+ WjRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI H t Rt]R,tR"t^t]!]P&]P(04tRRltRR ltR R ltR R ltRRltRRltRRlt]P:RRl4tRR/RRlltRRlt RRlt!RRlt"R R!lt#R#)#aScratch entries the prune cannot delete as this user: remembered once, skipped until fixed. A container that ran as root and wrote into a bind mount under scratch (the Docker terminal backend without ``docker_run_as_host_user``, a test or review lane's ``docker run -v``) leaves files this user cannot unlink, or directories it cannot even read. ``rmtree(ignore_errors=True)`` removes what it can, the entry stays idle, and every hourly pass re-walked the whole subtree and logged the same "could not fully remove" line again (218 times per entry on one host). Here such an entry is recorded with the directories that refused access, the user gets ONE line naming the command that clears it, and later passes skip it before walking it. A record is dropped (and the entry judged normally again) when the entry is gone or its top directory changed, when every recorded blocking directory is accessible now (``chown``/``chmod`` of a nested dir), when it was made by another uid, or after :data:`RECHECK_AFTER_SECONDS` in any case. Nothing is escalated or shelled out to: the hint is for the user to run. POSIX only: without ``os.getuid`` (Windows) a PermissionError is usually a transient open handle, so the prune keeps retrying there exactly as before. ) annotationsN)Pathz.prune_stuck.jsonz.lockcV^8dQhRR/#)returnbool)formats"RC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_constants_scratch_stuck.py __annotate__r )s99D9cX\PR8H;'d\\R4#)posixgeteuid)osnamehasattrrr r tracking_supportedr)s 77g  8 8'"i"88r c V^8dQhRRRR/#)rexc BaseExceptionrrr)r s"r r r -sHH]HtHr cX\V\4;'dVP\9#N) isinstanceOSErrorerrno_PERMISSION_ERRNOS)rs&r is_permission_errorr-s! c7 # G G 5G(GGr c V^8dQhRRRR/#)rentryrrzlist[int] | Noner)r s"r r r 1s777!17r c\P!V4pTPTPTP .# \dR#i;ir)rlstatrst_ino st_mtime_ns st_ctime_ns)rsts& r _fingerprintr&1sC XXe_ IIr~~r~~ 66 s; A  A c V^8dQhRRRR/#)rpathstrrrr)r s"r r r :s>>c>d>r cB\PPV4'gR#\P\P9dRR/M/p\P!V\P \P ,\P,3/VB#)zJTrue when this user can now list and delete inside *path* (or it is gone).T effective_ids)rr(lexistsaccesssupports_effective_idsR_OKW_OKX_OK)r(kws& r _accessibler3:sb 77??4 $&II1J1J$J/4 PRB 99T277RWW,rww6 =" ==r c ,V^8dQhRRRRRRRRR R /#) rrootrrr)recdictnowfloatrrr)r s"r r r Bs/t3T$r cVPR4pVPR4\P!48H;'dT\VPR4;'g^4, \8;'dVPR4\ W, 48H;'de\ V\4;'dM\V4;'d:\;QJdRV4F 'dK RM RM !RV44'*#)blockersuidsincefpc3h"TF(p\V\4'gK\V4xK* R#5ir)rr)r3).0bs& r _still_stuck..Is!KHq 1c8JNKNNHs22FT) getrrr9RECHECK_AFTER_SECONDSr&rlistrall)r5rr6r8r;s&&&& r _still_stuckrHBswwz"H "**,& L L %(--A. .1F F L L GGDM\$+6 6 L L x & L L,0> L LKHKKHKK K r c V^8dQhRRRR/#)rr5rrdict[str, dict]r)r s"r r r Msddddr cL\P!V\, PRR74p\ T\4'd=TP4UUu/uFwr#\ T\4'gKY#bK! upp#/# \\ 3d/u#i;iuuppi)z utf-8-sigencoding) jsonloadsSTUCK_STATE_NAME read_textr ValueErrorrr7items)r5datakvs& r _readrWMszz4"22=={=STFPPTVZE[E[TZZ\ A\TQZ4-@DAD\ Acacc Z   As1BB ;B BBc$V^8dQhRRRRRR/#)rr5rstaterJrNoner)r s"r r r Vs!o$r c V\, pV'g@\P!\4;_uu_4VP RR7RRR4R#\ P !V\R,RR7wr4\P!TRRR 7;_uu_4p\P!Y^RR 7RRR4\P!YB4R# +'giR#;i \dR#i;i +'giLN;i \d[\P!\4;_uu_4\P!T4RRR4R# +'giR#;ii;i) z^Publish *state* via a unique temp file + ``os.replace``: a reader sees old or new, never torn.T) missing_okN.z.tmp)dirprefixsuffixwzutf-8rL)indent sort_keys) rP contextlibsuppressrunlinktempfilemkstemprfdopenrNdumpreplace)r5rYr(fdtmpfs&& r _writeroVs " "D    ) ) KK4K (*""t4Ds4JSYZ YYr3 1 1Q IIeqD 92 3* ) 2 1    ) ) IIcN* ) ) )s_C&C,=!DC>8D C) , C;:C;> D D-E6>E E6 E2 +E62E6cV^8dQhRR/#)rr5rr)r s"r r r ks  $ r c#D"^RIp\P!V\, \P\P ,R4pVP W!P4Rx\P!V4R# \P!T4i;i5i)aExclusive cross-process lock around a read-merge-write of the state file. Two pruners of one home (separate processes past the ``.last_prune`` throttle together) otherwise overwrite each other's records from stale snapshots. POSIX only, like the tracking itself.Ni) fcntlropenSTUCK_LOCK_NAMEO_RDWRO_CREATflockLOCK_EXclose)r5rrrls& r _lockedrzjs\  'RZZ)? GB B &    sA B B-B BB persistTc$V^8dQhRRRRRR/#)rr5rr{rrzfrozenset[str]r)r s"r r r ys!Tt~r c vaa\4'd"S\, P4'g \4#\P!4oV'g0\ S4p\VV3RlVP 444#\S4;_uu_4\ S4pVP 4UUu/uFwr4\SW4S4'gKW4bK pppWR8wd \SV4RRR4\X4#uuppi +'giL!;i \d\4u#i;i)zzNames to skip this pass. Records that no longer hold (see module doc) are dropped, so that entry is judged normally again.c3V<"TFwr\SWS4'gKVxK R#5ir)rH)r@nr6r8r5s& r rBload_skips..s!Zvq,tQUX:Ys) )N) rrPexists frozensettimerWrSrzrHror)r5r{rYrr6liver8sf$ @r load_skipsrys   /?(?'G'G'I'I{ ))+C d ZZZZ T]]$KE).Zvq,tQUX:YFAFDZ}tT"  T? [] {sH D D =D D D 4D D  D D D D87D8c V^8dQhRRRR/#)rrrr list[str]r)r s"r r r st r caa.oV3Rlo\PR8d\P!VSR7S#\P!VV3RlR7S#)z``rmtree`` that keeps going past errors (like ``ignore_errors=True``) and returns the directories that refused access with EACCES/EPERM (empty: nothing was denied).c <\V4'drV\P\P\P39dTM\P P V4pVS9dSPV4R#R#R#r)rrscandirrsr!r(dirnameappend)funcr(rblockerr;s&&& r _onexc3rmtree_collecting_permission_errors.._onexcs[ s # #"rzz277BHH&EEd277??[_K`Gh&(' $r )onexcc$<S!WV^,4#)r)rnpinfors&&&r 5rmtree_collecting_permission_errors..sqT!W8Mr )onerror) )sys version_infoshutilrmtree)rrr;s&@@r #rmtree_collecting_permission_errorsrsJH) 7" e6* O  e%MN Or c V^8dQhRRRR/#)rrrrr)r)r s"r r r s    r cx^RIHpR\P!\P !V44 2pV!R4P 'doVR\P!\P !VP4R,4 R\P!RVP,4 R2, pV#) )locate_commandz sudo rm -rf dockerz' (or without sudo: docker run --rm -v z:/sz alpine rm -rf z/s/)) hermes_platform.resolverrshlexquoterfspathcommandparentr)rrhints& r removal_hintrs7 %++bii&678 9Dh''' 5ekk"))ELLBY\aBa6b5cekk%%***<=>a A  Kr c(V^8dQhRRRRRRRR/#)rr5rrr;rrrZr)r s"r r r s(di4r c 8\V4pVe V'gR#RVR\P!4R\P!4RVR\/p\ P !\4;_uu_4\V4;_uu_4\V4pWVVP&\W4RRR4RRR4VPR\P!V4VR,\V44R# +'giLR;i +'giL];i)zORemember *entry* as not removable by this user and log the one actionable line.Nr>r=r<r;zscratch prune: cannot remove %r: it holds files this user (uid %d) may not read or delete, usually root-owned output of a Docker container; skipping it until that is fixed (re-checked weekly). Remove it with: %s)r&rrr _MAX_BLOCKERSrdrerrzrWrrorrr)r5rr;auditr>r6rYs&&&& r recordrs e B z Wdiik5"**, HUcVcLd eC   W % %wt}}d ejjt(5 % JJ 8 %#e*l5&9  (5} % %s$3D %C6 ,D 6 D D  D c V^8dQhRRRR/#)rr5rrz list[Path]r)r s"r r r sMMMMr cd\\VRR74Uu.uF qV, NK up#uupi)zQEntries the prune is currently skipping as not removable (for ``hermes doctor``).F)r{)sortedr)r5rs& r stuck_entriesrs,$*:dE+J$K L$KD4KK$K LL Ls-i: )$__doc__ __future__rrdrrNrrrrrgrpathlibrrPrtrErrEACCESEPERMrrrr&r3rHrWrocontextmanagerrzrrrrrrr r rs"#  &"W,&  ekk:;9H7>d(   d(& $Mr