߲j$ dZddlZddlZddlmZmZej eZdZ dZ de dedee fd Z dd ede ded ee de f d Z d e de dede fdZd edee fdZd ede fdZd edee fdZd edee fdZy)uRotation-stable logical cache scope for prompt_cache_key derivation. Legacy compression rotation mints a new physical ``session_id`` mid-conversation, moving it into a fresh cache bucket. ``resolve_prompt_cache_scope()`` maps the physical id to the ROOT of its compression lineage — NOT ``get_conversation_root`` (the Portal-attribution walk), which would collapse /branch children and delegate trees into one id. ``/new`` starts a fresh scope; fork children (branch, delegate, tool-tagged) are isolated. Hosts minting one id per RESPONSE declare the conversation via ``gateway_session_key``, which wins over the lineage walk and is hashed to ``gwk_`` (it embeds platform/chat/user identifiers). N)AnyOptional_prompt_cache_scope_memogwk_ session_id session_dbreturnc|y |j|}t |t t fr|r|d}t |tr|r|Sy#t$rtjddYywxYw)zRCompression-lineage root of *session_id*, or None (tolerates test-double results).Nz&prompt-cache scope lineage walk failedTexc_infor)get_compression_lineage Exceptionloggerdebug isinstancelisttuplestr)rrlineageroots =/home/ubuntu/.hermes/hermes-agent/agent/prompt_cache_scope.py _lineage_rootrst44Z@'D%=)gqz dC TK   = MsA A+*A+agent row_sourcec|F|rD|B |j|}|r,t |j dxsdj nd}|r|St|dd} dd lm }t ||xsdj }|r|S t |xsdj S#t$rtjddd}YwxYw#t$rtjd dYgwxYw) aThe ``sessions.source`` this agent's conversation is recorded under. ``row_source``: the row's value if already read (``""`` = read, none; ``None`` = look it up). Before the row lands, use the SAME resolver persistence uses, not ``agent.platform``: they diverge under ``HERMES_SESSION_SOURCE`` and the declared scope is memoized at once, so both sides of a ``/new`` would otherwise hash the same scope. Nz#declared-scope source lookup failedTr sourceplatformr)_session_source_for_agentz+declared-scope source authority unavailable) get_sessionrrrrgetstripgetattr run_agentr)rrrrrowrrrs r _agent_sourcer&&sjZ-C ((4C>AS*0b1779b uj$/HS7.x8>B?EEG M  x~2  $ $ &&!  LL>L NC  S BT RSs#B&,C&"C  C  C10C1 session_keyrcvt|dd}t|sy|||}|dStt|S)aDurable generation for *session_key*'s current conversation (``""`` if none). The declared key survives ``/new``, so hashing it alone would reuse one scope across conversations. The counter advances with each reset boundary, independent of prunable rows and wall-clock; compression does not advance it. The declared key names a chat and deliberately survives `/new` and policy resets. See #79017, #86733. latest_conversation_boundaryNr)r#callablerint)r'rrreader generations r_conversation_generationr.FsCZ!? FF F  V,J#2=S_)==ct|dd}t|tr|jtr|Stt|ddxsdj }|r t|ddrytt|ddxsd}t|dd}d}d}|r<|: t|d d}t |r ||\}}n|j|}|ry t||||} | t|| |}| d|d|} tj| jddj!dd} t| S#t$rtjd d YywxYw#t$rtjd d YywxYw)uHost-declared logical conversation scope (``gwk_``), or None. Hashes ``(source, gateway_session_key, generation)``. None (fall back to the physical id) when no key is declared, for a background-review fork (``_persist_disabled``), for an explicit fork child, and on any DB error (fail closed rather than merge a fork onto its parent's key). The one sanctioned exception is a same-model cache-parity fork (#109964): its whole purpose is prefix parity with the parent, yet ``_persist_disabled`` + ``_session_db=None`` made both resolvers key it into a different bucket (one cold ~full-context request per review). ``build_cache_parity_fork`` stamps the parent's ALREADY-RESOLVED scope as ``_inherited_cache_scope`` (no DB access from the fork). Only a ``gwk_`` value is a declared scope; a physical lineage root stays out of the affinity header so the fork publishes exactly what its parent publishes (None → consumers fall back to the conversation root). _inherited_cache_scopeN_gateway_session_keyr_persist_disabledFr _session_dbdeclared_scope_identityz declared-scope fork check failedTr z%declared-scope generation read failed|zutf-8replace)errors)r#rr startswith_DECLARED_SCOPE_PREFIXr"r*is_explicit_fork_childrrrr&r.hashlibsha256encode hexdigest) r inheritedkeysiddbr-ridentityis_forkrcarrierdigests rdeclared_conversation_scoperIVs 7>I)S!i&:&:;Q&R ge3R8>B ? E E GC '%!4e< ge\406B 7C  t ,BJ $J r~ r#I)S!i ge\406B 7C   t ,B $ C 5*d +D$3t9>d1gnAw &u - GsB1GD KCE 2:8KU)S  E:U| 4 L5L   L s?C C#"C#cf t|S#t$rtjddYywxYw)z=Never-raising variant of :func:`declared_conversation_scope`.z-declared conversation scope resolution failedTr N)rIrrrrs r declared_conversation_scope_saferUs5*511  Dt Ts 00cn t|xsdS#t$rtjddYywxYw)ukNever-raising variant of :func:`resolve_prompt_cache_scope` (None = use the physical id). At turn_context an exception inside ``set_runtime_main(...)`` would skip the whole binding. Returns None on any failure (or when there is no scope). Consumers treat None/empty as "fall back to the physical session_id", so a resolution failure degrades to pre-#79017 behavior instead of blocking the caller — important at turn_context's call site, where an exception raised inside the ``set_runtime_main(...)`` argument list would otherwise skip the whole runtime binding, not just the cache scope. Nz$prompt-cache scope resolution failedTr )rRrrrrTs rresolve_prompt_cache_scope_saferWs:)%08D8  ;d Ks  44)N)__doc__r=loggingtypingrr getLogger__name__rrMr;rrr&r.rIrRrUrWr/rr^s    8 $ '  c s x} "OS' ''-0'>Fsm''@ ># >s > >PS > 6/s6/x}6/rcc:CHSM38C=r/