+ jHjO*Rt^RIt^RIt^RIt^RIHt^RIHt^RIH t H t ^RI H t ^RI Ht^RIHtHt^RIHtHtR tR tR t!R R ]4t!RR]4tRtRtRtRtRtRtR!t Rt!Rt"Rt#Rt$R"Rlt%Rt&Rt'Rt(RR/R lt)R#)#zMRestore only private, profile-bound local policy into the existing authority.N)Path)Platform) SessionEntry SessionSource) SessionRef)local_identity) POLICY_PREFIX local_receipt)RuntimeStoreErrorlist_session_admissionscVPp\VRR4pVeVPV4MRpVf VP#\VRR4pVf /;qAnVP V/4#)aThe adapter map a LOCAL session of *authority* lives in: ``runner.adapters`` for the launch profile, ``runner._profile_adapters[name]`` for a served secondary (its routed home, so ``_adapter_for_source`` / ``_adapters_for_profile`` resolve the right transport).session_authoritiesN_profile_adapters)runnergetattr profile_nameadaptersr setdefault) authorityrregistrynameprofile_adapterss& C/home/ubuntu/.hermes/hermes-agent/gateway/session_local_recovery.pylocal_adapter_maprsy  Fv4d;H/7/C8  +D |v':DA6883  & &tR 00c\\PWRR7p\VPRR4pVeVP V4MRpVeWSnV#)aLOCAL SessionSource for a session owned by *authority*. A served secondary's local sessions carry its profile so ``build_session_key`` namespaces them (``agent::local:...``) and the SessionStore writes their rows to that profile's ``state.db``, not the launch store.dm)platformchat_iduser_id chat_typer N)rrLOCALrrrprofile)rrrsourcerrs&&& r local_sourcer$sSHNNG`d eFy'')>EH/7/C8  +D  Mrc^RIpVPVP4p\V\4'd VP M\ V4P RV 2pV'd+RVR,P RVR,P 2MRpVPeR\VP4 2MRpV V V 2#)z`` at :``: where a receipt check raised, and why, followed through every chained ``__cause__`` (``restore_policy`` and ``local_receipt`` wrap the check that failed into a bare ``storage_unavailable``).Nz: z at :z , caused by ) traceback extract_tb __traceback__ isinstancer reasontype__name__rlineno __cause___refused_check)excr)framescausewherechaineds& rr2r2*s  ! !#"3"3 4F$S*;<s^    ! !T  / 7 " ! 7 "P)'2344 IOOPSf s ++ " !s B)) B9 c6VR,V8wd \R4h\P!VR,4pRVR,R,9dVPVPnVP V8wg.VPP 4VP 48wd \R4hVPPVP4pVe6VR,VR,VR ,3W2PVP38wd \R 4hV#) zS*receipt*'s entry, once its route, origin and stored identity are this authority's.routezroute mismatchentryr"originzentry mismatch session_keyrrzstored identity mismatch) ValueErrorr from_dictr"rWrXto_dictrM get_sessionrJrr)rrQr#rUrVrows&&&& r_checked_entryr^Rsw5 )**  " "77#3 4E(22%~~  U"||##%)99)** ,, " "5#3#3 4C {s=)3y>3y>JuVdVdflftftNuu344 Lrc \VPV4pVR,VP8wd \R4hRV9d VR,M!\ VR,VR,VR,4pVR,V8wgW8wd \ R4h\ WVR,4pVPPPV4pW$V\WWE43#)zY*sid*'s stored receipt with its LOCAL source, route and entry, once all are this owner's. profile_idprofile_mismatchlegacy_session_id principal_id request_idrJzidentity mismatch) r rMr`r rrYr$r session_store_generate_session_keyr^)rrPrQrr#rUs&& r owned_receiptrgesILL#.G| 4 44 233/Bg/Mw*+gl3W^5LgVbNcd |#s~,-- )gn.E FF    * * @ @ HE E>)f#T TTrc V'dW!PRVR,.49dR#VPP4;_uu_4pVPRW"W"34P 4pRRR4XeR#\ P !\4PRVR,V4R# +'giLJ;i)a*session_id* is a replacement the SessionStore's stale-route self-heal minted on this local route before #140642: outside the receipt's lineage, never admitted, no transcript. The receipt is the route's truth, so restoring it drops that entry instead of refusing the conversation forever (``admission_conflict`` on every resume). Anything with history or ledger rows still refuses: it is not provably a stray.lineagerJFzSELECT 1 FROM messages WHERE session_id=? UNION ALL SELECT 1 FROM session_admissions WHERE target_session_id=? UNION ALL SELECT 1 FROM worker_executions WHERE session_id=? UNION ALL SELECT 1 FROM sessions WHERE parent_session_id=? LIMIT 1NzbLocal route for %s named an empty replacement %s outside its lineage; restoring the receipt targetT) getrMrNexecutefetchonelogging getLoggerr/warning)rrQrJrRbusys&&& r_stray_route_targetrqss {{9w|?T>U'VV    ! !T|| QZ < >?Ghj  "   h''l z+  " !s #B00 C cZ^RIHp^RIHp^RIHp\ W4wrVrxVPVPPr\WV4p V!V R,4p WJdT \W Wg4rTPp ^RI HpVPP!4;_uu_4pV!W4RRR4\CT4pTPE\FPH4pTfT!T4pTT\FPH&\7TT4'dTPJTJd \9R 4hTPLPET4pTfT PN;_uu_4T PQ4T PRPET4pTe;TPT 8wd*\UYTP4'g \9R 4hRpTeTPVTn+Yhn,YPRT&RRR4T TPZT &T!Yg4TPLT&TP]T4MTP_TP`4'dNTP`Pc4TPc48wg!TPZPET 4T 8wd \9R 4hT PN;_uu_4T PeT4pTe?TPTPER T.49d(\UYTP4'g \9R 4hT Tn RRR4\gTPhT4# +'giEL;i \"dh\$\&\(\*3dp\,P.!\04P3RT\5T44\7T\84'd.\;TP<TP>TP@R7Th\;R 4ThRp?ii;i +'giEL;i +'giEL;i) ) LiveSession)LocalSessionAdapter)restore_policypolicy)validate_local_lineageNz$Local session %s receipt refused: %s)fielddetailrHruntime_drainingadmission_conflictri)5gateway.session_authorityrtgateway.session_localrugateway.session_policyrvrgrrrerSr^rJrLrxrMrNrBKeyError TypeErrorrYAttributeErrorrmrnr/ror2r,r r9r-ryrzrrjrr!rsessions_lock_ensure_loaded_locked_entriesrqyolorWpoliciesregister_sourceauthorize_sourcer#r[ _entry_lockedrr`)rrPrtrurvrQr#rUrVrstoreadoptedrwtargetrxrRr3radapterlivecurrents&& rrestore_local_sessionrsG595>(5i(E%)9)9)G)G-igF 12  !$nY&WU!!E \\ # # % % "4 1&!+Hll8>>*G%i0#* g2 3 3w7H7HPY7Y 233    ! !# &D | [[[  ' ' )nn((/G"w'9'9V'C*9w?Q?QRR+,@AA"$\\ !L$)NN5 !%+!"-f"< 3'&&t{{33 [[ "fnn&6 6    ! !' *f 4 566 [[[))%0G7#5#5W[[UXTY=Z#Z+>ySZSeSe+f+f'(<==!'G   i**C 00_& % %  i^ <>(#++,RTWYghkYlm c, - -!#**CIIcjjQWZ Z34#= >[[,[[sWBM$ M-MBP>#Ii8Y\\3>>:7CLQQ  $ $S ))rc ^RIHpVPVRR7pVUu0uF qDR,kK ppVPV4\ Y0PTRRRR74wrgYVT3#uupi Td T.R3u#i;i)a``(live row ids, display rows, truncated)`` of physical *target*, the live ids read first (``local_history``'s fence). The display rows are the compression lineage as main's resume and the REST transcript show it: every live row, and the newest compaction-archived rows that fit what the live rows leave of ``RESUME_HISTORY_BYTES`` (``truncated`` when older ones were left out). A lineage over the resume cap shows only the live rows.)SessionResumeTooLargeErrorTinclude_row_ids_row_idF)include_ancestorsinclude_compactedr) hermes_staterget_messages_as_conversationassert_resume_safe _fit_archive)rMrr live_rowsr]rkept truncateds&& r display_rowsrs 8///MI&/ 0is NNiD 0 f%#9.M.M$$PT/N/VWOD y   1 &RsA'A,, A;:A;c tVUu0uF q"R,kK pp.\RV44Rrep\V4FkpVR,V9dJV\\P!V\ R74, pT;'g V\ 8pV'dKZVPV4Km VRRR1,V3#uupi)z``(display rows kept, truncated)``: every live row of *display*, and its newest archived rows that fit what *live_rows* leave of ``RESUME_HISTORY_BYTES``.rc3l"TF*p\\P!V\R74xK, R#5i)defaultN)lenjsondumpsstr.0r]s& r _fit_archive..s%#[QZ#C 3(D$E$EQZs24FrNr()sumreversedrrrrRESUME_HISTORY_BYTESappend)rdisplayr]rrusedrs&& rrrs'0 0is NNiD 0#[QZ#[ []b D  y> % C 345 5D!@@T,@%@I C ! ":y   1sB5c"\W4pT\P!\VPV4GRjxL 3#L5i)za``local_history``'s lineage read, off the owner loop; the locked part re-reads only the live tip.N)rasyncio to_threadrrM)rrrs&& rprepare_historyrs3 y .F **<vNN NNNs6A>AcVUu0uF q"R,kK pp..^repVFEpVR,V9dVPV4.V^,reK.VP/VCRR/C4KG VUu0uF q"R,kK upV,p.^r\VRR7FBpVR,V9d!VPWI,4V ^, p VPV4KD W,#uupiuupi)aThe live rows in stored (``row_id``) order, each archived display row placed before the live row it preceded in display order. Display deduplication keeps a carried message at its FIRST copy's position, so after a rotated compression the copied tail sits before the new summary. Clients take the live rows of a resume as the transcript (the CLI's ``conversation_history``, ``/undo``'s prefix, rollback, ACP replay), so the live subsequence must be the stored one; archived rows only anchor between live rows.rarchivedTcVR,#)rr:)rs&r-_merge_live_in_stored_order..s!I,r)key)rsortedextend) rrr]rgroupspendingshown shown_idsrowsseens && r_merge_live_in_stored_orderrs*..#9~~G.QUF y>W $ MM' "U NN4c4:t4 5  ,337CY73g=IQ$d 67 y>Y & KK % AID C 8 >/4s C&,C+c VPp\W4pVeV^,V8Xd V^,M \W44wrVpVPVRR7pVU u0uF qR,kK p p WZ8:g#\W44wrVpVPVRR7pM'W, 'd\ W4wrkT;'gT p\ Wh4U U U u.uF=p /V P 4U U u/uFwrV R8wgKWbK up p CRV R,/CNK? pp p p V'dV'd RV^,R&V#uup iuup p iuup p p i)aPDisplay history of logical *ref*: every stored row the user saw, in display order. A row outside the current physical transcript's active set (summarized away by a compression) carries ``archived: true``: it is shown, never live, so no undo, retry or rewind may target it. The rows without it are exactly the live transcript's, so a client choosing among live rows sees what it saw before. That includes a micro-compaction merge (``display_metadata.model_only``): its originals are the archived rows renderers show, so renderers skip the merge itself. Each row carries its durable ``messages.id`` as ``row_id`` (the ``TranscriptMessage`` field Desktop hydration and the legacy ``session.history`` already use): a ``session.mutate`` rewind addresses its ``target_message_id`` by it, so a snapshot without it leaves no way to undo/retry. *prepared* (``prepare_history``) is kept while every row it read as live still is; a rewind or compaction since then re-reads the lineage here. When the byte budget left older archived rows out (``display_rows``), the first row carries ``archived_truncated: true``. Trrrow_idarchived_truncated)rMrrrrritems)rrpreparedrMr read_liverrrr]live_idscutkvrs&&& r local_historyrs= B y .F4<4HXVW[\bMbXa[*6r*B"I * *64 * HD*./$3I$H/  (4R(@% I..vt.L   #D2 $$ 27A CA [?Y? Z3y> ZA  CT(,Q$% K0@ Cs$D. D9" D32D38D93D9cVPPVP4pVe8VPe*VPP\ P 8wdR#\VPVP4R,R,pVPPV4pVe3VPR4eVPPV4R#R#R#)u The first admitted turn makes a finalized local session live again (#85303). Mounting (``session.resume``) is a read and leaves ``ended_at``/``end_reason`` alone; the drain calls this after the turn's local preflight, before execution routes it. A TUI shutdown / WS disconnect / idle eviction stamps ``end_reason`` on the physical row. ``SessionStore`` reads any stamped row as a stale route (#54878) and, since those reasons are not recoverable, answers the turn with a FRESH session — the client keeps waiting on an id that never emits again. The classic surfaces clear the stamp on the first real turn (tui_gateway ``_reopen_if_finalized``); the authority must too. Only the lineage tip is reopened: a compression parent or reset predecessor is never the physical target. NrVrJ end_reason) rrjrJr#rrr!r rMr\reopen_session)rrrrr]s&& rreopen_local_sessionr>s    ! !#.. 1D |t{{*dkk.B.Bhnn.T 9<< 8 A, OF ,, " "6 *C 377<0< ##F+=rc ^RIHp\VPY#TVPVP VP VeTM VPRR7 pVPVP4p\VRR4;'g/pVe>VP\VP4P4VP4M VPp V!WyVPVP!4R7W`P"VP&V#)rs)reset_local_targetNT)rWrr display_nameis_fresh_reset_local_authority_epochs)rIparent_session_idrV)rLrrrXrWrr r _db_for_keyrrjrdb_pathresolve_local_authority_epochrJr[r) r old_entryrJnowrrrVrMepochsrIs &&&&& rreset_local_sessionrSs= .. )*<*< H[H[%1%=\9CYCY E   900 1B U5t < B BFTVTbFJJtBJJ'//153O3O PhmiEiEEr)2)=)=U]]_V,1NN9(() Lrc VPP4;_uu_4pVPR\R,34Uu.uFq"^,\ \4RNK upuuRRR4#uupi +'giR#;i)z+SELECT key FROM state_meta WHERE key LIKE ?%N)rMrNrkrr)rrRr]s& rlocal_receipt_idsrbsw    ! !T7;|| 9MC.ms/^V]sH 0JV]TFzLocal session %s paused: %sN)rearm_persisted_closessettle_viewer_close)track_mutationc38"TFqR,R8HxK R#5irr:rs& rrryso9n#x=I-9nr)rrr rMany _scheduler9rBr rmrnr/ror-gateway.session_viewer_closerrgateway.session_runtime_workersrrr`) rrrPrrr3rrrs &$ rrecover_local_sessionsrhsD + `' 7C-illsKGGCC/^V]/^CCC/^V]/^,^,^##C(-_Gx ,\B))4C    9+?+? E Fso9PQZQ]Q]jm9nossso9PQZQ]Q]jm9noooy*=i*MN 5   1    `   h ' / /0MsT^T^ _ _ `s;1E E E!E<EF8.F87F884F33F8i0)N)*r?rrrmpathlibrgateway.configrgateway.sessionrrgateway.session_contractrhermes_state_keysrhermes_state_localrr hermes_state_runtimer r rr$r2r9rBrSr^rgrqrrrrrrrrrrrrr:rrrsS #7/,;K 1  &]']a'a,(& U,=1@*'!$ !O 4!H,* T O%Or