+ jHjc>Rt^RIHt^RIt^RIt^RIt^RIt^RIHtH t H t H t ^RI H t ^RIHt]P !R4t^t!RR4tR#) aCompletion ownership for GatewayRunner: the session a pinned completion belongs to. Split out of ``gateway/run_notifications.py`` (itself split out of ``gateway/run.py``); bound onto ``GatewayRunner`` through ``GatewayNotificationsMixin``. A completion may be pinned to a delegate child's execution transcript: ownership follows only ``model_config._delegate_from`` to the human-facing session, shared by delivery preflight and route resolution, and no route moves until that owner is proven. ) annotationsN)AnyOptionalSequencecast) SessionEntry)StateDbReplacedErrorz gateway.runcr]tRt^ tRtRRltRRltRRRlltRR /R R lltRR R llt RRlt Rt R#)!GatewayNotificationOwnershipMixinzNOwnership proof and route resolution for pinned async and process completions.c(V^8dQhRRRRRRRR/#)  session_dbr session_entryOptional[SessionEntry]pinned_session_idstrreturnztuple[str, Optional[str]])formats"H/home/ubuntu/.hermes/hermes-agent/gateway/run_notifications_ownership.py __annotate__.GatewayNotificationOwnershipMixin.__annotate__#s,   .D Y\ " c "VPV4GRjxL pV'dWC8XdR #VPV4GRjxL pVeVPR4'dR #VeVPW409dRV3#VPVP4GRjxL pVfR #VPR4'd^VPR4R8XdHVPVP4GRjxL pV'dWrP8XdR #Wt8XdRV3#\ PR Y4TP4R #EL%LLLR \d\ P RTRR7R u#i;i5i) zHDistinguish uncertain compression ownership from a proven foreign route.Nended_atdeliver end_reason compressionz;Async-delegation compression ownership lookup failed for %sTexc_infozoAsync-delegation completion for compression lineage %s -> %s does not own current route %s; dropping injection.)retryN)terminalN)get_compression_tip get_sessionget session_id Exceptionloggerdebugwarning)selfr rrtarget_session_idtip_row route_row route_tips&&&& r#_resolve_compression_lineage_targetEGatewayNotificationOwnershipMixin._resolve_compression_lineage_target#sk !&0&D&DEV&W W $(9(N$$&223DEEG'++j"9"9$$$ (@(@EVDj(j "333(44]5M5MNNI $$}}Z((Y]]<-HM-Y","@"@AYAY"ZZ  I1I1I$I((1$&777  A -2J2J  5!XF O[  ! LLVXitxL y  !sE1ED= EEE1EEE!E"E1#E<E1=EE E%E1&E=4E1E2 E>EE1 E$E1=EEEE%E.+E1-E..E1c ,V^8dQhRRRRRRRRR R/#) r r rentryrrr pinned_rowzOptional[dict]rr)rs"rrrDs4&<QTbp rc "^RIHpVe VPVP8wgVfR#Y4rvVP R4R8XdFVP V4GRjxL pWbP 8XdVPV4GRjxL MRpWbP 8wg2Ve.VP R 4'dVP R4R8XdR#V#LtLM \P\3d\PRTRR7R#i;i5i) a The closed (/new, exit) physical session of a local conversation a completion is noted on (#134889 LC-7, ``session_completion_notes``), else ``""``. The pinned session, or the compression tip it rotated to, must be the one the conversation's route still names: a local /new opens a new route, so the replacement never matches, and messaging routes never qualify. Only a close ends a local tip (``session.detach {end_reason}`` stamps the client's own reason: ``cli_close``, ``tui_close``, ``tui_shutdown``...), so any end but compression is one.)PlatformNrrz%Closed local tip lookup failed for %sTrr) gateway.configr5platformLOCALr$r"r%r#sqlite3Errorrr'r()r*r r2rr3r5targetrows&&&&& r_closed_local_target6GatewayNotificationOwnershipMixin._closed_local_targetDs , =ENNhnn< @R' 77< M 1 )==>OPP>DHXHX>XJ226:::^b && &#+SWWZ=P=P77<(M9 Q:MM#78  DFWbf g sTADCC(CCC *D6DCC3D D D  Dc V^8dQhRRRR/#)r r%rcurrent_session_idr)rs"rrr]s.,.,.,RU.,rc "^RIHp\\V4PpVfRVR3#\ 4p\ \^,4EFWpW9dRVR3u#VPV4VPV4GRjxL pTfRTR3u#TPR4'dTPR 4T9dRY3u#Y8XdR Y3u#TPR 4p\T\4'd\ P"!T4pTf/p\T\(4'gRTR3u#R T9d!TPR 4R8XdRMR p YT3u#TR ,p \T \4'd"T P+4'd T\8XdRTR3u#T pEKZ RVR3#EL* \d#\PRTRR7RTR3uu#i;i \$\&3d RTR3uu#i;i5i)aNonmutating delegation proof shared by preflight and route resolution. A current route is an explicit ownership boundary, not a route to repair. Generic parent pointers also describe compression and branches; only ``_delegate_from`` authorizes walking out of an execution transcript. _USER_BOUNDARY_END_REASONSNr r!z)Completion ownership lookup failed for %sTrrrr model_config_delegate_fromsourcesubagent) gateway.runrDrr _session_dbsetrange_MAX_DELEGATE_PROVENANCE_HOPSaddr#r&r'r(r$ isinstancerjsonloads TypeError ValueErrordictstrip) r*r%rArDr seenhopsr=configverdictparents &&& r_lookup_completion_owner:GatewayNotificationOwnershipMixin._lookup_completion_owner]s ;#t_00  J, ,u7!;>{!:t33wwz""sww|'<@Z'Z!:22/ *11WW^,F 4fc**!ZZ/F~fd++!:t33v-(+(9Z(G*YC//,-Ffc**&,,..DLiDi!:t33JC=D:t++;? 1 H*_c d D00 1z* 4!:t33 4smA,G>/F0F-F0!G>*9G>$,G A>G>G>-F00(GG>GG> G;6G>:G;;G>logTc(V^8dQhRRRRRRRR/#)r evtrTrefusalrr]boolrr)rs"rrrs)TUYrc F"\VPR4;'gR4P4pV'gR#\VPR4;'gR4p\\V4P WE4GRjxL wrgpVR8wdR#V'gR#\ PRVPR 4;'gR VPR 4;'gR T\\V4PPV4;'gR V4R#L5i)aTrue (logged once with ``log``) when a refused notice is pinned to a permanently-gone session. The session authority admits a notice only into its pinned session or that session's compression continuation, so after /new it refuses the notice on every retry and the drain would spin on it (#141562). This is the completion pre-flight's verdict, applied after the refusal. A dropped notice is gone for good; a /resume reopens the pinned session, so the process's later notices are admitted again. parent_session_idr6F session_keyNr!TzDropping %s notification of process %s: pinned session %s is permanently gone (closed at a user boundary such as /new, or no longer an owner); the route now runs %s and refuses it (%s). Output remains available via process(action='log').typewatchr%z z) rr$rUrr_classify_completion_ownerr'r) session_storepeek_session_id) r*r_r`r]pinnedrdrY_owner_targets &&&$ r_watch_pin_gone1GatewayNotificationOwnershipMixin._watch_pin_gonesSWW0177R8>>@#''-066B7 )-c4)S)STZ)h#h  j  S GGFO & &w (=(L(Lf dO ) ) 9 9+ F R R(T[  $is4:D!D!)D!DD!)D!D!"2D! D!c ,V^8dQhRRRRRRRRRR /#) r rrrrproven_session_idcompletion_ids Sequence[str]rrr)rs"rrrs=^^)^>A^VY^%^ ^rc j"^RIHp\\VP4pVf\ P R4R#V'dW1P8XdV#VPVP4pVPW!P4GRjxL wrp VR8wgV fVPW4GRjxL #Tp Rp V PR4'd\V PR4;'gR4p W9d\ P R W,4R#V R 8wd.\ PR T ;'gR W!P4V#R p VPWaV4GRjxL wrVR8wgV fVPW4GRjxL #WP8XdV#VPp VP!VPV4'g$\ P RVPW-4R#V 'd0VP"P%VPW4GRjxL pM/VP"P'VPWR7GRjxL pVf$\ P RVPV 4R#\ PRWVP4V#ELELELDEL!LL\5i)u Resolve an async completion to its verified owning gateway session. Follow compression-rotation lineage (parent row ended, child continues), but never let a late completion override an unrelated /new or restored route. Unknown ownership fails closed; the result stays in the delegation records. An owner that cannot be confirmed right now (``retry``) sends the completions admitted with the event back to the delivery queue. A pinned *delegate* row is likewise canonicalized to its human-facing parent through ``model_config._delegate_from`` before any route check or mutation (#92611). Unresolvable provenance — a cycle, a missing parent, a malformed config, or a chain longer than ``_MAX_DELEGATE_PROVENANCE_HOPS`` — drops the injection rather than falling back to the current route entry. That is deliberate: routing an internal child's output into a session whose ownership was never verified is the same class of defect this canonicalization fixes, and the completion remains readable in the delegation records either way. rCNz]Async-delegation completion has no session database; dropping injection (#55578 fail-closed).rFrrr6zAsync-delegation completion pinned to user-closed session %s (end_reason=%r); dropping injection instead of resurrecting it (#55578 fail-closed).rzhAsync-delegation completion pinned to %s-ended session %s; retargeting to the chat's current session %s.idleTzAsync-delegation completion for routing key %s was invalidated while resolving pinned session %s; leaving the route on %s and dropping injection.)expected_session_idz|Async-delegation completion could not bind routing key %s to owning session %s (route moved or unknown); dropping injection.z\Pinned async-delegation completion to owning session %s (was %s) for routing key %s (#57498))rIrDrrrJr'r)r%_current_session_run_generationrdr[_requeue_uncertain_completionr$rinfor/_is_session_run_currentasync_session_storeadvance_compression_sessionswitch_session)r*rrrprqrDr run_generationrYr3r+follows_compression _end_reasonprior_session_idswitcheds&&&&& r!_resolve_async_delegation_sessionCGatewayNotificationOwnershipMixin._resolve_async_delegation_sessions& ;#t//0   NN;  !26N6N!N ==m>W>WX7;7T7T 778 2 .J i :#5;;GTT T-# >>* % %jnn\:@@bAK8,-> m+ D))6+<>V>V %$"& /3/W/W+<0* &G)#'8'@!??XXX  8 8 8 (33++M,E,E~VV NNN))+<   !55QQ))+;H "55DD))+<EH   NNR))+<   j 1J1J }2 U,*Y sAJ3A J3J#&J38J&9J3J35AJ3:+J3%J)&%J3 J, AJ3*J3;)J3$J/%/J3J1AJ3&J3)J3,J3/J31J3c$V^8dQhRRRRRR/#)r rYrrqrrrNoner)rs"rrrs#3P]bfrc "VR8wg V'gR#^RIHp^RIHp\ \ V4pVP ;_uu_4VF"pVPPRVR3R4K$ RRR4VFNp\P!W6VP4GRjxL p\PR TV'dR MR 4KP R# +'giLf;iL> \d\PRTRR 7R pLci;i5i)zOffer admitted completions again when the turn could not confirm their owner (``retry``), so the next delivery re-runs the pre-flight; boundary verdicts stay dropped.r N)requeue_admitted_completion)process_registryasync_delegationr6z(Could not requeue admitted completion %sTrFzHAsync-delegation completion %s: owner not confirmed after admission; %s.z offered againz,not offered again (result remains queryable))tools.async_delegationrtools.process_registryrrr_completion_delivery_lock _completion_deliveries_deliveredpopasyncio to_threadcompletion_queuer&r'r(r))r*rYrqrrrunner delegation_idrequeueds&&& rrw?GatewayNotificationOwnershipMixin._requeue_uncertain_completions g ^ F;c4  - - -!/ 77;;=OQ^`br[rmrrw__static_attributes__rrrr r s3X B2.,`D6^@rr )r __future__rrrPloggingr:typingrrrrgateway.sessionrhermes_state_errorsr getLoggerr'rMr rrrrsM# 00(4   = )!#}}r