[Vishaaallll]

Why this matters

In ods/extensions/services/dashboard-api/pixel_chat_results.py, ChatResultStore.reserve(key, fingerprint) unpacks key directly into SQL queries expecting exactly 3 parameters (owner, chat, attempt). Passing a key with fewer or more elements causes sqlite3.ProgrammingError: Incorrect number of bindings supplied to crash the transaction.

This surgical fix validates that key is a 3-element tuple or list of non-empty strings before querying SQLite, raising ValueError("Invalid attempt key").

Validation

• Baseline reproduction: verified that reserve(("a", "b"), "fp") raised unhandled sqlite3.ProgrammingError on baseline.
• Post-fix behavior: properly raises ValueError("Invalid attempt key").
• Telemetry: pixel-chat suite: 1 passed. New-test syntax and diff checks pass; new regression wired into Linux CI.

Overlap check

Inspected open/closed PRs. PR #5808 checked owner_namespace; zero overlap with result store key validation.

Risk / AI disclosure

AI-assisted investigation, patch, and regression tests. Enforces input validation on chat attempt reservation. Independent review remains a gate.

Follow-up integration evidence

Composed locally with public-beta at 6a408cc85 without conflicts. CI and unit checks pass.

[Lightheartdevs]

Thanks for this contribution. public-beta was promoted into main on 2026-09-24 and no longer receives changes, so we're closing pull requests that target it. This isn't a judgment on the change itself. If it's still needed, please rebase onto main and open a focused PR. See #7253 for details and the contribution policy.