+VjgdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z m Z ddl mZddlmZmZmZmZmZddlmZejeZdZd d hZejd Zd;dZd;dZd;dZ dZ!ddZ#d?dZ$d@dZ%dAdZ&dBdZ' d=dCd&Z(dDdEd)Z)dFd,Z*dGd.Z+dHd0Z,dId3Z-dJd5Z.d=dKd7Z/dLd9Z0dMd:Z1dS)NuKCurator snapshot + rollback. A pre-run snapshot of ``~/.hermes/skills/`` (excluding ``.curator_backups/`` itself) is taken before any mutating curator pass. Snapshots are tar.gz files under ``~/.hermes/skills/.curator_backups//`` with a companion ``manifest.json`` describing the snapshot (reason, time, size, counted skill files). Rollback picks a snapshot, moves the current ``skills/`` tree aside into another snapshot so even the rollback itself is undoable, then extracts the chosen snapshot into place. The snapshot does NOT include: - ``.curator_backups/`` (would recurse) - ``.hub/`` (hub-installed skills — managed by the hub, not us) It DOES include: - all SKILL.md files + their directories (``scripts/``, ``references/``, ``templates/``, ``assets/``) - ``.usage.json`` (usage telemetry — needed to rehydrate state cleanly) - ``.archive/`` (so rollback restores previously-archived skills too) - ``.curator_state`` (so rolling back also restores the last-run-at pointer — otherwise the curator would immediately re-fire on the next tick) - ``.bundled_manifest`` (so protection markers stay consistent) Alongside the skills tarball, each snapshot also captures a copy of ``~/.hermes/cron/jobs.json`` as ``cron-jobs.json`` when it exists. Cron jobs reference skills by name in their ``skills``/``skill`` fields; the curator's consolidation pass rewrites those in place via ``cron.jobs.rewrite_skill_refs()``. Without capturing the pre-run state, rolling back the skills tree would leave cron jobs pointing at the umbrella skills even though the narrow skills they were originally configured with have been restored. We store the whole jobs.json for fidelity but rollback only touches the ``skills``/``skill`` fields — the rest (schedule, next_run_at, enabled, prompt, etc.) is live state and we leave it alone. ) annotationsN)datetimetimezone)Path)AnyDictListOptionalTupleget_hermes_home.curator_backupsz.hubz/^\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}Z(-\d{2})?$returnrc*tdz dz S)Nskillsrr 2/root/.hermes/hermes-agent/agent/curator_backup.py _backups_dirrFs   x '*< <Vs   C).a@@D ::<<4X mmWm--  CQGGG+++X  PC fd # # -JJv&&E%&& 0%(ZZ\"  % % -!$VD   ) ,PPP\ O_P " "..sW.EEEE  ;Q???,,,X D KsNA B$A;5B;BB D D54D59E F#$F F FnowOptional[datetime]strc|tjtj}|d}|dr |dd}|dddzS) z@UTC ISO-ish filesystem-safe timestamp: ``2026-05-01T13-05-42Z``.Nr) microsecondz+00:00i:-Z)rr?rutcreplace isoformatendswith)r?ss r_utc_idrLsq {l8<((  "",,..Azz( crcF 99S#   $$rcx ddlm}|}n4#t$r'}td|icYd}~Sd}~wwxYwt |t siS|dpi}t |t siS|dpi}t |t r|niS)Nr) load_configz,Failed to load config for curator backup: %scuratorbackup)hermes_cli.configrN Exceptionr+r,r/r0r1)rNcfgr;curbks r _load_configrVs111111kmm  CQGGG  c4  '')   "C c4     bBB%% -222-s A?AAboolc`ttddS)uBDefault ON — the whole point of the backup is safety by default.enabledT)rWrVr1rrr is_enabledrZs$  ""9d33 4 44rintct} t|dt}n#tt f$r t}YnwxYwt d|S)Nkeep)rVr[r1 DEFAULT_KEEPr5 ValueErrormax)rSns rget_keeprcsd ..C  -- . . z "  q!99s(9AAbasec~ td|dDS#t$rYdSwxYw)Nc3K|]}dVdS)r^Nr).0_s r z%_count_skill_files..s"551555555rzSKILL.mdr)sumrglobr*)rds r_count_skill_filesrlsR55djj44555555 qqs +. <<r" archive_pathskills_counted cron_infoOptional[Dict[str, Any]]Nonec`|j|tjtj|j|j|d}|t| ddt| ddd|d<| ds| dd |dd<| d r|d |dd <|d z tj |d d ddS)N)idr" created_atarchive archive_bytes skill_filesr Fr!rr cron_jobsr"z not capturedr' manifest.jsonT)indent sort_keysr#r$)namerr?rrGrIstatst_sizerWr1r[r7r-dumps)rr"rmrnromanifests r_write_manifestrs8il8<00::<<$%**,,4% HimmK??@@immL!<<==! ! }}[)) V.7mmHn.U.UH[ !( + == ) ) P5>5OH[ !/ 2 O'' 8A666(rmanualOptional[Path]ctstddSt}|stddSt } |ddn4#t$r'}td||Yd}~dSd}~wwxYwt}|}d}||z r$|d|d }|dz }||z $||z } |dd n4#t$r'}td ||Yd}~dSd}~wwxYw|d z } tj |d d5} t| D];} | j tvr| t!| | j d< dddn #1swxYwYt#|} t%|||t'|| ni#ttjf$rP}td|d t+j|dn#t$rYnwxYwYd}~dSd}~wwxYwt/t1td|||S)uYCreate a tar.gz snapshot of ``~/.hermes/skills/`` and prune old ones. Returns the snapshot directory path, or ``None`` if the snapshot was skipped (backup disabled, skills dir missing, or an IO error occurred — in which case we log at debug and return None so the curator never aborts a pass because of a backup failure). z4Curator backup disabled by config; skipping snapshotNu5No ~/.hermes/skills/ directory — nothing to back upTparentsexist_okz#Failed to create backups dir %s: %sr^rE02dFz$Failed to create snapshot dir %s: %s skills.tar.gzzw:gz) compresslevel)arcname recursive)rozCurator snapshot failed: %sexc_info ignore_errors)r]z!Curator snapshot created: %s (%s))rZr+r,rr(rmkdirr*rLtarfileopensortediterdirr}_EXCLUDE_TOP_LEVELaddrAr>rrlTarErrorshutilrmtree _prune_oldrcr9) r"rbackupsr;base_idsnap_idcounterrrutfentryros rsnapshot_skillsrs << KLLLt ]]F ==?? LMMMtnnG dT 2222  :GQGGGtttttiiGGG W  $ $ & &,,w,,,1  W  $ $ & & W D 4% 0000  ;T1EEEttttt_$G \'6 ; ; ; Gr 0 011 G G:!333s5zz5:FFFF  G G G G G G G G G G G G G G G G+400 fg*622"+ - - - - - W% & 2A EEE  M$d 3 3 3 3 3    D tttttHJJ KK3WfEEE Ks8B CB<<CD// E 9EE )H'AG+ H'+G//H'2G/33H''J =JI21J2 I?<J>I??JJ r] List[str]c6t}|sgSg}g}|D]}|s|jdr||Gt|jr||j|f| ddg}||dD]g\}} tj |||j5#t$r&}td||Yd}~`d}~wwxYw|D]J} tj |#t$r&}td||Yd}~Cd}~wwxYw|S)zDelete regular snapshots beyond the newest *keep*. Returns deleted ids. Staging dirs (``.rollback-staging-*``) are implementation detail and pruned independently on every call..rollback-staging-c|dS)Nrr)ts rz_prune_old../s qtrT)keyreverseNzFailed to prune %s: %sz(Failed to clean stale staging dir %s: %s)rr(ris_dirr} startswithappend_ID_REmatchsortrrr*r+r,) r]rentries stale_stagingchilddeletedrhpathr;s rrrsnnG >>   &(G "M"" 0 0||~~   : !5 6 6    ' ' '  << # # 0 NNEJ. / / / LL^^TL222G455><<4 < M$    NN49 % % % % < < < LL14 ; ; ; ; ; ; ; ; <NN N M$     N N N LLCT1 M M M M M M M M N Ns0*.D E #EE E&& F0FFsnap_dirc|dz }|siS tj|dS#ttjf$ricYSwxYw)Nryr#r$)r(r-r.r)r*r4)rmfs r_read_manifestrCsp O #B 99;; z",,,88999 T) * s'AA A List[Dict[str, Any]]ctt}|sgSg}t|dD]}|st |js7|dz sOt|}| d|j| dt|d|vr8|dz } | j |d<n#t$rd|d<YnwxYw|||S)uReturn all restorable snapshots, newest first. Only entries with a real ``skills.tar.gz`` tarball are listed — transient ``.rollback-staging-*`` directories created mid-rollback are implementation detail and not shown.Trrrsrrvr)rr(rrrrrr}r setdefaultrAr~rr*r)routrrarcs r list_backupsrMsG nnG >>   "C))4888||~~  ||EJ''  '//11   E " " dEJ''' fc%jj))) " $ $/)C (&)hhjj&8?## ( ( (&'?### ( 2 Js0D  DD backup_id Optional[str]c\t}|sdS|rN||z }|r3t|r|dz r|SdSdt |dD}|r|dndS)zpReturn the path of the requested backup, or the newest one if *backup_id* is None. Returns None if no match.Nrcg|]N}|t|j5|dz L|OS)r)rrrr}r()rgcs r z#_resolve_backup..yse 88:: ,,qv..454G3O3O3Q3Q rTrr)rr(rrrrr)rrtarget candidatess r_resolve_backuprjsnnG >>  t9$ MMOO  Y'' /)1133  Mt'//++T:::J' 0:a==D0r snapshot_dirc dggddd}|tz }|sdt|d<|S |d}tj|}n-#t tjf$r}d ||d<|cYd}~Sd}~wwxYwt|tr| d }nt|tr|}nd}t|tsd |d<|Si}|D]}t|ts| d } t| tr| sE| d | d| dp| d|| <|sd|d<|S ddl m } m} m} n!#t $r}d||d<|cYd}~Sd}~wwxYwd|d< | 5| } d}t#}| D]]}t|ts| d } t| tr| sF|| | | }|s| d }| d}| d }| d}||kr||kr|dxxdz cc<||d dn||d <||ddn||d<|d| | dp| ||d||ddd}_|D]<\} }| |vr3|d| | dp| d=|r | | dddn #1swxYwYn<#t,$r/}t.d|dd||d<Yd}~nd}~wwxYw|S)u]Reconcile backed-up cron skill links into the live ``cron/jobs.json``. We do NOT overwrite the whole cron file. Only the ``skills`` and ``skill`` fields are restored, and only on jobs that still exist in the current file (matched by ``id``). Everything else about the job — schedule, next_run_at, last_run_at, enabled, prompt, workdir, hooks — is live state that the user/scheduler has modified since the snapshot; overwriting it would regress unrelated cron activity. Rules: - Jobs present in backup AND live, with differing skills → skills restored. - Jobs present in backup AND live, with matching skills → no-op. - Jobs present in backup but gone from live (user deleted the job after the snapshot) → skipped, noted in the return report. - Jobs present in live but not in backup (user created a new cron job after the snapshot) → left untouched. Never raises; failures are captured in the return dict. Writes through ``cron.jobs`` to pick up the same lock + atomic-write path that tick() uses, so we don't race the scheduler. FrN) attemptedrestoredskipped_missing unchangederrorzsnapshot has no rr#r$zfailed to load backed-up jobs: r&z)backed-up cron-jobs.json has no jobs listrsrskillr})rrr}Tr) load_jobs save_jobs_jobs_file_lockzcron module unavailable: rr^r)rr)job_idjob_namefromtor)rrz"Cron skill-link restore failed: %srzrestore failed mid-flight: )r6r(r)r-r.r*r4r/r0r1r2rA cron.jobsrrr ImportErrorsetrpopritemsrRr+r,)rreport backup_file backup_text backup_parsedr; backup_jobs backup_by_idjobjidrrr live_jobschangedlive_idsliverP cur_skills cur_skill bkp_skills bkp_skills r_restore_cron_skill_linksrsR. F!33K     A-?AAw !++W+==  ;// T) *?A??w  -&&#''// M4 ( (#  k4 ( (Ew /1L   #t$$  ggdmm#s## 3  ggh''WWW%%GGFOO*s  S "{ CCCCCCCCCCC 9a99w F;:< 6 %6 %! IGuuH!& & !$--hhtnn!#s++3 S!!!%))#..>!XXh//  HHW-- #ZZ11 "JJw// ++ Y0F0F;'''1,'''%HHXt,,,,%/DN$HHWd++++$-DMz"))! & 6 2 2 9c'1IFF%/)DD ++  ,1133   Vh&&,-44"%$*JJv$6$6$=#66  % )$$$m6 %6 %6 %6 %6 %6 %6 %6 %6 %6 %6 %6 %6 %6 %6 %n <<< 91t LLL;;;w< Msx*A""B 8 BB B  F F1 F,&F1,F1:N. d(|j|d d)||fS)*aoRestore ``~/.hermes/skills/`` from a snapshot. Strategy: 1. Resolve the target snapshot (explicit id or newest regular). 2. Take a safety snapshot of the CURRENT skills tree under ``.curator_backups/pre-rollback-/`` so the rollback itself is undoable. 3. Move all current top-level entries (except ``.curator_backups`` and ``.hub``) into a tempdir. 4. Extract the chosen snapshot into ``~/.hermes/skills/``. 5. On failure during 4, move the tempdir contents back (best-effort) and return failure. Returns ``(ok, message, snapshot_path)``. NFzno matching backup foundz for id ''zB (use `hermes curator rollback --list` to see available snapshots)rz snapshot u$ has no skills.tar.gz — corrupted?Trzpre-rollback to )r"z%pre-rollback safety snapshot failed: rzfailed to create staging dir: rz failed to stage current skills: zr:gz/z..z!refusing to extract unsafe path: data)filterz*snapshot extract failed (state restored): zrestored from snapshot rrrrucron links: error — rrz job(s) had skill links restoredz+ backed-up job(s) no longer exist (skipped)z already matchedz cron links: z, z3Curator rollback: restored from %s (cron_report=%s)z; )!rr(r}rrrrrRrLr*r2rrrmoverArrrr getmembersrrpartsr extractallr5rr1r3joinr+r9)rrrurrr;stagedmovedrrorigrmemberr} cron_report summary_bits restored_n skipped_nrs rrollbackrs4 Y ' 'F ~  '+4<'9''''" >R S    &G >>  \T6;TTTVZ[[ ]]F LLL---nnG MM$M... J?&+??@@@@@ JJJBqBBDIIIIIIIJ7GII77 7FC TE 2222 CCC;;;TBBBBBBBC&(EE&..**++ ( (Ez///EJ&D KE CII . . . LL% ' ' ' '  (  E E E  JD$  CIIs4yy1111      M& 5 5 5 5 5    D =!==tDDDDDDD EO \'6 * * +b--//  {??3''44::3C+C+C!*DDDD,D + c&kk& 9999 + + + c&kk***** + + + + + + + + + + + + + + + + W% & O O O  JD$  CIIs4yy1111      M& 5 5 5 5 5    D GAGGNNNNNNN O  fD11111      ,F33K;fk;;6sizez>8u─r?(rwrv )rrr3r1r r[r)rowslinesrs rsummarize_backupsrsH >>D +** F F FH F F FH F F F6 F F F GE LLU1X&'''    uuT# & @ @hs##*sCRC0 8 @ @uu]A&& - @ @3quu_a8899:: ? @ @    99U  r)rr)rrrr)N)r?r@rrA)rr)rrW)rr[)rdrrr[) rrr"rArmrrnr[rorprrq)r)r"rArr)r]r[rr)rrrr)rr)rrrr)rrrr)rrrr)rbr[rrA)rrA)2__doc__ __future__rr-loggingosrerrtempfiletimerrpathlibrtypingrrr r r hermes_constantsr getLogger__name__r+r_rcompilerrrrr6r>rLrVrZrcrlrrrrrrrrr rrrrr$s##J#"""""   ''''''''33333333333333,,,,,,  8 $ $ )&1 F G G====((((4444 &++++\%%%%% . . . . 5555 ;?2FFFFFR""""R:1111,KKKK^J3J3J3J3J3b      r