i .dZddlZddlZddlZddlZddlZddlZddlmZddl m Z m Z ddl m Z ddl mZmZmZmZejeZde fdZd edefd Zd edefd Zd edefd Zd dlmZmZmZmZe GddZe GddZ e!ej"ej#ej$ej%hZ& ddde de'defdZ(e GddZ) d$dede'de'defdZ*Gdd Z+ d%ded!ed"ee)de fd#Z,dS)&a Session management for the gateway. Handles: - Session context tracking (where messages come from) - Session storage (conversations persisted to disk) - Reset policy evaluation (when to start fresh) - Dynamic system prompt injection (agent knows its context) N)Path)datetime timedelta) dataclass)DictListOptionalAnyreturnc(tjS)zReturn the current local time.)rnow7/home/agentuser/.hermes/hermes-agent/gateway/session.py_nowrs <>>rvaluectj|dddS)z0Deterministic 12-char hex hash of an identifier.utf-8N )hashlibsha256encode hexdigestrs r_hash_idr"s3 >%,,w// 0 0 : : < ``.user_)rrs r_hash_sender_idr's $8E?? $ $$rc|d}|dkr)|d|}|dt||dzdSt|S)uHash the numeric portion of a chat ID, preserving platform prefix. ``telegram:12345`` → ``telegram:`` ``12345`` → ```` :rN)findr)rcolonprefixs r _hash_chat_idr%,s^ JJsOOE qyyvv888E%!)**$566888 E??rr!)Platform GatewayConfigSessionResetPolicy HomeChannelcTeZdZUdZeed<eed<dZeeed<dZ eed<dZ eeed<dZ eeed <dZ eeed <dZ eeed <dZeeed <dZeeed <edefdZdeeeffdZedeeefddfdZdS) SessionSourcez Describes where a message originated from. This information is used to: 1. Route responses back to the right place 2. Inject context into the system prompt 3. Track origin for cron job delivery platformchat_idN chat_namedm chat_typeuser_id user_name thread_id chat_topic user_id_alt chat_id_altr c |jtjkrdSg}|jdkr'|d|jp|jpdn|jdkr%|d|jp|jnQ|jdkr%|d|jp|jn!||jp|j|j r|d |j d |S) z)Human-readable description of the source.z CLI terminalr/DM with usergroupgroup: channel channel: zthread: , ) r,r&LOCALr0appendr2r1r.r-r3join)selfpartss r descriptionzSessionSource.descriptionVs =HN * *!> >T ! ! LLNDN$Ldl$LfNN O O O O ^w & & LLC4>#AT\CC D D D D ^y ( ( LLET^%Ct|EE F F F F LL74< 8 8 8 > 6 LL4DN44 5 5 5yyrc |jj|j|j|j|j|j|j|jd}|j r |j |d<|j r |j |d<|S)N)r,r-r.r0r1r2r3r4r5r6) r,rr-r.r0r1r2r3r4r5r6)rBds rto_dictzSessionSource.to_dictksp +||/    0#/Am    0#/Am rdatac|t|dt|d|d|dd|d|d|d|d |d |d  S) Nr,r-r.r0r/r1r2r3r4r5r6) r,r-r.r0r1r2r3r4r5r6)r&strget)clsrHs r from_dictzSessionSource.from_dict|ssd:.//Y((hh{++hh{D11HHY''hh{++hh{++xx --////    r)__name__ __module__ __qualname____doc__r&__annotations__rJr.r r0r1r2r3r4r5r6propertyrDrr rG classmethodrMrrrr+r+AsQ LLL#Ix}###Is!GXc]!!!#Ix}####Ix}### $J $$$!%K#%%%!%K#%%%  S   X (c3h"  T#s(^      [    rr+ceZdZUdZeed<eeed<eee fed<dZ e ed<dZ e ed<dZ eeed <dZeeed <d ee effd ZdS) SessionContexta Full context for a session, used for dynamic system prompt injection. The agent receives this information to understand: - Where messages are coming from - What platforms are available - Where it can deliver scheduled task outputs sourceconnected_platforms home_channels session_key session_idN created_at updated_atr c8|jd|jDd|jD|j|j|jr|jnd|j r|j nddS)Ncg|] }|j Srr).0ps r z*SessionContext.to_dict..s#N#N#NAG#N#N#NrcHi|]\}}|j| Sr)rrG)rarbhcs r z*SessionContext.to_dict..s5*/!Rr)rWrXrYr[r\r]r^) rWrGrXrYitemsr[r\r] isoformatr^rBs rrGzSessionContext.to_dictsk))++#N#NT5M#N#N#N373E3K3K3M3M +/9=R$/33555d9=R$/33555d   r)rNrOrPrQr+rRrr&rr)r[rJr\r]r rr^r rGrrrrVrVs h'''+-....KJ%)J")))%)J")))  c3h       rrVF) redact_piicontextrjc r |o|jjtv}ddg}|jjj}|jjt jkr|d|dn|j}|ru|jp|j rt|j nd}|j pt|j }|jdkrd|}n,|jdkrd |}n|jd krd |}n |}n|j}|d|d |d |jjr"|d|jj|jjdko |jj}|r|dnp|jjr#|d|jjnA|jj r5|jj } |rt| } |d| |jjt jkr+|d|dnD|jjt jkr*|d|ddg} |jD]/} | t jkr| | jd0|dd| |jr|d|d|jD]K\} } |rt| j n| j }|d| jd| jd|d L|d|dddlm}|jjt jkr|dnL|jj p&|rt|jj n |jj }|d |d |d!|d"|jD]+\} } |d#| jd$| jd ,|d|d%d&|S)'a} Build the dynamic system prompt section that tells the agent about its context. This is injected into the system prompt so the agent knows: - Where messages are coming from - What platforms are connected - Where it can deliver scheduled task outputs When *redact_pii* is True **and** the source platform is in ``_PII_SAFE_PLATFORMS``, phone numbers are stripped and user/chat IDs are replaced with deterministic hashes before being sent to the LLM. Platforms like Discord are excluded because mentions need real IDs. Routing still uses the original values (they stay in SessionSource). z## Current Session ContextrZz **Source:** z! (the machine running this agent)r9r/r8r:r;r<r=z ()z**Channel Topic:** uq**Session type:** Multi-user thread — messages are prefixed with [sender name]. Multiple users may participate.z **User:** z **User ID:** u?**Platform notes:** You are running inside Slack. You do NOT have access to Slack-specific APIs — you cannot search channel history, pin/unpin messages, manage channels, or list users. Do not promise to perform these actions. If the user asks, explain that you can only read messages sent directly to you and respond.uC**Platform notes:** You are running inside Discord. You do NOT have access to Discord-specific APIs — you cannot search channel history, pin messages, manage roles, or list server members. Do not promise to perform these actions. If the user asks, explain that you can only read messages sent directly to you and respond.zlocal (files on this machine)u: Connected ✓z**Connected Platforms:** r>z)**Home Channels (default destinations):**z - z: z (ID: z)**Delivery options for scheduled tasks:**r)display_hermes_homeu.- `"origin"` → Local output (saved to files)u$- `"origin"` → Back to this chat (u*- `"local"` → Save to local files only (z/cron/output/)z- `"u"` → Home channel (zb*For explicit targeting, use `"platform:chat_id"` format if the user provides a specific chat ID.* )rWr,_PII_SAFE_PLATFORMSrtitler&r?r@r2r1rr.r%r-r0rDr4r3SLACKDISCORDrXrArYrgnamehermes_constantsrn)rkrjlines platform_namesrc_uname_cnamedesc_is_shared_threaduidplatforms_listrbr,homehc_idrn _origin_labels rbuild_session_context_promptrsS(N 7;N NJ$  E N+17799M~(.00 TMTTTUUUUn  #]03 G ,,, ]@mCK&@&@F}$$*&**'))))))+++6++?D +DFFGGG  D( % N $ ,  B      !, <'.":<<====  ,n$  '!#&&C *S**+++~(.00 R  P      H$4 4 4 R  P   66N  (??     ! !QW"="="= > > > LLHTYY~-F-FHHIIIM R @AAA%399;; M MNHd3=OM$,///4NPQRRRRRRRR Ss   ]++ L))  -d<.@AAA  -d<.@AAA  6  .111  X hh{D111 .!444 ((?A666 #hh':A>>>  $xx( @ WVXVV6>VVFDTVVV???v~?? ?   BAAAv/?AA A*X****'96>Nx)9:I ~)((( +)*** +L  8 ..^,,--- 88I  rc eZdZdZ d'dedefdZd(dZd(dZd(d Z d e de fd Z d e defd Zd e d e dee fdZdefdZ d)d e dede fdZ d'de deddfdZde defdZd*dedefdZde dee fdZde de dee fdZd'deedee fdZde defd Zd)de d!ee efd"eddfd#Zde d$eee efddfd%Z de deee effd&Z!dS)+ SessionStorez Manages session storage and retrieval. Uses SQLite (via SessionDB) for session metadata and message transcripts. Falls back to legacy JSONL files if SQLite is unavailable. N sessions_dirconfigc ||_||_i|_d|_t j|_||_d|_ ddl m }||_dS#t$r}td|Yd}~dSd}~wwxYw)NFr) SessionDBzL[gateway] Warning: SQLite session store unavailable, falling back to JSONL: ) rr_entries_loaded threadingLock_lock_has_active_processes_fn_db hermes_stater Exceptionprint)rBrrhas_active_processes_fnrrs r__init__zSessionStore.__init__s( 13  ^%% (?% f . . . . . . y{{DHHH f f f dabdd e e e e e e e e e fsA B%A==Br cn|j5|ddddS#1swxYwYdS)z4Load sessions index from disk if not already loaded.N)r_ensure_loaded_lockedris r_ensure_loadedzSessionStore._ensure_loaded s Z ) )  & & ( ( ( ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) )s *..c|jrdS|jdd|jdz }|r t |dd5}t j|}|D]?\}} t ||j |<)#ttf$rY ID mapping).rNTrrc>i|]\}}||Sr)rG)rarentrys rrfz&SessionStore._save..-s&MMMeU]]__MMMrz.tmpz .sessions_)dirsuffixr$wrr)indentz!Could not remove temp file %s: %s)tempfilerrrrgmkstemprJosfdopenrdumpflushfsyncfilenoreplace BaseExceptionunlinkOSErrorrr)rBrrrHfdtmp_pathrrs r_savezSessionStore._save's t<<<)O; MMt}7J7J7L7LMMM''D%&&vl(  H 2sW555 % $!,,,, $$$ % % % % % % % % % % % % % % % Jx / / / / /    O (#### O O O @(ANNNNNNNN O   s[<DAC1% D1C55D8C59D E(D32E(3 E#=EE(E##E(rWc vt|t|jddt|jddS)z%Generate a session key from a source.rTrF)rr)rgetattrr)rBrWs r_generate_session_keyz"SessionStore._generate_session_key>sB $+DK9RTX$Y$Y%,T[:TV[%\%\    rrc|jr||jrdS|j|j|j}|jdkrdSt}|jdvr%|jt|j z}||krdS|jdvrN| |j ddd }|j |j kr|td z}|j|krdSdS) u(Check if a session has expired based on its reset policy. Works from the entry alone — no SessionSource needed. Used by the background expiry watcher to proactively flush memories. Sessions with active background processes are never considered expired. Fr, session_typenoneidlebothminutesTdailyrrhourminutesecond microsecondr!days)rr[rget_reset_policyr,r0moderr^r idle_minutesrat_hourr)rBrpolicyr idle_deadline today_resets r_is_session_expiredz SessionStore._is_session_expiredFs  ( ,,U->?? u--^.   ;& 5ff ;* * *!,yAT/U/U/UUM]""t ;+ + +++^&Kx&.((ya0000 +--turc|jr,||}||rdS|j|j|j}|jdkrdSt}|jdvr%|jt|j z}||krdS|jdvrN| |j ddd }|j |j kr|td z}|j|krd SdS) a Check if a session should be reset based on policy. Returns the reset reason ("idle" or "daily") if a reset is needed, or None if the session is still valid. Sessions with active background processes are never reset. Nrrrrrrrrr!rr)rrrrr,r0rrr^rrrrr)rBrrWr[rr rrs r _should_resetzSessionStore._should_resetls,  ( 44V< 1``. r!N)r session_countrrrlenrris rhas_any_sessionszSessionStore.has_any_sessionss 8  x--//!33    Z * *  & & ( ( (t}%%) * * * * * * * * * * * * * * * * * *s& 33,A66A:=A:F force_newc||}t}d}d}|j5|||jvrq|so|j|}|jrd}n|||}|s)||_||cdddSd} |} |j dk} |j }nd} d} d} | ddtj jdd} t|| ||||j|j|j| | | }||j|<|| |jj|jd }dddn #1swxYwY|jrQ|rO |j|d n2#t.$r%} t0d | Yd} ~ nd} ~ wwxYw|jr?|r= |jjdi|n)#t.$r} t7d | Yd} ~ nd} ~ wwxYw|S)z Get an existing session or create a new one. Evaluates reset policy to determine if the existing session is stale. Creates a session record in SQLite when a new session starts. NrTrF %Y%m%d_%H%M%S_) r[r\r]r^rrr,r0rrrr\rWr1 session_resetSession DB operation failed: %sz4[gateway] Warning: Failed to create SQLite session: r)rrrrrrrr^rrr\strftimeuuiduuid4hexrr.r,r0rr1r end_sessionrrrcreate_sessionr)rBrWr r[r db_end_session_iddb_create_kwargsr reset_reasonrrrr\rs rget_or_create_sessionz"SessionStore.get_or_create_sessions0088 ff! Z3 3   & & ( ( (dm++I+ k2?E#.LL#'#5#5eV#D#DL# 9'*E$JJLLL 3 3 3 3 3 3 3 3 $&*N(4%).);a)?&(-(8%%!&$(!%*" LL99RRDJLL   _3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 l 8 C) C C$$%6HHHH C C C >BBBBBBBB C 8 R( R R'';;*:;;;; R R RPQPPQQQQQQQQ R sIA+E$'B1E$$E(+E(9F GF??GG$$ H .HH r[rc|j5|||jvr=|j|}t|_|||_|ddddS#1swxYwYdS)z9Update lightweight session metadata after an interaction.N)rrrrr^rr)rBr[rrs rupdate_sessionzSessionStore.update_sessions Z    & & ( ( (dm++ k2#'66 %1/AE,                   sAA00A47A4c|j5|||jvr4d|j|_| ddddS dddn #1swxYwYdS)zMark a session as suspended so it auto-resets on next access. Used by ``/stop`` to prevent stuck sessions from being resumed after a gateway restart (#7536). Returns True if the session existed and was marked. TNF)rrrrr)rBr[s rsuspend_sessionzSessionStore.suspend_sessionsZ    & & ( ( (dm++7; k*4          +                usAA''A+.A+xmax_age_secondscRddlm}t||z }d}|j5||jD] }|js|j|kr d|_|dz }!|r| dddn #1swxYwY|S)aMark recently-active sessions as suspended. Called on gateway startup to prevent sessions that were likely in-flight when the gateway last exited from being blindly resumed (#7536). Only suspends sessions updated within *max_age_seconds* to avoid resetting long-idle sessions that are harmless to resume. Returns the number of sessions that were suspended. r)r)secondsTr!N) rrrrrrvaluesrr^r)rBr rcutoffcountrs rsuspend_recently_activez$SessionStore.suspend_recently_active$s '&&&&&))O<<<< Z    & & ( ( (--//  5+;v+E+E&*EOQJE                  sA%BB #B c d}d}d}|j5|||jvr ddddS|j|}|j}t }|ddt jjdd}t|||||j |j |j |j }||j|<|||j r |j jnd|j r |j jndd}dddn #1swxYwY|jrQ|rO |j|dn2#t&$r%}t(d |Yd}~nd}~wwxYw|jrH|rF |jjd i|n2#t&$r%}t(d |Yd}~nd}~wwxYw|S) z1Force reset a session, creating a new session ID.Nr r r r[r\r]r^rrr,r0rrrrr)rrrr\rrrrrrrrr,r0rrr1rrrrrr) rBr[rr new_entry old_entryr r\rs r reset_sessionzSessionStore.reset_session;s  Z    & & ( ( ($-//           k2I ) 4 &&CLL99RRDJLL 8 C) C C$$%6HHHH C C C >BBBBBBBB C 8 C( C C'';;*:;;;; C C C >BBBBBBBB CsGDCDDD*E E5E00E5F GF??Gtarget_session_idc d}d}|j5|||jvr ddddS|j|}|j|kr|cdddS|j}t }t |||||j|j|j|j }||j|<| dddn #1swxYwY|j rQ|rO |j |dn2#t$r%}td|Yd}~nd}~wwxYw|j rN |j |n2#t$r%}td|Yd}~nd}~wwxYw|S)aSwitch a session key to point at an existing session ID. Used by ``/resume`` to restore a previously-named session. Ends the current session in SQLite (like reset), but instead of generating a fresh session ID, re-uses ``target_session_id`` so the old transcript is loaded on the next message. If the target session was previously ended, re-open it so gateway resume semantics match the CLI. Nr(session_switchz!Session DB end_session failed: %sz$Session DB reopen_session failed: %s)rrrr\rrrrr,r0rrrrrrreopen_session)rBr[r,rr)r*r rs rswitch_sessionzSessionStore.switch_sessionnsc! Z    & & ( ( ($-//           k2I#'888         !* 4 &&C$', '&3"+#-   I*3DM+ & JJLLL7               : 8 E) E E$$%68HIIII E E E @!DDDDDDDD E 8 H H''(9:::: H H H CQGGGGGGGG HsMCCACC C C99 D(D##D(3E E=E88E=active_minutescH|j5|t|j}dddn #1swxYwY|-t t |z fd|D}|dd|S)z3List all sessions, optionally filtered by activity.Nrc*g|]}|jk |Srr^)rarr$s rrcz.SessionStore.list_sessions..s%DDDQQ\V-C-Cq-C-C-Crc|jSNr4)rs rz,SessionStore.list_sessions..s1<rT)rreverse)rrlistrr#rrsort)rBr1entriesr$s @r list_sessionszSessionStore.list_sessionss Z 3 3  & & ( ( (4=//1122G 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3  %VVi????FDDDD'DDDG // >>>s;AAAr\c|j|dz S)z3Get the path to a session's legacy transcript file.z.jsonl)r)rBr\s rget_transcript_pathz SessionStore.get_transcript_paths j#8#8#888rmessageskip_dbc X|jr|s |j||dd|d|d|d|dn2#t$r%}td|Yd }~nd }~wwxYw||}t|d d 5}|tj |d dzd d d d S#1swxYwYd S)azAppend a message to a session's transcript (SQLite + legacy JSONL). Args: skip_db: When True, only write to JSONL and skip the SQLite write. Used when the agent already persisted messages to SQLite via its own _flush_messages_to_session_db(), preventing the duplicate-write bug (#860). rolercontent tool_name tool_calls tool_call_id)r\rBrCrDrErFrNarrF ensure_asciiro) rappend_messagerKrrrr>rwriterdumps)rBr\r?r@rtranscript_pathrs rappend_to_transcriptz!SessionStore.append_to_transcripts 8 CG C C'') VY77#KK 22%kk+66&{{<88!(^!BBBBBBBB C22:>> /3 9 9 9 DQ GGDJwU;;;dB C C C D D D D D D D D D D D D D D D D D Ds*BB B;B66B;%-DD#&D#messagescL|jr) |j||D]}|dd}|j|||d|d|d|d|dkr|dnd |dkr|d nd |dkr|d nd n2#t$r%}t d |Yd }~nd }~wwxYw||}t|dd5}|D].}| tj |ddz/ d d d d S#1swxYwYd S)zReplace the entire transcript for a session with new messages. Used by /retry, /undo, and /compress to persist modified conversation history. Rewrites both SQLite and legacy JSONL storage. rBrrCrDrErF assistant reasoningNreasoning_detailscodex_reasoning_items) r\rBrCrDrErFrRrSrTz&Failed to rewrite transcript in DB: %srrrFrHro) rclear_messagesrKrJrrrr>rrKrrL)rBr\rOmsgrBrrMrs rrewrite_transcriptzSessionStore.rewrite_transcripts@ 8 J J'' 333#  C776955DH++#-! # 2 2"%''+"6"6#&77<#8#8%(WW^%<%<:>+:M:M#''+"6"6"6SWJNR]J]J]#''2E*F*F*FcgRVZeReRecgg6M.N.N.Nko,      J J J EqIIIIIIII J22:>> /3 9 9 9 DQ D D 3U;;;dBCCCC D D D D D D D D D D D D D D D D D D Ds*C5D D/ D**D/2FF Fc g}|jrN |j|}n2#t$r%}td|Yd}~nd}~wwxYw||}g}|rt|dd5}|D]z}|}|rb | tj |A#tj $r't d||ddYvwxYw{ dddn #1swxYwYt|t|kr;|r7td|t|t||S|S) z.Load all messages from a session's transcript.z#Could not load messages from DB: %sNrrrz*Skipping corrupt line in transcript %s: %srufSession %s: JSONL has %d messages vs SQLite %d — using JSONL (legacy session not yet fully migrated))rget_messages_as_conversationrrrr>rrstripr@rloadsJSONDecodeErrorwarningr)rBr\ db_messagesrrMjsonl_messagesrlines rload_transcriptzSessionStore.load_transcripts 8 G G"hCCJOO  G G G BAFFFFFFFF G 22:>>  ! ! # # osW===   D::<rr rNrWrarrrrrsB*.ffTf=ffff")))) .. M c    $$$$$$$L*<**8TW=****X*$****2 UUUU  UUUUt#'    3 4    sS.11,1G1111f5#5#5(S_J`5555n  HSM T,EW    9c9d9999DDsDT#s(^DVZDgkDDDD8DSDDc3hrrst  ((((((((!!!!!!,,,,,,,,,,,,  8 $ $hBCBCBBBB %3%3%%%%       G G G G G G G  G V          B i  O   ! /NNN NN NNNNb h h h h h h h  h Z%)%*88 8!8#8 8888vooooooooj-1  L) r