+ jHj FRt^RIt^RIt^RIt^RIHtHt^RIHt^RI H t ]P!] 4t RtRRRR/R ltR tR tR tR tRRltRtRtRtRtRRRR/RltRRltRR/RltRtRRltR#)anA resumed local session re-reads its config-derived settings (CFG-2); its MCP servers change the same way (CFG-3). Main's ``hermes -c`` was a new process: toolsets, MCP servers, ``terminal.backend``, ``max_turns``, checkpoints and the reasoning default came from the config it started with, while the stored session kept its model/provider. The owner keeps that line on ``session.resume``: it re-derives exactly those fields from the session profile's current config and commits them as a new policy generation. ``reload.mcp`` commits the MCP part alone for the calling session. The creation flags (request_json), the model route and a committed ``/reasoning`` or workspace pick stay; a session with a turn running or queued keeps the policy that turn was admitted under. A Bot Chat an earlier build committed frozen follows its profile from the open on (``follow_bot_chat``). N)asdictreplace)partial)PathcNW!9d W,W&R#VPVR4R#N)pop)targetlivekeys&&&C/home/ubuntu/.hermes/hermes-agent/gateway/session_policy_refresh.py_followr s {i  3pickedmcp_onlyFc^RIHpHp^RIHp\ P !VP4\ P !VP4rV!V4/\4rpV'd-VP\ P !VP4r,M2\W W4p \WV4pV!W*R4V PR4\W WW4p W8Xd\WP8XdLV\ P !VP48Xd'V!VPW4'gV/\43#\!W \ P"!V 4\ P"!V4R7pW V 3#)a``(policy, secrets, replaced)``: *policy* with its config-derived fields from *live* (the profile's config) and *terminal* (its terminal scope), or only its MCP servers (*mcp_only*); explicit picks (launch flags, the *picked* policy edits) stay. *secrets* are the refreshed sections' private values, *replaced* the sections (``None``: terminal) whose stored private values they supersede. *policy* itself when nothing moved; a rotated private value alone (its redacted tree unchanged) moves it.)_extract_config_secretspresent_sections) secrets_movedN)toolsets config_json terminal_jsonr)gateway.session_policyrr"gateway.session_policy_credentialsrjsonloadsrsetrr _settings _terminaladd _mcp_serversconfig_secret_refrdumps) policyr terminalrrrrroldconfigsecretsreplacedrs &&&$$ r refreshed_policyr)s Q@**V//0$**V=O=O2P.t4b#%8D#__djj9M9M.N(VT:Vv67; TFDGNH (oo5(djjQWQeQeFf:f!&":":GNNr35  VDJJv"d*kV.CG]^fGgGg#):: Orc  ^RIHpHp^RIHp^RIHp VPeV#\P!VP4p VPR4VPR43U u.uFp \V \4'dT M/NK p p V PR4\4V!V4rp V e\V ^,4\V ^,4,p\\ V4pV Uu0uF2p\V\"4'gKV!V4V9gK*V!V4kK4 ppV Uu.uF0p\V\"4'dV!V4W, 9gK.VNK2 p pT!V f/MRV /\P!\P$!V44VP&VP(VP*4pT\T ^,4, Uu/uFpTRR/bK ppRT9g T'd\\P!\P$!T'd/T ^,CTCMTR,44TR&T!TR,TR 4MTP-RR4TP/R4T'dTT,T,MTT,p\1\3\T4\T ^,4, \T ^,4, T,44#uup iuupiuupi T dTu#i;iuupi) aThe profile's MCP servers as this session's own selection takes them now (its explicit pick or platform allowlist, ``no_mcp`` and disabled entries respected): their definitions into *config*, private values split off as build_policy does (a managed worker binds this config, so it connects exactly these), and their names into the returned toolsets. An editor-MCP session keeps its frozen servers.)rr+)enabled_mcp_server_names)RuntimeStoreErrorN mcp_serversrr5F)rQ)rrr+hermes_cli.tools_configrOhermes_state_runtimerPr9rrr6r7r@r8rr _server_namestrr"r=r>r?rrr;r<)r#r&r rr'r(rr+rOrPrBrFsectionspickrr5knownservernameselectedstubsserverss&&&&&& r r r \s R@6 )jj,,-GMSZZXeMfhlhphpq~hMABMA:gt44"<MAHB#KK 3SU`` is its bare alias unless a server has that name.zmcp-:NN) startswith)r]rZs&&r rTrTs$v..43F48PDPrc^RIHp^RIHpHp^RIHp^RIHp^RI H p VPPV4R,p V!VPV4R,p V!V 4p V P'gV PV9dR#\VPP 4P#4P$p V'g V'd/MV !V 4pV!V R , 4V!VPV4ppT pV'g^R IHpV!WWV4pV'dVV JdR#WV/\+4V 3#\-VWVVR 7wpppVV JdR#WVVVV 3#) a3Off the owner loop: the stored policy, its refresh from this profile home's files, and the generation it was derived at. None when the session takes no refresh or nothing moved. *adopt_only*: the adoption of a frozen Bot Chat alone, without the config-derived settings (a later open on the same attachment).)_load_gateway_config)SURFACESrestore_policy local_receipt) policy_picks)build_profile_terminal_scoperuntime_generationr#Nz config.yaml)follow_bot_chat)rr) gateway.runrbrrcrdhermes_state_localrfhermes_state_mutation_preparedrgtools.terminal_scoperhdb get_sessionignore_user_configr=rdb_pathresolveparentgateway.session_local_migrationrjrr)) authority session_idr adopt_onlyrbrcrdrfrgrh generationstoredr%homer$r rbaserjr#r'r(s&&&& r _preparer}s'1?0;A))*56JKJ 9<< 4X >F  C 8!;  $$ % - - / 6 6Dr1Md1SH'}(<=|ILLZd?e&D D CycHs{tRdBz(RR 0tf_g hFGXS=4ZvFGXz&ZZrc ^RIHpHpHp^RIHp .VP 'dTMROVO5p VP'd V !WV 4M/p V PV4V!WW8!W4V R7#)aRe-bind the private values like a policy mutation: policy identity covers config and terminal, and the refreshed sections' private values are the profile's current ones (the stored ones there are neither re-read nor checked: a rotated key is what the refresh picks up, not a revoked credential). A policy that follows its profile from this open on keeps none of its followed sections' frozen values.)FOLLOW_SECTIONSbind_launch_key launch_key)recover_config_secrets)config_secrets) rrrrrrfollows_profiler!update) rvrwr%r#freshr(rrrrskipr's &&&&&& r _rebindrsh TSI L!7!7!7oR L8 LD>A>S>S>S$YT:Y[G NN5 9&*Y:Tel mmrcH\VRR4pVf\4;qnV#)zFrozen Bot Chats an open found to adopt but could not commit (a turn running or queued, a concurrent edit): the next open retries, whether or not that client is already attached._pending_adoptionsN)getattrrrrvfounds& r rrs* I3T :E }/2u4, Lrc8\VRR4pVf /;qnV#)_policy_refreshesN)rrrs& r _in_flightrs& I2D 9E }.00+ Lrc"\V4pVPV4;pePVP4'g8\P RV4\ P !V04GRjxL KbR#R#L 5i)aWait out a refresh of *session_id* in flight. Its commit lands before its terminal cleanup (a sandbox teardown can take 10-15 s) and its publication; an attach meanwhile would find the stored policy ahead of the live one, which restore_local_session refuses.Nz2Session %s waits for its policy refresh to publish)rr7doneloggerdebugasynciowait)rvrw refreshesrunnings&& r refresh_settledrs_9%ImmJ/ /7 commit_refresh..s<y}}]`]k]kOl"P# cnnd(K)-(,)-r) gateway.session_runtime_workersrrrwr_commit_refreshadd_done_callbackrshield)rvrrrxrtaskrs&f$$ @r commit_refreshrs~ ? )S^^ 4449%I'5iQZ\_aiAv'wwD9S^^ $-.% %% 5 &s" BB A!BB B Bc "aaa"^RIHp^RIHp\P !\ SSPW#4GRjxL pV'g \S4M \4pVfVPSP4R#VwrrrV P'd.V P'gVPSP4\P!V P4\P!V P48go\!SSPWW4p V!S\#VSP$SP&SPV\)V 4V R7VVV3RlR7GRjxL VPSP4R#ELNL$5i) rH) tracked_write)commit_refreshed_policyNF)epochrwr%newryc<\SSS4#r)_publish) _generationrvmovedrs&r r!_commit_refresh..s)S%1Pr)thenT)rrrmrr to_threadr}rwrrdiscardrrrrrrrrorr)rvrrrxrrpreparedpendingrzr%r#r'r(ryrsff&& @r rrs3=F&&xCNNHaaH4< +G'9A6F( c&9&9&9 CNN# JJv++ , 3;L;L0M ME YW OF  7+BILLXaXgXg69nn&V\]cVd6@$BQ RRR OOCNN# )bRs/7FF  F AF)B?F(F )"F Fattachedc"V'dVP\V49dR#V'd\WRR7M \W4GRjxL R#L \dp\ TRR4;'g\ T4P pTR9p\PT'd\PM\PRTPT4Rp?R#Rp?ii;i5i)aCommit the config refresh of an idle local session before it is attached. Never fails the resume: a busy session, a revoked launch credential or an unreadable profile keeps the stored policy. Only a turn running or queued (or admitted during the commit) is expected; anything else is a WARNING. *attached*: this client already holds the session (Desktop's warm reopen). The settings refresh is once per attachment, but a frozen Bot Chat whose adoption a busy open refused is adopted on any later open.NT)rxreasonz0Session %s keeps its stored policy on resume: %s> session_busyrevision_conflictunknown_execution) rwrr Exceptionrtype__name__rlogloggingINFOWARNING)rvrrexcrbusys&&$ r refresh_resumed_policyrsCNN*P^_hPnoo +h-CCc1C1CSS 47<p>>6 + ++sF%C$AA A AC$A C!A7CC$C!!C$c^RIHp^RIHp^RIHpHp^RIHpVPV!VPVP4R,R,0pVPVP,Pp^RI Hp V!V4;_uu_4RV 2.VOU u0uF q!V 4kK p p V.VOFp V !V 4V!V 4K R R R 4X F p V!V 4K R #uup i +'giL(;i) a,The session's own cached terminal environments (keyed by its route, or its ids under per-session isolation): the terminal tool reuses one by key whatever backend built it. A profile-shared one stays. Its recorded cwd (keyed by its route or task id) goes too: it wins over the new binding's directory.) owner_scopere)_qualify_task_keyclear_session_cwd) cleanup_vmentryrw)unbind_turn_workspacezsession:N)gateway.session_authoritiesrrlrftools.terminal_toolrrtools.terminal_tool_lifecyclerrwrosessionsrouterr) rvrrrfrrridsrrr rDs && r drop_session_terminalrs80H8 >>=s~~FwOP\] ^C   s~~ . 4 4E< Y  5=eW3E2L2LM2L3!#&2LM=C=C !# & c "! 3 N s C(C#*C(#C(( C8 cr"^RIHpHpV'd$\P!\ W4GRjxL V!WP 4VPV4VPV4VPVP ,PPVP V!W4RR7R#L5i)rH)local_session_infopublish_local_policyNz session.info) event_type) gateway.session_localrrrrrrw _schedule_publish_pendingr event_streampublish)rvrrrrs&&& r rrsN  5yFFFNN3s# s~~&33;; *9:~<W Gs/B7B5BB7r)FF)F)__doc__rrr dataclassesrr functoolsrpathlibr getLoggerrrr r)rrr rTr}rrrrrrrrrrrr rs  '   8 $%r%E%2:%ZPQ [: n& &U &u &4+U+$* Wr