+ Wj.#pRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t ^RI H t H t ^RI Ht^RIHtHt^RIHtHtHtHt^RIHtHtHtHtHtRtR tR t^?t R t!^N] NR?N]% NR@N]! NRAN]& NR=N]% NR*N]!^, NRBN]% NR*N] NRCN4t]*!RHRI4 RJ2t?RKt@RtAR.PwRL]A44tB]C!]A4RM0,tDRtER.PwRN]E44tF]C!]E40Rm,tGRORPltHRQRRltIRRSRTlltJ]*!RHRU4 RV2]I!RW]B4,tKRX]?PRYRZ7 R[]KPRYRZ7 R&2tMRR\R]lltNR^] : R_] : 2tOR`RaltPRbRcltQRRdRelltRRfRgltS^ tTRhtU^tVRitWRjRkltX]X!Rl4tY]X!Rm4tZRnt[RoRplt\Rqt]Rrt^RsRtlt_RuRvlt`RwtaRxRyltbRRzR{lltcR|td]d3R}R~llteRRRR/RltfRtgR],R,thRtiR]W R]Y R]Z R]Z R]Y R2 tjRtkRRRlltl]l!4tmR]l!RY4 R]m R]m R]m R]m R2 tnRtoRtpRtqRtrR]Y R]Y R2tsR]Y R]Y R2tt]P!R4tvRtwRtx]PR8HtzRt{]P]P]P]P0tRRltRRltRtRRltRRltRRltRRltRtRRltRt]EPRR/Rl4tRRltR#)zShared constants and helpers for the SessionDB family of modules. Lives outside hermes_state so the mixin modules can import it without a cycle.N)Any) EPOCH_MAX EPOCH_MIN)CRON_PRINCIPAL_ID)!persistent_record_pidns_checkablepid_namespace_id)AUTO_LOAD_SCAFFOLD_SQL_LIKESKILL_EXCERPT_JOINTSKILL_SCAFFOLD_SQL_LIKEdescribe_skill_invocation)LEGACY_SUMMARY_PREFIXSUMMARY_PREFIX_MERGED_PRIOR_CONTEXT_HEADER_MERGED_SUMMARY_DELIMITER_SUMMARY_END_MARKERderivedllmuseric<V^8dQhR\R\R\/#)keyenv_varreturn)strr)formats"GC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_state_common.py __annotate__r#s!###s#s#c^RIHpV!4'd7^RIHpV!4P R4;'g/P V4#\ PP V4# \ dR#i;i)a``sessions.`` for the profile whose state.db this process is touching. ``gateway/run.py`` bridges the LAUNCH profile's ``sessions.*`` into ``env_var`` (the cross-process carrier CLI/cron children read). Under a multiplexer a routed turn runs with a HERMES_HOME override and that env slot holds the default profile's value, so a served profile with different ``sessions.*`` settings must read its own config.yaml. Unscoped: the env bridge, as before. Returns ``None`` when neither source sets the key. )get_hermes_home_override)load_config_readonlysessionsN)hermes_constantsrhermes_cli.configr get Exceptionosenviron)rrrr s&& rrouted_sessions_settingr(#sh:!!  >(*..z:@@bEEcJ J ::>>' ""  s"A)A)) A87A8c0V^8dQhR\R\/#rtextrr)rs"rrr7sNNcNcNrcfVPRR4PRR4PRR4#)zEscape LIKE wildcards (``%``, ``_``) so derived text matches literally; pair with ``ESCAPE '\'``. ``_`` is common in branch names/titles/paths and a substring match must not silently widen.\z\\%z\%_z\_replacer+s&r escape_liker47s/ <<f % - -c5 9 A A#u MMrz3REPLACE(REPLACE(m.content, X'0A', ' '), X'0D', ' ')z(m.content LIKE 'z' OR m.content LIKE 'z')z+CHAR(9) || CHAR(10) || CHAR(13) || CHAR(32)c0V^8dQhR\R\/#r*r,)rs"rrrGs//s/s/rcBRVPRR4,R,#)'z''r1r3s&r _sql_literalr8Gs c4( (3 ..r_queued_promptc<V^8dQhR\R\R\/#)r expressionpathrr,)rs"rrrTs!>>#>S>S>rc8RV RV R2pRV R\V4 R2#)z?Build a non-throwing JSON marker lookup for a JSON TEXT column.z(CASE WHEN json_valid(z) THEN z ELSE json_object() END)z json_extract(, ))r8)r;r< safe_jsons&& r_sql_json_extractrATs? ! -|3 59+R T(:';1 ==rc0V^8dQhR\R\/#rr;rr,)rs"rrr^s55c5c5rcRV R\ R2#)zLTRIM(r>r?_SQL_WHITESPACEr;s&r_sql_ltrim_whitespacerH^s Jr?rErGs&r_sql_trim_whitespacerKbs :,b 1 33rcVV^8dQhR\R\\R3,R\/#)rr;prefixes.r)rtuple)rs"rrrfs.lllc3hlClrcla\V4oRRPV3RlV44,R,#)( OR c 3^<"TF"pRS R\V4 R\V4 2xK$ R#5i)SUBSTR(, 1, ) = N)lenr8).0ptrimmeds& r #_sql_starts_with..hs0e\dWXwwiuSVHDa@QR\ds*-r?)rHjoin)r;rMrYs&&@r_sql_starts_withr]fs.#J/G e\dee ehk kkrc0V^8dQhR\R\/#)rmarkerrr,)rs"rrrksZZcZcZrc8R\V4 R\V4 R2#)z5``m.content`` after the first occurrence of *marker*.z#SUBSTR(m.content, INSTR(m.content, z) + r?)r8rV)r_s&r_sql_after_markerraks" 0f1E0Fd3v;-WX YYrz Do NOT answerz m.contentz(INSTR(m.content, z ) > 0 AND r?z&SUBSTR(m.content, 1, INSTR(m.content, z) - 1)zCASE WHEN SUBSTR(rTrUz THEN rSr>z ELSE z ENDz4(COALESCE(m.display_kind, '') <> 'hidden' AND ((NOT z AND NOT z) OR (z AND INSTR(m.content, z) > 0 AND LENGTH(z ) > 0) OR (z AND LENGTH(z) > 0))) CASE WHEN z WHEN z AND LENGTH(m.content) > z THEN SUBSTR(z) || 'z ' || SUBSTR(z, -z) WHEN z) ELSE SUBSTR(z) ENDc0V^8dQhR\R\/#)rrawrrr)rs"rrrsYYYYrcF\T;'gR4P4pV'gR#VPRR4PRR4p\V4pVeTMVP \ 4^,p\ V4\8dVR\R,#T#)zCTurn a ``_preview_raw`` column into the short preview callers show.rb   Nz...)rstripr2r splitr rV_PREVIEW_MAX_CHARS)rer+ describeds& r_shape_previewros syyb>   !D  <<c " * *4 5D)$/I!-94::>Q3RST3UD03D = p.ended_at)zsEXISTS (SELECT 1 FROM sessions p WHERE p.id = {a}.parent_session_id AND p.end_reason = 'compression')c#."TF pRV R2xK R#5ir7NrWreasons& rrZrZs"R?QVQvha=?Q new_sessionc#."TF pRV R2xK R#5iryrzr{s& rrZrZs(^E]61VHAE]r}c$V^8dQhR\/#rrbool)rs"rrrsHHtHrcD\V\4;'d V\9#)u#True when *reason* is an automatic-cleanup end stamp; compression-liveness sites must call this. Single owner of the "accidental vs deliberate end" predicate — every compression-liveness site must call this instead of re-implementing the reason taxonomy (#88197, never-patch-predicates). ) isinstancer_AUTOMATIC_END_REASONS)r|s&ris_automatic_end_reasonrs fc " G Gv1G'GGrc<V^8dQhR\R\R\/#)ralias reasons_sqlrr,)rs"rrrs&jj3jSjSjrc &RV RV RV RV RV R2 #)a Pre-marker reset-continuation heuristic: child rides its parent's exact non-empty routing key and the parent ended at a reset boundary. Shared by ``_RESET_CHILD_SQL`` and ``reopen_session()`` so the two cannot drift; ``reasons_sql`` is a literal or placeholder list.z9EXISTS (SELECT 1 FROM sessions p WHERE p.id = z3.parent_session_id AND p.end_reason IN (z) AND z(.session_key IS NOT NULL AND z".session_key != '' AND z.session_key = p.session_key)rz)rrs&&r_legacy_reset_child_sqlrs?HwO,,7=8I%Q '!CE7Jg ijrc<V^8dQhR\R\R\/#)rchildparentrr,)rs"rrrs!99s99s9rcTaaRPVV3RlR44RS R2,#)ax`` AND ...`` clauses rejecting children that are NOT compression continuations of *parent* (branch/delegate/reset forks, tool sessions). Markers are bound to the parent id: continuations inherit ``model_config`` verbatim, so a marker naming another row is inherited, not a fork. ``child`` is the column prefix (``""``, ``"c."``); single owner so prune and compression agree.rbc3V<"TFpR\S R2RV 24 RS R2xK R#5i) AND COALESCE( model_configz$.z , '') != rhN)rA)rWr_rrs& rrZ._non_continuation_child_sql..sAIF +ug\,BbMRSS\]c\ddfgIs&)rzsource, '') != 'tool' )_branched_from_delegate_from _reset_from)r\)rrsffr_non_continuation_child_sqlrs7 77I  % 78 99rz $._reset_fromz IS NOT NULL OR z{a}z (s.parent_session_id IS NULL OR sarQc0V^8dQhR\R\/#rrrr,)rs"rrrsnnncnrc RV R\PVR7 R\PVR7 R\PVR7 R2 #)z:Subagent runs, not branch, reset, or compression children.rPz(.parent_session_id IS NOT NULL AND NOT (rz ) AND NOT ()))_BRANCH_CHILD_SQLr_COMPRESSION_CHILD_SQL_RESET_CHILD_SQLrs&r_ephemeral_child_sqlrsaw>?P?W?WZ_?W?`>ab+22U2;.gsX!WAC!Ws)r\rangerrrV)itemss&r _placeholdersres/ 88X 5#0F0FuCPUJ!WX XXrze(s.message_count > 0 OR EXISTS (SELECT 1 FROM session_admissions a WHERE a.target_session_id = s.id))c$V^8dQhR\/#rr,)rs"rrrqs!!#!rc@VPR4'd\#R#)z``sessions s`` predicate that drops empty launch stubs (the CLI crashed or a resume failed before the first turn). A read-only open does not migrate, so a store from before the runtime tables may lack ``session_admissions``; messages alone decide there.zPSELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'session_admissions'zs.message_count > 0) _read_all_NOT_A_LAUNCH_STUB_SQL)dbs&rlaunch_stub_filter_sqlrqs ||fgg%% rcFV^8dQhR\\\3,/#r)rNrlist)rs"rrrzssDyAQrcT\T;'g.4pV'gR.3#\T;'gR 4pV'gR\V4 R2V3#VUu.uF qDR8wgK VNK ppR\V4 R2pV'gV\V43#R\V4 RV R2.VOVO3#uupi) a``sessions s`` source predicate. With ``local_created_sources``, a ``source='local'`` row matches only when ``created_source`` is one of those surfaces; the placeholder ``'unknown'`` is not a surface and stays unmatched until an upsert stamps the real creator.rbz s.source IN (r?localz-(s.source = 'local' AND s.created_source IN (rz(s.source IN (z) OR rz)rr)sourceslocal_created_sourceslabelssurfacesitem non_local local_sqls&& r_source_match_clauserzs'--R F 2v )//R0H }V45Q7??"(<&$GO&I<? h@W?XXZ[I $x.(( y12% {!D)h  =s B%!B%ic$V^8dQhR\/#)rsizer)rs"rrrs&&#&rc#v"\V4p\^\V4V4FpWW!,xK R#5i)z?Yield *ids* (any iterable) as lists of at most *size* elements.N)rrrV)idsrstarts&& r _id_chunksrs2 s)Cq#c(D) %%*s79primary sessions_dirc ~\T;'gR Uu0uF'p\V\4'gKV'gK%VkK) up4pV'gR#^RIHp^RIHpHp Hp H p \PP\PP\P!VP444p V !V 4p RW69dTMV^,RVRV /p\!V4^8dWnR&Ve\V4VR&V RJ;'dE\PP#V 4\PP#V!448gpV'd V !V 4MRpV!R /VBVe V !V4R#R#uupi Te T !T4ii;i \$d\&P)R R R 7R#i;i)aVFire ``on_session_delete`` after a committed delete or deliberate archive (#124511). Call right after the write transaction commits (before follow-up cleanup that can raise), with the ids it removed or, for ``reason="archive"``, hid. *primary* is the session the caller asked for; without it the first id stands in (bulk sweeps). ``deleted_ids`` rides along when more than one row went. Dispatch runs under the store's own profile home, so a process touching another profile's store (``sessions repair-profiles``) reaches THAT profile's plugins. Late-bound and fail-open: never breaks the delete. N) invoke_hook)get_hermes_homeprofile_name_for_homereset_hermes_home_overrideset_hermes_home_override session_idr|profile deleted_idsrz!on_session_delete dispatch failedT)exc_inforz)on_session_delete)sortedrrhermes_cli.lifecyclerr"rrrrr&r<dirnameabspathfspathdb_pathrVrealpathr%loggerwarning)rrr|rrsidrrrrrrhomerpayloadrebindtokens&&$$$ remit_session_deletedr s{ +"3"3"3U"3# 38L#QT##"3U VC K4  wwrwwryy/DEF'-%'.wc!fhX^`ikrs s8a<%(M "  #&),&7GN #$ff)9)9$)?277CSCSTcTeCf)f28(.d 2  7w 7 *51!+V* *51! K:TJKsGE?E?E?B;FA F F'F/ FFF"F<;F<a/ CREATE TABLE IF NOT EXISTS schema_version ( version INTEGER NOT NULL ); CREATE TABLE IF NOT EXISTS system_prompts ( hash TEXT PRIMARY KEY, prompt TEXT NOT NULL ); CREATE TABLE IF NOT EXISTS sessions ( id TEXT PRIMARY KEY, runtime_revision INTEGER NOT NULL DEFAULT 0, runtime_generation INTEGER NOT NULL DEFAULT 0, source TEXT NOT NULL, created_source TEXT, user_id TEXT, session_key TEXT, chat_id TEXT, chat_type TEXT, thread_id TEXT, display_name TEXT, origin_json TEXT, expiry_finalized INTEGER DEFAULT 0, model TEXT, model_config TEXT, system_prompt TEXT, system_prompt_hash TEXT, parent_session_id TEXT, started_at REAL NOT NULL, ended_at REAL, end_reason TEXT, message_count INTEGER DEFAULT 0, tool_call_count INTEGER DEFAULT 0, input_tokens INTEGER DEFAULT 0, output_tokens INTEGER DEFAULT 0, cache_read_tokens INTEGER DEFAULT 0, cache_write_tokens INTEGER DEFAULT 0, reasoning_tokens INTEGER DEFAULT 0, cwd TEXT, git_branch TEXT, git_repo_root TEXT, git_metadata_generation INTEGER NOT NULL DEFAULT 0, billing_provider TEXT, billing_base_url TEXT, billing_mode TEXT, estimated_cost_usd REAL, actual_cost_usd REAL, cost_status TEXT, cost_source TEXT, pricing_version TEXT, title TEXT, title_source TEXT, last_activity_at REAL, last_activity_description TEXT, last_activity_provenance TEXT, api_call_count INTEGER DEFAULT 0, handoff_state TEXT, handoff_platform TEXT, handoff_error TEXT, compression_failure_cooldown_until REAL, compression_failure_error TEXT, compression_fallback_streak INTEGER NOT NULL DEFAULT 0, compression_ineffective_count INTEGER NOT NULL DEFAULT 0, compression_recovery_deadline REAL, compression_overload_streak INTEGER NOT NULL DEFAULT 0, profile_name TEXT, transport_profile TEXT, rewind_count INTEGER NOT NULL DEFAULT 0, archived INTEGER NOT NULL DEFAULT 0, auto_archived INTEGER NOT NULL DEFAULT 0, pinned INTEGER NOT NULL DEFAULT 0, hidden INTEGER NOT NULL DEFAULT 0, last_read_at REAL, tool_names TEXT, transcript_revision INTEGER NOT NULL DEFAULT 0, FOREIGN KEY (parent_session_id) REFERENCES sessions(id), FOREIGN KEY (system_prompt_hash) REFERENCES system_prompts(hash) ); CREATE TABLE IF NOT EXISTS messages ( id INTEGER PRIMARY KEY AUTOINCREMENT, session_id TEXT NOT NULL REFERENCES sessions(id), role TEXT NOT NULL, content TEXT, tool_call_id TEXT, tool_calls TEXT, tool_name TEXT, effect_disposition TEXT, timestamp REAL NOT NULL, token_count INTEGER, finish_reason TEXT, reasoning TEXT, reasoning_content TEXT, reasoning_details TEXT, codex_reasoning_items TEXT, codex_message_items TEXT, platform_message_id TEXT, observed INTEGER DEFAULT 0, _compressed_summary INTEGER NOT NULL DEFAULT 0, active INTEGER NOT NULL DEFAULT 1, compacted INTEGER NOT NULL DEFAULT 0, api_content TEXT, display_kind TEXT, display_metadata TEXT, display_identity BLOB, display_order INTEGER, message_uid TEXT, absorbed_message_uids TEXT, tool_call_uids TEXT, tool_call_uid TEXT ); CREATE TABLE IF NOT EXISTS session_model_usage ( session_id TEXT NOT NULL REFERENCES sessions(id) ON DELETE CASCADE, model TEXT NOT NULL, billing_provider TEXT NOT NULL DEFAULT '', billing_base_url TEXT NOT NULL DEFAULT '', billing_mode TEXT NOT NULL DEFAULT '', task TEXT NOT NULL DEFAULT '', api_call_count INTEGER NOT NULL DEFAULT 0, input_tokens INTEGER NOT NULL DEFAULT 0, output_tokens INTEGER NOT NULL DEFAULT 0, cache_read_tokens INTEGER NOT NULL DEFAULT 0, cache_write_tokens INTEGER NOT NULL DEFAULT 0, reasoning_tokens INTEGER NOT NULL DEFAULT 0, estimated_cost_usd REAL NOT NULL DEFAULT 0, actual_cost_usd REAL NOT NULL DEFAULT 0, cost_status TEXT, cost_source TEXT, first_seen REAL, last_seen REAL, PRIMARY KEY (session_id, model, billing_provider, billing_base_url, billing_mode, task) ); CREATE TABLE IF NOT EXISTS runtime_epoch ( singleton INTEGER PRIMARY KEY CHECK (singleton = 1), epoch INTEGER NOT NULL CHECK (epoch > 0), instance_id TEXT NOT NULL ); CREATE TABLE IF NOT EXISTS session_admissions ( seq INTEGER PRIMARY KEY AUTOINCREMENT, admission_id TEXT NOT NULL UNIQUE, request_id TEXT NOT NULL, principal_id TEXT NOT NULL, target_session_id TEXT NOT NULL REFERENCES sessions(id) ON DELETE RESTRICT, lineage_json TEXT NOT NULL, payload_json TEXT NOT NULL, payload_digest TEXT NOT NULL, intent TEXT NOT NULL CHECK (intent IN ('queue','steer','redirect')), status TEXT NOT NULL CHECK (status IN ('queued','started','unknown','terminal')), outcome TEXT, owner_epoch INTEGER, generation INTEGER, UNIQUE (principal_id, target_session_id, request_id), CHECK (status != 'started' OR (owner_epoch IS NOT NULL AND generation IS NOT NULL)) ); CREATE INDEX IF NOT EXISTS session_admissions_pending ON session_admissions(target_session_id, status, seq); -- Cron run history finds a job's unified-runtime runs by the scheduler principal's request ids -- (``cron::``); without this a lookup walked -- every cron admission of every job. Partial: interactive turns, the bulk of admissions, pay -- nothing for it. The constant leading column gives the planner equality + range over a covering -- index, so it beats the UNIQUE autoindex's bare principal_id prefix even without ANALYZE stats. -- The WHERE is built from CRON_PRINCIPAL_ID, the literal the run queries inline, so they cannot drift. CREATE INDEX IF NOT EXISTS idx_session_admissions_cron_request ON session_admissions(principal_id, request_id, target_session_id) WHERE principal_id = 'u^'; CREATE TABLE IF NOT EXISTS worker_executions ( execution_id TEXT PRIMARY KEY, session_id TEXT NOT NULL REFERENCES sessions(id) ON DELETE RESTRICT, kind TEXT NOT NULL CHECK (kind IN ('cron','child','compute','kanban')), owner_epoch INTEGER NOT NULL, generation INTEGER NOT NULL, status TEXT NOT NULL CHECK (status IN ('registered','running','unknown','terminal')), adoption_digest TEXT NOT NULL, last_sequence INTEGER NOT NULL DEFAULT 0 CHECK (last_sequence >= 0) ); -- Lineage-wide worker exclusion (claim/register/reset) probes every row of a conversation's lineage -- inside the write transaction; without this each probe scanned the whole (only-growing) table. CREATE INDEX IF NOT EXISTS idx_worker_executions_session_status ON worker_executions(session_id, status); CREATE TABLE IF NOT EXISTS worker_receipts ( execution_id TEXT NOT NULL REFERENCES worker_executions(execution_id) ON DELETE RESTRICT, sequence INTEGER NOT NULL CHECK (sequence > 0), payload_digest TEXT NOT NULL, result_json TEXT NOT NULL, PRIMARY KEY (execution_id, sequence) ); CREATE TABLE IF NOT EXISTS state_meta ( key TEXT PRIMARY KEY, value TEXT ); CREATE TABLE IF NOT EXISTS gateway_routing ( scope TEXT NOT NULL DEFAULT '', session_key TEXT NOT NULL, entry_json TEXT NOT NULL, updated_at REAL NOT NULL, PRIMARY KEY (scope, session_key) ); CREATE TABLE IF NOT EXISTS gateway_hygiene_state ( session_key TEXT PRIMARY KEY, failure_streak INTEGER NOT NULL DEFAULT 0 ); -- Monotonic conversation generation per routing peer (#96811). -- -- A host-declared conversation key (X-Hermes-Session-Key / build_session_key) -- is per-CHAT and outlives any single conversation on it, so the prompt-cache -- affinity scope derived from it must be qualified by which conversation is -- currently live. Deriving that from the session rows themselves -- (COUNT/MAX over _RESET_END_REASONS boundaries) cannot prove non-reuse: -- delete_session() and bulk pruning remove ended rows, so an aggregate can -- return a pair it already emitted and hand a new conversation a retired -- affinity identity. -- -- This counter lives outside prunable session history and only ever -- increments, once per boundary actually written, so a generation can never -- be reused for a peer even if every session row behind it is deleted. -- -- These rows are deliberately NEVER garbage-collected, including when every -- session row for the peer is gone. Collecting one resets that peer to "no -- generation", so its next boundary writes generation = 1 again and re-issues -- a gwk_ scope a retired conversation already used — exactly the ABA this -- table exists to close. Do not add it to delete_session()'s cascade or to any -- prune sweep. One (TEXT, TEXT, INTEGER) row per routing peer is the intended, -- bounded cost. CREATE TABLE IF NOT EXISTS conversation_generations ( source TEXT NOT NULL, session_key TEXT NOT NULL, generation INTEGER NOT NULL DEFAULT 0, PRIMARY KEY (source, session_key) ); -- Per-backend liveness heartbeat (#94895). Each serve / tui_gateway process -- registers a row at startup and refreshes ``last_heartbeat`` periodically. -- The startup orphan sweep (sessions.startup_orphan_reap) consults this -- table to avoid reaping rows whose owning backend is still alive but -- just idle (multi-backend state.db shared by isolated serve processes). -- A backend whose ``last_heartbeat`` is older than the heartbeat staleness -- window is treated as dead; rows without ANY matching heartbeat fall back -- to the original staleness predicate so legacy deployments keep working. CREATE TABLE IF NOT EXISTS gateway_heartbeats ( backend_id TEXT PRIMARY KEY, pid INTEGER NOT NULL, started_at REAL NOT NULL, last_heartbeat REAL NOT NULL, profile TEXT NOT NULL DEFAULT '', host TEXT NOT NULL DEFAULT '' ); CREATE TABLE IF NOT EXISTS compression_locks ( session_id TEXT PRIMARY KEY, holder TEXT NOT NULL, acquired_at REAL NOT NULL, expires_at REAL NOT NULL ); CREATE TABLE IF NOT EXISTS session_turn_leases ( conversation_id TEXT PRIMARY KEY, holder TEXT NOT NULL, acquired_at REAL NOT NULL, expires_at REAL NOT NULL ); CREATE TABLE IF NOT EXISTS async_delegations ( delegation_id TEXT PRIMARY KEY, origin_session TEXT NOT NULL, origin_ui_session_id TEXT NOT NULL DEFAULT '', parent_session_id TEXT, state TEXT NOT NULL, dispatched_at REAL NOT NULL, completed_at REAL, updated_at REAL NOT NULL, event_json TEXT, result_json TEXT, delivery_state TEXT NOT NULL DEFAULT 'pending', delivery_attempts INTEGER NOT NULL DEFAULT 0, delivered_at REAL, owner_pid INTEGER, owner_started_at INTEGER, task_json TEXT, -- Owner-side execution fence (unified runtime). owner_execution_id TEXT, delivery_claim TEXT, delivery_claimed_at REAL, -- Mirrors the delegation tool's own CREATE TABLE (tools/async_delegation.py -- _initialize_schema). Keeping the canonical fresh-install shape identical -- to the tool's avoids a silent schema drift: the tool's lazy -- ALTER TABLE ADD COLUMN used to be the only source of this column, so two -- databases at the same schema_version had different -- async_delegations shapes depending on whether the delegation tool had -- ever run, breaking rebuild/replay pipelines that reconstruct state.db -- from the canonical schema (#94691). origin_session_id TEXT NOT NULL DEFAULT '' ); CREATE INDEX IF NOT EXISTS idx_sessions_source ON sessions(source); CREATE INDEX IF NOT EXISTS idx_sessions_source_id ON sessions(source, id); CREATE INDEX IF NOT EXISTS idx_sessions_parent ON sessions(parent_session_id); CREATE INDEX IF NOT EXISTS idx_sessions_started ON sessions(started_at DESC); CREATE INDEX IF NOT EXISTS idx_messages_session ON messages(session_id, timestamp); CREATE INDEX IF NOT EXISTS idx_messages_session_id ON messages(session_id, id); -- Partial index for the Insights assistant tool-call scan -- (agent/insights.py _get_tool_usage / _get_skill_usage): those queries filter -- messages by role='assistant' AND tool_calls IS NOT NULL, a small fraction of -- rows on a large state.db. role and tool_calls are base columns, so this can -- live in SCHEMA_SQL rather than DEFERRED_INDEX_SQL. CREATE INDEX IF NOT EXISTS idx_messages_assistant_calls_by_session ON messages(session_id) WHERE role = 'assistant' AND tool_calls IS NOT NULL; CREATE INDEX IF NOT EXISTS idx_compression_locks_expires ON compression_locks(expires_at); CREATE INDEX IF NOT EXISTS idx_session_turn_leases_expires ON session_turn_leases(expires_at); CREATE INDEX IF NOT EXISTS idx_session_model_usage_session ON session_model_usage(session_id); CREATE INDEX IF NOT EXISTS idx_session_model_usage_model ON session_model_usage(model); CREATE INDEX IF NOT EXISTS idx_async_delegations_delivery ON async_delegations(delivery_state, completed_at); a DROP TRIGGER IF EXISTS sessions_runtime_ledger_delete_guard; CREATE TRIGGER IF NOT EXISTS sessions_runtime_ledger_delete_guard BEFORE DELETE ON sessions WHEN EXISTS (SELECT 1 FROM session_admissions WHERE target_session_id = old.id) OR EXISTS (SELECT 1 FROM worker_executions WHERE session_id = old.id) BEGIN SELECT RAISE(ABORT, 'Refused to delete a session that has gateway runtime history: state.db was upgraded by a newer Hermes, and this older Hermes cannot delete such sessions. Downgrading is unsupported. Run hermes update to go back to the newer release, or restore the pre-update snapshot: https://hermes-agent.nousresearch.com/docs/getting-started/updating#rolling-back-to-an-older-release'); END; DROP TRIGGER IF EXISTS messages_transcript_revision_update; CREATE TRIGGER IF NOT EXISTS messages_transcript_revision_update AFTER UPDATE OF role, content, api_content, tool_calls, tool_call_id, tool_name, reasoning, reasoning_content, reasoning_details ON messages BEGIN -- An in-place rewrite (prompt expansion, multimodal context, a redaction) moves neither the -- active row count nor the highest id; this write-side revision is what a transcript-derived -- cache keys on (conversation_revision). Whoever wrote the row, old builds included. UPDATE sessions SET transcript_revision = transcript_revision + 1 WHERE id = new.session_id; END; CREATE INDEX IF NOT EXISTS idx_messages_session_active ON messages(session_id, active, timestamp); CREATE INDEX IF NOT EXISTS idx_messages_display_page ON messages(session_id, display_order, active DESC, id DESC) WHERE active = 1 OR compacted = 1; CREATE INDEX IF NOT EXISTS idx_messages_display_backfill ON messages(session_id) WHERE (display_order IS NULL OR display_identity IS NULL) AND (active = 1 OR compacted = 1); CREATE INDEX IF NOT EXISTS idx_messages_display_identity ON messages(session_id, display_identity, display_order) WHERE display_identity IS NOT NULL AND (active = 1 OR compacted = 1); DROP TRIGGER IF EXISTS messages_message_uid_insert; CREATE TRIGGER IF NOT EXISTS messages_message_uid_insert AFTER INSERT ON messages WHEN new.message_uid IS NULL BEGIN -- Every row carries a message_uid, whoever wrote it: a build that predates the column binds NULL, so -- the store mints one on its behalf (the current build always binds a uid; this never fires for it). -- The note lives inside the body: a comment before DROP/CREATE would defeat the settled-trigger skip. UPDATE messages SET message_uid = lower(hex(randomblob(16))) WHERE id = new.id; END; DROP TRIGGER IF EXISTS messages_display_order_insert; CREATE TRIGGER IF NOT EXISTS messages_display_order_insert AFTER INSERT ON messages WHEN new.display_order IS NULL BEGIN UPDATE messages SET display_order = COALESCE(( SELECT display_order FROM messages WHERE session_id = new.session_id AND id <> new.id AND (active = 1 OR compacted = 1) AND display_identity = new.display_identity AND display_order IS NOT NULL ORDER BY display_order LIMIT 1 ), new.id) WHERE id = new.id; END; DROP TRIGGER IF EXISTS messages_display_visibility_update; CREATE TRIGGER IF NOT EXISTS messages_display_visibility_update AFTER UPDATE OF active, compacted ON messages WHEN (new.active = 1 OR new.compacted = 1) <> (old.active = 1 OR old.compacted = 1) BEGIN UPDATE messages SET display_order = MIN(new.id, COALESCE(( SELECT display_order FROM messages WHERE session_id = new.session_id AND id <> new.id AND (active = 1 OR compacted = 1) AND display_identity = new.display_identity AND display_order IS NOT NULL ORDER BY display_order LIMIT 1 ), new.id)) WHERE id = new.id AND (new.active = 1 OR new.compacted = 1); UPDATE messages SET display_order = (SELECT display_order FROM messages WHERE id = new.id) WHERE session_id = new.session_id AND id <> new.id AND (active = 1 OR compacted = 1) AND display_identity = new.display_identity AND (new.active = 1 OR new.compacted = 1); UPDATE messages SET display_order = ( SELECT MIN(peer.id) FROM messages AS peer WHERE peer.session_id = old.session_id AND (peer.active = 1 OR peer.compacted = 1) AND peer.display_identity = old.display_identity ) WHERE session_id = old.session_id AND (active = 1 OR compacted = 1) AND display_identity = old.display_identity AND NOT (new.active = 1 OR new.compacted = 1); END; DROP TRIGGER IF EXISTS messages_display_identity_update; CREATE TRIGGER IF NOT EXISTS messages_display_identity_update AFTER UPDATE OF role, content, timestamp, tool_call_id, tool_calls, tool_name, display_kind ON messages WHEN new.role IS NOT old.role OR new.content IS NOT old.content OR new.timestamp IS NOT old.timestamp OR new.tool_call_id IS NOT old.tool_call_id OR new.tool_calls IS NOT old.tool_calls OR new.tool_name IS NOT old.tool_name OR new.display_kind IS NOT old.display_kind BEGIN UPDATE messages SET display_identity = NULL, display_order = NULL WHERE id = new.id OR ( session_id = old.session_id AND display_identity = old.display_identity AND (active = 1 OR compacted = 1) ); END; DROP TRIGGER IF EXISTS messages_display_identity_delete; CREATE TRIGGER IF NOT EXISTS messages_display_identity_delete AFTER DELETE ON messages WHEN old.active = 1 OR old.compacted = 1 BEGIN UPDATE messages SET display_order = ( SELECT MIN(peer.id) FROM messages AS peer WHERE peer.session_id = old.session_id AND (peer.active = 1 OR peer.compacted = 1) AND peer.display_identity = old.display_identity ) WHERE session_id = old.session_id AND (active = 1 OR compacted = 1) AND display_identity = old.display_identity; END; CREATE INDEX IF NOT EXISTS idx_messages_active_null ON messages(active) WHERE active IS NULL; -- Logical-identity recovery (agent.transcript_repair._active_logical_message_row) runs inside the write lock. CREATE INDEX IF NOT EXISTS idx_messages_session_uid ON messages(session_id, message_uid) WHERE active = 1; CREATE INDEX IF NOT EXISTS idx_sessions_session_key ON sessions(session_key, started_at DESC); CREATE INDEX IF NOT EXISTS idx_sessions_gateway_peer ON sessions(source, user_id, chat_id, chat_type, thread_id, started_at DESC); CREATE INDEX IF NOT EXISTS idx_sessions_handoff_state ON sessions(handoff_state, started_at); CREATE INDEX IF NOT EXISTS idx_sessions_system_prompt_hash ON sessions(system_prompt_hash); CREATE INDEX IF NOT EXISTS idx_sessions_tool_names ON sessions(tool_names); -- Recent-session browsing must never derive recency by scanning messages. -- This expression is the durable, indexable approximation used to preselect -- a small candidate set before compression-chain and preview hydration. CREATE INDEX IF NOT EXISTS idx_sessions_effective_activity ON sessions(COALESCE(last_activity_at, started_at) DESC, started_at DESC); -- CLI/TUI listings match gateway rows stored as source='local' by created_source, -- before LIMIT. created_source is reconciled onto legacy DBs, so this index lives -- here rather than in SCHEMA_SQL. A source-only index would walk every local row -- (Desktop and TUI included) to find one surface. CREATE INDEX IF NOT EXISTS idx_sessions_local_created_started ON sessions(created_source, started_at DESC) WHERE source = 'local'; ah -- Stable projection the base word index reads and writes through: the view -- computes EXACTLY what the triggers/backfill insert, so 'rebuild' and the -- integrity checker always agree with the stored index. CREATE VIEW IF NOT EXISTS messages_fts_src AS SELECT id, CASE WHEN role = 'tool' THEN substr(COALESCE(content, ''), 1, a) ELSE content END AS content, tool_name, tool_calls FROM messages; CREATE VIRTUAL TABLE IF NOT EXISTS messages_fts USING fts5( content, tool_name, tool_calls, content='messages_fts_src', content_rowid='id' ); CREATE TRIGGER IF NOT EXISTS messages_fts_insert AFTER INSERT ON messages WHEN (new.id > COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_high_water'), -1) OR new.id <= COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_progress'), -1)) BEGIN INSERT INTO messages_fts(rowid, content, tool_name, tool_calls) VALUES ( new.id, a-, new.tool_name, new.tool_calls ); END; CREATE TRIGGER IF NOT EXISTS messages_fts_delete AFTER DELETE ON messages WHEN (old.id > COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_high_water'), -1) OR old.id <= COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_progress'), -1)) BEGIN INSERT INTO messages_fts(messages_fts, rowid, content, tool_name, tool_calls) VALUES ( 'delete', old.id, a, old.tool_name, old.tool_calls ); END; -- UPDATE OF skips the trigger entirely for non-content column writes -- (status/compacted/observed/etc.), which is stronger than the WHEN gate -- alone and avoids FTS I/O saturation on large state.db (#68858 / #73639). CREATE TRIGGER IF NOT EXISTS messages_fts_update AFTER UPDATE OF content, tool_name, tool_calls, role ON messages WHEN (old.content IS NOT new.content OR old.tool_name IS NOT new.tool_name OR old.tool_calls IS NOT new.tool_calls OR old.role IS NOT new.role) AND (old.id > COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_high_water'), -1) OR old.id <= COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_progress'), -1)) BEGIN INSERT INTO messages_fts(messages_fts, rowid, content, tool_name, tool_calls) VALUES ( 'delete', old.id, z, old.tool_name, old.tool_calls ); INSERT INTO messages_fts(rowid, content, tool_name, tool_calls) VALUES ( new.id, z<, new.tool_name, new.tool_calls ); END; c0V^8dQhR\R\/#rr,)rs"rrrs  3  rcV'dV R2MRpV R2RPR\44,R\VR,R4 R 2,#) aPredicate over a ``sessions`` row selecting sessions whose rows belong in the trigram index; ``alias`` qualifies every column for joins. Shared by the view, the sync triggers, and the deferred-backfill INSERT ... SELECTs so they can never disagree about the index boundary..rbzsource NOT IN (r>c3."TF pRV R2xK R#5iryrz)rWsrcs& rrZ*fts_trigram_session_sql.."sG*F3auAJ*Fr}z) AND rz$._delegate_fromz IS NULL)r\FTS_TRIGRAM_EXCLUDED_SOURCESrA)rqs& rfts_trigram_session_sqlrs\ 5' "A #_ ))G*FG G H $Q%79KLMX V Wrz CREATE VIEW IF NOT EXISTS messages_fts_trigram_src AS SELECT m.id, m.role, m.content, m.tool_name FROM messages AS m JOIN sessions AS s ON s.id = m.session_id WHERE m.role <> 'tool' AND a{; CREATE VIRTUAL TABLE IF NOT EXISTS messages_fts_trigram USING fts5( content, tool_name, content='messages_fts_trigram_src', content_rowid='id', tokenize='trigram' ); CREATE TRIGGER IF NOT EXISTS messages_fts_trigram_insert AFTER INSERT ON messages WHEN new.role <> 'tool' AND EXISTS (SELECT 1 FROM sessions WHERE id = new.session_id AND a[) AND (new.id > COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_high_water'), -1) OR new.id <= COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_progress'), -1)) BEGIN INSERT INTO messages_fts_trigram(rowid, content, tool_name) VALUES (new.id, new.content, new.tool_name); END; CREATE TRIGGER IF NOT EXISTS messages_fts_trigram_delete AFTER DELETE ON messages WHEN old.role <> 'tool' AND EXISTS (SELECT 1 FROM sessions WHERE id = old.session_id AND a) AND (old.id > COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_high_water'), -1) OR old.id <= COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_progress'), -1)) BEGIN INSERT INTO messages_fts_trigram(messages_fts_trigram, rowid, content, tool_name) VALUES ('delete', old.id, old.content, old.tool_name); END; CREATE TRIGGER IF NOT EXISTS messages_fts_trigram_update AFTER UPDATE OF content, tool_name, role ON messages WHEN (old.content IS NOT new.content OR old.tool_name IS NOT new.tool_name OR old.role IS NOT new.role) AND (old.id > COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_high_water'), -1) OR old.id <= COALESCE((SELECT CAST(value AS INTEGER) FROM state_meta WHERE key = 'fts_rebuild_progress'), -1)) BEGIN INSERT INTO messages_fts_trigram(messages_fts_trigram, rowid, content, tool_name) SELECT 'delete', old.id, old.content, old.tool_name WHERE old.role <> 'tool' AND EXISTS (SELECT 1 FROM sessions WHERE id = old.session_id AND z); INSERT INTO messages_fts_trigram(rowid, content, tool_name) SELECT new.id, new.content, new.tool_name WHERE new.role <> 'tool' AND EXISTS (SELECT 1 FROM sessions WHERE id = new.session_id AND z); END; fts_cjk_stale fts_stalefts_rebuild_deferralz CREATE VIRTUAL TABLE IF NOT EXISTS messages_fts USING fts5( content ); CREATE TRIGGER IF NOT EXISTS messages_fts_insert AFTER INSERT ON messages BEGIN INSERT INTO messages_fts(rowid, content) VALUES ( new.id, COALESCE(a, '') || ' ' || COALESCE(new.tool_name, '') || ' ' || COALESCE(new.tool_calls, '') ); END; CREATE TRIGGER IF NOT EXISTS messages_fts_delete AFTER DELETE ON messages BEGIN DELETE FROM messages_fts WHERE rowid = old.id; END; CREATE TRIGGER IF NOT EXISTS messages_fts_update AFTER UPDATE OF content, tool_name, tool_calls, role ON messages BEGIN DELETE FROM messages_fts WHERE rowid = old.id; INSERT INTO messages_fts(rowid, content) VALUES ( new.id, COALESCE(zg, '') || ' ' || COALESCE(new.tool_name, '') || ' ' || COALESCE(new.tool_calls, '') ); END; a$ CREATE VIRTUAL TABLE IF NOT EXISTS messages_fts_trigram USING fts5( content, tokenize='trigram' ); CREATE TRIGGER IF NOT EXISTS messages_fts_trigram_insert AFTER INSERT ON messages BEGIN INSERT INTO messages_fts_trigram(rowid, content) VALUES ( new.id, COALESCE(a, '') || ' ' || COALESCE(new.tool_name, '') || ' ' || COALESCE(new.tool_calls, '') ); END; CREATE TRIGGER IF NOT EXISTS messages_fts_trigram_delete AFTER DELETE ON messages BEGIN DELETE FROM messages_fts_trigram WHERE rowid = old.id; END; CREATE TRIGGER IF NOT EXISTS messages_fts_trigram_update AFTER UPDATE OF content, tool_name, tool_calls, role ON messages BEGIN DELETE FROM messages_fts_trigram WHERE rowid = old.id; INSERT INTO messages_fts_trigram(rowid, content) VALUES ( new.id, COALESCE( hermes_stateg^@g?win32g@c0V^8dQhR\R\/#)rexcr) BaseExceptionr)rs"rrrsss]stsrc\V\4;'g,\V\4;'dVP\9#)zcTrue when *exc* means another process holds the lock; on any other ``OSError`` fail closed at once.)rBlockingIOErrorrerrno_LOCK_CONTENTION_ERRNOS)rs&ris_advisory_lock_contentionr!s0 c? + r r 30H0q0qSYYZqMqrrc$V^8dQhR\/#)rpidr)rs"rrrs3rc6\RV R2R4;_uu_4p\VP4PR^4^,P 4^,4uuRRR4# +'giR#;i \ \ \3dR#i;i)uKernel start time of *pid* (field 22 of ``/proc//stat``; with the PID it identifies a process uniquely). None off Linux or on any failure — callers must treat None as unknowable and FAIL CLOSED.z/proc/z/statrb)N)openrreadrsplitrlr ValueError IndexError)r#fhs& r_proc_start_ticksr-st F3%u%t , ,rwwy''a0399;B?@- , , , Z ,s/A>AA* A>* A; 5A>;A>>BBcVP^4VPR4pV'd'\P!VP RR44MRp\T\4'dT#R# \ \ \3dR#i;i)z=Best-effort parse of the holder metadata JSON in a lock file.iutf-8r2N) seekr(jsonloadsdecoderr*UnicodeDecodeErrorrdict)handlererecords& r_read_lock_holder_recordr8sr Akk$?BCJJw :; --6747 Z!3 4s)A.(A..BBc(V^8dQhR\RR/#)rrrN)bytes)rs"rrrs$rc"\P!\\4;_uu_4VP ^4VP 4V'dVP V4VP4RRR4R# +'giR#;i)z8Best-effort truncate-and-write of *payload* at offset 0.N) contextlibsuppressrr*r0truncatewriteflush)r6rs&&r_rewrite_lock_filerAsQ   Wj 1 1 A  LL !  2 1 1 1s A A== B cV^8dQhRR/#rrz)rs"rrrs S S Src R\P!4R\4R\\P!44R\P!4/p\ V\ P!VRR7PR44R#) u_Record this process as holder (best effort) so timed-out contenders can tell an orphaned-fd holder from a live wedged one. Written under the flock so contenders that time out can tell an orphaned-fd holder (recorded process dead, flock inherited by a forked child — issue #100108) from a live wedged holder. ``pidns``: see ``hermes_state_pidns``. r#pidns start_ticks acquired_atT) sort_keysr/N) r&getpidrr-timerAr1dumpsencode)r6r7s& r_write_lock_holder_recordrLsZRYY['+;+=.ryy{;]DIIKYFvtzz&DAHHQRrcV^8dQhRR/#rrz)rs"rrrs$$$rc\VR4R#)zfErase holder metadata before a normal release: a surviving record means ABNORMAL exit (break allowed).rN)rA)r6s&r_clear_lock_holder_recordrOs vs#rc$V^8dQhR\/#rr)rs"rrr sII$Irc\VR,4pT^8:dR#\ TP R44'gR#\ P!T^4TP R4pTfR#\T4pTRJ;'dY28g# \\\3dR#i;i \dR#\dR#i;i)aTrue ONLY when the recorded holder is provably dead or PID-recycled. Anything indeterminate (no/malformed record, PID owned by another user, /proc unavailable, foreign PID namespace) is False: FAIL CLOSED and defer. Unstamped records keep probing: see ``hermes_state_pidns``.r#FrDTrEN) rKeyError TypeErrorr*rr$r&killProcessLookupErrorrr-)r7r#recorded_ticks current_tickss& r_lock_holder_provably_deadrX s&-  ax ,VZZ-@ A A Q ZZ .N%c*M  $ H H)HH! i ,  s/B B& B#"B#& C4C=CCc ^RIp\P!4V,pRpVPVP 4VP VP ,4\ P*!TP 44\ P,!T4rT P.T P.8H;'dT P0T P08Hp T 'd\3T4RT3#TP%4\'TR4p\P!4T8gEKRT3# \\3Edip\T4'g!\PRY@Y4RT3uRp?#\P!4T8d\P!T4Rp?EKT'd RT3uRp?#\T4p \T 4'g RT3uRp?#\PRY@T ;'g/PR44\ P"!T4TP%4\'TR4pM8 \d+p\PRY@T4RT3uRp?uRp?#Rp?ii;iRp\P!4\(,pRp?EK{Rp?ii;i \dRp ELi;i \dRT3u#i;i) uBounded POSIX flock acquire with orphaned-holder break. Returns ``(acquired, handle)``; *handle* may have been re-opened and the caller closes whichever comes back. *acquired*: True, False (a holder kept the lock past the deadline) or None (non-contention ``OSError``, already logged: treat as not acquired without the held-by-another-process warning). ``flock`` rides the open file DESCRIPTION, which ``fork()`` duplicates, so a holder that forks then dies leaves the lock held forever; when the acquirer is provably dead the file is unlinked and retaken on a fresh inode (the orphan's flock excludes nobody). Every acquire verifies its inode still names *lock_path*, so a racer on a dead inode retries. A holder that forks (multiprocessing worker, daemonized helper) and then dies leaves the flock held by a child that will never release it — the kernel's holder-death release never triggers, and every contender defers forever. Indeterminate liveness always defers (fail closed). See #100108. NFTuvCould not acquire %s %s (%s) — deferring rather than waiting out the %.0fs holder timeout on a non-contention error.u%s %s is held by an orphaned file descriptor (recorded holder pid %s is dead — a forked child inherited the lock fd); breaking the stale lock and retaking it on a fresh file.r#a+bu/Could not break stale %s %s (%s) — deferring.)fcntlrI monotonicflockfilenoLOCK_EXLOCK_NBrrr!rrsleepr8rXr$r&unlinkcloser'_LOCK_BREAK_REACQUIRE_SECONDSfstatrrrrL) lock_pathr6timeout_seconds poll_seconds descriptionr[deadline broke_lockrr7fd_stat path_stat same_files &&&&& r_acquire_db_flockro9s=~~/1HJ   KK )F G: !#&--/!:BGGI> x '&= U ) .s33 a*sMV|#~~(* <(f}$-f5F-f55f}$ NN)*56< I  !&=  !s;D)!A3J&,J:)J#;+J&J#,0J#J+J.J#4JJ#J3J 2H=<J= I2I-"I2#J'J#-I22%JJ#& J76J7:K  K c$V^8dQhR\/#rr,)rs"rrrys++S+rc~\V\4'dRV9dR#Rp\P!\\ 4;_uu_4VP R4e2R\P!4\VR,4, R R2pRRR4R VP R4 V 2# +'giL&;i) z5Human-readable holder identity for deferral warnings.r#z8unknown (no holder record; pre-fix writer or non-Hermes)rbrFNz , acquired z.0fzs agozpid ) rr5r<r=rSr*r$rIfloat)r7ages& r_describe_lock_holderrtys fd # #uF':I C   Y 3 3 ::m $ 0 eF=4I.J J3OuUC 4&**U#$SE ** 4 3s AB,, B< c^RIp\P!4V,pVP^4VP VP 4VP ^4R# \\3dsp\T4'g\PRY4Rp?R#\P!4T8dRp?R#\P!\4Rp?KRp?ii;i)zbWindows counterpart of ``_acquire_db_flock`` (no orphan break); same True / False / None contract.NTuSCould not acquire FTS rebuild lock %s (%s) — deferring on a non-contention error.F)msvcrtrIr\r0lockingr^LK_NBLCKrrr!rrra_FTS_REBUILD_LOCK_POLL_SECONDS)rfr6timeoutrvrjrs&&& r_acquire_msvcrt_lockr{s~~')H  7 KKN NN6==?FOOQ ?) 7.s33t(/~~8+ JJ5 6 6 7s# lru_evict idle_timeout tui_shutdown ws_disconnect)rbr)r)N)messages_fts_insertmessages_fts_deletemessages_fts_updatemessages_fts_trigram_insertmessages_fts_trigram_deletemessages_fts_trigram_update)cronsubagent)rb)messages_fts_cjk_insertmessages_fts_cjk_deletemessages_fts_cjk_update)__doc__r<rr1loggingr&sysrItypingrhermes_cli.timefmtrrhermes_state_keysrhermes_state_pidnsrragent.skill_commandsrr r r agent.context_compressorr r rrrTITLE_SOURCE_DERIVEDTITLE_SOURCE_LLMTITLE_SOURCE_USER_PREVIEW_HEAD_CHARS_PREVIEW_SCAFFOLD_WINDOWrmr(r4_PREVIEW_CONTENT_SQL_PREVIEW_SCAFFOLDED_SQLrFr8QUEUED_PROMPT_METADATA_KEYrArHrKr]rarl_PREVIEW_LONG_FORM_PREFIX_PREVIEW_SUMMARY_PREFIXES_PREVIEW_STANDALONE_SUMMARY_SQL_PREVIEW_MERGED_AFTER_SQL_PREVIEW_MERGED_SUMMARY_SQL_PREVIEW_MERGED_PRIOR_SQL"_PREVIEW_MERGED_PRIOR_LTRIMMED_SQLrV#_PREVIEW_MERGED_PRIOR_UNWRAPPED_SQL!_PREVIEW_FORCE_USER_REMAINDER_SQLrur\rtrorwrr_RESET_END_REASONS_RESET_END_REASONS_SQL frozenset_BOUNDARY_END_REASONS_RECOVERABLE_END_REASONS_RECOVERABLE_END_REASONS_SQLrrrrrr_LISTABLE_CHILD_SQLrrrrrrSCHEMA_VERSIONAUTO_VACUUM_MIN_FREELIST_RATIOFTS_STORAGE_VERSIONrr_FTS_NEW_INDEXED_CONTENT_SQL_FTS_OLD_INDEXED_CONTENT_SQLMAX_FTS5_QUERY_CHARSr_ENDED_ROW_SQL_COMPRESSION_LOCK_ROW_SQLrrrrr _SQL_IN_CHUNKrr  _FTS_TRIGGERS SCHEMA_SQLDEFERRED_INDEX_SQLFTS_SQLrrFTS_TRIGRAM_SESSION_SQLFTS_TRIGRAM_SQL_FTS_CJK_TRIGGERSFTS_CJK_STALE_KEY FTS_STALE_KEYFTS_REBUILD_DEFERRAL_KEYLEGACY_FTS_SQLLEGACY_FTS_TRIGRAM_SQL getLoggerrr}ryplatformrrdEAGAINEACCES EWOULDBLOCKEDEADLKr r!r-r8rArLrOrXrortr{contextmanagerrrrzrrrs 4  3/RFF44 ! #(N M /0167r;@/.>54l Z+00!DQG68MN"2;@Y"Z-.GH!3LAZ4[3\] 68Q R SST V0,\:S-T,UU[\^%:;T%U"):;]:^_ ()*$|J?WZ[?[>\JJ))J*/J0H.HJIOJPcNcJdJ'' J(+ J,D*D JE J % % J &3 J 4H2H J IN J OgijNjMk J l J )) J */ J 0C.C J DI JYb**<>PQRS]]0 q"R?Q"RR""45G l $yy(^E](^^##;<@BBHj9));_MNO  $U,B CD::K:R:RUX:R:Y9Z  " "S " ) *!-n I=i];[ J_ Y"& !&% 8>7>GJcbYl!. !.&"KT"KPT"KJn faLduMfuLYxM N DF78U6UV , &&' &&' 0 &&'  &&'YQ V 4 23 !8 <= >./F-F G./F-FG102I0IJ1 2I0IJy>@f$ 2//0//0-: //0//0/x   > *$)!!$llg% #!<<u7H7H%--Xs 8 S$ I2=!@+7& 7d77tr