…d-turn termination (#2345)

`server-reload-handlers.ts::getActiveCounts()` and
`server.impl.ts::setPreRestartDeferralCheck()` both computed gateway
capacity / restart-deferral as `queueSize + pendingReplies`, silently
omitting active CLI agent subprocess runs. Result: a config reload or
SIGUSR1-triggered restart would fire while CLI agents were mid-turn,
killing live subprocess runs.

Fix: include `getActiveSessionRunCount()` from
`src/agents/session-run-registry.ts` in both sums. The registry is
already populated by `ChannelBridge` (register at `:160`, unregister
at `:349`) and was designed as the replacement for the
`getActiveEmbeddedRunCount()` stub that was gutted with the Pi-embedded
execution engine.

Changes:
- `src/gateway/server-reload-handlers.ts`: import
  `getActiveSessionRunCount`; add `activeCliRuns` field to
  `getActiveCounts()` return; fold into `totalActive` sum; extend
  `formatActiveDetails()` with an `activeCliRuns > 0` branch so the
  deferral log reports "N active CLI run(s)" alongside operations
  and replies. Field name `activeCliRuns` (not `activeRuns`) to
  disambiguate from the per-channel `activeRuns` concept used in
  `channels/run-state-machine.ts`, `gateway/channel-health-policy.ts`,
  and related modules.
- `src/gateway/server.impl.ts`: import `getActiveSessionRunCount`;
  add `+ getActiveSessionRunCount()` to the `setPreRestartDeferralCheck`
  callback arrow.

Note on stale issue body: #2345 prescribes editing a hardcoded
`embeddedRuns = 0` in `server-reload-handlers.ts:150-158` and
replacing a `getActiveEmbeddedRunCount()` import + call at
`server.impl.ts:302`. Neither exists in the current tree — both were
removed during the pi-embedded-runner gut (`f749ed3fb6`, #2146/#2273)
and the subsequent cherry-pick cleanup (`028566c42b`, #2442). The
semantic bug the issue names (capacity sums miscount active CLI runs
as zero) is still present as an *omission* rather than a hardcoded
literal, and this PR fixes it.

Verification:
- `pnpm check` (format + tsgo + lint + project-specific lints) → exit 0
- `pnpm vitest run --config vitest.unit.config.ts src/infra/restart
  src/infra/infra-runtime src/agents/session-run-registry
  src/gateway/server.impl` → 5 files, 71 tests, all passed
- Rescan: `git grep "getTotalQueueSize() + getTotalPendingReplies"`
  returns only the one site I updated; no other sum call sites in the
  codebase need the same fix
- Adversarial validation (fresh-context subclaude): CLEAN verdict on
  8 AC + 11 adversarial checks — confirms `getActiveSessionRunCount`
  is LIVE (not a stub), registry is actively populated by ChannelBridge,
  no import cycle possible (session-run-registry has zero imports),
  `formatActiveDetails` correctly handles multi-counter output

Closes #2345

Refs: #2089

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…d-turn termination (#2345) (#2460)

`server-reload-handlers.ts::getActiveCounts()` and
`server.impl.ts::setPreRestartDeferralCheck()` both computed gateway
capacity / restart-deferral as `queueSize + pendingReplies`, silently
omitting active CLI agent subprocess runs. Result: a config reload or
SIGUSR1-triggered restart would fire while CLI agents were mid-turn,
killing live subprocess runs.

Fix: include `getActiveSessionRunCount()` from
`src/agents/session-run-registry.ts` in both sums. The registry is
already populated by `ChannelBridge` (register at `:160`, unregister
at `:349`) and was designed as the replacement for the
`getActiveEmbeddedRunCount()` stub that was gutted with the Pi-embedded
execution engine.

Changes:
- `src/gateway/server-reload-handlers.ts`: import
  `getActiveSessionRunCount`; add `activeCliRuns` field to
  `getActiveCounts()` return; fold into `totalActive` sum; extend
  `formatActiveDetails()` with an `activeCliRuns > 0` branch so the
  deferral log reports "N active CLI run(s)" alongside operations
  and replies. Field name `activeCliRuns` (not `activeRuns`) to
  disambiguate from the per-channel `activeRuns` concept used in
  `channels/run-state-machine.ts`, `gateway/channel-health-policy.ts`,
  and related modules.
- `src/gateway/server.impl.ts`: import `getActiveSessionRunCount`;
  add `+ getActiveSessionRunCount()` to the `setPreRestartDeferralCheck`
  callback arrow.

Note on stale issue body: #2345 prescribes editing a hardcoded
`embeddedRuns = 0` in `server-reload-handlers.ts:150-158` and
replacing a `getActiveEmbeddedRunCount()` import + call at
`server.impl.ts:302`. Neither exists in the current tree — both were
removed during the pi-embedded-runner gut (`f749ed3fb6`, #2146/#2273)
and the subsequent cherry-pick cleanup (`028566c42b`, #2442). The
semantic bug the issue names (capacity sums miscount active CLI runs
as zero) is still present as an *omission* rather than a hardcoded
literal, and this PR fixes it.

Verification:
- `pnpm check` (format + tsgo + lint + project-specific lints) → exit 0
- `pnpm vitest run --config vitest.unit.config.ts src/infra/restart
  src/infra/infra-runtime src/agents/session-run-registry
  src/gateway/server.impl` → 5 files, 71 tests, all passed
- Rescan: `git grep "getTotalQueueSize() + getTotalPendingReplies"`
  returns only the one site I updated; no other sum call sites in the
  codebase need the same fix
- Adversarial validation (fresh-context subclaude): CLEAN verdict on
  8 AC + 11 adversarial checks — confirms `getActiveSessionRunCount`
  is LIVE (not a stub), registry is actively populated by ChannelBridge,
  no import cycle possible (session-run-registry has zero imports),
  `formatActiveDetails` correctly handles multi-counter output

Closes #2345

Refs: #2089

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>