+ jHjXRt^RIHt^RIt^RIHtHtHtHtH t H t H t ^RI H t HtHt]P"!]4tRRltRRltR R lt]!R R 04t!R R]4t!RR4tR#)uCrossed-profile durable state in ONE ``state.db`` — finders and fixers for ``hermes sessions repair-profiles`` (#88715 PR-6). Every ``state.db`` belongs to exactly one profile (``/state.db`` → ``default``, ``/profiles//state.db`` → ``name``) and every gateway session key encodes the profile that owns the conversation (``agent:main:…`` for the default, ``agent::…`` for a named one). The per-profile store model (#88734) is forward-only: it routes NEW writes to the right store but never touched rows that had already landed in the wrong one, and the identity fences (``_INHERIT_PARENT_META_SQL``, ``_recovered_row_allowed_for_active_profile``) only refuse to *widen* damage that already exists. This module is the backward-looking half: it names each crossed row and can settle it. Store-level only. Which profiles exist, which store owns which home, whether a live gateway holds the routing index in memory, and the JSON files outside ``state.db`` are the orchestrator's concern (``hermes_cli/sessions_repair_profiles.py``). Moving a session between two stores is two single-store transactions — copy into the target, then delete from the source — because a crash between them leaves a *duplicate*, which the next run settles idempotently (:meth:`import_moved_session` reports ``present``; the delete only proceeds when the target holds at least as many messages). The reverse order would lose the row. ) annotationsN)AnyDictIterableListOptionalSetTuple) _id_chunks _placeholdersemit_session_deletedc V^8dQhRRRR/#) session_keyrreturn Optional[str])formats"@/home/ubuntu/.hermes/hermes-agent/hermes_state_profile_repair.py __annotate__r$s 8 8S 8] 8c\V\4'gR#VPR4p\V4^8gV^,R8wgV^,'gR#^RIHpV!V^,4#)uProfile encoded in an ``agent::…`` gateway key (``default`` for ``main``), or None for a keyless row (CLI/subagent lineage) or a key another producer minted (hosted rooms, tests).N:agent)"profile_from_session_key_namespace) isinstancestrsplitlenhermes_state_keysr)rpartsrs& rsession_key_profiler!$sW k3 ' '   c "E 5zA~qW,E!HHD -eAh 77rc V^8dQhRRRR/#)rvaluerrrr)rs"rrr0s3=rc`\T;'gR4P4pT;'gR#)zY``sessions.profile_name`` as a comparable label; NULL/blank is "unowned", not a crossing.N)rstrip)r#names& r_stored_profiler(0s' u{{  ! ! #D <<4rc V^8dQhRRRR/#)rtablerrz list[str]r)rs"rrr6sMMM MrcbVPRV R24Uu.uF q"^,NK up#uupi)zPRAGMA table_info('z'))execute)connr*rows&& r_table_columnsr/6s3"ll-@r+JK LKsFFK LL Ls,id display_orderc2a]tRt^AtRtRV3RlltRtV;t#)SessionLedgeredErrorzOA session with gateway admission/worker history cannot be moved between stores.c V^8dQhRRRR/#)r session_idrrNoner)rs"rr!SessionLedgeredError.__annotate__DsZZ3Z4Zrc ,<\SV`V R24R#)z0 has gateway admission/worker history; not movedN)super__init__)selfr5 __class__s&&rr:SessionLedgeredError.__init__Ds J<'WXYrr)__name__ __module__ __qualname____firstlineno____doc__r:__static_attributes__ __classcell__)r<s@rr3r3AsYZZrr3c]tRt^HtRtRRltRRltRRltRR ltR R lt R R lt RRlt RRlt RRlt ]RRl4tRRltRRltRRltRRltRRltR R!ltR"tR##)$SessionProfileRepairMixinz^Per-store crossed-profile identity: find, relabel, sever, move, and settle routing/topic rows.c V^8dQhRRRR/#)rownerrrzdict[str, list[dict[str, Any]]]r)rs"rr&SessionProfileRepairMixin.__annotate__Ms$$3$;Z$rc VPR4pVP4pR.R.R./pVEFp\VR,4pVfK\VR,4pVe5Wv8wd/VR,P RVR,RVR,RVRV/4Wa8wd^VR,P RVR,RVR,RTR \ VR ,;'g^4R VR ,R VR,V9/4\VR ,4pVfKW8wgKVR,P RVR,RVR VR ,R V/4EK V#)uVKeyed session rows whose identity disagrees with itself or with this store. ``mislabelled``: ``profile_name`` names a profile other than the one in the row's own key (the key is what routing, the agent cache and ``_db_for_key`` consult; the label is stamped after the fact). ``foreign``: the key's profile is not *owner* — the row sits in a store that the routed profile never reads. ``crossed_parents``: child and parent are both keyed and name different profiles, so the NULL-fill inheritance fence would have been the only thing standing between them. A row can appear in more than one list. zSELECT s.id, s.session_key, s.profile_name, s.parent_session_id, s.message_count, p.session_key AS parent_session_key FROM sessions s LEFT JOIN sessions p ON p.id = s.parent_session_id WHERE s.session_key LIKE 'agent:%' ORDER BY s.started_at, s.id mislabelledforeigncrossed_parentsr profile_namer0 key_profile message_countparent_session_idledgeredparent_session_keyparent_profile) _read_all_ledgered_session_idsr!r(appendint) r;rHrowsrRfoundr.rOlabelrTs && rfind_crossed_profile_sessions7SessionProfileRepairMixin.find_crossed_profile_sessionsMsv~~ MN --/2?YPRTegi1jC-c-.@AK"#C$78E U%9m$++#d)]C 4F"E=+-GH#i ''#d)]C 4F Wb#S_)=)B)B%C'-@)A:sSWy\dOd)fg15I1JKN)n.K'(//#d)]K'-@)ACSUc1ef!& rcV^8dQhRR/#)rrset[str]r)rs"rrrIss00x0rc *RpVPV4#)a"Sessions the gateway's durable ledger references (``session_admissions`` / ``worker_executions``, both ``ON DELETE RESTRICT``). A move copies only the transcript, so such a row could never leave the source: report it instead of copying it. A store whose schema predates the ledger has none.c(VPR4Uu0uF q^,kK pp\4pRV9d(VPRVPR444RV9d(VPRVPR444V#uupi)ziSELECT name FROM sqlite_master WHERE type='table' AND name IN ('session_admissions', 'worker_executions')session_admissionsc32"TF q^,xK R#5iNr.0rs& r QSessionProfileRepairMixin._ledgered_session_ids.._read..~ss)rAQ44)rz9SELECT DISTINCT target_session_id FROM session_admissionsworker_executionsc32"TF q^,xK R#5irdrrfs& rrirjsk)jAQ44)jrkz1SELECT DISTINCT session_id FROM worker_executions)r,setupdate)r-r.tablesidss& r_read>SessionProfileRepairMixin._ledgered_session_ids.._readxs(, J)KL)K!ff)KFL EC#v- s6q)rss"f, k6i)jkkJLsB)_read_retrying_ioerr)r;rrs& rrV/SessionProfileRepairMixin._ledgered_session_idsss ((//rcV^8dQhRR/#rrzlist[dict[str, Any]]r)rs"rrrIs,,+?,rc `VPR4Uu.uFp\V4NK up#uupi)zbSELECT scope, session_key, entry_json, updated_at FROM gateway_routing ORDER BY scope, session_key)rUdict)r;r.s& rlist_gateway_routing_rows3SessionProfileRepairMixin.list_gateway_routing_rowss:%)^^ *&+,&+cS &+, ,,s+cV^8dQhRR/#rwr)rs"rrrIs7Krc Rp.pVPV4F5p\VR,4pVR9gKVP/VCRV/C4K7 V#)a ``telegram_dm_topic_bindings`` rows labelled ``default`` whose ``session_key`` names a named profile: written by a multiplexer that had not yet learned to stamp the routed profile (#76423). Stores whose topic tables predate ``profile_name`` have nothing to relabel.cVPR4Uu0uF q^,kK ppV'dR\VR49d.#VPR4Uu.uFp\V4NK up#uupiuupi)zYSELECT name FROM sqlite_master WHERE type='table' AND name = 'telegram_dm_topic_bindings'rNtelegram_dm_topic_bindingszSELECT chat_id, thread_id, session_key FROM telegram_dm_topic_bindings WHERE profile_name = 'default' ORDER BY chat_id, thread_id)r,r/ry)r-r.existings& rrrNSessionProfileRepairMixin.find_profile_less_telegram_topic_rows.._reads*.,,k+mn+m3A+mHn~^DJf5gg )-M*NO*N#DI*NO O nOs A,A1rrONdefault)rtr!rW)r;rroutr.rOs& r%find_profile_less_telegram_topic_rows?SessionProfileRepairMixin.find_profile_less_telegram_topic_rowss\ O,,U3C-c-.@AK"33 >c>=+>?4 rc V^8dQhRRRR/#)rr5rrrXr)rs"rrrIs))S)S)rc `VPRV34pV'd\V^,4#^#)z2SELECT COUNT(*) FROM messages WHERE session_id = ?) _read_onerX)r;r5r.s&& rcount_messages_all,SessionProfileRepairMixin.count_messages_alls,nnQT^S`a!s3q6{(q(rc V^8dQhRRRR/#rrq Iterable[str]rrXr)rs"rrrIs((=(S(rc ba\V4oS'g^#RV3RllpVPV4#)zSet ``profile_name`` to the profile in each row's own key. Re-derives the target inside the transaction (never trusts a stale report).cV^8dQhRR/#rrrXr)rs"rrOSessionProfileRepairMixin.relabel_sessions_to_key_profile..__annotate__s   rc  <^p\S4FppVPR\V4 R2V4P4pVF:wrE\ V4pVfKWPRWdV34P , pK< Kr V#)rez2SELECT id, session_key FROM sessions WHERE id IN ()zKUPDATE sessions SET profile_name = ? WHERE id = ? AND profile_name IS NOT ?r r,_session_ids_placeholdersfetchallr!rowcount)r-changedchunkrYr5rtargetwanteds& r_doFSessionProfileRepairMixin.relabel_sessions_to_key_profile.._dosG#F+||HIbchIiHjjkl#8:04+J0=F~ ||eV4 66>h?G 04 ,Nrlist_execute_writer;rqrrs&& @rrelabel_sessions_to_key_profile9SessionProfileRepairMixin.relabel_sessions_to_key_profiles1c  ""3''rc V^8dQhRRRR/#rr)rs"rrrIs(((3(rc ba\V4oS'g^#RV3RllpVPV4#)uDetach children from a parent keyed under another profile. Only ``parent_session_id`` is cleared — ``profile_name`` stays the row's own (relabelled separately when it is wrong) — and only while the crossing still holds.cV^8dQhRR/#rr)rs"rrESessionProfileRepairMixin.sever_crossed_parents..__annotate__s   rc:<^p\S 4FpVPR\V4 R2V4P4pVFRwrEp\ V4\ V4rVfK!VfK'Wx8wgK/WPRV34P , pKT K V#)rezwSELECT s.id, s.session_key, p.session_key FROM sessions s JOIN sessions p ON p.id = s.parent_session_id WHERE s.id IN (rz9UPDATE sessions SET parent_session_id = NULL WHERE id = ?r) r-severedrrYr5key parent_keyminetheirsrs & rr._dosG#F+||&&?&F%GqJKPRS[RZR\48/JZ#6s#;=PQ[=\&'F,>4><<WZdYf$hhphpq48 ,Nrrrs&& @rsever_crossed_parents/SessionProfileRepairMixin.sever_crossed_parentss1c  ""3''rc V^8dQhRRRR/#)rr5rrzOptional[dict[str, Any]]r)rs"rrrIs#:Rrc ~aV3RlpVPV4pVe!SVP49d \S4hV#)uEverything the target store needs to hold *session_id* as its own: the row (every column), the resolved system prompt, EVERY message row (inactive and compacted generations included — a move is not an export) and its usage rows.c <aSPRS34P4pVfR#V3RlpVR,'dV!VR,4MRpVR,'dV!VR,4MRpSPRS34Uu.uFp\V4NK ppSPRS34Uu.uFp\V4NK ppR\V4RVR VR VR V/#uupiuupi) z#SELECT * FROM sessions WHERE id = ?Ncl<SPRV34P4pV'd V^,#R#)z0SELECT prompt FROM system_prompts WHERE hash = ?N)r,fetchone) prompt_hashr.r-s& r_storedQSessionProfileRepairMixin.export_session_for_move.._read.._storeds2ll#UXcWefooq!$s1v.$.rsystem_prompt_hash tool_namesz7SELECT * FROM messages WHERE session_id = ? ORDER BY idz6SELECT * FROM session_model_usage WHERE session_id = ?session system_prompttool_pinmessagesusage)r,rry) r-rrpromptrrhrrr5s f rrr@SessionProfileRepairMixin.export_session_for_move.._reads ll#H:-XaacG /@GG[?\?\WW%9:;bfF9@9N9Nww|45TXH)-IJ=*Z[*ZAQ*ZH[&*llH:-'YZ'YT!W'YEZtG}ovzS[]giqU$ $ [Zs C0C )rtrVr3)r;r5rrpayloads&f rexport_session_for_move1SessionProfileRepairMixin.export_session_for_movesB $ ++E2  :1K1K1M#M'z2 2rc$V^8dQhRRRRRR/#)rrdict[str, Any]rNrrr)rs"rrrIs" ( (N (S (UX (rc ~aaaaa\SR,4oSR,oRVVVVV3RllpSPV4#)uhInsert a moved session into THIS store as *profile_name*'s. ``present`` when the id already exists (an earlier run copied but did not delete), else ``imported``. The parent link survives only when the parent is already here — a moved row must never point across stores or at a row of another profile. Columns the target schema lacks are dropped, never invented. Titles are unique per store only, so a title an unrelated row here already holds gets the moved row's id tail (the :meth:`import_foreign_history` convention); the resident row keeps its name, since it is the one this profile's clients resolve by title.rr0cV^8dQhRR/#)rrrr)rs"rrDSessionProfileRepairMixin.import_moved_session..__annotate__s   rc<VPRS 34P4'dR#SS R&S PR4pV'd)VPRV34P4fRS R&S PR4pVeZVPRV34P4'd3RS RR R2pVRSP\ V4, V,S R&SP VSPR 44S R &SPR 4f*\ S PR 4;'gR 4^@8Xd%SP VSPR 44S R &SP VRS \4R7SPR4;'g.F"pSP VR/VCRS /C\R7K$ SPR4;'g.F&pSP VR/VCRS /C\4R7K( R#)#SELECT 1 FROM sessions WHERE id = ?presentrNrQNtitlez&SELECT 1 FROM sessions WHERE title = ? (rrrrrr%sessions)skiprr5rsession_model_usageimportedi) r,rgetMAX_TITLE_LENGTHr_store_system_prompt _insert_row frozenset_MESSAGE_MOVE_SKIP) r- parent_idrsuffixmessagerrrNr;rr5s & rr;SessionProfileRepairMixin.import_moved_session.._dos||AJ=QZZ\\ &2GN # $78IT\\*OR[Q]^ggiq/3+,KK(E T\\2Z]b\d%e%n%n%p%pj./q1#()M$*?*?#f+*M#NQW#W ,0,E,EdGKKXgLh,iG( ){{:&2c'++l:S:Y:YWY6Z^`6`(,(A(A$ T^H_(` %   T:wY[  I";;z288b8  z3Xg3X|Z3X_q r9 W-333  '<>a>a V`>ahqhs t4r)ryr)r;rrNrrr5sffd @@rimport_moved_session.SessionProfileRepairMixin.import_moved_sessions:wy)*T]   *""3''rc(V^8dQhRRRRRRRR/#) rr*rvaluesrrrrr6r)rs"rrrIs)***n*y*UY*rc  \W4Uu.uFqDV9gK WC9gKVNK ppTPRV RRPV4 RRPRV44 R2VUu.uF qBV,NK up4R#uupiuupi)z INSERT INTO rz, z ) VALUES (c3&"TFpRxK R#5i)?Nr)rg_s& rri8SessionProfileRepairMixin._insert_row..sKaY`TUCY`srN)r/r,join)r-r*rrccolumnss&&&$ rr%SessionProfileRepairMixin._insert_rows,T9[9&[1Q]119[ 5'DIIg$6#7z$))KaY`KaBaAbbc d ' (1AYY ( *\ )sBBB*B c V^8dQhRRRR/#)rr5rrboolr)rs"rrrIsstrc aaRVV3RllpSPV4pV'd\SS.RR7\V4#)zRemove a session this store no longer owns after the target confirmed it. Children left behind are detached (same FK rule as :meth:`delete_session`); topic bindings on the row cascade with it.cV^8dQhRR/#)rrrr)rs"rrDSessionProfileRepairMixin.delete_moved_session..__annotate__s   rc <VPRS34P4fR#VPRS34VPRS34VPRS34VPRS34SPV4R#)rFzHUPDATE sessions SET parent_session_id = NULL WHERE parent_session_id = ?z)DELETE FROM messages WHERE session_id = ?z4DELETE FROM session_model_usage WHERE session_id = ?z!DELETE FROM sessions WHERE id = ?T)r,r#_delete_unreferenced_system_prompts)r-r;r5s&rr;SessionProfileRepairMixin.delete_moved_session.._dos|||AJ=QZZ\d LLcfper s LLDzm T LLOR\Q^ _ LL:…`` (+ ``profile_name``) for rows a standalone gateway wrote before this store's profile was multiplexed (#113884). Only rows still under the legacy namespace change; a ``main``-named profile is written in its marked form.)_session_key_namespacercV^8dQhRR/#rr)rs"rrJSessionProfileRepairMixin.rekey_legacy_main_sessions..__annotate__4s   rc<^p\S4F7pWPR\V4 R2SS.VO54P, pK9 V#)rez^UPDATE sessions SET session_key = ? || substr(session_key, 12), profile_name = ? WHERE id IN (z0) AND substr(session_key, 1, 11) = 'agent:main:')r r,rr)r-rrnew_nsrrs& rrASessionProfileRepairMixin.rekey_legacy_main_sessions.._do4s^G#F+<<$$=e$D#EEuwW-u-/08x8, Nr)gateway.sessionrrr)r;rqrrrrrs&&f @@rrekey_legacy_main_sessions4SessionProfileRepairMixin.rekey_legacy_main_sessions*sC ;c'036  ""3''rc V^8dQhRRRR/#)rrYzIterable[tuple[str, str]]rrXr)rs"rrrI>s ( (0I (c (rc ba\V4oS'g^#RV3RllpVPV4#)recV^8dQhRR/#rr)rs"rrKSessionProfileRepairMixin.delete_gateway_routing_rows..__annotate__Cs * * *rc0<a\V3RlS44#)c3b<"TF$wrSPRW34PxK& R#5i)z?DELETE FROM gateway_routing WHERE scope = ? AND session_key = ?Nr,r)rgscoperr-s& rriUSessionProfileRepairMixin.delete_gateway_routing_rows.._do..Ds9*"(JE||QTYS_aaiaij"(s,/sumr-rsfrrBSessionProfileRepairMixin.delete_gateway_routing_rows.._doCs*"(** *rrr;rYrrs&& @rdelete_gateway_routing_rows5SessionProfileRepairMixin.delete_gateway_routing_rows>s/d * *""3''rc V^8dQhRRRR/#)rrYz%Iterable[tuple[str, str, str, float]]rrXr)rs"rrrIIs ( (:_ (dg (rc ba\V4oS'g^#RV3RllpVPV4#)uAdopt ``(scope, session_key, entry_json, updated_at)`` rows another store held for this one's routing index. An existing key wins — the row the gateway actually loads stays.cV^8dQhRR/#rr)rs"rrUSessionProfileRepairMixin.insert_gateway_routing_rows_if_absent..__annotate__Ps H H Hrc0<a\V3RlS44#)c3\<"TF!pSPRV4PxK# R#5i)zfINSERT OR IGNORE INTO gateway_routing (scope, session_key, entry_json, updated_at) VALUES (?, ?, ?, ?)Nr )rgr.r-s& rri_SessionProfileRepairMixin.insert_gateway_routing_rows_if_absent.._do..Qs4H@F||&'*,,4H5@Fs),r rsfrrLSessionProfileRepairMixin.insert_gateway_routing_rows_if_absent.._doPs!H@FHH Hrrrs&& @r%insert_gateway_routing_rows_if_absent?SessionProfileRepairMixin.insert_gateway_routing_rows_if_absentIs3d H H""3''rc V^8dQhRRRR/#)rrYzIterable[dict[str, Any]]rdict[str, int]r)rs"rrrIXs"("(0H"(^"(rc vaa\V4oR^R^R^/oS'gS#RVV3RllpVPV4#)zStamp the key's profile onto ``default``-labelled bindings (and the chat's mode row when only the default one exists). A binding that would collide with one the named profile already wrote is the stale duplicate and is removed.bindings_relabelledbindings_duplicates_removedmode_rows_relabelledcV^8dQhRR/#)rrrr)rs"rrKSessionProfileRepairMixin.relabel_telegram_topic_rows..__annotate__as   rc j<R\VR49pSEFp\VR,4pVR 9dKVR,VR,rTVPRW4V34P4pV'd2SR;;,VPRWE34P, uu&M1SR;;,VPR W4V34P, uu&V'gKVPR W434P4eKSR ;;,VPR W434P, uu&EK S#)rNtelegram_dm_topic_moderchat_id thread_idzaSELECT 1 FROM telegram_dm_topic_bindings WHERE profile_name = ? AND chat_id = ? AND thread_id = ?r"zgDELETE FROM telegram_dm_topic_bindings WHERE profile_name = 'default' AND chat_id = ? AND thread_id = ?r!zwUPDATE telegram_dm_topic_bindings SET profile_name = ? WHERE profile_name = 'default' AND chat_id = ? AND thread_id = ?zKSELECT 1 FROM telegram_dm_topic_mode WHERE profile_name = ? AND chat_id = ?r#zaUPDATE telegram_dm_topic_mode SET profile_name = ? WHERE profile_name = 'default' AND chat_id = ?r)r/r!r,rr) r-mode_has_profiler.rr(r)collidescountsrs & rrBSessionProfileRepairMixin.relabel_telegram_topic_rows.._doas6-F^1__ ,S-?@..%(^S5E<<(*09)EGGOxz89T\\<>E=Q>SS[S[\901T\\<>Dy=Y6[[c[cd1$# e))++38:)>12dll*,2+<7>>FhG2',Mrr)r;rYrr,rs&& @@rrelabel_telegram_topic_rows5SessionProfileRepairMixin.relabel_telegram_topic_rowsXsHd',I1NdfghM  2""3''rc$V^8dQhRRRRRR/#)rplatformrr(rr_r)rs"rrrI~s&ccccCcHcrc VPRV\V434pRV4Uu0uF qDfKVkK up#uupi)uProfiles whose keyed sessions hold *(platform, chat_id)* in this store — the evidence for who owns a profile-less ``gateway_voice_mode.json`` entry.ziSELECT DISTINCT session_key FROM sessions WHERE source = ? AND chat_id = ? AND session_key LIKE 'agent:%'c3F"TFp\VR,4xK R#5i)rN)r!rfs& rriBSessionProfileRepairMixin.key_profiles_for_chat..sP4a/-0@AA4s!)rUr)r;r1r(rYps&&& rkey_profiles_for_chat/SessionProfileRepairMixin.key_profiles_for_chat~sH~~ -/7W.FHQ4PbPaPbbbs<<rN)r>r?r@rArBr\rVrzrrrrrr staticmethodrrrrrr.r6rCrrrrFrFHsnh$L0", &) (.(26 (D** ((( ( ("(LccrrF)rB __future__rloggingtypingrrrrrrr hermes_state_commonr r rr getLoggerr>loggerr!r(r/rr RuntimeErrorr3rFrrrr@su*#BBB   8 $ 8 Mo67Z<Z|c|cr