+ jHjH Rt^RIt^RIHt^RIt^RIt^RIt^RIHt^RIH t ^RI H t ^RI H t ^RIHtRtR tR tR tR tR tRtRtRtRRR0R0RmR0RmRRR0/tRtRtRtRtRtRtR#)aInk's session utilities on the shared owner: ``/save`` (``session.save``), ``/reload`` (``reload.env``), ``/agents pause|resume`` (``delegation.pause``) and ``/rollback`` (``rollback.list`` / ``rollback.diff`` / ``rollback.restore``), plus the classic CLI's ``/diff session`` (``rollback.session_diff``). Main's per-TUI sidecar served these from its own session table, which never holds a shared-gateway session, so the canonical TUI refused them. Each verb reuses main's helpers rather than re-deriving them. ``dispatch`` already runs every handler under the owning profile's scope (``owner_scope``) and ``asyncio.to_thread`` carries that context into the worker thread. N)datetime)partial)Path) authorize)context_breakdown)RuntimeStoreErrorcVR\\V4R\\V4R\\V4R\\V4R\\ VRR7R\\ VRR7R \\ VR R7R \\ VR R7R \\ V4R\\V4/ #)z session.savezsession.exportz reload.envzdelegation.pausez rollback.listlist)kindz rollback.diffdiffzrollback.restorerestorezrollback.session_diff session_diffzsession.context_breakdownzsession.history)r save_sessionexport_session reload_envpause_delegationrollbackrsession_history) connections&.writeCsY; A%illFFCD#K0 0i(:5?( (FeLM D KK  dT  : OO3D&AGO TD ""* A#$67S @ A D#$9: C Ds/B517C5C < CC  C, C''C,N)r3rgateway.session_ancillaryr8asyncio to_thread)rr/r0r8rWrrVs&&& @@rrr:sSjv i'@.Q$$I9 Y ,F#"""5) )) )A AAAcaa a a "\WV0R mR4VPRR4VPRR4uo o \S \4'd\S \4'g \ R4h^RIHpHpV!S 4o TPo^R I H pT!ST4o TT T T 3R lp\P!T4GRjxL pRS R T!S S 4R T/# \d\ R4Rhi;iL.5i)z``session.export``: the ``/save`` transcript rendered for the CLIENT to write (json/md/html, optional force-redaction). Nothing is written on the gateway host, so a remote Desktop and a local Ink both save to the user's own disk (T10/T11).formatredactr6r@Fr*)default_save_filenamenormalize_save_formatNr7c<^RIHpHp^RIHpV!SP S S4pT'g \ R4hS'd^RIHpT!T4pT!TS4# Tdp\ R4ThRp?ii;i)r:r;r>rANrB)redact_session_data) rKr<r=rLr?rMrhermes_cli.session_export_mdrc) r<r=r?rSrTrcrfmtr_rVs rrenderexport_session..renderhspY; A%illFC@D#K0 0  H&t,D&tS11* A#$67S @ AsAA/ A**A/filenamecontent>r^r_r5r-)r3getr,rr%rrKr`ra ValueErrorrrYr8rZr[) rr/r0r`rar8rfrirrer_rVs &&& @@@@rrrWsjv'TVde**Xv. 8U0KKC c3  z&$'?'? 011V<#C($$I9 Y ,F 2 2%%f--G c:'.readsD?||88SWim8nTJ0B4I]I]0^__rN)r3rgateway.session_local_recoveryrmrZr[)rr/r0rmrxrrVs&&& @@rrrysR jv i'@.Q$$I@ y# .F`""4( (( (r\ca"\WVRR0R4VPoV3RlpR\\P!V4GRjxL 4/#L 5i)u``/reload``: re-read the profile's ``.env`` (main's ``reload.env`` / CLI ``/reload``). Single-profile owner: main's ``hermes_cli.config.reload_env()`` verbatim — the owner's ``os.environ`` is what its turns read, exactly as the TUI's own sidecar process was. Built agents keep their credential pool until ``/new`` (main's documented behaviour). Multiplexed owner: ``os.environ`` is shared by every served profile and turns never read profile secrets from it, so it is left alone. Each turn already re-reads ``.env`` into its own scope; what can be stale is the profile's external secret-source snapshot, which is re-pulled here. The count is the number of keys whose value in this profile's secret scope changed. r-r5session:controlcJ<aa\S4'g^RIHpV!4#^RIHpHp^RIHpHp\S4pV!V4oV!VR, 4V!V4V!V4V!V4o\VV3RlSP4SP4,44#)r:)r)build_profile_secret_scopeinvalidate_env_file_cache)hydrate_profile_secret_sourcesreset_secret_source_cachez.envc3j<"TF(pSPV4SPV48gxK* R#5i)N)rj).0keyafterbefores& r -reload_env..reload..s(]@\6::c?eiin4@\s03) r(hermes_cli.configragent.secret_scoper~rhermes_cli.env_loaderrrr!sumkeys) reload_process_envr~rrrr rrrs @@rreloadreload_env..reloadsI&& J%' '\cY'+D1!$-0!$'&t,*40] PUPZPZP\@\]]]rupdatedN)r3rintrZr[)rr/r0rrs&&& @rrrsPjv i'@BST$$I ^ s!2!26!::; <<:sAAA  Ac@"VPRR4p\V40R m, 'g\V4\Jd \ R4hVP 'd\ WVR4MRVPP9d \ R4hVPR4pVe"\V\4'g \ R4hV'd>^RI H pV!V\VPP44'g \ R4h^R IHpRV!V4/#5i) u``/agents pause|resume`` and the overlay's ``p``: main's ``delegation.pause`` — block or unblock NEW ``delegate_task`` spawns; running children keep going. The gate (``tools.delegate_tool_registry``) is process-wide, as it was in main's sidecar (a TUI's sidecar served one TUI, but its gate covered every agent in that process). On the shared owner it therefore covers every chat this gateway runs, which is what an operator's kill switch is for; ``delegation.status`` reports the same flag to every client.pausedTr5r*r|permission_denied)profile_matches_homeprofile_mismatch)set_spawn_paused>rr5r-)rjr+typer%rr-ractor capabilitiesr,rhermes_cli.profilesrrrrtools.delegate_tool_registryr)rr/r0rr5rrs&&& rrrsZZ$ 'F 6{888DLPT | [file]`` and ``/diff session``: main's ``rollback.*`` over this session's checkpoints (the shared ``/checkpoints`` store, keyed by the frozen launch cwd). The manager is built from the session's frozen ``checkpoints`` policy rather than read off the resident agent (main's ``agent._checkpoint_mgr``, built from the same config): it carries no per-session state these reads need, and a restarted owner or a just-rewound session has no resident agent. A whole-tree restore also rewinds the transcript to before the newest user turn (main's ``_rewind_active_session_history``) through the owner's fenced ``rewind`` mutation.c3<"TFQpVS9;'d@\SV,\4'*;'gVR8H;'dSV,'*xKS R#5i)hashN)r,r)rrr0s& rrrollback..sS -+s &= f f*VC[#">>ee3&=CdCdY_`cYdUd f+sA#A AAr file_pathTFr allNr*r6r|)policy_for_sourceridle session_busyr7)_checkpoint_agent_kwargs)secretsc$V^8dQhR\/#)return)dict)r^s"r __annotate__rollback..__annotate__s+I+I+Irc<^RIHp^RIHpT!RR\ SR,4/SP 4UUu/uF-wr#VP R4'gKV\R4RVbK/ uppBpSPpVP'gSR9dSR8XdRR R ./#RR /#SR8Xd\RR R VPV4Uu.uF;pR VPR R 4RVPRR 4RVPRR 4/NK= up/#^RI H pHpV!S4p VPS4p V!V 4SR8Xd \!WEV 4#V!WESR ,4p SR8XdrT 'd \%R4h^RIHp TP-Y[4pTPRR 4R,pRTPRR 4RT/pT !T^P4;p'dTTR&T#T 'dRR RT /#TP/Y[S;'gRS'*;'dSPR4'*R7#uuppiuupi T!T 4i;i \"d-p SR8Xd \%R4T hRR R\'T 4/uRp ? #Rp ? ii;i)r:)CheckpointManager)_resolve_checkpoint_hashenabledcheckpoints_enabled checkpoint_Nr r F checkpointsTrr timestampmessagereason)reset_terminal_scopeset_terminal_scoper invalid_checkpointsuccesserrorunsupported_terminal_backend) render_diff:NiNstatrenderedr)rsafe)r r )tools.checkpoint_managerrtui_gateway.checkpointsrr%items startswithrvcwdrlist_checkpointsrjtools.terminal_scoperrunsupported_backend_reason _session_diffrkrrtui_gateway.renderrr r )rrrvaluemgrrcrrtokenrefusalrVrTrresultrawpayloadrrr kwargsr0policytask_idterminals rrunrollback..runs>DpV4I-J(Kp>DllnPo>L PSP^P^_lPm +CM"# $e +nPopjj{{{t'??<@FNIumR8 bQZ\aPb b 6>t]--c2542Avr*K{B9OQZ\]\a\abjln\op2545 5 R"8, (44W=G  ' > ! 73 3 9-cvGF 6>'(FGG 6XXc*F**VR(/Cvzz&"5vsCG&sB//x/&. #N ugw7 7{{3)2C2Ct$- G Gfjj6G2GI IOPo54 ! '  9v~'(<=3Fugs3x8 8 9s<HHAH# H(H5( H25 I,!I'!I,'I,rhistory_removed)rr)r r )_ROLLBACK_FIELDSanyrjr,r%rr3rgateway.session_policyrr'source_handleexecution_staterYr8 gateway.runrr#r@loads terminal_jsonrZr[_rewind_last_turn)rr/r0r r1liverrr8rrrrrrrrs&&fd @@@@@rrrsd #F s -+ -sss -+ ---159L1LQW_eQezz% ,Zu t5T5T 011 ZffPYHYn_p qD$$I8 y// =F ~ 344 ;'--2I yy/@/@/E/U/UY_/_//9i-G4 %fmmIum&M NFzz&../H+I+IX$$S) )F yVZZ 229*;J*L$L ! M*$LsH-HHB5H HB H?H!H"H*H8H9 HHcV'd RRRRRV/#VPV4pVPR4'g+RRRRR\VPR4;'gR4/#VPRR4p\VPRR4\4p\V\\ V4, 4pRRRRRVRVR \ VP44R \VPR 44/#) z``/diff session``: main's ``session_diff`` (earliest retained checkpoint vs the tree) as data, so the classic CLI renders it with its own terminal renderer instead of chat-sized text.rTrFrrr r diff_linesempty) r rjr _fit_frame_SESSION_DIFF_BYTES _wire_bytesrv splitlinesr%)rrrrr rbodys&&& rrrs4E7GDD   c "F ::i 4E7C 7@S@Y@YWY.GsN_NSjQYIZ\_>`=77:.!3LS3Q!3x==Ns'A%A%A%A%)mutate_session)MUTATION_GUARD_REFUSALSr- request_idz rollback:expected_revisionexpected_generation operationrewindrtarget_message_idr rewound_count)ragent.context_compressorrrzrrZr[nextreversedgateway.session_mutationsr hermes_state_mutation_guardsr rrr-uuiduuid4hexrevisionexecution_generationrrrj) rr/rrrwrVr r handlerrTrs && @rrr@s$$IB<""=SA AD _HTN_`dfF ~8D   s #F9%i1A1A3 #..,)DJJLDTDTCU8V 2GIdId 9/BF.KIMNN vzz/*//a 00 BN #9/S89sM3D)D AD)>A#D!D "D&D)D) DD& D!!D&&D)>rr5r->rrr5rr-i@) __doc__rZrr@rr functoolsrpathlibrgateway.session_busy_controlsrgateway.session_tui_readsrhermes_state_runtimerrr!r(r3rrrrrrrrrrrrrrrr$s  372 Ea 9*:_D )=B06\95v?`T"\9$=? &M` VZ ,1r