+ jHjERt^RIHt^RIt^RIt^RIHt^RIHtH t H t H t H t H t ^RIHtHtHtHtHtHtHt^RIHt]P2!R4t]!R4tR tR tR R ltR RltRJRRllt RRlt!RRR3RR] !]R,43RR] !R43RR] !R43RR] !R43RR] !R ]43R!R] !R"43R#R]3R$R] !R%43R&R] !R'43R(R] !R)]43R*R] !R+]"PF43R,R] !R-43R.R] !R/43R0R] !R143R2R] !R3]43R4R] !]R,43R5R] !]R6,43R7R] !]R,43R8R] !]R6,43R9R] !R:43R;R] !R<433t$]%!R=]$440RKm,t&R>]!R?R@4,t'RARBlt(RC]' RD]' RE2t)RLRFRGllt*!RHRI4t+R#)MzQRetention pruning, stale-session archiving and VACUUM policy mixin for SessionDB.) annotationsN)Path)AnyDictIterableListOptionalTuple)AUTO_VACUUM_MIN_FREELIST_RATIO _id_chunks_non_continuation_child_sql _placeholders_sql_session_last_active escape_likeemit_session_deleted)report_startup_progress hermes_statesz<(COALESCE(s.input_tokens, 0) + COALESCE(s.output_tokens, 0))z4COALESCE(s.actual_cost_usd, s.estimated_cost_usd, 0)c V^8dQhRRRR/#)valuestrreturn)formats"=/home/ubuntu/.hermes/hermes-agent/hermes_state_maintenance.py __annotate__rs....c<R\VP44 R2#)%) _escape_likelower)rs&r_liker"s |EKKM*+1 --rc V^8dQhRRRR/#)rrrrztuple[list[str], list]r)rs"rrrs""c"&<"rc>^RIHpV!V4wr#V.\V43#))_cwd_prefix_clause)hermes_state_sessionsr&list)rr&clauseparamss& r_cwd_prefix_filterr+s"8'.NF 8T&\ !!rcV^8dQhRR/#)rr)rr)rs"rrr"s:::rcaaVV3Rl#)c4<S.S'd S!V4.3#T.3#Nr)vr)convs&r_one..#svhDa 89a 89rr)r)r1sffr_oner4"s 99rc V^8dQhRRRR/#)rnowfloatrOptional[float]r)rs"rrr&srclV'dV\V4, #R# \\3dR#i;i)zKAge of a state_meta timestamp; None when unset or corrupt (= no prior run).N)r7 TypeError ValueError)r6raws&&r_seconds_sincer=&s4#&sU3Z0D0 z "s33last_active_beforenotnonec&\R,R.W.3#) < ?zG(COALESCE(s.end_reason, '') != 'startup_orphan_reap' OR s.ended_at < ?))_LAST_ACTIVE_SQL)r0s&rr2r22s F " R T 1rlast_active_afterz >= ?started_beforezs.started_at < ? started_afterzs.started_at >= ?sourcetruthyz s.source = ? title_likez.LOWER(COALESCE(s.title, '')) LIKE ? ESCAPE '\' end_reasonzs.end_reason = ? cwd_prefix min_messageszs.message_count >= ? max_messageszs.message_count <= ? model_likez.LOWER(COALESCE(s.model, '')) LIKE ? ESCAPE '\'providerz+LOWER(COALESCE(s.billing_provider, '')) = ?user_idz s.user_id = ?chat_idz s.chat_id = ? chat_typezs.chat_type = ? branch_likez3LOWER(COALESCE(s.git_branch, '')) LIKE ? ESCAPE '\' min_tokens max_tokensz <= ?min_costmax_costmin_tool_callsz#COALESCE(s.tool_call_count, 0) >= ?max_tool_callsz#COALESCE(s.tool_call_count, 0) <= ?c#,"TF wpq!xK R#5ir/r).0name_s& r r]LsF~q!~szp.end_reason = 'compression' zc.zp.idc V^8dQhRRRR/#)rcandidates_whererrr)rs"rrrRs % %s %s %rc*R\ RV R\ R2#)zTCompression ancestors of every row *candidates_where* (alias ``s``) does not select.zmWITH RECURSIVE kept(id) AS ( SELECT p.id FROM sessions c JOIN sessions p ON p.id = c.parent_session_id WHERE z@ AND NOT EXISTS (SELECT 1 FROM sessions s WHERE s.id = c.id AND zs) UNION SELECT p.id FROM kept k JOIN sessions c ON c.id = k.id JOIN sessions p ON p.id = c.parent_session_id WHERE z) SELECT id FROM kept)_CONTINUATION_EDGE_SQL)r_s&r_continued_ancestors_sqlrbRs1 ,-NO_N`a-- # $%rzWITH RECURSIVE tail(id) AS ( SELECT c.id FROM sessions c JOIN sessions p ON p.id = c.parent_session_id WHERE COALESCE(p.pinned, 0) = 1 AND zr UNION SELECT c.id FROM tail t JOIN sessions p ON p.id = t.id JOIN sessions c ON c.parent_session_id = p.id WHERE z) SELECT id FROM tailc V^8dQhRRRR/#)raliasrrr)rs"rrrisYY3YYrc"RV RV R\ R2#)zUPredicate sparing pinned rows and the unpinned continuations a pinned segment covers.z COALESCE(z.pinned, 0) = 0 AND z .id NOT IN ())_PINNED_TAIL_SQL)rds&r_not_pinned_sqlrhis! ug1% EUDVVW XXrc t]tRt^ntRtR6RRlltRRltRRltR R7R R5R R R RRRRR/RRllt] RRRR RR RR /RRll4t RR /RRllt R8RR /RRlllt R8RR /RR lllt R8R!R"lltR R/R#R$lltR9R%R&lltR:R'R(lltR)R*ltR+R,ltR-R.ltR/R0ltR1R2lt^Z^RR^]3R3R4lltR5tR#);SessionMaintenanceMixinzKRetention pruning, stale-session archiving and VACUUM policy for SessionDB.Nc V^8dQhRRRR/#)r sessions_dirOptional[Path]rintr)rs"rr$SessionMaintenanceMixin.__annotate__qs  ~ QT rc aa\P!4R, oVV3RlpSPV4;'g.p\SVRVR7^RIHpV!S4V'dTMRFpSP W4K \ V4#)zCRemove empty TUI ghost sessions (no messages, no title, >24hr old).Qc.<VPRS34P4Uu.uF q^,NK pp^RIHpV!W4p\ V4F"pVPR\ V4 R2V4K$ V'dSP V4V#uupi)aZ SELECT id FROM sessions WHERE source = 'tui' AND title IS NULL AND ended_at IS NOT NULL AND started_at < ? AND NOT EXISTS ( SELECT 1 FROM messages WHERE messages.session_id = sessions.id ) )retire_prunable"DELETE FROM sessions WHERE id IN (rf)executefetchall hermes_state_mutation_retirementrsr r #_delete_unreferenced_system_prompts)connridsrschunkcutoffselfs& r_do?SessionMaintenanceMixin.prune_empty_ghost_sessions.._dots!% / "%HJ "' ( "'AQ44 "'C ( I!$,C#C A-PUBVAWWXY[`a)88>J! (sB ghost_prunereasonrlcollect_retired_mediar)time_execute_writerhermes_state_mediar_remove_session_fileslen)r~rlr removed_idsrsidr}sf& @rprune_empty_ghost_sessions2SessionMaintenanceMixin.prune_empty_ghost_sessionsqsvu$ $))#.44" T;}S_`<d#".;B6C  & &| 97;rc V^8dQhRRRR/#)rr{z Iterable[str]rsetr)rs"rrrosrrmrrrc  dVUu0uFq0PWRR7'gKVkK! up#uupi)zIds in *ids* protected by a live turn lease / compression lock. Idle compression-ended parents are closed, not live, so they are not guarded (prune and delete share this).T)allow_closed_compression_parent)_write_guards_reject)r~ryr{rs&&& r _guarded_ids$SessionMaintenanceMixin._guarded_idss/ #qs&?&?ko&?&psqqqs--c V^8dQhRRRR/#)rrrrboolr)rs"rrros  c  rc t^RIHp^RIHpVP!W3RRRRRRRR/VBR # YE3dR#i;i) zTrue when a live turn lease / compression lock protects ``sid``; expired or dead-holder guards are reclaimed and fenced as a side effect.)!SessionCompressionInProgressError)SessionTurnLeaseLostErrorcompression_lock_holderNturn_lease_holderreject_active_turn_leaseTreject_active_compression_lockF)rrhermes_state_errorsr_check_transcript_write_guards)r~ryrkwargsrrs&&&, rr,SessionMaintenanceMixin._write_guards_rejectsk CA   / / ^37 ^KO ^)- ^NR ^V\ ^ 2M  s +77sources exclude_idsexclude_pinnedFheartbeat_staleness_seconds!heartbeat_ownership_grace_secondsrespect_gateway_heartbeatsTc8V^8dQhRRRRRRRRRR R R R RR R /#)rmax_idle_secondsr7rtuple[str, ...]rrrrr8rrrz list[str]r)rs"rrrosV9.9.#(9.3B9.$9.;?9.&59.,; 9.`d 9.  9.rc aaaa\;QJd.RV4FNK 5M !RV44pV^8:g V'g.#YVrV 'dV ^8g V^,p V eV ^8gT p \P!4;q, p V'dR\R4 2MRp R\R4 R2pR pV'dVR, pW, V 3pR\ V4 R V RV 2o.VOV NV NVO5oVVVV3R lpSP V4;'g.#) uClose session rows orphaned by a dead gateway process (its in-process disconnect grace timer died with it, leaving ``ended_at IS NULL`` forever). Rows of ``sources`` whose ``started_at`` AND canonical last activity are both older than ``max_idle_seconds`` get ``end_reason='startup_orphan_reap'`` (the ``started_at`` predicate protects fresh compression/branch children whose copied activity is old). Only pass sources whose lifecycle the caller owns — never messaging platforms like ``telegram`` (ending those triggers a routing loop). ``exclude_ids`` spares rows this process still holds. Non-destructive: messages kept, row resumable, first-reason-wins. With ``respect_gateway_heartbeats`` a row is reaped only when no live backend (heartbeat within ``heartbeat_staleness_seconds``, default ``2 * max_idle_seconds``) could own it: B owns S if ``B.started_at <= S.started_at + grace`` (default = staleness) — grace covers a migrating backend whose sessions predate its first heartbeat, bounded so a PID-reuse respawn cannot protect rows forever. Disable the gate only for state.db-owned sources. SELECT, live-lease validation and UPDATE run in one ``BEGIN IMMEDIATE`` transaction; active leases/locks spare the row, expired guards are removed so their owner is fenced. See #65194. ``exclude_pinned`` is intended for broad automatic sweeps; pinned rows remain explicitly recoverable. See #60609. c38"TFq'gK VxK R#5ir/r)rZrs& rr]BSessionMaintenanceMixin.sweep_orphaned_sessions..s-11QQs   AND sessionszstarted_at < ? AND rAz| AND NOT EXISTS (SELECT 1 FROM gateway_heartbeats h WHERE h.last_heartbeat >= ? AND h.started_at <= sessions.started_at + ?)z AND source IN (rfc<VPRS 2S4P4pSUu0uFq"'gK \V4kK ppRV4Uu.uF&pWC9gK S PW4'dK$VNK( ppV'g.#VPR\ V4 RS 2\ P !4.VOSO54V#uupiuupi)z.SELECT id FROM sessions WHERE ended_at IS NULLc3F"TFp\VR,4xK R#5i)idN)r)rZrows& rr]OSessionMaintenanceMixin.sweep_orphaned_sessions.._do..s&F#s3t9~~s!zRUPDATE sessions SET ended_at = ?, end_reason = 'startup_orphan_reap' WHERE id IN (z) AND ended_at IS NULL)rurvrrr r) ryrowsxexcludedrvictimsr scope_params scope_sqlr~s & rr._dos<<"PQZP[ \ ,..6hj (39 1qA H9&F&F\&Fs-6:6O6OPT6Zs&FG\ LL!!.w!7 88Nyk[6w66 8N:\s CCC  C 9C r)tuplerrhrr r)r~rrrrrrrsrcs hb_stalenesshb_gracer6r} pin_scopeorphan_predicateheartbeat_paramsrrrsf$$d$$$$ @@rsweep_orphaned_sessions/SessionMaintenanceMixin.sweep_orphaned_sessionss%2u--uu--- q I! 'compression'r?z s.archived = r) r_PRUNE_FILTER_NAMESr:minappend_PRUNE_FILTERSgetrextend isinstancernrhjoin)rrrrfiltersunknownclausesr*r[appliesbuildr new_clauses new_paramss$$$$, r_prune_filter_where+SessionMaintenanceMixin._prune_filter_wheresg,!44 003G /?AB B$"+C*D  NNH I$2 D5KK%E&-&:!U */,' {+ j) %3 h % % NN]3x=/: ; NN?, -||G$f,,rwhole_lineagesc V^8dQhRRRR/#)rrrrrr)rs"rrros bbPTbaqbrc @VedVPR4fQVPR4f>V^8d\RV: R24h\P!4VR,, VR&VP!R RV/VBwrVV'gWV3#V R\ V4 R2.VOVO3#) zTranslate the legacy age window into the shared activity filter, then build WHERE. ``whole_lineages`` (prune) keeps a compression ancestor while any continuation after it is unmatched.r>rDz"older_than_days must be >= 0, got zO: a negative retention builds a future cutoff that matches every ended session.rqrFz AND s.id NOT IN (rfr)rr;rrrb)r~older_than_daysrFrrwherer*s&&&&$ r _prune_where$SessionMaintenanceMixin._prune_wheres  'GKK8L,M,UKK 019" 88KLYYZZ-1IIK?U;R,SG( )00JJ'J = *+CE+J*K1MOaQWOaZ`Oaaarc(V^8dQhRRRRRRRR/#) rrr8rF str | Nonerrrzlist[dict[str, Any]]r)rs"rrros1 L L_ LU_ L.2 LJ^ Lrc VPWWCR7wrVVPR\ RV R2V4Uu.uFp\V4NK up#uupi)zDry-run: sessions a matching prune/archive would touch, oldest first (``older_than_days`` = inactivity threshold: freshest of ``last_activity_at`` / latest message / ``started_at``).rzRSELECT s.id, s.source, s.title, s.model, s.started_at, z~ AS last_active, s.ended_at, s.message_count, s.archived FROM sessions s WHERE z? ORDER BY last_active ASC, s.started_at ASC)r _read_allrBdict)r~rrFrrrr*rs&&&$, rlist_prune_candidates-SessionMaintenanceMixin.list_prune_candidatess|))/7)j %)^^,-.++0'2? BDJ &KL&KcS &KL LLsA  pinned_onlyc(V^8dQhRRRRRRRR/#) rrr8rFrrrrrnr)rs"rrros1 ` `? `S] `)- `EH `rc V'dRVR&VPWV4wrVV'd VR, p\VPRV 2V4^,4#)zCount-only :meth:`list_prune_candidates`; ``pinned_only`` counts rows carrying the pin itself, not the continuations it protects (CLI reports spared pinned sessions).Trz AND COALESCE(s.pinned, 0) = 1&SELECT COUNT(*) FROM sessions s WHERE )rrn _read_one)r~rrFrrrr*s&&&$, rcount_prune_matches+SessionMaintenanceMixin.count_prune_matchessY (,G$ %))/7K   5 5E4>>$J5'"RTZ[\]^__rc$V^8dQhRRRRRR/#)rrr8rFrrrnr)rs"rrro%s( e e eXb e/2 erc VPR4'd^#VPWV4wrERpVPV4'g \R4hRV\ V4R 2p\ VP RV 2V4^,4#)zCount open sessions a matching prune/archive skips (``ended_at`` guard inverted); visibility-only. With ``include_open`` the selection already contains them: nothing is skipped.rrz0prune filter lost its ended-session safety guardzs.ended_at IS NULLNr)rr startswith RuntimeErrorrrnr)r~rrFrrr* ended_guard open_wheres&&&, rcount_open_prune_matches0SessionMaintenanceMixin.count_open_prune_matches%s ;;~ & &))/7K .  ,,QR R)%K0@0A*B)CD 4>>$J:,"WY_`abcddrc$V^8dQhRRRRRR/#)r idle_daysr7rrrrnr)rs"rrro2s"$Z]rc LVeV^8d^#\P!4\V4R,, pV'dR\4 2MRpVPRV R\ R2VP V34pVFpVP V^,4K \V4#)uUArchive every session untouched for ``idle_days`` (freshest of ``last_activity_at`` / latest message / ``started_at``); may archive unended sessions. ``archived = 0`` makes repeats no-ops; only lineage tips (``end_reason <> 'compression'``) are candidates — a stale tip archives its chain via :meth:`set_session_archived`, so an old compressed-away root with a recent continuation is never matched. The hidden canonical Bot Chat (same predicate as :meth:`set_session_pinned`) is exempt: only a deliberate archive may retire it, since archiving releases its registry title to the next Bot open.@zAND rz SELECT s.id FROM sessions s WHERE s.archived = 0 AND COALESCE(s.end_reason, '') <> 'compression' zd AND NOT (COALESCE(s.hidden, 0) <> 0 AND COALESCE(s.title, '') = ?) AND z7 < ? ORDER BY s.started_at ASC )rr7rhrrBCANONICAL_BOT_CHAT_TITLE_auto_archive_lineager)r~rrr} pin_clauserrs&&$ rarchive_stale_sessions.SessionMaintenanceMixin.archive_stale_sessions2s   A uY/'993AtO-./r ~~l#$%  //8 :C  & &s1v .4yrc(V^8dQhRRRRRRRR/#) rrr7min_interval_hoursrnrrrdict[str, Any]r)rs"rrroMs,8;RV rc 0RRR^/p\P!4p\VPR4;'gR4pV'dWV, VR,8dRVR&V#\ RR R 7VP WR 7;qtR&VPR\V44V^8d\PR Wq4V# \\3dRpLi;i \d0p\PR T4\T4TR&Rp?T#Rp?ii;i)zIdempotent, non-destructive auto-archive of sessions idle for ``idle_days``; state_meta ``last_auto_archive`` gates runs within ``min_interval_hours``. Never raises.skippedFrlast_auto_archiveT @state_db_auto_archivephase)rz=state.db auto-archive: archived %d session(s) idle >= %s daysz state.db auto-archive failed: %serrorN) rr7get_metar:r;rrset_metarloggerinfo Exceptionwarning) r~rrrresultr6lastrexcs &&&& rmaybe_auto_archive*SessionMaintenanceMixin.maybe_auto_archiveMs #,UJ!B '))+C T]]+>?FF3G %7$%>>$(y!  $E1H I,0,G,G ,G,q qHj) MM-s3x 8!| SU]  'z*    ' NN=s C!#hF7O  'sLCCCC C%ACCCCC D&$DDc 0V^8dQhRRRRRRRRR R R R /#) rrr8rFrrlrmexclude_active_write_guardsr deleted_idsOptional[list]rrnr)rs"rrrols:..o.J.%3.Y].$2.IL.rc daaa a a VPR4'd \R4hSPWVRR7wo o .o VV VV V 3RlpSPV4pV'd\ SS RVR7^RIHp V !S4S Fp SPW:4K VeVPS 4V#) aDelete ended sessions inactive for ``older_than_days`` (an explicit ``started_before`` / ``last_active_before`` overrides it; None = no implicit bound) matching the filters. Children outside the window are orphaned (parent NULLed), not cascade-deleted. With *sessions_dir*, transcript files are removed outside the DB transaction. ``exclude_active_write_guards`` (automatic maintenance) skips rows under a live turn lease or compression lock while expired/dead holders are reclaimed and fenced. A compression ancestor is deleted only together with every continuation after it (``whole_lineages``). ``deleted_ids`` (the owning gateway) receives the removed ids, so it can retire their in-memory routes and live sessions after the commit.rzJprune_sessions() never deletes open sessions: include_open is archive-onlyTrc2<VPRS 2S 4pVP4Uu0uF q"R,kK ppS'dVS PW4,p^RIHpHpV!V\ V44pV!V4V'g^#\V4Fap\V4pVPRV R2V4VPRV R2V4VPRV R2V4S PV4Kc S PV4\V4#uupi)z"SELECT s.id FROM sessions s WHERE r)prune_retired_tombstonesrszIUPDATE sessions SET parent_session_id = NULL WHERE parent_session_id IN (rfz*DELETE FROM messages WHERE session_id IN (rt) rurvrrwr%rssortedr r rrxr) rycursorr session_idsr%rsr|phr rr~r where_paramss & rr3SessionMaintenanceMixin.prune_sessions.._do~s \\$Fug"NP\]F060AB0At990AKB*t00CC b)${0CDK $T *#K0"5) hikhllmnpuv I"QOQVW A"QGO""5) 1  4 4T :{# #!CsDprunerr) rr;rrrrrrr)r~rrFrlr r!rrcountrrrrr*sf&&&f&, @@@rprune_sessions&SessionMaintenanceMixin.prune_sessionsls ;;~ & &ij j"//ae/f|!#  $ $&##C(  {7Q] ^<d#C  & &| 9  "   { + rc$V^8dQhRRRRRR/#)rnamesrfail_msgrrr"r)rs"rrros!  ? c n rc  VP4;_uu_4pVPf RRR4R#VUu.uF5p\VPRV 24P 4^,4NK7 upuuRRR4#uupi +'giR#;i \ d!p\ PY%4Rp?R#Rp?ii;i)z_Integer PRAGMAs over the existing connection (never a byte probe); None + debug log on failure.NzPRAGMA ) _read_ctx_connrnrufetchonerrdebug)r~r1r2ryr[rs&&& r _page_pragmas%SessionMaintenanceMixin._page_pragmass !!T::%"!W\\V[dDLL74&)9:CCEaHIV[\"!]"!!  LL ' sOBBBB;B3B5 BB B BB C$B??CcV^8dQhRR/#)rrz Optional[int]r)rs"rrrosAAMArc `VPRR4pVfR#V^,V^,,#)a4``page_count * page_size``: main-file size once the WAL is checkpointed in. Prefer over ``os.path.getsize`` when reporting a VACUUM: in WAL mode the rewrite lands in ``-wal`` and the checkpoint is refused while another connection holds a read-mark, so a stat() delta understates the win and can go negative.z"Could not read logical DB size: %sN) page_count page_sizer8r~valuess& rlogical_size_bytes*SessionMaintenanceMixin.logical_size_bytess4 ##$?Aef~t@6!9vay+@@rcV^8dQhRR/#)rrr8r)rs"rrros ] ] ]rc VPRR4pVfR#V^,^8dV^,V^,, #R#)uReclaimable fraction (``freelist_count / page_count``) gating VACUUM in :meth:`maybe_auto_prune_and_vacuum`; None = fall back to the time throttle. ``PRAGMA freelist_count / PRAGMA page_count`` read over the existing connection (never a byte-level probe of the live file — see ``sqlite_safe_read``). This is what VACUUM would actually give back; it is the gate :meth:`maybe_auto_prune_and_vacuum` uses to decide whether a full rewrite pays off (#54189). z!Could not read freelist ratio: %sNr )r<freelist_countr>r?s& r_freelist_ratio'SessionMaintenanceMixin._freelist_ratiosE##$DFij~t\VAYQR]F1Iq ,A\X[\rc$V^8dQhRRRRRR/#)rmoderr2rNoner)rs"rrros!((C(3(4(rc VPPRV R24R# \d!p\P Y#4Rp?R#Rp?ii;i)zPRAGMA wal_checkpoint(rfN)r5rurrr7)r~rIr2rs&&& r_try_checkpoint'SessionMaintenanceMixin._try_checkpointsB ( JJ  !7vQ? @ ( LL ' ' (s# AA  AcV^8dQhRR/#)rrrnr)rs"rrrosrc VP4^pVP4pVP ;_uu_4VP 4VPfVPRR7VPRR4VPPR4VPRR 4VP4RRR4V# \d!p\P RT4Rp?LRp?ii;i +'giT#;i) uJVACUUM to reclaim space after large deletes (SQLite never shrinks on its own). Takes an exclusive lock — callers must ensure no other writers are active. FTS5 segments are merged first (:meth:`optimize_fts`) so their pages are reclaimed too; returns the number of FTS indexes optimized (0 on merge failure / no FTS). A quarantined handle (corrupt image, replaced file, lost WAL generation) raises before any rewrite: a VACUUM reads every page and commits the result back, turning contained damage into an amplified one (#105670). Same guard ``_execute_write`` applies to every write.z%FTS optimize before VACUUM failed: %sNwrite)contextPASSIVEz1WAL checkpoint (PASSIVE) before VACUUM failed: %sVACUUMTRUNCATEz1WAL checkpoint (TRUNCATE) after VACUUM failed: %s) _raise_if_db_corrupt optimize_ftsrrr_lock_raise_if_db_replacedr5_reopen_after_close_lockedrLru_record_db_file_identity)r~ optimizedrs& rvacuumSessionMaintenanceMixin.vacuums !!#  I))+IZZZ  & & (zz!///@  ,_ ` JJ  x (  -` a  ) ) + I NNBC H H I Zs#CBC0 C- C((C-0 D c4V^8dQhRRRRRRRRRRR R R R /#) rretention_daysrnrr\rrlrmmin_vacuum_interval_daysmin_vacuum_freelist_ratior7rr r)rs"rrrosQll!l ``min_vacuum_freelist_ratio`` so a small prune on a dense multi-GB database never triggers a full rewrite. Stale-open reconciliation: cron/kanban/subagent/one-shot CLI rows never set ``ended_at`` when their process dies and prune only deletes ended rows, so after pruning, open rows from :attr:`_AUTO_PRUNE_STALE_OPEN_SOURCES` older than ``retention_days`` are closed (``startup_orphan_reap``); they stay resumable and age from their close. Returns ``{"skipped", "pruned", "closed", "vacuumed"}`` plus ``"freelist_ratio"`` when a VACUUM was considered and ``"error"`` on failure. Records the last run timestamp in state_meta so subsequent calls within ``min_interval_hours`` no-op. Designed to be called once at startup from long-lived entrypoints (CLI, gateway, cron scheduler). See #54189. When *sessions_dir* is provided, on-disk transcript files (``.json`` / ``.jsonl`` / ``request_dump_*``) for pruned sessions are removed as part of the same sweep (issue #3015). Messaging and UI sources are never touched here. See #54189. )_release_auto_maintenance_lock"_try_acquire_auto_maintenance_lockr FprunedclosedvacuumedNzstate.db auto-maintenance skipped: sessions.retention_days=%r is outside the allowed range (a whole number of days >= 0); set sessions.auto_prune: false to disable pruningTlast_auto_prunerrstate_db_auto_pruner)rrlr state_db_auto_sweepr)rrrr last_vacuumrqfreelist_ratio)foreign_state_db_holdersin_process_state_db_holders)excludevacuum_skipped_holderszestate.db auto-maintenance: skipping VACUUM, %d other process(es) hold the store or a WAL sidecar (%s)z, c34"TFwrV RV 2xK R#5i):Nr)rZpidtargets& rr]FSessionMaintenanceMixin.maybe_auto_prune_and_vacuum../s/aU`kc3%q0AU`s:NNstate_db_auto_vacuumzstate.db VACUUM failed: %sz_state.db auto-maintenance: skipping VACUUM, only %.1f%% of pages reclaimable (threshold %.0f%%)gY@zgstate.db auto-maintenance: closed %d stale open session(s), pruned %d session(s) inactive for %d days%sz + VACUUMrz$state.db auto-maintenance failed: %sr)hermes_state_repairrcrdrrdb_pathrr=rrr.rr7_AUTO_PRUNE_STALE_OPEN_SOURCESrrFhermes_state_holdersrmrnr7rr\rrrr)r~r_rr\rlr`rarcrdrmaintenance_lockr6 since_prunererf since_vacuum vacuum_dueratiormrnholdersrs&&&&&&& rmaybe_auto_prune_and_vacuum3SessionMaintenanceMixin.maybe_auto_prune_and_vacuums0. k"+UHa1jZ_!`  !^a%7 NNi !%F9 M=dllK  # $F9 ME =))+C(mmLL"R!&0IE0QS MM+SX 6! JKPVWaPbPbhjl ++; < %%J'CSIIJ ' NNA3 G!#hF7O ' ++; K94L9K>>L L: $L50L=5L::L== Mrr/)tuidesktopsubagent)NN)rvT)ZNNFN)__name__ __module__ __qualname____firstlineno____doc__rrrr staticmethodrrrrrrrr.r8rArFrLr\r r__static_attributes__rrrrjrjnsU :r 9.Ec9.')9.BG9.8<9.>B 9.gk 9.v-$-W\-6;-RW--@bW\b$ L5: L L `05 ` ` eQU6>.` A ]( <%'"UY'+R+Illrrjr/>rrr)r),r __future__rloggingrpathlibrtypingrrrrrr hermes_state_commonr r r r rrr rhermes_startup_watchdogr getLoggerrrB _TOKENS_SQL _COST_SQLr"r+r4r=rr!r frozensetrrarbrgrhrjrrrrsWW" ==<   > *+C0L B ." :9')T*:W*D%EFy$'9":;i&9!:; xn-.8T"SUZ[\8T"4568/0Y%; <=Y%; <=8T"SUZ[\4 MsyyYZ$/0$/0(D!234Hd#Y[`ab9d;#89:9d;#89:DW!456DW!456y$'L"MNy$'L"MN58 F~FFI||: