+ Wj B@Rt^RIHt^RIt^RIt^RIHtHt^RIH t H t ^RI H t ] 'd^RI Ht!RR]4tR!R R llt!R R 4t!R R]4tRRltRRltRRlt!RR]4tRRltR"RRlltRRltRRlt!RR 4tR#)#uqPackage definitions: what a package IS. No versions, no hashes — those live in lock.json, written by `pm lock`.) annotationsN)Path PurePosixPath) TYPE_CHECKINGOptionalnative)Storec2a]tRt^tRRV3RllltRtV;t#) InstallErrorc$V^8dQhRRRRRR/#)packagestrcauseremedy)formats">C:\Users\johnn\AppData\Local\hermes\hermes-agent\pm\package.py __annotate__InstallError.__annotate__s&BBBCBBc <WnW nT;'gRVn\SV`V RV RVP 24R#)z retry, or run `hermes pm doctor`: u — N)rrrsuper__init__)selfrrr __class__s&&&&rrInstallError.__init__s?  BB B  G9BugU4;;-@Ar)rrr))__name__ __module__ __qualname____firstlineno__r__static_attributes__ __classcell__)rs@rr r sBBBrr c$V^8dQhRRRRRR/#)r diffsz list[dict]basezOptional[dict]returndict[str, str]r)rs"rrrs!z>rc|a \Vf\PMT4p.o \V4F[pVP 4FDwrEVR8XgK\ V\ 4'dTMV.pS PV 3RlV44KF K] VF;pVP 4F$wrEVR8wgK\\V44W$&K& K= S 'dg\RV4R4pVPVR4p\PPS 4pV'dV \P V 2MTW$&V#)uDependents win over their dependencies for every key: diffs arrive deps-first, later ones take precedence — npm's pinned shim must shadow the npm bundled inside node, and a package's exports beat inherited env. 'PATH' values are lists of dirs, prepended. Diff values are paths under a store root, which PM spells extended-length on Windows; a child environment gets their ordinary spelling.PATHc3^<"TF"p\V4S9gK\V4xK$ R#5iNr).0d path_dirss& r compose_env..'s$ WDqF1IY>rc$V^8dQhRRRRRR/#)r rirrZr)rcr)rs"rrr\ss!11#1s1y1rc &VPW4.#)zEvery archive this target is built from, in extraction order. Almost every package is one archive; override this (instead of fetch_url) when upstream splits a runtime across downloads that have to land in one directory.)rlrks&&&r fetch_urlsPackage.fetch_urlsss w/00rc$V^8dQhRRRRRR/#rhr)rs"rrr\zs!113111rc *VP RV RV 2#)-rMrks&&&r store_entryPackage.store_entryzs))AgYax00rc$V^8dQhRRRRRR/#)r rirrTr)r[r)rs"rrr\}s!Ccmrc R#)zA digest the upstream already publishes, so `pm lock` does not have to stream the artifact to learn it. Override where a release API serves digests (GitHub's does); returning None means hash it.Nr)rrirTs&&&r known_sha256Package.known_sha256}src(V^8dQhRRRRRRRR/#r archiverstagedrZrr)Noner)rs"rrr\s( ! !d !D !# !$ !rc "^RIHpV!W4R#)a*Turn the verified archive into the staged tree. Default: extract. Override for self-extractors or install-style unpacks (npm). Called once per artifact; extract() empties its destination, so a multi-archive package receives each later archive in a scratch dir that pm merges into the staged tree. )extractN)pm.storer)rr~rrZrs&&&& runpackPackage.unpacks % rc ,V^8dQhRRRRRRRRRR /#) r storer rrrirrZr)rr)rs"rrr\s6KK5K$KKcKdKrc R#)z""6&99rc(V^8dQhRRRRRRRR/#)r rrrZrreasonr)ztuple[str, str]r)rs"rrr\s)   c 3 Sb rc VR3#)aInstall-time remediation for a failed staged verification. verify() is also used by read-only inspection paths such as hermes pm doctor and must stay side-effect free. The installer calls this hook only after a freshly staged entry fails verification. Return (remaining reason, remedy): an empty reason when remediation made the staged entry usable; an empty remedy keeps InstallError's. rr)rrrZrs&&&&rrepair_staged_verification"Package.repair_staged_verificationsrzrc(V^8dQhRRRRRRRR/#)r rrrrZrr)r)rs"rrr\s(T$rc VP4'g \W4#\W4RJd#W0P9dVP RV R2#R#)z;'' when the binary is present and arch-plausible on target.Fz is not a z binaryr)is_file_missing_reasonmachine_matches_binaryrXrM)rrrrZs&&&&rrPackage._binary_reasonsL~~"61 1 !& 1U :vMgMg?gkk]*VHG< <rc$V^8dQhRRRRRR/#)r rrrZrr)r7r)rs"rrr\s!strc /pVP'd/VPW4pVe\VP4.VR&V#)Nr,)rSrrparent)rrrZrDrs&&& rrC Package.envs> <<<[[/F! #FMM 23V  rrr.)r r!r"r#__doc__rM__annotations__rNrPrQrRrSrTrUrW frozensetrXr_rerlrprvrzrrrrrrrCr$rrrrLrL4s*D#ND/HdGTHdGTCMD. "M3!-6K>7% ? 11 !K: rrLc\]tRt^t$RtRtR]R&RtR]R&RRltR R lt R R lt R t R#) DebPackagea}A .deb artifact staged by ar+tar extraction (never dpkg, never executing package content on the host). For cross-target interpreter/runtime .debs (Termux's bionic python): the staged binaries cannot exec on the host that stages them, so verify() is FILE EVIDENCE -- the control stanza carried inside the .deb (Package + Version) must match the pin. Digest verification of the downloaded bytes happens in the store, as for every package. unpack() pulls data.tar out of the ar container and hands it to pm.store.extract_tar, the one containment policy for every PM tarball (symlinks allowed with in-root targets; devices/fifos refused). rr deb_packagezdata/data/com.termux/files/usr prefix_relc(V^8dQhRRRRRRRR/#r}r)rs"rrDebPackage.__annotate__s(//d/D/#/$/rc 2\VPW4R#r.) unpack_debrM)rr~rrZs&&&&rrDebPackage.unpacks499g.rc$V^8dQhRRRRRR/#rr)rs"rrrs!D##rc WP, VPV4, pVP4'g6VP4'g VP V4 R\ V4 2#R#)z'' when the staged tree is plausible on target: the expected main binary is present. No exec (cross-target), no arch probe -- the digest already proved the bytes. missing under r)rmain_relr is_symlink relative_tor)rrrZexpecteds&&& rrDebPackage.verifys_??*T]]6-BB!!(*=*=*?*?**512/&-Q Qrc V^8dQhRRRR/#)r rZrr)r)rs"rrrs""s"s"rc \hr.NotImplementedErrorr^s&&rrDebPackage.main_rel!!rrN) r r!r"r#rrrrrrrr$rrrrrs3  K7J6/""rrc$V^8dQhRRRRRR/#)r rMrr~rr)bytesr)rs"rrrs&FFsFTFeFrcVP4pVR,R8wd\VRVP 24h^pV^<,\V48:Ed W#V^<,pVR,P RR4P 4p\ VR,P RR4P44pT^<,pY'Yv,pTPR 4'deTPR 4'd\TR T R TP 24hTPR 4'd^RI H p T PT4#T#Yv,T^,,pEK"\VRVP 24h \d\TRTP 24hi;i \d\Y R TP R24hi;i)zA .deb's data.tar, ready for tarfile. Ubuntu compresses it with zstd (default since 21.10), decompressed here with the stdlib module PM's 3.14 runtime carries; lzma (the pre-xz format) is refused.:NNs! znot an ar archive: :Nasciireplace:0:Nzbad ar member size in zdata.tarz.lzmazunsupported data compression z in z.zst)zstdz needs Python 3.14+ (zstd)zno data.tar member in ) read_bytesr rMlendecoderstripintstrip ValueError startswithendswith compressionr ImportError decompress) rMr~rawoffsethdrmembersizestartdatars && r deb_data_tarrs    C 2w,4#6w||n!EFF F 2+S !"%T!!'95<<> Ns5z(()<BBDED &   Z ( (w''"4+HPTU\UaUaTb)cddv&&f0t,,K* t5gll^D EE Nt'=gll^%LM M N#f&txtGLL>Ic-deefs0E5*F5%F'Gc(V^8dQhRRRRRRRR/#)r rMrr~rrr)rr)rs"rrrs.BBSB4BB$Brc2\V\W4V4R#)zStage a .deb by ar+tar extraction: never dpkg, never package scripts. The tar goes through pm.store.extract_tar, the one containment policy for every PM tarball (symlinks allowed with in-root targets; devices/fifos refused).N)_untar_deb_payloadr)rMr~rs&&&rrrst\$8&Arc(V^8dQhRRRRRRRR/#) r rMrpayloadrrrr)rr)rs"rrrs(((S(5($(4(rc^RIp^RIp^RIp^RIHpV!VP V4V4\PPT4p \P!T4EF wrp T U u.uF-p \T 4T , P4'dK+T NK/ up T R&T Fp\T 4T, pTP!4P"pTP'T4'dKI\PPT4P)T \P*,4'gKRT^I,'d^IM^,pTP-T4K EK R# TP d@pTPeTPPMRp\TRT: RT 24ThRp?ii;iuup i \$dEK2i;i \$dEKEi;i)rN) extract_tar?zunsafe member r:NNNi)iostattarfilerrBytesIO FilterErrortarinforMr r8pathrealpathwalkrrlstatst_modeOSErrorS_ISLNKrsepchmod)rMrrrstat_modrrexcr real_stagedrootrGfilesr0 file_namefmodewanteds&&& rrrs $NBJJw'0''""6*K WWV_E"Hd4:>*E*E*G11dHQIT Y&A wwy((%%77##A&11+2FGGte||e;F -   N%([[%<!!#4>&2cU!CD#MNI     sGE2,(GG=G G2G:F==G GG G-,G-c>]tRtRtRtRtRRltRR/RRlltR tR #) StatePackagei1zA package that is a STATE of this install (the python venv), not a store entry. Verified by comparing a stamp; made true by apply().Fc V^8dQhRRRR/#)r extrasrcr)rr)rs"rrStatePackage.__annotate__7s""Y"3"rc \hr.r)rrs&&rexpected_stampStatePackage.expected_stamp7rrexplicitc$V^8dQhRRRRRR/#)r rrcrrOr)rr)rs"rrr:s!""I"D"T"rc \hr.r)rrrs&&$rapplyStatePackage.apply:rrrN) r r!r"r#rrSrr r$rrrrr1s%IG""5""rrc$V^8dQhRRRRRR/#)r rrrZrr)zOptional[bool]r)rs"rrr>s!4rc^RIpVPR4^,p\VR4;_uu_4pVP^@4pVR,R8XdVP \ P VR,R44VP^4pVR,R 8wd RRR4R#\ P VR ,R4pVR R R R/PV48HuuRRR4#VR,R8Xd@\ P VR,R4pVR ^>R ^/PV48HuuRRR4#VR,R9dCVPRVR,4^,pVR RR R/PV48HuuRRR4#VR,R9d RRR4R#RRR4R# +'giR#;i \dR#i;i)zDoes this executable's architecture match the target? Reads the PE/ELF/Mach-O header directly. None = unknown format (scripts, shims), which is not a mismatch.Nrtrb:Nr NsMZ:<@Nlittle:NNsPE:rNx64idarm64idsELF:Nzs << Q D &$  166":DBx5 s~~d5k8<=ffQir7i'  ..S8<5&'6"B"F"Ft"LL Bx:%..eh?5$">"B"B4"HH BxEEmmD$s)4Q7uj':FJJ4PP BxEE! F & ' &  sgF<A,F(F<(4F( F<'AF() F<4AF(9 F<F(F<F<( F9 3F<9F<< G  G c$V^8dQhRRRRRR/#)r rrlimitrr)rr)rs"rrr\s!$sCrcVP4'gR#\RVP444pRPVRV4p\ V4V8dVR\ V4 R2, pV#)z=Top-level names of a store entry, for verification diagnoses.zstore entry does not existc38"TFqPxK R#5ir.ru)r/ps& rr2!_entry_listing..`s3?a66?sz, Nu, … (z entries))is_dirsortediterdirrBr)rr#namesshowns&& r_entry_listingr-\sb <<>>+ 35==?3 3E IIeFUm $E 5zE 73u:,i00 Lrc$V^8dQhRRRRRR/#)r rrrr)rr)rs"rrrgs&KKDKK#KrcxVPV4P4pV R\V4 R\V4 2#)u}Why a package's expected binary is not where it should be — the diagnosis that tells you whether the pin's layout is wrong.rz; )ras_posixrr-)rrrels&& rrrgs>   U # , , .CU/&->%3H2I JJrc$V^8dQhRRRRRR/#)r rrprocsubprocess.CompletedProcessr)rr)rs"rrrns'bb$b&AbcbrcVP;'gRVP;'gR,pVPRR7P4RRp\ V4 RVP 2V'd RV 2,#R,#) z=Why a --version probe failed: the exit code plus output tail.rr)errorsNz --version exited rri)stdoutstderrrrr returncode)rr3outtails&& r _probe_reasonr<nsw ;;  #$++"4"4 5C ::Y: ' - - / 6DVn //@ ATXr$[ aa^` aarc2]tRtRtRtRRltRRltRtR#) RunneriuzBWhat ensure() hands back: a composed environment and a run mirror.c V^8dQhRRRR/#)r rMrrCr*r)rs"rrRunner.__annotate__xsS~rc WnW nR#r.)rMrC)rrMrCs&&&rrRunner.__init__xs  rcV^8dQhRR/#)r r)r4r)rs"rrr@|s--$?-rc hVPRVP4\P!V3/VB#)rC) setdefaultrC subprocessrun)rcmdkwargss&&,rrG Runner.run|s*%*~~c,V,,r)rCrMN)r r!r"r#rrrGr$rrrr>r>usL--rr>r.) )r __future__rr8rFpathlibrrtypingrr pm.filesystemrrr RuntimeErrorr rJrLrrrrrrr-rr<r>rrrrQs,# '* B<B6CCL#"#"LF>B(V "7 "<Kb - -r