+ lHj#Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIHt^RIHtHt]P*!]4tRtRt]R,tRtR_tR tR`t]P>!R 4t ]P>!R 4t!R R lt"RRlt#RRlt$RRlt%RaRRllt&RRRR/RRllt'RbRRllt(RRlt)RRlt*]R , 3R!R/R"R#lllt+R$R%lt,R&R'lt-R(R)lt.R*R+lt/R,R-lt0!R.R/]14t2!R0R1]24t3R2R3lt4R4R5lt5R6R7lt6RaR8R9llt7R:R/R;R<llt8R=R>lt9R?R@lt:RARBlt;RCRRDR/RERFlltR:RRKR/RLRMllt?RNROlt@RPRQltARRRSltBRTRUltCRVRWltD]RX8Xd] PP^]G!]!]H4P4PP44] PRY,RZ.8Xd^RILtL]N!]B!] PR],44hR# ]M]N3dtO]P!]OR[R\4;'g#]Q!]O]N4;'d]OP'*tS];!] PR],4tT]S'gM]T'dE]PP]/!]T^,44'd]V!]:!]T^,R^44hRtOAOii;i)cuBot Mode agent-to-agent DM tool — ``message_agent``. Lets a Bot Mode agent message a teammate (a profile on this install, an agent on a registered peer gateway, or one on another Desktop-connected machine): the target is validated against the live roster, the attribution prefix is applied server-side, and the reply arrives later via the background-process completion notification (fire-and-forget). Containment: the schema is injected ONLY into a bot's canonical "Bot Chat" session on a Bot-Mode-managed install (same gate as ``tools/bot_mode_probe.py``; never in the registry or any toolset), and dispatch re-checks that gate so a forged call returns a structured error. Transports: local → ``hermes -p chat --in ~ -c "Bot Chat" --create-if-missing -Q --query-file ``; peer → ``hermes peer dm [/] < ``; both via ``terminal_tool(background=True, notify_on_complete=True)``. ) annotationsN)Path)AnyOptional message_agenti>iz hermes-dmi,z=^([a-z0-9][a-z0-9_-]{0,63})/([a-zA-Z0-9][a-zA-Z0-9_-]{0,63})$z ^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$cV^8dQhRR/#returnstr)formats"6/home/ubuntu/.hermes/hermes-agent/tools/bot_mode_dm.py __annotate__r>s**s*c.^RIHp\V!44#)get_process_hermes_home)hermes_constantsrr rs r _default_homer>s8 &( ))rcV^8dQhRR/#)r r dictr )r s"rrrCs5545rcZRRRR\RRRRRRR RR RR /R RR RR \ R2//RR R .///#)zFOpenAI-format schema for ``message_agent`` (injected, not registered).typefunctionname descriptionuFSend a message to ANOTHER agent (teammate) on this install, or to an agent on a registered peer gateway. This is FIRE-AND-FORGET and asynchronous, like texting: it validates the target against the live roster, delivers your message into that agent's own Bot Chat with your attribution automatically prefixed, and returns immediately with a dispatch acknowledgement — status queued plus a delivery_id (the hand-off to a background delivery process, not a delivery receipt). It does NOT return their reply and you must not wait or poll for one — send it, finish your turn, and that process's completion notification wakes you with the outcome: their reply, or the delivery failure — unless the ack returns reply_delivery="poll", in which case follow its process(action="wait") instruction before ending the turn. COMPOSE the message yourself: write what YOU want to say to that agent (lead with the point; include the concrete ask or result). Never paste the user's words verbatim — paraphrase the actionable substance, and keep private 1:1 chat content private. Message one clearly relevant teammate when it genuinely helps the user's goal; don't fan out to several agents unless the user explicitly asked. Use the teammate roster in your system prompt (names + roles) to pick the right recipient; targets: a teammate name (e.g. 'researcher'), '/' for an agent on a registered peer gateway (e.g. 'spark/researcher', or just '' for the peer's main agent), or an agent on another connected machine from your roster (use '@' if the same handle exists on several). parametersobject propertiestargetstringzWho to message: a teammate profile name from your roster ('researcher', 'hermes' for the default agent), or '' / '/' for a registered peer gateway.messagez-The message YOU composed for that agent (max uT chars). Do not include the 'Message from …' prefix — it is added automatically.required)MESSAGE_AGENT_TOOL_NAMEMESSAGE_MAX_CHARSr rrmessage_agent_tool_schemar'Cs   + Q. %Y%K012WW $Xy1)50 3 3rc V^8dQhRRRR/#r agentrr boolr )r s"rrr{sCDrc\VRR4'gR#^RIHpHp\ V4V8H;'dV!\ V44# \ d\PRRR7R#i;i)zThe ``message_agent`` gate: a protocol-enabled agent whose session is a managed Bot-Mode canonical Bot Chat. Session-stable, so it is prompt-cache safe to re-evaluate on every tool-snapshot rebuild. Never raises._bot_mode_protocolTF)BOT_CHAT_TITLEis_bot_mode_managedzmessage_agent_authorized failedexc_info) getattrtools.bot_mode_prober.r/_session_title _agent_home Exceptionloggerdebug)r*r.r/s& rmessage_agent_authorizedr9{sf u2D99Le$6bb;N{[`Oa;bb  6 FsAAA"A,+A,c V^8dQhRRRR/#r)r )r s"rrrsSTrcB\VRR4'gR#\VRR4p\V4;'d5\;QJdRV4F 'gK RM RM !RV44pV'gL\V4'gR#VPf.VnVPP \ 44\VRR4p\V\4'dVP\4R# \d\PRRR 7R#i;i) u Inject the ``message_agent`` schema into a Bot Chat agent's tool list (once per turn). Idempotent and deterministic for the session's life (the gate is stable from the first turn), so the tool list is byte-identical across turns — prompt-cache safe. Never raises.r-TFtoolsNc3"TFEp\V\4;'d)VPR/4PR4\8HxKG R#5i)rrN) isinstancergetr%).0ts& r ,ensure_message_agent_tool..sE&  q$  ` `AEE*b$9$=$=f$EI`$` `s A1Avalid_tool_namesz ensure_message_agent_tool failedr0)r2r+anyr9r<appendr'r>setaddr%r6r7r8)r*r<presentvalids& rensure_message_agent_toolrKsu2D99w-u+  ##& & ###& & # +E22{{"  KK  8: ;148 eS ! ! II- .  7$ Gs4C8C8 C8C8C83C8A0C88"DDc(V^8dQhRRRRRRRR/#) r r!r roster list[str]root Path | Noner Optional[str]r )r s"rrrs)888Y8k8Ub8rcaaVP4P4oS'gR#SR8Xd RV9dR#R#\V3RlV4R4pVfVfV#^RIHpHpV!V4o\ 4P!V3RlV!S4S0,4!p\V4^8Xd\\V44#R#)uhMap a target to a local profile FOLDER id: 'hermes' → 'default'; an exact folder id (case-insensitive); else — when ``root`` is given — a friendly name or its Desktop @-slug (profile.yaml ``display_name`` / Bot Mode title: 'Scribe', '@scribe', 'Dr. Foo' → 'foo'). Ambiguous friendly names resolve to None so a DM never lands on the wrong bot (#100671).Nhermesdefaultc3T<"TFqP4S8XgKVxK R#5iN)lower)r@rwants& rrB&_resolve_local_name..sB64ZZ\T-A$$6s( () alias_formslocal_alias_mapc3X<"TFpSPV\44xK! R#5irV)r?rG)r@formaliasess& rrBrYs#Y>XdT3511>Xs'*) striprWnextr3rZr[rGunionleniter) r!rMrOexactrZr[hitsr^rXs &&& @@r_resolve_local_namerfs <<>   !D  x%/y9T9 B6BD IE DL Ad#G 5;;Yk$>OSWRX>XY ZD"4yA~4T 747rrMpeersc(V^8dQhRRRRRRRR/#)r r#r rMzlist[str] | Nonergr r )r s"rrrs+#"2BR^arcr^RIHpRVRV!V4/pVeWR&VeW$R&\P!V4#)r)classify_agent_errorerrorreason teammatesrg)tools.bot_failure_reasonsrjjsondumps)r#rMrgrjpayloads&$$ r_errrrsE>&;OPW;XYG %    ::g rc ,V^8dQhRRRRRRRRRR/#) r r!r r#task_idrQr*rr r )r s"rrrs?`m`ms`m#`m]`mbe`mqt`mrc a%a&\V4p^RIHpHpHpHpHp Hp Hp H p ^RI H p \V4V8wd \R4#V !V4'g \R4#^RIHpT!RTR 7T!\#T44T !\#T44pp\%T !T44p\'T4pT !T4o%TUu.uFpTT8wgK T!T4NK upo&R T%T&3R llp\)T;'gR 4P+4pT'g \R 4#\-T4\.8d \R\-T4 R\. R24#\)T;'gR 4P+4P1R4pT'g T!R4#RT!TTP3T\#T444 RT!T4 R2T,p\%Y#R7pRRT 2RT!T4RR/p\4P7T4pT'gTP94S%9dT'dTP;4MTP94R3wppTS%9d T!RT R24#T'dT RT 2MTp^RIHpH p /TCRT!TT !44/Cp!\CT !4R T !T4R!R"T.TRT;'gT R#T R$23R%RR&T!/TB#RTP+4P1R49d\ETTTT3/TBp"T"eT"#\GTTT4p#\I\JP7T44p$T#fT$'gRT9dT!R'T: R(24#T#eT#T8Xd=\E\#T4TTT3/TBp"T"eT"#T#T8Xd \R)4#T!R*T R+24#\CT !4R T#.TRT!T#4 23R%R,R-TT#,R&T/TB# \dp\RT 24uRp?#Rp?ii;iuupi).uDeliver ``message`` to ``target``'s Bot Chat. Returns a JSON ack/error. ``agent`` is the calling AIAgent — used for the Bot Chat gate and sender identity.)r. _display_name_handle _hermes_root_peers _profile_name_rosterr/) _hermes_clizhmessage_agent is only available in a Bot Mode 'Bot Chat' session. This session is not one; do not retry.zaThis install is not Bot-Mode-managed (no bot roster); message_agent is unavailable. Do not retry.zBot Mode gate check failed: N)record_feature_usedbot_mode) hermes_homec V^8dQhRRRR/#)r msgr r r )r s"rr(message_agent_tool..__annotate__s8888rc <\VSSR7#))rMrg)rr)rrgrms&r _roster_err'message_agent_tool.._roster_errsC 77ruCmessage is required — compose what you want to say to that agent.zmessage too long (z chars > zC). Send the essentials; share large content as a file path instead.@ztarget is required.uMessage from 🤖 z (@z): rtr*idzbot:ris_botTzNo registered peer named 'z'./) bot_author_id local_origin-ppeerdmz on peer '' stdin_fileauthorzInvalid target: .z>8r>&d4j*grVXV  N r>VW W0 =GGH H KM4:GqQYIZH[E\ m&+ m:Fx:P mY_ mck mm] :23%899:8s54N' N' N'8 O  O ' O 2 O?O O c4V^8dQhRRRRRRRRRRR R R R/#) r rOrrr rrrtrQr*rr r )r s"rrr,s@--d--c-s-!.-7:-?L-rcaa^RIHpHp^RIHpHoHp Hp Hp H p H p V !V4pV'd V !W4MRpVfR#VR8XdVP4PR4PR4^,P4oRPVV3Rl\!W!W!V44444p\#RV R V R 24#V !WW#V!V4R 7pRTR, RTR,;'g TR, 2p\-T !TT4TTR,YER7p\$P.!T4P1R 4pT'gT#\$P&!RRRTR,RTRTRRT R2/4# Td8p\$P&!R \)T4R TP*/4uRp?#Rp?ii;i \2d\4P7RRR7R#i;i)a,Cross-connection delivery via the Desktop relay; None when the target doesn't resolve against the relay roster. The envelope is queued on disk for the Desktop to drain; a background waiter is spawned immediately so the relayed reply wakes the sender through the standard completion-notification path.)rwlocal_taken_forms)EnvelopeRefusedError_target_aliasesenqueue_enveloperead_remote_rosterremote_target_formsresolve_remote_targetwaiter_commandN ambiguousrz, c3J<"TFwrSS!V49gKVxK R#5irVr )r@rr]rrXs& rrB&_try_relay_delivery..?s)=2swq!%);!;#d2ss# #ruE' exists on several connected machines — disambiguate with one of: r)r!r#sender_profile sender_handlerkrlhandlez on connection_label connection_idr) delivery_idrtr*statusqueuedrtonotification_errordetailMessage queued for zv; the relay delivers it on its own, but the reply waiter did not start, so the reply will NOT wake you. Do NOT resend.zrelay delivery attempt failedTr0)r3rwrrrrrrrrrr_r partitionrWjoinziprrrorpr rl_spawn_deliveryloadsr?r6r7r8)rOrrrrtr*rwrrrrrrrrMrformsenveloperlabelraw waiter_errorrrXs&&&&$$ @@rrr,s 'C   $D)=C%j9 = K ##%,,S1;;C@CIIKDII=#f>QRXZklpZq>r2s==E!J<'lmrlsstuv v I'GnuvxnyzH E(O$D/A)B)\)\eOF\(]^nT8.}sWYzq&q6::Ys) timerrr contextlibsuppressOSErrorrrFrrsum)rr temp_root locationsdm_dirrrs&$ @@rcleanup_bot_dm_cacherms![diikc]T5I IFX((*+I./)=T1UVI   W % %&'*+ &-01 &8 WYW WW & %s 41C  C c V^8dQhRRRR/#)r rr r Noner )r s"rrrs#$rc\P!\4;_uu_4\P!V4RRR4R# +'giR#;irV)rrrrunlink)rs&r_unlink_dm_filer s-   W % % $ & % % %s A A c V^8dQhRRRR/#)r rr r r )r s"rrrs  C C rc\4\P!RR\4RR7wr\P !VRRR7;_uu_4pVP V4RRR4V# +'giT#;i \dc\P!\4;_uu_4\P!T4RRR4M +'giM;i\T4hi;i) u:The message rides a temp file — never inline shell text.zdm-z.txtT)prefixsuffixdirtextwutf-8encodingN) rrmkstemprrfdopenwrite BaseExceptionrrrcloser )rfdrfs& r_write_dm_filersuVQUVHB YYr3 1 1Q GGG 2 K2 1 K    ) ) HHRL* ) ) ) sA!BA-#B- A> 8B>B-C..C C. C C.c V^8dQhRRRR/#)r argvrNrr+r )r s"rrrsKKK4KrcnV'd V^,MRPR^4R,PR^4R,pV'g&\V4^8gVR9gV^,R8wd\P!4#^RIHp^RIHpV!V!\\444V^,4#) a2Per-profile turn lock for a LOCAL teammate delivery: local and relay deliveries into one profile both run a Bot Chat turn here, so the turn window is serialized on ``tools.bot_relay``'s cross-process lock. Peer transports (stdin mode) are locked on the remote gateway by its own deliver path. See #93091. r\rr)rx)acquire_turn_lockrSz hermes.exe) rsplitrbr nullcontextr3rxrr"rr)rrclirxr"s&$ r_delivery_lockr(s47 * *4 3B 7 > >sA Fr JCSY]c1I&ITRSWX\_%%''11 \$}*?@$q' JJrc V^8dQhRRRR/#r dm_filezstr | os.PathLiker r r )r s"rrrs--0-S-rc4\P!V4 R2#)zYThe pinned live-delivery intent beside a DM file (the cache sweep globs ``*.live.json``).z .live.json)rfspathr+s&r_live_intent_filer/sii ! ,,rc V^8dQhRRRR/#r*r )r s"rrrsMM.M3Mrc\P!\\V4P 44P 44P 4#)zOne delivery id per DM file: the dispatch ack, the live-owner intent and every retry of the runner derive it the same way, so the sender can correlate all of them.)hashlibsha256r rresolveencode hexdigestr.s&r_dm_delivery_idr7s7 >>#d7m3356==? @ J J LLrc"]tRtRtRtRtRtRtR#)LiveTargetUnavailableErroriuThe canonical Bot Chat owner could not be reached with anything admitted — before the intent was pinned, or on a dial that died before the deliver RPC went out: nothing was sent, so this is a definite no-send the sender may retry, not the ambiguous post-admission state.runtime_unavailablezonce the target is upr N)__name__ __module__ __qualname____firstlineno____doc__rlresend__static_attributes__r rrr9r9s #F $Frr9c4]tRtRtRtRt]RRl4tRtR#)LiveTargetHeldErroria!The owner refused because another session writer holds the Bot Chat, and settled this delivery id as never sent (``bot_relay.settle``): every later attempt under the id gets that disposition, so this is a definite no-send too. A refusal without that settlement stays the ambiguous outcome.zafter that session closescV^8dQhRR/#rr )r s"rr LiveTargetHeldError.__annotate__src ^RIHpV#)r HELD_NOT_SENT)rnrH)selfrHs& rrlLiveTargetHeldError.reasons ;rr N) r;r<r=r>r?r@propertyrlrAr rrrCrCs  )F rrCc$V^8dQhRRRRRR/#r r+r rr9r r )r s"rrrs'll#l,Fl3lrc \P!RVPR\V4RV RVP R2/4#)rlrrku4 — the message was NOT sent; it is safe to resend r)rorprlr7r@)r+rs&&r_unavailable_payloadrOsH ::x]OG8 < c cFJJy1T9 c cfjj>RVc>ccrc(V^8dQhRRRRRRRR/#) r rrPr+r rOptional[dict]r rXr )r s"rrrs)<<<s<N<^i<rc ^RIHpHpHpHp^RIHp\\V44pRp VP4'd)\P!VPRR74p EM6VfQhV!V4p T f \R 4h\RR T R \T4PRR7R \!T4/T'dR T/M/Bp \"P$!T\"P&\"P(,\"P*,R4p \"P,!T RRR7;_uu_4p\P.!Y4TP14\"P2!TP544RRR4T!TP64Rp V R ,R,pV!WR ,4pVeV R ,P;R4'dO^RIHp^RI H!p^RIH"p\V R ,V P;R 4R7pV!WR ,V R ,3/VBp\MV4'd \OR4hV# \dp \RT R24T hRp ? ii;i +'giL;i \8d+\P!TPRR74p ELi;i TdSp \GT 4T8wg T PHP;R4RJdhT!YR ,T R ,3/TBpRp ? LRp ? iTd3p T 'gh\K\T44\RT R24T hRp ? ii;i)zIPin intent before admission; retries may inspect, never change transport.) PreDialErrordeliver_to_live_ownerfind_canonical_live_ownerread_delivery_result)fsync_directoryF utf-8-sigrNz*canonical Bot Chat target is unavailable ()z(canonical Bot Chat target is unavailableownerr#rrirrTr canonical)GatewayRPCErrorrG)settle_held_delivery)rradmittedz-live authority dial failed before admission (z*Bot Chat is held by another session writerr )(tools.bot_live_deliveryr_r`rarbutilsrcrr/existsror read_textr6r9rr7ropenO_CREATO_EXCLO_WRONLYrdumpflushfsyncfilenoparentFileExistsErrorr?hermes_cli.gateway_clientrhrnrHrir datar r[rC)rr+rr_r`rarbrc intent_path pinned_nowintentrfrrstreamrrWrhrHriidentitys&&& r_admit_live_dmrs??%(12KJK11;1GH''' k-l;E =,-WX X@E@4=+B+BK+B+X@"1'":@/5(F+2@ bjj299& *D !$}(= >F ~,,[99=;@F=$9&**XBVW n*4&BS`W_`F  !"NOO M[ k,/YZ]Y^^_-`agj j k65 MZZ 5 5{ 5 KLF M& `3x=(CHHLL,DE,Q*$w AR_V^_F n -g6 7,/\]`\aab-cdjm m  nsc.I AJ6A I-J8 I*I%%I*- I= 1J54J58M?AL  MM-MMr+c(V^8dQhRRRRRRRR/#)r rr rr+zstr | os.PathLike | Noner rr )r s"rrr%s0-B-B-B#-B;S-B_b-Brc ^RIHp^RIHpHpHp\ P!4\,p^pV!W\R\\V\ P!4, 444p V e)V R,R9g\ P!4V8dM^V!W 4p V 'd^pK~V R Jd1V R,R8Xd#V!WR VR 7p V eV R,R8wdM^pKV^, pV^8gKV 'd V R,MRp RU u/uF.q'gK V PV 4'gK%WV ,bK0 p p V P!WR7V R9dRV R&M3V R8Xd-Ve)\#\%V44\#\'V44\)\*P,!V 44V R9d^#^# \d\PR RR 7Rp ELEi;iuup i)r)RUNTIME_OFFLINE)await_deliverycancel_queued_deliveryowner_holds_deliveryTgNrrclaimedzCould not check live DM ownerr0Fz*Live Bot Chat owner is no longer available)rkrlr)rrzWDelivery remains pending or its outcome is unknown. Do not resend; receipt is retained.rsettled)rr)replyrkrl)rrr)rrr)rnrrkrrrr monotonic_LIVE_WAIT_MAX_SECONDSmaxmin_LIVE_WAIT_SECONDSr6r7r8r?updater r/r printrorp)rrr+rrrrdeadlinemissedrWheldrkeyrqs&&$ r _wait_live_dmr%s9dd~~"88H F 3sC@RT\_c_m_m_oToVH-5JJdnnN^bjNj  '5D F  5=VH-9,)U&(F~!1Y!>F  !  A: !'VH [F+Gf+GC6V\V`V`adVes3K+GGf NN&N: 33u 9 !4 )'23G % $**W ::1AAC  LL84L HD ,gs$G G.G.8 G.$G+*G+c V^8dQhRRRR/#)r rrNr rPr )r s"rrrUsKKyK[Krc ^V'd V^,MRPR^4R,PR^4R,p\V4^8gVR9gV^,R8wdR#^RIHpHp\ V!V!\ \44444PV^,4#) rrr!rrN)rxr{r#r$) r%rbr3rxr{rrrr?)rr'rxr{s& r_local_delivery_homerUs47 * *4 3B 7 > >sA Fr JC 4y1}#;;tAw$:  T-/%:;< = A A$q' JJrc$V^8dQhRRRRRR/#)r r+r causerr r )r s"rrr^s!2232v2#2rc X\P!RRR\V4RRV R2RV/4#)zWThe runner's stdout when a live admission may have happened but its outcome is unknown.rrrrkz Live admission outcome unknown: . Do not resend. evidence_file)rorpr7)r+rs&&rrSrS^s: ::xm_W=U"B5'IY Z&1 22rc V^8dQhRRRR/#)r argsrNr z0tuple[Optional[str], str, str, list[str]] | Noner )r s"rrres . .y .%U .rcVR,R.8wdR#VR,Rr!VR,R.8Xd$\V4^8dR#V^,VR,r\V4^8gV^,R9dR#W!^,V^,VR,3#)uSplit ``--run-delivery [--author ] `` into ``(author_json, mode, dm_file, argv)``; None when malformed. Stdlib only: the boot-failure report runs it when no Hermes import is available.NN--run-deliveryNrNN--authorr NN)stdin query-file)rb)rrestrs& r _runner_argvres Bx$%%8T& BxJ< t9q=AwR 4y1}Q'>> 7DGT"X --rrrc 0V^8dQhRRRRRRRRR R R R /#) r rrNr+r rr+rrPrr]r rr )r s"rrrus9&!&! &!C&!&! +&!!$VN%;VM=R\cdd  djj($97Dxyz{ !06z] [--profile-home ] ``.rrr--profile-homewin32r!rr) separators:rN),:) sys executabler r__file__r4extendplatformreplacerorpshlexr)rr+rrr runner_argvparts&&$$$ r_delivery_commandrs>>3tH~'='='?#@BR(7lGEK,c$|2D2L2L2N.OPQt ||w@%rcRp^RIHpV!VRRV\\\4P 4P P 4R\R7p\P!V4p V PR4;'gRp V PR4'd6\RV R V R, 24V'dV'g \V4###V PR 4R 8Xd>\RV R 2V'dR MR,4V'dV'g \V4###V 'g-\RV R24V'dV'g \V4###RpV PR4RJd%RV RV R2p \W4'd V R, p MRV R2p \P !R RRT;'gV'd \#V4MRRTRV PR4RJdRMRRV RV R\%\&P&!44/4V'dV'g \V4### \\3d/p ELi;i \(dQp \*P-R T RR!7\RT R"T 24uR#p ? T'dT'g \T4###R#p ? ii;i T'dT'g \T4iii;i)$aLaunch the cleanup-owning runner and transfer file ownership on ack. ``dm_file`` is None for relay deliveries (the waiter watches a reply file; envelope artifacts are owned/swept by ``tools/bot_relay.py``), which pass the envelope id as ``delivery_id`` instead. The ack is ``queued`` + ``delivery_id`` like the live-owner branch: hand-off to a background process, never a delivery receipt.F) terminal_toolT) backgroundnotify_on_completertworkdir _host_local_completion_output_chars session_idrrk Delivery to z failed to start: rpending_approvalzX failed to start: its command needs terminal approval that nobody in this turn can grantzR, so nothing was sent. Approve it (or add it to command_allowlist) and send again.rz( failed to start: no process id returnedrz4Message handed to a background delivery process for z, but THIS session cannot receive completion notifications, so the reply will NOT arrive on its own. Before ending your turn, retrieve the outcome with process(action='wait', session_id='u') — its output is the reply (relay it, attributed to that agent) or the delivery failure (report it; the message was NOT delivered); if wait returns status=timeout, call wait again until the process exits.z Its outcome is also saved into this session's transcript as a delivery row when the process exits, so it survives even if the turn ends first.ruH: this acknowledges the hand-off to a background delivery process, not a delivery receipt — do NOT wait or poll. Finish your turn now; that process's completion notification carries the delivery outcome — the reply (relay it then, attributed to that agent) or the delivery failure (report it; the message was NOT delivered).rrrrrrrr queued_atz'message_agent delivery spawn failed: %sr0z could not be started: N)tools.terminal_toolrr rrr4rwREPLY_COMPLETION_CHARSror ValueError TypeErrorr?rrr _persist_reply_when_donerpr7rrr6r7rk) rrr+rrtr* transferredrrparsedproc_idrrs &&$$$$ rrrsK8%5GW^$'X(>(>(@(G(G(N(N$O]a5KM ZZ_F**\*00b ::g  ,ug-?w?PQRV ; G $'7U ::h #5 5,ug.11\c5YilnoN ; G $'7I,ug-UVWF ; G $'7C ::* +u 4MUGT%&-I.aaF (77ab,E73YYF zz h ;WWw?7+CTV %  3G(HE(QfWe f ' TYY[)   ; G $'7_I& F V H >d Sl5')@FGG ; G $'7 H ; G $'7sAIH,,III5I&I.IAI7IAI,I?III J!(J9J!:J$J!!J$$K5Kc$V^8dQhRRRRRR/#)r rr r*rr r+r )r s"rrrs!!!c!#!$!rc6aaaaa^RIHo\VRR4\VRR4uooSPS4oSe%S'd\ \SRR44'gR#RVVVVV3Rllp\ P !VR S 2R R 7P4R #) ua#101142 durable leg. A non-push sender (api_server, one-shot runner) gets no completion notification, so once the tracked runner exits its stdout — the recipient's reply or the delivery failure — is appended to the sender's session transcript as a DELIVERY row (``display_kind="process_complete"``, the shape push surfaces persist for the same completion; mirrors gateway.wake.persist_delegation_delivery). A sender that already read the outcome via process(action='wait'/'log') is not told twice. Returns False (nothing armed) when the sender has no session transcript or the process is not tracked here.)process_registry _session_dbNrappend_messageFcV^8dQhRR/#)r r rr )r s"rr._persist_reply_when_done..__annotate__(s55$5rc \<^RIHpHpSPP 4SP S4'dR#RRRS/SP SR4CpSPSRV!V4RR V!V.4/R 7R# \d$p\PR SST4Rp?R#Rp?ii;i) r)format_process_notificationprocess_completion_display_textNr completionrexiteduserprocess_complete display_text)r display_kinddisplay_metadatazDmessage_agent: could not persist the reply of %s into session %s: %s) $tools.process_registry_notificationsrr_completion_eventwaitis_completion_consumed_exit_snapshotrr6r7warning) rrevtrdbprocrrrs r_run&_persist_reply_when_done.._run(s  ##%  2 27 ; ; |\7n>N>]>]^bdl>mn 5   j&:UVY:Z+=0>@_ad`e@f/g  i 5 NNa"J 5 5 5s%A== B+B&&B+zmessage-agent-reply-T)r!rdaemon)tools.process_registryrr2r?r threadingThreadstart)rr*rrrrrsf& @@@@rrrs8UM48'%W[:\NB    (D |:XgbBRTX6Y-Z-Z55"D)=gY'GPTU[[] rc(V^8dQhRRRRRRRR/#)r reply_pathr rbudget_secondsr rr )r s"rrr=s(   S # # rc 0\P!4\V4,p\P!4T8Ed\PP T4'd\ TRR7;_uu_4p\P!T4pRRR4XPR4'd`\TPR4;'gR4P4pT'dRT R2MRp\R T R T R TR, 24^#\R T R 24\TPR4;'gR4^#\P!R4EK8\RT RT R24^# \d^#i;i +'giL;i)abThe relay reply waiter (``tools/bot_relay.waiter_command``): block until the sender-side reply file exists, print it as the completion notification the sender wakes on, exit 1 on a delivery error or when the budget runs out. Stdlib only: this runs as a background process from any bot turn, and the sender's completion notification is exactly its stdout.rdrNrkrlrz [reason: ]rz failedz: z Reply from rrz (empty reply)g?zNo reply from z within zYs. The message may still be delivered when the Desktop reconnects; do not resend blindly.)rrrrrrmroroloadr?r r_rsleep)rrrrfhrcodetags&&& r_wait_reply_mainr=s= 99;~!66 ))+ 77>>* % %j;772IIbM8uuW~~155?00b1779.2 4&* UG73%r!G*FG Kwa( ) !%%.33O 4 4 N5'.)9:; ;< ) 87s%E3<F3 FF F c V^8dQhRRRR/#)r rrNr rr )r s"rrr[ssrc VR,R.8Xd#\V4^8Xd\VR,!#^#\V4pVf^#Vwr#rERpVe^RIHpV!V4pVf^#Rp\V4^8d)V^,R8Xd\ V^,4VR,rX\ WTVR8HWR 7# \dDp ^R IH p \\P!R \T 4R T !T 4/44Rp ? ^#Rp ? ii;i) zRunner entry for the argv ``_delivery_command`` and ``bot_relay.waiter_command`` build. Malformed argv exits 2 without touching the DM file.rz --wait-replyrN)parse_turn_authorrrrr)delivery_failure_reasonrkrl)rbrrrrrrr6rnrrrorpr ) rr author_jsonrr+rrrrrrs & r_delivery_mainr[s BxN##.1$i1nb*C!C $ F ~'-$Kw F7";/ >  t9>d1g)99!%d1gR$TtwUaqq  F djj'3s8X7Ns7STUVs#A B.. C<98C77C<c V^8dQhRRRR/#r r*rr r r )r s"rrr}sssrc 6\P!\4;_uu_4\\VRR4RR4pV'd)\ \ V4P 4uuRRR4#RRR4\4# +'gi\4#;i)zCThe calling agent's OWN home (session-db derived), not ambient env.rNdb_path)rrr6r2r rrwr)r*rs& rr5r5}sl   Y ' ''%=y$O tG}++, ( '  ( ? ( ' ?s >A?? B c V^8dQhRRRR/#rr )r s"rrrs##rc\\VRR4;'gR4P4pV'dV#\P!\ 4;_uu_4\VRR4\VRR4r2V'dEV'd=\VP V4;'gR4P4uuRRR4#RRR4R# +'giR#;i)_session_title_hintrrNr)r r2r_rrr6get_session_title)r*titlesdbsids& rr4r4s 4b9??R @ F F HE    Y ' '5-6|UY8ZS 3s,,S177R8>>@ ( ' '  ( ' s)C C "C  C __main__:rr Nr relaunchedFrzGthe delivery runner could not activate Hermes dependencies (see stderr)iQirV)rrNN)Wr? __future__rrr2rologgingrrerrrrrrrpathlibrtypingrr getLoggerr;r7r%r&rr_DM_STALE_SECONDSrrcompilerrrr'r9rKrfrrrrrrr rr(r/r7 RuntimeErrorr9rCrOrUr[rrrrSrrrrrrrrr5r4rinsertr rr4rwrhermes_bootstrapr6 SystemExitrr2r>rbootedrrmrr rrr1s #       8 $)+T1  !**]^::AB* 5p"<8(TUY`mF-`"1BD0HXaeXX&  K(- M %% 4 l .d<~-BVZ-B`K2 . &!.2&!MQ&!R#26#QU#&"ZTX"Z-1"ZJ@%$@%mq@%F!H <D zHHOOAs4>113::AABC xx})**  # ^CHHRL1 22+:&  S,6hh:c:;V;g;g_b_g_g[gF!#((2,/Ff8I&QR)8T)U)U+F1I8Z[\  s0 H22 K";!K2KK-KKK"