߲jYdZddlZddlZddlZddlZddlZddlZddlmZddl m Z m Z m Z m Z mZmZmZmZddlmZmZmZddlmZddlmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z&m'Z'm(Z(m)Z*ejVdZ,d e e-e fd ee-fd Z.dId e-d e-fd Z/e0Z1de d e e-e ffdZ2de-d ee-e e-ffdZ3de-d ee-e e-ffdZ4dededZ5dJde e-de-d e-fdZ6dddddddddd de7de-de e-d e-d!e e-de-d"e8d#e7d$e7d ee e-e e ffd%Z9d&e e-d e e-fd'Z:d&e e-d e e-fd(Z;d)Zd,Z?d-Z@eAhd.ZBd/ee-d0e7d1ee-d e-fd2ZCd3ZDd4jd5d6DZFdJd e-d7e-d e-fd8ZGd9ZHd:eHjgd;dd?eDd@zzdAzZIdjdBdCDZJd:eHjdDdEDzdFzeJzZKGdGdHZLy)KzSession lifecycle mixin for SessionDB: row upsert/inheritance, lifecycle flags (end/reopen/archive/pin/hide/read), model_config patching, listing and counting, delete cascades, and the auto-archive sweep.N)Path)AnyCallableDictListOptionalSequenceTupleUnion)ActivityProvenancebound_activity_descriptionnormalize_activity_provenance)report_startup_progress)_LISTABLE_CHILD_SQL_PREVIEW_ELIGIBLE_SQL_PREVIEW_RAW_SELECT_RECOVERABLE_END_REASONS_RECOVERABLE_END_REASONS_SQL_RESET_CHILD_SQL_RESET_END_REASONS_legacy_reset_child_sql_shape_preview_sql_json_extract_sql_session_last_active_sql_session_last_active_by_id escape_like _SQL_IN_CHUNK _id_chunks _placeholders hermes_staterowreturnc|jdxsdjxs'|jdxsdjxsdS)zwWorkspace grouping key: git repo root, else cwd, else None (branch excluded: a checkout must not fragment history). git_repo_rootcwdN)getstrip)r!s :/home/ubuntu/.hermes/hermes-agent/hermes_state_sessions.py workspace_keyr*sB GGO $ * 1 1 3 ]8L"7S7S7U ]Y]]colct|dS)N$._delegate_fromr)r,s r)_delegate_from_jsonr0#s S"4 55r+rawct|tr&|jr tj|}t|tr t|SiS#tj t f$ricYSwxYw)zVTolerant ``model_config`` decode: JSON text or dict -> dict copy; anything else -> {}.) isinstancestrr(jsonloadsJSONDecodeError TypeErrordict)r1s r)_parse_model_configr:,sa#s  **S/C#3-49525$$i0 I sAA21A2 cwd_prefixc\|jdxs|}t|}d||d|dgfS)N/\zA(s.cwd = ? OR s.cwd LIKE ? ESCAPE '\' OR s.cwd LIKE ? ESCAPE '\')z/%z\\%)rstrip _escape_like)r;prefixescs r)_cwd_prefix_clauserB6sF   u % 3F v CM C5uE]+ r+keyc^|jdxs|}t|\}}d|d|g|fS)zWHERE for ``workspace_key(row) == key``: git_repo_root equals ``key``, or (rows predating per-session git metadata) cwd is at/under ``key``.r=z@(s.git_repo_root = ? OR (COALESCE(s.git_repo_root, '') = '' AND )))r>rB)rCr@ cwd_clause cwd_paramss r)_workspace_key_clauserHAsHZZ  %#F/7J J:,VXY * r+z*COALESCE( (SELECT z FROM messages m WHERE m.session_id = s.id AND m.role = 'user' AND m.content IS NOT NULL AND z ORDER BY m.timestamp, m.id LIMIT 1), '' ) AS _preview_rawr%clausesleadc6|r|ddj|SdS)zG``WHERE a AND b`` (with *lead* prefix) or "" when there are no clauses.WHERE  AND r%)join)rIrJs r) _where_sqlrOXs$5= ?rzs.archived = 1s.archived = 0)rr0list_session_ids_placeholdersrBappendextend)rQrRrSrTrUr;rVrWrXwhereparamsinclude_sourcesclausevaluess r)_session_filter_whererj]s%EF %*=>N*O)PPX'YZZ#)vhd7=b.AO 2?CDA FX {{mC 67L"MNa PRaRgegh+5 J 'B8 8IA8M"3!4SUV  "  LL MM& ! " %& &= %& &=r+ parent_idsc t}|Dchc]}|s| }}t|}t|}|rg}t|tdzD]t}t |} |j d|d| d| d|d ||z} | jD]2} | d|vs |j| d|j| d4v|}|r|Dcgc] }||vs| c}Scc}wcc}w)zDelegate-subagent ids (``_delegate_from`` marker, walked recursively) to cascade-delete with *parent_ids*; untagged children stay orphaned, not deleted.SELECT id FROM sessions WHERE z IN (z) OR (parent_session_id IN (z) AND z IS NOT NULL)id) r0setrarrrbexecutefetchalladdrc) connrkdfsidseedsfoundfrontier next_frontierchunkphcursorr!s r)_collect_delegate_child_idsr~s  B& .S#S .E .%jEE{H #% -1*<= 4E*51B\\0E">--/Drd-IJORW-F( 4t9E)IIc$i(!((T3 4 4! ! 5CCu$4C 55/ /. 6sCC C C ct||}t|D]O}t|}|jd|d||jd|d||jd|d|Q|S)N*DELETE FROM messages WHERE session_id IN (r]IUPDATE sessions SET parent_session_id = NULL WHERE parent_session_id IN ("DELETE FROM sessions WHERE id IN ()r~rrbrq)rtrkidsr{r|s r)_delete_delegate_childrenrs %dJ 7CCH &u - A"QGO `ac`ddefhmn 9"Q?G H Jr+)kanbantooloneshotcomplete interruptederrorempty>r agent_errorcontent_filterrolehas_tool_calls finish_reasonc|xsdjjtvrtS|xsdjj}|dvs|dk(r|rtSt S)uError finish → ``error``; assistant with pending tool_calls or a trailing user/tool row → ``interrupted``; otherwise ``complete`` (benign default: pickers must not alarm on unknown shapes).r%>ruser assistant)r(lower_ERROR_FINISH_REASONSSESSION_STATUS_ERRORSESSION_STATUS_INTERRUPTEDSESSION_STATUS_COMPLETE)rrrrs r)classify_session_statusrsc ""$**,0EE## ""$A k!1n)) ""r+zp.session_key IS NULL OR sessions.session_key IS NULL OR substr(p.session_key, 1, instr(substr(p.session_key, 7), ':') + 6) = substr(sessions.session_key, 1, instr(substr(sessions.session_key, 7), ':') + 6), c#4K|]}d|d|d|dyw)z  = COALESCE(sessions.z , excluded.r]Nr_).0r,s r) rs,'SVcU"7uKuAN's) rTchat_id chat_type thread_idparent_session_idr& profile_nametransport_profiler$ origin_json display_nameextrac Lddt|zz}|d|d|d|d|d|d S) zb``col = COALESCE(sessions.col, (SELECT p.col FROM parent))`` (whitespace is part of the SQL text). rrz (SELECT p.z FROM sessions p z) WHERE p.id = sessions.parent_session_idrE)len)r,rpads r)_inherit_col_sqlrsH c#h C %$SESEC5@R %8r Cr+z, z+UPDATE sessions SET c#2K|]}t|ywNrrcs r)rrs N! 1  N)r&r$ git_branchrz/ zAND (r]zD WHERE id = ? AND parent_session_id IS NOT NULLc#BK|]}dtdd|dyw)z% AND COALESCE( model_configz$.z5, '') != parent_session_idNr/)rmarkers r)rrs;# -->~QSTZS[}-],^_88#s)_delegate_from_branched_fromc#2K|]}t|ywrrrs r)rrs(+r)user_idrTrrrrrra6 WHERE id = ? AND parent_session_id IS NOT NULL AND EXISTS ( SELECT 1 FROM sessions p WHERE p.id = sessions.parent_session_id AND p.end_reason = 'compression' )c*8 eZdZUdZdeefdZededdfdZ ddededed e ee fd ed ed eed edededededeededededeeddf$dZ dededefdZ ddedededefdZ ddededdfdZdddded edeed eedeef dZdZd ed!d"d#ed!d$d#ed!d%d&Zded'eddfd(Zd)ed*eded+edef d,Zdeddfd-Zdded+edefd.Z ddeded0eedeed1edeef d2Z ddeded3ed0eedeedef d4Zd5e eefddfd6Z dddd7ded8eed9eed:eeddf d;Zdeddfd<Z dded=edeeddfd>Z!ded eeddfd?Z"ded@ee#eddfdAZ$ddededBeeddfdCZ% ddedDe ee fd)ed*ee&eegefddf dEZ'dFdGdedDe ee fdHefdIZ(dedDe ee fddfdJZ)ddedKedLe de fdMZ*ddddd/dNdedeedBeedOee ee fdPeedQeddfdRZ+dedSeddfdTZ,edUee ee fdefdVZ-dedee ee ffdWZ.dedee ee ffdXZ/dYedeefdZZ0dedefd[Z1defd\Z2d]eded^e defd_Z3ded`edefdaZ4e5Z6dedefdbZ7dedcedefddZ8dedeedefdfZ9ddedgedefdhZ:edie ee fdefdjZ;eeee?dl<edmednedoede@ee#e ffdpZAdqe#e ee fdrede#e ee ffdsZBdtddudddvdwedxe#edyedzed{ede#e ee ff d|ZCeDd}eEjde ee ffd~ZG ddede#edxe#ededwededededededededededreded edede#e ee ff&dZHde#ede eeffdZIddedeedefdZJdedefdZKdede#efdZL ddeMeeNedfdwededede#e ee ff dZO ddede#ededededededxe#edefdZPddedefdZQd/d/d/ddededede eeffdZRdede@eeffdZSedeeTdeddfdZUdede#efdZV ddedeeTdee#edefdZWddedeeTdefdZXdde#edeeTdefdZYdZZdefdZ[ddeeTdefdZ\ ddeededefdZ] ddededede ee ffdZ^y)SessionSessionsMixinzOSession rows: create/inherit, lifecycle flags, model_config, listing, deletion.r"cn ddlm}|j}t|jjj }||k(ry|j |dz k(}|r,t jd|jr |jSy #t$rtjddYy wxYw) uThe profile owning THIS store, from ``db_path`` alone (``/state.db`` → default, ``/profiles//state.db`` → name): a gateway serving a NON-launch profile opens that profile's store. None outside the profile tree — NULL beats a fabricated owner.r)get_default_hermes_rootdefaultprofilesz[a-z0-9][a-z0-9_-]{0,63}zown-profile derivation failedT)exc_infoN) hermes_constantsrresolverdb_pathparentre fullmatchname Exceptionloggerdebug)selfrrootris_profile_dirs r)_own_profile_namez&SessionSessionsMixin._own_profile_name s I @*,446D$,,'//188F~ #]]dZ.??N",,/JFKK"X{{" I LL84L H IsA B?B B43B4 session_idNc`|jt|f|jt|fy)ugNULL-fill a child's cwd/git/profile from its parent (profile_name only within the same ``agent::`` namespace). Gateway routing columns are inherited ONLY by compression forks (a crash before the gateway re-records the peer would strand the child unroutable); delegate and branch children must NOT inherit them (peer recovery could repoint traffic into a subagent's session), including when their parent row itself ended on compression — a long batch outlives its coordinator's rotation, and two live rows holding one routing key is the shape reported in #92859.N)rq_INHERIT_PARENT_META_SQL_INHERIT_PARENT_ROUTING_SQLrtrs r) _inherit_parent_session_metadataz5SessionSessionsMixin._inherit_parent_session_metadatas& - }= 0:-@r+rRmodelr system_promptrrTrrrrr&rr$rrrc  xsdjsj    fd}j|jy)ui Upsert a session row, never overwriting what an earlier writer set (the gateway creates a bare row before create_session carries the real model/prompt) — the one exception is the token-accounting guard's placeholder ``source='unknown'``, which a later writer's real surface replaces (#111999): once minted, that placeholder otherwise labelled a real session anonymous for life, because this upsert is the only writer that could correct it. chat_id/thread_id scope gateway /resume (IDOR). Children backfill from the parent; a missing profile_name is stamped with THIS store's own (NULL reads as unowned). When ``parent_session_id`` is set (compression fork, delegate/subagent spawn, branch continuation) and this row's own ``cwd``/``git_repo_root``/ ``git_branch``/``profile_name`` are still NULL after the insert, they are backfilled from the parent row. Callers of ``create_session`` for a child session historically didn't propagate these fields themselves (e.g. the compression-fork path), so a lineage could silently lose its working directory and drop out of the project sidebar every time it forked (#64709), or lose its owning profile and be aggregated as "default" every time it rotated or branched (the cross-profile session-jump bug). This only fills NULLs — an explicit value on the child is never overwritten. For compression forks specifically (parent ended with ``end_reason='compression'``), the gateway origin columns (``user_id``/``session_key``/``chat_id``/``chat_type``/ ``thread_id``/``display_name``/``origin_json``) are inherited too, so a crash before the gateway re-records the peer can't strand the child without a recoverable routing mapping (#59527). When the caller passes no ``profile_name`` at all, the row is stamped with THIS store's own profile (:meth:`_own_profile_name`) instead of NULL. Every ``state.db`` belongs to exactly one profile — the same single-match contract :meth:`backfill_null_session_profiles` relies on — so the stamp is derivation, not a guess. Rows minted NULL after that one-shot #94724 backfill ran stayed NULL forever, and profile-keyed consumers (desktop sidebar scope matching, ``@session:/`` deep links, the fail-closed owner ladder) treat NULL as unowned: the session vanishes from the sidebar even though its transcript is intact (#99222). Stores outside the profile tree (explicit ``db_path`` in tests, ad-hoc copies) derive nothing and keep NULL — never guess. r%c" j|}|jdtz rtjnd|   t j f| j | r j| yy)NaINSERT INTO sessions ( id, source, user_id, session_key, chat_id, chat_type, thread_id, model, model_config, system_prompt, system_prompt_hash, parent_session_id, cwd, profile_name, transport_profile, git_repo_root, origin_json, display_name, started_at ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(id) DO UPDATE SET source = CASE WHEN sessions.source = 'unknown' THEN COALESCE(excluded.source, 'unknown') ELSE sessions.source END, model = COALESCE(sessions.model, excluded.model), model_config = CASE WHEN excluded.model_config IS NOT NULL AND json_type( sessions.model_config, '$._reset_from' ) IS NOT NULL AND json_remove( sessions.model_config, '$._reset_from' ) = '{}' THEN json_set( excluded.model_config, '$._reset_from', json_extract( sessions.model_config, '$._reset_from' ) ) ELSE COALESCE( sessions.model_config, excluded.model_config ) END, system_prompt_hash = COALESCE( sessions.system_prompt_hash, excluded.system_prompt_hash ), system_prompt = CASE WHEN sessions.system_prompt_hash IS NULL AND excluded.system_prompt_hash IS NOT NULL THEN NULL ELSE sessions.system_prompt END, )_store_system_promptrq_UPSERT_KEEP_EXISTING_SQLr5dumpstime#_delete_unreferenced_system_promptsr)rtsystem_prompt_hashrrr&rr$rrrrrrrrTrRrrrrs r)_doz5SessionSessionsMixin._insert_session_row.._doPs!%!:!:4!O  LL+V W+ ZgyR[]b0 55dJG!r+ patience_sN)r(r_execute_write_TRANSCRIPT_WRITE_PATIENCE_S)rrrRrrrrrTrrrrr&rr$rrrrs`````````````````` r)_insert_session_rowz(SessionSessionsMixin._insert_session_row)sUJ"))+113L9 H9 H9 Hv CD,M,MNr+c .|j||fi||S)z9Create (upsert) a session record. Returns the session_id.r)rrrRkwargss r)create_sessionz#SessionSessionsMixin.create_sessions   V>v>r+c 2|j||fd|i||S)z>Ensure a session row exists (upsert). Accepts optional kwargs.rr)rrrRrrs r)ensure_sessionz#SessionSessionsMixin.ensure_sessions$   VK5KFKr+ finalizedc:|sy|jd|rdnd|fy)zjMirror ``SessionEntry.expiry_finalized`` so it survives a lost sessions.json. See #9006. Nz5UPDATE sessions SET expiry_finalized = ? WHERE id = ?r) _write_sql)rrrs r)set_expiry_finalizedz)SessionSessionsMixin.set_expiry_finalizeds&    C9aZ[]gEh r+)rrplatformc|r|dvryd}|t|g}||dz }|jt||j|dz|Dcgc] }t|}}|sy|r\|Dcgc]/}t|j dxsdt|k(s.|1} }| rt| dd St |d kDr(yt d |DD chc]} | s|  c} d kDryt|dd Scc}wcc}wcc} w) uMost recent live session_id for source + chat_id (+ thread_id). With ``user_id`` exact sender matches win; several distinct users and no match → None (never another participant's session).)Nr%Nz SELECT id, user_id, started_at FROM sessions WHERE LOWER(source) = LOWER(?) AND session_key IS NOT NULL AND chat_id = ? AND ended_at IS NULL z AND COALESCE(thread_id, '') = ?z ORDER BY started_at DESCrr%rrorc3tK|]0}t|jdxsdj2yw)rr%N)r4r'r()rrs r)rz>SessionSessionsMixin.find_session_by_origin..s,Pac!%% "2"8b9??APs68)r4rc _read_allr9r'r) rrrrrqueryrfrrowsexactus r)find_session_by_originz+SessionSessionsMixin.find_session_by_origins 7j0 !#g,/  7 7E MM#i. )!%8S0SU[!\]AQ]]  $T1AEE),<,B(Cs7|(SQTET58D>**4y1} P4PVTU!V WZ[ [474=!!^U WsC<,/DDDD @z AND COALESCE(z{alias}model_config$._branched_fromz, '') != ? AND COALESCE(r. $._reset_fromz7, '') != ? AND COALESCE({alias}source, '') != 'tool' end_reasonc6jfdy)zMark a session ended; the first end_reason wins (a compression split must keep ``'compression'`` even if a stale end_session() lands later); reopen_session() to re-end.cXj|dtjfS)NzRUPDATE sessions SET ended_at = ?, end_reason = ? WHERE id = ? AND ended_at IS NULL) _end_and_bumpr)rtrrrs r)z2SessionSessionsMixin.end_session..s,);); f YY[*j 1:z* r+Nr)rrrs```r) end_sessionz SessionSessionsMixin.end_sessions   r+sqlrfreasonch|j||j}|r|j||||S)zRun an end-stamp UPDATE; only a boundary this call actually wrote advances the conversation generation (a no-op must not rotate the peer). Returns rowcount.)rqrowcount_bump_conversation_generation)rrtrrfrrchangeds r)rz"SessionSessionsMixin._end_and_bumps4,,sF+44   . .tZ Hr+c2fd}|j|y)aClear ended_at/end_reason so a session can be resumed; first freeze markerless legacy reset children, skipping explicit fork/delegate provenance and children that predate the parent itself. The guard compares against the parent's started_at, not its current ended_at: a parent that was reopened and re-ended later still owns reset children from its earlier boundaries.c|jdtdddtdddtdddtdttgt|jd fy) NzUPDATE sessions AS child SET model_config = json_set(COALESCE(child.model_config, '{}'), '$._reset_from', child.parent_session_id) WHERE child.parent_session_id = ? AND child.model_configrz IS NULL AND rr.z IS NULL AND COALESCE(child.source, '') != 'tool' AND child.started_at >= (SELECT p.started_at FROM sessions p WHERE p.id = child.parent_session_id) AND childCUPDATE sessions SET ended_at = NULL, end_reason = NULL WHERE id = ?)rqrrrbrrs r)rz0SessionSessionsMixin.reopen_session.._dos LL99JK_ap9q8rs()=?QRST()=?QRST/w8QRd8efgi101  LLUXbWd r+Nr)rrrs ` r)reopen_sessionz#SessionSessionsMixin.reopen_sessions   C r+csytj tjfdS#t$rYywxYw)arDurably mark an intentional reset boundary on live rows or rows with a *recoverable* accidental end_reason (explicit boundaries are preserved): an ``agent_close`` row left recoverable would be resurrected by stale-route recovery. Keep in sync with find_latest_gateway_session_for_peer. Plain ``end_session()`` is NOT sufficient for reset boundaries: it no-ops on an already-ended row, so a row that agent cleanup already closed as ``agent_close`` would stay recoverable and stale-route recovery would resurrect the reset session with its full history (#61220, #61993, #63539). FcDj|dtdfS)NzfUPDATE sessions SET ended_at = ?, end_reason = ? WHERE id = ? AND (ended_at IS NULL OR end_reason IN (rE)rr)rtnowrrrs r)rz?SessionSessionsMixin.promote_to_session_reset..s69K9K%%A$B"Ffj):v:r+)rboolrr)rrrrs```@r)promote_to_session_resetz-SessionSessionsMixin.promote_to_session_resetsNiik ++-    s= A A Frreplace_git_metacrsy|xsdj|xsdjfd}|j|S)axPersist the authoritative cwd and claim a Git metadata generation. git fields are written only when non-empty (a probe failure never clobbers a value) except under ``replace_git_meta`` (a workspace MOVE overwrites the old repo identity). Async probes publish with the returned generation so an older worker cannot overwrite a newer claim (A -> B -> A).Nr%c|jd fj}|yddg}g}|dk7s r-|jd|jxsd xsdfn8dfd ffD]-\}}|s |j|d|j|/|jd d j |d g| |jd fj}|dSt |dS) Nz%SELECT cwd FROM sessions WHERE id = ?zcwd = ?zBgit_metadata_generation = COALESCE(git_metadata_generation, 0) + 1r)zgit_branch = ?zgit_repo_root = ?rr$ = ?UPDATE sessions SET , z WHERE id = ?z9SELECT git_metadata_generation FROM sessions WHERE id = ?)rqfetchonerdrcrNint) rtcurrentsetsrfr,valr!branchr&r repo_rootrs r)rz4SessionSessionsMixin.update_session_cwd.._dosll#JZMZcceGcdD!$FqzS $4 CD v~y/@DAB".!7/99U V+HC se4L1 c*+ LL/ $/@ NPeRXPeZdPe f,,Kj]hj ;4 7CAK 7r+)r(r) rrr&rr$rrr"r#s `` ` @@r)update_session_cwdz'SessionSessionsMixin.update_session_cwdsP"))+"(b//1  8 8&""3''r+ generationc t|txrt|t xr|dk\}|r|r|syd|xsdjfd|xsdjffDcgc] \}}|r||f } }}| sy|j ddj d| Dd | D cgc]\} }| c}} |||gzdk(Scc}}wcc}} w) zAPublish async Git enrichment only while its cwd claim is current.rFrr%r$rrc3,K|] \}}|dyw)rNr_)rr,_s r)rzDSessionSessionsMixin.publish_session_git_metadata..?s,Ofc1uD\,Osz9 WHERE id = ? AND cwd = ? AND git_metadata_generation = ?)r3rrr(_write_rowcountrN) rrr&r%rr$valid_generationr,r!fieldsr(s r)publish_session_git_metadataz1SessionSessionsMixin.publish_session_git_metadata/s &j#6oz*VZ?[;[o`jno`o,< 0b779:_}Ob`bNiNiNkRtyy{;  R0=-j9??T 66  r+c4|sy |jd|f}|+|ds&|dr |dtjj k(ry|j ddtjj |f|jy#tj$rd}Y~wxYw)aClear activity labels after a turn (``last_activity_at`` is kept so idle / watchdog clocks stay continuous). A no-op clear skips the write transaction. Description and provenance are observation labels for *what was happening at* that timestamp during an active turn; once the turn is idle they must not keep advertising "compressing" / "executing tool" (#72039). Response-critical-path contract (#76354 review S1): runs in the turn's ``finally``; a no-op clear (labels already empty) skips the write transaction entirely, and a real clear uses the same short sub-second busy budget as :meth:`touch_session_activity` instead of the full routine write patience. NzUSELECT last_activity_description, last_activity_provenance FROM sessions WHERE id = ?rrz\UPDATE sessions SET last_activity_description = ?, last_activity_provenance = ? WHERE id = ?r%r) _read_onesqlite3Errorr UNKNOWNr8rr9rrr!s r)clear_session_activity_labelsz2SessionSessionsMixin.clear_session_activity_labelsis  ..g C ?3q63q6SVGYGaGaGgGg=g   j #++11: >4KjKj  }} C sA??BBmodel_config_jsoncN|j|jd|||fy)z4Update model_config and (COALESCE) optionally model.zMUPDATE sessions SET model_config = ?, model = COALESCE(?, model) WHERE id = ?N)flush_token_countsr)rrrCrs r)update_session_metaz(SessionSessionsMixin.update_session_metas) !  [ z 2 r+c:fd}j|y)z0Store the full assembled system prompt snapshot.cp|jdj|fj|y)NzMUPDATE sessions SET system_prompt_hash = ?, system_prompt = NULL WHERE id = ?)rqrr)rtrrrs r)rz6SessionSessionsMixin.update_system_prompt.._dos7 LL_**4?L   4 4T :r+Nr)rrrrs``` r)update_system_promptz)SessionSessionsMixin.update_system_prompts ; C r+ tool_namescp|tjt|nd}|jd||fy)zPersist the resolved ``tools[]`` name order so a rebuilt AIAgent can't fork the cached tool prefix on a flipped check_fn verdict; ``None`` clears.Nz/UPDATE sessions SET tool_names = ? WHERE id = ?)r5rrar)rrrJpayloads r)update_session_tool_namesz.SessionSessionsMixin.update_session_tool_namess33=2H$**T*-.d IGU_K`ar+providerc||jddi}r|d<|r||d<|j|dfdy)aSet the model after a mid-session /model switch (unconditionally), null system_prompt so stale Model:/Provider: footers rebuild, and drop any Browser runtime lock (lineage markers survive). *provider* is merged into model_config so resume recombines model and provider. When *provider* is given, it is merged into ``model_config`` alongside the model (``$.model`` / ``$.provider``) so a later resume recombines the persisted model with the provider that actually serves it instead of the config.yaml primary provider (#79536). Callers without provider knowledge leave any stored provider untouched. browser_model_lockNrrNzmUPDATE sessions SET model = ?, model_config = ?, system_prompt = NULL, system_prompt_hash = NULL WHERE id = ?c|fSrr_mergedrrs r)rz;SessionSessionsMixin.update_session_model..sE6:6r+)rE_write_model_config_patch)rrrrNpatchs `` r)update_session_modelz)SessionSessionsMixin.update_session_modelsP !!5t < "E'N  (E*  &&  K 6 r+rUcBfd}j|y)zMerge ``patch`` into model_config then run ``sql`` with ``params(merged)`` in one write transaction; no-op when the row doesn't exist. Custom ``sql`` (prompt-nulling) also GCs prompts.cj|}|tury|jr|n|fj|yyr)_merge_model_config_json_MODEL_CONFIG_ROW_MISSINGrqr)rtrSrfrUrrrs r)rz;SessionSessionsMixin._write_model_config_patch.._dosW224UKF22 LLfVnVZ

"r+Nr)rrrUrrfrs````` r)rTz.SessionSessionsMixin._write_model_config_patchs ? ? C r+skip) on_missingr\c,|jd|fj}||dk(rtd|tSt |d}|j D]\}}||j |d|||<!|rtj|SdS)u#SELECT + tolerant-parse + merge ``patch`` into model_config (the one place that keeps ``_branched_from``/``_delegate_from`` alive); ``None`` deletes a key. Returns serialized JSON (``None`` when empty) or ``_MODEL_CONFIG_ROW_MISSING`` (``on_missing="raise"`` → ValueError)..SELECT model_config FROM sessions WHERE id = ?NraisezSession not found: r) rqr ValueErrorrZr:r0popr5r) rrtrrUr\r!configrCr8s r)rYz-SessionSessionsMixin._merge_model_config_jsons llKj][ddf ;W$ #6zl!CDD, ,$SV,++- $JC} 3%#s  $ &,tzz&!55r+c2|r|sy|j||y)ztMerge ``patch`` into model_config atomically (``None`` removes a key); no-op when the row or patch is empty.N)rT)rrrUs r)patch_session_model_configz/SessionSessionsMixin.patch_session_model_configs  &&z59r+rCrc|j|xsi}t|jdj||S)zCRead one key out of a session's model_config JSON (tolerant parse).r) get_sessionr:r')rrrCrsessions r)get_session_model_config_valuez3SessionSessionsMixin.get_session_model_config_values8"":.4""7;;~#>?CCCQQr+)rrN model_options route_source confirmedrirjrkc|xsdxsd|xsi|xsdt|tjd}|jd|idfdy)zPersist a Browser / API-client runtime lock into model_config (lineage markers survive); null system_prompt so cached footers cannot lie.r%)rNrrirjrk updated_atrPzUPDATE sessions SET model_config = ?, model = COALESCE(?, model), system_prompt = NULL, system_prompt_hash = NULL WHERE id = ?c|fSrr_rRs r)rzBSessionSessionsMixin.update_session_runtime_lock..sFE:6r+N)rrrT)rrrrNrirjrklocks `` r)update_session_runtime_lockz0SessionSessionsMixin.update_session_runtime_locks`!B"}Ob`b(.BT)_\`\e\e\g  && -t4 # 7 r+enabledcD|sy|j|dt|iy)zZPersist the per-session YOLO flag so ``/yolo`` survives ``--resume``; no-op without a row.N yolo_mode)rTr)rrrqs r)set_session_yoloz%SessionSessionsMixin.set_session_yolos!  &&zKg3OPr+ session_metacntt|xsijdjdS)zVPersisted YOLO flag; False on any parse failure (resume must never enable the bypass).rrs)rr:r')rus r)session_yolo_enabledz)SessionSessionsMixin.session_yolo_enableds1');(@(@(PQUUVabccr+cr|j|jd|f}|r|j|SdS)zXGet a session by ID (drains queued token deltas first so cost readers see exact totals).zSELECT s.*, COALESCE(sp.prompt, s.system_prompt) AS _system_prompt_resolved FROM sessions s LEFT JOIN system_prompts sp ON sp.hash = s.system_prompt_hash WHERE s.id = ?N)rEr=_session_row_dictrAs r)rfz SessionSessionsMixin.get_sessionsA !nn k M  /2t%%c*;t;r+cf|j|jd|f}|r t|SdS)a'Most recently used main-loop model route as one coherent per-call tuple (``session_model_usage`` keeps model+provider together; ``sessions`` mixes route changes). Recency, not lifetime call count: on a long session a route retired weeks ago can hold the highest ``api_call_count`` forever, and /status and /usage would keep calling it current. ``rowid DESC`` breaks same-timestamp ties toward the route that first appeared later; without it SQLite's temp-sort order is unspecified and the retired route can win.auSELECT model, billing_provider, billing_base_url, billing_mode, api_call_count FROM session_model_usage WHERE session_id = ? AND task = '' AND model <> 'unknown' AND billing_provider <> '' ORDER BY last_seen DESC, rowid DESC LIMIT 1N)rEr=r9rAs r)get_recent_session_model_routez3SessionSessionsMixin.get_recent_session_model_routes= !nn M   tCy)T)r+session_id_or_prefixc|j|}|r|dS|jdt|df}t|dk(r|ddSdS)z>Exact id, else the single unambiguous prefix match, else None.rozSSELECT id FROM sessions WHERE id LIKE ? ESCAPE '\' ORDER BY started_at DESC LIMIT 2%rrN)rfrr?r)rr|rmatchess r)resolve_session_idz'SessionSessionsMixin.resolve_session_id&sf  !56 ; .. b1231 5 7 $'w<1#4wqz$>$>r+cp|xsdj}|syt|jd|fxsdS)uiStamp this store's own profile onto legacy ``profile_name IS NULL`` rows, which the fail-closed owner ladder cannot route. Never overwrites a non-NULL owner. Returns rows stamped. Sessions created before the durable-ownership work (#95407 lineage) carry ``profile_name = NULL``. On single-backend installs that was harmless, but once a Desktop registers a second connection the fail-closed owner ladder (which is correct for new sessions) can no longer route those rows anywhere — every pre-campaign session becomes unresumable after upgrade (#94724, field report). r%rzvUPDATE sessions SET profile_name = ? WHERE profile_name IS NULL OR TRIM(profile_name) = '')r(rr))rrstamps r)backfill_null_session_profilesz3SessionSessionsMixin.backfill_null_session_profiles1sN#**,4'' FH     r+c@t|jddxsdS)uPromote ``model_config.cwd`` into the cwd column for ACP rows lacking one. ACP sessions minted before the adapter populated the column still carry their workspace inside ``model_config``, written by the same adapter that knew the real directory — so this is a record being promoted, not a guess. Only fills NULL/empty; an explicit column value always wins. Returns the number of rows changed. aUPDATE sessions SET cwd = json_extract(model_config, '$.cwd') WHERE source = 'acp' AND COALESCE(cwd, '') = '' AND json_valid(model_config) AND COALESCE(json_extract(model_config, '$.cwd'), '') != ''r_r)rr)rs r)backfill_acp_session_cwdz-SessionSessionsMixin.backfill_acp_session_cwdDs34'' Q   r+columnr8c:|jd|d|||fdkDS)zSet one ``sessions`` column across a whole compression lineage: Desktop projects roots forward to their tip, so updating only the tip would let the root resurrect it on refresh.a WITH RECURSIVE ancestors(id) AS ( SELECT ? UNION SELECT parent.id FROM ancestors a JOIN sessions child ON child.id = a.id JOIN sessions parent ON parent.id = child.parent_session_id WHERE parent.end_reason = 'compression' ), descendants(id) AS ( SELECT ? UNION SELECT child.id FROM descendants d JOIN sessions parent ON parent.id = d.id JOIN sessions child ON child.parent_session_id = parent.id WHERE parent.end_reason = 'compression' ), lineage(id) AS ( SELECT id FROM ancestors UNION SELECT id FROM descendants ) UPDATE sessions SET zB = ? WHERE id IN (SELECT id FROM lineage) r)r))rrrr8s r)_set_lineage_columnz(SessionSessionsMixin._set_lineage_columnWsC##4 5 :U += > ? r+archivedc:|jd|t|S)zOSoft-hide (or unhide) a session and its compression lineage; messages are kept.rrr)rrrs r)set_session_archivedz)SessionSessionsMixin.set_session_archived{s'' JH NNr+c|sy |j|}|r|jdsy|} |j|xs|}||k7r|j|xs|}|jdxsd|jvry|j |dsy|j d|dfy#t$rYywxYw#t$rYfwxYw)u>Un-archive a session archived by a recoverable accident (ws_orphan_reap, agent_close); deliberate archives are left alone. True when un-archived. Registry-style lookups (Bot Mode's canonical "Bot Chat") use this to resurrect a row the ws-orphan reaper (``ws_orphan_reap``) or older agent cleanup (``agent_close``) archived: those ends are accidents, not user intent, so the identity-scoped canonical chat must survive them (#92687). Sessions archived with no end_reason or an explicit boundary reason (user archived deliberately, ``session_reset``, …) are left untouched — returns ``False`` for those, ``True`` only when the row was archived for a recoverable reason and is now un-archived (whole compression lineage, via :meth:`set_session_archived`). Frrr%rroT)rfrr'get_compression_tipRECOVERABLE_END_REASONSrr)rrr!tiptip_ids r)unarchive_recoverable_sessionz2SessionSessionsMixin.unarchive_recoverable_sessions "":.C#''*- --j9GZF#&&v.5# GGL ! 'R0L0L L((U;  QTWX\T]S_ +     s"B(/B7( B43B47 CCpinnedc$|jd|t|}|rq|j|}t|xr>t|j dxr"|j dxsd|j k(}|s|jd|d|S)aGPin/unpin a session and its compression lineage (pins are exempt from the auto_archive sweep). Pinning also clears ``hidden``: a pin means "keep this visible", and a hidden+pinned row is otherwise absent from both the default listing and the pinned back-fill (see #106171). Exempt the canonical Bot Chat (hidden + exact registry title): the desktop contract keeps it hidden and reachable only through the bot row, and unhiding it would also disable the rename guard in ``_set_session_title`` that protects its identity (see review on #106180).rhiddentitler%r)rrrfrr'CANONICAL_BOT_CHAT_TITLE)rrrresultr!is_canonical_bot_chats r)set_session_pinnedz'SessionSessionsMixin.set_session_pinneds))(JF L "":.C$(I%$swwx7H2I%!'RD,I,II ")((:qA r+rc:|jd|t|S)z\Hide/unhide a session and its compression lineage from the default listing; still resumable.rr)rrrs r)set_session_hiddenz'SessionSessionsMixin.set_session_hiddens''*c&kJJr+readc\|jd||rtjSdS)zMark read/unread across the compression lineage. ``last_read_at`` is a watermark: unread when activity postdates it (no write on the message path). NULL = never tracked = read; 0 = unread. last_read_at)rr)rrrs r)set_session_readz%SessionSessionsMixin.set_session_reads+'' SWDIIKaa]`aar+ session_rowc|jd}|y|jdxs|jd}t|xsdt|kDS)zIUnread = activity postdates the ``last_read_at`` watermark (NULL = read).rF last_active started_atr)r'r7)r last_readrs r)session_unreadz#SessionSessionsMixin.session_unreadsQ OON3  !oom4U  8U [%A&y)999r+>rrgit_metadata_generation_session_compact_cols_sql where_sql id_needle search_needlecg}g}dtdtfd}|r(|jd|j|||rftjdd|}d}|j ||gdz|r|d z }|j|||j|d z|s||fSd j |}|r |d ||fSd ||fS) aExtend ``where_sql`` with the id_query / search_query filters: a row is admitted when its own id or any id in its forward compression chain matches (search also matches titles and a punctuation-stripped form so ``an94`` finds ``AN-94``); chain membership bounds the LIKE.needler"c dt|dS)Nr~)r?)rs r)likez6SessionSessionsMixin._chain_search_where..likes|F+,A. .r+znEXISTS (SELECT 1 FROM chain cq WHERE cq.root_id = s.id AND LOWER(cq.cur_id) LIKE ? ESCAPE '\')z[\W_]+r%zEXISTS (SELECT 1 FROM chain cq JOIN sessions cs ON cs.id = cq.cur_id WHERE cq.root_id = s.id AND (LOWER(COALESCE(cs.title, '')) LIKE ? ESCAPE '\' OR LOWER(cq.cur_id) LIKE ? ESCAPE '\'rmz{ OR REPLACE(REPLACE(REPLACE(REPLACE(LOWER(COALESCE(cs.title, '')), '-', ''), '_', ''), '.', ''), ' ', '') LIKE ? ESCAPE '\'rErMrL)r4rcrsubrdrN) rrrrfrIrcompact_needle search_clausecombineds r)_chain_search_wherez(SessionSessionsMixin._chain_search_wheres  / / /  NNE  MM$y/ * VVIr=AN:  MM4 ./!3 4Q  d>23 NN=4/ 0f$ $<<(1:9+U8*-V\\\& @SV\\\r+sessions compact_rowscdi}|D]B}|jddk(s|j|d}|s/|d|dk7s;|||d<D|r2|j|jDchc]}|d c}|ni}g}|D]}|j|d}|r|j|dnd}|s|j |Ct |} dD]} | |vs|| | | <| jd|jd| d<|d| d <|| d <|j | |Scc}w) zReplace each compression root's surfaced fields with its live tip's (root ``started_at`` kept for stable ordering), one batched query. ``_lineage_ids`` carries every chain id (a tile may hold a MIDDLE segment's id).r compressionro)rN) roended_atr message_counttool_call_countrrpreviewrrr&rr$r_lineage_root_id _lineage_ids)r'get_compression_chain_get_session_rich_rows_batchrircr9) rrr chain_by_rootschaintip_rows projectedtip_rowrSrCs r)_project_compression_tipsz.SessionSessionsMixin._project_compression_tipssy/1  3Auu\"m3221T7;U2Y!D'1-2M!D'*  3  - -(5(<(<(>?ur?l . $&    %A!%%ag.E16hll59-DG  #!WF /'>")#,F3K  / zz'"*#$%%.w)*4F% &%*F> "   V $) %*3@s) D-g@)limitrUtimeout_secondscandidate_limit lineage_limitrrUrrrc4tdt|}tdt|}|td|dz}t|tt|d}|td|dz}t|tt|d}dd t d d g}g}|r>d j d |D}|j d|d|j|dj |} dt dd} d| d| d| d| dtdd| dtdtdtdt d d} |||||gz} tj|zd d!tffd" } |j5}|j| d# |j!| | j#}|jdd$ dddg}D]V}|j/|}t1|j3d)d*|d+<|j5||d,<|j |X|S#|jdd$wxYw#1swYxYw#t$j&$r4}r,d%t)|j+vrt-d&|d'd(|d}~wwxYw)-a,Latency-bounded recent-conversation browse (``session_search()``): preselect a small candidate set from the indexed durable activity timestamp (fallback ``started_at``), resolve only those across compression ancestry/chains, then hydrate activity/previews for that bounded set. Lineage traversal uses ``UNION`` plus a total-row ceiling so a corrupt cycle or a deep/branching lineage cannot defeat the bound; a lineage that hits the ceiling before a terminal root/tip is omitted, not expanded. A cooperative SQLite progress deadline interrupts sustained work past ``timeout_seconds`` and raises ``TimeoutError`` (cheap statements may finish between callbacks). Supports only the agent-tool browse filters; rich callers keep using :meth:`list_sessions_rich`.rrNii r` s.hidden = 0rZr[,c3 K|]}dyw)?Nr_)rr(s r)rzDSessionSessionsMixin.list_recent_sessions_bounded..>s#AAC#As r^r]rMz parent.end_reason = 'compression' AND child.parent_session_id = parent.id AND json_extract( COALESCE(child.model_config, '{}'), '$._branched_from' ) IS NULL AND rzF IS NULL AND COALESCE(child.source, '') != 'tool' z WITH RECURSIVE recent_candidates(id) AS ( SELECT s.id FROM sessions s WHERE a ORDER BY COALESCE(s.last_activity_at, s.started_at) DESC, s.started_at DESC, s.id DESC LIMIT ? ), ancestors(candidate_id, cur_id) AS ( SELECT id, id FROM recent_candidates UNION SELECT a.candidate_id, parent.id FROM ancestors a JOIN sessions child ON child.id = a.cur_id JOIN sessions parent ON aZ LIMIT ? ), candidate_roots(root_id) AS ( SELECT DISTINCT a.cur_id FROM ancestors a JOIN sessions child ON child.id = a.cur_id WHERE NOT EXISTS ( SELECT 1 FROM sessions parent WHERE aI ) ), chain(root_id, cur_id) AS ( SELECT root_id, root_id FROM candidate_roots UNION SELECT c.root_id, child.id FROM chain c JOIN sessions parent ON parent.id = c.cur_id JOIN sessions child ON z LIMIT ? ), chain_rows AS ( SELECT c.root_id, c.cur_id, zc.cur_idz AS activity, CASE WHEN EXISTS ( SELECT 1 FROM sessions parent JOIN sessions child ON a WHERE parent.id = c.cur_id ) THEN 0 ELSE 1 END AS is_tip FROM chain c ), ranked_tips AS ( SELECT root_id, cur_id, activity, ROW_NUMBER() OVER ( PARTITION BY root_id ORDER BY activity DESC, cur_id DESC ) AS rank_in_root FROM chain_rows WHERE is_tip = 1 ) SELECT tip.id, tip.source, tip.model, COALESCE(tip.title, s.title) AS title, s.started_at AS started_at, tip.ended_at, tip.end_reason, tip.message_count, tip.tool_call_count, rt.activity AS last_active, COALESCE( (SELECT z FROM messages m WHERE m.session_id = tip.id AND m.role = 'user' AND m.content IS NOT NULL AND a ORDER BY m.timestamp, m.id LIMIT 1), '' ) AS _preview_raw, CASE WHEN s.id != tip.id THEN s.id ELSE NULL END AS _lineage_root_id FROM ranked_tips rt JOIN sessions s ON s.id = rt.root_id JOIN sessions tip ON tip.id = rt.cur_id WHERE rt.rank_in_root = 1 AND s.archived = 0 AND s.hidden = 0 AND z AND zk IS NULL ORDER BY rt.activity DESC, s.started_at DESC, tip.id DESC LIMIT ? Fr"c:tjk\rdyy)NTrr)r monotonic)deadlineinterrupted_by_deadlinesr)_deadline_progress_handlerzUSessionSessionsMixin.list_recent_sessions_bounded.._deadline_progress_handlers~~8+*.'r+ir interruptzrecent-session browse exceeded gz s deadline _preview_rawr%runread)maxrr7minr0rNrcrdrrrrrr _read_ctxset_progress_handlerrqrrr>OperationalErrorr4r TimeoutErrorryrrar)rrrUrrrcandidate_clausescandidate_params placeholderscandidate_wherecompression_parent_edgerrfrrtrexcrr!rgrrs @@r)list_recent_sessions_boundedz1SessionSessionsMixin.list_recent_sessions_boundeds,"As5z"c5#9:  "!#uqy1OeS_)=t%DE  o&9:MOS]1CT-JK   "#345X >  ') 88#A#AAL  $ $'8a%H I  # #O 4!,,'89' %%9:;< #  '' ()*A(A B33 4()@'@A4J?@A01H/HI4112 22 3''(&'789: u] |"     %   >>#o5"' C  ! 7T))*DdK7<<v6??AD--dA6  7 %C,,S1G!/ NB0O!PGI  $ 3 3G Pb=W=W=Y=_=_=a& "K77@kB--ACUVWX,-ACUVWX 0 7 7' BCD >%3PQCDNN3'QQ )12A$2H2>Gi[(9:MaL  6s;<=  L ~~l4EF 'NN3'T7(*LL4)OOA&  ' $,<55h MH 1A--a0AhK 1-R3s I# I session_idsc|xsgDcgc]}|s| }}|siS|Dcic]}|d}}|jdt|d|}|D](}t|dt|d|d||d<*|Scc}wcc}w) u``{session_id: status}`` from each session's LAST message row (``'empty'`` when none); one query, MAX(id) per session joined back — never scans transcripts.ra3 SELECT m.session_id, m.role, m.tool_calls IS NOT NULL AS has_tool_calls, m.finish_reason FROM messages m JOIN ( SELECT session_id, MAX(id) AS max_id FROM messages WHERE session_id IN (z[) GROUP BY session_id ) latest ON m.id = latest.max_id rrr)rrrr)rrbrr)rr rvrstatusesrr!s r)session_lifecycle_statusesz/SessionSessionsMixin.session_lifecycle_statusesIs +0b9sSs99I max_messagescddlm}m}||}|dkr td|dk(ry|j d||dzf}t |r|dnd}||kDr |||||S)zActive row count of this segment, or raise SessionExportTooLargeError (the LIMITed subquery stops once the bound is exceeded). ``None`` resolves ``sessions.max_export_messages``; 0 disables the guard.r)SessionExportTooLargeErrorresolved_max_export_messagesz!max_messages must be non-negativezYSELECT COUNT(*) FROM (SELECT 1 FROM messages WHERE session_id = ? AND active = 1 LIMIT ?)r)r rrr`r=r)rrrrrr!rs r)assert_export_safez'SessionSessionsMixin.assert_export_safecs Z  79L ! @A A 1 nn g ) * cCFq1 < ',Z U Ur+c|sy|jd|f}|duxr&tt|djdS)zCopied user-facing branch (``_branched_from``)? Branches own a copied transcript; compression continuations need the parent's archived rows.Fr^Nrr)r=rr:r'rAs r)_is_explicit_branch_sessionz0SessionSessionsMixin._is_explicit_branch_sessionwsHnnMPZ}]$Z4(;CF(C(G(GHX(Y#ZZr+cV|s|gSg}|}|j5}|ra||vr]t|dkrO|j||jd|fj }|n|d}|r||vrt|dkrOdddt t |xs|gS#1swY"xYw)Ndz3SELECT parent_session_id FROM sessions WHERE id = ?r)rrrcrqrrareversed)rrrrrtr!s r)_session_lineage_root_to_tipz1SessionSessionsMixin._session_lineage_root_to_tips<  ^^  !gU2s5zC7G W%llIG:(*;a&gU2s5zC7G !HUO$4 4 ! !s A#BB(r*c g}g}|r_t|tr|gn t|}|jddj dt |zd|j ||r0t|\}} |j||j | |jdtddt|dd g|||D cgc]} |j| c} Scc} w) zSessions MRU-first with a computed ``last_active``; ``workspace_key`` scopes to one workspace so ``hermes -c``/``--resume`` picks its last session. ``source`` may be one label or several.r\rrr]zMSELECT s.*, COALESCE(sp.prompt, s.system_prompt) AS _system_prompt_resolved, rz^ AS last_active FROM sessions s LEFT JOIN system_prompts sp ON sp.hash = s.system_prompt_hash rzI ORDER BY last_active DESC, s.started_at DESC, s.id DESC LIMIT ? OFFSET ?) r3r4rarcrNrrdrHrrrOry) rrRrrr*rrfrS ws_clause ws_paramsr!s r)search_sessionsz$SessionSessionsMixin.search_sessionss   ",VS"9vhtF|G  =#G :L1M0Na!P Q MM' " #8#G Iy   + MM) $7;~~ [',-.]--./W W %f $e $V $ 8  &&s+   s C'rQc rt||||||||\} } |jdt| d| dS)zWCount sessions with list_sessions_rich's filters so a paired "load more" total matches.)rQrRrSrUr;rVrWrXzSELECT COUNT(*) FROM sessions srr)rjr=rO) rrRrSr;rVrXrWrQrUrrfs r) session_countz"SessionSessionsMixin.session_countsS !6-fg+ Vg':J!  v ~~ ? =Z]@^?_`bhijkllr+nc@t|jd|f|k\S)z[At least N sessions exist (archived included); LIMIT short-circuits session_count()'s scan.zSELECT 1 FROM sessions LIMIT ?)rr)rrs r)session_count_gez%SessionSessionsMixin.session_count_ges 4>>"BQDIJaOOr+)rXrWrQc\t|||\}}|j5}|j td|j dt |dd|j }dddDcic]!}t|dt|dxsd #c}S#1swY6xYwcc}w) zV``{source: count}`` via one GROUP BY; ``exclude_children`` mirrors listing visibility.)rQrWrXNzSessionDB connection is closedzYSELECT COALESCE(NULLIF(s.source, ''), 'cli') AS source, COUNT(*) AS count FROM sessions srzC GROUP BY COALESCE(NULLIF(s.source, ''), 'cli') ORDER BY count DESCrRcountr) rjr_conn RuntimeErrorrqrOrrr4r) rrXrWrQrrfrtrr!s r)session_count_by_sourcez,SessionSessionsMixin.session_count_by_sources !6-]-!  v^^  zz!"#CDD<<"",]C"@!ABUUV\hj  GKKsCM"CG (9$::KK  LsAB4&B)B&c|j|}|sy|j|t|jdxsdj fS)u (is_fork_child, source) in ONE read (prompt_cache_scope needs both from the same row). Missing row → (False, ""); DB errors propagate (fail closed). ``agent/prompt_cache_scope.py`` needs both to resolve a host-declared conversation scope, and both live on the same ``sessions`` row; asking for them separately read that row twice per resolution (@teknium1 on 98811). The marker rules stay here, beside :meth:`is_explicit_fork_child`, instead of being re-implemented by the caller. See #98811. )Fr%rRr%)rf_is_explicit_fork_child_rowr4r'r()rrrgs r)declared_scope_identityz,SessionSessionsMixin.declared_scope_identitysM"":.//8#gkk(>S>YWY:Z:`:`:bbbr+ sessions_dirc |ydDcgc] }|||z  }} |j|jdtj|d|D]} |j dycc}w#t$rY+wxYw#t$rY8wxYw)zRemove ``.json``/``.jsonl`` and gateway ``request_dump__*.json``; OSError is swallowed so a filesystem hiccup never blocks a DB operation.N)z.jsonz.jsonl request_dump_z_*.jsonT) missing_ok)rdglobescapeOSErrorunlink)r*rsuffixtargetsps r)_remove_session_filesz*SessionSessionsMixin._remove_session_filess   H[\f=A> B  B c|j5}|jd|fjs gcdddSt||g}ddd|gt S#1swYxYw)zRows :meth:`delete_session` would remove: the session, then its recursive delegate children (branch/compression children are orphaned, not deleted).+SELECT 1 FROM sessions WHERE id = ? LIMIT 1N)rrqrr~sorted)rrrt delegate_idss r)get_session_delete_targetsz/SessionSessionsMixin.get_session_delete_targetssx^^  K<< MPZ}]ffh K K 7tj\JL  K2VL122 K Ks#A! A!!A*expected_delete_idscg| t|ndfd}j|}D]}j||t|S)a Delete a session and its messages; delegate children cascade, branch/compression children are orphaned. *expected_delete_ids*: proceed only if parent + delegate cascade still equals that set (re-walked inside the transaction on purpose: export-before-delete fails closed).Ncd|jdfjyht|gk7ryjt |g|jdf|jdf|jdfj |j y)Nr7FzHUPDATE sessions SET parent_session_id = NULL WHERE parent_session_id = ?z)DELETE FROM messages WHERE session_id = ?z!DELETE FROM sessions WHERE id = ?T)rqrr~rdrrrc)rt expected_ids removed_idsrrs r)rz0SessionSessionsMixin.delete_session.._dos||IJ=Ybbdl'L=8 |L=-   8 |L M LLZ]g\i  LLDzm T LLr?s `` @@r)delete_sessionz#SessionSessionsMixin.delete_sessions]"$ 3F3Rs./X\   %%c* :C  & &|S 9 :G}r+c`fd}j|}|rj||S)zDelete *session_id* only if it has no messages, no title and no children; check and delete share one transaction so a concurrent flush can't be lost.c|jdf}|jdkDrj||jdkDS)Na DELETE FROM sessions WHERE id = ? AND title IS NULL AND NOT EXISTS ( SELECT 1 FROM messages WHERE messages.session_id = sessions.id ) AND NOT EXISTS ( SELECT 1 FROM sessions child WHERE child.parent_session_id = sessions.id ) r)rqr r)rtr}rrs r)rz9SessionSessionsMixin.delete_session_if_empty.._dosH\\  F"88>??Q& &r+rr5)rrr*rr@s`` r)delete_session_if_emptyz,SessionSessionsMixin.delete_session_if_emptys2 '&%%c*   & &|Z @r+c t|xsdDchc]}t|ts|s|c}sygfd}j|}D]}j |||Scc}w)zBulk delete with :meth:`delete_session` semantics per row, in ONE transaction. Unknown ids are skipped (UI selection can race another tab's delete). Returns the number deleted.r_rc tDcgc]9}|jdt|d|jD]}|d ;}}}|syj t ||t|D]O}t|}|jd|d||jd|d||jd|d|Qj |j |t|Scc}}w)Nz%SELECT id FROM sessions WHERE id IN (r]rorrrr)rrqrbrrrdrrr)rtr{r!existingr|r?r unique_idss r)rz1SessionSessionsMixin.delete_sessions.._do9s/9*/EeQUQ]Q]78QRW8X7YYZ[]bRhj#D  H   8xH I#H- P.u5 _`b_ccdegl I"QOQVW A"QGO  P  4 4T :   x (x= s>C9)rar3r4rr5)rr r*rvrr#r?rIs` @@r)delete_sessionsz$SessionSessionsMixin.delete_sessions2sw+*;\3z#s?SX[3\] !#  !"##C( :C  & &|S 9 : 1]sA-A-A-zmessage_count = 0 AND ended_at IS NOT NULL AND archived = 0 AND NOT EXISTS (SELECT 1 FROM messages WHERE messages.session_id = sessions.id)cD|jd|jdS)z^Count of empty, ended, non-archived sessions; ended_at guards a fresh session's first message.z$SELECT COUNT(*) FROM sessions WHERE r)r=_EMPTY_SESSION_WHERErs r)count_empty_sessionsz)SessionSessionsMixin.count_empty_sessionsXs&~~ DTE^E^D_`abcddr+cngfd}j|}D]}j|||S)zDelete every empty, ended, non-archived session in one transaction, orphaning (not cascading) children; transcript files are swept too.c|jdjjDchc]}|d }}|syt|D]`}t |}|jd|d||jd|d||jd|d|j |bj |t|Scc}w)Nrnrorrr]rr)rqrLrrrrbrdrr)rtr!r r{r|r?rs r)rz7SessionSessionsMixin.delete_empty_sessions.._do`s04 01J1J0KL1hj3t9K#K0 *.u5 hikhllmnpuv I"QOQVW A"QGO""5) *  4 4T :{# #s C rD)rr*rr#rvr?s` @r)delete_empty_sessionsz*SessionSessionsMixin.delete_empty_sessions\sE"$  $ ##C( :C  & &|S 9 : r+older_than_daysc |jddd|d<|jd||d|}|D]}|j|ddt|S)aTBulk soft-hide with prune_sessions' filter surface, via set_session_archived so each lineage flips as a unit; idempotent. Returns matches. A lineage is matched through its TIP only: an old compression ancestor never qualifies on its own age, or the fan-out would hide an open, recently active continuation (#115489).rFTlineage_tips_only)rQrRror_) setdefaultlist_prune_candidatesrr)rrQrRfiltersrr!s r)archive_sessionsz%SessionSessionsMixin.archive_sessionsusj :u-'+#$)t))d/RXd\cd 7C  % %c$i 6 74yr+ idle_daysmin_interval_hoursexclude_pinnedcddd} tj} t|jdxsd}|r||z |dzkrd|d<|St d d |j || x}|d <|jdt||dkDrtjd|||S#ttf$rd}YwxYw#t$r/}tjd|t||d<Yd}~|Sd}~wwxYw)zIdempotent, non-destructive auto-archive of sessions idle for ``idle_days``; state_meta ``last_auto_archive`` gates runs within ``min_interval_hours``. Never raises.Fr)skippedrlast_auto_archiveriTr\rstate_db_auto_archive)phase)rZrz=state.db auto-archive: archived %d session(s) idle >= %s daysz state.db auto-archive failed: %srN) rr7get_metar8r`rarchive_stale_sessionsset_metar4rinforwarning) rrXrYrZrrlastrrs r)maybe_auto_archivez'SessionSessionsMixin.maybe_auto_archives .3!B '))+C T]]+>?F3Gd %7$%>>$(y!  $E1H I,0,G,G bp,G,q qHvj) MM-s3x 8!| SU]_h  'z*    ' NN=s C!#hF7O  's@CB,CAC,C=C?CC C; $C66C;)NNNNNNNNNNNNNNN)unknownN)T) session_reset)NNF)NNr)z1UPDATE sessions SET model_config = ? WHERE id = ?N)NNNNrrFrTFFFNNFFNF)NrrN)NNNrFFFN)r)T)___name__ __module__ __qualname____doc__rr4r staticmethodrrrrrrrrr_ORPHAN_ADOPTION_MAX_GAP_Sr"_NON_CONTINUATION_CHILD_FILTER_SQLrtuplerrrrr$r,r2r7r r;rBrFrIrrMrVrrTrYrdrhrprtrwrfr{rrrrrrrrrrrr frozenset_SESSION_COMPACT_EXCLUDEDr__annotations__r rrr classmethodr>Rowrr r rrrr r rrr!r&r)rr5r:rArErJrLrMrPrWrfr_r+r)rr sf Y8C=" A3 A4 A A_cUYEIVZPT+/ bObO'*bO36bOMQRUWZRZ^bObO,/bOEMc]bObO),bO@CbO bO-0 bOGOsm bO  bO 14 bO KN bO $C= bO bOHc ccgj  s  t  t  JN!%""),"9A#"#" #"D"' +,ACUVWX+,ACUVWX+,A?STU8 8' c s t sEsTW\_!!!,3Z^0FJFK(($'(5=c](}(?C( #(DW['+$'58FNsm} *tCH~$6: [_37  #+E? KSTW= /0   8   8OS  25 >Fsm  !s!8C=!UY!bCbXdSViEXb]ab  s 3 (SV- cg 4G=A!!&*38n! !8C=/5"89:!  !"RX6 #6,0cN6KN6&:S:c3h:TX:RR3RQTR`cR :>Y]26VZ  )1# IQRU S#X/ FNsm     ,Q3QQ$Q d8DcN+Cdddc m mP#PdP +0u!&L#'L@DLL c3hL& c# c%c :J cHTNPT$ 3S 3T#Y 3?C37-5d^%d3i0 <#Xd^_c649HTN^aD J ece(4.C4FJ ' ?B   Z^8;RV c3hr+r)r)r%)Mrnr.r5loggingrr>rpathlibrtypingrrrrrr r r agent.session_activityr r rhermes_startup_watchdogrhermes_state_commonrrrrrrrrrrrrrr?rrrrb getLoggerrr4r*r0objectrZr:rBrHrrOrrrjr~rINTERNAL_LISTING_SOURCESrrrSESSION_STATUS_EMPTYrsrr_SAME_KEY_NAMESPACE_SQLrNrr _INHERIT_SEPr_FORK_EDGE_EXCLUSION_SQLrrr_r+r)rs:   NNN<   > *^tCH~^(3-^ 6S6c6 #H6S6T#s(^635d3i+@suS$s)^'<!!4 56 !667& )ES EEcE !&TPT$RVeV[##/2#DHI##.23i#LO##04#PT# 49d3i  #L6$s)6S 6<S d3i 9$*""LM#(3-##V^_bVc#hk#$["JJ'['#c3 2 N'M NUCZB[[\;])]^ N N77#7# 36    WWr+