+ WjsRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIHt^RIHt^RIHt^RIHtHtHtHt^RIHt]'d^RIHt]P:!R 4tR R ltR R lt RRlt!Rt"RRlt#RRlt$RRlt%Rt&RRlt'RRlt(RRlt)RRlt*R R!lt+R"R#lt,R$R%lt-R&R'lt.R(R)lt/R3R*R+llt0R4R,R-llt1R.R/lt2R5R0R1llt3^R2I4H5t6R#)6aCron pre-run script execution: timeouts, Windows venv bootstrap, process-tree termination, and the claim-heartbeat thread that keeps a long script's run claim alive. Split out of ``cron.scheduler``. Import names from this module directly (``cron.scheduler`` only imports the few it calls itself). Origin-resident helpers and sibling split modules are reached late-bound (``_sched`` / module refs at the bottom) so monkeypatching the defining module works. ) annotationsN)cron_env_setting)_ensure_cron_dir)Path)AnyCallableOptional TYPE_CHECKING)windows_hide_flags)_CancelEventLikezcron.schedulercV^8dQhRR/#)returnz Optional[int])formats"IC:\Users\johnn\AppData\Local\hermes\hermes-agent\cron\scheduler_script.py __annotate__r$s,,-,c@\\V44pV^8dV#R#)zD``int(float(raw))`` when > 0, else None; raises on unparsable input.N)intfloat)rawtimeouts& r _positive_intr$s %*oGk7+t+rc(V^8dQhRRRRRRRR/#)r env_varstr config_keyparsezCallable[[Any], Any]labelr)rs"rrr*s, !*>GJrc\V4P4pV'dV!V4pVeV#\ P !4;'g/p\V\4'dVPR/4M/pVPV4pVeV!V4pVeV#R# \d\P RY4Li;i \d"p \PRY94Rp ? R#Rp ? ii;i)uShared env → ``cron.`` resolution. ``parse`` returns the value or None to keep looking; a parse error on the env var WARNs, on config DEBUGs. None when neither yields.Nz#Invalid %s=%r; using config/defaultcronz!Failed to load %s from config: %s) rstrip Exceptionloggerwarning_sched load_config isinstancedictgetdebug) rrrr env_valuevaluecfgcron_cfg configuredexcs &&&& r_timeout_from_env_or_configr2*s!)//1I V)$E  ! F  "((b*4S$*?*?37762&R\\*-  !*%E    V NN@' U V F 8%EE Fs/ B!CAC!!CC C4C//C4cV^8dQhRR/#r rrr)rs"rrrCsLLSLrcD\P\P8wd"\\P4pVeV#\RR\R4pVf\P#T# \d(\ P R\P4LYi;i)zOResolve cron pre-run script timeout from module/env/config with a safe default.z H.6-=6 ) )K8K ( NNN&& ( (sA--/BBi,cV^8dQhRR/#r4r)rs"rrrXsIIIrc>\RR\R4pVf\#T#)zPer-attachment media-send timeout: HERMES_CRON_MEDIA_SEND_TIMEOUT env, then ``cron.media_send_timeout_seconds``, then 300s (long TTS audio can exceed a 30s window).HERMES_CRON_MEDIA_SEND_TIMEOUTmedia_send_timeout_secondszcron media-send timeout)r2r_DEFAULT_MEDIA_SEND_TIMEOUTr:s r_get_media_send_timeoutrBXs,+(*F !#H+3*: &HHrcV^8dQhRR/#)r rrr)rs"rrras222rc6\RR\R4pVfR#T#)zBound on run_job's SessionDB init: HERMES_CRON_SESSION_DB_TIMEOUT env, then ``cron.session_db_timeout_seconds`` (in DEFAULT_CONFIG), then 10s. Unlike sibling timeouts, 0 is meaningful (unlimited, debugging opt-in), so values pass through untouched.HERMES_CRON_SESSION_DB_TIMEOUTsession_db_timeout_secondszcron.session_db_timeout_secondsg$@)r2rrAs r_get_session_db_timeoutrGas++(*F)+H#411rc V^8dQhRRRR/#)r venv_dirrrdict[str, str]r)rs"rrrkstrcVR, PRR7P4pRT4UUu/uF2wr#TP4P 4TP4bK4 upp# \d/u#i;iuuppi)z pyvenv.cfgz utf-8-sig)encodingc3X"TF pRV9gK VPR^4xK" R#5i)=N)split).0rs& r +_read_windows_pyvenv_cfg..rs'L,399S!,,s **) read_text splitlinesOSErrorr"lower)rIlineskeyr-s& r_read_windows_pyvenv_cfgrYksL(33[3ITTV ML LJC U[[]*L    s'A18B1 BBa'import importlib.machinery, os, sys, types repo, script = sys.argv[1], sys.argv[2] sys.argv = [script] + sys.argv[3:] if sys.flags.safe_path: sys.path.insert(0, repo) else: sys.path[0:1] = [os.path.dirname(script), repo] main = types.ModuleType("__main__") main.__file__ = script main.__loader__ = importlib.machinery.SourceFileLoader("__main__", script) main.__cached__ = None main.__builtins__ = __builtins__ sys.modules["__main__"] = main with open(script, "rb") as f: code = compile(f.read(), script, "exec") exec(code, main.__dict__) c V^8dQhRRRR/#)r scriptrrz tuple[list[str], dict[str, str]]r)rs"rrrs33D3-M3rcp^RIHp^RIHp\ \ 4P 4P^,pV!V4f\P\V4./3#V!V4pVP4'g\RV 24h\V4R\\V4\V4.RR/3#)aPOSIX managed-store installs run cron ``.py`` scripts on the selected dependency venv's interpreter: the store Python has the repo and managed site-packages only on its in-process ``sys.path``, so its children import neither (#123044). No ``PYTHONPATH``: everything the script spawns would inherit it and a foreign interpreter would load the store's compiled extensions (#123440). The venv resolves Hermes from its generation's workspace snapshot, rebuilt only on a dependency change, so the bootstrap puts the live checkout first. Lazy installs are off for the script's process tree: a script importing ``hermes_bootstrap`` could otherwise complete a source update and ``execv`` itself onto the bare store Python.resolve_store_python)project_pythonz/dependency environment interpreter is missing: -cHERMES_DISABLE_LAZY_INSTALLS1)hermes_cli._launchersr^pm.environmentsr_r__file__resolveparentssys executableris_file RuntimeError_POSIX_SCRIPT_BOOTSTRAP)r[r^r_repopythons& r_posix_cron_script_argvros;. > ! ! # + +A .DD!)F ,b00D !F >>  LVHUVV [$ 7TCK P +S 1 33rc V^8dQhRRRR/#)r python_exerrztuple[str, dict[str, str]]r)rs"rrrs.).).)8R.)rc \PR8wdV/3#\P!V4pVPPp/pVP P 4R8Xd*VPR4pVP4'dTp^RI H p^RI H pH p\\4P4P ^,pV!V4p V eSV!V4p V eG\#V 4R\$P&P)\#V4\#V!V 44.4/3#\+V4p V P-RR4p VR , R , p R V 9Ed V 'Ed\P!V 4R, pVP4'dV P4'dTp\#V4VR &\#\P!\4P4P ^,4\#V 4.p\$P.P-RR4pV'dVP1V4\$P&P)V4VR&\#V4V3#) aHidden, output-capable Python invocation for Windows cron scripts. ``pythonw.exe`` loses captured output; uv venv launchers can re-exec the base console python and flash a window even with CREATE_NO_WINDOW, so run the base python directly with venv paths overlaid in env.win32z pythonw.exez python.exer])committed_venv site_packages PYTHONPATHhomeLib site-packagesuv VIRTUAL_ENV)rhplatformr&rparentnamerV with_nameexistsrcr^rdrtrurerfrgrospathsepjoinrYr*environappend)rq interpreterrI env_overlaysiblingr^rtdependency_sitermmanaged_python environmentr.rwru base_pythonpythonpath_entriesexisting_pythonpaths& r_windows_cron_python_invocationrs ||w2~++j)K!!((H"$K=0'' 5 >>  !K:P > ! ! # + +A .D)$/N! %T*  "~&rzzTC <=>8@)AA A #8 ,C 7762 Du$6M s{ttkk$',6     M$8$8$:$:%K),XK &FKK)113;;A>?]AS"U "$**..r"B ""))*=>(* 8J(KK % { [ ((rc V^8dQhRRRR/#r proczsubprocess.PopenrNoner)rs"rrrs)9drcVP4eR#\PR8wd \V4M<\P !RR\ VP4RR.R^ \4RR 7VPR R 7R# \\P3dTP4LBi;i \Pd'TP4TPR R 7R#i;i) zBBest-effort hard stop of a cron script and every child it spawned.Nrstaskkillz/PIDz/Tz/FTF)capture_outputr creationflagscheck?r) pollrhr}_terminate_process_group subprocessrunrpidr rUTimeoutExpiredkillwait)rs&r_terminate_cron_script_processrs yy{ ||w &  NNVS]D$?PT^`02% A  # 223  IIK   $ $  # s#;B3B8+B54B587C32C3c V^8dQhRRRR/#rr)rs"rrrsMM#3MMrc \P!VP4p\P!V\P 4\P!\P4;_uu_4TPRR7RRR4\P!T^4\P!\ \\34;_uu_4\P!T\\R\P 44RRR4R# \ \\3dR#i;i +'giL;i \ \3dR#i;i +'giR#;i)zPOSIX: TERM the script's process group, then KILL if ANY member survived (a survivor holds the pipe write ends open and the caller's communicate() would block on EOF forever).NrrSIGKILL)rgetpgidrkillpgsignalSIGTERMProcessLookupErrorPermissionErrorrU contextlibsuppressrrrgetattr)r process_groups& rrrs 488,  -0   Z66 7 7 #  8 -#   0/7K L L -FNN!KL M L  9 7 7  ( L L Ls<AD3D/E5ED,+D,/ D? EE E+ c V^8dQhRRRR/#rr)rs"rrrsII&6I4IrcbaSP4eR#RR/RV3Rlllp\SRR4p\V\4'dV^8:d V!RV4#^RIHpT!T4'dR#T!R T4R# \ dT!R R R 7u#i;i \ dT!R TR R 7u#i;i)zHTerminate a script tree, then fall back to the local process-group path.Nexc_infoFc$V^8dQhRRRRRR/#)r reasonrrboolrrr)rs"rr1_terminate_cron_script_tree..__annotate__s!---t--rc`<\P!VR,.VO5RV/\S4R#)z+; falling back to process-group terminationrN)r$r%r)rrargsrs&$*rfallback-_terminate_cron_script_tree..fallbacks3 B B ^EI ^T\ ^&t,rrz-Cron script tree-kill received invalid pid %r)kill_process_treez,agent.deadline.kill_process_tree unavailableTrz'Cron script tree-kill failed for pid %sz3Cron script tree-kill reported no signal for pid %s)rrr(ragent.deadlinerr#)rrrrsf r_terminate_cron_script_treers yy{-e-- $t $C c3  3!8GMMW 5W S ! !  " BCH WFQUVVW WA3QUVVWs$A: B:BBB.-B.c V^8dQhRRRR/#rr)rs"rrrs  . 4 rc\P!\P4;_uu_4VP RR7RRR4R# +'giM;i\P!\ 4;_uu_4TP 4RRR4M +'giM;iTPTP3FVp\P!\ 4;_uu_4TeTP4RRR4KD +'giKU;i \P!\P4;_uu_4TPRR7RRR4R# +'giR#;i)zReap a terminated script without blocking forever: a surviving descendant can hold the pipe write ends open, so bound the drain and abandon the pipes (output is not needed).g@rN) rrrr communicaterUrstdoutstderrcloser)rstreams& r_drain_script_pipesrs   Z66 7 7 % 8 7 7 7   W % %  & % % %;; ,   ) )! * ) ) )-   Z66 7 7 #  8 7 7 7s/A  A B B* *D  D E(( E9 c(V^8dQhRRRRRRRR/#)r rqrrrJ script_pathrz list[str]r)rs"rrr(s,666"06?B6GP6rc n\RVPRR4P\P44\ P !VPRR44R, R, 4pVP4'g\PRV4W.#R\V4: R 2pVR WB.#) alBootstrap a cron script under the base interpreter with ``.pth`` support. Overlay mode puts the venv on ``PYTHONPATH``, but ``.pth`` files are only processed by ``site.addsitedir()``, so editable installs would be invisible; bootstrap via addsitedir + ``runpy.run_path`` (keeps ``__file__``/``sys.path[0]`` semantics). Plain invocation if the venv is unresolvable.c3p"TF,p\V4PR8XgK\V4xK. R#5i)rzN)rr)rPitems& rrQ/_windows_cron_bootstrap_argv...s0A1d!$Z__?%$t**1ds66rvrxr|ryrzz}Windows cron script: venv site-packages %s not found; running without .pth processing (editable installs may be unimportable)z,import os, runpy, site, sys;site.addsitedir(z);script = sys.argv[1];sys.argv = [script] + sys.argv[2:];sys.path.insert(0, os.path.dirname(os.path.abspath(script)));runpy.run_path(script, run_name='__main__')r`) nextr*rOrrr&ris_dirr$r%r)rqrrru bootstraps&&& r_windows_cron_bootstrap_argvr(s Ar1R1X1XY[YcYc1dA[__]B%GH5PSbbdM    ! ! N  (( }-016 6 i 55rc V^8dQhRRRR/#)r rrrz$tuple[Optional[Path], Optional[str]]r)rs"rrrCs++c+.R+rc\P!4R, p\V4VP4pR\ V49d RRV: 23#\P !V4P 4pTP4'dTP4MY, P4pTPT4TP4'g RRT R T R 23#TP4'gRR T 23#TR3# \\\3d RRT: 23u#i;i \dRRT RT: 23u#i;i) u Validate a job script path; ``(path, None)`` or ``(None, error)``. Scripts MUST resolve inside HERMES_HOME/scripts/ (relative, absolute and ``~`` paths are all validated — path traversal / absolute-path injection); contract of lifecycle_guard._expand_candidate_path.scriptsNz*Blocked: script path contains a NUL byte: z5Blocked: script path is not a valid filesystem path: z=Blocked: script path resolves outside the scripts directory (z): zScript not found: z<. Cron scripts are looked up only in this profile's folder (zr); if the job was copied from another profile, copy the script there too, or edit the job with `hermes cron edit`.zScript path is not a file: )r&_get_hermes_homerrfrr expanduser ValueErrorrkrU is_absolute relative_torrj)r scripts_dirscripts_dir_resolvedrpaths& r_resolve_script_pathrCsl))+i7K[!&..0[!!A+QQQ]kk+&113 OO--3;;=K4E3N3N3PD  -. ;;== '$%&B C  <<>>24&999 :/  g .]L[O\\\]  $%S 9   s$$D2D)D&%D&)EEc V^8dQhRRRR/#)r rrrz#tuple[Optional[str], Optional[str]]r)rs"rrrqs33Vrca^RIHoVP4p\V4P 4pVP 4'g RRV: R23#VP 4PpVPP4VP4PP40p\ P!T4'gRRT 23#\P R 8wdT^I,'gRR T 23#\";QJdT3R lT4F 'dK R M R M!T3R lT44'gRRT 23#\%T4R3# \d RRT 23u#\\3dpRRT: RT 23uRp?#Rp?ii;i)u)``(python_exe, error)`` for a job's ``interpreter`` field. Checked at run time, not create time: a user venv can be rebuilt or moved while the job lives. Bare names are refused — they silently change meaning with PATH. The name (and the symlink target's name) must look like a Python: the lifecycle guard classifies ``.py`` scripts as Python and skips its shell reference walk, so ``interpreter=/bin/bash`` would run an unscanned ``.py`` body as shell. ``pythonw`` is refused because it discards captured output (an agent job would go silently quiet).)_INTERPRETER_IMAGE_RENz8Interpreter must be an absolute or ~-prefixed path (got z@). Bare names like 'python3' are not stable across PATH changes.zInterpreter not found: z#Unable to resolve interpreter path z: z Interpreter path is not a file: rszInterpreter is not executable: c3<"TF4pSPV4;'dVPR4'*xK6 R#5i)pythonwN)match startswith)rPrrs& rrQ,_resolve_cron_interpreter..s:" 4%**40SS9S5SS s??FTzLInterpreter must be a Python executable (python, python3, python3.12, ...): )cron.lifecycle_guardrr"rrrstatst_moderrVrfFileNotFoundErrorrkrUS_ISREGrhr}allr)rrr:modenamesr1rs& @r_resolve_cron_interpreterrqs;    C J9'')##%%TUXT[\ZZ[ [}}&&$$&(8(8(:(?(?(E(E(GH <<  7zBBB ||wte||6xjAAA 3" "333" " " "cdlcmnnn x=$  5.se444 ' "J:3'C5IIIJs6.EEAEF#F2F3 F=FFc$V^8dQhRRRRRR/#)r rrr Optional[str]rz9tuple[Optional[list[str]], dict[str, str], Optional[str]]r)rs"rrrs$66 6*6>6rcVPP4R9dp\P!R4;'g*\P P R4'dRMRpVfR/RVP: R23#V\V4./R3#\V\4'dAVP4'd+\V4wr4V'dV\V4./V3#R/V3#\PR8wd\V4wrVWVR3#\\P 4wr6V'd\#W6\V44VR3#V\V4.VR3#)u``(argv, env_overlay, error)`` for a validated script. Interpreter by extension — the shebang is deliberately NOT honoured (small, auditable surface): ``.sh``/``.bash`` → bash, else the job's ``interpreter`` when set, else a Python chosen by ``_posix_cron_script_argv`` / ``_windows_cron_python_invocation``. Interpreter selection reads PM's install records and may raise; callers run this inside their ``try``.bashz /bin/bashNzCannot run .sh/.bash script z{: bash not found on PATH. On Windows, install Git for Windows (which ships Git Bash) or rewrite the script as Python (.py).rs>.sh.bash)suffixrVshutilwhichrrisfilerrr(r"rrhr}rorrir)rr_bashrqerrargvrs&& r _script_argvrs; {{.. V$^^{8S8SY] =.tyym<99  s4y!2t+++s## (9(9(;(;4K@ +5SY'"cII4"cII ||w3D9$&&=cnnMJ+JSYOQ\^bbb D "K 55rc ,V^8dQhRRRRRRRRRR /#) r rrworkdirr cancel_eventOptional[_CancelEventLike]rrtuple[bool, str]r)rs"rrrs=h8h8h8,h8,h8BOh8h8rc \V4wrEVfRV3#\4p\WC4wrxpVfRV3#^RIHp RRRR/p \ P R8Xd'R \4\\R ^4,R R RR/p V !RR 7p V PV4\P!V3R\PR\PRRRT;'g\VP4RV /V Bp \P !4V,p Ve/VP#4'd\%V 4\'V 4R #V \P !4, pV^8:d!\%V 4\'V 4RRV RV 23#V P)\+RV4R7wppT;'gRP/4pT;'gRP/4p^RIHpT!T4pT!T4pT P:^8wd\RT P: 2.pT'dTP=RT 24T'dTP=RT 24RRP?T43#RT3# \P,dEKki;i \4d%p\6P9RT4R;ppRp?LRp?ii;i \4dpRRT 23uRp?#Rp?ii;i)!uExecute a cron job's script and return ``(success, output)``; on failure *output* is the error message for the LLM to report. Env goes through ``build_subprocess_env`` (SECURITY.md §2.3). ``workdir`` sets the subprocess cwd only; the Python process cwd is NEVER mutated (an ``os.chdir()`` would leak into concurrent gateway sessions). Args: script_path: Path to the script. Relative paths are resolved against HERMES_HOME/scripts/. Absolute and ~-prefixed paths are also validated to ensure they stay within the scripts dir. workdir: Optional absolute path to use as the script's cwd. When set, the subprocess runs in this directory instead of the scripts-dir parent. See #69396. interpreter: the job's optional Python for ``.py`` scripts (#8714). NF)build_subprocess_envstart_new_sessionTerrorsreplacersrCREATE_NEW_PROCESS_GROUPrLzutf-8)strip_launch_profilerrtextcwdenvzScript timed out after zs: g?rrx)redact_sensitive_textz/Failed to redact sensitive text from output: %sz[REDACTED - redaction failed]zScript exited with code zstderr: zstdout:  zScript execution failed: )Fz5Script cancelled because cron fire ownership was lost) rr;rtools.environments.localrrhr}r rrupdatePopenPIPErr~time monotonicis_setrrrminrr" agent.redactrr#r$r% returncoderr)rrrrrrscript_timeoutrrr popen_kwargsr rdeadline remaining stdout_raw stderr_rawrrrepartsr1s&&&& r_run_job_scriptr"s%[1ID |cz(*NU8!-d!@3 <#: A  i(  <<7 "!3!5*&@!D"E G)%L#= ;  F#F1;FGKF++3t{{+F14F8DF>>#n4'L,?,?,A,A+D1#D)UU 4>>#33IA~+D1#D) 77Gs4&QQQ )-)9)9#c9BU)9)V& J""))+""))+ > :*62F*62F ??a //@ABE y12 y12$))E** *V|-,,   > NNLa P= =FV > 81#7778sJ/BJ/AJ/)J/AJ/I $ J/.J/J/I=0(J/J/5&J/J/ I:5J/9I::J/= J,J'"J/'J,,J// K :KK K c V^8dQhRRRR/#)r rrrzOptional[threading.Thread]r)rs"rrrs  3 =W rc\P!\P!4PV3VRR7pVP 4V# \ d T!4R#i;i)zStart ``loop_fn`` on a daemon thread inside a copy of the current context (multiplexed profile ContextVars). On failure calls ``fail_log()`` inside the except (traceback intact) and returns None.T)targetrrdaemonN) threadingThread contextvars copy_contextrstartr#)loop_fnrfail_logthreads&&& r_start_heartbeat_threadr/s^  '')--WJTRVXF  M  sA A"!A"c ,V^8dQhRRRRRRRRR R /#) r jobr)rrrrrrrrr)rs"rrr)s6)+)+ )+)+*7)+,)+)+rcaaaaa a a RVVVV3RllpSPR4pSPR4p\V\4'd%\VPR4;'gR4MRo \V\4'dVPR4R8Xd S 'gV!4#\SPR 4;'gR4o \P !4o R V V V 3R llp\ VR V 3R l4pVfV!4#V!4S P4VPRR7# S P4TPRR7i;i)ulRun a cron script while heartbeating its owned one-shot claim. A long script can outlive the stale-claim TTL; without a heartbeat another scheduler would re-dispatch the one-shot. Recurring/unclaimed runs have no durable claim → no thread. The owner is captured from the dispatched job, never re-read, so a stale runner cannot extend a replacement owner's claim.cV^8dQhRR/#)r rrr)rs"rr:_run_job_script_with_claim_heartbeat..__annotate__1sCC!Crc@<\SSSSPR4R7#)r)rrr)r"r*)rr1rrsrr1_run_job_script_with_claim_heartbeat..run1s${G,+.77=+AC Crschedule run_claimbyrxkindonceidcV^8dQhRR/#)r rrr)rs"rrr4>sccTcrc<SP\P4'g\P!SSR7K@R# \d\ P RSRR7Khi;i))expected_ownerz+Job '%s': script run_claim heartbeat failedTrN)rr&_RUN_CLAIM_HEARTBEAT_SECONDSheartbeat_run_claimr#r$r+)job_idownerstopsr_heartbeat_loop=_run_job_script_with_claim_heartbeat.._heartbeat_loop>s[))F??@@ c**6%HA c JF]a b csA#A+*A+zcron-script-claim-heartbeatc4<\PRSRR7#)z4Job '%s': could not start script run_claim heartbeatTr)r$r+)rBsr6_run_job_script_with_claim_heartbeat..Gs BFUY[rrr) r*r(r)rr'Eventr/setr) r1rrrrr7claimrEheartbeat_threadrBrCrDs ffff @@@r$_run_job_script_with_claim_heartbeatrN)sCCwwz"H GGK E*4UD*A*AC $%%2 &rE x & &8<<+?6+Ieu $$" %F ?? Dcc/6 [ u +u  c*  c*s D77$E) scheduler)N)NNN)NN)7__doc__ __future__rrr)loggingrrrrrrhr'rcron.env_settingsr cron.jobsrpathlibrtypingrrrr hermes_cli._subprocess_compatr cron.schedulerr getLoggerr$rr2r;r@rBrGrYrlrorrrrrrrrrr"r/rNr!rOr&rrrrZs#   .&99</   + ,, 2L$"I2(32.)b(M$I6  66+\>6@h8V )+\%r