+ jHj/Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI H t ^RI HtHtHt]P"!R4t]!RR04t]!R04tRtR R /tRRltRRltRRRlltRRltR^R^R^R^/tRR/RRlltRRltRR ltR!R"lt R#R$lt!RR%R&/R'R(lllt"R R)R R)R R)/t#R*R+lt$R,RR-R&/R.R/llt%RR0R1llt&R2RR3R/R4R5llt'R6R7lt(R8R9lt)R:R;lt*R<R=lt+R>R?lt,RR@R&/RARBlllt-RCRDlt.RERFlt/RGRHlt0RIt1RJRKlt2RLRMlt3RNROlt4RPRQlt5RRRRSllt6RTR&/RURVllt7RWRXlt8RYRZlt9R[R&/R\R]llt:R^R_lt;]!R`04tRcRdlt?ReRflt@RgRhltAR[R&/RiRjlltBR[R&/RkRllltCRmRnltD]!0Rm4tE]!0Rm4tFRRoRplltGRRqRrlltHRRsRtlltIRuRvltJRwRxltKRyRzltL] !R{R|44tMR}R~ltNRRltORRltPRRltQRRltR^.extra.cron_continuable_surface``. Relay-fronted: ``platforms.relay.extra..cron_continuable_surface`` (same sub-block as the relay's Slack knobs); the sub-block wins and is scoped to its logical platform. Unlike _relay_slack_extra, a sub-block that omits the knob falls back to the flat key (deliberate — the flat key must keep working), so a flat value applies to EVERY platform the relay fronts. extraNcron_continuable_surface in_channelthread) contextlibsuppress Exceptiongetattrgetrlower isinstancedictstrip)pconfigrrsubraws&& r_resolve_cron_surface_moder+2s   Y ' '$/552ii177R8>>@A5?T5J5Jcgg01PT ;))67C ?s3x~~/557<G ( ' '  ( ' s0C0BC00 D c V^8dQhRRRR/#rjobr&rOptional[dict]r)rs"rrrFs.rc VPR4p\V\4'd\VPR4'dEVPR4'd.\VR,4P 4\ 9dR#V#R#)uExtract origin info from a job. Non-dict origins (provenance strings, hand-edited jobs.json) are treated as missing — otherwise every fire crashed on ``origin.get``. Without this guard, a job tagged with e.g. ``"combined-digest-replaces-x-and-y"`` crashed every fire attempt with ``'str' object has no attribute 'get'`` — ``mark_job_run`` recorded the failure, but the next tick re-loaded the same poisoned origin and crashed identically until the field was patched manually (#18722). originplatformchat_idN)r#r%r&rr$_NON_PUSH_ORIGIN_PLATFORMS)r.r1s& r_resolve_originr5FsdWWX F&$FJJz$:$:vzz)?T?T vj! " ( ( *.H H rc$V^8dQhRRRRRR/#)rr.r&cfgr/rboolr)rs"rrrZs!t.Drc*VPR4p\V\4'dV#Vf \P!4;'g/p\VPR/4;'g/PRR44# \ dR#i;i)uWhether a cron delivery is also mirrored into the target chat's session transcript. Default OFF. Precedence: per-job ``attach_to_session`` (bool) → global ``cron.mirror_delivery`` → False. CARVE-OUT: the ``in_channel`` surface seeds its session independently of this knob (the seed IS that feature) — this governs only the thread-surface mirror. ``mirror_to_session`` runs at a turn boundary, so it is alternation- and cache-safe. attach_to_sessioncronmirror_deliveryF)r#r%r8_sched load_configr!)r.r7per_jobs&& r_cron_mirror_delivery_enabledr@Zsgg)*G'4   ;$$&,,"CSWWVR(..B334EuMNN sB B,B BBc ,V^8dQhRRRRRRRRRR /#) rr1r& platform_namerr3 thread_id Optional[str]rr8r)rs"rrrms8 O O4 O Oc O&3 O8< OrcnV'do\VPRR44P4\V4P48wg*\VPRR44\V48wdR#VPR4pVRJ;'g"\V4\T;'gR48H#)uTrue when a delivery target is the job's own origin conversation. A pinned origin thread_id must match — a target without it is a different lane. Mirror eligibility for non-origin targets is decided by ``_target_mirror_eligible``.r2rr3FrCN)rr#r$)r1rBr3rC origin_threads&&&& r_target_matches_originrGms  vzz*b) * 0 0 2c-6H6N6N6P P vzz)R( )S\ 9JJ{+M D N NC $6#ioo2:N$NNrr1origin_fallbackhomeexplicit origin_matchc ,V^8dQhRRRRRRRRRR/#) rr.r&target global_mirrorr8rKzOptional[bool]rr)rs"rrrs4 /3CQ]arcVfR\V4;'g/p\WAPRR4VPRR4VPR44pV'dR#VPR4pVR 9d5VPR4p\V\4'dV#\ V4#VR8XdVPR4RJ#R #) uWhether a resolved delivery target may receive the transcript mirror. Origin targets: always. ``origin_fallback`` (deliver=origin with no captured origin → home channel, standing in for the primary conversation) and ``home`` (user-written bare-platform token, e.g. ``deliver: slack`` — deliberately addresses that platform's home channel): same flags as a true origin. ``explicit`` ``platform:chat_id``: ONLY with per-job ``attach_to_session: true`` — the global flag must never write transcripts into arbitrary explicitly-addressed chats. Untagged broadcast expansions (``all``) are never eligible. ``origin_match`` may be precomputed.r2rr3rCT_resolved_fromr:rJF)rHrI)r5rGr#r%r8)r.rMrNrKr1 resolved_fromr?s&&$$ r_target_mirror_eligiblerRs %++- JJz2. 9b0I6::VaKbd JJ/0M33''-.$Wd33wLm9LL "ww*+t33 rc$V^8dQhRRRRRR/#)ris_dmr8user_idrDrr)rs"rrrs!""d"]"t"rc,\T;'gT4#)uWhether the flat in_channel seed may run. Group keys are user-isolated (``…:group::``): seeding without a real user_id creates an orphan session no reply resolves to — worse than no seed. DM keys omit user_id, so DMs are always seedable.)r8rTrUs$$r_inchannel_seed_allowedrXs    !!rc$V^8dQhRRRRRR/#)rtextrwhatrr)rs"rrrs!//s/#/#/rcV'gV#^RIHpV!VRR7# \d"p\P RY4Rp?R#Rp?ii;i)umFail-closed secret redaction for anything a cron job emits outward. Every outward lane — chat message, session mirror, bot-chat turn — must apply the same policy, so the policy lives in one place. ``force=True`` because this is a safety boundary, not logging: the ``security.redact_secrets`` preference governs how much is scrubbed from the user's own logs and must not be able to turn scrubbing off on the way out to a chat (same reasoning as ``tools/delegation_live_log.py``). Empty input is returned as-is; any failure inside the redactor replaces the payload entirely rather than letting an unscanned value out. )redact_sensitive_textT)forcez)Failed to redact secrets from cron %s: %sNz[REDACTED - redaction failed]) agent.redactr]r!loggerwarning)rZr[r]es&& r_redact_cron_payloadrcsC  /6$T66 /BDL./s AAAc V^8dQhRRRR/#rr.r&rrr)rs"rrrsVVDVSVrcl\VPR4;'gVPRR4R4#)uJob name/id as it appears in outward-facing text. The mirror sinks and the thread title splice the job *name* around the redacted payload, and the name is user-controlled config — a name embedding a credential would re-leak it next to the scrubbed body.nameidr;job namercr#)r.s&r_cron_display_namerks,  H H37743H* UUrc$V^8dQhRRRRRR/#)rr.r&rZrrr)rs"rrrs&AAdA#A#Arc$R\V4 RV 2#)z[Cron delivery: z] )rk)r.rZs&&r_cron_mirror_messagerns 056c$ @@renabledFc8V^8dQhRRRRRRRRRRR RR R R R /#)rr.r&rBrr3 mirror_textrCrDrUror8rNoner)rs"rrrsN' ' ' !' ,/' >A' N[' ' /3'  ' rc V'gR#T;'gRP4pV'gR#^RIHpV!V\V4\ W4RWERR7p V 'd*\ P RVPRR 4W4R#\ PR VPRR 4W4R# \d4p \ PR TPRR 4TY*4Rp ? R#Rp ? ii;i) uBest-effort mirror of a cron delivery into the origin chat's session. No-op unless ``enabled`` (caller resolves it, scoped to the origin target). Rides the same ``mirror_to_session`` path as ``send_message``, passing ``user_id`` so user-isolated group chats resolve to the scheduling member. All failures swallowed — a successful delivery must never be reported failed because the mirror broke.Nrmirror_to_sessionr;user) source_labelrCrUrolez9Job '%s': mirrored delivery into %s:%s session transcriptrh?uXJob '%s': delivery mirror skipped for %s:%s (no matching gateway session — cold start)z.Job '%s': delivery mirror failed for %s:%s: %s) r'gateway.mirrorrurrnr`infor#debugr!) r.rBr3rqrCrUrorZruokrbs &&&&&&$ r_maybe_mirror_cron_deliveryr~s    2 $ $ &D  4 3w<)=c)H9FT  KKKc"M < LL?c"M <   PR_    sAB0'B00 C.;(C))C.groupc$V^8dQhRRRRRR/#)rr.r&r3rrrDr)rs"rrrs!ts]rc \VRR4p\V4'dVfR#R\V4 2p^RIHpV!\ V4V4pV!Ws4pVfR#VP ^R7p V 'd \ V 4#R# \d?p \PRTPRR4\TR R4T 4Rp ? R#Rp ? ii;i) zOpen a thread for a continuable cron job via ``adapter.create_handoff_thread``. Returns the thread_id, or ``None`` (no thread primitive / failed) = caller falls back to the DM mirror.create_handoff_threadNu Hermes — safe_schedule_threadsafetimeoutuVJob '%s': create_handoff_thread failed on %s — falling back to DM-session mirror: %srhryrg) r"callablerkagent.async_utilsrrresultr!r`r|r#) r.adapterr3loop create_thread thread_namercorofuture new_thread_idrbs &&&& r_open_continuable_cron_threadrsG%S\;7)$5 > b 1 %2s=!<<   $ GGD#  =q B s)$BB4 B?B C  3CC  user_namediscord_keys_on_threadcHV^8dQhRRRRRRRRRRR RR RR RR RR RRRRR/ #)rr.r&rBrr3rZrCrD chat_typerUr chat_namescope_idrr8rr)rs"rrr sv'' ''*'58'@C'S`''*'7D'')6'PT' 'rc ^RIHp ^RIHp ^RIHpRp\ VRR4pVeV !VP44pVepV 'dVV P8Xd \V4M \V4pT !TTT TYxTV 'd \V 4MRR7pVPV4p\ VRR4pV!V\V4\W4RWWR VR 7# \\3dRpLi;i) aCreate the session row (so the mirror has a target) and mirror the brief as a USER turn. The seeded key must equal the reply's ``build_session_key``: chat_type, user_id, thread_id and scope_id (Slack team id) are all part of it, so callers pass exactly what the reply carries.Platform) SessionSourcertN_session_store)r2r3rrrUrrCr session_idr;rv)rwrCrUrxr)gateway.configrgateway.sessionrrzrur"r$ ValueErrorKeyErrorDISCORDrget_or_create_sessionrn)r.rrBr3rZrCrrUrrrrrrruseeded_session_id session_store platform_enum seed_chat_id dest_source_entrys&&&&&$$$$$$$ r_seed_cron_sessionr s(-0'+G%5tK#88EF ' d C  s7|%9#%Dy$ 'H% ! M !sCC'&C'c<V^8dQhRRRRRRRRRRRR R R R R R R/ #)rr.r&rBrr3rCrqrrDrTr8rrrrr)rs"rrr4sa!F!F !F'*!F58!FEH!FWZ!F!F,0!FDQ!F !Frc T;'gRP4p V 'gR#\YY#T \V4V'dRM#\P VP 4R4RRWhRR7 p V 'd+\ PR VP R R 4WBV4R#\ PR VP R R 4W#V4R# \d4p \ PR TP R R 4Y#YK4Rp ? R#Rp ? ii;i)uSeed the freshly-opened cron thread's session with the brief (never raises), else the user's in-thread reply resolves to a transcript without it. Threads are participant-shared (no real user_id); a DM thread must seed ``chat_type="dm"`` — DM-thread replies route through the DM arm (``…:dm::``), so a "thread"-typed seed is a row no DM reply hits. Non-DM threads seed the slot the platform's adapter puts on an in-thread reply (``_THREAD_REPLY_CHAT_TYPE``).rNdmrz system:cronCronT)rCrrUrrrrzDJob '%s': opened continuable thread %s on %s:%s and seeded the briefrhryudJob '%s': thread seed did NOT land on %s:%s thread=%s — an in-thread reply will not see this briefz=Job '%s': seeding cron thread session failed for %s:%s:%s: %s) r'rr_THREAD_REPLY_CHAT_TYPEr#r$r`r{rar!) r.rrBr3rCrqrrTrrZr}rbs &&&&&&&&& r_seed_cron_thread_sessionr4s   2 $ $ &D F  -$)n#d)@)D)D]EXEXEZ\d)e!Vy#' )  KKVc"Ig G NN:c"MI G F K GGD#   F FFsA9C !(C D (DD rrc<V^8dQhRRRRRRRRRRR R R R R R R R/ #)rr.r&rBrr3rqrTr8rUrDrrrr)rs"rrrXsV '*58GJVZ '4GT rc T;'gRP4p V 'gR#V'dRMRp \YY#T RY'd \V4MRWxR7 p V 'd)\P RVP RR 4W#V 4\ V 4# \d4p \PR TP RR 4Y#T 4Rp ? R#Rp ? ii;i) uSeed the FLAT (thread_id=None) session for an ``in_channel`` delivery; True on success. ``mirror_to_session`` only APPENDS to an existing session and the flat row is only created by an inbound human message, so create the row first or the brief is silently dropped. Group keys are user-isolated (``…:group::``): the seed MUST carry the origin's real user_id, not ``system:cron``; DM keys omit user_id. chat_type mirrors the inbound handler.rFrrN)rCrrUrrz@Job '%s': seeded flat in_channel session on %s:%s (chat_type=%s)rhryz9Job '%s': seeding in_channel session failed for %s:%s: %s) r'rrr`r{r#r8r!ra) r.rrBr3rqrTrUrrrZrr}rbs &&&&&$$$$ r_seed_cron_channel_sessionrXs   2 $ $ &D !Dw  -$Wd    KKRc"MI GBx  G GGD#   ; sBA"B C(C  Cc V^8dQhRRRR/#rer)rs"rrrys44T4c4rcVPR4p\V\4'gR#.pR F|pVPV4pVfK\V4P RR4P RR4P 4pV'gK]VP RV RVR,: 24K~ V'dRRPV4,#R#) zSecret-free provenance suffix (origin platform/chat/source-IP fields) for security warnings about a bad stored ``context_from`` reference, where no live request object exists.r1r   origin_=:NN)r2r3rC source_ipremote forwarded_for)r#r%r&rreplacer'appendjoin)r.r1fieldskeyvaluerZs& r_cron_job_origin_log_suffixrysWWX F fd # # F[ 3 = 5z!!$,44T3?EEG 4 MMGC5$t*8 9 \&,3&! !33rc V^8dQhRRRR/#rrBrrr)rs"rrrs    rcH\P!\4;_uu_4^RIHpV!4^RIHpVPVP44pV'd)VP'dVPuuRRR4#RRR4R# +'giR#;i)zXCron home-channel env var registered by a plugin ``PlatformEntry.cron_deliver_env_var``.discover_pluginsplatform_registryNr) rr r!hermes_cli.pluginsrgateway.platform_registryrr#r$cron_deliver_env_var)rBrrentrys& r_plugin_cron_env_varrsm   Y ' '7?!%%m&9&9&;< U///-- ( ' '  ( ' sA B0 B B! c V^8dQhRRRR/#rrBrrr8r)rs"rrrsQQsQtQrclVP4pV\9;'g\\V44#)zRValid cron delivery platform: built-in, or plugin with a ``cron_deliver_env_var``.)r$_KNOWN_DELIVERY_PLATFORMSr8r)rBrgs& r_is_known_delivery_platformrs/    D , , P P5I$5O0PPrc V^8dQhRRRR/#rr)rs"rrrs7777rc4\VP44#)zYEnv var name for a platform's cron home channel (``PlatformEntry.cron_deliver_env_var``).)rr$)rBs&r_resolve_home_env_varrs  3 3 5 66rcV^8dQhRR/#)rrBrr)rs"rrrs  C rc^RIHpHpV!4PV!VP 444# \ d\ PRTRR7R#i;i)uPersisted ``HomeChannel`` from gateway config — the canonical store ``/sethome`` writes. The ``_HOME_CHANNEL`` env var is only a best-effort mirror; relay-fronted platforms may exist solely in config.yaml, so reading only the env mirror would drop their delivery.)load_gateway_configrz1config home_channel lookup failed for platform %rTexc_infoN)rrrget_home_channelr$r!r`r|)rBrrs& r_get_config_home_channelrsX@"$55h}?R?R?T6UVV  ?Y]  _s14#AAr'c(V^8dQhRRRRRRRR/#)renv_varrsuffixr'r8rr)rs"rrrs)c3tPSrcaa^RIHoRVV3RllpV!W,4p\P V4pV'gV'dV!WQ,4pV# \dRoL\i;i)acValue of ````, falling back to the legacy name (same suffix) when unset. Reads via ``get_secret``, not ``os.getenv``: in a multiplex gateway the tick runs with the job-owning profile's secret scope (run_one_job sets it), so this resolves the OWNING profile's value, not the host environ. ``os.getenv`` only if the scope module is missing.) get_secretNc V^8dQhRRRR/#)rrgrrr)rs"rr&_home_env_lookup..__annotate__s113131rc<SeS!VR4;'gRM\P!VR4pS'dVP4#T#)Nr)osgetenvr')rgrrr's& rread_home_env_lookup..reads?0:0FD"%++BIIVZ\^L_ %u{{}050r)agent.secret_scoperr!_LEGACY_HOME_TARGET_ENV_VARSr#)rrr'rrlegacyrs&&d @r_home_env_lookuprs` 111 ! "E ) - -g 6F VV_% L  sA A'&A'c V^8dQhRRRR/#rr)rs"rrrs 8 8C 8C 8rcB\V4pV'd \V4#R#)u9Home chat id from the env mirror only (no config). Reads through ``get_secret`` (not raw ``os.getenv``) so a profile-scoped secret scope wins in a multiplex gateway. ``DISCORD_HOME_CHANNEL`` lives in each profile's ``.env``; in a multiplex process the winning cron tick runs with the job-owning profile's scope installed (run_one_job sets it), so reading via ``get_secret`` resolves the OWNING profile's chat id rather than the host process's ``os.environ`` (#83182, chat-id leg — the token leg was fixed earlier; chat id / thread id resolve through the same leak). r)rr)rBrs& r_env_home_target_chat_idrs!$M2G(/ G $7R7rc V^8dQhRRRR/#rr)rs"rrrsJJCJCJrc\V4pV'dV#\V4pVe(VP'd\VP4#R#)utHome target chat id: env var (first, so operator overrides win) → legacy env var → config.yaml ``home_channel``.r)rrr3r)rBrrIs& r_get_home_target_chat_idrsA %] 3E  #M 2D $ 0T\\\3t|| IrIrc V^8dQhRRRR/#)rrBrrrDr)rs"rrrscmrcFVP4R8Xd\RRR7pV'dV#\V4pV'd\VRRR7MRpV'dV#\V4'g7\ V4pVe(VP 'd\ VP 4#R#)uHOptional thread/topic id for a platform home target. Telegram: ``TELEGRAM_CRON_THREAD_ID`` overrides ``TELEGRAM_HOME_CHANNEL_THREAD_ID`` — in topic mode a root-DM delivery lands in the system-only lobby where the user cannot reply. When topic mode is enabled, deliveries that land in the root DM (thread_id unset) end up in the system-only lobby where the user cannot reply — the gateway returns the lobby reminder and drops ``reply_to_message_id`` (#24409). Pointing cron at a dedicated topic via this env var lets replies work as expected without changing the lobby invariant. r TELEGRAM_CRON_THREAD_IDT)r' _THREAD_IDrN)r$rrrrrCr)rB cron_threadrrrIs& r_get_home_target_thread_idrs *&'@M  #M2GCJ Wl$ ?PRE   $M 2 2' 6  t~~& & rc#a"\P!\4;_uu_4^RIHpV!4^RIHpVP4Uu.uF"q"P'gKVPNK$ upoV3Rl\4RjxL RS4RjxL RRR4R#uupiL$L +'giR#;i5i)zZIterate plugin platform names that expose a home channel, ``_HOME_TARGET_PRIORITY`` first.rrc38<"TFqS9gK VxK R#5iNr).0nnameds& r ._iter_home_target_platforms..sC4!U AA4s Nc3>"TFq\9gKVxK R#5ir)_HOME_TARGET_PRIORITY)rrs& rrrsGu!1F(FAAus  ) rr r!rrrrplugin_entriesrrgr)rrrbrs @r_iter_home_target_platformsrs   Y ' '7?!2!A!A!C^!CAG]G]!C^C4CCCGuGGG ( '_CG ( ' 'sR#C&B3 B*$B*4B3 B/ B3B1B3 C*B31B33 C > Cc V^8dQhRRRR/#)r connectedsetrr)rs"rrrs    rcRV9d \4#^RIHpV!4# \d%\P RRR7\4u#i;i)aLogical platforms deliverable through a connected relay. ``get_connected_platforms()`` only sees native platforms; fronted ones come from the same ``GATEWAY_RELAY_PLATFORMS`` stamp fire-time routing uses (validation symmetric with routing). No relay -> empty set.relayrelay_fronted_platformsz$relay fronted-platform lookup failedTr)r  gateway.relayrr!r`r|)r rs& r!_relay_fronted_delivery_platformsrsKiu 9&((  ;d Ku s ,AAcV^8dQhRR/#)rr list[dict]r)rs"rrrs""z"rc .p^RIHpV!4P4Uu0uFq"PkK ppV\ V4,p\4FxpWC9g\V4'gKTPRTRVPRR4P4R \\V44R \!V4;'gR /4Kz ^R IHpV!4F)pVPR\& R V 2RRV R2R RR R /4K+ V#uupi \ d%\ PRRR7\4pLi;i \ d\ PRRR7T#i;i)a?Platforms a cron job can auto-deliver to (single source of truth for UIs): valid delivery platform AND gateway-configured; ``home_target_set`` flags whether the home channel exists. ``{"id", "name", "home_target_set", "home_env_var"}`` dicts in canonical order; callers prepend the implicit ``local`` option themselves.rz1cron_delivery_targets: gateway config unavailableTrrhrg_rhome_target_set home_env_varN)list_profile_names:z Bot Chat ()z2cron_delivery_targets: profile listing unavailable)rrget_connected_platformsrrr!r`r|r rrrrtitler8rrhermes_cli.profilesrBOT_CHAT_PLATFORM)targetsrpr rgr profile_names rcron_delivery_targetsr#sk G6&9&;&S&S&UV&UWW&U V6yAA ,-  (CD(I(I  $ DLLc*002 t$@F#0 Mrfrom_broadcastc(V^8dQhRRRRRRRR/#) rr.r& deliver_valuerr.r8rr/r)rs"rrrQs8PVPV PV!PV6:PVPVrc ,\V4pVR8XdR#\V4pVe \W4#VR8XdV'd+RVR,R\VR,4R\ V4RR/#\ 4F[p\ V4pV'gK\PRVPR VPR R 44V4\WVR 4u# R#R V9EdTPR ^4wrWVP4p^RI Hp Hp V !4V !WRR7wrkp V 'd\P!RW4R#V fVR8XdV'd\VPR4;'gR4P4V8Xdb\VPR44\V48Xd:VPR4'd#\#V4'gVPR4p RVRVRV RR/#TpV'dRMRp V'd]VPR4V8XdG\ V4pV'd \WVV 4#RVR\VR,4RVPR4/#\%V4'gR#\ V4pV'd \WVV 4#R#)a~Resolve one concrete auto-delivery target for a cron job. ``from_broadcast`` marks a bare-platform token that was produced by expanding a broadcast token (``all``) rather than written by the user; broadcast expansions carry no mirror provenance (fan-out is never continuable), while a user-written bare platform token is a deliberate home-channel address and gets the ``home`` tag.localNr1r2r3rCrPzJJob '%s' has deliver=origin but no origin; falling back to %s home channelrgrhryrHr)prepare_send_message_platformsresolve_send_targetT)pass_unresolved_referencesz%Invalid cron delivery target '%s': %sr rrJrI)r5parse_bot_chat_deliver_token_resolve_bot_chat_targetrr*rrr`r{r#r-splitr$tools.send_message_toolr3r4rar'r)r.r0r.r1bot_chat_profilerBr3rest platform_keyr3r4rCresolution_errorhome_provenances&&$ r_resolve_single_delivery_targetr?QseS !F3MB#'>> F:.3vi014V< (  9:M.}=Gw `GGFCGGD#$67H$MrAr#r!)r7rs r_get_standalone_send_timeoutrDs[  "CGGFB'++,MrRS u)r) sAA A AAc$V^8dQhRRRRRR/#)rr.r&contentrrr)rs"rrrs!$rc \VR4p\VPRVPRR44R4pRV RV 2#)aMThe inbound Bot Chat turn text for one cron output. Outward lane: this text becomes an inbound turn in another profile's Bot Chat through the live owner's durable admission record, so it gets the same fail-closed scrub as the chat message and the session mirror; the admitted record carries the scrubbed copy, never the raw output. zbot-chat payloadrgrhryriz [Cronjob "uv" output — scheduled job, not the user. Review it, act on anything that needs action, and summarize for the chat.] rj)r.rFjob_names&& rbot_chat_messagerIsN#7,>?G#CGGFCGGD#4F$GTH XJ''.i 1r for_failurec ,V^8dQhRRRRRRRRRR /#) rr.r&rFrprofilerJr8rrDr)rs"rrrs?NSNSdNSSNS3NS&*NS7DNSrc ^RIp^RIp^RIp^RIHp^RIHp^RIHp H p H p VPRR4p T;'gRp \W4pV!4P4pV'd V!V4MTP4p^RIHp^R IHpT;'d V!\$V!VR , 44'*pVPR 4pV'g+VP'R VP)4P*4pVP-VP/\1V4V \1V4\1V4.R R-R7P3R44P54pV !VV4pRV 2pVf)V'd!RRRV/VP'R/4V&RVR&R#Vf-V !V4pTfRT R2#T !TTT3RT/T'dRR/M/BpVR ,V8wg"VPRR!4V'dRMR!8wd \7R"4hVR,pVP'R/4pRVRV/VV&\<P?R#WVV4VR$8XdR#VR.9dR%M3VPR&4;'gVPR'4;'gR(pV R)V R*V R+V 2# \6d7^RIHpT!TYTTR7RRRT/TP'R/4T&T RT R2u#i;i \@dpRT R,T 2uRp?#Rp?ii;i)/ueAdmit job output to the target profile's authority as a real inbound Bot Chat turn. None means the target's durable receipt is settled (or a failure notice was recorded as ``suppressed`` — a durable disposition, never a send — and flagged on the job); anything else is an explicit unverified status string so Optional[str] callers cannot misreport admission as delivery. ``profile`` is ``""`` for the job's own profile. There is no second-writer fallback: a target whose authority is not ready gets the payload parked under the same delivery id (``cron.bot_chat_legacy.defer``) and admitted by a later tick. N)get_hermes_home)get_profile_dir)deliver_to_live_ownerfind_canonical_live_ownerread_delivery_resultrhry(own)warning_notifications_enabled)load_user_config_effectivez config.yaml execution_id_bot_chat_run_idF) ensure_ascii separatorszutf-8 bot-chat:status suppressed delivery_id_bot_chat_delivery_receiptsT$_notification_all_targets_suppressed)deferrJqueuedz queued (receipt z2): target profile not running; admitted once it iszbot-chat delivery to profile 'z#' unverified: no canonical Bot Chatnotification_category diagnosticmessagerz2delivery id already belongs to a different payloadz*Job '%s': Bot Chat %s receipt=%s status=%ssettledz$completion unverified; do not resenderrorreasonz not completedrz (receipt z): z' unverified: ),rrcclaimed)!hashlibjsonuuidhermes_constantsrNrrOtools.bot_live_deliveryrPrQrRr#rIresolvegateway.warning_notificationsrUhermes_cli.config_effectiverVBOT_CHAT_POLICY_PLATFORM setdefaultuuid4hexsha256dumpsrencode hexdigestrcron.bot_chat_legacyrar`r{r!)r.rFrLrJrmrnrorNrOrPrQrRjob_id profile_labelrf source_homerIrUrVsuppress_notificationrun_idrreceiptrMownerrar\receiptsdetailexcs&&&$ r_deliver_to_bot_chatrs003WWT3 F&&wMs,G7S%'//1 ,3(MMOOJ +!X!X4Q $&@ AU&V5X1X (^^$6 8H8HIFnnTZZ  vs6{CI >:(  &/%9; 'tS1]O, ?4 , sIC6 7 ? k1$7 }7 Fijj+D%TcT>I+\:rTG I ' );;6AValgopQR R">>"?D$fmSA @3 8 Y K  K K  K K-K("K-(K-cV^8dQhRR/#rrrr)rs"rrrs   rc<VeVR8XdR#\V\\34'deVUu.uF=p\V4P 4'gK$\V4P 4NK? ppV'dRP V4#R#\V4#uupi)uNormalize ``deliver`` to its canonical comma-separated string; ``"local"`` when falsy. Lists/tuples (MCP clients, hand-edited jobs.json) are flattened — ``str(["telegram"])`` would yield ``"['telegram']"`` and fail resolution silently.rr2rj)r%listtuplerr'r)deliverr!partss& r_normalize_deliver_valuerst'R-'D%=)))0CACFLLNQC"'sxx4W4 w<Ds !BBallzbot-chattuic V^8dQhRRRR/#)rpartrrrDr)rs"rrr/s  s } rcT;'gRP4pVP4pV\8XdR#\R,pVPV4'dV\ V4RP4#R#)u``bot-chat[:]`` → ``""`` (own profile), the name, or ``None`` if not a bot-chat token. Token is case-insensitive; the name is normalized later by the profile layer.rrN)r'r$r startswithlen)rr*loweredprefixs& rr6r6/sg ::2   CiikG##  $F&!!3v;< &&(( rc$V^8dQhRRRRRR/#)rr.r& profile_argrrr/r)rs"rrr<s!$S^rcHV'g R\RRRR/#^RIHpHpV!V4pV!V4'g*\P RVP RR 4V4R#R\RVRR/# \d.\P R TP RR 4TR R 7R#i;i) uResolve a bot-chat token to a delivery target. ``""`` = own profile (no ``-p`` needed); otherwise the profile must exist locally — cross-machine delivery is intentionally unsupported so same-named profiles on other gateways can never be targeted by accident.r2r3rrCN)normalize_profile_nameprofile_existsuVJob '%s': bot-chat delivery profile '%s' not found on this machine — skipping targetrhryz1Job '%s': failed to resolve bot-chat profile '%s'Tr)rrrrr`rar#r!)r.rrrcanons&& rr7r7<s -y"k4PPN&{3e$$ NN.c"K 1-y%dSS  ?sASU`   sA)'A) A))4B! B!c V^8dQhRRRR/#)rrrrz list[str]r)rs"rrrTsUUUUrcVP4\9dV.#\4Uu.uFp\V4'gKVNK up#uupi)zyExpand ``all`` to every home-target platform with a configured chat_id; non-tokens pass through as a single-element list.)r$_ROUTING_TOKENSrr)rr!s& r_expand_routing_tokensrTsA zz|?*v 24 T4!8PQR8SAA4 TT Ts A A c V^8dQhRRRR/#)rr.r&rJr8r)rs"rrr\s''d'D'rcV'd7VPR4pVe"\V4P4'dV#VPRR4#)aRaw deliver-lane value for a run outcome: the failure lane when ``for_failure`` and the job overrides it, else ``deliver``. Bookkeeping (outcome classification, unresolved-origin, incident 'alerted' marking) must read the SAME lane the notice was routed through (NS-788).failure_deliverrr2)r#rr')r.rJrs&$ r_delivery_lane_valuer\sF''"34  &3+?+E+E+G+G" " 779g &&rc$V^8dQhRRRRRR/#)rr.r&rJr8rrr)rs"rrrgs!  4  * rc \\WR74pVR8Xd.#/p.pVPR4EFNpVP4pV'gKVP 4\ 9p\ V4EF p\WVR7pV'gKVR,P 4\VR,4VPR43p VPV 4p V fWV &VPV4K\P\VPR4;'gR 4^4\P\V PR4;'gR 4^48gKVPR4V R&EK EKQ V#) uResolve auto-delivery targets from comma-separated ``deliver``; ``all`` expands to every platform with a home channel and combines with explicit targets. Dedup by (platform, chat_id, thread_id). ``for_failure=True`` (failure summaries, interrupted-run notices, drift/preflight alerts) resolves from ``failure_deliver`` INSTEAD when the job carries one — ``failure_deliver: local`` is the structural opt-out; absent, failures follow ``deliver``.rbr2rj)r.r2r3rCrPr) rrr8r'r$rrr?rr#r_MIRROR_PROVENANCE_RANK) r.rJrseenr r*r.rrMrkepts &$ r_resolve_delivery_targetsrgsK '';C'YZG' DG}}S!iik 7*3/D4S~^F*%++-s6)3D/EvzzR]G^_C88C=D|"S v&(++C ;K0L0R0RPR,SUVW)--c$((;K2L2R2RPR.SUVWX*04D)E%&0 "( Nrc V^8dQhRRRR/#r-r)rs"rrrs++$+>+rc>\V4pV'd V^,#R#)zAResolve the concrete auto-delivery target for a cron job, if any.N)r)r.r s& r_resolve_delivery_targetrs',G 71:*d*rc ,V^8dQhRRRRRRRRR R/#) rr3r media_filesrmetadataz dict | Noner.r&rr)rs"rrrs4:::(,:8C:PT: :rc ^RIHpHpHp ^RIHp RVP RR4/p .p T;'g.U Uu.uFwr\V 4V3NK pp pVPV4pVU Uu0uFwp pV kK pp pVF0wppV !V4V9pV'gKV PRV 24K2 VeTM \VRR4pVEFwpp\P!V4PP4pV!VVVR 7'dR R ppM$V\ 9dR R ppMV\"9dRRppMRRpp\VV4!RRVRV/VV/BpV !VV4pVf\%V RV R2V 4V u#VP'\(P*!4R7pT'd8\TRR4'g"\%T RT R\TRR4 2T 4EK EKEK V #uupp iuupp i \dRpELii;i \,dTP/4hi;i \dFp\%T RT R\T4;'g\1T4P2 2T 4Rp?EKRp?ii;i)zSend MEDIA files as native attachments (routed by extension, as in _process_message_background). Returns per-file error strings so a dropped attachment surfaces in run status, not just the gateway log.)BasePlatformAdaptershould_send_media_as_audiovalidate_media_delivery_pathrrhryTz)attachment dropped by media path policy: Nr2)is_voice send_voice audio_path send_video video_pathsend_image_file image_path send_document file_pathr3rzcannot send media z: gateway loop unavailablersuccesszmedia send failed for z: rhunknownzfailed to send media r)gateway.platforms.baserrrrrr#rfilter_media_delivery_pathsr!rr"r=Pathrr$ _VIDEO_EXTS _IMAGE_EXTS_note_target_errorr_script_get_media_send_timeout TimeoutErrorcanceltype__name__)rr3rrrr.r2rrrrjob_referrorsr!v requestedrrraw_path_vdroppedroute_platform media_path _is_voiceextmethodpath_kwrrrrbs&&&&&&& r_send_media_via_adapterrs WW:SWWT3'(GF*5*;*;*;=*;#a&!*;I=%AA+NK% &+$!QA+D &! " 28 6KMD-dD9F~"1*=WXZ`b  w/N/N/PQgfi>>",ZL767T];^:_`?v1"-D M_> ' G 6     e 0 Bs1v?Y?YaIYIY>Z[]c e e esTG'G G% BH.%G9H1H% G65G69HH I)$9I$$I)cV^8dQhRR/#)rrrr)rs"rrrs..C.rch\V\4'dVPW4#\WV4#)zXRead ``key`` from a SendResult-like object or the plain dict the silence filter returns.)r%r&r#r") send_resultrdefaults&&&r _result_fieldrs++t$$s,, ;W --rc$V^8dQhRRRRRR/#)rr~r unverifiedzOptional[list]rr8r)rs"rrrs$$$$0>$JN$rcfVfR#\V\4'dRV9pM \VR4pV'd\\ VR44'gR#\ VR4RJdR#\ VR4f>\ VR4'g,\ P RV4VeVPR4R#)uReturn True only if ``send_result`` unambiguously confirms delivery. ``None`` or no ``success`` attr/key is NOT success (would log "delivered" while nothing was sent). ``delivered is False`` REJECTS even with truthy ``success`` (the silence-narration filter returns ``{"success": True, "delivered": False}``). No ``message_id``/``raw_response`` is still accepted (some adapters return a bare success) but logged at WARNING as UNVERIFIED. A live adapter that returns ``None`` (e.g. a swallowed exception, a busy platform, or a code path that returns early without producing a ``SendResult``) must NOT be treated as success — doing so causes the scheduler to log ``"delivered to via live adapter"`` while the gateway never actually sees the message (#47056). * No ``message_id`` and no ``raw_response`` means we have no positive evidence of a send. Telegram ``SendResult`` objects carry ``message_id``; the dict-filter shape does not. See #77763. Fr delivered message_id raw_responseuJob '%s': live adapter reported success with no delivery evidence (no message_id, no raw_response) — treating as delivered but UNVERIFIEDT)r%r&hasattrr8rr`rar)rr~r has_successs&&& r_confirm_adapter_deliveryrs+t$$;. k95 d=i#HII[+.%7k<08k>::      !   d # rc ,V^8dQhRRRRRRRRRR/#) rruntime_adapterrr3rr~rrr8r)rs"rrrs1#####3#PS#X\#rc\\V4RR4p\V4'gR#^RIHpV!V\ V44pV!Wb4pVfR#VP ^ R7p\T\4;'d6\ TPR 4;'gR 4P4R 8Hp T 'd\PR Y14T # \d\PRY1RR7R#i;i) uIs an ambiguous ``telegram::`` target a channel Direct-Messages topic (``direct_messages_topic_id``) rather than a private-chat forum topic (``message_thread_id``)? Shape cannot decide; signal is ``get_chat_info`` type == ``channel``. Fails SAFE to False (thread routing) without a probe or on any probe error/timeout. Callers gate this on the ambiguous shape first (``telegram::``) — that shape is identical for both cases, so shape alone cannot decide (this was the #52060 regression). Probe the live adapter's ``get_chat_info`` once and only return True when the chat is a channel. See #22773. get_chat_infoNFrru\Job '%s': get_chat_info probe failed for chat=%s — defaulting to message_thread_id routingTrrrchanneluGJob '%s': chat=%s is a channel — routing via direct_messages_topic_id)r"rrrrrrr!r`r|r%r&r#r$r{) rr3rr~rrrrr{ is_channels &&&& r_is_channel_dm_topicrsD1?DIM M " " >_c'l;)$5 >}}R}(D$'\\C0@0F0FB,G,M,M,OS\,\J U      6 d  , s$CC#C76C7c V^8dQhRRRR/#)rr7r/rr8r)rs"rrr&s~$rcT;'g/PR4p\V\4'dVPR4MRp\V\4'*;'gVPRR4RJ# \dR#i;i)zResolve ``cron.delivery.notify`` (default True). Only an explicit ``False`` disables; a missing/malformed section keeps the default so a typo cannot silently mute briefs.r;deliveryNnotifyTF)r#r%r&r!)r7cron_cfg delivery_cfgs& r_cron_delivery_notify_enabledr&svII2??6*3=h3M3Mx||J/SW lD11bb\5E5EhPT5U]b5bb sA7AA7"A77 BBc$V^8dQhRRRRRR/#)rr.r&unverified_targetsrrrrr)rs"rrr1s&aataa$arcX\V4;'gRpVPR/4P4UUu/uFwr4VR,R 9gKW4bK upp;'gRpRVRV/P4UUu/uF)wrgVPV4;'gRV8wgK'WgbK+ pppV'gR#TPV4^RIHp V !VR,V4R#uuppiuuppi \ d2p \PRTPR4T 4Rp ? R#Rp ? ii;i) zPersist ``last_delivery_unverified``: list of ``platform:chat_id[:thread_id]`` targets acked with no evidence, or None, alongside queued Bot Chat receipts. Never raises (bookkeeping must not fail a delivery).Nr_r\last_delivery_unverifiedlast_delivery_queued) update_jobrhz4Job '%s': could not record delivery verification: %srk) rr#itemsupdate cron.jobsrr!r`r|) r.r new_valuerMrrcrrvaluesrrs && r_record_delivery_verificationr1s2'(00DIgg3R8>>@=@#2&"&;;fo@=EE@D  #I/Ev, eg,2,ZS''#,&&$50cj,F2 JJva(3t9f%=2 a KSWWUY]\_``as5C!C!;C'C'$C' C-- D)8&D$$D)c6]tRtRt$RtR]R&R]R&R]R&R]R &R ]R &R]R &R]R &R]R&R]R&R]R&R]R&R]R&R]R&R]R&R ]R&R]R&R]R&R]R&R]R&R]R&R ]R&RtR]R&RtR ]R &]R!R"l4t ]R#R$l4t R%t R#)&_TargetDeliveryiFzJPer-target delivery state shared by the live-adapter and standalone lanes.r&r.rr2rrBr3rDrC transportr(rtarget_adaptersconfigrr8notify_deliveryr1 origin_targetorigin_user_id is_dm_targetrqmirror_this_targetin_channel_surfaceinchannel_continuableopened_thread_idFlive_adapter_readyN live_errorcV^8dQhRR/#)rrr8r)rs"rr_TargetDelivery.__annotate__csFF$Frc ZVPRJ;'dVPP#r)ris_relay)selfs&rr_TargetDelivery.is_relaybs#~~T)EEdnn.E.EErcV^8dQhRR/#rr)rs"rrrgsFFsFrc VP RVP 2pVP'dV RVP 2#T#)r)rBr3rC)rbases& rwhere_TargetDelivery.wherefsB$$%Qt||n5-1^^^$q()EErr) r __module__ __qualname____firstlineno____doc____annotations__rrpropertyrr__static_attributes__rrrrrFsT IM LN L K I L!!##$$ $J $ FFFFrrc(V^8dQhRRRRRRRR/#) rr.r&msgrrrrrrr)rs"rrrms(DsDTrcd\PRVR,V4VPV4R#)zKLog a per-target delivery failure as a WARNING and record it in ``errors``. Job '%s': %srhN)r`rar)r.r'rs&&&rrrms" NN>3t9c2 MM#rc(V^8dQhRRRRRRRR/#) rr.r&r'rrr8rrrr)rs"rrrss.SSSCS4SDSrcV'd!\PRVR,V4R#\PRVR,V4R#)zPRelay targets have no standalone fallback, so the log line must not promise one.r)rh(Job '%s': %s, falling back to standaloneNr`ra)r.r'rs&&&r_warn_live_lane_failurer.ss.~s4y#6A3t9cRrc$V^8dQhRRRRRR/#)rr.r&rBrrMr)rs"rrr{s)6H6H 6H(+6H596Hrc^RIHpHpTpRp \V\P 4'ddVP W4p V eW/M/pV eF^RIHp ^RI H p VPP V4p T!Ye V !V RR7MV !RR7V4p V f V!WV4p V eV PpV PpM7^RIHpVV!49d RRV R 23#VPP V4pRpV e+V P 'gVfVf^RI H p V !RR7pM"V'dVP"'g RRV R 23#WW3R3#) zResolve ``(transport, pconfig, runtime_adapter, target_adapters)`` for one target, or ``(None, error)`` when it cannot be served (relay-fronted with no live transport, or not configured/enabled).)DeliveryTransportresolve_delivery_transportN)r)PlatformConfigT)rorz platform 'z' is relay-fronted and has no live gateway transport; start the gateway (its ticker owns relay-fronted delivery and will fire the job on schedule)z' not configured/enabled)gateway.deliveryr1r2r% _preflightSharedRouteAdaptersr# dataclassesrrr3 platformsr rrrrro)r.r2rBrMadaptersr r1r2rrsharedrr3ownr(rrs&&&&&& r_resolve_target_transportr<{sa OOI(J::;;h/060B8,   , 5""&&x0C)oT2>bfKgI.xQ ""#++ : 35 5]O,  ""&&x0)"4"4"4 ? 5$T2G GOOOz-0HIII  A4 GGrc V^8dQhRRRR/#rr)rs"rrrs S S S Src\VRR4p\V4'd\V!V44#\\VRR44# \dR#i;i)zD6 probe: can this adapter deliver a continuable in_channel brief on ``platform_name``? Per-platform check first (one RelayAdapter fronts N platforms; the scalar attr only carries the PRIMARY identity's bit); native adapters use the class attribute.+supports_inchannel_continuable_for_platformNFsupports_inchannel_continuable)r"rr8r!)rrBper_platform_checks&& r_inchannel_surface_supportedrBse!FN"## *=9: : )I5Q RR  sA AAc V^8dQhRRRR/#)rtrrz tuple[Optional[str], dict, dict]r)rs"rrrs*;*;O*;0P*;rc^RIHp^RIHpHpVP pVP pVPVP8H;'dAVRJ;'d5V!\VP44;'dV!\V44pV'dx\VPVPVPVR,4'd?RpR\V4RVR,RVP/pR\V4RVP/p MNVe \V4MRpRVR,RVP/pV'dWxR&RVP/p V'dWYR&\P !WV 4WxV 3#) ujCompute ``(route_thread_id, route_metadata, media_metadata)`` for a live send, ONCE so text and media agree. ``telegram::`` is ambiguous (private forum topic vs channel DM topic need OPPOSITE routing) — see ``_is_channel_dm_topic``. ``thread_id`` rides in ``route_metadata`` to bypass the router's private-chat anchor rule.r)_looks_like_int#looks_like_telegram_private_chat_idNrhdirect_messages_topic_idr~rrC)rrr4rFrGr.rCr2TELEGRAMrr3rrrr _originstamp_origin_discriminators) rDrrFrGr.rCis_ambiguous_telegram_topicroute_thread_idroute_metadatamedia_metadatas & r_live_route_metadatarPsV (U %%C I h''' , , T ! , , /AII ? , , C N +  #'; 199affc$i(9(9 &I#d) a'' 5c)nhPQPaPab-6,A#i.t"CIx9J9JK *9; '"A$5$56 *3; ' ''>J N ::rc8V^8dQhRRRRRRRRR R R R R R R R/#)rrDr text_to_sendrrMrDrNr& target_errorsrdelivery_errorsrrztuple[bool, bool, Any]r)rs"rrrsXc-c-c-&)c-._send_once se ] $$]#'HY 00|^ghgrgr0sss ]ts1 A2A A2A*A2A0A2 A- ( A2Nz)live adapter event loop scheduling failedrzlive adapter send to z. timed out before the coroutine was dispatchedr,rhzJob '%s': live adapter send to %s:%s timed out after 60s; already dispatched (in flight), assuming delivered (skipping standalone fallback to avoid duplicate)rz delivered delivered_chunksryz of total_chunksz chunks, then failed: zlive adapter send failed: rzno response from adapterrrrhfilteredrr&z returned unconfirmed result (z, error=rthread_fallbackrequested_thread_idzconfigured thread_id z for z+ was not found; delivered without thread_id)FFN)TTN)TFN)&rrr4rVrWrXr.r rr2rr3 threadingLockrrr_LIVE_SEND_CONFIRM_TIMEOUT_SECSrrrr`rarBr"rr#r!rrrr%r&rrr.rrC)rDrRrMrNrSrTrrrVrWrXr.rbrrr'exr*send_raw_responsedelivered_message_id _evidence_gap send_successerrshaperhr^r_r`rasff&f$$$ @@@@r_live_send_textrss ;UU %%C AHHa&7&7 8F!S^\`bLNN$M5+u5Htt&jlAFF ;F ~HI!!!mm,KmL H&k>B(lCM,[d)]SL !!!''*   3VC  T * *//'*VVkooj.IVVYCE gtO>X>XC%aggY.LUGS[\_[``ab#&s3xD !**5S!!!Q[[[->-B-BCT-U-U/334IJYYakk #$7#8wwiB D    , ,,  ](0(;$;H[ !]]] K MMO)!''2`aC NNEs4yRU V   %% % " Iq  3   !bii6<<" ( SWWEWY\=]<^^bww~s+,,B2$HIX Z! 2w 9">? sbJPJ1( P1 K <PAP&5PP"P#A%OP PP%PPc ,V^8dQhRRRRRRRRRR /#) rrDrrOr&rrrTrrrr)rs"rrrXs4<<<(,<;? Iq JJz "FJJy$96::k;R T  __aii!++  $$SS]):SSCS?SUrc4V^8dQhRRRRRRRRRRR RR R /#) rrDr cleaned_textrrrrSrTrrr8r)rs"rrrsF>>>&)>8<>PT>>/3> >rc aVPp\V4wrxp Rp VP4p RRRrp V 'g&V'g\VRVP 2V4Rp MV 'd\ W WxW4VR7wrpV 'dV 'gV'd\ W W$4M6V 'd/V'd'\V\V4 RVP R2V4V 'dO\PRVR ,VPVPVeTMR VeTMR 4Rp \W4V # \dpR TP R T 2o\;QJdT3R lT4F 'gK RM RM!T3R lT44'gTPS4\!TSTP"4Rp?T #Rp?ii;i)zDeliver one target via the live gateway adapter; True once delivered. ``target_errors`` = this lane's soft failures (surfaced only if standalone also fails); ``delivery_errors`` = partial failures (media, thread fallback) that surface even on success.FTNz8live adapter send skipped (empty text and no media) for rSrTrz& media attachment(s) not delivered to z& (live adapter confirmation timed out)zEJob '%s': delivered to %s:%s via live adapter thread=%s message_id=%srh-zlive adapter delivery to failed: c3.<"TF pSV9xK R#5irr)rrqerr_msgs& rr,_deliver_via_live_adapter..s;]c7c>]s)r.rPr'rrrsr|rr`r{rBr3rr!anyrr.r)rDrrrSrTrr.rMrNrOrrR adapter_ok timed_outrnrbrs&&&$$$ @r_deliver_via_live_adapterrs %%C6J16M3O^I3:$))+ 6:E43 K OPQPWPWyY J :I+#5; 7J#7 iK Q M ; {#$$J77)AC  !  KKXD 1??AII#2#>C(<(H$c SI ( A  :-aggYisCs;];sss;];;;   )Wajj99  :sT$D.$D.)D.D. D.D.(D.0-D.AD.. F>91F9-F9 (F99F>c(V^8dQhRRRRRRRR/#) rrDrrFrrrrztuple[Any, Optional[str]]r)rs"rrrs2@@@!$@37@._sendsN%%&7 JJ 199g#'%.:<< <.__annotate__sS-rcH<\PRSR,V4RV3#)r)rhNr-)r'r.s&r_warned!_standalone_send.._warneds!~s4y#6SyrcV^8dQhRR/#)rrrr)rs"rrrs&rcp<RSP RV 2p\PRSR,VRR7RV3#)rrr)rhTrN)rr`rh)rbr'r.rDs& r_failed!_standalone_send.._faileds;QWWIYqc2 ^SYd CSyrz6standalone send skipped (empty text and no media) for Nzstandalone send to z timed out after z#s (the send may still be in flight)r)rh) max_workersrF)wait)r9rr.rrDr=_interpreter_shutting_downr'rrunrr`rh RuntimeErrorclose concurrentfuturesThreadPoolExecutorsubmit contextvars copy_contextrshutdownr!)rDrFr shutdown_msgrrrrr'run_errpoolrbrr.rsfff @@@r_standalone_sendrs: %%C!!''*STL/1L<<((**|$$ ==??;OPQPWPWyYZZ 7D{{4 $&& %QWWI->|nM33 ^SY4Sy   , ,W 5 5<( ( %%88Q8GD *{{;#;#;#=#A#A7;;PUPWX__` !%& 5 )) 5 ) 0033|,,,1:    qzs.CAI$ I$I$3II$ G1.AGG1I$G..G11 I<#H<I I$I$*H<1I2I6I$<II I$I$II$I$c ,V^8dQhRRRRRRRRRR /#) rrDrrFrrrrTrrrr)rs"rrr"s1!!!3!T!dh!mq!rc^RIHpHpHpHpHpV!VP 4'dV!4'gR#RVP RVP 2VP'dRVP 2MR,p V!V RVPPRR4 2V4p V!WVP\VP4VPV\\VPR R4R R4R 7V!V \VP 44RTP$ R2p T'dT R\'T4 R2, p \ P#RTPPR4T 4TP)T 4R# \dA\ P#R TPPR4TP$R R7R#i;i)aHand a payload the live lane rejected as reconnect-only (``send_path_degraded``) and the standalone lane then failed to send to the delivery ledger, as a failed reconnect-only row owned by the adapter that rejected it: the post-reconnect sweep redelivers it (#125363). Only reached after standalone failed, so nothing was sent and a replay cannot duplicate. The ledger carries text only; dropped attachments are reported.)compute_obligation_idis_reconnect_onlyledger_enabled mark_failedrecord_obligationNzcron:rrzjob:rhryr_owner_profile) obligation_id session_keyr2r3rCrFadapter_profilez:Job '%s': could not queue %s for post-reconnect redeliveryTrzqueued text for z0 for redelivery once the live adapter reconnectsz (z attachment(s) not queued)r))gateway.delivery_ledgerrrrrrrrBr3rCr.r#rr"rr!r`rarrr) rDrFrrTrrrrrrrnotes &&&& r_queue_for_live_reconnectr"s  f f ..n6F6F aoo.a {;TUT_T_T_1;;-?Pegh -kT!%%))DRUBVAW;XZab '1?? Nakk7#GAKKD$IK[]ab d M3q||#45 aggY&V WD "S%&&@AA NN>15599T?D94  Suuyy$  @s#%F F,F$B/FAGGc 0V^8dQhRRRRRRRRRRR R /#) rrDrrFrrrrSrTrrrr)rs"rrr?s<"&"&"&!$"&37"&HL"&_c"& "&rc VPpVP'd;V'g VPRVP R24VP V4R#\ WV4wrgVfXV'dPVP R4'd9RVR, RVP R2p\PRVR ,V4Ve1VPV4VP V4\WW$4R#\V\4'dVP R 4MR;'g.FEpR V RVP R2p \PRVR ,V 4VPV 4KG \PR VR ,VPVP4\WPPVPVP VP"VP$VP&R 7R#)z?Standalone fallback for a target the live lane did not deliver.zrelay delivery to z failedNrhzdelivery error: rwrr)rhwarningszdelivery warning: zJob '%s': delivered to %s:%sr)r.rrrextendrr#r`rhrr%r&r{rBr3r~rqrCr r) rDrFrrSrTr.rrq_wr's &&&&& r_deliver_standaloner?s %%Czzz  #5aggYg!F G}-"1{;KF {v&**W"5"5  1177)1E ^SY4 S!}- "!kK*4FD)A)Avzz*%tRRPRR"2$iy: ^SY4s#S KK.D 1??AIIV __aii!++  $$&rc4V^8dQhRRRRRRRRRRR R R R /#) rr.r&rMr r8mirror_enabledrqrrTrrzOptional[_TargetDelivery]r)rs"rrrdsXgRgR gRgRIMgR_cgRgR'+gRgRrc $^RIHp VR,p VR,p VPR4p \V4;'g/p V PR4pV'd9V 'g1\P RVR,WPRR4V4M'V 'd \P R VR,WV 4\WW4pT;'d\WWoR 7pV'dV PR 4MR p\V PR 4;'gR4P4pVR8H;'g*V'*;'d\V 4PR4pT;'gT;'d\VVR7pV !V P44p\!TTYY$4wppTf\TTT4R #TwppppTR J;'d TR J;'d\#TRR4!4p\%TT 4R8HpT'd@Te<\'TT 4'g*\P RTPRR4T 4RpT'dT'd T'dR p R pT'd:T'g2Te.Te*T 'g"\)TTY4;'gR pT'dTp \+R-/RTbRTbRT bRT bRT bRTbRTbRTbRTbR TbR!TbR"TbR#T bR$TbR%TbR&TbR'TbR(TbR)TbR*TbR+TbR,Tb# \\3d\TRT R2T4R #i;i).zPer-target prologue of ``_deliver_result``: origin/mirror/in_channel gates, transport resolution, continuable-thread open. None (error noted in ``delivery_errors``) if unservable.rr2r3rCzUJob '%s': origin has thread_id=%s but delivery target lost it (deliver=%s, target=%s)rhrr2z*Job '%s': delivering to %s:%s thread_id=%s)rNrKrUNrrrDrWzunknown platform '' is_runningcR#)Frrrr*_prepare_target_delivery..srrzOJob '%s': cron_continuable_surface=in_channel not supported on %s, using threadryFr.rBrr(rrr rr r1r r r rqrrrrrr)rrr#r5r`rar|rGrRrr$rrXrrrr<r"r+rBrr)r.rMr9rr r rrqrTrrBr3rCr1rFr rr origin_chat_typer rr2resolved resolve_errrr(rrrrrs&&$$$$$$$ r_prepare_target_deliveryrds (:&MYG ;'I S ! ' 'RFJJ{+MY c I}ggi&A6 K  8 I}y : +6'UM'OO,C >-O/B RTc R  R&3  RDR  R "  R 0;  R Pb  R .  R F[  R* R?Q RRk  !3"4]O1 EWs?K))"LLc$V^8dQhRRRRRR/#)rr.r&rJr8rrDr)rs"rrrs!d-rc \\WR74pVR8XdR#VR8Xd9\PRVP RVP RR444R#R V 2p\P R VR,V4V#) u``_deliver_result`` outcome when no target resolved: None (not a failure) for ``local`` and origin-less ``origin`` (CLI jobs never capture an origin — a spurious error every run), else an error string.rbr2Nr1ukJob '%s': deliver=origin but no origin or home channels — skipping delivery (output saved in last_output)rgrhryz(no delivery target resolved for deliver=r))rrr`r{r#ra)r.rJr0r's&& r_unresolved_delivery_outcomers{--A#-_`M   > GGFCGGD#. / 1 4]O DC NN>3t9c2 Jrc(V^8dQhRRRRRRRR/#) rr.r&rFrrJr8rrDr)rs"rrrs8VCVC VCVCGKVCVCrc  VPRR4VPRR4\WR7pV'g\V.4\W4#\P P RR4pV'dVfT\VP R4;'gR48Xd\;QJdRV4F 'gK R M R M !RV44'd{^R I H p\V.4V!W`WR7p^R I H p V !V4p V 'dV R ,R8XdR VR&^RI H p V !VR,4;'g/p V P R4VR&V#^RIHp R pRp\ P"!\$4;_uu_4\&P(!4pVP R/4P RR 4pRRR4\+V4p.pV'd:VP RVR,4pRV RVP RR4 RV RV R2 pMTp^RIHp^RIHpV!V4VP5V4wpp\7VR4p\9V4pVP;V4pV\9V4, pV^8dV R2.M.p\=W4pVP5V4wpp\7T;'gRP?4R4pV !4p.p!^p"TEFpp#^R"I"H#p$T'd4T#R#,\H8wd"T$!T#R#,T4'g T"^, p"KET#R#,\H8Xd\KYT#R$,TR7p%T"TPRR 4, p"T%'dR%T#R$,;'gR& 2p&TP R/4P T&4p'T''dT'R ,R+9dT!PMT%4T''d T'R ,R'8XdTPMT%4EK\OTT#Y#TTTTT!R(7 p(T(fEK/.p)T(PP;'d\ST(TTT)T!TR)7p*T*'dEKa\UT(TTT)T!4EKs T"\9T48XdR TR&MT!PWT4\TT4T!'dR*PYT!4#R# +'giEL;i \$dR pEL-i;i \$d0pR T 2p \@PCR!TR,T 4T uRp?#Rp?ii;i),ajDeliver job output to the configured target(s). With ``adapters``/``loop`` (gateway running) the live adapter is tried first (E2EE rooms can't use the standalone HTTP path), then standalone fallback. ``for_failure=True`` routes failure-category notices through the job's ``failure_deliver`` override when present (NS-788). Returns None on success, else an error.r_Nr`rb_HERMES_CRON_EXTERNAL_WORKERrrWc3@"TFqR,\8gxK R#5i)r2N)r)rrMs& rr"_deliver_result..sR':&*;;'sTF)enqueue_and_wait) get_statusr\r])get_jobrhrrr; wrap_responsergzCronjob Response: z (job_id: z) ------------- zI To stop or manage this job, send me a new message (e.g. "stop reminder z").)r)apply_media_policy_envzdelivery contentz media attachment(s) dropped by media path policy (missing file, denied prefix, or strict-mode miss); see gateway.strict / media_delivery_allow_dirs in config.yamlzmirror payloadzfailed to load gateway config: r)rTr2r3r[rS ambiguous)r9rr r rrqrTrz; rk)-poprrrrenvironr#rrcron.delivery_queuerrrrrrrr r!r=r>rrrgateway.media_policyr extract_mediarcrrr@r'r`rhrsrUrrrrrrrrr)+r.rFr9rrJr external_executionrrhrdelivery_statusr refreshedrruser_cfgr r task_namedelivery_contentrrrcleaned_delivery_contentrequested_media_policy_droppedpolicy_drop_errorsrrrqr rbr'rTsuppressed_targetsrMrUbot_chat_errorreceipt_targetrrDrSrs+&&&&$ r_deliver_resultrsGG )40GG 2D9'EG %c2.+C==(FKx/"c#''.*A*G*GR&HHR'RR'RRR8%c2. !3'[2$%78 x8LH:>C6 7%CI&,," &/mm4J&K "# 2MH   Y ' '%%' VR044_dK  (4H=O "GGFCI.   ,b)*+ i%%.Kt  5 #:<8$,?,M,MN^,_)K) 44LN`a+&O%AA+NK%K(88O 1   H H#% 6sE )66w?NA{' (9(9r'@'@'BDTUK$& O P F:.2CC5fZ6H(SS ! #   * !2 21#y@Q_jkN #''*PRW"X X #,VI->-I-I',J!K''"?DHHX'("3;P"P#**>:wx0K?&--n=  $ (f+){Tc e 9  ((  -F ''1. y +[- ZENS\)6: 2312!#'9:)8499_ %BdB[ ( ' '\  /s3 ^SY4 s<8R R/ S R, / S?S S=$S82S=8S=) scheduler)scheduler_delivery_origin)scheduler_preflight)scheduler_script)r r discordr signal mattermostsmsemaildingtalkfeishuwecomweixin bluebubblesqqbotwhatsappwhatsapp_cloudr)NN)NFN)r>.3gp.avi.mkv.mov.mp4.webm>.gif.jpg.png.jpeg.webp)ryN)gr" __future__rrconcurrent.futuresrrrloggingrrir7rtypingrrr getLoggerr` frozensetrr4rrr+r5r@rGrrRrXrcrkrnr~rrrrrrrrrrrrrrrrr#r'r*r-r?rDrIrrrrrur6r7rrrrrrrrrrrrrrr.r<rBrPrkrsr|rrrrrrrrr;rr=rrJrr5rrrrrrs# !&&   + ,&y2B&CD ' ~6  !56GH((& O"$Q(91faUVWTX6"/(VA' 6;' ' \#GXw GT.'GK'W\'T!FH7;W[B4" Q 7 e* 8J6H "JL#PV=BPVf$"NS-2NSb UG$  0U'5'  F+IJ BC :z.$N#La* #F#F #FL S6Hr S*;Z#%c-L<*.Ub>B@F!:"&JgRT.VCNSVCVCv%52,r