Shadow state accumulates over time. ``prune_checkpoints`` deletes refs whose recorded working directory no longer exists (orphan) or whose last touch is older than ``retention_days`` (stale), then runs ``git gc --prune=now`` to reclaim object storage. A size-cap pass drops the oldest checkpoints per project until total store size is under ``max_total_size_mb``. N)Path PurePosixPath)get_hermes_home)selected_git_envwindows_hide_flags)clear_stale_tmp_packs)DictListOptionalSetTuple)env_intrmtree_readonly checkpointsc$V^8dQhR\/#returnr)formats"=/home/ubuntu/.hermes/hermes-agent/tools/checkpoint_manager.py __annotate__rNsss$scN\\8wd\#\4R, #)u>Active profile's checkpoint root at call time: the patched ``CHECKPOINT_BASE`` when a test changed it, else live profile-scoped HERMES_HOME — under the multiplexed gateway one process serves every profile, so the import-time constant would write every profile's code-edit checkpoints into the launch profile's store.r)CHECKPOINT_BASE_CHECKPOINT_BASE_AT_IMPORTrrr_resolve_checkpoint_baserNs! .1KK?rQ`QberQrrrstorez refs/hermesindexesprojectsledgerszlegacy-z .last_pruneiz node_modules/zdist/zbuild/ztarget/zout/z.next/z.nuxt/z __pycache__/z*.pycz*.pyoz.cache/z.pytest_cache/z .mypy_cache/z .ruff_cache/z coverage/z .coveragez.venv/zvenv/zenv/z.git/z.hg/z.svn/z .worktrees/z*.soz*.dylibz*.dllz*.oz*.az*.jarz*.classz*.exez*.objz*.mp4z*.movz*.mkvz*.webmz*.zipz*.tarz*.tar.gzz*.tgzz*.7zz*.rarz*.isoz.envz.env.*z .env.localz .env.*.localz .DS_Storez Thumbs.dbz*.logHERMES_CHECKPOINT_TIMEOUTiPz^[0-9a-fA-F]{4,64}$cFV^8dQhR\R\\,/#)r commit_hashrstrr )rs"rrrs  s x} rcV'dVP4'gR#VPR4'dRV: 2#\PV4'gRV: 2#R#)zValidate a commit hash to prevent git argument injection. Returns an error string if invalid, None if valid. Values starting with '-' would be interpreted as git flags (e.g., '--patch', '-p') instead of revision specifiers. zEmpty commit hash-z/Invalid commit hash (must not start with '-'): z4Invalid commit hash (expected 4-64 hex characters): N)strip startswith_COMMIT_HASH_REmatch)r$s&r_validate_commit_hashr-sW k//11"c""@PP   - -Ek_UU rcRV^8dQhR\R\R\\,/#)r file_path working_dirrr%)rs"rrrs%3SXc]rc0V'dVP4'gR#\PPV4'dRV: 2#\ V4pW , P 4pVP V4R# \d RT: 2u#i;i)zValidate a file path to prevent path traversal outside the working directory. Returns an error string if invalid, None if valid. zEmpty file pathz/File path must be relative, got absolute path: z7File path escapes the working directory via traversal: N)r)ospathisabs_normalize_pathresolve relative_to ValueError)r/r0 abs_workdirresolveds&& r_validate_file_pathr;s IOO--  ww}}Y@ NN!+.K'002HW[)  WH VVWs.BBBc0V^8dQhR\R\/#)r path_valuer)r&r)rs"rrrs3333rcP\V4P4P4#)z;Return a canonical absolute path for checkpoint operations.)r expanduserr6)r=s&rr5r5s   & & ( 0 0 22rc0V^8dQhR\R\/#rr0rr&)rs"rrrs>>s>s>rc\\V44p\P!VP 44P 4R,#)z6Deterministic per-project hash: sha256(abs_path)[:16].:NN)r&r5hashlibsha256encode hexdigest)r0abs_paths& r _project_hashrJs5?;/0H >>(//+ , 6 6 8 ==rcFV^8dQhR\\,R\/#rbaser)r r)rs"rrrs"AAhtnAArc@T;'g \4\, #)z+Return the single shared shadow store path.)r_STORE_DIRNAME)rMs&r _store_pathrPs  . .,.. @@rc0V^8dQhR\R\/#rrrrbool)rs"rrrs%%4%D%rc0VR, P4#)HEADexists)rs&r_store_has_headrYs FN " " $$rc<V^8dQhR\R\R\/#rrdir_hashrrr&)rs"rrrs!//t/s/t/rc*V\, V, #N)_INDEXES_DIRNAMErr\s&&r _index_pathrbs # #h ..rc<V^8dQhR\R\R\/#r[r])rs"rrrs!99999rc0V\, V R2, #z.json)_LEDGERS_DIRNAMEras&&r _ledger_pathrgs # # %&8 88rcFV^8dQhR\R\\,/#rr3r)rr r&)rs"rrrs  T hsm rc$a\P!4p\VR4;_uu_4o\V3RlR4FpVP V4K RRR4VP 4# +'giL ;i \ dR#i;i)z?Streaming sha256 of a file's bytes. None if unreadable/missing.rbc&<SPR4#)i)read)fhsr_hash_file..sbggg&6rrN)rErFopeniterupdaterHOSError)r3hchunkros& @r _hash_filerxso NN  $  6<={{}  s()B)A-B- A= 8B BBc^V^8dQhR\R\R\\\3,/#r[rr&dict)rs"rrrs)    S$Y rc\W4PRR7p\P!V4p\ V\ 4'dV#/# \ \3d/u#i;i)a Load the agent-write ledger: {relpath: {"sha256": ..., "ts": ...}}. The ledger records the content hash of every file the last successful ``write_file`` / ``patch`` produced, so restores can tell "Hermes wrote this" apart from "the user hand-edited this afterwards". utf-8-sigencoding)rg read_textjsonloads isinstancer{rur8)rr\rawdatas&& r _load_ledgerrs\5+55{5Kzz#!$--t525 Z  sAA A A#"A#cbV^8dQhR\R\R\\\3,RR/#)rrr\ledgerrNrz)rs"rrr s6ZZZZT#t)_ZZrc\V4\8d0\VP4RRR7R\p\ V4p\ W4pVP PRRR7VPR4pVP\P!V4RR7VPV4R# \d\PR TRR 7R#i;i) z=Persist the agent-write ledger, capped to the newest entries.cr\V^,\4'dV^,PR^4#^#)rmts)rr{get)kvs&rrp_save_ledger..s,Z1t5L5Lr!uyyq1SRSSrTkeyreverseNparentsexist_okz .json.tmputf-8r~z(Failed to save agent-write ledger for %sexc_info)len_LEDGER_MAX_ENTRIESsorteditemsr{rgparentmkdir with_suffix write_textrdumpsreplaceruloggerdebug)rr\rnewestr3tmps&&& r _save_ledgerr sZ v;, , S#" $F &\FE, $6{+ tzz&)G< D Z ?TX YZsB4B88#CCc0V^8dQhR\R\/#)rr\rrB)rs"rrrs((((rc\ RV 2#)/) _REFS_PREFIX)r\s&r _ref_namers^1XJ ''rcFV^8dQhR\R\\,/#)r ls_tree_zr)r&list)rs"rrr"scd3ircVPR4Uu.uF>pVPR4'gKRV9gK%VPR^4^,NK@ up#uupi)zvPaths of gitlinks (nested repositories stored as a commit reference, not their files) in ``git ls-tree -r -z`` output.z160000 commit  )splitr*)rrecords& r_gitlink_pathsr"sb  oof- -F   - . !376> ! T1a  -  sAAAcFV^8dQhR\\,R\/#)r nested_reposr)rr&)rs"rrr,s>>49>>rcRPVR,4p\V4^8dR\V4^, R2MRpRV V R2#)z|Checkpoint-message suffix naming nested repositories whose files were not captured, so every /rollback listing discloses it., :NNz (+)z! [nested git repos not captured: ])joinr)rshownmores& r_uncaptured_noter,sQ IIl2& 'E-0->-BS\"Q&'q )D .ugdV1 ==rc<V^8dQhR\R\R\/#r[r])rs"rrr4s!::d:c:d:rc0V\, V R2, #re)_PROJECTS_DIRNAMEras&&r_project_meta_pathr4s $ $(5'9 99rc^V^8dQhR\R\R\\,R\/#)rrr0 index_filer)rr&r r{)rs"rrr<s4&& &&& &rcn\V4p^RIHp\V!RRR74p\ V4VR&\ V4VR&VP RR4VP RR4Ve\ V4VR &MVP R R4\ PVR &\ PVR &R VR &V#)uBuild env dict that redirects git to the shared store. The shared store is internal Hermes infrastructure — it must NOT inherit the user's global or system git config. User-level settings like ``commit.gpgsign = true``, signing hooks, or credential helpers would either break background snapshots or, worse, spawn interactive prompts (pinentry GUI windows) mid-session every time a file is written. Isolation strategy: * ``GIT_CONFIG_GLOBAL=`` — ignore ``~/.gitconfig`` (git 2.32+). * ``GIT_CONFIG_SYSTEM=`` — ignore ``/etc/gitconfig`` (git 2.32+). * ``GIT_CONFIG_NOSYSTEM=1`` — legacy belt-and-suspenders for older git. ``index_file``, if given, forces git to use a per-project index under ``store/indexes/`` so projects don't race on a shared index. build_subprocess_envF scrub_secretsinherit_profile_homeGIT_DIR GIT_WORK_TREE GIT_NAMESPACEN GIT_ALTERNATE_OBJECT_DIRECTORIESGIT_INDEX_FILEGIT_CONFIG_GLOBALGIT_CONFIG_SYSTEM1GIT_CONFIG_NOSYSTEM)r5tools.environments.localrrr&popr2devnull)rr0rnormalized_working_dirrenvs&&& r_git_envr<s*-[9> /eZ_` aCZC N56CGGOT"GG .5 #J   $'!zzC!zzC!$C Jrc4V^8dQhR\\,R\R\R\R\\ \,,R\\,R\\ \\3,,R\\\\3,/#) rargsrr0timeoutallowed_returncodesr extra_envr) rr&rintr setr{tuplerT)rs"rrresJ#J# s)J# J#J# J# "#c(+ J#  J#S#X'J# 4c>J#rc"\V4pVP4'gBRV 2p\PRRP R.\ V4,4V4RRV3#VP 4'gBRV 2p\PRRP R.\ V4,4V4RRV3#\V\V4VR7p V'dV PV4\P!RV PR R4R 7p V fR##V .VOp T;'g \4pR V9d/MR RRRRR/p \P!V 3RR/V BRVRV R\V4R\P R\#4RR/Bp V P$^8HpR V9d!\&P(!V P*4MV P*P-4pR V9d,V P.P1RRR7P-4MV P.P-4pV'gCV P$V9d2\PRRP V 4V P$V4WV3# \P2d7RT RRP T 4 2p\PTRR7RRT3u#\4dp\7TRR 4pTR8Xd/\PR RP T 4RR7R$uR p?#RT 2p\PR!RP T 4TRR7RRT3uR p?#R p?i\8dAp\PR"RP T 4TRR7RR\T43uR p?#R p?ii;i)%a%Run a git command against the shared store. Returns (ok, stdout, stderr). ``allowed_returncodes`` suppresses error logging for known/expected non-zero exits while preserving the normal ``ok = (returncode == 0)`` contract. Example: ``git diff --cached --quiet`` returns 1 when changes exist. zworking directory not found: zGit command skipped: %s (%s) gitFrz&working directory is not a directory: rPATHr3N-ztextTrrerrorsrcapture_outputrrcwdstdin creationflagscheck)rz(Git command failed: %s (rc=%d) stderr=%szgit timed out after zs: rfilenamezGit executable not found: %sz,Git command failed before execution: %s (%s)z#Unexpected git error running %s: %s)Frz#git is not installed or not on PATH)Frz git not found)r5rXrerrorrris_dirrr&rtshutilwhichrr subprocessrunDEVNULLr returncoder2fsdecodestdoutr)stderrdecodeTimeoutExpiredFileNotFoundErrorgetattr Exception)rrr0rrrrrmsgrrcmd text_optionsresultokrrexcmissing_targets&&&&&&& r_run_gitr esS-[9 ! ( ( * *-.D-EF 3SXXugT >R5SUXYb#~ ! ( ( * *67M6NO 3SXXugT >R5SUXYb#~ 5#45* MC 9 ,,u37762#6 7C {?? ,,C-66(#!T\rj'S[]f/g            *+  $$  -.      ! #/3t|V]]+ATATAVLPTXL%%gi%@FFH^d^k^k^q^q^sf''/BB LL: v00& 6!!  $ $$WIS#@ S4 (b#~  j$7 U " LL7#QUL V- --.D-EF CSXXc]TWbf gb#~ # :CHHSM3Y] ^b#c(""#sW2C:I3-AI33AN=NN/`` dir. The pre-v2 layout had one shadow git repo per working directory directly under ``CHECKPOINT_BASE``. The v2 layout wants a single ``store/`` dir. Rather than delete the old data (users might want to recover), rename everything except our own v2 entries into ``legacy-/``. The legacy dir is subject to the same retention sweep and can be manually cleared with ``hermes checkpoints clear-legacy``. Returns the legacy-archive path, or None if nothing to migrate. Nz %Y%m%d-%H%M%STrz'Could not create legacy archive dir: %sz*Could not archive legacy checkpoint %s: %sz_Migrated pre-v2 checkpoint repos to %s. Clear with `hermes checkpoints clear-legacy` when safe.)rXrPrO_PRUNE_MARKER_NAMEriterdirnamer*_LEGACY_PREFIXtimestrftimerrurwarningrmover&info) rMr legacy_rootreservedchildr)stamprdestrs & r_migrate_legacy_storer5s< ;;==  E"&K 23Hdlln%zz  t~>>   MM/2EN#3E7!;;K !!$!>! U KKE CI .!&( A  F  ! H#N   U NNG T T Us0)D)E D=D88D= E- E((E-cRV^8dQhR\R\R\\,/#rr)rs"rrrs*GGtG#G(3-Grc hVPpVP4'g VPRRR7\ T4VR, P4'dR#TPRRR7V\ , PRR7V\ , PRR7^RIHp\V!RRR 74p\PVR &\PVR &R VR &RFpVPVR4K \P!RVPRR4R7pVfR#\ P"!VRR\%V4.RRRRV\&\ P(\+4RR7 pVP,^8wdRVP.P14 2#\%T4p \7.ROY 4\7.R OY 4\7.R!OY 4\7.R"OY 4\7.R#OY 4TR, p T PRR7T R, P9RP;\<4R,RR7\>PART4R# \dpRT 2uRp?#Rp?ii;i \ P2\43dpRT 2uRp?#Rp?ii;i)$zInitialise the shared shadow store if needed. Returns error or None. Also performs one-time migration of pre-v2 per-directory shadow repos into ``legacy-/``. Trz"Could not create checkpoint base: NrV)rrFrrrrrrrrrz=Shadow store init failed: git is not installed or not on PATHinitz--barerr) rrrrrrrrrzShadow store init failed: r/exclude r~z"Initialised checkpoint store at %s)rrrrr)configz user.emailz hermes@local)r;z user.namezHermes Checkpoint)r;zcommit.gpgsignfalse)r;z tag.gpgSignr<)r;zgc.auto0)!rrXrrur5r`rrrrr2rrrrrrrr& _GIT_TIMEOUTrrrrr)rrr rrDEFAULT_EXCLUDESrr) rr0rMrrinit_envkrrcfg_wdinfo_dirs && r _init_storerDs` <> > JJtdJ 3 d#    KKtK, $$d$3 %%t%4 > 45_d efH$&JJH !$&JJH !&)H "#2 Q22ll5x||FB'?@ ;R &(CJ /dWY,$$,.      !/ 0C0C0E/FG G "YF 5uE 95I 2EB /? '7v~H NNDN! %% "#d*W& LL5u= y >7u= = >P  % %'8 92+C5112sBI*,J.json`` with workdir + timestamps.rF created_at last_touchr}r~Trrz'Could not write project metadata %s: %sN)rHrI)rJrr+r&r5rNrtrXrrrrr{rrur8rrrrrr) rr0r\ meta_pathnowmetaevidenceexistingrrs && r_register_projectrYhsH[)H"53I ))+CS!=>\38D <=H H zz)"5"5{"5"KLH(D))%-\\,%D\" L?(0 DI L Ptd;TZZ-@ $    P > OOPs8 AE#E0E?AEEE F'FFc4V^8dQhR\R\RR/#rPr])rs"rrrs&QQ$QSQTQrc\V4p\W4pVP4'g\W4R#\P !VP RR74p\V\4'g/p\\V44VR&\P!4VR&VPRVR,4\\V44pV'dVP!V4VP#\P$!V4RR7R# \\3d/pLi;i \d"p\&P)RY64Rp?R#Rp?ii;i) z7Update last_touch for a project, preserving created_at.Nr}r~rFrSrRrz(Could not update project metadata %s: %s)rJrrXrYrrrrur8rr{r&r5r+ setdefaultrNrtrrrr)rr0r\rTrVrWrs&& r_touch_projectr]s[)H"53I     %-zz)--{-CD dD ! !/+67DODOOL$|"45   <=H HQTZZ-@ Z  Q ?PPQs)&D/'D1D.-D.1 E<EEcFV^8dQhR\R\\,/#rRrrr{)rs"rrrs$4:rctV\, pVP4'g.#.pVPR4FcpVPp\P !VP RR74p\T\4'gKNYER&TPT4Ke V# \\3dK}i;i)z/Return all registered projects under the store.z*.jsonr}r~_hash) rrXglobstemrrrrur8rr{append)r projects_dirrrTr\rVs& r_list_projectsrfs,,L     C!&&x0 >> ::i11;1GHD$%%  W  41 J $   s &B""B76B7cFV^8dQhR\R\\,/#rLr_)rs"rrrs##t#T #rc .pVP4'gV#VP4FpVP4'gKVP\8Xg&VPP \ 4'dKWVR, P4'gKvRpRpVR, pVP4'd"VPRR7P4pTPRTR TR \V4;'d\V4P4R V/4K V# \\3dRpRpL`i;i) a`Return pre-v2 per-project shadow repos still directly under ``base``. Pre-v2 layout kept one shadow git repo per working directory directly under ``CHECKPOINT_BASE`` (identified by a ``HEAD`` file). This is the single source of truth for that scan so a preview built from it (e.g. ``store_status``) always matches what ``prune_checkpoints`` deletes. rVNFHERMES_WORKDIRr}r~Tr3rFrXmarker_unreadable)rXr(rr)rOr*r*rr)ruUnicodeDecodeErrorrdrTr)rMrr2rFrj wd_markers& r_pre_v2_shadow_reposrms"C ;;== ||~~  :: '5::+@+@+P+P &&(( !%!,,      )#--{-CIIK E w d7m>>W (<(<(> !2   % 0 J/0 )$(!  )s D..EEc0V^8dQhR\R\/#ri)r&r)rs"rrrs  # # rc^p\V4PR4FpV^, pV\8gKVu# V# \\3dT#i;i)z;Quick file count estimate (stops early if over _MAX_FILES).*)rrglob _MAX_FILESPermissionErrorru)r3countrs& r_dir_file_countrus` E d!!#&A QJEz! ' L W %  L s.???AAc0V^8dQhR\R\/#ri)rr)rs"rrrs  $ 3 rc^pVPR4F<pVP4'd#WP4P, pK<K> V# \dKPi;i \dT#i;i)z9Best-effort recursive size in bytes. Returns 0 on error.rp)rqis_filerJst_sizeru)r3totalps& r_dir_size_bytesr|sx E CA 99;;VVX---E! L      L s4A)6AA) A&"A)%A&&A)) A87A8ca]tRtRtoRtR/V3RlRlltV3RlRltR0V3RlRlltV3R lR ltV3R lR lt R1V3R lRllt V3RlRlt V3RlRlt ] V3RlRl4tV3RlRltV3RlRltV3RlRltR2V3RlRlltV3RlRltV3R lR!ltV3R"lR#ltR$R%/V3R&lR'lltV3R(lR)ltV3R*lR+ltV3R,lR-ltR.tVtR#)3CheckpointManageriaManages automatic filesystem checkpoints. Designed to be owned by AIAgent. Call ``new_turn()`` at the start of each conversation turn and ``ensure_checkpoint(dir, reason)`` before any file-mutating tool call. The manager deduplicates so at most one snapshot is taken per directory per turn. Parameters ---------- enabled : bool Master switch (from config / CLI flag). max_snapshots : int Keep at most this many checkpoints per directory. max_total_size_mb : int Hard ceiling on total store size. Oldest checkpoints per project are dropped when the store exceeds this after a commit. max_file_size_mb : int Skip adding any single file larger than this to a checkpoint. (Implemented via ``.gitignore`` excludes + a post-stage size check.) c2<V^8dQhRS[RS[RS[RS[/#)renabled max_snapshotsmax_total_size_mbmax_file_size_mb)rTr)r __classdict__s"rrCheckpointManager.__annotate__s3 2 2 2 2 2  2rcWn\^\V44Vn\^\V44Vn\^\V44Vn\ 4VnR#)rmN)rmaxrrrrr_checkpointed_dirs)selfrrrrs&&&&&r__init__CheckpointManager.__init__sQ  C $67!$Q,=(>!? #As+;'< =,/Erc<V^8dQhRR/#)rrNr)rrs"rrr%s(($(rc :VPP4R#)zAReset per-turn dedup. Call at the start of each agent iteration.N)rclear)rs&rnew_turnCheckpointManager.new_turn%s %%'rc6<V^8dQhRS[RS[S[,/#)rtask_idrr%)rrs"rrr)s   #  hsm  rc 6^RIHpV!V4pVfR#RV R2#)zExplain why host checkpoints are off limits for a container-backed session. Classifies the task's backend at call time (nothing is remembered), so /rollback is refused before the first mutation and follows a backend change within the session.)container_backend_for_taskNz/Checkpoints are not taken for terminal.backend=z4: file paths belong to the container, not this host.)tools.file_tools_pathsr)rrrbackends&& runsupported_backend_reason,CheckpointManager.unsupported_backend_reason)s3 F,W5 ?=gYGA A rc$<V^8dQhRS[RR/#)rr/rNrB)rrs"rrr;sQQCQDQrc VP'gR#^RIHp\V4p\ V4pVfR#V!\ 44;_uu_4\ 4pVP\V44p\WV4pRVR\P!4/V\V4&\WVV4RRR4R# +'giR#;i \d"p\PRY4Rp?R#Rp?ii;i)upRecord the content hash of a file Hermes just successfully wrote. Feeds the agent-write ledger used by :meth:`restore` in safe mode: at restore time, a file whose current content no longer matches the recorded hash was hand-edited by the user after Hermes last touched it, and is skipped instead of clobbered. Never raises — the ledger is best-effort bookkeeping. N store_lockrFrz$record_agent_write failed for %s: %s)rtools.checkpoint_pruningrr5rxrrP _ledger_keyr&rr+rrrr) rr/rr3digestrr\rrs && rrecord_agent_write$CheckpointManager.record_agent_write;s|||  Q ;"9-D%F~4677# ++CI6%e6%-vtTYY[$Is4y!Uf5 8777  Q LL? P P Qs; CCA!B;1C; C C C C;C66C;c,<V^8dQhRS[RS[RS[/#rr0r$rr&r{)rrs"rrrWs'?I?Ic?I?I?Irc \V4pV'dRRRV/#\\V44p\4pVR, P 4'gRRRR/#\ V4p\ WV4p\RR.WT\^,VR7\R R R VR .WTVR 7wrp \R\V4.WTV^0R7V'g RRRRV 2/#\WPPV44p V 'g RRR.R.RR/#.p .p \RV PR44Fp\V4V, pV P\V44p\!V\"4'dVPR4MRpVfV P%V4Ko\'V4pVfV P%V4KVV8XdV P%V4KV P%V4K RRRV RV /#)aqClassify files changed since ``commit_hash`` for a safe restore. Returns ``{"success", "restore": [rel...], "skipped": [rel...], "error"?}`` where ``restore`` lists files whose current content still matches what Hermes last wrote (per the agent-write ledger) and ``skipped`` lists files the user hand-edited after Hermes' last write or that Hermes never wrote at all. successFrrV'No checkpoints exist for this directoryadd-Arrdiffz --name-onlyr--cachedr read-treerrz!Could not compute changed files: Trestoreskipped ledger_emptyNrrF)r-r&r5rPrXrJrbr r>rrrfilterrrrrr{rdrx)rr0r$hash_errabs_dirrr\rr names_outerrrrrrelrIentryrecordedcurrents&&& r_safe_restore_plan$CheckpointManager._safe_restore_planWs)5 ugx8 8ok23 &&((ug/XY Y ) 1  %%)j B% ]D+z B z s +y23U&SE Cug1RSVRW/XY Ye%5%5g%>? tYIr"D* *$  78CG}s*HJJs8}-E.8.E.Euyy*4Hs# *Gs#H$s#s##9$4GYHHrc,<V^8dQhRS[RS[RS[/#)rr0reasonrr&rT)rrs"rrrs"S#4rc "VP'gR#\\V44pVR\\P!4409d\ P RV4R#W0P9dR#TPPV4^RI H pV!\44;_uu_4VPW24uuRRR4# +'giR#;i \d"p\ P RT4Rp?R#Rp?ii;i)uTake a checkpoint if enabled and not already done this turn. Returns True if a checkpoint was taken, False otherwise. Never raises — all errors are silently logged. Frz,Checkpoint skipped: directory too broad (%s)rNz!Checkpoint failed (non-fatal): %s)rr&r5rhomerrrrrrr_taker)rr0rrres&&& rensure_checkpoint#CheckpointManager.ensure_checkpoints |||ok23 sC ,- - LLG Q -- - ##G,  ;4677zz'28777  LL.json`` metadata via ``_list_projects`` instead of the pre-v2 per-shadow-dir scan. Each entry carries the extra ``workdir`` key so callers can label which project a checkpoint belongs to. rVrFrc&VPRR4#)rr)r)xs&rrp8CheckpointManager.list_all_checkpoints..s155b#9rTr)rPrXrfrrrdsort)rrrrVrFrs& rlist_all_checkpoints&CheckpointManager.list_all_checkpointss &&((I "5)Dhhy)//RG..w7#*i u%8 *  94 Hrc*<V^8dQhRS[RS[RR/#)r stat_linerrNr)rrs"rrrs" 1 1C 1 1 1rc r\P!RV4pV'd\VP^44VR&\P!RV4pV'd\VP^44VR&\P!RV4pV'd \VP^44VR&R#R#)z-Parse git --shortstat output into entry dict.z (\d+) filerz(\d+) insertionrz(\d+) deletionrN)researchrgroup)rrms&& rr"CheckpointManager._parse_shortstats IImY / %(_E/ " II() 4 "%aggaj/E,  II' 3 !$QWWQZE+  rc,<V^8dQhRS[RS[RS[/#rr)rrs"rrrs"999#9$9rc ^RIHpHpV!\44;_uu_4VP W4uuRRR4# +'giR#;i T\ 3dpRRR\ T4/uRp?#Rp?ii;i)z A A AA A8A3-A83A8c,<V^8dQhRS[RS[RS[/#rr)rrs"rrr s"/ / / 3/ 4/ rcV\V4pV'dRRRV/#\\V44p\4pVR, P 4'gRRRR/#\ RRV.WT4wrgpV'g RRRRV R2/#\ V4p \WY4p \ R R .WT\^,V R 7\ R R VR.WTV R7wrp\ R VRR.WTV R7wrp\V 4p\ RV.WTV ^0R7V 'gV 'gRRRR/#RRRV 'dT MRR V 'dV/#R/#)rFrrVrcat-file-t Checkpoint ' ' not foundrrrrz--statrrz --no-colorrrzCould not generate diffTrJr) r-r&r5rPrXr rJrbr>r)rr0r$rrrrr_errr\rok_statrok_diffdiff_outrs&&& rrCheckpointManager._diff so(5 ugx8 8ok23 &&((ug/XY Y { +U tugk]+/VW W ) 1  %%)j B ( X{J 7 z 1 ( [*l ; z 1!+s#U&&)U ,wug/HI I t HR H  .0  rc&<V^8dQhRS[RS[/#rAr)rrs"rrr>src jVPV4pV'g RRRRRRRR/#VR ,PR4;'gRpVPW4pVPR4'dFVPRV4VPR4'gVPR4'gRVR&V#) uShow the cumulative diff of everything changed in this directory. This powers ``/diff session``. It answers "what has Hermes changed here?" by diffing the *earliest retained checkpoint* — the snapshot taken before the first recorded edit — against the current working tree. Because checkpoints are captured just before each file-mutating tool call, that baseline is the pre-edit state, so the diff covers the first edit and everything after it. Note: checkpoints are a persistent per-project ref, so the earliest *retained* checkpoint may predate the current session (or, after pruning, postdate its true start). It is an approximation of "what Hermes changed", not an exact per-session ledger. Returns the same shape as :meth:`diff` (``{"success", "stat", "diff"}``). When no checkpoints exist yet — nothing has been edited — the call still *succeeds* with empty output and ``"empty": True`` so callers can show a friendly "no changes" message rather than an error. rTrJrremptyrbaseline)rrrr\)rr0rrrs&& r session_diffCheckpointManager.session_diff>s(++K8 tVRWdK Kr?&&v.44";1 ::i   j( 3::f%%fjj.@.@"&w rNc F<V^8dQhRS[RS[RS[R,RS[RS[/#rr0r$r/Nsaferr&rTr{)rrs"rrr^sA9999: 9  9  9rc ^RIHpHpV!\44;_uu_4VP WW44uuRRR4# +'giR#;i T\ 3dpRRR\ T4/uRp?#Rp?ii;i)uRestore files to a checkpoint state. With ``safe=True`` (full-directory restores only), files the user hand-edited after Hermes' last write — per the agent-write ledger — are left untouched, and only Hermes-authored changes are reverted. The result gains ``skipped_user_edits`` listing the preserved paths, ``skipped_oversize`` listing paths kept because the size cap excluded them from every checkpoint, and — only when a delete failed — ``failed_deletes`` listing paths that could not be removed. rNrFr)rrrr_restorerur&)rr0r$r/rrrrs&&&&& rrCheckpointManager.restore^s`" D 94677}}[yO8777G$ 9ugs3x8 8 9s7A? A A AA A9 A4.A94A9c F<V^8dQhRS[RS[RS[R,RS[RS[/#rr)rrs"rrrws=ooCococDjoX\oaeorc a.\V4pV'dRRRV/#\\V44pV'd\W64pV'dRRRV/#\ 4pVR, P 4'gRRRR/#\ RRV.W4wrp V 'gRRRRV R2R T ;'gR /#\ R R R V.W4wrp V 'g RRRRV 2/#\V 4p R pV 'EdT pV'Ed\V4p\\PPVV, 44pVPV4p\VP4o.RV.3RllpV Uu.uFpV!V4'gKVNK ppV'Eg5\ P"!RVR7;_uu_4p\V4R, p\ RV.WVR7wrp V 'd\ RRRR RV.WVR7wp pp V 'gRRRRV 2/uuR R R 4#R R R 4XP%R4Uu.uF>pVP'R4'gKRV9gK%VP%R^4^,NK@ ppVP%R4Uu.uF%pRV9gK VP%R^4^,NK' ppV'g RRRRV 2/#V'dRP)V4pRRRR V R!2R"V/#.p.p.pR pV'dV'gVP+Wb4pVP-R4'gRRRVP-RR#4/#VP-R$4'dR pM1VR%,pVR&,pV'gRR'R(VR),R*R+R,VR-.R.VR/./#VP/VR0VR), R12RR27\1V4p\3VV4p VEe.p!.p"VFp#\ RR3V R4V# 2.W^^0R57wp$p V$'dV!P5V#4K:VP7\V4V#, 4'dVP5V#4KtV"P5V#4K V"FTp#\V4V#, p%V%P94'gV%P;4'dV%P=4KTKV V!'gR'R7R7p p'p M\ R8VR.V!OW\D^,V R97wp p'p MVe\ P"!R:VR7;_uu_4p\V4R;, p(V(PGRV( 2R?.W\D^,V R@RA/RB7wp p'p R R R 4M,\ R8TRV'dTMRC.W\D^,V R97wp p'p V 'gRRRRDV 2R T ;'gR /#\ RERFRGV.W4wp)p*p V)'dT*MRHp+RR'R(VR),R*V+R,V/p,V'dVV,RI&VeQ\IV4\IV4,p-VU#u.uFp#V#V-9gK V#NK up#V,R-&VV,R.&VV,R/&V'dVV,RJ&VPKW\MV44V,# \d\T4pEL9i;iuupi +'giEL;iuupiuupi \>d5p&\@PCR6T#T&4TP5T#4R p&?&EKR p&?&ii;i +'giEL_;iuup#i)KrFrrVrrrrrrNls-tree-rrzCould not inspect checkpoint: c0V^8dQhR\R\/#)r repo_pathrr)rs"rr0CheckpointManager._restore..__annotate__sSTrc<\\V4P4pSR\V4V8H;'gVR\S4S8H#r_)rrrr)r  repo_partsrequested_partss& r_scope_intersects_nested_repoACheckpointManager._restore.._scope_intersects_nested_reposR!&}Y'?'E'E!FJ'(8Z9ZGPP%&;s?';<Orzrestore-inspect-)prefixdirindexrrls-filesz--stagez--error-unmatch--z%Could not inspect restore selection: rz160000 rz2Restore selection matched no files in checkpoint: rzDCheckpoint contains nested git repositories that were not captured (z); rollback was not performednested_repositorieszSafe-restore plan failedrrrT restored_toNNrz7nothing to restore (all changed files were user-edited) directoryrestored_filesskipped_user_editsskipped_oversizez$pre-rollback snapshot (restoring to r)prunez-e:rz%Safe restore: could not remove %s: %srcheckoutrzrestore-select-pathspecrc3\"TF"p\P!V4R,xK$ R#5i)N)r2fsencode).0r{s& r -CheckpointManager._restore..5s .^~!r{{1~/E/E~s*,z--pathspec-from-file=z--pathspec-file-nulGIT_LITERAL_PATHSPECSr)rrr.zRestore failed: rz --format=%sz-1unknownfilefailed_deletes)'r-r&r5r;rPrXr rrr2r3normpathr7r8rrtempfileTemporaryDirectoryrr*rrrrrJrbrd_exceeds_size_caprx is_symlinkr#rurr-r> write_bytesr_pruner)/rr0r$r/rrrpath_errrrrrtree_outrselected_paths blocked_repos root_pathrequested_path requested_relrreposcratch inspect_indexselectedrpathsr kept_oversizer. restore_pathsplanr\rcheckout_targetsdelete_targetsr ok_in_committargetr_stdout spec_fileok2 reason_outrr not_restoredrs/&&&&& @rrCheckpointManager._restorews(5 ugx8 8ok23 *9>H!5'8<< &&((ug/XY Y { +U sugk]+/VS[[D* *% dK 0% cug1OPSu/UV V%h/ .2 <(My !M !%bgg&6&6y97L&M!N4$2$>$>y$IM#( (;(;"<&2!%1T4T:D\!%}!441 T1-a00&<#& * &u#'YZcYd%e   -0u!7"?A*= )+#% $&-1  **7@D88I&&!5'488GE_3`aaxx''!% $Y %))_"$!4%{2 "[#W(",.@*B 7B;r?BSSTU]b c ) 1  $+- (*N$%-+au'=>C&" a $++C0++DMC,?@@"((-"))#.%%&&/!']S0F~~''6+<+<+>+> ,?&$#'RSGS#+dF5EFL1,<)$ GS  ' ,,4E5QQU\ MJ6 %%chh.^~.^&^_#+0Ei[.Q*,L1,<)6< $ GSRQ ([$Y CP q(8%  B ug1A#/GS[[D* *& M4 5u Z #  t ;r? f    &F6N  $ }-N0CCL,(,<0G}(F# $,>F' ()6F% &+9'( EIh$78 K"4$(OM4![ZZ% &l/NN?c#))#.. /&RQQR(s-Y Y;5Y;&A Z4Z#ZZ Z< Z Z=ZZ;A"[  [4[4Y87Y8 Z  [)([[ [1 c&<V^8dQhRS[RS[/#rirB)rrs"rrrhsBBBBrc 6\VPV44#)z[Agent-write ledger key: hash of the marker-walked project dir, for writer and reader alike.)rJget_working_dir_for_path)rr3s&&rrCheckpointManager._ledger_keyhsT::4@AArc&<V^8dQhRS[RS[/#)rr/rrB)rrs"rrrls##rc a \V4pVP4'dTpM VPp\\ 44Uu.uF-qDP R4'gK\ VR,4NK/ ppVUu.uFqcPV4'gKVNK ppV'd\\VRR74#0Rmp\ P!4P4p V 0V Pmp Vo S S P8wdaS V 9dZ\;QJdV 3RlV4F 'gK RM RM!V 3RlV44'd \S 4#S Po Kq\V4#uupiuupi)z?Resolve a file path to its working directory for checkpointing.rFc,\VP4#r_)rr)roots&rrp.ys C Or)rc3R<"TFpSV, P4xK R#5ir_rW)r'rrs& rr(=CheckpointManager.get_working_dir_for_path..s!9AEAI%%''s$'TF> GemfileMakefile.hg.gitgo.modpom.xml Cargo.toml package.jsonpyproject.toml)r5rrrfrPrris_relative_tor&rrr6rany) rr/r3 candidaterVrootsrVownersmarkersrbroadrs && @rrQ*CheckpointManager.get_working_dir_for_pathls!y) ;;==I I4B+-3Ph3P4T\T\]fTg&d9o&3Ph#(K54,D,DT,J$$5K s6'CDE EGyy{""$% %u||#U(:s99sss99995z!LLE9~iKsE8$E8E=E=r Tc2<V^8dQhRS[RS[RS[RS[/#)rr0rr rr)rrs"rrrs/PPPcPTPTPrc \4p\WA4pV'd\PRV4R#\ WA4\ V4\ 8d\PR\ V4R#\V4p\WF4p\V4pVP4'dR\RRVR,.WA^0R7wrp V 'dV 'd\RV .WAV^0R 7M/VP4MVPPR R R 7\R R .WA\ ^,VR7wrpV 'g\PRV4R#VP"^8dVP%WAV4\RRVR,.WA^0R7wrp T ;'d \'V 4p V 'd:\RRRV .WA^0VR7wpp V'd\PRV4R#MJ\RR.WAVR7wppp V'd/VP)4'g\PRV4R#\R.WAVR7wpppV'd V'g\PRV4R#\RRRV.WA4wppp V'd \+V4M.pV'd]\P-RVRP/V44RP/R VP1444\3V4,pR!VR"VR#.pV 'd R!VR$V R"VR#.p\VWAVR7wpppV'd V'g\PR%V4R#R&VV.pV 'dR&VVV .p\VWA4wprV'g\PR'V4R#\PR(WVR),4V'dVP5WAV4R # \dELi;i)*z*Take a snapshot. Returns True on success.z Checkpoint store init failed: %sFz#Checkpoint skipped: >%d files in %srrrrrrTrrrrzCheckpoint git-add failed: %sz diff-indexr--quiet)rrz$Checkpoint skipped: no changes in %srrz$Checkpoint skipped: empty tree in %sz write-treez Checkpoint write-tree failed: %sr r rz=Checkpoint of %s does not capture nested git repositories: %srrc3p"TF,qP4'gKVP4xK. R#5ir_)r))r'rs& rr(*CheckpointManager._take..s$)<  )r_drop_oversize_from_indexrTr)rr/rrrr5)rr0rr rrr\rrok_ref ref_commitrrhas_refrok_lsls_outok_treetree_shar7r commit_args ok_commitnew_sha update_args ok_updates&&&$ rrCheckpointManager._takes %-  LL;S Au* ; '* 4 LL> K X - 1 !     $,j# *;<%(E% !F * *-)), %%'    # #D4 # @  DM5 1$ s LL8# >  1 $  * *5z J !) *cK&7 8 !$! A --T*- $z9jA%&C% MGQ  C[Q (Z(%  E61 V\\^^ C[Q"* NE!" 3h LL;S A&y$h&G\x38~h/b  KKW#TYY|%< > XX)/):):)< ./F %hfoN ((D*dFTcdK"* !#  7C LL%d MB) from indexr)rrr)rmrrmr) rr rr5r2rrrrange)rrr0rrrrr{rAr9roversizeBATCHirws&&&& rrp+CheckpointManager._drop_oversize_from_index,s  A %  * : A "LL060qA06%k2 !  C$:$:;;L$MCC5    J M400 q#h-/Aqy)E 3e;z%(E 0%7  s DD1DDc0<V^8dQhRS[RS[RS[RR/#)rrr0rrNr])rrs"rrrWs/ B BD Bs B B Brc ^RIHpHpV!\W\\ \ 4pVPW0P4VPVPR,R,4'd#\PRVP4R#R# T\3d"p\PRT4Rp?R#Rp?ii;i)uCheckpoint-take path: snapshot-count budget plus one size round, gc deferred to the periodic prune — a repack here held the tool call for the whole gc on a large store.)PrunerrruqCheckpoint store exceeded %d MB — dropped the oldest snapshot per project; space is reclaimed by the next prunezCheckpoint pruning stopped: %sN)rrrr r>r|rtrimrdrop_one_roundrrr/rur-)rrr0rrrprunerrs&&&& rr5CheckpointManager._pruneWs @%lOUab B KK// 0$$T%;%;d%BT%IJJ CDHDZDZ\KG$ B NN;S A A BsA*B C!B==C)rrrrr)Fi )default)auto)NF)__name__ __module__ __qualname____firstlineno____doc__rrrrrrrr staticmethodrrrrrrrrQrr2rpr5__static_attributes____classdictcell__)rs@rr~r~s* 2 2"((   $QQ8?I?IB<''R. 1 199/ / b@992oobBB restore to checkpoint Nz> /rollback diff preview changes since checkpoint NzC /rollback restore a single file from checkpoint Nr:) enumeraterrrr)rdr) rrlinesrcprdatefilesinsdelerJrF workdir_shorts && rformat_checkpoint_listrfs *9+66$YKs 3 4E;*  _ "9#q!'',Q/55c:1=bABk?((-a0D62$B*ff\1%vvk1% uEQJSB$?s3%r$qQDD&&B' y$55 M..99'M LLQCr"\*+2bT]O3r(|nUYTZ[  LL2aS2l#3"4Brd"R\N4&Q R1+4 LLHI LLQR LLVW 99U rc@V^8dQh/^\9d \;R&#)rr>)__conditional_annotations__r)rs"rrrs!00@ONcNA0rr_)TrrrErloggingr2rrrr0r+pathlibrrhermes_constantsrhermes_cli._subprocess_compatrrhermes_cli.gitlockrtypingrr r r r utilsr r getLoggerrrrrrrOrr`rrfr*r'rr?rminr>rrcompiler+r-r;r5rJrPrYrbrgrxrrrrrrrr rrrr$r5rDrNrYr]rfrmrur|r~rr)rs@rrs0d   ',N433*   8 $ "#m3,s "== = =  =  = = == = ==== !="#=$%=( )=* +=, -=0 1=2 3=4 5=89=< ==>?=@ A=B C=D E=F G=HI=J K=L M=P Q=R S=T U=V W=X Y=Z [=\]=^ _=` a=b c=d e=h i=j k=lm=no=rs=tu=x y=@CG,G$LMN N **34  ,3 > A %/9  Z&(>:&Z .2!%*.J#Z e 6  -`GTBP@Q:&#L  &e Be BP#r