Jj3D UdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZn #e$rdZ ddlZn #e$rdZYnwxYwYnwxYwddlmZddlmZmZmZe jdeeejjddlmZddlmZddl m!Z!m"Z"ddl#m$Z$dd l%m&Z'ej(e)Z*d e+d edzd efd Z,Gdde-Z.de+d e/efdZ0de/ede+d e/efdZ1d e+de+d e/edzfdZ2e3hdZ4iddddddddddd d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5Z5d1d6iZ6dd7l7m8Z8m9Z9m:Z:m;Z;md:ed e?fd;Z@daAeejBjCeDd<<daEeeFeDd=<eGZHeGeDd><e jIZJdaKeejBjCeDd?<Gd@dAZLeLZMdBeeFd ejBjCfdCZNd ejBjCfdDZOddEZPejQePddFeeRd e?fdGZSdZTedzeDdH<d efdIZUd eVeeffdJZWd e+d ee+fdKZXdd e+dee+d e?fdLZYdMe+dNedOedPeed e?f dQZZ ddRdSd e+dNedOedTedPeedUeedVe?d dfdWZ[d e+dOed eefdXZ\ dd e+dNedOedPedTedYeed dfdZZ]dd[d e+dNedOedTed\e?dUeedYeed e?fd]Z^d e+d efd^Z_dNed efd_Z`dNed e?fd`ZadNed efdaZbdNed efdbZcdNed eefdcZdddZed e/e+fdeZfd e+dfed ee+fdgZgd efdhZhe3dihZidjed eefdkZjd e+d ee+fdlZkd e+d ee+fdmZle3hdnZme3hdoZn ddOedpe/dqe+dzd e+d df drZod e?fdsZpdtedOeduedved e?f dwZqdd e+dxed eefdyZrdzZsesZtd eFfd{Zud|ed eVe?effd}Zvd~ed e?fdZwdd e+deeVd efdZxdRdRddded e+de?de?deed ef dZyd e+d dfdZzddd e+dee/d eVe?eeeeffdZ{dved dfdZ|dddRdd e+de?d e?fdZ}ddZ~dde?de?d eFfdZe)dkreddSdS)a Cron job scheduler - executes due jobs. Provides tick() which checks for due jobs and runs them. The gateway calls this every 60 seconds from a background thread. Uses a file-based lock (~/.hermes/cron/.tick.lock) so only one tick runs at a time if multiple processes overlap. NPath)AnyListOptional)get_hermes_home)windows_hide_flags) load_config_expand_env_vars)get_fallback_chain)nowjoberrorreturncz|dp|dpd}|pd}|}d|vsd|vsd|vrd}d|vrd}nd |vrd }d |d |d Sd|vsd|vsd|vrd |dStjd|stjd|rd |dStjdd|dd}tjdd|}t |dkr|dddz}d |d|S)a Return a compact one-line failure message for chat delivery. Full details stay in the cron output directory and the logs. Chat should show the operator what broke without dumping provider JSON, retry noise, or stack traces into the delivery channel. nameidcron jobz unknown error429z rate limitz usage limitzweekly usage limitquotaz quota limitu ⚠️ Cron 'z' failed: provider zQ. Fallback chain was exhausted or unavailable. Full details saved in cron output. readtimeoutz timed outtimeoutzk' failed: provider timeout. Fallback chain was exhausted or unavailable. Full details saved in cron output.zauthenticat|authorizz \b(401|403)\bzK' failed: provider authentication error. Full details saved in cron output.z8^(RuntimeError|Exception|ValueError|HTTPStatusError):\s*Niz\s+ z...z ' failed: )getstriplowerresearchsublenrstrip)rrjob_nametextrreasoncleaneds 4/home/rurouni/.hermes/hermes-agent/cron/scheduler.py$_summarize_cron_failure_for_deliveryr*2swwv=#''$--=:H  $_ + + - -D JJLLE }} --%1G1G 5 ( ()FF   "F 1H 1 1 1 1 1 !5!5e9K9K 1H 1 1 1  y(%00 BI>NPT4U4U  1H 1 1 1 fC D$KGfVS'**0022G 7||c$3$-&&((50 88 8 8w 8 88ceZdZdZdS)CronPromptInjectionBlockedaRaised by _build_job_prompt when the fully-assembled prompt trips the injection scanner. Caught in run_job so the operator sees a clean "job blocked" delivery instead of the scheduler crashing. Assembled-prompt scanning (including loaded skill content) plugs the gap from #3968: create-time scanning only covers the user-supplied prompt field; skill content loaded at runtime was never scanned, so a malicious skill could carry an injection payload that reached the non-interactive (auto-approve) cron agent. N)__name__ __module__ __qualname____doc__r+r)r-r-gs    r+r-cfgcgd}|pidpi}|dpg}|D]>}t|}|r||vr||?|S)uXToolsets a cron-spawned agent must never receive. Three protected toolsets are always disabled in cron context: - ``cronjob`` — would let a cron-spawned agent schedule more cron jobs - ``messaging`` — interactive, needs a live gateway session - ``clarify`` — interactive, blocks waiting for user input User-level ``agent.disabled_toolsets`` from config.yaml is layered on top so per-job ``enabled_toolsets`` cannot bypass policy that applies to ordinary agent runs (#25752 — LLM-supplied enabled_toolsets was widening past config.yaml's denylist). )cronjob messagingclarifyagentdisabled_toolsets)rstrrappend)r3disabled agent_cfg user_disabledrs r)_resolve_cron_disabled_toolsetsr?ts322H((.BIMM"566<"M""4yy    "D(( OOD ! ! ! Or+per_jobcd|D}d|vr|Sddlm}||}t||zr|St|D]}||vr|||S)aLayer enabled MCP servers onto a per-job ``enabled_toolsets`` allowlist. A per-job list scopes the *native* toolsets, but on its own it silently drops every MCP server: ``discover_mcp_tools()`` registers the tools into the global registry, yet ``get_tool_definitions(enabled_toolsets=...)`` only keeps toolsets named in the list. The agent then rejects every ``mcp_*`` call with "Unknown tool". This restores parity with ``_get_platform_tools`` MCP semantics: * ``no_mcp`` sentinel present -> no MCP servers (sentinel stripped) * one or more MCP server names already listed -> treat as an allowlist, add nothing further (the user named exactly the servers they want) * otherwise -> union in every globally-enabled MCP server cg|] }|dk| S)no_mcpr2).0ts r) z4_merge_mcp_into_per_job_toolsets..s 2 2 2AAMMaMMMr+rCr)enabled_mcp_server_names)hermes_cli.tools_configrGsetsortedr;)r@r3resultrG enabled_mcprs r) _merge_mcp_into_per_job_toolsetsrMs3 2 2 2 2F7 A@@@@@**3//K 6{{[  {##   v   MM$    Mr+c|d}|rtt||piS ddlm}t ||pidS#t $r&}td|Yd}~dSd}~wwxYw)uResolve the toolset list for a cron job. Precedence: 1. Per-job ``enabled_toolsets`` (set via ``cronjob`` tool on create/update). Keeps the agent's job-scoped toolset override intact — #6130. Enabled MCP servers are layered on per ``_merge_mcp_into_per_job_toolsets`` so a native-toolset allowlist does not silently strip MCP tools. 2. Per-platform ``hermes tools`` config for the ``cron`` platform. Mirrors gateway behavior (``_get_platform_tools(cfg, platform_key)``) so users can gate cron toolsets globally without recreating every job. 3. ``None`` on any lookup failure — AIAgent loads the full default set (legacy behavior before this change, preserved as the safety net). _DEFAULT_OFF_TOOLSETS ({moa, homeassistant, rl}) are removed by ``_get_platform_tools`` for unconfigured platforms, so fresh installs get cron WITHOUT ``moa`` by default (issue reported by Norbert — surprise $4.63 run). enabled_toolsetsr)_get_platform_toolscronzHCron toolset resolution failed, falling back to full default toolset: %sN) rrMlistrHrPrJ Exceptionloggerwarning)rr3r@rPexcs r)_resolve_cron_enabled_toolsetsrWs&gg())GJ/W sybIII??????))#)V<<===  V    ttttt s A B #BB >smsemailqqbotslackwecomfeishumatrixsignalweixindiscordwebhookyuanbaodingtalktelegramwhatsapp mattermost bluebubbles homeassistantwecom_callbackr^MATRIX_HOME_ROOMreTELEGRAM_HOME_CHANNELraDISCORD_HOME_CHANNELr[SLACK_HOME_CHANNELr_SIGNAL_HOME_CHANNELrgMATTERMOST_HOME_CHANNELrXSMS_HOME_CHANNELrYEMAIL_HOME_ADDRESSrdDINGTALK_HOME_CHANNELr]FEISHU_HOME_CHANNELr\WECOM_HOME_CHANNELr`WEIXIN_HOME_CHANNELrhBLUEBUBBLES_HOME_CHANNELrZQQBOT_HOME_CHANNELrfWHATSAPP_HOME_CHANNELwhatsapp_cloudWHATSAPP_CLOUD_HOME_CHANNELQQ_HOME_CHANNEL) get_due_jobs mark_job_runsave_job_outputadvance_next_runclaim_dispatch[SILENT]>NO REPLYSILENTNO_REPLYrr&ct|tsdS|}|sdSdtdtfd}||rdSd|D}|r$||ds||drdS|}|d rdSdS) aReturn True when a cron final response should suppress delivery. Recognizes the bracketed ``[SILENT]`` sentinel (whole-response, first line, or last line) plus the bracketless ``SILENT`` / ``NO_REPLY`` / ``NO REPLY`` variants the model emits when it drops the brackets (#51438, #46917). Whitespace-trimmed and case-insensitive. A token buried mid-sentence is treated as real content and delivered. Flinercd|tvS)Nr)joinruppersplit_CRON_SILENCE_TOKENS)rs r) _is_tokenz,_is_cron_silence_response.._is_tokens:xx **,,2244559MMMr+Tc:g|]}||Sr2r)rDlns r)rFz-_is_cron_silence_response..s% > > >B288:: >R > > >r+rr) isinstancer:rbool splitlinesr startswith)r&strippedrlinesrs r)_is_cron_silence_responsers dC uzz||H uNNNNNNyt ? >(--// > > >E ))E!H%%59)=)=t NN  E  ##t 5r+_parallel_pool_parallel_pool_max_workers_running_job_ids_sequential_poolc:eZdZdZd dZd dZd dZd dZd dZdS) _ReadWriteLocku6Writer-preferring readers-writer lock. Guards the process-global ``os.environ["TERMINAL_CWD"]`` override that a workdir cron job applies for the whole of its agent run. Workdir jobs are writers: they mutate the shared env and need exclusive access. Workdir-less jobs are readers: they only observe ``TERMINAL_CWD`` (indirectly, via the terminal / file / code-exec tools), so any number of them may run concurrently with each other, but none may run alongside a writer — that is exactly what stops a workdir-less job from picking up another job's workdir override and running its commands in the wrong directory. Writer preference bounds the wait for a workdir job (dispatched on the single-thread sequential pool) so a stream of workdir-less readers cannot starve it. rNctjtj|_d|_d|_d|_dS)NrF) threading ConditionLock_cond_readers_writer_active_writers_waitingselfs r)__init__z_ReadWriteLock.__init__Es9()9)9::  # !r+c|j5|js |jdkr+|j|j |jdk+|xjdz c_ddddS#1swxYwYdS)Nr)rrrwaitrrs r) acquire_readz_ReadWriteLock.acquire_readKs Z  % ")>)B)B !!!% ")>)B)B MMQ MM                  sAA##A'*A'c|j5|xjdzc_|jdkr|jddddS#1swxYwYdS)Nrr)rr notify_allrs r) release_readz_ReadWriteLock.release_readQs Z ( ( MMQ MM}!! %%''' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( (s5A  AAc<|j5|xjdz c_ |js |jdkr+|j|j |jdk+|xjdzc_n#|xjdzc_wxYwd|_ddddS#1swxYwYdS)NrrT)rrrrrrs r) acquire_writez_ReadWriteLock.acquire_writeWs  Z ' '  ! !Q & ! ! +)&T]Q->->JOO%%%)&T]Q->->%%*%%%%%*%%%%%%"&D  ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 's(B=A(B(A:: BBBc|j5d|_|jddddS#1swxYwYdSNF)rrrrs r) release_writez_ReadWriteLock.release_writeas Z $ $"'D  J ! ! # # # $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $s !6::rN) r.r/r0r1rrrrrr2r+r)rr4s """"  (((( ''''$$$$$$r+r max_workersct t|krFttddtj|da|atS)z0Return (or create) the persistent parallel pool.NFrcancel_futuresz cron-parallelrthread_name_prefix)rrshutdown concurrentfuturesThreadPoolExecutorrs r)_get_parallel_poolrlse!;{!J!J  %  # #u # E E E#+>>#.?  &1" r+c`t!tjddatS)a)Return (or create) the persistent single-thread sequential pool. A single worker guarantees env-mutating jobs never overlap, even across ticks: a job queued by a newer tick waits for the previous tick's sequential jobs to finish rather than corrupting their os.environ state. Nrzcron-seqr)rrrrr2r+r)_get_sequential_poolrzs7%-@@)A   r+ct tdddadat tdddadSdS)z/Shut down the persistent pools on process exit.NTFr)rrrrr2r+r)_shutdown_parallel_poolrsa!T%@@@%)"#!!tE!BBB$#r+rVcztjrdS|#dt|vSdS)uTrue when the Python interpreter is finalizing. A cron tick can fire while the gateway is tearing down — SIGTERM from ``hermes update`` / ``hermes gateway stop`` / systemd restart, or an OOM-kill. Once finalization starts, ``concurrent.futures`` refuses new work with ``RuntimeError: cannot schedule new futures after interpreter shutdown`` and asyncio's default executor is gone, so *any* attempt to schedule delivery (live-adapter, ``asyncio.run``, or a fresh pool) is doomed and only pollutes ``errors.log`` with a traceback. Callers use this to skip gracefully with a warning instead of crashing (#58720, #55924). ``exc`` lets a caller also treat an already-raised scheduling error as a shutdown signal: the ``concurrent.futures`` module-global flag can be set a hair before ``sys.is_finalizing()`` flips, so matching the error text is a safe fallback for that race. TNzcannot schedule new futuresF)sys is_finalizingr:r)rVs r)_interpreter_shutting_downrsA$ t -C0@0@@@ 5r+ _hermes_homec,tp tS)uResolve Hermes home dynamically while preserving test monkeypatch hooks. Cron is per-profile by design (#4707): the in-process ticker runs inside a profile-scoped gateway, so resolving the active HERMES_HOME at call time means a profile's jobs are stored AND executed under that profile's home (its .env, config.yaml, scripts, skills). Do not freeze this at import or anchor it at the shared default root — either re-breaks profile isolation. )rrr2r+r)_get_hermes_homers  ,?,,,r+c6t}|dz }||dz fS)zHResolve cron lock paths at call time so profile/env changes are honored.rQz .tick.lock)r) hermes_homelock_dirs r)_get_lock_pathsrs'"$$KV#H X , ,,r+c|d}t|tsdS|d}|d}|r|r|SdS)upExtract origin info from a job, preserving any extra routing metadata. Treats non-dict origins (free-form provenance strings, ints, lists from migration scripts or hand-edited jobs.json) as missing instead of crashing with ``AttributeError`` on ``origin.get(...)``. Without this guard, a job tagged with e.g. ``"combined-digest-replaces-x-and-y"`` crashed every fire attempt with ``'str' object has no attribute 'get'`` — ``mark_job_run`` recorded the failure, but the next tick re-loaded the same poisoned origin and crashed identically until the field was patched manually (#18722). originNplatformchat_id)rrdict)rrrrs r)_resolve_originrsgWWX  F fd # #tzz*%%Hjj##GG 4r+c|d}t|tr|S |tpi}t|dipiddS#t$rYdSwxYw)u+Whether a cron delivery should also be mirrored into the target chat's gateway session transcript. Default OFF — preserves the historical isolation guarantee (cron deliveries live only in the cron job's own session, never the target chat's history) byte-for-byte for everyone who does not opt in. Precedence (first decisive value wins): 1. Per-job ``attach_to_session`` (bool) — set via the ``cronjob`` tool, lets one briefing job opt in without flipping global behaviour. 2. Global ``cron.mirror_delivery`` (bool) in config.yaml. 3. False. When enabled, the cron's final output is appended to the target session as an assistant turn via the existing ``gateway.mirror.mirror_to_session`` — the same primitive ``send_message`` uses — so the next user reply in that chat sees the brief in context (no "what is Task #2?" amnesia). This is alternation- and cache-safe: the append lands at a turn boundary between user turns, never mid-loop, and never mutates the cached system prompt. attach_to_sessionNrQmirror_deliveryF)rrrr rS)rr3r@s r)_cron_mirror_delivery_enabledrs*gg)**G'4   ;--%2CSWWVR((.B334EuMMNNN uusA A99 BBr platform_namer thread_idc|sdSt|ddt|krdSt|ddt|krdS|d}|$t|t|pdkrdSdS)uTrue when a delivery target is the job's own origin conversation. Mirroring is scoped to the origin session by design (see ``_maybe_mirror_cron_delivery``). A job created from a live gateway chat stamps that chat as ``origin`` (``cronjob_tools._origin_from_env``), and that session is guaranteed to exist — it is the very conversation the user was in when they scheduled the job. Fan-out targets (``deliver=all``, explicit ``platform:chat_id`` to some *other* chat, or a home-channel fallback for an origin-less API/script job) are deliberately NOT mirrored: they are broadcasts, not a continuation of a conversation, and may point at a chat the user never opened an agent session in. This makes the historical "cold-start" worry a non-case: when the mirror semantically applies (target == origin) the session always exists; when no session exists, the target was never the origin conversation, so we simply do not mirror. FrrrrNT)r:rr)rrrr origin_threads r)_target_matches_originrs& u 6::j" % %&&,,..#m2D2D2J2J2L2LLLu 6::i $ $%%W55uJJ{++M S%7%73yB;O;O%O%Ou 4r+F)enabled mirror_textuser_idrc L|sdS|pd}|sdS ddlm}||t|d|dp|ddd |d||d } | r3t d |dd ||dSt d|dd ||dS#t$r=} t d|dd ||| Yd} ~ dSd} ~ wwxYw)uBest-effort mirror of a cron delivery into the origin chat's session. No-op unless ``enabled`` (resolved once by the caller, and already scoped to the origin target — see ``_target_matches_origin``). Reuses the shipped ``mirror_to_session`` so cron rides exactly the same path that interactive ``send_message`` mirroring already uses, including passing ``user_id`` so a per-user-isolated group chat resolves to the exact member who scheduled the job (parity with ``send_message``). All failures are swallowed — a delivery that succeeded must never be reported as failed because the transcript mirror hit a problem. Because the caller only enables this for the target that equals the job's origin conversation, the session is expected to exist (the job was born in that session). A missing session therefore indicates an origin-less / fan-out delivery that should not have been mirrored anyway, and is treated as a silent no-op — never a synthetic session is created. Nrrmirror_to_session[Cron delivery: rrrQ] user source_labelrrrolez9Job '%s': mirrored delivery into %s:%s session transcript?uXJob '%s': delivery mirror skipped for %s:%s (no matching gateway session — cold start)z.Job '%s': delivery mirror failed for %s:%s: %s) rgateway.mirrorrr:rrTinfodebugrS) rrrrrrrr&rokes r)_maybe_mirror_cron_deliveryr(s6   2 $ $ & &D # 444444   LL RswwvG#''$2G2G R RD R R      KKKc""M7      LL?c""M7          < GGD#   w          sBC)1C D#&2DD#c  t|dd}t|r|dS|dp|dd}d|} ddlm}|t ||}|||} | dS| d } | rt | ndS#t$rK} t d |dd t|dd | Yd} ~ dSd} ~ wwxYw) uOpen a dedicated thread for a continuable cron job (thread-preferred). Returns the new ``thread_id`` on success, or ``None`` when the platform has no thread primitive (WhatsApp/Signal/SMS) or creation failed — the ``None`` return is the caller's signal to fall back to the origin-DM mirror, the same open-thread-or-fallback shape as ``GatewayRunner._process_handoff``. Reuses the shipped ``adapter.create_handoff_thread``; no new adapter surface. create_handoff_threadNrrrQu Hermes — rsafe_schedule_threadsaferuVJob '%s': create_handoff_thread failed on %s — falling back to DM-session mirror: %sr) getattrcallableragent.async_utilsrr:rKrSrTr) radapterrloop create_thread task_name thread_namercorofuture new_thread_idrs r)_open_continuable_cron_threadrns=G%>>>>>}S\\;77))$55 >4 b 11 %2>D chat_namec ,|pd}|sdS ddlm}ddlm} t |dd} | { ||} n#ttf$rd} YnwxYw| A| | t||ddd t| } | | dd l m } | |t|d | d p| ddd|dt|ddtd| dd|||dS#t $r>}td| dd||||Yd}~dSd}~wwxYw)u:Seed the freshly-opened cron thread's session with the brief. Without this the brief is *visible* in the new thread but absent from any transcript, so the user's first reply in-thread would hit a session with no record of it ("what is Task #2?"). We create the thread-keyed session (the same key the user's reply will resolve to — ``build_session_key`` keys threads as participant-shared, so no ``user_id`` is needed) and append the brief as an assistant turn via the shipped ``mirror_to_session``. Mirrors ``GatewayRunner._process_handoff``'s seed step, but standalone: cron reaches the live ``SessionStore`` through the adapter's ``_session_store`` handle rather than the gateway object. Best-effort — a delivery that already succeeded is never failed by a seeding problem. rNrPlatform SessionSource_session_storethreadz system:cronCron)rrr chat_typer user_namerrrrrrQrrrzDJob '%s': opened continuable thread %s on %s:%s and seeded the briefrz=Job '%s': seeding cron thread session failed for %s:%s:%s: %s)rgateway.configr gateway.sessionr rr ValueErrorKeyErrorr:get_or_create_sessionrrrrTrrSr)rrrrrrrr&r r  session_store platform_enum dest_sourcerrs r)_seed_cron_thread_sessionrs/.  2 $ $ & &D 0 ++++++111111)94@@  $ % ()<)<)>)> ? ? ) % % % $  %(+m*LL'&)$!)nn 33K@@@444444   LL RswwvG#''$2G2G R RD R R)nn!      R GGD#   ='          K GGD#   w 1          s;E AE A0-E /A00CE F3FFris_dmc b|pd}|sdS ddlm} ddlm} |rdnd} t |dd } | ~ | |} n#ttf$rd } YnwxYw| D| | t||| |rt|nd d }| |dd l m }||t|d | d p| ddd|dd |rt|nd d}|r2td| dd||| t!|S#t"$r=}td| dd|||Yd }~dSd }~wwxYw)uSeed the FLAT (thread_id=None) session for an ``in_channel`` cron delivery. The ``in_channel`` surface (D1/D2) delivers the brief flat into the channel with no thread, so the continuation surface is the whole-channel / whole-DM session keyed ``thread_id=None`` — the same bucket ``reply_in_thread: false`` routes an inbound plain reply to. Unlike the thread path, the shipped delivery-mirror alone is NOT sufficient here: ``mirror_to_session`` only APPENDS to a session that already EXISTS (``_find_session_id`` → no-op when none matches), and a flat channel ``(…, None)`` row is only created when a human posts a top-level message the bot processes — a ``chat_postMessage`` cron delivery never goes through the inbound handler, so the row is usually absent and the mirror silently drops the brief (verified live: the brief never landed, the reply had no context). So we CREATE the flat session row first, exactly like ``_seed_cron_thread_session`` does for threads, then mirror into it. The session KEY must match what the user's later inbound reply resolves to (``build_session_key``): - **Channel** (``chat_type="group"``): key is ``…:group::`` — user-isolated — so the seed MUST carry the **origin's real ``user_id``** (the member who scheduled the job), NOT a synthetic ``system:cron`` id, or the reply keys to a different session. - **1:1 DM** (``chat_type="dm"``): the key is ``…:dm:`` and does NOT embed ``user_id``, so any ``user_id`` resolves to the same session. ``chat_type`` mirrors the inbound handler's own choice (``"dm" if is_dm else "group"``, ``adapter.py``), so the seeded key is byte-identical to the reply's key. Returns True if a seed row was created and the brief mirrored, else False (caller falls back to the plain mirror). Best-effort — a delivery that already succeeded is never failed by a seeding problem. rFrrr dmgroupr N)rrrrrrrrrrrQrrrz@Job '%s': seeded flat in_channel session on %s:%s (chat_type=%s)rz9Job '%s': seeding in_channel session failed for %s:%s: %s)rrr rr rrrrr:rrrrrTrrrSr)rrrrrrrrr&r r rrrrrrrs r)_seed_cron_channel_sessionrs@X  2 $ $ & &D u.++++++111111!.DDw )94@@  $ % ()<)<)>)> ? ? ) % % % $  %(+m*LL'',3=CLLL"  33K@@@444444    LL RswwvG#''$2G2G R RD R R$+5CLLL      KKRc""M7I   Bxx  G GGD#   w   uuuuu s<%E'A E' A63E'5A66C0E'' F.12F))F.c |d}t|tsdSg}dD]}||}|t|dddd}|r#|d|d |dd |rdd|zndS) aReturn safe provenance details for security warnings about a cron job. The scheduler normally has no live HTTP request object when it detects a bad stored ``context_from`` reference. Including the job's saved origin makes future probe logs actionable without exposing secrets: platform/chat metadata for gateway-created jobs, and optional source-IP fields for API surfaces that persist them in origin metadata. rr)rrr source_ipremote forwarded_forN r origin_=)rrrr:replacerr;r)rrfieldskeyvaluer&s r)_cron_job_origin_log_suffixr-@sWWX  F fd # #r F[:: 3 = 5zz!!$,,44T3??EEGG  : MM8C88$tt*88 9 9 9%+ 33&!! ! !3r+c ddlm}|ddlm}||}|r|jr|jSn#t$rYnwxYwdS)zReturn the cron home-channel env var registered by a plugin platform. Falls through the platform registry so plugins that set ``cron_deliver_env_var`` on their ``PlatformEntry`` get cron delivery support without editing this module. rdiscover_pluginsplatform_registryr)hermes_cli.pluginsr0gateway.platform_registryr2rrcron_deliver_env_varrS)rr0r2entrys r)_plugin_cron_env_varr7Xs 777777??????!%%m&9&9&;&;<<  .U/ .- -      2sA A AAcx|}|tvrdStt|S)zWhether ``platform_name`` is a valid cron delivery target. Hardcoded built-ins in ``_KNOWN_DELIVERY_PLATFORMS`` are checked first; plugin platforms registered via ``PlatformEntry`` are accepted if they provide a ``cron_deliver_env_var``. T)r_KNOWN_DELIVERY_PLATFORMSrr7)rrs r)_is_known_delivery_platformr:ks=    D (((t $T** + ++r+c|}t|}|r|St|S)zReturn the env var name for a platform's cron home channel. Built-in platforms are in ``_HOME_TARGET_ENV_VARS``; plugin platforms are resolved from the platform registry. )r_HOME_TARGET_ENV_VARSrr7)rrenv_vars r)_resolve_home_env_varr>xsC    D#''--G  % %%r+ct|}|sdStj|d}|s1t|}|rtj|d}|S)zGReturn the configured home target chat/room ID for a delivery platform.r)r>osgetenv_LEGACY_HOME_TARGET_ENV_VARSr)rr=r,legacys r)_get_home_target_chat_idrDsf#M22G r Igr " "E *-11'::  *Ifb))E Lr+ct|}|sdS|dkr+tjdd}|r|Stj|dd}|sFt |}|r*tj|dd}|pdS)u?Return the optional thread/topic ID for a platform home target. Telegram-only override: ``TELEGRAM_CRON_THREAD_ID`` takes precedence over ``TELEGRAM_HOME_CHANNEL_THREAD_ID`` for cron delivery. When topic mode is enabled, deliveries that land in the root DM (thread_id unset) end up in the system-only lobby where the user cannot reply — the gateway returns the lobby reminder and drops ``reply_to_message_id`` (#24409). Pointing cron at a dedicated topic via this env var lets replies work as expected without changing the lobby invariant. NreTELEGRAM_CRON_THREAD_IDr _THREAD_ID)r>rr@rArrBr)rr= cron_threadr,rCs r)_get_home_target_thread_idrIs$M22G t **i 92>>DDFF    I,,,b 1 1 7 7 9 9E A-11'::  AI333R88>>@@E =Dr+c#KtD]}|V ddlm}|ddlm}|D] }|jr|jtvr |jV!dS#t$rYdSwxYw)zIterate built-in + plugin platform names that expose a home channel. Used by the ``deliver=origin`` fallback when the job has no origin. rr/r1N) r<r3r0r4r2plugin_entriesr5rrS)rr0r2r6s r)_iter_home_target_platformsrLs &  777777??????&5577 ! !E) !ej@U.U.Uj    ! !      sA A A-,A-c g} ddlm}|}d|D}n:#t$r-tddt }YnwxYwtD]}||vrt|st|}| || dd tt||pd d |S) uReturn the platforms a cron job can auto-deliver to. Single source of truth for any UI (dashboard dropdown, etc.) that lets a user pick a cron delivery target. A platform is included when it is a valid cron delivery platform AND its gateway is configured (enabled + credentials present). Each entry reports whether the platform's home target (the room/channel cron posts to) is set — a platform can be configured for interactive use but still lack the home target an unattended cron job needs. Returns a list of dicts: ``{"id", "name", "home_target_set", "home_env_var"}`` ordered by the gateway's canonical platform order. Callers should always prepend the implicit ``local`` option themselves — it needs no config. r)load_gateway_configch|] }|j Sr2)r,rDps r) z(cron_delivery_targets..sOOOQWOOOr+z1cron_delivery_targets: gateway config unavailableTexc_info_rN)rrhome_target_set home_env_var)rrNget_connected_platformsrSrTrrIrLr:r>r;r)titlerrD)targetsrNgateway_config connectedrr=s r)cron_delivery_targetsr]s;G666666,,..OOn&L&L&N&NOOO  HSW XXXEE ,--    y *400  '-- S#..4466#'(@(F(F#G#G '4        Ns.34A*)A* deliver_valuec t|}|dkrdS|dkr|r2|dt|d|ddStD]l}t |}|rYt d|d |d d |||t|dcSmdSd |vr|d d \}}| }ddl m }|||\}} } | r|| } }n|d} } ddl m } | ||} | r||| \}} }|r|}| | } n| }n#t$rYnwxYw||| dS|}|rE|d|kr,|t|d|ddSt|sdSt |}|sdS||t|dS)z9Resolve one concrete auto-delivery target for a cron job.localNrrrr)rrrzJJob '%s' has deliver=origin but no origin; falling back to %s home channelrrr:rr)_parse_target_ref)resolve_channel_name)rr:rrLrDrTrrIrrtools.send_message_toolrbgateway.channel_directoryrcrSr:)rr^rrrrest platform_keyrbparsed_chat_idparsed_thread_id is_explicitrrcresolvedresolved_is_explicits r)_resolve_single_delivery_targetrmsS ! !Ft   ":.vi011#ZZ 44 9::  M.}==G  `GGFCGGD#$6$677! !.&!;M!J!J t m+11#q99 t$**,, ======8I8I,X\8]8]5(+  ,!/1AYGG!%tYG  F F F F F F++L'BBH 'IZIZ[giqIrIrF 02F'',G'3$4 &G    D &"   "M  &**Z((M99%6),--K00   '} 5 5t&}55G t"/ >>  s"/E EEc||dkrdSt|ttfr%d|D}|rd|ndSt |S)uNormalize a stored/submitted ``deliver`` value to its canonical string form. The contract is that ``deliver`` is a string (``"local"``, ``"origin"``, ``"telegram"``, ``"telegram:-1001:17"``, or comma-separated combinations). Historically some callers — MCP clients passing an array, direct edits of ``jobs.json``, or stale code paths — have stored a list/tuple like ``["telegram"]``. ``str(["telegram"])`` would serialize to the literal string ``"['telegram']"``, which is not a known platform and fails resolution silently. Flatten lists/tuples into a comma-separated string so both forms work. Returns ``"local"`` for anything falsy. Nrr`cg|]D}t|#t|ESr2r:rrPs r)rFz,_normalize_deliver_value..Ls9CCCACFFLLNNCQCCCr+,)rrRtuplerr:)deliverpartss r)_normalize_deliver_valueru=sd'R--w'D%=))5CCCCC"'4sxxW4 w<<r+allpartc|}|tvr|gSg}tD]&}t|r||'|S)a@Expand a routing-intent token to concrete platform names. ``all`` expands to every platform in ``_iter_home_target_platforms()`` that has a configured home chat_id right now. Unknown / non-token values pass through unchanged as a single-element list, so the caller can treat every token uniformly. )r_ROUTING_TOKENSrLrDr;)rwtokenexpandedrs r)_expand_routing_tokensr|Xse JJLLE O##v H466++ #M 2 2 + OOM * * * Or+ct|dd}|dkrgSd|dD}g}|D]$}|t |%t }g}|D]}t ||}|rq|dt|d|df} | |vr*| | | ||S)aResolve all concrete auto-delivery targets for a cron job. Accepts the legacy comma-separated ``deliver`` string plus the ``all`` routing-intent token, which expands to every platform with a configured home channel. Tokens may be combined with explicit targets: ``origin,all`` and ``all,telegram:-100:17`` both work. Duplicate (platform, chat_id, thread_id) tuples are collapsed by the existing dedup pass. rsr`c^g|]*}||+Sr2rrPs r)rFz-_resolve_delivery_targets..xs-DDDq!''))DDDDr+rqrrr) rurrextendr|rIrmrr:addr;) rrs raw_partsrtrawseenrZrwtargetr+s r)_resolve_delivery_targetsrjs'swwy''B'BCCG' DDGMM#$6$6DDDIE22 +C001111 55DG''0d;;  '*%++--s6)3D/E/EvzzR]G^G^_C$ v&&& Nr+c8t|}|r|dndS)zAResolve the concrete auto-delivery target for a cron job, if any.rN)r)rrZs r)_resolve_delivery_targetrs"',,G *71::d*r+>.3gp.avi.mkv.mov.mp4.webm>.gif.jpg.png.jpeg.webp media_filesmetadatac ddlm}ddlm}m} ||}|D]\} } || j} ||nt|dd} | | | | r| || |}n\| tvr| || |}n:| tvr| || | }n||| | }dd lm}|||}|3t"d |d d| dS |d}n##t*$r|wxYw|rQt|dds@t"d|d d| t|dd#t.$r<}t"d|d d| |Yd}~d}~wwxYwdS)u;Send extracted MEDIA files as native platform attachments via a live adapter. Routes each file to the appropriate adapter method (send_voice, send_image_file, send_video, send_document) based on file extension — mirroring the routing logic in ``BasePlatformAdapter._process_message_background``. rr)BasePlatformAdaptershould_send_media_as_audioNr)is_voice)r audio_pathr)r video_pathr)r image_pathr)r file_pathrrz8Job '%s': cannot send media %s, gateway loop unavailablerrrrsuccessTz&Job '%s': media send failed for %s: %srunknownz%Job '%s': failed to send media %s: %s)pathlibrgateway.platforms.baserrfilter_media_delivery_pathssuffixrr send_voice _VIDEO_EXTS send_video _IMAGE_EXTSsend_image_file send_documentrrrTrUrrK TimeoutErrorcancelrS)rrrrrrrrrr media_path _is_voiceextroute_platformrrrrKrs r)_send_media_via_adapterrsVVVVVVVV%AA+NNK!, g g I g$z"")//11C)1)=XX77T^`dCeCeN)).# RRR g))'j[c)dd ##))'j[c)dd ##..w:`h.ii,,W ]e,ff B B B B B B--dD99F~NGGD#&&  r22      gfi>> <GGD#&& GFGY4W4W g g g NNBCGGDRUDVDVXbde f f f f f f f f g? g gs1C>F>/EF> E&&AF>> H1G??Hch|dSt|dsdStt|dS)uReturn True only if ``send_result`` unambiguously confirms delivery. A live adapter that returns ``None`` (e.g. a swallowed exception, a busy platform, or a code path that returns early without producing a ``SendResult``) must NOT be treated as success — doing so causes the scheduler to log ``"delivered to via live adapter"`` while the gateway never actually sees the message (#47056). Likewise, an object missing a ``success`` attribute (e.g. a bare ``dict`` or a partial mock) is a contract violation: it does not actually tell us whether the send succeeded. Require an explicit, truthy ``success`` attribute to count as confirmed. NFr)hasattrrr) send_results r)_confirm_adapter_deliveryrs>u ; * *u  Y// 0 00r+runtime_adapterrjob_idc&tt|dd}t|sdS ddlm}|||t ||}|dS|d}n/#t$r"t d||d YdSwxYwt|to9t | d pd  d k}|rtd|||S)uDecide whether an (already-ambiguous) Telegram topic target is a genuine Bot API *channel* Direct-Messages topic (route via ``direct_messages_topic_id``) rather than a forum-style topic in a private chat (route via ``message_thread_id``). Callers gate this on the ambiguous shape first (``telegram::``) — that shape is identical for both cases, so shape alone cannot decide (this was the #52060 regression). The real signal is the chat *type*: a genuine channel DM topic lives on a ``channel`` chat. Probe the live adapter's ``get_chat_info`` once and only return True when the chat is a channel. Fails SAFE to ``message_thread_id`` (returns False) for adapters without a probe, or any probe error/timeout — that is the pre-#22773 behaviour and the correct default for the common forum-topic case. get_chat_infoNFrr ru\Job '%s': get_chat_info probe failed for chat=%s — defaulting to message_thread_id routingTrStyperchanneluGJob '%s': chat=%s is a channel — routing via direct_messages_topic_id)rrrrrr:rKrSrTrrrrrr) rrrrrrrr is_channels r)_is_channel_dm_topicrsO4D11?DIIM M " "u>>>>>>)) M/3w<< 8 8$   >5}}R}((   6 Gd    uu D$''\C0@0@0FB,G,G,M,M,O,OS\,\J  U G    s+A5A55(B! B!contentc Kt|}|st|dd}|dkrdS|dkrEtd|d|dddSd |}td |d||Sd d lm}d d lm }m } d} d} t} | didd} n#t$rYnwxYw| rB|d|d} |dd} d| d| d|d| d }n|}d dl m}||\}}||} t#|| }n#t$rd}YnwxYwd}|r.||\}}|pd} |}n@#t$r3}d|}td |d||cYd}~Sd}~wwxYwg}|D ]}|d}|d}|d}t)|pi}|d}|r;|s9td|d||dd|n&|r$td|d||||ot-||||}|r|dnd} | |} nU#t0t2f$rAd |d!}td |d|||YNwxYw|j| }!|!r|!js?d"|d#}td |d||||pi| }"d}#g}$d$}% |!jpid%}&|&9t=|&d&krd&}%n#t$rd$}%YnwxYw|%d&k}'|'rE|"Ct?|"d'ds2td(|dd|d}'t=|d)pd}(|(d*kp$|( o!t=| d+})d}*d}+d},|r |'s|"||stC||"||}-|-r|-}|-},|"H|Et?|d,d-r*d d.l"m#}.m$}/m%}0m&}1| | j'ko3|duo/|1t=|o|0t=|}2|2otQ|"|||d}3|3r,d}4t=||dd/}5d0t=|i}6n,|t=|nd}4d1|di}5|4r|4|5d<|rd|ind}6 |}7d}8d}9|7rd d2l)m*}:|.||};|/| t=||4d3}<|:|;+|<|7|5|}=|=d}8|$d4n^d}>d}? |=,d56}>n#tZ$r|=.}@|@rEd7|d8|d9}td:|d||$|d}8d}?n'd}9d}?td;|d||Yn*t$r}A|$d<|Ad}A~AwwxYw|?rnt_|>t`r9tc|>d=d}B|>d>}Cn te|>}Bt?|>d>d}C|Bst_|>t`r|>d?d@}DdA}En,|>&t?|>d?d}Dtg|>j4}EndB}DdC}Ed7|d8|dD|EdE|DdF }td:|d||$|d}8ns|Crq|ro|CdGrZ|CdHp|}FdI|FdJ|d8|dK}td |d||||8r|9s|rtk|"|||6||| LnS|9rQ|rOtm|dM|d8|dN}td |d||||8rtdO|d||d}#|,r-|+s+to||"|||,||dPQd}+|'r.|r,|+s*tq||"||||)||dPR}*ts|||||||o|+ o|* Snt#t$rg}dT|d8|dU|KtuKfdV|$Ds|$Ktd:|dKYd}~nd}~wwxYw|#stwrWdW|d8|dX}td |d||$||<|$|| |!||||Y}G t{j>|G}Hn#t~$r}I|G@tw|Ir[dW|d8|dX}td |d||$||<|$Yd}I~I v tjBCdZ[}J |JDtzj>|| |!||||Y}=|=,d\6}H|JEd]n#|JEd]wxYwn#t$r}tw|r_dW|d8|dX}td |d||$||<|$Yd}~Yd}I~I dW|d8|dU|}td |d|d^|$<|g|<|$Yd}~Yd}I~I d}~wwxYwYd}I~Inud}I~Iwt$re}dW|d8|dU|}td |d|d^|$<|g|<|$Yd}~ fd}~wwxYw|Hro|Hd?rZd_|Hd?}td |d||$<|g|<|$ td`|d||ts|||||||o|+ S |rdaF|SdS)bu Deliver job output to the configured target(s) (origin chat, specific platform, etc.). When ``adapters`` and ``loop`` are provided (gateway is running), tries to use the live adapter first — this supports E2EE rooms (e.g. Matrix) where the standalone HTTP path cannot encrypt. Falls back to standalone send if the adapter path fails or is unavailable. Returns None on success, or an error string on failure. rsr`NrukJob '%s': deliver=origin but no origin or home channels — skipping delivery (output saved in last_output)rrrz(no delivery target resolved for deliver= Job '%s': %sr)_send_to_platform)rNr TrQ wrap_responserzCronjob Response: z (job_id: z) ------------- zI To stop or manage this job, send me a new message (e.g. "stop reminder z").)rFzfailed to load gateway config: rrrzUJob '%s': origin has thread_id=%s but delivery target lost it (deliver=%s, target=%s)z*Job '%s': delivering to %s:%s thread_id=%srzunknown platform ''z platform 'z' not configured/enabledr cron_continuable_surface in_channelsupports_inchannel_continuablezOJob '%s': cron_continuable_surface=in_channel not supported on %s, using threadrrD is_runningcdSrr2r2r+r)z!_deliver_result..sdir+)DeliveryRouterDeliveryTarget_looks_like_int#looks_like_telegram_private_chat_id)direct_messages_topic_idrrrr)rrrrjz)live adapter event loop scheduling failed<rzlive adapter send to raz. timed out before the coroutine was dispatchedz(Job '%s': %s, falling back to standalonezJob '%s': live adapter send to %s:%s timed out after 60s; already dispatched (in flight), assuming delivered (skipping standalone fallback to avoid duplicate)zlive adapter send failed: r raw_responserrrzno response from adapterNonez returned unconfirmed result (z, error=)thread_fallbackrequested_thread_idzconfigured thread_id z for z+ was not found; delivered without thread_id)rz& media attachment(s) not delivered to z& (live adapter confirmation timed out)z-Job '%s': delivered to %s:%s via live adapterrr)rrr)rrrzlive adapter delivery to z failed: c3 K|]}|vV dSNr2)rDerrerr_msgs r) z"_deliver_result..s'CCc7c>CCCCCCr+z delivery to u) skipped — interpreter is shutting down)rrrrr)rrSzdelivery error: zJob '%s': delivered to %s:%s; )GrrurrTrrUrdrrrNr r rSrr extract_mediarrrrrrrrrrr; platformsrextrar:rrrgateway.deliveryrrrrTELEGRAMrrr_deliver_to_platformrKrrrrrrrr.rr#rrranyrrasynciorun RuntimeErrorcloserrrsubmitrr)LrradaptersrrZr^msgrrNr ruser_cfgrrdelivery_contentrrcleaned_delivery_contentmirror_enabledrrUconfigrdelivery_errorsrrrrrrmirror_this_targetorigin_user_idrpconfigr delivered target_errors surface_mode surface_rawin_channel_surfaceorigin_chat_type is_dm_targetinchannel_seeded thread_seededopened_thread_idrrrrris_ambiguous_telegram_topicroute_via_dm_topicroute_thread_idroute_metadatamedia_metadata text_to_send adapter_ok timed_outrrouter route_targetrrtimeout_handled cancelledex send_successsend_raw_responsershaperrrKrun_errpoolrsL @r)_deliver_resultrs(,,G 0G1L1LMM G # #4 H $ $ KKBc 2 233    4HHH~s4y#666 999999<<<<<<<< MH == VR0044_dKK       #GGFCI.. r"" g g g g g g gXa  g g g #;:::::,?,M,MN^,_,_)K)%AA+NNK 6sHEE K2,::7CC;"(b//11 $$&& 333 ^SY444  O]]z* #JJ{++ !%%+ ;//    NN*D =#'')W*E*Ev       LL<D ='9   , 0F M7I1 1  3ENI...$ x 3 3 5 566HHH%   7}777C NN>3t9c : : :  " "3 ' ' ' H   "&&x00 go F}FFFC NN>3t9c : : :  " "3 ' ' ' $>r..x88    $"=.B334NOOK&3{+;+;+A+A+C+C+I+I+K+K|+[+[+  $ $ $#LLL $)\9  '/"=g =uG G "= LL#c""M    "' vzz+66<"==CCEE'4/  AS\\%<%4I#i...t"*CI!6"B2AN;/=F!P+y!9!9DO  8==?? ! ! D<JJJJJJ+^FH==F#1>!) #G "1$( $$$L6533((*  F~%* %,,-XYYYY&* */0"*0---*C*CKK+("("("$)/ I("%TM%T%TG%T%T%T!$!'$N$'Is!"!"!"!. 4 4S 9 9 9-2 26,0 26 &%:%(I}g !"!"!" )"""*001Rb1R1RSSS! "+5< ! *+t<<_/3KOOIu4U4U/V/V 4?OON4S4S 1 1/H/U/U 4;KY]4^4^ 1#/<#-k4#@#@!3*5//'9*M*MC,2EE%0%<*1+w*M*MC,0,=,=,FEE*DC,2E%ZM%Z%ZG%Z%ZDI%Z%ZSV%Z%Z%Z!$!'$N$'Is!"!"!"!. 4 4S 9 9 9-2 1 <$- <%6$9$9:K$L$L < 7H6K6KLa6b6b6ofo 3%l%l%l%l!$!'~s4y# N N N / 6 6s ; ; ;0i0K0+'#&!)0;0{++[[([[+2[[[NN>3t9cBBB#**3///KK OQTUYQZ\ikrsss $I(- -1-,k&,jj&=&= )- *.@+E-'|$2&,jj&=&= ,,,( 0]G["+^ 2 a=7H aQaMa    [m[[g[[XY[[CCCC]CCCCC2!((111>Iw  P *++ g]ggWggg~s4y#>>>$$S)))&&}555$$XwAYen}HIIID3  T**+ + +   .g66kkkkkkCNN>3t9cBBB!((---#**=999HHHH%-@@Q@OOD2!%W[:K:KHV]_fiAMVdo;p;p;p"q"q!'r!:!: 5 1111 5 11111   2!44!o]ooWooo~s4y#FFF%,,S111'..}=== NNNNN1NNCLLTC$LOOO!((#///#**=999HHHHHHHH 21111   J]JJWJJqJJ ^SYd KKK$$cU+++&&}555   &**W-- ::: ^SY<<<$$cU+++&&}555 KK6D =RY Z Z Z ']G[#^*@=/@     *yy))) 4s+8C>> D  D F F('F( G)) H&3(H!H&!H& L**AM<;M<?AQ Q&%Q& B h*[hB ]6 h ]6]11]66Jh j Ajjl v%A8t&$ p=Ap! p=!p99p=<t&= tA$t+t&5Att&tt&& v3Avvic2ttkr[ ttt}|dkr|Sn0#t$r#t dtYnwxYwtjdd }|rQ tt|}|dkr|Sn+#t$rt d|YnwxYw tpi}t|tr| dini}| d}|$tt|}|dkr|Sn2#t$r%}t d |Yd}~nd}~wwxYwtS) zOResolve cron pre-run script timeout from module/env/config with a safe default.rz.sh.bashbashz /bin/bashNzCannot run .sh/.bash script z{: bash not found on PATH. On Windows, install Git for Windows (which ships Git Bash) or rewrite the script as Python (.py).r)_sanitize_subprocess_envwin32 creationflags)capture_outputr&rcwdenvr)redact_sensitive_textz/Failed to redact sensitive text from output: %sz[REDACTED - redaction failed]zScript exited with code zstderr: zstdout: r%zScript timed out after zs: zScript execution failed: )+rmkdirresolver expanduser is_absolute relative_torexistsis_filerrrshutilwhichr@pathisfilerr:r executabletools.environments.localr#rr subprocessrparentenvironcopystdoutrstderr agent.redactr)rSrTrU returncoder;rTimeoutExpired)r scripts_dirscripts_dir_resolvedrr3script_timeoutr_bashargvr# popen_kwargsrKr;r<r)rrtrVs r)_run_job_scriptrF}sD>#$$y0KdT222&..00 {   & & ( (C -{{}}c!**,,  -....     9$ 9 9)4 9 9     ;;==2141111 <<>>;:D::::(**N [   F !!!  V$$ 7>>+66 @KKD  =9ty999  s4yy!D *'8EEEEEEBE,RYBYBY);)=)=>>_a   "DK  (():):;;     -%2,,..-%2,,.. 5 : : : : : :**622F**622FF 5 5 5 NNLa P P P4F4FFFFFF 5   ! !C0ACCDE 3 111222 3 111222$))E*** *V|  $JJJIII4IIIIII 8887#7777777778shB55C  C $B-L I/.L / J"9JL J""A#L L L?% L?.L:4L?:L? script_outputcF|sdSd|D}|sdS|d} tj|}n#tjt f$rYdSwxYwt |tsdS|ddduS)uParse the last non-empty stdout line of a cron job's pre-check script as a wake gate. The convention (ported from nanoclaw #1232): if the last stdout line is JSON like ``{"wakeAgent": false}``, the agent is skipped entirely — no LLM run, no delivery. Any other output (non-JSON, missing flag, gate absent, or ``wakeAgent: true``) means wake the agent normally. Returns True if the agent should wake, False to skip. Tc:g|]}||Sr2r)rDrs r)rFz$_parse_wake_gate..s%RRRtTZZ\\RdRRRr+r wakeAgentF) rrjsonloadsJSONDecodeErrorrrrr)rGstripped_lines last_linegates r)_parse_wake_gaterQs tRR}'?'?'A'ARRRN tr"((**Iz)$$  * -tt dD ! !t 88K & &e 33sAA10A1 prerun_scriptc z t|dpd}|}|d}d}|d}|r5||\}}nt|\}}|r|r d|d|}d }n dSd |d|}d }|d } | rsd d lm} t | tr| g} | D]Q} | rt d| DsRtd| |d|dt|p | | z } | st| ddd } | s| d  d}d}t||kr |d|dz}|rd| d|d|}d }n#t t"f$r'}td| |Yd}~Kd}~wwxYwd}||z}||d}|r|gng}nt |tr|g}d|D}|st%||d||Sd d lm}d d!lm}d d"lm}m}g}g}|D]}||d#}|r||dt|dpdpd$}|r3|\}}}|r|d||td%|d|d||| t9j||} nu#t8jt>f$r\td&|d|d|||YswxYw| d'su| d(pd)|d*}!td+|d|d|!|| ||n-#t@$r t!d,|d -YnwxYwt| d.pd}"|r|d|"d/|d0d|"g|rEd1d2#|d3d2#|d4}#|$d |#|r|"dd5|gt%d6#||d 7S)8aBuild the effective prompt for a cron job, optionally loading one or more skills first. Args: job: The cron job dict. prerun_script: Optional ``(success, stdout)`` from a script that has already been executed by the caller (e.g. for a wake-gate check). When provided, the script is not re-executed and the cached result is used for prompt injection. When omitted, the script (if any) runs inline as before. promptrskillsFscriptNzq## Script Output The following data was collected by a pre-run script. Use it as context for your analysis. ``` z ``` TzQ## Script Error The data-collection script failed. Report this to the user. ``` context_fromr) OUTPUT_DIRc3K|]}|dvV dS)0123456789abcdefNr2)rDcs r)rz$_build_job_prompt..Ms(+[+[A1C,C+[+[+[+[+[+[r+z@context_from: skipping invalid job_id %r for job_id=%r name=%r%srrz*.mdc4|jSr)statst_mtime)fs r)rz#_build_job_prompt..\s!&&(("3r+)r+reverseutf-8encodingi@z [... output truncated ...]z## Output from job 'zo' The following is the most recent output from a preceding cron job. Use it as context for your analysis. ``` z2context_from: failed to read output for job %r: %su[IMPORTANT: You are running as a scheduled cron job. DELIVERY: Your final response will be automatically delivered to the user — do NOT use send_message or try to deliver the output yourself. Just produce your report/output as your final response and the system handles the rest. SILENT: If there is genuinely nothing new to report, respond with exactly "[SILENT]" (nothing else) to suppress delivery. Never combine [SILENT] with content — either report your findings normally, or say [SILENT] and nothing more.] skillcg|]D}t|#t|ESr2rp)rDrs r)rFz%_build_job_prompt..s=MMM3t99??;L;LM3t99??$$MMMr+ has_skillshas_injected_data user_prompt) skill_view)bump_use)build_bundle_invocation_messageresolve_bundle_command_key/)user_instructiontask_idz>Cron job '%s': bundle '%s' could not load any skills, skippingz9Cron job '%s': skill '%s' returned invalid JSON, skippingrrzFailed to load skill 'ru/Cron job '%s': skill not found, skipping — %sz-Cron job: failed to bump skill usage for '%s'rSrz&[IMPORTANT: The user has invoked the "zf" skill, indicating they want you to follow its instructions. The full skill content is loaded below.]ze[IMPORTANT: The following skill(s) were listed for this job but could not be found and were skipped: z, un. Start your response with a brief notice so the user is aware, e.g.: '⚠️ Skill(s) not found and skipped: z']zPThe user has provided the following instruction alongside the skill invocation: r%)rg)%r:rrF cron.jobsrXrrvrTrUr-r/rJglob read_textrr#OSErrorPermissionError_scan_assembled_cron_prompttools.skills_toolrjtools.skill_usagerkagent.skill_bundlesrlrmlstripr;rKrLrM TypeErrorrSrrrinsert)$rrRrirTrUrhrrrGrWrX source_job_idjob_output_dir output_files latest_output_MAX_CONTEXT_CHARSr cron_hintrC skill_namesrjrkrlrmrtskipped skill_name bundle_keybundle_payloadbundle_message_loaded_bundle_skills_missing_bundle_skillsloadedrrnotices$ r)_build_job_promptrscggh''-2..K F WWX  F ''(##K%  $%2 "G]]%4[%A%A "G]  %  *     %)!!t%  !% 77>**L+g(((((( lC ( ( *(>L)' g' gM  +[+[]+[+[+[([([ V!GGDMMGGFOO/44  g!+m!;%,,..%"''//33     $ ,Q 9 97 9 K K Q Q S S %)"}%%(:::$12E3E2E$FIi$iM $}$$!.$$" $$)-%%&_- g g gSUbdeffffffff g D F ~!!#+& FC MMMMMK  *  /#     -,,,,,******________ EG!5 5 0/ 0A0A#0F0FGG  <<!#CGGDMM/R008DN  P^M 57M%LL$$$ ^,,, NNP ..    NN: & & &  Z : 6 677FF$i0    NNVX[X_X_`fhkhohopthuhuXvXvyC D D D NN: & & & H zz)$$ JJw''Q+QJ+Q+Q+QE NNLcggV\^a^e^efj^k^kNlNlns t t t NN: & & &  e HZ  e e e LLH*_cL d d d d d efjj++1r2288::   LL    llll       N!%7!3!3 N N8uCCron job '%s': assembled prompt blocked by injection scanner — %s)tools.cronjob_toolsrrrrTrUr-) rrrgrhrirrr( scan_error job_labels r)rvrvsVRQQQQQQQ 2& 2 98CC  8* 8 8+*;77J&&y11 5GGFOOCswwt}}C  Q     )444 r+c ddlm}||d|d}nB#t$r5}|drd|jjd|d}nd}Yd}~nd}~wwxYw|rF|d }t d ||td |d |dS) u4Fail closed if a job's stored provider/base_url pair would exfiltrate a credential (F8 runtime backstop; CWE-200/CWE-522). The model-callable cron tool validates this on create/update, but a job persisted before that guard — or written directly to the jobs store — reaches the scheduler's provider-resolution sink unchecked. Re-validate the EFFECTIVE stored pair with the same guard the tool uses, so a named provider's stored key is never paired with an off-host base_url at fire time. Raises ``RuntimeError`` (caught by the run_job failure path → the run is aborted and reported) when the pair is unsafe; returns ``None`` otherwise. Fallback providers come from operator config, not the model-callable job, so they are trusted and validated by the caller, not here. r)_validate_cron_base_urlproviderbase_urlz+could not validate provider/base_url pair (: z=); refusing to run a job with an unverified base_url overrideNrudJob '%s': refusing to run — unsafe provider/base_url pair could exfiltrate a stored credential: %s Cron job 'z' blocked for safety: ) rrrrS __class__r.rTrr)rrrrVrs r)_guard_job_credential_exfilr$ s??????%%cggj&9&9377:;N;NOO  77:   2M*22.1222 C C#$ M  1 C   KKKcKKLLLMMs8; A:+A55A:defer_agent_teardownrc<|d}t|dp|dp|pd}|dr|d}|s$d}td||d d d |fS|d pd pd }d }|r\t |r;tj} tj |n#t$rd }YnwxYw t|\}} |& tj |n>#t$rYn2wxYwn-#|& tj |w#t$rYwwxYwwxYwt d } |s d|d| d| } d|d|d| d| d } d | | | fSt| s2td|d|d|d| d} d| t d fS| s2td|d|d|d| d} d| t d fSd|d|d| d| d } d| | d fSddlm}d } ddlm}|}nG#t*$r:}td|dd |Yd }~nd }~wwxYwd }|d}|rwt|}|\}}|rat|sRtd!||d|d|dt d d"} d| t d fS t/||#}nu#t0$rh}td$|||d|d|dt d d%|d& }d |d t|fcYd }~Sd }~wwxYw|&td'|dd t d fSt5|}d(|d)t d*}td+||td,|d d-d }d.tjd/<dd0lm}m}m}|d d d 1}d2}|D]} ||  d |d pd pd }|r?t |std3||d }tjd4d5}!|d u}"|"rtB"ntB# |r+|tjd4<td6||dd7l$m%}#m&}$|$|#tO8tQ|}%|%r|d9 |%d:|d; t|%d<|d= |%d>d nt|%d>|d?ptj)d@pd }&i}' dd l*}(ttOdAz })tj+,|)rt[|)dBC5}*|(.|*pi}'d d d n #1swxYwY ddDl/m0}+|+1|'}'n#t*$rYnwxYwte|'}'|'d?pi},|d?s[tg|,tr|,}&nCtg|,thr.|,dEp|,d?}-|-r|-}&n3#t*$r&}tdF||Yd }~nd }~wwxYwtg|&tr|&sBtkdG|dH|d?dItj)d@d dJ|dK  ddLl6m7}.|'dMi}/tg|/thr!|/dNr |.dOn#t*$rYnwxYwddPl6m8}0|0|'dQidRd }1d }2tg|'dQithr|'dQini}3tj)dSd p+|'dTd p|3dTd }4|4rt |49}5|5:stO|5z }5|5,r t[|5dUdBC5}6twj<|6}2d d d n #1swxYwYtg|2tzsd }2n6#t*$r)}tdV||5|d }2Yd }~nd }~wwxYw|'dQidWp|'dWpdX}7|'dYpi}8ddZl>m?}9m@}:dd[lAmB};t| d\|d]i}<|d^r|d^|td`||>t|'}?d }=|?D]}@ d\|@d]i}A|@d^r |@d^|Ad_<|@dar |@da|Adb<|9di|A}=tdc||=d]nG#t*$r:}Btdd||@d]|BYd }B~Bd }B~BwwxYw|=tk|:|>|>Yd }>~>n0d }>~>wt*$r }C|:|C}Dtk|D|Cd }C~CwwxYwg}E|depd E}F|Fr|d]pd slt|=d]pd E}G|Gr"|G|Fkr|EFdf|Fdg|Gdh|dipd E}H|Hr|d?pd sYt|&pd E}I|Ir"|I|Hkr|EFdj|Hdg|Idh|ErHdkG|E}Jtdl||J|tkdm|Jdn|dot|'pd }Kd }Lt|=d]pd E}M|Mr ddplHmI}N|N|M}O|OJr>|O}Ltdq||Mt|OLn4#t*$r'}tdr||M|Yd }~nd }~wwxYw ddslMmN}P|P}Q|Qr)tdt|t|Qn3#t*$r&}Rtdu||RYd }R~Rnd }R~RwwxYw|did?|&da|=dad^|=d^d]|=d]dv|=dvdw|=dxdy|=dzd{|7d||1d}|2d~|Kd|Ld|8dd|8dd|8dd|8dd|'dpiddt||'dt|'dddt| ddddd:dd|d|}tj)dd }S|SrE t|S}Tn6#ttf$r td|Sd}TYnwxYwd}T|Tdkr|Tnd }Ud}VtjVWd}WtjY}X|WZ|Xj[|j\|}Yd }Z |U|Y]}[nd }[ tjV^|Yh|V\}\}]|\r|Y]}[nXd}^t|dr< |`}_|_dd}^n#t*$rYnwxYw|^|Ukrd}Znn&#t*$r|Wad dwxYw|Wad dn#|Wad dwxYw|Zr"i}`t|dr& |`}`n#t*$rYnwxYw|`dd}a|`dd}b|`d}c|`dd}d|`d{d}etd||b|U|a|d|e|cpdt|dr|bdtdG|dt|bdt|Ud|atg|[ths'tkdt|[jfd|[t|[dpd }f|[dpd }g|[dduo:|[dd uo#|fgdot|g}h|[ddus|[dd ur*|hs(|[dp|gpd}itk|i|hrtd||[dd pd }j|jdkrd }j|jru|frs |h|f}kn#t*$rd }kYnwxYw|krH|j|kkrtd||fd }j|jr|jnd}ld|d|dt d d|ddd|d|ld } td|d| |jd f|r6|!d5kr!tjid4d n|!tjd4<|"rtBjntBk|||D]} ||  d |r` dG|ld dpd|}m|mdt d}n|m||nn:#t*tf$r&}td||Yd }~nd }~wwxYw |o|d¦n:#t*tf$r&}td||Yd }~nd }~wwxYw |pn:#t*tf$r&}td||Yd }~nd }~wwxYw|||F|SSt||S#t*$r}t|jfdt|}otrd||od|d|dt d d|ddd|d|odɝ } d | d |ofcYd }~|r6|!d5kr!tjid4d n|!tjd4<|"rtBjntBk|||D]} ||  d |r` dG|ld dpd|}m|mdt d}n|m||nn:#t*tf$r&}td||Yd }~nd }~wwxYw |o|d¦n:#t*tf$r&}td||Yd }~nd }~wwxYw |pn:#t*tf$r&}td||Yd }~nd }~wwxYw|||F|SSt||Sd }~wwxYw#|r6|!d5kr!tjid4d n|!tjd4<|"rtBjntBk|||D]} ||  d |r` dG|ld dpd|}m|mdt d}n|m||nn:#t*tf$r&}td||Yd }~nd }~wwxYw |o|d¦n:#t*tf$r&}td||Yd }~nd }~wwxYw |pn:#t*tf$r&}td||Yd }~nd }~wwxYw|||F|wwt||wxYw)a Execute a single cron job. ``defer_agent_teardown``: when a caller passes a list, ``run_job`` skips the agent's async-resource teardown (``agent.close()`` + ``cleanup_stale_async_clients()``) in its ``finally`` block and instead appends the live agent to that list. The caller is then responsible for calling ``_teardown_cron_agent(agent)`` AFTER it has delivered the result. This closes the ordering window in #58720 where delivery ran against a torn-down async client (defense-in-depth alongside the interpreter-shutdown guard). When ``None`` (the default) teardown happens inline as before, so every existing caller is unchanged. Returns: Tuple of (success, full_output_doc, final_response, error_message) rrrTrno_agentrVz/no_agent=True but no script is set for this jobrFrworkdirNz%Y-%m-%d %H:%M:%Su⚠ Cron watchdog 'z' script failed z Time: z # Cron Job: z **Job ID:** z **Run Time:** z8 **Mode:** no_agent (script) **Status:** script failed r%u8Job '%s' (no_agent): wakeAgent=false gate — silent runzB **Mode:** no_agent (script) **Status:** silent (wakeAgent=false) Tu0Job '%s' (no_agent): empty stdout — silent runz? **Mode:** no_agent (script) **Status:** silent (empty output) z# **Mode:** no_agent (script) --- r)AIAgent) SessionDBz0Job '%s': SQLite session store not available: %srz6Job '%s' (ID: %s): wakeAgent=false, skipping agent runu< Script gate returned `wakeAgent=false` — agent skipped. )rRu=Job '%s' (ID: %s): blocked by prompt-injection scanner — %sz **Status:** BLOCKED The assembled prompt (user prompt + loaded skill content) tripped the cron injection scanner and the agent was NOT run. **Scanner result:** a Audit the skill(s) attached to this job for prompt-injection payloads or invisible-unicode markers. If the skill is legitimate and the match is a false positive, rephrase the content to avoid the threat pattern (`tools/cronjob_tools.py::_CRON_THREAT_PATTERNS`).z6Job '%s': script produced no output, skipping AI call.cron_rUz %Y%m%d_%H%M%SzRunning job '%s' (ID: %s)z Prompt: %sd1HERMES_CRON_SESSION)set_session_varsclear_session_vars_VAR_MAP)rrr)!HERMES_CRON_AUTO_DELIVER_PLATFORM HERMES_CRON_AUTO_DELIVER_CHAT_ID"HERMES_CRON_AUTO_DELIVER_THREAD_IDuGJob '%s': configured workdir %r no longer exists — running without it TERMINAL_CWD_UNSET_zJob '%s': using workdir %s)load_hermes_dotenvreset_secret_source_cache)rrrrrrrmodel HERMES_MODELz config.yamlrarb) managed_scopedefaultz8Job '%s': failed to load config.yaml, using defaults: %srz%' has no model configured (job.model=z, HERMES_MODEL=ze, config.yaml model.default missing or empty). Set a per-job model via `cronjob action=update job_id=z; model=` or set a default with `hermes model `.)apply_ipv4_preferencenetwork force_ipv4)force)parse_reasoning_effortr8reasoning_effortHERMES_PREFILL_MESSAGES_FILEprefill_messages_filerz8Job '%s': failed to parse prefill messages file '%s': %s max_turnsZprovider_routing)resolve_runtime_providerformat_runtime_provider_error) AuthError requestedrrexplicit_base_urlz3Job '%s': primary auth failed (%s), trying fallbackapi_keyexplicit_api_keyz!Job '%s': fallback resolved to %sz Job '%s': fallback %s failed: %sprovider_snapshotz provider 'z' -> 'rmodel_snapshotzmodel 'ruJob '%s': SKIPPED — global inference config drifted since creation (%s) and this job is unpinned. Skipped to prevent unintended spend. Pin explicitly to proceed: `cronjob action=update job_id=%s provider=

model=`.zaSkipped to prevent unintended spend: global inference config drifted since this job was created (z), and this job is unpinned. No inference call was made. To run on the new config, pin it explicitly: `cronjob action=update job_id=zZ provider= model=` (or pin the original values to keep them). See #44585.) load_poolz@Job '%s': loaded credential pool for provider %s with %d entriesz3Job '%s': failed to load credential pool for %s: %s)discover_mcp_toolsz"Job '%s': %d MCP tool(s) availablez3Job '%s': MCP initialization failed (non-fatal): %sapi_mode acp_commandcommandacp_argsargsmax_iterationsreasoning_configprefill_messagesfallback_modelcredential_poolproviders_allowedonlyproviders_ignoredignoreproviders_orderorder provider_sortsortopenrouter_min_coding_score openroutermin_coding_scorerOr9 quiet_modeskip_context_filesload_soul_identity skip_memoryrQ session_id session_dbHERMES_CRON_TIMEOUTz2Invalid HERMES_CRON_TIMEOUT=%r; using default 600sg@g@rrrgget_activity_summaryseconds_since_activityrlast_activity_descr current_toolapi_call_countz_Job '%s' idle for %.0fs (inactivity limit %.0fs) | last_activity=%s | iteration=%s/%s | tool=%snone interruptzCron job timed out (inactivity)z ' idle for z s (limit us) — last activity: z agent.run_conversation returned z instead of dict: turn_exit_reasonfinal_responsefailed completedzmax_iterations_reached(rzagent reported failurezJob '%s' reached the iteration limit but produced a final fallback response; delivering the response instead of failing the cron runz(No response generated)uNJob '%s': abnormal empty turn (%s) — suppressing explainer for cron deliveryz **Schedule:** schedule_displayzN/Az ## Prompt z ## Response zJob '%s' completed successfullyrrzcron u · z %b %d %H:%Mz.Job '%s': failed to set cron session title: %s cron_completez#Job '%s': failed to end session: %sz2Job '%s': failed to close SQLite session store: %srzJob '%s' failed: %sz (FAILED) **Job ID:** z ## Error ``` z ``` r2)sr:rrTrrris_dirr@getcwdchdirrtrF _hermes_nowstrftimerQr SILENT_MARKER run_agentr hermes_staterrSrrr-rUrr9gateway.session_contextrrrrI_terminal_cwd_lockrrhermes_cli.env_loaderrrrrrAyamlr3r/open safe_load hermes_clirapply_managed_overlayr rrrhermes_constantsrrr,r-rKloadrRhermes_cli.runtime_providerrrhermes_cli.authrrr rr;ragent.credential_poolrhas_credentialsr#entriestools.mcp_toolrrWr?rrrr{rrr contextvars copy_contextrrrun_conversationrKrrrrrrrrr.r#_format_turn_completion_explanationpoprrrset_session_titleKeyboardInterrupt end_sessionr_teardown_cron_agent exception)prrrr%rr _job_workdir _prior_cwdroutputnow_isoalertdoc silent_docr _session_dbrrrR_ran_ok_script_outputrT block_exc blocked_docr_cron_session_idr8rrr _ctx_tokens_cron_delivery_vars _var_name_prior_terminal_cwd_holds_cwd_writerrdelivery_targetr_cfgr _cfg_path_fr _model_cfg_defaultr_net_cfgrrrr= prefill_filepfpath_pfrprrrrruntime_kwargsruntimeauth_excfb_listr6 fb_kwargsfb_excrVmessage_drift_provider_snapshot_current_provider_model_snapshot_current_model_changesrrruntime_providerrr r _mcp_tools_mcp_exc_raw_cron_timeout _cron_timeout_cron_inactivity_limit_POLL_INTERVAL _cron_pool _cron_context _cron_future_inactivity_timeoutrKdonerU _idle_secs_act _activity _last_desc _secs_ago _cur_tool_iter_n _iter_maxrfinal_response_textmax_iteration_summary _err_textr_explainer_textlogged_response _title_base _cron_title error_msgsp r)run_jobr^R s&&YF3776??Ocggh&7&7O6OZPPH( wwzS'ggh''  &CC LL 5 5 5"b#% %  **0b7799AT   "D..5577 "J "&&&& " " "!  " (55JB%HZ((((D&z%HZ((((D& --(()<== - #h#### ##  x%!(   #uf, , '' 9 KKJF   :x::%::!(::: ]D8 8||~~ 9 KKJF S S S7x77%77!(777 ]D8 8 8  !  $        S&$&&"!!!!!K`******ikk ``` GQUWZI[I[]^________`M''(##K9' 44 "/  9+N;; 9 KKH&    NxNN%NN!,!7!78K!L!LNNN  ]D8 86"3mDDD %666  K fi   T8 T T! T T(]]334GHH T T $- T T T k2s9~~5555555-6.~ LhWWWR,, S ! !FQvQQ (>(>(O(OQQ KK+Xv>>> KK fTcTl+++ E ),BJ$%WVVVVVVVVV.#"K  )$$ ####$GGI&&,"3355=LD..5577  U L    *..CC#4/*((****'')))h0  L)5BJ~ & KK4fl K K K         "!###'7'9'9::::2377   8 9 = =oj>Y Z Z Z 7 8 < >"&&{33;566     CBIn$=$=C b KKK,..>??Iw~~i(( -)g6664">>"--3D444444444444444 888888(>>tDDDD D'--"XXg..4" www''-!*c22- *#J55-$.>>)#<#<#W w@W@W#-$,E b b b NNUW]_` a a a a a a a a b 5#&& 5;;== 6X66!ggg..66 " ." = =66 28 666   > > > > > >xx 2..H(D)) 2hll<.H.H 2%%D1111    D  <;;;;;11 HHWb ! ! % %&8" = =   -7"8M8Mt-T-T\DHHWb)))Z\ I4b 9 9 :xx/44 :}}4b99   ,,''2244F%%'' 5)++f4}} ,,fcG<<<:+/9S>>(:::::::::::::::%&6==0+/( ,,,NN#]_egmopqqq'+$$$$$$, '2..22;??^488KCXCX^\^XX( ) ) /R         .----- $C(((! 1SWWZ00Nwwz"" J69ggj6I6I23..@@@@GG Z Z Z NNPRXZb c c c(..GG l l l!,eii .C.C DIyy,,K9>z9J "56yy++I8=i8H "4566CCCCGKK CVW[[YcMdMdeeeE lllLL!CVUYYWaMbMbdjkkkkkkkkl"#@#@#J#JKKQYY 1 1 133C88Gw''S 0 1.!gg&9::@bGGIIOOQQ  swwz':':'@b&G&G&I&I  #GKK $;$;$Ar B B H H J J P P R R   %6:L%L%L O!3OO;LOOO77#344:AACCIIKK  CGGG$4$4$:#A#A#C#C  "--3355;;==N .O"C"C FoFF^FFF  yy((H NNL   J7?JJ! JJJ ,D119Tw{{:66<"==CCEEKKMM  q q;;;;;; y!122''))&*OKKZ(DLLNN++   q q q RTZ\lnopppppppp q  9 9 9 9 9 9++--J  8C OO    NNE             % KK *** [[,,, [[,,,  [[,,,   I...  [[((( *> .- .- *> ,O !ffVnnn !ffX... FF7OOO &&...! "*.,)?)?)E2(J(JK](^(^(^# $dCCC' (t) 2$( #5#5553 4 $t5 67 8V9 :('; <#{= RI&;R@@FFHH  " & %&7 8 8  * & & &H%!&  &"M2?!2C2C'::q:II $022 !(():EBBI! n55Imm$4a88G! &6::I LLA)%;GY#V    uk** C ABBB3X33y>>33,/0F,G,G33&033 &$'' f4<<3Hff\bff vzz*<==CDD%zz*:;;ArHHJJ JJx  , * ;''50 * ++,EFF *())  ::h  4 ' 'FJJ{,C,Cu,L,LUj,L 7##,&,+  y)) )   NNJ     $4b99?R    ! !%> > >N    ! ! $&6 $ %")"M"MN^"_"_ % % %"$ % $>#7#7#9#9_=R=R=T=T#T#T d$ "$-;Y..@Y (     }}%%&9::  ww)511         5x@@@V^T18  A"i// ~t4444-@ >*  .  , , . . . .  + + - - -;''', ( (I Y  # #B ' ' ' '  ^ Z!hhx~~'7'788"=CCEEYIYQWIYIY !,YY+--2H2H2W2WYY --.> LLLL01 Z Z Z MvWXYYYYYYYY Z O''(8/JJJJ01 O O O BFANNNNNNNN O ^!!####01 ^ ^ ^ QSY[\]]]]]]]] ^ + $++E2222! ! / / / /U ,,,Aww'333q6633 .)DDD( }}%%&9::ww)511   fb)++++++  A"i// ~t4444-@ >*  .  , , . . . .  + + - - -;''', ( (I Y  # #B ' ' ' '  ^ Z!hhx~~'7'788"=CCEEYIYQWIYIY !,YY+--2H2H2W2WYY --.> LLLL01 Z Z Z MvWXYYYYYYYY Z O''(8/JJJJ01 O O O BFANNNNNNNN O ^!!####01 ^ ^ ^ QSY[\]]]]]]]] ^ + $++E2222! ! / / / /U,4  A"i// ~t4444-@ >*  .  , , . . . .  + + - - -;''', ( (I Y  # #B ' ' ' '  ^ Z!hhx~~'7'788"=CCEEYIYQWIYIY !,YY+--2H2H2W2WYY --.> LLLL01 Z Z Z MvWXYYYYYYYY Z O''(8/JJJJ01 O O O BFANNNNNNNN O ^!!####01 ^ ^ ^ QSY[\]]]]]]]] ^ + $++E2222! ! / / / /s9D DD!E6E EEF E54F5 F?FFF1J K 0KKM,, O6AOOOD)Ad9A_? \0$ _?0\44_?7\48_?<]_? ]%"_?$]%%B_?>Ad? `/ `*%Ad*`//A.AdAc10Ad1 c>;Ad=c>>DAdi1-i i1ii1ii10Ad1 j$;jAdj$$A7AdA m*(Ad*s01r"Bp20r2 q6<0q1,r1q66rAd s&ssH=AdA#}('Ad( ~2~Ad~Ad;Ad A@ #A@?Ad@A@ @ FAdFAF)F(AdF).AGGAdGAGGA'AdIA(AK1J+*AKKAK1K AK#K AK1K"AK#K# AK1K0AL/K1#ALLAL/LAdL/AMMAdM!AM6M5AdM6 ANNAdNANNJAdX AXXAdX AX.X+AdX-AX.X.B;Ad^BA``A`?`A`:`:A`?aAaaAba+Ab b AbbAb*b*Ac!b;AccAc!d AodBAof*Aof+Aoi BAkkAlkAllAll Al l Aml1AmmAmmAm0m0An'nAn"n"An'oAooAooBAxq;BAs>s=Axs>At5tAt0t+Axt0At5t5Axt9AuuAxuAvu!Avu=AxvAvvAxv Av vAxv Awv1Aww AxwAww/Axc4 ||n:#ttf$r&}td||Yd}~nd}~wwxYw ddlm}|dS#t$r'}td||Yd}~dSd}~wwxYw)uRelease an ephemeral cron agent's async resources. Split out of ``run_job``'s ``finally`` so a caller that defers teardown (to deliver first — #58720) can invoke the identical cleanup AFTER delivery. Closes the agent (subprocesses, sandboxes, browser daemons, OpenAI/httpx client) and reaps stale async clients whose loop has since closed. Idempotent and independently guarded, matching the original inline behavior. Nz-Job '%s': failed to close agent resources: %sr)cleanup_stale_async_clientsz4Job '%s': failed to reap stale auxiliary clients: %s)rrSrrTragent.auxiliary_clientr`)r8rrr`s r)rr sQ   KKMMM ( )QQQ DfaPPPPPPPPQ XFFFFFF##%%%%% XXX KVUVWWWWWWWWWXs,AA  AA&& B0BBrrverbosercc\ t|ds7td|d|ddSddlm}m}m}||t}g} t||\} } } } n*#t$r|D]} t| |dwxYw ||n#||wxYwd} t|d| }|rtd || r| nt|| }t|}|r:| r8t!|r)td |dt"d }|r] t%|||| }nH#t&$r;}t)|}td |d|Yd}~nd}~wwxYw|D]} t| |dn #|D]} t| |dwxYw| r| sd } d} t-|d| | |dS#t&$rQ}td|d|t-|dd t)|Yd}~d Sd}~wwxYw)uRun ONE due job end-to-end: execute → save output → deliver → mark. This is the shared firing body extracted from ``tick``'s per-job closure so that BOTH the built-in ticker and an external provider's ``fire_due`` (e.g. Chronos) run the identical sequence — no duplicated correctness. It does NOT decide whether the job is due, claim it, or compute the next run — those are the caller's concern (``tick`` advances ``next_run_at`` under the file lock before dispatch; an external provider claims via the store CAS). This function only fires the given job once. Returns True if the job was processed (even if the job itself failed — failure is recorded via ``mark_job_run``), False only if processing raised. ru6Job '%s': one-shot dispatch limit reached — skippingrTr)build_profile_secret_scopereset_secret_scopeset_secret_scoperNzOutput saved to: %su1Job '%s': agent returned %s — skipping deliveryF)rrzDelivery failed for job %s: %szWAgent completed but produced empty response (model error, timeout, or misconfiguration))delivery_errorzError processing job %s: %s)rrTrragent.secret_scopererfrgrr^ BaseExceptionrrr*rrrrrrSr:rr~)rrrrcrerfrg _scope_token_deferred_agentsrrrr_deferred_agentrh output_filedeliver_contentshould_deliverders r) run_one_jobrr soc$i((  KKHD **   4          (' & &'7'9'9 : :  "$ -5<*:666 2GV^UU    $4 A A$_c$i@@@@  .3  | , , , ,  | , , , ," A)#d)V<//11 nGmESY~NNNNt  2CIqAAASYs1vv...uuuuusA I,I;BC 'B99C = I CIB&G;FG; G!1GG;GG;I;H6I J+AJ&&J+c ddlm}|dS#t$r&}td|Yd}~dSd}~wwxYw)u@Best-effort: tell the active scheduler provider the job set changed. Called by the consumer surfaces (model tool / CLI / REST) AFTER a successful store mutation (create/update/remove/pause/resume) so an external provider (Chronos) can re-provision/cancel the affected one-shot via NAS. No-op for the built-in (it re-reads jobs.json each tick), so the default path is unchanged. Lives here (not in cron/jobs.py) to keep the store free of provider imports — avoids an import cycle and keeps jobs.py low-coupling. Never raises into the caller. r)resolve_cron_schedulerz!on_jobs_changed notify failed: %sN)cron.scheduler_providerrton_jobs_changedrSrTr)rtrs r)_notify_provider_jobs_changedrw5 s=BBBBBB  0022222 === 8!<<<<<<<<<=s"& AAATsyncct\}}|ddd} t|dd}tr-tj|tjtjzn9tr2tj| tj dnH#ttf$r4td||Yd SwxYw t!}r|std t%d  tr8 tj|tjni#ttf$rYnVwxYwtrK tj| tjdn#ttf$rYnwxYw|d SrHtd t%d t-||D]}t/|d d} t1jdd} | rt7| pd} n1#t8t:f$rtdYnwxYw| u t?pi} tA| tBr| "dini"d} | t7| pd} n#tF$rYnwxYwr-tdt-|| r| nddtBdtHffd d|D} d|D}g}g}dtBdtJj&j'ffd }| rNtQ}| D]=}|||}||)||s|)d>|rOtU| }|D]=}|||}||)||s|)d>d!d|rOtJj&+|D]q} |)|,+#tF$r:}t-d||)dYd}~jd}~wwxYwt]|tr8 tj|tjni#ttf$rYnVwxYwtrK tj| tjdn#ttf$rYnwxYw|S|rEt-|gdtJj&j/ddffd }|D]}|0|n t]|tr8 tj|tjni#ttf$rYnVwxYwtrK tj| tjdn#ttf$rYnwxYw|S#tr8 tj|tjni#ttf$rYnVwxYwtrK tj| tjdn#ttf$rYnwxYw|wxYw)"u Check and run all due jobs. Uses a file lock so only one tick runs at a time, even if the gateway's in-process ticker and a standalone daemon or manual tick overlap. Args: verbose: Whether to print status messages adapters: Optional dict mapping Platform → live adapter (from gateway) loop: Optional asyncio event loop (from gateway) for live adapter sends Returns: Number of jobs executed (0 if another tick is already running) TrNwrarbru0Tick skipped — another instance holds the lockrz%s - No jobs duez%H:%M:%Sz%s - %s job(s) duerHERMES_CRON_MAX_PARALLELrz?Invalid HERMES_CRON_MAX_PARALLEL value; defaulting to unboundedrQmax_parallel_jobsz.Running %d job(s) in parallel (max_workers=%s) unboundedrrc*t|S)uRun one due job end-to-end. Thin wrapper around the shared module-level ``run_one_job`` so ``tick`` and external providers (Chronos ``fire_due``) use the identical execute→save→deliver→mark body.rb)rr)rrrrcs r) _process_jobztick.._process_job s sXD'RRR Rr+cdg|]-}|dpd+|.SrrrrrDjs r)rFztick.. s:SSS1553C3C3Ir2P2P2R2RS1SSSr+cdg|]-}|dpd+|.Srrrs r)rFztick.. s:UUUqQUU95E5E5K4R4R4T4TUUUUr+r c|d}tr1td|d|dSt5|t vr=td|d| ddddSt |dddn #1swxYwYtj }||ffd } | |S#t$r}t|rnt5t |dddn #1swxYwYtd|d|Yd}~dSd}~wwxYw)a'Submit a job fire-and-forget with the in-flight dedup guard. Returns the future, or None if the job was skipped because a prior tick's run of the same job is still in flight. The running-set membership is released in the worker's finally block. ru8Job '%s' not dispatched — interpreter is shutting downrNu%Job '%s' already running — skippingc8 ||t5t|ddddS#1swxYwYS#t5t|ddddw#1swxYwYwxYw)Nr)r _running_lockrdiscard)rctxrs r)_run_and_releasez:tick.._submit_with_guard.._run_and_release s :77<33&::(004999::::::::::::::::::(004999::::::::::::::::s@A!A  A A B !B  B B BB B) rrTrUrrrrrrrrrr)rr r_ctxr submit_errrs r)_submit_with_guardz tick.._submit_with_guard sCYF *++ NGGFF++t - ----KK GQWY_I`I`aaa - - - - - - - -!$$V,,,  - - - - - - - - - - - - - - - +--D#&D : : : : : : {{#3444   .j99 &99(00888999999999999999NNR// 44444 sZ:B=B==CC$C99 FFE4 FE FE 2FFFc ddlm}|dS#t$r&}td|Yd}~dSd}~wwxYw)Nr)_kill_orphaned_mcp_childrenz'Post-tick MCP orphan cleanup failed: %s)r rrSrTr)r_es r)_sweep_mcp_orphansz tick.._sweep_mcp_orphans sy LFFFFFF++----- L L L FKKKKKKKKK Ls A?AzCron job future failed: %sFr-c dxxdzcc< |}|2td|t|||jfn#t $rYnwxYwddkr dSdS)Nrrz(Cron job future failed in async mode: %srS)rrTrr __traceback__rS)r-_exc _remainingrs r)_on_doneztick.._on_dones1 " <<>>D' %OQUaefjakakmqswtFaG HHH Da=A%%&&(((((&%sAA A)(A)r)1rr*rfcntlflockLOCK_EXLOCK_NBmsvcrtlockingfilenoLK_NBLCKrtIOErrorrTrrr}rrrLOCK_UNLK_UNLCKr#rr@rArrrr{rUr rrrrSrrrrrr;r as_completedrKrsumFutureadd_done_callback)rcrrrxr lock_filelock_fddue_jobsr _max_workers_env_par_ucfg_cfg_parsequential_jobs parallel_jobs_results _all_futuresrseq_poolfutr r_rVrr-rrrs``` @@@r)tickrG s*++Hi NN4$N///G y#888  A K!> ? ? ? ?  A N7>>++V_a @ @ @ W  GHHH   MMOOOqq  J>>  8  KK*KMM,B,B:,N,N O O Ov    GU]3333W%       w~~//!DDDDW%     G  a KK,kmm.D.DZ.P.PRUV^R_R_ ` ` ` ( (C SY ' ' ' ''+  ^y!;R@@FFHHH 5"8}}4 I& ^ ^ ^ NN\ ] ] ] ] ] ^   # +-7t-D-DLEIIfb)))"#)**'#&x==#8DL       KK@H ,= +     Sd St S S S S S S S STShSSSUUHUUU  . D.  0B0U. . . . . . l  *+--H& * *((h77;##C(((*OOD)))  *%l33D$ * *((d33;##C(((*OOD))) L L L L  ! '44\BB + ++OOAHHJJ//// +++LL!=sCCCOOE********+   x==6    GU]3333W%       w~~//!DDDDW%     A  !l++,J )Z/6 )4 ) ) ) ) ) ) )# / /$$X.... /   8}}    GU]3333W%       w~~//!DDDDW%         GU]3333W%       w~~//!DDDDW%     sVA?B22AC76C7;A Z4E00FF2GGG/A&Z4:JZ4+J?<Z4>J??Z4A#L)(Z4) L63Z45L66E Z4'R*)Z4* S.40S)$Z4)S..Z4T11UU2VVV/AZ4X66Y  Y 2ZZZ4]=[][1.]0[11 ]<2\/.]/]]]]__main__)rcrr)NN)TNNT)r1ratexitconcurrent.futuresrrrKloggingr@r r1r7rrr ImportErrorrrrtypingrrrr3r|r:__file__r8rrhermes_cli._subprocess_compatr hermes_cli.configr r hermes_cli.fallback_configr hermes_timer r getLoggerr.rTrr*rSr-rRr?rMrW frozensetr9r<rBrqr}r~rrrrrrrrrr__annotations__rrrIrrrrrrrrrregisterrjrrrrrrrrrrrrrr-r7r:r>rDrIrLr]rmruryr|rrrrrrrrrrrrFrQrrvrr^rrrrwrr2r+r)rs     LLLL E   &&&&&&&&&& 33ttH~~,344555,,,,,,<<<<<<;;;;;;;;999999******  8 $ $29d293:29#29292929j        $s).d3idtCy>4DI?FFF,0HSM000#   EI(:-@AHHH0$0$0$0$0$0$0$0$j$^%% HSM j6H6[    j0C"     '(((H]$;tB! dTk  -$ - - - --tTz*----(4.,t(4.D@4c&.sm8<L $! C C C C C C C  C } C c] C C  C C C C L" "" c] """"X $J J J J  J  J  J }J  J J J J l $]]] ]] ]  ] ]c]]}] ]]]]@4T4c44440& ,s ,t , , , , & & & & & & C C    chsm4   $&tDz&&&&RSScShtnSSSSl0)UG$$c$4DJB+$+8D>++++iIIIJJ iBBBCC 5g5g 5g5gTk 5g  5g 5g5g5g5gp1d1111*55 5 5  5  5555pxxxx(SV-xxxxv)#S####By8y8tSy)9y8y8y8y8x4C4D44444HOHO4HOHO3HOHOHOHO^#!% CCCC C C  C # C CCCCL+MT+Md+M+M+M+M^:>F 0F 0F 0 F 0(0F 0 4c8C= ()F 0F 0F 0F 0RXXXXXX2(,$~~~T~~RV~~~~B====$jj$jtjsjjjjZ zDs3:AAAAAAAA