+ jHj~  a0t$Rt^RIHt^RIHtHtHt^RIH t H t H t H t ^RI t ^RItRdtRRlt]!RR44t]!R R 44tReR ltR R ltRRltRRltReRRlltRRltRRltRR/RRlltRRltRRltR R!ltR"R#ltR$R%ltR&R'lt R(R)lt!] ] ]"] ,]"] ,]#]$.]"],3,t%R*R+lt&R,R-lt'R.R/lt(R0R1lt)R2R3lt*R4RfRRg/t+R5R6lt,R7R8lt-R9R:lt.R;RR?R@/t/RARBlt0RCRDlt1RERFlt2RGRHlt3RIRJlt4RKRLlt5RMRNlt6RORPlt7]*],]-]0]1]2]3]4]5]6]7. t8RQ]9RR&RS^RT^RU^RV^RWRhRXRi/t:RYRZlt;R[R\ltR#)juKanban diagnostics — structured, actionable distress signals for tasks. A ``Diagnostic`` carries a **kind** (canonical code the UI/tests match on), a **severity**, title/detail text, and **actions** the dashboard renders as buttons and the CLI as hints. Rules are stateless and read-only over (task, events, runs, optional graph); callers compute on demand. Only operator-fixable signals (not a one-off provider 502); every diagnostic has a recovery action and auto-clears when the failure mode resolves. ) annotations)asdict dataclassfield)AnyCallableIterableOptionalNc$V^8dQhRRRRRR/#)severityz Optional[str] thresholdreturnbool)formats"B/home/ubuntu/.hermes/hermes-agent/hermes_cli/kanban_diagnostics.py __annotate__rs&MM=M]MtMcVfR#V\9g V\9dR#\PV4\PV48#)z=Return True when ``severity`` meets or exceeds ``threshold``.TF)SEVERITY_ORDERindex)r r s&&rseverity_at_or_abovers>~%.)H    )^-A-A)-L LLrcf]tRt^ t$RtR]R&R]R&]!]R7tR]R&Rt R ]R &R R lt R t R#)DiagnosticActionaA recovery action. ``kind`` drives rendering: ``reclaim``/``reassign`` POST to /tasks/:id/*; ``unblock`` PATCHes status to ready; ``cli_hint`` shows ``payload.command``; ``open_docs`` links ``payload.url``; ``comment`` nudges the operator. ``suggested=True`` = recommended first step.strkindlabeldefault_factorydictpayloadFr suggestedcV^8dQhRR/#r rr r)rs"rrDiagnosticAction.__annotate__,rc \V4#Nrselfs&rto_dictDiagnosticAction.to_dict, d|rrN) __name__ __module__ __qualname____firstlineno____doc____annotations__rr r!r"r,__static_attributes__rrrrr s7I I J$/GT/Itrrc]tRt^0t$RtR]R&R]R&R]R&R]R&]!]R7tR]R &^t R ]R &^t R ]R &^t R ]R &Rt R]R&]!] R7tR]R&RRltRtR#) Diagnosticz%One active distress signal on a task.rrr titledetailrlist[DiagnosticAction]actionsint first_seen_at last_seen_atcountN Optional[int]run_idr datacV^8dQhRR/#r$r)rs"rrDiagnostic.__annotate__?r&rc \V4#r(r)r*s&rr,Diagnostic.to_dict?r.rr)r/r0r1r2r3r4rlistr;r=r>r?rAr rBr,r5rrrr7r70si/ IM J K&+D&AG #AM3L#E3N FM t,D$,rr7cVfV#\VR4'dWP49d W,#\T\4'dTP Y4#\ YT4# \dL@i;i)zGRead a field from a sqlite3.Row, a kanban_db.Task dataclass, or a dict.keys)hasattrrI Exception isinstancer getgetattr)tasknamedefaults&&&r _task_fieldrREsp | 4 TYY[%8: $xx&& 4w ''    s-A)) A76A7cV^8dQhRR/#r$r)rs"rrrSs  $ rc\VRR4p\V\4'dV#\V\4'd"\P !V4;'g/#/# \ d/u#i;i)z\WR4pVeV#\WV4#)zI``task[primary]`` unless it is None, else ``task[legacy]`` (old DB rows).Nr^)rOrfrgrQvs&&&& r _first_fieldrjhs$D4(A 1E;tW#EErc$V^8dQhRRRRRR/#)r events Iterable[Any]kindszset[str]rr<r)rs"rrrns&SS]S8SSrc4a\^.V3RlV4O4#)zFMax ``created_at`` over events whose kind is in ``kinds`` (0 if none).c3^<"TF"p\V4S9gK\V4xK$ R#5ir(r`rd).0rWrns& r #_latest_event_ts..ps$PVr{2%7O]Yr]]Vs--)max)rlrns&fr_latest_event_tsrvns QPVPQ RRrc V^8dQhRRRR/#)r rlrmrrr)rs"rrrss   4 rc\\V44FDp\V4pVR8Xd&\\ V4P R44u#VR9gKCR# R#)zTrue when the most recent breaker trip was a terminal provider error (credential revoked, model gone) and nothing has resumed the task since.gave_upterminal_providerF>claimedpromoted completed unblocked)reversedrGr`rrYrM)rlrWrs& r$_latest_gave_up_is_terminal_providerrssUtF|$2 9 r*../BCD D D D % rr"Fc(V^8dQhRRRRRRRR/#)r rrcommandr"rrrr)rs"rrrs)11S131d1GW1rc$\RVRV/VR7#)cli_hintr)rrr!r")r)rrr"s&&$r _cli_hintrs 59gBV&/ 11rc V^8dQhRRRR/#)r task_idrrrr)rs"rrrs@@c@&6@rc.RV 2p\RV 2VRR7#)zhermes kanban log z Check logs: Tr")r)rcmds& r_log_hint_actionrs$ wi (C |C5)3$ ??rcV^8dQhRR/#r[r)rs"rrrsWWWrcV'dT;'gRP4MRpV'd)VR,\V4R8d R,#R,#R#)z@First 500 chars of the error (with ellipsis), or "" when absent.r]:NiNiu…)striplen)last_errerr_texts& r_error_snippetrsD+3B%%'HFN8D>c(mc&9U BVr BVTVVrc$V^8dQhRRRRRR/#)r rlrmrrr list[Any]r)rs"rrrs!   c i rc.pVF@p\V4pVR9dVP4K'WA8XgK/VPV4KB V#)zEvents of ``kind`` with no ``completed``/``edited`` event strictly after them. Requires id-sorted (arrival-order) input, which the DB provides.>editedr})r`clearappend)rlractiverWks&& r_active_hallucination_eventsrsFF O ' ' LLN Y MM"   Mrc$V^8dQhRRRRRR/#)r hitsrkeyrrz list[str]r)rs"rrrs!icirc.pVFHp\V4PV.4;'g.FpWB9gK VPV4K KJ V#)z@Ordered, de-duplicated ``payload[key]`` entries across ``hits``.)rYrMr)rroutrWpids&& r_unique_payload_idsrsOC!"%))#r288b8C~ 39 Jrc$V^8dQhRRRRRR/#)r rOrrunningrrr:r)rs"rrrs"CT>Trc.pV'dVP\RR/R74VP\RRRV/R74V#)z?Baseline recovery primitives every diagnostic can fall back on.reclaimz Reclaim taskrrr!reassignzReassign to different profile reclaim_first)rr)rOrrs&$ r_generic_recovery_actionsrsJ"$C #.RTUVJJ >ZaHb JrcV^8dQhRR/#)r rrr)rs"rrrs444rc \VR4R8H#)statusrr^)rOs&r _is_runningrs tX &) 33rcV^8dQhRR/#)r rrr)rs"rrrsOO Orc B\\\VRR744#)c\VR^4#)idr^)rs&r$_runs_newest_first..s K44Krr)rGrsorted)runss&r_runs_newest_firstrs *KLM NNrc V^8dQhRRRR/#)r slotrrrr)rs"rrrs ] ]S ]T ]rcJa\S\4'gR#\SPR4;'gR4P 4P 4pV'd VR8wdR#\ ;QJdV3RlR4F 'gK R# R#!V3RlR44#)zTrue if the aux slot was user-configured: provider other than "auto", or any of model/base_url/api_key set (the default falls through to the main model).Fproviderr]autoTc3<"TF7p\SPV4;'gR4P4xK9 R#5i)r]N)rrMr)rrrrs& rrs%_aux_slot_explicit..s4\;[Cs488C=&&B'--//;[s !AA)modelbase_urlapi_key)rLr rrMrlowerany)rrsf r_aux_slot_explicitrsz dD ! !488J'--2.446<<>HH& 3\;[\33\3\3\;[\ \\rc V^8dQhRRRR/#)r raw_configrrrr)rs"rrrs . .C .D .rc.\V\4'gR#VPR4p\V\4'd\VPR4;'gR4P 4p\VPR4;'g5VPR4;'gVPR4;'gR4P 4p\ T;'dT4#\ \T;'gR4P 44#)zBest-effort "a main model is configured" from the raw config dict (the dashboard process may not share CLI runtime state). Unprovable => False, which errs toward NOT firing the diagnostic.Frrr]rQrP)rLr rMrrr)r model_cfgrrs& r_main_model_visiblers j$ ' 'w'I)T""y}}Z066B7==? MM) $ ] ] g(> ] ])--PVBW ] ][] %' H&&'' IOO$**, --rc V^8dQhRRRR/#)r configOptional[dict]rr)rs"rrrsnrc P\V\4'gR#VPR4p\V\4'dV#VPR4p\VPR4\4'dVPR4M/p\V\4'gV'g RV9dR#\V\4'dTM/pRRV9d\VR,4MRR\ VPR 44R \ VPR 44R \ V4/#) zReport whether the triage aux paths look configured: ``{auto_decompose, decomposer_explicit, specifier_explicit, main_model_visible}``. ``None`` when no config context is present (keeps low-level callers/tests silent).Ntriage_aux_status auxiliarykanbanrauto_decomposeTdecomposer_explicitkanban_decomposerspecifier_explicittriage_specifiermain_model_visible)rLr rMrrr)rexplicitaux kanban_cfgs& rrrs fd # #zz-.H(D!! **[ !C)3FJJx4H$)O)OH%UWJ c4 v8MC&&#BC @PT^@^$z*:;Uq[6-g- z "s ..cV^8dQhRR/#r rlist[Diagnostic]r)rs"rrrs>Nrc\VR4pV'g.#\RRRR7.pV\V\V4R7, p\ RRR R V\ V^,4\ VR,4\ V4R \VR 4/R 7 .#)zA worker's kanban_complete named created_cards that don't exist / weren't its own; the completion was blocked. Clears on a later completion/edit. completion_blocked_hallucinationcommentz#Add a comment explaining what to doFrrr"rhallucinated_cardserrorz%Worker claimed cards that don't exista The completing worker declared created_cards that either didn't exist or weren't created by its profile. The completion was blocked and the task stayed in its prior state. Usually means the worker hallucinated ids instead of capturing return values from kanban_create. phantom_ids phantom_cards rr r8r9r;r=r>r?rB)rrrrr7rdrr)rOrlrnowcfgrr;s&&&&& r_rule_hallucinated_cardsrs (0R SD  Y6[*/12G ({47HIIG  !G5%Q(yb7JRUVZR[0G H   rTcV^8dQhRR/#rr)rs"rrr%s00BR0rc\VR4R8wd.#\V4pVf.#\VPR44p\VPR44p\VPR44p\VPR44p \V,wrrV'dW3MW3wrV'g V'd.#\VR4;'gRp\ R V 2R V R 2R R 7.pV'g+V'g#VP \ RV 2R V R 244V'g$RV 2pVP \ RV 2V44\RRRV R2RV R2VW3^RVRVRV RV/R7 .#)aA triage task can't leave triage without a usable aux model. With auto-decompose on the primary slot is ``auxiliary.kanban_decomposer`` (specifier as fallback); off, it is ``auxiliary.triage_specifier``. The default ``provider: auto`` falls back to the main model, so this fires only when the slot isn't explicit AND no main model is visible. Requires config context ({} keeps it silent).rtriagerrrrrz z Configure zhermes config set z.provider autoTrzOr configure fallback zhermes kanban specify zSpecify manually: triage_aux_unavailablewarningzTriage z has no usable modelzZThis task is still in triage and no working auxiliary model is visible to the dispatcher. z The default slot uses `provider: auto` which falls back to the main model, but no main model is configured either. Configure the slot directly or set a main model so the auto fallback can take over.r primary_slotr)rRrrrM _TRIAGE_SLOTSrrr7)rOrlrrrrr main_visiblerrr fallback_slot primary_desc detail_pathprimary_explicitfallback_explicitrr;rs&&&&& r_rule_triage_aux_unavailabler%s4"h. s #F ~ &**%567N #789Lvzz*?@Afjj)=>?=J>=Z:L5C 1 6(< $%44G \N#'9,~%VbfG \y$]O 48J=/Yg6h   &wi0y#5cU!;SAB  %  ~%9:)]+IJ1"2Nl,@,P   rcV^8dQhRR/#rr)rs"rrrXs>Nrc\VR4pV'g.#\RRRR\V\V4R7\ V^,4\ VR ,4\ V4R\ VR4/R7 .#) zAdvisory: the completion summary mentions ``t_`` ids that don't resolve. Warning only; clears on a later clean completion.!suspected_hallucinated_referencesprose_phantom_refsrz.Completion summary references unknown task idszThe completion summary mentions task ids that don't resolve in this board's database. The completion itself succeeded, but downstream consumers parsing the summary may be pointed at cards that never existed.r phantom_refsrr)rr7rrrdrr)rOrlrrrrs&&&&& r_rule_prose_phantom_refsrXsy (0S TD   !I>6*$ D8IJQ(yb7JRUVZR[1$G H   rc V^8dQhRRRR/#)r rr rrr)rs"rrrjsOODOSOrcFVPRVPR^44#)zH``failure_threshold`` with the legacy ``spawn_failure_threshold`` alias.failure_thresholdspawn_failure_threshold)rMrs&r_failure_thresholdrjs 77&0I1(M NNr spawn_failedspawn timed_outtimeoutcrashedcrashcV^8dQhRR/#rr)rs"rrrrsOO=MOrch\VR4R.9d.#\\V4^4p\VPR4V4p\ VRR^4p\ V4pV'g VeWu8d.#T;'g^p\ VRR4p \VR4p \ R R \V444R4p .p V R 8XdZV 'dRV R 8wdKR V R2R V R2rV P\RV 2V RR74V P\RV 2V44M5V R/9d/\VR4pV'dV P\V44V P\V\V4R74Wu^,8dRMRp\V 4p\PT ;'gRR4pV'd RpRV RV R2pMQV'd8RV RV R VP!4^,R!, 2pR"V R#V R$V R%V R&2 pMRV RV R'2pR"V R#V R(2p\#R)VVVV W3VRVR*V R+V R,VRV/R-7 .#)0u``consecutive_failures`` >= cfg["failure_threshold"] (legacy key ``spawn_failure_threshold``), regardless of failure mode — the kernel keeps retrying and the operator must intervene. Runtime callers derive the threshold from ``kanban.failure_limit`` so it doesn't lag the breaker. Exempt: done/archived (a manual done ends no run, so the streak is history) and running (a retry in flight must not read as a current failure; re-fires if it fails too).r failure_limitconsecutive_failuresspawn_failuresNlast_failure_errorlast_spawn_errorassigneec38"TFpVR9gK VxK R#5i)rN>rrrr)rrocs& rrs*_rule_repeated_failures..s" <S : : Ss  c3:"TFp\VR4xK R#5i)outcomeNr^)rrrs& rrsrsS:RQ{1i00:RsrrQz hermes -p z doctorz authzVerify profile: TrzFix profile auth: rrcriticalrr]failureuRProvider rejected this profile's credential or model — blocked after one attemptzThe worker's provider call failed with an error a retry cannot fix (revoked or invalid API key, model not found), so the dispatcher blocked the task instead of spending the z/-attempt retry budget on it. Full last error: zO Fix the assignee profile's provider credentials/model, then unblock the task.zAgent z xz: NNzThis task has failed z times in a row (most recent: z). Full last error: z3 The dispatcher circuit breaker is configured for z_ consecutive non-success attempts. Fix the root cause and reclaim or unblock the task to retry.z (no error recorded)zP) but no error text was captured. Check the suggested command or the worker log.repeated_failuresmost_recent_outcome last_errorr rdonearchivedr>rr)rRrrrMrjrnextrrrrextendrrr_OUTCOME_LABELS splitlinesr7)rOrlrrrr rfailures terminal_triprrr'r;doctorauthrr err_snippet outcome_labelr8r9s&&&&& r_rule_repeated_failuresr6rs4"&EE 05q9I!#''/":IFMD"8:JANH9@M h.(2F }}1HD"68JKH4,H <S:LT:RS <  ')Gn,h)>S#H:W5H:U7Sy#3F8!= cfg["crash_threshold"] (default 2) consecutive ``crashed`` with no ``completed``/``reclaimed`` between. Fires earlier than ``repeated_failures`` for a crash-specific heads-up and suppresses itself when the unified rule is about to fire. Exempt: done/archived (a manual done appends no completed run, so the streak would be permanent) and running (an in-flight run has no outcome and wouldn't break the scan).rrcrash_thresholdNr!rrrrr"zAgent crashed zx: r$z The last z4 runs ended with outcome=crashed. Full last error: zx (no error recorded)z_ runs ended with outcome=crashed but no error text was captured. Check the worker log for more.repeated_crashesconsecutive_crashesr(rr)>r} reclaimed) rRr<rrMrrrr-rrrr/r7)rOrlrrrr consecutiverrr!rr;r r4r8r9s&&&&& r_rule_repeated_crashesr>s4"&EE D0!499cBTUXBY>ZZ CGG-q12IKH  %a+ i  1 K&q'2 2 2 & $%G&(G'01 NN,T;t;LMN(M9zwH *K  S1G1G1I!1LT1R0ST }%##.- 1  ! -BC }%I J   (G;#[, I   rcV^8dQhRR/#rr)rs"rrrs//FV/rc~\VR4R8wd.#\R\\V444R4pVf.#\ \ V4P R4;'gR4P4pVP4PR4'g.#VP R4p\V\4'g.#VP R 4;'g.Uu.uF5p\V\4'gKVP R4R 8XgK3VNK7 p pV 'g.#\ \VR 4;'gR4p V Uu.uF5qP R 4'gK\ VP R 44NK7 p p.p V 'd!V P\R R V 2RR74V 'd1V 'd)V P\RRV RV ^, 244\V4;'gTp \RRR\!V 4 R2RV W\!V 4RV RV RV/R7 .#uupiuupi)zLegacy review handoff starving children: the implementation is sticky-blocked with a ``review-required:`` reason while todo children wait for it to be terminal. Graph-aware; deliberately mutates nothing.rblockedc3J"TFp\V4R8XgKVxK R#5i)rAN)r`)rrrWs& rrs3_rule_review_dependency_deadlock..s ]&< BS\@\& $ $%7 8 8 GGH E eT " " !IIj177R77% eT " ',yy':f'D 7  +dD)//R0G3CW3C%yyQU%UYYt_%3CIW&(Gy 8?,#fTl#,J?+dL!<AABIIcG  (9s://FG#L2:a=/7)LNOs:S_`S_aagxxIS_` a   @as$F7FF(FF$%FcV^8dQhRR/#rr)rs"rrrRs= cfg["blocked_stale_hours"] (default 24) with no comment or unblock since the last ``blocked`` event.blocked_stale_hoursrrAg @c3l<"TF)p\V4R9;'d\V4S8xK+ R#5i) commentedN>rer~rq)rrrWlast_blocked_tss& rrs)_rule_stuck_in_blocked.._s6 r r?8 8 \ \Yr]_=\ \s14TFstuck_in_blockedrzTask has been blocked for hz"This task transitioned to blocked uh ago and has had no comments or unblock attempts since. Blocked tasks are waiting for human input — check the block reason and either unblock with feedback or answer with a comment.rz Add a comment / unblock the taskrrT age_hoursr) floatrMrRrvrr7r<rround)rOrlrrrhoursrjrfs&&&&& @r_rule_stuck_in_blockedrnRs  #''/4 5E4"i/ &v {;O! &&0I  s  sss    )*3y>*:!<3C N3CDST"y8Z,023%O1O[% 1:M N   rcV^8dQhRR/#rr)rs"rrros88AQ8rc\VPR4^4p\VPRR44pW6, p^pRp ^p ^p VFUp \V 4p W8dK\ V 4pVR8Xd#V ^8XdT p V 'dV^, pT p Rp KHKJVR8XgKSRp KW W8d.#\ VR4p.pV'd&R V 2pVP \R V 2VRR 74\R R RV R\VR, 4 R2RV R2TV 'd \V 4M \V4V 'd \V 4M \V4VRVR\V4/R7 .#)u>= cfg["block_cycle_threshold"] (default 3) blocked-after-unblocked cycles within cfg["block_cycle_window_seconds"] (default 24h). Complements ``_rule_stuck_in_blocked``, whose timer any unblock resets, so fast cyclers are invisible to it. ``_rule_stuck_in_blocked`` resets its timer on any ``commented`` / ``unblocked`` event, so a task that cycles every few minutes is invisible to it regardless of how many times it cycles (#29747 gap 1). This rule complements that one by counting block→unblock cycles in a sliding window. block_cycle_thresholdblock_cycle_window_secondsFrAr~Trzhermes kanban events zCheck block reasons: rblock_unblock_cyclingruTask block→unblock cycled zx in rizThis task has been blocked z times after being unblocked, suggesting the unblock is not addressing the root cause and the worker keeps hitting the same wall. Review the block reasons in the event history; a different intervention (reassign, change scope, archive) may be needed.cycleswindow_secondsriQ) rrMrkrdr`rRrrr7r<)rOrlrrrr rv cycle_cutoffruseen_unblock_since_last_cycleinitial_blocked_tslast_cycle_blocked_tsrWtsrrr;rs&&&&& r_rule_block_unblock_cyclingr|oscgg&=>BI377#?KLN'L F$)! r]  2 9 !Q&%'",! (*%05--[ ,0 ) $%G&(G%gY/y#8!>tTU  $y,VHE#nT>Q:R9SSTU,VH5781Cc,-S3HS./cRUh 0#n2E F   rcV^8dQhRR/#rr)rs"rrrs66=M6rc\VPRR 44p\VR4R8wd.#\VR4'd.#\VR4;'gRpVP4'g.#\ V0R!m4pV^8Xd"\ \VR^R7;'g^4pV^8Xd.#W7, pW8d.#VR 8dVR , R R 2M\ V^<, 4 R 2p W^,8dR p MW^,8dRp MRp \ RRRV/R7\RR4.p \RV RV R2RV RV: R2V Ww^RVR\ V4RVR\ V4/R7 .#)"uZAssigned, unclaimed, ``ready`` for >= cfg["stranded_threshold_seconds"] (default 30 min). Deliberately age-based and identity-agnostic so it catches typo'd assignees, deleted profiles, and down external worker pools alike without a registry to curate. Unassigned tasks are excluded — the dispatcher's ``skipped_unassigned`` already covers them.stranded_threshold_secondsrready claim_lockrr]rcrZrs.1frimr"rrrzReassign to a different workercurrent_assigneerzCheck dispatcher statuszhermes kanban diagnosticsstranded_in_readyz Ready for z with no workerzThis task has been ready for z5 but nothing has claimed it. Common causes: assignee z is misspelled, the profile was deleted, or the external worker pool for this lane is down. Confirm the assignee is correct and that a worker is actually polling for it. ready_since age_secondsthreshold_secondsr>createdr|r<r~) rkrMrRrrvr<rrr7) rOrlrrrrr last_ready_tsrage_strr r;s &&&&& r_rule_stranded_in_readyrs cgg&BGLM4"g- 4&& 4,22H >>   %V-^_MKlAFKK!L  %K& .9T.At#C(*#k\^N^J_I``aGbG!++ A- - j0P"4h!? A+-HIG  87)?3.wi8#,'*+#q]M3{;K($7=N9OQ   rcV^8dQhRR/#rr)rs"rrrsDD9IDrca\VPRR44p\VR4R8wd.#^RIHpVP \VRR44pVeW7, V8d.#\ \VRR4;'gR4pVPVP44'g.#VP \VR R44p V eW9, VP8:d.#^R I H o\VR R4\VR R43.p \VR R4p VFip V e\V RR4V 8wdK\V 4R.9gK-\V 4p V PV PR4V PR434Kk \V UUu0uFwrV'gK\!V4kK upp4p\";QJdV3RlV 4F 'gK RM RM!V3RlV 44'd.#W7, pVR8dVR, R R2M\!V^<, 4 R2pVV^,8dRpMVV^,8dRpMRp\ \VR4;'gR4p\%RTRV R2RT R R!P'R"V44;'gR# R$2\)R%R&RR'7\+R(R)V 24.Ww^RVR*\!V4R+VR V R,\!V4/R-7 .#uuppi)/uA ``running`` card whose claim expired >= cfg["stale_running_grace_seconds"] (default 1h) ago with no live recorded worker. Nothing in the dispatcher is going to free this card — its reclaim paths can decline a card whose owner receipt never resolved, and until they could not, the failure was invisible: an operator saw only the cards queued behind the profile's worker cap. So the jam itself is the signal. Silent in every shape that can still progress: a live claim (the owner is still working), a heartbeat inside the dispatcher's max-stale window, a foreign host's lock (its pids say nothing here), or a live recorded worker. Read-only. stale_running_grace_secondsrr) kanban_db claim_expiresNrr]last_heartbeat_at) _worker_alive worker_pidworker_started_atcurrent_run_idrArrYc3`<"TF#wrV'gKS!\V4V4xK% R#5ir()r<)rrrrYrs& rrs&_rule_stale_running.. s' Vh?3RU .=S: . .hs ..TFrsrrirr"rrr stale_runningzRunning z+ past its expired claim with no live workerzONothing is executing this card and nothing has reclaimed it: the claim expired zR ago, no heartbeat arrived inside the last hour, and no pid recorded for the run (z, c38"TFp\V4xK R#5ir()r)rrrXs& rrsrs$:TSVVTsnonez) is alive. The dispatcher declines a reclaim when the run's owner receipt never resolved, so the card can hold its profile's worker slot indefinitely while every card queued behind it stays deferred. Check the card's log, then reclaim it.rzReclaim the dead claimrzReclaim from the CLIzhermes kanban reclaim expired_seconds recorded_pids grace_secondsr>spawned worker_bound)rkrMrR hermes_clir _to_epochrrN _host_prefix)DEFAULT_CLAIM_HEARTBEAT_MAX_STALE_SECONDShermes_cli.kanban_db_dispatchrr`rYrrr<rr7joinrr)rOrlrrrrkbexpireslockhbrecordedrArWr!r_pidsrrr rrs&&&&& @r_rule_stale_runningrs#''"?IJM4"i/ *ll;t_dCDG3=M9 {4r288b 9D ??2??, - - k$(;TB CB ~38(T(TT ;T<6T#6=?@H/ 6F  +b(D"AV"K  r?9 9$R(G OOW[[/\1JK L  (:(c83s8(: ;D s Vh Vsss Vh VVV mO3Bd3J/D(-Q/?R/013 -!++ MA- -+dD)//R0G  x !LM`99$:T$::DDfEFHI "y8P\`a15KG93UVX1w(93;Ot%8"s=13  !;s K K z list[RuleFn]_RULESr r r9rcrrc V^8dQhRRRR/#)r rr rrr)rs"rrrLsJJJ$Jrc&RV9;'gRV9#)r r rr s&r_has_explicit_thresholdrLs # % I I)Bc)IIrc V^8dQhRRRR/#)r rrrr r)rs"rrrPs  . T rcT;'g/p\VPR4;'g/4pVPRVPR\R,44\ V4'g VR,VR&V#)zDiagnostics config from the ``kanban`` section. ``kanban.diagnostics. failure_threshold`` is an explicit override; otherwise the threshold is ``kanban.failure_limit`` so diagnostics match the dispatcher's breaker. diagnosticsrr )r rM setdefaultDEFAULT_CONFIGr)rdiag_cfgs& rconfig_from_kanban_configrPsr!!rJJNN=177R8H H[9\] #8 , ,(0(A$% Orc V^8dQhRRRR/#)r rrrr r)rs"rrr^s>drc$T;'g/p\V\4'g/#/pVPR4p\V\4'dVP\ V44W!R&RFpVPV4pVfKWAV&K V#)zDiagnostics config from the full runtime config: folds ``kanban`` through ``config_from_kanban_config`` and carries ``kanban``/``auxiliary``/``model`` through for the triage-aware rules.r)rr)rLr rMupdater)rrrrrs& rconfig_from_runtime_configr^s!!rJ j$ ' ' C)J*d## ,Z89"H %s#  H& JrrrrPc 0V^8dQhRRRRRRRRRRR R /#) r rlrGrrr@rrrPrrr)rs"rrrqsF       rc a \VeTM\P!44pT;'g/p/\CVCpVeWWR&\V4'g1RV9d*\ VP R4\R,4VR&.p\ Fp VPV !WW&V44K \\4U U u/uFwrWbK up p o VPV 3RlR7V# \dKji;iuup p i)znRun every rule for one task; critical first, then error, warning; ties broken by most-recent ``last_seen_at``.rErr cl<SPVPR4)VP;'g^)3#)rr)rMr r>)d severity_idxs&rr*compute_task_diagnostics..s.\--ajj"==ATATST?UVrr) r<timerrrrMrr-rK enumeratersort) rOrlrrrrPnow_tsrrruleisrs &&&$$$ @rcompute_task_diagnosticsrqsTYY[ 9F \\rF &^ &v &C H "6 * *&/H#0 JJ '8K)L$   C  JJtD$< = &/~%>?%>TQAD%>?LHHVHW J    @sC) C;) C87C8)rrr"r()auxiliary.kanban_decomposerauxiliary.triage_specifier decomposerzAuto-decompose is on, so the dispatcher needs auxiliary.kanban_decomposer (with auxiliary.triage_specifier as a fallback for non-fan-out tasks).)rr specifierzkAuto-decompose is off, so triage tasks need `hermes kanban specify`, which uses auxiliary.triage_specifier.rrs)?__conditional_annotations__r3 __future__r dataclassesrrrtypingrrrr rUrrrrr7rRrYr`rdrjrvrrrrrrrrrrGr<r RuleFnrrrrrrrrrr.r6r>rUr`rnr|rrrr4rrrrr)rs@rrs#0044 2M       ( ( -6F S 1U1 @ W 4O 3S 49c48$z:JJ K ] . 2.0       0f$O "7KIwWOd7t/dD:8v6rDR $#  $qq2!'"7$J &   " !r