+ Wj/a0t$Rt^RIHt^RIt^RIHt^RIt^RIt^RI t ^RI t ^RI t ^RI H t H t Ht^RIHt^RIHtHt^t]P*!RRR7tR ]R &]P*!R RR7tR ]R &]P*!RRR7tR]R&]P*!RRR7tR ]R&]RRl4tRRltRRltRRltRRltRRlt RR lt!R!R"lt"RAR#R$llt#RAR%R&llt$R'R(lt%R)R*lt&R+R,lt'R-R.lt(RAR/R0llt)R1R2lt*RBR3R4llt+R5R6/R7R8llt,R9R:lt-R;R<lt.R=R>lt/R?R@lt0R#)Cuspm sync receipts: the machine-readable surface for venv operations. Every pm venv sync — startup, plugin install, update rebuild — writes a receipt with the SAME schema the updater's receipts use (hermes_cli.update_receipt), into the same ``/logs/update_receipts/`` dir with a ``kind`` field separating kinds. One reader (``hermes pm status``, desktop IPC) serves every surface: a failed venv rebuild is as reportable as a failed update. The in-flight receipt lives in a ContextVar, not a module global: the sync cadence and dependency preparation can overlap across threads, and a shared global lets one run's begin/finalize clobber another's record. Two hazards of ContextVar state are handled explicitly: - Copied contexts (``contextvars.copy_context()``, asyncio.to_thread) share the SAME dict object — so every record_* COPY-ON-WRITES: it deep-copies, mutates the copy, and re-sets it in the current context. A child task records into its own copy; the parent's receipt is untouched. - A nested ``begin`` in the same context would silently drop the outer receipt. ``begin`` therefore returns the ContextVar token; passing it to ``finalize(..., token=...)`` restores the OUTER receipt instead of discarding it. The ambient no-token begin→finalize stays as-is (the existing linear consumers — pm sync, the plugin-check cadence). Correlation: ``begin`` stamps the receipt with the ambient update correlation id (derived from the open update receipt's own identity in the same context). ``finalize`` files the finished receipt under that id in a per-context map, and the updater embeds only the entry carrying ITS OWN id (``last_for_update``), never latest.json — a sync that finished before the update began, a standalone sync, or one from a concurrent thread cannot be misattributed to it, and a nested update's sync never displaces the outer update's entry. ) annotationsN)contextmanager)datetimetimezoneUTC)Path)AnyOptionalpm_receipt_current)defaultz0contextvars.ContextVar[Optional[dict[str, Any]]]_currentpm_receipt_completed_by_updatez;contextvars.ContextVar[Optional[dict[str, dict[str, Any]]]]_completed_by_updatepm_worker_updatez3contextvars.ContextVar[tuple[Optional[str]] | None]_worker_updatepm_last_completed_last_completedcV^8dQhRR/#) update_id Optional[str])formats">C:\Users\johnn\AppData\Local\hermes\hermes-agent\pm\receipt.py __annotate__rNs$$m$c# "\PV34p\PR4pRx\PV4\PV4R# \PT4\PT4i;i5i)zGCarry correlation across the worker seam without consulting disk state.N)rsetrreset)rtoken completeds& rworker_contextr!Msl    | ,E##D)I$ i(U# i(U#s,BA,B,B  BcV^8dQhRR/#rreturnOptional[dict[str, Any]]r)rs"rrrYs0000rcR\P!\P44#N)copydeepcopyrgetrrrlast_completedr+Ys ==,,. //rc$V^8dQhRRRRRR/#)rdatar%rrr$Noner)rs"rrr]s#,, 8,],W[,rcVfR#VPR4V8wd \R4hV'dW\\P4;'g/4p\P !V4W!&\P V4R#R#)Nrz&PM worker receipt correlation mismatch)r* ValueErrordictrr(r)r)r-rr s&& raccept_worker_receiptr2]sj | xx  )ABB-11399r: #}}T2   +rcV^8dQhRR/#)rr$rr)rs"rrrhs  M rc\P4pVe V^,#^RIHpV!4# \dR#i;i)zThe update correlation id in force in this context, or None. Lazy import: hermes_cli.update_receipt imports pm.receipt at embed time, so this direction must stay function-scoped. Never raises.N)current_correlation_id)rr*hermes_cli.update_receiptr5 Exception)workerr5s r_ambient_update_idr9hsE    !F ayD%'' s 0 ??cV^8dQhRR/#)rr$strr)rs"rrrxs))c)rcR\P!\4P4#r')rnowr isoformatrrr _utc_now_isor?xs <<  & & ((rcV^8dQhRR/#)rr$rr)rs"rrr|s::d:rc8^RIHpV!4R, R, #)umThe receipts dir — a pure path computation, NO mkdir side effect: readers (latest()) must not create state.get_hermes_homelogsupdate_receipts)hermes_constantsrCrBs r _receipt_dirrG|s1  v %(9 99rc V^8dQhRRRR/#)rkindr;r$zcontextvars.Tokenr)rs"rrrs)rcx\PR^RVR\4R\4R.RRRRR RR RR .R R/ 4#) uStart recording a sync. ``kind``: 'sync' | 'update' | 'plugin-check'. Returns the ContextVar token — pass it to ``finalize(token=...)`` when this begin nests inside an outer begin in the same context, so the outer receipt survives the inner finalize. The receipt is stamped with the ambient update correlation id (the ``hermes update`` this sync belongs to), or None for a standalone sync — the id is what makes the updater's embed selective.schemarIr started_atsteps venv_rebuildN feature_listplatformoutcomewarningsrefusal)r rr9r?)rIs&rbeginrTsW << a D +- ,. R D D  t  t  rcV^8dQhRR/#)rr$r.r)rs"rrrs))t)rc\P4pVfR#\V4pV!V4\P\P !V44R#)zCopy-on-write record: the ContextVar may be shared with copied contexts, so mutate a deep copy and re-set it in THIS context only.N)r r*r1rr(r))mutatecurrentupdateds& r_recordrZs<llnG7mG 7O LLw'(rc(V^8dQhRRRRRRRR/#)rnamer;okbooldetailr$r.r)rs"rrrs.LLcLtLSL$Lrc.aaa\VVV3Rl4R#)c ^<VP.VR,ORSRSRSR\4/NR7#)rMr\r]r_at)rM)updater?)rr_r\r]s&rrecord_step..s?ahh&Jqz&J tR64H&JhKrNrZ)r\r]r_sfffr record_steprhs  KLrc$V^8dQhRRRRRR/#)rr]r^reasonr;r$r.r)rs"rrrs&SSDS#StSrc*aa\VV3Rl4R#)c0<VPRRSRS/4#)rNr]rj __setitem__)rdr]rjs&rre%record_venv_rebuild..sammNT2x4PQrNrg)r]rjsffrrecord_venv_rebuildrps  QRrc V^8dQhRRRR/#)rextraszOptional[list[str]]r$r.r)rs"rrrs== 3==rc&a\V3Rl4R#)c(<VPRS4#)rOrm)rdrrs&rre%record_feature_list..sammNF;rNrg)rrsfrrecord_feature_listrvs  ;>>>rc&a\V3Rl4R#)c(<VPRS4#)rPrm)rdrxs&rre!record_platform..sammJ .s?!-- SZ[SZaWQ -B-BaiikISZ[ [s-A Nrg)r~sfrrecord_plugin_checksrs  rc V^8dQhRRRR/#)rmessager;r$r.r)rs"rrrsCDrc&a\V3Rl4R#)uRecord a warning surfaced to the user during this sync — a warning that reached the operator's eyes must reach the receipt too.cz<VP.VPR.4OR\S4R\4/NR7#)rRrrb)rR)rcr*r;r?)rdrs&rre record_warning..sD!((GquuZ,G #g,lnEG rNrg)rsfrrecord_warningrs  rc$V^8dQhRRRRRR/#)rcoder;r_r$r.r)rs"rrrs!c4rc*aa\VV3Rl4R#)uRecord WHY this sync refused to act (e.g. the lazy-install policy). ``outcome`` stays whatever ``finalize`` is given (refusals finalize as ``failed``/``refused``) — this names the refusal class.c h<VPRR\S4R\S4R\4/4#)rSrr_rb)rnr;r?)rdrr_s&rre record_refusal..s*!-- D 8S[$ W rNrg)rr_sffrrecord_refusalrs  rcV^8dQhRR/#r#r)rs"rrrsCC*Crcb\P4pVe\P!V4#R#)uThe in-flight receipt data — for the updater to EMBED its sync sections into its own receipt (one schema, one directory). A deep COPY: the authoritative in-flight dict is never exposed for the caller to mutate.N)r r*r(r))rXs rsnapshotrs( llnG%,%84== !BdBrc(V^8dQhRRRRRRRR/#) rrQr; exit_codeintrzOptional[contextvars.Token]r$zOptional[Path]r)rs"rrrs,  -Hrc\4pVfR#Ve\PV4M\PR4WR&WR&\ 4VR&\ P\ P!V44VPR4pV'dU\\P4;'g/4p\ P!V4WT&\PV4\V4pV# \dR#i;i)a,Write the receipt (``outcome``: ok | refused | failed | bisected) and rotate. Returns its path; None when nothing was begun. With ``token`` (from the matching ``begin``): pops only this begin's receipt and restores the outer one. Without: pops whatever is current (the ambient linear-consumer form).NrQr finished_atr) rr rrr?rr(r)r*r1r_write_rotatedOSError)rQrrrXrr paths&&& rfinalizersjG u T I$K)^GM g./ K(I-11399r: #}}W5   +g& K s, C99 DDconsumeFc$V^8dQhRRRRRR/#)rrrrr^r$r%r)rs"rrrs'GG}G$GKcGrcV'gR#\\P4;'g/4pVPV4pV'd(VPVR4\P V4Ve\ P !V4#R#)u}The last sync receipt completed in THIS context under ``update_id`` — the correlation surface for an invoking update's embed. A sync from before this update, a standalone sync, or one from a concurrent context cannot be returned; a nested update's sync is filed under the nested id and never displaces the outer update's entry. Deep copy; None when no matching completion exists.N)r1rr*poprr(r))rrentriesr s&$ rlast_for_updatersl '++-334G I&I It$  )'0'<4== #F$FrcV^8dQhRR/#r#r)rs"rrrs  ( rc\4R, pVP4'd'\P!VP RR74#R# \ \ 3dR#i;i)uThe newest receipt (any kind) — the reader surface for ``hermes pm status`` + the desktop. Pure read: never creates the receipts dir. latest.jsonz utf-8-sig)encodingN)rGis_filejsonloads read_textrr0)points rlatestrs[. ==??::eoo{oCD D   Z sA AA'&A'c V^8dQhRRRR/#)rr-dict[str, Any]r$r;r)rs"rrr#sFFF3Frc  \P!R\P!44pVPR4;'gRpRV RV R\P !4 R\ P!4P R2 #)z{Unique name for concurrent writers: stamp + pid + full random uuid4 (same pid+random convention as the updater's receipts).z%Y%m%dT%H%M%SZrIsyncpm_-z.json) timestrftimegmtimer*osgetpiduuiduuid4hex)r-stamprIs& r _receipt_namer#se MM*DKKM :E 88F  % %vD qa }Adjjl.>.>-?u EErc V^8dQhRRRR/#)rr-rr$rr)rs"rrr+sDrcl^RIHp^RIHp\ 4pVP RRR7V\ V4, pVR, PR4;_uu_4pV!VP4RR7V!W@4V!VR, V4\V4R R R 4V# +'giT#;i) z?Use the same stdlib-only atomic writer as PM's installed facts.)lock_fd)_writeT)parentsexist_okz.pm-write.lockza+b)waitrN) pm.filesystemrpm.lockrrGmkdirropenfileno_rotate)r-rrdrlocks& rrr+s%AGGD4G( }T" "D   $ $U + +t D)tq= $' , K , + Ks _rotate..As7'q99;'s( (z pm_*.jsoncVP#r')r\)rs&rre_rotate..Bsaffr)keyN)sortedglob _RECEIPT_KEEPunlinkr)rreceiptsstales& rrr<sY7AFF;'7 H/M>*  LLN+   sA  AA))N)1__conditional_annotations____doc__ __future__r contextvars contextlibrr(rrrrrrrpathlibrtypingrr r ContextVarr __annotations__rrrr!r+r2r9r?rGrTrZrhrprvr|rrrrrrrrrr)rs@rrsF"H#% ,,  >I=S=S$> :;TJQ GRF\F\GCEPDZDZEA $$0,  ):4)L S=>CDGG" F" r