+ iHja Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI H t ^RI H t H t H t Ht^RIHt^RIHtHt^RIHt]P,!4tRt^t^dtR tR]t^t0R^mt]P>!R ]P@4t!]P>!R R PE]#!]]$R R74,R,4t%R_t&R`t'Rat(.RbO.RcO.RdO.ReO.RfO3t)Rgt*] !R R7!RR44t+] !R R7!RR44t,RRlt-RRlt.RRlt/RRlt0Rt1RRlt2R R /R!R"llt3R#R$lt4R%R&lt5R'R(lt6R)R*lt7R+R,lt8R-R.lt9R/R0lt:R1R2lt;R3R4ltRhR9R:llt?R;R<lt@R=R>ltAR?R@ltBRARBltCRCRDltDRERRFRRG^RHRI/RJRKlltERHRI/RLRMlltFRFRRNRORPRQRHRI/RRRSlltGRTRUltHRVR/RWRXlltIRYRZltJR[R\ltKR#)iuCoding verification evidence ledger: records what the agent actually proved in a code workspace. Deliberately passive — it never runs a suite, never blocks completion, and never upgrades targeted checks into "repo green".) annotationsN) dataclass)datetime timedeltatimezoneUTC)Path)AnyOptionalget_hermes_homeii'z\.(?:exe|bat|cmd)$z^(?:|T)keyreversez)(?:[0-9]+(?:\.[0-9]+)*)?$)frozenc0]tRt^\t$R]R&RtR]R&RtR#) _ShellSegment list[str]tokensN str | Nonefollowing_operator)__name__ __module__ __qualname____firstlineno____annotations__r__static_attributes__r@/home/ubuntu/.hermes/hermes-agent/agent/verification_evidence.pyrr\s %) )rrc]tRt^bt$RtR]R&R]R&R]R&R]R&R]R&R]R &R]R &R]R &R]R &R tR]R&RtR#)VerificationEvidencez,A classified command result worth recording.strcommandcanonical_commandkindscopestatusint exit_codecwdroot session_idoutput_summaryrN)rrrr__doc__rr.rrrrr!r!bs=6 L I J KN H IONCrr!cV^8dQhRR/#)returnr"r)formats"r __annotate__r4rs))#)rcR\P!\4P4#N)rnowr isoformatrrr_utc_nowr9rs <<  & & ((rcV^8dQhRR/#)r1r2rr)r3s"rr4r4vs::$:rc$\4R, #)verification_evidence.dbr rrr_db_pathr=vs  9 99rcV^8dQhRR/#)r1r2boolr)r3s"rr4r4zs$$$rc^RIHpV!4#)zThe ledger exists only to feed verify-on-stop; when that guard is off nothing may record, read, or even create the database (an unconsumed ledger is pure disk churn).verify_on_stop_enabled)agent.verification_stoprBrAs r_ledger_enabledrDzs? ! ##rcV^8dQhRR/#)r1r2sqlite3.Connectionr)r3s"rr4r4s__$_rc<^RIHpV!\4R\R7#)open_dbr<)db_label initialize)hermes_cli.sqlite_utilrJr=_ensure_schemarIs r_connectrOs. 8:(B~ ^^rc.^RIHpV!\44#)rH transaction)rMrRrOrQs r _transactionrSs2 xz ""rc V^8dQhRRRR/#)r1connrFr2Noner)r3s"rr4r4s+rc\FpVPV4K VPR\\434VP 4R#)zDINSERT OR REPLACE INTO meta(key, value) VALUES ('schema_version', ?)N) _SCHEMA_DDLexecuter"_VERIFY_SCHEMA_VERSIONcommit)rUddls& rrNrNs> SLLN # $& KKMrposixc$V^8dQhRRRRRR/#)r1r#r"r]r?r2list[_ShellSegment]r)r3s"rr4r4s":?:?3:?$:?BU:?rc h.p^pRpRp^pV\V48Ed.W,pV'gVR8XdVR8wdV'*pV^, pKAV'gVR9d Wt8XdRM T;'gTpV^, pKoRpVPRV4'd WV^,pMMVR8XdRpMCVR9g;VR 8Xd6V^8XgW^, ,R 9dVPRV4'gTpVf V^, pKWVP4p V 'g.#VPW34YgR8Xd^M \V4, pTpEK>V'g V'd.#WRP4p V 'dVPV R34MV'dVR,^,R8wd.#VU Uu.uF&wr\ \ P !WR 7V4NK( p p p\;QJdR T 4F 'dK RM R M !R T 44'dT #.#uupp i \d.u#i;i)zTokenize top-level shell commands while preserving their control operators. Returns ``[]`` for anything unparseable (unbalanced quotes, empty segment, trailing operator other than ``;``) so callers never match a partial parse. NF\'z'" ;z;|&z<>r]c38"TFqPxK R#5ir6)r.0ss& r (_split_shell_segments..s6X88XsT)&&|||&)z&>z&>>) len startswithstripappendrshlexsplit ValueErrorall) r#r] raw_segmentsstartquoteescapedindexcharoperatorrawtrailingsegmentss &$ r_split_shell_segmentsrs 24L EEG E #g, ~ tt| !kG QJE  DEM MD E QJE    0% 8 8UQY/H T\H T\ CK!wqy1=&&}e<<H   QJE E"((*ISO, dlH 5  v$$&HXt,- ,r*1-4 `lm`l}sM%++c"?J`lms6X6sss6X6668>B>n  s$)H!.,HH!H!! H10H1c(V^8dQhRRRRRRRR/#)r1rr_ match_indexr(r)r2r?r)r3s"rr4r4s1JJ+>JSJ]`JeiJrcV'dW^Tu;8:d\V48d?MR#\;QJdRV4F 'gK RM RM !RV44'dR#\R\VRR44^R7pW8dR#WRUu0uFqDPkK ppV0R m,'dR#V'*;'g\ V4^8H;'dVR08H#uupi) zWhether the shell's status proves the matched segment's own status. Only the last ``;``-separated sequence reports its status; backgrounding, pipes and ``||`` hide it; an ``&&`` chain proves each member only on success. c3>"TFqPR8HxK R#5i)reNrrhs& rrk/_exit_status_is_attributable..sBqhpcdCWCW[^C^hpsTFc3^"TF#wrVPR8XgKV^,xK% R#5i)rdNr)riirjs& rrkrs)S341q7K7Ks7RQ3s--N)defaultrmrp>r rorn)rqanymax enumeraterr()rrr)sequence_startsegment operatorss&&& r_exit_status_is_attributablers 1 ;c(m;@CsBqhpBqsssBqhpBq?q?qS9Xcr]3S]^N#;CSU;VW;V++;VIW$$$= I IS^q0HHY4&5HIXsC#c V^8dQhRRRR/#)r1 canonicalr"r2rr)r3s"rr4r4src \P!V4Uu.uF2q'gK \P!RRVP 44NK4 up#uupi \ d.u#i;i)zGTokenize a canonical command, stripping leading ``./`` from each token.z ^(?:\./)+r-)rurvresubrsrw)rts& r_canonical_tokensrsW=B[[=SY=SWX3|R3=SYYY  s'A A*AAA A*)A*c V^8dQhRRRR/#)r1rrr2r)r3s"rr4r4s) rc*V'dV^,R8Xd^M^pV\V48d6RW,9d)W,PR4'g V^, pKEV\V48dW,R9d V^, pK(\WR4#)zCRemove harmless command prefixes (env, VAR=x, command/time/noglob).env=-N>timenoglobr#)rqrrlist)rrs& r_strip_command_prefixrsr q U*A c&k/cVY.vy7K7KC7P7P Q c&k/fi+HH Q r rc V^8dQhRRRR/#)r1needlerr2zlist[list[str]]r)r3s"rr4r4s   o rcFV.p\V4^8d>V^,R8Xd0V^,R9d"VPV^,V^,.4\V4^8Xd,RV^,9dVRV^,.RV^,.., pVR.8XdV\, pV#)zFReturn command spellings equivalent to the detected canonical command.run/bashshpytest>bunnpmpnpmyarn)rqrt_PYTEST_SPELLINGS)r candidatess& r_equivalent_needlesrsJ 6{aF1I.6!9@^3^6!9fQi01 6{aC6!9,q *T6!9,=>>  ('' rc(V^8dQhRRRRRRRR/#) r1r#r"canonical_commandsrr)r(r2zOptional[tuple[str, list[str]]]r)r3s"rr4r4s*  3 I RU Zy rcF\V4pVFp\V4pV'gK\V4Fhwrg\VP4p\ V4F?p VR\ V 4V 8XgK\W6V4'gK,WH\ V 4R3uuu# Kj K R#)zEReturn ``(canonical, trailing_args)`` for the first detected command.N)rrrrrrrqr) r#rr)rrrr}rcandidate_tokens candidates &&& r_find_canonical_matchrs$W-H' "9- '1NE4W^^D 08 #OS^4 AFbckt}F~F~$s9~&GGG92 ( rc V^8dQhRRRR/#)r1rr"r2r)r3s"rr4r4sYYYYrcaVP4o\V3Rl\4R4pT;'gRS9d RS9dR#R#)c3<"TFKwr\;QJdV3RlV4F 'gK RM RM!V3RlV44'gKGVxKM R#5i)c3,<"TF qS9xK R#5ir6r)riwlowereds& rrk._kind_for_command...s8Uu!guTFN)r)riwordskrs& rrk$_kind_for_command..s2V>xuSS8Uu8USSS8Uu8U5U>s&AA ANchecktest)lowernext_KIND_KEYWORDS)rr%rs& @r_kind_for_commandrsDooG V>VX\ ]D  X Xw'1fG6KGXQWXrc V^8dQhRRRR/#)r1argr"r2r?r)r3s"rr4r4sCDrcha\S4;'dSPR4'*;'dRS9;'du\;QJdV3RlR4F 'gK RM RM!V3RlR44;'g3SP\4;'gSP\ 4#)rrc3,<"TF qS9xK R#5ir6r)rimrs& rrk%_looks_like_target..s 0/H/rTF)rraz::)r?rrrendswith_TARGET_EXTENSIONS_TARGET_PREFIXES)rsfr_looks_like_targetrs 9  S^^C00  S^    0/ 0 0/ 00xxCLLAS4TxxX[XfXfgwXxrc$V^8dQhRRRRRR/#)r1tokenr"basestr | Path | Noner2r?r)r3s"rr4r4#s"  S  1 d rc>V'gR#\V4P4pVP4'gR#VP4\V4P4P4rCW48H;'gWCP9# \ dR#i;i)zJWhether absolute path ``token`` is ``base`` or lies beneath it (resolved).F)r expanduser is_absoluteresolveparents Exception)rrpathresolved base_paths&& r _is_underr#s E{%%'!!"llnd4j.C.C.E.M.M.O)$EE 5E5E(EE s/B AB BBc$V^8dQhRRRRRR/#)r1rr"r+rr2r?r)r3s"rr4r41s'DDD+<DDrc\V4P4PpTP \ 4;'d8\ T\P!44;'d\ Y4'*# \dR#i;i)zMAn ad-hoc verify script: prefixed name, under the temp dir, outside the repo.F) rrnamerrr_AD_HOC_SCRIPT_NAME_PREFIXESrtempfile gettempdir)rr+rs&& r_is_temp_script_pathr1sE{%%',, ??7 8 D DYuhNaNaNc=d D Dmvw|nDjDD s#A99 BBc V^8dQhRRRR/#)r1rr"r2r?r)r3s"rr4r4:s R R R RrcVPRR4PR^4R,p\\P \ P RV444#)aBWhether a command word names a shell interpreter. ``python3``, ``python3.12`` and ``/usr/bin/python3.12`` are the same interpreter; matching only the bare token left the ad-hoc branch blind to the invocation shapes the nudge hands the agent, so a passing run recorded no evidence and the workspace stayed ``unverified``. rarr-rp)replacersplitr?_INTERPRETER_NAME_REmatch_WINDOWS_EXE_SUFFIX_REr)rrs& r_is_interpreter_tokenr:sK ==s # * *3 22 6D $**+A+E+Eb$+OP QQrc$V^8dQhRRRRRR/#)r1rrr+rr2Optional[list[str]]r)r3s"rr4r4Fs# 1BGZrc\V4pV'gR#V^,p\W14'd VR,#\V4PR8Xd:\ V4^8d*\ V^,4'dVR,V^,r2\ V4'd_\ VR,^R7FFwrE\WQ4'dW$^,Ru#VR8wgK,VPR4'dKER# R#)N:NNr)rzz--r)rrrrrqrrrr)rr+rr#idxrs&& r_ad_hoc_script_argsrFs,V4 q!GG**## G}U"s+;''1NE/EM(-I([d-e-e$$2 rc V^8dQhRRRR/#)r1outputr"r2r)r3s"rr4r4esccrcT;'gRP4p\V4\8:dV#\^,pVRV R\V4\, RW\, R 2#)r-Nz ... [z chars omitted] ... )rsrq_MAX_OUTPUT_SUMMARY_CHARS)rtextheads& r_summarize_outputresm LLb   !D 4y-- $ )D ;-ws4y+DDEEZ 001 2 3 5rc(V^8dQhRRRRRRRR/#)r1rUrFr,r"r+r2rVr)r3s"rr4r4ps*  . s # RV rc,\P!\4\\R7, P 4pVP RWW\34VP RW334VP RV34VP R\34R#)uBound ledger growth without deleting the current state pointer. Order matters: per-(session, root) cap, expire stale state rows, then expire old events and cap the total — never dropping an event still referenced by a ``verification_state.last_event_id``. )dayszDELETE FROM verification_events WHERE session_id = ? AND root = ? AND id NOT IN ( SELECT id FROM verification_events WHERE session_id = ? AND root = ? ORDER BY id DESC LIMIT ?)zDELETE FROM verification_state WHERE (last_edit_at IS NOT NULL AND last_edit_at < ?) OR (last_edit_at IS NULL AND last_event_id IN ( SELECT id FROM verification_events WHERE created_at < ?))zDELETE FROM verification_events WHERE created_at < ? AND id NOT IN ( SELECT last_event_id FROM verification_state WHERE last_event_id IS NOT NULL)zDELETE FROM verification_events WHERE id NOT IN ( SELECT id FROM verification_events ORDER BY id DESC LIMIT ?) AND id NOT IN ( SELECT last_event_id FROM verification_state WHERE last_event_id IS NOT NULL)N) rr7rr_MAX_EVIDENCE_AGE_DAYSr8rY_MAX_EVENTS_PER_SESSION_ROOT_MAX_TOTAL_UNREFERENCED_EVENTS)rUr,r+cutoffs&$$ r_prune_old_eventsr psll3)1G"HH S S UFLL % :-IJ   LL E   LL Y    LL Y () rc V^8dQhRRRR/#)r1r*rr2Optional[dict[str, Any]]r)r3s"rr4r4s).FrcD^RIHpV!V4# \dR#i;i)zLWorkspace facts for ``cwd``; ``None`` when detection fails or finds nothing.)project_facts_forN)agent.coding_contextr r)r*r s& r_project_factsrs': %% s  c$V^8dQhRRRRRR/#)r1factszdict[str, Any] | Noner*rr2r"r)r3s"rr4r4s(HH*H1BHsHrc\T;'g/PR4;'g$\T;'gR4P44#)r+.)r"getrr)rr*s&&r _root_forrs:    (FFD,<,D,D,F GGrc V^8dQhRRRR/#)r1rr r2z list[Any]r)r3s"rr4r4sSYrcv\P!T;'gR4# \\3d.u#i;i)z[])jsonloads TypeErrorrw)rs&r_load_changed_pathsrs5zz#++&& z " s""88r*r,r)rr-c 0V^8dQhRRRRRRRRR RR R /#) r1r#r"r*rr,rr)r(rr2zOptional[VerificationEvidence]r)r3s"rr4r4s< +@J^aor#rcV'd\V\4'gR#\V4pV'gR#\VP R4;'g.4p\ W\ V44pVe4Vwr\V4p \\\V 44'dRMRp M5V'g'\WP R4\ V44fR#RRRrp\YY\ V4^8XdRMR \ V4\\T;'gR 4P44\WQ4\T;'gR 4\!V4R 7 #) zClassify a terminal command as verification evidence, if applicable. Ad-hoc temp scripts only count when the project has no canonical verify commands at all, so they never shadow a real suite. NverifyCommandstargetedfullr+zad-hoc verification scriptad_hocpassedfailedrr r#r$r%r&r'r)r*r+r,r.) isinstancer"rrrrr(rrmaprrr!rrrr) r#r*r,r)rrverify_commandsrrrr%r&s &$$$$ rclassify_verification_commandr(s *Wc22 3 E 599%56<<"=O !'C N KE #(  +!#&8-"HII v 0))F:KSQZ^\d!=x 4y>Q.xHI SZZC ((* +)E2Gz..Y/@QRX@Y  rc 0V^8dQhRRRRRRRRR RR R /#) r1r#r"r*rr,rr)r(rr2r r)r3s"rr4r4sDDDD+D9CDPSD]`DDrcd\4'gR#\WW#VR7pVfR#\V4#)zERecord a foreground terminal result when it is verification evidence.N)r*r,r)r)rDr(_insert_evidence)r#r*r,r)revidences$$$$$ rrecord_terminal_resultr-s5   ,W*rxyH#4C)9()CCrr# hermes verifyr&r c4V^8dQhRRRRRRRRR RR RR R /#) r1r+z str | Pathr,rokr?r#r"r&rr2r r)r3s"rr4r4sF %/<@KN !$rc\4'gR#\\V4P44p\ \ TRRVR 9dTMRV'dRMRV'd^M^T\\ V4;'g/PR4;'gT4\T;'gR4\V4R 7 4#) aRecord a completed ``hermes verify`` run as verification evidence. A pass marks the workspace ``passed`` for the verify-on-stop guard like a canonical test command would. ``root`` is re-resolved through project facts so it matches what :func:`verification_status` derives later. Nr.verifyr r"r#r+rr$>r r) rDr"rrr+r!rrr)r+r,r0r#r&rrs$$$$$$ rrecord_verify_runr3s   4:%%'(H 0? 44e&x8BqA8 .&,,"11&9EEX Fz..Y/@QRX@Y  rc V^8dQhRRRR/#)r1r,r!r2dict[str, Any]r)r3s"rr4r4s&D&D3&D&Drc\4pTp\;_uu_4\4;_uu_4pVPRWPVP VP VPVPVPVPVPVPVP3 4pVPf \R4h\!VP4pVPRVPVP V34VPR8XdKVPR8Xd:VPR8Xd)VPRWRP VP34\#W2PVP R 7VP%4RRR4RRR4R X/VP&CR V/C# +'giL,;i +'giL7;i) zAInsert a classified evidence row and repoint the workspace state.zINSERT INTO verification_events( created_at, session_id, cwd, root, command, canonical_command, kind, scope, status, exit_code, output_summary) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)Nz.verification event insert did not return an idaINSERT INTO verification_state( session_id, root, last_event_id, last_edit_at, changed_paths_json) VALUES (?, ?, ?, NULL, '[]') ON CONFLICT(session_id, root) DO UPDATE SET last_event_id = excluded.last_event_id, last_edit_at = NULL, changed_paths_json = '[]'r2r"r zUPDATE verification_state SET last_event_id = ?, last_edit_at = NULL, changed_paths_json = '[]' WHERE root = ? AND session_id != ?)r,r+id created_at)r9_DB_LOCKrSrYr,r*r+r#r$r%r&r'r)r. lastrowid RuntimeErrorr(r r[__dict__)r,r8erUcurevent_ids& rr+r+s`JA <>>Tll 9quuaffaiiATATVWV\V\^_^e^e XXq{{A$4$4 6   == OP Ps}}%  )\\1668 ,  66X !((h"6177f;L LL6661<<0   $<s#G E$F6 G 6 G G  G pathsc(V^8dQhRRRRRRRR/#) r1r,rr*rr@z"list[str] | tuple[str, ...] | Noner2r r)r3s"rr4r4s2"h"h"h$5"h>`"h"hrc \4'gR#\V4pV'gR#\T;'gR4p\W14p\ T;'g.Uu0uFqf'gK \V4kK up4p\ 4p\ ;_uu_4\4;_uu_4p V PRWE34P4p V e\V R,4M.p \ \V 4\V4,4R Rp V PRWEV\P!V 434V P4RRR4RRR4RVRVRVR V/#uupi +'giL';i +'giL2;i) z>Mark verification evidence stale after a successful file edit.NrzSSELECT changed_paths_json FROM verification_state WHERE session_id = ? AND root = ?changed_paths_jsonzINSERT INTO verification_state( session_id, root, last_event_id, last_edit_at, changed_paths_json) VALUES (?, ?, NULL, ?, ?) ON CONFLICT(session_id, root) DO UPDATE SET last_edit_at = excluded.last_edit_at, changed_paths_json = excluded.changed_paths_jsonr,r+ last_edit_at changed_pathsi8)rDrr"rsortedr9r9rSrYfetchonersetrdumpsr[) r,r*r@rsidr+prE edited_atrUrowexistingmergeds $$$ rmark_workspace_editedrPs<    3 E  j%%I &C U DU[[b[?[qQFCF[?@M I <>>Tll a K  (* FI_&s+?'@AZ\H M(::;DEB  @  4::f#5 6  #"& #vt^YYf gg-@">s1 E)EE6*BE# E6# E3 .E66 F c(V^8dQhRRRRRRRR/#) r1rUrFr+r"sincerr2zOptional[sqlite3.Row]r)r3s"rr4r46s, '*3=rcV'd"VPRW34P4#VPRV34P4#)zXLatest full passing ``hermes verify`` for ``root``, optionally not older than ``since``.zSELECT * FROM verification_events WHERE root = ? AND kind = 'verify' AND status = 'passed' AND scope = 'full' AND created_at >= ? ORDER BY id DESC LIMIT 1zSELECT * FROM verification_events WHERE root = ? AND kind = 'verify' AND status = 'passed' AND scope = 'full' ORDER BY id DESC LIMIT 1)rYrG)rUr+rRs&$$r_newest_workspace_verifyrT6sU || (M  (*   << $    hj rc$V^8dQhRRRRRR/#)r1r,rr*rr2r5r)r3s"rr4r4Js'*d*dz*d8I*dn*drc\4'gRRRR/#\V4pV'gRRRR/#\T;'gR4p\W!4p\;_uu_4\ 4;_uu_4pVP RW434P4pVf!RRRRR VR VR ./uuRRR4uuRRR4#RpVR ,e)VP R VR ,34P4pVR,p\VRJ;'dT;'d WR,84p Ve V 'd\WTVR7p V eT pRp RRR VR VR \VR,4/p VfRR/V CuuRRR4uuRRR4#\V4p RV 'dRMV R,/V CRV /CuuRRR4uuRRR4# +'giM;iRRR4R# +'giR#;i)aReturn the best known verification state for a session/workspace. Evidence recorded before the latest edit is reported as ``stale``. A ``hermes verify`` event for the same ``root`` that is at least as new as that edit satisfies the guard even if another session recorded it. r'disabledr,Nnot_applicablerzpSELECT last_event_id, last_edit_at, changed_paths_json FROM verification_state WHERE session_id = ? AND root = ? unverifiedr+r,rE last_event_idz.SELECT * FROM verification_events WHERE id = ?rDr8)r+rRFrCstale) rDrr"rr9rSrYrGr?rTrdict) r,r*rrJr+rUstateeventrDr[sharedresultr,s $$ rverification_statusraJs   *j$77 3 E *J== j%%I &C U D <>>T  I K  (*  =lJfdLZ]_nprs">  ! -LL!QTYZiTjSlmvvxE^, U$&^^<^^LQ]K^<^_ =E-d\RF! fdL# 07K1LM  =l5f51">4;U'0BcfcjZbc7">>>sOG11F2 " G7A F2  F2 F2 +8F2 # G8%F2  G2 G =G G )zhermes-verify-zhermes-ad-hoc->pyrrnodeperlrubypythonpython3)z.pyz.jsz.jsxz.tsz.tsxz.rsz.goz.java)test_testsspec __tests__)))linteslintruffrl)) typechecktscmypypyrighttyro))buildrt))fmtr3r3)rf-mr)rgrvr)uvrr)poetryrr)pipenvrr)z CREATE TABLE IF NOT EXISTS meta ( key TEXT PRIMARY KEY, value TEXT NOT NULL ) a  CREATE TABLE IF NOT EXISTS verification_events ( id INTEGER PRIMARY KEY AUTOINCREMENT, created_at TEXT NOT NULL, session_id TEXT NOT NULL, cwd TEXT NOT NULL, root TEXT NOT NULL, command TEXT NOT NULL, canonical_command TEXT NOT NULL, kind TEXT NOT NULL, scope TEXT NOT NULL, status TEXT NOT NULL, exit_code INTEGER NOT NULL, output_summary TEXT NOT NULL ) a9 CREATE TABLE IF NOT EXISTS verification_state ( session_id TEXT NOT NULL, root TEXT NOT NULL, last_event_id INTEGER, last_edit_at TEXT, changed_paths_json TEXT NOT NULL DEFAULT '[]', PRIMARY KEY (session_id, root) ) z CREATE INDEX IF NOT EXISTS idx_verification_events_session_root ON verification_events(session_id, root, id DESC) )rH)Lr/ __future__rrrrusqlite3r threading dataclassesrrrrrpathlibrtypingr r hermes_constantsr Lockr9rrrrrrZ _INTERPRETERScompile IGNORECASErjoinrFrqrrrrrrXrr!r9r=rDrOrSrNrrrrrrrrrrrrrrr rrrr(r-r3r+rPrTrarrrrs(E# !77 , >>  "!'CQ $92==I zz chhvmdCDDGddR:  ;8:U% P $***  $   ):$_ # :?:?zJ*  Y  D R( FH.2MQdeuw@DceD26Q`'),&DR"hcg"hJ(*dr