߲jUdZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z m Z ddlmZddlmZddlmZmZmZdd lmZmZdd lmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'ejPe)Z*d Z+d Z,dd Z-ddZ.ddZ/ddZ0ddZ1eddZ2eddZ3e4hdZ5Gdde6Z7ddZ8e4ddhe4dhdZ9de:d<ddZ;ddZ
dd"Z?dd#Z@dd$ZAdd%ZBdd&ZCdd'ZDe d(d)dd*ZEdd+ZFdd,ZGdd-ZHdd.ZIdd/ZJdd0ZKd(d1dd2ZLdd3ZMdd4ZNddd5ZOd6d6d6d(d(d(d7ZPdd8ZQddd9ZReSd:jZUeSd;jZVeSdZYeSd?jZZd@Z[ddAZ\ddBZ]e4dCdDhZ^ddEZ_dFdGdHdIdJdHdKZ`ddLZadMZbdNacdOe:dP<d(adddQZedRZfdNagdOe:dS<iZhdTe:dU<ddVZie;dWddXZje;dYddZZke;d[dd\Zle;d]dd^Zme;d_dd`Zne;daddbZoe;dcdddZpe;deddfZqddgZre;dhddiZsdjZtddkZue;dlddmZve;dnddoZwddpZxe;dqddrZyddsZzddtZ{e;duddvZ|e;dwddxZ}e4dYduhZ~dWe&ejdyfdYe#ekdyfd[eeldzfd]eemd{fd_e%end|fdae$eod}fdce!epd~fdeeeqdfdheesdfdleevdfdneewdfdqe eydfdue'e|dfdwe"e}dffZeD](\ZZZZee~vre3ne2Zej edeeee*y)uKanban tools — structured tool-call surface for worker + orchestrator agents. Registered only under the dispatcher (``HERMES_KANBAN_TASK`` set) or when the profile enables the ``kanban`` toolset. Tools rather than ``hermes kanban`` shell-outs: they run in the agent's process (reach ``kanban.db`` from a container/SSH terminal backend, no shlex quoting of JSON metadata, structured-JSON failures). Humans use CLI/dashboard. ) annotationsN)contextmanager)AnyCallableOptional)redact_sensitive_text) judge_goal)no_cache_check_fnregistry tool_error)cfg_get load_config)KANBAN_ATTACH_SCHEMAKANBAN_ATTACH_URL_SCHEMAKANBAN_ATTACHMENTS_SCHEMAKANBAN_BLOCK_SCHEMAKANBAN_COMMENT_SCHEMAKANBAN_COMPLETE_SCHEMAKANBAN_CREATE_SCHEMAKANBAN_HEARTBEAT_SCHEMAKANBAN_LINK_SCHEMAKANBAN_LIST_SCHEMAKANBAN_REQUEST_CHANGES_SCHEMAKANBAN_REQUEST_REVIEW_SCHEMAKANBAN_SHOW_SCHEMAKANBAN_UNBLOCK_SCHEMA2c ddlm}|}|ry tdjdxsgvry|yddlmjdxsi}t fd |jDS#t$rYywxYw) Nr)kanban_toolset_requestedTkanbantoolsetsF)_get_platform_toolsplatform_toolsetsc3^K|]$\}}t|trd|dv&yw)r!F)include_default_mcp_serversN) isinstancelist).0platformnamesr#configs 7/home/ubuntu/.hermes/hermes-agent/tools/kanban_tools.py z._profile_has_kanban_toolset..8s6 % 5$8O +FHZ_` ` s*-) tools.kanban_toolset_contextr rgethermes_cli.tools_configr#anyitems Exception)r requested platformsr#r,s @@r-_profile_has_kanban_toolsetr7%sE(*I  :.4" 5   @JJ239r  #,??#4    s!A7A7=A77 BBcT ddlm}t||S#t$r|cYSwxYw)zT``agent.delegation_context.()``; ``default`` when it cannot be evaluated.r)delegation_context)agentr9getattrr4) predicatedefaultr9s r-_delegation_ctxr>@s1,5w)9577 s  ''ctddS)Nis_delegated_child_contextFr>r-_is_delegated_child_contextrDIs 7 ??rCctddS)uFalse for delegate_task children AND for cron jobs fired in-process from a worker — i.e. whenever HERMES_KANBAN_* is present but not ours."is_dispatcher_owned_worker_contextTrArBrCr-_is_dispatcher_owned_workerrGMs ? FFrCctrytjjdr t r|St S)zcheck_fn core: never for delegate children; dispatcher-spawned env workers (HERMES_KANBAN_TASK) per flag; else the profile toolset decides.FHERMES_KANBAN_TASK)rDosenvironr0rGr7 to_env_workers r-_visiblerNSs3#$ zz~~*+0K0M & ((rCctdS)zKLifecycle tools: dispatcher workers + profiles with the ``kanban`` toolset.TrLrNrBrCr-_check_kanban_moderQ]s $ ''rCctdS)zLBoard-routing tools (kanban_list, kanban_unblock): hidden from task workers.FrLrPrBrCr-_check_kanban_orchestrator_moderScs % ((rC> kanban_blockkanban_completekanban_request_reviewkanban_request_changesc$eZdZdZdfd ZxZS)_RejectzECarries a finished ``tool_error`` payload out of a validation helper.c6t|t|yN)super__init__r )selfmessage __class__s r-r]z_Reject.__init__ws G,-rC)r_str)__name__ __module__ __qualname____doc__r] __classcell__)r`s@r-rYrYtsO..rCrYc|s t|y)z3Reject (as a tool error) unless ``cond`` is truthy.N)rY)condr_s r-_checkri{s g rC session_id project_idtitle) kanban_createkanban_attach_urlzdict[str, frozenset[str]]_UNDECLARED_ARGScfd}|S)zWrap a handler so every failure is a structured tool error. ``ValueError`` (invalid board slug, DB validation such as cycle/self-link, ``AttachmentTooLarge``) is reported without a traceback; anything else is logged with ``logger.exception``.cHtjdfd }|S)Nc & tjdd}t|tj t z}t t||z }t| ddj|ddjt |d|fi|S#t$r}|jdcYd}~Sd}~wt$rB}t|tstjdt!d |cYd}~Sd}~wwxYw) N parameters propertiesz: unknown parameter(s): , z. Valid parameters: z. Nothing changed.rz failed: )r get_schemasetror0 frozensetsortedrijoinrYargsr4r' ValueErrorlogger exceptionr )r|kwrtallowedunknownefn tool_names r-wrapperz._kanban_handler..deco..wrappers 7%00;LI,W j/,<,@,@IK,XX TW!457{#$.decos%   7  7 rCrB)rrs` r-_kanban_handlerrs& KrCc8tddrt|dy)zA delegate_task child shares the parent's process, so inherited HERMES_KANBAN_* env is not proof of ownership: it may report findings but must not mutate."is_delegated_child_process_contextFz refused: delegate_task child agents are not Kanban run owners. Return findings to the parent agent; the dispatcher worker or an explicitly configured Kanban orchestrator must perform board mutations.N)r>rYrs r- _reject_delegated_child_mutationrs5;UCkK KL LDrCcz|r|Sts tsytjj dxsdS)z``task_id`` arg or the dispatcher's env var. A delegate child or an in-process cron job must never inherit the worker's task id implicitly.NrI)rDrGrJrKr0)args r-_default_task_idrs4  "$,G,I ::>>. / 747rCcRt|jd}t|d|S)Ntask_idz:task_id is required (or set HERMES_KANBAN_TASK in the env))rr0ri)r|tids r-_require_task_idrs% 488I. /C 3LM JrCctjjd|k(rtjj|SdS)zC``$var`` only when this worker is scoped to ``task_id``; else None.rIN)rJrKr0)rvars r- _own_task_envrs0"$**..1E"F'"Q2::>># [W[[rCcXt|d} |r t|SdS#t$rYywxYw)z=This worker's dispatcher run id when it is scoped to task_id.HERMES_KANBAN_RUN_IDN)rintr})rraws r-_worker_run_idrs7 !7 8Cs3x(D( s  ))c:t|d}|r i|xsid|iS|S)zBAdd trusted worker session id metadata for this worker's own task.HERMES_SESSION_IDworker_session_id)r)rmetadatarjs r-_stamp_worker_session_metadatars/w(;'y0EcUK` ab b"wrCct|t|}t||tvr8tj j drt|t|d|S)aWorker mutation preamble, in order: delegate-child rejection, task id resolution, task-scope ownership, run-identity proof. Returns the task id. A dispatcher-spawned worker (``HERMES_KANBAN_TASK`` set) that cannot name its run id is refused on the run-lifecycle mutations: ``expected_run_id=None`` would silently skip the run-ownership CAS in ``kanban_db`` (``complete_task`` / ``block_task`` / ``request_review`` / ``request_changes`` only append ``AND current_run_id = ?`` when the value is not ``None``), so an unbound stale worker could complete a card a live successor owns. This mirrors ``agent/kanban_stop.py``, which already treats an unbound run id as unknown and fails closed. CLI / human / orchestrator paths (no ``HERMES_KANBAN_TASK``) legitimately pass ``expected_run_id=None`` and are unaffected. Non-lifecycle worker tools (heartbeat / attach / attach_url) do not terminate a run and are not gated here. rIa@ refused: this worker cannot resolve its HERMES_KANBAN_RUN_ID, so it cannot prove ownership of the card's current run. A stale or unbound worker must not terminate a run a live successor owns. Re-run through the dispatcher so the run id is pinned, or use an orchestrator/CLI path that passes an explicit expected_run_id.) rrr_RUN_LIFECYCLE_TOOLSrJrKr0rrY)rr|rs r- _worker_guardrsf %Y/ 4 C"3')) JJNN/ 0 3  'k    JrCc^tjjdrt|dy)zThe check_fn already hides orchestrator tools from workers; this catches a stale registration or test harness routing a worker here anyway.rIz is orchestrator-only; dispatcher-spawned workers must use kanban_complete, kanban_request_review, kanban_request_changes, kanban_block, kanban_heartbeat, or kanban_comment for their assigned task.Nrrs r-_require_orchestrator_toolrs: zz~~*+kK KL L,rCF quiet_closec#Kddlm}ddlm}|j|} ||f |j y#t $r|sYywxYw# |j w#t $r|sYwwxYwxYww)a``with _board(slug) as (kb, conn)``; lazy import so the module loads in non-kanban contexts. ``board=None`` keeps the env/symlink resolution chain; an explicit slug overrides it per call. ``quiet_close`` swallows close() errors (best-effort bridges).r kanban_db)kanban_db_connect)boardN) hermes_clirrconnectcloser4)rrkbkbcconns r-_boardrs{ +3 ;;U; #D$h  JJL    JJL  sZA4A :A4 A A4A  A4 A1AA1 A.+A1-A..A11A4cN|j||}t|dud|d|S)Nztask z not found)get_taskri)rrrtasks r-_existing_taskr"s/ ;;tS !D 4t uSE45 KrCc 4tjddi|S)NokT)jsondumps)fieldss r-_okr(s ::tT,V, --rCc |j||}|j||}td||r |jnd|r |jn|d|S)zpSuccess payload reporting where the task actually landed (routing may not leave it in the requested status).N)rrun_idstatusrB) latest_runrridr)rrrdefault_statusextrarunlandeds r- _ok_landedr,sY --c "C [[s #F  LsS366d'-fmm> LEJ LLrCc.tt|dS)NTforce)rravalues r-_redactr5s U4 88rCc |r t|S|Sr[)rrs r- _redact_optr9s"75>--rCc tjttj|dS#tj$rYywxYw)zDRedact via a JSON round-trip; None if the result can't be re-parsed.TrN)rloadsrrJSONDecodeErrorrs r-_redact_metadatar=s?zz/ 80DDQRR   s25A  A stripc 8|yt|tr|g}t|ttfs&t |d|dt |j |r@|Dcgc]5}t|jst|j7}}|Scc}w)zAccept a single string (convenience) or a list/tuple; with ``strip`` the items are stringified, stripped, and empties dropped.Nz must be a list of z, got )r'rar(tuplerYtyperbr)rnamewhatrxs r-_coerce_str_listrEs }% edE] +1$vd5k>R>R=STUU ).AA#a&,,.QAA LBs B8Bcpt|duxst|tdt|jy)Nz%metadata must be an object/dict, got )rir'rrrbrs r-_require_dict_metadatarSs3 8t  9z(D9 24>3J3J2K LNrCct||in|}|jd}t|ttfr7dg||D}tt j d|D|d<|S||d<|S)a Fold ``artifacts`` into ``metadata["artifacts"]`` (merged with, never overwriting, a list the worker passed manually). Artifacts ride inside metadata so the completed-event payload needs no DB schema change; the gateway notifier uploads each as an attachment. artifactsc3NK|]}t|jywr[)rar)r)items r-r.z#_merge_artifacts..`sH#d)//#Hs#%c3&K|] }|s| ywr[rB)r)ss r-r.z#_merge_artifacts..as2J12Js)rr0r'r(rrfromkeys)rrexistingmergeds r-_merge_artifactsrXs8$%r8H||K(H(T5M*H0G(0GY0GH $T]]2Jf2J%J K O!* OrCc|j|}t|xrt|j|xs|d|S)z.``args[name]``; rejects when missing or blank.z is required)r0rirar)r|rr_rs r- _require_textrgs< HHTNE 5 'SZ%%')ItfL4IJ LrCT)true1yesfalse0noc|j|}|t|tr t|Stjt |j j }t|du|d|S)Nz$ must be a boolean or 'true'/'false')r0r'bool _BOOL_WORDSrarlowerri)r|rrparseds r-_parse_bool_argrqsg HHTNE } 5$/E{ __SZ--/557 8F 6 $'KLM MrCc | t|S|Sr[)r)rr=s r-_opt_intrzs*3u:77rCzid title body assignee status tenant priority workspace_kind workspace_path created_by created_at started_at completed_at result current_run_id model_override provider_override completion_contract last_failure_errorzid title assignee status priority tenant workspace_kind workspace_path project_id created_by created_at started_at completed_at current_run_id model_override provider_overridezDid profile status outcome summary error metadata started_at ended_at)authorbody created_at)kindpayloadrrz@id filename content_type size uploaded_by stored_path created_at)rworkspace_kindworkspace_pathrkcJ|Dcic]}|| t||ndc}Scc}w)zF``{name: getattr(obj, name)}``; every value None when ``obj`` is None.N)r;)objr+ns r-_fieldsr s'EJ KA#/wsAt ; KK Ks c|j||j}|j||j}it|t||t |t |dS)N)parentschildren parent_count child_count) parent_idsr child_idsr _TASK_SUMMARY_FIELDSlen)rrrrrs r-_task_summary_dictrs_mmD$''*G||D$''*H D $, - D:AxG S] DDrC dependency needs_inputcf ddlm}|d\}}|duxr t|S#t$rYywxYw)z``judge_goal`` fails open (no auxiliary model -> ``"continue"``), which is indistinguishable from "not done yet" and would wedge every goal_mode worker; so the gate is enforced only when a judge is actually reachable.r)get_text_auxiliary_client goal_judgeFN)agent.auxiliary_clientrr4r)rclientmodels r-_goal_judge_availabler sBD1,?    -$u+- s $ 00uGoal completion rejected: judge ruled the goal unachievable — {reason}. The task will NOT complete silently. Either re-scope the task with kanban_edit, or record the block with kanban_block and hand the decision to a human / reviewer.zGoal completion rejected by judge: {reason}. To proceed, either: (1) provide explicit acceptance evidence in your summary matching the task's criteria, or (2) create continuation tasks with parents=[{tid}] and keep this task alive.)blockedcontinueuGoal review handoff rejected: judge ruled the goal unachievable — {reason}. Record the block with kanban_block instead of requesting review.zxGoal review handoff rejected by judge: {reason}. Provide acceptance evidence matching the card before requesting review.)rUrVc:|r|jr tsy ddlm}m}m}|rdn |d|} t |jd|jxsdj|j\}} } } } | || | rtjd | y|d k(ry|d k(rd nd} tt|| j| |#| ||wwxYw#t$r"} tjd| d Yd} ~ yd} ~ wwxYw)a'Goal-mode pre-handoff judge gate: a worker must not complete / request review before acceptance criteria are met. ``blocked`` gets its own guidance; any other non-``done`` verdict gets the ``continue`` guidance. A broken judge fails open (logged) so it cannot permanently wedge work.Nr)get_affinity_scopereset_affinity_scopeset_affinity_scopezkanban:z )goal last_responsez7goal judge check failed, allowing lifecycle handoff: %sTexc_infoz7goal judge unreachable (%s), allowing lifecycle handoffdoner!r")reasonr) goal_moder agent.portal_tagsr$r%r&r rlrrr4r~warningrY_GOAL_GATE_MESSAGESformat)rrrevidencer$r%r&affinity_tokenverdictr-_transport_failed judge_exckeys r- _goal_gater:s8 t~~-B-D cb!3!5;MPWX[W\o;^ 56@ |4 R'89??AQYQ_Q_Qa7c 3GVQ#3)$^4  PRXY&)+)C %i05< default claimer (local workers).rIFrkanban_db_dispatchNTrclaimerHERMES_KANBAN_CLAIM_LOCKnoteexpected_run_ida`kanban auto-heartbeat for task %s refused (%s): this process carries HERMES_DELEGATED_CHILD_CONTEXT together with HERMES_KANBAN_TASK, so the board treats it as a delegate_task descendant and its claim will not be extended by activity. Only the dispatcher's own spawn grants worker scope; do not copy a worker's environment into a hand-launched process.zauto-heartbeat: %s failedr*zauto-heartbeat: bridge failed)rJrKr0time monotonicr<$_AUTO_HEARTBEAT_MIN_INTERVAL_SECONDSrDrr?rheartbeat_claimheartbeat_workerrrbrPermissionError_auto_heartbeat_fence_warnedr~r0r4debug) rnowkbdrrops succeededrkwargsopexcs r-!heartbeat_current_worker_from_envrTs **..- .C .. C 3559]]"$#& 8 Dd + &zD&&BJJNNC]4^(_`((4N[^L_*`acCI! & F[[& $Rc%.Ds&:qtt&:r=c34K|]}|jywr[r[r\s r-r.z/inject_new_comments_from_env..Hs!51!$$!5r^HERMES_PROFILEr'z- operatorrvzNew noterz< on your kanban task from the operator (delivered mid-run). z:Take it into account for the work you're doing right now:  zcomment-inject: steer failed)rGrJrKr0rErFhasattrrU"_COMMENT_POLL_MIN_INTERVAL_SECONDSrVrlist_comments_afterr4r~rLmaxrrrrr{rrX) r:rrMseenrrrowsownr]freshlinesrCs r-inject_new_comments_from_envrn0s, 3N2O"**..- .UYC .. C 5=w(?004VV!$  ! !# &D Dd + IzD))$dia)HD I  |"%&:T&:A"F3 |4!!5!55s ::>>* + 1r 8 8 :C [1R 6 6 8C ?QVV\rDXDXDZQ [E [ FK Lr!(((j)AFFLLN+; < LE L Ua#R 8L MK LNRiiX]N^ _DEKK%&&) I I  4t D \ M  3d CsT9 G9G,"G9&HH H-5H$H),G61G99 HH) I  I  kanban_showc t|}t|jd5\}}t|||}t j t |t|j|||j||Dcgc] \}}||d c}}|j|||j||Dcgc]}t |tc}|j||ddD cgc]} t | tc} |j||D cgc]} t | t c} |j#||dcdddScc}}wcc}wcc} wcc} w#1swYyxYw)zHFull task state: row, parents, children, comments, runs, last 50 events.r)rriN)rrunsatisfied_parentsrcommentseventsrunsworker_context)rrr0rrrr  _TASK_FIELDSrrqr list_comments_COMMENT_FIELDS list_events _EVENT_FIELDS list_runs _RUN_FIELDSbuild_worker_context) r|rrrrrpidrr]rrs r- _handle_showrZsJ 4 C ! "Cjr4b$,zzD,/}}T3/BDAWAWX\^aAb$d2=#vsf-$d T3/>@>N>NtUX>YZO4Z:<..s:STWTX:YZQwq-0Z68ll46MNWQ ,N 55dC@ B CCC$d[ZNCCsBAE;E  (E2E E"E9EE&E EE' kanban_listc  tdt|d}|jd} |tn t |}t|dk\dt|tkdtt|jd 5\}}|j|}|j||jd |jd |jd ||dz }t||kD}|d|} tj| D cgc]} t!||| c} t| |||r|tkrt#|dztnd|dcdddS#t t f$rtdcYSwxYwcc} w#1swYyxYw)z5Task summaries with the same core filters as the CLI.rinclude_archivedlimitNzlimit must be an integerrczlimit must be >= 1zlimit must be <= rassigneertenant)rrrrr)taskscountr truncated next_limitpromoted)rrr0KANBAN_LIST_DEFAULT_LIMITr TypeErrorr}r riKANBAN_LIST_MAX_LIMITrrecompute_ready list_tasksrrrrmin) r|rrrrrrrjrrts r- _handle_listrps}-&t-?@ HHW E6-2])E  5A:+, 5) )->?T>U+VW ! "#jr4%%d+}} 488J/8J88H%8HPUXYPY[I% Ve zz?DE!(T15EZ%i'E4I,Iuqy*?@OS "### z "64556F##s0EBE9E4 4E9E10E14E99FrUc :td|}t|jd}t|jd}|jd}t|trt |xs|}t |jdddd}t |jd d d d}|r t||}t|xs|d t|t||}t|jd 5\}} |j| |} td| ||xs|xsd j |j| |||||t!|} |j| |} | s`|j1| |}|r*dj+d|D}t3d|d|dtd| r | j4ndxsd|d|j7| |}t9||r |j:nd|j=| |Dcgc]}t?|t@c} cdddS#|j"$r"} t%d| dcYd} ~ cdddSd} ~ w|j&$r%} t%d| d|dcYd} ~ cdddSd} ~ w|j($r;}t%ddj+|j,dcYd}~cdddSd}~w|j.$r"}t%d|dcYd}~cdddSd}~wwxYwcc}w#1swYyxYw)!z5Mark the current task done with a structured handoff.rUsummaryresultr created_cardstask idsTrr file pathsz4provide at least one of: summary (preferred), resultrr')rrrrrDz;kanban_complete could not preserve the declared artifacts: z. Your task is still in-flight and its scratch workspace was kept. Fix the artifact path or storage error, then retry kanban_complete with the same handoff.Nzkanban_complete refused: zi. Nothing changed. Wait for the worker to finish, or an operator can run `hermes kanban complete --force z`.zfkanban_complete blocked: the following created_cards do not exist or were not created by this worker: ruz. Your task is still in-flight (no state change). Retry kanban_complete with the same summary/metadata and either drop these ids from created_cards, or pass created_cards=[] to skip the card-claim check entirely.zkanban_complete blocked: z. Your task is still in-flight (no state change). Retry kanban_complete with a non-empty summary or result describing what was done.c32K|]\}}|d|dyw)z ()NrB)r)r~rs r-r.z#_handle_complete..s!"S;3cU"VHA#6"Sszcould not complete z#: unsatisfied parent dependencies: z/; complete the parents first (done or archived)Fz- (unknown id, stale run, or already terminal))rr attachments)!rrr0r'rrrrrirrrrr:r complete_taskrArtifactPreservationErrorr LiveClaimErrorHallucinatedCardsErrorr{phantomEmptyCompletionErrorrqrYlast_failure_errorrrrlist_attachmentsr _ATTACHMENT_FIELDS)r|rrrrrrrrrrr artifact_err claim_errhall_err empty_errblockersdetailras r-_handle_completers )4 0C$((9-.G (+ ,Fxx #H(D!#H-9$ !?JdLM +!6 \Y]^I#Hi8 7 fTU8$-c8 @q"45 @A}AAAA++  Ml^\ !AAAA*   ^+I;7UUXTYY[]^ ^1AAAA6(( L++/99X5E5E+F*GHJKL L?AAAAJ&& #+I;7!"# #QAAAAJ #4 @AAAAs<:L7!H/B/LL L/L >I L  LL -J >L ?L L 'KL LL 'L5L 6LL  LLrTc td|}tt|dd}|jd}t |jd5\}}t |duxs||j vdt|j d|j||}t |xr|jxr|tv d ttd |d |j||||t| }t |d |d|j||j} d| i} |dk(r| |k7r || d<d| d<t|||dfi| cdddS#1swYyxYw)z?Transition the task to blocked with a reason a human will read.rTr-u2reason is required — explain what input you needrrNzkind must be one of z (or omit it)z,goal_mode tasks can only block with kind in z (got u). If the task is actually finished or cannot proceed for another reason, call kanban_complete instead — the completion judge will evaluate it.)r-rrDzcould not block z% (unknown id or not in running/ready) block_kindrrequested_kindzkind='dependency' only waits on an incomplete parent; no parent is open, so this was recorded as needs_input (sticky until a human unblocks) instead of parking in todo where the dispatcher would respawn it.rCr!)rrrr0rriVALID_BLOCK_KINDSrzrr._GOAL_MODE_BLOCK_ALLOWED_KINDS block_taskrrr) r|rrr-rrrrr landed_kindrs r- _handle_blockrs  -C dH&Z[]F 88F D ! "=jr4tt|;tr';';;%fR-A-A&B%C=Q S{{4%DZT^^ZrrA)r@rCrBzcould not heartbeat z (unknown id or not running))rN) rrr?rr0rHrJrKrIrrir)r|rrrNrrrs r-_handle_heartbeatrHs *D 1C4 ! " jr4 4bjjnn=W.XY  ! ! #DHHV,nS>Q"Sr)#.JKL3   s A=B44B=kanban_commentc ~td|jd}t|dtt |d}t j jdxsd}t|jd5\}}|j|||t|}t|| cd d d S#1swYy xYw) z$Append a comment to a task's thread.rruotask_id is required (use the current task id if that's what you mean — pulls from env but kept explicit here)rraworkerr)rr)r comment_idN) rr0rirrrJrKr add_commentrar)r|rrrrrrcids r-_handle_commentrYs%%56 ((9 C 3FG =v. /DZZ^^, - 9F ! "0jr4nnT3vCInF33/000s ;.B33B<c t|5\}}|j||t|||d|}t||t |cdddS#1swYyxYw)zStore via ``kanban_db.store_attachment_bytes`` (shared size cap, per-task dir, metadata row) so agent, dashboard, and CLI surfaces stay in lockstep.r:) content_type uploaded_byr)r attachment_idsizeN)rstore_attachment_bytesrarr)rrfilenamedatarrratt_ids r-_store_attachmentrosf F*2t** #s8}d%7%+I3f3t9E FFFs ;AA kanban_attachc Dtd|}t|d}t|d}ddl}ddl} |j t |d}t|jd ||||jd S#|j tf$r}td|d}~wwxYw) z)Attach an inline (base64) file to a task.rrcontent_base64rNT)validatez$content_base64 is not valid base64: rr) rrbase64binascii b64decoderaErrorr}rYrr0) r|rrr content_b64rrrrs r-_handle_attachrys  .CT:.H&67KBK 04@ TXXg.XtTXXnE] ^^ NNJ 'B| jjd} | std|||| } ddd| j| jjdxsdj!ddj#xsd} | j%dD]8}| t'|z } | |kDrtd|dzd| j)|: ddddj+|  fcStd|#1swY-xYw)aFetch ``url`` over http(s) capped at ``max_bytes`` -> ``(data, content_type)``. Every hop is SSRF-checked (redirects followed manually) so a model-controlled URL, or a public host 302ing, cannot reach loopback/private/cloud-metadata ranges. ``ValueError`` for bad scheme, blocked target, too many redirects, or a body over the cap (checked while streaming, so nothing oversize is buffered).r)urljoinurlparseN) is_safe_urlrcr')httphttpszunsupported URL scheme z; only http/https are allowedz;URL blocked by SSRF protection (private/internal address): GETz User-Agentzhermes-kanban/attachF)headerstimeoutfollow_redirectslocationz&redirect without Location header from z content-type;izattachment exceeds z MB limitrCztoo many redirects fetching ) urllib.parserrhttpxtools.url_safetyrrange_MAX_ATTACH_URL_REDIRECTSschemerr}stream is_redirectrr0raise_for_statussplitr iter_bytesrappendr{)url max_bytesrrrr current_urlr6rchunkstotalresprrchunks r-_download_url_with_caprs /,K ,q0 1.;'..4";;= * *6vj@]^_ _;'Mk][] ]  \\%|E[6\"$u> %AE<<++J7$'Mk]%[\\%k8<  % %  ! ! # LL,,^<BII#NqQWWYa]aL5 %U#9$$':9;U:VV_%`aa e$  % %xx--1.2 3C59 ::! % %sAF+BF++F4 rnc ddlm}td|}tt |dj }|j dxs|j d}|rt|j sEddlm}m }|||jjdd d j xsd } t||j\}} t'|j d||||j dxs| S#t$r} td | cYd } ~ Sd } ~ wt $r0} t"j%dtd|d| cYd } ~ Sd } ~ wwxYw)zHAttach a file fetched server-side from an http(s) URL (shared size cap).rrrnrrrl)unquoter/rcdownloadzkanban_attach_url: Nz!kanban_attach_url download failedz#kanban_attach_url: failed to fetch rvrr)rrrrarrr0rrrpathrsplitrKANBAN_ATTACHMENT_MAX_BYTESr}r r4r~rr) r|rrrrrrrr fetched_ctrs r-_handle_attach_urlrs;+ +T 2C mD%( ) / / 1Cxx #8txx'8H 3x=..028C=--44S!%?JZA[NN$-$5i488L;QJ!h')9$((8:LhXe)fk*FF)-(9488J;O%N > 2!224cdtxx 28b)ZPG ! "&Djr4;E24JJNN#78:> 3;BKKh/ ,DHH\,BCY2;)..Y./I/KLY/?RTV/WX   ."8^=S$)=)=5>5I5I9<<2 .. E ((*&1ACPXM'N488H+=+`P_A`dhhz2A6).U_((7##9&$ HH%67 (2G)H IRX)=NBR9S0T $)> ?txx(89FYGzz~~&67C8PZ!!\"T73_E>>$8XaAFFFW ``platform="tui"`` for the TUI poller. ``HERMES_SESSION_ID`` is deliberately NOT a fallback: it is set for every CLI/ACP invocation and would auto-subscribe every CLI run.rr"HERMES_SESSION_PLATFORMr'HERMES_SESSION_CHAT_IDHERMES_SESSION_KEYNtuiHERMES_SESSION_CHAT_TYPEHERMES_SESSION_THREAD_IDHERMES_SESSION_MESSAGE_IDHERMES_SESSION_PROFILEra)get_active_profile_namer= thread_id chat_typescope_idHERMES_SESSION_SCOPE_IDparent_chat_idHERMES_SESSION_PARENT_CHAT_IDtelegram>dmdirectprivateT telegram_dm_topic_reply_fallback>r'rdirect_messages_topic_idtelegram_reply_to_message_idHERMES_SESSION_USER_IDHERMES_SESSION_USER_ID_ALTz notify+wake) r*chat_idrMrLuser_id user_id_altnotifier_profile delivery_modedelivery_metadata) r7r#rJrKr0rrKr4rrar) envr*r[ session_keyrMrL message_idr^rKkvr`s r-_resolve_notify_targetrf$s ?5r:C@XZ\<]gH 7.3_rzz~~FZ\^7_ !;'.3;tI.3;tI0"5;J3R8\BJJNNK[<\  ) C68EI  ) ${I&> 6; < s#BBG H )A 1)) J&9b'')-HH@D<= y> *.csh@:&"44KY6R[K\9\K $*{0C0IrJK@s7:rz9_maybe_auto_subscribe failed: %r (platform=%r key_set=%r)r*r'r[) r rr4rfrrir2list_notify_subsadd_notify_subr~r0r)rr_kbn_excrls @r-r;r;Qs  {}h0JTXYZF') >7 @//g>@ @D<'/B99B>kanban_unblockc tdtd|jd}t|dt |}t |t |jd5\}}t|j||d|dtd d|it|j||dcdddS#1swYyxYw) zFTransition a blocked task to ready, or todo while parents remain open.rqrztask_id is requiredrzcould not unblock z (not blocked or unknown))rNrB) rrr0rirarr unblock_taskrr r)r|rrrrs r-_handle_unblockrtps%%56/0 ((9 C 3%& c(C"3' ! "Pjr4rtS)-?uD]+^_O3O'"++dC*@+"NOPPPs $A B88C kanban_linkc Ztd|jd}|jd}t|xr|dt|jd5\}}|j |||t t |}td |||d|rd|inicd d d S#1swYy xYw) uAdd a parent→child dependency edge after the fact (cycles/self-links/running children → ValueError). A worker linking its OWN running card proves ownership with its run id so the dependency-block handoff still works.ru parent_idchild_idz(both parent_id and child_id are requiredr)rwrxexpected_child_run_id)rwrxr4r5NrB)rr0rir link_tasksrrar)r|rrwrxrrr4s r- _handle_linkr{~s %]3%Ixx #H 9 !#MN ! "Ajr4 I"0X"?AAYA16z9-BA AAAs ?B!!B*u📋u✔u⏸u👀u↩u💓u💬u📎u➕u▶u🔗r!)rtoolsetschemahandleremojicheck_fn)rr)r<rar=rrr)rMrrr)rhrr_rarNone)rrarr)rrarr)r Optional[str]rrr)rrarrarr)rrar Optional[int])rrarOptional[dict]rr)rrarr)rrar|rrra)rrrr)rra)rrrra)rrarrarrrra)rrrra)rrrr)rrrr)rrrrarrarr)rrrr)rrrz list[str]rrr[)r|rrrar_rrr)r|rrrarr)rrr=rrr)r rr+ztuple[str, ...]rdict[str, Any])rr)rrarrar3rarr)r:rrr)rra)rrarrrztuple[bytes, Optional[str]])rjrrr)rzOptional[dict[str, Any]])rrrrarr)re __future__rrrloggingrJrE contextlibrtypingrrr agent.redactrhermes_cli.goalsr tools.registryr r r hermes_cli.configr rtools.kanban_tools_schemasrrrrrrrrrrrrrr getLoggerrbr~rrr7r>rDrGrNrQrSryrr4rYriro__annotations__rrrrrrrrrrrrrrrrrrrrrrrrrrrvrr|rxrzrr:r rrr r1r:rGr<rKrTrfrUrVrnrrrrrrrrrrrrrrrrArfr;rtr{_ORCHESTRATOR_TOOLS_TOOLS_name_sch_handler_emoji_gateregisterrBrCr-rso#  %**.'BB2////   8 $ 6@G )(( ))!" .i. l;<"G9-/+4L8 \ ] b FL8=" .L9.IN N $te%W\] 8??DuwH YY^Y^Y`bZ``bc 2; FLLNPNL D"+L-+H!I .  W W Y O : <=&Vj(,$&)e)$,d&)"$'E'%'N'%TC C*# #:"#RA$RAj %=!%=P()*3**3Z)* F+ F#$  %  !"0#0*F! _" _#;L$%X&X*%&Z'Z$!;D";D|*5Z>!" P# P A  A& 0@ AB& f=& f=.0@%H(-?:UW\]02CVL,ovF*NFC24FO46I6R*NEB,ouE& f= ? &,&!E46/48K/K +QcEH5(4Y_$&&rC