+ jHjIRt^RIt^RIHt^RIt^RIt^RIHt^RIH t H t H t ^RI H t ^RIHtHtHt^RIHtHtRtRR ltR tRR ltRR ltR tRtRR/RltRtRR/Rlt RRRRRRRR/Rlt!RRRRRRRR/Rlt"Rt#Rt$R#)zLServer-only binding of API transcript identities to the existing TurnRunner.N)partial)Platform) SessionEntry SessionSource_is_path_unsafe) SessionRef)RuntimeStoreError_epoch_json)API_BINDING_PREFIXAPI_DECLARED_PREFIXc0VP4;_uu_4pVPR\V,34P4pRRR4X'd V^,#VP RVR7pV'd VR,#R# +'giLG;i)(SELECT value FROM state_meta WHERE key=?N api_server)source session_keyid) _read_ctxexecute_DECLARED_PREFIXfetchone$find_latest_gateway_session_for_peer)dbkeyconnrowlegacys&& 8/home/ubuntu/.hermes/hermes-agent/gateway/session_api.pydeclared_api_sessionrsy 4llE,s2466>hj   1v  4 4LVY 4 ZF!6$<+t+ s -B B caa^RIHp^RIHoS'gRMVV3RlpV!V\ \ V4VR7^,#)a7The session a header-less Chat Completions turn lands on. Its id is derived from the conversation's opening, and a deleted id stays retired for good, so a NEW conversation that opens like a deleted one moves to the next generation of that opening, the way a deleted Bot Chat is replaced: the first ``api-`` that is not retired. Read from durable rows only, so every later turn of that conversation (same opening) lands on the same session. An exact retry stays on the generation holding its request id's terminal identity; explicit ids never come here.first_generation) identity_keyNcZ<VPRS!RVS434P4RJ#)$SELECT 1 FROM state_meta WHERE key=?apiN)rr)rsidr" request_ids&&r&implicit_api_session..&s24<<.eS*1U0W``.zapi-:NN)hashlibsha256encode hexdigest)r/ generations&&rr.r.+sD  GNNj\J<#@#G#G#IJTTVWZ[ [[r*cj^RIHpV'd V!V4MRpVe\VPW4#T#)aThe session a new turn on a retained chain (``previous_response_id``, a named conversation) lands on: its stored id, or that id's next generation once the user deleted it (the history comes from the response store). An exact retry stays on the generation holding its identity.)active_authorityN)gateway.session_authoritiesr:r0r)runnerr/r'r: authoritys&&& rcontinued_api_sessionr>3s3=,6 (DIIRI^  j Endnnr*cRPV4V'dRV 2MR,pR\P!VP44P 4R,,#)z``room_`` of a hosted room member's identity (home install, room, member, target profile); a later generation folds its number into the digest.r2room_:N N)joinr4r5r6r7)identityr8seeds&& rroom_session_idrF<sJ 99X zBzl"3r JD W^^DKKM2<<>sC CCr*c*a^RIHpV!VV3Rl4#)a ``(generation, session_id)`` of the hidden session a hosted room member's dispatches land on: a deleted one stays retired, so the room's next task moves to the next generation. A room retry is replayed by the run's Idempotency-Key, never by this id, so nothing pins it.r c<\SV4#N)rF)nrDs&rr('hosted_member_session..Hs /(A*Fr*)r,r!)rrDr!s&f rhosted_member_sessionrLCsB B F GGr*c^\VPRR4pVeVPV4#R#)zName of the profile *authority* serves; None for the launch profile (and for bare runners without a registry), which is what ``SessionSource.profile`` means on the wire.session_authoritiesN)getattrr< profile_name)r=registrys& r_served_profilerRKs4y'')>EH/7/C8  +MMr*transport_profilec|^RIHpVf\VRR4;'gRpV!WVR7pVe VP#R#)aPin the shared-listener identity on an API source: transport = the launch profile whose listener received ``/p//``, runtime = ``source.profile``. Returns the transport profile to persist; None outside multiplexing, where the launch adapter is the only one by construction.)restore_identityN_primary_profile_namedefault)r<rS)gateway.session_identityrUrOrS)r<rrSrUrDs&&$ r_pin_api_identityrYRsH: #F,CTJWWiIZ[H)1)=8 % %G4Gr*cR;rVeVPV4MVPV4pT!4Rr!K3 \dpTPuRp?#Rp?ii;i \dpRTr!Rp?KkRp?ii;i)zYDrive a write-step generator (see ``run_steps_off_loop``) inline: tests and sync callers.Nthrowsend StopIterationvalue Exception)stepsresulterrorwritedoneexcs& r run_stepsrg]srF  */*;EKK&FASE &!GTE ::   & #E &s2&7A A A AA A4&A//A4orphanedcaaaaa"^RIHpHoVVV3RloVV3RlpV!SV!44p\P!V4GRjxL #L \P dSeTP T3Rl4hi;i5i)aoDrive a write-step generator on the owner loop, each yielded SQLite write in a worker thread in admission order (``tracked_write(ordered=True)``): a held writer must not freeze every session. The whole drive is one tracked, shielded task, so a cancelled caller cannot separate a commit from the steps after it; ``orphaned(result)`` then runs when the drive completes.)track_mutation tracked_writec<"R;rVeSPV4MSPV4pS!STRR7GRjxL RrK? \dpTPuRp?#Rp?ii;iL+ \dpRTrRp?KyRp?ii;i5i)NT)orderedr[)rbrcrdrerfr=rarks rdrive!run_steps_off_loop..drivers ".3.? E*UZZPVEW *&3Iud&S SUY! "zz! "!T * $c *sgB&AA,A*A,B A' A"A'B"A''B*A,, B7B:BBBc<"\SRR4pVf\P!4;pSnT;_uu_4GRjxL S!4GRjxL uuRRR4GRjxL #L%LL +GRjxL 'giR#;i5i)_api_admissionsN)rOasyncioLockrq)lockr=rns r serialized&run_steps_off_loop..serialized}sTy"3T: .s60@0o0oDNNDT0o0oX`aealalanXo0or*)gateway.session_runtime_workersrjrkrrshieldCancelledErroradd_done_callback)r=rarhrjrutaskrnrksffd @@rrun_steps_off_looprksl N *! )Z\ 2D^^D))))  ! !    " "#o p s.&BAA A B A0A>>Bhosted_dispatch declared_key caller_key walked_fromc 2\\WVW4VR74#)zLOnly the authenticated API edge may reserve an API source; never public RPC.)rrrr)rgbind_api_steps)r=r/rrrrs&&$$$$rbind_api_sessionrs% ^I?1=bmo ppr*c #aaaaaaaaaaaa"SP4\S\4'dS'd\S4'd \ R4hRwoorgVe^RIHpVPV4p V PV PV PV P.p\SPV4wrzV S8wd \ R4hRRV P 2uooSSP9dmSPS,PP \"P$8wg(SPP'S4R,S8wd \ R4h\)\"P$SRR \+S4R 7o\-SP.S4p SP.P0P3S4o^R IHp V !4o\9SSSSS\"P$V R 7oR SP:RSRSRSP=4/oS'dSSR&Ve!SP?SVR7V'dVSR&VVVVVVVVVVVV3 Rlp \ASPPBV 4x\ESS4#5i)a``bind_api_session`` as write steps (``run_steps``): the binding transaction is yielded. ``caller_key`` is this request's validated ``X-Hermes-Session-Key`` even when an explicit session id selected the conversation (``declared_key`` is set only when the key selected it). It is used only to adopt a row an earlier release stamped with that same key, and is then registered as that session's declared key (and stamped into its binding receipt). ``walked_from`` is the stored session a Responses/Runs chain continued from when the chain moved past it to *session_id* (``continued_api_session``): the fences it passed stay for good. If one aged out since that lookup, the bind refuses with the retryable ``chain_moved``.invalid_params)HostedMemberDispatchadmission_conflictbot_roomGroup: rpermission_deniedr%dm)platformchat_iduser_id chat_typeprofile)_now)originrrS profile_idr/routeentryr)storage_source room_identityroom_generationc &< \VS P4S P4^RIHpHpVP RVS,34P4'd \R4hS'd*V!V\\S4S4'g \R4hVP R\S,34P4pVek\P!V^,4pVPRR4S8wd \R 4hS 'd"VPR 4S 8wd \R 4hR#S 'dmVP R\S ,34P4pV'dV^,S8wd \R 4hVP R \S ,S34VP R S34P4pVeVR,S8wd \R 4hSR8XdQVeVR,S8wd \R 4hVP RSS34P4'd \R 4hS ;'gS pVeVR,RRS39dV'dVR,V8wd \R 4hVP R\V,34P4pVeV^,S8wd \R 4hVP R \V,S34VSR &VP RS34P4p V e5\P!V ^,4R,S8wd \R 4hVP RSSS\!SR8H4SP#434VP RSSSP$R\'SP)44S34VP RS\'S P)44SP#434VP R\S,\'S434R#))RETIRED_PREFIXkeep_passed_fencesr$ not_found chain_movedrNrrrrrzIINSERT INTO state_meta(key,value) VALUES(?,?) ON CONFLICT(key) DO NOTHINGz8SELECT source,session_key,title FROM sessions WHERE id=?rrtitlez.SELECT 1 FROM sessions WHERE title=? AND id!=?rr@zGSELECT entry_json FROM gateway_routing WHERE scope='' AND session_key=?r/z|INSERT INTO sessions(id,source,title,hidden,started_at) VALUES(?,?,?,?,?) ON CONFLICT(id) DO NOTHINGzZUPDATE sessions SET session_key=?,chat_id=?,user_id=?,chat_type=?,origin_json=? WHERE id=?rzINSERT INTO gateway_routing(scope,session_key,entry_json,updated_at) VALUES('',?,?,?) ON CONFLICT(scope,session_key) DO UPDATE SET entry_json=excluded.entry_jsonz-INSERT INTO state_meta(key,value) VALUES(?,?))r epoch_require_admission_openr,rrrrrrr._BINDING_PREFIXjsonloadsgetrint timestamprr to_dict)rrrsavedbindingexisting_declaredr legacy_keyownerexistingr=rrrnowreceiptrr/rrrrs& rrdbind_api_steps..writestY__%))+W <<>R\A\@^ _ h h j j#K0 0 1$@QS^8_akll#M2 2 G- :<>>Fhj   jjq*G{{+\:nL'(;<< N ;| K'(<==   $ -W!L02!44#$78 8 Z '3w<5#8'(<==||LuV`Nabkkmm'(<== "//Z ?s=1$E9JJ]!3z!A'(<==LL!K"2Z"?!ACCK8:  U1X%;'(<== LLd*Z7D F&0GN #<< i!&**2(*   DJJx{$;L$IZ$W#$89 9 68BNTY7:>Z;W7XZ]ZgZgZi8k l qZuV^^EU?VXbc e cU5==?3S]]_E G D% 2E'NC Er*)rNNr)#r isinstancestrrrgateway.hosted_room_peerr from_mappinghome_install_idroom_id member_idtarget_profilerLrsessionsrrr API_SERVER get_sessionrrRrYr< session_store_generate_session_keygateway.session_lifecyclerrrrupdater_execute_writerestore_api_session)r=r/rrrrrrrdispatchexpectedrSrrdrrrrrrrsff$ddd @@@@@@@rrrs0%%' j# & &jOJQ>Q Q<<++J7A^S#$78 8 H$7$7#(D/R[B\^F))*:*:FC    * * @ @ HE. &C  CVhNaNa+< >EY11<w 9G". nMR )8G% &@E@E@EB ),,--u 55 y* 55s.JHJ>AJcBVR8wdV#VP4;_uu_4pVPR\V,34P4pRRR4X'd.\P !V^,4P RV4#T# +'giLG;i)rrNr)rrrrrrr)rr/fallbackrrs&&& rapi_storage_sourcer s{< 4 G- :<>>Fhj  DI4::eAh  # #$4h ?VhV s -B B c^RIHpVPP4;_uu_4pVP R\ V,34P 4pRRR4Xf \R4h\P!V^,4pVR,VP8wd \R4h\P!VR,4pVPp\VPWvP R7VPP#V4pVR ,V8wgVP$V8wgVP&\(P*8wgVP,V8wgVeVR ,VP/R R 48wgjVR ,VR,VR,3VP0WP238wg5VP0VPP4P7V48wd \R4hVP/R 4R8XdaVR,p \9WP/R^44p W8wg,VR,RV ^,,8wgVR,'g \R4hVPP4p VP;\=VPV44p WnV P>;_uu_4V PA4V PBP/VP04p V e6V P$VPPEV49d \R4hV eV P$V 8XdT MTV PBVP0&RRR4VPFPIW!WvP044\=VPV4# +'giEL];i +'giLe;i)r) LiveSessionrNrrprofile_mismatchr)rSr/rrrrrrrrrrrrhidden)%gateway.session_authorityrrrrrrrrrrr from_dictrrYr<rSrr/rrrrrrrrrrFphysical_targetr_lock_ensure_loaded_locked_entriesget_compression_lineager setdefault)r=r/rrrrrrrrDrstoretargetcurrents&& rrrs5    ! !T G- :<>>Fhj  " } ,,jjq"G| 4 44 233  " "77#3 4E \\Fi&&BYBYZ ,, " ": .C +u/?/?:/M("5"55:9U{c(mw{{;K\/ZZM"C NC NCHYHY[eguguGvv  I$4$4$B$B$X$XY_$`` 455{{#$ 2?+"8[[9JA-NO  !S\Y!5L%LTWX`TaTa#$89 9    * *E  & &z)2F2F 'S TF  ##%..$$U%6%67  7#5#5Y\\=a=abl=m#m#$89 97>7JwOaOaekOkGqvu(()  !!*k&BSBS.TU i**J 77C " ! !4 s-N*BN>* N; > O rI)r)%__doc__rr functoolsrr4rgateway.configrgateway.sessionrrrgateway.session_contractrhermes_state_runtimerr r hermes_state_localr rr rrr0r.r>rFrLrRrYrgrrrrrr*rrsR #HH/AAm , Z\oDHNH4H & 4 FptpRVpcgp!%pt6Tt6PTt6aet6#t6nW#8r*