6jSUdZddlZddlZddlZddlmZddlmZmZm Z  ddlm Z n #e $rdZ YnwxYwddddZ ej Zdaej ZdZd efd Zd ed ed efd ZddZd efdZd efdZeZeed<eZeed<dZdZdZdZ d dZ!d!de"d dfdZ#d ed efdZ$dZ%dZ&dS)"aJ Hermes Web UI -- Self-update checker. Checks if the webui and hermes-agent git repos are behind their upstream branches. Results are cached server-side (30-min TTL) so git fetch runs at most twice per hour regardless of client count. Skips repos that are not git checkouts (e.g. Docker baked images where .git does not exist). N)Path) REPO_ROOTSTREAMS STREAMS_LOCK) _AGENT_DIR)webuiagent checked_atFireturnclt5ttcdddS#1swxYwYdS)aoReturn the current in-memory chat stream count. Self-update schedules an in-process re-exec after git pull/reset. That is restart-equivalent for live streams, even when systemd does not see a unit restart. Refuse update/force-update while a stream exists so a browser update click cannot recreate the pending-message loss class fixed in #1543. N)rlenr!/root/hermes-webui/api/updates.py_active_stream_countrsw 7||s )--targetactive_streamsc:|dkrdnd}dd|d|d|d|d |d S) NsFzCannot update z while z active chat streamzD is running. Wait for the response to finish, then retry the update.T)okmessagerrestart_blockedrr)rrplurals r_restart_blocked_responser+sh"a''SSRF RV R RN R Rv R R R(   r c( tjdg|zt|dd|}|j}|j}|jdkr|dfS|p |p d|jdfS#tj$r`}t|ddpt|d dpd }|pd d |d |ddfcYd}~Sd}~wt$rYdSt$r}d|dfcYd}~Sd}~wwxYw)zRun a git command and return (useful output, ok). On failure, returns stderr (or stdout as fallback) so callers can surface actionable git error messages instead of empty strings. gitT)cwdcapture_outputtexttimeoutrzgit exited with status FstderrNstdoutrzgit  z timed out after r)zgit executable not foundFzgit failed to start: ) subprocessrunstrr%stripr$ returncodeTimeoutExpiredgetattrjoinFileNotFoundErrorOSError)argsr r#rr%r$excdetails r_run_gitr59sy 4 N GdNCw   !!!! <1  4< KK#KQ\#K#KURR  $SSS#x..T'#x2N2NTRT[[]]KKKKKKKURRRRRRR 111000 444,s,,e33333334s=A*A=-A==D AC'!D' D7 DD D Dc:tgdtd\}}|r|r|Stdz dz }|rW ddl}|d|d }|r|d Sn#t$rYnwxYwd S) uDetect the running WebUI version from git or a baked-in fallback file. Resolution order: 1. ``git describe --tags --always --dirty`` — works in any git checkout. Returns the exact tag on tagged commits (e.g. ``v0.50.124``), a post-tag descriptor between releases (e.g. ``v0.50.124-1-ge91325d``), or a bare SHA when no tags exist (shallow clones, fresh forks). 2. ``api/_version.py`` — a fallback written by the Docker / CI release workflow when ``.git`` is not present in the image. Expected to define ``__version__ = 'vX.Y.Z'``. 3. ``'unknown'`` — last resort; displayed as-is in the settings badge. describez--tagsz--alwaysz--dirtyr#apiz _version.pyrNz"__version__\s*=\s*['"]([^'"]+)['"]utf-8encodingrunknown)r5rexistsresearch read_textgroup Exception)outr version_file_rems r_detect_webui_versionrJRsDDDiYZ[[[GC c u$}4L       9&&&88A "wwqzz! "    D  9sAB BBc~tdSttdz } |r,|d}|r|Sn#t $rYnwxYwttsdSt gdtd\}}|r|r|SdS) z7Detect the running Hermes Agent version for UI display.Nz not detectedVERSIONr<r=r7r9r:)rrr@rCr*rEr5)rGr"rFrs r_detect_agent_versionrMxs~ ##i/L     ))7);;AACCD          " " $ $~DDDjZ[\\\GC c >s?A## A0/A0 WEBUI_VERSION AGENT_VERSIONcF|s|S|}|dr,|dddddd}|d}|dr |dd}|dS) uOReturn the browser-facing repository URL for update compare links. Git remotes may be HTTPS or SSH and may include a literal ``.git`` suffix. Strip only that literal suffix — never use ``str.rstrip('.git')`` because it treats the argument as a character set and can truncate ``hermes-webui`` to ``hermes-webu``. zgit@:/rzhttps://.gitN)r* startswithreplacerstripendswith) remote_urls r_normalize_remote_urlrZs !!##JV$$T''S!44<rctddg|\}}|r|r|ddSdD]!}tddd|g|\}}|r|cS"d S) z2Detect the remote default branch (master or main).z symbolic-refzrefs/remotes/origin/HEADrR)mastermain rev-parsez--verifyorigin/rc)r5r\)pathrFrr__s r_detect_default_branchris(BCTJJGC "c"yy~~b!!$+z3EV3E3EFMM2  MMM  8rcR||dz sdStgd|d\}}|s|dddStgd |\}}|r|r|}nt|}d |}td d d |g|\}}|r#|rt |nd} tdd|g|\} } | r!| rtdd| g|\} }|r| r| nd} nd} tdd|g|\}}tgd|\}}t |}|| | |||dS)zACheck if a git repo is behind its upstream. Returns dict or None.NrSfetchoriginz--quietr:rz fetch failed)namebehinderrorrez --abbrev-refz @{upstream}rfzrev-listz--countzHEAD..z merge-baseHEADrez--short)r^zget-urlrm)rorp current_sha latest_shar_repo_url)r@r5riisdigitintrZ)rgrorhfetch_okupstreamr compare_refr_rFrpmb_fullmb_okshortcurrentlatestrYs r _check_repors |D6M1133|t9994LLLKAx DNCCC HHH$OOLHb )h) '--(((  I/E /E/EFMMGC 4 4SXXX1F2|V[A4HHNGU k9g>EE r353%%t+y+>EEIFA<< location.reload(), 2500)`` lands after the restart. Coordinates with ``_apply_lock``: when the user updates both webui and agent, the client POSTs them sequentially. Without coordination the restart timer scheduled by the first update's success would fire while the second update's git-pull is still running, killing it mid- stream and leaving the second repo in an unknown partial state. Blocking on ``_apply_lock`` before ``os.execv`` means a pending second update always completes before the restart happens. rNcddl}|jt5 jjgjzn%#t $rdYnwxYwddddS#1swxYwYdS)Nr)rsleep _apply_lockexecv executableargvrE_exit)rrossyss r_doz_schedule_restart.._do;s  5   #.)9CH)DEEEE                       s4A;)A A; A+(A;*A++A;;A?A?T)rdaemon)rr threadingThreadstart)rrrrs` @@r_schedule_restartr$sf(IIIJJJ&C---3355555rct}|rt||StdsdddS |dkrt}n/|dkrt }n!dd|dtS||d z sdd dtStgd |d \}}|sdddtStgd|\}}|r|r|}nt|}d|}tddg|tdd|g|\}}|s"dd|ddtSt5dtd<dddn #1swxYwYtd|d||ddtS#twxYw)uForce-reset the target repo to the latest remote HEAD. Unlike apply_update() which requires a clean working tree and refuses merge conflicts, this discards all local modifications (checkout .) and resets to origin/ — equivalent to what the diverged/conflict error messages ask the user to run manually. Should only be called when apply_update() has already returned a response with ``conflict: True`` or ``diverged: True`` and the user has confirmed they want to discard local changes. FblockingUpdate already in progressrrrr Unknown target: NrSNot a git repositoryrkrnr:z=Could not reach the remote repository. Check your connection.rrrfcheckout.resetz--hardzForce reset to z failedrr Tz force-updated to rrrrestart_scheduled) rrracquirerrreleaser@r5rirrr) rrrgrhryrzrr{r_s rapply_force_updaterQs*++NA(@@@     . .F(DEEE+ W  DD w  DD,Gv,G,GHHJ G <v 5577<,BCCD A===tRPPP 8 Z< 3 L L LdSS "  -( -"KK+D11F,F,,K *c"D)))'8[94@@2 T,Rk,R,R,RSS  , ,*+M, ' , , , , , , , , , , , , , , ,  AAKAA!%     sI#G?G6G-A"G)G0 F; GF  GF GG ct}|rt||StdsdddS t |tS#twxYw)z5Stash, pull --ff-only, pop for the given target repo.Frrr)rrrr_apply_update_innerr)rrs r apply_updaters)++NA(@@@     . .F(DEEE"6** s A**Bch|dkrt}n|dkrt}ndd|dS||dz sdddStgd |\}}|r|r|}nt |}d |}tgd |d \}}|sdddStgd|\}} | sdd|dddSt d|Dr0dd|dt|zdzt|zdzddSd} |rtdg|\}}|sdddSd} t|\} }ddg} | r| | |gn| |t| |d \} }|s| rtddg|| }d|vsd |vr3dd|d!t|zd"zt|zd#z|zdd$Sd%|vsd&|vrdd|d't|zd(z|zdS| r| dd)nd*}dd+|dS| rtddg|\}}|sdd,dd-St5d.td/<dddn #1swxYwYtd|d0|dd1S)2z?Inner implementation of apply_update, called under _apply_lock.rr FrrNrSrrrrfrkrnr:zTCould not reach the remote repository. Check your internet connection and try again.)statusz --porcelainz--untracked-files=nozFailed to inspect repo status: c3.K|]}|dddvVdS)N>AAAUDDDUUAUDUUr).0lines r z&_apply_update_inner..sD 0 0 8A A 0 0 0 0 0 0rz The local zX repo has unresolved merge conflicts. To reset to the latest remote version run: git -C z checkout . && git -C z pull --ff-onlyT)rrconflictstashzFailed to stash local changespullz --ff-onlypopznot possible to fast-forwarddivergedzk repo has commits that are not on the remote branch, so a fast-forward update is not possible. Run: git -C z fetch origin && git -C z reset --hard )rrrzdoes not trackzno tracking informationz@ branch has no upstream tracking branch configured. Run: git -C z branch --set-upstream-to=i,z(no output from git)z Pull failed: z3Updated but stash pop failed -- manual merge needed)rrstash_conflictrr z updated successfullyr)rrr@r5riany splitlinesr)r`extendappendlowerr*rrr)rrgrzrr{r_rhry status_out status_okstashedr^ pull_argspull_outpull_ok pull_lowerr4pop_oks rrrs  7  (C6(C(CDDD |D6M1133|(>???HHH$OOLHb )h) '--((( 9994LLLKAx  @   %9994J  ^(\*UYVYUYJZ(\(\]]]  0 0!,,.. 0 0 000  VII&) II&)::    G'D))2 M,KLL L '{33NFF%I &&&)****%%% D"===Hg B  - gu%t , , ,^^%% )Z 7 7:;S;S####%(YY/2!$D *-==@KK !    z ) )-F*-T-T####%(YY/1MNP[\ ,4>>+;+;W!!$3$''AW(@(@(@AAAgu-t44 6 P"&  ((&' l#(((((((((((((((333!   s: JJJ)r)F)r)'__doc__r'rrpathlibr api.configrrrr ImportErrorrLockrrrrrxrr)rrr5rJrMrN__annotations__rOrZr`rirrfloatrrrrrrrrsn    7777777777%%%%%%%JJJQ?? in in   c     c 3 4    44442#s####Ls:+*,, s,,,**,, s,,,"""&   DDDN####0*6*6U*6T*6*6*6*6Z=s=t====@   BBBBBs (22