yjG23:dZddlZddlZddlZddlZddlZddlZddlmZddl m Z m Z m Z m Z mZddlmZejeZdZdZejdeeejjddlmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(d{d Z)gd Z*gd Z+d Z,de,dfde,dfde,dfde,dfde,ddfgZ-ddl.m/Z0dZ1dZ2de3d e4fdZ5dede3d e4fd Z6d!ed efd"Z7d!ed efd#Z8d!ed efd$Z9d!ed e:ee;effd%Zd e e eeffd)Z?d*e ee fd+e ed e efd,Z@d*e ee fd efd-ZAd|d.e ed/e e d e efd0ZBd1d2d3e e d4e4d e efd5ZCd3e d e efd6ZDd7e e d8e e d e efd9ZEd:e ed e efd;ZFd*e ee fd e ee ffd<ZG d}d*e ee fd=e ed e ee ffd>ZH d}d*e ee fd=e ed e ee ffd?ZId~dAedBe3d e efdCZJ d|d*e ee fdDe ed=e ed e e ee ffdEZK ddFedAe ed!e edGe edHe edIe e3dJe edKe4d.e ed/e e edLe ed7e ed8e edMe ed:e edNe eee efdOe e edPe edQe e4dRe e4dSe edTe edUedDe ed ef2dVZLdWdXdYidFdZd[d\dAdZd]d\d!dZd^d\dGdZd_d\dHdZd`d\dIdadbd\dJdZdcd\d/dddedZidfdgd:dZdhedid\dSdZdjedkd\dTdZdld\dQdmd1dndodNdddedZidpdgdOdddedZidqdgdPdZdrd\dRdmdsd\dFgdtduZMd e4fdvZNddwlOmPZPmQZQePjRdWdWeMdxeNdyzdS)z Cron job management tools for Hermes Agent. Expose a single compressed action-oriented tool to avoid schema/context bloat. Compatibility wrappers remain for direct Python callers and legacy tests. N)Path)AnyDictListOptionalUnion)display_hermes_homeg$@g@) AmbiguousJobReferenceclaim_job_for_fireeffective_job_stateget_jobis_job_runnable list_jobs mark_job_runparse_schedule pause_job remove_jobresolve_job_ref resume_job update_jobreturncJ ddlm}|dS#t$rYdSwxYw)uTell the active cron scheduler provider the job set changed (no-op for the built-in). Best-effort — never lets a provider error break the tool.r_notify_provider_jobs_changedN)cron.schedulerr Exceptionrs 9/home/ragecks/.hermes/hermes-agent/tools/cronjob_tools.py"_notify_provider_jobs_changed_safer9sP @@@@@@%%'''''      s  "")zJignore\s+(?:\w+\s+)*(?:previous|all|above|prior)\s+(?:\w+\s+)*instructionsprompt_injectionzdo\s+not\s+tell\s+the\s+userdeception_hidezsystem\s+prompt\s+overridesys_prompt_overridezK|]\}}|cxko|kncVdSN).0lohir3s r z_is_emoji_cp..s;GG&"brR~~~~2~~~~GGGGGG)any_EMOJI_NEIGHBOUR_CP_RANGES)r3s`r _is_emoji_cpr?s' GGGG,FGGG G GGr<textidxc8|dz }|dkrGt||tkr)|dz}|dkrt||tk)|dz}|t|krTt||tkr6|dz }|t|krt||tk6|dkoV|t|koCtt||o!tt||S)zGReturn True when the ZWJ at text[idx] appears inside an emoji sequence.r)ord_VARIATION_SELECTOR_CPlenr?)r@rAleftrights r_zwj_has_emoji_neighbourrIs  7D !))DJ+AAA   !))DJ+AAA !GE #d))  DK 0 04J J J   #d))  DK 0 04J J J   +ec$ii' + T$Z ) ) + T%[)) * *r<promptcd|vr|Sg}t|D]1\}}|dkrt||r||2d|S)N‍) enumeraterIappendjoin)rJcleanedrAchs r_strip_legitimate_emoji_zwjrSstv GV$$R >>6vsCC> r 777  r<cXtjdtdd|tjS)uStrip the GitHub `Authorization: token $GITHUB_TOKEN` auth-header pattern so it doesn't trip the broader curl-auth-header exfil rule. Allows the bundled GitHub skill fallback without opening a blanket exemption for arbitrary Authorization-header exfiltration. Uses ``re.sub`` so EVERY occurrence is scrubbed, not just the first — a cron job that loads 2+ GitHub skills (e.g. github-issues + github-pr-workflow + github-code-review) contains several such blocks, and the old ``re.search`` + single ``str.replace`` left the rest to trip the exfil_curl_auth_header detector on every run. The trailing ``[^\s;&|$`]*`` consumes only the URL path — never whitespace, command separators, or subshell openers — so a payload smuggled onto the same line (``;``, ``&&``, ``|``, ``$(...)``, backticks) survives the strip and is still scanned. The host must be exactly ``api.github.com`` followed by ``/``, whitespace, quote, or end: lookalike authorities (``api.github.com.evil.com``, ``api.github.com@evil.com``) are not the trusted construct and fall through to the exfil detectors, while legitimately quoted bare-host URLs stay exempt. zBcurl\s+[^\n;&|$`]*(?:-H|--header)\s+["\']Authorization:\s*token\s+zJ["\']\s+["\']?https://api\.github\.com(?::\d+)?(?:/|\s|$|["\'])[^\s;&|$`]*z curl https://api.github.com/user)flags)resub_CRON_SECRET_VAR_RE IGNORECASE)rJs r_strip_cron_safe_constructsrZsC* 6 QNa Q Q Q*m    r<clt|}tD]}||vrdt|ddcSdS)zReturn an error string if the prompt contains invisible-unicode injection markers (ZWJ inside legitimate emoji sequences is allowed). z-Blocked: prompt contains invisible unicode U+04Xz (possible injection).rM)rS_CRON_INVISIBLE_CHARSrD)rJprompt_for_invisible_scanchars r_check_invisible_unicoder`sY!Strip invisible-unicode characters from *prompt*, preserving the ZWJ that lives inside legitimate emoji sequences. Returns ``(cleaned_prompt, removed_codepoints)`` where ``removed_codepoints`` is the sorted list of ``U+XXXX`` labels that were stripped (empty when the prompt was already clean). Used by the skills-attached cron path, where the skill body is already vetted at install time by ``skills_guard.py`` — a stray zero-width space in a code example should be sanitized, not turned into a hard block that permanently kills the job. rLzU+r\rM) setrNr]rIrOaddrDrPsorted)rJremovedrQrArRs r_strip_invisible_unicoderfs rzGGV$$R & & &X~~":63"G"G~r""" KK*SWW*** + + + r 777  VG__ ,,r<ct|}t|}|r|StD]-\}}tj||tjrd|dcS.t D]-\}}tj||tjrd|dcS.dS)u}Scan the USER-SUPPLIED cron prompt for critical threats. Strict pattern set — used at job create/update time and as a runtime defense-in-depth for prompts authored before the scanner existed. The user prompt is small and directive; bare `cat .env` or `rm -rf /` there is a smoking gun, not prose. Returns an error string when blocked, else empty string. (Blocked: prompt matches threat pattern 'D'. Cron prompts must not contain injection or exfiltration payloads.rM)rZr`_CRON_THREAT_PATTERNSrVsearchrY_CRON_EXFIL_COMMAND_PATTERNS)rJprompt_to_scan invisible_errpatternpids r_scan_cron_promptrqs188N,^<>N > #O$>??G4   LL=?N    (%()CDDL" ''?@@HD    4r<job user_deliverc|pddkrdS ddlm}||rdSn(#t$r|drYdSYnwxYw dS)uUReturn an informational notice when a created job won't deliver anywhere. TUI/CLI sessions cannot be captured as a cron ``origin`` (no ``HERMES_SESSION_PLATFORM``/``CHAT_ID`` is set for them), so a ``deliver="origin"`` request — or an omitted ``deliver`` that defaults to origin-or-local — produces a job that runs and saves output to ``last_output`` but is never delivered back into the session. This is by design (there is no live-delivery channel for local sessions), but silently dropping the user's "tell me when it runs" intent is the trap reported in #51568. Surface it at create time so the agent can relay it instead of promising a delivery that never happens. Returns ``None`` when the user explicitly asked for ``local`` (no surprise), or when the job resolves to a real delivery target. rMlocalNr)_resolve_delivery_targetsoriginuQThis is a local-only cron job: its output is saved (view it with cronjob(action='list')) but will NOT be delivered back into this session — CLI/TUI sessions have no live-delivery channel. To be notified when it runs, recreate or update the job with deliver set to a gateway-connected platform, e.g. deliver='telegram' or deliver='all'.)striplowerrrrget)rrrs r_local_delivery_noticerVs" !!##))++w66t<<<<<< $ $S ) ) 4   778   44    RsAA)(A)c|dpid}|dpidd}|dS|dkr |dkrdndS|r|d |n|d S) Nrepeattimes completedrforeverrConcez1/1/z timesr)rrrs r_repeat_displayr{s WWX   $" ) )' 2 2E""(b--k1==I }y zz"avvU2%. Di ! !% ! ! !u4D4D4DDr<skillskillsc||r|gng}n(t|tr|g}nt|}g}|D]@}t|pd}|r||vr||A|S)NrM) isinstancestrlistrrO)rr raw_items normalizeditemr@s r_canonical_skillsrs ~$,UGG" FC !H LL J$$4:2$$&&  $D **   d # # # r<Fstrip_trailing_slashvaluerc|dSt|}|r|d}|pdS)Nr)rrrstrip)rrr@s r_normalize_optional_job_valuersF }t u::    D {{3 <4r<c|dSt|ttfr%d|D}|rd|ndSt |}|pdS)uNormalize a user-supplied ``deliver`` value to the canonical string form. The cron schema documents ``deliver`` as a string (``"local"``, ``"origin"``, ``"telegram"``, ``"telegram:chat_id[:thread_id]"``, or comma-separated combos). Some callers — MCP clients passing arrays, scripts building the payload as a list — supply ``["telegram"]``. ``create_job``/``update_job`` store it as-is, and the scheduler's ``str(deliver).split(",")`` then serializes the list to the literal ``"['telegram']"`` which is not a known platform. Flatten lists / tuples at the API boundary so storage is always a string. Returns ``None`` for ``None``/empty so callers can treat it as "not supplied". Ncg|]D}t|#t|ESr7rr)r8ps r z,_normalize_deliver_param..s9AAAA#a&&,,..AQAAAr<,)rrtuplerPrr)rpartsr@s r_normalize_deliver_paramrsq }t%$''2AAAAA"'1sxxT1 u::    D <4r<providerbase_urlct|d}|sdSt|}|s dS ddlm}m}m}ddlm}ddlm}m } n#t$r d |d cYSwxYw| d krdS||rb ||} n#t$rd} YnwxYw| r!| | pi d d nd } | r||| rdSd|d|d| pddS ||} n#t$r|} YnwxYwt| tr| | nd} | | rt| dd nd }|r|||rdSd|d|dS)aReject pairing a named provider's stored credential with an off-host base_url. The cron tool is model-callable, so a prompt-injected job could set a real provider plus an attacker ``base_url``; on fire the scheduler resolves that provider's stored API key and sends it to the URL, exfiltrating the credential (CWE-200/CWE-522). Allow a ``base_url`` override only when it cannot leak a stored secret: no override at all, a configured custom/byok provider that carries its own endpoint+key, or an override whose host matches the named provider's own endpoint. Returns an error string if blocked, else None (valid). TrNzwbase_url override requires an explicit provider. Set provider to a configured custom provider to use a custom endpoint.r)has_named_custom_providerresolve_requested_provider_get_named_custom_provider)PROVIDER_REGISTRY)base_url_host_matchesbase_url_hostnamez2Unable to validate base_url override for provider z ; refused.customrrMz base_url z is not allowed for provider z_. A named custom provider's stored credential may only be sent to its own configured endpoint (unknownz).inference_base_urlz. A named provider's stored credential may only be sent to its own endpoint; use a configured custom provider (provider="custom") for a custom base_url.)rhermes_cli.runtime_providerrrrhermes_cli.authrutilsrrrrrrrgetattr)rrbuprovrrrrrrr3cfg_hostresolvedpconfig known_hosts r_validate_cron_base_urlrs 'xd K K KB t ( 2 2D   C   W          655555BBBBBBBBB WWWVDVVVVVVW zz||xt  &&  ++D11BB   BBB HJR$$bhB^^J%C%CDDDPR  --b(;; 4 > > >4 > >$,$9  > > > --d33 1;Hc1J1JT##H---PTG""QX#`774H"#M#M#M^`aaJ++B ;;t  WB W Wt W W Ws5AAA B BB" C.. C=<C=scriptc^|r|sdSddlm}|}|dst |dkr|ddkrd|d Sdd lm}|d z }|d d |||z |}|rd|SdS)a3Validate a cron job script path at the API boundary. Scripts must be relative paths that resolve within HERMES_HOME/scripts/. Absolute paths and ~ expansion are rejected to prevent arbitrary script execution via prompt injection. Returns an error string if blocked, else None (valid). Nr)get_hermes_home)r~rC:zXScript path must be relative to ~/.hermes/scripts/. Got absolute or home-relative path: z@. Place scripts in ~/.hermes/scripts/ and use just the filename.)validate_within_dirscriptsT)parentsexist_okz9Script path escapes the scripts directory via traversal: )rhermes_constantsr startswithrFtools.path_securityrmkdir)rrrawr scripts_dircontainment_errors r_validate_cron_script_pathrs t000000 ,,..C ~~j!! c#hh!mmA#  N36 N N N 877777!/##i/KdT222++K#,={KK O O O  4r<ct|dpd}t|d|d}t|dpd}t|dp|ddp|r|d ndp|pd }id |d|d|r|d ndd|d t|d kr |dd dzn|d|dd|dd|dd|dpddt |d|ddd|dd|dd|dd|dd|dddt ||d|d d!}|d"r |d"|d"<|d#r |d#|d#<|d$r |d$|d$<|d%r |d%|d%<|d&rd|d&<|d'r |d'|d'<|d(r |d(|d(<|S))NrJrMrridrname2rzcron jobjob_idprompt_previewdz...modelrrscheduleschedule_display?rdeliverr next_run_at last_run_at last_statuslast_delivery_errorenabledTstate paused_at paused_reason)rrrmonitor_script monitor_url monitor_stateno_agentenabled_toolsetsworkdir)rrrrFrr )rrJrrrresults r _format_jobr,sa ""(b ) )F swww//1B1B C CF +) , ,F swwvf&"+fv2M&))2fRXf\f g gD& f.$ &  #f++2C2C&#,..  !!  CGGJ'' CGGJ'' CGG.//63 /#&& 3779g.. sww}-- sww}-- sww}-- sww'<== 3779d++!$ $S))%&WW[))11)F, wwx)x=x ww  9#&'7#8  ww}3 #M 2} ww7"%o"6 wwz"!z ww!""=%();%<!" wwy+ Ny Mr< extra_promptc|d} t|s.t|}|d}nt|sd}nd}dd|dSnv#t$ri}td|| t |dt|n#t$rYnwxYwd dt|dcYd}~Sd}~wwxYwt|| S) uExecute a cron job immediately, outside the scheduler tick. Atomically claims the job first via ``claim_job_for_fire`` — the same at-most-once CAS the scheduler/external-provider fire path uses — so a concurrently-running gateway ticker cannot also fire it (the claim both blocks a duplicate fire and advances ``next_run_at`` for recurring jobs). If the claim is lost (another fire is in flight), this is a no-op. The actual firing is delegated to ``run_one_job`` — the single shared execute→save→deliver→mark body the ticker and external providers use — so failure delivery, ``[SILENT]`` handling, and live-adapter delivery stay identical across paths and can't drift. Returns {"claimed": bool, "success": bool, "error": str|None}. rN%Job no longer exists; nothing to run.1Job is paused/disabled; resume it before running.;Job is already being fired by the scheduler; not run again.Fclaimedsuccesserrorz1Failed to claim cron job %s for immediate run: %sTr) r r rrrtrrr_run_claimed_job)rrr refreshedreasones r_execute_job_nowr Xs($YFD!&)) I  I @$Y// WLV$HH H I DDD H&RSTTT  A / / / /    D ECFFCCCCCCCC D Cl ; ; ;;sA._heartbeat_loops.**)../KLL!"n..8G!<<<9%g  !# ZXZZ#g,,ZZZ%!!!! !!*../KLL!!!!!s/B BBzcronjob-run-heartbeat)targetdaemonrz gateway.run_gateway_runner_refadapters _gateway_loop)r!looprrC)timeoutrok last_errorz-Failed to execute cron job %s immediately: %s)r rN)rr r r tools.environments.baserr threadingEventrrThreadstartsysmodulesrcallablerbrPrr boolrtrr)rrr _registeredr r r r_heartbeat_threadrgateway_module runner_refrunnerr! gateway_loop processedrr%r_releaserrrs @@@rrrsYFKID          ('//  F     E E E E E E 0/11KK   KKK $/++   "3776??4f55H ! ! ! ! ! ! ! !0!* 0&,!!!   # # % % %77^-BDII !)*!5!5?48>8J76:t444PTAGASwv===Y]  ( U'K(!-  ##%%%$0%**3ORS3S*TTT ##%%%$0%**3ORS3S*TTTT1 K   ' ' ' ' K   ' ' ' 'FOO)r ]]= ) )T 1I,"--]]<00   DDD DfaPPP    JJJJJJ          A / / / /    D ECFFCCCCCCCC#DsH%H%>H% A  H% A  C&H%5E95G97F00G3H%GAH%% J=/J8I J8 I-*J8,I--J81JJ8 JJ8JJ82J=8J=r max_charscV ddlm}||z }t|d}|sdS|ddd}|sdSt ||kr|d|d |dd z}|S#t$rYdSwxYw) aBest-effort excerpt of the job's most recent saved output file. Included in the background-run completion block so the parent agent sees what the job actually produced without having to dig through ``~/.hermes/cron/output/``. Never raises. r)get_cron_output_dirz*.mdNzutf-8replace)encodingerrorsu … (truncated; full output: )) cron.jobsr<rdglob read_textrrFr)rr:r<out_dirfilesr@s r_latest_job_output_excerptrGs111111%%''&0w||F++,, 4Ry""GI"FFLLNN 4 t99y   #&Tb &T&T&TTD tts7B1B.+B B('B( session_idc N ddlm}|sdSn#t$rYnwxYwdtdp ddlm}|d}n#t$rd}YnwxYw|s|rt|}|sdS dd lm}|vrd d d d Sn#t$rYnwxYwts.t}|d }nt|sd}nd}d d |d Snw#t$rj} t d|  td t| n#t$rYnwxYwdd d t| dcYd} ~ Sd} ~ wwxYwd} ddlm} | ddpd} n#t$rYnwxYw ddlm} m} | }nK#t$r>} td| t)}d |d<|cYd} ~ Sd} ~ wwxYw ddlm}|}n#t$rd}YnwxYwt/jdddt0tt2fffd }| dd d!d"dd#d$||rt|nd|| ||% }|d&dkrdd|d'd(Std)|d*d+t)}d |d<|S),uhClaim ``job`` now, then fire it on the async-delegation daemon executor. A manual ``cronjob(action='run')`` used to execute the job synchronously on the calling agent's tool thread. A cron job is a full agent run that routinely takes minutes-to-hours, so the parent turn sat inside ONE tool call the whole time: uninterruptible (the interrupt flag is only checked between loop iterations) and serial (a batch of runs executed one by one). This dispatches the run like ``delegate_task``'s background mode: the tool returns immediately with a handle, the run executes on the shared async daemon executor, and a ``type="async_delegation"`` completion event re-enters the conversation as a fresh turn when the job finishes — riding the existing completion-queue rail (CLI drain + gateway watcher), which keeps message-role alternation legal and the prompt cache intact. The at-most-once claim is taken SYNCHRONOUSLY before dispatch so unrunnable jobs (paused / missing / already firing) report in the tool response immediately instead of as a delayed completion event. Returns ------- None Background delivery unavailable on this session runtime (one-shot ``hermes -z``, stateless HTTP, Kanban worker, nested cron run). Caller falls back to the synchronous path unchanged. dict ``{"claimed": False, "success": False, "error": ...}`` — claim lost; same shape as ``_execute_job_now`` so the caller's existing response formatting applies. ``{"claimed": True, "dispatched": True, "delegation_id": ...}`` — run is executing in the background. ``{"claimed": True, "dispatched": False, "success": ..., "error": ...}`` — dispatch pool was at capacity; the run executed inline (the claim was already taken and must not be stranded). r)async_delivery_supportedNrr)get_current_session_keyrM)default)get_running_job_idsFrrrrrz2Failed to claim cron job %s for background run: %sT)r dispatchedrrryHERMES_UI_SESSION_ID)_current_origin_session_iddispatch_async_delegationzQcronjob run: async delegation registry unavailable (%s); running job '%s' inline.rrN)_get_max_async_childrenrrrct}ttj z d}tpi}d ddd|drdnd |d rd |d nd zd dkrdndzg}|dr|d|dt }|r*|d|||drdnd d||d d|dS)Nrr Cron job 'rz) finished its manual run.zResult: rr%FAILEDru — rMzDelivery target: rz/ (output was delivered there by the job itself)z (output saved locally only)rzNext scheduled run: z--- JOB OUTPUT ---r r)statussummaryr api_callsduration_seconds)rroundrr rrOrGrP) resdurationrlinesexcerptrrrrr started_ats r_runnerz-_try_dispatch_background_run.._runnerss>>>z1155FOO)r H H Hf H H H Aswwy11?ttx A A-0WWW-=-=E)swww'')))2 G ) ) )g%%BA3     == ' ' L LLJ -0HJJ K K K,V44  " LL- . . . LL ! ! !%(WWY%7%7DkkWyy''WWW%% (    r<zManual run of cron job 'rrAztTriggered via cronjob(action='run'). The job executed in its own fresh cron session; this block reports its outcome.cron_runr) goalcontexttoolsetsroler session_keyparent_session_idr5origin_ui_session_idorigin_session_idmax_async_childrenrX delegation_id)rrNrmzGcronjob run: background pool unavailable (%s); running job '%s' inline.rrejected)rrJrrrtools.approvalrKrrMr r rrtrrrztools.async_delegationrPrQrurtools.delegate_toolrRrrrinfo)rrHrrJrKrhrMrrrrjrzrPrQrkrrR max_asyncrbdispatchrrrras` ` @@@@r_try_dispatch_background_runru7s*R DDDDDD'')) 4       YF3776??,f--H ::::::--b999   &:& *oo t#Y  : : : : : :,,....$$J /    D "&)) II @$Y// WLV$HH H I YYY I6STUUU  A / / / /    D uQTUVQWQWXXXXXXXX Y ;;;;;;./ErJJPb              7688  '()8   "#LAAA$| ??????++--  Jggi))G T#s(^           :)( > > >V > > > B ggg-7A#j///T1+$H"||H--%\\/::    KKQ Wj))8c = = =F F< Ms ((A++ A:9A:B/.C=/ B<9C=;B<d-.S|d?krEtC|| @}+tAt+jdt3|+dAd-.S|dBkrCtE|}+tAt+jdt3|+dAd-.S|dCvr|pd},|,r"t |,}|rt|dStG|$||,D}-|-|-dErjtAt3t|pd'|i}.d|.dF<dG|.dH<|-dI|.dI<t+jd|.dJdKd-.S|-|-ntI|$|,L}/|/dMdrtAt3t|pd'|i}.|/dMd|.dF<|/d#d|.dN<|/dMds|/d"pdO|.dP<n |/d"r |/d"|.dQ<t+jd|.dAd-.S|dRkri}0|'t |}|rt|dS||0d <|||0d<|t||0d<| |$t|| }||0d<|r|dnd|0d(<| t#| |0d<| t#| |0d<| t#| d|0d<d|0vr|0dn|$d}1d|0vr|0dn|$d}2t|1|2}|rt|dS|:|r"t |}|rt|dS|rt#|nd|0d<|:|r"t |}|rt|dS|rt#|nd|0d <||rt#|nd|0d!<||Wd |0vr|0d n|$d }3d!|0vr|0d!n|$d!}4|3r|4rtdSdS|t|tr,|r|gng} n dT|D} | r-dd lm }| D]$}!||!std |!d dcS%| pd|0d<||pd|0d<|t ||0d<|t#|pd|0d<|Wt |}5|5rAd|0vr|0dn|$d}6|6stdUdS|5|0d<|8|dkrdn|}7tK|$dpi}8|7|8dV<|8|0d<|PtM|}9|9|0d<|9dW||0d)<|$dXdYkr dZ|0dX<d|0d[<|0std\dStO||0}+tAt+jdt3|+dAd-.Std]|d4dS#tP$r(}:tt|:dcYd}:~:Sd}:~:wwxYw)_z!Unified cron job management tool.rMcreatezschedule is required for createF)ruFcreate with no_agent=True requires a script — the script is the job.z3create requires either prompt or at least one skillr)r zcontext_from job 'z>' not found. Use cronjob(action='list') to see available jobs.)CronSchedulerRegistrationError&create_job_with_scheduler_registrationrJrrrrrrrrrTrrrxrNrrryrrrrrUz ' created. rrrrr) rrrrrrrrrrmessager)indentrc,g|]}t|Sr7)r)r8rs rrzcronjob..s ]]]K$$]]]r<)rw)rcountjobszjob_id is required for action ''cg|]H}|d|d|d|ddIS)rrrr)rrrrr)r8ms rrzcronjob..sd    #$D'$%EE&MM().@(A(A+,55+?+?    r<)rrmatcheszJob with ID or name 'z8' not found. Use cronjob(action='list') to inspect jobs.)rrremovezFailed to remove job 'z ' removed.)rrr)rr removed_jobpause)r)rrresume>runrun_nowtrigger)rHrrNexecuted backgroundexecution_modermuThe job is running in the background. You and the user can keep working; its outcome re-enters the conversation as a new message when it finishes. Do not wait or poll — just continue.)rrnoterrexecution_successz4Already being fired by the scheduler; not run again.execution_skippedexecution_errorupdateu]monitor_script and monitor_url are mutually exclusive — clear one before setting the other.cg|]D}t|#t|ESr7r)r8js rrzcronjob..gs9SSSqCFFLLNNSCFFLLNNSSSr<ziCannot set no_agent=True on a job without a script. Set `script` in the same update, or on the job first.rdisplayrpaused scheduledrzNo updates provided.zUnknown cron action 'r7))rr tool_errorrr0rqrrrBr rrrr}r~rrrto_dictpoprjsondumpsrrrrrFrr rrrrrrur dictrrr);rvrrJrrrrrwrrrrrrrrxrrrryrrrzrHrcanonical_skills _no_agent scan_error script_error monitor_errorbase_url_error_get_jobrefsref_idr}r~rexc_partial_create_message _local_noticerreupdatedrbgr exec_resultupdates eff_provider eff_base_urleff_mon_script eff_mon_urltarget_no_agenteffective_scriptnormalized_repeat repeat_stateparsed_schedulers; rcronjobrs6 y1l))++1133  ! ! T!"CUSSSS0?? XI  h%1 %  h$4 h!"Wafgggg A.v66 A%j%@@@@ C9&AA C%lEBBBB D :> J J  D%mUCCCC5XxHHN A!.%@@@@ 999999)3L#)F)FX ~~L"F#8F++)PPPP$)             T<<!>>;8DDD;8Z^____9@@@".&6%=:'BBB'Y '8&7!"$A#P#P#P#$!>k J J J%(2 T T T;;==!(,,w"7"7SSS(SSSSSSSS TC3v;BBBO238PQX8Y8YZZM G%4"F"F}"F"F:#!$iK WWW--!ggh33 #$6 7-c22"wwy'::#&}#5&s++.   "   ]] K[0\0\0\]]]D:$TDQQZ[\\\ \ ^M MMMW\]]] ] !&))CC$   :$ XX  "%            " :!-EF-E-E-EFF  T  ! ! ((G U!"D6"D"D"DeTTTT . 0 0 0:#CCKCCC$ #F $'GG,>$?$?$$      v666G . 0 0 0:${77K7KLLUVWWW W  ! ! ((G . 0 0 0:${77K7KLLUVWWW W 6 6 6 ">TL A.|<< A%j%@@@@. B~"&&"6"6~2444$WV__%FvGG%)z"+7'(*,&&*A*A'z#'%E      "n%c EEE y%00 52444 !BT6NCCF!,E!B!BF: *5//)U*K*KF& '??9e44 A.9oog.F.F/J*++)) A,7,@():$v>>qIII I  ! !&(G!.v66 A%j%@@@@$*!"&"%=g%F%F "!U%6#4UF#C#C $4!:J#T#3A#6#6PT  #@#G#G #&CH&M&M ##&CHcg&h&h&h #(2W'<'< ###''*BUBU (2W'<'< ###''*BUBU 5\<PPN A!.%@@@@!G#=f#E#EL#G),FFFFMS$]$A&$I$I$IY]!)!H$>~$N$NM$H)-GGGGES]1.AAAY]()&CNW1+>>>SW &)[-D1AW1L1LG,--RURYRYZjRkRk/ % 'lC00T5A5G5G5I5IQL..0011rDDSSLSSSD======"&'x//#-!TV!T!T!T(-$$$ +/,$'+.>.F$*+ ,/34E/F/F+,"&C7%K%K%St "##'x.."@HG@S@Sw{{8'<'<'r6s w   xx"%%% xx!!! xx!!! *%%%   XXf      xx!!!  ### "4d;;; hhw xx!!!  xx!!!! "xx!!!# $XXn---% &"4555' (###) **%%%+ ,xx 0111- .HH]+++/ 0y!!!1 266,'''3 r<u⏰)rtoolsetschemahandlercheck_fnemojir')NNr6)r9)NNNNNNFNNNNNNNNNNNNNNNN)S__doc__rloggingrVr-r)rpathlibrtypingrrrrrrr getLogger__name__rtrrpathinsertr__file__parentrBr r r r rrrrrrrrrrrjrvrXrltools.threat_patternsr1r]r>rErr0r?rIrSrZr`rrrfrqrwrrrrrrrrrr rrGrurCRONJOB_SCHEMArtools.registryrrregisterr7r<rrs    33333333333333000000  8 $ $ $)33ttH~~,344555"    R   $"""T?)<>>@PQ>)<>>@PQgReggiz{F1DFFHYZkQdkkknFG (KJJJJJ  HSHTHHHH 3 S T    <SS-S-U3S >-B----:cc,#%S/D(4S>24"S#X"hsm"PXY\P]""""JEc3hECEEEE  Xc] 8C= TXY\T]    $Y^#QUbjknboCHSM*MsmM'/}M c]MMMM`$x}$#$$$$N)T#s(^)S#X))))Z8<*<*< c3h*<'/}*< #s(^*<*<*<*<\8<WDWD c3hWD'/}WD #s(^WDWDWDWDtsshsm26:"&NN c3hN%-c]N3-Nd38nNNNNf! " !""&""  48,0!#(,$(!% $1V1V1 V1 SMV1 SMV1sm V1 3- V1 SM V1c]V1V1 C=V1 T#Y V1 C=V1smV1smV1 SMV1 SMV1 5d3i01!V1"tCy)#V1$c]%V1&tn'V1( ~)V1*SM+V1,#-V1./V10 1V12 3V1V1V1V1v \(Z   `Z  L Z    UZ    pZ "  =#Z * !u+Z 2   s 3Z :  (+ i;Z D   eViViVkVk e e eEZ L   a k~k~lAlA a a a MZ T   jUZ \ !  ] ]Z @  (+?  AZ Z  (+ @!![Z d   S eZ l ! \ ""mZ vJ{^^+ttnD.0///////     6( A!!!!!!r<