+ jHjWRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIH t H t ^RI H t ^RI Ht]P!]4tR't^ tRRltRR ltR tR R ltR RltR(RRllt]P4R4t!RR] 4tRRltRRltRRltRRlt RRRRRR/RR llt!R!R"lt"R#R$lt#!R%R&]4t$R#))uCronScheduler provider interface (Axis B — the trigger). EXPERIMENTAL: shape MAY change until a second provider validates it; growth MUST be additive (optional method with a default), never a changed start() signature or new abstractmethod. Providers decide only *when* a job fires — execution + delivery stay in cron.scheduler.run_job / _deliver_result; never reimplement them. ) annotationsN)ABCabstractmethod)Path)Anyc$V^8dQhRRRRRR/#)intervalfloatconsecutive_failuresintreturn)formats" ``ensure_dirs`` -> ``mkdir(parents=True)``) on every 60s cycle, so the "deleted" profile silently comes back on disk and in ``hermes profile list`` (#47368). Filtering on directory existence leaves a deleted profile's home untouched, which is the correct invariant: a home that does not exist cannot hold jobs to fire. z4cron profile enumeration failed; skipping this cycleTr )callabler2 Exceptionr"r#rr/is_dir)r1r.s& r_existing_profile_homesr7Js   1M - X}e^E5J15M0N0U0U0WEE} XX  NNQ\`N aI  YsA&1BB&$B  B cV^8dQhRR/#rr boolr)rs"rrr_sYYdYrc\^RIHpHpHpVeTMV!4pV!V4V!V!448g#)aTrue when a fire runs for a profile OTHER than the process's own. Derived from the fire's home itself (``home``, else the task's active ``get_hermes_home()``), never from a marker one entry point sets: the desktop ticker (``_profile_cron_scope``), the dashboard's manual Run now (``hermes_cli.web_server_cron._cron_store_scope``) and any other caller that binds a HERMES_HOME override for a sibling profile all reach ``run_one_job`` the same way, and a marker set only in the ticker left the manual path with the original cross-profile leak. The desktop backend fires every local profile from one process without setting the process-global multiplex flag, so every isolation keyed on ``is_multiplex_active()`` was inert for those fires: a sibling profile's ``.env`` landed in the shared ``os.environ`` with ``override=True`` and a scope miss read the launch profile's credentials (#107692). ``cron.scheduler._install_fire_secret_scope`` turns this into multiplex semantics for exactly the span the profile's secret scope covers, and the restart-safe handoff marks the worker payload with it. The launch identity is ``get_routing_process_hermes_home()`` (gateway/AGENTS.md "One launch-home identity").)get_hermes_homeget_routing_process_hermes_homehermes_home_key)hermes_constantsr<r=r>)homer<r=r>targets& rrouted_profile_firerB_s3"cb%T?+ $d+ $(L ! %)L " ,VD|DK+t,,(4+//J^:_`+t,, Yt_eC` a&/o N#  $;DIB99 C5,C00C5 cancel_eventc ,V^8dQhRRRRRRRRRR/#) rrrrZrr[rr r:r)rs"rrrOs6   .1 @C    rc &^RIHpV!WW4R7R#)zRun an exact ``claim_fire`` snapshot; ``cancel_event`` lets the transport stop it cooperatively (e.g. dashboard lifespan drain).) run_one_job)rZr[rT)rr)rRrrZr[rrs&&$$$ rrCronScheduler.fire_claimeds /KYrcV^8dQhRR/#rcr)rs"rrrOs4rc R#)zQConverge the external registry toward jobs.json (desired state). Built-in: no-op.NrrQs&r reconcileCronScheduler.reconcilergrr)r __module__ __qualname____firstlineno____doc__propertyrrSrXr`rerjrorurzrrrr__static_attributes__rrrrLrLsS;;X>BXPTXXX  0 22L.2L@DLTYLL"uU8 48 FJ   rrLc V^8dQhRRRR/#rproviderrr r:r)rs"rrrs883848rc\VR4#)zZReturn whether a provider can safely receive ``fire_due(force=...)`` (signature-detected).r|)provider_fire_due_accepts)rs&rryrys $Xw 77rc$V^8dQhRRRRRR/#)rrrrSrHr r:r)rs"rrrs!   3 4 rca\P!VP4PP 4p\;QJdT3RlT4F 'gK R# R#!T3RlT44# \ \ 3dR#i;i)z\Whether ``provider.fire_due`` takes keyword ``name`` (third-party providers may predate it).Fc30<"TFpVP\PPJ;'gYVPS8H;'dBVP\PP \PP 39xK R#5iN)kindinspect Parameter VAR_KEYWORDrSPOSITIONAL_OR_KEYWORD KEYWORD_ONLY).0prSs& r ,provider_fire_due_accepts..s A '##///  FFdN d d7,,BBGDUDUDbDbcc s1BB A BT)r signaturer parametersvalues TypeError ValueErrorany)rrSrs&f rrrs&&x'8'89DDKKM  3  3333    z "s8A55B  B c V^8dQhRRRR/#rr)rs"rrr s % %3 %4 %rca\V4oRV3RllpV!R4'gV!R4'dR#V!R4'*#)uWhether a provider implements the two-phase fire contract. A legacy provider overriding only ``fire_due`` must keep being driven through it — routing around the override would drop its custom claim/re-arm/telemetry behavior.c V^8dQhRRRR/#)rrSrHr r:r)rs"rr2provider_supports_split_fire..__annotate__sMMMMrcZ<\SVR4pVRJ;'dV\\V4J#r)getattrrL)rSimplclss& r overrides/provider_supports_split_fire..overridess0sD$'4LLD t0L$LLrrrTr)r)rrrs& @rprovider_supports_split_firer sB x.CMM)N";";$ $$rcV^8dQhRR/#)rr r r)rs"rrrs 4 4 4rc ^RIHpHpV!4p\V!VRR\R74# \ d\\4u#i;i)zU``cron.misfire_grace_minutes`` from config; non-positive disables the catch-up sweep.cfg_get load_configcronmisfire_grace_minutesdefault)hermes_cli.configrrr DEFAULT_MISFIRE_GRACE_MINUTESr5)rrconfigs r_misfire_grace_minutesrsK4: FF$;Eb c   42334s'*AArZr[nowc ,V^8dQhRRRRRRRRRR/#) rrrLrZrr[rr r r)rs"rrr%s;[[[*-[\ P-R TTP#R 4;'gRTT^<, T4EK \ P-RTTP#R 4;'gRTT^<, 4TP/T4pTfEK^\0P2!TP4T3RTRT/RRTR, 2R7P74T ^, p EK V # +'giEL;i \&\(3dEKi;i \8d8p\ P-RT\;T4P<T4Rp?EKRp?ii;i)aMisfire backstop (gateway housekeeping loop): fire jobs whose external HTTP fire never arrived, else ``next_run_at`` stays parked in the past forever. No-op for the built-in (its tick loop self-heals). Routes through the provider's own two-phase path so re-arm logic runs and a concurrent late external retry is de-duplicated by the store CAS; waits out ``cron.misfire_grace_minutes`` so the external retry gets first right. Returns jobs dispatched. ) check_pausedz cron-misfireN)datetime)ONESHOT_GRACE_SECONDS_elapsed_seconds _ensure_aware _hermes_nowis_job_runnable load_jobs next_run_atrscheduleronceu{Misfire catch-up: one-shot job %s (%s) was due %s (%.0f min overdue) — outside the %ss one-shot grace window, not firing.rSunnamedulMisfire catch-up: job %s (%s) was due %s (%.0f min overdue) and no external fire arrived — firing locally.rZr[Tz cron-misfire-:N N)rAr&r'daemonrSz*Misfire catch-up failed for job %s: %s: %s) contextlibsuppress ImportError agent.estoprr"rr-InProcessCronSchedulerrrGrrrrrrr fromisoformatrrrHr#r threadingThreadrr`r5rr)rrZr[r_estop_check_pausedr grace_minutesrrrrrrfiredrmrdue_dtoverdue_secondsrrclaimedrs&$$$ rfire_overdue_jobsr%su   [ ) )C ~v 6 6 * ) 6 * "(233*,M  {m E{s## ggm,   "8#9#9+#FGF+37 ]R/ / SWWT]((b) 77:&,," x||F#))r *f 4K`9` NN&,,9"$%   ;  GGFO ( (y  b   ))&1G   ,,G:"Hfd;D$VC[M2 eg QJEcn L] * ) )>I&   T  NN<S **C   s<II*,JA J I' *J?J K+KKcV^8dQhRR/#)rr rLr)rs"rrrs(( (rcDRp^RIHpHpV!V!4RRRR7;'gRP4pV'dVR 9d \ 4#^RIHpV!V4pVf!\PRV4\ 4#VP4'g!\PR V4\ 4#\PR VP4V# \dLi;i \d+p\PR Y4\ 4uRp?#Rp?ii;i) uResolve ``cron.provider``; missing/failing/unavailable providers fall back to the built-in with a warning — cron must never be left without a trigger.rrrrr)load_cron_schedulerNz3cron.provider '%s' not found; using built-in tickerz7cron.provider '%s' not available; using built-in tickerz!Using cron scheduler provider: %sz=Failed to load cron.provider '%s' (%s); using built-in ticker)builtinz in-process inprocess) rrrstripr5rplugins.cron_providersrr"r#rXinforS)rSrrrrr(s rresolve_cron_schedulerrs D : vz2FLL"SSU 4AA%'' (>&t,   NNPRV W)+ +$$&& NNTVZ [)+ + 7G!    " (VX\`%''(sFCC1C*C*C*7!C* C'&C'* D5DDDc$V^8dQhRRRRRR/#)rrrLmultiplex_profilesr:r r)rs"rrrs$ $ $ $48 $ $rcV'd\V\4'dV#\PRVP4\4#)zExternal providers own one unscoped remote registry and cannot reconcile several profile stores: fail closed to the built-in multiplex ticker until the API carries profile identity.zMcron.provider '%s' does not support multiplex_profiles; using built-in ticker)r-rr"r#rS)rrs&$rscheduler_for_profile_moders: H6L!M!M NNW  " ##rc]tRtRtRt]RRl4tRRRRR^.tick_adapters_for.sS#|'F-3388FLL"M X*85]5_`` rz9Marked %d interrupted cron execution(s) for profile at %sNz1Cron startup recovery error for profile at %s: %sTr Fz"Cron profile enumeration error: %srrrz'Cron tick yielded for profile at %s: %sz%Cron tick error for profile at %s: %sr"r$r%r&r#r')&rrrrcron.scheduler_preflightr7r8rGrrrr(rr7r/r"rlenr-r+r4rJrur#rrr*r+r,rrrr-rHr)rr.r/))rRr]r1rZr[r rrrrr0rrrrrr initial_homesr.rr<_r@r1r(r r2r3 _tick_error_profile_errors _cycle_exc cycle_homes enumeratedrS_name_pname_home_okr4rr7r8s)&&$d$$$dd$ @@rr)'InProcessCronScheduler._start_multiplexs 5E  _^B/ > ]S]E~e4Q77]ST F  :G H-QZ5))QqTq 0- H.6}.E.E *2   ! !#E$U+GAt (.. $ 8 8 :I W%t,-/.# !NN$ ##%%BK.0O04J !#K S9PQ^9_`9_AnQ/9_ `+AK!h:4|\`bfOg,4,J!h( &{&K{ tt{&KL  S+LNNLL!Z[(3 /!4T!:!: ),1 OO4O< OO OS=0S=S=P;"P&6P;>S=4A3U( U6 N N N  N;N66N;>O P#>PP#& P8 1P;5S=8P;;S:=R?S= S:S:AS5%S5'S=5S::S== U>U  U U& r) rrrrrrrSr`r)rrrrrrs^^7&*^715^7@B^7QU^7^7-1^7CG^7VZ^7@L759L7@DL7OQL7L7,0L7BFL7UYL7L7rrir)%r __future__rrrloggingrr*abcrrpathlibrtypingr getLoggerrr"rrrrr)r/r7rBcontextmanagerrJrLryrrrrrrrrrrrRs # #   8 $& "Y  R@ Y*Y. //"iCiX8  % 4[04[BF[SW[|(: $t7]t7r