+ Wj<Rt^RIt^RIt^RIHtHtHtRtRtRt Rt RRlt Rt R t R tR tR tR tRtRtRtRtRtRtRtR#)zKPrivate local creation receipts in the canonical runtime transaction owner.N)RuntimeStoreError_epoch_jsonzgateway.local_policy.v1:zgateway.api.binding.v1.zgateway.api.conversation.v1.c aaaaaaaaa \SRR4o\SRR4oSf(SR,PR4e \R4h/oSeSP4\ S4o\ P !S4oSR,SR,uo o\S ,oVVVVVVVVV 3 R lpSPV4# \dSeSP4hi;i) aReserve the row, route and immutable policy together, before publication. A staged receipt's ``on_create`` (owner memory, never stored) is published by the transaction that creates the row and withdrawn if that transaction fails: an exact retry, a refused or a losing attempt adds none. on_createNclient_requestpolicyclient_env_jsoninvalid_params session_idroutecv< a \VS4VPRS34P4pVe\P!V^,4o \ ;QJd VV 3RlR4F 'dK RM RM!VV 3RlR44pT;'d#\ S R,SR,R,S4pT'g \R 4hS #^R I H pVPR VS,34P4'd \R 4hR S9d3VPRS34P4'd \R4hVPRS34P4'd \R4hR S9d^RI HpV!S VS4SR,SR,rv^RIHpVP!VR,4P#4p ^RIHp V !VR,4p VPRSVR,V SR,SVR,R,VR,\)V4S P+4\-VR,4V 3 4VPRS\-V4V 34VPRSS34SeSP/4S# \\\3dp\R4ThRp?ii;i)(SELECT value FROM state_meta WHERE key=?Nc3J<"TFpSV,SV,8HxK R#5iN).0kreceiptsaveds& FC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_state_local.py 6commit_local_session..write..#s)XSELECT 1 FROM gateway_routing WHERE scope='' AND session_key=?admission_conflict)bind_legacy_targetentry)datetime created_at)created_surfacesourcezINSERT INTO sessions(id,source,created_source,user_id,session_key,chat_id,chat_type, model,cwd,profile_name,origin_json,started_at) VALUES(?,?,?,?,?,?,'dm',?,?,?,?,?) ON CONFLICT(id) DO NOTHINGoriginchat_idmodelzUINSERT INTO gateway_routing(scope,session_key,entry_json,updated_at) VALUES('',?,?,?)z-INSERT INTO state_meta(key,value) VALUES(?,?)) profile_idr request_idr r )rexecutefetchonejsonloadsallsame_create_retry ValueError TypeErrorKeyErrorr hermes_state_mutation_retirementrhermes_state_local_migrationr r" fromisoformat timestampgateway.session_policyr$_row_cwd_own_profile_namerpublish)connoldsameexcrr rr!r"startedr$createdrdbencodedepochkeyrrrequestr sids& @rwrite#commit_local_session..writesytUllEvNWWY ? H 3q6*sXRUAU@W X a a c c$K0 0 w . @3&IRRTT#$9: : <<X[`Zb c l l n n#$89 9 ' ) G r4 1)77+;%((|)<=GGI ;!&"23 *&"GW^-De 8_Y '(6:JBL`L`Lb 5? #W . / lU5\73 5 DsGnU     Q 84 H'(=>CG Hs)'JJ5!J#JJ8' J33J8) getattrgetrreadrr-r. POLICY_PREFIX_execute_write BaseExceptionwithdraw) rBrDrrHrCrErrFr rGs fdd @@@@@@rcommit_local_sessionrQ sd3Ig/6G 8  !2 3 ?#$45 5GnGjj!G&(8JC # C11d  ''       s 3C!C%c\P!V4pVPRR4VfVPRR4RV9d4VPRR4VfRMTFpVPVR4K V#)aA frozen create request as the client sent it: an owner-resolved ``-m`` route (``model_requested``) compares by the name the client typed, not by the model and the *derived* fields (a receipt from before ``route_derived``: the endpoint) its ``${VAR}`` refs expanded to at the time. ``desktop_local`` (``gateway.session_policy.LOCAL_DESKTOP_CHAT``), which an earlier owner stamped into the request, was never sent. desktop_localN route_derivedmodel_requestedr()base_url)r-r.pop)rderivedrFrEs&& rrrWsp jj&G KK& OT*G# GT"$+O=@C KKT "A Ncr\P!V4PR4p\W4\W48XdR#\P!V4pVPR4VPR48Xd%VP RR4VP RR4\P!V4V8H#)a"Whether a create retry carries the frozen request it resumes: one check for a retry that finds the session committed and one staged before it was. The saved receipt's provenance names the owner's fields; one from before a same-name alias got ``model_requested`` compares exactly, as it did.rTTrUr(N)r-r.rKrrW) saved_json retry_jsonrXretrys&& rsame_create_requestr^hsjj$((9Gj*nZ.QQ JJz "E yy"#uyy'99 #T* /4( ::j !U **rYcT^RIHp\VR,V4;'d V!W4#)aXThe one exact-retry identity of a create: ``same_create_request`` on what the client sent, and its ``client_env`` (``client_request``: the retry's own, never stored) judged by the rules frozen with *saved_policy*. Used by a retry that finds the session committed, at commit, and by one overlapping the attempt that holds the session's key slot.) retry_matchesr)agent.session_client_envr`r^) saved_policyr\rr`s&&& rr0r0vs' 7 |N;Z H x x][gMxxrYc<\P!VPR4;'gR4p\ V\ 4'dVPR4MRp\ V\4'g VR,#T;'gR# \\3d/pLii;i)aThe sessions-row ``cwd``: the create request's ``row_cwd`` (``""`` = none) when it sent one, else the execution cwd. Row metadata only (workspace grouping, ``-c``, cwd restore); the frozen policy's ``cwd`` / ``TERMINAL_CWD`` stay where the session's tools run.rz{}row_cwdNcwd)r-r.rKr2r1 isinstancedictstr)rrFvalues& rr9r9s**VZZ7??4@'1$&?&?GKK "TE *5# 6 66%=KU]]dK z "s'BBBBc\P!V4p\ T\ 4'dTP R4MRp\ T\ 4'dTP R4#R# \\3dR#i;i)zCurrent physical target a creation receipt routes to; None for a malformed receipt, which then stays (its own reads already refuse it as ``storage_unavailable``) and cannot abort the delete of an unrelated session.Nr!r )r-r.r2r1rfrgrK)rawrir!s& r_policy_targetrlsk 3#-UD"9"9EIIg tE&0&=&=599\ "G4G z "sA**A?>A?c\V4pV'gR#VPR\R,34UUu.uFwr4\V4V9gKVNK pppYPPR\R,34UUu.uFwr4WB9gK VNK upp, pYRUu.uFp\ V,NK up, pTP RVUu.uFq33NK up4R#uuppiuuppiuupiuupi)aDeletion fence half for owner receipts. A local creation policy carries the launch request (``request_json``: a cron fire's job and raw prompt), so it goes exactly when its route does: when the receipt's current physical target is deleted (a pruned reset ancestor whose logical session lives on in a child keeps it). An API binding and the declared conversation key that resolves to it go with their id, so that key starts a fresh session.Nz1SELECT key,value FROM state_meta WHERE key GLOB ?*z"DELETE FROM state_meta WHERE key=?)setr+rMrlAPI_DECLARED_PREFIXAPI_BINDING_PREFIX executemany)r< session_idstargetsrErigonerGs&& rretire_local_receiptsrvs +G "&,,/b0=0C/E#G 1#GJCe$/ C#GD 1 <<0c1Ds1J0L$N c$NZSQVQaS$N ccD 9# # % % 99D9d;SdsFd;ST  1 c 9;Ss#C C : C& C&C, C1 cVPRV34P4pV'd V^,MRpV'dW18XdV#VPR\V,34P4pV'd-\P!V^,4P R4MRp\T\4'd Y9dT#T# \ \\3dTu#i;i)zThe creation id whose receipt lineage holds physical segment *session_id* (a reset or compression child, which carries the owner as ``chat_id``); *session_id* itself otherwise.z'SELECT chat_id FROM sessions WHERE id=?Nrlineage) r+r,rMr-r.rKr2r1AttributeErrorrflist)r<r rowownerrrxs&& rlocal_lineage_ownerr}s ,,@:- P Y Y [CCFtE E' LLCmV[F[E] ^ g g iE9>$**U1X&**95Dw--*2G5WZW z> 2s2C:.CC#"C#c V\\PV.\W4O44#)aa[session_id] for any row outside a local reset/compression lineage, else the whole conversation (*session_id* first). Any segment deletes as all of it: the owner's policy goes with its current target, and an earlier segment's gap breaks the lineage, so a lone segment delete strands the rest (and the owner's queued work) readable but never continuable.)rzrgfromkeyslocal_conversation_ids)r<r s&&rowned_lineage_idsrs&  zU,B4,TUV WWrYc\W4pVPR\V,34P4pV'd-\P !V^,4P R4MRp\V\4'gV.#\\PV.RV4O44# \\\3dRpL[i;i)a Every row of the local conversation *session_id* belongs to: its creation id first, then each segment of the receipt lineage. A canonical reset never forks the logical session (one policy, FIFO and generation), so listing, delete and retirement treat these ids as one.rrxNc3V"TFp\V\4'gKVxK! R#5irrfrhrrGs& rr)local_conversation_ids..s'Ww*SRUBVws) ))r}r+rMr,r-r.rKr2r1ryrfrzrgr)r<r r|rrxs&& rrrs  1E LLCmV[F[E] ^ g g iE9>$**U1X&**95D gt $ $|  uX'Ww'WXY ZZ z> 2s6B00C  C c \4/r!VPR\R,34P4pVEFGwp\P !V4pVP R4VP R4rv\V\4'd;\;QJdRV4F 'dK RM RM !RV44'gKRPR \V4,4p\VPR V R 2V4P44p \V4U U u.uF3wrV ^8Xg&V P Wz^, ,4R 8XgK1V NK5 p p p VPV R R4Wg3W,R,&EKJ W3#uup p i)a``(superseded, heads)`` for listing a local conversation as one row, as ``acp_adapter.catalog`` does: a canonical reset keeps the creation id as the owner and moves the transcript to a child, so every segment is one conversation. ``superseded`` holds the listable roots of earlier reset segments (filtered in SQL, before paging); ``heads`` maps the latest reset segment to ``(owner, lineage)`` for the row that represents the conversation. A delete of that row removes the whole lineage (``hermes_state_mutation_guards.delete_targets``).zqSELECT value FROM state_meta WHERE key GLOB ? AND json_valid(value) AND json_array_length(value, '$.lineage') > 1rnr rxc3B"TFp\V\4xK R#5irrrs& rr&local_lineage_index..s0YQX#C1E1EQXsFT,?z0SELECT id,end_reason FROM sessions WHERE id IN () session_resetN)ror+rMfetchallr-r.rKrfrhr/joinlenrg enumerateupdate) r< supersededheadsrowsrkrr|rxmarksendedirGstartss & rlocal_lineage_indexrsSr <<HJWZ]J]I_ aaiaiak **S/ \2GKK 4Jw%%%SS0YQX0YSSS0YQX0Y-Y-Y s7|+,T\\$TUZT[[\"]_fgpprs$-g$6q$6&!!q&EIIgZ[V[nD]apDp##$6q&"+&",Rj  rs %.F F cVP4;_uu_4p\V4wrERRR4X'd@VPR4VP\P!\ V444X# +'giLY;i)zDrop earlier reset segments from a listing or count query (one conversation, one row), in SQL before paging; returns ``heads`` for :func:`annotate_local_lineages`.Nz,s.id NOT IN (SELECT value FROM json_each(?))) _read_ctxrappendr-dumpssorted)rB where_clausesparamsr<rrs&&& rexclude_superseded_segmentsrs\ 4/5  KL djj !345 L s A88 B c VFpTPVPR4;'g VR,4pVfK:\\P.V^,OVPR4;'gRO44VR&K V#)aName every segment on the conversation's representative row (``_lineage_ids``, which the Desktop matches deletes, tombstones and stored ids against). ``_lineage_root_id`` stays the compression root: pins and archive flags live on the listed segment's own chain._lineage_root_idid _lineage_idsr)rKrzrgr)sessionsrr{founds&& rannotate_local_lineagesrsx #''"45BBTC  "&t}}5buQx5b377>CZC`C`^`5b'c"dC  OrYcVP4;_uu_4pVPR\V,34P4pRRR4Xf \ R4h\ P !V^,4p\V\4'g \R4hV# +'giL`;i \\3dp\ R4ThRp?ii;i)rNrzinvalid receipt) rr+rMr,rr-r.rfrgr1r2)rBr r<r{rir?s&& r local_receiptrs 4llE XbHbGdennp  { 566@ 3q6"%&&./ /   z "@ 56C?@s#-B?B1 B. 1C CCcBaaaaaVVVVV3RlpSPV4#)a Stamp ``ended_at`` on *target_id* only while the logical *session_id*'s FIFO is idle. The idle check and the stamp share one owner write txn, so an admission committed first keeps the row open; one committed after is reopened by the drain (``reopen_local_session``).c<\VS4VPRS34P4'd^#VPRSS34P4'd^#SPVR\P!4SS3SS4#)zgSELECT 1 FROM session_admissions WHERE target_session_id=? AND status IN ('queued','started','unknown')zjSELECT 1 FROM worker_executions WHERE session_id IN (?,?) AND status IN ('registered','running','unknown')zLUPDATE sessions SET ended_at=?, end_reason=? WHERE id=? AND ended_at IS NULL)rr+r, _end_and_bumptime)r<rBrDreasonr target_ids&rrH%end_idle_local_session..writestU <<B#  ''/xz 2 <<E#Y/ 119 <&t!%fi @)VU UrY)rN)rBrDr rrrHsfdddd rend_idle_local_sessionr s" U U   U ##rYr)__doc__r-rhermes_state_runtimerrrrMrqrprQrr^r0r9rlrvr}rrrrrrrrrYrrszQ AA* .4HV" +y L HU& XX [. @$rY