Teknium
0aecadc17c
Phase 2 core slice of #91277: the updater now knows WHAT it is operating on before it mutates anything. - hermes_cli/update_inventory.py (new): side-effect-free runtime inventory — install kind via detect_install_method (git / docker / nix / apt, updatable-in-place or not, with the correct external update command for image/package-managed installs), all profiles, every live gateway with its supervisor (systemd / launchd / manual via the fleet-wide _get_service_pids), running code_sha/code_version from the #91283 gateway_state.json stamps, and the restart mechanism each runtime will get. - hermes update --plan: prints the plan and exits; runs BEFORE the docker/nix refusal gates so image-managed installs get a useful 'not updatable in place + right command' report instead of a bare refusal. Read-only, safe on a live fleet. - Every real update run now records the pre-update plan in its receipt ('plan' key) and prints a one-line fleet summary, so post-mortems can compare what the update SAW against what it did. - Docs: updating.md (--plan section + receipts/fleet-check section), cli-commands.md (flag row + receipts behavior bullet). - 11 tests: two-profile fleet classification, docker not-in-place, dead-PID exclusion, PID-file fallback dedupe, all-probes-fail never-raises, JSON round-trip for the receipt, print output shapes, receipt integration.
100 lines
4.0 KiB
Python
100 lines
4.0 KiB
Python
"""``hermes update`` subcommand parser.
|
|
|
|
Extracted verbatim from ``hermes_cli/main.py:main()`` (god-file Phase 2).
|
|
Handler injected to avoid importing ``main``.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import Callable
|
|
|
|
|
|
def build_update_parser(subparsers, *, cmd_update: Callable) -> None:
|
|
"""Attach the ``update`` subcommand to ``subparsers``."""
|
|
# =========================================================================
|
|
# update command
|
|
# =========================================================================
|
|
update_parser = subparsers.add_parser(
|
|
"update",
|
|
help="Update Hermes Agent to the latest version",
|
|
description="Pull the latest changes from git and reinstall dependencies",
|
|
)
|
|
update_parser.add_argument(
|
|
"--gateway",
|
|
action="store_true",
|
|
default=False,
|
|
help="Gateway mode: use file-based IPC for prompts instead of stdin (used internally by /update)",
|
|
)
|
|
update_parser.add_argument(
|
|
"--check",
|
|
action="store_true",
|
|
default=False,
|
|
help="Check whether an update is available without installing anything",
|
|
)
|
|
update_parser.add_argument(
|
|
"--plan",
|
|
action="store_true",
|
|
default=False,
|
|
help=(
|
|
"Show the update plan and exit without changing anything: install "
|
|
"kind (git/docker/nix), every running Hermes service across all "
|
|
"profiles with its supervisor and running code version, and how "
|
|
"each will be restarted. Read-only; safe on a live fleet."
|
|
),
|
|
)
|
|
update_parser.add_argument(
|
|
"--no-backup",
|
|
action="store_true",
|
|
default=False,
|
|
help="Skip ALL pre-update backups for this run (both the quick state snapshot and the full zip; overrides updates.pre_update_backup)",
|
|
)
|
|
update_parser.add_argument(
|
|
"--backup",
|
|
action="store_true",
|
|
default=False,
|
|
help="Force a FULL pre-update backup (quick state snapshot + HERMES_HOME zip) for this run, regardless of updates.pre_update_backup",
|
|
)
|
|
update_parser.add_argument(
|
|
"--yes",
|
|
"-y",
|
|
action="store_true",
|
|
default=False,
|
|
help="Assume yes for interactive prompts (config migration, stash restore). API-key entry is skipped; run 'hermes config migrate' separately for those.",
|
|
)
|
|
update_parser.add_argument(
|
|
"--keep-stash",
|
|
action="store_true",
|
|
default=False,
|
|
help=(
|
|
"Do NOT re-apply local changes after the update. Uncommitted "
|
|
"changes are still stashed so the update can proceed, but they "
|
|
"stay parked in git stash instead of being restored onto the "
|
|
"updated code. Used by the desktop updater so local source edits "
|
|
"never silently ride along across updates."
|
|
),
|
|
)
|
|
update_parser.add_argument(
|
|
"--branch",
|
|
default=None,
|
|
metavar="NAME",
|
|
help=(
|
|
"Update against this branch instead of the default (main). "
|
|
"If the local checkout is on a different branch, hermes will "
|
|
"switch to the requested branch first (auto-stashing any "
|
|
"uncommitted changes)."
|
|
),
|
|
)
|
|
update_parser.add_argument(
|
|
"--force",
|
|
action="store_true",
|
|
default=False,
|
|
help="Windows: proceed with the update even when another hermes.exe is detected. The concurrent process will likely cause WinError 32 warnings. Does NOT bypass the venv-process guard (see --force-venv).",
|
|
)
|
|
update_parser.add_argument(
|
|
"--force-venv",
|
|
action="store_true",
|
|
default=False,
|
|
help="Windows: mutate the venv even while other processes are running from its interpreter (desktop backend, gateway, terminals). Those processes keep native .pyd files locked, so the dependency sync will likely fail partway and strand the install half-updated. Use only if you know the detected holders are false positives.",
|
|
)
|
|
update_parser.set_defaults(func=cmd_update)
|