+ jHjrRt^RIHt^RIt^RIt^RIt^RIt^RIHt^RI H t H t H t H t ]P!R4t]],tR^R]RR/R R lltR ^R R/R RlltR]!4RRRRRR/RRlltRR/RRlltRR/RRlltRRltR R!ltR"R#ltR$^ /R%R&lltR'^/R(R)lltR*R+ltR,R-ltR.R/ltR0R1lt R#)2aShared leaf helpers for the gateway hosted-room modules. Each hosted-room module validates identifiers, bounded integers, exact field sets and canonical JSON with its own error class and pinned error strings; these helpers take the error class and message templates as parameters so failures stay byte-identical while the logic lives once. Must stay a leaf: never import a hosted_room* module (import cycle). ) annotationsN)Path)AnyCallableIteratorMappingz^[A-Za-z0-9][A-Za-z0-9._:-]*$ max_charspatterninvalidc4V^8dQhRRRRRRRRR R R R R R/#)valuerlabelstrerrortype[Exception]rintr zre.Pattern[str] | Noner str | Nonereturn)formats"@/home/ubuntu/.hermes/hermes-agent/gateway/hosted_rooms_common.py __annotate__rsD     &5 BE  # >H TW c\V\4'g V!V R24hVP4pV'd,\V4V8gVe-VP V4'gT!T;'gRV 24hV#)zLStrip and validate a bounded string; ``pattern=None`` skips the shape check. must be a stringzinvalid ) isinstancerstriplen fullmatch)r rrrr r s&$$$$$r identifierr sr eS ! !ug./00 KKME CJ*w/B7K\K\]bKcKcG11%122 Lrlowhighc 0V^8dQhRRRRRRRRR R R R/#) r r rrrmessagerr!rr"z int | Nonerr)rs"rrr#s8so#Ycorrc\V\4'g'\V\4'dW8g VeW8d V!V4hV#)zZReject bools, non-ints and values outside ``[low, high]`` (``message`` is the exact text).)rboolr)r rr$r!r"s&$$$$r bounded_intr'#s:%j&<&< PTP`ejeqGn Lroptional not_object missing_fmtz#{label} is missing fields: {fields} unknown_fmtz${label} has unknown fields: {fields}c<V^8dQhRRRRRRRRRR R R R RR RRR/ #)r r rrrrequiredzfrozenset[str] | set[str]r(rrr)rr*r+rzMapping[str, Any]r)rs"rrr*sZ )BNg (2HKCTrc \V\4'gT!T;'gV R24h\V4pW(, p W, V, p V 'd2V!VPVRP \ V 44R74hV 'd2V!VPVRP \ V 44R74hV#)zZRequire exactly ``required`` (+ any ``optional``) keys; formats name the offenders sorted.z must be an objectz, )rfields)rr frozensetrjoinsorted) r rr-r(rr)r*r+keysmissingunknowns &$$$$$$$ r exact_fieldsr6*s eW % %J>>UG+=">?? U DoGo(GK&&U499VG_;U&VWWK&&U499VG_;U&VWW LrrTc 0V^8dQhRRRRRRRRR R R R/#) r r rrrrr max_bytesrrr&rr)rs"rrr;s8    s s SW cf rc\V\4'g V!V R24hVP4'g V!V R24hV'dVP4p\VP R44V8d V!V R24hV#)zdNon-blank string bounded by ``max_bytes`` of UTF-8; ``strip=False`` keeps and measures the raw text.rz must not be emptyutf-8 is too large)rrrrencode)r rrr8rs&$$$$rtextr=;s{ eS ! !ug./00 ;;==ug/011   5<< !I-ug]+,, Lr ensure_asciic$V^8dQhRRRRRR/#)r r rr>r&rrr)rs"rrrHs&___d_c_rc4\P!WRRR7#)zDSorted-key, separator-free JSON (the digest/storage canonical form).T)r> sort_keys separators),:)jsondumps)r r>s&$r compact_jsonrGHs ::e$S] ^^rc 0V^8dQhRRRRRRRRR R R R/#) r r rrrrrr8rr>r&rr)rs"rrrMs9#QTdhmprc\WR7p\ TP R44T8d T!T R24hT# \\\3dpT!T R24ThRp?ii;i)zZ``compact_json`` bounded by ``max_bytes`` of UTF-8; unserializable input raises ``error``.)r>z must be JSON-serializableNr:r;)rG TypeError ValueErrorRecursionErrorrr<)r rrr8r>encodedexcs&$$$$ rcanonical_jsonrOMsqCu@ 7>>' "#i/ug]+,, N z> 2Cug789sBCs :A! AA!c V^8dQhRRRR/#)r partsrrrr)rs"rrrXs//S/S/rcT\RPV4PR44#)r:)rr1r<)rQs*rutf8_lenrTXs rwwu~$$W- ..rc V^8dQhRRRR/#)r nowz float | Nonerfloatr)rs"rrr\s66|66rcJVf\P!4#\V4#)z<``now`` as a float, or the current wall clock when ``None``.)timerW)rVs&rclockrZ\s+499;55:5rtimeoutc$V^8dQhRRRRRR/#)r pathDbPathr[rWrsqlite3.Connectionr)rs"rrras"&&f&%&9K&rcH^RIHpV!VR\VR,4RRR7#)z^Row-factory connection with foreign keys on; no journal or schema work (steady-state readers).open_dbzshared-state.dbiFT)db_labelbusy_timeout_mswal foreign_keys)hermes_cli.sqlite_utilrbr)r]r[rbs&$ r open_sqliterhas). 4"3SSWEX^c $ &&r lock_retriesc 0V^8dQhRRRRRRRRR R R R /#) r db_pathr^rcrreadyz$Callable[[sqlite3.Connection], bool] initializez$Callable[[sqlite3.Connection], None]rirrr_r)rs"rrrisDJJ J"%J.RJ4JDGJPbJrc >aaRVV3Rllp^RIHpV!WRRWER7#)a4Open the shared root store: WAL, foreign keys, then ``initialize`` in one IMMEDIATE txn if not ``ready``. Multiple profile gateways share this database, so every draft-schema transition is serialized in SQLite itself: a crash rolls back the whole DDL/data migration and another process can safely retry it. c V^8dQhRRRR/#)r connr_rNoner)rs"rrconnect..__annotate__rs,rc<S!V4'g-VPR4S!V4VP4R#R# \dTP4hi;i)zBEGIN IMMEDIATEN)executecommit Exceptionrollback)rprmrls&r _initializeconnect.._initializersQT{{  ./4      s )>Arai'T)rcrdrfwal_lock_retriesrm)rgrb)rkrcrlrmrirxrbs&$dd$ rconnectr{is+/ 7vTX$0 JJrc ,V^8dQhRRRRRRRRR R /#) r rpr_sqlrparamstuplerrvrrqr)rs"rrrs1*eIZ^rcJVPW4P^8wdVhR#)zURun a compare-and-swap UPDATE; anything but exactly one row means the fence was lost.N)rtrowcount)rpr}r~rs&&&&r fenced_updaters# ||C ))Q. /rc$V^8dQhRRRRRR/#)r rpr_tablerrr&r)rs"rrrs")#$rcLVPRV34P4pVRJ#)z9SELECT 1 FROM sqlite_master WHERE type='table' AND name=?N)rtfetchone)rprrows&& r table_existsrs* ,,RUZT\ ] f f hC d?rc$V^8dQhRRRRRR/#)r rpr_rrrzfrozenset[str]r)rs"rrrs'TT*T3T>TrcL\RVPRV R2444#)c32"TF q^,xK R#5i)Nr).0rs& r table_columns..sS'RVV'RszPRAGMA table_info())r0rt)rprs&&r table_columnsrs& St||6Hq4Q'RS SSrc(V^8dQhRRRRRRRR/#) r r{z&Callable[[DbPath], sqlite3.Connection]rkr^ immediater&rzIterator[sqlite3.Connection]r)rs"rrrs,?? 3?>D?TX?!?rc.^RIHpV!V!V4VR7#)zVOpen via ``connect``, optionally ``BEGIN IMMEDIATE``, commit on success, always close.) transaction)r)rgr)r{rkr _transactions&&$ rrrsC (I >>r)!__doc__ __future__rrEresqlite3rYpathlibrtypingrrrrcompile IDENTIFIER_RErr^r r'r0r6r=rGrOrTrZrhr{rrrrrrrrs#  33 ;<  HK &3 KO PQfjjsju59Ns>" Z^ _T_ /6 &"&JJKJ2  T?r