+ WjlRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI H t ^RI H t H t RRltRRltR R ltR R ltR RltRRltRRltRRltR\tRRltRRltRRltRRltRRltRR ltR!R"ltR#R$ltR%R&ltR'R(lt R)R*/R+R,llt!R-R.lt"R/R0lt#R1R2lt$R3R4lt%R5R6lt&R7R/R8R9llt'R7R/R:R;llt(R<R=lt)R>R?lt*R]R@RAllt+RBRClt,RDRElt-RFRGlt.!RHRI]/4t0RJRKlt1RLRMlt2RNROlt3RPRQlt4]5!0R^m4t6RRRS]5!43RTRU]63/t7]Pp!RV4t9RWRXlt:R_RYRZllt;]>)**73 4 > > @ EErcV^8dQhRR/#rr rr )r s"rrrs]]d]rcP^RIHpHpV!4pV'd V!VR7#V!4#)zBScope dependency state like a process launched in the active home.)rget_hermes_home_override)home)hermes_constantsrr)rroverrides rdependency_home_rootr"s$R')H5= " 1\CZC\\rcV^8dQhRR/#rr )r s"rrr!s//t/rc$\4R, #)installs)r"r rr installs_rootr&!s  !J ..rc V^8dQhRRRR/#rr rr r )r s"rrr%s77D7T7rc6\4\V4, #N)r&rr s&rinstall_state_dirr,%s ?[6 66rc V^8dQhRRRR/#rr rr Path | Noner )r s"rrr)s4Krc^RIHp\V4P4p\ V4p\ P VPV!434Uu.uF2pVR, V, R, P4'gK0VNK4 ppV'gR#\W%4;'g V^,pVR, V, P4\V4P48XdR#V#uupi \dT#i;i)aLThe data root that owns this checkout when the active root only borrows it, else ``None``. Dependency state is scoped per data root (``/installs/``), but a source checkout -- its launchers, product builds and install stamp -- exists once. A launch under another root (a test's temporary ``HERMES_HOME``, a per-task home, a CI service home) borrows it: the root that installed it already holds committed state for it, under the root the checkout sits in (``/hermes-agent``) or else the platform default root. ``None`` when the active root's state is that state (the owner itself, or one of its profiles), and when no such root has state for this checkout -- a fresh install, or a custom root that owns its own tree -- so those keep today's behaviour (#123238). A borrowing launch's own sync leaves ``facts.json`` under the borrower too, so state alone cannot name the owner. The checkout's ``hermes`` launcher can: only the owner publishes it, and it execs the owner's store Python. With no live launcher to ask, the root the checkout sits in outranks the platform default. )!_get_platform_default_hermes_homer% facts.jsonN) r r1rrrdictfromkeysparentis_file_launcher_bound_rootr,OSError)r r1rootkey candidate candidatesowners& rowning_home_rootr>)s"C   % % 'D d C-1]]DKKIjIl;m-nN-n *,s2\AJJL)-nJN   2 C CjmE J  $ - - /3DT3J3R3R3T T U LN   L s-C3C34:C88 DDc$V^8dQhRRRRRR/#)rr rr<z list[Path]r r/r )r s"rrrKs!t rca^RIHpVR, R, p\PR8XdR MR FpV!W4, 4pVeVP 4'gK-VFupVR, P 4o\ ;QJd)V3RlVP4F 'gK RM R M!V3RlVP44'dVuu#Kw K R# \\\3dKi;i) zXThe candidate whose ``tools/`` holds the live interpreter the checkout's launcher execs.)_launcher_python.hermesbinntNtoolsc3H<"TFqP4S8HxK R#5ir*)r).0r5stores& r '_launcher_bound_root..WsN~V~~'50~s"TF)z hermes.exez hermes.cmd)hermes) hermes_cli._launchersrAosnamer6ranyparentsr8 RuntimeError ValueError)r r<rAlocalrNpythonr;rHs&& @rr7r7Ks6 9 $u ,E13D-kQ!%,/ >!1!1 #I "W,5573Nv~~N333Nv~~NNN$$O$ R \:6  s$AC''CCC98C9c$V^8dQhRRRRRR/#)rr rexcPermissionErrorr z str | Noner )r s"rrr^s">>4>o>R\>rcVP'gR#\VP4P4pVP\ V4P44'gR#RV R2#)zBDescribe an access failure inside this install's dependency state.Nz,install state is not writable by this user (z1); run as the install owner or grant write access)filenamerris_relative_tor,)r rVdenieds&& r install_state_permission_messager\^s_ <<< #,,  ' ' )F  !2rc V^8dQhRRRR/#r(r )r s"rrris::T:d:rc&\V4R, #)r2r,r+s&rruntime_facts_pathr`is \ *\ 99rc V^8dQhRRRR/#r(r )r s"rrrrs6666rc&\V4R, #)zGBeside facts.json, so the runner finds it from ``$__HERMES_ACTIVATED``.inputsr_r+s&ractivation_inputs_dirrdrs \ *X 55rc V^8dQhRRRR/#)rr rr dict[str, int]r )r s"rrrwsmm$m>mrc\V4p\Uu/uFBq!V, P4'gK!W!V, P4PbKD up#uupi)zwSnapshot before installing, so an input edited mid-install records its pre-install mtime and the next run re-activates.)rACTIVATION_INPUTSr6stat st_mtime_ns)r r9rNs& ractivation_input_mtimesrkwsP  D?P l?Pt\`U`TiTiTk 2D$;$$&22 2?P ll ls A%Ac ,V^8dQhRRRRRRRRRR /#) rstampsrmtimesrfr test_environmentboolr Noner )r s"rrr~s2++T+>+QU+lp+uy+rc^RIpVPVRR7VPRRR7VR, P\ \ V4P 44RR7V'dVR, P4VP4FSwrVW, pVPPRRR7VP4\P!WvV3R 7KU R#) aGive each stamp the exact mtime of the input the install was verified against. Recorded on every successful install, including no-op syncs: a checkout that rewrites an input without changing it moves the mtime, and only this record brings the stamp back to equal. The runner compares for equality, not order, because switching branches can move an input's mtime in either direction. NT) ignore_errors)rPexist_okz .project-rootrencodingz.test-environment)ns) shutilrmtreemkdir write_textr rrtouchitemsr5rMutime)rmrnr rorxrNmtimestamps&&&$ rrecord_activation_inputsr~s MM&M- LLL- o))#d<.@.H.H.J*KV])^ % %,,.||~   4$7  5>* &rc V^8dQhRRRR/#)rr9rr z dict | Noner )r s"rrrsddDd[drca\P!VPR, PRR74o\ S\4'd&\ SPR4\4'gR#SPR/4p\ T\4'dTPR/4MRp\ T\4;'dc\ TPRR 4\4;'d;\;QJdT3R lR 4F 'dK R M R M!T3R lR 44pT'd0TPSR,, P4T8XdS#R# \\ 3dR#i;i)aHThe manifest of the sealed payload whose tree is the resolved *root*, or ``None``. Every install asks, so a ``manifest.json`` that some other tool left beside a checkout, or one with a mistyped field, must read as "not a payload", never as an error. Readers then take each field with ``.get`` and treat an absent one as unset. z manifest.json utf-8-sigruNreporuntimecommandsrKc3d<"TF%p\SPVR4\4xK' R#5i)rN) isinstancegetr )rGr:manifests& rrI$_payload_manifest..s(_M^c:hll3&;SAAM^s-0FT)venvrH) jsonloadsr5 read_textr8rRrr3rr allr)r9rr well_formedrs& @r_payload_manifestrs'::t{{_<GGQ\G]^ h % %Z V8Lc-R-Rll9b)G.8$.G.Gw{{:r*THh-``!(,,x"> Krc V^8dQhRRRR/#r.r )r s"rrrsFFtF Frc\V4P4p\V4;'g/PR4pV'd \ WR4#R#)zDThe environment a sealed payload ships beside its tree, or ``None``.r environmentN)rrrrr)r r9rs& r payload_venvrsF   % % 'D d # ) )r . .v 6D7;=] 3EErc V^8dQhRRRR/#rr9rr r/r )r s"rrrsII$I;Irc\V4;'g/PR/4PR/4PR4pV'd \WR4#R#)rrrKlauncherN)rrr)r9commands& r_payload_hermes_commandrsO &,,"11)R@DDZQSTXXYabG7>= 3HDHrc V^8dQhRRRR/#r.r )r s"rrrs//d/{/rcr\\V4P44pV'd VP#R#)zXThe directory holding a sealed payload's own launchers (``/bin``), or ``None``.N)rrrr5r rs& rpayload_command_dirrs+%d<&8&@&@&BCG$7>>.$.rc V^8dQhRRRR/#rr )r s"rrrsFF4FCFrc\\V4P44pV'dVPP R4#R#)zThe name a person types to run this install's CLI. A desktop channel build publishes its launcher under a qualified name (``hermes-canary``) so it never shadows another install's ``hermes``. z.exerK)rrrrN removesuffixrs& rcli_command_namers8 &d<&8&@&@&BCG077<< $ $V ,EXErc V^8dQhRRRR/#r(r )r s"rrrsAADATArc\V4;'gK\\V4P44;'g!\V4P4R, #)r)rrrrr+s&r base_venvrs^  % A A)9$|:L:T:T:V)W A A[_`l[m[u[u[w{A\AArhonor_runtime_overrideTc$V^8dQhRRRRRR/#)rr rrrpr r )r s"rrrs!//T/d/d/rcV'dA\PPR4pV'd\V4P 4#\V4P 4p\ V4;'g/PR4pV'd \ W4R4#^RIHpV.VPOFpV!V4pVP4'gK#\P!VPRR74p\#T\$4'dTPR4MRp T 'd\T 4P 4u#\!T4u# \'4R, # \\3d\!T4uu#i;i) axResolve a payload-relative or stamped store before PM imports. ``HERMES_RUNTIME_DIR`` exists so a running process can point PM at a non-default runtime location. Publication paths must pass ``honor_runtime_override=False``: a persisted artifact (an installed launcher) has to bind the store of the tree it serves, never a runtime directory inherited through the environment. HERMES_RUNTIME_DIRrH)install_stamp_pathrru runtimeDirNrE)rMenvironrrrrrpm.pathsrrPr6rrrr8rR_unstamped_storerr3r) r rr!r9rHr directoryrdatavalues &$ r store_rootrs+::>>"67 >))+ +   % % 'D t $ * * / / 8E T'22+*T\\* "9- ==?? .zz%//;/"GH/9t.D.DDHH\*$E,14;&&( M7G7M M+ # $w .. Z( .'-- .s&E%%FFc V^8dQhRRRR/#r(r )r s"rrrsSS4SDSrcJ\V4;'g \4R, #)aThe store of a stamp that names none (source stamps never do): the owning root's. The data root's ``tools/`` is the default, but a borrowing root's would be a new store per temporary home -- a full tool download on its first launch, and an interpreter that dies with the home. The checkout's own launchers exec the owner's interpreter, so a borrowing launch resolves the same one (#123238). rE)r>rr+s&rrrs  \ * G G.E.G7 RRrcV^8dQhRR/#)rr rqr )r s"rrrsrcB\\RR4pVe V!4R#R#)aMake a finished generation tree durable before a selection record names it. The selection record (the install's facts.json, a side environment's active.json) is written last, atomically and fsynced, so it doubles as the generation's completion marker -- but only if every file it vouches for reached the disk first. Otherwise a power loss can persist the record while the tree's data is still in the page cache, selecting a half-written venv. One filesystem-wide sync instead of an fsync per file: a venv holds tens of thousands of files, and per-file flushes cost minutes on slow disks. Windows has no whole-filesystem flush reachable from Python (os.sync does not exist there), and FlushFileBuffers per file is the slow path rejected above. There the record's atomic write is the only guarantee: it is never torn, but NTFS journals metadata, not file contents, so power loss right after a publish can still leave the selected tree with incomplete files. syncN)getattrrM)rs rflush_before_selectingrs"" 2vt $D  rc V^8dQhRRRR/#r(r )r s"rrrs C C C Crc>\V4;'g \V4#)aUse the committed environment, or the original install before first sync. A broken committed selection is an error, not permission to load an older dependency set silently. Reading this function never creates user state. The record itself is the completion marker: it is only written after ``flush_before_selecting``, so the ``pyvenv.cfg`` probe below is a sanity check against a vanished tree, not the durability guarantee. )_recorded_venvrr+s&r selected_venvrs , ' B B9\+BBrc V^8dQhRRRR/#r.r )r s"rrrsFFF+Frc>\V4;'g \V4#)aqThe environment PM committed for this install (or a sealed payload's own), else ``None``. Unlike ``selected_venv`` this never answers with the in-tree ``venv``/``.venv``: that tree predates PM and is built for whichever interpreter created it, so loading it from PM's store Python mixes ABIs (compiled modules vanish) and PM deletes it once a generation is committed. )rrr+s&rcommitted_venvrs , ' E E< +EErc V^8dQhRRRR/#r.r )r s"rrr)s+rc\V4p\P!VPRR74pTPR/4PR/4pTPR4pTfR#\T\4'g \R4h\T4P4p\T4R , pTPTP44'dTR , P!4'g\R T 24hT# \dR#\ \ 3dp\RT 24ThRp?ii;i \dp\RT 24ThRp?ii;i) rruNz$cannot read dependency environment: packagesrrz'invalid dependency environment record: z#invalid dependency environment path environments pyvenv.cfgz;dependency environment is missing or outside this install: )r`rrrFileNotFoundErrorr8rRrQrAttributeErrorrr rrr,rZr6)r rrrVfactrr generationss& rrr)sK l +DSzz$..+.>? Vxx B'++FB7' } eS ! !@AAu+%%'K#L1NBK  % %k&9&9&; < <[S_E_DhDhDjDjXYdXefgg #  Z SA$HIsRS VDTFKLRUUVs:&D 3E D=D=(D=)D88D= E EEwindowsc$V^8dQhRRRRRR/#rrrrz bool | Noner r )r s"rrrAs!::t:::rctVf\PR8Hp\V4V'd R, #R, #)u``Scripts`` on Windows, ``bin`` elsewhere. Returned unconditionally — callers differ on whether a missing venv is an error. *windows* lets a POSIX process reason about a Windows layout (update hand-off, launcher repair).rDScriptsrC)rMrNr)rrs&$r venv_bin_dirrAs/''T/ :g 995 99rc$V^8dQhRRRRRR/#rr )r s"rrrJs&OOdO OtOrc\\WR7pY"PR8Xd R, #R, #)z.The interpreter inside *venv* (may not exist).)rrz python.exerT)rrN)rrbin_dirs&$ r venv_pythonrJs(41G lli&?l NNX NNrc V^8dQhRRRR/#r(r )r s"rrrPs444$4rc*\\V44#)zKThe interpreter of the committed dependency environment for *project_root*.)rrr+s&rproject_pythonrPs }\2 33rc V^8dQhRRRR/#rr )r s"rrrUs8888rc\V4pVe1\VPRR44PR4'dR#VPR/4PR4p\ V\4'd V'gR#\ WR4#)zSA sealed payload's own interpreter when a venv must not be entered through its own.Ntargetrz-bionicr storePython interpreter)rr rendswithrr)r9rrs& r_payload_store_pythonrUso &H3x||Hb9:CCINN||Ir*..}=H h $ $H  77rc(V^8dQhRRRRRRRR/#)rr rroptionsztuple[str, ...] | list[str]r z list[str]r )r s"rrr`s0SStS4S:US_hSrcd\V4P4p\V4pVf\\ V44.VO#\\ 4P4P R4p.VORV9d.MR.Op\V4.VO\V4N\\\V444N#)uThe argv prefix that runs Python inside *venv*; append a script, ``-c`` or ``-m``. A sealed payload never enters a venv through ``Scripts\python.exe``. That redirector sits outside the package and starts PM's writable copy of the Python (``pm._uv._toolchain``), and a process on that copy has no package identity, so Windows refuses it the package's git, rg and PM worker (WinError 5). Instead the payload's own interpreter attaches the venv's site-packages (``pm/_venv_entry.py``): the same contract as the payload's launchers and its PM worker. Elsewhere the venv's interpreter runs as is. *options* are interpreter flags (``-I``, ``-u``, ``-X …``). z_venv_entry.pyz-S)rrrr r__file__ with_name site_packages)r rrr9 store_pythonentryflagss&&& r venv_commandr`s   % % 'D(.LK%&111 N " " $ . ./? @E HHM$nnS) q! ==??u}}u:s5z) )       s6BF &F >F F !F FF F-,F-c V^8dQhRRRR/#)rrrr r )r s"rrrsGGGGrc^RIp\PR8Xd VR, #\V4;'g-VPP VPP 3pVRV^, RV^, R2, #)NrDzLib/site-packagesz lib/pythonrz/site-packages)sysrMrNrrrr)rr rs& rrrsm ww$)))!$'[[C,<,<,B,BCDTDTDZDZ+[G Jwqzl!GAJ<~F FFrc V^8dQhRRRR/#)rr rr rpr )r s"rrrsQQDQTQrc(a^RIp\\V44P4o\;QJd)T3RlTP4F 'gK R# R#!T3RlTP44# \\ \ 3dR#i;i)uuDoes this process run on the environment PM selected for the install (base venv or committed generation)? A lazy sync from any other interpreter — a build_environment test venv, a developer's own venv, a Nix store Python — must not commit the install's selection: activation is a boot decision, so this process keeps running unchanged while every process booted afterwards swaps onto a generation that lacks whatever the foreign interpreter carried. activate_dependencies puts the selection's site-packages on sys.path without changing sys.prefix, so sys.path is the signal (the same one ensure_import reads after a sync). NFc3n<"TF*q'gK \V4P4S8HxK, R#5ir*)rr)rGrselecteds& rrI4running_from_selected_environment..s(PhU%0tE{""$0hs 5$5T) r rrrr8rQrRrOr)r r rs& @r!running_from_selected_environmentrss |!<=EEG 3PchhP33P3P3PchhP PP \: .s"A77BBc]tRtRtRtRtR#)NoCommittedEnvironmentiz[PM's store Python with no committed generation: no retry fixes it, only `hermes pm repair`.r N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r rrrrserrc V^8dQhRRRR/#rr rr rqr )r s"rrrs ` `D `T `rc^RIpVPVP8wdR#\VP4P 4P \ V4P 44'd \R4hR#)zWith nothing committed, an interpreter keeps the packages it booted with. PM's store Python boots with none, so for it there is nothing to keep: refuse instead of running on whatever PYTHONPATH it inherited (historically the pre-PM in-tree venv). Nz7no dependency environment is committed for this install)r prefix base_prefixrrrZrr)r r s& r_require_own_dependenciesrs]  zzS__$ COO$$&55j6N6V6V6XYY$%^__Zrc V^8dQhRRRR/#rr )r s"rrrs?T?T?T?Trc^RIp\V4pVP4'd^RIHpHpHpV!V4;_uu_4pV'd V!V4\V4pVf\V4uuRRR4#V!V4pV'g&\V4;p RV39dV!4Y!V 4rK-\V4p V P4'g+\V4P4'g RRR4R#RRR4M=\V4pVf \V4#\V4p V P4'gR#X P4'g\RV 24h^RIp VPU u.uFOp \!V 4P"R 9gK\!V 4P%4VP%48wgKMV NKQ up VPR&V P'\)V 44\)VP%44\)V 4.VPU u.uF3p \!V 4P%4V P%48wgK1V NK5 up OVPR&\*P,P/\)VP%44\)V 4.4\*P0R&\*P0P3RR4\5V4;'gVP%4R, R, .p \*P"R 8Xd\7VP%44fV P9\;X44V Uu.uF%qP4'gK\)V4NK' ppV'dU\*P,P/.VO\*P0P=R R 4N4\*P0R &R#R# +'giEL;iuup iuup iuupi) zSelect the committed tree at process boot, before third-party imports. A process with no extension selection keeps its original launch contract. Already-running processes are never switched after a dependency install. N) runtime_lockrecover_publicationlease_generationz-dependency environment has no site-packages: :NNN PYTHONPATH VIRTUAL_ENVrBrCrDPATHr)z site-packagesz dist-packages)r r,is_dirhermes_cli.runtime_stater!r"r#rrrr`r6rrQsiterrrNr addsitedirr rMpathsepjoinrpoprrappendrr)r r stater!r"r#heldrreleasecurrentrr)r directoriesrrs& ractivate_dependenciesr4s  l +E ||~~``, ' '4#L1(6K"0> ( ' '{3G>,+G GQUWbPcc '.0@0IW$[1H??$$-? -M-U-U-W-W( ' '$#<0  ,\: : -   ??  J8*UVV&)hhHhU5k&&.PPE{**, 0D0D0FF5hHCHHQK OOCM"|++-.H b(+`uDK4G4G4IXM]M]M_4_UU`bCHHQK!zzL4H4H4J0KSQY]/[\BJJ|JJNN=$' '|4bb 8L8L8NQZ8Z]b8bcK GGtO 1,2F2F2H I U< 45$/ AKD;;=ic$iKF A ZZ__-Rv-Rrzz~~fb7Q-RS 6a( ' '8H aBsC*O(5O(A&O(1O<)O<O<!.PPP9P( O9 c V^8dQhRRRR/#)rr rr dict[str, str]r )r s"rrrs.rc^RIHp^RIHpV!V!4!p\ V4pVP RR4VP RR4\ PP\VP44.V'd\\V44.M.O4VR&\\V44VR&^RI HpV!V4pVe\V4VR &V#) zFRead the installed PM environment; do not provision or switch imports.)env_for) all_packages PYTHONHOMENr%r$__HERMES_ACTIVATED)testenv_python__HERMES_TEST_PYTHON) pm.installr8 pm.registryr9rr-rMr+r,r rrr` pm.testenvr<)r r8r9envrr< test_pythons& ractivation_environmentrCs"( <> "C .KGGL$GGM4  \-A-A-C)D)fP[C k0J,K+Lac)fgC !$$6|$D EC* .K&)+&6 "# Jrc V^8dQhRRRR/#)rrr r r )r s"rrr$sGGsGsGrcbRVPRR4PRR4,R,#)zJInside fish single quotes only backslash and the quote itself are special.'\z\\z\')replace)rs&r _fish_quoterI$s* tV,44S%@ @3 FFrshc:RV R\P!V4 2#)zexport r)shlexquoterNrs&&rrO4sa E0B/CDrfishc$RV R\V4 2#)zset -gx  )rIrNs&&rrOrO5s8D6;u3E2F!Grz[A-Za-z_][A-Za-z0-9_]*c$V^8dQhRRRRRR/#)rrAr6dialectr r r )r s"rrr:s&UU~UUUrczaa\V,wooRPVV3RlVP444#)zThe composed environment as a script a shell of ``dialect`` can evaluate. Windows carries names like ``ProgramFiles(ARM)`` that no shell can assign; they pass through untouched instead of failing the whole script.  c3<"TF?wr\PV4'gK"VS9gK+S!V\V44xKA R#5ir*)_SHELL_IDENTIFIER fullmatchr )rGrNr read_only statements& rrI shell_exports..AsDUK[T)33D91>B)>S1YtSZ00KsA A A )_SHELL_DIALECTSr,r})rArTrZr[s&&@@r shell_exportsr^:s; +73Iy 99UCIIKU UUrc V^8dQhRRRR/#)rargvzlist[str] | Noner rqr )r s"rrrEs___4_rc\P!RR7pVPRR.\ORR7VP V4p\ \ \4P4P^,4p\VPR8Xd\P!V44R#\W2P44R#)z*Print the composed activation environment.) descriptionz--formatr)choicesdefaultN)argparseArgumentParser add_argumentr] parse_argsrCrrrrPprintr rdumpsr^)r`parserrrAs& rmainrlEs  $ $1] ^F  V,Fo,FPVW%G h!7!7!9!A!A!!D EC W^^v5$**S/^=nn;]^r__main__)zuv.lockzpyproject.tomlz pm/lock.json)r > rPWDSHLVLumaskstatushistoryrfish_pidhostname pipestatus FISH_VERSIONstatus_generationr*)=r __future__rrerrrMrerLpathlibrr rrrr"r&r,r>r7r\r`rhrdrkrrrrrrrrrrrrrrrrrrrrrrrQrrr4rCrI frozenset_FISH_READ_ONLYr]compilerXr^rlrr rrr~s # FF ]/7D&>: B6 m+0d*FI / FA/T/>S, CF0:t:OdO 4 8S(BGQ*f\f `?TD:G Dik R G YJJ89U_ zFr