+ lHj[hRt^RIt^RIt^RIHtHt^RIHtHtHtH t H t ^RI H t ^RI t ]P!R4t^N  $ % % :;CCtI_/$%@AIIT #i.C O;0:: 6  < !  9  8 OY_%?@HHD+W`?#;<DD O$=>FF$ rcV^8dQhR\\\3,R\\,R\\,/#r job user_deliverr)rrrr)rs"rrrns9#S#SS#X#Shsm#SPXY\P]#SrcT;'gRP4P4R8XdR#^RIHpV!V4pV'd{^RIHpHpVUu.uFqfPR4R8XgKVNK ppV'dAV!R4'd3V!4'g&R V^,R , R V^,R , R 2#R#R#uupi \d TPR4'dR#R#i;i)u_Notice when a created job won't deliver anywhere: CLI/TUI sessions have no capturable origin, so deliver='origin' (or omitted) saves output but never delivers it. None when the user explicitly asked for ``local`` or the job resolves to a real target. TUI/CLI sessions cannot be captured as a cron ``origin`` (no ``HERMES_SESSION_PLATFORM``/``CHAT_ID`` is set for them), so a ``deliver="origin"`` request — or an omitted ``deliver`` that defaults to origin-or-local — produces a job that runs and saves output to ``last_output`` but is never delivered back into the session. This is by design (there is no live-delivery channel for local sessions), but silently dropping the user's "tell me when it runs" intent is the trap reported in 51568. Surface it at create time so the agent can relay it instead of promising a delivery that never happens. See #51568. localN)_resolve_delivery_targetsr0_resolved_fromorigin_fallbackr3zpNote: this stateless HTTP API session cannot receive cron delivery, so this job will report to the home channel r8:r9z instead of back here.originuhThis is a local-only cron job: its output is saved (view it with cronjob(action='list')) but will NOT be delivered back into this session — CLI/TUI and stateless HTTP API sessions have no live-delivery channel. To be notified when it runs, recreate or update the job with deliver set to a gateway-connected platform, e.g. deliver='telegram' or deliver='all'.) striplowercron.schedulerrOrAr1r2r"r )rJrKrOtargetsr1r2tfallbacks&& r_local_delivery_noticerZns !!#))+w6<+C0  Z#*[7aee4D.EIZ.Z7H[O,EFFOgOiOi??G{:?V>WWX#A;y122HJK  RS\  778    RSs;C  C C/C5C C $C C !C43C4cV^8dQhR\\\3,R\\,R\\,/#rI)rrrrlist)rs"rrrs2((d38n(HSM(dSVi(rc2.pVPR4'gVPR4'dVPR4VPR4'dVPR4T;'gRP4P4pV'dRVP R49dVPR 4VP R 4'dVPR 4VP R4FpVP4P R 4p\ V4^8XgK4V^,R9gKDV^,'gKUV^,P R 4'dKuVPRVP4 R24V# V#)zqMode guidance echoed once in the create/update response (not in the schema, which is paid for on every API call).monitor_script monitor_urlusMonitor mode: the source runs first each tick and its output is hashed as exact bytes — unchanged output suppresses the agent run (silent no_change tick), changed output injects a MONITOR CHANGE DETECTED diff into the prompt. The first tick always runs as baseline. The source must emit STABLE output (no timestamps, no random ordering) or every tick will look changed.no_agentuno_agent mode: stdout is delivered verbatim; EMPTY stdout sends nothing at all (watchdog pattern — script should stay quiet when there is nothing to report). Non-zero exit or timeout sends an error alert. prompt/skills are ignored.rMall,udeliver='all' resolves at fire time and never includes bot-chat targets — channels connected later are picked up automatically.z bot-chat:zJTargeting another profile's Bot Chat costs that bot an agent turn per run.rR#zdeliver target 'uk' has no :thread_id segment — on thread/topic platforms the delivery lands in the main chat, not a topic.)zbot-chatsms)r"appendrTrUsplit startswithlen)rJrKnotes_delivertargetpartss&& r_mode_guidance_notesrmsVE ww  CGGM$:$:  @ A wwz  6 7 ""))+113H HNN3' ' LL! "   { + + LLe fnnS)FLLN((-EE a!H$77!HHa++C00 &v||~&67223 L* LrcV^8dQhR\\,R\\,R\\,R\/#)r monitorr^r_r)rrtuple)rs"rrrs< c]SM#$)rcVfW3#VP4pV'gR#VP4PR4'dRV3#VR3#)a|Resolve the model-facing ``monitor`` field into the stored ``(monitor_script, monitor_url)`` pair. http(s):// is a URL, anything else a script path (a legal script path never starts with a URL scheme). None = unchanged, '' = clear; setting one source clears the other so switching transports never trips mutual exclusion; an explicit ``monitor`` wins over the legacy alias fields.rM)rMrM)zhttp://zhttps://)rTrUrg)ror^r_values&&& r_split_monitor_argrssQ** MMOE   {{} 7885y "9rcRV^8dQhR\\\3,R\/#r rJrrrr)rs"rrrs&EEc3hECErcVPR4;'g/pVPR4VPR^4r2VfR#V^8Xd V^8XdR#R#V'dV RV 2#V R2#)repeattimes completedforeverrz1/1/z timesr")rJrepryrzs& r_repeat_displayrsr ''(  ! !rCwww'a)@9 } z"av2U2%.i[% !DugV4DDrcFV^8dQhR\R\\,/#)r itemsr)rr\r)rs"rrrs==3=49=rcVf.#\V\4'dV.pRV4Uu.uFq'gK VNK up#uupi)zMStripped, non-empty ``str(item)`` values from a str-or-iterable (order kept).c3T"TFp\V4P4xK R#5iN)rrT).0is& r "_clean_str_list..s61A s&()rr)rss& r_clean_str_listrsC } %66 <6!!AA6 << .s-LVTjjbjVs  )rrr\rfromkeysr)rrs&&r_canonical_skillsrsE ~!%r FC   o-LV-LLM NNrstrip_trailing_slashFchV^8dQhR\\,R\R\\,/#)r rrrr)rrrr)rs"rrrs-#QUbjknborcVfR#\V4P4pV'dVPR4pT;'gR#)Nr|)rrTrstrip)rrrtexts&$ r_normalize_optional_job_valuers9 } u:   D{{3 <<4rcFV^8dQhR\R\\,/#)r rrr)rrr)rs"rrrs&&C&HSM&rcVfR#\V\\34'd%RP\ V44;'gR#\ V4P 4;'gR#)zCanonical string form of ``deliver``; None for None/empty. MCP clients may pass a list (``["telegram"]``) which the scheduler's ``str(deliver).split(",")`` would mangle.Nrb)rr\rpjoinrrrT)rrs&r_normalize_deliver_paramrsT }%$''xx./7747 u:    % %%rc\V^8dQhR\\,R\\,/#r deliverrrr)rs"rrrs" (3-rcNV'gR#^RIHp^RIHpHp\ T4PR4FBpT!TP44pT'gK#T!T4pT!T4'dK<RT R2u# R# \ dR#i;i \ d RT R2uu#i;i) zValidate ``bot-chat[:]`` deliver elements at create time: Bot Chat delivery is machine-local, so the profile must exist where the scheduler fires (Desktop rosters may show same-named profiles from other machines). Returns an error string or None.N)parse_bot_chat_deliver_token)normalize_profile_nameprofile_existsrbzinvalid bot-chat profile name ''zbot-chat delivery profile 'u' not found on this gateway's machine. Bot Chat delivery is machine-local — use a profile that exists here (hermes profile list), or omit the name (deliver='bot-chat') for the job's own profile.) cron.scheduler_deliveryrhermes_cli.profilesrrr rrfrT)rrrrpart profile_argcanons& r_validate_bot_chat_deliverrs HNG ""3'24::<@   D*;7Ee$$-k];GG H( !  D4[MC C Ds#A<B< B  B B$#B$c\V^8dQhR\\,R\\,/#rr)rs"rrrs"558C=5Xc]5rcra^RIHo^RIHpV!S!RR44'gV#RV3RllpVfV!4#\ \ V4P R44Uu.uF q3P4R 8XdV!4MTNK" ppRP\PV44;'gR#uupi) aResolve ``origin`` to a concrete target for creates made FROM a cron run (the creating session is ephemeral, so by fire time there is no origin). Non-cron sessions: unchanged. Cron sessions: ``origin`` (or omitted) becomes the creating run's ``platform:chat_id[:thread]`` from HERMES_CRON_AUTO_DELIVER_*, or ``local`` when it has no concrete target; other elements pass through. Otherwise the scheduler would guess a home channel.)r2)is_truthy_valueHERMES_CRON_SESSIONrMc$V^8dQhR\/#)r rr)rs"rr3_resolve_cron_context_deliver..__annotate__(s]]S]rc<S!RR4P4pS!RR4P4pV'd V'gR#S!RR4P4pV'd V RV RV 2#V RV 2#)!HERMES_CRON_AUTO_DELIVER_PLATFORMrM HERMES_CRON_AUTO_DELIVER_CHAT_IDrN"HERMES_CRON_AUTO_DELIVER_THREAD_IDrR)rT)r8r9r<r2s r_creator_target6_resolve_cron_context_deliver.._creator_target(sy"#FKQQS!"DbIOOQw#$H"MSSU 6?(1WIQyk2\zQRSZR[E\\rNrbrS) rAr2utilsrrrrfrUrrr)rrrpresolvedr2s& @r_resolve_cron_context_deliverrs 8% ?+@"E F F]]  KZ[^_f[g[m[mnq[rKstKsaWWY(%:!AKsHt 88DMM(+ , 4 44us&B4c<V^8dQhR\R\R\/#)r base_url configuredr)rr)rs"rrr7s! ) )3 )C )D )rc^RIHpV!V4V!V4rC\T^,4;'dYC8H# \dR#i;i)zOrigin (scheme, host, effective port) equality, as for any bearer secret moved to a new URL: a host-only or subdomain match would let a job send the stored key over plain HTTP, to another port, or to a host the operator never configured.base_url_originF)rrr$r)rrrwantgots&& r _same_originr7sK&#J/1Jc Q= ( (S[( s5 AAcHV^8dQhR\R\R\R\/#)r buprovwhyrr)rs"rrrCs.JJ#JSJsJsJrcRV: RV: RV 2#)zQThe one refusal wording for a base_url override; ``why`` names the endpoint rule.z base_url z is not allowed for provider z. r)rrrs&&&r_base_url_refusedrCs rf9$C5 IIrcFV^8dQhR\R\\,/#)r rr)rr)rs"rrrHs!7!7!7#!7rcaa ^RIHp^RIHo ^RIHp^RIHp^RIH pRpV!S4\;QJd0T 3R lS PSR R 74F 'gK R M% R M!!T 3R lS PSR R 744'gR #S P4pTPR4p\!T\"4'dTPR4MR T!RR4T.RTP%44ORS P'T44Op\;QJdT3RlT4F 'gK R M R M!T3RlT44'dR #\SRT4# \d\SRR4u#i;i)a,Bare 'custom' is BYOK only while the runtime attaches no stored key. The resolver picks the host-gated env keys by HOSTNAME, so a base_url that would receive one must be an origin the operator or the provider registry names; pool and ``model.key_env`` keys already match their configured URL exactly.)get_secret_str)runtime_providerPROVIDER_REGISTRY)OPENROUTER_BASE_URLrzA stored API key matches its hostname, and a stored credential may only be sent to a configured endpoint (same scheme, host and port); configure the endpoint as a custom provider to use it.customzIt is not a valid URL.c3F<"TFpSPV4xK R#5ir)has_usable_secret)rkeyrps& rr+_custom_stored_key_error..[s!g4fSr##C((4fs!T)ollamaFNmodelrOPENAI_BASE_URLrMc3<"TFp\VRR4xK R#5i)inference_base_urlrMN)getattr)rrs& rrrds S8R1'!)2 . .8Rsc3B"TFqPR4xK R#5i)rNr})rentrys& rrres U-TE))J  -Tsc3`<"TF#q'gK \S\V44xK% R#5ir)rr)rurlrs& rrrgs$ C#s %<CH % %s ..)agent.secret_scoper hermes_clirhermes_cli.authrhermes_constantsrrrr$rany_host_gated_env_key_candidates load_configr"rrvaluesget_compatible_custom_providers) rrrrr custom_whycfg model_cfgrrs f @r_custom_stored_key_errorrHsM 2114% I 3gB4U4UVXae4U4fg333gB4U4UVXae4U4fg g g .. C I%/ 4%@%@ j!d("-/B T8I8P8P8R S  VR-O-OPS-T U J s C Csss C CCC R: 66! I X/GHHIsE""E=<E=c~V^8dQhR\\,R\\,R\\,/#)r providerrr)rrr)rs"rrrls01"1"sm1"'/}1"9A#1"rc6\VRR7pV'gR#\V4pV'gR#^RIHpHpHp^RIHpTP4R 8Xd \T4#T!T4'dmT!T4p\T;'g/PR 4;'gR 4p T 'd\Y)4'dR#\Y#R T ;'gR R24#T!T4p \T \4'dTPT 4MRp T 'd!\\T RR 4;'gR 4MR p T 'd\Y,4'dR#\Y#R4# \d RT: R2u#i;i \dRpELi;i \dTp Li;i)adReject pairing a stored credential with an off-origin base_url (a prompt-injected job could exfil the key). Allowed: no override; bare 'custom' while no stored key would go with it, or at a configured origin; an override with the same origin as the named provider's own endpoint. Everything else fails closed. Returns an error string if blocked, else None.T)rNzwbase_url override requires an explicit provider. Set provider to a configured custom provider to use a custom endpoint.)has_named_custom_providerresolve_requested_provider_get_named_custom_providerrz2Unable to validate base_url override for provider z ; refused.rrrMz]A named custom provider's stored credential may only be sent to its own configured endpoint (unknownz): same scheme, host and port.rzA named provider's stored credential may only be sent to its own endpoint (same scheme, host and port); use a configured custom provider (provider="custom") for a custom base_url.)rhermes_cli.runtime_providerrrrrrr rUrrr"rrrr) rrrrrrrrcpcfg_urlrpconfig known_urls && r_validate_cron_base_urlrls 'xd KB  ( 2D  C DW ( ( 6 zz|x'++ && +D1BrxxRnnZ066B7 |B00 $$+$8$8y#99WYZ Z-d32DD"EVXI\"00  ! ""5 WCD8:VVW B  s5E.E4FE10E14 FF FFc\V^8dQhR\\,R\\,/#)r scriptrr)rs"rrrs"x}#rcV'dVP4'gR#^RIHpVP4pV!4R, pVPR4'g\ V4^8dV^,R8XdRV RV: RV R2#^R IHpVPR R R 7W2, pV!WS4'dR V: 2#VP4'g R V RV R2#R#)uScripts must be relative paths within HERMES_HOME/scripts/ (absolute / ~ / drive-letter rejected — prompt-injection guard). Error string if blocked, else None; empty = clear.N)get_hermes_homescriptsrRz Script path must be relative to z'/. Got absolute or home-relative path: z. Place scripts in z/ and use just the filename.)validate_within_dirT)parentsexist_okz9Script path escapes the scripts directory via traversal: zScript file not found: z. Create it in z/ first.)r|~) rTrrrgrhtools.path_securityrmkdiris_file)rrraw scripts_dirrresolved_scripts& r_validate_cron_script_pathrs 0 ,,.C!#i/K ~~j!!c#h!mA# .{m<336': +},H J K 8dT2!'O?88J3'RR  " " $ $%o%67'= 2 3 rcV^8dQhR\\\\,,,R\R\\\,,/#)r context_from continuityr)rrr\r)rs"rrrs:  3c?+  !$s), rcT\V4p\;QJdRV4F 'gK RM RM !RV44pV'dV'gVPR4M7V'g0V'd(VUu.uFqDP4R8wgKVNK ppT;'gR#uupi)zVcontinuity=True ensures "self" is in context_from; False removes it; others untouched.c3F"TFqP4R8HxK R#5i)selfN)rU)rrs& rr$_apply_continuity..s51779&s!TFrN)rrrerU)rrrefshas_selfrs&& r_apply_continuityrsv < (Ds55sss555H( F H74a779#647 <<48s 6B%B%c\V^8dQhR\\,R\\,/#)r rr)r\rrr)rs"rrrs"  d3i HSM rc^RIHpVFTp\V\4'd&VP 4P 4R8XdK>V!V4'dKNRV R2u# R#)uError string if any non-"self" ref names a missing job ("self" resolves to the job's own id at run time, so it can't be checked — the job doesn't exist yet at create).)get_jobrzcontext_from job 'z>' not found. Use cronjob(action='list') to see available jobs.N)r!rrrrTrU)r_get_jobref_ids& r_validate_context_from_refsrs`. fc " "v||~';';'='G $VH-DD E  rctV^8dQhR\\\3,R\\\3,/#rurv)rs"rrrs*22T#s(^2S#X2rcaa ^RIHp\SPR4;'gR4p\ SPR4SPR44p\SPR4;'gR4p\SPR4;'g9VR ,;'g(V'd V^,MR;'g T;'gR 4p/R VbRVbRV'd V^,MR bRVbR \ V4^d8dVR,R,MTbRSPR4bRSPR4bR\ \SPR4;'gR4P44bRSPR4bRSPR4;'gRbR\S4bRSPRR4bRSPR4bRSPR4bRSPR4bRSPR4bRSPR4bRSPR4R SPR 4'dV!SR ,R!R!R"7MSPR 4R#SPR#R!4R$\S4R%SPR%4R&SPR&4/Cp\F0pSPV4'gKVR'8XdR!MSV,Wg&K2 SPR(4;'g.p\V\4'dV.pV3R)lo \;QJdV 3R*lV4F 'gK R!M R+M!V 3R*lV44'dR!VR,&VU u.uFp S !V 4'dKV NK p p V 'dWR(&\SPR-4\ 4'd SR-,VR-&V#uup i).r/)redact_sensitive_textpromptrMrridrname:N2Nzcron jobjob_idNprompt_preview:NdNz...rrpinnedrr schedule_display?rxrrN next_run_at last_run_at last_statuslast_delivery_errorlast_delivery_unverifiedlast_fire_error last_errorT)forceredact_url_credentialsenabledstate paused_at paused_reasonr`rc<\V4P4P4R8H;'gVSPR48H#)rr$)rrTrUr")rrJs&r_format_job..s5A ,,.&8NNA.s +{!71::{sFrattach_to_session) agent.redactr"rr"rrhrrTrr _FORMAT_JOB_OPTIONAL_KEYSrr) rJr"r#rr'r%resultr stored_refsr external_refsr>s f @r _format_jobrFsy2 "((b )F swww/1B CF ++) ,F swwvff&+ffv&)2ffRXff\f gD& f$ &  #f+2C&,.  !  CGGJ' $s3777+11r288:; CGGJ' CGG./663 /#& 3779g. sww}- sww}- sww}-!" sww'<=#$ #CGG,F$G%& 377#45 WW\ " ",  T$ (+ (=3779d+$S)SWW[)17F:) 773<<"%"3$SFK)''.)//RK+s##"m NG s +{ +sss +{ +++#| +> 171:QQ M>!.~#''-.55&)*=&>"# M ?s 'O<Oc0V^8dQhR\R\/#)r pluralr)rr)rs"rrrs>>T>d>rc^RIHpV!4pTRJdT'dRMRpRRRRT R 2/#RTfR/#R /# \dRR/u#i;i) a``gateway_running``/``warning`` payload via the shared CLI helper so CLI and tool agree on "scheduler active". False -> warning (no gateway process), None -> probe failed. Thin adapter over the shared CLI helper ``hermes_cli.cron._builtin_gateway_liveness`` (#87033) so the CLI and this tool can never disagree about what "scheduler active" means. ``plural`` rewords the warning for multi-job results (the ``list`` action). )_builtin_gateway_livenessgateway_runningNFzthese jobs are savedzthis job is savedwarningu&The Hermes gateway is not running — z but will NOT fire until the gateway is started (hermes gateway install / hermes gateway start). Tell the user the task is scheduled but not active yet.T)hermes_cli.cronrJr )rHrJ_gwsubjects& r_gateway_liveness_noticerPs)=') e|,2(8K u 8 BJJ   s{t == == )!4(()s 6AAr)NN) rreasoning_effortr^r_ monitor_stater`enabled_toolsetsworkdir interpreter)F)'__doc__rloggingrrtypingrrrrrr!r r% getLoggerrBr(r,rGrZrmrsrrrrrrrrrrrrrrrBrFrPrrrrZs(33)   0 1 "OJ0f#SL(V&E=OX]&854 )J !7H1"h6  O 2j>>r