+ jHj Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIH t H t H t H t H t Ht^RIHtHtHtHtHt^RIHt^RIHtHtHtHtHtHtHtH t H!t!H"t"H#t#H$t$^RI%H&t&H't'^RI(H)t)^R I*H+t+H,t,H-t-H.t.H/t/H0t0H1t1H2t2H3t3^R I4H5t5^R I6H7t7^R I8H9t9H:t:H;t;Ht>H?t?]P!R 4tARtB]C!]P!R]BPR^4^,PR^4^,44tF]G!]F40R3m,tHRtIRtJRtKRtLR]3!RR],4 R2tMR]L,tNR]L,R,tORtPRtQRtRR tSR!tTR"tUR#tVR$tW]X!4tYR%R&ltZR'R(lt[R)R*lt\R4R+R,llt]R-R.lt^R/R0lt_!R1R2]5]74t`R#)5zTranscript persistence for SessionDB: message append/replace/rewind, reactions, resume assembly, replayed-user dedupe. Mixin bound via the MRO, built on SessionDB's _read_ctx/_execute_write/_read_* primitives.) annotationsN)AnyDictListOptionalSetTuple)_DB_PERSISTED_MARKERMODEL_ONLY_DISPLAY_METADATA_KEY_is_checkpoint_item_newest_checkpoint_carriersplit_user_originated_turn)sanitize_context) CANONICAL_ROWDATA_USEDB_ROW_SNAPSHOT lift_data_use MESSAGE_UID TOOL_CALL_UIDTOOL_CALL_UIDSindex_tool_call_uidsmessage_uid_or_noneresolve_tool_call_uidmint_uidstamp_message_uid)_sanitize_surrogatescoalesce_tool_call_id coerce_epoch) _COMPRESSION_LOCK_ROW_SQL_ENDED_ROW_SQL_RESET_END_REASONS_RESET_END_REASONS_SQL_ended_by_compression_json_or_legacy_reset_child_sql _placeholders_sql_json_extract)SessionDetachedResultsMixin)SessionTodoResultMixin)_absorbed_uids_json_restore_identity_columns_stable_tool_key_tool_call_uid_map_tool_call_uid_or_none_tool_call_uids_json _uid_list hermes_stateavINSERT INTO messages (session_id, role, content, tool_call_id, tool_calls, tool_name, effect_disposition, timestamp, token_count, finish_reason, reasoning, reasoning_content, reasoning_details, codex_reasoning_items, codex_message_items, platform_message_id, observed, _compressed_summary, active, api_content, display_kind, display_metadata, display_identity, message_uid, absorbed_message_uids, tool_call_uids, tool_call_uid) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)z\w+()z INSERT INTO conversation_generations (source, session_key, generation) VALUES (?, ?, 1) ON CONFLICT(source, session_key) DO UPDATE SET generation = conversation_generations.generation + 1 zLSELECT holder, expires_at FROM session_turn_leases WHERE conversation_id = ?zADELETE FROM compression_locks WHERE session_id = ? AND holder = ?z" AND (active = 1 OR compacted = 1)z AND COALESCE(display_metadata$.z, 0) = 0zLSELECT display_metadata FROM messages WHERE id = ? AND session_id IN ({ids})z+SELECT 1 FROM messages WHERE session_id = ?z@ AND (display_order IS NULL OR display_identity IS NULL) LIMIT 1zGSELECT id FROM messages WHERE session_id = ? AND active = 1 ORDER BY idzSELECT id, role, content, tool_call_id, tool_calls, message_uid FROM messages WHERE session_id = ? AND active = 1 ORDER BY id LIMIT ?z:UPDATE sessions SET message_count = ?, tool_call_count = ?zGUPDATE sessions SET message_count = 0, tool_call_count = 0 WHERE id = ?z5UPDATE messages SET display_metadata = ? WHERE id = ?zQUPDATE messages SET active = 0, compacted = 1 WHERE session_id = ? AND active = 1zSELECT id, codex_reasoning_items FROM messages WHERE session_id = ? AND active = 1 AND role = 'assistant' AND id < ? AND codex_reasoning_items LIKE '%"compaction"%'z:UPDATE messages SET codex_reasoning_items = ? WHERE id = ?c$V^8dQhRRRRRR/#)valuerdefaultfloatreturn)formats":/home/ubuntu/.hermes/hermes-agent/hermes_state_messages.py __annotate__r?Os! , ,S ,5 ,U ,c>\VRR7pVfV#VR8XdR#T#)uExplicit message timestamp (datetime or number) or *default* when invalid or outside the sane epoch window — the write-side twin of the readers' ``coerce_epoch``: a bad row is never persisted.message timestampfieldgr)r8r9results&& r>_coerce_timestamprFOs.%': ;F ~C-3+V+r@c V^8dQhRRRR/#)r7 tool_callsrr;r<)r=s"r>r?r?[s##r@c\V\4'gV#\P!V4# \P\ 3d.u#i;i)zktool_calls is a list (live agent) or JSON string (import/export); parse so json.dumps never double-encodes.) isinstancestrjsonloadsJSONDecodeError TypeErrorrHs&r>_parse_tool_callsrQ[sH j# & &zz*%%  ) , s0AAc V^8dQhRRRR/#)r7rHrr;intr<)r=s"r>r?r?esaa#a#ar@cTVf^#\V\4'd \V4#^#N)rJlistlenrPs&r>_tool_calls_countrXes)"1`JzSWr?r?is&RRRcR#Rr@cr\V4p\V\4'd \V4#V'dV#^#)z]Count of a stored ``tool_calls`` column: list length, *scalar* for a truthy non-list, else 0.)rQrJrVrW)rZr[parseds&& r>_tool_calls_lenr^is. s #F$VT223v;Q6QqQr@c V^8dQhRRRR/#)r7r8rr;r<)r=s"r>r?r?osLLSLSLr@cH\V\4'd \V4#T#)zPLone surrogates make sqlite3 raise UnicodeEncodeError and abort the whole write.)rJrKrr8s&r>_scrub_surrogatesrbos*4UC*@*@  &KeKr@c V^8dQhRRRR/#)r7nowr:r;boolr<)r=s"r>r?r?tsffEfdfr@cf^RIHp\VR,4V8*;'gV!VR,4#)zJA lock/lease row whose holder is expired or a provably dead local process.)(_compression_lock_holder_process_is_dead expires_atholder)r1rgr:)rowrdrgs&& r> _stale_holderrkts/E \" #s * e e.VWZ[cWd.eer@c]tRt^ztRtRRlt]RRl4t]RRl4t] RR l4t ] R R l4t ] R R l4t RRRllt RRlt] RRl4tRRltRRlt] RRl4tRRRlltRRR lltR!RR"RR#R/R$ltR%]R&3tR'R(ltR)R/R*R+lltR,R-ltR.R//R0R1lltR2R3ltR4R5ltR.R//R6R7lltR8R/R9^R:R;/R<R=lltR>R?lt R@RAlt!RBRClt"RDR;/RERFllt#RGRHlt$RIRJlt%RRKRLllt&RMRRNRRORRPR/RQRRllt']RSRTl4t(RURVlt)] RWRXl4t*RYRZlt+R[R\lt,R]R^lt-R_R/R`Rallt.RbRclt/RRdRellt0RfRRgRRhRRi^RjRRkRRlRRmR/RnRollt1RpRqlt2RrRslt3RtRult4RvRwlt5RxRylt6RzR{lt7R|R}lt8] R~Rl4t9] RRl4t:RR/RRllt;RRltRRlt?] RRR9^RR/RRll4t@RRltARRltB] RRl4tCRRRlltDRRltERRRlltFRRltGRR/RRlltHRRltIRRRlltJRRRlltKRRltLRRRR/RRlltMRRltNRRltORRltPRR/RRlltQRRR/RRllltRRRltSRRltT] RRl4tU] RRl4tV] RRl4tWRRltX] RRl4tYRRltZRRRPRRR/RRllt[RRRllt\RRlt]RRlt^RR/RRllt_RRlt`RRltaRRltbRRRR;/RRlltcRtdR#)SessionMessagesMixinzkMessage append/replace/rewind, reactions, resume conversations, replay dedupe (detached results: the base).c$V^8dQhRRRRRR/#)r7 session_idrK end_reasonr;Noner<)r=s"r>r?!SessionMessagesMixin.__annotate__}s' F Fc Fs FW[ Fr@c aV\9dR#VPRV34P4oSfR#V3RlR4wrEV'd$V'dVP\WE34R#R#R#)aAdvance the peer's conversation generation past a boundary, in the txn that writes it. Only ``_RESET_END_REASONS`` count (compression continues one conversation). Never derived from session rows (deletes/prunes could re-emit a retired affinity identity); it only ever increments.Nz5SELECT source, session_key FROM sessions WHERE id = ?c3x<"TF/p\SV,;'gR4P4xK1 R#5i)N)rKstrip).0krjs& r> ESessionMessagesMixin._bump_conversation_generation..s.\B[Qs3q6<_bump_conversation_generation2SessionMessagesMixin._bump_conversation_generation}sc / / llRU_Tabkkm ; \B[\ k LL-/D E"6r@c V^8dQhRRRR/#r7contentrr;r<)r=s"r>r?rrs66c6c6r@c \V\4'd0\V4pVPVP4'gV#M'Ve"\V\ \ \34'dV#VP\P!V4,# \\3d\\T44u#i;i)ukSerialize list/dict content (multimodal parts) as a sentinel-prefixed JSON string (sqlite3 binds only scalars). Lone UTF-16 surrogates (unsanitized web-scraped tool results) are scrubbed here: left raw, sqlite3 raises UnicodeEncodeError and the session silently stops persisting. Pairs with :meth:`_decode_content`. A literal string carrying the reserved ``\x00json:`` prefix is indistinguishable from stored structured content, so it is JSON-string-wrapped (decoded back verbatim on read) instead of written raw — a crafted import can't smuggle the marker in and have the read path decode attacker-chosen structure.) rJrKr startswith_CONTENT_JSON_PREFIXbytesrSr:rLdumpsrO ValueErrorclsrs&&r>_encode_content$SessionMessagesMixin._encode_contents gs # #*73G%%c&>&>??@_ 7UC4G H HN 6++djj.AA A:& 6'G 5 5 6s.&B%B=<B=c V^8dQhRRRR/#rr<)r=s"r>r?rrsccr@c \V\4'dEVPVP4'd$\ V\ VP4RVR4#V#)zReverse :meth:`_encode_content`; returns scalars unchanged. Fail closed: a reserved-prefix string that isn't valid JSON (a legacy/malformed marker row) returns the raw string.NzCFailed to decode JSON-encoded message content; returning raw string)rJrKrrr$rWrs&&r>_decode_content$SessionMessagesMixin._decode_contentsU gs # #(:(:3;S;S(T(TGC(@(@$A$BCWUW Wr@c V^8dQhRRRR/#)r7r4rr; Optional[str]r<)r=s"r>r?rrs,,3,=,r@c V'gR#\V\4'dL\V\R4pV\JdR#\V\4'g\ P R4R#MA\V\4'g,\ P R\V4P4R#\P!V4#)zSerialize ``display_metadata`` for its TEXT column; an already-serialized JSON string (import/replace paths) is not double-encoded.Nz+Ignoring non-JSON display metadata on writez-Ignoring non-object display metadata on writez6Ignoring unexpected display metadata type on write: %s) rJrKr$_INVALIDdictloggerwarningtype__name__rLr)r4s&r>_encode_display_metadata-SessionMessagesMixin._encode_display_metadatas  & , ,'(8(Dqr 8+.55NO6,d33 NNSUYZjUkUtUt uzz*++r@c V^8dQhRRRR/#)r7rZrr;Optional[dict[str, Any]]r<)r=s"r>r?rrsc.Fr@c VfR#Tp\^4F,p\V\4'gK\V\R4pK. V\JdR#\V\ 4'g\ PR4R#V#)zDecode a ``display_metadata`` column to a dict (never raw TEXT: the desktop does ``'task_count' in meta``). Pre-guard rows are double-encoded, so a second string layer is unwrapped.Nz0Ignoring invalid display metadata on message rowz3Ignoring non-object display metadata on message row)rangerJrKr$rrrr)rZmeta_s& r>_decode_display_metadata-SessionMessagesMixin._decode_display_metadatasj ;qA$$$h0bc 8 $%% NNP Q r@c V^8dQhRRRR/#)r7r8rr;rr<)r=s"r>r?rrs__C_M_r@c rV'gR#\V\4'dV#\P!V4#)aSerialize a structured reasoning field for its TEXT column. Strings are stored as-is: round-trips (get_messages -> replace_messages) hand back raw TEXT; re-dumping would double-encode it and reasoning-replay consumers (``isinstance(..., list)``) would drop it.N)rJrKrLrras&r>_reasoning_json_text)SessionMessagesMixin._reasoning_json_texts, !t^ 5#0F0Fu^DJJW\L]^r@Nr@Fc8V^8dQhRRRRRRRRRR R R R R R R /#)r7rorKcompression_lock_holderrturn_lease_holderturn_lease_ttl_secondsr:reject_active_turn_leaserereject_active_compression_lockallow_closed_compression_parentr;rqr<)r=s"r>r?rrsO7<7_check_transcript_write_guards3SessionMessagesMixin._check_transcript_write_guardss C` *,,'@:-PYY[K& diik::LL!= X`La?bc *.EE;":.0VWYY  8"BB4TOLL!46HIRRTE))+C =E(O7H$H3QR\Q_`bb|,-4LL"Cs3.D(EFFkm"$U003]^h]klnn g$Ho68 nzm!L!U!U!W X XbA/ ; ;bA Xr@c4V^8dQhRRRRRRRRRR R R R R /#)r7rorKrolemsgdict[str, Any]rHrmessage_timestampr:keep_reasoningrer;tupler<)r=s"r>r?rr sJ D Dc D D> D_b D  D59 D>C Dr@c aaaa RpVV3Rlo SPSPR44pV'd\P!V4MRp \ SPR44p SPR4p SP\ 4'dL\ V \\R434'd+/T ;'g/C\ \S\ ,4/Cp SPV 4p RVRVRVR SPR 4R V RV R SPR 4RV /p WVSPR 4WSPR 4VSPR 4SPR4\ S !R44\ S !R44. V V3RlR4OSPR4;'gSPR4NSPR4'd^M^NSPR4'd^M^N^NV!SPR44NV!SPR 44NV NSPSPV 44N\S4N\S4N\S4N\!S4N5#)zBind values for ``_INSERT_MESSAGE_SQL`` from one message dict (*tool_calls* already parsed; *keep_reasoning* False NULLs every reasoning column). ``platform_message_id`` falls back to ``message_id`` (yuanbao's message-dict convention).cH\V\4'd \V4#R#rU)rJrKrb)vs&r>:SessionMessagesMixin._message_row_params..sAs9K9K!21!5!UQU!Ur@c:<S'dSPV4#R#rUget)keyrrs&r>rrs!IT!Ir@rN tool_namer4r timestamp tool_call_idrH display_kindeffect_disposition token_count finish_reason reasoningreasoning_contentc3R<"TFpSPS!V44xK R#5irU)r)rwrx _reasoningrs& r>ry;SessionMessagesMixin._message_row_params..&s+^\!'' 1 66\s$'platform_message_id message_idobserved_compressed_summary api_contentreasoning_detailscodex_reasoning_itemscodex_message_items)rrrLrrbrrJrrrVr_display_identity_display_dedupe_keyrr*r/r.)rrorrrHrr _str_or_noneencoded_contentencoded_tool_callsencoded_tool_namer4 identity_rowrsf&&f&&d @r>_message_row_params(SessionMessagesMixin._message_row_params s V I ..swwy/AB7ATZZ 3t-cggk.BC77#56 778  ,P!Q!QZ#3#9#9rZHd3x=FYZ 889IJ D)_kCT CGGN3\CU *NCGGN3J  GG( )+TVYV]V]^mVn j5 68I*UhJi8j D^\^ D GG) * C Ccggl.C D$$A! D36'':O2P2PQVW DZ[ D / 0 D3?sww~?V2W D  D#44T5M5Ml5[\ D  $ D':#&> D ! % D(>c'B D Dr@c(V^8dQhRRRRRRRR/#) r7rrrHr batch_indexzdict[str, str]r;rqr<)r=s"r>r?rr0s*))>)s)Q_)dh)r@c VPR4pVR8XdcV'd[\V4pVF,p\V4pV'gKWd9gK \4WF&K. V'd W@\&\ W 4R#VR8XdVP 4R#VR8Xd>\V4f/\W PR44pV'd Wp\&R#R#R#R#)aPer-occurrence tool-call identity at insert: an assistant row gets a uid for every tool call that has none yet (``_tool_call_uids``, keyed by the effective provider id, which stays untouched); a tool-result row that has none is resolved through *batch_index*, the calls the same batch's assistant rows named. A result flushed in a later batch is resolved from the live list by the flush (``tool_call_uid_from_history``) or, on restore, from the preceding assistant row.r assistantusertoolNr) rr-rrrrclearr.rr)rrHrruidstccall_iduids&&& r>_stamp_tool_call_uids*SessionMessagesMixin._stamp_tool_call_uids/swwv ; :%c*D /37w2$,JDM!&*N#  2 V^     V^ 6s ; C' WW^5LMC%(M"!D^r@c(V^8dQhRRRRRRRR/#)r7rorKrrrr:r;r<)r=s"r>r?rrGs, 9 9 9$2 9GL 9  9r@c  VPRR4pVPVVV\VPR44VVR8HR7p\\ \ V44#)zGSerialize one live message with the exact durable shape used by INSERT.runknownrHrr)rrrQrzip_MESSAGE_WRITE_COLUMNS)rrorrrparamss&&&& r>_serialized_message_row,SessionMessagesMixin._serialized_message_rowGscwwvy)))    cggl3 4 ;. * C.788r@cV^8dQhRR/#)r7r;rr<)r=s"r>r?rrVs&&.&r@c RVR,RVPVR,4/pRFpW,fKW,W#&K VR,'d\VR,.R4VR&VR,eVR,VR&VR,VR&VR,'dR VR&VR ,'dR VR &\W4VR ,e VR ,VR &VR ,e VR ,VR &VR ,e!VPVR ,4pVeWBR &VR,R8XdRRFpW,fKW,W#&K RF,pW,'gK\W,RRV R24W#&K. V#)zWDecode one durable row without replay dedupe, alternation repair, or content stripping.rrNrHz=Failed to deserialize repaired tool_calls, falling back to []rrrTrrrr4rzFailed to deserialize repaired , falling back to None)rrrrr)rrr)rr$r+r)rrjrcolumnmetadatas&& r>_decoded_repair_row(SessionMessagesMixin._decoded_repair_rowVs CK t++C N; jF{&!k j |   (L!2'f!C  $ % 1 #$9 :C ),-B)CC% & z??"C O $ % %)-C% &!#+ }  )!$]!3C  ~  *"%n"5C  ! " .44S9K5LMH#*2&' v;+ %<;*"%+CK=`;;"* T-LVHTj+k#CK`  r@c ,V^8dQhRRRRRRRRRR /#) r7rorKinsertedrSrHunitrer;rqr<)r=s"r>r?rrs9 r r r rQT r_c rhl rr@c V'dRMRV33wrVV^8d VPRV R2.VOVNVN54R#V^8dVPRV R2.VOVN54R#R#)zXBump sessions.* counters after an insert; *unit* bakes the ``+ 1`` literal into the SQL.?z4UPDATE sessions SET message_count = message_count + zK, tool_call_count = tool_call_count + ? WHERE id = ? WHERE id = ?N)1r<)r})rrorrHrincrs&&&&$ r>_bump_session_counters+SessionMessagesMixin._bump_session_counters~s$(icH;-?  > LLHNJM1&1*1j1 3\ LLFse=Y[p]c[peo[p rr@c4V^8dQhRRRRRRRRRRR RR R R RR RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R!RR"R#/#)$r7rorKrr str | NonerrHrrrz int | Nonerrrrrrrrrerrrrrrr4rrrrr: message_uidr;rSr<)r=s"r>r?rrs. V V V%( V3= VQ[ Vps V  V6@ VXb VwA V& VBE Veh V! V?I V\` V * V HL V ad V # V :G V3 VUb V) VJO V# V/2 Vr@c  naaaaaaa\\44pSPV4VR&\S4o\ V\ P !44p\ V4SPVS/4SPSVVSVRR7oVVVVVVV3RlpSPVSPR7#)aAppend one message; returns the row id and bumps the session counters. ``platform_message_id``: the platform's own id. ``api_content``: byte-fidelity sidecar, the exact string sent to the API when it differed from ``content``, stored as sent except lone surrogates. ``message_uid``: the id a caller that keeps the message as a live dict already stamped on it (``stamp_message_uid``); minted when absent, but then only the row carries it.r4Trc<SPVSSSSR7VP\S4PpSP VS^\ S4RR7V#)rrTr)rr}_INSERT_MESSAGE_SQL lastrowidrrX) rmsg_idrrrrorHrrs & r>_do0SessionMessagesMixin.append_message.._dos`  / /jBY"3Lb 0 d\\"5v>HHF  ' 'j!=Nz=Zae ' fMr@ patience_s) rlocalsrrQrFrrrr_execute_write_TRANSCRIPT_WRITE_PATIENCE_S)rrorrrrHrrrrrrrrrrrrrrrr4rrrrrrr#rsff&&&f&&&&&&&&&&&&&&&&fff& @r>append_message#SessionMessagesMixin.append_messages68n"&"?"?@P"Q &z2 -iE# ""3 B7)) c:/@QU*W  ""343T3T"UUr@c4V^8dQhRRRRRRRRRR R R R R /#)r7rorKmessageslist[dict[str, Any]]rrr chunk_rows Optional[int]rr:r;rSr<)r=s"r>r?rrsQDDD)=DXeD(D=JD!&D36Dr@c  daaaaaaaS'g^#Sev\S4S8df/pSF.pSPV\VPR44V4K0 \ VVVVVVV3Rl\ ^\S4S444#SP VVVVVV3RlSSPR7#)zAppend *messages* in ONE write txn (all rows land or none, guards run once); returns the inserted count. ``chunk_rows`` bounds txn size for LARGE copies (branch seeds; FTS triggers run per row).rHc 3b<"TF$pSPSSWS,SSSR7xK& R#5i)rrrN)append_messages_batch) rwstartr/rr-rrorrs & r>ry=SessionMessagesMixin.append_messages_batch..sNBAE11*huU_M_>`,CWh+A2CCAs,/c 2<SPVSSSSSR7#)r3)_append_messages_in_transaction)rrr-rrorrs&r>r.s'4;_;_ *h@W/H^<`<`r@r%)rWrrQrsumr_execute_transcript_writer)) rror-rrr/rtool_uid_indexrs fffffff r>r4*SessionMessagesMixin.append_messages_batchs   !c(mj&@-/N**30A#'',BW0XZhi BB#1c(mZ@BB B--/`/` !B!B.D Dr@rrrc  aaSPVSVWVR7^RIHpV!VSVSPSPVV3RlSP R7pSP VSV4wrSPVSWRR7V #)r)#resolve_and_repair_transcript_batchc(<SPSW4#rU)r)rrrros&&r>rFSessionMessagesMixin._append_messages_in_transaction..s8T8TC9r@)encode_content_fndecode_content_fnserialize_message_fn decode_row_fnFr)ragent.transcript_repairr?rrr _insert_message_rowsr) rrror-rrrr? inserted_rowsrtool_calls_totals f&f&$$$ r>r84SessionMessagesMixin._append_messages_in_transactions ++D*>U/ , `O;   "22"22"22  &*%>%>tZQ^%_" ##D*hW\#]r@_row_idrcV^8dQhRR/#)r7r-r.r<)r=s"r>r?rrs6Jr@c \aaaaaaa\4oSUau.uFKo\;QJd".VV3RlSP4FNK 5M!VV3RlSP44NKM upoRVVVV3RlloVV3RlpSP!V3/VB#uupi \d S!4hi;i)a``_execute_write(fn)`` for callbacks that stamp row state onto the caller's *messages* (every :meth:`_insert_message_rows` caller that passes caller-owned dicts; rewind and import insert fresh copies). Each attempt, and a final failure, restores the caller's ``_row_id`` / digest / timestamp: a rolled-back insert's id is reused by SQLite, so a stale stamp would make a later flush adopt another writer's row and drop this message.c3H<"TFpSPVS4xK R#5irUr)rwrx_absentms& r>ryASessionMessagesMixin._execute_transcript_write..s!K6J155G,,6Js"cV^8dQhRR/#)r7r;rqr<)r=s"r>r?DSessionMessagesMixin._execute_transcript_write..__annotate__s ) )$ )r@c<\SS4FXwrVP\R4\SPV4F#wr#VSJdVPVR4KW0V&K% KZ R#rU)rpopr_ROW_STATE_KEYS)rstaterr8rOr- pre_staters r>_restore@SessionMessagesMixin._execute_transcript_write.._restores[!(I6  t,"%d&:&:E"BJC'T*#(C #C7r@c"<S!4S!V4#rUr<)rrYfns&r>_attempt@SessionMessagesMixin._execute_transcript_write.._attempts Jd8Or@)objectrrVr( BaseException) rr\r-kwargsrPr]rOrYrXs fff,` @@@r>r;.SessionMessagesMixin._execute_transcript_writes (U]^U]PQUUKd6J6JKUUKd6J6JKKU]^  ) )  &&x:6: :_   J  sBAB?BB+r4c 0V^8dQhRRRRRRRRRRRR /#) r7rorKrrrr4rr;rer<)r=s"r>r?rrs;((3(QT(_b(?B(C[(gk(r@c zaaaaaaS'dS'd S'gR#VVVVVV3RlpSPV4#)a Stamp presentation metadata on this turn's freshly persisted row (newest active row by content, right after the serial turn flushed); the model still sees ``role``/``content`` unchanged, so producer provenance survives without classifying by content at render time.Fc<VPRSSSPS434P4pVfR#VPR\S4SP S4V^,34R#)zqSELECT id FROM messages WHERE session_id = ? AND role = ? AND content = ? AND active = 1 ORDER BY id DESC LIMIT 1FzGUPDATE messages SET display_kind = ?, display_metadata = ? WHERE id = ?T)r}rr~rbr)rrjrrr4rrros& r>r#JSessionMessagesMixin.set_latest_matching_message_display_kind.._dosv,, JT4#7#7#@ACCK8: { LLb"<0$2O2OP`2acfghcij lr@r()rrorrrr4r#sffdddd r>(set_latest_matching_message_display_kind=SessionMessagesMixin.set_latest_matching_message_display_kinds,    ""3''r@c V^8dQhRRRR/#)r7rrr;r.r<)r=s"r>r?rrs dd#;d@Tdr@c T;'g/PVP4p\V\4'd+VUu.uFp\V\4'gKVNK up#.#uupi)zEWell-formed (dict) reactions stored under ``REACTIONS_METADATA_KEY``.)rREACTIONS_METADATA_KEYrJrVr)rr reactionsrs&& r>_reaction_list#SessionMessagesMixin._reaction_listsTZZR$$T%@%@A @J9VZ@[@[9<9a 1d(;9<caccr?rr s2((s(C(P](%((6T(r@c aaaaaaV'dSfR#SPVS4wooVVVVVV3RlpSPV4#)aSet (``emoji=None``: clear) *author*'s reaction. Tapback semantics: one per author per message; the same emoji again clears, a different one replaces. Returns the list after the write, or ``None`` for a row outside the session's visible resume lineage (see ``_reaction_row_query``).Nc <VPS S 4P4pVfR#S PV^,4;'g/pS PV4pVUu.uFqDP R4S8wgKVNK pp\ V3RlV4R4pS'dNVeVP R4S8wd4VP R\S4RSR\P!4/4V'dWRS P&MVPS PR4TP\V'dS PV4MRS 34V#uupi)Nrqc3V<"TFqPR4S8XgKVxK R#5i)rqNr)rwrnrqs& r>ryISessionMessagesMixin.set_message_reaction.._do..s N1EE(Ov4MQQs) )rtat) r}r~rrornextappendrbrrlrU_SET_DISPLAY_META_SQLr) rrjrexistingrnrmpreviousrqrtrsrrsqls & r>r#6SessionMessagesMixin.set_message_reaction.._dos!,,sF+446C{00Q8>>BD**40H$,JHqh60IHIJNNPTUH(*hll7.Cu.L  '+set_message_reaction)SessionMessagesMixin.set_message_reaction sC ^3..z>J V   ""3''r@c$V^8dQhRRRRRR/#)r7rorKrsrSr;r.r<)r=s"r>r?rr$s'eeeSeMaer@c V'dVf.#VP!VPW4!pVe(VPVPV^,44#.#)zget_message_reactions*SessionMessagesMixin.get_message_reactions$sR^3Innd66zRSMP_t""4#@#@Q#HIdbddr@c$V^8dQhRRRRRR/#)r7rorKrsrSr;ztuple[str, tuple]r<)r=s"r>r?rr+s'ddcd3dK\dr@c nVPV4p\P\V4R7V.VO53#)uVA reaction addresses a row the client can SEE, and a display resume materializes the whole compression lineage (active + compacted rows, with row ids) — so a row is "in this session" when its owner is any lineage segment, not only the tip, and a rewound row is not. Explicit ``/branch`` copies keep their own rows (``_resume_lineage_ids``).)ids)_resume_lineage_ids_DISPLAY_META_ROW_SQLr=r&)rrorslineages&&& r>r(SessionMessagesMixin._reaction_row_query+s; **:6$++ g0F+G.Ic[bIcccr@c$V^8dQhRRRRRR/#)r7rorKrqr;r.r<)r=s"r>r?rr3s" ( ( ( (Qe (r@c paaaV'g.#SPV4oVVV3RlpSPV4#)a#Return *author*'s not-yet-surfaced reactions and mark them seen. Reactions are announced on the NEXT user turn (never by rewriting the reacted message: cache-safe); ``seen`` makes it exactly once. Include compaction-archived history that remains visible, but exclude rewound/superseded rows.c~<.pVPR\S 4 R\ R\RRS P,4 R2\ S 44P 4EFYpS PVR,4pV'dVPS P4MRp\V\4'gKYRpVFp\V\4'd.VPR4S8wgVPR 4'dKHR VR &R pS PVR ,4pTPR VR ,RVR,RVPR4;'gRR\V\4'dTMR/4K V'gEK+VP\S P!V4VR ,34EK\ V#)zNSELECT id, role, content, display_metadata FROM messages WHERE session_id IN (r3z AND r4r5z IS NOT NULL ORDER BY idNFrqseenTrrow_ididrrtrutext)r}r&_DISPLAY_ACTIVE_CLAUSEr'rlrfetchallrrrJrVrrr|rKr}r) rpendingrjrrmchangedreactionrrqrrs & r>r#7SessionMessagesMixin.take_unseen_reactions.._do:sG||%,,9',B+C1E[D\],-?HcHcAcdef"%"$)>34<8:>44S9K5LMEIDHHT%@%@At !)T22 )H%h55h9OSY9Y]e]i]ijp]q]q '+HV$"G"223y>BGNN #d)VS['8<(Nr@)rr()rrorqr#rsf&d @r>take_unseen_reactions*SessionMessagesMixin.take_unseen_reactions3s5I**:6 2""3''r@roffset require_textTc ,V^8dQhRRRRRRRRRR /#) r7rorKrrrSrrer;r0r<)r=s"r>r?rrUs2 ' ' 'c 'TW ',0 'rrrrS)rrorrr text_filterrjs&&$$$ r>latest_message_row_id*SessionMessagesMixin.latest_message_row_idUscT)>>&1*LXH^` nn)]*KM s6{ +-s1v&$&r@c V^8dQhRRRR/#)r7rorKr;rr<)r=s"r>r?rras''3'='r@c NVPRV34pV'd V^,#R#)zRole of the newest active user/assistant/tool row, or ``None``. ``session_meta`` / ``system`` rows are transcript bookkeeping stripped before the model sees history, so they must not hide an open user tail from the failed-turn boundary check.zSELECT role FROM messages WHERE session_id = ? AND active = 1 AND role NOT IN ('session_meta', 'system') ORDER BY id DESC LIMIT 1Nrrrorjs&& r>latest_conversation_role-SessionMessagesMixin.latest_conversation_roleas2nn RT^S`bs1v&$&r@c$V^8dQhRRRRRR/#)r7rorKrrSr;rr<)r=s"r>r?rrjs!''3'' 'r@c vV'gR#VPR\V4V34pV'd V^,#R#)zDRole of the active message at *row_id* in *session_id*, or ``None``.NzHSELECT role FROM messages WHERE id = ? AND session_id = ? AND active = 1r)rrorrjs&&& r>get_message_role%SessionMessagesMixin.get_message_rolejsBnngjmntjuxBjCDs1v&$&r@c$V^8dQhRRRRRR/#)r7parent_session_idrKr-r.r;rqr<)r=s"r>r?rrqs#Ochlr@c  \V4UUu.uF?wrE\V\4'gK\VP R4RR7eK=VNKA pppV'gR#/pVP RV34P 4FSpVPVR,VR,VR,VR ,VR ,3.4PVR,4KU VFpW4,p\VP R 44p VP RR 4VPVP R44VP R4V 'd\P!V 4MR\VP R 443p VP V 4p V 'gKV P^4VR&K R#uuppi \dR#i;i) aAdopt the durable parent row's timestamp onto carried handoff rows so the re-inserted child row keeps the original's display identity (see _display_dedupe_key). Idempotent; never overwrites a timestamp the dict already carries; rows with no match keep their caller-supplied/now_ts value. Content identity = _display_dedupe_key's content key minus the timestamp (role, encoded content, tool_call_id, encoded tool_calls, tool_name). Donors are the parent's ACTIVE rows, consumed first-match-wins in id order so two identical-content turns cannot both grab the same parent row. Best-effort: on any error the insert falls back to today's behavior (publish-time stamp) and never breaks publish. rrBrCNzSELECT id, role, content, timestamp, tool_call_id, tool_calls, tool_name FROM messages WHERE session_id = ? AND active = 1 ORDER BY idrrrrHrr) enumeraterJrrrr}r setdefaultr|rQrrLrrbrU Exception) rrrr-ir candidatesdonorsrjrHrqueues &&&& r>_carry_parent_timestamps-SessionMessagesMixin._carry_parent_timestampsqs *3H*=t*=c4(-9#''+:NVi-j!*=Jt79F||FHYG[]]e]e]gh!!3v;IN@SUXYeUf $#&')++16#k2B+C h  k.sww|/DE wwvy143G3GPYHZ3[GGN+zTZZ -CW[%cggk&:;= 35',yy|C $ t&   s:F8F2F2F2 F8"D1F8F82F88 GGprune_checkpointsc(V^8dQhRRRRRRRR/#) r7rorKr-r.rrer;tuple[int, int]r<)r=s"r>r?rrs+%*%*S%*DX%*04%*@O%*r@c  Z\P!4p^;rg/pVFp V PRR4p \V PR44p \V PR4V4p \ V 4VP WV4VP \VPW*WWR8HR74p WR&V PeV PV R&V^, pV\V 4, p\W\4R,pK V'dVPWV4^R I HpV!WV4Wg3#) aeInsert *messages* as fresh active rows in the caller's txn -> ``(inserted, tool_call_count)``. Never touches sessions.* counters (callers reconcile differently); reasoning kept for assistant rows. A caller that re-archives some rows afterwards passes ``prune_checkpoints=False`` and prunes once they are archived again (:meth:`_prune_shadowed_checkpoints`).rrrHrrrrKgư>)stamp_inserted_row_snapshots)rrrQrFrrr}r rr!rXr_prune_shadowed_checkpointsrFr)rrror-rnow_tsrrIbatch_tool_indexrrrHrcurrs&&&&$ r>rG)SessionMessagesMixin._insert_message_rowss' &''+-C7769-D*377<+@AJ 1#''+2F O  c "  & &s8H I,,2D4L4L#3D]hUh5M5jkC 1 }}(!$I MH  1* = = 3d:F)*   , ,Tx H I$Tx@))r@c$V^8dQhRRRRRR/#)r7rorK live_messagesr.r;rqr<)r=s"r>r?rrs(eeCePdeimer@c \VR4pV^8dO\W4,PR4\4'd"VP WW4,R,4R#R#R#)z[Keep only the newest checkpoint among *live_messages* (inserted rows carrying ``_row_id``).rrKN)r rJrrS_drop_shadowed_checkpoint_rows)rrrorcarriers&&&& r>r0SessionMessagesMixin._prune_shadowed_checkpointssQ,]r?rrs#sTW\_r@c ^pVP\W#34P4FwrV\VRR4p\ V\ 4'd;\ ;QJdRV4F 'gK RM RM !RV44'gKdVUu.uFp\V4'dKVNK p pVP\VPV 4V34V^, pK V#uupi)uRewrite older active assistant rows so only the row *carrier_row_id* keeps a ``type: "compaction"`` checkpoint (durable twin of ``context_compressor.drop_shadowed_checkpoints``). Under native compaction every assistant response re-persists a ~120 KB checkpoint the wire builder will never replay once a newer one lands, and local compaction — the only other prune site — rarely fires (#102374). Non-checkpoint items stay; returns rows rewritten.Nz7Ignoring malformed codex_reasoning_items on message rowc38"TFp\V4xK R#5irU)r )rwitems& r>ryFSessionMessagesMixin._drop_shadowed_checkpoint_rows..s5b\aTX6I$6O6O\asTF) r}_SHADOWED_CHECKPOINT_ROWS_SQLrr$rJrVanyr _SET_CODEX_REASONING_SQLr) rrror rewrittenrrZitemsrkepts &&&& r>r3SessionMessagesMixin._drop_shadowed_checkpoint_rowss  <<(E GcdmmoKFS$(abEeT**##5b\a5b###5b\a5b2b2b%*LUT2Ed2KDDUDL LL1D4M4Md4SU[3\ ] NI pMs C&(C&c 0V^8dQhRRRRRRRRRRR R /#) r7rorKr-r. active_onlyrearchive_droppedrr;rqr<)r=s"r>r?rrs;6636:N6]a66AE6RV6r@c LaaaaaaVVVVVV3RlpSPVS4R#)uAtomically replace a session's messages (/retry, /undo, /compress). DESTRUCTIVE by default (rows DELETEd, leave FTS). ``active_only`` spares soft-archived rows (needed with in-place compaction). ``archive_dropped`` SOFT-archives live rows rewind-style: what rewind/edit/regenerate must use, since DELETE leaves nothing to recover. ``reject_active_turn_lease``: in-txn lease check for user rewrites. Pass ``archive_dropped=True`` to SOFT-archive the live rows instead of DELETEing them: the replaced turns stay on disk with ``active = 0``, ``compacted = 0`` — the same "the user took it back" marking :meth:`rewind_to_message` applies — and stay readable via :meth:`get_messages` with ``include_inactive=True``. This is the mode a rewind/edit/regenerate must use: those flows overwrite a transcript the user may not have meant to drop, and a plain DELETE also evicts the rows from the FTS index, leaving nothing to recover from (#82756). It implies active-only handling — already-archived rows are never touched — so ``active_only`` is redundant with it. Live rows that *messages* keeps in place (the common in-order prefix, matched on role/content/tool identity) are left untouched with their ids; only the divergent live suffix is archived and only the new suffix of *messages* is inserted (#82956: archiving and re-inserting the kept prefix grew the archive by the whole transcript on every rewind). The live view is identical either way; only the durability of the dropped turns differs. c 6<SPVSSSSSR7R#))rrrN)replace_messages_in_transaction)rrrr-rrros&r>r#2SessionMessagesMixin.replace_messages.._dos&  0 0j( Ud)A 1 Cr@Nr;)rror-rrrr#sffffff r>replace_messages%SessionMessagesMixin.replace_messagess!( C C &&sH5r@rrrexpected_active_idsc4V^8dQhRRRRRRRRRRR R R R /#) r7rorKr-r.rrerrrOptional[list[int]]r;rqr<)r=s"r>r?rrsS[[[Oc[59[TX[BF[>Q[]a[r@c T^RIHpV'dVPWRRRR7M<\VP \ V34P 44'd V!V4hVeHVP \V34U u.uFp \V ^,4NK up V8wd \R4h^;rV'dVP \V\V4^,34P4p VPW4p \RV RV 44p V \V 48d"VP RW,V ,^,34M TP RV'dR MR 2V34VPWW:R4wrVP \ R 2W,W,V34R#uup i) a:meth:`replace_messages` inside the caller's write transaction (the gateway ``/retry`` rewrite commits in its re-send's own admission). ``expected_active_ids`` pins the active set the replacement was computed from: a row committed since refuses (``RuntimeError``).)rNT)rrz?active transcript changed before the rewrite could be persistedc3J"TFp\V^,^R7xK R#5i)r[Nr^rwrjs& r>ryGSessionMessagesMixin.replace_messages_in_transaction..s![{/#a&"C"C{!#zNUPDATE messages SET active = 0 WHERE session_id = ? AND active = 1 AND id >= ?)DELETE FROM messages WHERE session_id = ? AND active = 1rur)rrrr#r}r r~_ACTIVE_IDS_SQLrS RuntimeError_LIVE_IDENTITY_SQLrWr_stamp_kept_live_prefixr:rG_SET_COUNTERS_SQL)rrror-rrrrrrjrkept_tool_callsliverinserted_tool_callss&&&&$$$$ r>r4SessionMessagesMixin.replace_messages_in_transactions F #  / /$fj 0 l "4<< #N#W#W#Y Z Z/ ; ;  *'+||Oj]'S0U'SCF 'S0UXk0l`a a!"" << 2ZXQRAR4ST]]_D//?D!![tTYUY{![[Oc$i m(t*Q-8: LLDZeEVkmDnor|q~ (,(A(A$T\]bTc(d% )*-8o'LjY [#0Us>F%c ,V^8dQhRRRRRRRRRR/#) r7rrKrrrrHr;rr<)r=s"r>r?rr s8@@@s@#@SV@[`@r@c YPVPW44TV'd\P!V43#R3#)uThe (role, content, tool_call_id, tool_calls) columns a message writes — the identity the kept-prefix match compares. *content* is passed through the loader's lens first so a message read back from the DB matches the row it came from.N)r_loaded_view_contentrLr)rrrrrHs&&&&&r> _row_identity"SessionMessagesMixin._row_identity sI ))#*B*B4*QRT`*4 :&@ @:>@ @r@c$V^8dQhRRRRRR/#)r7rrVr-r.r;rSr<)r=s"r>r?rrs#Dr,SessionMessagesMixin._stamp_kept_live_prefixs D+HC7769-D1v~Q377>+B!B ))$ 0BCGGND[*;CGGLr?rr&s!3r@c rVR9d0\V\4'd\V4P4#V#)zContent as ``_rows_to_messages`` hands it to callers: user/assistant strings are sanitized and stripped on load, so a reloaded session's messages must be compared to rows through the same lens.>rr)rJrKrrv)rrs&&r>r)SessionMessagesMixin._loaded_view_content%s2 ( (Z-E-E#G,224 4r@c V^8dQhRRRR/#r7rorKr;rer<)r=s"r>r?rr-smmmmr@c ,VPRV34RJ#)u]True if the session has any soft-archived (``active = 0``) rows (tests/diagnostics). Cheap existence probe — does not load rows. NOTE: production rewrite paths no longer branch on this (they pass ``active_only=True`` unconditionally — a probe can fail open or race a concurrent ``archive_and_compact``, #80216); kept for tests and diagnostics. zBSELECT 1 FROM messages WHERE session_id = ? AND active = 0 LIMIT 1Nrrros&&r>has_archived_messages*SessionMessagesMixin.has_archived_messages-s)~~ PS]R_ahlm mr@c V^8dQhRRRR/#r7rorKr;rSr<)r=s"r>r?rr7sppspspr@c \V'g^#\VPRV34^,4#)zMAX(id) of the active rows (0 if none), captured at compression START: every active row above it arrived concurrently and must survive compaction verbatim.zMSELECT COALESCE(MAX(id), 0) FROM messages WHERE session_id = ? AND active = 1)rSrr s&&r>get_active_message_watermark1SessionMessagesMixin.get_active_message_watermark7s74>> [^h]jllmop pr@c V^8dQhRRRR/#)r7rrKr;ztuple[list[int], int]r<)r=s"r>r?rr?saaCaDYar@c VPW#4P4pVUu.uFp\VR,4NK up\RV443#uupi)ze``(ids, tool_call_count)`` of the concurrent-tail rows selected by *sql* (``SELECT id, tool_calls``).rc3F"TFp\VR,4xK R#5i)rHNr)rwrns& r>ryBSessionMessagesMixin._tail_rows_after_watermark..Bs0`[_VW<1Q1Q[_s!)r}rrSr:)rrrrrowsrns&&&& r>_tail_rows_after_watermark/SessionMessagesMixin._tail_rows_after_watermark?sJ||C(113&*+dAdG d+S0`[_0`-```+sAroc$V^8dQhRRRRRR/#)r7tail_ids list[int]rorr;rqr<)r=s"r>r?rrDs" ? ?) ?M ?ei ?r@c .aVRJpR V'dR MR ,oRPV3RlVPV444pTPRT RV'dRMR RT RV'dRMR R \V4 R 2 V'd V.VO4R#T4R#)zPure-SQL clone of *tail_ids* as fresh live rows (new id/display order, active=1, compacted=0; message payload columns stay byte-exact and FTS triggers index the clones), into *session_id* when given.Nz, c38<"TFqS9gK VxK R#5irUr<)rwcskips& r>ry;SessionMessagesMixin._clone_message_rows..LsZ(H1UYMQQ(Hs zINSERT INTO messages ( session_id, ruzactive, compacted) SELECT z?, z 1, 0 FROM messages WHERE id IN ( ) ORDER BY id)ractive compacted display_order)ror<)join_message_column_namesr}r&)rrrroretargetcol_listrs&&&$ @r>_clone_message_rows(SessionMessagesMixin._clone_message_rowsDsT)>T\bde99Z(B(B4(HZZ $XJb8QS0TUZr8%!<=)(34M C(0Z #( #  ?6>  ?r@c<V^8dQhRRRRRRRRR R R R R RRRRR/ #)r7rorKcompacted_messagesr.coveredr tail_countrScarried_messagesrupatched_model_configrpatchre merged_awayzset[int]r;r<)r=s"r>r?rrSsZ00 #09M0Xa00+I0ad00#+0 0r@c HVP\V34P4U u.uFp \V R,4NK p p \ V4p TP YT;'g.4p V P V 4V Uu.uF qV 9gK VNK ppV Uu.uF qV 9gK VNK pp\V 4pV^8dVVPVWY4, pVV, p\\PV44pV'd%\V4pVPRV R2V.VO4VP\V34VPWV4VPWV4wppV'dYVPVR\V4 R2\!V44wppVP#W4V\%V4, pVV, pVP'W4TP\( V'dRMR R2VV.V'dV3MR OVN54V#uup iuupiuupi) aPArchive *covered* as summarized and clone every other active row after the new set. A gap below the newest held id, and rows appended after an unpersisted turn, are not in *covered*. They take the concurrent-append path: rewind the original, insert the compacted transcript, then clone them so they stay live and searchable once each. rNUPDATE messages SET active = 0, compacted = 0 WHERE session_id = ? AND id IN (r3z1SELECT id, tool_calls FROM messages WHERE id IN (r", model_config = ?rurr<)r}rrrSset_resolve_carried_row_idsupdaterV_tail_originalsrfromkeysr&_ARCHIVE_ACTIVE_SQLrrGrrr*rW_reconcile_display_ordersr)rrror-r.r/r0r1r2r3rj active_ids covered_set carried_idsrunseencovered_active rewind_ids placeholdersrrI_idsunseen_tool_callss&&&&&$$$$$ r>_archive_named_rows(SessionMessagesMixin._archive_named_rowsSs"15 _zm0\0e0e0gh0gc#d)n0g h'l 33DFVF\F\Z\] ;''1OzV;5N&&zO/9SzV{=R&&zS+& > $..~zW WJf $-- 34 (4L LL33?.C)j) + (:-8 %%d8JK%)%>%>tQc%d"" &*&E&ECMRXDYCZZghf ' #D#  $ $T 2 F #H  1 1  &&t8  !%"6R!H V ' ae,@+BQS aV` a cKiPSsHHHH'HcDV^8dQhRRRRRRRRR R R R R RRRRRRRRR / #r7rorKr-r.model_config_patchr watermarkr0 lock_holderrr/rSr0ru covered_idsrunresolved_held held_for_casr;r<)r=s"r>r?rrs|)])]c)]G[)]4)]HU)]")]7:)]9)]) )] 8 )] 5 )] AD )]r@c  Xaaaaaaaaaa a SPVVVV VVVVVV V3 RlS4#)u6 Non-destructive in-place compaction under ONE session id: soft-archive the active rows (``active=0, compacted=1``: summarized away, still searchable) and insert *compacted_messages* as fresh active rows, atomically; returns the new ACTIVE count (= ``message_count``). *watermark* (compression START): rows ``id > watermark`` arrived during the slow summary and are re-sequenced after the compacted set by a pure-SQL clone (fresh ids); ``None`` archives everything. *covered_ids*: the rows the compressor actually held. When proved, only those are summarized; every other active row is cloned after the new set, so a gap below the newest held id is not archived unseen. ``None`` keeps the watermark path. *unresolved_held*: held dicts with no row id, matched inside the transaction. *lock_holder*: verified in-txn so a reclaimed lease fails instead of clobbering the winner. *tail_count*: the LAST N compacted rows are the verbatim carried tail; *carried_messages* names exact durable originals carried forward verbatim when they are not a contiguous suffix (micro-compaction's prefix + marker + suffix shape). They are resolved inside this transaction by row id when present, else by unique durable identity + timestamp. Those originals and the clones' originals are superseded duplicates and get rewind flags (``active=0, compacted=0``) so search doesn't return each carried message once per compaction. ``held_for_cas``: the caller's held message dicts for the lease-less staleness gate — re-verified against the live rows INSIDE this transaction (see :meth:`held_row_mismatches`), so a rewrite that lands after the caller's precheck aborts the commit as :class:`HeldRowRewrittenError` before any row is archived (#124102). The lease path leaves it ``None``: its lease rules out an overlapping rewrite, and the turn's own writes are the ones a CAS here would misread. ``model_config_patch`` merges in the same txn (``None`` removes a key). Concurrent-append safety (#75316): when *watermark* is provided (the value of :meth:`get_active_message_watermark` captured at compression START), rows that arrived during the slow provider summary call (``id > watermark``) are NOT summarized away. They are re-sequenced after the compacted set by a pure-SQL column clone (every column except ``id`` — content, api_content, platform_message_id, token counts, reasoning sidecars all survive byte-exact, and the FTS triggers index the clones naturally), and the originals are archived. NOTE: re-sequencing assigns the tail rows fresh ids; consumers that reference durable row ids re-resolve by content (see 3e8ab0610). c<< SPVSSSS SS SSS SR7 #))rKrLrMr/r0rNrOrP)_archive_and_compact_on_conn) rr0r-rNrPrMrKrror/rOrLs &r>r:SessionMessagesMixin.archive_and_compact..s34;\;\ *0EW[Z-;+, <]archive_and_compact(SessionMessagesMixin.archive_and_compacts/J--/H/HJ\ ] ]r@rKrLrMr/r0rNrOrPcDV^8dQhRRRRRRRRR R R R R RRRRRRRRR / #rJr<)r=s"r>r?rrsII$'I=QI 8ILYI'I ? ORDER BY idz;SELECT id FROM messages WHERE session_id = ? AND active = 1z AND id <= ?ruz ORDER BY id DESC LIMIT ?rr5r3z AND id NOT IN (r6rr<)r1rr}rr~r:r_merge_model_config_jsongetattrcallablerr\_proved_coveragerGrrSr8_uncounted_merged_rowsrrVrr;r&r<rrGr*rWr=r)rrror-rKrLrMr/r0rNrOrPrlock_rowr2r1 mismatchesr\provedrtail_tool_callsrCboundrjrDrrIs&&&&$$$$$$$$ r>rS1SessionMessagesMixin._archive_and_compact_on_conns C  "||$= }MVVXH8H#5#DhWcNdHeimiriritHt7,ZN:uvxx"$.JO $<< 0W = FTX   'T)E T\\M`enkmMno++gEI0rgZ4#>#>?QSVWaSbRbRc?d#eeg6hiqhphr 6st6sc3s4y>6st tJ h $-- 34 (4L LL33?.CEOD]R\D] _ LL/00@aPS]Rk`jRk l LL,zm < %%d8JK%)%>%>tQc%d""   $ $T8 4 H %H  /  &&t8 )*5+?b*QQ^_ ' ae,@+BQS aV` a c9ts&L:cV^8dQhRR/#)r7r; list[str]r<)r=s"r>r?rrs++Y+r@c \VRR4'g;VPR4P4Uu.uF q"^,NK upVnVP#uupi)z>Column names of the messages table, cached per-connection era._message_columns_cacheNzPRAGMA table_info(messages))r^r}rrk)rrrns&& r>r'*SessionMessagesMixin._message_column_namessTt5t<<9=Fc9d9m9m9o*p9oAQ449o*pD '***+qsAc(V^8dQhRRRRRRRR/#)r7rorKrrSrrr;r<)r=s"r>r?rrs/ A A3 A Ac AVY Ar@c V'd4\V\4'g\V\4'dV^8:d^#VPRVP V4W!34#)ajRewrite the content of ONE known active user row. Used when a user turn was written at submit time (before the agent ran) and the turn prologue then rewrote the prompt it persists (@-file expansion, native image parts): the early row must show what the transcript will replay, not the raw keystrokes, and the turn must not append a second row for the same input.z`UPDATE messages SET content = ? WHERE id = ? AND session_id = ? AND role = 'user' AND active = 1)rJrerS_write_rowcountr)rrorrs&&&&r>set_user_message_content-SessionMessagesMixin.set_user_message_contentsW Z55ZPS=T=TX^bcXc## n  ! !' *F ?A Ar@c$V^8dQhRRRRRR/#)r7rorKrrSr;r<)r=s"r>r?rr s! " "S "# "# "r@c V'd4\V\4'g\V\4'dV^8:d^#VPRW!34#)uDeactivate ONE known row (id-addressed, idempotent; returns the affected row count). Used by the queued-prompt drain: the row written at accept time sits ahead of the in-flight turn's assistant reply, and the drain re-appends an identical row at the transcript end — leaving the early row active would put two user rows before that reply and the alternation repair would glue the two turns into one. The durable row is preserved (inactive), never deleted.z>UPDATE messages SET active = 0 WHERE id = ? AND session_id = ?)rJrerSro)rrors&&&r>deactivate_message'SessionMessagesMixin.deactivate_message sH Z55ZPS=T=TX^bcXc## L  " "r@c$V^8dQhRRRRRR/#)r7rorKrrSr;r0r<)r=s"r>r?rrs!???S?]?r@c LV'd4\V\4'g\V\4'dV^8:dR#VPRW!34pVfR#V^,'dV#VP RW!34p\ V4^8Xd\V^,^,4#R#)aThe active row that still carries *row_id*'s message: *row_id* itself while active, else the one row an in-place compaction re-sequenced it into (``_clone_message_rows`` copies role, content and timestamp byte-exact to a higher id). ``None`` when neither exists or the clone is ambiguous. A caller holding a row id across a compaction (the queued-prompt envelope) re-resolves it here before deactivating or rewriting the row (#123675).Nz;SELECT active FROM messages WHERE id = ? AND session_id = ?zSELECT c.id FROM messages c JOIN messages o ON o.id = ? WHERE c.session_id = ? AND c.active = 1 AND c.id > o.id AND c.role = o.role AND c.content IS o.content AND c.timestamp = o.timestamp)rJrerSr _read_allrW)rrororigincloness&&& r>resolve_active_row_id*SessionMessagesMixin.resolve_active_row_ids Z55ZPS=T=TX^bcXc ]`f_st > !99M G " %(K1$4s6!9Q< >$>r@c$V^8dQhRRRRRR/#)r7rorKrr;rSr<)r=s"r>r?rr,s# ; ;c ;QT ;Y\ ;r@c `V'd V'g^#VPRV\V434#)uDeactivate every live row of one ``display_kind`` (idempotent; returns the affected row count). The durable counterpart to the in-memory strip a self-replacing pivot performs: the in-memory path drops the prior entry so N pivots leave one, but a durable append has no such step, so every switch left another active row and all of them replayed on resume. Rows are preserved (inactive), never deleted — the same contract as :meth:`deactivate_message`, keyed by class instead of by id. zWUPDATE messages SET active = 0 WHERE session_id = ? AND display_kind = ? AND active = 1)rorb)rrors&&&r>#deactivate_messages_by_display_kind8SessionMessagesMixin.deactivate_messages_by_display_kind,s0## e *<8 9; ;r@cV^8dQhRR/#)r7r;tuple[Any, ...]r<)r=s"r>r?rr9s u u/ ur@c  VR,pVR,R8Xdq\RRRVPVR,4RVR,RVPVR,4/4wr4Ve%Ve!VPVP R44p\ V4;'g+VR,W!R,VR,VR,VR ,3#) zZHistorical display identity, including normalized live content from user handoff carriers.rrrrr4rrrHr)r rrrrr,)rrjdedupe_contenthandoff live_views&& r>r(SessionMessagesMixin._display_dedupe_key9sY v;& !; 4+?+?I+ON 3"D$A$A#FXBY$Z=\"] G"y'r?rrFsyyyr@c ~\VPVR,4;'g/P\44#)z+Python twin of :data:`DISPLAY_VISIBLE_SQL`.r4)rerrr )rrjs&&r>_is_model_only_row'SessionMessagesMixin._is_model_only_rowFs2T2237I3JKQQrVVWvwxxr@c V^8dQhRRRR/#)r7rrr;rr<)r=s"r>r?rrKsSSS5Sr@c |\P!\V4PRR44P 4#)zCFixed-width durable identity for indexed display-generation lookup.zutf-8 surrogatepass)hashlibsha256reprencodedigestrs&r>r&SessionMessagesMixin._display_identityJs-~~d3i..wHIPPRRr@c$V^8dQhRRRRRR/#)r7rr first_by_uidrr;r<)r=s"r>r?rrPs!   4 C r@c VR,pV'gV#VR,'dVPW14#VPW14V#)a The display identity both display reads give *row*, scanning rows in ``id`` order. A compaction carrier keeps its message's ``message_uid`` but not its content (the prior tail wrapped around the summary), so it is a copy of the first row with that uid: shown once.rr)rr)rjrrrs&&& r>_fold_summary_carrier*SessionMessagesMixin._fold_summary_carrierOsF - J $ % %##C- -) r@ drop_removedcV^8dQhRR/#)r7rrer<)r=s"r>r?rr]s4+4+4+r@c a/p/p/p/o/p\4pV'dh\V\4'dTM \V4pVUu0uF-qR,'dKVR,'dK$VR,kK/ pp\V4pVEFpRRrV'dVR,'*;'dVR,'*p V 'd VR,MRp V 'dRMVP V4p T ;'g.V e(V 'gVR,V9dVP V 4MRp .V 'dV 3MRORVR,.\ VR,4O4Op SP\PW44V 'dKVPV4'dEKT ;'gVP V4p VPWV4p VPV 4pVe(VR,VR ,3VR,VR ,38d WV &WV &\VPWR ,4VR ,4WJ&EK \W4PR 7pV'd`VU u.uFSp \ ;QJd%V3R lWj,4F 'gK R M R M!V3R lWj,44'dKQV NKU pp VU u.uF qV ,NK up #uupiuup iuup i)aCollapse compaction generations so each logical message appears once (the protected tail is copied into each generation: same role/content/timestamp, different ``active``/id); prefer the live row, then the newest. The ONE definition every display projection shares. *rows* must be ordered by ``id``. *drop_removed*: *rows* also hold the removed rows (``active=0, compacted=0``: rewound, or replaced by a newer copy) and ``compacted``. A message whose newest copy is removed is not shown, so a rewind in a compression child never brings back the parent's copy. Copies share the display key or ``message_uid`` (a micro-compaction merge also stands for the rows it absorbed).r#r$rNdisplay_identityc3<"TFq'gK RV3xK R#5i)rNr<)rwrs& r>ryCSessionMessagesMixin._dedupe_display_generations..|sryrs2]_T74==_sTFr<)r7rJrVrerrr0r9rr;rrrminsorted __getitem__r)rrrrfirst_iduid_key identities removed_tsrjcopiesrgonestoredhashedrkeysrs&&$ @r>_dedupe_display_generations0SessionMessagesMixin._dedupe_display_generations]s,./1.0#%79 "u %dD114tDzD7;idsh--*X[\gXhXh*#k**dJi +LCCx=(AA[1A-A48/0d$d$*B*B3*GGG3?C , :%)$:$:3$?AEtVIRt_*s0K K+ KK,K !K/K;Kc V^8dQhRRRR/#r7rorKr;rqr<)r=s"r>r?rrs$e$e#$e$$er@c  /p/p^pVPRW%34pTp.pVFp V R,pVPWPVPV 44V4p V R,V 8Xd V R,MRp TP YfTMT 4p WR,8wgWR,8wgKVP WV34K VP 4WW8XdR#VPRV4K)a8Re-fold split display generations by the recomputed display key. A compaction generation that computed the display identity differently (or cloned without inheriting it) leaves one logical message in two ``display_order`` groups, and ``GROUP BY display_order`` then projects it twice (#122167). Folding by the same recomputed key :meth:`_dedupe_display_generations` uses keeps every display projection on one definition of a logical message; the live copy wins its group via the read path's ``ORDER BY candidate.active DESC, candidate.id DESC``. Writes only on drift.a5SELECT id, role, content, timestamp, tool_call_id, tool_calls, tool_name, display_kind, display_metadata, display_order, display_identity, message_uid, _compressed_summary FROM messages INDEXED BY idx_messages_session_id WHERE session_id = ? AND id > ? AND (active = 1 OR compacted = 1) ORDER BY id LIMIT 1000rrr%NzHUPDATE messages SET display_order = ?, display_identity = ? WHERE id = ?)r}rrrrr|close executemany) rrror uid_identitylast_idr batch_startupdatesrjrrorders &&& r>r=.SessionMessagesMixin._reconcile_display_orderss&()+ <<) % 'D"KGd)55//0H0H0MNP\^033E/F(/Rs?+X\ ++HgSWX00HDV@W4WNNEW#=> JJL%   Z\c er@c V^8dQhRRRR/#rr<)r=s"r>r?rrs....r@c ZaaSP4;_uu_4p\SPV44pRRR4RR0X8:gR#SP\S34fR#\ SRR4'dR#VV3Rlp\ SPV44# +'giLl;i)zTBackfill one legacy session once, preserving the pre-index display identity exactly.Nr%rFT read_onlyc<VP\S34P4pVfR#SPVS4R#)NT)r}_DISPLAY_INDEX_MISSING_SQLr~r=)rmissingrros& r>r#7SessionMessagesMixin._ensure_display_order.._dos:ll#= }MVVXG  * *4 <r@) _read_ctxr7r'rrr^rer()rrorcolumnsr#sff r>_ensure_display_order*SessionMessagesMixin._ensure_display_orders ^^  $44T:;G!34? >>4zm D L 4e , , D'',--! s B B* c 0V^8dQhRRRRRRRRRR R R /#) r7rorK active_clauselimitr0rrSlatestrer; list[Any]r<)r=s"r>r?rrs:(-(-s(-c(-R_(-il(-%)(-.7(-r@c  /pVP4;_uu_4pVPR4VPRR4P4RJpV'dRMRp VPRV RV R2V34p V Fop VPV 4'dKVP VP V 44p VP V 4p V R ,V R ,3pV e W8gKkWV &Kq V P4\V4pV'dVRRR1,VRRVRRR1,MWRRVpVU u.uFqV ,^,NK pp /p\^\V4R 4F[pVVVR ,pTPVPR V R \V4 R2V.VO54U u/uF qR ,V bK up 4K] VUu.uFpVV9gK VV,NK upVP'dVPR4uuRRR4#uup iuup iuupi TP'dTPR4ii;i +'giR#;i)zNProject a legacy read-only display page without retaining transcript payloads.BEGINz=SELECT 1 FROM sqlite_master WHERE type = 'index' AND name = ?Nz"INDEXED BY idx_messages_session_idz NOT INDEXEDzSELECT id, role, content, timestamp, tool_call_id, tool_calls, tool_name, active, display_kind, display_metadata FROM messages  WHERE session_id = ? ORDER BY id ASCr#r+SELECT * FROM messages WHERE session_id = ?z AND id IN (r3ROLLBACK)idx_messages_session_id)rr}r~rrrrrrVrrWr9r&in_transaction)rrorrrrrepresentativesrhas_session_index index_hintrrjrcurrent candidater selected_idsselectedr5chunkrs&&$$$$ r>_legacy_display_page)SessionMessagesMixin._legacy_display_pages9; ^^   LL !" -$(LLS0%(*D%)!FWA\i ||DDN<P++8/9IK M #  C..s33 #55d6N6Ns6STH-11(;G!$XD :I)*=4=1  !/2 HNZ"-fg6v>ttDT^_fTghninTo MWXZ 9! < #,e,@.%/@.Y^@.%/0> 8DZ|VvQYGY(((|Z&&&LL,I 2 Y%/[&&&LL,'G  s[I B0H$#AH$5H AH$)H;H$ H H%H$'#I H$$&I  I  I c$V^8dQhRRRRRR/#)r7 warn_contextrK summary_flagrer;rr<)r=s"r>r?rrs"DUcr@c `\V4pVPRR4VPRR4V'dVPR^4'dRVR&VPVR,4VR&VPR4'd\ VR,.RV R 24VR&VPR 4eVP VR ,4VR &\ VP44FAwrVV\9gK\V\\34'gK0VPV4KC V#) z~``dict(row)`` with content/tool_calls/display_metadata decoded; *summary_flag* keeps ``_compressed_summary`` only as ``True``.rNr%rTrrHz$Failed to deserialize tool_calls in z, falling back to []r4) rrUrrr$rrVr_MESSAGE_SCHEMA_KEYSrJr bytearray)rrjrrrrr8s&&$$ r>_row_to_message_dict)SessionMessagesMixin._row_to_message_dicts3i "D) & CGG$91==)-C% &--c)n=I 77< (L!2)Ml^[o'p!rC  77% & 2&*&C&CCHZD[&\C" # syy{+JC..:eeYEW3X3X , r@rrc(V^8dQhRRRRRRRR/#) r7rorKrr0rrSrrer<)r=s"r>r?rrs*#(+9=r@c  V'dRMRpTPR\ RV R\ R2YfRMTW134P4#)zOOne display-history projection for normal reads and transactional verification.DESCASCzWITH page AS ( SELECT display_order FROM messages WHERE session_id = ? AND (active = 1 OR compacted = 1)zB GROUP BY display_order ORDER BY display_order a LIMIT ? OFFSET ? ) SELECT chosen.* FROM page JOIN messages AS chosen ON chosen.id = ( SELECT candidate.id FROM messages AS candidate WHERE candidate.session_id = ? AND candidate.display_order = page.display_order AND (candidate.active = 1 OR candidate.compacted = 1)z ORDER BY candidate.active DESC, candidate.id DESC LIMIT 1 ) ORDER BY page.display_order ASCr)r}DISPLAY_VISIBLE_SQLr)rrorrr directions&&$$$ r>_display_rows_from_conn,SessionMessagesMixin._display_rows_from_connsk%F% ||JJ]I^_BBKMKL_J_`/ 2}% L! " (*# r@c V^8dQhRRRR/#rr<)r=s"r>r?rr'sr@c hVPR\ \ R2V34p\V^,4#)zRows a display read of this segment paints: one per ``display_order`` group of ``_display_rows_from_conn``'s set. Unindexed legacy rows count as one group (the read backfills them), so the count is zero exactly when the read paints nothing.zVSELECT COUNT(*) FROM (SELECT DISTINCT display_order FROM messages WHERE session_id = ?r3)rrrrSrs&& r>display_message_count*SessionMessagesMixin.display_message_count'sCnn $$:#;r?rr0s   C  Db  r@c  VPRV34P4fR#VP\V34P4'dR#VPW4Uu.uFpVP VRRR7NK up#uupi)zNExact display snapshot on an already-held transaction; None means fail closed.z+SELECT 1 FROM sessions WHERE id = ? LIMIT 1Nzverified deleteTrr)r}r~rrr)rrrorjs&&& r>_display_messages_from_conn0SessionMessagesMixin._display_messages_from_conn0s <<E } U ^ ^ ` h <<2ZM B K K M M33DE E  % %c8IX\ % ]E   s&Bc$V^8dQhRRRRRR/#)r7include_inactivereinclude_compactedr;rKr<)r=s"r>r?rr<s&ppp$p3pr@c 6V'dR#V'd\#R#)zcAudit: every row; display: active plus compaction-archived (never Undo/Rewind rows); default: live.rur)r)rrs&&r>_active_clause#SessionMessagesMixin._active_clause;s&roFW,Bo]nor@c<V^8dQhRRRRRRRRRR R RR RR RR R/ #)r7rorKrrerrr0rrSrafter_idinclude_ancestorsr;r.r<)r=s"r>r?rr@s]2p2ps2pd2p_c2p)2p:=2pKO2p,2pHL2pYm2pr@c  XaaaaaVeS'g S'd \R4hVeV'd \R4hVeV'd \R4hSPW#4p V'dSPS4MS.p \V 4^8dT;'dV'*p SP R\ V 4 R2V ,R,V 4p SP V 'dSPW4MT V R7p S'dV RRR1,SRRSRRR1,MV SRRSp MV'd:V'g2SPS4'dSPVVVVV3R l4p MV'dSPSV SSSR 7p M|R T VeR MR RS'dRMR 2p VfS.MSV.pSf S'd#V R, p TPSfRMSS.4SP W4p S'dV P4V Uu.uFpSPVRRR7NK up#uupi)u:Load messages in insertion order (id, never timestamp: clocks regress). ``include_inactive``: rewind rows too; ``include_compacted``: compaction-archived display history (not rewind rows). ``latest`` pages back from the newest but returns chronological order; ``after_id``: keyset paging. ``include_ancestors``: also load the compression lineage (root → tip, branch sessions exempt), mirroring ``get_messages_as_conversation(include_ancestors=True)`` — after a compression rotation the full transcript spans parent sessions, not just the child continuation (#51058).Nz2after_id is incompatible with latest/offset pagingzYafter_id is incompatible with include_compacted (deduped display reads use offset paging)zXafter_id is incompatible with include_ancestors (merged-lineage reads use offset paging)z,SELECT * FROM messages WHERE session_id IN (r3rrc0<SPVSSSSR7#))rrr)r)rrrrrros&r>r3SessionMessagesMixin.get_messages..`s!T99*E&:Qr@)rrrrrz AND id > ?ruz ORDER BY id rrz LIMIT ? OFFSET ? get_messagesTrr)rrrrWrxr&r_with_removed_identitiesr_read_retrying_ioerrrextendreverser)rrorrrrrrrr session_idsdisplayrrrrjsff&&fff&& r>r!SessionMessagesMixin.get_messages@s7  VvQR R  $5xy y  $5wx x++,<P >Od..z:V`Ua { a  (@@0@,@G>>$PQ^_jQkPllm"n$1#24F#GHSUD33DK--d@QUdk4mD8>4":fg&v.tt4DMRXSXDYD '7D>#.D jnojncf))#NY])^jnooosH'c V^8dQhRRRR/#)r7r rir;r.r<)r=s"r>r?rrts   >R r@c  &aVUu.uFq"'gK VNK upoV3Rl\^\S4R44pVUUu.uF<q@PR\V4 R2V4FpRV^,RV^,/NK K> upp#uupiuuppi)ziTool results containing ``/pull/``: a deliberately loose scan, oldest-first so the caller takes the last.c3:<"TFpSWR,xK R#5i)rNr<)rwr5rs& r>ry.wsP8Ou#eck*8OsrzRSELECT session_id, content FROM messages WHERE session_id IN (zi) AND role = 'tool' AND content LIKE '%/pull/%' ORDER BY id ASCror)rrWrxr&)rr schunksrrjrs&& @r>find_pr_url_messages)SessionMessagesMixin.find_pr_url_messagests%++Qqq++PaS38OPGMveYgYg**7*>)?@$' ZRUs1vy#a&9Z9v ,s BBAB c(V^8dQhRRRRRRRR/#)r7rorKaround_message_idrSwindowr;rr<)r=s"r>r?rrs0{{c{c{SV{_m{r@c  J\V^4pVP4;_uu_4pVPRW!34P4'gR.R^R^/uuRRR4#VPRWV^,34P 4pVPRWV34P 4pRRR4.\ X4OXOUu.uFpVP VRR R 7NK ppRVR\^\V4^, 4R\V4/# +'giLk;iuupi) zUp to *window* messages either side of an anchor id (ascending). ``messages_before``/``_after`` count strictly around the anchor (fewer than *window* = session boundary). Empty for a foreign anchor.z>SELECT 1 FROM messages WHERE id = ? AND session_id = ? LIMIT 1rmessages_beforemessages_afterNzPSELECT * FROM messages WHERE session_id = ? AND id <= ? ORDER BY id DESC LIMIT ?zNSELECT * FROM messages WHERE session_id = ? AND id > ? ORDER BY id ASC LIMIT ?get_messages_aroundFr)rrr}r~rreversedrrW) rrorrr before_rows after_rowsrn window_msgss &&&& r>r(SessionMessagesMixin.get_messages_arounds4VQ ^^  << `!2 ?AAIL "&7r?rrs'<'resolve_resume_session_id.SessionMessagesMixin.resolve_resume_session_ids  11*=KKJ^^   G9DD2Y &||$Y\c[efooq}& $ !!23GI[!\ ]^!!23GI[!\ ]^!!23G!Y Z[%%r?rrs0 \ \I \c \gk \15 \r@c  TPRV'dRMR V'dRMR VP R\V4 RV'd\MT R2 \ V44pV'dVP WQ4#T#)a``_CONVERSATION_ROW_COLUMNS`` rows for *session_ids* ORDER BY id (timestamps are not monotonic and would break tool-call adjacency). ``with_compacted``: the display set (``active_clause`` is ignored) with the ``compacted`` column, plus the removed rows' identities for ``drop_removed``.zSELECT r!ruz compacted, z$ FROM messages WHERE session_id IN (r3z ORDER BY id)rx_CONVERSATION_ROW_COLUMNSr&rrr )rr rr0r.rs&&&$$ r>_fetch_conversation_rows-SessionMessagesMixin._fetch_conversation_rowss ~~nR@R`fh@i--./22? 2L1MQ)7%]K< Y[``kZl n DRt,,T?[W[[r@c V^8dQhRRRR/#)r7r rir;rr<)r=s"r>r?rrs _ _) _ _r@c VPR\V4 R2\V44pV'd\.VOVORR7#\ V4#)a'*rows* (ordered by id) merged with the identities of the lineage's removed rows (``active=0, compacted=0``), which ``_dedupe_display_generations(drop_removed=True)`` needs only to hide a copy, never to show: no body (a legacy row without a stored display identity keeps its content for the key).aSELECT session_id, id, role, timestamp, tool_call_id, tool_calls, tool_name, display_kind, display_metadata, message_uid, absorbed_message_uids, display_identity, active, compacted, CASE WHEN display_identity IS NULL THEN content END AS content FROM messages WHERE session_id IN (z.) AND active = 0 AND compacted = 0 ORDER BY idcVR,#)rr<)rjs&r>r?SessionMessagesMixin._with_removed_identities..sTr@r)rxr&rrrV)rrr rs&&& r>r -SessionMessagesMixin._with_removed_identitiesse.. 23@ 2L1MN !- / HOv''w'-BC^TXY]T^^r@c4V^8dQhRRRRRRRRRRRRR R /#) r7rorKrrerrepair_alternationinclude_row_idsrr;r.r<)r=s"r>r?rrsH88s8t87;8Y]86:89=8J^8r@c  T;'dV'*pTPV'dVPV4MV.VPW64RVR7pV'dVPWR7pVP WVWEVR7#)aLoad messages in OpenAI format. ``include_compacted`` (deduped display history) is for DISPLAY reads only: the model-fed restore must not regrow what compaction summarized away. ``repair_alternation`` repairs the loaded list for LIVE REPLAY callers (a durable ``user;user`` pair would re-trigger the per-request repair forever), preserving summary markers before repair so derivative context cannot merge with an original user turn; the stored transcript is never mutated.Fr0r.rrorr;r<include_summary_markers)r3rrr_rows_to_conversation) rrorrr;r<rrrs &&&&&&& r>get_messages_as_conversation1SessionMessagesMixin.get_messages_as_conversations$<<,<(<,,4ED $ $Z 0J<    0 DV[ls-u 33D3OD))$Yj1$6*8 8r@c$V^8dQhRRRRRR/#)r7rorKrrer;rr<)r=s"r>r?rrs' C C C CY^ Cr@c V'dVPV4MV.p\V4pVPRV RV R2.VOVO54p\V4\ V^,4\ V^,4\ V^,43#)awA cheap fingerprint of what ``get_messages_as_conversation`` (live rows) would load: the lineage ids, the active rows' count and highest id, and the sessions' write-side ``transcript_revision`` (bumped by a trigger on every in-place row rewrite). Any append, rewind, undo, compaction or rewrite moves it, so a payload derived from the transcript can be reused while it holds.zpSELECT COUNT(*), COALESCE(MAX(id), 0), (SELECT COALESCE(SUM(transcript_revision), 0) FROM sessions WHERE id IN (z&)) FROM messages WHERE session_id IN (z) AND active = 1)rr&rrrS)rrorrmarksrjs&&& r>conversation_revision*SessionMessagesMixin.conversation_revisions 7Hd&&z2j\c"nn"G#I%P` bcoehcokncoqc CAKSVc#a&kBBr@cV^8dQhRR/#)r7r;ztuple[bool, Any]r<)r=s"r>r?rrs33IY3r@c a VPV4^,pVPVPR4V4pVeVPV4MRo RpS e(\V 3Rl\ V44R4pVeVR3pVfVP W4pVfRV3#VwrV 'dVP V4V '*V3#)aIAncestor-lineage dedupe of one decoded user *msg* -> ``(skip, exact_clone_key)``. Rotation column-clones the concurrent tail into the child, so copies need not be adjacent: the exact ``(timestamp, canonical content)`` clone index is checked first, then the adjacent heuristic. A rotated child carrier wins over the ancestor copy.rNc3<<"TFwrVSJgK VxK R#5irUr<)rwrrprevious_exacts& r>ry=SessionMessagesMixin._dedupe_replayed_user..s "l9LPY]kPk119Ls  TF) _canonical_replayed_user_content_exact_replayed_user_clone_keyrr{r%_find_duplicate_replayed_user_messagerU) rr-rexact_user_clonescanonical_contentexact_clone_key duplicateprevious_indexduplicate_indexprefer_currentrLs &&&& @r>_dedupe_replayed_user*SessionMessagesMixin._dedupe_replayed_users !AA#FqI==cggk>RTefCRC^*..?dh  %!"l89L"lnrsN)+T2  BB8QI  /) )*3'  LL )!!?22r@r<r@c 0V^8dQhRRRRRRRRRRRR /#) r7rorKrrer;r<r@r;r.r<)r=s"r>r?rr sC^^^QU^ko^/3^7;^H\^r@c a^RIHpHp^RIHp T;'dV'*p .p /p /p .pVEFoVP SR,VP SR,44pRSR,RV\R/pV 'dV !S4V\&V'dSR,e SR,VR&\SV4VPV3R lR44SR ,'d-VPSR ,4;peVVR &\V4V'dSR ,'dRVR &VPV3R lR44SR,'d\SR,.R4VR&SR,'d SR,VR&SR,'dRVR&SR,R8XdwVPV3RlR44SR,e SR,VR&VPV3RlR44VPR4'dVPV4MSR,R8Xd"V P!4VP!4MuSR,R8XdhSR,'gYSR ,'dJVFp\#V V4K VP!4\%V SR ,4;p'd VV\&&V'd+VP)V VV 4wppV'dEKVeVV V&V PV4EK V!V!V 44p V'd7V 'd/^RIHpV!RV 4pV'd\.P1RVV4V #) aDecode fetched rows (ordered by id, pre-filtered) into OpenAI format, stable key order. Every dict is stamped ``_DB_PERSISTED_MARKER_KEY`` (born durable) so an identity-losing handoff never re-appends the transcript on flush. Unaddressed live-replay projections also carry the stored-row CAS digest: if a later rewrite loses its physical ``_row_id``, logical ``message_uid`` can recover the row without guessing by mutable payload while the digest still fences a concurrent winner. ``_row_id`` is opt-in (gateway reactions); reasoning restored on assistant rows only; ``api_content`` VERBATIM (no sanitize/strip) so replay keeps the provider prompt cache byte-stable.) _strip_background_review_harness_strip_stale_tool_call_markers)transcript_row_snapshotrrTrNrKc3\<"TF!pSV,'gKVSV,3xK# R#5irUr<rwcolrjs& r>ry=SessionMessagesMixin._rows_to_conversation..1s)^2Q3UXY\U]U]SX2Q,,r4rc3\<"TF!pSV,'gKVSV,3xK# R#5irUr<r`s& r>ryrb7s,y+kCorsvowowc#h+krcrrHzKFailed to deserialize tool_calls in conversation replay, falling back to []rrrrc3\<"TF!pSV,'gKVSV,3xK# R#5irUr<r`s& r>ryrbAs)a6TsX[\_X`X`?CS?6Trcrc 3z<"TF0pSV,'gKV\SV,RRV R243xK2 R#5i)NzFailed to deserialize r )r$r`s& r>ryrbDsErdhklohphpjS(3s8T5KC5Pf3ghids;";rr tool_call_uid)repair_message_sequenceuRepaired %d message-alternation violation(s) while restoring session %s — durable transcript kept them, see repair_message_sequence)rr)rrrr)rrr)r1r\r]rFr^rr_DB_PERSISTED_MARKER_KEYrr+r9rrr$rr|rrrrrXagent.agent_runtime_helpersrhrinfo)rrrorr;r<r@r\r]r^stamp_snapshotr-rQr<unindexed_tool_ownersrrdecodedownertool_uidrrSrhrepairedrjs&&$$$$$ @r>rA*SessionMessagesMixin._rows_to_conversation s bC,CCO0CCE)+79C//F T=Q=QRUV_R`=abG3v; 7s'CO$ 3t9#8!$TI &c3 / JJ^2Q^ ^%&&t7T7TUXYkUl7m,mG+z*1&'c"&3/D+E+E-1)* JJy+ky y<  $, %r+x%zL!())$'(=$>L!:"&J6{k) a6Taa*+7/23F/GC+, rdrr77<(()005V&$$&%++-V&s?/C/CNH[H[ 3E(?3%++-4^SEXYY8Y)1C & (,(B(B8SRc(d%o".9<%o6 OOC y~22RS[2\] ( K.tX>H 23;ZIr@c V^8dQhRRRR/#)r7rorKr;z1tuple[list[dict[str, Any]], list[dict[str, Any]]]r<)r=s"r>r?rris..3.;l.r@c  VVPVPV4RRRR7pTPVUu.uF5q3R,V8XgKVR,'gK#VR,R8wgK3VNK7 upVRRRRR 7pVPVPVRR 7VRRRR 7pWE3#uupi) u``(model_history, display_history)`` for a resume from ONE SELECT; byte-identical to the separate reads. model: the tip's active rows, alternation-repaired, summary marker kept for pre-compress checkpointing. display: the full lineage (``/branch`` stands alone), compaction-archived rows deduped. The display projection also includes rows preserved by IN-PLACE compaction (``active=0, compacted=1``), deduped by :meth:`_dedupe_display_generations`. Without them a compacted conversation resumes showing only its summary plus the carried-forward tail — the user's own turns read as deleted even though every row is still on disk, and the REST transcript read (which has always included them) disagreed with this one about the same session (#92080). ruTr>ror#r session_metaFr?rrorr;r<)r3rrAr)rrorrn model_historydisplay_historys&& r>get_resume_conversations-SessionMessagesMixin.get_resume_conversationsis,,  $ $Z 0"d[_-a 22 n1,: =Q!H++QRSTZR[_mRmQQ n!#dlp3r 44  , ,T , ER\"ud5T-- osB& B& B&)B&c V^8dQhRRRR/#)r7rorKr;rir<)r=s"r>r?rrs%%c%i%r@c V'gV.#VPV4pV'dVPV4'dV.#V.pTpV0p\V4^d8d|VPV4'gMcVPVR,4pV'dVR,V9dM4VP VR,4VP VR,4TpK\ \V44#)u@Session ids a display resume materializes: the VERIFIED compression lineage (root → tip; each hop's parent ended ``compression`` and the child is a genuine continuation), or the session alone for anything else — an explicit ``/branch`` copy, an API fork, a reset child, or a plain session. The raw parent walker ``_session_lineage_root_to_tip`` is intentionally NOT used here: it crosses fork/reset boundaries and misclassifies API forks (parent ended ``branched``, no marker) as compression lineages. Shared with the resume guard so it counts exactly what a resume loads.rr) get_session_is_explicit_fork_child_rowrW_is_compression_child_rowr)r|rVr)rrosessionchainrrparents&& r>r(SessionMessagesMixin._resume_lineage_idss< "":.$::7CC<  |%j311'::%%g.A&BCFVD\T1 HHVD\ " LL &GHUO$$r@c$V^8dQhRRRRRR/#)r7rorKtip_onlyrer;ztuple[list[str], str]r<)r=s"r>r?rrs'UUcUTUF[Ur@c BV'dV.R3#VPV4R3#)zW``tip_only``: the tip's ACTIVE rows (model restore); else the full-lineage DISPLAY set.z active = 1z(active = 1 OR compacted = 1))r)rrors&&&r>_resume_count_scope(SessionMessagesMixin._resume_count_scopes) <- -'' 35TTTr@rc$V^8dQhRRRRRR/#)r7rorKrrer;rSr<)r=s"r>r?rrs"$$3$T$VY$r@c VPW4wr4\VPR\V4 RV 2\ V44^,4#)zHCount the rows a resume would materialize (see ``_resume_count_scope``).z3SELECT COUNT(*) FROM messages WHERE session_id IN () AND )rrSrr&r)rrorr rs&&$ r>get_resume_message_count-SessionMessagesMixin.get_resume_message_countsW%)%=%=j%S" 4>>A-P[B\A]]cdqcr s +  !#$ $r@c(V^8dQhRRRRRRRR/#) r7rorK max_messagesr0rrer;rSr<)r=s"r>r?rrs*S cgtwr@c  B^RIHpHpVfV!4pV^8d \R4hV^8Xd^#VP W4wrg\ VP R\V4 RV R2.VOV^,N54^,4pW8dT!YV'dRR7hRR7hV#) a%Resume row count, or raise ``SessionResumeTooLargeError``. ``max_messages=None`` reads config; 0 disables the guard without counting. ``tip_only`` bounds only the tip's active rows for callers that never materialize the lineage: a heavily compressed conversation is a success, not a rejection.)SessionResumeTooLargeErrorresolved_max_resume_messagesz!max_messages must be non-negativezBSELECT COUNT(*) FROM (SELECT 1 FROM messages WHERE session_id IN (rz LIMIT ?)zin its tip segmentzacross its lineage)scope)r1rrrrrSrr&) rrorrrrr r message_counts &&&$ r>assert_resume_safe'SessionMessagesMixin.assert_resume_safes Z  79L ! @A A 1 %)%=%=j%S" DNN,;;H;U:VW /,,-M{-ML1r?rrsNNcN>RNr@c  VPV4p\V4^8:d.#VPVPVRRRR7RR7pVUu0uF1qDR,V8wgKVR,fK\ VR,4kK3 ppV'g.#VP W1RRRR7pVUUU u.uFGqwP R 4V9gKVP4UU u/uFwrVR 8wgKWbK up pNKI up pp#uupiuup piuup ppi) zAncestor-only display messages of a lineage (row ``session_id != tip``) that ``session.resume`` prepends. Identified by row origin, not ``display[:len(display) - len(model)]``, so alternation repair cannot overcount.ruTr>rrorFrvrK)rrWrr3rSrArr) rror rrj ancestor_idsrmessagerxrs && r>get_ancestor_display_prefix0SessionMessagesMixin.get_ancestor_display_prefixs!..z: { q I//0M0M T$1N1HVZ0\26t$3l:Kz:Y^abf^gCI$ tI,, 4TYko-q#N"kk)&< &LE'--/D/$!Q)^/D"N N u ENs6C>"C>/C>,D D  D+D1D D c V^8dQhRRRR/#r%r<)r=s"r>r?rrs>>>>r@c hVPV4pV'dV^,'d V^,#T#)zROOT id of the lineage: the stable conversation id across compression segments and delegate subagents (Nous Portal usage tagging). Unchanged when there is no recorded parent.)_session_lineage_root_to_tip)rrors&& r>get_conversation_root*SessionMessagesMixin.get_conversation_roots-11*= U1XXuQx=:=r@c V^8dQhRRRR/#)r7rrr;ztuple[Any, bool]r<)r=s"r>r?rrs^^n^AQ^r@c VPR4R8wdR#\V4wrVRJ;'dVRJpV'dVPR4V3#VPR4V3#)z=Return canonical live content and whether *msg* is composite.rrNr)NF)rr )rrr is_composites& r>rN5SessionMessagesMixin._canonical_replayed_user_contentsi 776?f $ 7<d*DDy/D +7y}}Y'Q]]]SWWY=OQ]]]r@c$V^8dQhRRRRRR/#)r7rrrr;zOptional[tuple[Any, str]]r<)r=s"r>r?rrs"#Har@c Ve VRR.39dR#V\P!VRRRR73# \\3dR#i;i)z8Return a hashable key for a column-exact rotation clone.NruFT) ensure_ascii sort_keys separators),:)rLrrOr)rrs&&r>rO3SessionMessagesMixin._exact_replayed_user_clone_keysR  D"b> 9 djjuPTakll l:&  s.AAc$V^8dQhRRRRRR/#)r7r-r.rrr;zOptional[tuple[int, bool]]r<)r=s"r>r?rrs$8L3AF`r@c VPR4R8wdR#\PpV!V4wr4VRR.39dR#\\ V4^, RR4FpW,pVPR4R8Xd@V!V4wrxWs8Xd.V'gV'g\ V\ 4'dWT3u#K^K`VPR4R8XgKxVPR4'gVPR4'gKR# R#) a+Adjacent replay duplicate ``(index, prefer_current)`` or None. Rotation may persist the current ask in the parent and again inside a composite child carrier: carriers compare by canonical live payload, ordinary users by exact string. The child carrier wins (it owns the durable row id and scaffold).rrNrurrrHr)rrmrNrrWrJrK) r-r canonicalrrWindexprev prev_contentprev_is_composites && r>rP:SessionMessagesMixin._find_duplicate_replayed_user_messages 776?f $(II "+C. tRn $3x=1,b"5E?Dxx6)2;D// *BSWabiknWoWo 00Xp*&![0dhhy6I6ITXXVbMcMc6r@c V^8dQhRRRR/#)r7rorKr;rr<)r=s"r>r?rrsWWWWr@c zVP\V34Uu.uFp\V^,4NK up#uupi)zbOrdered physical active ids for rewind CAS checks (includes legacy harness rows projections omit).)rxrrSrs&& r>get_active_message_ids+SessionMessagesMixin.get_active_message_idss1'+~~o }'UV'UCF 'UVVVs8c V^8dQhRRRR/#)r7rorKr;rr<)r=s"r>r?rrsQQCQOQr@c ~VPRV34P4p\V4\RV443#)z?Return active message/tool-call counts inside the caller's txn.zCSELECT tool_calls FROM messages WHERE session_id = ? AND active = 1c3J"TFp\V^,^R7xK R#5i)rNrrs& r>ryASessionMessagesMixin._active_transcript_counts.. sP4Coc!fQ??4r)r}rrWr:)rrors&& r>_active_transcript_counts.SessionMessagesMixin._active_transcript_countss<||adncpqzz|4y#P4PPPPr@c$V^8dQhRRRRRR/#)r7 target_rowrexpected_target_contentrpreserve_compaction_handoffrer<)r=s"r>r?rr s(@@~@X[@z~@r@c  VPR4'g \R4h\/VCRVPVPR44RVP VPR44/C4wrEVf \R4hVPR4p\ V\ 4'd\V4P4pVeWb8wd \R4hV'dVf \R4hV'dV#R#) zValidate an active rewind target; return its handoff scaffold (or None). ``ValueError``: inactive / non-user-originated / missing composite carrier; ``RuntimeError``: live payload changed.r#zrewind target is not activerr4Nz+rewind target is not a user-originated turnz2rewind target changed before it could be persistedz@preserve_compaction_handoff requires an active composite carrier) rrr rrrJrKrrvr)rrrrrr live_contents&&&& r>_split_rewind_target)SessionMessagesMixin._split_rewind_target s~~h'':; ;79c9c#T%9%9*..:S%T  = =jnnM_>` a9cd  JK K }}Y/ lC ( (+L9??AL " .<3ZST T &7?_` `5w?4?r@rrc 0V^8dQhRRRRRRRRR R R R /#) r7rorKtarget_message_idrSrrerrrrr;rr<)r=s"r>r?rr s:<= *target_message_id*, target included (the caller pre-fills it as the next prompt). Returns ``{"rewound_count", "target_message", "new_head_id"}``, plus ``replacement_message_id`` with ``preserve_compaction_handoff`` (archives a composite summary carrier, inserts its hidden handoff scaffold as the new head). ``ValueError``: target missing or not ``user``. ``expected_active_ids`` / ``expected_target_content`` pin the active set and canonical live payload in-txn before any mutation (presentation-only metadata changes don't invalidate a rewind). A live turn lease refuses; expired/dead holders are reclaimed. ``rewind_count`` always increments.)rewind_in_transactionc <S !S VS S SSSR7wrr4T;'d)VPRV34P4^,pWW4V3#))rrrz-SELECT message_uid FROM messages WHERE id = ?)r}r~) rrrhead_idreplacement_idreplacement_uidrrrrrrors & r>r#3SessionMessagesMixin.rewind_to_message.._do+sl7LdJ(9,G$7Qh8j 4JW -bb?.AR2TT\T\T^_`2bOG_L Lr@r rewound_counttarget_message new_head_idreplacement_message_idreplacement_message_uid) hermes_state_mutation_transcriptrr(rrrW) rrorrrrr#rrewoundrrrrs fffddd @r>rewind_to_message&SessionMessagesMixin.rewind_to_message s K M M]a\o\ops\tY [BY $ 4 4Z^^I5N O 9W/?]\g<2-.D-/FH< <8:< r?rr=sKK KcKr@c RV'dRMR,pTPY!'dV34^,#R4^,#)z2Count messages, optionally for a specific session.zSELECT COUNT(*) FROM messagesrrur<r)rrors&& r>r"SessionMessagesMixin.message_count=s9-J1H\^_~~cJJ=GJJBGJJr@c$V^8dQhRRRRRR/#)r7rorKror;rer<)r=s"r>r?rrBs!--#-c-d-r@c ,VPRW34RJ#)zNProbe the accepted-input marker without allocating message bodies or archives.zSELECT 1 FROM messages WHERE session_id = ? AND role = 'user' AND observed = 0 AND (active = 1 OR compacted = 1) AND CASE WHEN json_valid(display_metadata) THEN json_extract(display_metadata, '$.gateway_input_owner') END = ? LIMIT 1Nr)rroros&&&r>has_gateway_input_owner,SessionMessagesMixin.has_gateway_input_ownerBs+~~ [  ! )- - -r@c$V^8dQhRRRRRR/#)r7rorKrr;rer<)r=s"r>r?rrKs" ; ;# ;C ;TX ;r@c ,VPRW34RJ#)abTrue when *platform_message_id* exists (partial-index probe; the gateway's transient-failure dedupe). Uses the idx_messages_platform_msg_id partial index for efficient lookup. Used by the gateway's transient-failure dedupe guard (#47237) to skip re-persisting a user message that was already saved on a prior retry of the same inbound platform message. zOSELECT 1 FROM messages WHERE session_id = ? AND platform_message_id = ? LIMIT 1Nr)rrors&&&r>has_platform_message_id,SessionMessagesMixin.has_platform_message_idKs&~~ ]  -/6:; ;r@ include_resetc$V^8dQhRRRRRR/#)r7rrrrer;r<)r=s"r>r?rrVs(ZZ>ZUYZfjZr@c <VPR4R8XdR#VPR4p\V\4'd\P!V4p\V\ 4'gR#VPR4VPR43pV'dWCPR43, pVPR 4pV'dWT9#\;QJdR V4F 'gK R# R#!R V44# \P dR#i;i) aOTrue when *session* is a branch, delegate, or tool child of its parent (``include_reset``: also a reset fork). Markers only count when they point at ``parent_session_id``: compression copies ``model_config`` onto the continuation, so presence-only matching would misclassify it (same binding as ``_NON_CONTINUATION_CHILD_FILTER_SQL``).r{rT model_configF_branched_from_delegate_from _reset_fromrc3("TFqRJxK R#5irUr<)rwrPs& r>ryCSessionMessagesMixin._is_explicit_fork_child_row..is9YQXA4-QXs)rrJrKrLrMrNrr)rrrcfgmarkers parent_ids&&$ r>r~0SessionMessagesMixin._is_explicit_fork_child_rowVs ;;x F *kk.) c3   jjo#t$$77+,cgg6F.GH   .0 0GKK 34 '0y#Ycc9YQX9YccYcYc9YQX9Y6YY''  sDDDc V^8dQhRRRR/#rr<)r=s"r>r?rrksKKKKr@c lVPV4p\T;'dVPV44#)zRead-only :meth:`_is_explicit_fork_child_row`; a missing row is not a fork (prompt_cache_scope keeps a declared conversation key from crossing the fork boundary).)r}rer~)rrors&& r>is_explicit_fork_child+SessionMessagesMixin.is_explicit_fork_childks2"":.GII @ @ IJJr@c$V^8dQhRRRRRR/#)r7r|rKr{r;r0r<)r=s"r>r?rrqs!666S6]6r@c V'd V'gR#VPRW!34pVeVR,e\VR,4M^pV^8dV#R#)aConversation boundaries (``_RESET_END_REASONS`` ends) this peer has crossed, or ``None`` if never reset. The peer is ``(session_key, source)``, never the key alone (an API caller may legally reuse a Telegram row's key). Read from ``conversation_generations`` (advanced in each boundary's txn), not an aggregate over session rows: deletes/prunes would re-emit a retired pair. Rows are never GC'd (dropping one re-issues generation 1: the ABA this prevents). Wall-clock-free, so a backwards NTP correction cannot reorder it. DBs upgraded mid-conversation take their first generation from the next boundary written (a pre-upgrade reset shares its predecessor's scope once: costs a warm prompt-cache bucket, never crosses an identity).NzTSELECT generation FROM conversation_generations WHERE source = ? AND session_key = ? generationr)rr|r{rjrs&&& r>latest_conversation_boundary1SessionMessagesMixin.latest_conversation_boundaryqsV&nn b  !#033|CTC`S\*+fg '!^z55r@c V^8dQhRRRR/#rr<)r=s"r>r?rrs!!!!r@c 6aV3RlpVPV4R#)z9Delete all messages for a session and reset its counters.c\<VPRS34VP\S34R#)rN)r}_RESET_COUNTERS_SQL)rros&r>r#0SessionMessagesMixin.clear_messages.._dos% LLDzm T LL,zm clear_messages#SessionMessagesMixin.clear_messagess = C r@dry_runbackupc$V^8dQhRRRRRR/#)r7rrerr;rr<)r=s"r>r?rrs" 2 2 2d 2^l 2r@c aa a ^RIHo RV 3Rllo R V3RllpVP4;_uu_4pS !V4pRRR4S'g X'g V!X4#RpV'd^RIpVPP 4P R4p\ VPPVPP RV 244pVP;_uu_4VPPRV34RRR4\PR V4V 3R lp VPV 4pV'd \PR \!V44V!WV4# +'giEL3;i +'giL;i) aPermanently clear bare tool-call marker content ("[memory]") left by pre-fix sessions (``_rows_to_conversation`` repairs it in memory; this stops the re-scan). Only ``content`` is touched. ``backup``: ``VACUUM INTO`` snapshot first (none when nothing changes).)_STALE_TOOL_CALL_MARKER_REcV^8dQhRR/#)r7r;rr<)r=s"r>r?HSessionMessagesMixin.purge_stale_tool_call_markers..__annotate__s u uI ur@c<VPR4pVP4Uu.uFYp\VR,\4'gK"SP VR,P 44'gKPVR,NK[ up#uupi)ziSELECT id, content FROM messages WHERE role = 'assistant' AND tool_calls IS NOT NULL AND tool_calls != ''rr)r}rrJrK fullmatchrv)rcursorrjrs& r>_find_affectedJSessionMessagesMixin.purge_stale_tool_call_markers.._find_affecteds\\#[\F)/):u):#c)nc27Q7[7[\_`i\j\p\p\r7sCII):u uusB )B7 BNc*<RSR\V4RVRV/#)r rows_affectedrow_ids backup_path)rW)affectedrrs&&r>_resultCSessionMessagesMixin.purge_stale_tool_call_markers.._results!wX S[]jlwx xr@z %Y%m%d_%H%M%Sz.pre-clean-markers-backup-z VACUUM INTO ?z3Backed up state.db to %s before clean-markers writecf<S!V4pV'd VPR\V4 R2V4V#)z.UPDATE messages SET content = '' WHERE id IN (r3)r}r&)rrr s& r>r#?SessionMessagesMixin.purge_stale_tool_call_markers.._dos6 &C Mm\_N`MaabcehiJr@zIPermanently cleared %d stale tool-call marker row(s) in state.db (#78148)rU)r1rrdatetimerdstrftimerKdb_path with_namename_lock_connr}rrkr(rW) rrrrr affected_idsrrstampr#rr s &d$ @@r>purge_stale_tool_call_markers2SessionMessagesMixin.purge_stale_tool_call_markerss& < u u  y ^^  )$/L ,<( (%)  %%))+44_EEdll44 8I8I7JJdejdk5lmnK ""?[NC KKM{ [  **3/  KKcehiuev w|11)  s E&$E:& E7 : F )rk)NrFFF)NNNNNNNNNNNNFNFNNNNNNrN)NNNr)FFF)NNNrNNNN)FFNrFNF))FFFFF)FrU)er __module__ __qualname____firstlineno____doc__r classmethodrr staticmethodrrrrrrrr rr*r4r8rrVr;rhrorrrrrrrrrGrrrrrrrr rrr*rGrUrSr'rprtr{rrrrrrr=rrrrrrrrrrr,r3r rBrGrXrAryrrrrrrrNrOrPrrrrrrrr~rrrr!__static_attributes__r<r@r>rmrmzsru F66,,," __ 7C^@.4%8U $E$jo(N"> ^^0WQQ @&rr$r%)r)ar' __future__rrrLloggingrertypingrrrrrragent.context_compressorr rir r r r agent.memory_contextragent.message_metadatarrrrrrrrrrrragent.message_sanitizationrrhermes_cli.timefmtrhermes_state_commonrr r!r"r#r$r%r&r'hermes_state_detached_resultsr(hermes_state_todor)hermes_state_identityr*r+r,r-r.r/r0 getLoggerrr rfindallsplitr frozensetrrrrrrrrrrrrr}r<rrr_rrFrQrXr^rbrkrmr<r@r>r<st#  88<<2ccccS+IIIF4SSS   > *oJJv*00a8;AA#qI!LM!!78;__eb=&'94Ba;abccklfiLNdd bc[PP_Oi"ZW 8 ,aR L f o268No2r@