fix: guard fcntl.flock(LOCK_UN) against OSError in finally blocks

agent/shell_hooks.py

@@ -624,7 +624,10 @@ def _locked_update_approvals() -> Iterator[Dict[str, Any]]:
             yield data
             save_allowlist(data)
         finally:
-            fcntl.flock(lock_fh.fileno(), fcntl.LOCK_UN)
+            try:
+                fcntl.flock(lock_fh.fileno(), fcntl.LOCK_UN)
+            except OSError:
+                pass
 
 
 def _prompt_and_record(

hermes_cli/auth.py

@@ -914,7 +914,10 @@ def _file_lock(
         finally:
             holder.depth = 0
             if fcntl:
-                fcntl.flock(lock_file.fileno(), fcntl.LOCK_UN)
+                try:
+                    fcntl.flock(lock_file.fileno(), fcntl.LOCK_UN)
+                except OSError:
+                    pass
             elif msvcrt:
                 try:
                     lock_file.seek(0)

tools/environments/file_sync.py

@@ -289,7 +289,10 @@ def _sync_back_locked(self, lock_path: Path) -> None:
             fcntl.flock(lock_fd, fcntl.LOCK_EX)
             self._sync_back_impl()
         finally:
-            fcntl.flock(lock_fd, fcntl.LOCK_UN)
+            try:
+                fcntl.flock(lock_fd, fcntl.LOCK_UN)
+            except OSError:
+                pass
             lock_fd.close()
 
     def _sync_back_impl(self) -> None:

tools/memory_tool.py

@@ -169,7 +169,10 @@ def _file_lock(path: Path):
             yield
         finally:
             if fcntl:
-                fcntl.flock(fd, fcntl.LOCK_UN)
+                try:
+                    fcntl.flock(fd, fcntl.LOCK_UN)
+                except OSError:
+                    pass
             elif msvcrt:
                 try:
                     fd.seek(0)

tools/skill_usage.py

@@ -86,7 +86,10 @@ def _usage_file_lock():
         yield
     finally:
         if fcntl:
-            fcntl.flock(fd, fcntl.LOCK_UN)
+            try:
+                fcntl.flock(fd, fcntl.LOCK_UN)
+            except OSError:
+                pass
         elif msvcrt:
             try:
                 fd.seek(0)