`gjdZddlmZddlZddlmZmZmZmZejdZ dZ dZ dZ Gd d eZGd d Zy) u)Thin HTTP client for the agent → NAS ``agent-cron`` endpoints (Chronos). The Chronos provider speaks ONLY to NAS — it names no scheduler vendor and holds no scheduler credentials. NAS owns the external scheduler (an internal implementation detail) and that scheduler's account; the agent just asks NAS to "arm a one-shot at time T" / "cancel" / "list", authenticated with the agent's existing Nous Portal access token (the same token it already uses to call the portal — no new secret). Wire contract: ``docs/chronos-managed-cron-contract.md``. ) annotationsN)AnyDictListOptionalz cron.chronosz/api/agent-cron/provisionz/api/agent-cron/cancelz/api/agent-cron/listceZdZdZy)NasCronClientErrorzERaised when a NAS agent-cron call fails (non-2xx or transport error).N)__name__ __module__ __qualname____doc__]/root/.hermes/venv/lib/python3.12/site-packages/plugins/cron_providers/chronos/_nas_client.pyr r sOrr c^eZdZdZddd dZddZddZddZddZ dd Z dd Z dd Z y ) NasCronClientuMinimal client for the agent→NAS provision/cancel/list endpoints. Uses the agent's refresh-aware Nous access token for auth. No scheduler vendor, no scheduler creds — NAS hides all of that behind these three calls. g.@)timeout_secondsc>|jd|_||_y)N/)rstrip portal_urlr)selfrrs r__init__zNasCronClient.__init__%s$++C0.rcddlm}|S)z>The agent's existing Nous Portal access token (refresh-aware).r)resolve_nous_access_token)hermes_cli.authr)rrs r _access_tokenzNasCronClient._access_token+s=(**rc.d|jddS)NzBearer zapplication/json) Authorizationz Content-Type)r)rs r_headerszNasCronClient._headers0s#&t'9'9';&<=.  rc ddl}|j|} |j|||j|j}|jdzdk7r+t d|d|jd|jdd  |jr|jSiS#t $r}t d|d||d}~wwxYw#t $ricYSwxYw) Nr)jsonheaderstimeoutzPOST failed: d returned : ) requestsrpostr r Exceptionr status_codetextcontentr")rpathbodyr+urlrespes r_postzNasCronClient._post8s!$( H==$ AUAU!D   s "a '$vZ(8(8'9DIIdsO;LM  "&,,499; 6B 6 H$uTF)A3%?@a G H I /-BCC B?(B::B? CCc ddl}|j|} |j|||j|j}|jdzdk7r+t d|d|jd|jdd  |jr|jSiS#t $r}t d|d||d}~wwxYw#t $ricYSwxYw) Nr)paramsr#r$zGET r%r&r'r(r)r*) r+rgetr rr-r r.r/r0r")rr1r9r+r3r4r5s r_getzNasCronClient._getKs!$( G<<FDMMOTEYEY D   s "a '$tfJt'7'7&8499Tc?:KL  "&,,499; 6B 6 G$tD61#%>?Q F G I r7c8|jt||||dS)zAsk NAS to arm a one-shot for ``job_id`` at ``fire_at`` (ISO 8601). ``dedup_key`` (``{job_id}:{fire_at}``) makes re-arming the same fire idempotent NAS-side. Returns the NAS response (e.g. ``{schedule_id}``). )job_idfire_atagent_callback_url dedup_key)r6_PROVISION_PATH)rr=r>r?r@s r provisionzNasCronClient.provision`s(zz/"4" ,   rc2|jtd|iS)z4Ask NAS to cancel any armed one-shot for ``job_id``.r=)r6 _CANCEL_PATH)rr=s rcancelzNasCronClient.cancelnszz,6(:;;rc|jti}t|tr|j dnd}t|t r|SgS)a#List the one-shots NAS currently has armed for this agent. Returns a list of ``{job_id, fire_at, schedule_id}``. Best-effort: used by reconcile to find orphaned arms on a cold process; on error the caller falls back to idempotent re-arm of all desired jobs. armedN)r; _LIST_PATH isinstancedictr:list)rdataitemss r list_armedzNasCronClient.list_armedrsAyyR(%/d%;!"5$/u7R7rN)rstrrfloatreturnNone)rQrO)rQzDict[str, str])r1rOr2Dict[str, Any]rQrS)r1rOr9rSrQrS) r=rOr>rOr?rOr@rOrQrS)r=rOrQrS)rQzList[Dict[str, Any]]) r r r r rrr r6r;rBrErNrrrrrsF EI/ +  &*     %3  < 8rr)r __future__rloggingtypingrrrr getLoggerloggerrArDrH RuntimeErrorr rrrrrZsU #,,   > *.' # PP]8]8r