Summary

• restore cron profile binding and strict unattended website hardening on top of current main
• treat origin-less cron jobs with deliver=origin as local-only instead of falling back to ambient home-channel configuration
• harden bound-home cron child-result handoff so temp-file setup failures return structured cron failure tuples
• align cron tests with the current run_job() dispatcher model and current upstream main

Why this PR replaces the earlier branch

• the earlier PR branch accidentally carried local history from an outdated base
• this replacement branch is rebuilt directly from current origin/main
• it preserves the intended cron/profile-binding work plus the follow-up hardening/fixups, without the stale branch divergence baggage

Changes

cron/profile binding + unattended website hardening

• restore profile / hermes_home binding in cron job definitions and runtime resolution
• reintroduce strict unattended website policy coverage and related constants/tool wiring
• add tests for bound-home cron execution and strict unattended website policy behavior

origin-less delivery and bound-home result hardening

• remove home-channel fallback for origin-less deliver=origin resolution
• normalize legacy/list-form deliver handling inside delivery logic
• guard bound-home temp-dir/temp-file setup
• keep child result parsing resilient via stdout + temp-file fallback behavior

test alignment

• make local-execution cron tests dispatcher-aware by pinning resolved Hermes home where required
• isolate relevant tick-lock paths from live machine state
• add regression coverage for bound-home tempfile setup failure

Verification

• venv/bin/python -m pytest tests/cron tests/tools/test_website_policy_strict.py tests/test_hermes_constants.py -q -o 'addopts='
  • 296 passed
• venv/bin/python -m py_compile cron/scheduler.py tests/cron/test_scheduler.py tests/cron/test_cron_workdir.py tests/cron/test_codex_execution_paths.py tests/cron/test_cron_script.py tests/test_hermes_constants.py tools/cronjob_tools.py tools/website_policy.py hermes_constants.py
  • passed