`gjP dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z m Z ddl m Z ddlmZmZmZmZddlmZmZmZej.eZhdZdZd d hZhd Zhd Zd Zdee fdZ de dee fdZ!de de"fdZ#de de de de"fdZ$de de de"fdZ%de&de'fdZ(dBdZ)de jTde+e"e'ffdZ,de jTde'fdZ-dBd Z.d!Z/d"Z0d#Z1dCd$ee de fd%Z2 dDd&ee'd$ee d'ee&d(ee&dee'f d)Z3 dEd*e&d$ee deee'effd+Z4 dCd,e'd$ee de"fd-Z5d.Z6d/e dee&fd0Z7 dCd,e'd$ee deee'effd1Z8e1fd2e d'e&de&fd3Z9e1dfd'e&d$ee de&fd4Z:dBd5Z;de d6e dee fd7Zd:Z?dCd$ee de fd;Z@dZBd?ZCd:ZDd.git.nox.tox.venv.cache .mypy_cache .ruff_cache .pytest_cache site-packagesvenvbackups __pycache__ checkpoints node_modules hermes-agent)z.pycz.pyoz.db-walz.db-shmz .db-journal gateway.pidcron.pid> gateway.lockrrprocesses.jsongateway_state.json>.envstate.db auth.jsonz _external/returncl ddlm}m} |}|sgS ||}|gS |j xsg}g}t}|D]e} t|j} | js. | j} | |vrD|j| |j| g|S#t$rgcYSwxYw#t$rd}YwxYw#t$rd}YwxYw#t$r#}t j d||gcYd}~Sd}~wwxYw#t$rYwxYw#ttf$rYwxYw)uReturn existing absolute paths the active memory provider stores outside HERMES_HOME, resolved from config only (no network, no init). Reads ``memory.provider`` from config, loads just that provider, and asks it for ``backup_paths()``. Returns an empty list when no external provider is active or the provider can't be loaded — backup must never fail because of a flaky plugin. r)_get_active_memory_providerload_memory_providerNz0backup_paths() failed for memory provider %r: %s)plugins.memoryr&r' Exception backup_pathsloggerwarningsetr expanduserexistsresolveOSError ValueErroraddappend) r&r'activeproviderdeclaredexcoutseenrawpresolveds D/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/backup.py'_collect_memory_provider_external_pathsr?sfT,.  '/ ((*0b CD S $$&Axxz  yy{H t    1  JQ     I6SVW     $   stB0CCC# D5D!0 B>=B> CC C C # D,D D D DD!D32D3basecg}|jr#|js|j||S|js|St j |dD]\}}}t |}|Dcgc] }|tvs |c}|dd|D][}||z }|jr|jtvs|jjtrK|j|]|Scc}w)zYield regular files under *base* (a file or a directory), skipping symlinks, caches, and pyc files. *base* itself may be a file.F followlinksN) is_file is_symlinkr4is_diroswalkr_EXCLUDED_DIRSname_EXCLUDED_NAMESendswith_EXCLUDED_SUFFIXES) r@filesdirpathdirnames filenamesdpdfnamefpaths r>_iter_external_filesrVsE ||~doo/ T ;;= (*%(H  $9 ']"*FQa~.EqF  EJE!zz_, 0C0CDV0W LL      LGs 5 C1C1rel_pathc|j}|D]}|tvr |dk(r ||dk7ry|j}|tvry|j t ryy)zFReturn True if *rel_path* (relative to hermes root) should be skipped.rrTF)partsrIrJrKrLrM)rWrYpartrJs r>_should_excluder[si NNE ~ %  > !deAh&6  ==D  }}'( abs_pathout_pathct|ry|jry |j|jk(S#ttf$rYywxYw)zHReturn True when a candidate file should not be written to a backup zip.TF)r[rEr0r1r2)r]rWr^s r>_should_skip_backup_filer`sWx !X%5%5%777 Z s AAAsrcdstcVd}d} tjd|dd}tjt|}|j| ||fD]}| |j y#t $rY%wxYw#t $rp}t jd|| |jdn#t$rYnwxYwYd}~||fD]%}| |j #t $rY#wxYwyd}~wwxYw#||fD]%}| |j #t $rY#wxYwwxYw) uCopy a SQLite database safely using the backup() API. Handles WAL mode — produces a consistent snapshot even while the DB is being written to. Fail closed if a consistent snapshot cannot be created: copying only the live main file can omit committed WAL data. Nzfile:z?mode=roT)uriz"SQLite safe copy failed for %s: %s missing_okF) sqlite3connectstrbackupcloser)r+r,unlinkr1)rarbconn backup_conn connectionr8s r> _safe_copy_dbrpsU DKse84$?ooc#h/  K '- J%$$& ! ;S#F  JJ$J '   &- J%$$&   '- J%$$&   sA A>A// A;:A;> C7C2B21C22 B>;C2=B>>C2C:C!! C-,C-2C77C:: D(DD( D# D("D# #D(nbytesc`dD]$}|dkr|dk7r |dd|cS|d|cS|dz}&|ddS)zHuman-readable file size.)BKBMBGBirs.1f z TB)rqunits r> _format_sizer{"s[' D=-1S[fS\4&) P$>P P$S\ r\c t}|js#td|tjd|j rnt |j jj}|jrktjjd}|d|dz }n>tjjd}t jd|dz }|jjdk7r|j|jdz}|j j#ddtdt%d g}t'}t)j*|d D]\}}}t |} | j-|} | t d k(} |d d } |D cgc]} | t.vs| dk(r| s| c} |d d t'| t'|z D]}|j1t3| |z !|D]9}| |z }|j-|}t5|||r'|j7||f;t jj}g}g}t9D]~} |j}|j-|t?|D]L} |jj-|}t@|jCz}|j7||fN|s|s tdy tE|tE|z}td|dd}g}tGjH}tKjL|dtJjNd5}tQ|dD]7\}\}} |jdk(rtSjTdd t3|j 5}!t |!jV}"d d d tY|"rL|j[|"t3| ||"j]j^z }|"jadna|"jad|j7d| d|j[|t3| ||j]j^z }|dzdk(s&td|d|d:|D]6\}} |j[||||j]j^z }8 d d d tGjH|z }$|j]j^}%t|rtd|ntd |td!|td"te|td#te|%td$|$d%d&|r#td'tE|d(t%d |r9td)tE|d*tg|d d+D]}&td,|&|r*td-tg|D]} td,| d|rVtd.tE|d/|d d+D] }'t|'tE|d+kDrtd0tE|d+z d1|std2|jVy y cc} w#t:t<f$r|j7t3|YYwxYw#t:t<f$rY?wxYw#1swYxYw#tbt<t:f$r"}#|j7d| d|#Yd }#~#d }#~#wwxYw#tbt<t:f$r"}#|j7d|d|#Yd }#~#d }#~#wwxYw#1swYzxYw)3z1Create a zip backup of the Hermes home directory.z*Error: Hermes home directory not found at %Y-%m-%d-%H%M%Szhermes-backup-.zipTparentsexist_okz Scanning z ...FrB.NrzNo files to back up.z Backing up files ...rw compresslevel.dbsuffixdeletedirarcnamere z: SQLite safe copy failed: /zBackup incomplete: zBackup complete: z Files: z Original: z Compressed: z Time: rwsz Included z( memory-provider file(s) stored outside z Skipped zD memory-provider path(s) outside your home directory (not portable):  z Excluded directories: Warnings ( files skipped): ... and  morez Restore with: hermes import )4r rFprintsysexitoutputrr.r0rnowstrftimehomerlower with_suffixparentmkdirr r-rGrH relative_torIr3rir`r4r?r2r1rV_EXTERNAL_PREFIXas_posixlentime monotoniczipfileZipFile ZIP_DEFLATED enumeratetempfileNamedTemporaryFilerJrpwritestatst_sizerlPermissionErrorr{sorted)(args hermes_rootr^stamp files_to_add skipped_dirsrOrPrQrRrel_diris_root orig_dirnamesrSremovedrTrUrelhome_direxternal_to_addskipped_externalr@ base_resolved rel_to_homer file_count total_byteserrorst0zfir]rWtmptmp_dbr8elapsedzip_sizer<es( r> run_backupr+s>)+K     :;-HI   {{ $//199; ?? LLN++,=>EN5'">>H ''(9:99;>%!==&(''&(@A OO$6 I)+,D 12,.L5L(* (O.$9 ']..- T#Y&   &1+>w   =)CM9 5G   S7!23 4 5 .EJE##K0C'sH=    - .!.>yy{""$H.0O"$79 5  LLNM  % %h /*$/ 5E #mmo99(C ')=)=)??G  " "E7#3 4  5 5  $%\"S%99J K |: ./K F  B 3(<(? O :G$   # #CI .   (  400$Wj9  8*Bse45 $Wj9  7)2cU34 O))sZ1 !Z6=[&?];:\ [<'B\ .];/9\ (];2];0]];6)[#"[#&[98[9<\ \  \?\:4];:\??];]8]3-];3]88];;^rc|j}|syhd}t}|D]-}t|j}||vs|j |/|syy)zLCheck that a zip looks like a Hermes backup. Returns (ok, reason). )Fzzip archive is empty>r!r" config.yaml)FzZzip does not appear to be a Hermes backup (no config.yaml, .env, or state databases found))T)namelistr-rrJr3)rnamesmarkersfoundnbasenames r>_validate_backup_ziprsb KKME ,2G EE  7<< w  IIh    r\cZ|jDcgc]}|jdr|}}|sy|Dcgc]}t|j}}|Dchc]}t |dkDs|d}}t |dk(r|j }|dvr|dzSycc}wcc}wcc}w)zDetect if the zip has a common directory prefix wrapping all entries. Some tools zip as `.hermes/config.yaml` instead of `config.yaml`. Returns the prefix to strip (empty string if none). rrr}r>.hermeshermes)rrLrrYrpop)rrr parts_listr< first_partsprefixs r>_detect_prefixrs  =1QZZ_Q =E = *//A$q'--/J/",:As1vz1Q4:K: ;1" * *C<   > 0;sBBB#B(-B(c t|jjj}|j s#t d|t jdtj|s#t d|t jdt}tj|d5}t|\}}|s#t d|t jdt|}|jDcgc]}|jdr|}}t|} t d| dt d t!|rt d |d |d z j#} |d z j#} | s| rw|j$skt t dt dt  t'dj)j+}  dvrt d dddyt d| d|j1ddg} d}d}g}tj2j}t5j6}|D]Z}|j9t:r|tt:d}|s/||z } |jj=| |jBj1dd|jE|5}tE|d5}|jG|jIdddddd|jJdvs|jLtNvr tQjR|d|dz }|dz }|d zdk(rt d|d| d|r |j9|r|t|d}n|}|sEt|jLtXvr|jA|s||z } |jj=|j |jBj1dd|jE|5}tE|d5}|jG|jIdddddd|jLtNvrtQjR|d|dz }|d zdk(sIt d|d| d]t5j6|z }t t d!|d"|d#d$t d%t!|rt d&|d't!d(| rVt d)t| d*| dd+D] }t |t| d+kDrt d,t| d+z d-|rbt d.t|d/t[|dd+D]}t d0|t|d+kDrt d1t|d+z d-|d2z }g}|j]rZ dd3l/m0}m1}m2} m3}!t[|jiD]}"|"j]s|"jL}#|"d z j#s|"d z j#sG||#}$|$r%t d4|#d5|$|jA|#d6fv||#}%|jA|#|%duf|r|Dcgc] \}}|s | }&}}|Dcgc] \}}|r | }'}}|&rt d7d8jk|&|'rt d9d8jk|'| s*t d:|!d;t d<t d=t |d@z j]st dAt dB|r5|D(cgc]\}}(| })}}(t dC|)D]}*t dD|*dEt dFdddycc}w#t,t.f$r$t dt jdY"wxYw#t>$r| jAd|dYwxYw#1swY"xYw#1swY'xYw#tT$rYwxYw#tVtTf$r"}| jAd|d|Yd}~%d}~wwxYw#t>$r| jAd|dYOwxYw#1swYSxYw#1swYXxYw#tVtTf$r"}| jAd|d|Yd}~Zd}~wwxYwcc}}wcc}}w#tl$r3to|jirt d>t d?YwxYwcc}(}w#1swYyxYw)Gz(Restore a Hermes backup from a zip file.zError: File not found: r}zError: Not a valid zip file: rzError: rzBackup contains z fileszTarget: zDetected archive prefix: z (will be stripped)rr!z;Warning: Target directory already has Hermes configuration.z=Importing will overwrite existing files with backup contents.zContinue? [y/N] z Aborted.>yyeszAborted.Nz Importing rTrrrz: path traversal blockedwb>.conf.jsonr!irrzImport complete: z files restored in rwrz Target: z Restored z? memory-provider file(s) to their original location(s) outside rrrrrrz Preserved z? runtime state file(s) (kept this machine's, not the backup's):rz ... and profiles)create_wrapper_scriptcheck_alias_collision_is_wrapper_dir_in_path_get_wrapper_dirz Skipped alias 'z': Fz Profile aliases restored: z, z Profile aliases skipped: z Note: z is not in your PATH.z3 Add to your shell config (~/.bashrc or ~/.zshrc):z( export PATH="$HOME/.local/bin:$PATH"z6 Profiles detected but aliases could not be created.z5 Run: hermes profile list (after installing hermes)rz?Note: The hermes-agent codebase was not included in the backup.z0 If this is a fresh install, run: hermes updatez, To re-enable gateway services for profiles:z hermes -p z gateway installz2Done. Your Hermes configuration has been restored.)8rrr.r0rDrrr is_zipfiler rrrrrLrr r/forceinputstriprEOFErrorKeyboardInterruptrrrr startswithrrr2r4ropenrreadrrJ_SECRET_FILE_NAMESrGchmodr1r_IMPORT_SKIP_NAMESrrFhermes_cli.profilesrrrriterdirjoin ImportErrorany)+rzip_pathrrokreasonrrmembersr has_confighas_envanswerrrestoredrestored_externalskipped_runtimerrmemberext_reltargetrarbr8rrr profiles_dirrestored_profilesrrrrentry profile_name collisionwrappercreatedskipped_ gw_profilespnames+ r> run_importrs0 DLL!,,.668H     'z23    h ' -hZ89  )+K 3 'KD2)"- F GF8$ % HHQK# kkmC1::c?1CC\    F34 ,./01  -fZ7JK L"M199; '//1 '4:: G O P Q R G 1288:@@B\)j!CKDKDH  ZL 34$6%'99;&&( ^^ H >F  !12 %5!6!78!G+NN$00: 8MM''t'D.Cfd1C.s #((*-..}}(BBfkkUgFg!HHVU3MH%*%c>Q&Bxj*Z@A&++F3S[\*Cy~~!33&&s+ 3&F  ,,[-@-@-BC  1 ##D4#@WWV_*T&$-?*3IIchhj)**;;"44HHVU+A #~"8*Aj\<=QH >T.."R'  !(+>wsm1MN .0123   12366I6K5LAO   N3v;-/?@ ACR[ a 6{R 3v;#3"4E:;   _!5 67CD o.s3 $SEl# $?#b( S%9B%>$?uEF#Z/     # S$L$8$8$:; VE <<> #(::L!M199;UV^D[D[D] 5l CI  1,s9+NO)00,1FG"7 "E)00,t@S1TU V%.?FUQ2qFGF.?JUQrqJGJ >tyy?Q>RST >STUSTHI n,446 S T D E ):;A1;K; A B$ > UG+;<= > BCWKDKDD(/0 l#  <"MMBvh.F"GH .... '! !(18MMBvhb"6778<  3%'?@A  **** $W- 1 3%r#/00 1zGJ S|++-.STQR  Sb??e!c cc cd +de!d  e! d8ee!e e!!e*)r"rr!r#cron/jobs.jsonzcron/executions.dbr zchannel_directory.jsonzchannel_aliases.jsonrz#gateway/discord_message_recovery.dbz projects.dbzresponse_store.dbzmemory_store.dbzverification_evidence.dbz kanban.dbz kanban/boardspairingzplatforms/pairingzfeishu_comment_pairing.jsonzstate-snapshots hermes_homec0|xs t}|tz SN)r _QUICK_SNAPSHOTS_DIRrrs r>_quick_snapshot_rootr"!s  +/+D & &&r\labelkeep max_file_sizec|xs t}t|}dtdtdtffd }t j tjjd}|r|d|n|}||z } | jddi} tD]} || z } | js| jr| jd D]} | js| j!|j#}d d |d vsd d |d vrD|| |rN| |z }|j$jdd | j&d k(r t)| |st+j,| ||j/j0| |<| js|| | r| | z }|j$jdd | j&d k(rt)| |s[t+j,| ||j/j0| | <| st+j:| dy|||t=| t?| jA| d}tC| dz dd5}tEjF||ddddtI||tJn|t6jMd|t=| |S#t2t4f$r"}t6j9d||Yd}~.d}~wwxYw#t2t4f$r"}t6j9d| |Yd}~d}~wwxYw#1swYxYw)u2Create a quick state snapshot of critical files. Copies STATE_FILES to a timestamped directory under state-snapshots/. Auto-prunes old snapshots beyond the keep limit. Args: max_file_size: When set, individual files larger than this many bytes are skipped (with a printed warning) instead of copied. Used by the pre-update safety snapshot so a multi-GB ``state.db`` can never stall ``hermes update`` or silently eat disk — the small pairing/cron/config files the snapshot exists to protect are always captured. ``None`` (default) copies everything, which preserves manual ``/snapshot`` and ``hermes backup --quick`` behavior. Returns: Snapshot ID (timestamp-based), or None if no files found. pathrel_namer$c y |jj}|krytd|dt |dt dt j d||y#t$rYywxYw)z _too_largez)create_quick_snapshot.._too_largeAs   99;&&D =  'z2T"#9\--H,I R   G       sA&& A21A2z %Y%m%d-%H%M%S-Tr*z /workspaces/rz /attachments/rzCould not snapshot %s: %sN) ignore_errors)id timestampr#r total_sizerN manifest.jsonrutf-8encoding)indentr$z%State snapshot created: %s (%d files))'r r"rriboolrrrutcrr_QUICK_STATE_FILESr/rFrglobrDrrrrrpshutilcopy2rrr1rr+r,rmtreersumvaluesrjsondump_prune_quick_snapshots_QUICK_DEFAULT_KEEPinfo)r#rr$r%rrootr+tssnap_idsnap_dirmanifestrrasubsub_relrbr8metafs ` r>create_quick_snapshotrP&s0  +/+D  %D, hll # , ,_ =B!&AeWoBGg~H NN4$N/!H!5BSjzz|  ::<yy~ N{{}//$/88:"q ^3AgYVW.7Xc7+(    = NzzU*,S#6$ S#.(+ (:(:HW%- N2 {{}  c3  n 5 BzzU"$S#. S#&HHJ..HSMg5Bn  hd3(m(//+,  D h(# @%A $!$% 4T\&9tT KK7#h-P N[ 1NNN#>MMN() B NN6S A A B %%sH<K 3K L+3L5L5 K>K99K>L2L--L25L>limitct|}|jsgSg}t|jdD]t}|j s|dz }|jr; t |d5}|j tj|dddt||k\ss|S|S#1swYxYw#tjtf$r"|j |jdddY[wxYw) z7List existing quick state snapshots, most recent first.T)reverser2r3r4Nr)r/rr1) r"r/rrrFrr4rBloadJSONDecodeErrorr1rJr)rQrrGresultsrS manifest_pathrOs r>list_quick_snapshotsrXs ,D ;;= G DLLND 1 xxz O+    ! Q-':1aNN499Q<01 w<5  N  N11(('2 QaffAQOP Qs*% C2%B4C4B= 9C8C;:C; snapshot_idc|xs t}t|}|r d|vsd|vs|dvrtjd|y||z } |j j |j |jsy|dz }|jsyt|d 5}tj|}d d d d }jd iD]0} || z } | j j |j || z } | j j |j | js{| jjdd | jdk(rn| jd| j dz } t#j$| | | j'dt#j(t+| t+| nt#j$| | |dz }3tj1d|||d kDS#t $rtjd|YywxYw#1swYxYw#t $rtjd | YwxYw#t $rtjd | YwxYw#t,t.f$r"} tjd| | Yd } ~ d } ~ wwxYw)zRestore state from a quick snapshot. Overwrites current state files with the snapshot's copies. Returns True if at least one file was restored. r\)rz..zInvalid snapshot_id: %sFz*Snapshot path traversal blocked for id: %sr2r3r4NrrNz#Manifest path traversal blocked: %sTrrrz .snap_restorerer}zFailed to restore %s: %sz"Restored %d files from snapshot %s)r r"r+errorr0rr2rFr/rrBrTgetrrrrJr=r>rlmoverir1rrF)rYrrrGrJrWrOrNrrrarbrr8s r>restore_quick_snapshotr_s  +/+D  %D #, 0C{VaGa . <k!H&&t||~6 ?? .M    ! mg .!yy|Hxx$ ?n  KKM % %h&6&6&8 9 Sj  KKM % %dlln 5 zz|  5 ?zzU"jjQsxxj #>> S#& d + CHc#h/ S#& MH= ?D KK4h L a<e  A;O  LL> D    LL> D  &) ? LL3S# > > ?s[-H(&I "-I-J1BJ&(I  I  II=<I=J#"J#&K5KKrr'c|jsy t|dd5}tj|}dddt tr/|jdg}t |tr t|SdSt |tr t|Sy#1swYdxYw#ttj f$rYywxYw)uReturn the number of cron jobs stored in ``path``. The canonical on-disk shape is ``{"jobs": [...]}`` (see ``cron/jobs.py``). A legacy bare-list shape (``[...]``) is also honoured. Returns: The job count for any *valid, readable* JSON document, or ``None`` if the file is missing or cannot be parsed. ``None`` means "unknown" — callers must not treat it as "zero jobs", because acting on an unreadable file could mask a real corruption the user needs to see. Nrz utf-8-sigr4jobs) rDrrBrTr1rU isinstancedictr]listr)r'rOdataras r>_count_cron_jobsrfs <<> $k 2 a99Qr1rr+r\r,)rYrr live_path live_count snap_path snap_countr8s r>restore_cron_jobs_if_emptiedrn8s@   +/+D~%I!),J$T*[8>II!),J  Ztd; Y * NN Y :k RR _ % NPS  s3B%%C4CCrGc,|jsytd|jDdd}d}||dD]} tj||dz }|S#t $r+}t jd|j|Yd}~Qd}~wwxYw) zKRemove oldest quick snapshots beyond the keep limit. Returns count deleted.rc3BK|]}|js|ywr)rF).0rSs r> z)_prune_quick_snapshots..s1qahhj1sc|jSrrJ)rSs r>z(_prune_quick_snapshots.. affr\TkeyrSNr}zFailed to prune snapshot %s: %s) r/rrr=r?r1r+r,rJ)rGr$dirsdeletedrSr8s r>rDrDs ;;= 1DLLN1  D G $%[K K MM!  qLGK N K NNprune_quick_snapshotsr|s ""6{"C$ OOr\ct|dd}t|}|rJtd|t}tdt |dt dtd|ytd y) z*CLI entry point for hermes backup --quick.r#N)r#zState snapshot created: rz snapshot(s) stored in z/state-snapshots/z" Restore with: /snapshot restore z!No state files found to snapshot.)getattrrPrrXrr )rr#rIsnapss r>run_quick_backuprsp D'4 (E#%0G ( 23$& 3u:,56I6K5LL]^_ 27)<= 12r\rc g} tj|dD]l\}}}t|}|Dcgc] }|tvs |c}|dd|D]:}||z } | j |} t | | |r(|j| | f<n |syd} tj|dtjd5} |D]\}} |jdk(rtj ddt#|j$ 5}t|j&}ddd t)|s-tjd |d } |j+d nM| j-|t#| |j+d n| j-|t#| ddd| r |j+d y|Scc}w#t $rYwxYw#t$r } tjd| Yd} ~ yd} ~ wwxYw#1swYxYw#j+d wxYw#t.tt f$r"} tj1d|| Yd} ~ d} ~ wwxYw#1swYxYw#t$rC} tjd|  |j+d n#t$rYnwxYwYd} ~ yd} ~ wwxYw#t$rYywxYw)u'Write a full zip snapshot of ``hermes_root`` to ``out_path``. Uses the same exclusion rules and SQLite safe-copy as :func:`run_backup`. Returns the output path on success, None on failure (nothing to back up, or write error — caller should surface the outcome but not raise). FrBNz Full-zip backup: walk failed: %srrrrrz6Full-zip backup aborted: SQLite snapshot failed for %sTrerzSkipping %s in zip backup: %sz%Full-zip backup: zip write failed: %s)rGrHrrIrr2r`r4r1r+r,rrrrrrrirrJrprlrrdebug)r^rrrOrPrQrRrSrTrUrr8sqlite_snapshot_failedrr]rWrrs r>_write_full_zip_backuprs-/L,.GGKU,S 2 (GXygB&.J!>2I1JHQK" 2U ++K8C,E3A##UCL1 2  2( "$ __XsG,@,@PQ R VX&2 "(%/ &88#(C 6 %#MMTM:HHVS]HC"MMTM:3x=A/  J  OOtO , OEK " 93?"44#MMTM:(*=LL!@(CP3  8 >D  OOtO ,      s#-G GGGG%%G'I*8 I:H%<HH%$HH%IH0/H%I!I*,J9G GGGG G?G::G?H H%H""H%%I9IIIII'#I** J63J1 JJ1 J)&J1(J))J11J69 KKrz pre-update-c0|xs t}|tz Sr)r _PRE_UPDATE_BACKUPS_DIRr!s r>_pre_update_backup_dirr s  +/+D ) ))r\ backup_dirc:t|d}|jsytd|jDdd}d}||dD]} |j |dz }|S#t $r+}t jd|j|Yd}~Ld}~wwxYw) uRemove oldest pre-update backups beyond the keep limit. Returns the number of files deleted. Only touches files matching ``pre-update-*.zip`` so hand-made zips dropped in the same directory are never touched. ``keep`` is floored to 1 because this helper is only called immediately after a fresh backup is written: deleting that backup right after the user paid the disk/CPU cost to create it would leave them worse off than no backup at all (and the wrapper in ``main.py`` would still print a misleading ``Saved: `` line for a file that no longer exists). Operators who genuinely don't want a backup should set ``updates.pre_update_backup: off`` in config — that gates creation. r}rc3K|]R}|jr@|jjtr!|jj dk(r|TywrN)rDrJr_PRE_UPDATE_PREFIXrrrqr<s r>rrz,_prune_pre_update_backups..&sG bq IIKAFF--.@AahhnnFVZ`F`  bAAc|jSrrtr<s r>ruz+_prune_pre_update_backups..(rvr\TrwNzFailed to prune backup %s: %s maxr/rrrlr1r+r,rJrr$rrzr<r8s r>_prune_pre_update_backupsrs tQ/backups/pre-update-.zip`` and auto-prunes old pre-update backups. Returns the path to the created zip, or ``None`` if no files were found or the backup could not be created. Never raises — the caller (``hermes update``) should continue even if the backup fails. NTrz-Could not create pre-update backup dir %s: %sr~rr8) r rFrrr1r+r,rrrrrrrr$rrr8rr^results r>create_pre_update_backupr7s:!8!:K    ' 4J5 LLN # #$5 6E125'>>H #Hk :F ~jt4 O F TWXB B8B33B8zpre-migration-c:t|d}|jsytd|jDdd}d}||dD]} |j |dz }|S#t $r+}t jd|j|Yd}~Ld}~wwxYw) zRemove oldest pre-migration backups beyond the keep limit. Only touches files matching ``pre-migration-*.zip`` so other backups in the same directory are never touched. rc3K|]R}|jr@|jjtr!|jj dk(r|Tywr)rDrJr_PRE_MIGRATION_PREFIXrrrs r>rrz/_prune_pre_migration_backups..nsG eq IIKAFF--.CDIY]cIc  erc|jSrrtrs r>ruz._prune_pre_migration_backups..prvr\TrwNr}z+Failed to prune pre-migration backup %s: %srrs r>_prune_pre_migration_backupsrcs tQ``. Writes to ``/backups/pre-migration-.zip`` and auto-prunes old pre-migration backups. Returns the path to the created zip, or ``None`` if nothing was found to back up (fresh install) or the write failed. Never raises — the caller decides whether to abort or proceed. NTrz0Could not create pre-migration backup dir %s: %sr~rr8) r rFrrr1r+r,rrrrrrrs r>create_pre_migration_backuprs":!8!:K    ( 4J5 LLN # #$5 6E45eWDAAH #Hk :F ~ $7 O I:WZ[r)r$Nr)NNNN)rN)G__doc__rBloggingrGr=rgrrrrrrpathlibrtypingrrrr hermes_constantsr r r getLogger__name__r+rIrMrKrrrr?rVr9r[r`rpintrir{rrtuplerrrr;r rEr"rPrXr_rirfrnrDr|rrrr_PRE_UPDATE_DEFAULT_KEEPrrrr_PRE_MIGRATION_DEFAULT_KEEPrrryr\r>rs    ',,ZZ   8 $.. <7 3d3ltT ,dt2 t t t PT (t$4Dp@nW__tSy1A6w30YDR>)'htn''  "&#' E C=E$E 3-EC= E c] ER"& $ $sCx.8#'II$I I\"4HSMB#'ISIS$ISd38nISX4GS3.$"&P P$P P 3"NTNN$Nj$"**$* "$"c"c"L#'(!$! !d^!P)T:#'+&$& &d^&r\