Austin Pickett ee2ed10ef5 fix(sessions): validate imported values before persistence ...

Session import used shallow type casts at the persistence boundary:
float() accepted inf/NaN (a JSON 1e309), int() accepted integers
SQLite cannot bind (outside signed 64-bit range), model_config was
only shape-checked after its intentional decode, and a literal string
carrying the internal \\x00json: content marker was decoded as
structured content on read. Bad values reached sqlite3 binding or
persisted as inf, breaking session APIs with HTTP 500.

- reject non-finite floats in session float/timestamp columns, message
  timestamps, and scalar message content, with the field path in the error
- re-check every intentionally-decoded JSON-backed field (model_config,
  reasoning_details, codex_* items) for non-finite values
- bound int columns, token_count, and int scalar content to SQLite's
  signed 64-bit range; coerce-with-default at the bind site as a backstop
- escape literal \\x00json:-prefixed strings via the JSON wrapper instead
  of storing them raw; decoding already fails closed on malformed marker rows
- all rejection stays inside the existing atomic validate-then-write
  400 contract; valid exports round-trip unchanged

Fixes #63954

2026-10-06 12:40:04 -04:00

..

__init__.py

test(hermes_state): one harness for the lost-WAL-generation tests

2026-09-11 11:14:56 +05:30

_wal_generation_harness.py

test(hermes_state): one harness for the lost-WAL-generation tests

2026-09-11 11:14:56 +05:30

test_append_message_after_close.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_append_messages_batch.py

fix(state): prune shadowed compaction checkpoints when a newer carrier row is persisted

2026-09-19 10:08:14 -07:00

test_auto_archived_lineage_reactivation.py

fix(sessions): un-hide an auto-archived chat when it is resumed or compressed

2026-09-28 21:03:09 -04:00

test_auto_vacuum_holder_gate.py

tests: replace every bare host skipif with platforms()

2026-09-21 19:18:15 -04:00

test_auto_vacuum_in_process_holder_gate.py

fix(state): VACUUM admission counts live holders only; argv proves the home, not the install

2026-09-21 02:56:31 -07:00

test_automatic_ended_stamp.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_aux_usage_accounting.py

…

test_background_review_session_isolation.py

fix(state): preserve replies after consecutive review harness prompts

2026-09-15 05:41:36 -07:00

test_bounded_recent_sessions.py

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

test_canonical_title_guard.py

fix(session-titles): resolve the canonical Bot Chat by exact title, never a "#N" sibling

2026-09-20 10:32:40 -07:00

test_clean_close_residual_poison.py

test(state): clean-close residual-poison test requires WAL

2026-09-20 10:09:12 -07:00

test_compacted_message_reactions.py

fix(state): deliver unseen reactions from visible compacted history

2026-09-19 00:59:32 +05:30

test_composite_carrier_rewind.py

…

test_compression_lease_refresh_before_publish.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_compression_lineage_guard.py

fix(state): stale-agent recovery ignores reset forks of a compression parent

2026-09-18 10:39:13 -07:00

test_compression_watermark_commit.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_conftest_wal_gate.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_conversation_root.py

…

test_corrupt_row_robustness.py

fix(state): filter the started_at fallback of last_active to the epoch window

2026-09-25 10:46:54 -05:00

test_cross_vm_fs_wal_refusal.py

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

test_dedupe_migration_contention.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_delegate_cascade.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_delegate_child_routing_inheritance.py

test(state): a compression continuation of a branch child still inherits its route

2026-09-20 00:14:10 -07:00

test_delete_compression_chain.py

fix(state): chain-aware dashboard session deletes; stats exclude compression children

2026-10-06 12:03:11 -04:00

test_delete_mode_read_busy_wait.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

test_delete_session_write_guards.py

fix(state): delete_session_if_empty returns False for a guarded row

2026-10-03 16:32:15 +05:30

test_deleted_wal_checkpoint_guard.py

test: restore platforms() host gating that merges reverted to the legacy trio

2026-09-18 19:06:52 -04:00

test_deleted_wal_generation_guard.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_disk_full_error.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_display_dedupe_pruned_tool_payload.py

fix(state): keep the content key for tool result rows in display dedupe

2026-10-03 18:30:38 +05:30

test_display_projection_parity.py

fix(state): verified compression lineage for ancestor reads + fork marker

2026-09-28 20:17:37 -05:00

test_display_split_heal.py

fix(state): re-fold split display generations at compaction commit

2026-09-27 03:03:46 -05:00

test_empty_sweep_archived_transcript.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_fts_cjk_bigram.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_fts_fresh_bootstrap_admission.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_fts_holder_instance_scope.py

merge origin/main (16 commits) into ethie/pm-clean

2026-09-21 06:09:56 -04:00

test_fts_index_fail_open.py

fix(state): stop a waiting FTS detach once the file is quarantined

2026-09-23 16:59:09 -07:00

test_fts_orphan_shadow_repair.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_fts_projection_integrity.py

refactor(state): drop the retired tool high-water marker on realign; reuse the shared projection SQL

2026-09-18 10:38:41 -07:00

test_fts_rebuild_admission.py

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

test_fts_runtime_rebuild.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

test_fts_tool_write_bounds.py

fix: cover the deferred FTS backfill path in the tool-row bound test

2026-09-18 10:38:41 -07:00

test_fts_trigram_cron_exclusion.py

test(sessions): drop the SCHEMA_VERSION import the trigram test no longer reads

2026-09-29 04:15:21 +05:30

test_fts_trigram_subagent_exclusion.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_fts_update_of_narrowing.py

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

test_get_anchored_view.py

…

test_get_messages_around.py

…

test_get_messages_include_compacted.py

test(state): cover snapshot isolation in both journal modes

2026-09-15 12:33:45 -05:00

test_guest_durability_barriers.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_hermes_state_compression_busy_retry.py

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

test_hermes_state_compression_locks.py

fix(state): qualify lock/lease holder pid probes by PID namespace

2026-10-03 17:44:58 +05:30

test_hermes_state_ids.py

refactor(state): drop the SESSION_ID_PATTERN re-export from lost-and-found

2026-10-04 12:05:37 +05:30

test_hermes_state_readonly_preflight.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_hermes_state_ux_messages.py

test: restore state.db / SessionDB regression guards dropped by #120071

2026-09-23 10:34:54 -07:00

test_hermes_state_wal_fallback.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_hermes_state.py

test(state): name the title-yield test after the rule it pins

2026-10-03 23:03:42 +05:30

test_isolation_marker_env.py

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

test_journal_mode_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_journal_mode_upgrade_warning.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_lease_pid_namespace.py

test(state): pin pidns stamps written by lock/lease holders

2026-10-03 17:44:58 +05:30

test_live_db_guard_ancestry.py

…

test_live_db_isolation_guard.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_lockguard_fcntl_tolerance.py

test: port main's lockguard test to the platforms() marker

2026-09-21 20:29:18 -04:00

test_message_uid.py

fix(sessions): keep tool-call uids paired through rewrites, folds of repeated ids and chunked copies

2026-09-29 04:15:21 +05:30

test_named_profile_session_db.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

test_never_active_keyed_prune.py

fix(state): report the never-active prune's exact skipped count

2026-10-03 16:32:15 +05:30

test_no_locked_readers_gate.py

test: keep cross-cutting architecture lints; drop stale OS-fake baseline entries

2026-09-23 03:15:26 -07:00

test_no_more_rows_retry.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_orphan_gateway_session_repair.py

test(state): collapse profile-fence coverage to two invariants (#119121, salvage #119122)

2026-09-28 04:34:30 -07:00

test_orphan_sweep_cross_backend.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_pinned_archived_sidebar.py

fix(sessions): return archived pins from the sidebar back-fill

2026-09-24 06:27:07 -05:00

test_pinned_lineage.py

fix(sessions): the pinned-skip note counts only rows that carry the pin

2026-10-03 16:30:15 +05:30

test_prune_activity_recency.py

fix(sessions): pinned-skip note counts pinned rows, not spared ancestors

2026-09-27 00:43:39 +05:30

test_purge_profile_state.py

fix(state): gate delivery_obligations.adapter_profile on column presence

2026-09-18 09:53:41 -07:00

test_read_path_transient_ioerr.py

refactor(sessions): one transcript-format rule and one missing-display-index probe

2026-09-23 22:22:32 +05:30

test_readonly_fts_decode_error.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_reasoning_roundtrip.py

…

test_rebuild_table_atomic.py

fix(state): run table rebuilds as one write transaction

2026-09-14 09:19:20 -07:00

test_recent_model_route.py

fix: status falls back to the live agent before the first host frame; recent route ties break deterministically

2026-09-13 14:45:41 -07:00

test_rekey_profile_state.py

fix(state): gate delivery_obligations.adapter_profile on column presence

2026-09-18 09:53:41 -07:00

test_remove_session_files_glob_escape.py

fix(web): scrub a session's on-disk artifacts in the delete endpoint

2026-09-26 22:52:51 -05:00

test_repaired_history_commit_coverage.py

test(compression): fixed-shape coverage rows; name the test for the archive-only-held contract

2026-10-03 18:17:35 +05:30

test_replace_messages_archive_siblings.py

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

test_replace_messages_archives_suffix_only.py

test(state): pin the divergent-mid-prefix rewrite (anchor + counters)

2026-09-20 16:47:29 +05:30

test_resolve_resume_session_id.py

…

test_restore_alternation_repair.py

…

test_retired_wal_generation_capture.py

tests: replace every bare host skipif with platforms()

2026-09-21 19:18:15 -04:00

test_rewind_surfaces_invariant.py

fix(state): /undo and /retry work again after a turn that got no reply

2026-09-20 12:12:26 -07:00

test_schema_read_probe.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_search_or_relaxed_fallback.py

test(session-search): collapse OR-relaxed tests to three invariants; comment says sort applies

2026-09-15 04:01:17 -07:00

test_session_archived_round_trip.py

fix(sessions): import coerces archived-row flags and splits live rows once

2026-09-26 22:27:13 +05:30

test_session_archiving.py

fix(sessions): bulk archive never hides a live chat because its old history matched

2026-09-20 12:15:51 -07:00

test_session_db_acp_cwd_backfill.py

fix(acp): persist session cwd and git metadata to the sessions table

2026-09-20 10:40:48 -07:00

test_session_db_context_manager.py

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

test_session_db_leak_sweep.py

test: join auto-title threads at teardown; stop titling in the sidecar replay test

2026-09-20 11:40:16 -07:00

test_session_db_profile_stamp.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_session_db_read_conn_pool.py

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

test_session_db_read_path_split.py

fix(api): scope ancestor reads to display surfaces; guard after_id; stamp read-path fixture

2026-09-28 20:17:37 -05:00

test_session_delete_profile_isolation.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_session_export_timings.py

test(session-export): one lineage+import invariant replaces the duplicate export_all case

2026-09-15 03:51:07 -07:00

test_session_git_metadata_generation.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_session_hidden.py

…

test_session_id_recognition_recovery.py

test(state): drive the real salvage mapper in the derived-id layout test

2026-10-04 12:05:37 +05:30

test_session_import_keep_flags.py

refactor(state): trim the flag-import comment and MB-passing test lines

2026-10-03 16:41:37 +05:30

test_session_import_value_validation.py

fix(sessions): validate imported values before persistence

2026-10-06 12:40:04 -04:00

test_session_lifecycle_status.py

…

test_session_list_index_choice.py

refactor(state): one preview-column builder, pinned at every session listing (#119403)

2026-10-02 02:34:41 +05:30

test_session_md_export.py

…

test_session_model_usage_pk_heal.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_session_read_state.py

…

test_session_turn_lease.py

fix(state): qualify lock/lease holder pid probes by PID namespace

2026-10-03 17:44:58 +05:30

test_session_workspace_binding.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_shared_session_db_registry.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-11 09:36:04 -04:00

test_show_subagents_listing.py

fix(sessions): add sessions.show_subagents to list delegate runs

2026-09-26 20:40:40 -05:00

test_sqlite_lock_safe_inspection.py

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

test_sqlite_wal_reset_gate.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_stale_tool_call_marker_session_repair.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_startup_maintenance_lease.py

fix(gateway): drop the redundant whole-block lease; one invariant test per atom; document the watchdog env vars

2026-09-15 04:19:19 -07:00

test_state_db_corrupt_quarantine.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_state_db_darwin_fd_scan_hang.py

fix(state): bound macOS deleted-WAL holder scan with fail-open timeout

2026-10-01 05:25:47 -05:00

test_state_db_file_identity.py

fix(state): /proc/locks readers no longer lose entries to other processes' lock churn

2026-09-28 02:26:21 -07:00

test_state_db_fts_segment_collision_probe.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_state_db_holders_windows_live.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

test_state_db_holders.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

test_state_db_lock_fail_closed.py

tests: replace every bare host skipif with platforms()

2026-09-21 19:18:15 -04:00

test_state_db_maintenance_conformance.py

test: trim the Aug-2026 conformance suites to behaviour invariants on main

2026-09-13 21:13:23 -07:00

test_state_db_malformed_repair.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_state_db_notadb_fail_closed.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_state_db_repair_live_writer_guard.py

test: pin admission outputs and the holder-scan stat seam

2026-09-19 04:49:23 -04:00

test_state_db_repair_loop_cap.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_state_db_repair_loop_mtime.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_state_db_repair_non_destructive.py

fix(state): second-process maintenance on state.db refuses ANY foreign holder

2026-09-14 08:50:29 -07:00

test_state_db_second_process_maintenance.py

test: restore platforms() host gating that merges reverted to the legacy trio

2026-09-18 19:06:52 -04:00

test_state_db_stats.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

test_state_db_wal_unlink_race.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_state_db_write_durability.py

fix: reconcile Termux TUI and platform tests

2026-09-23 08:20:01 -04:00

test_state_synchronous_pragma.py

fix: reconcile Termux TUI and platform tests

2026-09-23 08:20:01 -04:00

test_storage_failure_copy.py

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

test_storage_health_latch.py

fix(state): surface corrupt state.db as one degraded session-storage state (#120274)

2026-09-23 10:17:46 -04:00

test_sweep_orphaned_sessions.py

docs(state): name recovered placeholders in the stale-open sweep; exercise the real recovery path

2026-09-18 10:30:20 -07:00

test_tail_rewind_semantics.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

test_telegram_topic_selfheal.py

refactor(state): topic rebuild goes through _rebuild_table; heal also swallows a replaced state.db

2026-09-19 03:14:20 +05:30

test_unaddressed_rewrite_identity.py

fix(state): keep stored token_count when the agent flush row carries token_count=None

2026-10-02 01:04:12 +05:30

test_wal_active_confirmed.py

fix(state): gate the lock-free read pool on a confirmed WAL header, not the assumed mode

2026-09-11 06:23:23 -07:00

test_wal_checkpoint_strategy.py

test: restore state.db / SessionDB regression guards dropped by #120071

2026-09-23 10:34:54 -07:00

test_wal_lock_guard_lifecycle.py

fix(state): a closing writer keeps its WAL generation until SQLite's own close (#121429)

2026-09-26 11:32:10 -07:00

test_wal_lock_guard.py

test: restore platforms() host gating that merges reverted to the legacy trio

2026-09-18 19:06:52 -04:00

test_watermark_interplay.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_write_lock_owner_attribution.py

fix(state): /proc/locks readers no longer lose entries to other processes' lock churn

2026-09-28 02:26:21 -07:00

test_write_lock_patience.py

fix(state): SessionDB open waits out a lock lost inside the FTS constructor

2026-09-23 11:35:07 -07:00

test_writer_conn_thread_safety.py

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

test_zeroed_state_db.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00