+ 2j Rt^RIHt^RIt^RIHtHt^RIHt^RI H t H t ^RI H t ^RIHtHtHt^RIHt^R IHt^R IHt^R IHt^R IHt^R IHt^RIHtH t H!t!H"t"H#t#^RI$H%t%H&t&H't'H(t(^RI)H*t*]'d3^RI+H,t,^RI-H.t.^RI/H0t0^RIH1t1^RI2H3t3^RI4H5t5H6t6^RI)H7t7^RI8H9t9]:];]<]3,];]<];]<]3,3,];]]<,]<3,,3,3,t?]P!]A4tBRtCRRltDRRltERRltFR R!ltGR"R#ltHR$R%ltIR&R'ltJR(R)ltKRjR*R+lltLRjR,R-lltMR.R/ltNR0R1ltOR2R3ltPR4R5ltQR6R7ltRR8R9ltSR:R;ltTR<R=ltUR>R?ltVR@RAltWRBRCltXRDRE/RFRGlltYRHRIltZRJRKlt[RLRMlt\RNROlt]RPRQlt^RRRSlt_RTRUlt`RVRWltaRXRYltbRZR[ltcR\R]ltdR^R_lteR`RaltfRbRcltgRdRelthRfRgltiRhRiltjR#)kaJMetadata fetching, parsing, and dep classification for the provider. Owns the bulk of ``get_dependencies``'s implementation: fetching wheel METADATA / sdist PKG-INFO via the coordinator, parsing it into a :class:`~nab_python.metadata.WheelMetadata`, and classifying each ``Requires-Dist`` entry into base deps vs per-extra deps. ) annotationsN) TYPE_CHECKING TypeGuard)urlsplit) SdistFile WheelFile) RangeOutcome)UnreadableLocalIndexErrorUnsupportedWheelErrorread_wheel_metadata)EMPTY_MEMBERSHIP_SETS) admit_vcs_url) VersionRange) SpecifierSet)canonicalize_name)InvalidVersion)DEPENDENCY_FIELDS WheelMetadataintern_versionmetadata_deps_are_staticparse_metadata)InvalidProjectRequirementErrorparse_project_requirementparse_requirementsrequire_string_list)python_axis_accepts)Sequence)Marker) Requirement)Version) InMemoryIndex)DistFileProvider)TagSet) ResolveTargetz=offline mode skipped a metadata fetch with no cached metadatac ,V^8dQhRRRRRRRRR R /#) providerr"versionslist[tuple[Version, DistFile]]packagestrversionrreturnztuple[str, bool])formats"q/home/user/billing-ledger-validation/.venv/lib/python3.14/site-packages/nab_python/_provider/metadata_resolver.py __annotate__r1BsALLL,LL L  Lc ^RIHpVPV4wrV\V4pVPP p\ WVPVP4p \V \4'd"V P;'g V Pp MRp VPWgV 4wrV eW3#V fRV RV R2p V!V 4h\W Wg4wrpVf5\V 4'd$\!WWyPV P"4wrVeW3#\%W4pVe\'WVV4wrVeW3#\)VVVVVV VR7h)a^Get metadata text and whether it came from an sdist. Returns ``(metadata_text, from_sdist)``. ``from_sdist`` is ``True`` when the text was extracted from a source-distribution ``PKG-INFO`` rather than a wheel ``METADATA``: needed because only sdist values are subject to the :pep:`643` Dynamic guarantees and may need a ``pyproject.toml`` fallback.  MetadataErrorNzVersion z of z not found in listing)sdist metadata_urlunreadable_wheel)r'r5split_and_normalizer+ coordinatorindexpick_dist_for_metadata wheel_tagstarget isinstancerr7urlget_metadata_with_origin_read_direct_wheel_metadata_is_bare_remote_wheel_read_range_metadatahashes find_sdistfetch_sdist_metadata_ladder_failure)r'r(r*r,r5_ normalizedver_strr;distr7text from_sdistmsg metadata_textr8r6s&&&& r0resolve_metadatarQBss)33G<Aq'lG  & &E "8.. D $ ""((44DHH  55j<XD !! | gY.CDC  2M 3/M/!6t! WIRy6( ;C  r2c(V^8dQhRRRRRRRR/#) r&r;r rJr+r,rr-boolr.)r/s"r0r1r1s, &)4; r2cVPV4;'gRF9p\V\4'gK\VP4V8XdR#K; R# \ dKMi;i)zWhether the index served an sdist for ``version``. The ladder only sees the post-filter listing, where an sdist the filter dropped and one that was never published both read as absent. TFr.) get_listingr?rrr,r)r;rJr,rLs&&& r0r[r[sk!!*-333$ **  dll+w67 4    sA A*)A*c ,V^8dQhRRRRRRRRRR /#) r&r;r rJr+r*r,rr-Noner.)r/s"r0r1r1s; Q Q  Q&) Q47 QBI Q  Qr2cVPV4'd\PRV\4\P RW#\4R#)aReport a release skipped for want of cached metadata. The resolver drops the version and can still succeed on an older one, so the drop has to be visible. A cold cache drops as many releases as the listing holds, hence one warning per package and an info line per release. zSkipping releases of %s: %szSkipping %s==%s: %sN)claim_offline_metadata_warningloggerwarningrYinfo)r;rJr*r,s&&&&r0rZrZs9 ++J774g?UV KK%w9OPr2c ,V^8dQhRRRRRRRRRR /#) r&r'r"rLDistFile | Noner*r+r,r-z9tuple[str | None, bool, UnreadableLocalIndexError | None]r.)r/s"r0r1r1s4   - 8; FI > r2cVPPp\V\4'dwVP;pegVPP W#WQP 4pVP4VPW#V4pVeVhVPW#V4wrWR3#\V\4'd(VPe\VP4RR3#R# \dRu#\dp RRT 3uRp ? #Rp ? ii;i)a Rungs 2 and 3: a PEP 658 sidecar read, then a local wheel read. Returns ``(metadata_text, from_sdist, unreadable)``; ``from_sdist`` is always ``False`` since both sources are wheel METADATA. A recorded sidecar integrity error is re-raised and fails the resolve; a contradictory local ``.dist-info`` reads back as ``None`` and the ladder steps on. A wheel that cannot be opened comes back as ``unreadable`` rather than raising, so the version's own sdist still gets a turn; the caller raises it when no later rung answers. NF)NFN)r:r;r?rr7request_metadata metadata_hashwaitget_metadata_errorrA local_pathr r r ) r'rLr*r,r;r@eventintegrity_errorrMrNexcs &&&& r0rBrBs  & &E$ ""t/@/@(@'M$$55 c#5#5   227SI  &! ! 99'CP%%$ ""t'B $&t7D D  % %$ $( $# # $s*C"" D 1D :D ;D?D D c V^8dQhRRRR/#)r&rLrjr-zTypeGuard[WheelFile]r.)r/s"r0r1r1s   4H r2c\V\4;'dOVPRJ;'d9VPRJ;'d#\ VP 4P R9#)zWhether ``dist`` is a sidecar-less remote wheel eligible for rung 4. A bare wheel has no PEP 658 sidecar (``metadata_url`` is ``None``) and no local path, and is served over ``http``/``https`` so its bytes can be read with ranged requests. N)httphttps)r?rr7rprr@scheme)rLs&r0rCrCse 4# ; ;    % ; ; OOt # ; ; TXX  % %): : r2c 0V^8dQhRRRRRRRRRRR R /#) r&r'r"r*r+r, wheel_url wheel_hashesztuple[tuple[str, str], ...]r-tuple[str | None, bool]r.)r/s"r0r1r1sLGGG GG G . G  Gr2cVPPWW44pVP4VPPpVP WV4pVeVh\ WW#4VP WV4#)aRun rung 4 for one bare wheel and return ``(metadata_text, from_sdist)``. Blocks on the coordinator's range read, re-raises a recorded metadata error (a malformed-UTF-8 blob, an unserveable wheel URL, a full-body wheel failing its published hash) so the resolve fails, and otherwise records the outcome counter and reads the wheel's slot. ``wheel_hashes`` are the wheel's published digests, verified against a full-body read. ``from_sdist`` is ``False``: recovered wheel METADATA is authoritative. )r:request_range_metadatarnr;ro_record_range_outcomerA)r'r*r,rzr{rqr;rrs&&&&& r0rDrDsv  7 7) E JJL  & &E..wKO"(W@  ) )'I FFr2c ,V^8dQhRRRRRRRRRR/#) r&r'r"r*r+r,rzr-rcr.)r/s"r0r1r10s4999!$9/29?B9 9r2cVPPPWV4pVfR#V\PJd&VP ;P ^, unR#V\PJd&VP ;P^, unR#V\PJd&VP ;P^, un R#VP ;P^, un R#)aBump the :class:`ProviderStats` counter for a range read's outcome. The mechanical outcome is discovered in nab-index and recorded on the index; the provider owns tier accounting. A read that recorded no outcome (a refused or offline-missed request) leaves every counter untouched. N) r:r;get_range_outcomerPARTIALstatswheel_metadata_range_fetched FULL_BODYwheel_metadata_range_full_body UNSUPPORTED wheel_metadata_range_unsupportedwheel_metadata_range_missing)r'r*r,rzoutcomes&&&& r0rr0s""((::7YWG,&&&33q83 L** *55:5 L,, ,771<733q83r2c ,V^8dQhRRRRRRRRR R /#) r&r("Sequence[tuple[Version, DistFile]]r,rtags TagSet | Noner>ResolveTarget | Noner-rjr.)r/s"r0r1r1Fs:==0= = = ! =  =r2ctVUUu.uFwrEWA8XgK VNK pppV'd \WbV4#R#uuppi)zLPick the dist whose metadata answers for ``version``. See :func:`pick_dist`.N) pick_dist)r(r,rr>vddistss&&&& r0r<r<Fs9$ 4841q|QQ8E 4-29U& )<< 5s 44c(V^8dQhRRRRRRRR/#) r&rzSequence[DistFile]rrr>rr-r!r.)r/s"r0r1r1Qs6(O(O (O (O !(O (Or2cX\V4^8Xd V^,#VUu.uFp\V\4'gKVNK ppV'g V^,#Vf\W$4pRpMVP \ VRR74pT;'g\ RV4V^,4#uupi)atPick the dist of one version whose metadata answers for the target. ``dists`` are the artifacts of a single version, and must be non-empty. Sibling wheels of one version can declare different dependencies, so the wheel the ``tags`` rank most specific wins: :pep:`425` is what an installer picks by, so that wheel's METADATA is the one the pin has to satisfy. ``tags`` is ``None`` when there is no tag axis to rank by, either because nothing said which machine the resolve is for or because a marker overlay moved the target off its tags. ``target`` still names the Python, so wheels built for another interpreter drop out (:func:`_python_axis_narrowed`): reading a release's dependencies out of a wheel the target could never install is the unsoundness :func:`check_sibling_metadata_divergence` guards against, one layer earlier. Among the wheels that remain the cheapest metadata source wins: a wheel with a :pep:`658` ``metadata_url``, then any wheel. Only a version publishing no wheel is read from its sdist, which lets :attr:`~nab_python.provider.DistPolicy.SDIST_INSTALL` keep wheels in the listing purely as a metadata source. Nc$VP'*#N has_metadata)ws&r0pick_dist..xs q~~;Mr2)keyc3L"TFqP'gKVxK R#5irr).0rs& r0 pick_dist..ysBA>>aas$ $)lenr?r_python_axis_narrowedpicksortednext)rrr>rwheels installeds&&& r0rrQs6 5zQQx ;A*Q ":aaF ; Qx |&v6 IIfV1MNO  N NBBF1INN0 G!'*Ig,K  & &E  . .y FF  &x'LI ++IIN//H229=I,,,"8g> ++IEJ  NN++q0+ )2gY  % % + + ,- __ Q   $$r2c ,V^8dQhRRRRRRRRR R /#) r&r'r"r*r+r,rrrr-WheelMetadata | Noner.)r/s"r0r1r1s:111 11 1  1r2c H^RIHp^RIHpVPPP V\ V44pVe V!V4MRpVfR#\VPR.4R4pVPR/4p \V \4'gRp \V 4h\\V44p \W4p VP;P ^, unV!VP"VP$VP&V V VP(VP*R7#) aBReplace dynamic deps with statically-declared pyproject deps. Returns the augmented metadata, or ``None`` if pyproject.toml is missing, unparseable, or itself marks deps dynamic via ``[project].dynamic``. Raises :class:`InvalidProjectRequirementError` when ``dependencies`` or ``optional-dependencies`` is present but structurally wrong (not an array of strings / not a table), rather than silently dropping the declared dependencies. ``get_dependencies`` catches it and rejects the candidate version. A well-typed entry that is not valid PEP 508 is dropped with a warning. )r)load_static_projectN dependencies[project].dependencieszoptional-dependenciesz/[project].optional-dependencies must be a tablenamer,requires_python requires_distprovides_extrametadata_versionr)rrrr:r;get_sdist_pyprojectr+rgetr?dictrlistparse_pyproject_depsextend_with_extrasrsdist_pyproject_fallbacksrr,rrr) r'r*r,r_WheelMetadatarrMprojectdepsoptionalrOrrs &&&& r0rrs*;.    % % 9 9'3w< PD+/+;!$'G  NB')A D{{2B7H h % %?,S11-d34M' @N NN,,1,  ]]   00#%!22   r2c$V^8dQhRRRRRR/#)r&rlist[Requirement]rrr- list[str]r.)r/s"r0r1r1s"&74Ir2caa.pVP4FCwopRS: 2oVPS4VPVV3Rl\VS444KE V#)aAppend extras-gated requirements and return Provides-Extra names. A per-extra value that is not an array of strings, or a per-extra entry that is not valid PEP 508, raises :class:`InvalidProjectRequirementError`, so the version is rejected rather than resolved with the entry dropped. z&[project].optional-dependencies extra c3@<"TFp\VSSR7xK R#5i))extraN)r)rdep_str extra_namesources& r0r%extend_with_extras..s$ B &gvZ H HBs)itemsappendextendr)rrr extra_depsrrs&& @@r0rrsd!#N"*.."2 J9*Hj) .z6B  #3 r2c V^8dQhRRRR/#)r&rrr-rr.)r/s"r0r1r1 s>>t>(9>r2c\VR4#)a5Parse a ``project.dependencies`` list, raising on a malformed entry. Entries are already validated as strings by :func:`require_string_list`; a string that is not valid PEP 508 raises :class:`InvalidProjectRequirementError`, so the whole version is rejected rather than resolved with the dependency dropped. r)r)rs&r0rr s d$< ==r2c$V^8dQhRRRRRR/#)r&r(r)r,rr-rSr.)r/s"r0r1r1s&, r2c`VF'wr#W!8XgK \V\4'gK%Vu# R#)z.Find an sdist for a specific version, or None.N)r?r)r(r,rrs&& r0rFrFs+  >w PPr2c(V^8dQhRRRRRRRR/# r&r'r"reqrprovided_extrasset[str]r-zset[str] | Noner.)r/s"r0r1r17s0""" "" "r2cVPpVf \4#\V4p\WV4'd \4#R\ WV49dR#\ WWB4pT;'gR#)zClassify a requirement by which extras it belongs to. Returns None if the marker doesn't match the environment. Returns an empty set if the requirement is a base dep (no extra gating). Returns a set of normalized extra names if extra-gated. Nr)markersetidmarker_matches_base marker_textmarker_matched_extras)r'rrr marker_idmatched_extrass&&& r0classify_requirementr7sbZZF ~u 6 I8Y77u k(I>>*8YXN  ! !T!r2c(V^8dQhRRRRRRRR/#) r&r'r"rrrintr-r_r.)r/s"r0r1r1Ns(  ( F s t r2cVPPV4pVfMVPPV4VP /VP C\ C4pW0PV&V#)a Evaluate ``marker`` against the env without ``extra`` set, cached. Every dependency marker the resolve reads passes through here, so this is where it is recorded for the lock's ``environments`` declaration. Recording on the cache miss keeps each distinct marker once. )marker_base_cacherconsulted_markersaddevaluate environmentr )r'rrresults&&& r0rrNsf ' ' + +I 6F ~""&&v.!RH$8$8!R@@ 00;  ! !CG%  + >%L__S)F%+z " 6 KK #& Nr2rNFc ,V^8dQhRRRRRRRRR R /#) r&r'r"rrrPr+rNr_r-rcr.)r/s"r0r1r1}s:7<7<7<"7<7<  7<  7X(;r2c$V^8dQhRRRRRR/#)r&rrrrr-r_r.)r/s"r0r1r1s)WW"W.;W Wr2chVwr#\VP4V8H;'dVPV8H#)zCWhether ``metadata`` claims the release the artifact was served as.)rrr,)rrr*r,s&& r0_declares_served_releaser$s3!G X]] +w 6 V V8;K;Kw;VVr2c$V^8dQhRRRRRR/#)r&rrrrr-rcr.)r/s"r0r1r1s$$$"$.;$ $r2c ^RIHp\W4'dR#Vwr4V RV RVP RVP RV RV 2 pV!V4h)aReject an index candidate whose METADATA declares a different release. Nothing binds a :pep:`658` sidecar or an artifact's own METADATA fields to the project and version it was served under. Checked ahead of the sdist reconciliation so a contradicting sdist is never built. )ForeignMetadataErrorN z metadata declares rWz, not )r'r'r$rr,)rrr'r*r,rOs&& r0rrsg0 44 G )1WI MM?"X--.fWIRy J s ##r2c(V^8dQhRRRRRRRR/# r&r'r"rrrrr-rcr.)r/s"r0r1r1s,!'!'!'#6!'BO!' !'r2c $^RIHpVPpVfR#VwrVVPWV4pVe \ V4M VP pVeVP V4'dR#V RV RV RVP RVP 2 p V!V 4h)aReject an index candidate whose METADATA Requires-Python excludes the target. The listing gate (:func:`nab_python._provider.listing.excluded_by_python`) reads the optional Simple-API ``requires-python`` hint, so a version whose listing omits it reaches here unfiltered. The wheel's own METADATA (or the sdist's PKG-INFO) carries the authoritative field; a per-package override still replaces it, matching the listing gate. Raised before the deps are cached so no partial state survives the rejection. )IncompatiblePythonErrorNr(z requires Python z but the z resolve targets Python ) r'r,r>effective_requires_pythonrradmits_requires_pythonlabelpython_full_version) r'rrr,r>r*r, override_rpspecrOs &&& r0rrs3 __F ~ G44WFK  " [!  % %  |v44T:: )1WI.tf5 LL>1&2L2L1M O "# &&r2c(V^8dQhRRRRRRRR/#rr.)r/s"r0r1r1s0,,,",, ,r2c Vwr4VPW44wrVpVf VfVfV#Ve \V4M VPpVe \V4M\VP4p Ve \V4p MVe.p M\VP 4p \ VPVPVV V VPVPR7#)anApply the per-package metadata override, or return ``metadata`` as is. A fresh record rather than a mutation: the raw parse is shared across tuples via ``store_parsed_metadata``, so mutating would leak one tuple's override into another. A replaced dep list strips extra-gated lines, so an unset provides-extra declares none rather than keep now-incoherent extras. r) effective_metadata_overriderrrrrrrr,rr) r'rrr*r, override_depsr1 override_perrrs &&& r0effective_metadatar8s!G.6.R.R/+M !49L  " [!  % %  $ ] ((( ) k*  "h556  ]]  '#%!22   r2c(V^8dQhRRRRRRRR/#r*r.)r/s"r0r1r1)s6+B+B+B"+B+B +Br2cd\WV4pV^,pW PV&VPUu0uFp\V4kK pp/pVUu/uFqD/bK pp/pVPFp \ W V4p V fKV P ea\WV 4'd\W V P 4M5V F/p VPV .4PWP 34K1 K\WWg4K W`PV&WpPV&WPV&R#uupiuupi)aPopulate ``deps_cache`` + ``extra_deps_map`` from a parsed metadata. Shared by the wheel/sdist path (which calls :func:`parse_and_cache_metadata` after parsing METADATA text), the local-source path (which already has a :class:`WheelMetadata` from :func:`nab_python.build_backend.extract_static_metadata`), and the skip-fetch branch of :meth:`nab_python.provider.Provider.get_dependencies` (which hands in a bare :class:`WheelMetadata` for a complete ``dependencies`` override). N)r8metadata_cacherrrrr@_url_dep_is_activerefuse_url_dep setdefaultradd_classified_dep deps_cacheextra_deps_mapdeferred_url_extras) r'rrr*er base_depsrArBr req_extrasrs &&& r0r r )s6"(x@HlG)1I&?G?V?V W?V!!21!5?VO W)+I&:&!2:EG%%)(I    77 !(Z@@xcgg6",J'22:rBIIgg#- 3IF&&/ ")7I&.A  +-!X:s D( D-c(V^8dQhRRRRRRRR/#) r&r'r"r*r+rErr-r_r.)r/s"r0r1r1Ws/ Q Q QC QX QRV Qr2caaV'gR#\;QJd VV3RlV4F 'gK R# R#!VV3RlV44#)zWhether a direct-URL dep must be refused at base-metadata time. A base dep (no extra gating) is always active. An extra-gated dep is active only when the user requested one of its extras at the root; otherwise its refusal defers to the per-extra path. Tc3F<"TFpSV3SP9xK R#5ir) root_extras)rrr*r's& r0r%_url_dep_is_active..`s!PZE8#7#77Zs!F)any)r'r*rEsff&r0r<r<Ws4  3PZP33P3P3PZP PPr2c(V^8dQhRRRRRRRR/#) r&r'r"rrr@r+r-rcr.)r/s"r0r1r1cs(##X#K#c#d#r2cf\W P4RVP RV 2p\V4h)zBRefuse a direct-URL requirement, or raise ``NotImplementedError``.zHVCS dependency admitted by policy but resolver path is not implemented: z @ )r vcs_configrNotImplementedError)r'rr@rOs&&& r0r=r=cs;#**+  #cU , c ""r2c(V^8dQhRRRRRRRR/#rr.)r/s"r0r1r1ms0  r2cVPpVf \4#VP/VPC\C4'd \4#R\ V49dR#\ VP4p\4pVF1pWdR&VPV4'gK VPV4K3 T;'gR#)aClassify like :func:`classify_requirement`, recording nothing. These markers come from wheels :func:`target_dep_signature` parses but never keeps in ``metadata_cache``. The id-keyed marker caches would be unsound here: a collected marker's ``id`` can alias a later live marker. ``consulted_markers`` would leak a never-installed sibling's clauses into the lock's ``environments``. So each marker is evaluated directly. Nr) rrr r r r+rrr )r'rrrrrrs&&& r0_classify_requirement_uncachedrRmsZZF ~u  H(..H2GHIIu c&k! x&& 'CG% !G ??3   KK #& ??dr2c(V^8dQhRRRRRRRR/#) r&r'r"rrrrr-TargetDepSignaturer.)r/s"r0r1r1s0.4.4.4".4.4 .4r2c\WV4pVPUu0uFp\V4kK pp/pVUu/uFq3/bK pp/pVPFp\ WV4p V fKVP eu\VP 4\VP4VP 3p T ;'gR0F,p VPV \44PV 4K. K\WWV4K WVV3#uupiuupi)a Project ``metadata`` to a target-effective dependency signature. Returns ``(base_deps, extra_deps_map, url_buckets)``, compared with ``!=`` to tell two wheels of one version apart by the dependencies they impose on this target rather than by raw text. Each requirement is classified the way the resolver classifies deps, so a marker both wheels evaluate the same folds away, and ranges go through :func:`add_classified_dep`, so ordering, whitespace, and specifier spelling normalize equal. It records nothing into the marker caches or ``consulted_markers``: see :func:`_classify_requirement_uncached`. ``cache_key`` is the release the wheel was served as, not whatever the wheel declares for itself. The per-package override is applied first, so a ``provides-extra`` override is compared in the same view the resolver pins from. A complete ``dependencies`` override takes the skip-fetch path in :meth:`nab_python.provider.Provider.get_dependencies` and never reaches here. ``Requires-Python`` is left out: it gates admission, not the dependency edges a lock records. Unlike :func:`cache_deps_from_metadata` this never raises: a direct-URL dep is bucketed instead of routed through :func:`refuse_url_dep`, since the pick already refused its own URL deps, so a sibling's URL dep is a divergence to report. N) r8rrrrRr@r frozensetextrasr>rr r?) r'rrrCrrDrA url_bucketsrrEentryrs &&& r0target_dep_signaturerZs:"(x@H?G?V?V W?V!!21!5?VO W)+I&:&!2:KMK%%3H?S    77 &sxx0)CJJ2GQE!++dV+&&sCE266u=, 3IF& { 33!!X:s C= Dc ,V^8dQhRRRRRRRRR R /#) r&r'r"r(rr*r+r,rr-rcr.)r/s"r0r1r1sAF2F2F20F2F2 F2  F2r2c ^RIHpVPp\WWPP4p\ V\ 4'gR#VPV4wrx\V4p VPPp \WW4p V fR#VU U u.uF'wrW8XgK \ V \ 4'gK%V NK) pp p Vf\VPV4p\V4^8:dR#VfRMVPVP4pW3pRpVFpVVJg\!W_VP4'gK'\#W WV4pVfK:Vf\%VV\'V 44p\%VVV4pVV8XdKj\)VV4pV RV RVP RVP RRP+V4 R2 pV!V4h R#uup p i) aiCrash when a resident tie sibling's target deps diverge from the pick's. nab reads one version's dependencies from the wheel the target's tags rank most preferred and treats it as authoritative. Two wheels the target's own rules cannot rank against each other (a tie) can still declare different target-effective dependencies, so pinning from one silently disagrees with an install of the other. Only siblings already resident in the shared index are compared; this never fetches. On the first tie sibling whose projection differs from the pick's, a :class:`~nab_python.provider.SiblingMetadataDivergenceError` is raised. It is deliberately not a :class:`~nab_python.provider.MetadataError`, which :meth:`~nab_python.provider.Provider._look_ahead_ok` would turn into a dropped candidate: dropping would silently remove a version an installer can legitimately install. )SiblingMetadataDivergenceErrorNr(z has tie-ranked wheels z and z6 that declare different dependencies for this target (z, zY). Pin the dependencies with a per-package dependencies override to resolve this version.)r'r]r=r<r>r?rr9r+r:r;_resident_wheel_textrr wheel_rankfilename _wheels_tie_tie_sibling_metadatarZr_divergent_dep_labelsjoin)r'r(r*r,r]rrrIrJrKr; pick_textrrrpick_keysig_keypick_sigsiblingsibling_metadata sibling_siglabelsrOs&&&& r0!check_sibling_metadata_divergencerms.:   D !(T?? KD dI & &33G<Aq'lG  & &E$UFI$ RHDA aAy9QaaHF R |&x? 6{a|t)GH#G*.H d?+dg>N>N"O"O 0 Z'   #   +'>)#<H+8W>NO ( " &x=iq !8H  !" &)*+J K -S11-Ss GG4Gc 0V^8dQhRRRRRRRRR R R R /#) r&r'r"r;r r*r+r,rrirr-rr.)r/s"r0r1r1sD''' '' '  '  'r2cV\W\V4V4pVfR#\V4p\ Y#3T4'gR#TP pTP Y#4pTe \T4M TPp TeT eTPT 4'gR#T# \dR#i;i)a7Parse a resident tie sibling's own METADATA, or None to skip it. Skipped when the text is not resident, does not parse, declares a different release, or its effective Requires-Python excludes the target. Tags rank by :pep:`425` and say nothing about the Python floor, so a tie sibling can still declare a Requires-Python an installer would reject for this target, and a sibling declaring another release is no candidate for this one at all; comparing either would false-crash a version an installer resolves fine. A per-package override wins over the parsed floor. N) r^r+r ValueErrorr$r>r-rrr.) r'r;r*r,rirMrr>r1r2s &&&&& r0rbrbs" G g FD |!$' $W$6 A A __F44WFK  " [!  % %   --d33 O# s B B('B(c ,V^8dQhRRRRRRRRRR /#) r&r;r r*r+r,wheelrr-rTr.)r/s"r0r1r1.s4(( (#&(14(=F((r2c\V4'dVPpMVPeVPpMR#VPWV4wrVV'dR#T#)a&Return a wheel's own resident METADATA text, or None if not in hand. Reads only the slot the wheel's text would occupy: a bare remote wheel's own URL (rung 4), else its sidecar URL. A local wheel keeps no text in the index and reads back None. Sdist-origin text never stands in for a wheel. N)rCr@r7rA)r;r*r,rrr@rMrNs&&&& r0r^r^.sTU##ii    '  55gLD4'4'r2c(V^8dQhRRRRRRRR/#) r&rrrfz"tuple[int, tuple[int, str]] | Nonesibling_filenamer+r-r_r.)r/s"r0r1r1As0?? ?0?? ?r2cPVfR#VPV4pVRJ;'dW18H#)aWhether a sibling wheel ties the pick under the target's install rules. With no tag axis nothing ranks the wheels that :func:`_python_axis_narrowed` left standing, so each of them is a real ambiguity. Otherwise a sibling ties only when its :meth:`~nab_python.tags.TagSet.wheel_rank` key equals the pick's and is not None; a sibling the pick ranks strictly below is never installed and is exempt. NT)r_)rrfru sibling_keys&&& r0raraAs1 |//"23K d " > >{'>>r2c$V^8dQhRRRRRR/#)r&r>rrzlist[WheelFile]r-r.)r/s"r0r1r1Ts$ *9r2cVfV#VUu.uF8p\VPVPVP4'gK6VNK: ppT;'gT#uupi)aKeep the wheels the target's Python axis admits, all of them if none. A marker overlay cannot rebuild the platform tags, but the target still names a Python: whichever ``python_version`` and ``implementation_name`` the overlay leaves in force. A wheel built for another interpreter is a choice no installer on that Python makes, so it neither answers for the version's dependencies nor ties the wheel that does. The ``Requires-Python`` guard in :func:`_tie_sibling_metadata` cannot do this work: a release publishing one wheel per interpreter declares one ``Requires-Python`` spanning them all, so it admits every sibling. Admitting nothing decides nothing, so every wheel stands: the pick keeps its listing-order fallback, and the tie set keeps the pick's siblings rather than disarming the divergence check over a pick this target cannot install either. Without a target nothing has said which Python the resolve is for, so again every wheel stands. )rpython_versionimplementationr`)r>rrradmitteds&& r0rrTsf(~ E   ! !6#8#8%..      vs 3AAc$V^8dQhRRRRRR/#)r&rhrTrkr-rr.)r/s"r0r1r1ts$    /A  r2caa\V4o\V4o\VV3RlSP4SP4,44#)z;Return sorted labels for the signature entries that differ.c3v<"TF.pSPV4SPV48wgK*VxK0 R#5ir)r)rr/ pick_flat sibling_flats& r0r(_divergent_dep_labels..zs6;E == <#3#3E#: : ;s'9 9)_flatten_signaturerkeys)rhrkrrs&&@@r0rcrctsH#8,I%k2L ^^% (9(9(;; r2c V^8dQhRRRR/#)r& signaturerTr-zdict[str, object]r.)r/s"r0r1r1s  "4 9J r2cVwrp/pVP4F wrVWdRV 2&K VP4F wrxWRV 2&K VP4F wrWRV 2&K V#)zFlatten a target-dep signature to labelled values for a diff. Base deps, per-extra dep maps, and URL buckets each become one entry. zbase:zextra:zurl:)r) rrDrArXflatrrngrrrentriess & r0rrs .7*I{ D__& "uTF^'%++- !%veW .#))+ $tC5\, Kr2c ,V^8dQhRRRRRRRRR R /#) r&rrrErrDzdict[str, VersionRange]rAz"dict[str, dict[str, VersionRange]]r-rcr.)r/s"r0r1r1sA!W!W !W!W'!W7 !W  !Wr2c^RIHp\VP4pVP'dVPP 4M\ P!RR7pVPpV'gbVPV\ P!44V,W%&\V4F"p\ P!RR7W$!WX4&K$ R#VFjp W9,p V PV\ P!44V,W&\V4F"p\ P!RR7W!WX4&K$ Kl R#)zAdd a classified requirement to the appropriate dep set. A name appearing on several ``Requires-Dist`` lines is intersected into one range. ) join_extraF)admit_arbitraryN) r'rrr specifierto_rangerfullrWrr) rrErDrArrvi dep_extrasreredepss &&&& r0r?r?s& SXX &D ===    u 5 ::J #--l.?.?.ABRG $B.:.?.?PU.VIj* +%%J".E))D,*;*;*=>CEKZ(.:.?.?PU.Vj*+)%r2r)k__doc__ __future__rloggingtypingrr urllib.parsernab_index.clientrrnab_index.lazy_wheelrnab_index.local_indexr r r _conflict_kindr _vcs_admissionr _vendor.packaging.rangesr_vendor.packaging.specifiersr_vendor.packaging.utilsr_vendor.packaging.versionrrrrrrrrequirements_filerrrrrrcollections.abcr_vendor.packaging.markersr_vendor.packaging.requirementsrrfetchr r'r!r"r#r>r$tuplerr+rrVrT getLogger__name__rfrYrQrHr[rZrBrCrDrr<rrrrrrrFrGrrrrr!r$rrr8r r<r=rRrZrmrbr^rarrcrr?r.r2r0rs#+!1- 3*3776 '(2<3%-&l d3 $% %&tSsIcNC789 9:<   8 $XL^-`& Q F G89,=(OV 2 4%n1h$>Q0". .7<  7