ߩ^jP ,dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z m Z ddl m Z ddlmZmZmZmZddlmZmZmZejeZhdZdZd d hZhd Zhd Zd Zdee fdZ de dee fdZ!de de"fdZ#de de de de"fdZ$de de de"fdZ%de&de'fdZ(dBdZ)de j*de+e"e'ffdZ,de j*de'fdZ-dBd Z.d!Z/d"Z0d#Z1dCd$ee de fd%Z2 dDd&ee'd$ee d'ee&d(ee&dee'f d)Z3 dEd*e&d$ee deee'effd+Z4 dCd,e'd$ee de"fd-Z5d.Z6d/e dee&fd0Z7 dCd,e'd$ee deee'effd1Z8e1fd2e d'e&de&fd3Z9e1dfd'e&d$ee de&fd4Z:dBd5Z;de d6e dee fd7Zd:Z?dCd$ee de fd;Z@dZBd?ZCd:ZDd.git.nox.tox.venv.cache .mypy_cache .ruff_cache .pytest_cache site-packagesvenvbackups __pycache__ checkpoints node_modules hermes-agent)z.pycz.pyoz.db-walz.db-shmz .db-journal gateway.pidcron.pid> gateway.lockrrprocesses.jsongateway_state.json>.envstate.db auth.jsonz _external/returnc ddlm}m}n#t$rgcYSwxYw |}n#t$rd}YnwxYw|sgS ||}n#t$rd}YnwxYw|gS |pg}n5#t$r(}t d||gcYd}~Sd}~wwxYwg}t}|D]} t| } n#t$rY1wxYw| sJ | } n#ttf$rYswxYw| |vr||| || |S)uReturn existing absolute paths the active memory provider stores outside HERMES_HOME, resolved from config only (no network, no init). Reads ``memory.provider`` from config, loads just that provider, and asks it for ``backup_paths()``. Returns an empty list when no external provider is active or the provider can't be loaded — backup must never fail because of a flaky plugin. r)_get_active_memory_providerload_memory_providerNz0backup_paths() failed for memory provider %r: %s)plugins.memoryr&r' Exception backup_pathsloggerwarningsetr expanduserexistsresolveOSError ValueErroraddappend) r&r'activeproviderdeclaredexcoutseenrawpresolveds 3/home/ice/.hermes/hermes-agent/hermes_cli/backup.py'_collect_memory_provider_external_pathsr?sTTTTTTTTT  ,,..   ''//  ((**0b I6SVWWW CD S $$&&AA    H xxzz   yy{{HH$    H  t     1 Jsl  ) 88 A AA#A:: B,B'!B,'B,!C&& C32C3 D!!D54D5basecg}|r+|s|||S|s|St j|dD]\}}}t |}d|D|dd<|D]_}||z }|r|jtvs|j trJ||`|S)zYield regular files under *base* (a file or a directory), skipping symlinks, caches, and pyc files. *base* itself may be a file.F followlinksc$g|] }|tv |S_EXCLUDED_DIRS.0ds r> z(_iter_external_files..s"FFFQa~.E.Eq.E.E.EN) is_file is_symlinkr4is_diroswalkrname_EXCLUDED_NAMESendswith_EXCLUDED_SUFFIXES)r@filesdirpathdirnames filenamesdpfnamefpaths r>_iter_external_filesr]sE ||~~doo// T ;;== (*%(H(H(H   $9 ']]FF(FFF   EJE!! z_,, 0C0CDV0W0W, LL       LrLrel_pathc|j}|D]!}|tvr |dkr ||dkrdS|j}|tvrdS|t rdSdS)zFReturn True if *rel_path* (relative to hermes root) should be skipped.rrTF)partsrGrRrSrTrU)r^r`partrRs r>_should_excluderbs NE ~ % %  > ! !deAh&6&6 tt =D t }}'((t 5rLabs_pathout_pathct|rdS|rdS ||kS#ttf$rYdSwxYw)zHReturn True when a candidate file should not be written to a backup zip.TF)rbrNr0r1r2)rcr^rds r>_should_skip_backup_filerfsx  tt!!X%5%5%7%777 Z uus)AA('A(srcdstcd}d} tjd|dd}tjt|}|| ||fD]*}|& |#t $rY&wxYw+dS#t $r~}t d|| |dn#t$rYnwxYwYd}~||fD]*}|& |#t $rY&wxYw+dSd}~wwxYw#||fD]*}|& |#t $rY&wxYw+wxYw) uCopy a SQLite database safely using the backup() API. Handles WAL mode — produces a consistent snapshot even while the DB is being written to. Fail closed if a consistent snapshot cannot be created: copying only the live main file can omit committed WAL data. Nzfile:z?mode=roT)uriz"SQLite safe copy failed for %s: %s missing_okF) sqlite3connectstrbackupcloser)r+r,unlinkr1)rgrhconn backup_conn connectionr8s r> _safe_copy_dbrvs DK4s444$???oc#hh//  K   '-  J%$$&&&& D&   ;S#FFF  JJ$J ' ' ' '    D uuu&-  J%$$&&&& D&  '-  J%$$&&&& D& sAB A55 BB DD /CD  CD CD D#C88 DD DD ED21E2 D? <E>D? ?Enbytesc\dD]$}|dkr|dkr|dd|n|d|cS|dz}%|ddS)zHuman-readable file size.)BKBMBGBiry.1f z TBrE)rwunits r> _format_sizer"so' D==-1S[[f)))4)))>P>P$>P>P P P P$    rLc 't}|s&td|tjd|jr|t |j}|r/tj d}|d|dz }n@tj d}t j d|dz }|j dkr||j dz}|jddtdt%d g}t'}t)j|d D]\}}}t |} | |} | t d k'|d d } 'fd|D|d d <t'| t'|z D]'} |t1| | z (|D]E} | | z }||}t3|||r.|||fFt j }g}g}t7D]} |}||n9#t8t:f$r%|t1|YbwxYwt=|D]u} ||}n#t8t:f$rY>wxYwt>| z}|||fv|s|stdd StC|tC|z}td|dd}g}tEj#}tIj%|dtHj&d5}tO|dD]\}\}} |j dkrtQj)dd t1|j5}t |j*} d d d n #1swxYwYtW|| rW|,| t1||| -j.z }| /dnq| /d|d|d|,|t1|||-j.z }n@#t`t:t8f$r&}!|d|d|!Yd }!~!{d }!~!wwxYw|dzdkrtd|d|d|D]x\}} |,||||-j.z }:#t`t:t8f$r%}!|d|d|!Yd }!~!qd }!~!wwxYw d d d n #1swxYwYtEj#|z }"|-j.}#t|rtd|ntd |td!|td"tc|td#tc|#td$|"d%d&|r/td'tC|d(t%d |rLtd)tC|d*te|d d+D]}$td,|$|r4td-te|D]}%td,|%d|rrtd.tC|d/|d d+D]}&t|&tC|d+kr#td0tC|d+z d1|std2|j*d Sd S)3z1Create a zip backup of the Hermes home directory.z*Error: Hermes home directory not found at %Y-%m-%d-%H%M%Szhermes-backup-.zipTparentsexist_okz Scanning z ...FrB.Nc6g|]}|tvs|dk|S)rrF)rIrJis_roots r>rKzrun_backup..Ss=   &&1+>+>w+> +>+>+>rLzNo files to back up.z Backing up files ...rw compresslevel.dbsuffixdeletedirarcnamerk z: SQLite safe copy failed: /zBackup incomplete: zBackup complete: z Files: z Original: z Compressed: z Time: r}sz Included z( memory-provider file(s) stored outside z Skipped zD memory-provider path(s) outside your home directory (not portable):  z Excluded directories: Warnings ( files skipped): ... and  morez Restore with: hermes import )3r rOprintsysexitoutputrr.r0rnowstrftimehomerlower with_suffixparentmkdirr r-rPrQ relative_tor3rorfr4r?r2r1r]_EXTERNAL_PREFIXas_posixlentime monotoniczipfileZipFile ZIP_DEFLATED enumeratetempfileNamedTemporaryFilerRrvwritestatst_sizerrPermissionErrorrsorted)(args hermes_rootrdstamp files_to_add skipped_dirsrWrXrYrZrel_dir orig_dirnamesremovedr[r\relhome_direxternal_to_addskipped_externalr@ base_resolved rel_to_homer file_count total_byteserrorst0zfircr^tmptmp_dbr8elapsedzip_sizer<rJers( @r> run_backupr+s )++K      H;HHIII   {> $$//1199;; ??   ?LNN++,=>>E">5">">">>H ''(9::9;;!=%!=!=!==&((''&(@AA O$666 1)++ 1 1 1222,.L55L(* (O(O(O..$9 ']]..-- T#YY&          =))CMM9 5 5G   S7!233 4 4 4 4 . .EJE##K00C'sH==     - - - - .y{{""$$H.0O"$799 5 5  LLNNM  % %h / / / /G$     # #CII . . . H *$// 5 5E #mmoo99(CC (    &)=)=)?)??G  " "E7#3 4 4 4 4  5  $%%%\""S%9%99J . . . .///K F   B 3(x}>>?????@@s )K663L,+L,'M))M=<M=5Y24V R% V %R) )V ,R) -BV Y2AV Y2 W W;Y2W+Y223X&%Y2&Y"=YY2Y""Y22Y69Y6rc|}|sdShd}t}|D]/}t|j}||vr||0|sdSdS)zLCheck that a zip looks like a Hermes backup. Returns (ok, reason). )Fzzip archive is empty>r!r" config.yaml)FzZzip does not appear to be a Hermes backup (no config.yaml, .env, or state databases found))T)namelistr-rrRr3)rnamesmarkersfoundnbasenames r>_validate_backup_ziprs KKMME -,,211G EEE   77< w   IIh       8rLcd|D}|sdSd|D}d|D}t|dkr|}|dvr|dzSdS)zDetect if the zip has a common directory prefix wrapping all entries. Some tools zip as `.hermes/config.yaml` instead of `config.yaml`. Returns the prefix to strip (empty string if none). c<g|]}|d|SrrTrIrs r>rKz"_detect_prefix..s' = = =1QZZ__ =Q = = =rLrc6g|]}t|jSrE)rr`rs r>rKz"_detect_prefix..s ///A$q''-///rLcDh|]}t|dk|dS)rr)rrIr<s r> z!_detect_prefix.. s':::As1vvzz1Q4zzzrLr>.hermeshermesr)rrpop)rr parts_list first_partsprefixs r>_detect_prefixrs > = = = =E r0////J;::::K ;1"" * * *C<  2rLc t|j}|s&t d|t jdtj|s&t d|t jdt}tj |d5}t|\}}|s&t d|t jdt|}d| D}t|}t d|dt d t|rt d |d |d z } |d z } | s| r|jst t dt dt  t%d} n:#t*t,f$r&t dt jdYnwxYw| dvrt d ddddSt d|d|ddg} d} d}g}tj}t3j}|D]}|t8r|tt8d}|s=||z } ||n)#t<$r| d|dYwxYw |j dd|!|5}tC|d5}|"|#dddn #1swxYwYdddn #1swxYwY|j$dvs|j%tLvr' tOj(|dn#tR$rYnwxYw| dz } |dz }n9#tTtRf$r%}| d|d|Yd}~nd}~wwxYw| d zdkrt d| d!|d|r-||r|t|d}n|}|st|j%tVvr||7||z } ||n*#t<$r| d|dYwxYw |j dd|!|5}tC|d5}|"|#dddn #1swxYwYdddn #1swxYwY|j%tLvrtOj(|d| dz } n9#tTtRf$r%}| d|d|Yd}~nd}~wwxYw| d zdkrt d| d!|dt3j|z }t t d"| d#|d$d%t d&t|r"t d'|d(td)| rrt d*t| d+| dd,D]}t |t| d,kr#t d-t| d,z d.|rt d/t|d0tY|dd,D]}t d1|t|d,kr#t d2t|d,z d.|d3z }g}|-r dd4l.m/}m0}m1}m2} tY|3D]}!|!-s|!j%}"|!d z s|!d z sM||"}#|#r-t d5|"d6|#||"d7f||"}$||"|$duf|rd8|D}%d9|D}&|%r%t d:d;4|%|&r%t dt d?t d@nO#tj$rBtm|3rt dAt dBYnwxYwt |dCz -st dDt dE|r3dF|D}'t dG|'D]}(t dH|(dIt dJddddS#1swxYwYdS)Kz(Restore a Hermes backup from a zip file.zError: File not found: rzError: Not a valid zip file: rzError: c<g|]}|d|Srrrs r>rKzrun_import..+s'CCC1::c??C1CCCrLzBackup contains z fileszTarget: zDetected archive prefix: z (will be stripped)rr!z;Warning: Target directory already has Hermes configuration.z=Importing will overwrite existing files with backup contents.zContinue? [y/N] z Aborted.>yyeszAborted.Nz Importing rTrrrz: path traversal blockedwb>.conf.jsonr!irrrzImport complete: z files restored in r}rz Target: z Restored z? memory-provider file(s) to their original location(s) outside rrrrrrz Preserved z? runtime state file(s) (kept this machine's, not the backup's):rz ... and profiles)create_wrapper_scriptcheck_alias_collision_is_wrapper_dir_in_path_get_wrapper_dirz Skipped alias 'z': Fcg|] \}}|| SrErErIroks r>rKzrun_import..s!FFFUQ2FqFFFrLcg|] \}}|| SrErErs r>rKzrun_import..s!JJJUQrJqJJJrLz Profile aliases restored: z, z Profile aliases skipped: z Note: z is not in your PATH.z3 Add to your shell config (~/.bashrc or ~/.zshrc):z( export PATH="$HOME/.local/bin:$PATH"z6 Profiles detected but aliases could not be created.z5 Run: hermes profile list (after installing hermes)rz?Note: The hermes-agent codebase was not included in the backup.z0 If this is a fresh install, run: hermes updatecg|]\}}|SrErE)rIr_s r>rKzrun_import..s;;;A1;;;rLz, To re-enable gateway services for profiles:z hermes -p z gateway installz2Done. Your Hermes configuration has been restored.)7rrr.r0rMrrr is_zipfiler rrrrrr r/forceinputstriprEOFErrorKeyboardInterruptrrrr startswithrrr2r4ropenrreadrrR_SECRET_FILE_NAMESrPchmodr1r_IMPORT_SKIP_NAMESrrOhermes_cli.profilesrrrriterdirjoin ImportErrorany))rzip_pathrrrreasonrmembersr has_confighas_envanswerrrestoredrestored_externalskipped_runtimerrmemberext_reltargetrgrhr8rrr profiles_dirrestored_profilesrrrrentry profile_name collisionwrappercreatedskipped gw_profilespnames) r> run_importr,s#DL!!,,..6688H      222333   h ' ' 8h88999  )++K 3 ' 'KD2)"-- F  $F$$ % % % HQKKK##CCbkkmmCCC\\  3333444 0,..00111  M KfKKK L L L"M199;; '//11  ' 4:  GGG O P P P Q R R R GGG 12288::@@BB/0   l###  \))j!!!CKDKDKDKDKDKDKDKDH 3Z333444$666%'9;;&&(( ^  H >H >F  !122  %5!6!6!7!78!G+NN$$00::::!MM"Gv"G"G"GHHHH 8M''t'DDD.Cfd1C1C.s #((**---..............................}(BBBfkUgFgFg!HVU3333&!!! D!MH%*%%'1888MM"6v"6"6"6"6777777778c>Q&&@x@@*@@@AAA &++F33 S[[\\* Cyy~!333&&s+++ 3&F   ,,[-@-@-B-BCCCC    @3@@@AAA  1 ##D4#@@@WWV__*T&$-?-?*3IIchhjj)))******************************;"444HVU+++A #W- 1 1 1 /3//#//00000000 1#~""<8<EEEFFF#Z/     $ S# S$L$8$8$:$:;; V VE <<>>! #(:L!M199;;!UV^D[D[D]D]! 5 5l C CI VN,NN9NNOOO)00,1FGGGG"7"7 "E"E)00,t@S1TUUUU$ JFF.?FFFGJJ.?JJJGUStyy?Q?QSSTTTSQTYYw=O=OQQRRR2244JT+;+;+=+=TTTUUUSTTTHIII S S S|++--..SSTTTQRRR  S n,4466 F S T T T D E E E  >;;):;;;K A B B B$ > >_quick_snapshot_rootr5!s  +/++D & &&rLlabelkeep max_file_sizec2|p t}t|}dtdtdtffd }t jtj d}|r|d|n|}||z } | ddi} tD]"} || z } | s| r | d D]} | s| |}d d |d vsd d |d vrP|| |r]| |z }|j dd | jd krt)| |snt+j| ||j| |<#t2t4f$r'}t6d||Yd}~d}~wwxYwR| sh|| | rv| | z }|j dd | jd krt)| |snt+j| ||j| | <#t2t4f$r'}t6d| |Yd}~d}~wwxYw| st+j| ddS|||t=| t?| | d}tC| dz dd5}tEj#||ddddn #1swxYwYtI||tJn|t6&d|t=| |S)u2Create a quick state snapshot of critical files. Copies STATE_FILES to a timestamped directory under state-snapshots/. Auto-prunes old snapshots beyond the keep limit. Args: max_file_size: When set, individual files larger than this many bytes are skipped (with a printed warning) instead of copied. Used by the pre-update safety snapshot so a multi-GB ``state.db`` can never stall ``hermes update`` or silently eat disk — the small pairing/cron/config files the snapshot exists to protect are always captured. ``None`` (default) copies everything, which preserves manual ``/snapshot`` and ``hermes backup --quick`` behavior. Returns: Snapshot ID (timestamp-based), or None if no files found. pathrel_namer$c dS |j}n#t$rYdSwxYw|krdStd|dt |dt dt d||dS) z _too_largez)create_quick_snapshot.._too_largeAs  5 99;;&DD   55  = 5  R R RT"" R R-9--H-H R R R     G       ts ! //z %Y%m%d-%H%M%S-Tr*z /workspaces/rz /attachments/rzCould not snapshot %s: %sN) ignore_errors)id timestampr6r total_sizerV manifest.jsonrutf-8encoding)indentr7z%State snapshot created: %s (%d files))'r r5rroboolrrrutcrr_QUICK_STATE_FILESr/rOrglobrMrrrrrvshutilcopy2rrr1rr+r,rmtreersumvaluesr jsondump_prune_quick_snapshots_QUICK_DEFAULT_KEEPinfo)r6r0r7r8rrootr>tssnap_idsnap_dirmanifestrrgsubsub_relrhr8metafs ` r>create_quick_snapshotrc&sc0  +/++D  % %D, hl # # , ,_ = =B!&.ooeoooBGg~H NN4$N///!H!5B5BSjzz||   ::<< yy~~ N N{{}}//$//88::"^^^^33.g...7X7X:c7++(    === NzU**,S#66%$% S#...(+ (:HW%%1NNNNN#>MMMMMMMMN {{}}   :c3    n 555 BzU""$S#.. S#&&&HHJJ.HSMM) B B B NN6S A A A A A A A A B  hd3333t(mm(//++,,   D h(# @ @ @%A $!$$$$%%%%%%%%%%%%%%% 4T\&9&9tTTTT KK7#h--PPP NsN#F2?2F22G*G%%G*5J2JJ>J99J>%M  M M limitc>t|}|sgSg}t|dD]}|s|dz }|r t |d5}|tj|dddn #1swxYwYn:#tj tf$r!||j dddYnwxYwt||krn|S) z7List existing quick state snapshots, most recent first.T)reverserErFrGNr)rBrrD) r5r/rrrOr r4rUloadJSONDecodeErrorr1rRr)rdr0rZresultsrJ manifest_pathrbs r>list_quick_snapshotsrkst , ,D ;;== G DLLNND 1 1 1  xxzz  O+    ! ! Q Q-':::1aNN49Q<<000111111111111111('2 Q Q QafAQOOPPPPP Q w<<5 E ! Ns6<C  (C5 C C C C C  4DD snapshot_idct|p t}t|}|r d|vsd|vs|dvrtd|dS||z } ||n,#t $rtd|YdSwxYw|sdS|dz }|sdSt|d 5}tj |}d d d n #1swxYwYd }| d iD]} || z } | |n+#t $rtd | YjwxYw|| z } | |n+#t $rtd | YwxYw| s| j dd | jdkrn| j d| jdz } t#j| | | dt#jt+| t+| nt#j| | |dz }#t,t.f$r'} td| | Yd } ~ d } ~ wwxYwtd|||d kS)zRestore state from a quick snapshot. Overwrites current state files with the snapshot's copies. Returns True if at least one file was restored. r\)rz..zInvalid snapshot_id: %sFz*Snapshot path traversal blocked for id: %srErFrGNrrVz#Manifest path traversal blocked: %sTrrrz .snap_restorerkrzFailed to restore %s: %sz"Restored %d files from snapshot %s)r r5r+errorr0rr2rOr/r rUrggetrrrrRrPrQrrmoveror1rrY)rlr0rrZr]rjrbrarrrgrhrr8s r>restore_quick_snapshotrrs  +/++D  % %D #,, 0C0C{VaGaGa . <<<uk!H&&t||~~6666  A;OOOuu ??  u.M    ! !u mg . . .!y||Hxx$$ ? ?n  KKMM % %h&6&6&8&8 9 9 9 9    LL> D D D H Sj  KKMM % %dllnn 5 5 5 5    LL> D D D H zz||   555 ?zU""j#>sx#>#>#>> S#&&& d +++ CHHc#hh//// S#&&& MHH) ? ? ? LL3S# > > > > > > > > ? KK4h LLL a<sa9B %B43B49DD!D9F%F('F(19G++%HHBKL.LLr-r:c|sdS t|dd5}tj|}dddn #1swxYwYn#ttjf$rYdSwxYwt |tr<|dg}t |trt|ndSt |trt|SdS)uReturn the number of cron jobs stored in ``path``. The canonical on-disk shape is ``{"jobs": [...]}`` (see ``cron/jobs.py``). A legacy bare-list shape (``[...]``) is also honoured. Returns: The job count for any *valid, readable* JSON document, or ``None`` if the file is missing or cannot be parsed. ``None`` means "unknown" — callers must not treat it as "zero jobs", because acting on an unreadable file could mask a real corruption the user needs to see. Nrz utf-8-sigrGjobs) rMr rUrgr1rh isinstancedictrplistr)r:rbdatarts r>_count_cron_jobsrys& <<>>t $k 2 2 2 a9Q<restore_cron_jobs_if_emptiedr8sJ@ t  +/++D~%I!),,Jt$T**[8>II!),,J t Zttd;;; Y **** _ % NPS   ttttt   NN Y :k R RRs(1BC+C  CrZcR|sdStd|Ddd}d}||dD]T} tj||dz }#t $r+}t d|j|Yd}~Md}~wwxYw|S) zKRemove oldest quick snapshots beyond the keep limit. Returns count deleted.rc3BK|]}||VdSr2)rOrHs r> z)_prune_quick_snapshots..s/11qahhjj1111111rLc|jSr2rR)rJs r>z(_prune_quick_snapshots..afrLTkeyrfNrzFailed to prune snapshot %s: %s) r/rrrPrRr1r+r,rR)rZr7dirsdeletedrJr8s r>rWrWs ;;==q 11DLLNN111     D G $%%[KK K M!    qLGG K K K NNtt||S)z6Manually prune quick snapshots. Returns count deleted.rK)rWr5)r7r0s r>prune_quick_snapshotsrs ""6{"C"C$ O O OOrLc0t|dd}t|}|rctd|t}tdt |dt dtd|dStd dS) z*CLI entry point for hermes backup --quick.r6N)r6zState snapshot created: rz snapshot(s) stored in z/state-snapshots/z" Restore with: /snapshot restore z!No state files found to snapshot.)getattrrcrrkrr )rr6r\snapss r>run_quick_backuprs D'4 ( (E#%000G3 222333$&& ^3u::^^6I6K6K^^^___ <7<<===== 122222rLrc g} tj|dD]\}}}t|}d|D|dd<|D]W}||z } ||} n#t$rY*wxYwt || |r@||| fXn3#t$r&} t d| Yd} ~ dSd} ~ wwxYw|sdSd} tj |dtj d5} |D]i\} } | j d krtjd dt!|j 5}t|j}dddn #1swxYwY t'| |s6t d |d } |d n| |t!||d n?#|d wxYw| | t!|*#t,ttf$r'} td|| Yd} ~ cd} ~ wwxYwdddn #1swxYwYn[#t$rN} t d|  |d n#t$rYnwxYwYd} ~ dSd} ~ wwxYw| r* |d n#t$rYnwxYwdS|S)u'Write a full zip snapshot of ``hermes_root`` to ``out_path``. Uses the same exclusion rules and SQLite safe-copy as :func:`run_backup`. Returns the output path on success, None on failure (nothing to back up, or write error — caller should surface the outcome but not raise). FrBc$g|] }|tv |SrErFrHs r>rKz*_write_full_zip_backup..s"JJJ!>2I2I12I2I2IrLNz Full-zip backup: walk failed: %srrrrrz6Full-zip backup aborted: SQLite snapshot failed for %sTrkrzSkipping %s in zip backup: %sz%Full-zip backup: zip write failed: %s)rPrQrrr2rfr4r1r+r,rrrrrrrorrRrvrrrrdebug)rdrrrWrXrYrZr[r\rr8sqlite_snapshot_failedrrcr^rrs r>_write_full_zip_backuprsE-/L,.GKU,S,S,S 2 2 (GXygBJJhJJJHQQQK" 2 2U ++K88CC!H,E3AA##UCL1111 2  2 93???ttttt t"$ _XsG,@PQ R R R VX&2  "(%// &8#(C 6 %#MMTM:::::HHVS]]HCCC"MMTM::::FMMTM::::3x==AAA'*=LL!@(CPPPHHHH3               8 >DDD  OOtO , , , ,    D ttttt  OOtO , , , ,    D t Os&AB A B A-*B,A--.B C &CC "I>8 I24H%6E H%E H%E H%#-G$H%'I2)$G$ H%$G<<'H%#I2%I#<II2I##I2& I>2I66I>9I6:I>> KK$J;:K; KKKKKK33 L?Lrz pre-update-c6|p t}|tz Sr2)r _PRE_UPDATE_BACKUPS_DIRr4s r>_pre_update_backup_dirr s  +/++D ) ))rL backup_dircrt|d}|sdStd|Ddd}d}||dD]T} ||dz }#t $r+}t d|j|Yd}~Md}~wwxYw|S) uRemove oldest pre-update backups beyond the keep limit. Returns the number of files deleted. Only touches files matching ``pre-update-*.zip`` so hand-made zips dropped in the same directory are never touched. ``keep`` is floored to 1 because this helper is only called immediately after a fresh backup is written: deleting that backup right after the user paid the disk/CPU cost to create it would leave them worse off than no backup at all (and the wrapper in ``main.py`` would still print a misleading ``Saved: `` line for a file that no longer exists). Operators who genuinely don't want a backup should set ``updates.pre_update_backup: off`` in config — that gates creation. rrc3K|]V}|r@|jtr!|jdkR|VWdSrN)rMrRr _PRE_UPDATE_PREFIXrrrs r>rz,_prune_pre_update_backups..&st b bq IIKK bF--.@AA bFGhnnFVFVZ`F`F` F`F`F`F` b brLc|jSr2rr<s r>rz+_prune_pre_update_backups..(rrLTrNzFailed to prune backup %s: %s maxr/rrrrr1r+r,rRrr7rrr<r8s r>_prune_pre_update_backupsrs tQ</backups/pre-update-.zip`` and auto-prunes old pre-update backups. Returns the path to the created zip, or ``None`` if no files were found or the backup could not be created. Never raises — the caller (``hermes update``) should continue even if the backup fails. NTrz-Could not create pre-update backup dir %s: %srrrK) r rOrrr1r+r,rrrrrrr0r7rrr8rrdresults r>create_pre_update_backupr7s:!8!:!:K     t' 44J5555 F TWXXXttttt LNN # #$5 6 6E1>5>>>>H #Hk : :F ~tjt4444 OA BA;;Bzpre-migration-crt|d}|sdStd|Ddd}d}||dD]T} ||dz }#t $r+}t d|j|Yd}~Md}~wwxYw|S) zRemove oldest pre-migration backups beyond the keep limit. Only touches files matching ``pre-migration-*.zip`` so other backups in the same directory are never touched. rc3K|]V}|r@|jtr!|jdkR|VWdSr)rMrRr _PRE_MIGRATION_PREFIXrrrs r>rz/_prune_pre_migration_backups..nst e eq IIKK eF--.CDD eIJIYIY]cIcIc IcIcIcIc e erLc|jSr2rrs r>rz._prune_pre_migration_backups..prrLTrNrz+Failed to prune pre-migration backup %s: %srrs r>_prune_pre_migration_backupsrcs tQ<``. Writes to ``/backups/pre-migration-.zip`` and auto-prunes old pre-migration backups. Returns the path to the created zip, or ``None`` if nothing was found to back up (fresh install) or the write failed. Never raises — the caller decides whether to abort or proceed. NTrz0Could not create pre-migration backup dir %s: %srrrK) r rOrrr1r+r,rrrrrrrs r>create_pre_migration_backuprs":!8!:!:K     t( 44J5555 I:WZ[[[ttttt LNN # #$5 6 6E4AeAAAAH #Hk : :F ~t $7777 Or)r$Nr2)NNNN)r/N)G__doc__rUloggingrPrPrmrrrrrrpathlibrtypingrrrr hermes_constantsr r r getLogger__name__r+rGrUrSrrrr?r]rLrbrfrvintrorrrtuplerrr,rNr3rXr5rcrkrrr|ryrrWrrrrr_PRE_UPDATE_DEFAULT_KEEPrrrr_PRE_MIGRATION_DEFAULT_KEEPrrrErLr>rsc    '''''''',,,,,,,,,,,,ZZZZZZZZZZ  8 $ $.. <766 3d3333ltT ,dt2 t t t PT    (t$4Dp@p@p@p@nW_tSy1A6w30YDYDYDYDR>)''htn'''''  "&#' EE C=E$E 3-EC= E c] EEEER"& $ $sCx.8#'III$I IIII\"4HSMB#'ISISIS$ISd38nISISISISX4GS3.$"&PP P$P PPPP 3 3 3 3"NTNN$NNNNj$"***$**** "$"c"c""""L#'(!!$! !d^!!!!P)T:#'+&&$& &d^&&&&&&rL