+ iHj a0t$Rt^RIHt^RIt^RIt^RIt^RIHt^RI H t H t H t ^RI H t ^RIHt^RIHtHtRt]P,!4t]!4tR ]R &R R ltR RltRRltRRRlltRRltRRlt RRlt!RRlt"R#)u>Global emergency stop (ESTOP) — a resumable pause for NEW work only. ``hermes pause`` writes a sentinel at ``$HERMES_HOME/ESTOP``; ``hermes resume`` removes it. While it exists the cron scheduler, kanban dispatcher and new gateway turns skip work; in-flight work is never killed. The check is one or two uncached ``os.stat`` calls (process home + fleet root when they differ). The body is optional JSON ``{"reason", "engaged_at"}``; a corrupt/empty file still counts as engaged (fail safe, e.g. ``touch ~/.hermes/ESTOP``). Ported from gastownhall/gastown estop.go (MIT). ) annotationsN)suppress)datetimetimezoneUTC)Path)Optional)_hermes_home_path_hermes_root_pathESTOPzset[str]_logged_componentscV^8dQhRR/#)returnr)formats"0/home/ubuntu/.hermes/hermes-agent/agent/estop.py __annotate__rs**t*c,\4\, #)zFPath of the ESTOP sentinel this process would write on `hermes pause`.) _hermes_home SENTINEL_NAMErrr sentinel_pathrs >M ))rcV^8dQhRR/#)rrlistr)rs"rrr$s 6 64 6rc\4p\4\, pTP 4TP 48gpT'dY.#T.# \dT.u#i;i \dY8gpL3i;i)zProfile home first, then the fleet root if it is a different directory: a profile gateway (HERMES_HOME=~/.hermes/profiles/) must still honor an operator's ~/.hermes/ESTOP.)r_canonical_rootr Exceptionresolve)primaryrootdistincts r_candidate_sentinel_pathsr"$s|oG =0#<<>W__%66'G?5WI5 y #?#s"A!A%A"!A"%A76A7cV^8dQhRR/#rrboolr)rs"rrr4s  D rcRp\4FpVP4'dR#K V# \dRpK3i;i)zGTrue if ANY candidate sentinel exists; fail SAFE (True) on stat errors.FT)r"existsOSError)saw_stat_errorpaths r is_engagedr+4sJN)+ "{{}},  "!N "s0 AAc V^8dQhRRRR/#)rreason Optional[str]rrr)rs"rrr@s  = D rc\4pR\P!\4P 4RT;'gR/pVP P RRR7VP\P!V^R7R,RR 7V# \dL\\4;_uu_4TPRR 7RRR4T# +'giT#;ii;i) zDCreate the ESTOP sentinel. Idempotent; re-engaging updates the file. engaged_atr-NT)parentsexist_ok)indent zutf-8encoding)r2) rrnowr isoformatparentmkdir write_textjsondumpsr(rtouch)r-r*payloads& rengager@@s ?DX\\#.88:HfnnPTUG& $6  715>cV^8dQhRR/#)rrzOptional[dict]r)rs"rrrYs$$>$rc j\4'gR#RRRR/pRp\4FpVP4'gKRp\ \\ \4;_uu_4\P!TPRR74p\T\4'dDRTPR4;'gRRTPR4;'gR/pRRR4M RRR4K V'dV#R# \dTuu#\dKi;i +'giEK ;i)zReturn ``{"reason", "engaged_at"}`` or None when not engaged; an unreadable/corrupt body still reports engaged with both fields None.Nr-r0FTz utf-8-sigr5) r+r"r'r(rDr ValueErrorr<loads read_text isinstancedictget)statefoundr*raws r get_staterRYs << t\4 0E E)+ ;;==!  gz> : :**T^^[^ABC#t$$!3778#4#<#<lCGGT`LaLiLieij ; :$; :,5#t# L   ; : :s6C>%AD ;D D > DDDD D2 cV^8dQhRR/#)rrr.r)rs"rrrqsmmmmrcz\4pVfR#VPR4'dRVR, R2MRpRV R2#)zFShort user-facing notice for new gateway turns, or None if not paused.Nr-z ()u⏸️ Hermes is pausedzB. New work is on hold; run `hermes resume` to pick things back up.)rRrN)rOtags r paused_replyrXqsD KE }%*YYx%8%8BuXq !bC $SE)k llrc$V^8dQhRRRRRR/#)r componentstrloggerzlogging.Loggerrr%r)rs"rrrzs!CDrc\4'g/\;_uu_4\PV4RRR4R#\;_uu_4V\9p\P V4RRR4X'dO\ 4;'g/P R4pV'dRV R2MRpVPRW\44R# +'giR#;i +'giL|;i) z^Return True when engaged, logging once per engagement per component (re-armed after a resume).NFr-z (reason: rUrVuR%s dispatch paused by global emergency stop%s — remove with `hermes resume` (%s)T) r+ _log_lockr discardaddrRrNinfor)rZr\firstr-suffixs&& r check_pausedrdzs << Y  & &y 1 !33y)  +##((2+1:fXQ'r ` }  Y sC  C  C C0 )N)#__conditional_annotations____doc__ __future__rr<logging threading contextlibrrrrpathlibrtypingragent.file_safetyr rr rrLockr^setr __annotations__rr"r+r@rFrRrXrd)res@rrqsw# ,,f  NN  "uH$* 6   $0mr