+ Wj# Xa0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI H t H t H t H t ]P!R4tRt]^,tRt^t]P(R8XdRtRtR]R &^;t;t;ttM^RIt]!]R R ^%R ^Z/P;]P<P?R 444t]P@]PB]PDuttt]PFt]$!]!]RR44'g ]%!R4h]P<R 8XgR]P<9dRMRt'](])])3,t*]+]*](])])3,3,t,]PZ!4t./t/R]R&RRlt0RRlt1RR/RRllt2RRlt3RRlt4R R!lt5R&R"R#llt6R$R%lt7R# ]%]&3dRtRt^;t;t;ttLi;i)'u]Hold a state.db writer's WAL-mode file locks in a form a stray ``close()`` cannot cancel. SQLite protects a live WAL generation with two POSIX advisory locks: a SHARED lock on the main file's lock range and a shared lock on the DMS byte of ``state.db-shm``. A sibling process may checkpoint and unlink ``-wal``/``-shm`` at its close only after taking both EXCLUSIVE. POSIX locks are per process, so any ``open()``/``close()`` of those two files inside the holder — a raw probe, a plugin, a tool reading ``~/.hermes`` — cancels both (sqlite.org/howtocorrupt.html §2.2) and the next foreign close strands the holder on a deleted generation (``DeletedWalGenerationError``). This module adds the same two ranges as *open file description* locks (``F_OFD_SETLK``) on the descriptors SQLite itself holds. OFD locks belong to the description, not the process: a stray ``close()`` elsewhere cannot cancel them, they die with the connection's own descriptor (nothing extra to track or retire), and they conflict with a foreign EXCLUSIVE exactly like SQLite's own, so the sibling's close-time unlink is refused while a guarded handle is open. The guard is lifted before the handle's own close so a true last close still ends the generation normally; lifting it first re-takes SQLite's own POSIX locks on the same ranges, so the handle is never unlocked while its connection is still open. No-op on Windows and on runtimes without OFD locks. Ownership model: the guard is a property of the *descriptor*, and a descriptor number is reusable. Each ``hold()`` therefore locks every matching descriptor unconditionally (an OFD re-lock on an already-locked description is idempotent) and ``release()`` unlocks only while another handle in this process still needs the range — tracked by handle count per INODE, not per fd, so a recycled fd number can never be mistaken for a surviving lock. ) annotationsN)DictOptionalSetTuple hermes_statei@int Optional[int] _F_OFD_SETLK F_OFD_SETLKlinuxdarwin 0123456789fcntlz$fcntl module has no fcntl() callablebsd@qqihhz@hhqqizdict[Identity, int]_HANDLEScV^8dQhRR/#)returnbool)formats"JC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_state_lockguard.py __annotate__rUs$$4$c\RJ#N)r rrr supportedrUs t ##rc(V^8dQhRRRRRRRR/#)r lock_typeintstartlengthrbytesr)rs"rrrYs.NNcN#NsNuNrc\R8Xd#\P!\W^V\4#\P!\V\W^4#)r) _FLOCK_FORMATstructpack _SEEK_SET)r r"r#s&&&r_flockr*Ys8 {{=%IyQQ ;;}iE1 MMrcmdc 0V^8dQhRRRRRRRRRRRR /#) rfdr!r r"r#r+r rrr)rs"rrr_s7##c3 aerc \e \fQh\P!Yf\MT\WV44R# \dR#i;i)zApply a non-blocking OFD lock (a process-owned POSIX one with ``cmd=_F_SETLK``); False when the range is held EXCLUSIVE elsewhere.FT)rr r*BlockingIOError)r-r r"r#r+s&&&&$r _ofd_lockr0_sO  !99 9 B fYW]>^_  s+A AAc V^8dQhRRRR/#)rpathstrrzOptional[Identity]r)rs"rrrjs""C"."rc\P!V4pTPTP3# \dR#i;ir)osstatOSErrorst_devst_ino)r2sts& r _identityr;js= WWT] IIryy !! s 0 ??cV^8dQhRR/#)r identitiesz set[Identity]r)rs"rrrrs]rc#h"RFp\P!V4pTFbpTP4'gK\ T4p\P !T4pTP TP3pY`9gK]YF3xKd R# R# \dKi;i \dKi;i5i)zYield ``(fd, identity)`` for every descriptor of this process on one of *identities* (SQLite's own connection descriptors; the cached header-probe fd too, harmless).N)z /proc/self/fdz/dev/fd)r5listdirr7isdigitr!fstatr8r9)r=fd_dirnamesnamer-r:idents& r _own_fds_forrFrs/ JJv&ED<<>>TB XXb\YY *E"i !/     sQB2B(B2B B2>B2 BB2BB2 B/+B2.B//B2cV^8dQhRR/#)rrHeldr)rs"rrrsdrc\P!V4p/pV\\33VR,\^333Fwr4\ V4pVfKWBV&K V#)z-shm)r5fspath _SHARED_FIRST _SHARED_SIZE _SHM_DMS_BYTEr;)db_pathbaserangesr2rngrEs& r _guard_rangesrRs] 99W DFm\:;dVmm]^M_=`a $  5Mb Mrc V^8dQhRRRR/#)rheldzOptional[Held]rrHr)rs"rrrs$rc Vf/MTp\4'gV#\V4p\;_uu_4\\ V44F^wr4W$,wrV\ V\ WV4'gK(WA9gK0W$,W&\PV^4^,\V&K` RRR4V# +'giT#;i \d1\PR\P!T4RR7T#i;i)ahLock the guard ranges on every descriptor this process has open on ``state.db`` and its ``-shm``. Returns the record :func:`release` needs; pass it back to extend an existing one (a ``-shm`` minted after open, a reopened connection). Idempotent per handle: an inode already in *held* is re-locked (cheap, covers a new descriptor) without a second handle count.Nz!WAL lock guard unavailable for %sT)exc_info)rrR_LOCKrFsetr0_F_RDLCKrgetr7loggerdebugr5rJ)rNrTrPr-rEr"r#s&& rholdr]s 24D ;; 7 #F] U)#f+6  & R599e>O"(-DK&.ll5!&rs2# --   > * !   77d? E"&L-&122H2x2)h7 =7B""="A"A#,,BUBUVbBc"df (- u}}bkk%(I==w566DE E7 LLH48MS[ c? HeCHo %&  " "$N X\",*G  (7 566686i(7s2B FF)(F)