߲j 0dZddlmZddlZddlZddlZddlZddlmZm Z m Z m Z m Z ddl mZmZmZmZmZmZmZmZej.dZdZded d d ed d d ej4ddedd ZddZ ddZGddZy)zCompression lineage, cooldown/streak counters, locks and turn leases for SessionDB. Mixin bound onto ``SessionDB`` via the MRO, built on its ``_read_ctx`` / ``_execute_write`` / ``_write_sql`` / ``_read_one`` primitives.) annotationsN)AnyDictListOptionalTuple)_BOUNDARY_END_REASONS_COMPRESSION_LOCK_ROW_SQL_ENDED_ROW_SQL_ended_by_compression_RESET_CHILD_SQL_sql_json_extract_sql_session_last_activeis_automatic_end_reason hermes_statez_SELECT compression_failure_cooldown_until, compression_failure_error FROM sessions WHERE id = ?a SELECT child.id FROM sessions parent JOIN sessions child ON child.parent_session_id = parent.id WHERE parent.id = ? AND parent.end_reason = 'compression' AND zchild.model_configz$._branched_fromz# IS NULL AND z$._delegate_fromz( IS NULL AND NOT (child)aaI) AND COALESCE(child.source, '') != 'tool' ORDER BY CASE WHEN child.end_reason = 'compression' THEN 0 WHEN child.ended_at IS NULL THEN 1 ELSE 2 END, z DESC, child.started_at DESC, child.id DESC LIMIT 1 c.||t||dSd|dS)N)session_existscooldown_untilerrorfloat)existsrrs =/home/ubuntu/.hermes/hermes-agent/hermes_state_compression.py _cooldown_rowr4s3$7E7QeN3fk mmW[fk mmchd}|jd|d|d|fj} | 2|| d| dr#|jd|d|d|| df| d}|jd |d |d ||||f|jd |d|d|fj} | duxr| d|k(|fS) zSingle-transaction lease claim: DELETE a stale holder's row (``stale(holder, expires_at)``), INSERT OR IGNORE ours, then SELECT to confirm ownership (INSERT OR IGNORE gives no rowcount signal). Returns ``(acquired, reclaimed_holder)``.NzSELECT holder, expires_at FROM z WHERE z = ?holder expires_atz DELETE FROM z = ? AND holder = ?zINSERT OR IGNORE INTO z (z6, holder, acquired_at, expires_at) VALUES (?, ?, ?, ?)zSELECT holder FROM )executefetchone) conntablekey_colkeyrnowr stalereclaimed_holderrowowners r_claim_lease_rowr,9s  ,,8wwitTWZV\ ] f f hC 5XL0AB |E7'':MNQTVYZbVcPdex=LL r'2hi fc:&( LL.ugWWITJSF S \ \ ^E   :xF!:dZd?dZd@dZd?dZdAdZdBdZdCdZdDdEdZdDdEdZdFdZdGdZdGdZd dd  dHd!Zd d"d#dd$dd%d& dId'Zd d(dEd)ZdFd*ZdJd+Z dKd,Z!dLd-Z"dJd.Z#dMd/Z$dLd0Z%y)NSessionCompressionMixinzECompression lineage, cooldown/streak counters, locks and turn leases.N patience_scvsyfd}j||}|tjd|||S)aTClear an explicit-close stamp (``tui_close``, ``cli_close``, ``webhook_complete``, ...) from a session a HOST has just proven is still routed to it, returning the reason cleared or None (#106459). Narrow twin of ``reopen_session()``: automatic stamps are left to publish (#88197); ``compression``, boundary (reset reasons, CLI ``new_session``) and stamps with a published continuation own lineage elsewhere and are never touched. The UPDATE is conditional on the exact stamp read, so a close landing between read and write survives. Only the routing host can make this call. Publication cannot: ``end_session()`` is first-stamp-wins, so a close made during a turn that began on a stale stamp is a no-op write. Turn-lease admission cannot: the TUI starts its worker before it reaches ``run_conversation()``, so ``session.close`` can stamp ``tui_close`` in between and a late lease would clear a deliberate close. Call it under the lock that makes the host's registry claim atomic with its teardown (#54878 on the routing table).Ncn|jtfj}||dy|d}t|s |dk(s|tvry|jdj j dzdzfdzj}|y|jd |d|ft|S) Nended_at end_reason compressionz2SELECT 1 FROM sessions WHERE parent_session_id = ?aliasz LIMIT 1zgUPDATE sessions SET ended_at = NULL, end_reason = NULL WHERE id = ? AND ended_at = ? AND end_reason = ?)r!r r"rr "_NON_CONTINUATION_CHILD_FILTER_SQLformatstr)r#r*reason supersededself session_ids r_doz@SessionCompressionMixin.reopen_if_explicitly_closed.._do_s,,~ }=FFHC{c*o5&F&v.&M2IVWlMlD99@@r@JKMWX !#$,8: % LLCS_f5 7v; rr/zSession %s carried a stale %r end stamp while %s; cleared so the conversation can compress and a later close is recorded (#106459))_execute_writeloggerwarning)r?r@ provenancer0rAr=s`` rreopen_if_explicitly_closedz3SessionCompressionMixin.reopen_if_explicitly_closedMsP $$$SZ$@   NNCDNPVXb d rc|sy|j5}t|jt|fj s dddy|jd|j j dzdz|fdzj}dddtdk(r|j|dSdS#1swY-xYw) zThe unique live direct child of a compression-ended session, else None. A stale agent whose parent was rotated elsewhere may recover only when the lineage names exactly one live continuation; more than one fails closed.Nad SELECT s.*, COALESCE(sp.prompt, s.system_prompt) AS _system_prompt_resolved FROM sessions s LEFT JOIN system_prompts sp ON sp.hash = s.system_prompt_hash WHERE s.parent_session_id = ? AND s.ended_at IS NULL zs.r7zS ORDER BY s.started_at ASC LIMIT 2 r9r) _read_ctxr r!r r"r:r;fetchalllen_session_row_dict)r?parent_session_idr#rowss rfind_live_compression_childz3SessionCompressionMixin.find_live_compression_childxs! ^^  (nGXFZ)[)d)d)fg  <<99@@t@L M #$q( hj!  (36d)q.t%%d1g.JdJ)  s0B= AB==CcLsyfd}tj|S)zReopen a compression parent only when no continuation was published (older builds could leave a closed parent after an interrupted handoff). Conservative: an active lease or any canonical child means another path owns the lineage.Fc&t|jtfjsy|jdjj dzdzfdzj}|yt j }|jtfj}|>|d}|t||k\ry|jd|d |f}|jd k7ry|jd f}|jd k(S) NFzt SELECT 1 FROM sessions WHERE parent_session_id = ? r6r7z) LIMIT 1 r9r zTDELETE FROM compression_locks WHERE session_id = ? AND holder = ? AND expires_at = ?rrHz{UPDATE sessions SET ended_at = NULL, end_reason = NULL WHERE id = ? AND ended_at IS NOT NULL AND end_reason = 'compression') r r!r r"r:r;time _LOCK_ROW_SQLrrowcount) r#rr'lock_rowr deletedupdatedr?r@s rrAzHSessionCompressionMixin.reopen_orphaned_compression_session.._dos0(nzm)T)])])_`LL 99@@r@J K   ! hj  ))+C||MJ=AJJLH#%l3 %z):c)A ,,j(!3Z@B##q( llW  G ##q( (r)boolrB)r?r@rAs`` r#reopen_orphaned_compression_sessionz;SessionCompressionMixin.reopen_orphaned_compression_sessions)0 )bD'',--rc8|j||} |jd||||rtj|nd| || xs|d|d|d| xs|dxs|j |d|d|d |d |d |d |d t j fy)aINSERT the compression child's ``sessions`` row copied from *parent*. Same contract as _insert_session_row's compression-fork backfill: the child stays on the parent's profile and keeps gateway routing/origin columns; no owner on either side -> this store's profile.aINSERT INTO sessions ( id, source, model, model_config, system_prompt, system_prompt_hash, parent_session_id, cwd, git_branch, git_repo_root, profile_name, user_id, session_key, chat_id, chat_type, thread_id, display_name, origin_json, started_at ) VALUES (?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)Ncwd git_branch git_repo_root profile_nameuser_id session_keychat_id chat_type thread_id display_name origin_json)_store_system_promptr!jsondumps_own_profile_namerR) r?r#parentrMchild_session_idsourcemodel model_config system_promptr[r^system_prompt_hashs r_publish_child_session_rowz2SessionCompressionMixin._publish_child_session_rows "66t]K  Y!&%\L1I_c"$5s7KfUmVT`Ma'R~ 6R$:P:P:Ry!6-#8&:KVT_M`{#VN%;VM=RTXT]T]T_  a rTFr@) rmrnror[r^compression_lock_holderrequire_compression_leaserequire_lease_refreshlease_ttl_seconds watermarkwatermark_ceilingc~ ddlm   fd}j|y)u$Atomically close a parent and publish its durable compression child: closure, child row, and handoff commit in one transaction, so readers see the live parent or a complete child, never an ended parent with a missing/empty child. *watermark* (parent's ``get_active_message_watermark`` at compression start): parent rows with ``id > watermark`` — appends landed during the slow summary — are column-cloned into the child AFTER the handoff. *watermark_ceiling* bounds the clone: the rotation path flushes its OWN transcript to the parent just before publishing and those rows are already in the handoff, so only ``(watermark, watermark_ceiling]`` is foreign tail (``None`` = unbounded). *require_lease_refresh* + *compression_lock_holder* refreshes the lease on the same ``conn`` before the expiry check (no TOCTOU window), so a refresher that died on transient DB errors gets one last chance. See #75316. ``None`` = unbounded (no internal flush happened). See #47202. r)CompressionSessionBusyErrorc r, r*|jdtj z f|jtfj}r:|- r+|d k7s#t |dtjkr  d|jdfj}|t d|d/t |dst d |jd fs t d j||   j| \}}fdu}j|d |rdnddtg|r tgng\}}|r'j|| |t|z }||z }|jd|| f|jdtjf}|jdk7rt dy)NOUPDATE compression_locks SET expires_at = ? WHERE session_id = ? AND holder = ?rr z+Compression lease lost before publication: zSELECT ended_at, end_reason, cwd, git_branch, git_repo_root, user_id, session_key, chat_id, chat_type, thread_id, display_name, origin_json, profile_name FROM sessions WHERE id = ?zCompression parent not found: r3r4z"Compression parent already ended: zCUPDATE sessions SET ended_at = NULL, end_reason = NULL WHERE id = ?z+Compression child handoff must not be empty)rMrkrlrmrnror[r^zRSELECT id, tool_calls FROM messages WHERE session_id = ? AND active = 1 AND id > ?z AND id <= ?r6z ORDER BY id)r@zGUPDATE sessions SET message_count = ?, tool_call_count = ? WHERE id = ?z^UPDATE sessions SET ended_at = ?, end_reason = 'compression' WHERE id = ? AND ended_at IS NULLrHz/Compression parent changed during publication: )r!rRrSr"r RuntimeErrorrrq_insert_message_rows_tail_rows_after_watermarkint_clone_message_rowsrKrT)r#rUrjtotal_messagestotal_tool_callsboundedtail_idstail_tool_callsrWrzrkrsr[rvmessagesrmrnrMr^rtrur?rlrorwrxs rrAz>SessionCompressionMixin.publish_compression_child.._dos$)@ eYY[#446GI`ac||M4E3GHQQSH( (?H%)@@,/0DIIK?1ABSATUWW\\1#$  hj ~"%CDUCV#WXXj!- /vl/CD&)KL]K^'_`` Y&(*"#PQQ  + +f0ATdUUbl , 404/H/HO_ai/j ,N,$,47,0,K,KE)0~b9G'IgV]3?P;Q:Rceg -i)/ ,,T8HX,Y"c(m3N$7$ LLY!13CD Fll46:iikCT5UWG1$"%TUfTg#hii%rN)hermes_state_errorsrzrB)r?rMrkrlrrmrnror[r^rsrtrurvrwrxrArzs```````````````` @rpublish_compression_childz1SessionCompressionMixin.publish_compression_childs.( D; j; j; jx C rc |j||y#tj$r"}tj d|||Yd}~yd}~wwxYw)z=``_write_sql`` that logs (never raises) on ``sqlite3.Error``.z%s(%s) failed: %sN) _write_sqlsqlite3ErrorrCrD)r?opr@sqlparamsexcs r_write_sql_loggedz)SessionCompressionMixin._write_sql_logged7sB E OOC (}} E NN.J D D EsA AA c :|sy|jd|d||||fy)zPersist the active compression-failure cooldown. Merge-max with any longer live deadline so a later shorter write can't reopen the thrash window; error always takes the latest diagnostic.N#record_compression_failure_cooldownzUPDATE sessions SET compression_failure_cooldown_until = CASE WHEN compression_failure_cooldown_until IS NOT NULL AND compression_failure_cooldown_until > ? THEN compression_failure_cooldown_until ELSE ? END, compression_failure_error = ? WHERE id = ?r)r?r@rrs rrz;SessionCompressionMixin.record_compression_failure_cooldown>s2   1: m^UJ ? Arctj}|r|jt|fnd}||dt|d|kryt|dt|d|z |ddS)zDReturn the active (unexpired) compression-failure cooldown, or None.NrrH)rremaining_secondsr)rR _read_one_COOLDOWN_ROW_SQLr)r?r@r'r*s r get_compression_failure_cooldownz8SessionCompressionMixin.get_compression_failure_cooldownMsoiikBLdnn. >RV ;#a&.E#a&MS,@"'A-eCPQFmVYFYdghidjkkrc||r|jt|fnd}| tdddStd|d|dS)zExact stored cooldown columns, no expiry filtering, so compression cancellation can roll back an expired, partially-null, or absent row exactly.NFTrrH)rrrr?r@r*s r$get_compression_failure_cooldown_rowzRV36;}UD$/gMRVX[\]X^`cde`fDggrc|jdds-|jjddr tdy|jd|jdfd}|j|stj dy|j}t d }||k7r:|jddstj d ytd |d |y) uRestore and verify an exact cooldown-row snapshot. Unlike record/clear this rollback API propagates write and verification failures: cancellation must not be reported mutation-free when compensation failed. The tolerated exception is a session row that vanished mid-attempt — before or after the compensating write — since its cooldown died with it and there is nothing left to restore (#106271).rFzBcannot restore absent compression cooldown row: session now existsNrrcL|jdf}|jdk(S)NzfUPDATE sessions SET compression_failure_cooldown_until = ?, compression_failure_error = ? WHERE id = ?rH)r!rT)r#cursordeadlinerr@s rrAzMSessionCompressionMixin.restore_compression_failure_cooldown_row.._dogs3\\=?GPZ>[]F??a' 'rz1compression cooldown rollback session missing: %sTz?compression cooldown rollback session missing after restore: %szH] Lrc|r|jd|d|fnd} ||St|||dxs|S#ttf$r|cYSwxYw)zRead one numeric ``sessions`` column clamped at ``zero``; a missing session, NULL, or unparsable value also reads as ``zero``.zSELECT z FROM sessions WHERE id = ?Nr)rmax TypeError ValueError)r?columnr@castzeror*s r_read_session_numberz,SessionCompressionMixin._read_session_numbersh_idnnwvh.IJZMZnr ;4 KCd3q6>T6J,K K:& K s::A Ac4|jd|d||fy)NzUPDATE sessions SET z = ? WHERE id = ?)r)r?rr@values r_write_session_columnz-SessionCompressionMixin._write_session_columns! .vh6GH5R\J]^rc2|jd|tdS)z3Return the persisted deterministic-fallback streak.compression_fallback_streakrrrrs rget_compression_fallback_streakz7SessionCompressionMixin.get_compression_fallback_streaks(()F TWYZ[[rc V|r'|jd|tdt|yy)z:Persist the deterministic-fallback streak for one session.rrNrrr)r?r@streaks rset_compression_fallback_streakz7SessionCompressionMixin.set_compression_fallback_streaks-   & &'DjRUVWY\]cYdRe f rc2|jd|tdS)uPersisted ineffective-compaction strike count — the durable half of the built-in compressor's anti-thrash guard, so a fresh compressor bound to a resumed session inherits an armed/tripped guard across restarts.compression_ineffective_countrrrs r!get_compression_ineffective_countz9SessionCompressionMixin.get_compression_ineffective_counts(()H*VY[\]]rc V|r'|jd|tdt|yy)z@Persist the ineffective-compaction strike count for one session.rrNr)r?r@counts r!set_compression_ineffective_countz9SessionCompressionMixin.set_compression_ineffective_counts-   & &'F TWXY[^_d[eTf g rc2|jd|tdS)aPersisted anti-thrash recovery deadline (epoch; ``0.0`` = not armed). Durable because the gateway rebuilds the compressor every turn / cache eviction. The deadline is the durable half of the 14694 recovery clock: the gateway rebuilds the compressor on every turn / cache eviction, so a process-local deadline restarted the wait on each rebuild and a tripped session never earned its probe (#100185). compression_recovery_deadline)rrrs r!get_compression_recovery_deadlinez9SessionCompressionMixin.get_compression_recovery_deadlines(()H*V[]`aarc|sy tdt|xsd}|j d||xsdy#ttf$rd}Y+wxYw)zGPersist the anti-thrash recovery deadline; ``0`` / ``None`` disarms it.Nrr)rrrrr)r?r@r normalizeds r!set_compression_recovery_deadlinez9SessionCompressionMixin.set_compression_recovery_deadlinesY  S%C"89J ""#BJPZPb^bc:& J s6A  A c|r|sytj|z} |jd|||fdkDS#tj$r!}tj d||Yd}~yd}~wwxYw)uExtend the compression lock lease if ``holder`` still owns it. Ownership is decided by ``holder`` alone, deliberately NOT ``expires_at``: a live owner whose refresher stalled past its TTL must be able to revive its still-unclaimed row, otherwise it keeps compressing with no lease — the window in which a competing path can fork the lineage. It cannot resurrect a lock someone else took: SQLite serialises writes, so the reclaim (DELETE-expired + INSERT OR IGNORE) never interleaves with this UPDATE.Fr|rz'refresh_compression_lock(%s) failed: %sN)rR_write_rowcountrrrCrD)r?r@r ttl_secondsr rs rrefresh_compression_lockz0SessionCompressionMixin.refresh_compression_lockstYY[;.  ''aZ02456 6}}  NNDjRU V s6A* A%%A*cB ddlmsytj |z   fd} |j|\}}|rtj d|t |S#tj$r!}tj d|Yd}~yd}~wwxYw)a%Try to atomically acquire the compression lock for ``session_id``. ``False``: another holder owns a live lock and the caller MUST NOT compress (its rotation would split the lineage). Expired locks and structured holders whose local ``pid=`` is dead are reclaimed transparently.r(_compression_lock_holder_process_is_deadFc 0t|ddfdS)Ncompression_locksr@c"|kxs|SNherr's rzSSessionCompressionMixin.try_acquire_compression_lock.._do..sQWS(PQR(Sr)r,)r#rr rr'r@s rrAzASessionCompressionMixin.try_acquire_compression_lock.._dos&#)<VSR\SU Urz;Reclaimed stale compression lock for session=%s (holder=%s)z+try_acquire_compression_lock(%s) failed: %sN) rrrRrBrCrDrXrr) r?r@rrrAacquiredr)rrr r's `` @@@rtry_acquire_compression_lockz4SessionCompressionMixin.try_acquire_compression_locks Jiik;&  U U )-)<) !}}  NNH*VY Z s7A**B=BBc6|sy|jd|d||fy)zKRelease the compression lock iff we own it; idempotent when gone/reclaimed.Nrelease_compression_lockzADELETE FROM compression_locks WHERE session_id = ? AND holder = ?r)r?r@rs rrz0SessionCompressionMixin.release_compression_locks&   & O   "rc6|s|Sdfd }||}|h}|r`|jd}|r||vs|j|drn5||}|r|jddk7rn|j||}|r`|rt|jdxs|S|S) a9Walk compression parents on ``conn`` to the conversation lease key. Must share the connection of the lease INSERT/UPDATE/DELETE: a failed lookup must not yield a child id the write then persists. Markers bind to ``parent_session_id``. Lock errors propagate so ``_execute_write`` can retry.cdjd|fj}|r t|SdS)NzYSELECT id, parent_session_id, source, model_config, end_reason FROM sessions WHERE id = ?)r!r"dict)sidr*r#s r_rowzESessionCompressionMixin._session_turn_lease_key_on_conn.._rows6,,k   !$49 - -rrMT include_resetr4r5id)rr<)r_is_explicit_fork_child_rowaddr<)r?r#r@rcurrentseen parent_idrjs ` r_session_turn_lease_key_on_connz7SessionCompressionMixin._session_turn_lease_key_on_conns   . z"| $78I T 1T5U5UV]mq5U5r)_FVZZ 5F HHY G8?s7;;t$2 3NJNrcz|s|S|j5}|j||cdddS#1swYyxYw)zStable serialization key for every compression segment (tests/diagnostics; the write paths resolve it inside their own txn). Does not swallow lock errors.N)rIr)r?r@r#s r_session_turn_lease_keyz/SessionCompressionMixin._session_turn_lease_keysB  ^^  J77jI J J Js1:rr0cddlmrsytjtdt |zfd}t j ||S)zAtomically acquire the cross-process turn lease for a conversation (keyed by the lineage root). The walk, the INSERT, and reclaim of expired or dead-local-PID leases share one write transaction.rrF皙?c Zj|}t|dd|fddS)Nsession_turn_leasesconversation_idc4t|kxs|Srrrs rrzUSessionCompressionMixin.try_acquire_session_turn_lease.._do..sU1X_[0XYZ0[rr)rr,)r#rrr rr'r?r@s rrAzCSessionCompressionMixin.try_acquire_session_turn_lease.._dosC"BB4TO#+->QWY\^h[ rr/)rrrRrrrXrB) r?r@rrr0rArr r's ``` @@@rtry_acquire_session_turn_leasez6SessionCompressionMixin.try_acquire_session_turn_lease sY Jiik3sE+$677    D'' 'CDDrg @g?g.@g?)r wait_secondspoll_interval_secondson_waitwait_notice_interval_seconds should_abortacquire_patience_sc ddlm} tjt dt |z} d} d} t dt |} | |ry |j|||| ry tj}| |z }|dkry| |} |'| |dk(s|| z |k\r |t d|| z |} tjtt d t ||#t $rtjddYwxYw#tj$r}| |d k7rYd}~d}~wwxYw#t $rtjd dYwxYw) aWait for a cross-process turn lease without holding a SQLite lock. ``on_wait(elapsed)`` is best-effort: called when the first attempt fails and about every ``wait_notice_interval_seconds`` after. ``should_abort()`` True (e.g. ``/stop``) returns False at once.r)classify_persistence_errorrNTFz/session turn lease should_abort callback failed)exc_inforlockedz*session turn lease on_wait callback failedg{Gz?)rrrR monotonicrr ExceptionrCdebugrrrsleepmin)r?r@rrrrrrrrrr wait_startedlast_notice_at notice_everyrr' remainings racquire_session_turn_leasez2SessionCompressionMixin.acquire_session_turn_leases <>>#c#u\/B&CC 3&B CD 'c#~$& 66KL^7``.."C 3IA~#" "&,#*=#BV[gAg^CS<%789"% JJs3tU+@%ABIN O= !cLL!R]aLbc == .c2h>?  !^LL!MX\L]^s<C.D$E. DDD=' D88D= E#"E#)rcrsytjtdt|zfd}tj |S)z8Extend a turn lease only while ``holder`` still owns it.Frclj|}|jd|fjdkDS)NzVUPDATE session_turn_leases SET expires_at = ? WHERE conversation_id = ? AND holder = ?r)rr!rT)r#rr rr?r@s rrAz?SessionCompressionMixin.refresh_session_turn_lease.._doPsD"BB4TO<<;=GZ`#??   D'',--rcDrsyfd}j|y)z>Release a turn lease iff ``holder`` still owns it; idempotent.NcRj|}|jd|fy)NzHDELETE FROM session_turn_leases WHERE conversation_id = ? AND holder = ?)rr!)r#rrr?r@s rrAz?SessionCompressionMixin.release_session_turn_lease.._do\s,"BB4TO LLZ &) +r)rB)r?r@rrAs``` rrelease_session_turn_leasez2SessionCompressionMixin.release_session_turn_leaseXs   + C rcf|sy|jd|tjf}|dS|dS)zJCurrent (non-expired) holder for ``session_id``, or None. Diagnostic only.NzMSELECT holder FROM compression_locks WHERE session_id = ? AND expires_at >= ?r)rrRrs rget_compression_lock_holderz3SessionCompressionMixin.get_compression_lock_holdercs?nn [^hjnjsjsju]vx{t.A.rctjdz }|jdtj|fxsdS)zMark orphaned compression continuations (parent ended by compression; child has messages, no end_reason/ended_at, api_call_count=0, older than 7 days) as ``orphaned_compression``. Non-destructive. Fix for #20001. i: a UPDATE sessions SET ended_at = ?, end_reason = 'orphaned_compression' WHERE api_call_count = 0 AND end_reason IS NULL AND ended_at IS NULL AND started_at < ? AND parent_session_id IS NOT NULL AND EXISTS ( SELECT 1 FROM sessions p WHERE p.id = sessions.parent_session_id AND p.end_reason = 'compression' AND p.ended_at IS NOT NULL ) AND EXISTS ( SELECT 1 FROM messages m WHERE m.session_id = sessions.id ) r)rRr)r?cutoffs r&finalize_orphaned_compression_sessionsz>SessionCompressionMixin.finalize_orphaned_compression_sessionsksFv%##(f%+ ,- rcP|}|r|gng}t|}tdD]w}|j5}|jt|fj }ddd|dnd}|r||vr|cS|j ||}|j|y|S#1swYDxYw)aWalk the compression-continuation chain forward: root-first through the tip (``[session_id]`` when no continuation); ``get_compression_tip`` is the last element. A continuation is a child of a session with ``end_reason='compression'``. The old ``child.started_at >= parent.ended_at`` test was too brittle (gateway + compression races insert the real continuation before ``ended_at`` is written, while a stale websocket later creates a sibling that passes it). Instead exclude branch/delegate/tool children and prefer children that continue the chain or are still live over stale closed siblings such as ``ws_orphan_reap``.dNr)setrangerIr!_CHAIN_STEP_SQLr"rappend) r?r@rchainr_r#r*child_ids rget_compression_chainz-SessionCompressionMixin.get_compression_chains$ "5zs #A! KTll?WJ?HHJ K$'Os4yHx4/ HHX G LL " #  K Ks &BB% c6|j|}|r|dS|S)zxLive tip of a compression chain (``get_compression_chain`` semantics); the input id when no continuation exists.)r)r?r@rs rget_compression_tipz+SessionCompressionMixin.get_compression_tips%**:6!uRy1z1rc|jd}|r|j|dry|j|}t|xr|jddk(S)NrMTrFr4r5)rr get_sessionrX)r?rrrjs r_is_compression_child_rowz1SessionCompressionMixin._is_compression_child_rowsXII12 D<zBSessionCompressionMixin.get_compression_lineage..s)fSD&?@FVD\Y6D MM$t* % ,,T2 :,T |kk,'=8>>dm% 'D fDfhlmJD!1T!9 NN:d+ , HHZ% & Gkk,'=8%/wAj\Ar)r@r<rEr<r0Optional[float]return Optional[str])rMr<r2Optional[Dict[str, Any]])r@r<r2rX)r2None) rMr<rkr<rlr<rzList[Dict[str, Any]]rmr<rnDict[str, Any]ror<r[r<r^r<rsr<rtrXrurXrvrrw Optional[int]rxr7r2r5)rr<r@r<rr<r2r5r)r@r<rrrr3r2r5)r@r<r2r4)r@r<r2r6)r@r<rr6r2r5)r@r<r2r5) rr<r@r<rtyperrr2r)rr<r@r<rrr2r5)r@r<r2r)r@r<rrr2r5)r@r<rrr2r5)r@r<r2r)r@r<rrr2r5)rr)r@r<rr<rrr2rX)r@r<rr<r2r5)r@r<r2r<) r@r<rr<rrr0r1r2rX)r@r<rr<rrrrrrrrrrr2rX)r@r<r2r3)r2r)r@r<r2z List[str])rr6r2rX)&__name__ __module__ __qualname____doc__rFrOrYrqrrrrrrrrrrrrrrrrrrrrrr r rrrrr!r$r0rrrr.r.JsORV)).1)?N) )VK87.r ]a 26:Z^!d'+t&+#'D Q!$'Q!;>Q!HKQ!&Q!/2Q!IWQ!Q!),Q!CFQ!"% Q!IM Q! $ Q! AF Q! ! Q! =J Q! VZ Q!fENR A A/4 A=J AVZ Alh p:L_\g ^ h bd$2"O4JEJimEE'*ErBsC #  33\\\   > *f --ACUVWX,-ACUVWX 7 0 7 7' BCD089:!.m M9M"C BC Br