+ Wj;Rt^RIHt^RIt^RIHt^RIHtRtRt !RR]P4t R t R R lt R R ltRRltR#)z;``hermes gateway`` and ``hermes proxy`` subcommand parsers.) annotationsN)Callable)add_accept_hooks_flagzStart a separate gateway for this profile even when the default multiplexer already serves it (not recommended: two pollers on one bot token, port conflicts)z{verb} without asking even while sessions are live (turns, cron jobs, background delegations): they are interrupted. Without it the command names the live work and asks y/N (refuses when there is no terminal). --interrupt is the same flagcPa]tRt^tRtRR/V3RlltRV3RlltV3RltRtV;t #) _GatewayCommandParserzCEnsure's parser errors share its machine-readable command boundary. ensure_jsonFc 4<Wn\SV`!V/VBR#)N)rsuper__init__)selfrargskwargs __class__s&$*,RC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\subcommands\gateway.pyr _GatewayCommandParser.__init__s& $)&)c <\SV`W4wr4VP'dV'dVPR4W43#)zunknown arguments)r parse_known_argsrerror)r r namespaceparsedunknownrs&&& rr&_GatewayCommandParser.parse_known_argss7'24C     JJ* +rc <VP'g\SV` V4#\R4VP ^R4R#)zK{"endpoint":null,"reason_code":"invalid_invocation","state":"inaccessible"}z#gateway ensure: invalid invocation N)rr rprintexit)r messagers&&rr_GatewayCommandParser.error%s67=) ) [\ !; --platform X` docs without advertising it. Lifecycle commands operate on the gateway process, not one adapter; Photon briefly printed a per-platform start command during setup, so keep it parseable. z --platformplatformdestr(N)r)argparseSUPPRESSr*s&r_add_compat_platform_flagr=0s   :HR?R 7\ V R@RARBR 7\V 4\V 4VPRCRDR 7p \ V RRER 7\ V RFRGR 7V PRHRIRJR67\ V RKRLRMRNRO7V PRPRLRQRRRS7\ V RTRURMRVRO7V PRWRURQRXRS7\ V RYRZR[R67\ V R\R]R^R67\ V R_R`\ P R67VPRaRbR 7p\V4VPRcRdR 7VPReRfR 7VPRgRhRiR7p\ VRjRkRlR67\ VR1R2RmRnR67VPRoRpRqR7p\ VRrRsRtR67\ VRjRkRuR67\ VR1R2RmRvR67VPRwRxRyR7pVPRzRMR{R(7VPR|R}RMR~RO7VPRRRMRRO7VPRRRMRRO7VPVR)7VPRRRR7pVPRR7pVPR*RR 7pVPRRRR(7VPRRMRR(7VPR\ RMRR7VPR.service) and unrelated third-party services are never touched.z --dry-rundry_runz+List what would be removed without doing ityeszSkip the confirmation promptmigratez/ ingress) and changes nothing when blocked. Safe to re-run: a half-migrated host converges on the next run. Per-profile gateways are not a supported topology any more, so there is no rollback command.z --multiplex multiplexz,Converge onto the one host gateway (default)z5Print the plan and blockers without changing anythingzApply without confirmationenrollzLEnroll this gateway with a relay connector (writes relay auth creds to .env)aRedeem a single-use enrollment token with a relay connector. Authenticates as your Nous Portal account (the connector derives the authoritative tenant from it), mints this gateway's per-gateway secret and per-tenant delivery key, and writes GATEWAY_RELAY_ID / GATEWAY_RELAY_SECRET / GATEWAY_RELAY_DELIVERY_KEY into ~/.hermes/.env. Requires being logged in (hermes setup). Not available in managed installs.z--tokenzThe single-use enrollment token from the connector (delivered with your gateway config). Also settable via GATEWAY_RELAY_ENROLL_TOKEN.z--connector-url connector_urlzThe connector base/relay URL, e.g. wss://connector.example.com/relay or https://connector.example.com. Also settable via GATEWAY_RELAY_URL / gateway.relay_url in config.yaml.z --gateway-id gateway_idz[A stable id for this gateway instance (kill-switch granularity). Defaults to gw-.z --wake-urlwake_urluaPhase 5 §5.2 wake URL: a reachable URL the connector pokes (payload-free GET) to wake this gateway when buffered work arrives while it's idle/suspended, so it reconnects and drains. Persisted as GATEWAY_RELAY_WAKE_URL in ~/.hermes/.env and forwarded at provision. Optional — without it the gateway still drains whenever it next reconnects on its own.proxyz0Local OpenAI-compatible proxy to OAuth providerszRun a local HTTP server that forwards OpenAI-compatible requests to an OAuth-authenticated provider (e.g. Nous Portal). External apps can point at the proxy with any bearer token; the proxy attaches your real credentials. proxy_command)r9zRun the proxy in the foregroundz --providernouszMUpstream provider: nous or xai (default: nous). See `hermes proxy providers`.z--hostz@Bind address (default: 127.0.0.1). Use 0.0.0.0 to expose on LAN.z--portzBind port (default: 8645))typerNr(z$Show which proxy upstreams are ready providersz'List available proxy upstream providers) add_parseradd_subparsersrr)r-r:r;rhermes_cli.gateway_runtime_clirO set_defaultsrB_FORCE_SERVED_PROFILE_HELPr=_INTERRUPT_HELPr4int) subparsersrDrErFgateway_parsergateway_subparsers gateway_runrOgateway_ensure gateway_start gateway_stopgateway_restartgateway_statusgateway_installgateway_uninstallgateway_migrate_legacygateway_migrategateway_enroll proxy_parserproxy_subparsers proxy_starts&$$$ rbuild_gateway_parserr=sm **9;Yb+dN'66 -B7D%// P0K  A  i 3S I  ,   F   +.MN +}8+<+<=+&.)A'22d OZ3[N  .()YZ T%V X%78&11N2PM]# - SU -)CDm,%00>T0UL\" ,&VW ,g};_McMcioMcMpq(33ID]3^O_% /7 OQ /9+EF /4-kP_PfPfluPfPvw /: gio.'228BW2XN .()<= .$ HJ^$n-)33Q4SO /9 ik /: GI  } B!D /={D EG  !1 M @!B /-4Dd FH  !6=MVc ?!A /> EG /.5F UW //6HxO`O`a*55kHc5d&'!!&/[!\!!'0O!P/::\6;7  +I :< $eB`a(33VL4MO /={Aop /;Y=tu /4u;WX(228 [Z3[N 4R S 1QU2 3\4) * :t% &%78((H.)/L $222H"--g<]-^K\6 \^Xt OQXCD_`/UV 2[\9-[1r)r" __future__rr:typingrhermes_cli.subcommands._sharedrrvrwArgumentParserrr-r=rBrr3rrrsSA"@ F : =H33=(FOTM2r