(Gjn-dZddlZddlZddlZddlZddlmZddlmZm Z m Z m Z m Z ddl mZejeZejdeeejjddlmZmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#dudZ$gd Z%gd Z&d Z'd e'd fde'dfde'dfde'dfde'ddfgZ(ddl)m*Z+dZ,dZ-de.de/fdZ0dede.de/fdZ1dedefd Z2dedefd!Z3dedefd"Z4dede5ee6effd#Z7dedefd$Z8d%ede5eeffd&Z9de e eeffd'Z:d(e eefd)e ede efd*Z;d(e eefdefd+Zd1d2d3e ed4e/de efd5Z?d3ede efd6Z@d7e ed8e ede efd9ZAd:e ede efd;ZBd(e eefde eeffd<ZCd(e eefde eeffd=ZD dwd>ed?e ede ed@e edAe edBe e.dCe edDe/d,e ed-e e edEe ed7e ed8e edFe ed:e edGe e ee efdHe e edIe edJe e/dKe e/dLedef,dMZEdNdOdPdQdRdSdQdTdSdQdUdSdQdVdSdQdWdSdXdYdSdQdZdSd[d\dQid]d^dPd_dQd`dSdQdadSdbdEgdcdQddededSdfd1dgdhd[d\dQidid^d[d\dQidjd^dQdkdSdfdldSdmd>gdndoZFde/fdpZGddqlHmIZImJZJeIjKdNdNeFdreGdstdS)xz Cron job management tools for Hermes Agent. Expose a single compressed action-oriented tool to avoid schema/context bloat. Compatibility wrappers remain for direct Python callers and legacy tests. N)Path)AnyDictListOptionalUnion)display_hermes_home) AmbiguousJobReferenceclaim_job_for_fire create_jobget_job list_jobs mark_job_runparse_schedule pause_job remove_jobresolve_job_ref resume_job update_jobreturncJ ddlm}|dS#t$rYdSwxYw)uTell the active cron scheduler provider the job set changed (no-op for the built-in). Best-effort — never lets a provider error break the tool.r_notify_provider_jobs_changedN)cron.schedulerr Exceptionrs 9/home/rurouni/.hermes/hermes-agent/tools/cronjob_tools.py"_notify_provider_jobs_changed_safer&sP @@@@@@%%'''''      s  "")zJignore\s+(?:\w+\s+)*(?:previous|all|above|prior)\s+(?:\w+\s+)*instructionsprompt_injectionzdo\s+not\s+tell\s+the\s+userdeception_hidezsystem\s+prompt\s+overridesys_prompt_overridezK|]\}}|cxko|kncVdS)N).0lohir2s r z_is_emoji_cp..s;GG&"brR~~~~2~~~~GGGGGG)any_EMOJI_NEIGHBOUR_CP_RANGES)r2s`r _is_emoji_cpr=s' GGGG,FGGG G GGr:textidxc8|dz }|dkrGt||tkr)|dz}|dkrt||tk)|dz}|t|krTt||tkr6|dz }|t|krt||tk6|dkoV|t|koCtt||o!tt||S)zGReturn True when the ZWJ at text[idx] appears inside an emoji sequence.r)ord_VARIATION_SELECTOR_CPlenr=)r>r?leftrights r_zwj_has_emoji_neighbourrGs  7D !))DJ+AAA   !))DJ+AAA !GE #d))  DK 0 04J J J   #d))  DK 0 04J J J   +ec$ii' + T$Z ) ) + T%[)) * *r:promptcd|vr|Sg}t|D]1\}}|dkrt||r||2d|S)N‍) enumeraterGappendjoin)rHcleanedr?chs r_strip_legitimate_emoji_zwjrQstv GV$$R >>6vsCC> r 777  r:ctjdtd|tj}|r)||ddS|S)aStrip the GitHub `Authorization: token $GITHUB_TOKEN` auth-header pattern so it doesn't trip the broader curl-auth-header exfil rule. Allows the bundled GitHub skill fallback without opening a blanket exemption for arbitrary Authorization-header exfiltration. z=curl\s+[^\n]*(?:-H|--header)\s+["\']Authorization:\s*token\s+z.["\']\s+["\']?https://api\.github\.com(?:/|\b)rz curl https://api.github.com/user)research_CRON_SECRET_VAR_RE IGNORECASEreplacegroup)rHgithub_auth_headers r_strip_cron_safe_constructsrZsi 5I\ 5 5 5  _~~066q99;]^^^ Mr:clt|}tD]}||vrdt|ddcSdS)zReturn an error string if the prompt contains invisible-unicode injection markers (ZWJ inside legitimate emoji sequences is allowed). z-Blocked: prompt contains invisible unicode U+04Xz (possible injection).rK)rQ_CRON_INVISIBLE_CHARSrB)rHprompt_for_invisible_scanchars r_check_invisible_unicoder`sY!Strip invisible-unicode characters from *prompt*, preserving the ZWJ that lives inside legitimate emoji sequences. Returns ``(cleaned_prompt, removed_codepoints)`` where ``removed_codepoints`` is the sorted list of ``U+XXXX`` labels that were stripped (empty when the prompt was already clean). Used by the skills-attached cron path, where the skill body is already vetted at install time by ``skills_guard.py`` — a stray zero-width space in a code example should be sanitized, not turned into a hard block that permanently kills the job. rJzU+r\rK) setrLr]rGrMaddrBrNsorted)rHremovedrOr?rPs r_strip_invisible_unicoderfs rzGGV$$R & & &X~~":63"G"G~r""" KK*SWW*** + + + r 777  VG__ ,,r:ct|}t|}|r|StD]-\}}tj||tjrd|dcS.t D]-\}}tj||tjrd|dcS.dS)u}Scan the USER-SUPPLIED cron prompt for critical threats. Strict pattern set — used at job create/update time and as a runtime defense-in-depth for prompts authored before the scanner existed. The user prompt is small and directive; bare `cat .env` or `rm -rf /` there is a smoking gun, not prose. Returns an error string when blocked, else empty string. (Blocked: prompt matches threat pattern 'D'. Cron prompts must not contain injection or exfiltration payloads.rK)rZr`_CRON_THREAT_PATTERNSrSrTrV_CRON_EXFIL_COMMAND_PATTERNS)rHprompt_to_scan invisible_errpatternpids r_scan_cron_promptrps188N,^<>N > #O$>??G4   LL=?N    (%()CDDL" ''?@@HD    4r:job user_deliverc|pddkrdS ddlm}||rdSn(#t$r|drYdSYnwxYw dS)uUReturn an informational notice when a created job won't deliver anywhere. TUI/CLI sessions cannot be captured as a cron ``origin`` (no ``HERMES_SESSION_PLATFORM``/``CHAT_ID`` is set for them), so a ``deliver="origin"`` request — or an omitted ``deliver`` that defaults to origin-or-local — produces a job that runs and saves output to ``last_output`` but is never delivered back into the session. This is by design (there is no live-delivery channel for local sessions), but silently dropping the user's "tell me when it runs" intent is the trap reported in #51568. Surface it at create time so the agent can relay it instead of promising a delivery that never happens. Returns ``None`` when the user explicitly asked for ``local`` (no surprise), or when the job resolves to a real delivery target. rKlocalNr)_resolve_delivery_targetsoriginuQThis is a local-only cron job: its output is saved (view it with cronjob(action='list')) but will NOT be delivered back into this session — CLI/TUI sessions have no live-delivery channel. To be notified when it runs, recreate or update the job with deliver set to a gateway-connected platform, e.g. deliver='telegram' or deliver='all'.)striplowerrrrget)rrrs r_local_delivery_noticer7s" !!##))++w66t<<<<<< $ $S ) ) 4   778   44    RsAA)(A)c|dpid}|dpidd}|dS|dkr |dkrdndS|r|d |n|d S) Nrepeattimes completedrforeverrAoncez1/1/z timesr)rrrs r_repeat_displayr\s WWX   $" ) )' 2 2E""(b--k1==I }y zz"avvU2%. Di ! !% ! ! !u4D4D4DDr:skillskillsc||r|gng}n(t|tr|g}nt|}g}|D]@}t|pd}|r||vr||A|S)NrK) isinstancestrlistrrM)rr raw_items normalizeditemr>s r_canonical_skillsrfs ~$,UGG" FC !H LL J$$4:2$$&&  $D **   d # # # r: model_objc|rt|tsdS|dpdpd}|dpdpd}|dkr' ddlm}|dsd}n#t $rd}YnwxYw|rf|sd dd lm}|}|di}t|tr|dpd}n#t $rYnwxYw||fS) a%Resolve a model override object into (provider, model) for job storage. If provider is omitted, pins the current main provider from config so the job doesn't drift when the user later changes their default via hermes model. Returns (provider_str_or_none, model_str_or_none). NNmodelrKNprovidercustomr)has_named_custom_provider) load_config) rdictrrhermes_cli.runtime_providerrrhermes_cli.configr)r model_name provider_namerrcfg model_cfgs r_resolve_model_overriderxsj Jy$77|--((.B5577?4J]]:..4";;==EM   ! M M M M M M,,X66 % $  ! ! ! MMM ! -   5 5 5 5 5 5+--C,,I)T** B ) j 9 9 AT     D  : &&s%7B BB"AC55 DDFstrip_trailing_slashvaluerc|dSt|}|r|d}|pdS)Nr)rrrstrip)rrr>s r_normalize_optional_job_valuersF }t u::    D {{3 <4r:c|dSt|ttfr%d|D}|rd|ndSt |}|pdS)uNormalize a user-supplied ``deliver`` value to the canonical string form. The cron schema documents ``deliver`` as a string (``"local"``, ``"origin"``, ``"telegram"``, ``"telegram:chat_id[:thread_id]"``, or comma-separated combos). Some callers — MCP clients passing arrays, scripts building the payload as a list — supply ``["telegram"]``. ``create_job``/``update_job`` store it as-is, and the scheduler's ``str(deliver).split(",")`` then serializes the list to the literal ``"['telegram']"`` which is not a known platform. Flatten lists / tuples at the API boundary so storage is always a string. Returns ``None`` for ``None``/empty so callers can treat it as "not supplied". Ncg|]D}t|#t|ESr5rr)r6ps r z,_normalize_deliver_param..s9AAAA#a&&,,..AQAAAr:,)rrtuplerNrr)rpartsr>s r_normalize_deliver_paramrsq }t%$''2AAAAA"'1sxxT1 u::    D <4r:rbase_urlct|d}|sdSt|}|s dS ddlm}m}m}ddlm}ddlm}m } n#t$r d |d cYSwxYw| d krdS||rb ||} n#t$rd} YnwxYw| r!| | pi d d nd } | r||| rdSd|d|d| pddS ||} n#t$r|} YnwxYwt| tr| | nd} | | rt| dd nd }|r|||rdSd|d|dS)aReject pairing a named provider's stored credential with an off-host base_url. The cron tool is model-callable, so a prompt-injected job could set a real provider plus an attacker ``base_url``; on fire the scheduler resolves that provider's stored API key and sends it to the URL, exfiltrating the credential (CWE-200/CWE-522). Allow a ``base_url`` override only when it cannot leak a stored secret: no override at all, a configured custom/byok provider that carries its own endpoint+key, or an override whose host matches the named provider's own endpoint. Returns an error string if blocked, else None (valid). TrNzwbase_url override requires an explicit provider. Set provider to a configured custom provider to use a custom endpoint.r)rresolve_requested_provider_get_named_custom_provider)PROVIDER_REGISTRY)base_url_host_matchesbase_url_hostnamez2Unable to validate base_url override for provider z ; refused.rrrKz base_url z is not allowed for provider z_. A named custom provider's stored credential may only be sent to its own configured endpoint (unknownz).inference_base_urlz. A named provider's stored credential may only be sent to its own endpoint; use a configured custom provider (provider="custom") for a custom base_url.)rrrrrhermes_cli.authrutilsrrrrrrrgetattr)rrbuprovrrrrrrr2cfg_hostresolvedpconfig known_hosts r_validate_cron_base_urlrs 'xd K K KB t ( 2 2D   C   W          655555BBBBBBBBB WWWVDVVVVVVW zz||xt  &&  ++D11BB   BBB HJR$$bhB^^J%C%CDDDPR  --b(;; 4 > > >4 > >$,$9  > > > --d33 1;Hc1J1JT##H---PTG""QX#`774H"#M#M#M^`aaJ++B ;;t  WB W Wt W W Ws5AAA B BB" C.. C=<C=scriptc^|r|sdSddlm}|}|dst |dkr|ddkrd|d Sdd lm}|d z }|d d |||z |}|rd|SdS)a3Validate a cron job script path at the API boundary. Scripts must be relative paths that resolve within HERMES_HOME/scripts/. Absolute paths and ~ expansion are rejected to prevent arbitrary script execution via prompt injection. Returns an error string if blocked, else None (valid). Nr)get_hermes_home)r~rA:zXScript path must be relative to ~/.hermes/scripts/. Got absolute or home-relative path: z@. Place scripts in ~/.hermes/scripts/ and use just the filename.)validate_within_dirscriptsT)parentsexist_okz9Script path escapes the scripts directory via traversal: )rhermes_constantsr startswithrDtools.path_securityrmkdir)rrrawr scripts_dircontainment_errors r_validate_cron_script_pathrs t000000 ,,..C ~~j!! c#hh!mmA#  N36 N N N 877777!/##i/KdT222++K#,={KK O O O  4r:c xt|dpd}t|d|d}t|dpd}t|dp|ddp|r|d ndp|pd }id |d|d|r|d ndd|d t|d kr |dd dzn|d|dd|dd|dd|dpddt |d|ddd|dd|dd|dd|dd|ddd|d|ddrdnd |d!|d"d#}|d$r |d$|d$<|d%rd|d%<|d&r |d&|d&<|d'r |d'|d'<|S)(NrHrKrridrname2rzcron jobjob_idprompt_previewdz...rrrscheduleschedule_display?rdeliverr next_run_at last_run_at last_statuslast_delivery_errorenabledTstate scheduledpaused paused_at paused_reason)rrrno_agentenabled_toolsetsworkdir)rrrrDr)rrHrrrresults r _format_jobr7s ""(b ) )F swww//1B1B C CF +) , ,F swwvf&"+fv2M&))2fRXf\f g gD& f.$ &  #f++2C2C&#,..  !!  CGGJ'' CGGJ'' CGG.//63 /#&& 3779g.. sww}-- sww}-- sww}-- sww'<== 3779d++!" D1I1I"W++xXX#$WW[))11'F* wwx)x=x wwz"!z ww!""=%();%<!" wwy+ Ny Mr:c|d} ddlm}t|sddddS||}t|pi}|ddk}d t |o||d dS#t $ri}td || t|dt|n#t $rYnwxYwd dt|dcYd }~Sd }~wwxYw) uExecute a cron job immediately, outside the scheduler tick. Atomically claims the job first via ``claim_job_for_fire`` — the same at-most-once CAS the scheduler/external-provider fire path uses — so a concurrently-running gateway ticker cannot also fire it (the claim both blocks a duplicate fire and advances ``next_run_at`` for recurring jobs). If the claim is lost (another fire is in flight), this is a no-op. The actual firing is delegated to ``run_one_job`` — the single shared execute→save→deliver→mark body the ticker and external providers use — so failure delivery, ``[SILENT]`` handling, and live-adapter delivery stay identical across paths and can't drift. Returns {"claimed": bool, "success": bool, "error": str|None}. rr) run_one_jobFz;Job is already being fired by the scheduler; not run again.)claimedsuccesserrorrokT last_errorz-Failed to execute cron job %s immediately: %sN) rrr r rboolrrsrrr)rrr processed refreshedres r_execute_job_nowr\s[ YFD......"&)) \$Z\\ \  K$$ FOO)r ]]= ) )T 1I,"--]]<00   DDD DfaPPP  A / / / /    D ECFFCCCCCCCC DsGBAB C5 C0)CC0 CC0CC0*C50C5actionrrrrrinclude_disabledrreason context_fromrrrattach_to_sessiontask_idc~ |pd}|dkrz|stddSt|| }t |}|r|stddSn|s|stddS|r"t |}|rt|dS|r"t |}|rt|dSt| | }|rt|dS|rGdd lm }t|tr|gn|}|D]$}||std |d dcS%tdRid |pdd |d|d|dt|dtd|dt| dt| dt| ddt|d|d|pddt|d|d|}t!d|dd }t#|t|} | r|d!| }t%jd|d"|d|d#|dg|d$t+||dd%|d&t-||d' d()S|d*krAd+t/|,D}!t%jdt1|!|!d-d()S|std.|d/dS t3|}nM#t4$r@}"t%jdt|"d0|"jDd1d()cYd}"~"Sd}"~"wwxYw|st%jdd2|d3d4d()S|d"}|d5krut9|}#|#std6|d/dSt!t%jdd|dd7||d|d$d8d9d()S|d:krEt;|| ;}$t!t%jdt-|$d<d()S|d=krCt=|}$t!t%jdt-|$d<d()S|d>vrt?|}%t-t|pd"|i}&|%d?d|&d@<|%dAd|&dB<|%d?dsdC|&dD<n |%dEr |%dE|&dF<t%jd|&d<d()S|dGkrAi}'|'t |}|rt|dS||'d <|||'d<|t||'d<| |$t|| }||'d<|r|dnd|'d#<| t| |'d<| t| |'d<| t| d|'d<d|'vr|'dn|d}(d|'vr|'dn|d})t|(|)}|rt|dS|:|r"t |}|rt|dS|rt|nd|'d<|t|tr,|r|gng}n dH|D}|r-dd lm }|D]$}||std |d dcS%|pd|'d<||pd|'d<|t ||'d<|t|pd|'d<|Wt |}*|*rAd|'vr|'dn|d}+|+stdIdS|*|'d<|8|dkrdn|},tA|dpi}-|,|-dJ<|-|'d<|PtC|}.|.|'d <|.dK||'d$<|dLdMkr dN|'dL<d|'dO<|'stdPdStE||'}$t!t%jdt-|$d<d()StdQ|d/dS#tF$r(}/tt|/dcYd}/~/Sd}/~/wwxYw)Sz!Unified cron job management tool.rKcreatezschedule is required for createF)ruFcreate with no_agent=True requires a script — the script is the job.z3create requires either prompt or at least one skillr)r zcontext_from job 'z>' not found. Use cronjob(action='list') to see available jobs.rHrrrrrrrrrTrrrrNrrrz Cron job 'z ' created. rrrrr) rrrrrrrrrrmessager)indentrc,g|]}t|Sr5)r)r6rs rrzcronjob..s ]]]K$$]]]r:)r)rcountjobszjob_id is required for action ''cg|]H}|d|d|d|ddIS)rrrr)rrrrr)r6ms rrzcronjob.. sd    #$D'$%EE&MM().@(A(A+,55+?+?    r:)rrmatcheszJob with ID or name 'z8' not found. Use cronjob(action='list') to inspect jobs.)rrremovezFailed to remove job 'z ' removed.)rrr)rr removed_jobpause)r)rrresume>runrun_nowtriggerrexecutedrexecution_successz4Already being fired by the scheduler; not run again.execution_skippedrexecution_errorupdatecg|]D}t|#t|ESr5r)r6js rrzcronjob..s9SSSqCFFLLNNSCFFLLNNSSSr:ziCannot set no_agent=True on a job without a script. Set `script` in the same update, or on the job first.rdisplayrrrrzNo updates provided.zUnknown cron action 'r5)$rr tool_errorrr rprr cron.jobsr rrr rrrrrjsondumpsrrrrrDrr r rrrrrrrr)0rrrHrrrrrrrrrrrrrrrrrrrcanonical_skills _no_agent scan_error script_errorbase_url_error_get_jobrefsref_idr_create_message _local_noticerexcreupdated exec_resultrupdates eff_provider eff_base_urltarget_no_agenteffective_scriptnormalized_repeat repeat_stateparsed_scheduler s0 rcronjobrIs 0 Y1l))++1133  ! ! T!"CUSSSS0?? XI  h%1 %  h$4 h!"Wafgggg A.v66 A%j%@@@@ C9&AA C%lEBBBB5XxHHN A!.%@@@@ 999999)3L#)F)FX ~~L"F#8F++)PPPP$)   |!Tv  1999  ())) ('4E:::7x@@@7xVZ[[[[5V<<<*\"2!9T6g>>># #4"3!C$ / 0 0 0B3v;BBBO238PQX8Y8YZZM G%4"F"F}"F"F:#!$iK WWW--!ggh33 #$6 7-c22"wwy'::#&}#5&s++.   "   ]] K[0\0\0\]]]D:$TDQQZ[\\\ \ ^M MMMW\]]] ] !&))CC$   :$ XX  "%            " :!-EF-E-E-EFF  T  ! ! ((G U!"D6"D"D"DeTTTT . 0 0 0:#CCKCCC$ #F $'GG,>$?$?$$      v666G . 0 0 0:${77K7KLLUVWWW W  ! ! ((G . 0 0 0:${77K7KLLUVWWW W 6 6 6 +3//K !BT6NCCF!,E!B!BF: *5//)U*K*KF& '??9e44 AJ*++)) A,7,@():$v>>qIII I  ! !&(G!.v66 A%j%@@@@$*!"&"%=g%F%F "!U%6#4UF#C#C $4!:J#T#3A#6#6PT  #@#G#G #&CH&M&M ##&CHcg&h&h&h #(2W'<'< ###''*BUBU (2W'<'< ###''*BUBU 5\<PPN A!.%@@@@!G#=f#E#EL#G),FFFFMS$]$A&$I$I$IY]!'lC00T5A5G5G5I5IQL..0011rDDSSLSSSD======"&'x//#-!TV!T!T!T(-$$$ +/,$'+.>.F$*+ ,/34E/F/F+,"&C7%K%K%St "##'x.."@HG@S@Sw{{8'<'<'' for a provider defined in custom_providers config — always include the ':' suffix, never pass the bare 'custom'). Omit to use and pin the current provider.z@Model name (e.g. 'anthropic/claude-sonnet-4', 'claude-sonnet-4'))rr)rLrM propertiesrequireda3Optional path to a script that runs each tick. In the default mode its stdout is injected into the agent's prompt as context (data-collection / change-detection pattern). With no_agent=True, the script IS the job and its stdout is delivered verbatim (classic watchdog pattern). Relative paths resolve under zx/scripts/. ``.sh``/``.bash`` extensions run via bash, everything else via Python. On update, pass empty string to clear.booleanu_Default: False (LLM-driven job — the agent runs the prompt each tick). Set True to skip the LLM entirely: the scheduler just runs ``script`` on schedule and delivers its stdout verbatim. No tokens, no agent loop, no model override honoured. REQUIREMENTS when True: ``script`` MUST be set (``prompt`` and ``skills`` are ignored). DELIVERY SEMANTICS when True: (a) non-empty stdout is sent verbatim as the message; (b) EMPTY stdout means SILENT — nothing is sent to the user and they won't see anything happened, so design your script to stay quiet when there's nothing to report (the watchdog pattern); (c) non-zero exit / timeout sends an error alert so a broken watchdog can't fail silently. WHEN TO USE True: recurring script-only pings where the script itself produces the exact message text (memory/disk/GPU watchdogs, threshold alerts, heartbeats, CI notifications, API pollers with a fixed output shape). WHEN TO USE False (default): anything that needs reasoning — summarize a feed, draft a daily briefing, pick interesting items, rephrase data for a human, follow conditional logic based on content.)rLdefaultrMuOptional job ID or list of job IDs whose most recent completed output is injected into the prompt as context before each run. Use this to chain cron jobs: job A collects data, job B processes it. Each entry must be a valid job ID (from cronjob action='list'). Note: injects the most recent completed output — does not wait for upstream jobs running in the same tick. On update, pass an empty array to clear.uOptional list of toolset names to restrict the job's agent to (e.g. ["web", "terminal", "file", "delegation"]). When set, only tools from these toolsets are loaded, significantly reducing input token overhead. When omitted, all default tools are loaded. Infer from the job's prompt — e.g. use "web" if it calls web_search, "terminal" if it runs scripts, "file" if it reads files, "delegation" if it calls delegate_task. On update, pass an empty array to clear.u1Optional absolute path to run the job from. When set, AGENTS.md / CLAUDE.md / .cursorrules from that directory are injected into the system prompt, and the terminal/file/code_exec tools use it as their working directory — useful for running a job inside a specific project repo. Must be an absolute path that exists. When unset (default), preserves the original behaviour: no project context files, tools use the scheduler's cwd. On update, pass an empty string to clear. Jobs with workdir run sequentially (not parallel) to keep per-job directories isolated.uWhen True, this job becomes CONTINUABLE: the user can reply to its delivery and the agent has the brief in context instead of asking 'what is that?'. On thread-capable platforms (Telegram topics, Discord/Slack threads) a dedicated thread is opened for the job and its replies; on DM-only platforms (WhatsApp/Signal) the brief is mirrored into the origin DM session. Use this for conversational recurring jobs the user will reply to — daily briefings, reminders that kick off follow-up work. Leave unset for fire-and-forget alerts/watchdogs. Overrides the global cron.mirror_delivery config for this one job. Only the origin chat is touched (never fan-out targets); no effect when deliver='local'.)rrrHrrrrrrrrrrrr)rLrQrR)rrM parameterscPddlm}|dp|dp |dS)u Check if cronjob tools can be used. Available in interactive CLI mode and gateway/messaging platforms. The cron system is internal (JSON file-based scheduler ticked by the gateway), so no external crontab executable is required. Session env vars must hold an explicit truthy string (``1``, ``true``, ``yes``, ``on``) — false-like values (``0``, ``false``, ``no``, ``off``) leave the tool disabled. Uses the shared ``env_var_enabled`` helper so every consumer of these flags agrees on the truthy set. renv_var_enabledHERMES_INTERACTIVEHERMES_GATEWAY_SESSIONHERMES_EXEC_ASK)rrXrWs rcheck_cronjob_requirementsr\<sQ&%%%%% ,-- . ?3 4 4 . ?, - -r:)registryr0c ftdffd S)Nrc tdidddddddddddddddd d d d d d d d |dd|dpdddddddddddddddddS)NrrKrrHrrrrrTrrrrArrrrrrrrrrr5)rIr)_moargskws rz..Ys"W^XXXxx"%%%Xxx!!!Xxx!!!X*%%% X XXf    X xx!!! X###X"4d;;;XhhwXxx!!!X!ffXQ/488J//X*%%%Xxx!!!Xxx!!!X XXn---!X""4555#X$###%X&*%%%'X(y!!!)Xr:)rr)rarbs``rrcrcYsJ!+B488GCTCT+U+U!!!!!!  r:u⏰)rtoolsetschemahandlercheck_fnemoji)rNr)NNNNNNFNNNNNNNNNNNNN)L__doc__r2loggingrSsyspathlibrtypingrrrrrrr getLogger__name__rspathinsertr__file__parentr1r r r r rrrrrrrrrrjrurUrktools.threat_patternsr0r]r<rCintr r=rGrQrZr`rrrfrprvrrrrrrrrrrrrICRONJOB_SCHEMAr\tools.registryr]r0registerr5r:rrys   33333333333333000000  8 $ $33ttH~~,344555                                 R   $"""T?)<>>@PQ>)<>>@PQgReggiz{F1DFFHYZkQdkkknFG (KJJJJJ  HSHTHHHH 3 S T    $SS-S-U3S >-B----:cc,#%S/D(4S>24"S#X"hsm"PXY\P]""""JEc3hECEEEE  Xc] 8C= TXY\T]    $''xS#X'?''E''''''''TY^#QUbjknboCHSM*MsmM'/}M c]MMMM`$x}$#$$$$N"T#s(^"S#X""""J*D$sCx.*DT#s(^*D*D*D*D^! " !""&""  48,0!#(,+s1s1 s1 SMs1 SMs1sm s1 3- s1 SM s1c]s1s1 C=s1 T#Y s1 C=s1sms1sms1 SMs1 SMs1 5d3i01!s1"tCy)#s1$c]%s1&tn's1( ~)s1*+s1, -s1s1s1s1p \$! ` !L ! f ! p != "u ! s    (+ i ! h!)(O!! !)'i  %I ! eViViVkVk e e e "  ] &  (+?    (+ @!! ! S  " \ ""{a a DJIee'yyxD.0///////     ,( 7r: