+ Wj,Rt^RIHt^RIt^RIHt^RIHtHtRt RRlt RRR llt RR R llt R R ] 2RR/RRllt RRltRRRR/RRlltR#)aRefusals that keep ``hermes gateway`` lifecycle verbs off gateways they must not take down. Two rules, one per failure that took a production gateway down: * **Foreign service definition.** A systemd unit / launchd plist pins the ``HERMES_HOME`` its gateway runs on. A lifecycle verb (start/stop/restart/uninstall) on a definition pinning ANOTHER home acts on another install's gateway: a ``HOME=`` probe resolved the bare ``hermes-gateway`` name and ran ``systemctl --user stop`` on the account's real unit. Install/refresh already refused to WRITE such a definition (``gateway_service_owner``); the same module now refuses to OPERATE one: ``refuse_foreign_systemd_unit`` (salvaged from #141908, checked before any home sync) and ``refuse_foreign_launchd_plist``. * **Live sessions.** ``gateway stop``/``restart`` name the turns, cron jobs or background delegations the gateway is running and ask y/N before interrupting them; ``-y``/``--yes`` (alias ``--interrupt``) skips the question, and with no terminal to ask on they refuse. The in-band restart drains turns, but its stop still interrupts every async delegation (``interrupt_all``), and a stop ends the sessions outright. ) annotationsN)Path)AnyOptionalz--yesc V^8dQhRRRR/#)homerreturnOptional[dict[str, Any]])formats"WC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\gateway_lifecycle_guards.py __annotate__rs C C C)A Cc^RIHpHpHpHpV!VR, 4pV'dV!V4'gV!V4'gR#VP R4pRV!VP R44R\ V\4'dV/#./#)z]``active_agents`` from a fresh ``gateway_state.json`` whose writer is alive (older gateways).)parse_active_agentsread_runtime_statusruntime_status_is_staleruntime_status_pid_is_livezgateway_state.jsonN active_work active_agents)gateway.statusrrrrget isinstancelist)rrrrrrecordworks& r _live_work_from_staters|| (rr r list[str]r )r s"r rrGs1Jc(4=rcRVF p\WC4pVfK\WWR4u# .#)zcRefusal text for ``verb`` while the first answering gateway among ``homes`` has live work, else [].)r' _work_lines)r@r:r>rrrs&&$$ r refusal_linesrEGs2'  t4; ; Irc ,V^8dQhRRRRRRRRRR /#) rr@rArrrzdict[str, Any]r>r rBr )r s"r rrQs0  c  ^  PY rc ^RIHpVPR4;'g.Uu.uFp\V\4'gKVNK pp\ \ V4\VPR4;'g^44pV'g.#RV RV R2.pYUu.uFpRV!WQ4 2NK up, pV'gVPRV R24VR R VPVR 7 R V R 2., pV#uupiuupi))describe_active_work_unitrr Refusing to z the gateway: z& live session(s) would be interrupted.u • z6 active agent run(s) (this gateway does not name them)z2 Let them finish, or interrupt them deliberately:z )r@z # interrupts z live session(s)) "hermes_cli.update_cmd_drain_reportrIrrr%maxlenintr8r ) r@rrr>rIuunitscountliness &&&& r rDrDQsL/5525 M51At9LQQ5E M E C 9 > >Q? @E  D6w6\ ] ^E U KU09:;U KKE  veW$Z[\ BY%%4%011A%HXY[[E L N LsC6C6C; host_homec(V^8dQhRRRRRRRR/#) rr@rArSzOptional[Path]rr r Noner )r s"r rras*  S n ^k w{ rc V'd&RV R\ 2p\V\V4.W4R7pM \V\\ VRR444pV'gR#^RIHpHp\ VRR4'dAV!V^,PR V R 2R V R 244V^RFp\V4K R#\PP4'd\PP4'd^R IHp V!V^,PR V R 2VP!4 R 244V^RFp\V4K V !RV R2RR7'dR#\RVR8XdRMR R24\P"!^4V!V^,4VR,Fp\V4K \P"!^4R#)zExit 1 naming the live work unless ``--interrupt`` was passed; with it, say what is interrupted. ``host_home``/``profile``: a served profile's stop/restart unserves only that profile in the host, so only its work counts.z hermes -p z gateway {verb} )rr>r)FN) print_error print_warning interruptrJz the gatewayz--yes: z proceeds) prompt_yes_nozInterrupt them and z the gateway?)defaultz! Cancelled: the gateway was not stopstopped restarted.:NN)INTERRUPT_FLAGrErr=getattrhermes_cli.gatewayrWrXreplaceprintsysstdinisattystdouthermes_cli.cli_outputrZ capitalizeexit) r@argsrSrhintrRrWrXlinerZs &&$$ r refuse_while_sessions_liverqasG9$6~6FGdT)_$5wWd$4WT8U5S$TU =t[%((eAh&&dV<'HGTXSYYbJcde!BKD $K  yycjj//117eAh&&dV<'HT__M^L__kJlmn!BKD $K .tfMBE R R  1tv~)S^1__`ab  ab  d HHQKr)N)F)__doc__ __future__rrgpathlibrtypingrrrbrr'r=rErDrqr rr rvsi$#   C <&F^_m^nDo+/  t nr  r