+ Wj*.a0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIHt^RIHtHtHtHtHtHt^RIHtHt^RIHtHt]P@!R4t!Rt"]PF!4t$/t%R ]&R &.t'R ]&R &RQt(R Rlt)RRlt*RRlt+RRlt,RRlt-RRlt.RRlt/Rt0^t1^t2^t3^t4Rt5^t6^ t7^t8Rs9Rt:Rt;RR ltR$R%lt?R&R'lt@R(tAR)tB^tCRRtDRStE^dtF!R*R+]G4tHR,R-ltIR.R/ltJR0R1ltKR2R3ltLR4R5ltMR6R7ltNR8R9ltORTR:ltPR;R<ltQR=^dR>R?/R@RAlltRR=^dR>R?/RBRClltS]PRURDREll4tURFR?/RGRHlltVRIRJltWRKRLltXRMRNltYRORPltZR#)Vastate.db file-level health helpers, split out of ``hermes_state.py``. Header probes (application_id / zeroed-file detection), deleted-WAL-sidecar holder scans, quarantine of zeroed databases, ``collect_state_db_stats`` and holder-process classification. Helpers that hermes_state itself imports and calls (``_connect_tracked_db`` & co) are looked up lazily from ``hermes_state`` at call time, so tests that monkeypatch ``hermes_state.`` keep intercepting. ) annotationsN)Path)AnyCallableDictListOptionalTuple)canonical_sqlite_pathread_only_db_uri)FTS_REBUILD_DEFERRAL_KEYstat_db_file_identity hermes_statecRp\PPR8wd \V4h^RIpVP R,pVP 3VnRVnV# \\\3dp\T4ThRp?ii;i)aBind a non-finalizing reference before opening a writable SQLite handle. A Python container is cleared during interpreter shutdown. An unmatched CPython C reference keeps the exact connection alive through that cleanup, so SQLite cannot checkpoint its lost WAL generation from a finalizer. This deliberately retains the connection and its descriptors until process exit; it does not make already-unlinked WAL data durable after the last fd closes. zWritable SessionDB on a Python without sqlite3 setconfig (< 3.12) requires CPython with ctypes support to retain a quarantined SQLite connection through interpreter shutdown.cpythonN Py_IncRef) sysimplementationname RuntimeErrorctypes pythonapi py_objectargtypesrestype ImportErrorAttributeErrorOSError)messagerretainexcs GC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_state_dbfile.py_prepare_connection_retirementr"$s a  )+7##-!!+.!++- M  1-7#,-s0A B6 BBzdict[str, tuple[int, int, int]]_HEADER_PROBE_FDS list[int]_RETIRED_HEADER_PROBE_FDSc(V^8dQhRRRRRRRR/#)db_pathroffsetintlengthreturnOptional[bytes])formats"r! __annotate__r0Ms(""T"3"""c >^RIHpV'dt\P!\4;_uu_4VP R4;_uu_4pVP V4VPV4uuRRR4uuRRR4#\V4p\P!V4p\;_uu_4\PT4pTe_T^,T^,3TPTP38wd2\ P#\P%T4^,4RpTf_\P !T\P&4p\P(!T4p YPT P3;p\T&\P!\4;_uu_4\P*!T^,Y!4uuRRR4uuRRR4# +'giM;iRRR4R# +'giR#;i \dR#i;i \d RRR4R#i;i \d"\ P#T4RRR4R#i;i +'giM;iRRR4R# +'giR#;i)zLock-safe raw read of a possibly-live SQLite database: POSIX preads from a cached, never-closed fd (rebound when the path names a new inode); Windows reads plainly, since advisory-lock cancellation is a POSIX-only hazard. _IS_WINDOWSrbN)rr4 contextlibsuppressropenseekreadstrosstat_HEADER_PROBE_LOCKr#getst_devst_inor%appendpopO_RDONLYfstatpread) r(r)r+r4handlekeystcachedfdfsts &&& r!_pread_db_rangerMMs)   ) )7<<+=+= KK ;;v&,>+= ) ) g,C WWW   "&&s+  6!9fQi"8RYY -B-B3-G-J KF > WWWbkk2 hhrl02::szz.J JF&s+   ) )88F1Iv6* )#  ,>+= )* )      )004   * ) )# & '  & sG> "G! - G>H2A+AJ .I- J ! G1 ,G>> H  H! H!$ H;/J :H;;J > I*J )I**J - I= 8J  J c$V^8dQhRRRRRR/#)r'r(rr+r*r,r-r.)r/s"r!r0r0rs!//d/C/O/r1c\V^V4#)z[Lock-safe raw header read of a possibly-live SQLite database (see :func:`_pread_db_range`).rM)r(r+s&&r!_pread_db_headerrQrs 7Av ..r1c V^8dQhRRRR/#r'r(rr, Optional[int]r.)r/s"r!r0r0wsTTT-Tr1c^RIHpV^,p\W4pVe\V4V8gVR,R8wdR#\ \ P !RW1V4^,4#)zRapplication_id from the SQLite header, via the lock-safe :func:`_pread_db_header`._STATE_DB_APPLICATION_ID_OFFSETNNNSQLite format 3>I)hermes_state_errorsrWrQlenr*structunpack)r(rWendheaders& r!_read_sqlite_application_idrbwsYC )A -C g +F ~Vs*fSk=S.S v}}T6##NOPQR SSr1c V^8dQhRRRR/#)r'r(rr,dict[str, tuple]r.)r/s"r!r0r0sTT4T4DTr1c \P!V4pRUu/uFq"\\W,44bK ppVP 4UUu/uF wr$VfK W$bK upp#uupiuuppi)z= 1`` on a truly orphaned inode. So compare identity, not link count: only an exact ``(st_dev, st_ino)`` match between the fd and the CURRENT watched path proves they are the same live file. A mismatch, or a watched path that cannot be stat'd at all, means the fd holds a generation the watched path no longer names — the guard keeps failing closed.NFT) r<r=rerrnoENOENTESRCHrr@rA)rrfd_statr s&& r!_fd_is_truly_unlinkedrsd'''" ''G VV  99u{{3 3 s: B/BBc #"\P!R4FpVP4'gKRV R2p\P!V4pTFYp\P !\4;_uu_4T RT 2p\ T4\P!T4T3xRRR4K[ K R# \dKi;i +'giK;i5i)zVYield ``(pid, readlink target, fd path)`` for every readable ``/proc//fd`` entry.z/procz/proc/z/fd/N)r<listdirisdigitrr6r7r*readlink)pid_strfd_dirfdsrKrs r!_iter_proc_fd_targetsrs::g&  '#& **V$CB$$W--#HAbT*'lBKK$8'AA.-'    .--s@8CB6'C8,C $C6 CCCC C  Ci@c\pVeV#^RIpVPRRR7pVPVPnVP VP VPVP 3VPnVPVPnVPVPVPVPVP3VPnVPVPnVPVPVPVPVP3VPnVsV#)zlibproc's fd-enumeration entry points, loaded once per process. macOS exports these from libSystem, so this process's own handle resolves them; a failure here propagates to the caller's ``except Exception`` and keeps the guard fail-open.NT) use_errno) _DARWIN_LIBPROCrCDLLc_int proc_listpidsrc_uint32c_void_pr proc_pidinfoc_uint64proc_pidfdinfo)librs r!_darwin_libprocrs C   ++dd+ +C & C"(//6??FOOU[UdUd!eC%||C!'v||V__foo_e_k_k lC!'C#)<<v||V__^d^j^j"kCO Jr1cV^8dQhRR/#)r'r,r$r.)r/s"r!r0r0 s  Y r1c&^RIpRpVPV4pVP\^W24pV^8:d.#WB8dE\P !RV^, R2VP 4Uu.uF qU^8gK VNK up#V^,pKuupi)zZEvery pid ``proc_listpids`` will name (the kernel silently omits ones we may not inspect).N<ii)rcreate_string_bufferr_DARWIN_ALL_PIDSr^ unpack_fromraw)rrsizebufferusedpids& r!_darwin_all_pidsr s D ,,T2  !11fC 19I ;#)#5#5$!)A6F #S_#SC]^W^CC#S_ _  `s -B:Bc #"^RIp\4p\V4EF]pRpVPV4pVP V\ ^WC4pV^8:dMWS8dM V^,pKD\ ^V\, ^,\4Fp\P!RVPV4^,pVP\4pVPW'\V\4^8:dKdVPp \P!RV \4^,\P!RV \4^,3p V \ RP#R^4^,P%RR4p W'W3xK EK` R#5i) a`Yield ``(pid, fd, last pathname, (st_dev, st_ino))`` for every vnode fd libproc reports. The pathname and the identity both stay readable after the path is unlinked, which is what makes an orphaned WAL generation visible at all on macOS. Processes that cannot be inspected (gone, or not ours) and descriptors that are not vnodes are skipped silently.NizqAB001GHF!!#+Ev"8:=>?**C**46KLQO**46KLQOQH/0177CAFMMgW`aF6+ +`%sE>FcV^8dQhRR/#r'r,list[tuple[int, str]]r.)r/s"r!r0r0:s&&-B&r1c6aaa\PP\PP\P!V444pVR,VR,3Uu/uFq"P 4VbK upo.o.oRVVV3Rllp\ P!VRR7pVP4VP\4VP4'd\PR\V4.#S'd S^,hS#uupi)aThe macOS leg of :func:`iter_deleted_sqlite_sidecar_holders`: libproc enumeration matched against the watched sidecar paths, judged by identity. The watched side is resolved with ``os.path.realpath`` because libproc reports the kernel's path for the vnode, while ``os.path.abspath`` does not resolve symlinks -- a textual compare of the two silently misses every sidecar under a symlinked prefix (on macOS ``/var`` itself).rgrhcV^8dQhRR/#r'r,Noner.)r/s"r!r02_iter_darwin_sidecar_holders..__annotate__Hs4r1c<\4FPwrr#SPVP44pVfK+\W44'gK>SP W34KR R# \ dpSP T4Rp?R#Rp?ii;iN)rr?casefoldrrB BaseException) r_fdrrr{r errorsholdersr|s r!_scan+_iter_darwin_sidecar_holders.._scanHsp .E.G*&!++foo&78&+Fx+Y+YNNC=1/H  MM#   s"0A#A# A## B .BB T)rdaemonzJdeleted-WAL holder scan timed out after %.1fs for %s; continuing fail-open)r<rsrvrtrir threadingThreadstartru_DARWIN_FD_SCAN_TIMEOUT_SECONDSis_aliveloggerwarning)r(rlrsrworkerrrr|s& @@@r!_iter_darwin_sidecar_holdersr:s 77  BGGOOBIIg,>? @D37-1OP1O}}$1OPG%'G"$F  U4 8F LLN KK/0  X +    Qi N9Qs(DcV^8dQhRR/#rr.)r/s"r!r0r0cs4Ir1c\PR8Xd.#.p\PR8Xd\V4pV#\PPR4'dh\ V4p\ 4FNwr4p\ V4pRV9gKWb9gK"\WRV,4'gK<VPW434KP V# \d"p\PRY4Rp?T#Rp?ii;i)a Return processes holding an unlinked ``state.db-wal`` / ``-shm`` sidecar for *db_path*. Linux enumerates ``/proc//fd`` (using the `` (deleted)`` suffix as a cheap pre-filter); macOS enumerates descriptors through libproc, because a retired generation there keeps its last pathname and no suffix marks it. Either way the verdict is the same identity comparison: the fd must name a watched sidecar path while its ``(st_dev, st_ino)`` no longer matches what that path holds. Windows returns ``[]`` -- it cannot unlink a held sidecar, so no retired generation can exist; any other platform returns ``[]`` as before. Includes this process: on the open/write refuse path the in-process writer holding the orphan inode must not mint a replacement WAL (``_foreign_state_db_holders`` skips this PID).win32darwinlinuxz (deleted)z)deleted-WAL holder scan failed for %s: %sN) rplatformr startswithr~rr rrB Exceptionrdebug)r(rr|rrr canonicalr s& r!#iter_deleted_sqlite_sidecar_holdersrcs ||w %'G P <<8 #27;G N\\ $ $W - -3G> XXc$i( 299%/4y /      s#B&B8& B54B58 CCc(V^8dQhRRRRRRRR/#) r'r:z%Callable[[int, int], Optional[bytes]]destrrr*r,dict[str, Any]r.)r/s"r!r0r0s1NN;N4NRUNZhNr1c  \P!4pVPVPR,4p^p\ VR4;_uu_4pWR8d]V!V\ \ W%, 44pV'gM6VPV4VPV4V\V4, pKbVP4\P!VP44RRR4YR8wd2TPRR7\!RTP RT RT R 24h\P"!YA4R TPR TR TP%4/# +'giL};i \dTPRR7hi;i) aStream ``size`` bytes via ``read(offset, length)`` into ``dest`` (temp file, fsync, rename). A short read raises ``RetiredGenerationCaptureError``: a truncated copy with a valid-looking manifest would let the caller settle the handle while the unlinked inode still dies at exit.z.partwbNT) missing_okzshort read copying :  of uZ bytes — the retired generation is NOT fully captured; the handle stays open for a retryfilebytessha256)hashlibr  with_namerr8min_CAPTURE_CHUNK_BYTESwriteupdater]flushr<rfilenorunlinkrr hexdigest)r:rrdigestpartr)outchunks&&$ r! _copy_rangersE ^^ F >>$))g- .D F  $  -VS)=t}%MN %  e$#e*$ IIK HHSZZ\ "~ t $+!$))Bvhd4&AG G  JJt DIIw&:J:J:L MM)   t $ s*E.BE&E. E+ &E.+E..F c(V^8dQhRRRRRRRR/#)r'rKr*rrrr,rr.)r/s"r!r0r0s.]]]D]3]>]r1c&a\V3RlWR7#)zIpread ``fd`` (a descriptor SQLite owns; never closed here) into ``dest``.c2<\P!SW4#r)r<rF)r)r+rKs&&r!"_copy_descriptor..sbhhr6.Jr1rr)rKrrsf&$r!_copy_descriptorr#s JD \\r1c(V^8dQhRRRRRRRR/#)r'r(rrrr*r,rr.)r/s"r!r0r0s.iidi$iiir1c&a\V3RlWR7#)zZCopy the live main file through the lock-safe cached descriptor (see ``_pread_db_range``).c<\SW4#rrP)r)r+r(s&&r!r"_copy_main_image..s ogv.Vr1r!r")r(rrsf&$r!_copy_main_imager(s VX\ hhr1c V^8dQhRRRR/#)r'rar r,rr.)r/s"r!r0r0sbbb>br1c \V4\8gVR,R8wdRR/#\P!RVR,4^,p^RIHpR^R^R ^H:rYNrVchange_counter page_count user_versionapplication_idversion_valid_forr[T page_sizei)r]_SQLITE_HEADER_BYTESr^r_r\rWrk)ra raw_page_sizerWfieldsroffparseds& r!_parse_sqlite_headerr8s 6{))VC[.retired-wal--/`` and holds the retired ``-wal`` (and ``-shm`` when still ours), the main image (or its header past the size cap) and ``manifest.json`` with identities, sizes, digests and the sidecar generation found at the path at capture time. Nothing is merged: whether those frames belong on top of the main file is the operator's decision. Raises :class:`RetiredGenerationCaptureError` when the exact generation cannot be located or written; no descriptor is ever closed, moved or truncated. rgz(no recorded WAL generation identity for z"; refusing to guess it by pathnameNz3this process no longer holds the retired WAL inode r zcannot stat the retired WAL of r %Y%m%d-%H%M%S-z.partialTFparentsexist_okversiondatabaser;r captured_atz%Y-%m-%dT%H:%M:%SZpythonsqlitewalrr!shmpath_generation_at_capturenotezFrames in the captured WAL were committed by the retired generation. Whether they belong on top of the main file now at the path is an operator decision; inspect the copied image with `hermes sessions recover --inspect-only` first.rhz%cannot read the main image header of rramodecopiedz.header header_only)rKr r main)atomic_json_write) sort_keys) ignore_errorsz.could not write the retired WAL generation of z under r.)1rrr?rrr<rEst_sizerrRETIRED_GENERATION_DIR_SUFFIXtimestrftimegmtimegetpidrexistsmkdir#RETIRED_GENERATION_MANIFEST_VERSIONr;rrBrsqlite3sqlite_versionlistr#rprkr6r7rMr3r=rjr8'RETIRED_GENERATION_MAIN_IMAGE_MAX_BYTESrr( write_bytesrr]utilsrORETIRED_GENERATION_MANIFESTrparentshutilrmtree)r(r:r; wal_identitywal_fdwal_sizer stemfinalnstagingrmromanifest shm_identityshm_fdra main_sizerN header_filerOs&$$ r!capture_retired_wal_generationrqs7mG)--f5;;/2WX_W`0ab bGGG$,, *D1G1P1V1VTV,W,_,_[_ & 8=QRX=Y [ ? ? KK kX k)9'W\\CY`i)j k!\\I%=>K  # #F +  $ KK]1A1AVK U+'$??UYZG 7"ELL! L i+.MgYVXY\X],^_ehhi0+i.--. ) gT2 h gT2+%is_zeroed_state_db..sOe`d[\UVPV`dsFT)r6r7rhermes_cli.backuprrrall)rsr{r|rheads&$$ r!is_zeroed_state_dbr|s   Y ' ';$T%P ( ' ' ' 4e 4D t  e eDOO4F$G G e eCCOe`dOeCCeCeCOe`dOeLees > A c(V^8dQhRRRRRRRR/#rr.)r/s"r!r0r0s0HHDH#HTXHeiHr1c^\WV4pVRJ;'dVPR4'*#)zA pre-existing state.db whose first page is not SQLite: 0-byte, NUL, or clobbered page 0 (#102198). Zeroed files are the subset :func:`is_zeroed_state_db` names.Nr)rr)rsr{r|rs&$$ r!!has_invalid_sqlite_header_preopenrs0 4e 4D t  G GDOO4F$G GGr1c V^8dQhRRRR/#)r'rsrtimeoutfloatr.)r/s"r!r0r0s%%%u%r1c#taa a a "^RIpVPVPR,4pVPP RRR7VP R4o RpVP 4R8Xd^RIo V V 3RloVV 3R lpVV 3R lpM^RIo V V 3R lpV V 3R lp\P!4V,pV'g V!4RpKVxV'dV!4S P4R# \d8\P!4T8dKN\P!R 4K{i;i \\3dLji;i S P4i;i T'dX!4M \\3dMi;iS P4i S P4i;i;i5i)z8Acquire the cross-process lock for path.quarantine.lock.Nz.quarantine.lockTr?za+bFWindowscl<SP^4SPSP4V^4R#r)r9lockingr)rKrGmsvcrts&r!_lock,quarantine_cross_process_lock.._locks$ Av}}a8r1c(<S!SP4#r)LK_NBLCKrrsr!r/quarantine_cross_process_lock..sfoo 6r1c(<S!SP4#r)LK_UNLCKrsr!rrseFOO4r1cz<SPSP4SPSP,4#r)flockrLOCK_EXLOCK_NBfcntlrGsr!rrs# FMMOU]]U]]=Z [r1cX<SPSP4SP4#r)rrLOCK_UNrsr!rrsekk&--/5==Ir1g{Gz?)rrrrbrYr8systemrrrT monotonicrsleeprr) rsrr lock_pathacquired _try_lock_unlockdeadlinerrrGrs && @@@@r!quarantine_cross_process_lockrsQtyy+==>I 4$7 ^^E "FH ??  )  97I4G [IIG>>#g- "     LLN ">>#x/ 5! "(    LLN   (    LLNFLLNsAF8A$E& C5 E&D:#F85%D7E&D73E&6D77E&:E E EEE##F8&F5(E87F 8F  F  F  F F5 F22F55F8already_lockedc$V^8dQhRRRRRR/#)r'rsrrrr,zOptional[Path]r.)r/s"r!r0r0s". . d. t. P^. r1caV3RlpV'dV!4#\S4;_uu_4pV'g"\PRS4RRR4R#V!4uuRRR4# +'giR#;i)a Move a non-SQLite state.db (zeroed or clobbered page 0) aside with its -wal/-shm sidecars, preserving bytes; return the quarantine path. A cross-process lock stops two concurrent startups racing: the second re-checks under the lock and finds the file gone (or fresh).c <SP4'g\PRS4R#\S4'g\PRS4R#\ S4'dRMRp\ P !R4pSP RV RV R\P!4 2pSPV R 24p^pVP4'd#V^, pSPV RV R 24pK8SPV4R Fp\\!S4T,4pTP4'gK6\"P$!\4;_uu_4TP\\!T4T,44RRR4K T# \dRpEL-i;i \d#p\PR ST4Rp?R#Rp?ii;i +'giK;i) z@quarantine_invalid_state_db: %s already moved by another processNzpquarantine_invalid_state_db: %s is no longer invalid (another process quarantined it and a fresh DB was created)zeroednotadbr=unknown.r>z.bakz#Failed to quarantine invalid %s: %srf)rXrinforrrTrUrrr<rWrrenamerrrr;r6r7) kindtsrhrrjr rmsiderss r!_do_quarantine3quarantine_invalid_state_db.._do_quarantines{{}} KKZ\` a066 KKMNR T-d33x /B))AdV1RD"))+7~~dm, kkmm FA>>TF!A3d"34D  KK 'FD F*+D{{}}((11KKSY%7 8921'  % B   LL>c J  211s6/F">F6)+G&" F32F36 G#GG#& G7 uMquarantine lock for %s not acquired within 5s — refusing to quarantine without the cross-process lock. The invalid file is left in place. If sessions fail to load, run `hermes sessions recover --source --inspect-only`, or restore a snapshot with `/snapshot list` / `/snapshot restore ` (terminal `hermes` chat only).N)rrr)rsrrrsf$ r!quarantine_invalid_state_dbrsa> &t , , LLf     - , - , , ,s A%A%% A6 c V^8dQhRRRR/#)r'r(rr,rr.)r/s"r!r0r0sOODO^Or1c  aaa^RIHp\PR)4p\P !\ 4;_uu_4\\V4R,4pVP4'dVP4PM^VR&RRR4V!\V4\V4RRR7oR*RT3RllloR*RT3RllloRT3RllpS!R4TR&S!R4TR&TR,e&TR,eTR,TR,,TR&S!R 4TR&S!R!4pTe \T4MRTR&S!R"4TR&S!R#4TR &\P !\4;_uu_4SP!R$\"4P%4Uu0uF qw^,kK pp\"U u/uFqY9bK up TR &RRR4T!R 4TR &\P !\4;_uu_4^R%IHp \+T !SP-444TR &RRR4\P !\4;_uu_4SP!R&4P/4RJTR &RRR4T!R4;TR&p T!R4;TR&p T fR'MT ;'g^T 8TR&\P !\4;_uu_4SP!R(\034P/4pT'd\2P4!T^,4MRp \7T \4'dYR&RRR4\P !\4;_uu_4SP94RRR4T# +'giEL;i \d#p\PRY4TuRp?#Rp?ii;iuupiuup i +'giEL ;i +'giEL;i +'giEL;i +'giL;i +'giT#;i \P !\4;_uu_4SP94RRR4i +'gii;i;i)+uBest-effort, strictly read-only stats snapshot of a state.db file: ``mode=ro`` with a short timeout so it can run against a *live* database without taking a write lock. Every field is collected independently (a failed pragma/SELECT yields ``None`` for it); never raises. Deliberately does NOT instantiate :class:`SessionDB` — its constructor runs DDL. ``wal_size_bytes`` is 0 when the sidecar is absent; ``fts_storage_version`` None means the legacy inline layout; ``fts_rebuild_deferral`` is the durable blocked-repair diagnostic.)ryr.r2freelist_countlogical_size_byteswal_size_bytes journal_modemessagessessions fts_tablesfts_storage_versionfts_storage_upgrade_neededfts_teardown_pendingfts_rebuild_pendingfts_rebuild_high_waterfts_rebuild_progressfts_rebuild_deferralrgNTg@)rturirz4collect_state_db_stats: cannot open %s read-only: %sc V^8dQhRRRR/#)r'sqlr;r,rr.)r/s"r!r0,collect_state_db_stats..__annotate__sSr1c<SPW4P4pV'd V^,#R# \dR#i;ir)executefetchoner)rparamsrowconns&& r!_scalar'collect_state_db_stats.._scalarsB ,,s+446C 3q6 *d *  s&555 AAc V^8dQhRRRR/#)r'rr;r,rTr.)r/s"r!r0rs99#9]9r1c6<S!W4pVe \V4#R#r)r*)rrvaluers&& r!_int$collect_state_db_stats.._ints!$".s5z8D8r1c V^8dQhRRRR/#)r'rHr;r,rTr.)r/s"r!r0r ss}r1c><S!RV34# \dR#i;i)z*SELECT value FROM state_meta WHERE key = ?N)r)rHrs&r! _meta_int)collect_state_db_stats.._meta_int s* DsfM M  s zPRAGMA page_countzPRAGMA page_sizezPRAGMA freelist_countzPRAGMA journal_modezSELECT COUNT(*) FROM messageszSELECT COUNT(*) FROM sessionszISELECT name FROM sqlite_master WHERE type = 'table' AND name IN (?, ?, ?))fts_layout_driftzfSELECT 1 FROM sqlite_master WHERE type = 'table' AND name LIKE 'fts\_v22\_trash\_%' ESCAPE '\' LIMIT 1Fz2SELECT value FROM state_meta WHERE key = ? LIMIT 1)r.r2rrrrrrrrrrrrrr)r.)rrydictfromkeysr6r7rrr;rXr=rRr rrrr_FTS_TABLE_NAMESfetchallhermes_state_ftsrrcursorrr jsonloads isinstancer)r(rystatswal_pathr rjmrrtr high_waterprogressr7rrrs& @@@r!collect_state_db_statsrs1 MM+RSE   W % %G v-.=E__=N=N(--/"9"9TU &##3G#"? * ++->Btn !@Aj !@Aj  + +'+||[ (""*(*(-.(-VV(-E.=M"M.#N , + +, + +, + +, +, + L  + + JJL, + + +sANNB%P9>'O%O 6 O O O5P9)O*1*P9%O>0P91+P9A'PP9-P% N  O 'O>O O  O O' ! P9* O; 5 P9> P P9 P" P9% P6 9#R Q6 - R 6 R R c V^8dQhRRRR/#rSr.)r/s"r!r0r0;sd}r1c 6\PP\V44p\P R8Xdc\P !V4pVPVP3p\\4UUUUu0uFwrErgWs8XgKVkK upppp4#\P PR4'gR#\\4UUU u0uFwrHqV8XgKVkK up pp4#uuppppiuup ppi \dR#i;i)zBest-effort count of distinct PIDs holding ``db_path`` open (``/proc/*/fd`` on Linux, libproc on macOS); ``None`` on any error or other host, never raises. Uninspectable processes (other users' without root) are skipped, so this is a lower bound.rrN)r<rsrvr;rrr=r@rAr]rrrr) r(rrIrrr_pathrolink_fd_paths & r!count_db_holdersr;s !!#g,/ <<8 #B 299-H:Q:Si:S 6%W\Wh:Sij j||&&w//3H3J]3J/CxV\nCC3J]^^j^ sHA?D  C:C: D !$D D  D +D 1D :D DDc 0V^8dQhRRRRRRRRRR R R/#) r'ppidr* age_secondsrmin_age_secondsephemeral_backendrconnection_statusesz list[str]r,r.)r/s"r!r0r0Ns::::%:Z_::>:U^:cg:r1cRVR9;'dW8;'dT;'dRV9#)z9Pure safety predicate for the narrow Desktop holder reap. ESTABLISHED)rr.)rrrrrs$$$$$r!"_is_inactive_orphan_desktop_holderr Ns? FN 9 9{= 9 9BS 9 9%88:r1c$V^8dQhRRRRRR/#)r'r(rrrr,r$r.)r/s"r!r0r0Us(]]D];P]U^]r1ca\PP\PP\P!V444pW"R,VR,0o\ \ PV3RlV444#)zAReturn unique PIDs proven to hold this DB or one of its sidecars.rgrhc3b<"TF$wrV^8gK\V4S9gK VxK& R#5ir)r )rrrsr|s& r!r1_concrete_state_db_holder_pids..Ys/\$ a4I$4OSZ4ZWs / / /)r<rsnormcasertrir]rr)r(r canonical_dbr|s&& @r!_concrete_state_db_holder_pidsrUsk77##BGGOOBIIg4F$GHLF2L64IJG  \$\\ ]]r1) messages_ftsmessages_fts_trigrammessages_fts_cjki ir)r)[__conditional_annotations__r __future__rr6rr rloggingr<rcr[r^rrrTpathlibrtypingrrrrrr hermes_state_holdersr r hermes_state_commonr r rj getLoggerrr"Lockr>r#__annotations__r%rrMrQrbrpr~rrrrrrrrrrrrrrrrrrrrSrarZr^rr3rrrrrr#r(r8rqryrrrcontextmanagerrrrrr r)rs@r!r"s#     ==H   > *F^^%5727')9)O"J/ TT.BW2 B4 #&, ,D&R<A*!0-&'# +<'&YLY 4N@] i bVr d " f fE fHH[`H %%P. e. bOd&:]r1