߲jK4dZddlmZddlZddlZddlmZddlm Z ejdZ ddZ ddZ dd Zd Zd Zd Zdd ZddZd dZd!dZdZ d" d#dZdddd d$dZd%dZ d&dZddlmZddlmZddlm Z!y)'aCron job prompt assembly: context_from injection, skill loading, the assembled-prompt injection scan, and the credential-exfil / config-block guards. Split out of ``cron.scheduler``. Import names from this module directly (``cron.scheduler`` only imports the few it calls itself). Origin-resident helpers and sibling split modules are reached late-bound (``_sched`` / module refs at the bottom) so monkeypatching the defining module works. ) annotationsN)now)Optionalzcron.schedulercP|xsdjDcgc]}|js|}}|sy tj|dj}t |t xs|jddduScc}w#tjt f$rYywxYw)u7Wake gate: False only if the last non-empty stdout line is JSON ``{"wakeAgent": false}`` (agent skipped entirely — no LLM run, no delivery); anything else wakes normally. Any other output (non-JSON, missing flag, gate absent, or ``wakeAgent: true``) means wake the agent normally. See #1232. T wakeAgentF) splitlinesstripjsonloadsJSONDecodeError ValueError isinstancedictget) script_outputlinestripped_linesgates :/home/ubuntu/.hermes/hermes-agent/cron/scheduler_prompt.py_parse_wake_gaters)6(;'G'G'IZtTZZ\dZNZ zz.,2245$% % Q+t)DE)QQ[  * -sBB&B B%$B%cd|d|d|d|S)z:Prefix ``prompt`` with a fenced ``## heading`` data block.z##  z ``` z ``` )promptheadingintrobodys r_prepend_context_blockr %s!  E7)D66( CCc |jd}||jd}|r|gng}nt|tr|g}|Dcgc]5}t|jst|j7c}Scc}w)zVNormalized skill names from ``skills`` (list or str) or the legacy singular ``skill``.skillsskill)rrstrr )jobr#legacynames r_job_skill_namesr)*sk WWX F ~!#& FC *0 F$CIOO4ECIOO  FF Fs B#Bi@zThe following is this job's most recent non-silent output from a previous run. Use it for continuity: avoid repeating what was already reported, and continue where the last run left off.zgThe following is the most recent output from a preceding cron job. Use it as context for your analysis.cd|vr|S|jddj}|rtj|ry|S)uThe reusable answer of a stored run: the text after the last ``## Response``. Archives without the heading (script-mode runs) stay whole-document. The LAST occurrence is the writer's boundary — the assembled prompt half can itself carry the literal heading (a skill documenting its response format, an injected previous answer quoting it), so an early split would re-inject the prompt noise this extraction exists to drop. ``None`` marks "no usable answer" — a blank or silent response (any form the delivery lane itself suppresses) — so the caller falls through to an older archive instead of injecting prompt noise the job already has. z ## ResponseN) rpartitionr _sched_is_cron_silence_response)archiveanswers r_archive_answerr1BsGG#    .q 1 7 7 9F V55f= Mr!ct|tkr|Stdz}t|d|zz }|d|d|d|| dS)zKClip oversized context head+tail; conclusions and summaries sit at the end.r+Nz [... z chars omitted ...] )len_MAX_CONTEXT_CHARS)textkeepomitteds r_clip_to_context_budgetr8VsV 4y&&  "D$i!d("G5Dk])G9,CD$L> RRr!c j|jd}|s|dfSddlm}|}t|tr|g}d}|D]}t|tr?|j j dk(rt |jdxsd}||jdk(}|rtd|DsKtjd ||jd|jd tj| t||z jd d d }d} |D]} | jdj } | jdddjddd} | j!dxr t#d| j%D} | r| rt'| }||} n| st)| } |rt+|dt,| }nt+|d|dt.| }d }||fS#t0t2f$r"}tjd||Yd}~d}~wwxYw)zWPrepend the latest output of each ``context_from`` job; returns ``(prompt, injected)``. context_fromFr)get_cron_output_dirselfidrc3$K|]}|dv yw)0123456789abcdefNr).0cs r z'_inject_context_from..os'WA-?(?'Wsz@context_from: skipping invalid job_id %r for job_id=%r name=%r%sr(z*.mdc6|jjS)N)statst_mtime)fs rz&_inject_context_from..xsIZIZr!T)keyreversezutf-8)encodingz --- z ## Promptz # Cron Job:c3>K|]}|jdyw))z**Status:** no_changez**Status:** silentz&Script gate returned `wakeAgent=false`N) startswith)r@rs rrBz'_inject_context_from..s,KOO%OPKsNzYour previous run's outputzOutput from job ''z2context_from: failed to read output for job %r: %s)r cron.jobsr;rr%r lowerallloggerwarning _delivery_cron_job_origin_log_suffixsortedglob read_textsplitrManyr r1r8r _SELF_CONTEXT_INTRO_UPSTREAM_CONTEXT_INTROOSErrorPermissionError)r&rr:r; output_dirinjected source_job_idis_self output_files latest_output output_file candidateheader silent_auditr0es r_inject_context_fromrj_sU77>*L u}-$&J,$$~ H%2c mS )m.A.A.C.I.I.Kv.U 34M3774=0C'W'W$W NNRswwt}cggfo55c:  % c!m+11&9?ZLM+  '1171CIIK #A6q9?? qQRST(33MB sK!' 1 1 3KH !L(3> & ! "!3MBM/8:M}^0/ a@BY!H_2cf 8 ) c NNOQ^`a b b csB=H8HH2H--H2c 8ddlm}ddlm}ddlm}m}ddlm}ddl m }|jd|jdt|jdxsd xsd }g} gd fd } |D]|jd } | r?|| d | } | r(| r| jd | j| dn | d\ tj ||} | jds!| d| jdxsdd ||| r| jd | j-ddd t| jdxsd j/g|| | r7| j1dddj3ddj3d| S#tj"t$f$r | dY|wxYw#t&$rt(j+ddYwxYw)!zWLoad each named skill/bundle into prompt parts; unknown ones are skipped with a notice.r) skill_view)bump_use)build_bundle_invocation_messageresolve_bundle_command_key)_inject_skill_config)normalize_skill_lookup_namer(r=rNc\tjd|zg|jy)NzCron job '%s': )rRrSappend)msgargs job_label skill_nameskippeds r_skipz%_load_cron_skill_parts.._skips((3. ADAz"r!/)user_instructiontask_idz/bundle '%s' could not load any skills, skippingz*skill '%s' returned invalid JSON, skippingsuccessu skill not found, skipping — %serrorzFailed to load skill 'rN)r|z-Cron job: failed to bump skill usage for '%s'T)exc_infoz&[IMPORTANT: The user has invoked the "zf" skill, indicating they want you to follow its instructions. The full skill content is loaded below.]contentze[IMPORTANT: The following skill(s) were listed for this job but could not be found and were skipped: z, un. Start your response with a brief notice so the user is aware, e.g.: '⚠️ Skill(s) not found and skipped: z'])rtr%returnNone)tools.skills_toolrltools.skill_usagermagent.skill_bundlesrnroagent.skill_commandsrpagent.skill_utilsrqrr%lstriprsr r r TypeError ExceptionrRdebugextendr insertjoin)r& skill_namesrlrmrnrorprqr|partsry bundle_keybundle_payloadloadedrvrwrxs @@@r_load_cron_skill_partsrs),*_9= .I#''$-%2&.$GEG#"$, / 0A0A#0FG <RBNLL$ ^A./GT  ZZ +Fz+R STFzz)$ 2 7#M)? |1'M O  e Z 1  LL  4ZLAg h   9%+ , 2 2 46 7 VU+I$,L Q!!%7!3 4577;yy7I6J" N L;$$i0  > K   e LLH*_cL d es$!G & G5 "G21G25!HHuo[IMPORTANT: You are running as a scheduled cron job. DELIVERY: Your final response will be automatically delivered to the user — do NOT use send_message or try to deliver the output yourself. Just produce your report/output as your final response and the system handles the rest. SILENT: If there is genuinely nothing new to report, respond with exactly "[SILENT]" (nothing else) to suppress delivery. [SILENT] is a literal ASCII control token — never translate or rephrase it, whatever language the rest of your answer uses. Never combine [SILENT] with content — either report your findings normally, or say [SILENT] and nothing more. FAILURE: If a delegated child fails and this cron run must be recorded as failed, put [CRON_FAILURE] on the first line by itself, then explain the child failure on following lines. RECURSION: This is a run of an EXISTING scheduled job — execute the task now. NEVER create or update a cron job because of recurring or future-schedule language in the task prompt below; treat phrasing like "each Monday" or "every day at 9" as context for this run, not as a request to schedule another job.] c jt|jdxsd}|r|d|}|}d}|r |d|}d}|jd}|rl||nFtj|t j |t|jdxsd \}} |r| sy|rd nd \} } t || | | }d}t||\}} |xs| }d d lm } | jt|jdxsd}|r||}d}t|z}t|}|st||d||St||}d}|r d dlm}|j#d|||}tdj%||d}|r6t'|t'|kDr|j)|rd dlm}|||S)uBuild the effective prompt for a cron job, optionally loading skills first. ``prerun_script``: cached ``(success, stdout)`` from a script the caller already ran (wake-gate check) — skips re-execution. ``extra_prompt``: user-authored per-run ``## Run Context`` for this fire only, never persisted to the job. ``runtime_data_prompt`` is operator-configured runtime data (such as monitor output) and is scanned as injected data rather than user input. When provided, the script is not re-executed and the cached result is used for prompt injection. When omitted, the script (if any) runs inline as before. extra_prompt: Optional per-run context (from ``cronjob(action='run')``, 57331 — salvaged from #57342 by @liuhao1024). rrz ## Run Context FTscriptNr=)workdir)z Script OutputzZThe following data was collected by a pre-run script. Use it as context for your analysis.)z Script Errorz;The data-collection script failed. Report this to the user.r)notepad has_skillshas_injected_data user_prompt)append_user_instructionr)r)register_stable_prefix)r%r_script_run_job_scriptr-_resolve_job_workdirr rjcronrrender_notepad_section _CRON_HINTr)_scan_assembled_cron_promptrrrrsrr3rMagent.prompt_cache_boundaryr)r& prerun_script extra_promptruntime_data_promptrrr script_pathr}rrr _ctx_injected cron_notepadnotepad_sectionrr stable_prefixr assembledrs r_build_job_promptrscggh'-2.K$ %9,H F8/0C/DE ''(#K*6M((V%@%@c#''RV-J][]F^%_a  = Fa  ( N 0f=FM):]-"99#cggdm>Qr:RSO#$VH-  & F"3'K * CE=N#  #3 4EM @ R 0v> +DIIe,) tools.cronjob_toolsrtools.cronjob_prompt_scanrrRrSrr-CronPromptInjectionBlocked)rr&rrrrr scan_errors rrrIs6D& :9 E :**;7J&y1  Q GGFO ;swwt} ; Z I// ;; r!cb ddlm}||jd|jd}|r9|jd }t jd ||td |d |y#t$r:}|jdrd|jj d|dnd}Yd}~zd}~wwxYw) aCFail closed (RuntimeError) if the stored provider/base_url pair could exfiltrate a key. Runtime backstop: jobs persisted before the create/update guard, or written directly to the store, reach provider resolution unchecked. Fallback providers come from operator config and are validated by the caller, not here.r)_validate_cron_base_urlproviderbase_urlz+could not validate provider/base_url pair (z: z=); refusing to run a job with an unverified base_url overrideNr=udJob '%s': refusing to run — unsafe provider/base_url pair could exfiltrate a stored credential: %sz Cron job 'z' blocked for safety: ) rrrr __class____name__rRr~ RuntimeError)r&rerrexcjob_ids r_guard_job_credential_exfilrhs +?%cggj&9377:;NO   1 C Zx/EcUKLL   +WWZ  &&'r#/. .'+ +s-A++ B.40B))B.c  ddlm}tjd|| ||d|t jd}d|d|d |d |d }d |d |}d|||fS#t$rtj d|YWwxYw)zFail a run closed and pause the job: an unrunnable job left enabled re-fires every tick forever; ``paused_at``/``paused_reason`` give an auditable record.r) pause_jobz Job '%s': %szAuto-paused by scheduler: z-Job '%s': failed to auto-pause unrunnable jobz%Y-%m-%d %H:%M:%Sz # Cron Job: z **Job ID:** z **Run Time:** u7 **Status:** blocked (unrunnable job) — auto-paused ru⚠ Cron job 'z' was auto-paused F)rOrrRr~r exception _hermes_nowstrftime)rjob_namereasonrnow_isodocalerts r_block_and_pause_jobrs$ LL0R&6vh?@m$$%89G xj!h "C ("  XJ&;F8 DE #uf $$ RH&QRs A!!BB) scheduler)scheduler_delivery)scheduler_script)rr%rbool) rr%rr%rr%rr%rr%)r&rr list[str])r/r%rz str | None)r5r%rr%)r&rrr%rztuple[str, bool])r&rrrrr)NNN) r&rrzOptional[tuple]r Optional[str]rrrr%) rr%r&rrrrrrrrr%)r&rrr)rr%rr%rr%rz$tuple[bool, str, str, Optional[str]])"__doc__ __future__rr logging hermes_timerrtypingr getLoggerrRrr r)r4r[r\r1r8rjrrrrrrrrr-rrTrrrr!rrs8# *   + ,R"D G  (S=@=BK 0UY)-P P-PDQP&P Ph6;V[!%.2OS >M2% %%(+%0T%2%0,r!