fix(cli): address Copilot review #1 (4 threads)

Thread 1 (cli.py:1488): Fix broken skin hook — class is SkinConfig not Skin. The previous code silently no-op'd via the broad except, so SkinConfig.get_color() calls weren't actually remapped. Verified the hook fires now: in light mode, banner_text returns #1A1A1A instead of #FFF8DC. Thread 2 (cli.py:1328): Align comment with actual timeout. The OSC 11 read deadline is 100ms (time.monotonic() + 0.1), not 50ms. Fixed the docstring. Thread 3 (cli.py:13389): Remove unused imports of Point and Screen in the _output_screen_diff monkey-patch block. Leftover from earlier experiments — the wrapper only needs previous_screen mutation. Thread 4 (cli.py:11422): Skip light-mode remap entirely when a pt style string already specifies its own bg (e.g. 'bg:#1a1a2e #FFF8DC' for status-bar / completion-menu). Those colors were tuned for that specific dark bg; remapping the FG to #1A1A1A would produce dark-on-dark (invisible). Now we detect the explicit 'bg:' token and leave the whole value untouched. Also dropped the stale comment block at the resize-handler that described the old 'force \x1b[2J\x1b[H clear-screen on resize' recovery — replaced with the actual current strategy (monkey-patch _output_screen_diff).
feat(cli): light-mode color remap covers all skin reads (Rich Panel borders, etc)
2026-05-15 00:21:19 -05:00 · 2026-05-15 00:01:16 -05:00 · 2026-05-14 23:41:13 -05:00 · 2026-05-14 23:39:12 -05:00 · 2026-05-14 23:24:30 -05:00 · 2026-05-14 23:10:51 -05:00
801 changed files with 17573 additions and 104976 deletions
@@ -281,13 +281,6 @@ BROWSER_SESSION_TIMEOUT=300
 # Browser sessions are automatically closed after this period of no activity
 BROWSER_INACTIVITY_TIMEOUT=120

-# Extra Chromium launch flags passed to agent-browser, comma- or newline-separated.
-# Hermes auto-injects "--no-sandbox,--disable-dev-shm-usage" when it detects root
-# or AppArmor-restricted unprivileged user namespaces (Ubuntu 23.10+, DGX Spark,
-# many container images), so leave this unset unless you need extra flags.
-# Setting this disables the auto-injection.
-# AGENT_BROWSER_ARGS=--no-sandbox
-
 # Camofox local anti-detection browser (Camoufox-based Firefox).
 # Set CAMOFOX_URL to route the browser tools through a local Camofox server
 # instead of agent-browser/Browserbase. See docs/user-guide/features/browser.md.
@@ -394,6 +387,24 @@ IMAGE_TOOLS_DEBUG=false
 # CONTEXT_COMPRESSION_THRESHOLD=0.85      # Compress at 85% of context limit
 # Model is set via compression.summary_model in config.yaml (default: google/gemini-3-flash-preview)

+# =============================================================================
+# RL TRAINING (Tinker + Atropos)
+# =============================================================================
+# Run reinforcement learning training on language models using the Tinker API.
+# Requires the rl-server to be running (from tinker-atropos package).
+
+# Tinker API Key - RL training service
+# Get at: https://tinker-console.thinkingmachines.ai/keys
+# TINKER_API_KEY=
+
+# Weights & Biases API Key - Experiment tracking and metrics
+# Get at: https://wandb.ai/authorize
+# WANDB_API_KEY=
+
+# RL API Server URL (default: http://localhost:8080)
+# Change if running the rl-server on a different host/port
+# RL_API_URL=http://localhost:8080
+
 # =============================================================================
 # SKILLS HUB (GitHub integration for skill search/install/publish)
 # =============================================================================
@@ -416,9 +427,9 @@ IMAGE_TOOLS_DEBUG=false
 # Default STT provider is "local" (faster-whisper) — runs on your machine, no API key needed.
 # Install with: pip install faster-whisper
 # Model downloads automatically on first use (~150 MB for "base").
-# To use cloud providers instead, set GROQ_API_KEY, VOICE_TOOLS_OPENAI_KEY, or ELEVENLABS_API_KEY above.
-# Provider priority: local > groq > openai > mistral > xai > elevenlabs
-# Configure in config.yaml: stt.provider: local | groq | openai | mistral | xai | elevenlabs
+# To use cloud providers instead, set GROQ_API_KEY or VOICE_TOOLS_OPENAI_KEY above.
+# Provider priority: local > groq > openai
+# Configure in config.yaml: stt.provider: local | groq | openai

 # =============================================================================
 # STT ADVANCED OVERRIDES (optional)
@@ -426,12 +437,10 @@ IMAGE_TOOLS_DEBUG=false
 # Override default STT models per provider (normally set via stt.model in config.yaml)
 # STT_GROQ_MODEL=whisper-large-v3-turbo
 # STT_OPENAI_MODEL=whisper-1
-# STT_ELEVENLABS_MODEL=scribe_v2

 # Override STT provider endpoints (for proxies or self-hosted instances)
 # GROQ_BASE_URL=https://api.groq.com/openai/v1
 # STT_OPENAI_BASE_URL=https://api.openai.com/v1
-# ELEVENLABS_STT_BASE_URL=https://api.elevenlabs.io/v1

 # =============================================================================
 # MICROSOFT TEAMS INTEGRATION
@@ -1,345 +0,0 @@
-name: Desktop Release
-
-on:
-  push:
-    branches: [main]
-  release:
-    types: [published]
-  workflow_dispatch:
-    inputs:
-      channel:
-        description: Release channel to build
-        required: true
-        default: nightly
-        type: choice
-        options:
-          - nightly
-          - stable
-      release_tag:
-        description: "Required when channel=stable (example: v2026.5.5)"
-        required: false
-        type: string
-
-permissions:
-  contents: write
-
-concurrency:
-  group: desktop-release-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  prepare:
-    if: github.repository == 'NousResearch/hermes-agent'
-    runs-on: ubuntu-latest
-    outputs:
-      channel: ${{ steps.meta.outputs.channel }}
-      release_name: ${{ steps.meta.outputs.release_name }}
-      release_tag: ${{ steps.meta.outputs.release_tag }}
-      version: ${{ steps.meta.outputs.version }}
-      is_stable: ${{ steps.meta.outputs.is_stable }}
-    steps:
-      - id: meta
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          INPUT_CHANNEL: ${{ github.event.inputs.channel }}
-          INPUT_RELEASE_TAG: ${{ github.event.inputs.release_tag }}
-          RELEASE_TAG_FROM_EVENT: ${{ github.event.release.tag_name }}
-          GITHUB_SHA: ${{ github.sha }}
-        run: |
-          set -euo pipefail
-
-          channel="nightly"
-          release_tag="desktop-nightly"
-          is_stable="false"
-
-          if [[ "$EVENT_NAME" == "release" ]]; then
-            channel="stable"
-            release_tag="$RELEASE_TAG_FROM_EVENT"
-            is_stable="true"
-          elif [[ "$EVENT_NAME" == "workflow_dispatch" && "$INPUT_CHANNEL" == "stable" ]]; then
-            channel="stable"
-            release_tag="$INPUT_RELEASE_TAG"
-            is_stable="true"
-          fi
-
-          if [[ "$channel" == "stable" ]]; then
-            if [[ -z "$release_tag" ]]; then
-              echo "Stable desktop releases require a release tag." >&2
-              exit 1
-            fi
-
-            version="${release_tag#v}"
-            release_name="Hermes Desktop ${release_tag}"
-          else
-            stamp="$(date -u +%Y%m%d)"
-            short_sha="${GITHUB_SHA::7}"
-            version="0.0.0-nightly.${stamp}.${short_sha}"
-            release_name="Hermes Desktop Nightly ${stamp}-${short_sha}"
-          fi
-
-          {
-            echo "channel=$channel"
-            echo "release_name=$release_name"
-            echo "release_tag=$release_tag"
-            echo "version=$version"
-            echo "is_stable=$is_stable"
-          } >> "$GITHUB_OUTPUT"
-
-  build:
-    if: github.repository == 'NousResearch/hermes-agent'
-    needs: prepare
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - platform: mac
-            runner: macos-latest
-            build_args: --mac dmg zip
-          - platform: win
-            runner: windows-latest
-            build_args: --win nsis msi
-    runs-on: ${{ matrix.runner }}
-    env:
-      DESKTOP_CHANNEL: ${{ needs.prepare.outputs.channel }}
-      DESKTOP_VERSION: ${{ needs.prepare.outputs.version }}
-      MAC_CSC_LINK: ${{ secrets.CSC_LINK }}
-      MAC_CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
-      APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
-      APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
-      APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-      WIN_CSC_LINK: ${{ secrets.WIN_CSC_LINK }}
-      WIN_CSC_KEY_PASSWORD: ${{ secrets.WIN_CSC_KEY_PASSWORD }}
-    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
-
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4
-        with:
-          node-version: 20
-          cache: npm
-          cache-dependency-path: package-lock.json
-
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
-        with:
-          python-version: "3.11"
-
-      - name: Enforce signing gates for stable releases
-        if: needs.prepare.outputs.is_stable == 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          missing=()
-
-          if [[ "${{ matrix.platform }}" == "mac" ]]; then
-            [[ -z "${MAC_CSC_LINK:-}" ]] && missing+=("CSC_LINK")
-            [[ -z "${MAC_CSC_KEY_PASSWORD:-}" ]] && missing+=("CSC_KEY_PASSWORD")
-            [[ -z "${APPLE_API_KEY:-}" ]] && missing+=("APPLE_API_KEY")
-            [[ -z "${APPLE_API_KEY_ID:-}" ]] && missing+=("APPLE_API_KEY_ID")
-            [[ -z "${APPLE_API_ISSUER:-}" ]] && missing+=("APPLE_API_ISSUER")
-          else
-            [[ -z "${WIN_CSC_LINK:-}" ]] && missing+=("WIN_CSC_LINK")
-            [[ -z "${WIN_CSC_KEY_PASSWORD:-}" ]] && missing+=("WIN_CSC_KEY_PASSWORD")
-          fi
-
-          if (( ${#missing[@]} > 0 )); then
-            echo "::error::Stable desktop release missing required secrets: ${missing[*]}"
-            exit 1
-          fi
-
-      - name: Install workspace dependencies
-        run: npm ci
-
-      - name: Install TUI dependencies
-        run: npm --prefix ui-tui ci
-
-      - name: Build bundled TUI payload
-        run: npm --prefix ui-tui run build
-
-      - name: Build desktop renderer
-        run: npm --prefix apps/desktop run build
-
-      - name: Stage Hermes payload
-        run: npm --prefix apps/desktop run stage:hermes
-
-      - name: Map macOS signing credentials
-        if: matrix.platform == 'mac'
-        shell: bash
-        run: |
-          set -euo pipefail
-          has_link=0
-          has_pass=0
-          [[ -n "${MAC_CSC_LINK:-}" ]] && has_link=1
-          [[ -n "${MAC_CSC_KEY_PASSWORD:-}" ]] && has_pass=1
-
-          if [[ $has_link -eq 1 && $has_pass -eq 1 ]]; then
-            echo "CSC_LINK=${MAC_CSC_LINK}" >> "$GITHUB_ENV"
-            echo "CSC_KEY_PASSWORD=${MAC_CSC_KEY_PASSWORD}" >> "$GITHUB_ENV"
-          elif [[ $has_link -eq 1 || $has_pass -eq 1 ]]; then
-            echo "::error::macOS signing secrets are partially configured. Set both CSC_LINK and CSC_KEY_PASSWORD."
-            exit 1
-          fi
-
-      - name: Map Windows signing credentials
-        if: matrix.platform == 'win'
-        shell: bash
-        run: |
-          set -euo pipefail
-          has_link=0
-          has_pass=0
-          [[ -n "${WIN_CSC_LINK:-}" ]] && has_link=1
-          [[ -n "${WIN_CSC_KEY_PASSWORD:-}" ]] && has_pass=1
-
-          if [[ $has_link -eq 1 && $has_pass -eq 1 ]]; then
-            echo "CSC_LINK=${WIN_CSC_LINK}" >> "$GITHUB_ENV"
-            echo "CSC_KEY_PASSWORD=${WIN_CSC_KEY_PASSWORD}" >> "$GITHUB_ENV"
-            echo "CSC_FOR_PULL_REQUEST=true" >> "$GITHUB_ENV"
-          elif [[ $has_link -eq 1 || $has_pass -eq 1 ]]; then
-            echo "::error::Windows signing secrets are partially configured. Set both WIN_CSC_LINK and WIN_CSC_KEY_PASSWORD."
-            exit 1
-          fi
-
-      - name: Build desktop installers
-        shell: bash
-        env:
-          NODE_OPTIONS: --max-old-space-size=16384
-        run: |
-          set -euo pipefail
-          npm --prefix apps/desktop run builder -- \
-            ${{ matrix.build_args }} \
-            --publish never \
-            --config.extraMetadata.version="${DESKTOP_VERSION}" \
-            --config.extraMetadata.desktopChannel="${DESKTOP_CHANNEL}"
-
-      - name: Notarize and staple macOS DMG
-        if: matrix.platform == 'mac' && needs.prepare.outputs.is_stable == 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          dmg_path="$(ls apps/desktop/release/*.dmg | head -n 1)"
-          node apps/desktop/scripts/notarize-artifact.cjs "$dmg_path"
-
-      - name: Validate macOS notarization and Gatekeeper trust
-        if: matrix.platform == 'mac' && needs.prepare.outputs.is_stable == 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          app_path="$(ls -d apps/desktop/release/mac*/Hermes.app | head -n 1)"
-          dmg_path="$(ls apps/desktop/release/*.dmg | head -n 1)"
-          xcrun stapler validate "$app_path"
-          xcrun stapler validate "$dmg_path"
-          spctl --assess --type execute --verbose=4 "$app_path"
-
-      - name: Generate desktop checksums
-        shell: bash
-        run: |
-          set -euo pipefail
-          node <<'EOF'
-          const crypto = require('node:crypto')
-          const fs = require('node:fs')
-          const path = require('node:path')
-
-          const releaseDir = path.resolve('apps/desktop/release')
-          const platform = process.env.PLATFORM
-          const extensions = platform === 'mac' ? ['.dmg', '.zip'] : ['.exe', '.msi']
-          const files = fs
-            .readdirSync(releaseDir)
-            .filter(name => extensions.some(ext => name.endsWith(ext)))
-            .sort()
-
-          if (!files.length) {
-            throw new Error(`No release artifacts were produced for ${platform}`)
-          }
-
-          const lines = files.map(name => {
-            const full = path.join(releaseDir, name)
-            const hash = crypto.createHash('sha256').update(fs.readFileSync(full)).digest('hex')
-            return `${hash}  ${name}`
-          })
-          fs.writeFileSync(path.join(releaseDir, `SHA256SUMS-${platform}.txt`), `${lines.join('\n')}\n`)
-          EOF
-        env:
-          PLATFORM: ${{ matrix.platform }}
-
-      - name: Upload packaged desktop artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
-        with:
-          name: desktop-${{ matrix.platform }}
-          path: |
-            apps/desktop/release/*.dmg
-            apps/desktop/release/*.zip
-            apps/desktop/release/*.exe
-            apps/desktop/release/*.msi
-            apps/desktop/release/SHA256SUMS-${{ matrix.platform }}.txt
-          if-no-files-found: error
-
-  publish:
-    if: github.repository == 'NousResearch/hermes-agent'
-    needs: [prepare, build]
-    runs-on: ubuntu-latest
-    env:
-      GH_TOKEN: ${{ github.token }}
-      CHANNEL: ${{ needs.prepare.outputs.channel }}
-      RELEASE_NAME: ${{ needs.prepare.outputs.release_name }}
-      RELEASE_TAG: ${{ needs.prepare.outputs.release_tag }}
-    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4
-        with:
-          pattern: desktop-*
-          merge-multiple: true
-          path: dist/desktop
-
-      - name: Publish desktop assets to GitHub release
-        shell: bash
-        run: |
-          set -euo pipefail
-          shopt -s globstar nullglob
-
-          files=(
-            dist/desktop/**/*.dmg
-            dist/desktop/**/*.zip
-            dist/desktop/**/*.exe
-            dist/desktop/**/*.msi
-            dist/desktop/**/SHA256SUMS-*.txt
-          )
-
-          if (( ${#files[@]} == 0 )); then
-            echo "No desktop artifacts were downloaded for publishing." >&2
-            exit 1
-          fi
-
-          if [[ "$CHANNEL" == "nightly" ]]; then
-            git tag -f "$RELEASE_TAG" "$GITHUB_SHA"
-            git push origin "refs/tags/$RELEASE_TAG" --force
-
-            notes="Automated nightly desktop build from main. This prerelease is replaced on each new run."
-
-            if gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
-              while IFS= read -r asset_name; do
-                gh release delete-asset "$RELEASE_TAG" "$asset_name" --yes
-              done < <(gh release view "$RELEASE_TAG" --json assets -q '.assets[].name')
-
-              gh release edit "$RELEASE_TAG" \
-                --title "$RELEASE_NAME" \
-                --prerelease \
-                --notes "$notes"
-            else
-              gh release create "$RELEASE_TAG" \
-                --target "$GITHUB_SHA" \
-                --title "$RELEASE_NAME" \
-                --notes "$notes" \
-                --prerelease
-            fi
-          else
-            if ! gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
-              notes="Automated desktop artifacts attached by desktop-release workflow."
-              gh release create "$RELEASE_TAG" \
-                --target "$GITHUB_SHA" \
-                --title "$RELEASE_NAME" \
-                --notes "$notes"
-            fi
-          fi
-
-          gh release upload "$RELEASE_TAG" "${files[@]}" --clobber
@@ -1,58 +0,0 @@
-name: History Check
-
-# Rejects PRs whose branch has no common ancestor with main.
-#
-# In May 2026 PR #25045 was merged from a branch that had been disconnected
-# from main's history (likely an accidental `git checkout --orphan` or
-# `.git/` re-init).  GitHub's merge UI does not refuse merges of unrelated
-# histories, so the PR landed cleanly with the intended one-file change —
-# but its parent-less root commit (413990c94) got grafted into main as a
-# second root, and ~1500 files' worth of `git blame` history collapsed
-# onto that single commit.
-#
-# This check catches the failure mode by requiring `git merge-base` between
-# the PR head and main to be non-empty.
-
-on:
-  pull_request:
-    branches: [main]
-
-permissions:
-  contents: read
-
-jobs:
-  check-common-ancestor:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
-        with:
-          fetch-depth: 0  # full history both sides for merge-base
-
-      - name: Reject PRs with no common ancestor on main
-        run: |
-          # `git merge-base` exits non-zero AND prints nothing when the two
-          # commits share no ancestor.  We check both conditions explicitly
-          # so the failure message is clear regardless of which signal fires
-          # first.
-          if ! BASE=$(git merge-base origin/main HEAD 2>/dev/null) || [ -z "$BASE" ]; then
-            echo ""
-            echo "::error::This PR has no common ancestor with main."
-            echo ""
-            echo "Your branch's history is disconnected from main.  Common causes:"
-            echo "  - the branch was created with 'git checkout --orphan'"
-            echo "  - '.git/' was re-initialized at some point during the work"
-            echo "  - the branch was force-pushed from an unrelated repository"
-            echo ""
-            echo "Merging an unrelated-history PR grafts a parent-less root commit"
-            echo "into main and collapses git blame for every file in that snapshot."
-            echo "Reference: PR #25045 caused this and re-rooted blame on ~1500"
-            echo "files to a single orphan commit."
-            echo ""
-            echo "To fix, rebase your changes onto current main:"
-            echo "  git fetch origin main"
-            echo "  git checkout -b fix-branch origin/main"
-            echo "  # re-apply your changes (cherry-pick, copy files, etc.)"
-            echo "  git push -f origin fix-branch"
-            exit 1
-          fi
-          echo "::notice::Common ancestor with main: $BASE"
@@ -6,8 +6,8 @@ on:
    paths:
      - 'ui-tui/package-lock.json'
      - 'ui-tui/package.json'
-      - 'apps/dashboard/package-lock.json'
-      - 'apps/dashboard/package.json'
+      - 'web/package-lock.json'
+      - 'web/package.json'
  workflow_dispatch:
    inputs:
      pr_number:
@@ -28,7 +28,7 @@ concurrency:
 jobs:
  # ── Auto-fix on main ───────────────────────────────────────────────
  # Fires when a push to main touches package.json or package-lock.json
-  # in ui-tui/ or apps/dashboard/. Runs fix-lockfiles and pushes the hash
+  # in ui-tui/ or web/. Runs fix-lockfiles and pushes the hash
  # update commit directly to main so Nix builds never stay broken.
  #
  # Safety invariants:
@@ -110,7 +110,7 @@ jobs:
            # run recompute from the correct package-lock state.
            pkg_changed="$(git diff --name-only "$BASE_SHA"..origin/main -- \
              'ui-tui/package-lock.json' 'ui-tui/package.json' \
-              'apps/dashboard/package-lock.json' 'apps/dashboard/package.json' || true)"
+              'web/package-lock.json' 'web/package.json' || true)"
            if [ -n "$pkg_changed" ]; then
              echo "::warning::Package files changed since hash computation — aborting; a fresh run will recompute"
              exit 0
@@ -11,7 +11,6 @@ on:
      - '**/sitecustomize.py'
      - '**/usercustomize.py'
      - '**/__init__.pth'
-      - 'pyproject.toml'

 permissions:
  pull-requests: write
@@ -138,68 +137,3 @@ jobs:
        run: |
          echo "::error::CRITICAL supply chain risk patterns detected in this PR. See the PR comment for details."
          exit 1
-
-  dep-bounds:
-    name: Check PyPI dependency upper bounds
-    runs-on: ubuntu-latest
-    if: contains(github.event.pull_request.changed_files_url, 'pyproject.toml') || true
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
-        with:
-          fetch-depth: 0
-
-      - name: Check for unbounded PyPI deps
-        id: bounds
-        run: |
-          set -euo pipefail
-
-          BASE="${{ github.event.pull_request.base.sha }}"
-          HEAD="${{ github.event.pull_request.head.sha }}"
-
-          # Only check added lines in pyproject.toml
-          ADDED=$(git diff "$BASE".."$HEAD" -- pyproject.toml | grep '^+' | grep -v '^+++' || true)
-
-          if [ -z "$ADDED" ]; then
-            echo "found=false" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          # Match PyPI dep specs that have >= but no < ceiling.
-          # Pattern: "package>=version" without a following ",<" bound.
-          # Excludes git+ URLs (which use commit SHAs) and comments.
-          UNBOUNDED=$(echo "$ADDED" | grep -oE '"[a-zA-Z0-9_-]+(\[[^\]]*\])?>=[ 0-9.]+"' | grep -v ',<' || true)
-
-          if [ -n "$UNBOUNDED" ]; then
-            echo "found=true" >> "$GITHUB_OUTPUT"
-            echo "$UNBOUNDED" > /tmp/unbounded.txt
-          else
-            echo "found=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Post unbounded dep warning
-        if: steps.bounds.outputs.found == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          BODY="## ⚠️ Unbounded PyPI Dependency Detected
-
-          This PR adds PyPI dependencies without a \`<next_major\` upper bound. Per our [supply chain policy](../blob/main/CONTRIBUTING.md#dependency-pinning-policy-supply-chain-hardening), all PyPI deps must be pinned as \`>=floor,<next_major\`.
-
-          **Unbounded specs found:**
-          \`\`\`
-          $(cat /tmp/unbounded.txt)
-          \`\`\`
-
-          **Fix:** Add an upper bound, e.g. \`\"package>=1.2.0,<2\"\`
-
-          ---
-          *See PR #2810 and CONTRIBUTING.md for the full policy rationale.*"
-
-          gh pr comment "${{ github.event.pull_request.number }}" --body "$BODY" || echo "::warning::Could not post PR comment (expected for fork PRs)"
-
-      - name: Fail on unbounded deps
-        if: steps.bounds.outputs.found == 'true'
-        run: |
-          echo "::error::PyPI dependencies without upper bounds detected. Add <next_major ceiling per CONTRIBUTING.md policy."
-          exit 1
@@ -1,163 +0,0 @@
-name: Publish to PyPI
-
-# Triggered by CalVer tag pushes from scripts/release.py (e.g. v2026.5.15)
-# Can also be triggered manually from the Actions tab as an escape hatch.
-on:
-  push:
-    tags:
-      - 'v20*'  # CalVer tags: v2026.5.15, v2026.5.15.2, etc.
-  workflow_dispatch:
-    inputs:
-      confirm_tag:
-        description: 'Tag to publish (e.g. v2026.5.15). Must already exist.'
-        required: true
-        type: string
-
-# Restrict default token to read-only; each job escalates as needed.
-permissions:
-  contents: read
-
-# Prevent overlapping publishes (e.g. two same-day tags pushed quickly).
-concurrency:
-  group: pypi-publish
-  cancel-in-progress: false
-
-jobs:
-  build:
-    name: Build distribution 📦
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
-        with:
-          persist-credentials: false
-          # On workflow_dispatch, check out the confirmed tag.
-          ref: ${{ inputs.confirm_tag || github.ref }}
-          fetch-tags: true
-
-      - name: Validate tag exists
-        if: github.event_name == 'workflow_dispatch'
-        run: |
-          if ! git tag -l "${{ inputs.confirm_tag }}" | grep -q .; then
-            echo "::error::Tag '${{ inputs.confirm_tag }}' does not exist in the repo"
-            exit 1
-          fi
-
-      - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
-        with:
-          python-version: '3.13'
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e  # v6
-
-      - name: Set up Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4
-        with:
-          node-version: '22'
-
-      - name: Build web dashboard
-        run: cd web && npm ci && npm run build
-
-      - name: Build TUI bundle
-        run: cd ui-tui && npm ci && npm run build
-
-      - name: Bundle TUI into hermes_cli
-        run: |
-          mkdir -p hermes_cli/tui_dist
-          cp ui-tui/dist/entry.js hermes_cli/tui_dist/entry.js
-
-      - name: Verify frontend assets exist
-        run: |
-          test -f hermes_cli/web_dist/index.html || { echo "ERROR: web_dist not built"; exit 1; }
-          test -f hermes_cli/tui_dist/entry.js || { echo "ERROR: tui_dist not built"; exit 1; }
-
-      - name: Bundle install.sh into wheel
-        run: |
-          mkdir -p hermes_cli/scripts
-          cp scripts/install.sh hermes_cli/scripts/install.sh
-
-      - name: Build wheel and sdist
-        run: uv build --sdist --wheel
-
-      - name: Upload distribution artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
-        with:
-          name: python-package-distributions
-          path: dist/
-
-  publish:
-    name: Publish to PyPI
-    needs: build
-    runs-on: ubuntu-latest
-    environment:
-      name: pypi
-      url: https://pypi.org/p/hermes-agent
-    permissions:
-      id-token: write  # OIDC trusted publishing
-
-    steps:
-      - name: Download distribution artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4
-        with:
-          name: python-package-distributions
-          path: dist/
-
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
-        with:
-          skip-existing: true
-
-  sign:
-    name: Sign and attach to GitHub Release
-    # Only runs on tag pushes — release.py creates the GitHub Release,
-    # and workflow_dispatch won't have a matching release to attach to.
-    if: startsWith(github.ref, 'refs/tags/')
-    needs: publish
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write   # attach assets to the existing release
-      id-token: write   # sigstore signing
-
-    steps:
-      - name: Download distribution artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4
-        with:
-          name: python-package-distributions
-          path: dist/
-
-      - name: Wait for GitHub Release to exist
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        # release.py creates the GitHub Release after pushing the tag,
-        # but this workflow starts from the tag push — wait for it.
-        run: |
-          for i in $(seq 1 30); do
-            if gh release view "$GITHUB_REF_NAME" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
-              echo "Release $GITHUB_REF_NAME found"
-              exit 0
-            fi
-            echo "Waiting for release... ($i/30)"
-            sleep 10
-          done
-          echo "::warning::Release $GITHUB_REF_NAME not found after 5 minutes — skipping signature upload"
-          echo "skip_sign=true" >> "$GITHUB_ENV"
-
-      - name: Sign with Sigstore
-        if: env.skip_sign != 'true'
-        uses: sigstore/gh-action-sigstore-python@f514d46b907ebcd5bedc05145c03b69c1edd8b46  # v3.0.0
-        with:
-          inputs: >-
-            ./dist/*.tar.gz
-            ./dist/*.whl
-
-      - name: Attach signed artifacts to GitHub Release
-        if: env.skip_sign != 'true'
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        # release.py already created the GitHub Release — just upload
-        # the Sigstore signatures alongside the existing assets.
-        run: >-
-          gh release upload
-          "$GITHUB_REF_NAME" dist/*.sigstore.json
-          --repo "$GITHUB_REPOSITORY"
-          --clobber
@@ -54,10 +54,6 @@ environments/benchmarks/evals/

 # Web UI build output
 hermes_cli/web_dist/
-apps/desktop/build/
-apps/desktop/dist/
-apps/desktop/release/
-apps/desktop/*.tsbuildinfo

 # Web UI assets — synced from @nous-research/ui at build time via
 # `npm run sync-assets` (see web/package.json).
@@ -74,16 +70,3 @@ mini-swe-agent/
 result
 website/static/api/skills-index.json
 models-dev-upstream/
-
-# Local editor / agent tooling (machine-specific; keep in global config, not the repo)
-.codex/
-.cursor/
-.gemini/
-.zed/
-.mcp.json
-opencode.json
-config/mcporter.json
-
-hermes_cli/tui_dist/*
-hermes_cli/scripts/
-docs/superpowers/*
@@ -0,0 +1,3 @@
+[submodule "tinker-atropos"]
+	path = tinker-atropos
+	url = https://github.com/nousresearch/tinker-atropos
@@ -2,8 +2,6 @@

 Instructions for AI coding assistants and developers working on the hermes-agent codebase.

-**Never give up on the right solution.**
-
 ## Development Environment

 ```bash
@@ -58,6 +56,7 @@ hermes-agent/
 ├── tui_gateway/          # Python JSON-RPC backend for the TUI
 ├── acp_adapter/          # ACP server (VS Code / Zed / JetBrains integration)
 ├── cron/                 # Scheduler — jobs.py, scheduler.py
+├── environments/         # RL training environments (Atropos)
 ├── scripts/              # run_tests.sh, release.py, auxiliary scripts
 ├── website/              # Docusaurus docs site
 └── tests/                # Pytest suite (~17k tests across ~900 files as of May 2026)
@@ -68,29 +67,6 @@ hermes-agent/
 `gateway.log` when running the gateway. Profile-aware via `get_hermes_home()`.
 Browse with `hermes logs [--follow] [--level ...] [--session ...]`.

-## TypeScript Style
-
-Applies to TypeScript across Hermes: desktop, TUI, website, and future TS packages.
-
- Prefer small nanostores over component state when state is shared, reused, or read by distant UI.
- Let each feature own its atoms. Chat state belongs near chat, shell state near shell, shared state in `src/store`.
- Components that render from an atom should use `useStore`. Non-rendering actions should read with `$atom.get()`.
- Do not pass state through three components when the leaf can subscribe to the atom.
- Keep persistence beside the atom that owns it.
- Keep route roots thin. They compose routes and shell; they should not become controllers.
- No monolithic hooks. A hook should own one narrow job.
- Prefer colocated action modules over hidden god hooks.
- If a callback is pure side effect, use the terse void form:
-  `onState={st => void setGatewayState(st)}`.
- Async UI handlers should make intent explicit:
-  `onClick={() => void save()}`.
- Prefer interfaces for public props and shared object shapes. Avoid `type X = { ... }` for object props.
- Extend React primitives for props: `React.ComponentProps<'button'>`, `React.ComponentProps<typeof Dialog>`, `Omit<...>`, `Pick<...>`.
- Table-driven beats condition ladders when mapping ids, routes, or views.
- `src/app` owns routes, pages, and page-specific components.
- `src/store` owns shared atoms.
- `src/lib` owns shared pure helpers.
-
 ## File Dependency Chain

 ```
@@ -274,7 +250,7 @@ npm test          # vitest

 The dashboard embeds the real `hermes --tui` — **not** a rewrite.  See `hermes_cli/pty_bridge.py` + the `@app.websocket("/api/pty")` endpoint in `hermes_cli/web_server.py`.

- Browser loads `apps/dashboard/src/pages/ChatPage.tsx`, which mounts xterm.js's `Terminal` with the WebGL renderer, `@xterm/addon-fit` for container-driven resize, and `@xterm/addon-unicode11` for modern wide-character widths.
+- Browser loads `web/src/pages/ChatPage.tsx`, which mounts xterm.js's `Terminal` with the WebGL renderer, `@xterm/addon-fit` for container-driven resize, and `@xterm/addon-unicode11` for modern wide-character widths.
 - `/api/pty?token=…` upgrades to a WebSocket; auth uses the same ephemeral `_SESSION_TOKEN` as REST, via query param (browsers can't set `Authorization` on WS upgrade).
 - The server spawns whatever `hermes --tui` would spawn, through `ptyprocess` (POSIX PTY — WSL works, native Windows does not).
 - Frames: raw PTY bytes each direction; resize via `\x1b[RESIZE:<cols>;<rows>]` intercepted on the server and applied with `TIOCSWINSZ`.
@@ -333,29 +309,6 @@ The registry handles schema collection, dispatch, availability checking, and err

 ---

-## Dependency Pinning Policy
-
-All dependencies must have upper bounds to limit supply-chain attack surface.
-This policy was established after the litellm compromise (PR #2796, #2810) and
-reinforced after the Mini Shai-Hulud worm campaign (May 2026).
-
-| Source type | Treatment | Example |
-|---|---|---|
-| PyPI package | `>=floor,<next_major` | `"httpx>=0.28.1,<1"` |
-| Git URL | Commit SHA | `git+https://...@<40-char-sha>` |
-| GitHub Actions | Commit SHA + comment | `uses: actions/checkout@<sha>  # v4` |
-| CI-only pip | `==exact` | `pyyaml==6.0.2` |
-
-**When adding a new dependency to `pyproject.toml`:**
-1. Pin to `>=current_version,<next_major` for post-1.0 (e.g. `>=1.5.0,<2`).
-2. For pre-1.0 packages, use `<0.(current_minor + 2)` (e.g. `>=0.29,<0.32`).
-3. Never commit a bare `>=X.Y.Z` without a ceiling — CI and reviewers will reject it.
-4. Run `uv lock` to regenerate `uv.lock` with hashes.
-
-Reference: #2810 (bounds pass), #9801 (SHA pinning + audit CI).
-
---
-
 ## Adding Configuration

 ### config.yaml options:
@@ -91,6 +91,9 @@ export VIRTUAL_ENV="$(pwd)/venv"
 # Install with all extras (messaging, cron, CLI menus, dev tools)
 uv pip install -e ".[all,dev]"

+# Optional: RL training submodule
+# git submodule update --init tinker-atropos && uv pip install -e "./tinker-atropos"
+
 # Optional: browser tools
 npm install
 ```
@@ -193,6 +196,7 @@ hermes-agent/
 │
 ├── skills/                   # Bundled skills (copied to ~/.hermes/skills/ on install)
 ├── optional-skills/          # Official optional skills (discoverable via hub, not activated by default)
+├── environments/             # RL training environments (Atropos integration)
 ├── tests/                    # Test suite
 ├── website/                  # Documentation site (hermes-agent.nousresearch.com)
 │
@@ -800,47 +804,6 @@ Hermes has terminal access. Security matters.

 If your PR affects security, note it explicitly in the description.

-### Dependency pinning policy (supply chain hardening)
-
-After the [litellm supply chain compromise](https://github.com/BerriAI/litellm/issues/24512) in March 2026 and the [Mini Shai-Hulud worm campaign](https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack) in May 2026, all dependencies must follow these rules:
-
-| Source type | Required treatment | Rationale |
-|---|---|---|
-| **PyPI package** | `>=floor,<next_major` | PyPI versions are immutable once published, but new versions can be pushed into your range. A `<next_major` ceiling stops a 1.x install from upgrading to a malicious 2.0.0. |
-| **Git URL** (atroposlib, tinker, yc-bench, Baileys) | Full commit SHA | Branches and tags are mutable refs; SHA is content-addressed. |
-| **GitHub Actions** | Full commit SHA + version comment | Action tags are mutable refs (e.g. tj-actions/changed-files March 2025). Pin as `uses: owner/action@<sha>  # vX.Y.Z` |
-| **CI-only pip installs** | `==exact` | Hermetic CI builds; churn is acceptable. |
-
-**Every new PyPI dependency in a PR must have a `<next_major` upper bound.** PRs adding unbounded `>=X.Y.Z` specs will be rejected by reviewers. The `supply-chain-audit.yml` CI workflow also flags dependency manifest changes for manual review.
-
-**How to determine the ceiling:**
- If the package is at version `1.x.y`, use `<2`.
- If the package is at version `0.x.y` (pre-1.0), use `<0.(current_minor + 2)` — e.g. if current is `0.29.x`, use `<0.32`. This gives ~2 minor versions of headroom while keeping the window small enough that a hostile takeover version is unlikely to land inside it.
- Exception: packages with very stable APIs (e.g. `aiohttp-socks`) can use `<1` at reviewer discretion.
-
-**Examples:**
-```toml
-# ✅ Correct — post-1.0
-"openai>=2.21.0,<3"
-"pydantic>=2.12.5,<3"
-
-# ✅ Correct — pre-1.0 (tight minor window)
-"asyncpg>=0.29,<0.32"
-"aiosqlite>=0.20,<0.23"
-"hindsight-client>=0.4.22,<0.5"
-
-# ❌ Rejected — no upper bound
-"some-package>=1.2.3"
-
-# ❌ Rejected — too tight (blocks legitimate patches)
-"some-package==1.2.3"
-
-# ❌ Rejected — too loose for pre-1.0 (allows 80 minor versions)
-"some-package>=0.20,<1"
-```
-
-**Reference PRs:** #2796 (litellm removal), #2810 (upper bounds pass), #9801 (SHA pinning + supply-chain-audit CI).
-
 ---

 ## Pull Request Process
@@ -23,7 +23,7 @@ Use any model you want — [Nous Portal](https://portal.nousresearch.com), [Open
 <tr><td><b>Scheduled automations</b></td><td>Built-in cron scheduler with delivery to any platform. Daily reports, nightly backups, weekly audits — all in natural language, running unattended.</td></tr>
 <tr><td><b>Delegates and parallelizes</b></td><td>Spawn isolated subagents for parallel workstreams. Write Python scripts that call tools via RPC, collapsing multi-step pipelines into zero-context-cost turns.</td></tr>
 <tr><td><b>Runs anywhere, not just your laptop</b></td><td>Seven terminal backends — local, Docker, SSH, Singularity, Modal, Daytona, and Vercel Sandbox. Daytona and Modal offer serverless persistence — your agent's environment hibernates when idle and wakes on demand, costing nearly nothing between sessions. Run it on a $5 VPS or a GPU cluster.</td></tr>
-<tr><td><b>Research-ready</b></td><td>Batch trajectory generation, trajectory compression for training the next generation of tool-calling models.</td></tr>
+<tr><td><b>Research-ready</b></td><td>Batch trajectory generation, Atropos RL environments, trajectory compression for training the next generation of tool-calling models.</td></tr>
 </table>

 ---
@@ -175,6 +175,8 @@ uv pip install -e ".[all,dev]"
 scripts/run_tests.sh
 ```

+> **RL Training (optional):** The RL/Atropos integration (`environments/`) — see [`CONTRIBUTING.md`](https://github.com/NousResearch/hermes-agent/blob/main/CONTRIBUTING.md#development-setup) for the full setup.
+
 ---

 ## Community
@@ -23,7 +23,7 @@
 <tr><td><b>定时自动化</b></td><td>内置 cron 调度器，支持向任何平台投递。日报、夜间备份、周审计——全部用自然语言描述，无人值守运行。</td></tr>
 <tr><td><b>委派与并行</b></td><td>生成隔离子代理处理并行工作流。编写 Python 脚本通过 RPC 调用工具，将多步管道压缩为零上下文开销的轮次。</td></tr>
 <tr><td><b>随处运行</b></td><td>六种终端后端——本地、Docker、SSH、Daytona、Singularity 和 Modal。Daytona 和 Modal 提供 Serverless 持久化——代理环境空闲时休眠、按需唤醒，空闲期间几乎零成本。$5 VPS 或 GPU 集群都能跑。</td></tr>
-<tr><td><b>研究就绪</b></td><td>批量轨迹生成、轨迹压缩——用于训练下一代工具调用模型。</td></tr>
+<tr><td><b>研究就绪</b></td><td>批量轨迹生成、Atropos RL 环境、轨迹压缩——用于训练下一代工具调用模型。</td></tr>
 </table>

 ---
@@ -161,6 +161,12 @@ uv pip install -e ".[all,dev]"
 python -m pytest tests/ -q
 ```

+> **RL 训练（可选）：** 如需参与 RL/Tinker-Atropos 集成开发：
+> ```bash
+> git submodule update --init tinker-atropos
+> uv pip install -e "./tinker-atropos"
+> ```
+
 ---

 ## 社区
@@ -1,477 +0,0 @@
-# Hermes Agent v0.14.0 (v2026.5.16)
-
-**Release Date:** May 16, 2026
-**Since v0.13.0:** 808 commits · 633 merged PRs · 1393 files changed · 165,061 insertions · 545 issues closed (12 P0, 50 P1) · 215 community contributors (including co-authors)
-
-> The Foundation Release — Hermes Agent installs and runs anywhere now. Native Windows ships in early beta with a full PowerShell installer story, a `pip install hermes-agent` wheel lands on PyPI, lazy-deps reshape what `pip install hermes-agent` actually pulls down, the supply-chain checker scans every install/upgrade for unsafe versions, and a new OpenAI-compatible local proxy lets Codex / Aider / Cline talk to OAuth-only providers (Claude Pro, ChatGPT Pro, SuperGrok). The cold-start wave shaves ~19 seconds off `hermes` launch, browser-tool CDP calls run 180x faster, and `hermes tools` All-Platforms drops from 14s to under 1.5s. Two new messaging platforms (LINE and SimpleX Chat) and a Microsoft Graph foundation (Teams pipeline + webhook adapter) land alongside `/handoff` that finally transfers sessions live, `vision_analyze` passing pixels through to vision-capable models, `x_search` as a first-class tool, LSP semantic diagnostics on every `write_file` / `patch`, a unified pluggable `video_generate`, a `computer_use` cua-driver backend, cross-session 1-hour Claude prompt caching, a per-turn file-mutation verifier, plus 9 new optional skills. 50+ P1 closures, 12 P0 closures.
-
---
-
-## ✨ Highlights
-
- **Native Windows support (early beta)** — full PowerShell installer, native subprocess/PTY paths, taskkill-based process management, MinGit auto-install, Microsoft Store python stub detection, foreground Ctrl+C preservation, taskkill+ps2 fallback, npm prefix handling, and ~40 follow-up Windows-only fixes across CLI / gateway / TUI / curator / tools. Hermes finally runs natively on `cmd.exe` and PowerShell, no WSL required. ([#21561](https://github.com/NousResearch/hermes-agent/pull/21561), [#22130](https://github.com/NousResearch/hermes-agent/pull/22130), [#22752](https://github.com/NousResearch/hermes-agent/pull/22752), [#26618](https://github.com/NousResearch/hermes-agent/pull/26618), and many more)
-
- **`pip install hermes-agent && hermes`** — Hermes Agent is now a real PyPI package. One command, no clone, no git, no shell installer. Wheel includes the Ink TUI bundle and shell launcher. (salvage of [#26350](https://github.com/NousResearch/hermes-agent/pull/26350)) ([#26593](https://github.com/NousResearch/hermes-agent/pull/26593))
-
- **Cold-start performance wave — ~19s off `hermes` launch** — skills cache, lazy Feishu import, no Nous HTTP at startup, plus PEP-562 lazy adapter imports (QQ, Yuanbao, Teams, Google Chat), deferred `fal_client` / `google-cloud` / `httpx` loads, models.dev disk-cache-first lookup, parallel doctor API checks, eager-skip plugin discovery on built-in subcommands, `hermes tools` All-Platforms drops from 14s to <1.5s, welcome banner skipped on `chat -q`. ([#22138](https://github.com/NousResearch/hermes-agent/pull/22138), [#22120](https://github.com/NousResearch/hermes-agent/pull/22120), [#22681](https://github.com/NousResearch/hermes-agent/pull/22681), [#22790](https://github.com/NousResearch/hermes-agent/pull/22790), [#22808](https://github.com/NousResearch/hermes-agent/pull/22808), [#22831](https://github.com/NousResearch/hermes-agent/pull/22831), [#22859](https://github.com/NousResearch/hermes-agent/pull/22859), [#22904](https://github.com/NousResearch/hermes-agent/pull/22904), [#22766](https://github.com/NousResearch/hermes-agent/pull/22766), [#25341](https://github.com/NousResearch/hermes-agent/pull/25341))
-
- **180x faster `browser_console` evaluations** — routed through the supervisor's persistent CDP WebSocket instead of spawning a fresh DevTools session per call. Real-world page interactions feel instant. ([#23226](https://github.com/NousResearch/hermes-agent/pull/23226))
-
- **Supply-chain advisory checker + lazy-deps framework + tiered install fallback** — every `pip install` / `hermes update` scans dependencies against an advisory list, lazy-deps replace heavy import-time loads with first-use installs, and the installer falls back through extras tiers when a wheel rejects on the target platform. ([#24220](https://github.com/NousResearch/hermes-agent/pull/24220))
-
- **OpenAI-compatible local proxy** — `hermes proxy` exposes any OAuth-authed provider (Claude Pro, ChatGPT Pro, SuperGrok) as an OpenAI-compatible endpoint that Codex / Aider / Cline / VS Code Continue can hit. Your subscription, your tools. ([#25969](https://github.com/NousResearch/hermes-agent/pull/25969))
-
- **Cross-session 1-hour Claude prompt cache** — Anthropic / OpenRouter / Nous Portal now share a 1h prefix cache across sessions for Claude models. Fast resume, fast `/new`, lower cost on repeat work. ([#23828](https://github.com/NousResearch/hermes-agent/pull/23828))
-
- **Two new messaging platforms — LINE + SimpleX Chat** — LINE Messaging API lands as a first-class platform, SimpleX Chat salvages #2558 onto the modern adapter spec. Hermes is now on 22 platforms. ([#23197](https://github.com/NousResearch/hermes-agent/pull/23197), [#26232](https://github.com/NousResearch/hermes-agent/pull/26232))
-
- **Microsoft Graph foundation — Teams pipeline + webhook adapter** — `msgraph` auth/client foundation, webhook listener platform, Teams pipeline plugin runtime, and Teams outbound delivery via the existing adapter — Hermes can now read and post to Teams. (salvages of #21408–#21411) ([#21922](https://github.com/NousResearch/hermes-agent/pull/21922), [#21969](https://github.com/NousResearch/hermes-agent/pull/21969), [#22007](https://github.com/NousResearch/hermes-agent/pull/22007), [#22024](https://github.com/NousResearch/hermes-agent/pull/22024))
-
- **`/handoff` actually transfers the session live** — the agent's active session moves to a different model / persona / profile mid-conversation, with messages, tool history, and context preserved. ([#23395](https://github.com/NousResearch/hermes-agent/pull/23395))
-
- **`x_search` — first-class X (Twitter) search tool** — gated tool with OAuth-or-API-key auth, no skill needed to query the timeline. ([#26763](https://github.com/NousResearch/hermes-agent/pull/26763))
-
- **`vision_analyze` returns pixels to vision-capable models** — when the active model can see, `vision_analyze` now hands the image straight through instead of falling back to a text description. ([#22955](https://github.com/NousResearch/hermes-agent/pull/22955))
-
- **LSP semantic diagnostics on every write** — `write_file` and `patch` now run real language-server diagnostics on the post-edit file (delta-only) and surface real errors before they ship downstream. ([#24168](https://github.com/NousResearch/hermes-agent/pull/24168), [#25978](https://github.com/NousResearch/hermes-agent/pull/25978))
-
- **Per-turn file-mutation verifier footer** — after every turn that wrote files, the agent gets a verifier footer summarizing what actually changed on disk — catches silent overwrites and "wrote it but it didn't land" bugs. ([#24498](https://github.com/NousResearch/hermes-agent/pull/24498))
-
- **Unified `video_generate` with pluggable provider backends** — single tool, any backend. Drop in a new video provider as a plugin, no core changes. ([#25126](https://github.com/NousResearch/hermes-agent/pull/25126))
-
- **`computer_use` cua-driver backend** — proper focus-safe ops, non-Anthropic provider support, refresh on `hermes update`. Computer-use is no longer locked to a single SDK. (re-salvage of #16936) ([#21967](https://github.com/NousResearch/hermes-agent/pull/21967), [#24063](https://github.com/NousResearch/hermes-agent/pull/24063))
-
- **xAI Grok OAuth provider — SuperGrok via subscription** — sign in with your xAI account, talk to Grok models from Hermes. ([#26534](https://github.com/NousResearch/hermes-agent/pull/26534))
-
- **Clarify with buttons — native inline keyboards on Telegram + Discord** — the `clarify` tool renders multi-choice prompts as platform-native buttons instead of typed responses. ([#24199](https://github.com/NousResearch/hermes-agent/pull/24199), [#25485](https://github.com/NousResearch/hermes-agent/pull/25485))
-
- **Discord channel history backfill (default on)** — Hermes reads recent channel history when joining a thread so it actually knows what's been said. ([#25984](https://github.com/NousResearch/hermes-agent/pull/25984))
-
- **Watchers skill — RSS / HTTP JSON / GitHub polling via cron `no_agent` mode** — skill recipes that wire change-detection sources directly into cron's script-only watchdog mode. ([#21881](https://github.com/NousResearch/hermes-agent/pull/21881))
-
- **Zed ACP Registry integration + uvx distribution** — Hermes is in the Zed registry, installable via `uvx` (no npm). Plus `hermes acp --setup-browser` bootstraps browser tools for registry installs. (salvage of [#25908](https://github.com/NousResearch/hermes-agent/pull/25908)) ([#26079](https://github.com/NousResearch/hermes-agent/pull/26079), [#26120](https://github.com/NousResearch/hermes-agent/pull/26120), [#26234](https://github.com/NousResearch/hermes-agent/pull/26234))
-
- **OpenRouter Pareto Code router** — wire a new OpenRouter router with `min_coding_score` knob. Pick the cheapest model that meets your quality bar. ([#22838](https://github.com/NousResearch/hermes-agent/pull/22838))
-
- **Optional codex app-server runtime for OpenAI/Codex models** — drives the OpenAI Codex CLI under the hood for OpenAI/Codex paths, with session reuse, wedge retirement, and OAuth refresh classification. ([#24182](https://github.com/NousResearch/hermes-agent/pull/24182), [#25769](https://github.com/NousResearch/hermes-agent/pull/25769))
-
- **`hermes-skills/huggingface` as a trusted default tap** — community skills index from huggingface.co/skills is available by default in the Skills Hub. ([#26219](https://github.com/NousResearch/hermes-agent/pull/26219))
-
- **9 new optional skills** — Hyperliquid (perp/spot trading via SDK + REST) (@kshitijk4poor & Hermes), Yahoo Finance market data, api-testing (REST/GraphQL debug), unified EVM multi-chain skill (folds #25291 + #2010 + base/), darwinian-evolver, osint-investigation (closes #355), pinggy-tunnel, watchers (RSS/HTTP/GitHub via cron), Notion overhaul for the Developer Platform (May 2026). ([#23582](https://github.com/NousResearch/hermes-agent/pull/23582), [#23583](https://github.com/NousResearch/hermes-agent/pull/23583), [#23590](https://github.com/NousResearch/hermes-agent/pull/23590), [#25299](https://github.com/NousResearch/hermes-agent/pull/25299), [#26760](https://github.com/NousResearch/hermes-agent/pull/26760), [#26729](https://github.com/NousResearch/hermes-agent/pull/26729), [#26765](https://github.com/NousResearch/hermes-agent/pull/26765), [#21881](https://github.com/NousResearch/hermes-agent/pull/21881), [#26612](https://github.com/NousResearch/hermes-agent/pull/26612))
-
- **API server exposes run approval events** — long-running runs surface approval requests over the API stream, no more silent stalls. (salvage of [#20311](https://github.com/NousResearch/hermes-agent/pull/20311)) ([#21899](https://github.com/NousResearch/hermes-agent/pull/21899))
-
- **`/subgoal` — user-added criteria appended to active `/goal`** — layer extra success criteria onto a running goal loop. The judge sees them in the prompt, no behavior change when subgoals are empty. ([#25449](https://github.com/NousResearch/hermes-agent/pull/25449))
-
- **Plugins can run any LLM call via `ctx.llm`** — plugins get a first-class hook to make their own LLM requests through the active provider/credentials, no manual wiring. Plus `tool_override` flag for replacing built-in tools. ([#23194](https://github.com/NousResearch/hermes-agent/pull/23194), [#26759](https://github.com/NousResearch/hermes-agent/pull/26759))
-
- **Brave Search (free tier) + DuckDuckGo (DDGS) as web-search providers** — two new free search backends alongside Tavily / SearXNG / Exa. ([#21337](https://github.com/NousResearch/hermes-agent/pull/21337))
-
- **Sudo brute-force block + sudo-stdin/askpass DANGEROUS classification** — closes the `sudo -S` brute-force avenue; approval gates classify stdin-fed and askpass-stripped sudo invocations as dangerous. (salvages of #22194 + #21128) ([#23736](https://github.com/NousResearch/hermes-agent/pull/23736))
-
- **Provider rename — Alibaba Cloud → Qwen Cloud, picker reorder** — matches what the world calls it. Existing config keys still work. ([#24835](https://github.com/NousResearch/hermes-agent/pull/24835))
-
-
---
-
-## 🪟 Windows — Native Support (Early Beta)
-
-### Bootstrap & installer
- **Native Windows support (early beta)** — first-class native Windows path across CLI / gateway / TUI / tools ([#21561](https://github.com/NousResearch/hermes-agent/pull/21561))
- **PyPI wheel packaging — `pip install hermes-agent && hermes`** (salvage of #26350) ([#26593](https://github.com/NousResearch/hermes-agent/pull/26593))
- **Recognise Shift+Enter as a newline key** + Windows docs (salvage #21545) ([#22130](https://github.com/NousResearch/hermes-agent/pull/22130))
- **Preserve Ctrl+C for Windows foreground runs** (@helix4u) ([#22752](https://github.com/NousResearch/hermes-agent/pull/22752))
- **Stop spamming cwd-missing + tirith-spawn warnings on every terminal call** ([#26618](https://github.com/NousResearch/hermes-agent/pull/26618))
- **Use `--extra all` not `--all-extras`; drop lazy-covered extras from `[all]`** ([#24515](https://github.com/NousResearch/hermes-agent/pull/24515))
-
-### Windows-specific fixes (40+ across cli / tools / gateway / curator / TUI)
-A long tail of native-Windows fixes shipped alongside the beta — taskkill-based subprocess management, MinGit auto-install, Microsoft Store python stub detection, npm prefix handling, native PTY paths, signal handling differences, foreground process management, ANSI sequence handling, path normalization, file-locking semantics, and many more. Full list in commit log under `fix(windows)` / `feat(windows)` / `windows`.
-
---
-
-## 🚀 Performance Wave
-
-### Cold start
- **Cut ~19s from `hermes` cold start** — skills cache + lazy Feishu + no Nous HTTP at startup ([#22138](https://github.com/NousResearch/hermes-agent/pull/22138))
- **Skip eager plugin discovery on known built-in subcommands** ([#22120](https://github.com/NousResearch/hermes-agent/pull/22120))
- **Cache Nous auth + .env loads** — `hermes tools` All Platforms from 14s to <1.5s ([#25341](https://github.com/NousResearch/hermes-agent/pull/25341))
- **Skip welcome banner on `chat -q` single-query mode** ([#22904](https://github.com/NousResearch/hermes-agent/pull/22904))
- **Defer heavy google-cloud imports in google_chat to first adapter use** ([#22681](https://github.com/NousResearch/hermes-agent/pull/22681))
- **Defer QQAdapter and YuanbaoAdapter imports via PEP 562** ([#22790](https://github.com/NousResearch/hermes-agent/pull/22790))
- **Defer httpx import in teams to first webhook call** ([#22831](https://github.com/NousResearch/hermes-agent/pull/22831))
- **Defer fal_client import to first generation request** ([#22859](https://github.com/NousResearch/hermes-agent/pull/22859))
- **models.dev cache-first lookup, skip network when disk cache is fresh** ([#22808](https://github.com/NousResearch/hermes-agent/pull/22808))
- **Parallelize API connectivity checks in `hermes doctor` and disable IMDS** ([#22766](https://github.com/NousResearch/hermes-agent/pull/22766))
-
-### Runtime
- **180x faster `browser_console` evaluations** — route through supervisor's persistent CDP WebSocket ([#23226](https://github.com/NousResearch/hermes-agent/pull/23226))
- **Tune Telegram cadence + adaptive fast-path for short replies** (salvage of #10388) ([#23587](https://github.com/NousResearch/hermes-agent/pull/23587))
- **Accumulate length-continuation prefix via list+join** ([#26237](https://github.com/NousResearch/hermes-agent/pull/26237))
-
-### Prompt caching
- **Cross-session 1h prefix cache for Claude on Anthropic / OpenRouter / Nous Portal** ([#23828](https://github.com/NousResearch/hermes-agent/pull/23828))
- **Hit prefix cache in background review fork** (salvage #17276 + #25427) ([#25434](https://github.com/NousResearch/hermes-agent/pull/25434))
-
---
-
-## 📦 Installation & Distribution
-
-### PyPI + supply-chain
- **PyPI wheel packaging — `pip install hermes-agent && hermes`** (salvage of #26350) ([#26593](https://github.com/NousResearch/hermes-agent/pull/26593))
- **Supply-chain advisory checker + lazy-install framework + tiered install fallback** ([#24220](https://github.com/NousResearch/hermes-agent/pull/24220))
- **Use `--extra all` not `--all-extras`; drop lazy-covered extras from `[all]`** ([#24515](https://github.com/NousResearch/hermes-agent/pull/24515))
- **Skip browser download when system chromium exists** (@helix4u) ([#25317](https://github.com/NousResearch/hermes-agent/pull/25317))
-
-### Nix
- **`extraDependencyGroups` for sealed venv extras** (@alt-glitch) ([#21817](https://github.com/NousResearch/hermes-agent/pull/21817))
- **Refresh npm lockfile hashes** — keeps Nix flake builds reproducible
-
-### Docker
- **Bootstrap auth.json from env on first boot** ([#21880](https://github.com/NousResearch/hermes-agent/pull/21880))
- **Drop manual @hermes/ink build, rely on esbuild bundle** — slimmer image
-
-### ACP / Zed
- **Zed ACP Registry integration** (salvage of #25908) ([#26079](https://github.com/NousResearch/hermes-agent/pull/26079))
- **Switch to uvx distribution, drop npm launcher** ([#26120](https://github.com/NousResearch/hermes-agent/pull/26120))
- **`hermes acp --setup-browser` bootstraps browser tools for registry installs** ([#26234](https://github.com/NousResearch/hermes-agent/pull/26234))
-
---
-
-## 🏗️ Core Agent & Architecture
-
-### Sessions & handoff
- **`/handoff` actually transfers the session live** ([#23395](https://github.com/NousResearch/hermes-agent/pull/23395))
- **Expose `HERMES_SESSION_ID` env var to agent tools** (@alt-glitch) ([#23847](https://github.com/NousResearch/hermes-agent/pull/23847))
-
-### Goals (Ralph loop)
- **`/subgoal` — user-added criteria appended to active `/goal`** ([#25449](https://github.com/NousResearch/hermes-agent/pull/25449))
- **`/goal` checklist + /subgoal user controls** ([#23456](https://github.com/NousResearch/hermes-agent/pull/23456)) — rolled back in window ([#23813](https://github.com/NousResearch/hermes-agent/pull/23813)); /subgoal returned in simpler form via #25449
-
-### Compression
- **Make `protect_first_n` configurable** ([#25447](https://github.com/NousResearch/hermes-agent/pull/25447))
-
-### Verification
- **Per-turn file-mutation verifier footer** ([#24498](https://github.com/NousResearch/hermes-agent/pull/24498))
-
-### Stream retry
- **Log inner cause, upstream headers, bytes/elapsed on every drop** ([#23005](https://github.com/NousResearch/hermes-agent/pull/23005))
-
---
-
-## 🤖 Models & Providers
-
-### New providers
- **xAI Grok OAuth (SuperGrok Subscription) provider** ([#26534](https://github.com/NousResearch/hermes-agent/pull/26534))
- **NovitaAI provider** (salvage #7219) (@kshitijk4poor) ([#25507](https://github.com/NousResearch/hermes-agent/pull/25507))
- **NVIDIA NIM billing origin header** (salvage #25211) ([#26585](https://github.com/NousResearch/hermes-agent/pull/26585))
-
-### Provider work
- **OpenRouter Pareto Code router with `min_coding_score` knob** ([#22838](https://github.com/NousResearch/hermes-agent/pull/22838))
- **Optional codex app-server runtime for OpenAI/Codex models** ([#24182](https://github.com/NousResearch/hermes-agent/pull/24182))
- **Codex-runtime: retire wedged sessions + post-tool watchdog + OAuth refresh classify** ([#25769](https://github.com/NousResearch/hermes-agent/pull/25769))
- **Codex-runtime: skip unavailable plugins during migration** ([#25437](https://github.com/NousResearch/hermes-agent/pull/25437))
- **Codex-runtime: de-dup `[plugins.X]` tables and stop leaking HERMES_HOME into config.toml** (#26250) (@kshitijk4poor) ([#26260](https://github.com/NousResearch/hermes-agent/pull/26260))
- **Pass `reasoning.effort` to xAI Responses API** ([#22807](https://github.com/NousResearch/hermes-agent/pull/22807))
- **Custom provider: prompt and persist explicit `api_mode`** ([#25068](https://github.com/NousResearch/hermes-agent/pull/25068))
- **Rename Alibaba Cloud → Qwen Cloud, reorder picker** ([#24835](https://github.com/NousResearch/hermes-agent/pull/24835))
- **Restore gpt-5.3-codex-spark for ChatGPT Pro** (salvage #18286 + #19530, fixes #16172) (@kshitijk4poor) ([#22991](https://github.com/NousResearch/hermes-agent/pull/22991))
- **Inject tool-use enforcement for GLM models** ([#24715](https://github.com/NousResearch/hermes-agent/pull/24715))
- **Use Nous Portal as model metadata authority** (@rob-maron) ([#24502](https://github.com/NousResearch/hermes-agent/pull/24502))
- **Unified `client=hermes-client-v<version>` tag on every Portal request** ([#24779](https://github.com/NousResearch/hermes-agent/pull/24779))
- **Prevent stale Ollama credentials after provider switch** (@kshitijk4poor) ([#21703](https://github.com/NousResearch/hermes-agent/pull/21703))
- **Auxiliary client: rotate pooled auth after quota failures** (salvage #22779) ([#22792](https://github.com/NousResearch/hermes-agent/pull/22792))
- **Auxiliary client: skip providers without credentials immediately** (#25395) ([#25487](https://github.com/NousResearch/hermes-agent/pull/25487))
- **Auth: send Nous refresh token via header** (@shannonsands) ([#21578](https://github.com/NousResearch/hermes-agent/pull/21578))
- **MiniMax: harden OAuth dashboard and runtime** ([#24165](https://github.com/NousResearch/hermes-agent/pull/24165))
-
-### OpenAI-compatible proxy
- **Local OpenAI-compatible proxy for OAuth providers** — Codex / Aider / Cline can hit Claude Pro, ChatGPT Pro, SuperGrok ([#25969](https://github.com/NousResearch/hermes-agent/pull/25969))
-
---
-
-## 📱 Messaging Platforms (Gateway)
-
-### New platforms
- **LINE Messaging API platform plugin** ([#23197](https://github.com/NousResearch/hermes-agent/pull/23197))
- **SimpleX Chat platform plugin** (salvages #2558) ([#26232](https://github.com/NousResearch/hermes-agent/pull/26232))
-
-### Microsoft Graph foundation
- **msgraph: add auth and client foundation** (salvage of #21408) ([#21922](https://github.com/NousResearch/hermes-agent/pull/21922))
- **msgraph: add webhook listener platform** (salvage of #21409) ([#21969](https://github.com/NousResearch/hermes-agent/pull/21969))
- **teams-pipeline: add plugin runtime and operator cli** (salvage of #21410) ([#22007](https://github.com/NousResearch/hermes-agent/pull/22007))
- **teams: add pipeline outbound delivery via existing adapter** (salvage of #21411) ([#22024](https://github.com/NousResearch/hermes-agent/pull/22024))
-
-### Cross-platform
- **Per-platform admin/user split for slash commands** (salvage of #4443) ([#23373](https://github.com/NousResearch/hermes-agent/pull/23373))
- **Forensics on signal handling — non-blocking diag, per-phase timing, stale-unit warning** ([#23285](https://github.com/NousResearch/hermes-agent/pull/23285))
- **Keep gateway running when platforms fail; add per-platform circuit breaker + `/platform`** ([#26600](https://github.com/NousResearch/hermes-agent/pull/26600))
- **Wire `clarify` tool with inline keyboard buttons on Telegram** ([#24199](https://github.com/NousResearch/hermes-agent/pull/24199))
- **Add `chat_id` to `hook_ctx` for message source tracking** ([#24710](https://github.com/NousResearch/hermes-agent/pull/24710))
-
-### Telegram
- **Native draft streaming via `sendMessageDraft` (Bot API 9.5+)** (salvage of #3412) ([#23512](https://github.com/NousResearch/hermes-agent/pull/23512))
- **Stream Telegram edits safely** — salvage of #22264 (@kshitijk4poor) ([#22518](https://github.com/NousResearch/hermes-agent/pull/22518))
- **Telegram notification mode** (salvage #22772) ([#22793](https://github.com/NousResearch/hermes-agent/pull/22793))
- **Telegram guest mention mode** (@kshitijk4poor) ([#22759](https://github.com/NousResearch/hermes-agent/pull/22759))
- **Split-and-deliver oversized edits instead of silent truncation** (salvage of #19537) ([#23576](https://github.com/NousResearch/hermes-agent/pull/23576))
- **Preserve DM topic routing via reply fallback** (salvage #22053) (@kshitijk4poor) ([#22410](https://github.com/NousResearch/hermes-agent/pull/22410))
- **Pass `source.thread_id` explicitly on auto-reset notice** (carve-out of #7404) ([#23440](https://github.com/NousResearch/hermes-agent/pull/23440))
-
-### Discord
- **Render clarify choices as buttons** ([#25485](https://github.com/NousResearch/hermes-agent/pull/25485))
- **Channel history backfill — default on, broadened scope** ([#25984](https://github.com/NousResearch/hermes-agent/pull/25984))
- **`thread_require_mention` for multi-bot threads** (salvage #25313) ([#25445](https://github.com/NousResearch/hermes-agent/pull/25445))
-
-### Slack
- **Support `!cmd` as alternate prefix for slash commands in threads** ([#25355](https://github.com/NousResearch/hermes-agent/pull/25355))
-
-### WhatsApp
- **Surface quoted reply metadata from Baileys** (#25398) ([#25489](https://github.com/NousResearch/hermes-agent/pull/25489))
-
-### Feishu / Google Chat / others
- **Feishu: native update prompt cards** (@kshitijk4poor) ([#22448](https://github.com/NousResearch/hermes-agent/pull/22448))
- **Google Chat: repair setup prompt imports** (@helix4u) ([#22038](https://github.com/NousResearch/hermes-agent/pull/22038))
- **Google Chat: honor relay-declared sender_type** (salvage of #22107) (@kshitijk4poor) ([#22432](https://github.com/NousResearch/hermes-agent/pull/22432))
- **LINE: use `build_source` instead of nonexistent `create_source`** ([#24717](https://github.com/NousResearch/hermes-agent/pull/24717))
- **Add `weixin, and more` to gateway docs** (salvage of #21063 by @wuwuzhijing)
-
---
-
-## 🖥️ CLI & TUI
-
-### CLI
- **Show YOLO mode warning in banner and status bar** ([#26238](https://github.com/NousResearch/hermes-agent/pull/26238))
- **Confirm prompt for destructive slash commands** (#4069) ([#22687](https://github.com/NousResearch/hermes-agent/pull/22687))
- **`docker_extra_args` + `display.timestamps`** ([#23599](https://github.com/NousResearch/hermes-agent/pull/23599))
- **Delegate tool: show user's actual concurrency / spawn-depth limits in description** ([#22694](https://github.com/NousResearch/hermes-agent/pull/22694))
-
-### TUI
- **`/sessions` slash command for browsing and resuming previous sessions** (@austinpickett) ([#20805](https://github.com/NousResearch/hermes-agent/pull/20805))
- **Segment turns with rule above non-first user msgs; trim ticker dead space** (@OutThisLife) ([#21846](https://github.com/NousResearch/hermes-agent/pull/21846))
- **Support attaching to an existing gateway** (@OutThisLife) ([#21978](https://github.com/NousResearch/hermes-agent/pull/21978))
- **Resolve markdown links to readable page titles** (@OutThisLife) ([#24013](https://github.com/NousResearch/hermes-agent/pull/24013))
- **Width-aware markdown table rendering with vertical fallback** (@alt-glitch) ([#26195](https://github.com/NousResearch/hermes-agent/pull/26195))
- **Keep Ink displayCursor in sync with fast-echo writes so cursor stops drifting** (@OutThisLife) ([#26717](https://github.com/NousResearch/hermes-agent/pull/26717))
- **Allow transcript scroll + Esc during approval/clarify/confirm prompts** (@OutThisLife) ([#26414](https://github.com/NousResearch/hermes-agent/pull/26414))
- **Preserve session when switching personality** (@austinpickett) ([#20942](https://github.com/NousResearch/hermes-agent/pull/20942))
- **Skip native safety net on OSC52-capable terminals** (@benbarclay) ([#20954](https://github.com/NousResearch/hermes-agent/pull/20954))
-
-### Dashboard / GUI
- **Route embedded TUI through dashboard gateway** (@OutThisLife) ([#21979](https://github.com/NousResearch/hermes-agent/pull/21979))
- **Hide token/cost analytics behind config flag (default off)** ([#25438](https://github.com/NousResearch/hermes-agent/pull/25438))
- **Fix Langfuse observability — trace I/O, tool outputs, placeholder credentials** (closes #22342, #22763) (@kshitijk4poor) ([#26320](https://github.com/NousResearch/hermes-agent/pull/26320))
- **MiniMax 'Login' button launched Claude OAuth** (salvage #22849) ([#24058](https://github.com/NousResearch/hermes-agent/pull/24058))
- **Update cron modals** (@austinpickett) ([#25985](https://github.com/NousResearch/hermes-agent/pull/25985))
- **Analytics: prevent silent token loss and add Claude 4.5–4.7 pricing** (@austinpickett) ([#21455](https://github.com/NousResearch/hermes-agent/pull/21455))
-
---
-
-## 🔧 Tools & Capabilities
-
-### Vision & video
- **`vision_analyze` returns pixels to vision-capable models** ([#22955](https://github.com/NousResearch/hermes-agent/pull/22955))
- **Unified `video_generate` with pluggable provider backends** ([#25126](https://github.com/NousResearch/hermes-agent/pull/25126))
- **`image_gen`: actionable setup message when no FAL backend is reachable** ([#26222](https://github.com/NousResearch/hermes-agent/pull/26222))
-
-### Computer use
- **`computer_use` cua-driver backend + focus-safe ops + non-Anthropic provider fix** (re-salvage #16936) ([#21967](https://github.com/NousResearch/hermes-agent/pull/21967))
- **Refresh cua-driver on `hermes update` + add `install --upgrade`** ([#24063](https://github.com/NousResearch/hermes-agent/pull/24063))
-
-### LSP & write-time diagnostics
- **Semantic diagnostics from real language servers in `write_file`/`patch`** ([#24168](https://github.com/NousResearch/hermes-agent/pull/24168))
- **Shift baseline diagnostics into post-edit coordinates** ([#25978](https://github.com/NousResearch/hermes-agent/pull/25978))
-
-### Search & web
- **Brave Search (free tier) and DDGS search providers** ([#21337](https://github.com/NousResearch/hermes-agent/pull/21337))
- **Bearer auth header for Tavily `/crawl` endpoint** ([#24658](https://github.com/NousResearch/hermes-agent/pull/24658))
-
-### X (Twitter)
- **Gated `x_search` tool with OAuth-or-API-key auth** ([#26763](https://github.com/NousResearch/hermes-agent/pull/26763))
-
-### Browser
- **Route `browser_console` eval through supervisor's persistent CDP WS (180x faster)** ([#23226](https://github.com/NousResearch/hermes-agent/pull/23226))
- **Support externally managed Camofox sessions** ([#24499](https://github.com/NousResearch/hermes-agent/pull/24499))
-
-### MCP
- **`supports_parallel_tool_calls` for MCP servers** (salvage of #9944) ([#26825](https://github.com/NousResearch/hermes-agent/pull/26825))
- **Codex preset for Codex CLI MCP server** (salvage #22663) ([#22679](https://github.com/NousResearch/hermes-agent/pull/22679))
- **Stop retrying initial MCP auth failures** (#25624) ([#25776](https://github.com/NousResearch/hermes-agent/pull/25776))
-
-### Google Workspace
- **Drive write ops + Docs/Sheets create/append** ([#21895](https://github.com/NousResearch/hermes-agent/pull/21895))
-
-### Per-turn verifier
- **Per-turn file-mutation verifier footer** ([#24498](https://github.com/NousResearch/hermes-agent/pull/24498))
-
---
-
-## 🧩 Kanban (Multi-Agent)
-
- **`specify` — auxiliary LLM fleshes out triage tasks** ([#21435](https://github.com/NousResearch/hermes-agent/pull/21435))
- **Orchestrator board tools — `kanban_list` + `kanban_unblock`** (carve-out of #20568) ([#23012](https://github.com/NousResearch/hermes-agent/pull/23012))
- **`stranded_in_ready` diagnostic for unclaimed tasks** ([#23578](https://github.com/NousResearch/hermes-agent/pull/23578))
- **Dashboard batch QOL upgrade** (salvage of #23240) ([#23550](https://github.com/NousResearch/hermes-agent/pull/23550))
- **Tooltips and docs link across dashboard** ([#21541](https://github.com/NousResearch/hermes-agent/pull/21541))
- **Dedupe notifier delivery via atomic claim + rewind on failure** (salvage #22558) ([#23401](https://github.com/NousResearch/hermes-agent/pull/23401))
- **Keep notifier subscriptions alive across retry cycles** (salvage #21398) ([#23423](https://github.com/NousResearch/hermes-agent/pull/23423))
- **Drop caller-controlled author override in `kanban_comment`** (salvage of #22109) (@kshitijk4poor) ([#22435](https://github.com/NousResearch/hermes-agent/pull/22435))
- **Sanitize comment author rendering in `build_worker_context`** ([#22769](https://github.com/NousResearch/hermes-agent/pull/22769))
-
---
-
-## 🧠 Plugins & Extension
-
-### Plugin surface
- **Run any LLM call from inside a plugin via `ctx.llm`** ([#23194](https://github.com/NousResearch/hermes-agent/pull/23194))
- **`tool_override` flag for replacing built-in tools** (closes #11049) ([#26759](https://github.com/NousResearch/hermes-agent/pull/26759))
- **`standalone_sender_fn` for out-of-process cron delivery** (@kshitijk4poor) ([#22461](https://github.com/NousResearch/hermes-agent/pull/22461))
- **`HERMES_PLUGINS_DEBUG=1` surfaces plugin discovery logs** ([#22684](https://github.com/NousResearch/hermes-agent/pull/22684))
- **Hindsight-client as optional dependency** (@alt-glitch) ([#21818](https://github.com/NousResearch/hermes-agent/pull/21818))
-
-### Profile & distribution
- **Shareable profile distributions via git** ([#20831](https://github.com/NousResearch/hermes-agent/pull/20831))
-
---
-
-## ⏰ Cron
-
- **Routing intent — `deliver=all` fans out to every connected channel** ([#21495](https://github.com/NousResearch/hermes-agent/pull/21495))
- **Support name-based lookup for job operations** ([#26231](https://github.com/NousResearch/hermes-agent/pull/26231))
- **Blank Cron dashboard tab + partial-record crashes** (salvage #21042 + #22330) (@kshitijk4poor) ([#22389](https://github.com/NousResearch/hermes-agent/pull/22389))
- **Do not seed `HERMES_SESSION_*` contextvars from cron origin** (salvage of #22356) (@kshitijk4poor) ([#22382](https://github.com/NousResearch/hermes-agent/pull/22382))
- **Scan assembled prompt including skill content for prompt injection** (#3968)
-
---
-
-## 🧩 Skills Ecosystem
-
-### Skills Hub
- **`hermes-skills/huggingface` as a trusted default tap** (closes #2549) ([#26219](https://github.com/NousResearch/hermes-agent/pull/26219))
- **Show per-skill pages in the left sidebar** ([#26646](https://github.com/NousResearch/hermes-agent/pull/26646))
- **Richer info panels on the Skills Hub** ([#22905](https://github.com/NousResearch/hermes-agent/pull/22905))
- **Refuse `skill_view` name collisions instead of guessing** (closes #6136 @polkn)
-
-### Curator
- **Show rename map in user-visible summary** ([#22910](https://github.com/NousResearch/hermes-agent/pull/22910))
- **Hint at `hermes curator pin` in the rename block** ([#23212](https://github.com/NousResearch/hermes-agent/pull/23212))
-
-### New optional skills
- **Hyperliquid** — perp/spot trading via SDK + REST (salvage of #1952) ([#23583](https://github.com/NousResearch/hermes-agent/pull/23583))
- **Yahoo Finance** market data ([#23590](https://github.com/NousResearch/hermes-agent/pull/23590))
- **api-testing** (REST/GraphQL debug, salvages #1800) ([#23582](https://github.com/NousResearch/hermes-agent/pull/23582))
- **Unified EVM multi-chain skill** (salvages #25291 + #2010 + folds in base/) ([#25299](https://github.com/NousResearch/hermes-agent/pull/25299))
- **darwinian-evolver** ([#26760](https://github.com/NousResearch/hermes-agent/pull/26760))
- **osint-investigation** (closes #355) ([#26729](https://github.com/NousResearch/hermes-agent/pull/26729))
- **pinggy-tunnel** ([#26765](https://github.com/NousResearch/hermes-agent/pull/26765))
- **watchers** — RSS / HTTP JSON / GitHub polling via cron no-agent ([#21881](https://github.com/NousResearch/hermes-agent/pull/21881))
- **Notion overhaul for the Developer Platform** (May 2026) ([#26612](https://github.com/NousResearch/hermes-agent/pull/26612))
-
---
-
-## 🔒 Security & Reliability
-
-### Security hardening
- **Sudo brute-force block + sudo-stdin/askpass DANGEROUS** (salvage of #22194 + #21128) (@kshitijk4poor) ([#23736](https://github.com/NousResearch/hermes-agent/pull/23736))
- **Drop caller-controlled author override in `kanban_comment`** (salvage of #22109) (@kshitijk4poor) ([#22435](https://github.com/NousResearch/hermes-agent/pull/22435))
- **Cover remaining SSRF fetch paths in skills-hub** (salvage #22804) ([#22843](https://github.com/NousResearch/hermes-agent/pull/22843))
- **Use credential_pool for custom endpoint model listing probes** (salvage #22810) ([#22842](https://github.com/NousResearch/hermes-agent/pull/22842))
- **Require dashboard auth for plugin API routes** (salvage #19541) ([#23220](https://github.com/NousResearch/hermes-agent/pull/23220))
- **Sanitize env and redact output in quick commands + remove write-only `_pending_messages`** ([#23584](https://github.com/NousResearch/hermes-agent/pull/23584))
- **Reduce unnecessary `shell=True` in subprocess calls** ([#25149](https://github.com/NousResearch/hermes-agent/pull/25149))
- **Sanitize Google Chat sender_type from relay** (salvage of #22107) (@kshitijk4poor) ([#22432](https://github.com/NousResearch/hermes-agent/pull/22432))
- **Supply-chain advisory checker** ([#24220](https://github.com/NousResearch/hermes-agent/pull/24220))
- **Rewrite security policy around OS-level isolation as the boundary** (@jquesnelle) ([#20317](https://github.com/NousResearch/hermes-agent/pull/20317))
- **Remove public security advisory page** ([#24253](https://github.com/NousResearch/hermes-agent/pull/24253))
-
-### Reliability — notable bug closures
- **SQLite: fall back to `journal_mode=DELETE` on NFS/SMB/FUSE** (fixes `/resume` on network mounts) (@kshitijk4poor) ([#22043](https://github.com/NousResearch/hermes-agent/pull/22043))
- **Codex-runtime: retire wedged sessions + post-tool watchdog + OAuth refresh classify** ([#25769](https://github.com/NousResearch/hermes-agent/pull/25769))
- **Codex-runtime: de-dup `[plugins.X]` tables and stop leaking HERMES_HOME** (#26250) (@kshitijk4poor) ([#26260](https://github.com/NousResearch/hermes-agent/pull/26260))
- **Daytona: migrate legacy-sandbox lookup to cursor-based `list()`** ([#24587](https://github.com/NousResearch/hermes-agent/pull/24587))
- **MCP: stop retrying initial MCP auth failures** (#25624) ([#25776](https://github.com/NousResearch/hermes-agent/pull/25776))
- **Gateway: enable text-intercept for multi-choice clarify fallback** (#25587) ([#25778](https://github.com/NousResearch/hermes-agent/pull/25778))
- **Gateway: keep running when platforms fail; per-platform circuit breaker + `/platform`** ([#26600](https://github.com/NousResearch/hermes-agent/pull/26600))
- **Delegate: salvage #21933 JSON-string batch + diagnostic logging** (@kshitijk4poor) ([#22436](https://github.com/NousResearch/hermes-agent/pull/22436))
- **Profiles+banner: exclude infrastructure from `--clone-all` + fix stale update-check repo resolution** (@kshitijk4poor) ([#22475](https://github.com/NousResearch/hermes-agent/pull/22475))
- **ACP: inline file attachment resources** (salvage #21400 + image support) ([#21407](https://github.com/NousResearch/hermes-agent/pull/21407))
- **CI: unblock shared PR checks** (@stephenschoettler) ([#21012](https://github.com/NousResearch/hermes-agent/pull/21012), [#25957](https://github.com/NousResearch/hermes-agent/pull/25957))
-
-### Notable reverts in window
- **`/goal` checklist + /subgoal feature stack** — rolled back ([#23813](https://github.com/NousResearch/hermes-agent/pull/23813)); `/subgoal` returned in simpler form via [#25449](https://github.com/NousResearch/hermes-agent/pull/25449)
- **Scrollback box width clamp** (#25975) rolled back to restore full-width borders ([#26163](https://github.com/NousResearch/hermes-agent/pull/26163))
- **`fix(cli): tolerate unreadable dirs when building systemd PATH`** rolled back
-
---
-
-## 🌍 i18n
-
- **Localize all gateway commands + web dashboard, add 8 new locales (16 total)** ([#22914](https://github.com/NousResearch/hermes-agent/pull/22914))
-
---
-
-## 📚 Documentation
-
- **Repair Voice & TTS provider table** (@nightcityblade, fixes #24101) ([#24138](https://github.com/NousResearch/hermes-agent/pull/24138))
- **Show per-skill pages in the left sidebar** ([#26646](https://github.com/NousResearch/hermes-agent/pull/26646))
- **Mention Weixin in gateway help and docstrings** (salvage of #21063 by @wuwuzhijing)
- **Richer info panels on the Skills Hub** ([#22905](https://github.com/NousResearch/hermes-agent/pull/22905))
- Many more doc updates across providers, platforms, skills, Windows install paths, and dashboard.
-
---
-
-## 🧪 Testing & CI
-
- **Unblock shared PR checks** (@stephenschoettler) ([#21012](https://github.com/NousResearch/hermes-agent/pull/21012))
- **Stabilize shared test state after 21012** (@stephenschoettler) ([#25957](https://github.com/NousResearch/hermes-agent/pull/25957))
- A long tail of test additions for platforms, providers, plugins, and edge cases — 8 explicit `test:` PRs plus ~250 fix PRs that also added regression coverage.
-
---
-
-## 👥 Contributors
-
-### Core
- @teknium1 — release lead, architecture, ~406 PRs merged in window
-
-### Top community contributors
- **@kshitijk4poor** — 38 PRs · Telegram cadence/streaming/topic routing, security hardening (sudo, SSRF, kanban_comment, dashboard auth), codex-runtime hygiene, NovitaAI provider, profile/banner fixes, Feishu update cards, gateway QOL across the board
- **@alt-glitch** — 13 PRs · Markdown-table TUI rendering, `HERMES_SESSION_ID` env var, hindsight-client optional dep, Nix `extraDependencyGroups`
- **@OutThisLife** (Brooklyn Nicholson) — 12 PRs · TUI turn segmentation, attach-to-gateway, markdown link titles, embedded TUI via dashboard gateway, Ink cursor sync, scroll/Esc during prompts
- **@austinpickett** — 8 PRs · `/sessions` slash command, personality switching preserves session, cron modals, dashboard analytics
- **@helix4u** — 5 PRs · Google Chat setup, browser install skip on system chromium, Windows Ctrl+C preservation
- **@rob-maron** — 4 PRs · Nous Portal as model metadata authority, provider polish
- **@stephenschoettler** — 3 PRs · CI stabilization
- **@ethernet8023** — 3 PRs · platform/gateway work
-
-### All contributors (alphabetical)
-
-@02356abc, @0xbyt4, @0xharryriddle, @1000Delta, @1RB, @29206394, @A-kamal, @aashizpoudel, @Abd0r,
-@adybag14-cyber, @AgentArcLab, @ahmedbadr3, @AhmetArif0, @alblez, @Alex-yang00, @ALIYILD, @AllynSheep,
-@alt-glitch, @am423, @amathxbt, @amethystani, @ArecaNon, @Arkmusn, @askclaw-vesper, @AsoTora, @austinpickett,
-@aydnOktay, @ayushere, @baocin, @Bartok9, @benbarclay, @BennetYrWang, @Bihruze, @binhnt92, @briandevans,
-@brooklynnicholson, @btorresgil, @buntingszn, @CalmProton, @chrisworksai, @CoinTheHat, @dandacompany, @Dangooy,
-@DanielLSM, @David-0x221Eight, @ddupont808, @dhruv-saxena, @diablozzc, @dlkakbs, @dmahan93, @dmnkhorvath,
-@domtriola, @donrhmexe, @Dusk1e, @eloklam, @emozilla, @ephron-ren, @erenkarakus, @EthanGuo-coder,
-@ethernet8023, @evgyur, @explainanalyze, @fahdad, @fr33d3m0n, @Freeman-Consulting, @freqyfreqy, @Frowtek,
-@fu576, @github-actions[bot], @gnanirahulnutakki, @GodsBoy, @guglielmofonda, @Gutslabs, @hanzckernel,
-@heathley, @hekaru-agent, @helix4u, @HenkDz, @HiddenPuppy, @hllqkb, @hrygo, @HuangYuChuh, @Hugo-SEQUIER, @HxT9,
-@iacker, @InB4DevOps, @isaachuangGMICLOUD, @iuyup, @Jaaneek, @jackey8616, @jackjin1997, @Jaggia, @jak983464779,
-@jelrod27, @jethac, @JithendraNara, @johnisag, @Julientalbot, @Jwd-gity, @kallidean, @keyuyuan, @kfa-ai,
-@kidonng, @KiraKatana, @kjames2001, @konsisumer, @Korkyzer, @kshitijk4poor, @KvnGz, @lars-hagen, @leehack,
-@leepoweii, @LeonSGP43, @li0near, @libo1106, @liquidchen, @littlewwwhite, @liuhao1024, @liyoungc, @luandiasrj,
-@luoyuctl, @luyao618, @magic524, @mbac, @McClean, @memosr, @Mibayy, @ming1523, @mizgyo, @mrshu, @ms-alan,
-@MustafaKara7, @nederev, @nicoechaniz, @nidhi-singh02, @nightcityblade, @nik1t7n, @Ninso112, @NivOO5,
-@novax635, @nv-kasikritc, @oferlaor, @oswaldb22, @outdoorsea, @oxngon, @PaTTeeL, @pearjelly, @pefontana,
-@perng, @PhilipAD, @phuongvm, @polkn, @Prasanna28Devadiga, @princepal9120, @pty819, @purzbeats, @Quarkex,
-@quocanh261997, @qWaitCrypto, @Qwinty, @rahimsais, @raymaylee, @ReqX, @rewbs, @RhombusMaximus, @rob-maron,
-@Ruzzgar, @ryptotalent, @Sanjays2402, @shannonsands, @shaun0927, @SiliconID, @silv-mt-holdings, @simpolism,
-@smwbev, @soichiyo, @sprmn24, @steezkelly, @stephenschoettler, @Sylw3ster, @szymonclawd, @teyrebaz33,
-@Tianyu199509, @Tranquil-Flow, @TreyDong, @TurgutKural, @tw2818, @tymrtn, @uzunkuyruk, @v1b3coder,
-@vanthinh6886, @VinceZcrikl, @vKongv, @vominh1919, @voteblake, @VTRiot, @wali-reheman, @wesleysimplicio,
-@wilsen0, @WorldWriter, @worlldz, @wuli666, @wuwuzhijing, @Wysie, @XiaoXiao0221, @xieNniu, @xxxigm, @yehuosi,
-@ygd58, @yifengingit, @yuga-hashimoto, @zccyman, @ZeterMordio, @Zhekinmaksim, @zhengyn0001
-
-Also: @Nagatha (Claude Opus 4.7).
-
---
-
-**Full Changelog**: [v2026.5.7...v2026.5.16](https://github.com/NousResearch/hermes-agent/compare/v2026.5.7...v2026.5.16)
@@ -1,11 +1,8 @@
-"""ACP auth helpers — detect and advertise Hermes authentication methods."""
+"""ACP auth helpers — detect the currently configured Hermes provider."""

 from __future__ import annotations

-from typing import Any, Optional
-
-
-TERMINAL_SETUP_AUTH_METHOD_ID = "hermes-setup"
+from typing import Optional


 def detect_provider() -> Optional[str]:
@@ -25,44 +22,3 @@ def detect_provider() -> Optional[str]:
 def has_provider() -> bool:
    """Return True if Hermes can resolve any runtime provider credentials."""
    return detect_provider() is not None
-
-
-def build_auth_methods() -> list[Any]:
-    """Return registry-compatible ACP auth methods for Hermes.
-
-    The official ACP registry validates that agents advertise at least one
-    usable auth method during the initial handshake. A fresh Zed install may
-    not have Hermes provider credentials configured yet, so Hermes always
-    advertises a terminal setup method. When credentials are already present,
-    it also advertises the resolved provider as the default agent-managed
-    runtime credential method.
-    """
-    from acp.schema import AuthMethodAgent, TerminalAuthMethod
-
-    methods: list[Any] = []
-    provider = detect_provider()
-    if provider:
-        methods.append(
-            AuthMethodAgent(
-                id=provider,
-                name=f"{provider} runtime credentials",
-                description=(
-                    "Authenticate Hermes using the currently configured "
-                    f"{provider} runtime credentials."
-                ),
-            )
-        )
-
-    methods.append(
-        TerminalAuthMethod(
-            id=TERMINAL_SETUP_AUTH_METHOD_ID,
-            name="Configure Hermes provider",
-            description=(
-                "Open Hermes' interactive model/provider setup in a terminal. "
-                "Use this when Hermes has not been configured on this machine yet."
-            ),
-            type="terminal",
-            args=["--setup"],
-        )
-    )
-    return methods
@@ -1,288 +0,0 @@
-# bootstrap_browser_tools.ps1 — install agent-browser + Playwright Chromium
-# into ~/.hermes/node/ for use by Hermes Agent's browser tools on Windows.
-#
-# Targets the registry-install path: users who got Hermes via
-# `uvx --from 'hermes-agent[acp]==X' hermes-acp` don't have a repo clone,
-# so the install.ps1 `npm install`-in-repo flow doesn't apply. This script
-# is a self-contained, idempotent slice of install.ps1's browser block.
-#
-# Usage:
-#   .\bootstrap_browser_tools.ps1                # use defaults
-#   .\bootstrap_browser_tools.ps1 -Yes           # accept Chromium download
-#   .\bootstrap_browser_tools.ps1 -SkipChromium  # Node + agent-browser only
-#
-# Idempotent: re-running this is safe and fast.
-
-[CmdletBinding()]
-param(
-    [switch]$Yes,
-    [switch]$SkipChromium
-)
-
-$ErrorActionPreference = "Stop"
-$NodeVersion = "22"
-
-# ─────────────────────────────────────────────────────────────────────────
-# Logging
-# ─────────────────────────────────────────────────────────────────────────
-
-function Write-Info    { param([string]$msg) Write-Host "[*] $msg" -ForegroundColor Cyan    }
-function Write-Success { param([string]$msg) Write-Host "[+] $msg" -ForegroundColor Green   }
-function Write-Warn    { param([string]$msg) Write-Host "[!] $msg" -ForegroundColor Yellow  }
-function Write-Err     { param([string]$msg) Write-Host "[x] $msg" -ForegroundColor Red     }
-
-# ─────────────────────────────────────────────────────────────────────────
-# Paths
-# ─────────────────────────────────────────────────────────────────────────
-
-$HermesHome = $env:HERMES_HOME
-if (-not $HermesHome) {
-    $HermesHome = Join-Path $env:USERPROFILE ".hermes"
-}
-$NodePrefix = Join-Path $HermesHome "node"
-
-# ─────────────────────────────────────────────────────────────────────────
-# Step 1: Node.js
-# ─────────────────────────────────────────────────────────────────────────
-
-function Resolve-NpmExe {
-    # Same gotcha as install.ps1: prefer npm.cmd over npm.ps1 so the
-    # PowerShell execution policy doesn't block us.
-    $cmd = Get-Command npm -ErrorAction SilentlyContinue
-    if (-not $cmd) { return $null }
-    $npmExe = $cmd.Source
-    if ($npmExe -like "*.ps1") {
-        $sibling = Join-Path (Split-Path $npmExe -Parent) "npm.cmd"
-        if (Test-Path $sibling) { return $sibling }
-    }
-    return $npmExe
-}
-
-function Resolve-NpxExe {
-    $cmd = Get-Command npx -ErrorAction SilentlyContinue
-    if (-not $cmd) { return $null }
-    $npxExe = $cmd.Source
-    if ($npxExe -like "*.ps1") {
-        $sibling = Join-Path (Split-Path $npxExe -Parent) "npx.cmd"
-        if (Test-Path $sibling) { return $sibling }
-    }
-    return $npxExe
-}
-
-function Ensure-Node {
-    # System Node on PATH?
-    $sysNode = Get-Command node -ErrorAction SilentlyContinue
-    if ($sysNode) {
-        try {
-            $v = & $sysNode.Source --version
-            $major = [int]($v -replace '^v(\d+).*', '$1')
-            if ($major -ge 20) {
-                Write-Success "Node.js $v found on PATH"
-                return
-            }
-            Write-Warn "Node.js $v is older than v20 — installing managed Node."
-        } catch {
-            Write-Warn "Failed to query Node version: $_"
-        }
-    }
-
-    # Hermes-managed Node?
-    $managedNode = Join-Path $NodePrefix "node.exe"
-    if (Test-Path $managedNode) {
-        $v = & $managedNode --version
-        Write-Success "Node.js $v found (Hermes-managed at $NodePrefix)"
-        # Prepend to current-process PATH so subsequent npm/npx calls find it.
-        $env:PATH = "$NodePrefix;$env:PATH"
-        return
-    }
-
-    Write-Info "Installing Node.js $NodeVersion LTS into $NodePrefix ..."
-
-    $arch = if ([Environment]::Is64BitOperatingSystem) { "x64" } else { "x86" }
-    $indexUrl = "https://nodejs.org/dist/latest-v${NodeVersion}.x/"
-
-    try {
-        $indexPage = Invoke-WebRequest -Uri $indexUrl -UseBasicParsing
-        $matches = [regex]::Matches($indexPage.Content, "node-v${NodeVersion}\.\d+\.\d+-win-${arch}\.zip")
-        if ($matches.Count -eq 0) {
-            Write-Err "Could not locate Node.js $NodeVersion zip for win-$arch"
-            throw "no tarball"
-        }
-        $zipName = $matches[0].Value
-        $zipUrl = "$indexUrl$zipName"
-
-        $tmpDir = Join-Path $env:TEMP "hermes-node-$([guid]::NewGuid().ToString('N'))"
-        New-Item -ItemType Directory -Force -Path $tmpDir | Out-Null
-        $zipPath = Join-Path $tmpDir $zipName
-
-        Write-Info "Downloading $zipName ..."
-        Invoke-WebRequest -Uri $zipUrl -OutFile $zipPath -UseBasicParsing
-
-        Expand-Archive -Path $zipPath -DestinationPath $tmpDir -Force
-        $extracted = Get-ChildItem -Path $tmpDir -Directory | Where-Object { $_.Name -like "node-v*" } | Select-Object -First 1
-
-        if (-not $extracted) { Write-Err "Node.js extraction failed"; throw "extract" }
-
-        if (Test-Path $NodePrefix) { Remove-Item -Recurse -Force $NodePrefix }
-        New-Item -ItemType Directory -Force -Path $HermesHome | Out-Null
-        Move-Item -Path $extracted.FullName -Destination $NodePrefix
-
-        Remove-Item -Recurse -Force $tmpDir -ErrorAction SilentlyContinue
-
-        $env:PATH = "$NodePrefix;$env:PATH"
-        $v = & "$NodePrefix\node.exe" --version
-        Write-Success "Node.js $v installed to $NodePrefix"
-    } catch {
-        Write-Err "Node.js install failed: $_"
-        Write-Info "Install Node 20+ manually from https://nodejs.org/en/download/ and re-run."
-        throw
-    }
-}
-
-# ─────────────────────────────────────────────────────────────────────────
-# Step 2: agent-browser
-# ─────────────────────────────────────────────────────────────────────────
-
-function Ensure-AgentBrowser {
-    $npmExe = Resolve-NpmExe
-    if (-not $npmExe) {
-        Write-Err "npm not on PATH after Node install — aborting"
-        throw "npm missing"
-    }
-
-    # Already installed?
-    $existing = Get-Command agent-browser -ErrorAction SilentlyContinue
-    if ($existing) {
-        Write-Success "agent-browser already installed at $($existing.Source)"
-        return
-    }
-
-    # When the user has system Node (winget / installer-based), `npm install
-    # -g` writes to a directory that may require admin rights. Force the
-    # prefix to the user-writable Hermes-managed Node directory so we never
-    # need elevation and the agent can always find the result. Mirrors the
-    # bash bootstrap's `--prefix $NODE_PREFIX` strategy.
-    New-Item -ItemType Directory -Force -Path $NodePrefix | Out-Null
-
-    Write-Info "Installing agent-browser (npm, prefix=$NodePrefix)..."
-    & $npmExe install -g --prefix $NodePrefix --silent `
-        "agent-browser@^0.26.0" "@askjo/camofox-browser@^1.5.2"
-    if ($LASTEXITCODE -ne 0) {
-        Write-Err "npm install -g agent-browser failed (exit $LASTEXITCODE)"
-        throw "npm install"
-    }
-
-    # Windows npm global installs drop shims at $NodePrefix\ root (not bin/).
-    # Prepend to PATH so any subsequent npx call resolves them.
-    $env:PATH = "$NodePrefix;$env:PATH"
-
-    Write-Success "agent-browser installed to $NodePrefix"
-}
-
-# ─────────────────────────────────────────────────────────────────────────
-# Step 3: Playwright Chromium
-# ─────────────────────────────────────────────────────────────────────────
-
-function Find-SystemBrowser {
-    $candidates = @(
-        "C:\Program Files\Google\Chrome\Application\chrome.exe",
-        "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe",
-        "C:\Program Files\Chromium\Application\chromium.exe",
-        "${env:LOCALAPPDATA}\Google\Chrome\Application\chrome.exe",
-        "${env:LOCALAPPDATA}\Chromium\Application\chromium.exe"
-    )
-    foreach ($p in $candidates) {
-        if (Test-Path $p) { return $p }
-    }
-    # Edge — Chromium-based, agent-browser can use it
-    foreach ($p in @(
-        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe",
-        "C:\Program Files\Microsoft\Edge\Application\msedge.exe"
-    )) {
-        if (Test-Path $p) { return $p }
-    }
-    return $null
-}
-
-function Write-BrowserEnv {
-    param([string]$BrowserPath)
-    $envFile = Join-Path $HermesHome ".env"
-    New-Item -ItemType Directory -Force -Path $HermesHome | Out-Null
-    if (Test-Path $envFile) {
-        $existing = Get-Content $envFile -Raw -ErrorAction SilentlyContinue
-        if ($existing -and ($existing -match "(?m)^AGENT_BROWSER_EXECUTABLE_PATH=")) {
-            return
-        }
-    }
-    Add-Content -Path $envFile -Value ""
-    Add-Content -Path $envFile -Value "# Hermes Agent browser tools — use the system Chrome/Chromium/Edge binary."
-    Add-Content -Path $envFile -Value "AGENT_BROWSER_EXECUTABLE_PATH=$BrowserPath"
-    Write-Success "Configured browser tools to use $BrowserPath"
-}
-
-function Confirm-ChromiumDownload {
-    if ($Yes) { return $true }
-    if (-not [Environment]::UserInteractive) {
-        Write-Warn "Non-interactive shell — skipping Chromium prompt."
-        Write-Info "Re-run with -Yes to install Chromium (~400 MB download)."
-        return $false
-    }
-    $reply = Read-Host "Install Playwright Chromium (~400 MB download)? [y/N]"
-    return ($reply -match "^(y|yes)$")
-}
-
-function Ensure-Chromium {
-    if ($SkipChromium) {
-        Write-Info "Skipping Chromium install (-SkipChromium)"
-        return
-    }
-
-    # agent-browser on Windows expects a Playwright-managed Chromium under
-    # %LOCALAPPDATA%\ms-playwright. The system-browser shortcut from the
-    # Linux/macOS path doesn't apply the same way on Windows — Playwright's
-    # default launch path won't pick up a stock Chrome install without an
-    # explicit AGENT_BROWSER_EXECUTABLE_PATH. We still offer it as a
-    # fallback when the user doesn't want the download.
-
-    if (-not (Confirm-ChromiumDownload)) {
-        $sys = Find-SystemBrowser
-        if ($sys) {
-            Write-Info "Using system browser at $sys (Chromium download skipped)."
-            Write-BrowserEnv -BrowserPath $sys
-        } else {
-            Write-Info "Chromium install skipped. Browser tools won't launch until"
-            Write-Info "Chromium is installed or AGENT_BROWSER_EXECUTABLE_PATH is set."
-        }
-        return
-    }
-
-    $npxExe = Resolve-NpxExe
-    if (-not $npxExe) {
-        Write-Err "npx not on PATH — cannot install Playwright Chromium"
-        throw "npx missing"
-    }
-
-    Write-Info "Installing Playwright Chromium (~400 MB) ..."
-    & $npxExe --yes playwright install chromium
-    if ($LASTEXITCODE -ne 0) {
-        Write-Err "Playwright Chromium install failed (exit $LASTEXITCODE)"
-        Write-Info "Try again later: npx --yes playwright install chromium"
-        throw "playwright"
-    }
-    Write-Success "Playwright Chromium installed"
-}
-
-# ─────────────────────────────────────────────────────────────────────────
-# Main
-# ─────────────────────────────────────────────────────────────────────────
-
-Write-Info "Hermes Agent: bootstrapping browser tools"
-Write-Info "  HERMES_HOME = $HermesHome"
-Write-Info "  OS          = Windows"
-
-Ensure-Node
-Ensure-AgentBrowser
-Ensure-Chromium
-
-Write-Success "Browser tools setup complete."
-Write-Info "Hermes Agent will pick up agent-browser from $NodePrefix on next launch."
@@ -1,399 +0,0 @@
-#!/usr/bin/env bash
-#
-# bootstrap_browser_tools.sh — install agent-browser + Playwright Chromium
-# into ~/.hermes/node/ for use by Hermes Agent's browser tools.
-#
-# Targets the registry-install path: users who got Hermes via
-# `uvx --from 'hermes-agent[acp]==X' hermes-acp` don't have a repo clone,
-# so the install.sh `npm install`-in-repo flow doesn't apply. This script
-# is a self-contained, idempotent slice of install.sh's browser block —
-# safe to run from `hermes-acp --setup-browser`, from a fresh terminal,
-# or from install.sh itself (it's a no-op when everything is already in place).
-#
-# Usage:
-#   bootstrap_browser_tools.sh           # use defaults
-#   bootstrap_browser_tools.sh --yes     # accept the ~400MB Chromium download
-#   bootstrap_browser_tools.sh --skip-chromium    # only install Node + agent-browser
-#   HERMES_HOME=/custom/path bootstrap_browser_tools.sh
-#
-# Idempotent: re-running this is safe and fast. Each step checks whether
-# the work is already done.
-
-set -euo pipefail
-
-# ─────────────────────────────────────────────────────────────────────────
-# Config
-# ─────────────────────────────────────────────────────────────────────────
-
-NODE_VERSION="22"
-HERMES_HOME="${HERMES_HOME:-$HOME/.hermes}"
-NODE_PREFIX="$HERMES_HOME/node"
-
-SKIP_CHROMIUM=false
-ASSUME_YES=false
-
-# ─────────────────────────────────────────────────────────────────────────
-# Logging
-# ─────────────────────────────────────────────────────────────────────────
-
-if [ -t 1 ]; then
-    C_GREEN='\033[0;32m'
-    C_YELLOW='\033[0;33m'
-    C_BLUE='\033[0;34m'
-    C_RED='\033[0;31m'
-    C_RESET='\033[0m'
-else
-    C_GREEN='' ; C_YELLOW='' ; C_BLUE='' ; C_RED='' ; C_RESET=''
-fi
-
-log_info()    { printf "${C_BLUE}[*]${C_RESET} %s\n"  "$*"; }
-log_success() { printf "${C_GREEN}[✓]${C_RESET} %s\n" "$*"; }
-log_warn()    { printf "${C_YELLOW}[!]${C_RESET} %s\n" "$*" >&2; }
-log_error()   { printf "${C_RED}[✗]${C_RESET} %s\n"   "$*" >&2; }
-
-# ─────────────────────────────────────────────────────────────────────────
-# Arg parsing
-# ─────────────────────────────────────────────────────────────────────────
-
-while [ $# -gt 0 ]; do
-    case "$1" in
-        --skip-chromium) SKIP_CHROMIUM=true ;;
-        --yes|-y)        ASSUME_YES=true ;;
-        -h|--help)
-            cat <<EOF
-Bootstrap Hermes Agent browser tools.
-
-Installs Node.js (into ~/.hermes/node/), the agent-browser npm package,
-and the Playwright Chromium browser engine.
-
-Options:
-  --skip-chromium   Install Node + agent-browser but skip Chromium download
-  --yes, -y         Accept the ~400 MB Chromium download without prompting
-  -h, --help        Show this help
-
-Environment:
-  HERMES_HOME       Override Hermes data dir (default: \$HOME/.hermes)
-EOF
-            exit 0
-            ;;
-        *)
-            log_error "Unknown option: $1"
-            exit 2
-            ;;
-    esac
-    shift
-done
-
-# ─────────────────────────────────────────────────────────────────────────
-# OS / arch detection
-# ─────────────────────────────────────────────────────────────────────────
-
-OS="unknown"
-case "$(uname -s)" in
-    Linux*)  OS="linux"  ;;
-    Darwin*) OS="macos"  ;;
-    *)
-        log_error "Unsupported OS: $(uname -s)"
-        log_info "Windows users: run scripts/bootstrap_browser_tools.ps1 in PowerShell."
-        exit 1
-        ;;
-esac
-
-NODE_ARCH=""
-case "$(uname -m)" in
-    x86_64)         NODE_ARCH="x64"    ;;
-    aarch64|arm64)  NODE_ARCH="arm64"  ;;
-    armv7l)         NODE_ARCH="armv7l" ;;
-    *)
-        log_error "Unsupported architecture: $(uname -m)"
-        exit 1
-        ;;
-esac
-
-NODE_OS=""
-case "$OS" in
-    linux) NODE_OS="linux"  ;;
-    macos) NODE_OS="darwin" ;;
-esac
-
-DISTRO=""
-if [ -f /etc/os-release ]; then
-    # shellcheck disable=SC1091
-    . /etc/os-release
-    DISTRO="${ID:-}"
-fi
-
-# ─────────────────────────────────────────────────────────────────────────
-# Step 1: Node.js
-# ─────────────────────────────────────────────────────────────────────────
-
-ensure_node() {
-    # Already on PATH and recent enough?
-    if command -v node >/dev/null 2>&1; then
-        local found_ver major
-        found_ver=$(node --version 2>/dev/null)
-        major=$(echo "$found_ver" | sed -E 's/^v([0-9]+).*/\1/')
-        if [ -n "$major" ] && [ "$major" -ge 20 ]; then
-            log_success "Node.js $found_ver found on PATH"
-            return 0
-        fi
-        log_warn "Node.js $found_ver is older than v20 — installing managed Node."
-    fi
-
-    if [ -x "$NODE_PREFIX/bin/node" ]; then
-        local found_ver
-        found_ver=$("$NODE_PREFIX/bin/node" --version 2>/dev/null || echo "?")
-        export PATH="$NODE_PREFIX/bin:$PATH"
-        log_success "Node.js $found_ver found (Hermes-managed at $NODE_PREFIX)"
-        return 0
-    fi
-
-    log_info "Installing Node.js $NODE_VERSION LTS into $NODE_PREFIX ..."
-
-    local index_url="https://nodejs.org/dist/latest-v${NODE_VERSION}.x/"
-    local tarball_name
-    tarball_name=$(curl -fsSL "$index_url" \
-        | grep -oE "node-v${NODE_VERSION}\.[0-9]+\.[0-9]+-${NODE_OS}-${NODE_ARCH}\.tar\.xz" \
-        | head -1)
-
-    if [ -z "$tarball_name" ]; then
-        tarball_name=$(curl -fsSL "$index_url" \
-            | grep -oE "node-v${NODE_VERSION}\.[0-9]+\.[0-9]+-${NODE_OS}-${NODE_ARCH}\.tar\.gz" \
-            | head -1)
-    fi
-
-    if [ -z "$tarball_name" ]; then
-        log_error "Could not locate Node.js $NODE_VERSION tarball for $NODE_OS-$NODE_ARCH"
-        log_info "Install Node 20+ manually: https://nodejs.org/en/download/"
-        return 1
-    fi
-
-    local tmp_dir
-    tmp_dir=$(mktemp -d)
-    trap 'rm -rf "$tmp_dir"' RETURN
-
-    log_info "Downloading $tarball_name ..."
-    if ! curl -fsSL "${index_url}${tarball_name}" -o "$tmp_dir/$tarball_name"; then
-        log_error "Node.js download failed"
-        return 1
-    fi
-
-    if [[ "$tarball_name" == *.tar.xz ]]; then
-        tar xf "$tmp_dir/$tarball_name" -C "$tmp_dir"
-    else
-        tar xzf "$tmp_dir/$tarball_name" -C "$tmp_dir"
-    fi
-
-    local extracted_dir
-    extracted_dir=$(ls -d "$tmp_dir"/node-v* 2>/dev/null | head -1)
-    if [ ! -d "$extracted_dir" ]; then
-        log_error "Node.js extraction failed"
-        return 1
-    fi
-
-    mkdir -p "$HERMES_HOME"
-    rm -rf "$NODE_PREFIX"
-    mv "$extracted_dir" "$NODE_PREFIX"
-
-    export PATH="$NODE_PREFIX/bin:$PATH"
-
-    local installed_ver
-    installed_ver=$("$NODE_PREFIX/bin/node" --version 2>/dev/null || echo "?")
-    log_success "Node.js $installed_ver installed to $NODE_PREFIX"
-}
-
-# ─────────────────────────────────────────────────────────────────────────
-# Step 2: agent-browser + @askjo/camofox-browser via global npm install
-# ─────────────────────────────────────────────────────────────────────────
-
-ensure_agent_browser() {
-    if ! command -v npm >/dev/null 2>&1; then
-        log_error "npm not on PATH after Node install — aborting"
-        return 1
-    fi
-
-    # _find_agent_browser() in tools/browser_tool.py walks ~/.hermes/node/bin
-    # plus a few standard prefixes, so installing globally into the managed
-    # Node prefix is enough — no PATH manipulation needed from the agent side.
-    if [ -x "$NODE_PREFIX/bin/agent-browser" ] || command -v agent-browser >/dev/null 2>&1; then
-        log_success "agent-browser already installed"
-        return 0
-    fi
-
-    # When the system's `npm` resolves to a root-owned prefix (e.g.
-    # /usr/lib/node_modules), `npm install -g` fails with EACCES without
-    # sudo. Force the prefix to the user-writable Hermes-managed Node
-    # directory so we never need sudo and the agent can always find the
-    # result. If we installed Node ourselves above, this is a no-op
-    # (managed Node already uses $NODE_PREFIX). If the user has system
-    # Node, we still drop agent-browser under $NODE_PREFIX/bin/ — which
-    # is exactly where _browser_candidate_path_dirs() looks first.
-    mkdir -p "$NODE_PREFIX"
-
-    log_info "Installing agent-browser (npm, prefix=$NODE_PREFIX)..."
-    if ! npm install -g --prefix "$NODE_PREFIX" --silent \
-            agent-browser@^0.26.0 \
-            "@askjo/camofox-browser@^1.5.2"; then
-        log_error "npm install -g agent-browser failed"
-        return 1
-    fi
-
-    # macOS/Linux global installs place the shim into $NODE_PREFIX/bin/.
-    # Add it to PATH for any subsequent steps (npx playwright).
-    export PATH="$NODE_PREFIX/bin:$PATH"
-
-    log_success "agent-browser installed to $NODE_PREFIX/bin/"
-}
-
-# ─────────────────────────────────────────────────────────────────────────
-# Step 3: Playwright Chromium
-# ─────────────────────────────────────────────────────────────────────────
-
-confirm_chromium_download() {
-    if [ "$ASSUME_YES" = true ]; then return 0; fi
-    if [ ! -t 0 ]; then
-        log_warn "Non-interactive shell — skipping Chromium prompt."
-        log_info "Re-run with --yes to install Chromium (~400 MB download)."
-        return 1
-    fi
-    printf "Install Playwright Chromium (~400 MB download)? [y/N] "
-    local reply=""
-    read -r reply || reply=""
-    case "$reply" in
-        y|Y|yes|YES) return 0 ;;
-        *) return 1 ;;
-    esac
-}
-
-# Detect a usable system Chrome/Chromium. agent-browser's Chrome engine can
-# use it instead of downloading Playwright's bundled Chromium, saving the
-# download cost. Returns the path or empty string.
-find_system_browser() {
-    local candidate
-    for candidate in google-chrome google-chrome-stable chromium chromium-browser chrome; do
-        if command -v "$candidate" >/dev/null 2>&1; then
-            command -v "$candidate"
-            return 0
-        fi
-    done
-    # macOS app-bundle locations
-    if [ "$OS" = "macos" ]; then
-        for candidate in \
-            "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" \
-            "/Applications/Chromium.app/Contents/MacOS/Chromium" ; do
-            if [ -x "$candidate" ]; then
-                echo "$candidate"
-                return 0
-            fi
-        done
-    fi
-    return 1
-}
-
-write_browser_env() {
-    local browser_path="$1"
-    local env_file="$HERMES_HOME/.env"
-    mkdir -p "$HERMES_HOME"
-    if [ -f "$env_file" ] && grep -q "^AGENT_BROWSER_EXECUTABLE_PATH=" "$env_file"; then
-        return 0
-    fi
-    {
-        echo ""
-        echo "# Hermes Agent browser tools — use the system Chrome/Chromium binary."
-        echo "AGENT_BROWSER_EXECUTABLE_PATH=$browser_path"
-    } >> "$env_file"
-    log_success "Configured browser tools to use $browser_path"
-}
-
-ensure_chromium() {
-    if [ "$SKIP_CHROMIUM" = true ]; then
-        log_info "Skipping Chromium install (--skip-chromium)"
-        return 0
-    fi
-
-    local system_browser
-    system_browser="$(find_system_browser 2>/dev/null || true)"
-    if [ -n "$system_browser" ]; then
-        log_success "Found system browser: $system_browser"
-        log_info "Skipping Playwright Chromium download; agent-browser will use it."
-        write_browser_env "$system_browser"
-        return 0
-    fi
-
-    if ! confirm_chromium_download; then
-        log_info "Chromium install skipped. Browser tools will only work if you"
-        log_info "set AGENT_BROWSER_EXECUTABLE_PATH or install Chromium later."
-        return 0
-    fi
-
-    if ! command -v npx >/dev/null 2>&1; then
-        log_error "npx not on PATH — cannot install Playwright Chromium"
-        return 1
-    fi
-
-    log_info "Installing Playwright Chromium (~400 MB) ..."
-
-    # On apt-based distros, --with-deps requires sudo. Try non-interactively
-    # only — never prompt — and fall back to the bare browser-only install.
-    local installed=false
-    if [ "$OS" = "linux" ]; then
-        case "$DISTRO" in
-            ubuntu|debian|raspbian|pop|linuxmint|elementary|zorin|kali|parrot)
-                if [ "$(id -u)" -eq 0 ] || (command -v sudo >/dev/null 2>&1 && sudo -n true 2>/dev/null); then
-                    log_info "Installing system deps with --with-deps (sudo available)"
-                    if npx --yes playwright install --with-deps chromium; then
-                        installed=true
-                    fi
-                else
-                    log_warn "sudo not available non-interactively — installing Chromium without system deps."
-                    log_info "If browser tools fail to launch, an administrator should run:"
-                    log_info "  sudo npx playwright install-deps chromium"
-                fi
-                ;;
-            arch|manjaro|cachyos|endeavouros|garuda)
-                log_info "Arch-family system dependencies are not auto-installed."
-                log_info "If launch fails, run: sudo pacman -S nss atk at-spi2-core cups libdrm libxkbcommon mesa pango cairo alsa-lib"
-                ;;
-            fedora|rhel|centos|rocky|alma)
-                log_info "Fedora/RHEL system dependencies are not auto-installed."
-                log_info "If launch fails, run: sudo dnf install nss atk at-spi2-core cups-libs libdrm libxkbcommon mesa-libgbm pango cairo alsa-lib"
-                ;;
-            opensuse*|sles)
-                log_info "openSUSE system dependencies are not auto-installed."
-                ;;
-        esac
-    fi
-
-    if [ "$installed" = false ]; then
-        if npx --yes playwright install chromium; then
-            installed=true
-        fi
-    fi
-
-    if [ "$installed" = true ]; then
-        log_success "Playwright Chromium installed"
-    else
-        log_error "Playwright Chromium install failed"
-        log_info "Try again later: npx --yes playwright install chromium"
-        return 1
-    fi
-}
-
-# ─────────────────────────────────────────────────────────────────────────
-# Main
-# ─────────────────────────────────────────────────────────────────────────
-
-main() {
-    log_info "Hermes Agent: bootstrapping browser tools"
-    log_info "  HERMES_HOME = $HERMES_HOME"
-    log_info "  OS / arch   = $NODE_OS-$NODE_ARCH ${DISTRO:+($DISTRO)}"
-
-    ensure_node
-    ensure_agent_browser
-    ensure_chromium
-
-    log_success "Browser tools setup complete."
-    log_info "Hermes Agent will pick up agent-browser from $NODE_PREFIX/bin/ on next launch."
-}
-
-main
@@ -24,7 +24,6 @@ except ModuleNotFoundError:
    # means UTF-8 stdio setup is skipped on Windows; POSIX is unaffected.
    pass

-import argparse
 import asyncio
 import logging
 import sys
@@ -108,150 +107,8 @@ def _load_env() -> None:
        )


-def _parse_args(argv: list[str] | None = None) -> argparse.Namespace:
-    parser = argparse.ArgumentParser(
-        prog="hermes-acp",
-        description="Run Hermes Agent as an ACP stdio server.",
-    )
-    parser.add_argument("--version", action="store_true", help="Print Hermes version and exit")
-    parser.add_argument(
-        "--check",
-        action="store_true",
-        help="Verify ACP dependencies and adapter imports, then exit",
-    )
-    parser.add_argument(
-        "--setup",
-        action="store_true",
-        help="Run interactive Hermes provider/model setup for ACP terminal auth",
-    )
-    parser.add_argument(
-        "--setup-browser",
-        action="store_true",
-        help="Install agent-browser + Playwright Chromium into ~/.hermes/node/ "
-             "for browser tool support. Idempotent.",
-    )
-    parser.add_argument(
-        "--yes",
-        "-y",
-        action="store_true",
-        dest="assume_yes",
-        help="Accept all prompts (currently used by --setup-browser to skip the "
-             "~400 MB Chromium download confirmation).",
-    )
-    return parser.parse_args(argv)
-
-
-def _print_version() -> None:
-    from hermes_cli import __version__ as hermes_version
-
-    print(hermes_version)
-
-
-def _run_check() -> None:
-    import acp  # noqa: F401
-    from acp_adapter.server import HermesACPAgent  # noqa: F401
-
-    print("Hermes ACP check OK")
-
-
-def _run_setup() -> None:
-    from hermes_cli.main import main as hermes_main
-
-    old_argv = sys.argv[:]
-    try:
-        sys.argv = [old_argv[0] if old_argv else "hermes", "model"]
-        hermes_main()
-    finally:
-        sys.argv = old_argv
-
-    # Offer browser-tools install as a follow-up. The terminal auth method
-    # is the one supported first-run UX for registry installs, so this is
-    # the natural moment to ask. Skip silently if stdin isn't a TTY (the
-    # answer can't be collected anyway).
-    if not sys.stdin.isatty():
-        return
-    try:
-        reply = input(
-            "\nInstall browser tools? Downloads agent-browser (npm) and "
-            "optionally Playwright Chromium (~400 MB). [y/N] "
-        ).strip().lower()
-    except (EOFError, KeyboardInterrupt):
-        return
-    if reply in {"y", "yes"}:
-        _run_setup_browser(assume_yes=False)
-
-
-def _run_setup_browser(assume_yes: bool = False) -> int:
-    """Bootstrap agent-browser + Playwright Chromium for the registry-install path.
-
-    Shells out to the bundled platform-specific bootstrap script
-    (acp_adapter/bootstrap/bootstrap_browser_tools.{sh,ps1}) so the install
-    logic lives in one place — readable, debuggable, and shareable with
-    install.sh / install.ps1 if we ever want to call it from there too.
-
-    Returns the script's exit code (0 on success).
-    """
-    import platform
-    import subprocess
-
-    bootstrap_dir = Path(__file__).resolve().parent / "bootstrap"
-
-    if platform.system() == "Windows":
-        script = bootstrap_dir / "bootstrap_browser_tools.ps1"
-        if not script.is_file():
-            print(
-                f"Bootstrap script not found at {script} — wheel may be incomplete.",
-                file=sys.stderr,
-            )
-            return 1
-        cmd = [
-            "powershell.exe",
-            "-NoProfile",
-            "-ExecutionPolicy", "Bypass",
-            "-File", str(script),
-        ]
-        if assume_yes:
-            cmd.append("-Yes")
-    else:
-        script = bootstrap_dir / "bootstrap_browser_tools.sh"
-        if not script.is_file():
-            print(
-                f"Bootstrap script not found at {script} — wheel may be incomplete.",
-                file=sys.stderr,
-            )
-            return 1
-        cmd = ["bash", str(script)]
-        if assume_yes:
-            cmd.append("--yes")
-
-    # stdio is inherited so the user sees the bootstrap's progress live.
-    try:
-        result = subprocess.run(cmd, check=False)
-    except FileNotFoundError as exc:
-        # bash / powershell.exe not on PATH
-        print(f"Could not launch browser bootstrap: {exc}", file=sys.stderr)
-        return 1
-    return result.returncode
-
-
-def main(argv: list[str] | None = None) -> None:
+def main() -> None:
    """Entry point: load env, configure logging, run the ACP agent."""
-    args = _parse_args(argv)
-    if args.version:
-        _print_version()
-        return
-    if args.check:
-        _run_check()
-        return
-    if args.setup:
-        _run_setup()
-        return
-    if args.setup_browser:
-        rc = _run_setup_browser(assume_yes=args.assume_yes)
-        if rc != 0:
-            sys.exit(rc)
-        return
-
    _setup_logging()
    _load_env()

@@ -14,7 +14,6 @@ from collections import deque
 from typing import Any, Callable, Deque, Dict

 import acp
-from acp.schema import AgentPlanUpdate, PlanEntry

 from .tools import (
    build_tool_complete,
@@ -25,65 +24,6 @@ from .tools import (
 logger = logging.getLogger(__name__)


-def _json_loads_maybe_prefix(value: str) -> Any:
-    """Parse a JSON object even when Hermes appended a human hint after it."""
-    text = value.strip()
-    try:
-        return json.loads(text)
-    except Exception:
-        decoder = json.JSONDecoder()
-        data, _ = decoder.raw_decode(text)
-        return data
-
-
-def _build_plan_update_from_todo_result(result: Any) -> AgentPlanUpdate | None:
-    """Translate Hermes' todo tool result into ACP's native plan update.
-
-    Zed renders ``sessionUpdate: plan`` as its first-class task/todo panel. The
-    Hermes agent already maintains task state through the ``todo`` tool, so the
-    ACP adapter should expose that state natively instead of only as a generic
-    tool-call transcript block.
-    """
-    if not isinstance(result, str) or not result.strip():
-        return None
-
-    try:
-        data = _json_loads_maybe_prefix(result)
-    except Exception:
-        return None
-
-    if not isinstance(data, dict) or not isinstance(data.get("todos"), list):
-        return None
-
-    todos = data["todos"]
-    if not todos:
-        return AgentPlanUpdate(session_update="plan", entries=[])
-
-    status_map = {
-        "pending": "pending",
-        "in_progress": "in_progress",
-        "completed": "completed",
-        # ACP plans only support pending/in_progress/completed. Preserve
-        # cancelled tasks as terminal entries instead of dropping them and
-        # making the client's full-list replacement lose visible context.
-        "cancelled": "completed",
-    }
-    entries: list[PlanEntry] = []
-    for item in todos:
-        if not isinstance(item, dict):
-            continue
-        content = str(item.get("content") or item.get("id") or "").strip()
-        if not content:
-            continue
-        raw_status = str(item.get("status") or "pending").strip()
-        status = status_map.get(raw_status, "pending")
-        if raw_status == "cancelled":
-            content = f"[cancelled] {content}"
-        entries.append(PlanEntry(content=content, priority="medium", status=status))
-
-    return AgentPlanUpdate(session_update="plan", entries=entries)
-
-
 def _send_update(
    conn: acp.Client,
    session_id: str,
@@ -91,17 +31,10 @@ def _send_update(
    update: Any,
 ) -> None:
    """Fire-and-forget an ACP session update from a worker thread."""
-    from agent.async_utils import safe_schedule_threadsafe
-
-    future = safe_schedule_threadsafe(
-        conn.session_update(session_id, update),
-        loop,
-        logger=logger,
-        log_message="Failed to send ACP update",
-    )
-    if future is None:
-        return
    try:
+        future = asyncio.run_coroutine_threadsafe(
+            conn.session_update(session_id, update), loop
+        )
        future.result(timeout=5)
    except Exception:
        logger.debug("Failed to send ACP update", exc_info=True)
@@ -235,10 +168,6 @@ def make_step_cb(
                        snapshot=meta.get("snapshot"),
                    )
                    _send_update(conn, session_id, loop, update)
-                    if tool_name == "todo":
-                        plan_update = _build_plan_update_from_todo_result(result)
-                        if plan_update is not None:
-                            _send_update(conn, session_id, loop, plan_update)
                    if not queue:
                        tool_call_ids.pop(tool_name, None)

@@ -111,28 +111,21 @@ def make_approval_callback(
        allow_permanent: bool = True,
        **_: object,
    ) -> str:
-        from agent.async_utils import safe_schedule_threadsafe
-
        options = _build_permission_options(allow_permanent=allow_permanent)

-        tool_call = _build_permission_tool_call(command, description)
-        coro = request_permission_fn(
-            session_id=session_id,
-            tool_call=tool_call,
-            options=options,
-        )
-        future = safe_schedule_threadsafe(
-            coro, loop,
-            logger=logger,
-            log_message="Permission request: failed to schedule on loop",
-        )
-        if future is None:
-            return "deny"
-
+        future = None
        try:
+            tool_call = _build_permission_tool_call(command, description)
+            coro = request_permission_fn(
+                session_id=session_id,
+                tool_call=tool_call,
+                options=options,
+            )
+            future = asyncio.run_coroutine_threadsafe(coro, loop)
            response = future.result(timeout=timeout)
        except (FutureTimeout, Exception) as exc:
-            future.cancel()
+            if future is not None:
+                future.cancel()
            logger.warning("Permission request timed out or failed: %s", exc)
            return "deny"

@@ -18,7 +18,6 @@ import acp
 from acp.schema import (
    AgentCapabilities,
    AgentMessageChunk,
-    AgentThoughtChunk,
    AuthenticateResponse,
    AvailableCommand,
    AvailableCommandsUpdate,
@@ -58,9 +57,14 @@ from acp.schema import (
    UserMessageChunk,
 )

-from acp_adapter.auth import TERMINAL_SETUP_AUTH_METHOD_ID, build_auth_methods, detect_provider
+# AuthMethodAgent was renamed from AuthMethod in agent-client-protocol 0.9.0
+try:
+    from acp.schema import AuthMethodAgent
+except ImportError:
+    from acp.schema import AuthMethod as AuthMethodAgent  # type: ignore[attr-defined]
+
+from acp_adapter.auth import detect_provider
 from acp_adapter.events import (
-    _build_plan_update_from_todo_result,
    make_message_cb,
    make_step_cb,
    make_thinking_cb,
@@ -740,7 +744,16 @@ class HermesACPAgent(acp.Agent):
        resolved_protocol_version = (
            protocol_version if isinstance(protocol_version, int) else acp.PROTOCOL_VERSION
        )
-        auth_methods = build_auth_methods()
+        provider = detect_provider()
+        auth_methods = None
+        if provider:
+            auth_methods = [
+                AuthMethodAgent(
+                    id=provider,
+                    name=f"{provider} runtime credentials",
+                    description=f"Authenticate Hermes using the currently configured {provider} runtime credentials.",
+                )
+            ]

        client_name = client_info.name if client_info else "unknown"
        logger.info(
@@ -771,38 +784,24 @@ class HermesACPAgent(acp.Agent):
        # server has provider credentials configured — harmless under
        # Hermes' threat model (ACP is stdio-only, local-trust), but poor
        # API hygiene and confusing if ACP ever grows multi-method auth.
-        if not isinstance(method_id, str):
-            return None
-        normalized_method = method_id.strip().lower()
        provider = detect_provider()
-
-        if normalized_method == TERMINAL_SETUP_AUTH_METHOD_ID:
-            # Terminal auth launches Hermes setup/model selection out-of-band.
-            # Only report success once that flow has produced usable runtime
-            # credentials for the normal ACP session.
-            return AuthenticateResponse() if provider else None
-
-        if not provider or normalized_method != provider:
+        if not provider:
+            return None
+        if not isinstance(method_id, str) or method_id.strip().lower() != provider:
            return None
        return AuthenticateResponse()

    # ---- Session management -------------------------------------------------

    @staticmethod
-    def _flatten_history_text(value: Any) -> str:
-        """Normalize a persisted text-or-text-parts value into a single string.
-
-        OpenAI-style assistant content (and provider reasoning fields) can arrive
-        as either a scalar string or a list of ``{"text": ...}`` /
-        ``{"type": "text", "content": ...}`` parts. Whitespace-only inputs
-        collapse to an empty string so callers can treat ``""`` as "nothing to
-        emit".
-        """
-        if isinstance(value, str):
-            return value.strip()
-        if isinstance(value, list):
+    def _history_message_text(message: dict[str, Any]) -> str:
+        """Extract displayable text from a persisted OpenAI-style message."""
+        content = message.get("content")
+        if isinstance(content, str):
+            return content.strip()
+        if isinstance(content, list):
            parts: list[str] = []
-            for item in value:
+            for item in content:
                if isinstance(item, dict):
                    text = item.get("text")
                    if isinstance(text, str):
@@ -814,29 +813,6 @@ class HermesACPAgent(acp.Agent):
            return "\n".join(part.strip() for part in parts if part and part.strip()).strip()
        return ""

-    @classmethod
-    def _history_message_text(cls, message: dict[str, Any]) -> str:
-        """Extract displayable text from a persisted OpenAI-style message."""
-        return cls._flatten_history_text(message.get("content"))
-
-    @classmethod
-    def _history_reasoning_text(cls, message: dict[str, Any]) -> str:
-        """Extract displayable reasoning/thought text from a persisted assistant message.
-
-        Returns the first non-empty value among ``reasoning_content`` (the
-        canonical field used by DeepSeek / Moonshot and the post-#16892
-        chat-completions normalizer) and ``reasoning`` (used by the codex
-        event projector and several other transports). Both keys are
-        actively written by live code paths, so neither branch is
-        deprecated — they cover different transports rather than old vs.
-        new sessions.
-        """
-        for key in ("reasoning_content", "reasoning"):
-            text = cls._flatten_history_text(message.get(key))
-            if text:
-                return text
-        return ""
-
    @staticmethod
    def _history_message_update(
        *,
@@ -857,11 +833,6 @@ class HermesACPAgent(acp.Agent):
            )
        return None

-    @staticmethod
-    def _history_thought_update(text: str) -> AgentThoughtChunk:
-        """Build an ACP history replay update for an assistant thought."""
-        return acp.update_agent_thought_text(text)
-
    @staticmethod
    def _history_tool_call_name_args(tool_call: dict[str, Any]) -> tuple[str, dict[str, Any]]:
        """Extract function name/arguments from an OpenAI-style tool_call."""
@@ -889,17 +860,13 @@ class HermesACPAgent(acp.Agent):
        ).strip()

    async def _replay_session_history(self, state: SessionState) -> None:
-        """Replay persisted user/assistant history during session/load or session/resume.
+        """Send persisted user/assistant history to clients during session/load.

-        Invoked inline (``await``) from both ``load_session`` and
-        ``resume_session`` so that spec-compliant ACP clients receive the
-        full transcript within the request's lifetime — see the comment at
-        the call sites for the rationale and prior-art citations.
-
-        Replays the conversation as user/assistant chunks, thinking-mode
-        thought chunks, plus reconstructed tool-call start/completion
-        notifications. Merely restoring server-side state makes Hermes
-        remember context, but leaves the editor looking like a clean thread.
+        Zed's ACP history UI calls ``session/load`` after the user picks an item
+        from the Agents sidebar. The agent must then replay the full conversation
+        as user/assistant chunks plus reconstructed tool-call start/completion
+        notifications; merely restoring server-side state makes Hermes remember
+        context, but leaves the editor looking like a clean thread.
        """
        if not self._conn or not state.history:
            return
@@ -921,37 +888,24 @@ class HermesACPAgent(acp.Agent):
        for message in state.history:
            role = str(message.get("role") or "")

-            if role == "user":
-                text = self._history_message_text(message)
-                if text:
-                    update = self._history_message_update(role=role, text=text)
-                    if update is not None and not await _send(update):
-                        return
-                continue
-
-            if role == "assistant":
-                thought = self._history_reasoning_text(message)
-                if thought and not await _send(self._history_thought_update(thought)):
-                    return
-
+            if role in {"user", "assistant"}:
                text = self._history_message_text(message)
                if text:
                    update = self._history_message_update(role=role, text=text)
                    if update is not None and not await _send(update):
                        return

-                tool_calls = message.get("tool_calls")
-                if isinstance(tool_calls, list):
-                    for tool_call in tool_calls:
-                        if not isinstance(tool_call, dict):
-                            continue
-                        tool_call_id = self._history_tool_call_id(tool_call)
-                        if not tool_call_id:
-                            continue
-                        tool_name, args = self._history_tool_call_name_args(tool_call)
-                        active_tool_calls[tool_call_id] = (tool_name, args)
-                        if not await _send(build_tool_start(tool_call_id, tool_name, args)):
-                            return
+            if role == "assistant" and isinstance(message.get("tool_calls"), list):
+                for tool_call in message["tool_calls"]:
+                    if not isinstance(tool_call, dict):
+                        continue
+                    tool_call_id = self._history_tool_call_id(tool_call)
+                    if not tool_call_id:
+                        continue
+                    tool_name, args = self._history_tool_call_name_args(tool_call)
+                    active_tool_calls[tool_call_id] = (tool_name, args)
+                    if not await _send(build_tool_start(tool_call_id, tool_name, args)):
+                        return
                continue

            if role == "tool":
@@ -963,20 +917,15 @@ class HermesACPAgent(acp.Agent):
                if not tool_call_id or not tool_name:
                    continue
                result = message.get("content")
-                result_text = result if isinstance(result, str) else None
                if not await _send(
                    build_tool_complete(
                        tool_call_id,
                        tool_name,
-                        result=result_text,
+                        result=result if isinstance(result, str) else None,
                        function_args=function_args,
                    )
                ):
                    return
-                if tool_name == "todo":
-                    plan_update = _build_plan_update_from_todo_result(result_text)
-                    if plan_update is not None and not await _send(plan_update):
-                        return

    async def new_session(
        self,
@@ -994,6 +943,18 @@ class HermesACPAgent(acp.Agent):
            models=self._build_model_state(state),
        )

+    def _schedule_history_replay(self, state: SessionState) -> None:
+        """Replay persisted history after session/load or session/resume returns.
+
+        Zed only attaches streamed transcript/tool updates once the load/resume
+        response has completed. Sending replay notifications while the request is
+        still in-flight can make the server look correct in logs while the editor
+        drops or fails to attach the tool-call history.
+        """
+        loop = asyncio.get_running_loop()
+        replay_coro = self._replay_session_history(state)
+        loop.call_soon(asyncio.create_task, replay_coro)
+
    async def load_session(
        self,
        cwd: str,
@@ -1007,30 +968,7 @@ class HermesACPAgent(acp.Agent):
            return None
        await self._register_session_mcp_servers(state, mcp_servers)
        logger.info("Loaded session %s", session_id)
-        # Per ACP spec, `session/load` must stream the prior conversation back
-        # to the client via `session/update` notifications BEFORE responding,
-        # so the client receives the full transcript within the load request's
-        # lifetime. Awaiting the replay here matches Codex / Claude Code /
-        # OpenCode / Pi and the Zed client (which registers the session-update
-        # routing entry before awaiting the loadSession RPC specifically so
-        # in-call history replay updates can find the thread). Deferring this
-        # via `loop.call_soon` (as we did briefly in May 2026) broke every
-        # spec-compliant ACP client that measures notifications synchronously
-        # against the load response — see #12285 follow-up.
-        try:
-            await self._replay_session_history(state)
-        except Exception:
-            # Replay is best-effort — a corrupted or unexpected message shape
-            # must not turn a successful session/load into a JSON-RPC error
-            # response. Per-notification failures are already caught inside
-            # ``_replay_session_history``; this outer guard covers anything
-            # raised by the helpers themselves before reaching ``_send``.
-            logger.warning(
-                "ACP history replay raised during session/load for %s — "
-                "load will still succeed, partial transcript may be missing",
-                session_id,
-                exc_info=True,
-            )
+        self._schedule_history_replay(state)
        self._schedule_available_commands_update(session_id)
        self._schedule_usage_update(state)
        return LoadSessionResponse(models=self._build_model_state(state))
@@ -1048,18 +986,7 @@ class HermesACPAgent(acp.Agent):
            state = self.session_manager.create_session(cwd=cwd)
        await self._register_session_mcp_servers(state, mcp_servers)
        logger.info("Resumed session %s", state.session_id)
-        # See `load_session` above for the spec rationale — replay must
-        # complete before the response so clients receive the full transcript
-        # within the request's lifetime.
-        try:
-            await self._replay_session_history(state)
-        except Exception:
-            logger.warning(
-                "ACP history replay raised during session/resume for %s — "
-                "resume will still succeed, partial transcript may be missing",
-                state.session_id,
-                exc_info=True,
-            )
+        self._schedule_history_replay(state)
        self._schedule_available_commands_update(state.session_id)
        self._schedule_usage_update(state)
        return ResumeSessionResponse(models=self._build_model_state(state))
@@ -1,16 +1,12 @@
 {
-  "id": "hermes-agent",
-  "name": "Hermes Agent",
-  "version": "0.13.0",
-  "description": "Self-improving open-source AI agent by Nous Research with ACP editor integration, persistent memory, skills, and rich tool support.",
-  "repository": "https://github.com/NousResearch/hermes-agent",
-  "website": "https://hermes-agent.nousresearch.com/docs/user-guide/features/acp",
-  "authors": ["Nous Research"],
-  "license": "MIT",
+  "schema_version": 1,
+  "name": "hermes-agent",
+  "display_name": "Hermes Agent",
+  "description": "AI agent by Nous Research with 90+ tools, persistent memory, and multi-platform support",
+  "icon": "icon.svg",
  "distribution": {
-    "uvx": {
-      "package": "hermes-agent[acp]==0.13.0",
-      "args": ["hermes-acp"]
-    }
+    "type": "command",
+    "command": "hermes",
+    "args": ["acp"]
  }
 }
@@ -1,8 +1,25 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" width="16" height="16" fill="none">
-  <path d="M8 1.5v13" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
-  <path d="M8 3.25c-2.35-1.4-4.7-.95-6.25.35 1.85-.2 3.8.2 5.55 1.55" stroke="currentColor" stroke-width="1.1" stroke-linecap="round" stroke-linejoin="round"/>
-  <path d="M8 3.25c2.35-1.4 4.7-.95 6.25.35-1.85-.2-3.8.2-5.55 1.55" stroke="currentColor" stroke-width="1.1" stroke-linecap="round" stroke-linejoin="round"/>
-  <path d="M8 13.25c-2.3-1-3.05-2.65-1.35-4.15-2 .8-2.35 2.95-.35 4" stroke="currentColor" stroke-width="1.1" stroke-linecap="round" stroke-linejoin="round"/>
-  <path d="M8 13.25c2.3-1 3.05-2.65 1.35-4.15 2 .8 2.35 2.95.35 4" stroke="currentColor" stroke-width="1.1" stroke-linecap="round" stroke-linejoin="round"/>
-  <circle cx="8" cy="1.8" r="1.1" fill="currentColor"/>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64">
+  <defs>
+    <linearGradient id="gold" x1="0%" y1="0%" x2="0%" y2="100%">
+      <stop offset="0%" style="stop-color:#F5C542;stop-opacity:1" />
+      <stop offset="100%" style="stop-color:#D4961C;stop-opacity:1" />
+    </linearGradient>
+  </defs>
+  <!-- Staff -->
+  <rect x="30" y="10" width="4" height="46" rx="2" fill="url(#gold)" />
+  <!-- Wings (left) -->
+  <path d="M30 18 C24 14, 14 14, 10 18 C14 16, 22 16, 28 20" fill="#F5C542" opacity="0.9" />
+  <path d="M30 22 C26 19, 18 19, 14 22 C18 20, 24 20, 28 24" fill="#D4961C" opacity="0.8" />
+  <!-- Wings (right) -->
+  <path d="M34 18 C40 14, 50 14, 54 18 C50 16, 42 16, 36 20" fill="#F5C542" opacity="0.9" />
+  <path d="M34 22 C38 19, 46 19, 50 22 C46 20, 40 20, 36 24" fill="#D4961C" opacity="0.8" />
+  <!-- Left serpent -->
+  <path d="M32 48 C22 44, 20 38, 26 34 C20 36, 18 42, 24 46 C18 40, 22 30, 30 28 C24 32, 22 38, 28 42"
+        fill="none" stroke="#F5C542" stroke-width="2.5" stroke-linecap="round" />
+  <!-- Right serpent -->
+  <path d="M32 48 C42 44, 44 38, 38 34 C44 36, 46 42, 40 46 C46 40, 42 30, 34 28 C40 32, 42 38, 36 42"
+        fill="none" stroke="#D4961C" stroke-width="2.5" stroke-linecap="round" />
+  <!-- Orb at top -->
+  <circle cx="32" cy="10" r="4" fill="#F5C542" />
+  <circle cx="32" cy="10" r="2" fill="#FFF8E1" opacity="0.7" />
 </svg>
@@ -1060,12 +1060,10 @@ def _generate_pkce() -> tuple:

 def run_hermes_oauth_login_pure() -> Optional[Dict[str, Any]]:
    """Run Hermes-native OAuth PKCE flow and return credential state."""
-    import secrets
    import time
    import webbrowser

    verifier, challenge = _generate_pkce()
-    oauth_state = secrets.token_urlsafe(32)

    params = {
        "code": "true",
@@ -1075,7 +1073,7 @@ def run_hermes_oauth_login_pure() -> Optional[Dict[str, Any]]:
        "scope": _OAUTH_SCOPES,
        "code_challenge": challenge,
        "code_challenge_method": "S256",
-        "state": oauth_state,
+        "state": verifier,
    }
    from urllib.parse import urlencode

@@ -1112,12 +1110,7 @@ def run_hermes_oauth_login_pure() -> Optional[Dict[str, Any]]:

    splits = auth_code.split("#")
    code = splits[0]
-    received_state = splits[1] if len(splits) > 1 else ""
-
-    # Validate state to prevent CSRF (RFC 6749 §10.12)
-    if received_state != oauth_state:
-        logger.warning("OAuth state mismatch — possible CSRF, aborting")
-        return None
+    state = splits[1] if len(splits) > 1 else ""

    try:
        import urllib.request
@@ -1126,7 +1119,7 @@ def run_hermes_oauth_login_pure() -> Optional[Dict[str, Any]]:
            "grant_type": "authorization_code",
            "client_id": _OAUTH_CLIENT_ID,
            "code": code,
-            "state": received_state,
+            "state": state,
            "redirect_uri": _OAUTH_REDIRECT_URI,
            "code_verifier": verifier,
        }).encode()
@@ -1,68 +0,0 @@
-"""Async/sync bridging helpers.
-
-The codebase has ~30 sites that schedule a coroutine onto an event loop from a
-worker thread via :func:`asyncio.run_coroutine_threadsafe`.  That function can
-raise :class:`RuntimeError` (e.g. the loop was closed during a shutdown race),
-and when it does the coroutine object is never awaited and never closed —
-which triggers a ``"coroutine '<name>' was never awaited"`` RuntimeWarning and
-leaks the coroutine's frame until GC.
-
-:func:`safe_schedule_threadsafe` wraps the call, closes the coroutine on
-scheduling failure, and returns ``None`` (instead of a half-formed future) so
-callers can branch cleanly:
-
-    fut = safe_schedule_threadsafe(coro, loop)
-    if fut is None:
-        return  # or fallback behavior
-    fut.result(timeout=5)
-
-The helper deliberately does NOT also handle ``future.result()`` failures —
-that is a separate concern.  Once the loop has accepted the coroutine, its
-lifecycle belongs to the loop, not the scheduling thread.
-"""
-from __future__ import annotations
-
-import asyncio
-import logging
-from concurrent.futures import Future
-from typing import Any, Coroutine, Optional
-
-
-_DEFAULT_LOGGER = logging.getLogger(__name__)
-
-
-def safe_schedule_threadsafe(
-    coro: Coroutine[Any, Any, Any],
-    loop: Optional[asyncio.AbstractEventLoop],
-    *,
-    logger: Optional[logging.Logger] = None,
-    log_message: str = "Failed to schedule coroutine on loop",
-    log_level: int = logging.DEBUG,
-) -> Optional[Future]:
-    """Schedule ``coro`` on ``loop`` from a sync context, leak-safe.
-
-    Returns the :class:`concurrent.futures.Future` on success, or ``None`` if
-    the loop is missing or :func:`asyncio.run_coroutine_threadsafe` raised
-    (e.g. the loop was closed during a shutdown race).  In all failure paths
-    the coroutine is :meth:`close`-d so it does not trigger
-    ``"coroutine was never awaited"`` warnings or leak its frame.
-
-    Callers retain full control over what to do with the returned future
-    (call ``.result(timeout=...)``, attach ``add_done_callback``, ignore it
-    fire-and-forget, etc.).
-    """
-    log = logger if logger is not None else _DEFAULT_LOGGER
-
-    if loop is None:
-        if asyncio.iscoroutine(coro):
-            coro.close()
-        log.log(log_level, "%s: loop is None", log_message)
-        return None
-
-    try:
-        return asyncio.run_coroutine_threadsafe(coro, loop)
-    except Exception as exc:
-        if asyncio.iscoroutine(coro):
-            coro.close()
-        log.log(log_level, "%s: %s", log_message, exc)
-        return None
@@ -369,21 +369,6 @@ def build_or_headers(or_config: dict | None = None) -> dict:

    return headers

-
-# NVIDIA NIM cloud billing attribution.  Keep this host-gated because the
-# nvidia provider also supports local/on-prem NIM endpoints via NVIDIA_BASE_URL.
-_NVIDIA_NIM_CLOUD_HEADERS = {
-    "X-BILLING-INVOKE-ORIGIN": "HermesAgent",
-}
-
-
-def build_nvidia_nim_headers(base_url: str | None) -> dict:
-    """Return NVIDIA NIM cloud attribution headers for build.nvidia.com traffic."""
-    if base_url_host_matches(str(base_url or ""), "integrate.api.nvidia.com"):
-        return dict(_NVIDIA_NIM_CLOUD_HEADERS)
-    return {}
-
-
 # Vercel AI Gateway app attribution headers. HTTP-Referer maps to
 # referrerUrl and X-Title maps to appName in the gateway's analytics.
 from hermes_cli import __version__ as _HERMES_VERSION
@@ -1269,58 +1254,6 @@ def _resolve_nous_runtime_api(*, force_refresh: bool = False) -> Optional[tuple[
    return api_key, base_url


-def _resolve_xai_oauth_for_aux() -> Optional[Tuple[str, str]]:
-    """Resolve a fresh xAI OAuth (api_key, base_url) for auxiliary clients.
-
-    Prefer the credential pool, matching the main runtime/provider status
-    path.  Some xAI OAuth logins live only as pool entries; falling straight
-    to the singleton auth-store resolver would make auxiliary tasks such as
-    compression report "no provider configured" even though ``hermes auth
-    status`` shows xAI OAuth as logged in.
-
-    Falls back to ``hermes_cli.auth``'s singleton runtime resolver for older
-    auth-store-only logins. Returns ``None`` if the user is not authenticated
-    with xAI Grok OAuth.
-    """
-    try:
-        from hermes_cli.auth import DEFAULT_XAI_OAUTH_BASE_URL
-
-        pool = load_pool("xai-oauth")
-        if pool and pool.has_credentials():
-            entry = pool.select()
-            if entry is not None:
-                api_key = str(
-                    getattr(entry, "runtime_api_key", None)
-                    or getattr(entry, "access_token", "")
-                    or ""
-                ).strip()
-                base_url = str(
-                    os.getenv("HERMES_XAI_BASE_URL", "").strip().rstrip("/")
-                    or os.getenv("XAI_BASE_URL", "").strip().rstrip("/")
-                    or getattr(entry, "runtime_base_url", None)
-                    or getattr(entry, "base_url", None)
-                    or DEFAULT_XAI_OAUTH_BASE_URL
-                ).strip().rstrip("/")
-                if api_key and base_url:
-                    return api_key, base_url
-    except Exception as exc:
-        logger.debug("Auxiliary xAI OAuth pool credential resolution failed: %s", exc)
-
-    try:
-        from hermes_cli.auth import resolve_xai_oauth_runtime_credentials
-
-        creds = resolve_xai_oauth_runtime_credentials()
-    except Exception as exc:
-        logger.debug("Auxiliary xAI OAuth runtime credential resolution failed: %s", exc)
-        return None
-
-    api_key = str(creds.get("api_key") or "").strip()
-    base_url = str(creds.get("base_url") or "").strip().rstrip("/")
-    if not api_key or not base_url:
-        return None
-    return api_key, base_url
-
-
 def _read_codex_access_token() -> Optional[str]:
    """Read a valid, non-expired Codex OAuth access token from Hermes auth store.

@@ -1415,8 +1348,6 @@ def _resolve_api_key_provider() -> Tuple[Optional[OpenAI], Optional[str]]:
                from hermes_cli.models import copilot_default_headers

                extra["default_headers"] = copilot_default_headers()
-            elif base_url_host_matches(base_url, "integrate.api.nvidia.com"):
-                extra["default_headers"] = build_nvidia_nim_headers(base_url)
            else:
                try:
                    from providers import get_provider_profile as _gpf_aux
@@ -1452,8 +1383,6 @@ def _resolve_api_key_provider() -> Tuple[Optional[OpenAI], Optional[str]]:
            from hermes_cli.models import copilot_default_headers

            extra["default_headers"] = copilot_default_headers()
-        elif base_url_host_matches(base_url, "integrate.api.nvidia.com"):
-            extra["default_headers"] = build_nvidia_nim_headers(base_url)
        else:
            try:
                from providers import get_provider_profile as _gpf_aux2
@@ -1527,21 +1456,8 @@ def _try_nous(vision: bool = False) -> Tuple[Optional[OpenAI], Optional[str]]:
    nous = _read_nous_auth()
    runtime = _resolve_nous_runtime_api(force_refresh=False)
    if runtime is None and not nous:
-        logger.warning(
-            "Auxiliary Nous client unavailable: no Nous authentication found "
-            "(run: hermes auth)."
-        )
        _mark_provider_unhealthy("nous", ttl=60)
        return None, None
-    if runtime is None and nous:
-        # Runtime credential mint failed but stored Nous auth is still present.
-        # Falls back to the raw stored token below; surface a debug line so
-        # operators investigating expired/invalid sessions have a breadcrumb,
-        # without blocking the fallback path the rest of this function relies on.
-        logger.debug(
-            "Auxiliary Nous: runtime credential mint failed; falling back to "
-            "stored auth.json token."
-        )
    global auxiliary_is_nous
    auxiliary_is_nous = True
    logger.debug("Auxiliary client: Nous Portal")
@@ -1815,32 +1731,6 @@ def _try_custom_endpoint() -> Tuple[Optional[Any], Optional[str]]:
    return _fallback_client, model


-def _build_xai_oauth_aux_client(model: str) -> Tuple[Optional[Any], Optional[str]]:
-    """Build a CodexAuxiliaryClient for an xAI Grok OAuth-authenticated session.
-
-    xAI's ``/v1/responses`` endpoint speaks the OpenAI Responses API, so we
-    wrap a plain ``OpenAI`` client in ``CodexAuxiliaryClient`` to translate
-    ``chat.completions.create()`` calls into ``responses.stream()`` requests.
-
-    The caller must pass an explicit model — pinning a default for Grok
-    would silently rot when xAI's allowlist drifts.  Returns ``(None, None)``
-    when the user has not authenticated with xAI Grok OAuth.
-    """
-    if not model:
-        logger.warning(
-            "Auxiliary client: xai-oauth requested without a model; "
-            "pass model explicitly (auxiliary.<task>.model in config.yaml)."
-        )
-        return None, None
-    resolved = _resolve_xai_oauth_for_aux()
-    if resolved is None:
-        return None, None
-    api_key, base_url = resolved
-    logger.debug("Auxiliary client: xAI OAuth (%s via Responses API)", model)
-    real_client = OpenAI(api_key=api_key, base_url=base_url)
-    return CodexAuxiliaryClient(real_client, model), model
-
-
 def _build_codex_client(model: str) -> Tuple[Optional[Any], Optional[str]]:
    """Build a CodexAuxiliaryClient for an explicitly-requested model.

@@ -2737,8 +2627,6 @@ def _to_async_client(sync_client, model: str, is_vision: bool = False):
        )
    elif base_url_host_matches(sync_base_url, "api.kimi.com"):
        async_kwargs["default_headers"] = {"User-Agent": "claude-code/0.1.0"}
-    elif base_url_host_matches(sync_base_url, "integrate.api.nvidia.com"):
-        async_kwargs["default_headers"] = build_nvidia_nim_headers(sync_base_url)
    else:
        # Fall back to profile.default_headers for providers that declare
        # client-level headers on their ProviderProfile (e.g. attribution
@@ -2950,26 +2838,6 @@ def resolve_provider_client(
        return (_to_async_client(client, final_model, is_vision=is_vision) if async_mode
                else (client, final_model))

-    # ── xAI Grok OAuth (loopback PKCE → Responses API) ───────────────
-    # Without this branch, an xai-oauth main provider falls through to the
-    # generic ``oauth_external`` arm below and returns ``(None, None)``,
-    # silently re-routing every auxiliary task (compression, web extract,
-    # session search, curator, etc.) to whatever Step-2 fallback the user
-    # has configured.  Users on xAI Grok OAuth would then see surprise
-    # OpenRouter / Nous bills for side tasks they thought were running on
-    # their xAI subscription.
-    if provider == "xai-oauth":
-        client, default = _build_xai_oauth_aux_client(model)
-        if client is None:
-            logger.warning(
-                "resolve_provider_client: xai-oauth requested but no xAI "
-                "OAuth token found (run: hermes model -> xAI Grok OAuth — SuperGrok Subscription)"
-            )
-            return None, None
-        final_model = _normalize_resolved_model(model or default, provider)
-        return (_to_async_client(client, final_model, is_vision=is_vision) if async_mode
-                else (client, final_model))
-
    # ── Custom endpoint (OPENAI_BASE_URL + OPENAI_API_KEY) ───────────
    if provider == "custom":
        if explicit_base_url:
@@ -3000,8 +2868,6 @@ def resolve_provider_client(
                extra["default_headers"] = copilot_request_headers(
                    is_agent_turn=True, is_vision=is_vision
                )
-            elif base_url_host_matches(custom_base, "integrate.api.nvidia.com"):
-                extra["default_headers"] = build_nvidia_nim_headers(custom_base)
            else:
                # Fall back to profile.default_headers for providers that
                # declare client-level attribution headers on their profile.
@@ -3200,8 +3066,6 @@ def resolve_provider_client(
            headers.update(copilot_request_headers(
                is_agent_turn=True, is_vision=is_vision
            ))
-        elif base_url_host_matches(base_url, "integrate.api.nvidia.com"):
-            headers.update(build_nvidia_nim_headers(base_url))
        else:
            # Fall back to profile.default_headers for providers that declare
            # client-level attribution headers on their profile (e.g. GMI
@@ -3324,8 +3188,6 @@ def resolve_provider_client(
            return resolve_provider_client("nous", model, async_mode)
        if provider == "openai-codex":
            return resolve_provider_client("openai-codex", model, async_mode)
-        if provider == "xai-oauth":
-            return resolve_provider_client("xai-oauth", model, async_mode)
        # Other OAuth providers not directly supported
        logger.warning("resolve_provider_client: OAuth provider %s not "
                       "directly supported, try 'auto'", provider)
@@ -244,21 +244,8 @@ def _normalize_responses_message_status(value: Any, *, default: str = "completed
    return default


-def _chat_messages_to_responses_input(
-    messages: List[Dict[str, Any]],
-    *,
-    is_xai_responses: bool = False,
-) -> List[Dict[str, Any]]:
-    """Convert internal chat-style messages to Responses input items.
-
-    ``is_xai_responses=True`` strips ``encrypted_content`` from replayed
-    reasoning items.  xAI's OAuth/SuperGrok ``/v1/responses`` surface
-    rejects encrypted reasoning blobs minted by prior turns: the request
-    streams an ``error`` SSE frame before ``response.created`` and the
-    OpenAI SDK collapses it into a generic stream-ordering error.  Native
-    Codex (chatgpt.com backend-api) DOES accept replayed encrypted_content
-    — keep the default off.
-    """
+def _chat_messages_to_responses_input(messages: List[Dict[str, Any]]) -> List[Dict[str, Any]]:
+    """Convert internal chat-style messages to Responses input items."""
    items: List[Dict[str, Any]] = []
    seen_item_ids: set = set()

@@ -284,17 +271,9 @@ def _chat_messages_to_responses_input(
            if role == "assistant":
                # Replay encrypted reasoning items from previous turns
                # so the API can maintain coherent reasoning chains.
-                #
-                # xAI OAuth (SuperGrok/Premium) rejects replayed
-                # ``encrypted_content`` reasoning items minted by prior
-                # turns — see _chat_messages_to_responses_input docstring.
-                # When ``is_xai_responses`` is set we drop the replay
-                # entirely; Grok still reasons on each turn server-side,
-                # we just don't try to thread the prior turn's encrypted
-                # blob back in.
                codex_reasoning = msg.get("codex_reasoning_items")
                has_codex_reasoning = False
-                if isinstance(codex_reasoning, list) and not is_xai_responses:
+                if isinstance(codex_reasoning, list):
                    for ri in codex_reasoning:
                        if isinstance(ri, dict) and ri.get("encrypted_content"):
                            item_id = ri.get("id")
@@ -747,7 +726,7 @@ def _preflight_codex_api_kwargs(
        "model", "instructions", "input", "tools", "store",
        "reasoning", "include", "max_output_tokens", "temperature",
        "tool_choice", "parallel_tool_calls", "prompt_cache_key", "service_tier",
-        "extra_headers", "extra_body",
+        "extra_headers",
    }
    normalized: Dict[str, Any] = {
        "model": model,
@@ -797,19 +776,6 @@ def _preflight_codex_api_kwargs(
        if normalized_headers:
            normalized["extra_headers"] = normalized_headers

-    extra_body = api_kwargs.get("extra_body")
-    if extra_body is not None:
-        if not isinstance(extra_body, dict):
-            raise ValueError("Codex Responses request 'extra_body' must be an object.")
-        # Pass extra_body through verbatim — used by xAI Responses to
-        # carry `prompt_cache_key` as a body-level field (the documented
-        # cache-routing surface on /v1/responses). The openai SDK
-        # serializes extra_body into the JSON body without per-field
-        # type checks, so it survives Responses.stream() kwarg-signature
-        # changes that would otherwise raise TypeError before the wire.
-        if extra_body:
-            normalized["extra_body"] = dict(extra_body)
-
    if allow_stream:
        stream = api_kwargs.get("stream")
        if stream is not None and stream is not True:
@@ -1429,23 +1429,15 @@ The user has requested that this compaction PRIORITISE preserving all informatio
            return messages

        turns_to_summarize = messages[compress_start:compress_end]
-        # A persisted handoff summary can sit in the protected head after a
-        # resume (commonly immediately after the system prompt). Search from
-        # the first non-system message through the compression window so we can
-        # rehydrate iterative-summary state without serializing that handoff as
-        # a new turn. Protected messages after the handoff remain live context,
-        # so only summarize messages that are both after the handoff and inside
-        # the current compression window.
-        summary_search_start = 1 if messages and messages[0].get("role") == "system" else 0
        summary_idx, summary_body = self._find_latest_context_summary(
            messages,
-            summary_search_start,
+            compress_start,
            compress_end,
        )
        if summary_idx is not None:
            if summary_body and not self._previous_summary:
                self._previous_summary = summary_body
-            turns_to_summarize = messages[max(compress_start, summary_idx + 1):compress_end]
+            turns_to_summarize = messages[summary_idx + 1:compress_end]

        if not self.quiet_mode:
            logger.info(
@@ -30,28 +30,6 @@ _DEFAULT_TIMEOUT_SECONDS = 900.0
 _TOOL_CALL_BLOCK_RE = re.compile(r"<tool_call>\s*(\{.*?\})\s*</tool_call>", re.DOTALL)
 _TOOL_CALL_JSON_RE = re.compile(r"\{\s*\"id\"\s*:\s*\"[^\"]+\"\s*,\s*\"type\"\s*:\s*\"function\"\s*,\s*\"function\"\s*:\s*\{.*?\}\s*\}", re.DOTALL)

-# Stderr fingerprint of the deprecated `gh copilot` CLI extension
-# (https://github.blog/changelog/2025-09-25-upcoming-deprecation-of-gh-copilot-cli-extension).
-# We require BOTH the literal product name ("gh-copilot") AND a deprecation
-# marker, so generic stderr from the NEW `@github/copilot` CLI — whose repo
-# is github.com/github/copilot-cli and which legitimately mentions "copilot-cli"
-# in its own banners and error messages — doesn't get misclassified as the
-# deprecated extension.
-_DEPRECATION_REQUIRED = ("gh-copilot",)
-_DEPRECATION_MARKERS = (
-    "has been deprecated",
-    "no commands will be executed",
-)
-
-
-def _is_gh_copilot_deprecation_message(stderr_text: str) -> bool:
-    """True iff stderr looks like the deprecated gh-copilot extension's banner."""
-
-    lower = stderr_text.lower()
-    if not any(req in lower for req in _DEPRECATION_REQUIRED):
-        return False
-    return any(marker in lower for marker in _DEPRECATION_MARKERS)
-

 def _resolve_command() -> str:
    return (
@@ -528,21 +506,6 @@ class CopilotACPClient:

            stderr_text = "\n".join(stderr_tail).strip()
            if proc.poll() is not None and stderr_text:
-                if _is_gh_copilot_deprecation_message(stderr_text):
-                    raise RuntimeError(
-                        "Hermes ACP mode requires the NEW GitHub Copilot CLI "
-                        "(github.com/github/copilot-cli), but the binary it just "
-                        "spawned is the deprecated `gh copilot` extension.\n\n"
-                        "Install the new CLI:\n"
-                        "  npm install -g @github/copilot\n"
-                        "  # then verify with: copilot --help\n\n"
-                        "If `copilot` already resolves to the new CLI but you still see this,\n"
-                        "point Hermes at it explicitly:\n"
-                        "  export HERMES_COPILOT_ACP_COMMAND=/path/to/new/copilot\n\n"
-                        "Alternative: use the `copilot` provider (no ACP, hits the Copilot API\n"
-                        "directly with a Copilot subscription token) via `hermes setup`.\n\n"
-                        f"Original error:\n{stderr_text}"
-                    )
                raise RuntimeError(f"Copilot ACP process exited early: {stderr_text}")
            raise TimeoutError(f"Timed out waiting for Copilot ACP response to {method}.")

@@ -29,7 +29,6 @@ from hermes_cli.auth import (
    _resolve_zai_base_url,
    _save_auth_store,
    _save_provider_state,
-    _store_provider_state,
    read_credential_pool,
    write_credential_pool,
 )
@@ -540,64 +539,6 @@ class CredentialPool:
            logger.debug("Failed to sync Codex entry from auth.json: %s", exc)
        return entry

-    def _sync_xai_oauth_entry_from_auth_store(self, entry: PooledCredential) -> PooledCredential:
-        """Sync an xAI OAuth pool entry from auth.json if tokens differ.
-
-        xAI OAuth refresh tokens are single-use.  When another Hermes process
-        (or another profile sharing the same auth.json) refreshes the token,
-        it writes the new pair to ``providers["xai-oauth"]["tokens"]`` under
-        ``_auth_store_lock``.  Without this resync, our in-memory pool entry
-        keeps the consumed refresh_token and the next ``_refresh_entry`` call
-        would replay it and get a ``refresh_token_reused``-style 4xx.
-
-        Only applies to entries seeded from the singleton (``loopback_pkce``);
-        manually added entries (``manual:xai_pkce``) are independent
-        credentials with their own refresh-token lifecycle.
-        """
-        if self.provider != "xai-oauth" or entry.source != "loopback_pkce":
-            return entry
-        try:
-            with _auth_store_lock():
-                auth_store = _load_auth_store()
-                state = _load_provider_state(auth_store, "xai-oauth")
-            if not isinstance(state, dict):
-                return entry
-            tokens = state.get("tokens")
-            if not isinstance(tokens, dict):
-                return entry
-            store_access = tokens.get("access_token", "")
-            store_refresh = tokens.get("refresh_token", "")
-            entry_access = entry.access_token or ""
-            entry_refresh = entry.refresh_token or ""
-            if store_access and (
-                store_access != entry_access
-                or (store_refresh and store_refresh != entry_refresh)
-            ):
-                logger.debug(
-                    "Pool entry %s: syncing xAI OAuth tokens from auth.json "
-                    "(refreshed by another process)",
-                    entry.id,
-                )
-                field_updates: Dict[str, Any] = {
-                    "access_token": store_access,
-                    "refresh_token": store_refresh or entry.refresh_token,
-                    "last_status": None,
-                    "last_status_at": None,
-                    "last_error_code": None,
-                    "last_error_reason": None,
-                    "last_error_message": None,
-                    "last_error_reset_at": None,
-                }
-                if state.get("last_refresh"):
-                    field_updates["last_refresh"] = state["last_refresh"]
-                updated = replace(entry, **field_updates)
-                self._replace_entry(entry, updated)
-                self._persist()
-                return updated
-        except Exception as exc:
-            logger.debug("Failed to sync xAI OAuth entry from auth.json: %s", exc)
-        return entry
-
    def _sync_nous_entry_from_auth_store(self, entry: PooledCredential) -> PooledCredential:
        """Sync a Nous pool entry from auth.json if tokens differ.

@@ -663,22 +604,9 @@ class CredentialPool:
        re-seeding a consumed single-use refresh token.

        Applies to any OAuth provider whose singleton lives in auth.json
-        (currently Nous, OpenAI Codex, and xAI Grok OAuth).
-
-        ``set_active=False`` on every write: a pool sync-back is a
-        token-rotation side effect, not the user choosing a provider.
-        Using ``_save_provider_state`` (which sets ``active_provider``)
-        here would mean every Nous/Codex/xAI refresh in a multi-provider
-        setup silently flips the ``active_provider`` flag — the next
-        ``hermes`` invocation that defaults to the active provider
-        (e.g. setup wizard, ``hermes auth status``) would land on
-        whatever provider happened to refresh last, not whatever the
-        user actually chose.
+        (currently Nous and OpenAI Codex).
        """
-        # Only sync entries that were seeded *from* a singleton.  Manually
-        # added pool entries (source="manual:*") are independent credentials
-        # and must not write back to the singleton.
-        if entry.source not in {"device_code", "loopback_pkce"}:
+        if entry.source != "device_code":
            return
        try:
            with _auth_store_lock():
@@ -704,7 +632,7 @@ class CredentialPool:
                            state[extra_key] = val
                    if entry.inference_base_url:
                        state["inference_base_url"] = entry.inference_base_url
-                    _store_provider_state(auth_store, "nous", state, set_active=False)
+                    _save_provider_state(auth_store, "nous", state)

                elif self.provider == "openai-codex":
                    state = _load_provider_state(auth_store, "openai-codex")
@@ -718,21 +646,7 @@ class CredentialPool:
                        tokens["refresh_token"] = entry.refresh_token
                    if entry.last_refresh:
                        state["last_refresh"] = entry.last_refresh
-                    _store_provider_state(auth_store, "openai-codex", state, set_active=False)
-
-                elif self.provider == "xai-oauth":
-                    state = _load_provider_state(auth_store, "xai-oauth")
-                    if not isinstance(state, dict):
-                        return
-                    tokens = state.get("tokens")
-                    if not isinstance(tokens, dict):
-                        return
-                    tokens["access_token"] = entry.access_token
-                    if entry.refresh_token:
-                        tokens["refresh_token"] = entry.refresh_token
-                    if entry.last_refresh:
-                        state["last_refresh"] = entry.last_refresh
-                    _store_provider_state(auth_store, "xai-oauth", state, set_active=False)
+                    _save_provider_state(auth_store, "openai-codex", state)

                else:
                    return
@@ -785,25 +699,6 @@ class CredentialPool:
                    refresh_token=refreshed["refresh_token"],
                    last_refresh=refreshed.get("last_refresh"),
                )
-            elif self.provider == "xai-oauth":
-                # Adopt fresher tokens from auth.json before spending the
-                # refresh_token — single-use tokens consumed by another
-                # process (or another profile sharing the singleton) would
-                # otherwise trigger ``refresh_token_reused`` on the next
-                # POST.  Only meaningful for singleton-seeded entries.
-                synced = self._sync_xai_oauth_entry_from_auth_store(entry)
-                if synced is not entry:
-                    entry = synced
-                refreshed = auth_mod.refresh_xai_oauth_pure(
-                    entry.access_token,
-                    entry.refresh_token,
-                )
-                updated = replace(
-                    entry,
-                    access_token=refreshed["access_token"],
-                    refresh_token=refreshed["refresh_token"],
-                    last_refresh=refreshed.get("last_refresh"),
-                )
            elif self.provider == "nous":
                synced = self._sync_nous_entry_from_auth_store(entry)
                if synced is not entry:
@@ -882,30 +777,6 @@ class CredentialPool:
                    # Credentials file had a valid (non-expired) token — use it directly
                    logger.debug("Credentials file has valid token, using without refresh")
                    return synced
-            # For xai-oauth: same race as nous — another process may have
-            # consumed the refresh token between our proactive sync and the
-            # HTTP call.  Re-check auth.json and adopt the fresh tokens if
-            # they have rotated since.  Only meaningful for singleton-seeded
-            # (loopback_pkce) entries; manual entries don't share state with
-            # the singleton.
-            if self.provider == "xai-oauth":
-                synced = self._sync_xai_oauth_entry_from_auth_store(entry)
-                if synced.refresh_token != entry.refresh_token:
-                    logger.debug(
-                        "xAI OAuth refresh failed but auth.json has newer tokens — adopting"
-                    )
-                    updated = replace(
-                        synced,
-                        last_status=STATUS_OK,
-                        last_status_at=None,
-                        last_error_code=None,
-                        last_error_reason=None,
-                        last_error_message=None,
-                        last_error_reset_at=None,
-                    )
-                    self._replace_entry(synced, updated)
-                    self._persist()
-                    return updated
            # For nous: another process may have consumed the refresh token
            # between our proactive sync and the HTTP call.  Re-sync from
            # auth.json and adopt the fresh tokens if available.
@@ -958,11 +829,6 @@ class CredentialPool:
                entry.access_token,
                CODEX_ACCESS_TOKEN_REFRESH_SKEW_SECONDS,
            )
-        if self.provider == "xai-oauth":
-            return auth_mod._xai_access_token_is_expiring(
-                entry.access_token,
-                auth_mod.XAI_ACCESS_TOKEN_REFRESH_SKEW_SECONDS,
-            )
        if self.provider == "nous":
            # Nous refresh/mint can require network access and should happen when
            # runtime credentials are actually resolved, not merely when the pool
@@ -1017,17 +883,6 @@ class CredentialPool:
                if synced is not entry:
                    entry = synced
                    cleared_any = True
-            # For xai-oauth singleton-seeded entries, identical pattern:
-            # an entry frozen as exhausted may simply be holding stale
-            # tokens that another process (or a fresh `hermes model` ->
-            # xAI Grok OAuth login) has since rotated in auth.json.
-            if (self.provider == "xai-oauth"
-                    and entry.source == "loopback_pkce"
-                    and entry.last_status == STATUS_EXHAUSTED):
-                synced = self._sync_xai_oauth_entry_from_auth_store(entry)
-                if synced is not entry:
-                    entry = synced
-                    cleared_any = True
            if entry.last_status == STATUS_EXHAUSTED:
                exhausted_until = _exhausted_until(entry)
                if exhausted_until is not None and now < exhausted_until:
@@ -1539,37 +1394,6 @@ def _seed_from_singletons(provider: str, entries: List[PooledCredential]) -> Tup
                },
            )

-    elif provider == "xai-oauth":
-        # When the user logs in via ``hermes model`` -> xAI Grok OAuth,
-        # tokens are written to the auth.json singleton
-        # (``providers["xai-oauth"]``).  Surface them in the pool too so
-        # ``hermes auth list`` reflects the logged-in state and so the pool
-        # is the single source of truth for refresh during runtime resolution.
-        if _is_suppressed(provider, "loopback_pkce"):
-            return changed, active_sources
-
-        state = _load_provider_state(auth_store, "xai-oauth")
-        tokens = state.get("tokens") if isinstance(state, dict) else None
-        if isinstance(tokens, dict) and tokens.get("access_token"):
-            active_sources.add("loopback_pkce")
-            from hermes_cli.auth import DEFAULT_XAI_OAUTH_BASE_URL
-
-            base_url = DEFAULT_XAI_OAUTH_BASE_URL
-            changed |= _upsert_entry(
-                entries,
-                provider,
-                "loopback_pkce",
-                {
-                    "source": "loopback_pkce",
-                    "auth_type": AUTH_TYPE_OAUTH,
-                    "access_token": tokens.get("access_token", ""),
-                    "refresh_token": tokens.get("refresh_token"),
-                    "base_url": base_url,
-                    "last_refresh": state.get("last_refresh"),
-                    "label": label_from_token(tokens.get("access_token", ""), "loopback_pkce"),
-                },
-            )
-
    return changed, active_sources


@@ -265,31 +265,6 @@ def _remove_minimax_oauth(provider: str, removed) -> RemovalResult:
    return result


-def _remove_xai_oauth_loopback_pkce(provider: str, removed) -> RemovalResult:
-    """xAI OAuth tokens live in auth.json providers.xai-oauth — clear them.
-
-    Without this step, ``hermes auth remove xai-oauth <N>`` silently undoes
-    itself: the central dispatcher only removes the in-memory pool entry,
-    leaves ``providers.xai-oauth`` in auth.json intact, and on the next
-    ``load_pool("xai-oauth")`` call ``_seed_from_singletons`` re-seeds the
-    entry from the still-present singleton — credentials reappear with no
-    user feedback. Clearing the singleton in step with the suppression set
-    by the central dispatcher makes the removal stick.
-
-    Belt-and-braces against the manual entry path: ``hermes auth add
-    xai-oauth`` produces a ``manual:xai_pkce`` entry whose removal step
-    falls through to "unregistered → nothing to clean up" (correct —
-    manual entries are pool-only).
-    """
-    result = RemovalResult()
-    if _clear_auth_store_provider(provider):
-        result.cleaned.append(f"Cleared {provider} OAuth tokens from auth store")
-    result.hints.append(
-        "Run `hermes model` → xAI Grok OAuth (SuperGrok Subscription) to re-authenticate if needed."
-    )
-    return result
-
-
 def _remove_codex_device_code(provider: str, removed) -> RemovalResult:
    """Codex tokens live in TWO places: our auth store AND ~/.codex/auth.json.

@@ -422,11 +397,6 @@ def _register_all_sources() -> None:
        remove_fn=_remove_codex_device_code,
        description="auth.json providers.openai-codex + ~/.codex/auth.json",
    ))
-    register(RemovalStep(
-        provider="xai-oauth", source_id="loopback_pkce",
-        remove_fn=_remove_xai_oauth_loopback_pkce,
-        description="auth.json providers.xai-oauth",
-    ))
    register(RemovalStep(
        provider="qwen-oauth", source_id="qwen-cli",
        remove_fn=_remove_qwen_cli,
@@ -240,6 +240,21 @@ def build_tool_preview(tool_name: str, args: dict, max_len: int | None = None) -
            msg = msg[:17] + "..."
        return f"to {target}: \"{msg}\""

+    if tool_name.startswith("rl_"):
+        rl_previews = {
+            "rl_list_environments": "listing envs",
+            "rl_select_environment": args.get("name", ""),
+            "rl_get_current_config": "reading config",
+            "rl_edit_config": f"{args.get('field', '')}={args.get('value', '')}",
+            "rl_start_training": "starting",
+            "rl_check_status": args.get("run_id", "")[:16],
+            "rl_stop_training": f"stopping {args.get('run_id', '')[:16]}",
+            "rl_get_results": args.get("run_id", "")[:16],
+            "rl_list_runs": "listing runs",
+            "rl_test_inference": f"{args.get('num_steps', 3)} steps",
+        }
+        return rl_previews.get(tool_name)
+
    key = primary_args.get(tool_name)
    if not key:
        for fallback_key in ("query", "text", "command", "path", "name", "prompt", "code", "goal"):
@@ -966,6 +981,15 @@ def get_cute_tool_message(
        if action == "list":
            return _wrap(f"┊ ⏰ cron      listing  {dur}")
        return _wrap(f"┊ ⏰ cron      {action} {args.get('job_id', '')}  {dur}")
+    if tool_name.startswith("rl_"):
+        rl = {
+            "rl_list_environments": "list envs", "rl_select_environment": f"select {args.get('name', '')}",
+            "rl_get_current_config": "get config", "rl_edit_config": f"set {args.get('field', '?')}",
+            "rl_start_training": "start training", "rl_check_status": f"status {args.get('run_id', '?')[:12]}",
+            "rl_stop_training": f"stop {args.get('run_id', '?')[:12]}", "rl_get_results": f"results {args.get('run_id', '?')[:12]}",
+            "rl_list_runs": "list runs", "rl_test_inference": "test inference",
+        }
+        return _wrap(f"┊ 🧪 rl        {rl.get(tool_name, tool_name.replace('rl_', ''))}  {dur}")
    if tool_name == "execute_code":
        code = args.get("code", "")
        first_line = code.strip().split("\n")[0] if code.strip() else ""
@@ -40,7 +40,7 @@ import os
 import threading
 import time
 from concurrent.futures import Future as ConcurrentFuture
-from typing import Any, Callable, Dict, List, Optional, Tuple
+from typing import Any, Dict, List, Optional, Tuple

 from agent.lsp import eventlog
 from agent.lsp.client import (
@@ -107,14 +107,9 @@ class _BackgroundLoop:

        Returns the coroutine's result, or raises its exception.
        """
-        from agent.async_utils import safe_schedule_threadsafe
        if self._loop is None:
-            if asyncio.iscoroutine(coro):
-                coro.close()
            raise RuntimeError("background loop not started")
-        fut = safe_schedule_threadsafe(coro, self._loop)
-        if fut is None:
-            raise RuntimeError("background loop not running")
+        fut: ConcurrentFuture = asyncio.run_coroutine_threadsafe(coro, self._loop)
        try:
            return fut.result(timeout=timeout)
        except Exception:
@@ -310,7 +305,6 @@ class LSPService:
        *,
        delta: bool = True,
        timeout: Optional[float] = None,
-        line_shift: Optional[Callable[[int], Optional[int]]] = None,
    ) -> List[Dict[str, Any]]:
        """Synchronously open ``file_path`` in the right server, wait for
        diagnostics, return them.
@@ -320,18 +314,6 @@ class LSPService:
        Diagnostics present in the baseline are removed so the caller
        only sees errors introduced by the current edit.

-        When ``line_shift`` is provided, baseline diagnostics are
-        remapped through it before the set-difference.  This handles
-        the case where the edit deleted or inserted lines, causing
-        pre-existing diagnostics below the edit point to surface at
-        different line numbers in the post-edit snapshot — without
-        the shift, they'd all look "introduced by this edit".  Pass
-        a callable built by
-        :func:`agent.lsp.range_shift.build_line_shift` (pre_text,
-        post_text).  Omit when pre/post content isn't available;
-        the unshifted comparison still catches diagnostics that
-        didn't move.
-
        Returns an empty list when LSP is disabled, when no workspace
        can be detected, when no server matches, or when the server
        can't be spawned.  Never raises.
@@ -362,14 +344,6 @@ class LSPService:
        if delta:
            baseline = self._delta_baseline.get(abs_path) or []
            if baseline:
-                if line_shift is not None:
-                    # Remap baseline diagnostics into post-edit
-                    # coordinates so shifted-but-otherwise-identical
-                    # entries hash equal under _diag_key.  Entries
-                    # that mapped into a deleted region drop out
-                    # silently — they no longer apply.
-                    from agent.lsp.range_shift import shift_baseline
-                    baseline = shift_baseline(baseline, line_shift)
                seen = {_diag_key(d) for d in baseline}
                diags = [d for d in diags if _diag_key(d) not in seen]
            # Roll baseline forward — next call returns deltas relative
@@ -611,19 +585,8 @@ class LSPService:


 def _diag_key(d: Dict[str, Any]) -> str:
-    """Content equality key used for cross-edit delta filtering.
-
-    Includes the diagnostic's position range — when used together
-    with :func:`agent.lsp.range_shift.shift_baseline`, the baseline
-    is line-shifted into post-edit coordinates BEFORE this key is
-    computed, so identical-but-shifted diagnostics hash equal.  Two
-    genuinely distinct diagnostics at different lines (e.g. the same
-    error class introduced at a second site) hash differently and
-    are surfaced as new.
-
-    Mirrors :func:`agent.lsp.client._diagnostic_key`; intentionally
-    identical so the two layers agree on diagnostic identity.
-    """
+    """Content equality key used for delta filtering.  Mirrors
+    :func:`agent.lsp.client._diagnostic_key`."""
    rng = d.get("range") or {}
    start = rng.get("start") or {}
    end = rng.get("end") or {}
@@ -1,149 +0,0 @@
-"""Diff-aware line-shift map for cross-edit LSP delta filtering.
-
-When an edit deletes or inserts lines in the middle of a file, every
-diagnostic below the edit point shifts to a new line number.  The
-LSPService delta filter subtracts the pre-edit baseline from the
-post-edit diagnostics keyed on ``(severity, code, source, message,
-range)`` — without an adjustment, the shifted-but-otherwise-identical
-diagnostics look brand-new and the agent gets flooded with noise.
-
-The fix used here is the same trick git's blame and unified diff use:
-build a piecewise-linear map from pre-edit line numbers to post-edit
-line numbers, then apply that map to baseline diagnostics before the
-set-difference.  Diagnostics whose pre-edit line is in a region the
-edit deleted return ``None`` and are dropped from the baseline (they
-genuinely no longer apply).
-
-Trade-off vs. dropping range from the key entirely (the previous
-fix): preserves the "new instance of an identical error at a
-different line" signal — if the model introduces a second instance
-of the same error class at a different location, that one will be
-surfaced as new instead of swallowed by content-only dedup.
-
-The map is derived from ``difflib.SequenceMatcher.get_opcodes()`` and
-exposed as a single callable so callers don't have to reason about
-diff regions.
-"""
-from __future__ import annotations
-
-import difflib
-from typing import Any, Callable, Dict, List, Optional
-
-
-def build_line_shift(pre_text: str, post_text: str) -> Callable[[int], Optional[int]]:
-    """Build a function mapping pre-edit line numbers to post-edit line numbers.
-
-    Lines are 0-indexed to match the LSP wire format
-    (``range.start.line`` is 0-indexed).
-
-    The returned callable takes a pre-edit 0-indexed line number and
-    returns the corresponding post-edit 0-indexed line number, or
-    ``None`` if that line was deleted by the edit (no post-edit
-    counterpart exists).
-
-    Cost: one ``SequenceMatcher.get_opcodes()`` call up front; the
-    returned closure is O(log n) per call (binary search over opcode
-    regions).  Cheap enough to call once per write/patch and apply to
-    every baseline diagnostic.
-    """
-    pre_lines = pre_text.splitlines() if pre_text else []
-    post_lines = post_text.splitlines() if post_text else []
-
-    # Trivial case: identical content or no content — identity map.
-    if pre_lines == post_lines:
-        return lambda line: line
-
-    # SequenceMatcher.get_opcodes() returns a list of
-    # (tag, i1, i2, j1, j2) where tag is 'equal', 'replace', 'delete',
-    # or 'insert'.  i1:i2 is the range in pre, j1:j2 is the range in
-    # post.  We build a list of (i1, i2, j1, j2, tag) tuples and
-    # binary-search by i for each lookup.
-    sm = difflib.SequenceMatcher(a=pre_lines, b=post_lines, autojunk=False)
-    opcodes = sm.get_opcodes()
-
-    def shift(line: int) -> Optional[int]:
-        # Find the opcode region whose i1 <= line < i2.
-        # Linear scan is fine — typical opcode count is small (single
-        # digits for a typical patch-tool edit).
-        for tag, i1, i2, j1, j2 in opcodes:
-            if i1 <= line < i2:
-                if tag == "equal":
-                    # Pre-line N → post-line (N - i1 + j1).
-                    return line - i1 + j1
-                if tag == "delete":
-                    # Pre-line is in a deleted region — no post counterpart.
-                    return None
-                if tag == "replace":
-                    # Replace == delete + insert; the pre-line has no
-                    # post counterpart in any meaningful sense.  Drop.
-                    return None
-                # 'insert' has i1 == i2 so line < i2 can't be hit.
-            if line < i1:
-                # Past the relevant region — handled in earlier iteration.
-                break
-        # Past the last opcode region (line >= len(pre_lines)).
-        # Anchor at end of post.
-        return max(0, len(post_lines) - 1) if post_lines else None
-
-    return shift
-
-
-def shift_diagnostic_range(diag: Dict[str, Any],
-                           shift: Callable[[int], Optional[int]]) -> Optional[Dict[str, Any]]:
-    """Return a copy of ``diag`` with its line range remapped through ``shift``.
-
-    Returns ``None`` if the diagnostic's start line maps to ``None``
-    (the line was deleted by the edit) — caller drops it from the
-    baseline since the diagnostic no longer applies.
-
-    Both ``start.line`` and ``end.line`` are remapped independently;
-    when only the end maps to ``None`` (rare, multi-line diagnostic
-    straddling the edit boundary) we collapse to a single-line range
-    at the shifted start to keep the diagnostic in the baseline.
-
-    The original ``diag`` is not mutated.
-    """
-    rng = diag.get("range") or {}
-    start = rng.get("start") or {}
-    end = rng.get("end") or {}
-
-    pre_start_line = int(start.get("line", 0))
-    pre_end_line = int(end.get("line", pre_start_line))
-
-    new_start_line = shift(pre_start_line)
-    if new_start_line is None:
-        return None
-
-    new_end_line = shift(pre_end_line)
-    if new_end_line is None:
-        # Diagnostic straddled the deletion — collapse to start.
-        new_end_line = new_start_line
-
-    shifted = dict(diag)
-    shifted["range"] = {
-        "start": {
-            "line": new_start_line,
-            "character": int(start.get("character", 0)),
-        },
-        "end": {
-            "line": new_end_line,
-            "character": int(end.get("character", 0)),
-        },
-    }
-    return shifted
-
-
-def shift_baseline(baseline: List[Dict[str, Any]],
-                   shift: Callable[[int], Optional[int]]) -> List[Dict[str, Any]]:
-    """Apply ``shift`` to every diagnostic in ``baseline``, dropping deleted entries."""
-    out: List[Dict[str, Any]] = []
-    for d in baseline:
-        if not isinstance(d, dict):
-            continue
-        shifted = shift_diagnostic_range(d, shift)
-        if shifted is not None:
-            out.append(shifted)
-    return out
-
-
-__all__ = ["build_line_shift", "shift_diagnostic_range", "shift_baseline"]
@@ -213,7 +213,6 @@ DEFAULT_CONTEXT_LENGTHS = {
    "grok-2-vision": 8192,      # grok-2-vision, -1212, -latest
    "grok-4-fast": 2000000,     # grok-4-fast-(non-)reasoning
    "grok-4.20": 2000000,       # grok-4.20-0309-(non-)reasoning, -multi-agent-0309
-    "grok-4.3": 1000000,        # grok-4.3, grok-4.3-latest — 1M context per docs.x.ai
    "grok-4": 256000,           # grok-4, grok-4-0709
    "grok-3": 131072,           # grok-3, grok-3-mini, grok-3-fast, grok-3-mini-fast
    "grok-2": 131072,           # grok-2, grok-2-1212, grok-2-latest
@@ -358,12 +357,6 @@ _URL_TO_PROVIDER: Dict[str, str] = {
    "api.deepseek.com": "deepseek",
    "api.githubcopilot.com": "copilot",
    "models.github.ai": "copilot",
-    # GitHub Models free tier (Azure-hosted prototyping endpoint) — same
-    # canonical provider as the Copilot API.  Hard per-request token cap
-    # (often 8K) makes it unusable for Hermes' system prompt, but mapping
-    # it here lets us recognize the endpoint and emit a targeted hint
-    # instead of falling through the unknown-custom-endpoint path.
-    "models.inference.ai.azure.com": "copilot",
    "api.fireworks.ai": "fireworks",
    "opencode.ai": "opencode-go",
    "api.x.ai": "xai",
@@ -24,10 +24,7 @@ class ResponsesApiTransport(ProviderTransport):
    def convert_messages(self, messages: List[Dict[str, Any]], **kwargs) -> Any:
        """Convert OpenAI chat messages to Responses API input items."""
        from agent.codex_responses_adapter import _chat_messages_to_responses_input
-        return _chat_messages_to_responses_input(
-            messages,
-            is_xai_responses=bool(kwargs.get("is_xai_responses")),
-        )
+        return _chat_messages_to_responses_input(messages)

    def convert_tools(self, tools: List[Dict[str, Any]]) -> Any:
        """Convert OpenAI tool schemas to Responses API function definitions."""
@@ -92,38 +89,24 @@ class ResponsesApiTransport(ProviderTransport):
        _effort_clamp = {"minimal": "low"}
        reasoning_effort = _effort_clamp.get(reasoning_effort, reasoning_effort)

-        response_tools = _responses_tools(tools)
        kwargs = {
            "model": model,
            "instructions": instructions,
-            "input": _chat_messages_to_responses_input(
-                payload_messages,
-                is_xai_responses=is_xai_responses,
-            ),
-            "tools": response_tools,
+            "input": _chat_messages_to_responses_input(payload_messages),
+            "tools": _responses_tools(tools),
+            "tool_choice": "auto",
+            "parallel_tool_calls": True,
            "store": False,
        }
-        if response_tools:
-            kwargs["tool_choice"] = "auto"
-            kwargs["parallel_tool_calls"] = True

        session_id = params.get("session_id")
-        # xAI Responses takes prompt_cache_key in extra_body (set further
-        # down); GitHub Models opts out of cache-key routing entirely.
-        if not is_github_responses and not is_xai_responses and session_id:
+        if not is_github_responses and session_id:
            kwargs["prompt_cache_key"] = session_id

        if reasoning_enabled and is_xai_responses:
            from agent.model_metadata import grok_supports_reasoning_effort

-            # NOTE: Hermes does NOT ask xAI to return ``reasoning.encrypted_content``
-            # any more.  xAI's OAuth/SuperGrok ``/v1/responses`` surface rejects
-            # replayed encrypted reasoning items on turn 2+ — see
-            # _chat_messages_to_responses_input docstring.  Requesting the field
-            # back would just have us cache something we then must strip.  Grok
-            # still reasons natively each turn; coherence across turns rides on
-            # the visible message text alone.
-            kwargs["include"] = []
+            kwargs["include"] = ["reasoning.encrypted_content"]
            # xAI rejects `reasoning.effort` on grok-4 / grok-4-fast / grok-3
            # / grok-code-fast / grok-4.20-0309-* with HTTP 400 even though
            # those models reason natively. Only send the effort dial when
@@ -182,17 +165,6 @@ class ResponsesApiTransport(ProviderTransport):
            merged_extra_headers["x-grok-conv-id"] = session_id
            kwargs["extra_headers"] = merged_extra_headers

-            # xAI Responses cache-routing — body-level field per
-            # https://docs.x.ai/developers/advanced-api-usage/prompt-caching/maximizing-cache-hits.
-            # Sent via extra_body (not the typed kwarg) so it survives openai
-            # SDK builds whose Responses.stream() signature has dropped the field.
-            existing_extra_body = kwargs.get("extra_body")
-            merged_extra_body: Dict[str, Any] = {}
-            if isinstance(existing_extra_body, dict):
-                merged_extra_body.update(existing_extra_body)
-            merged_extra_body.setdefault("prompt_cache_key", session_id)
-            kwargs["extra_body"] = merged_extra_body
-
        return kwargs

    def normalize_response(self, response: Any, **kwargs) -> NormalizedResponse:
@@ -14,28 +14,20 @@ the user gets full Hermes capability inside a Codex turn.
 Scope (what we expose):
  - web_search, web_extract              — Firecrawl, no codex equivalent
  - browser_navigate / _click / _type /  — Camofox/Browserbase automation
-    _snapshot / _scroll / _back / _press /
-    _get_images / _console / _vision
+    _snapshot / _screenshot / _scroll / _back / _press / _vision
+  - delegate_task                        — Hermes subagents
  - vision_analyze                       — image inspection by vision model
  - image_generate                       — image generation
+  - memory                               — Hermes' persistent memory store
  - skill_view, skills_list              — Hermes' skill library
+  - session_search                       — cross-session search
  - text_to_speech                       — TTS
-  - kanban_* (complete/block/comment/    — kanban worker + orchestrator
-    heartbeat/show/list/create/            handoff (stateless: read env var,
-    unblock/link)                          write ~/.hermes/kanban.db)

-What we DO NOT expose:
+What we DO NOT expose (codex has equivalents):
  - terminal / shell                     — codex's own shell tool
  - read_file / write_file / patch       — codex's apply_patch + shell
  - search_files / process               — codex's shell
-  - clarify                              — codex's own UX
-  - delegate_task / memory /             — `_AGENT_LOOP_TOOLS` in Hermes
-    session_search / todo                  (model_tools.py). They require
-                                           the running AIAgent context to
-                                           dispatch (mid-loop state), so a
-                                           stateless MCP callback can't
-                                           drive them. See the inline
-                                           comment on EXPOSED_TOOLS below.
+  - clarify, todo                        — codex's own UX

 Run with: python -m agent.transports.hermes_tools_mcp_server
 Spawned by: CodexAppServerSession.ensure_started() when the runtime is
@@ -1,46 +0,0 @@
-#!/usr/bin/env node
-/**
- * Copy font and asset folders from @nous-research/ui into public/ for Vite.
- *
- * Locates @nous-research/ui by walking up from this script looking for
- * node_modules/@nous-research/ui — works whether the dep is co-located
- * (non-workspace layout) or hoisted to the repo root (npm workspaces).
- */
-const fs = require('node:fs')
-const path = require('node:path')
-
-const DASHBOARD_ROOT = path.resolve(__dirname, '..')
-
-function locateUiPackage() {
-  let dir = DASHBOARD_ROOT
-  const { root } = path.parse(dir)
-  while (true) {
-    const candidate = path.join(dir, 'node_modules', '@nous-research', 'ui')
-    if (fs.existsSync(path.join(candidate, 'package.json'))) {
-      return candidate
-    }
-    if (dir === root) break
-    dir = path.dirname(dir)
-  }
-  throw new Error(
-    '@nous-research/ui not found. Run `npm install` from the repo root.'
-  )
-}
-
-const uiRoot = locateUiPackage()
-const distRoot = path.join(uiRoot, 'dist')
-
-const mappings = [
-  ['fonts', path.join(DASHBOARD_ROOT, 'public', 'fonts')],
-  ['assets', path.join(DASHBOARD_ROOT, 'public', 'ds-assets')],
-]
-
-for (const [srcName, destPath] of mappings) {
-  const srcPath = path.join(distRoot, srcName)
-  if (!fs.existsSync(srcPath)) {
-    throw new Error(`Missing ${srcPath} in @nous-research/ui — rebuild that package.`)
-  }
-  fs.rmSync(destPath, { recursive: true, force: true })
-  fs.cpSync(srcPath, destPath, { recursive: true })
-  console.log(`synced ${path.relative(DASHBOARD_ROOT, destPath)}`)
-}
@@ -1,36 +0,0 @@
-import {
-  JsonRpcGatewayClient,
-  type ConnectionState,
-  type GatewayEvent,
-  type GatewayEventName,
-} from "@hermes/shared";
-
-export type { ConnectionState, GatewayEvent, GatewayEventName };
-
-/**
- * Browser wrapper for the shared tui_gateway JSON-RPC client.
- *
- * Dashboard resolves its token and host from the served page. Desktop uses the
- * same shared protocol client, but supplies an absolute wsUrl from Electron.
- */
-export class GatewayClient extends JsonRpcGatewayClient {
-  async connect(token?: string): Promise<void> {
-    const resolved = token ?? window.__HERMES_SESSION_TOKEN__ ?? "";
-    if (!resolved) {
-      throw new Error(
-        "Session token not available — page must be served by the Hermes dashboard",
-      );
-    }
-
-    const scheme = location.protocol === "https:" ? "wss:" : "ws:";
-    await super.connect(
-      `${scheme}//${location.host}/api/ws?token=${encodeURIComponent(resolved)}`,
-    );
-  }
-}
-
-declare global {
-  interface Window {
-    __HERMES_SESSION_TOKEN__?: string;
-  }
-}
@@ -1,11 +0,0 @@
-{
-  "arrowParens": "avoid",
-  "bracketSpacing": true,
-  "endOfLine": "auto",
-  "printWidth": 120,
-  "semi": false,
-  "singleQuote": true,
-  "tabWidth": 2,
-  "trailingComma": "none",
-  "useTabs": false
-}
@@ -1,282 +0,0 @@
-# Hermes Desktop
-
-Native Electron shell for Hermes. It packages the desktop renderer, a bundled Hermes source payload, and installer targets for macOS and Windows.
-
-## Setup
-
-Install workspace dependencies from the repo root so `apps/desktop`, `apps/dashboard`, and `apps/shared` stay linked:
-
-```bash
-npm install
-```
-
-For Python, you have two options:
-
-**Option A — let the desktop provision it for you (recommended for first-time setup):** just run `npm run dev`. On first launch the desktop creates a venv at `HERMES_HOME/hermes-agent/venv` and runs `pip install -e .` against the resolved Hermes source automatically. Requires Python 3.11-3.13 on Windows.
-
-**Option B — share an existing CLI install:** if you already ran `scripts/install.ps1` / `scripts/install.sh`, that's the same layout the desktop uses. The desktop reuses your existing venv and editable install — no extra steps. See [Runtime Bootstrap](#runtime-bootstrap) below for details.
-
-If you're hacking on Hermes from a clone outside `HERMES_HOME/hermes-agent`, point the desktop at it explicitly:
-
-```bash
-HERMES_DESKTOP_HERMES_ROOT=/path/to/your/clone npm run dev
-```
-
-### Runtime prerequisites
-
-Hermes Desktop's baseline installer dependencies are:
-
- **Python 3.11-3.13** — for the agent runtime, dashboard backend, and tool execution.
- **Node.js 20+ LTS** — for browser tools and Node-backed capabilities.
- **Git for Windows** — for Git Bash, which powers Hermes terminal commands on Windows.
-
-The packaged Windows installer (`Hermes-*.exe`) is intentionally barebones: it installs the GUI and offers to install Python 3.11, Node.js 20+, and Git for Windows via `winget` when possible. Python 3.14 is not accepted yet because several Hermes dependencies do not publish compatible wheels. On first launch, the GUI handles the Hermes-specific work: syncing the bundled agent payload, creating the virtualenv, installing Python dependencies, and showing progress in the onboarding UI. The MSI installer does not run the prerequisite page, so enterprise deploys should preinstall these dependencies out-of-band.
-
-For dev (`npm run dev`) the Python check happens at first launch via the Electron bootstrapper. Manual install commands you can run yourself:
-
-```powershell
-winget install -e --id Python.Python.3.11 --scope user
-winget install -e --id OpenJS.NodeJS.LTS
-winget install -e --id Git.Git
-```
-
-## Development
-
-```bash
-cd apps/desktop
-npm run dev
-```
-
-`npm run dev` starts Vite on `127.0.0.1:5174`, launches Electron, and lets Electron boot the Hermes backend (`hermes dashboard --no-open --tui`) on an open port in `9120-9199`. This path is for UI iteration and may still show Electron/dev identities in OS prompts.
-
-Useful overrides:
-
-```bash
-HERMES_DESKTOP_HERMES_ROOT=/path/to/hermes-agent npm run dev
-HERMES_DESKTOP_PYTHON=/path/to/python npm run dev
-HERMES_DESKTOP_CWD=/path/to/project npm run dev
-HERMES_DESKTOP_IGNORE_EXISTING=1 npm run dev
-HERMES_HOME=/tmp/throwaway-hermes-home npm run dev
-HERMES_DESKTOP_BOOT_FAKE=1 npm run dev
-HERMES_DESKTOP_BOOT_FAKE=1 HERMES_DESKTOP_BOOT_FAKE_STEP_MS=900 npm run dev
-```
-
-`HERMES_DESKTOP_IGNORE_EXISTING=1` skips any `hermes` CLI already on `PATH`, which is useful when testing the factory-image bootstrap path.
-
-`HERMES_HOME` overrides the install root (default: `%LOCALAPPDATA%\hermes` on Windows, `~/.hermes` elsewhere) — handy for sandboxed dev runs that shouldn't touch your real config.
-
-`HERMES_DESKTOP_BOOT_FAKE=1` adds deterministic per-phase delays to desktop startup so you can validate the startup overlay and progress bar. For convenience, `npm run dev:fake-boot` enables fake mode with defaults.
-
-On a fresh Hermes profile, Desktop shows a first-run setup overlay after boot. The overlay saves the minimum required provider credential (for example `OPENROUTER_API_KEY`, `ANTHROPIC_API_KEY`, or `OPENAI_API_KEY`) to the active Hermes `.env`, reloads the backend env, and then lets the user continue without opening Settings manually.
-
-## Dashboard Dev
-
-Run the Python dashboard backend with embedded chat enabled:
-
-```bash
-hermes dashboard --tui --no-open
-```
-
-For dashboard HMR, start Vite in another terminal:
-
-```bash
-cd apps/dashboard
-npm run dev
-```
-
-Open the Vite URL. The dev server proxies `/api`, `/api/pty`, and plugin assets to `http://127.0.0.1:9119` and fetches the live dashboard HTML so the ephemeral session token matches the running backend.
-
-## Build
-
-```bash
-npm run build
-npm run pack          # unpacked app at release/mac-<arch>/Hermes.app
-npm run dist:mac      # macOS DMG + zip
-npm run dist:mac:dmg  # DMG only
-npm run dist:mac:zip  # zip only
-npm run dist:win      # NSIS + MSI
-```
-
-Before packaging, `stage:hermes` copies the Python Hermes payload into `build/hermes-agent`. Electron Builder then ships it as `Contents/Resources/hermes-agent`.
-
-## Automated Releases
-
-Desktop installers are published by [`.github/workflows/desktop-release.yml`](../../.github/workflows/desktop-release.yml) with two channels:
-
- **Stable:** runs on published GitHub releases and uploads signed artifacts to that release tag.
- **Nightly:** runs on `main` pushes and updates the rolling `desktop-nightly` prerelease.
-
-The workflow injects a channel-aware desktop version at build time:
-
- stable: derived from the release tag (for example `v2026.5.5` -> `2026.5.5`)
- nightly: `0.0.0-nightly.YYYYMMDD.<sha>`
-
-Artifact names include channel, platform, and architecture:
-
-```text
-Hermes-<version>-<channel>-<platform>-<arch>.<ext>
-```
-
-Each run also publishes `SHA256SUMS-<platform>.txt` so installers can be verified.
-
-### Stable release gates
-
-Stable builds fail fast if signing credentials are missing:
-
- macOS signing + notarization: `CSC_LINK`, `CSC_KEY_PASSWORD`, `APPLE_API_KEY`, `APPLE_API_KEY_ID`, `APPLE_API_ISSUER`
- Windows signing: `WIN_CSC_LINK`, `WIN_CSC_KEY_PASSWORD`
-
-Stable macOS builds also validate stapling and Gatekeeper assessment in CI before upload.
-
-## Icons
-
-Desktop icons live in `assets/`:
-
- `assets/icon.icns`
- `assets/icon.ico`
- `assets/icon.png`
-
-The builder config points at `assets/icon`. Replace these files directly if the app icon changes.
-
-## Testing Install Paths
-
-Use the package-local test scripts from this directory:
-
-```bash
-npm run test:desktop:all
-npm run test:desktop:existing
-npm run test:desktop:fresh
-npm run test:desktop:dmg
-npm run test:desktop:platforms
-```
-
-`test:desktop:existing` builds the packaged app and opens it normally. It should use an existing `hermes` CLI if one is on `PATH`, preserving the user’s real `~/.hermes` config.
-
-`test:desktop:fresh` builds the packaged app and launches it in a throwaway fresh-install sandbox. It sets `HERMES_DESKTOP_IGNORE_EXISTING=1`, points Electron `userData` at a temp dir, points `HERMES_HOME` at a temp dir, and launches through the factory-image bootstrap path without touching your real desktop runtime or `~/.hermes`.
-
-`test:desktop:dmg` builds and opens the DMG.
-
-`test:desktop:platforms` runs platform bootstrap-path assertions, including:
- existing-CLI vs factory-image runtime path selection semantics
- WSL2 protection against Windows `.exe/.cmd/.bat/.ps1` overrides
- platform-specific runtime import checks (`winpty` vs `ptyprocess`)
-
-For fast reruns without rebuilding:
-
-```bash
-HERMES_DESKTOP_SKIP_BUILD=1 npm run test:desktop:fresh
-HERMES_DESKTOP_SKIP_BUILD=1 npm run test:desktop:existing
-HERMES_DESKTOP_SKIP_BUILD=1 npm run test:desktop:dmg
-```
-
-## Installing Locally
-
-```bash
-npm run dist:mac:dmg
-open release/Hermes-0.0.0-arm64.dmg
-```
-
-Drag `Hermes` to Applications. If testing repeated installs, replace the existing app.
-
-## Runtime Bootstrap
-
-Hermes Desktop shares its install layout with the CLI installers (`scripts/install.ps1`, `scripts/install.sh`) so a desktop-only user and a CLI-only user end up with the same files in the same places.
-
-### Where things live
-
-```text
-HERMES_HOME/                       # %LOCALAPPDATA%\hermes (Windows)
-                                   # ~/.hermes (macOS / Linux)
-├── hermes-agent/                  # ACTIVE_HERMES_ROOT — the canonical install
-│   ├── hermes_cli/, agent/, ...   # Python source
-│   ├── pyproject.toml             # source of truth for deps
-│   ├── venv/                      # virtualenv (Scripts\python.exe on Windows,
-│   │                              #             bin/python elsewhere)
-│   └── .hermes-desktop-runtime.json   # marker: schema version + pyproject hash
-├── config.yaml                    # user config
-├── .env                           # API keys
-└── logs/
-    ├── desktop.log                # Electron-side boot log
-    ├── agent.log
-    ├── errors.log
-    └── gateway.log
-```
-
-The factory image (`Contents/Resources/hermes-agent` on macOS, `resources\hermes-agent` on Windows) ships inside the `.app` / `.exe` and seeds `HERMES_HOME/hermes-agent` on first launch.
-
-### Resolution order
-
-The desktop resolves a Hermes backend in this order:
-
-1. `HERMES_DESKTOP_HERMES_ROOT` — explicit dev override.
-2. Existing `hermes` CLI on PATH (skipped when `HERMES_DESKTOP_IGNORE_EXISTING=1`).
-3. Repo source root — only when running `npm run dev` from a checkout. Takes precedence over `HERMES_HOME/hermes-agent` so devs always run their local edits.
-4. `HERMES_HOME/hermes-agent` if it already exists (CLI installer or prior desktop launch).
-5. Packaged + factory image present → sync factory → `HERMES_HOME/hermes-agent`, then use it.
-6. Pip-installed `hermes_cli` module via system Python.
-
-### First-launch flow on a packaged install
-
-1. Sync factory image → `HERMES_HOME/hermes-agent`. Skipped if a `.git` directory exists at the destination (developer install) — never overwrites a user's local repo.
-2. Create venv at `HERMES_HOME/hermes-agent/venv` using system Python (errors out with a Python-install hint if no supported Python is found).
-3. `pip install -e HERMES_HOME/hermes-agent` — `pyproject.toml` is the single source of truth for dependencies.
-4. Stamp `.hermes-desktop-runtime.json` with the schema version + pyproject hash + factory version.
-
-Subsequent launches compare the marker against the active `pyproject.toml` and skip venv/dependency work when nothing has changed.
-
-### Upgrades
-
-A new installer drops a new factory image. On next launch the marker mismatches → factory contents are copied over `HERMES_HOME/hermes-agent` (excluding `venv/`, `.git`, `__pycache__`, etc.), `pip install -e` re-runs to pick up new deps, the marker is re-stamped. The venv is preserved across upgrades to keep the upgrade fast when deps haven't moved.
-
-A user who installed via `scripts/install.ps1` / `scripts/install.sh` (so `HERMES_HOME/hermes-agent/.git` exists) is detected as a developer install and the desktop never overwrites their checkout — they keep using `hermes update` / `git pull` to update.
-
-## Debugging
-
-Desktop boot logs are written to:
-
-```text
-HERMES_HOME/logs/desktop.log     # %LOCALAPPDATA%\hermes\logs\desktop.log on Windows
-                                  # ~/.hermes/logs/desktop.log on macOS / Linux
-```
-
-If the UI reports `Desktop boot failed`, check that log first. It includes the backend command output and recent Python traceback context.
-
-To reset desktop runtime state (forces re-sync from the factory image and re-`pip install -e .` on next launch):
-
-```bash
-# macOS / Linux
-rm "$HOME/.hermes/hermes-agent/.hermes-desktop-runtime.json"
-
-# Windows (PowerShell)
-Remove-Item "$env:LOCALAPPDATA\hermes\hermes-agent\.hermes-desktop-runtime.json"
-```
-
-For a full reset of just the Python venv (rare — usually only needed if the venv is broken):
-
-```bash
-# macOS / Linux
-rm -rf "$HOME/.hermes/hermes-agent/venv"
-
-# Windows (PowerShell)
-Remove-Item -Recurse -Force "$env:LOCALAPPDATA\hermes\hermes-agent\venv"
-```
-
-To reset stale macOS microphone permission prompts:
-
-```bash
-tccutil reset Microphone com.github.Electron
-tccutil reset Microphone com.nousresearch.hermes
-```
-
-## Verification
-
-Run before handing off installer changes:
-
-```bash
-npm run fix
-npm run type-check
-npm run lint
-npm run test:desktop:all
-```
-
-Current lint may report existing warnings, but it should exit with no errors.
@@ -1,21 +0,0 @@
-{
-  "$schema": "https://ui.shadcn.com/schema.json",
-  "style": "new-york",
-  "rsc": false,
-  "tsx": true,
-  "tailwind": {
-    "config": "",
-    "css": "src/styles.css",
-    "baseColor": "neutral",
-    "cssVariables": true,
-    "prefix": ""
-  },
-  "aliases": {
-    "components": "@/components",
-    "utils": "@/lib/utils",
-    "ui": "@/components/ui",
-    "lib": "@/lib",
-    "hooks": "@/hooks"
-  },
-  "iconLibrary": "lucide"
-}
@@ -1,30 +0,0 @@
-function isWslEnvironment(env = process.env, platform = process.platform) {
-  if (platform !== 'linux') return false
-  return Boolean(env.WSL_DISTRO_NAME || env.WSL_INTEROP)
-}
-
-function isWindowsBinaryPathInWsl(filePath, options = {}) {
-  const isWsl = options.isWsl ?? isWslEnvironment(options.env, options.platform)
-  if (!isWsl) return false
-
-  const normalized = String(filePath || '')
-    .replace(/\\/g, '/')
-    .toLowerCase()
-
-  return (
-    normalized.endsWith('.exe') ||
-    normalized.endsWith('.cmd') ||
-    normalized.endsWith('.bat') ||
-    normalized.endsWith('.ps1')
-  )
-}
-
-function bundledRuntimeImportCheck(platform = process.platform) {
-  return platform === 'win32' ? 'import fastapi, uvicorn, winpty' : 'import fastapi, uvicorn, ptyprocess'
-}
-
-module.exports = {
-  bundledRuntimeImportCheck,
-  isWindowsBinaryPathInWsl,
-  isWslEnvironment
-}
@@ -1,46 +0,0 @@
-const assert = require('node:assert/strict')
-const fs = require('node:fs')
-const path = require('node:path')
-const test = require('node:test')
-
-const { bundledRuntimeImportCheck, isWindowsBinaryPathInWsl, isWslEnvironment } = require('./bootstrap-platform.cjs')
-
-test('isWslEnvironment detects WSL2 env vars on linux', () => {
-  assert.equal(isWslEnvironment({ WSL_DISTRO_NAME: 'Ubuntu' }, 'linux'), true)
-  assert.equal(isWslEnvironment({ WSL_INTEROP: '/run/WSL/123_interop' }, 'linux'), true)
-  assert.equal(isWslEnvironment({}, 'linux'), false)
-  assert.equal(isWslEnvironment({ WSL_DISTRO_NAME: 'Ubuntu' }, 'darwin'), false)
-})
-
-test('isWindowsBinaryPathInWsl blocks Windows binary types on WSL', () => {
-  assert.equal(isWindowsBinaryPathInWsl('/mnt/c/Tools/hermes.exe', { isWsl: true }), true)
-  assert.equal(isWindowsBinaryPathInWsl('/mnt/c/Tools/hermes.cmd', { isWsl: true }), true)
-  assert.equal(isWindowsBinaryPathInWsl('/mnt/c/Tools/hermes.bat', { isWsl: true }), true)
-  assert.equal(isWindowsBinaryPathInWsl('/mnt/c/Tools/install.ps1', { isWsl: true }), true)
-  assert.equal(isWindowsBinaryPathInWsl('/usr/local/bin/hermes', { isWsl: true }), false)
-  assert.equal(isWindowsBinaryPathInWsl('/mnt/c/Tools/hermes.exe', { isWsl: false }), false)
-})
-
-test('bundledRuntimeImportCheck selects platform-specific import checks', () => {
-  assert.equal(bundledRuntimeImportCheck('win32'), 'import fastapi, uvicorn, winpty')
-  assert.equal(bundledRuntimeImportCheck('darwin'), 'import fastapi, uvicorn, ptyprocess')
-  assert.equal(bundledRuntimeImportCheck('linux'), 'import fastapi, uvicorn, ptyprocess')
-})
-
-test('packaged electron entrypoints do not require unpackaged npm modules', () => {
-  const electronDir = __dirname
-  const entrypoints = ['main.cjs', 'preload.cjs', 'bootstrap-platform.cjs']
-  const allowedBareRequires = new Set(['electron'])
-  const requirePattern = /require\(['"]([^'"]+)['"]\)/g
-
-  for (const entrypoint of entrypoints) {
-    const source = fs.readFileSync(path.join(electronDir, entrypoint), 'utf8')
-    const bareRequires = Array.from(source.matchAll(requirePattern))
-      .map(match => match[1])
-      .filter(specifier => !specifier.startsWith('node:'))
-      .filter(specifier => !specifier.startsWith('.'))
-      .filter(specifier => !allowedBareRequires.has(specifier))
-
-    assert.deepEqual(bareRequires, [], `${entrypoint} has unpackaged runtime requires`)
-  }
-})
@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>com.apple.security.cs.allow-jit</key>
-  <true/>
-  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-  <true/>
-  <key>com.apple.security.cs.disable-library-validation</key>
-  <true/>
-</dict>
-</plist>
@@ -1,14 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>com.apple.security.cs.allow-jit</key>
-  <true/>
-  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-  <true/>
-  <key>com.apple.security.cs.disable-library-validation</key>
-  <true/>
-  <key>com.apple.security.device.audio-input</key>
-  <true/>
-</dict>
-</plist>
@@ -1,184 +0,0 @@
-const fs = require('node:fs')
-const path = require('node:path')
-const { fileURLToPath } = require('node:url')
-
-const DEFAULT_FETCH_TIMEOUT_MS = 15_000
-const DATA_URL_READ_MAX_BYTES = 16 * 1024 * 1024
-const TEXT_PREVIEW_SOURCE_MAX_BYTES = 64 * 1024 * 1024
-
-const SAFE_ENV_SUFFIXES = new Set(['dist', 'example', 'sample', 'template'])
-const SENSITIVE_EXTENSIONS = new Set(['.kdbx', '.p12', '.pem', '.pfx'])
-
-function resolveTimeoutMs(timeoutMs, fallbackMs = DEFAULT_FETCH_TIMEOUT_MS) {
-  const fallback =
-    Number.isFinite(fallbackMs) && Number(fallbackMs) > 0 ? Math.round(Number(fallbackMs)) : DEFAULT_FETCH_TIMEOUT_MS
-  const parsed = Number(timeoutMs)
-
-  if (Number.isFinite(parsed) && parsed > 0) {
-    return Math.round(parsed)
-  }
-
-  return fallback
-}
-
-function encryptDesktopSecret(value, safeStorageApi) {
-  const raw = String(value || '')
-
-  if (!raw) {
-    return null
-  }
-
-  let encryptionAvailable = false
-
-  try {
-    encryptionAvailable = Boolean(safeStorageApi?.isEncryptionAvailable?.())
-  } catch {
-    encryptionAvailable = false
-  }
-
-  if (!encryptionAvailable) {
-    throw new Error(
-      'Secure token storage is unavailable, so Hermes Desktop cannot save remote gateway tokens. ' +
-        'Set HERMES_DESKTOP_REMOTE_URL and HERMES_DESKTOP_REMOTE_TOKEN in your environment, or enable OS keychain access and try again.'
-    )
-  }
-
-  try {
-    return {
-      encoding: 'safeStorage',
-      value: safeStorageApi.encryptString(raw).toString('base64')
-    }
-  } catch (error) {
-    const detail = error instanceof Error && error.message ? ` (${error.message})` : ''
-    throw new Error(
-      `Failed to encrypt the remote gateway token for secure storage${detail}. ` +
-        'Set HERMES_DESKTOP_REMOTE_URL and HERMES_DESKTOP_REMOTE_TOKEN in your environment as a fallback.'
-    )
-  }
-}
-
-function sensitiveFileBlockReason(filePath) {
-  const normalized = String(filePath || '')
-    .replace(/\\/g, '/')
-    .toLowerCase()
-  const basename = path.basename(normalized)
-  const ext = path.extname(basename)
-
-  if (!basename) {
-    return null
-  }
-
-  if (normalized.includes('/.ssh/')) {
-    return 'SSH key/config files are blocked.'
-  }
-
-  if (normalized.includes('/.gnupg/')) {
-    return 'GPG key material is blocked.'
-  }
-
-  if (normalized.endsWith('/.aws/credentials')) {
-    return 'AWS credential files are blocked.'
-  }
-
-  if (basename === '.env') {
-    return '.env files are blocked because they commonly contain secrets.'
-  }
-
-  if (basename.startsWith('.env.')) {
-    const suffix = basename.slice('.env.'.length)
-    if (!SAFE_ENV_SUFFIXES.has(suffix)) {
-      return `${basename} is blocked because it appears to contain environment secrets.`
-    }
-  }
-
-  if (/^id_(rsa|dsa|ecdsa|ed25519)(?:\..+)?$/.test(basename) && !basename.endsWith('.pub')) {
-    return 'SSH private key files are blocked.'
-  }
-
-  if (SENSITIVE_EXTENSIONS.has(ext)) {
-    return `${ext} key/certificate files are blocked.`
-  }
-
-  if (basename === '.npmrc' || basename === '.netrc' || basename === '.pypirc') {
-    return `${basename} is blocked because it may include auth credentials.`
-  }
-
-  return null
-}
-
-function resolveRequestedFilePath(filePath, baseDir = process.cwd(), purpose = 'File read') {
-  const raw = String(filePath || '').trim()
-
-  if (!raw) {
-    throw new Error(`${purpose} failed: file path is required.`)
-  }
-
-  if (raw.includes('\0')) {
-    throw new Error(`${purpose} failed: file path is invalid.`)
-  }
-
-  if (/^file:/i.test(raw)) {
-    try {
-      return fileURLToPath(raw)
-    } catch {
-      throw new Error(`${purpose} failed: file URL is invalid.`)
-    }
-  }
-
-  const resolvedBase = path.resolve(String(baseDir || process.cwd()))
-  return path.resolve(resolvedBase, raw)
-}
-
-async function resolveReadableFileForIpc(filePath, options = {}) {
-  const purpose = String(options.purpose || 'File read')
-  const resolvedPath = resolveRequestedFilePath(filePath, options.baseDir, purpose)
-
-  if (options.blockSensitive !== false) {
-    const blockReason = sensitiveFileBlockReason(resolvedPath)
-    if (blockReason) {
-      throw new Error(`${purpose} blocked for sensitive file: ${blockReason}`)
-    }
-  }
-
-  let stat
-  try {
-    stat = await fs.promises.stat(resolvedPath)
-  } catch (error) {
-    const code = error && typeof error === 'object' ? error.code : ''
-    if (code === 'ENOENT' || code === 'ENOTDIR') {
-      throw new Error(`${purpose} failed: file does not exist.`)
-    }
-    throw new Error(`${purpose} failed: ${error instanceof Error ? error.message : String(error)}`)
-  }
-
-  if (stat.isDirectory()) {
-    throw new Error(`${purpose} failed: path points to a directory.`)
-  }
-
-  if (!stat.isFile()) {
-    throw new Error(`${purpose} failed: only regular files can be read.`)
-  }
-
-  const maxBytes = Number.isFinite(options.maxBytes) && Number(options.maxBytes) > 0 ? Number(options.maxBytes) : null
-  if (maxBytes && stat.size > maxBytes) {
-    throw new Error(`${purpose} failed: file is too large (${stat.size} bytes; limit ${maxBytes} bytes).`)
-  }
-
-  try {
-    await fs.promises.access(resolvedPath, fs.constants.R_OK)
-  } catch {
-    throw new Error(`${purpose} failed: file is not readable.`)
-  }
-
-  return { resolvedPath, stat }
-}
-
-module.exports = {
-  DATA_URL_READ_MAX_BYTES,
-  DEFAULT_FETCH_TIMEOUT_MS,
-  TEXT_PREVIEW_SOURCE_MAX_BYTES,
-  encryptDesktopSecret,
-  resolveReadableFileForIpc,
-  resolveTimeoutMs,
-  sensitiveFileBlockReason
-}
@@ -1,116 +0,0 @@
-const assert = require('node:assert/strict')
-const fs = require('node:fs')
-const os = require('node:os')
-const path = require('node:path')
-const test = require('node:test')
-const { pathToFileURL } = require('node:url')
-
-const {
-  DEFAULT_FETCH_TIMEOUT_MS,
-  encryptDesktopSecret,
-  resolveReadableFileForIpc,
-  resolveTimeoutMs,
-  sensitiveFileBlockReason
-} = require('./hardening.cjs')
-
-test('resolveTimeoutMs falls back to defaults and accepts overrides', () => {
-  assert.equal(resolveTimeoutMs(undefined), DEFAULT_FETCH_TIMEOUT_MS)
-  assert.equal(resolveTimeoutMs(0), DEFAULT_FETCH_TIMEOUT_MS)
-  assert.equal(resolveTimeoutMs(-25), DEFAULT_FETCH_TIMEOUT_MS)
-  assert.equal(resolveTimeoutMs('2750'), 2750)
-})
-
-test('encryptDesktopSecret requires available secure storage', () => {
-  assert.equal(
-    encryptDesktopSecret('', { isEncryptionAvailable: () => true, encryptString: () => Buffer.alloc(0) }),
-    null
-  )
-
-  assert.throws(
-    () => encryptDesktopSecret('token', { isEncryptionAvailable: () => false, encryptString: () => Buffer.alloc(0) }),
-    /Secure token storage is unavailable/
-  )
-})
-
-test('encryptDesktopSecret stores safeStorage base64 payload', () => {
-  const secret = encryptDesktopSecret('token-123', {
-    isEncryptionAvailable: () => true,
-    encryptString: value => Buffer.from(`enc:${value}`, 'utf8')
-  })
-
-  assert.deepEqual(secret, {
-    encoding: 'safeStorage',
-    value: Buffer.from('enc:token-123', 'utf8').toString('base64')
-  })
-})
-
-test('sensitiveFileBlockReason blocks obvious secret file patterns', () => {
-  assert.match(String(sensitiveFileBlockReason('/tmp/.env')), /\.env/)
-  assert.equal(sensitiveFileBlockReason('/tmp/.env.example'), null)
-  assert.match(String(sensitiveFileBlockReason('/Users/me/.ssh/id_ed25519')), /SSH/)
-  assert.match(String(sensitiveFileBlockReason('/tmp/server-cert.pem')), /\.pem/)
-})
-
-test('resolveReadableFileForIpc validates existence type size and sensitivity', async t => {
-  const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'hermes-desktop-hardening-'))
-  t.after(() => fs.rmSync(tempDir, { recursive: true, force: true }))
-
-  const textPath = path.join(tempDir, 'notes.txt')
-  fs.writeFileSync(textPath, 'hello world', 'utf8')
-
-  const fromRelative = await resolveReadableFileForIpc('notes.txt', {
-    baseDir: tempDir,
-    maxBytes: 256,
-    purpose: 'File preview'
-  })
-  assert.equal(fromRelative.resolvedPath, textPath)
-  assert.equal(fromRelative.stat.size, 11)
-
-  const fromFileUrl = await resolveReadableFileForIpc(pathToFileURL(textPath).toString(), {
-    purpose: 'File preview'
-  })
-  assert.equal(fromFileUrl.resolvedPath, textPath)
-
-  await assert.rejects(
-    resolveReadableFileForIpc('missing.txt', {
-      baseDir: tempDir,
-      purpose: 'Text preview'
-    }),
-    /file does not exist/
-  )
-
-  const nestedDir = path.join(tempDir, 'directory')
-  fs.mkdirSync(nestedDir)
-  await assert.rejects(
-    resolveReadableFileForIpc(nestedDir, {
-      purpose: 'Text preview'
-    }),
-    /path points to a directory/
-  )
-
-  const largePath = path.join(tempDir, 'large.txt')
-  fs.writeFileSync(largePath, 'x'.repeat(40), 'utf8')
-  await assert.rejects(
-    resolveReadableFileForIpc(largePath, {
-      maxBytes: 8,
-      purpose: 'File preview'
-    }),
-    /file is too large/
-  )
-
-  const envPath = path.join(tempDir, '.env')
-  fs.writeFileSync(envPath, 'SECRET_TOKEN=123', 'utf8')
-  await assert.rejects(
-    resolveReadableFileForIpc(envPath, {
-      purpose: 'File preview'
-    }),
-    /blocked for sensitive file/
-  )
-
-  const envTemplatePath = path.join(tempDir, '.env.example')
-  fs.writeFileSync(envTemplatePath, 'EXAMPLE_TOKEN=value', 'utf8')
-  const envTemplate = await resolveReadableFileForIpc(envTemplatePath, {
-    purpose: 'File preview'
-  })
-  assert.equal(envTemplate.resolvedPath, envTemplatePath)
-})
@@ -1,78 +0,0 @@
-const { contextBridge, ipcRenderer, webUtils } = require('electron')
-
-contextBridge.exposeInMainWorld('hermesDesktop', {
-  getConnection: () => ipcRenderer.invoke('hermes:connection'),
-  getBootProgress: () => ipcRenderer.invoke('hermes:boot-progress:get'),
-  getConnectionConfig: () => ipcRenderer.invoke('hermes:connection-config:get'),
-  saveConnectionConfig: payload => ipcRenderer.invoke('hermes:connection-config:save', payload),
-  applyConnectionConfig: payload => ipcRenderer.invoke('hermes:connection-config:apply', payload),
-  testConnectionConfig: payload => ipcRenderer.invoke('hermes:connection-config:test', payload),
-  api: request => ipcRenderer.invoke('hermes:api', request),
-  notify: payload => ipcRenderer.invoke('hermes:notify', payload),
-  requestMicrophoneAccess: () => ipcRenderer.invoke('hermes:requestMicrophoneAccess'),
-  readFileDataUrl: filePath => ipcRenderer.invoke('hermes:readFileDataUrl', filePath),
-  readFileText: filePath => ipcRenderer.invoke('hermes:readFileText', filePath),
-  selectPaths: options => ipcRenderer.invoke('hermes:selectPaths', options),
-  writeClipboard: text => ipcRenderer.invoke('hermes:writeClipboard', text),
-  saveImageFromUrl: url => ipcRenderer.invoke('hermes:saveImageFromUrl', url),
-  saveImageBuffer: (data, ext) => ipcRenderer.invoke('hermes:saveImageBuffer', { data, ext }),
-  saveClipboardImage: () => ipcRenderer.invoke('hermes:saveClipboardImage'),
-  getPathForFile: file => {
-    try {
-      return webUtils.getPathForFile(file) || ''
-    } catch {
-      return ''
-    }
-  },
-  normalizePreviewTarget: (target, baseDir) => ipcRenderer.invoke('hermes:normalizePreviewTarget', target, baseDir),
-  watchPreviewFile: url => ipcRenderer.invoke('hermes:watchPreviewFile', url),
-  stopPreviewFileWatch: id => ipcRenderer.invoke('hermes:stopPreviewFileWatch', id),
-  setTitleBarTheme: payload => ipcRenderer.send('hermes:titlebar-theme', payload),
-  setPreviewShortcutActive: active => ipcRenderer.send('hermes:previewShortcutActive', Boolean(active)),
-  openExternal: url => ipcRenderer.invoke('hermes:openExternal', url),
-  fetchLinkTitle: url => ipcRenderer.invoke('hermes:fetchLinkTitle', url),
-  readDir: dirPath => ipcRenderer.invoke('hermes:fs:readDir', dirPath),
-  gitRoot: startPath => ipcRenderer.invoke('hermes:fs:gitRoot', startPath),
-  onClosePreviewRequested: callback => {
-    const listener = () => callback()
-    ipcRenderer.on('hermes:close-preview-requested', listener)
-    return () => ipcRenderer.removeListener('hermes:close-preview-requested', listener)
-  },
-  onOpenUpdatesRequested: callback => {
-    const listener = () => callback()
-    ipcRenderer.on('hermes:open-updates', listener)
-    return () => ipcRenderer.removeListener('hermes:open-updates', listener)
-  },
-  onWindowStateChanged: callback => {
-    const listener = (_event, payload) => callback(payload)
-    ipcRenderer.on('hermes:window-state-changed', listener)
-    return () => ipcRenderer.removeListener('hermes:window-state-changed', listener)
-  },
-  onPreviewFileChanged: callback => {
-    const listener = (_event, payload) => callback(payload)
-    ipcRenderer.on('hermes:preview-file-changed', listener)
-    return () => ipcRenderer.removeListener('hermes:preview-file-changed', listener)
-  },
-  onBackendExit: callback => {
-    const listener = (_event, payload) => callback(payload)
-    ipcRenderer.on('hermes:backend-exit', listener)
-    return () => ipcRenderer.removeListener('hermes:backend-exit', listener)
-  },
-  onBootProgress: callback => {
-    const listener = (_event, payload) => callback(payload)
-    ipcRenderer.on('hermes:boot-progress', listener)
-    return () => ipcRenderer.removeListener('hermes:boot-progress', listener)
-  },
-  getVersion: () => ipcRenderer.invoke('hermes:version'),
-  updates: {
-    check: () => ipcRenderer.invoke('hermes:updates:check'),
-    apply: opts => ipcRenderer.invoke('hermes:updates:apply', opts),
-    getBranch: () => ipcRenderer.invoke('hermes:updates:branch:get'),
-    setBranch: name => ipcRenderer.invoke('hermes:updates:branch:set', name),
-    onProgress: callback => {
-      const listener = (_event, payload) => callback(payload)
-      ipcRenderer.on('hermes:updates:progress', listener)
-      return () => ipcRenderer.removeListener('hermes:updates:progress', listener)
-    }
-  }
-})
@@ -1,122 +0,0 @@
-import js from '@eslint/js'
-import typescriptEslint from '@typescript-eslint/eslint-plugin'
-import typescriptParser from '@typescript-eslint/parser'
-import perfectionist from 'eslint-plugin-perfectionist'
-import reactPlugin from 'eslint-plugin-react'
-import reactCompiler from 'eslint-plugin-react-compiler'
-import hooksPlugin from 'eslint-plugin-react-hooks'
-import unusedImports from 'eslint-plugin-unused-imports'
-import globals from 'globals'
-
-const noopRule = {
-  meta: { schema: [], type: 'problem' },
-  create: () => ({})
-}
-
-const customRules = {
-  rules: {
-    'no-process-cwd': noopRule,
-    'no-process-env-top-level': noopRule,
-    'no-sync-fs': noopRule,
-    'no-top-level-dynamic-import': noopRule,
-    'no-top-level-side-effects': noopRule
-  }
-}
-
-export default [
-  {
-    ignores: ['**/node_modules/**', '**/dist/**', 'src/**/*.js']
-  },
-  js.configs.recommended,
-  {
-    files: ['**/*.{ts,tsx}'],
-    languageOptions: {
-      globals: {
-        ...globals.browser,
-        ...globals.node
-      },
-      parser: typescriptParser,
-      parserOptions: {
-        ecmaFeatures: { jsx: true },
-        ecmaVersion: 'latest',
-        sourceType: 'module'
-      }
-    },
-    plugins: {
-      '@typescript-eslint': typescriptEslint,
-      'custom-rules': customRules,
-      perfectionist,
-      react: reactPlugin,
-      'react-compiler': reactCompiler,
-      'react-hooks': hooksPlugin,
-      'unused-imports': unusedImports
-    },
-    rules: {
-      '@typescript-eslint/consistent-type-imports': ['error', { prefer: 'type-imports' }],
-      '@typescript-eslint/no-unused-vars': 'off',
-      curly: ['error', 'all'],
-      'no-fallthrough': ['error', { allowEmptyCase: true }],
-      'no-undef': 'off',
-      'no-unused-vars': 'off',
-      'padding-line-between-statements': [
-        1,
-        {
-          blankLine: 'always',
-          next: [
-            'block-like',
-            'block',
-            'return',
-            'if',
-            'class',
-            'continue',
-            'debugger',
-            'break',
-            'multiline-const',
-            'multiline-let'
-          ],
-          prev: '*'
-        },
-        {
-          blankLine: 'always',
-          next: '*',
-          prev: ['case', 'default', 'multiline-const', 'multiline-let', 'multiline-block-like']
-        },
-        { blankLine: 'never', next: ['block', 'block-like'], prev: ['case', 'default'] },
-        { blankLine: 'always', next: ['block', 'block-like'], prev: ['block', 'block-like'] },
-        { blankLine: 'always', next: ['empty'], prev: 'export' },
-        { blankLine: 'never', next: 'iife', prev: ['block', 'block-like', 'empty'] }
-      ],
-      'perfectionist/sort-exports': ['error', { order: 'asc', type: 'natural' }],
-      'perfectionist/sort-imports': [
-        'error',
-        {
-          groups: ['side-effect', 'builtin', 'external', 'internal', 'parent', 'sibling', 'index'],
-          order: 'asc',
-          type: 'natural'
-        }
-      ],
-      'perfectionist/sort-jsx-props': ['error', { order: 'asc', type: 'natural' }],
-      'perfectionist/sort-named-exports': ['error', { order: 'asc', type: 'natural' }],
-      'perfectionist/sort-named-imports': ['error', { order: 'asc', type: 'natural' }],
-      'react-compiler/react-compiler': 'warn',
-      'react-hooks/exhaustive-deps': 'warn',
-      'react-hooks/rules-of-hooks': 'error',
-      'unused-imports/no-unused-imports': 'error'
-    },
-    settings: {
-      react: { version: 'detect' }
-    }
-  },
-  {
-    files: ['**/*.js', '**/*.cjs'],
-    ignores: ['**/node_modules/**', '**/dist/**'],
-    languageOptions: {
-      ecmaVersion: 'latest',
-      globals: { ...globals.node },
-      sourceType: 'commonjs'
-    }
-  },
-  {
-    ignores: ['*.config.*']
-  }
-]
@@ -1,14 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="icon" href="/apple-touch-icon.png" />
-    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
-    <title>Hermes</title>
-  </head>
-  <body>
-    <div id="root" class="scrollbar-dt"></div>
-    <script type="module" src="/src/main.tsx"></script>
-  </body>
-</html>
@@ -1,813 +0,0 @@
-; ============================================================================
-; Hermes Desktop installer — prerequisite detection page
-; ============================================================================
-;
-; A native NSIS Wizard page (using nsDialogs) inserted between the directory
-; selection page and the install-files page. Detects the baseline runtime
-; prerequisites (Python 3.11-3.13, Node.js 20+, and Git for Windows); offers to
-; install missing items via winget.
-;
-; Page sequence:
-;   Welcome → Directory → [PrereqPage] → InstFiles → Finish
-;
-; Hooks used:
-;   customInit               — open $TEMP\Hermes-Installer.log for diagnostics
-;   customPageAfterChangeDir — page declaration (electron-builder's hook for
-;                              inserting a page between Directory and InstFiles)
-;   customInstall            — execute winget for any prereqs the user
-;                              checked on the page; close the log file
-;
-; Diagnostics:
-;   $TEMP\Hermes-Installer.log captures every detection probe (command,
-;   exit code, captured output), the user's checkbox choices, and full
-;   winget stdout/stderr for Python installs. Node.js and Git installs go via
-;   ExecShellWait so UAC comes forward; for those we log start/end plus a
-;   post-install filesystem probe. Users hitting bugs should attach this file.
-;
-; The Function declarations live at top-level in this file so they're parsed
-; at include time; the customPageAfterChangeDir macro references them via
-; the Page directive so the optimizer doesn't strip them.
-;
-; UAC behavior:
-;   Python: --scope user, no UAC.
-;   Node.js: winget-managed install; installer package may request elevation.
-;   Git for Windows: winget-managed install; may request elevation.
-;
-; Detection:
-;   Python: try `py -3.11`/`-3.12`/`-3.13`. The Python launcher
-;     returns exit 0 only when that specific version is installed. The
-;     Microsoft Store "Python stub" doesn't install py.exe, so users with
-;     only the stub get correctly classified as not-installed.
-;   Node.js: require a modern Node (major >= 20). Check PATH first, then the
-;     Hermes-managed %LOCALAPPDATA%\hermes\node\node.exe if present.
-;   Git: check known Git Bash locations for Git for Windows / Hermes-managed Git.
-;   winget: `where winget` returns exit 0 on Win11 / Win10 1809+ with App
-;     Installer. If unavailable, the page shows manual download URLs.
-;
-; Required vs. recommended:
-;   Python, Node.js, and Git Bash are baseline dependencies. The GUI handles the
-;   Hermes source payload, virtualenv, and Python dependency install on first
-;   launch.
-;
-; Skip behaviors:
-;   - All three already detected → page is auto-skipped via Abort
-;   - Silent install (/S) → customInstall winget block skips
-;   - User unchecks all checkboxes → page advances without running winget
-; ============================================================================
-
-!include "LogicLib.nsh"
-!include "nsDialogs.nsh"
-!include "WinMessages.nsh"
-!include "FileFunc.nsh"
-
-Var HermesDialog
-Var HermesPyStatusLabel
-Var HermesPyCheckbox
-Var HermesNodeStatusLabel
-Var HermesNodeCheckbox
-Var HermesGitBashStatusLabel
-Var HermesGitBashCheckbox
-Var HermesFooterLabel
-Var HermesHasWinget
-Var HermesHasPython
-Var HermesHasNode
-Var HermesHasGitBash
-Var HermesInstallPython
-Var HermesInstallNode
-Var HermesInstallGitBash
-Var HermesLogHandle
-Var HermesLogPath
-
-; ----------------------------------------------------------------------------
-; Installer logging
-; ----------------------------------------------------------------------------
-; We write a structured log to $TEMP\Hermes-Installer.log so users can attach
-; it to bug reports when prereq detection or winget installs misbehave.
-;
-; Why this design:
-;   - The wizard's built-in Details panel only exists at runtime; once the
-;     user clicks Finish (or Cancel) it's gone. The file persists.
-;   - NSIS's built-in `LogSet on` / `LogText` requires the "advanced logging"
-;     build of makensis (NSIS_CONFIG_LOG=1), which electron-builder's bundled
-;     binary doesn't include. So we roll our own with FileWrite.
-;   - Python's winget invocation streams stdout/stderr into the log via
-;     nsExec::ExecToStack. Node.js and Git use ExecShellWait instead because
-;     their installers may elevate; this keeps UAC in front of the wizard.
-;   - Detection probes also log exit codes + captured output, so when a user
-;     reports "the page said Python isn't installed but I have it", we can
-;     see exactly which probes ran and what they returned.
-;   - File is opened (truncate mode) in customInit and explicitly closed at
-;     the end of customInstall. If the installer crashes or the user
-;     cancels before customInstall completes, the file remains on disk —
-;     whatever we wrote up to that point survives. FileWrite per-line is a
-;     normal Windows I/O call that hits the kernel buffer cache; the OS
-;     flushes that buffer when the process exits, so even on hard cancel
-;     the user can attach a partial log.
-;
-; Macros:
-;   ${HermesLog} "free-form text"          — emit a timestamped line
-;   ${HermesLogKV} "key" "value"           — emit a "key = value" line
-;   ${HermesLogBlock} "label" "varname"    — emit a delimited block (no `$`)
-;
-; The macros are no-ops when $HermesLogHandle is empty (e.g. if FileOpen
-; failed because $TEMP was unwritable — rare but defensive).
-; ----------------------------------------------------------------------------
-!macro _HermesLogRaw Line
-  ${If} $HermesLogHandle != ""
-    FileWrite $HermesLogHandle "${Line}$\r$\n"
-  ${EndIf}
-!macroend
-
-!macro _HermesLogTimestamped Msg
-  ; ${__TIMESTAMP__} is the BUILD-time stamp, not runtime. We want runtime,
-  ; so use ${GetTime} from FileFunc.nsh. $R0..$R6 = day, month, year, dow,
-  ; hour, minute, second. Stash callers' $R0–$R6 first.
-  Push $R0
-  Push $R1
-  Push $R2
-  Push $R3
-  Push $R4
-  Push $R5
-  Push $R6
-  ${GetTime} "" "L" $R0 $R1 $R2 $R3 $R4 $R5 $R6
-  ${If} $HermesLogHandle != ""
-    FileWrite $HermesLogHandle "[$R2-$R1-$R0 $R4:$R5:$R6] ${Msg}$\r$\n"
-  ${EndIf}
-  Pop $R6
-  Pop $R5
-  Pop $R4
-  Pop $R3
-  Pop $R2
-  Pop $R1
-  Pop $R0
-!macroend
-!define HermesLog "!insertmacro _HermesLogTimestamped"
-
-!macro _HermesLogKV Key Value
-  ${HermesLog} "${Key} = ${Value}"
-!macroend
-!define HermesLogKV "!insertmacro _HermesLogKV"
-
-; HermesLogBlock — write a multi-line block (typically captured command
-; output) with a "--- begin/end ---" frame so it's clear in the log where
-; the captured payload starts and stops. The `Payload` parameter is the
-; NSIS variable name (without `$`) holding the captured string.
-!macro _HermesLogBlock Label PayloadVar
-  ${HermesLog} "--- begin ${Label} ---"
-  !insertmacro _HermesLogRaw "$${PayloadVar}"
-  ${HermesLog} "--- end ${Label} ---"
-!macroend
-!define HermesLogBlock "!insertmacro _HermesLogBlock"
-
-
-; ----------------------------------------------------------------------------
-; HermesDetectPythonViaRegistry — sets $HermesHasPython="1" if a PEP 514
-; entry exists for any of the supported Python versions. Reads HKLM
-; (system-wide installs) then HKCU (per-user installs). Vendor "PythonCore"
-; covers official python.org distributions; "ContinuumAnalytics" covers
-; Anaconda/Miniconda. We don't enumerate other vendors because they're
-; rare in our user base and we'd rather miss them and let winget add a
-; second Python than misclassify something else as a working Python.
-; ----------------------------------------------------------------------------
-Function HermesDetectPythonViaRegistry
-  Push $1
-  Push $2
-
-  ${HermesLog} "registry: scanning HKLM/HKCU SOFTWARE\Python\PythonCore for 3.11/3.12/3.13"
-
-  ; Set view to 64-bit on x64 systems so we read the right hive — the
-  ; default 32-bit view would miss a 64-bit Python install on 64-bit
-  ; Windows. SetRegView 32 restored at function exit.
-  SetRegView 64
-
-  ; Iterate the supported versions. Each is its own ReadRegStr — NSIS
-  ; doesn't have loops over arrays inside functions easily, and four
-  ; copies is clearer than gymnastics with $R0-$R9.
-  ReadRegStr $1 HKLM "SOFTWARE\Python\PythonCore\3.11\InstallPath" ""
-  ${If} $1 != ""
-    ${HermesLog} "  hit: HKLM\Python\PythonCore\3.11\InstallPath = $1"
-    StrCpy $HermesHasPython "1"
-    Goto hermes_py_reg_done
-  ${EndIf}
-  ReadRegStr $1 HKLM "SOFTWARE\Python\PythonCore\3.12\InstallPath" ""
-  ${If} $1 != ""
-    ${HermesLog} "  hit: HKLM\Python\PythonCore\3.12\InstallPath = $1"
-    StrCpy $HermesHasPython "1"
-    Goto hermes_py_reg_done
-  ${EndIf}
-  ReadRegStr $1 HKLM "SOFTWARE\Python\PythonCore\3.13\InstallPath" ""
-  ${If} $1 != ""
-    ${HermesLog} "  hit: HKLM\Python\PythonCore\3.13\InstallPath = $1"
-    StrCpy $HermesHasPython "1"
-    Goto hermes_py_reg_done
-  ${EndIf}
-
-  ReadRegStr $1 HKCU "SOFTWARE\Python\PythonCore\3.11\InstallPath" ""
-  ${If} $1 != ""
-    ${HermesLog} "  hit: HKCU\Python\PythonCore\3.11\InstallPath = $1"
-    StrCpy $HermesHasPython "1"
-    Goto hermes_py_reg_done
-  ${EndIf}
-  ReadRegStr $1 HKCU "SOFTWARE\Python\PythonCore\3.12\InstallPath" ""
-  ${If} $1 != ""
-    ${HermesLog} "  hit: HKCU\Python\PythonCore\3.12\InstallPath = $1"
-    StrCpy $HermesHasPython "1"
-    Goto hermes_py_reg_done
-  ${EndIf}
-  ReadRegStr $1 HKCU "SOFTWARE\Python\PythonCore\3.13\InstallPath" ""
-  ${If} $1 != ""
-    ${HermesLog} "  hit: HKCU\Python\PythonCore\3.13\InstallPath = $1"
-    StrCpy $HermesHasPython "1"
-    Goto hermes_py_reg_done
-  ${EndIf}
-
-  ${HermesLog} "  no registry keys matched"
-
-hermes_py_reg_done:
-  SetRegView 32
-  Pop $2
-  Pop $1
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; HermesDetectPythonViaFilesystem — sets $HermesHasPython="1" if a Python
-; install exists at one of the standard locations. FileExists never runs
-; the binary so this is safe even if the user has the MS Store stub on
-; their PATH. We probe both system-wide (Program Files) and per-user
-; (LocalAppData\Programs) install locations for versions 3.11–3.13.
-; ----------------------------------------------------------------------------
-Function HermesDetectPythonViaFilesystem
-  ${HermesLog} "filesystem: probing standard Python install paths"
-
-  ; System-wide installs (default location for python.org with admin)
-  ${If} ${FileExists} "$PROGRAMFILES64\Python311\python.exe"
-    ${HermesLog} "  hit: $PROGRAMFILES64\Python311\python.exe"
-    StrCpy $HermesHasPython "1"
-    Return
-  ${EndIf}
-  ${If} ${FileExists} "$PROGRAMFILES64\Python312\python.exe"
-    ${HermesLog} "  hit: $PROGRAMFILES64\Python312\python.exe"
-    StrCpy $HermesHasPython "1"
-    Return
-  ${EndIf}
-  ${If} ${FileExists} "$PROGRAMFILES64\Python313\python.exe"
-    ${HermesLog} "  hit: $PROGRAMFILES64\Python313\python.exe"
-    StrCpy $HermesHasPython "1"
-    Return
-  ${EndIf}
-
-  ; Per-user installs (default location for python.org without admin
-  ; or with "Install for me only"). Covers the user-reported case.
-  ${If} ${FileExists} "$LOCALAPPDATA\Programs\Python\Python311\python.exe"
-    ${HermesLog} "  hit: $LOCALAPPDATA\Programs\Python\Python311\python.exe"
-    StrCpy $HermesHasPython "1"
-    Return
-  ${EndIf}
-  ${If} ${FileExists} "$LOCALAPPDATA\Programs\Python\Python312\python.exe"
-    ${HermesLog} "  hit: $LOCALAPPDATA\Programs\Python\Python312\python.exe"
-    StrCpy $HermesHasPython "1"
-    Return
-  ${EndIf}
-  ${If} ${FileExists} "$LOCALAPPDATA\Programs\Python\Python313\python.exe"
-    ${HermesLog} "  hit: $LOCALAPPDATA\Programs\Python\Python313\python.exe"
-    StrCpy $HermesHasPython "1"
-    Return
-  ${EndIf}
-
-  ${HermesLog} "  no filesystem paths matched"
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; HermesProbe — small wrapper around nsExec::ExecToStack that captures both
-; exit code and stdout/stderr into a single log entry. Used instead of bare
-; nsExec::Exec so we have evidence for "the page said X isn't installed but
-; I have it" bug reports.
-;
-; Caller pushes command string onto the stack before Call.
-; On return:
-;   $0 = exit code (0 = success on Windows)
-;   $1 = captured stdout+stderr (truncated by NSIS to ~64KB)
-; Caller's $0/$1 are clobbered; $9 is preserved.
-; ----------------------------------------------------------------------------
-Function HermesProbe
-  ; Stack on entry (top → bottom): <command>, <caller-return-addr>, ...
-  ; Save $9 so we can use it as a local. Standard NSIS stack-arg idiom:
-  ;   Exch $9   ; $9 = arg, old $9 pushed onto stack
-  ;   ... work ...
-  ;   Pop $9    ; restore old $9 (discards arg)
-  Exch $9
-  nsExec::ExecToStack '$9'
-  Pop $0    ; exit code
-  Pop $1    ; captured output
-  ${HermesLog} "probe: $9"
-  ${HermesLog} "  exit = $0"
-  ${If} $1 != ""
-    ${HermesLogBlock} "probe output" "1"
-  ${EndIf}
-  Pop $9    ; restore caller's $9 (discards the command arg)
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; HermesDetectPrereqs — populates $HermesHasWinget / $HermesHasPython /
-; $HermesHasNode / $HermesHasGitBash with "0" or "1". Called from the
-; page-create function. Every probe is logged via HermesProbe.
-; ----------------------------------------------------------------------------
-Function HermesDetectPrereqs
-  ${HermesLog} "=== HermesDetectPrereqs: begin ==="
-
-  ; --- winget ---
-  Push 'cmd.exe /c where winget'
-  Call HermesProbe
-  ${If} $0 == 0
-    StrCpy $HermesHasWinget "1"
-  ${Else}
-    StrCpy $HermesHasWinget "0"
-  ${EndIf}
-  ${HermesLogKV} "HermesHasWinget" "$HermesHasWinget"
-
-  ; --- Python 3.11 / 3.12 / 3.13 ---
-  ; We deliberately accept 3.11–3.13 only and NOT 3.14, because some of
-  ; Hermes' transitive deps (notably pywinpty, which carries Rust crates
-  ; like windows_x86_64_msvc) don't yet publish 3.14 wheels. Without
-  ; wheels, `pip install -e .` falls back to building from sdist, which
-  ; needs a Rust toolchain. Users without one see a confusing "could
-  ; not compile windows_x86_64_msvc build script" error. install.ps1
-  ; sidesteps this by pinning to 3.11 via uv; the desktop installer
-  ; can't easily install uv in the same flow yet, so we just refuse to
-  ; accept 3.14 as "good" and offer 3.11 via winget instead. Revisit
-  ; when 3.14 wheels are widely available across our dep tree.
-  ;
-  ; Detection strategy, in order from most-precise to least-precise.
-  ; Each step uses ONLY operations that don't execute `python.exe`
-  ; directly off PATH — running `python` on Windows can open the
-  ; Microsoft Store if only the "Python stub" is installed, which is
-  ; terrible UX during an installer. We avoid that by:
-  ;   (a) launcher checks (py.exe runs no python until -V),
-  ;   (b) registry reads (PEP 514, no execution at all),
-  ;   (c) filesystem probes via FileExists.
-  StrCpy $HermesHasPython "0"
-
-  ; (1) The py launcher. Ships with python.org installer when
-  ;     "Install launcher for all users" is checked (default for some
-  ;     paths, not for per-user installs without elevation). When
-  ;     present, py -3.X --version returns 0 iff that version exists.
-  Push 'cmd.exe /c py -3.11 --version'
-  Call HermesProbe
-  ${If} $0 == 0
-    StrCpy $HermesHasPython "1"
-  ${Else}
-    Push 'cmd.exe /c py -3.12 --version'
-    Call HermesProbe
-    ${If} $0 == 0
-      StrCpy $HermesHasPython "1"
-    ${Else}
-      Push 'cmd.exe /c py -3.13 --version'
-      Call HermesProbe
-      ${If} $0 == 0
-        StrCpy $HermesHasPython "1"
-      ${EndIf}
-    ${EndIf}
-  ${EndIf}
-  ${HermesLogKV} "after py-launcher probes, HermesHasPython" "$HermesHasPython"
-
-  ; (2) PEP 514 registry probe. Every standards-compliant Python
-  ;     installer registers itself under HKLM or HKCU at
-  ;     SOFTWARE\Python\PythonCore\<version>\InstallPath. The MS Store
-  ;     stub does NOT register here — so we get a clean signal for
-  ;     "real Python is installed" without ever risking the Store
-  ;     popup. Covers the case the user reported: per-user Python.org
-  ;     install without launcher checkbox, plus Anaconda which writes
-  ;     similar keys under a different vendor name.
-  ${If} $HermesHasPython == "0"
-    Call HermesDetectPythonViaRegistry
-    ${HermesLogKV} "after registry probe, HermesHasPython" "$HermesHasPython"
-  ${EndIf}
-
-  ; (3) Filesystem probe of common install locations. Catches edge
-  ;     cases where the installer didn't update the registry (rare
-  ;     but possible with hand-extracted Python or some third-party
-  ;     installers). We only check standard paths — running anything
-  ;     would risk spawning the Store stub.
-  ${If} $HermesHasPython == "0"
-    Call HermesDetectPythonViaFilesystem
-    ${HermesLogKV} "after filesystem probe, HermesHasPython" "$HermesHasPython"
-  ${EndIf}
-
-  ; --- Node.js 20+ ---
-  Push 'cmd.exe /c node -e "process.exit(Number(process.versions.node.split(String.fromCharCode(46))[0]) >= 20 ? 0 : 1)"'
-  Call HermesProbe
-  ${If} $0 == 0
-    StrCpy $HermesHasNode "1"
-  ${ElseIf} ${FileExists} "$LOCALAPPDATA\hermes\node\node.exe"
-    Push '"$LOCALAPPDATA\hermes\node\node.exe" -e "process.exit(Number(process.versions.node.split(String.fromCharCode(46))[0]) >= 20 ? 0 : 1)"'
-    Call HermesProbe
-    ${If} $0 == 0
-      StrCpy $HermesHasNode "1"
-    ${Else}
-      StrCpy $HermesHasNode "0"
-    ${EndIf}
-  ${Else}
-    StrCpy $HermesHasNode "0"
-  ${EndIf}
-  ${HermesLogKV} "HermesHasNode" "$HermesHasNode"
-
-  ; --- Git Bash ---
-  StrCpy $HermesHasGitBash "0"
-  ${If} ${FileExists} "$LOCALAPPDATA\hermes\git\bin\bash.exe"
-    StrCpy $HermesHasGitBash "1"
-  ${ElseIf} ${FileExists} "$LOCALAPPDATA\hermes\git\usr\bin\bash.exe"
-    StrCpy $HermesHasGitBash "1"
-  ${ElseIf} ${FileExists} "$PROGRAMFILES64\Git\bin\bash.exe"
-    StrCpy $HermesHasGitBash "1"
-  ${ElseIf} ${FileExists} "$PROGRAMFILES\Git\bin\bash.exe"
-    StrCpy $HermesHasGitBash "1"
-  ${ElseIf} ${FileExists} "$PROGRAMFILES32\Git\bin\bash.exe"
-    StrCpy $HermesHasGitBash "1"
-  ${ElseIf} ${FileExists} "$LOCALAPPDATA\Programs\Git\bin\bash.exe"
-    StrCpy $HermesHasGitBash "1"
-  ${EndIf}
-  ${HermesLogKV} "HermesHasGitBash" "$HermesHasGitBash"
-
-  ${HermesLog} "=== HermesDetectPrereqs: end ==="
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; HermesRunWinget — invoke `winget install ...` and capture both exit code
-; and full stdout/stderr to the log. Also replays the captured output to the
-; install Details panel via DetailPrint so the user sees progress (batched
-; at end rather than live — acceptable trade-off; winget installs take 30-90
-; seconds and emit ~10-30 lines).
-;
-; Caller pushes:  <args-after-winget>     (e.g. 'install -e --id Python...')
-;                 <human-name>            (e.g. 'Python 3.11')
-; On return:      $0 = winget exit code, $1 = full captured output
-; ----------------------------------------------------------------------------
-Function HermesRunWinget
-  Exch $9       ; $9 = human-name
-  Exch
-  Exch $8       ; $8 = args
-  Push $2       ; preserve for caller
-
-  ${HermesLog} "winget: invoking for $9"
-  ${HermesLog} "  command: winget $8"
-  DetailPrint "Running: winget $8"
-
-  ; ExecToStack captures up to ~64KB of combined stdout+stderr.
-  ; The 'cmd.exe /c' wrapper ensures we use the user's PATH-resolved winget
-  ; and that I/O redirection works portably.
-  nsExec::ExecToStack 'cmd.exe /c winget $8'
-  Pop $0    ; exit code
-  Pop $1    ; captured output
-
-  ${HermesLog} "  exit code = $0"
-  ${If} $1 != ""
-    ${HermesLogBlock} "winget output ($9)" "1"
-    ; Echo captured output to Details panel so user sees what winget did.
-    ; DetailPrint takes one line; the captured blob may contain $\r$\n. We
-    ; pass it whole — DetailPrint handles embedded newlines reasonably.
-    DetailPrint "$1"
-  ${EndIf}
-
-  Pop $2
-  Pop $8
-  Pop $9
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; HermesPrereqPageCreate — builds the prereq page UI. If all items are
-; already installed we Abort, which causes NSIS to skip directly to the next
-; page in the sequence (InstFiles).
-; ----------------------------------------------------------------------------
-Function HermesPrereqPageCreate
-  Call HermesDetectPrereqs
-
-  ${If} $HermesHasPython == "1"
-  ${AndIf} $HermesHasNode == "1"
-  ${AndIf} $HermesHasGitBash == "1"
-    ${HermesLog} "page: all prereqs detected, auto-skipping prereq page"
-    Abort
-  ${EndIf}
-
-  ${HermesLog} "page: rendering prereq page (winget=$HermesHasWinget python=$HermesHasPython node=$HermesHasNode git_bash=$HermesHasGitBash)"
-
-  ; Set the wizard's standard header (top blue/gradient bar). 1037 is the
-  ; title control, 1038 is the subtitle. Without this, the header still
-  ; reads "Choose Install Location" left over from the Directory page.
-  GetDlgItem $0 $HWNDPARENT 1037
-  SendMessage $0 ${WM_SETTEXT} 0 "STR:System Requirements"
-  GetDlgItem $0 $HWNDPARENT 1038
-  SendMessage $0 ${WM_SETTEXT} 0 "STR:Install baseline runtime dependencies before the GUI finishes Hermes setup."
-
-  nsDialogs::Create 1018
-  Pop $HermesDialog
-  ${If} $HermesDialog == error
-    Abort
-  ${EndIf}
-
-  StrCpy $HermesInstallPython "0"
-  StrCpy $HermesInstallNode "0"
-  StrCpy $HermesInstallGitBash "0"
-
-  ; Page body intro. The wizard's header (set above) shows the title
-  ; "System Requirements" and subtitle, so we don't repeat them here.
-  ${If} $HermesHasWinget == "1"
-    ${NSD_CreateLabel} 0u 0u 100% 16u "Detected items are listed below. Missing items can be installed automatically via winget."
-  ${Else}
-    ${NSD_CreateLabel} 0u 0u 100% 16u "Detected items are listed below. Continue setup, then install missing items manually."
-  ${EndIf}
-  Pop $0
-
-  ; --- Python panel ---
-  ${NSD_CreateGroupBox} 0u 18u 100% 30u "Python 3.11-3.13"
-  Pop $0
-  ${If} $HermesHasPython == "1"
-    ${NSD_CreateLabel} 8u 28u 95% 10u "Detected on your system."
-    Pop $HermesPyStatusLabel
-  ${Else}
-    ${If} $HermesHasWinget == "1"
-      ${NSD_CreateLabel} 8u 27u 95% 9u "Not detected."
-      Pop $HermesPyStatusLabel
-      ${NSD_CreateCheckbox} 8u 37u 95% 9u "Install Python 3.11"
-      Pop $HermesPyCheckbox
-      ${NSD_Check} $HermesPyCheckbox
-    ${Else}
-      ${NSD_CreateLabel} 8u 27u 95% 14u "Not detected. Install manually from https://www.python.org/downloads/, then relaunch Hermes."
-      Pop $HermesPyStatusLabel
-    ${EndIf}
-  ${EndIf}
-
-  ; --- Node.js panel ---
-  ${NSD_CreateGroupBox} 0u 50u 100% 30u "Node.js 20+ LTS"
-  Pop $0
-  ${If} $HermesHasNode == "1"
-    ${NSD_CreateLabel} 8u 60u 95% 10u "Detected on your system."
-    Pop $HermesNodeStatusLabel
-  ${Else}
-    ${If} $HermesHasWinget == "1"
-      ${NSD_CreateLabel} 8u 59u 95% 9u "Not detected. Used by Hermes browser tools and Node-backed capabilities."
-      Pop $HermesNodeStatusLabel
-      ${NSD_CreateCheckbox} 8u 69u 95% 9u "Install Node.js LTS"
-      Pop $HermesNodeCheckbox
-      ${NSD_Check} $HermesNodeCheckbox
-    ${Else}
-      ${NSD_CreateLabel} 8u 59u 95% 14u "Not detected. Install manually from https://nodejs.org/en/download/, then relaunch Hermes."
-      Pop $HermesNodeStatusLabel
-    ${EndIf}
-  ${EndIf}
-
-  ; --- Git panel ---
-  ${NSD_CreateGroupBox} 0u 82u 100% 30u "Git for Windows"
-  Pop $0
-  ${If} $HermesHasGitBash == "1"
-    ${NSD_CreateLabel} 8u 92u 95% 10u "Detected on your system."
-    Pop $HermesGitBashStatusLabel
-  ${Else}
-    ${If} $HermesHasWinget == "1"
-      ${NSD_CreateLabel} 8u 91u 95% 9u "Not detected. Provides Git Bash for Hermes terminal commands."
-      Pop $HermesGitBashStatusLabel
-      ${NSD_CreateCheckbox} 8u 101u 95% 9u "Install Git for Windows"
-      Pop $HermesGitBashCheckbox
-      ${NSD_Check} $HermesGitBashCheckbox
-    ${Else}
-      ${NSD_CreateLabel} 8u 91u 95% 14u "Not detected. Install manually from https://git-scm.com/download/win for terminal commands."
-      Pop $HermesGitBashStatusLabel
-    ${EndIf}
-  ${EndIf}
-
-  ${If} $HermesHasPython == "1"
-  ${AndIf} $HermesHasNode == "1"
-  ${AndIf} $HermesHasGitBash == "1"
-    ${NSD_CreateLabel} 0u 116u 100% 18u "After launch, Hermes will finish installing the bundled agent files and Python dependencies in the GUI."
-    Pop $HermesFooterLabel
-  ${ElseIf} $HermesHasWinget == "0"
-    ${NSD_CreateLabel} 0u 116u 100% 18u "Continue setup, then install missing dependencies manually and relaunch Hermes."
-    Pop $HermesFooterLabel
-  ${ElseIf} $HermesHasWinget == "1"
-    ${If} $HermesHasNode == "0"
-    ${OrIf} $HermesHasGitBash == "0"
-      ${NSD_CreateLabel} 0u 116u 100% 18u "Note: Node.js or Git for Windows may request administrator approval. Check your taskbar if hidden."
-      Pop $HermesFooterLabel
-    ${Else}
-      ${NSD_CreateLabel} 0u 116u 100% 18u "Selected missing items will install before launch; Hermes finishes setup in the GUI."
-      Pop $HermesFooterLabel
-    ${EndIf}
-  ${Else}
-    ${NSD_CreateLabel} 0u 116u 100% 18u "Selected missing items will install before launch; Hermes finishes setup in the GUI."
-    Pop $HermesFooterLabel
-  ${EndIf}
-
-  nsDialogs::Show
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; HermesPrereqPageLeave — read checkbox states when the user clicks Next.
-; Variables stay at "0" if a checkbox doesn't exist (because the
-; corresponding prereq is already installed or winget isn't available).
-; ----------------------------------------------------------------------------
-Function HermesPrereqPageLeave
-  ${If} $HermesHasPython == "0"
-  ${AndIf} $HermesHasWinget == "1"
-    ${NSD_GetState} $HermesPyCheckbox $HermesInstallPython
-  ${EndIf}
-  ${If} $HermesHasNode == "0"
-  ${AndIf} $HermesHasWinget == "1"
-    ${NSD_GetState} $HermesNodeCheckbox $HermesInstallNode
-  ${EndIf}
-  ${If} $HermesHasGitBash == "0"
-  ${AndIf} $HermesHasWinget == "1"
-    ${NSD_GetState} $HermesGitBashCheckbox $HermesInstallGitBash
-  ${EndIf}
-  ${HermesLog} "page: user choices — install_python=$HermesInstallPython install_node=$HermesInstallNode install_git_bash=$HermesInstallGitBash"
-FunctionEnd
-
-; ----------------------------------------------------------------------------
-; Page declaration — inserted between the Directory page and InstFiles via
-; the customPageAfterChangeDir hook (defined in
-; node_modules/app-builder-lib/templates/nsis/assistedInstaller.nsh, included
-; whenever build.nsis.oneClick=false).
-;
-; Note: NSIS's optimizer emits "warning 6010: install function ... not
-; referenced" for these functions because Page custom directives don't count
-; as references in the optimizer's reference-tracking pass. We set
-; build.nsis.warningsAsErrors=false in package.json so this warning doesn't
-; fail the build. The functions ARE actually called by NSIS at page-display
-; time — the optimizer just can't see it statically.
-; ----------------------------------------------------------------------------
-!macro customPageAfterChangeDir
-  Page custom HermesPrereqPageCreate HermesPrereqPageLeave
-!macroend
-
-; ----------------------------------------------------------------------------
-; customInit — runs at installer startup, before any page. We use it to open
-; the installer log file. The log path is $TEMP\Hermes-Installer.log; we
-; truncate (mode "w") on each install so users don't get an ever-growing
-; file. Users hitting bugs are asked to attach this file.
-;
-; If FileOpen fails (e.g. $TEMP unwritable, AV blocking) we just leave
-; $HermesLogHandle empty — every log macro is a no-op when the handle is
-; empty, so the installer still works, we just lose the diagnostic.
-; ----------------------------------------------------------------------------
-!macro customInit
-  StrCpy $HermesLogPath "$TEMP\Hermes-Installer.log"
-  ClearErrors
-  FileOpen $HermesLogHandle "$HermesLogPath" w
-  ${If} ${Errors}
-    StrCpy $HermesLogHandle ""
-    ; Don't MessageBox — installers shouldn't bother the user about logging
-    ; failures. We still install successfully; we just won't have a log.
-  ${Else}
-    ; UTF-8 BOM so Notepad / editors don't garble any non-ASCII in winget
-    ; output (which uses ✓ characters and other glyphs in some locales).
-    FileWriteByte $HermesLogHandle "239"
-    FileWriteByte $HermesLogHandle "187"
-    FileWriteByte $HermesLogHandle "191"
-    ${HermesLog} "================================================================"
-    ${HermesLog} "Hermes Desktop installer log"
-    ${HermesLog} "================================================================"
-    ${HermesLogKV} "log path" "$HermesLogPath"
-    ${HermesLogKV} "installer name" "$EXEFILE"
-    ${HermesLogKV} "installer dir" "$EXEDIR"
-    ${HermesLogKV} "install target dir" "$INSTDIR"
-    ${HermesLogKV} "TEMP" "$TEMP"
-    ${HermesLogKV} "WINDIR" "$WINDIR"
-    ${HermesLogKV} "PROGRAMFILES64" "$PROGRAMFILES64"
-    ${HermesLogKV} "LOCALAPPDATA" "$LOCALAPPDATA"
-    ${HermesLog} "================================================================"
-  ${EndIf}
-!macroend
-
-; ----------------------------------------------------------------------------
-; customInstall — runs the actual winget commands for whatever prereqs the
-; user checked on the page. Output streams to the install progress log AND
-; to $HermesLogPath via HermesRunWinget.
-; ----------------------------------------------------------------------------
-!macro customInstall
-  ${HermesLog} "=== customInstall: begin ==="
-
-  ; Tell the user where the log lives so they can attach it if anything
-  ; goes wrong. Shown in the install Details panel.
-  ${If} $HermesLogHandle != ""
-    DetailPrint "Installer log: $HermesLogPath"
-  ${EndIf}
-
-  ; Skip on silent installs (managed deploys handle prereqs out-of-band).
-  IfSilent 0 hermes_prereq_not_silent
-  ${HermesLog} "silent install (/S) — skipping prereq winget block"
-  Goto hermes_prereq_install_done
-hermes_prereq_not_silent:
-
-  ${If} $HermesInstallPython == "1"
-    ; Python with --scope user installs to %LOCALAPPDATA%\Programs\Python\
-    ; — no UAC, no foreground chain to preserve. HermesRunWinget captures
-    ; both the Details-panel output AND a copy to the installer log.
-    DetailPrint "Installing Python 3.11 via winget (silent per-user install, no admin prompt)..."
-    Push 'install -e --id Python.Python.3.11 --scope user --silent --disable-interactivity --accept-package-agreements --accept-source-agreements'
-    Push 'Python 3.11'
-    Call HermesRunWinget
-    ${If} $0 != 0
-      DetailPrint "Python install via winget exited with code $0."
-      ${HermesLog} "Python install FAILED (exit $0). User notified via MessageBox."
-      MessageBox MB_OK|MB_ICONEXCLAMATION|MB_TOPMOST "Python install via winget did not complete successfully (exit code $0).$\r$\n$\r$\nSee log: $HermesLogPath$\r$\n$\r$\nAfter this installer finishes, install Python 3.11, 3.12, or 3.13 manually from https://www.python.org/downloads/, then relaunch Hermes. Hermes will not run until Python is installed."
-    ${Else}
-      DetailPrint "Python 3.11 installed successfully."
-      ${HermesLog} "Python install succeeded"
-    ${EndIf}
-  ${EndIf}
-
-  ${If} $HermesInstallNode == "1"
-    DetailPrint "Installing Node.js LTS via winget..."
-    ${HermesLog} "Node.js: starting ExecShellWait — UAC may appear; no stdout capture possible"
-    ${HermesLog} "  command: winget install -e --id OpenJS.NodeJS.LTS --silent --disable-interactivity --accept-package-agreements --accept-source-agreements"
-    ExecShellWait "open" "winget" "install -e --id OpenJS.NodeJS.LTS --silent --disable-interactivity --accept-package-agreements --accept-source-agreements" SW_SHOWNORMAL
-    ${HermesLog} "Node.js: ExecShellWait returned"
-
-    StrCpy $0 "0"
-    ${If} ${FileExists} "$PROGRAMFILES64\nodejs\node.exe"
-      Push '"$PROGRAMFILES64\nodejs\node.exe" -e "process.exit(Number(process.versions.node.split(String.fromCharCode(46))[0]) >= 20 ? 0 : 1)"'
-      Call HermesProbe
-      ${If} $0 == 0
-        StrCpy $0 "1"
-      ${Else}
-        StrCpy $0 "0"
-      ${EndIf}
-    ${EndIf}
-    ${If} $0 == "0"
-    ${AndIf} ${FileExists} "$PROGRAMFILES\nodejs\node.exe"
-      Push '"$PROGRAMFILES\nodejs\node.exe" -e "process.exit(Number(process.versions.node.split(String.fromCharCode(46))[0]) >= 20 ? 0 : 1)"'
-      Call HermesProbe
-      ${If} $0 == 0
-        StrCpy $0 "1"
-      ${Else}
-        StrCpy $0 "0"
-      ${EndIf}
-    ${EndIf}
-    ${If} $0 == "0"
-    ${AndIf} ${FileExists} "$PROGRAMFILES32\nodejs\node.exe"
-      Push '"$PROGRAMFILES32\nodejs\node.exe" -e "process.exit(Number(process.versions.node.split(String.fromCharCode(46))[0]) >= 20 ? 0 : 1)"'
-      Call HermesProbe
-      ${If} $0 == 0
-        StrCpy $0 "1"
-      ${Else}
-        StrCpy $0 "0"
-      ${EndIf}
-    ${EndIf}
-    ${If} $0 == "0"
-    ${AndIf} ${FileExists} "$LOCALAPPDATA\Programs\nodejs\node.exe"
-      Push '"$LOCALAPPDATA\Programs\nodejs\node.exe" -e "process.exit(Number(process.versions.node.split(String.fromCharCode(46))[0]) >= 20 ? 0 : 1)"'
-      Call HermesProbe
-      ${If} $0 == 0
-        StrCpy $0 "1"
-      ${Else}
-        StrCpy $0 "0"
-      ${EndIf}
-    ${EndIf}
-
-    ${If} $0 == "1"
-      DetailPrint "Node.js installed successfully."
-      ${HermesLog} "Node.js install succeeded (version probe positive)"
-    ${Else}
-      DetailPrint "Node.js 20+ could not be validated after install."
-      ${HermesLog} "Node.js install failed, needs a restart, or installed an unsupported version (version probe negative)."
-      MessageBox MB_OK|MB_ICONEXCLAMATION|MB_TOPMOST "Node.js 20+ could not be validated after winget.$\r$\n$\r$\nA restart may be required. See log: $HermesLogPath$\r$\n$\r$\nInstall Node.js 20+ manually from https://nodejs.org/en/download/ if Hermes browser tools or Node-backed capabilities fail."
-    ${EndIf}
-  ${EndIf}
-
-  ${If} $HermesInstallGitBash == "1"
-    DetailPrint "Installing Git for Windows via winget..."
-    ${HermesLog} "Git: starting ExecShellWait — UAC may appear; no stdout capture possible"
-    ${HermesLog} "  command: winget install -e --id Git.Git --silent --disable-interactivity --accept-package-agreements --accept-source-agreements"
-    ExecShellWait "open" "winget" "install -e --id Git.Git --silent --disable-interactivity --accept-package-agreements --accept-source-agreements" SW_SHOWNORMAL
-    ${HermesLog} "Git: ExecShellWait returned"
-
-    StrCpy $0 "0"
-    ${If} ${FileExists} "$PROGRAMFILES64\Git\bin\bash.exe"
-      StrCpy $0 "1"
-    ${ElseIf} ${FileExists} "$PROGRAMFILES\Git\bin\bash.exe"
-      StrCpy $0 "1"
-    ${ElseIf} ${FileExists} "$PROGRAMFILES32\Git\bin\bash.exe"
-      StrCpy $0 "1"
-    ${ElseIf} ${FileExists} "$LOCALAPPDATA\Programs\Git\bin\bash.exe"
-      StrCpy $0 "1"
-    ${EndIf}
-
-    ${If} $0 == "1"
-      DetailPrint "Git for Windows installed successfully."
-      ${HermesLog} "Git install succeeded (filesystem probe positive)"
-    ${Else}
-      DetailPrint "Git for Windows install did not complete (bash.exe not found at standard install locations)."
-      ${HermesLog} "Git install failed or needs a restart (filesystem probe negative)."
-      MessageBox MB_OK|MB_ICONEXCLAMATION|MB_TOPMOST "Git for Windows install via winget did not complete successfully.$\r$\n$\r$\nSee log: $HermesLogPath$\r$\n$\r$\nInstall Git for Windows manually from https://git-scm.com/download/win if Hermes terminal commands fail."
-    ${EndIf}
-  ${EndIf}
-
-  hermes_prereq_install_done:
-  ${HermesLog} "=== customInstall: end ==="
-  ; Flush by closing the log handle. NSIS doesn't expose fflush; FileClose
-  ; both flushes and releases the handle. Subsequent macros become no-ops
-  ; because we null out the handle. This is fine — there are no more log
-  ; sites after customInstall in the install path.
-  ${If} $HermesLogHandle != ""
-    FileClose $HermesLogHandle
-    StrCpy $HermesLogHandle ""
-  ${EndIf}
-!macroend
@@ -1,201 +0,0 @@
-{
-  "name": "hermes",
-  "productName": "Hermes",
-  "private": true,
-  "version": "0.0.0",
-  "description": "Native desktop shell for Hermes Agent.",
-  "author": "Nous Research",
-  "type": "module",
-  "main": "electron/main.cjs",
-  "scripts": {
-    "dev": "concurrently -k \"npm:dev:renderer\" \"npm:dev:electron\"",
-    "dev:fake-boot": "cross-env HERMES_DESKTOP_BOOT_FAKE=1 HERMES_DESKTOP_BOOT_FAKE_STEP_MS=650 npm run dev",
-    "dev:renderer": "node scripts/assert-root-install.cjs && vite --host 127.0.0.1 --port 5174",
-    "dev:electron": "wait-on http://127.0.0.1:5174 && cross-env XCURSOR_SIZE=24 HERMES_DESKTOP_DEV_SERVER=http://127.0.0.1:5174 electron .",
-    "profile:main": "wait-on http://127.0.0.1:5174 && cross-env XCURSOR_SIZE=24 HERMES_DESKTOP_DEV_SERVER=http://127.0.0.1:5174 electron --inspect=9229 .",
-    "profile:main:cpu": "wait-on http://127.0.0.1:5174 && cross-env XCURSOR_SIZE=24 NODE_OPTIONS=--cpu-prof HERMES_DESKTOP_DEV_SERVER=http://127.0.0.1:5174 electron .",
-    "start": "npm run build && electron .",
-    "build": "node scripts/assert-root-install.cjs && tsc -b && vite build",
-    "stage:hermes": "node scripts/stage-hermes-payload.mjs",
-    "builder": "cross-env NODE_OPTIONS=--max-old-space-size=16384 electron-builder",
-    "pack": "npm run build && npm run stage:hermes && npm run builder -- --dir",
-    "dist": "npm run build && npm run stage:hermes && npm run builder",
-    "dist:mac": "npm run build && npm run stage:hermes && npm run builder -- --mac",
-    "dist:mac:dmg": "npm run build && npm run stage:hermes && npm run builder -- --mac dmg",
-    "dist:mac:zip": "npm run build && npm run stage:hermes && npm run builder -- --mac zip",
-    "dist:win": "npm run build && npm run stage:hermes && npm run builder -- --win",
-    "dist:win:msi": "npm run build && npm run stage:hermes && npm run builder -- --win msi",
-    "dist:win:nsis": "npm run build && npm run stage:hermes && npm run builder -- --win nsis",
-    "test:desktop": "node scripts/test-desktop.mjs",
-    "test:desktop:all": "node scripts/test-desktop.mjs all",
-    "test:desktop:dmg": "node scripts/test-desktop.mjs dmg",
-    "test:desktop:existing": "node scripts/test-desktop.mjs existing",
-    "test:desktop:fresh": "node scripts/test-desktop.mjs fresh",
-    "test:desktop:platforms": "node --test electron/bootstrap-platform.test.cjs electron/hardening.test.cjs",
-    "type-check": "tsc -b",
-    "lint": "eslint src/ electron/",
-    "lint:fix": "eslint src/ electron/ --fix",
-    "fmt": "prettier --write 'src/**/*.{ts,tsx}' 'electron/**/*.{js,cjs}' 'vite.config.ts'",
-    "fix": "npm run lint:fix && npm run fmt",
-    "test:ui": "vitest run --environment jsdom",
-    "preview": "node scripts/assert-root-install.cjs && vite preview --host 127.0.0.1 --port 4174"
-  },
-  "dependencies": {
-    "@assistant-ui/react": "^0.12.28",
-    "@assistant-ui/react-streamdown": "^0.1.11",
-    "@audiowave/react": "^0.6.2",
-    "@chenglou/pretext": "^0.0.6",
-    "@hermes/shared": "file:../shared",
-    "@nanostores/react": "^1.1.0",
-    "@nous-research/ui": "^0.13.0",
-    "@radix-ui/react-slot": "^1.2.4",
-    "@streamdown/code": "^1.1.1",
-    "@tabler/icons-react": "^3.41.1",
-    "@tailwindcss/typography": "^0.5.19",
-    "@tailwindcss/vite": "^4.2.4",
-    "@tanstack/react-query": "^5.100.6",
-    "class-variance-authority": "^0.7.1",
-    "clsx": "^2.1.1",
-    "cmdk": "^1.1.1",
-    "hast-util-from-html-isomorphic": "^2.0.0",
-    "hast-util-to-text": "^4.0.2",
-    "ignore": "^7.0.5",
-    "katex": "^0.16.45",
-    "leva": "^0.10.1",
-    "lucide-react": "^0.577.0",
-    "motion": "^12.38.0",
-    "nanostores": "^1.3.0",
-    "radix-ui": "^1.4.3",
-    "react": "^19.2.5",
-    "react-arborist": "^3.5.0",
-    "react-dom": "^19.2.5",
-    "react-router-dom": "^7.14.2",
-    "react-shiki": "^0.9.3",
-    "remark-math": "^6.0.0",
-    "shiki": "^4.0.2",
-    "streamdown": "^2.5.0",
-    "tailwind-merge": "^3.5.0",
-    "tailwindcss": "^4.2.4",
-    "tw-shimmer": "^0.4.11",
-    "unicode-animations": "^1.0.3",
-    "unified": "^11.0.5",
-    "unist-util-visit-parents": "^6.0.2",
-    "use-stick-to-bottom": "^1.1.4",
-    "vfile": "^6.0.3",
-    "web-haptics": "^0.0.6"
-  },
-  "devDependencies": {
-    "@eslint/js": "^9.39.4",
-    "@testing-library/react": "^16.3.2",
-    "@types/hast": "^3.0.4",
-    "@types/node": "^24.12.2",
-    "@types/react": "^19.2.14",
-    "@types/react-dom": "^19.2.3",
-    "@typescript-eslint/eslint-plugin": "^8.59.1",
-    "@typescript-eslint/parser": "^8.59.1",
-    "@vitejs/plugin-react": "^6.0.1",
-    "concurrently": "^9.2.1",
-    "cross-env": "^10.1.0",
-    "electron": "^40.9.3",
-    "electron-builder": "^26.8.1",
-    "eslint": "^9.39.4",
-    "eslint-plugin-perfectionist": "^5.9.0",
-    "eslint-plugin-react": "^7.37.5",
-    "eslint-plugin-react-compiler": "^19.1.0-rc.2",
-    "eslint-plugin-react-hooks": "^7.1.1",
-    "eslint-plugin-unused-imports": "^4.4.1",
-    "globals": "^16.5.0",
-    "jsdom": "^29.1.1",
-    "prettier": "^3.8.3",
-    "typescript": "^6.0.3",
-    "vite": "^8.0.10",
-    "vitest": "^4.1.5",
-    "wait-on": "^9.0.5"
-  },
-  "build": {
-    "electronVersion": "40.9.3",
-    "appId": "com.nousresearch.hermes",
-    "productName": "Hermes",
-    "executableName": "Hermes",
-    "artifactName": "Hermes-${version}-${os}-${arch}.${ext}",
-    "icon": "assets/icon",
-    "directories": {
-      "output": "release"
-    },
-    "files": [
-      "dist/**",
-      "assets/**",
-      "electron/**",
-      "public/**",
-      "package.json"
-    ],
-    "beforeBuild": "scripts/before-build.cjs",
-    "extraResources": [
-      {
-        "from": "build/hermes-agent",
-        "to": "hermes-agent"
-      }
-    ],
-    "asar": true,
-    "afterSign": "scripts/notarize.cjs",
-    "asarUnpack": [
-      "**/*.node"
-    ],
-    "mac": {
-      "category": "public.app-category.developer-tools",
-      "entitlements": "electron/entitlements.mac.plist",
-      "entitlementsInherit": "electron/entitlements.mac.inherit.plist",
-      "extendInfo": {
-        "CFBundleDisplayName": "Hermes",
-        "CFBundleExecutable": "Hermes",
-        "CFBundleName": "Hermes",
-        "NSAudioCaptureUsageDescription": "Hermes uses audio capture for voice conversations.",
-        "NSMicrophoneUsageDescription": "Hermes uses the microphone for voice input and voice conversations."
-      },
-      "gatekeeperAssess": false,
-      "hardenedRuntime": true,
-      "target": [
-        "dmg",
-        "zip"
-      ]
-    },
-    "dmg": {
-      "title": "Install Hermes",
-      "backgroundColor": "#f5f5f7",
-      "iconSize": 96,
-      "window": {
-        "width": 560,
-        "height": 360
-      },
-      "contents": [
-        {
-          "x": 160,
-          "y": 170,
-          "type": "file"
-        },
-        {
-          "x": 400,
-          "y": 170,
-          "type": "link",
-          "path": "/Applications"
-        }
-      ]
-    },
-    "win": {
-      "legalTrademarks": "Hermes",
-      "target": [
-        "nsis",
-        "msi"
-      ]
-    },
-    "nsis": {
-      "oneClick": false,
-      "allowToChangeInstallationDirectory": true,
-      "perMachine": false,
-      "shortcutName": "Hermes",
-      "uninstallDisplayName": "Hermes",
-      "include": "installer/prereq-check.nsh",
-      "warningsAsErrors": false
-    }
-  }
-}
@@ -1,65 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width,initial-scale=1" />
-<title>Preview Demo</title>
-<style>
-  :root { color-scheme: dark; }
-  html, body { height: 100%; margin: 0; }
-  body {
-    font-family: ui-sans-serif, system-ui, -apple-system, "SF Pro Text", sans-serif;
-    background: radial-gradient(1200px 600px at 20% 10%, #4a1a33 0%, #2a1020 40%, #120810 100%);
-    color: #ffe4f1;
-    display: grid;
-    place-items: center;
-    padding: 2rem;
-  }
-  .card {
-    max-width: 520px;
-    padding: 2rem 2.25rem;
-    border: 1px solid rgba(255,182,214,0.18);
-    border-radius: 14px;
-    background: rgba(28,14,22,0.6);
-    backdrop-filter: blur(6px);
-    box-shadow: 0 10px 40px rgba(0,0,0,0.4);
-  }
-  h1 {
-    margin: 0 0 0.5rem;
-    font-size: 1.5rem;
-    letter-spacing: 0.01em;
-  }
-  p { margin: 0.35rem 0; opacity: 0.85; line-height: 1.5; }
-  .dot {
-    display: inline-block; width: 10px; height: 10px; border-radius: 50%;
-    background: #ff6fb5; margin-right: 0.5rem;
-    box-shadow: 0 0 12px #ff6fb5;
-    animation: pulse 1.6s ease-in-out infinite;
-  }
-  @keyframes pulse {
-    0%,100% { transform: scale(1); opacity: 1; }
-    50%     { transform: scale(1.4); opacity: 0.6; }
-  }
-  code {
-    background: rgba(255,182,214,0.10);
-    padding: 0.1rem 0.35rem;
-    border-radius: 4px;
-    font-size: 0.9em;
-  }
-  .time { font-variant-numeric: tabular-nums; opacity: 0.7; font-size: 0.85rem; margin-top: 1rem; }
-</style>
-</head>
-<body>
-  <div class="card">
-    <h1><span class="dot"></span>preview-demo.html</h1>
-    <p>Tiny standalone HTML artifact — no server, no build step.</p>
-    <p>Open directly in a browser via <code>file://</code>.</p>
-    <p class="time" id="t"></p>
-  </div>
-  <script>
-    const el = document.getElementById('t');
-    const tick = () => { el.textContent = new Date().toLocaleString(); };
-    tick(); setInterval(tick, 1000);
-  </script>
-</body>
-</html>
@@ -1,13 +0,0 @@
-"use strict"
-
-const fs = require("fs")
-const path = require("path")
-
-const root = path.resolve(__dirname, "..", "..", "..")
-
-try {
-  fs.accessSync(path.join(root, "node_modules", "vite", "package.json"))
-} catch {
-  console.error(`Run from repo root: cd ${root} && npm ci`)
-  process.exit(1)
-}
@@ -1,9 +0,0 @@
-/**
- * Desktop bundles ship precompiled renderer assets and a staged Hermes payload
- * from extraResources. Returning false here tells electron-builder to skip the
- * node_modules collector/install step, which avoids workspace dependency graph
- * explosions and keeps packaging deterministic across environments.
- */
-module.exports = async function beforeBuild() {
-  return false
-}
@@ -1,77 +0,0 @@
-const fs = require('node:fs')
-const os = require('node:os')
-const path = require('node:path')
-const { execFile } = require('node:child_process')
-
-function run(command, args) {
-  return new Promise((resolve, reject) => {
-    execFile(command, args, (error, stdout, stderr) => {
-      if (error) {
-        // Intentionally omit args from the rejection message: callers pass
-        // notarization credentials (key id, issuer, key file path) here, and
-        // surfacing them in error output would land in CI logs.
-        reject(new Error(`${command} failed: ${stderr?.trim() || stdout?.trim() || error.message}`))
-        return
-      }
-      resolve()
-    })
-  })
-}
-
-function inlineKeyLooksValid(value) {
-  return value.includes('BEGIN PRIVATE KEY') && value.includes('END PRIVATE KEY')
-}
-
-function resolveApiKeyPath(rawValue) {
-  const value = String(rawValue || '').trim()
-  if (!value) return { keyPath: '', cleanup: () => {} }
-
-  if (fs.existsSync(value)) {
-    return { keyPath: value, cleanup: () => {} }
-  }
-
-  if (!inlineKeyLooksValid(value)) {
-    throw new Error('APPLE_API_KEY must be a file path or inline .p8 key content')
-  }
-
-  const tempPath = path.join(os.tmpdir(), `hermes-notary-${Date.now()}-${process.pid}.p8`)
-  fs.writeFileSync(tempPath, value, 'utf8')
-  return {
-    keyPath: tempPath,
-    cleanup: () => fs.rmSync(tempPath, { force: true })
-  }
-}
-
-async function main() {
-  const artifactPath = process.argv[2]
-  if (!artifactPath || !fs.existsSync(artifactPath)) {
-    throw new Error(`Missing artifact to notarize: ${artifactPath || '(none)'}`)
-  }
-
-  const profile = String(process.env.APPLE_NOTARY_PROFILE || '').trim()
-  if (profile) {
-    await run('xcrun', ['notarytool', 'submit', artifactPath, '--keychain-profile', profile, '--wait'])
-    await run('xcrun', ['stapler', 'staple', '-v', artifactPath])
-    return
-  }
-
-  const keyId = String(process.env.APPLE_API_KEY_ID || '').trim()
-  const issuer = String(process.env.APPLE_API_ISSUER || '').trim()
-  const rawApiKey = process.env.APPLE_API_KEY
-  if (!rawApiKey || !keyId || !issuer) {
-    throw new Error('APPLE_API_KEY, APPLE_API_KEY_ID, and APPLE_API_ISSUER are required')
-  }
-
-  const { keyPath, cleanup } = resolveApiKeyPath(rawApiKey)
-  try {
-    await run('xcrun', ['notarytool', 'submit', artifactPath, '--key', keyPath, '--key-id', keyId, '--issuer', issuer, '--wait'])
-    await run('xcrun', ['stapler', 'staple', '-v', artifactPath])
-  } finally {
-    cleanup()
-  }
-}
-
-main().catch(() => {
-  console.error('Notarization failed. Check configuration and command output in secure CI logs.')
-  process.exit(1)
-})
@@ -1,100 +0,0 @@
-const fs = require('node:fs')
-const os = require('node:os')
-const path = require('node:path')
-const { execFile } = require('node:child_process')
-
-function run(command, args) {
-  return new Promise((resolve, reject) => {
-    execFile(command, args, (error, stdout, stderr) => {
-      if (error) {
-        reject(
-          new Error(
-            `${command} ${args.join(' ')} failed: ${stderr?.trim() || stdout?.trim() || error.message}`
-          )
-        )
-        return
-      }
-      resolve({ stdout, stderr })
-    })
-  })
-}
-
-function inlineKeyLooksValid(value) {
-  return value.includes('BEGIN PRIVATE KEY') && value.includes('END PRIVATE KEY')
-}
-
-function resolveApiKeyPath(rawValue) {
-  const value = String(rawValue || '').trim()
-  if (!value) return { keyPath: '', cleanup: () => {} }
-
-  if (fs.existsSync(value)) {
-    return { keyPath: value, cleanup: () => {} }
-  }
-
-  if (!inlineKeyLooksValid(value)) {
-    throw new Error('APPLE_API_KEY must be a file path or inline .p8 key content')
-  }
-
-  const tempPath = path.join(os.tmpdir(), `hermes-notary-${Date.now()}-${process.pid}.p8`)
-  fs.writeFileSync(tempPath, value, 'utf8')
-  return {
-    keyPath: tempPath,
-    cleanup: () => {
-      try {
-        fs.rmSync(tempPath, { force: true })
-      } catch {
-        // Best-effort cleanup.
-      }
-    }
-  }
-}
-
-exports.default = async function notarize(context) {
-  const { electronPlatformName, appOutDir, packager } = context
-  if (electronPlatformName !== 'darwin') return
-
-  const appName = packager.appInfo.productFilename
-  const appPath = path.join(appOutDir, `${appName}.app`)
-  if (!fs.existsSync(appPath)) {
-    throw new Error(`Cannot notarize missing app bundle: ${appPath}`)
-  }
-
-  const profile = String(process.env.APPLE_NOTARY_PROFILE || '').trim()
-  if (profile) {
-    const zipPath = path.join(appOutDir, `${appName}.zip`)
-    await run('ditto', ['-c', '-k', '--sequesterRsrc', '--keepParent', appPath, zipPath])
-    await run('xcrun', ['notarytool', 'submit', zipPath, '--keychain-profile', profile, '--wait'])
-    await run('xcrun', ['stapler', 'staple', '-v', appPath])
-    try {
-      fs.rmSync(zipPath, { force: true })
-    } catch {
-      // Best-effort cleanup.
-    }
-    return
-  }
-
-  const keyId = String(process.env.APPLE_API_KEY_ID || '').trim()
-  const issuer = String(process.env.APPLE_API_ISSUER || '').trim()
-  const rawApiKey = process.env.APPLE_API_KEY
-  if (!rawApiKey || !keyId || !issuer) {
-    console.log(
-      'Skipping notarization: APPLE_API_KEY, APPLE_API_KEY_ID, and APPLE_API_ISSUER are not fully configured.'
-    )
-    return
-  }
-
-  const { keyPath, cleanup } = resolveApiKeyPath(rawApiKey)
-  const zipPath = path.join(appOutDir, `${appName}.zip`)
-  try {
-    await run('ditto', ['-c', '-k', '--sequesterRsrc', '--keepParent', appPath, zipPath])
-    await run('xcrun', ['notarytool', 'submit', zipPath, '--key', keyPath, '--key-id', keyId, '--issuer', issuer, '--wait'])
-    await run('xcrun', ['stapler', 'staple', '-v', appPath])
-  } finally {
-    try {
-      fs.rmSync(zipPath, { force: true })
-    } catch {
-      // Best-effort cleanup.
-    }
-    cleanup()
-  }
-}
@@ -1,109 +0,0 @@
-import fs from 'node:fs/promises'
-import path from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-const DESKTOP_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
-const REPO_ROOT = path.resolve(DESKTOP_ROOT, '../..')
-const OUT_ROOT = path.join(DESKTOP_ROOT, 'build', 'hermes-agent')
-
-const ROOT_FILES = [
-  'README.md',
-  'LICENSE',
-  'pyproject.toml',
-  'run_agent.py',
-  'model_tools.py',
-  'toolsets.py',
-  'batch_runner.py',
-  'trajectory_compressor.py',
-  'toolset_distributions.py',
-  'cli.py',
-  'hermes_constants.py',
-  'hermes_logging.py',
-  'hermes_state.py',
-  'hermes_time.py',
-  'rl_cli.py',
-  'utils.py'
-]
-
-const ROOT_DIRS = [
-  'acp_adapter',
-  'agent',
-  'cron',
-  'gateway',
-  'hermes_cli',
-  'plugins',
-  'scripts',
-  'skills',
-  'tools',
-  'tui_gateway'
-]
-
-const TUI_FILES = ['package.json', 'package-lock.json']
-const TUI_DIRS = ['dist', 'packages/hermes-ink/dist']
-
-const EXCLUDED_NAMES = new Set([
-  '.DS_Store',
-  '.git',
-  '.mypy_cache',
-  '.pytest_cache',
-  '.ruff_cache',
-  '.venv',
-  '__pycache__',
-  'node_modules',
-  'release',
-  'venv'
-])
-
-function keep(entry) {
-  return !EXCLUDED_NAMES.has(entry.name) && !entry.name.endsWith('.pyc') && !entry.name.endsWith('.pyo')
-}
-
-async function exists(target) {
-  try {
-    await fs.access(target)
-    return true
-  } catch {
-    return false
-  }
-}
-
-async function copyFileIfPresent(relativePath) {
-  const from = path.join(REPO_ROOT, relativePath)
-  if (!(await exists(from))) return
-
-  const to = path.join(OUT_ROOT, relativePath)
-  await fs.mkdir(path.dirname(to), { recursive: true })
-  await fs.copyFile(from, to)
-}
-
-async function copyDirIfPresent(relativePath) {
-  const from = path.join(REPO_ROOT, relativePath)
-  if (!(await exists(from))) return
-
-  const to = path.join(OUT_ROOT, relativePath)
-  await fs.cp(from, to, {
-    recursive: true,
-    filter: source => keep({ name: path.basename(source) })
-  })
-}
-
-async function main() {
-  await fs.rm(OUT_ROOT, { force: true, recursive: true })
-  await fs.mkdir(OUT_ROOT, { recursive: true })
-
-  await Promise.all(ROOT_FILES.map(copyFileIfPresent))
-
-  for (const dir of ROOT_DIRS) {
-    await copyDirIfPresent(dir)
-  }
-
-  for (const file of TUI_FILES) {
-    await copyFileIfPresent(path.join('ui-tui', file))
-  }
-
-  for (const dir of TUI_DIRS) {
-    await copyDirIfPresent(path.join('ui-tui', dir))
-  }
-}
-
-await main()
@@ -1,271 +0,0 @@
-import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import { spawn, spawnSync } from 'node:child_process'
-import { fileURLToPath } from 'node:url'
-import { listPackage } from '@electron/asar'
-
-const DESKTOP_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
-const PACKAGE_JSON = JSON.parse(fs.readFileSync(path.join(DESKTOP_ROOT, 'package.json'), 'utf8'))
-const MODE = process.argv[2] || 'help'
-const ARCH = process.arch === 'arm64' ? 'arm64' : 'x64'
-const RELEASE_ROOT = path.join(DESKTOP_ROOT, 'release')
-const APP_PATH = path.join(RELEASE_ROOT, `mac-${ARCH}`, 'Hermes.app')
-const APP_BIN = path.join(APP_PATH, 'Contents', 'MacOS', 'Hermes')
-// Default HERMES_HOME for non-sandboxed mac runs — matches main.cjs's
-// resolveHermesHome(). The fresh-install sandbox launchFresh() sets its own
-// HERMES_HOME and never touches this.
-const DEFAULT_HERMES_HOME = path.join(os.homedir(), '.hermes')
-const VENV_ROOT = path.join(DEFAULT_HERMES_HOME, 'hermes-agent', 'venv')
-const FRESH_SANDBOX_ROOT = path.join(os.tmpdir(), 'hermes-desktop-fresh-install')
-
-function die(message) {
-  console.error(`\n${message}`)
-  process.exit(1)
-}
-
-function run(command, args, options = {}) {
-  const result = spawnSync(command, args, {
-    cwd: options.cwd || DESKTOP_ROOT,
-    env: options.env || process.env,
-    shell: Boolean(options.shell),
-    stdio: 'inherit'
-  })
-
-  if (result.status !== 0) {
-    die(`${command} ${args.join(' ')} failed`)
-  }
-}
-
-function output(command, args) {
-  const result = spawnSync(command, args, {
-    encoding: 'utf8',
-    stdio: ['ignore', 'pipe', 'ignore']
-  })
-
-  return result.status === 0 ? result.stdout.trim() : ''
-}
-
-function exists(target) {
-  return fs.existsSync(target)
-}
-
-function resolveDmgPath() {
-  if (!exists(RELEASE_ROOT)) {
-    return path.join(RELEASE_ROOT, `Hermes-${PACKAGE_JSON.version}-${ARCH}.dmg`)
-  }
-
-  const prefix = `Hermes-${PACKAGE_JSON.version}`
-  const candidates = fs
-    .readdirSync(RELEASE_ROOT)
-    .filter(name => name.endsWith('.dmg'))
-    .filter(name => name.startsWith(prefix))
-    .filter(name => name.includes(ARCH))
-    .sort((a, b) => {
-      const aMtime = fs.statSync(path.join(RELEASE_ROOT, a)).mtimeMs
-      const bMtime = fs.statSync(path.join(RELEASE_ROOT, b)).mtimeMs
-      return bMtime - aMtime
-    })
-
-  if (candidates.length > 0) {
-    return path.join(RELEASE_ROOT, candidates[0])
-  }
-
-  return path.join(RELEASE_ROOT, `Hermes-${PACKAGE_JSON.version}-${ARCH}.dmg`)
-}
-
-function ensureMac() {
-  if (process.platform !== 'darwin') {
-    die('Desktop launch tests are macOS-only from this script.')
-  }
-}
-
-function ensurePackagedApp() {
-  if (process.env.HERMES_DESKTOP_SKIP_BUILD === '1' && exists(APP_BIN)) {
-    return
-  }
-
-  run('npm', ['run', 'pack'])
-}
-
-function ensureDmg() {
-  if (process.env.HERMES_DESKTOP_SKIP_BUILD === '1' && exists(resolveDmgPath())) {
-    return
-  }
-
-  run('npm', ['run', 'dist:mac:dmg'])
-}
-
-function openApp() {
-  if (!exists(APP_PATH)) {
-    die(`Missing packaged app: ${APP_PATH}`)
-  }
-
-  run('open', ['-n', APP_PATH])
-}
-
-function openDmg() {
-  const dmgPath = resolveDmgPath()
-  if (!exists(dmgPath)) {
-    die(`Missing DMG: ${dmgPath}`)
-  }
-
-  run('open', [dmgPath])
-}
-
-const CREDENTIAL_ENV_SUFFIXES = [
-  '_API_KEY',
-  '_TOKEN',
-  '_SECRET',
-  '_PASSWORD',
-  '_CREDENTIALS',
-  '_ACCESS_KEY',
-  '_PRIVATE_KEY',
-  '_OAUTH_TOKEN'
-]
-
-const CREDENTIAL_ENV_NAMES = new Set([
-  'ANTHROPIC_BASE_URL',
-  'ANTHROPIC_TOKEN',
-  'AWS_ACCESS_KEY_ID',
-  'AWS_SECRET_ACCESS_KEY',
-  'AWS_SESSION_TOKEN',
-  'CUSTOM_API_KEY',
-  'GEMINI_BASE_URL',
-  'OPENAI_BASE_URL',
-  'OPENROUTER_BASE_URL',
-  'OLLAMA_BASE_URL',
-  'GROQ_BASE_URL',
-  'XAI_BASE_URL'
-])
-
-function isCredentialEnvVar(name) {
-  if (CREDENTIAL_ENV_NAMES.has(name)) return true
-  return CREDENTIAL_ENV_SUFFIXES.some(suffix => name.endsWith(suffix))
-}
-
-function launchFresh() {
-  if (!exists(APP_BIN)) {
-    die(`Missing app executable: ${APP_BIN}`)
-  }
-
-  const python = output('which', ['python3'])
-  if (!python) {
-    die('python3 is required for fresh bundled-runtime bootstrap.')
-  }
-
-  const sandbox = fs.mkdtempSync(`${FRESH_SANDBOX_ROOT}-`)
-  const userDataDir = path.join(sandbox, 'electron-user-data')
-  const hermesHome = path.join(sandbox, 'hermes-home')
-  const cwd = path.join(sandbox, 'workspace')
-
-  fs.mkdirSync(userDataDir, { recursive: true })
-  fs.mkdirSync(hermesHome, { recursive: true })
-  fs.mkdirSync(cwd, { recursive: true })
-
-  // Strip every credential-shaped env var so the sandbox is actually fresh.
-  // Without this, shell-set OPENAI_API_KEY/OPENAI_BASE_URL/etc. leak into the
-  // packaged backend, making setup.status report "configured" while the
-  // agent's own credential resolution still fails.
-  const env = {}
-  for (const [key, value] of Object.entries(process.env)) {
-    if (isCredentialEnvVar(key)) continue
-    env[key] = value
-  }
-
-  env.HERMES_DESKTOP_CWD = cwd
-  env.HERMES_DESKTOP_IGNORE_EXISTING = '1'
-  env.HERMES_DESKTOP_TEST_MODE = 'fresh-install'
-  env.HERMES_DESKTOP_USER_DATA_DIR = userDataDir
-  env.HERMES_HOME = hermesHome
-  delete env.HERMES_DESKTOP_HERMES
-  delete env.HERMES_DESKTOP_HERMES_ROOT
-
-  const child = spawn(APP_BIN, [], {
-    cwd: os.homedir(),
-    detached: true,
-    env,
-    stdio: 'ignore'
-  })
-  child.unref()
-
-  console.log('\nFresh install sandbox:')
-  console.log(`  root: ${sandbox}`)
-  console.log(`  electron userData: ${userDataDir}`)
-  console.log(`  HERMES_HOME: ${hermesHome}`)
-  console.log(`  cwd: ${cwd}`)
-
-  return { runtimeRoot: path.join(hermesHome, 'hermes-agent', 'venv') }
-}
-
-function validateBundle() {
-  const appAsar = path.join(APP_PATH, 'Contents', 'Resources', 'app.asar')
-  const unpackedIndex = path.join(APP_PATH, 'Contents', 'Resources', 'app.asar.unpacked', 'dist', 'index.html')
-  const required = [
-    APP_BIN,
-    path.join(APP_PATH, 'Contents', 'Resources', 'hermes-agent', 'hermes_cli', 'main.py')
-  ]
-
-  for (const target of required) {
-    if (!exists(target)) {
-      die(`Missing packaged payload file: ${target}`)
-    }
-  }
-
-  if (exists(unpackedIndex)) {
-    return
-  }
-
-  if (!exists(appAsar)) {
-    die(`Missing renderer payload: neither ${unpackedIndex} nor ${appAsar} exists`)
-  }
-
-  const files = listPackage(appAsar)
-  if (!files.includes('/dist/index.html') && !files.includes('dist/index.html')) {
-    die(`Missing renderer payload file in app.asar: ${appAsar} (expected dist/index.html)`)
-  }
-}
-
-function printArtifacts(options = {}) {
-  const runtimeRoot = options.runtimeRoot || VENV_ROOT
-
-  console.log('\nDesktop artifacts:')
-  console.log(`  app: ${APP_PATH}`)
-  console.log(`  dmg: ${resolveDmgPath()}`)
-  console.log(`  runtime: ${runtimeRoot}`)
-}
-
-function help() {
-  console.log(`Usage:
-  npm run test:desktop:existing  # build packaged app, launch with normal PATH/existing Hermes
-  npm run test:desktop:fresh     # build packaged app, launch with temp userData + HERMES_HOME
-  npm run test:desktop:dmg       # build DMG and open it
-  npm run test:desktop:all       # build DMG, validate app payload, print paths
-
-Fast rerun:
-  HERMES_DESKTOP_SKIP_BUILD=1 npm run test:desktop:fresh
-`)
-}
-
-ensureMac()
-
-if (MODE === 'existing') {
-  ensurePackagedApp()
-  validateBundle()
-  openApp()
-  printArtifacts()
-} else if (MODE === 'fresh') {
-  ensurePackagedApp()
-  validateBundle()
-  printArtifacts(launchFresh())
-} else if (MODE === 'dmg') {
-  ensureDmg()
-  openDmg()
-  printArtifacts()
-} else if (MODE === 'all') {
-  ensureDmg()
-  validateBundle()
-  printArtifacts()
-} else {
-  help()
-}
@@ -1,377 +0,0 @@
-import { useStore } from '@nanostores/react'
-import { type ReactNode, useEffect, useMemo, useState } from 'react'
-
-import { useElapsedSeconds } from '@/components/chat/activity-timer'
-import { ActivityTimerText } from '@/components/chat/activity-timer-text'
-import { BrailleSpinner } from '@/components/ui/braille-spinner'
-import { FadeText } from '@/components/ui/fade-text'
-import { AlertCircle, CheckCircle2, Sparkles } from '@/lib/icons'
-import { useEnterAnimation } from '@/lib/use-enter-animation'
-import { cn } from '@/lib/utils'
-import { $activeSessionId } from '@/store/session'
-import {
-  $subagentsBySession,
-  buildSubagentTree,
-  type SubagentNode,
-  type SubagentStatus,
-  type SubagentStreamEntry
-} from '@/store/subagents'
-
-import { OverlayView } from '../overlays/overlay-view'
-
-// Mirrors statusGlyph() in tool-fallback.tsx so subagent rows speak the
-// same visual vocabulary as the chat tool blocks.
-function statusGlyph(status: SubagentStatus): ReactNode {
-  if (status === 'running' || status === 'queued') {
-    return (
-      <BrailleSpinner
-        ariaLabel="Running"
-        className="size-3.5 shrink-0 text-[0.95rem] text-muted-foreground/80"
-        spinner="breathe"
-      />
-    )
-  }
-
-  if (status === 'failed' || status === 'interrupted') {
-    return <AlertCircle aria-label="Failed" className="size-3.5 shrink-0 text-destructive" />
-  }
-
-  return (
-    <CheckCircle2
-      aria-label="Done"
-      className="size-3.5 shrink-0 text-emerald-600/85 dark:text-emerald-400/85"
-    />
-  )
-}
-
-const STREAM_TONE: Record<SubagentStreamEntry['kind'], string> = {
-  progress: 'text-muted-foreground/75',
-  summary: 'text-foreground/85',
-  thinking: 'text-muted-foreground/80',
-  tool: 'text-foreground/85'
-}
-
-function streamGlyph(entry: SubagentStreamEntry): ReactNode {
-  if (entry.isError) {
-    return <AlertCircle aria-hidden className="mt-0.5 size-3 shrink-0 text-destructive" />
-  }
-
-  if (entry.kind === 'tool') {
-    return <span aria-hidden className="mt-0.5 size-1.5 shrink-0 rounded-full bg-foreground/55" />
-  }
-
-  if (entry.kind === 'summary') {
-    return <CheckCircle2 aria-hidden className="mt-0.5 size-3 shrink-0 text-emerald-600/85 dark:text-emerald-400/85" />
-  }
-
-  if (entry.kind === 'thinking') {
-    return <span aria-hidden className="font-mono text-[0.7rem] leading-none text-muted-foreground/70">…</span>
-  }
-
-  return <span aria-hidden className="mt-0.5 size-1 shrink-0 rounded-full bg-muted-foreground/55" />
-}
-
-interface AgentsViewProps {
-  onClose: () => void
-}
-
-export function AgentsView({ onClose }: AgentsViewProps) {
-  const activeSessionId = useStore($activeSessionId)
-  const subagentsBySession = useStore($subagentsBySession)
-
-  const activeSubagents = useMemo(
-    () => (activeSessionId ? (subagentsBySession[activeSessionId] ?? []) : []),
-    [activeSessionId, subagentsBySession]
-  )
-
-  const tree = useMemo(() => buildSubagentTree(activeSubagents), [activeSubagents])
-
-  return (
-    <OverlayView
-      closeLabel="Close agents"
-      contentClassName="px-5 pt-5 pb-4 sm:px-6"
-      onClose={onClose}
-      rootClassName="mx-auto max-w-3xl"
-    >
-      <header className="mb-3 shrink-0">
-        <h2 className="text-sm font-semibold text-foreground">Spawn tree</h2>
-        <p className="text-xs text-muted-foreground/80">Live subagent activity for the current turn.</p>
-      </header>
-      <SubagentTree tree={tree} />
-    </OverlayView>
-  )
-}
-
-const fmtDuration = (seconds?: number) => {
-  if (!seconds || seconds <= 0) return ''
-  if (seconds < 60) return `${seconds.toFixed(1)}s`
-
-  const m = Math.floor(seconds / 60)
-  const s = Math.round(seconds % 60)
-
-  return `${m}m ${s}s`
-}
-
-const fmtTokens = (value?: number) => {
-  if (!value) return ''
-
-  return value >= 1000 ? `${(value / 1000).toFixed(1)}k tok` : `${value} tok`
-}
-
-const fmtAge = (updatedAt: number, nowMs: number) => {
-  const s = Math.max(0, Math.round((nowMs - updatedAt) / 1000))
-  if (s < 2) return 'now'
-  if (s < 60) return `${s}s ago`
-
-  const m = Math.floor(s / 60)
-  if (m < 60) return `${m}m ago`
-
-  return `${Math.floor(m / 60)}h ago`
-}
-
-const flatten = (nodes: readonly SubagentNode[]): SubagentNode[] =>
-  nodes.flatMap(node => [node, ...flatten(node.children)])
-
-interface RootGroup {
-  id: string
-  label: string
-  nodes: SubagentNode[]
-  taskCount: number
-}
-
-function groupDelegations(roots: readonly SubagentNode[]): RootGroup[] {
-  const groups: RootGroup[] = []
-  let n = 0
-
-  for (const node of roots) {
-    const prev = groups.at(-1)
-    const prevTail = prev?.nodes.at(-1)
-    const closeInTime = prevTail ? Math.abs(node.startedAt - prevTail.startedAt) <= 5_000 : false
-    const sameShape = prev && node.taskCount > 1 && prev.taskCount === node.taskCount
-    const uniqueStep = prev ? !prev.nodes.some(item => item.taskIndex === node.taskIndex) : false
-
-    if (prev && sameShape && closeInTime && uniqueStep) {
-      prev.nodes.push(node)
-      continue
-    }
-
-    if (node.taskCount > 1) {
-      n += 1
-      groups.push({ id: `delegation-${n}`, label: `Delegation ${n}`, nodes: [node], taskCount: node.taskCount })
-      continue
-    }
-
-    groups.push({ id: node.id, label: '', nodes: [node], taskCount: node.taskCount })
-  }
-
-  return groups
-}
-
-function SubagentTree({ tree }: { tree: SubagentNode[] }) {
-  const flat = useMemo(() => flatten(tree), [tree])
-  const groups = useMemo(() => groupDelegations(tree), [tree])
-  const [nowMs, setNowMs] = useState(() => Date.now())
-
-  const active = flat.filter(n => n.status === 'running' || n.status === 'queued').length
-  const failed = flat.filter(n => n.status === 'failed' || n.status === 'interrupted').length
-  const tools = flat.reduce((sum, n) => sum + (n.toolCount ?? 0), 0)
-  const files = flat.reduce((sum, n) => sum + n.filesRead.length + n.filesWritten.length, 0)
-  const tokens = flat.reduce((sum, n) => sum + (n.inputTokens ?? 0) + (n.outputTokens ?? 0), 0)
-  const cost = flat.reduce((sum, n) => sum + (n.costUsd ?? 0), 0)
-
-  useEffect(() => {
-    if (active <= 0 || typeof window === 'undefined') return
-
-    const id = window.setInterval(() => setNowMs(Date.now()), 500)
-
-    return () => window.clearInterval(id)
-  }, [active])
-
-  if (tree.length === 0) {
-    return (
-      <div className="grid place-items-center gap-3 py-12 text-center">
-        <Sparkles className="size-6 text-muted-foreground/60" />
-        <p className="text-sm font-medium text-foreground/90">No live subagents</p>
-        <p className="max-w-md text-xs leading-relaxed text-muted-foreground/75">
-          When a turn delegates work, child agents stream their progress here.
-        </p>
-      </div>
-    )
-  }
-
-  const summary = [
-    `${flat.length} ${flat.length === 1 ? 'agent' : 'agents'}`,
-    active > 0 ? `${active} active` : '',
-    failed > 0 ? `${failed} failed` : '',
-    tools > 0 ? `${tools} tools` : '',
-    files > 0 ? `${files} files` : '',
-    tokens > 0 ? fmtTokens(tokens) : '',
-    cost > 0 ? `$${cost.toFixed(2)}` : ''
-  ].filter(Boolean)
-
-  return (
-    <div className="flex min-h-0 min-w-0 flex-1 flex-col gap-4 overflow-hidden">
-      <p className="shrink-0 text-[0.7rem] text-muted-foreground/70">{summary.join(' · ')}</p>
-      <div className="min-h-0 min-w-0 flex-1 overflow-x-hidden overflow-y-auto overscroll-contain pr-1">
-        <div className="flex min-w-0 flex-col gap-6">
-          {groups.map(group => (
-            <DelegationGroup group={group} key={group.id} nowMs={nowMs} />
-          ))}
-        </div>
-      </div>
-    </div>
-  )
-}
-
-function DelegationGroup({ group, nowMs }: { group: RootGroup; nowMs: number }) {
-  if (group.nodes.length === 1 && group.taskCount <= 1) {
-    return <SubagentRow node={group.nodes[0]!} nowMs={nowMs} />
-  }
-
-  const activeWorkers = group.nodes.filter(n => n.status === 'running' || n.status === 'queued').length
-
-  return (
-    <section className="grid min-w-0 gap-3">
-      <p className="text-[0.66rem] font-medium uppercase tracking-wider text-muted-foreground/70">
-        {group.label} <span className="text-muted-foreground/50">·</span> {group.nodes.length} workers
-        {activeWorkers > 0 ? <span className="text-primary/85"> · {activeWorkers} active</span> : null}
-      </p>
-      <div className="grid min-w-0 gap-4">
-        {group.nodes.map(node => (
-          <SubagentRow key={node.id} node={node} nowMs={nowMs} />
-        ))}
-      </div>
-    </section>
-  )
-}
-
-function StreamLine({
-  active,
-  entry,
-  parentRunning,
-  rowKey
-}: {
-  active: boolean
-  entry: SubagentStreamEntry
-  parentRunning: boolean
-  rowKey: string
-}) {
-  const enterRef = useEnterAnimation(parentRunning, `subagent-stream:${rowKey}`)
-  const isMono = entry.kind === 'tool'
-  const tone = entry.isError ? 'text-destructive' : STREAM_TONE[entry.kind]
-
-  return (
-    <div
-      className="flex min-w-0 items-baseline gap-2 text-[0.72rem] leading-relaxed"
-      ref={enterRef}
-    >
-      <span className="flex h-[0.95rem] shrink-0 items-center">{streamGlyph(entry)}</span>
-      <span className={cn('min-w-0 flex-1 wrap-anywhere', tone, isMono && 'font-mono text-[0.69rem]')}>
-        {entry.text}
-        {active ? (
-          <BrailleSpinner
-            ariaLabel="Streaming"
-            className="ml-1 inline-block size-2.5 align-middle text-muted-foreground/70"
-            spinner="breathe"
-          />
-        ) : null}
-      </span>
-    </div>
-  )
-}
-
-function SubagentRow({ node, depth = 0, nowMs }: { node: SubagentNode; depth?: number; nowMs: number }) {
-  const running = node.status === 'running' || node.status === 'queued'
-  const elapsed = useElapsedSeconds(running, `subagent:${node.id}`)
-  const durationSeconds =
-    typeof node.durationSeconds === 'number' ? Math.max(0, Math.round(node.durationSeconds)) : elapsed
-  const [open, setOpen] = useState(() => running || depth < 2)
-  const enterRef = useEnterAnimation(true, `subagent-row:${node.id}`)
-
-  useEffect(() => {
-    if (running) setOpen(true)
-  }, [running])
-
-  const visibleRows = open ? node.stream.slice(-10) : node.stream.slice(-2)
-  const fileLines = [...node.filesWritten.map(p => `+ ${p}`), ...node.filesRead.map(p => `· ${p}`)]
-
-  const subtitle = [
-    node.model,
-    fmtDuration(durationSeconds),
-    node.toolCount ? `${node.toolCount} tools` : '',
-    fmtTokens((node.inputTokens ?? 0) + (node.outputTokens ?? 0)),
-    `updated ${fmtAge(node.updatedAt, nowMs)}`
-  ].filter(Boolean)
-
-  return (
-    <div
-      className={cn('grid min-w-0 max-w-full gap-2', depth > 0 && 'pl-4')}
-      data-slot="tool-block"
-      ref={enterRef}
-    >
-      <button
-        aria-expanded={open}
-        className="group flex w-full min-w-0 items-start gap-2.5 text-left"
-        onClick={() => setOpen(v => !v)}
-        type="button"
-      >
-        <span className="mt-0.5 flex h-[1.1rem] shrink-0 items-center">{statusGlyph(node.status)}</span>
-        <span className="flex min-w-0 flex-1 flex-col gap-0.5">
-          <span
-            className={cn(
-              'wrap-anywhere text-[0.82rem] font-medium leading-[1.1rem] text-foreground/90 transition-colors group-hover:text-foreground',
-              running && 'shimmer text-foreground/65'
-            )}
-          >
-            {node.goal}
-          </span>
-          {subtitle.length > 0 ? (
-            <FadeText className="text-[0.66rem] leading-[1.05rem] text-muted-foreground/65">
-              {subtitle.join(' · ')}
-            </FadeText>
-          ) : null}
-        </span>
-        {running ? <ActivityTimerText className="mt-1 shrink-0 text-[0.6rem]" seconds={durationSeconds} /> : null}
-      </button>
-
-      {visibleRows.length > 0 ? (
-        <div className="grid min-w-0 gap-1 pl-6">
-          {visibleRows.map((entry, i) => (
-            <StreamLine
-              active={running && i === visibleRows.length - 1}
-              entry={entry}
-              key={`${entry.kind}:${entry.at}:${i}`}
-              parentRunning={running}
-              rowKey={`${node.id}:${entry.kind}:${entry.at}`}
-            />
-          ))}
-        </div>
-      ) : null}
-
-      {open && fileLines.length > 0 ? (
-        <div className="grid min-w-0 gap-0.5 pl-6">
-          <p className="text-[0.58rem] font-medium tracking-wider text-muted-foreground/60 uppercase">Files</p>
-          {fileLines.slice(0, 8).map(line => (
-            <p className="wrap-break-word font-mono text-[0.67rem] leading-relaxed text-muted-foreground/80" key={line}>
-              {line}
-            </p>
-          ))}
-          {fileLines.length > 8 ? (
-            <p className="font-mono text-[0.67rem] leading-relaxed text-muted-foreground/65">
-              +{fileLines.length - 8} more files
-            </p>
-          ) : null}
-        </div>
-      ) : null}
-
-      {node.children.length > 0 ? (
-        <div className="grid min-w-0 gap-3 pl-6">
-          {node.children.map(child => (
-            <SubagentRow depth={depth + 1} key={child.id} node={child} nowMs={nowMs} />
-          ))}
-        </div>
-      ) : null}
-    </div>
-  )
-}
-
@@ -1,62 +0,0 @@
-import { describe, expect, it } from 'vitest'
-
-import type { SessionInfo, SessionMessage } from '@/types/hermes'
-
-import { collectArtifactsForSession } from './index'
-
-function makeSession(overrides: Partial<SessionInfo> = {}): SessionInfo {
-  return {
-    ended_at: null,
-    id: 'session-1',
-    input_tokens: 0,
-    is_active: false,
-    last_active: 1000,
-    message_count: 1,
-    model: null,
-    output_tokens: 0,
-    preview: null,
-    source: null,
-    started_at: 1000,
-    title: 'Session',
-    tool_call_count: 0,
-    ...overrides
-  }
-}
-
-describe('collectArtifactsForSession', () => {
-  it('indexes plain https links from assistant text', () => {
-    const artifacts = collectArtifactsForSession(makeSession(), [
-      {
-        content: 'Reference: https://example.com/docs/getting-started',
-        role: 'assistant',
-        timestamp: 2000
-      }
-    ])
-
-    expect(artifacts).toHaveLength(1)
-    expect(artifacts[0]).toMatchObject({
-      href: 'https://example.com/docs/getting-started',
-      kind: 'link',
-      value: 'https://example.com/docs/getting-started'
-    })
-  })
-
-  it('indexes http links present in tool JSON payloads', () => {
-    const messages: SessionMessage[] = [
-      {
-        content: JSON.stringify({ source_url: 'https://example.com/changelog/latest' }),
-        role: 'tool',
-        timestamp: 3000
-      }
-    ]
-
-    const artifacts = collectArtifactsForSession(makeSession({ id: 'session-2' }), messages)
-
-    expect(artifacts).toHaveLength(1)
-    expect(artifacts[0]).toMatchObject({
-      href: 'https://example.com/changelog/latest',
-      kind: 'link',
-      value: 'https://example.com/changelog/latest'
-    })
-  })
-})
@@ -1,954 +0,0 @@
-import type * as React from 'react'
-import { useCallback, useEffect, useMemo, useState } from 'react'
-import { useNavigate } from 'react-router-dom'
-
-import { ZoomableImage } from '@/components/chat/zoomable-image'
-import { PageLoader } from '@/components/page-loader'
-import { Button } from '@/components/ui/button'
-import { CopyButton } from '@/components/ui/copy-button'
-import { Input } from '@/components/ui/input'
-import {
-  Pagination,
-  PaginationButton,
-  PaginationContent,
-  PaginationEllipsis,
-  PaginationItem,
-  PaginationNext,
-  PaginationPrevious
-} from '@/components/ui/pagination'
-import { getSessionMessages, listSessions } from '@/hermes'
-import { sessionTitle } from '@/lib/chat-runtime'
-import { ExternalLink, ExternalLinkIcon, hostPathLabel, urlSlugTitleLabel, useLinkTitle } from '@/lib/external-link'
-import { FileImage, FileText, FolderOpen, Layers3, Link2, RefreshCw, Search, X } from '@/lib/icons'
-import { cn } from '@/lib/utils'
-import { notifyError } from '@/store/notifications'
-import type { SessionInfo, SessionMessage } from '@/types/hermes'
-
-import { useRouteEnumParam } from '../hooks/use-route-enum-param'
-import { sessionRoute } from '../routes'
-import type { SetStatusbarItemGroup } from '../shell/statusbar-controls'
-import { titlebarHeaderBaseClass } from '../shell/titlebar'
-import type { SetTitlebarToolGroup } from '../shell/titlebar-controls'
-
-type ArtifactKind = 'image' | 'file' | 'link'
-type ArtifactFilter = 'all' | ArtifactKind
-const ARTIFACT_FILTERS: readonly ArtifactFilter[] = ['all', 'image', 'file', 'link']
-
-interface ArtifactRecord {
-  id: string
-  kind: ArtifactKind
-  value: string
-  href: string
-  label: string
-  sessionId: string
-  sessionTitle: string
-  timestamp: number
-}
-
-const MARKDOWN_IMAGE_RE = /!\[([^\]]*)\]\(([^)\s]+)\)/g
-const MARKDOWN_LINK_RE = /\[([^\]]+)\]\(([^)\s]+)\)/g
-const URL_RE = /https?:\/\/[^\s<>"')]+/g
-const PATH_RE = /(^|[\s("'`])((?:\/|~\/|\.\.?\/)[^\s"'`<>]+(?:\.[a-z0-9]{1,8})?)/gi
-const IMAGE_EXT_RE = /\.(?:png|jpe?g|gif|webp|svg|bmp)(?:\?.*)?$/i
-const FILE_EXT_RE = /\.(?:png|jpe?g|gif|webp|svg|bmp|pdf|txt|json|md|csv|zip|tar|gz|mp3|wav|mp4|mov)(?:\?.*)?$/i
-const KEY_HINT_RE = /(path|file|url|image|artifact|output|download|result|target)/i
-
-const ARTIFACT_TIME_FMT = new Intl.DateTimeFormat(undefined, {
-  day: 'numeric',
-  hour: 'numeric',
-  minute: '2-digit',
-  month: 'short'
-})
-
-function normalizeValue(value: string): string {
-  return value.trim().replace(/[),.;]+$/, '')
-}
-
-function parseMaybeJson(value: string): unknown {
-  if (!value.trim()) {
-    return null
-  }
-
-  try {
-    return JSON.parse(value)
-  } catch {
-    return null
-  }
-}
-
-function looksLikePathOrUrl(value: string): boolean {
-  return (
-    value.startsWith('http://') ||
-    value.startsWith('https://') ||
-    value.startsWith('file://') ||
-    value.startsWith('data:image/') ||
-    value.startsWith('/') ||
-    value.startsWith('./') ||
-    value.startsWith('../') ||
-    value.startsWith('~/')
-  )
-}
-
-function looksLikeArtifact(value: string): boolean {
-  if (/^(?:https?:\/\/|data:image\/)/.test(value)) {
-    return true
-  }
-
-  if (looksLikePathOrUrl(value) && (IMAGE_EXT_RE.test(value) || FILE_EXT_RE.test(value))) {
-    return true
-  }
-
-  return value.startsWith('/') && value.includes('.')
-}
-
-function artifactKind(value: string): ArtifactKind {
-  if (value.startsWith('data:image/') || IMAGE_EXT_RE.test(value)) {
-    return 'image'
-  }
-
-  if (
-    value.startsWith('/') ||
-    value.startsWith('./') ||
-    value.startsWith('../') ||
-    value.startsWith('~/') ||
-    value.startsWith('file://')
-  ) {
-    return 'file'
-  }
-
-  return 'link'
-}
-
-function artifactHref(value: string): string {
-  if (
-    value.startsWith('http://') ||
-    value.startsWith('https://') ||
-    value.startsWith('file://') ||
-    value.startsWith('data:')
-  ) {
-    return value
-  }
-
-  if (value.startsWith('/')) {
-    return `file://${encodeURI(value)}`
-  }
-
-  return value
-}
-
-function artifactLabel(value: string): string {
-  try {
-    const url = new URL(value)
-    const item = url.pathname.split('/').filter(Boolean).pop()
-
-    return item || value
-  } catch {
-    const parts = value.split(/[\\/]/).filter(Boolean)
-
-    return parts.pop() || value
-  }
-}
-
-function messageText(message: SessionMessage): string {
-  if (typeof message.content === 'string' && message.content.trim()) {
-    return message.content
-  }
-
-  if (typeof message.text === 'string' && message.text.trim()) {
-    return message.text
-  }
-
-  if (typeof message.context === 'string' && message.context.trim()) {
-    return message.context
-  }
-
-  return ''
-}
-
-function collectStringValues(
-  value: unknown,
-  keyPath: string,
-  collector: (value: string, keyPath: string) => void
-): void {
-  if (typeof value === 'string') {
-    collector(value, keyPath)
-
-    return
-  }
-
-  if (Array.isArray(value)) {
-    value.forEach((entry, index) => collectStringValues(entry, `${keyPath}.${index}`, collector))
-
-    return
-  }
-
-  if (!value || typeof value !== 'object') {
-    return
-  }
-
-  for (const [key, child] of Object.entries(value as Record<string, unknown>)) {
-    collectStringValues(child, keyPath ? `${keyPath}.${key}` : key, collector)
-  }
-}
-
-function collectArtifactsFromText(text: string, pushValue: (value: string) => void): void {
-  for (const match of text.matchAll(MARKDOWN_IMAGE_RE)) {
-    pushValue(match[2] || '')
-  }
-
-  for (const match of text.matchAll(MARKDOWN_LINK_RE)) {
-    const start = match.index ?? 0
-
-    if (start > 0 && text[start - 1] === '!') {
-      continue
-    }
-
-    const value = match[2] || ''
-
-    if (looksLikeArtifact(value)) {
-      pushValue(value)
-    }
-  }
-
-  for (const match of text.matchAll(URL_RE)) {
-    const value = match[0] || ''
-
-    if (looksLikeArtifact(value)) {
-      pushValue(value)
-    }
-  }
-
-  for (const match of text.matchAll(PATH_RE)) {
-    pushValue(match[2] || '')
-  }
-}
-
-function collectArtifactsFromMessage(message: SessionMessage, pushValue: (value: string) => void): void {
-  const text = messageText(message)
-
-  if (text) {
-    collectArtifactsFromText(text, pushValue)
-  }
-
-  if (message.role !== 'tool' && !Array.isArray(message.tool_calls)) {
-    return
-  }
-
-  if (Array.isArray(message.tool_calls)) {
-    for (const call of message.tool_calls) {
-      collectStringValues(call, 'tool_call', (value, keyPath) => {
-        const normalized = normalizeValue(value)
-
-        if (!normalized) {
-          return
-        }
-
-        if (KEY_HINT_RE.test(keyPath) && (looksLikePathOrUrl(normalized) || FILE_EXT_RE.test(normalized))) {
-          pushValue(normalized)
-        }
-      })
-    }
-  }
-
-  const parsed = parseMaybeJson(text)
-
-  if (parsed !== null) {
-    collectStringValues(parsed, 'tool_result', (value, keyPath) => {
-      const normalized = normalizeValue(value)
-
-      if (!normalized) {
-        return
-      }
-
-      if ((KEY_HINT_RE.test(keyPath) || looksLikePathOrUrl(normalized)) && looksLikeArtifact(normalized)) {
-        pushValue(normalized)
-      }
-    })
-  }
-}
-
-export function collectArtifactsForSession(session: SessionInfo, messages: SessionMessage[]): ArtifactRecord[] {
-  const found = new Map<string, ArtifactRecord>()
-  const title = sessionTitle(session)
-
-  for (const message of messages) {
-    if (message.role !== 'assistant' && message.role !== 'tool') {
-      continue
-    }
-
-    collectArtifactsFromMessage(message, candidate => {
-      const value = normalizeValue(candidate)
-
-      if (!value || !looksLikeArtifact(value)) {
-        return
-      }
-
-      const key = `${session.id}:${value}`
-
-      if (found.has(key)) {
-        return
-      }
-
-      found.set(key, {
-        id: key,
-        kind: artifactKind(value),
-        value,
-        href: artifactHref(value),
-        label: artifactLabel(value),
-        sessionId: session.id,
-        sessionTitle: title,
-        timestamp: message.timestamp || session.last_active || session.started_at || Date.now()
-      })
-    })
-  }
-
-  return Array.from(found.values())
-}
-
-function formatArtifactTime(timestamp: number): string {
-  return ARTIFACT_TIME_FMT.format(new Date(timestamp))
-}
-
-function pageRangeLabel(total: number, page: number, pageSize: number): string {
-  if (total === 0) {
-    return '0'
-  }
-
-  const start = (page - 1) * pageSize + 1
-  const end = Math.min(total, page * pageSize)
-
-  return `${start}-${end} of ${total}`
-}
-
-function paginationItems(page: number, pageCount: number): Array<number | 'ellipsis'> {
-  if (pageCount <= 7) {
-    return Array.from({ length: pageCount }, (_, index) => index + 1)
-  }
-
-  const pages: Array<number | 'ellipsis'> = [1]
-  const start = Math.max(2, page - 1)
-  const end = Math.min(pageCount - 1, page + 1)
-
-  if (start > 2) {
-    pages.push('ellipsis')
-  }
-
-  for (let nextPage = start; nextPage <= end; nextPage += 1) {
-    pages.push(nextPage)
-  }
-
-  if (end < pageCount - 1) {
-    pages.push('ellipsis')
-  }
-
-  pages.push(pageCount)
-
-  return pages
-}
-
-type CellCtx = {
-  onOpen: (href: string) => void | Promise<void>
-  onOpenChat: (sessionId: string) => void
-}
-
-interface ArtifactColumn {
-  Cell: (props: { artifact: ArtifactRecord; ctx: CellCtx }) => React.ReactElement
-  bodyClassName: string
-  header: (filter: ArtifactFilter) => string
-  id: 'location' | 'primary' | 'session'
-  width: (filter: ArtifactFilter) => string
-}
-
-const itemsLabel = (f: ArtifactFilter) => (f === 'link' ? 'links' : f === 'file' ? 'files' : 'items')
-
-interface ArtifactsViewProps extends React.ComponentProps<'section'> {
-  setStatusbarItemGroup?: SetStatusbarItemGroup
-  setTitlebarToolGroup?: SetTitlebarToolGroup
-}
-
-export function ArtifactsView({
-  setStatusbarItemGroup: _setStatusbarItemGroup,
-  setTitlebarToolGroup,
-  ...props
-}: ArtifactsViewProps) {
-  const navigate = useNavigate()
-  const [artifacts, setArtifacts] = useState<ArtifactRecord[] | null>(null)
-  const [query, setQuery] = useState('')
-
-  const [kindFilter, setKindFilter] = useRouteEnumParam('tab', ARTIFACT_FILTERS, 'all')
-
-  const [refreshing, setRefreshing] = useState(false)
-  const [failedImageIds, setFailedImageIds] = useState<Set<string>>(() => new Set())
-  const [imagePage, setImagePage] = useState(1)
-  const [filePage, setFilePage] = useState(1)
-
-  const refreshArtifacts = useCallback(async () => {
-    setRefreshing(true)
-
-    try {
-      const sessions = (await listSessions(30, 1)).sessions
-      const results = await Promise.allSettled(sessions.map(session => getSessionMessages(session.id)))
-      const nextArtifacts: ArtifactRecord[] = []
-
-      results.forEach((result, index) => {
-        if (result.status !== 'fulfilled') {
-          return
-        }
-
-        const session = sessions[index]
-        nextArtifacts.push(...collectArtifactsForSession(session, result.value.messages))
-      })
-
-      setArtifacts(nextArtifacts.sort((a, b) => b.timestamp - a.timestamp))
-    } catch (err) {
-      notifyError(err, 'Artifacts failed to load')
-      setArtifacts([])
-    } finally {
-      setRefreshing(false)
-    }
-  }, [])
-
-  useEffect(() => {
-    void refreshArtifacts()
-  }, [refreshArtifacts])
-
-  useEffect(() => {
-    if (!setTitlebarToolGroup) {
-      return
-    }
-
-    setTitlebarToolGroup('artifacts', [
-      {
-        disabled: refreshing,
-        icon: <RefreshCw className={cn(refreshing && 'animate-spin')} />,
-        id: 'refresh-artifacts',
-        label: refreshing ? 'Refreshing artifacts' : 'Refresh artifacts',
-        onSelect: () => void refreshArtifacts()
-      }
-    ])
-
-    return () => setTitlebarToolGroup('artifacts', [])
-  }, [refreshArtifacts, refreshing, setTitlebarToolGroup])
-
-  useEffect(() => {
-    setImagePage(1)
-    setFilePage(1)
-  }, [artifacts, kindFilter, query])
-
-  const visibleArtifacts = useMemo(() => {
-    if (!artifacts) {
-      return []
-    }
-
-    const q = query.trim().toLowerCase()
-
-    return artifacts.filter(artifact => {
-      if (kindFilter !== 'all' && artifact.kind !== kindFilter) {
-        return false
-      }
-
-      if (!q) {
-        return true
-      }
-
-      return (
-        artifact.label.toLowerCase().includes(q) ||
-        artifact.value.toLowerCase().includes(q) ||
-        artifact.sessionTitle.toLowerCase().includes(q)
-      )
-    })
-  }, [artifacts, kindFilter, query])
-
-  const visibleImageArtifacts = useMemo(
-    () => visibleArtifacts.filter(artifact => artifact.kind === 'image'),
-    [visibleArtifacts]
-  )
-
-  const visibleFileArtifacts = useMemo(
-    () => visibleArtifacts.filter(artifact => artifact.kind !== 'image'),
-    [visibleArtifacts]
-  )
-
-  const imagePageCount = Math.max(1, Math.ceil(visibleImageArtifacts.length / 24))
-  const filePageCount = Math.max(1, Math.ceil(visibleFileArtifacts.length / 100))
-  const currentImagePage = Math.min(imagePage, imagePageCount)
-  const currentFilePage = Math.min(filePage, filePageCount)
-
-  const pagedImageArtifacts = useMemo(
-    () => visibleImageArtifacts.slice((currentImagePage - 1) * 24, currentImagePage * 24),
-    [currentImagePage, visibleImageArtifacts]
-  )
-
-  const pagedFileArtifacts = useMemo(
-    () => visibleFileArtifacts.slice((currentFilePage - 1) * 100, currentFilePage * 100),
-    [currentFilePage, visibleFileArtifacts]
-  )
-
-  const counts = useMemo(() => {
-    const all = artifacts || []
-
-    return {
-      all: all.length,
-      image: all.filter(artifact => artifact.kind === 'image').length,
-      file: all.filter(artifact => artifact.kind === 'file').length,
-      link: all.filter(artifact => artifact.kind === 'link').length
-    }
-  }, [artifacts])
-
-  const openArtifact = useCallback(async (href: string) => {
-    try {
-      if (window.hermesDesktop?.openExternal) {
-        await window.hermesDesktop.openExternal(href)
-      } else {
-        window.open(href, '_blank', 'noopener,noreferrer')
-      }
-    } catch (err) {
-      notifyError(err, 'Open failed')
-    }
-  }, [])
-
-  const markImageFailed = useCallback((id: string) => {
-    setFailedImageIds(current => {
-      if (current.has(id)) {
-        return current
-      }
-
-      return new Set(current).add(id)
-    })
-  }, [])
-
-  const cellCtx: CellCtx = {
-    onOpen: openArtifact,
-    onOpenChat: sessionId => navigate(sessionRoute(sessionId))
-  }
-
-  return (
-    <section {...props} className="flex h-full min-w-0 flex-col overflow-hidden rounded-b-[0.9375rem] bg-background">
-      <header className={titlebarHeaderBaseClass}>
-        <h2 className="pointer-events-auto text-base font-semibold leading-none tracking-tight">Artifacts</h2>
-        <span className="pointer-events-auto text-xs text-muted-foreground">{counts.all} found</span>
-      </header>
-
-      <div className="min-h-0 flex-1 overflow-hidden rounded-b-[1.0625rem] border border-border/50 bg-background/85">
-        <div className="border-b border-border/50 px-4 py-3">
-          <div className="flex flex-wrap items-center gap-2">
-            <FilterButton
-              active={kindFilter === 'all'}
-              icon={Layers3}
-              label={`All (${counts.all})`}
-              onClick={() => setKindFilter('all')}
-            />
-            <FilterButton
-              active={kindFilter === 'image'}
-              icon={FileImage}
-              label={`Images (${counts.image})`}
-              onClick={() => setKindFilter('image')}
-            />
-            <FilterButton
-              active={kindFilter === 'file'}
-              icon={FileText}
-              label={`Files (${counts.file})`}
-              onClick={() => setKindFilter('file')}
-            />
-            <FilterButton
-              active={kindFilter === 'link'}
-              icon={Link2}
-              label={`Links (${counts.link})`}
-              onClick={() => setKindFilter('link')}
-            />
-            <div className="ml-auto w-full max-w-sm min-w-64">
-              <div className="relative">
-                <Search className="pointer-events-none absolute left-2.5 top-1/2 size-3.5 -translate-y-1/2 text-muted-foreground" />
-                <Input
-                  className="h-8 rounded-lg pl-8 pr-8 text-sm"
-                  onChange={event => setQuery(event.target.value)}
-                  placeholder="Search artifacts..."
-                  value={query}
-                />
-                {query && (
-                  <Button
-                    aria-label="Clear search"
-                    className="absolute right-1 top-1/2 h-6 w-6 -translate-y-1/2 text-muted-foreground hover:text-foreground"
-                    onClick={() => setQuery('')}
-                    size="icon"
-                    type="button"
-                    variant="ghost"
-                  >
-                    <X className="size-3.5" />
-                  </Button>
-                )}
-              </div>
-            </div>
-          </div>
-        </div>
-
-        {!artifacts ? (
-          <PageLoader label="Indexing recent session artifacts" />
-        ) : visibleArtifacts.length === 0 ? (
-          <div className="grid h-full place-items-center px-6 text-center">
-            <div>
-              <div className="text-sm font-medium">No artifacts found</div>
-              <div className="mt-1 text-xs text-muted-foreground">
-                Generated images and file outputs will appear here as sessions produce them.
-              </div>
-            </div>
-          </div>
-        ) : (
-          <div className="h-full overflow-y-auto">
-            <div className="flex flex-col gap-4 px-2 pb-2">
-              {visibleImageArtifacts.length > 0 && (
-                <section className="flex flex-col">
-                  <div className="sticky top-0 z-10 -mx-2 flex h-7 items-center gap-3 overflow-x-auto bg-background px-3">
-                    <ArtifactsPagination
-                      className="ml-auto justify-end px-0"
-                      itemLabel="images"
-                      onPageChange={setImagePage}
-                      page={currentImagePage}
-                      pageSize={24}
-                      total={visibleImageArtifacts.length}
-                    />
-                  </div>
-                  <div className="grid grid-cols-[repeat(auto-fill,minmax(12rem,1fr))] items-start gap-2 pt-1.5">
-                    {pagedImageArtifacts.map(artifact => (
-                      <ArtifactImageCard
-                        artifact={artifact}
-                        failedImage={failedImageIds.has(artifact.id)}
-                        key={artifact.id}
-                        onImageError={markImageFailed}
-                        onOpenChat={sessionId => navigate(sessionRoute(sessionId))}
-                      />
-                    ))}
-                  </div>
-                </section>
-              )}
-
-              {visibleFileArtifacts.length > 0 && (
-                <section className="flex flex-col">
-                  <div className="sticky top-0 z-10 -mx-2 flex h-7 items-center gap-3 overflow-x-auto bg-background px-3">
-                    <ArtifactsPagination
-                      className="ml-auto justify-end px-0"
-                      itemLabel={itemsLabel(kindFilter)}
-                      onPageChange={setFilePage}
-                      page={currentFilePage}
-                      pageSize={100}
-                      total={visibleFileArtifacts.length}
-                    />
-                  </div>
-                  <div className="overflow-x-auto rounded-lg border border-border/50 bg-background/70 shadow-[0_0.125rem_0.5rem_color-mix(in_srgb,black_3%,transparent)]">
-                    <ArtifactTable artifacts={pagedFileArtifacts} ctx={cellCtx} filter={kindFilter} />
-                  </div>
-                </section>
-              )}
-            </div>
-          </div>
-        )}
-      </div>
-    </section>
-  )
-}
-
-interface ArtifactsPaginationProps {
-  className?: string
-  itemLabel: string
-  onPageChange: (page: number) => void
-  page: number
-  pageSize: number
-  total: number
-}
-
-function ArtifactsPagination({ className, itemLabel, onPageChange, page, pageSize, total }: ArtifactsPaginationProps) {
-  const pageCount = Math.max(1, Math.ceil(total / pageSize))
-
-  return (
-    <div className={cn('flex h-6 items-center justify-between gap-2 px-1', className)}>
-      <div className="shrink-0 text-[0.62rem] text-muted-foreground">
-        {pageRangeLabel(total, page, pageSize)} {itemLabel}
-      </div>
-      {pageCount > 1 && (
-        <Pagination className="mx-0 w-auto min-w-0 justify-end">
-          <PaginationContent className="gap-0.5">
-            <PaginationItem>
-              <PaginationPrevious disabled={page <= 1} onClick={() => onPageChange(Math.max(1, page - 1))} />
-            </PaginationItem>
-            {paginationItems(page, pageCount).map((item, index) => (
-              <PaginationItem key={`${item}-${index}`}>
-                {item === 'ellipsis' ? (
-                  <PaginationEllipsis />
-                ) : (
-                  <PaginationButton
-                    aria-label={`Go to ${itemLabel} page ${item}`}
-                    isActive={page === item}
-                    onClick={() => onPageChange(item)}
-                  >
-                    {item}
-                  </PaginationButton>
-                )}
-              </PaginationItem>
-            ))}
-            <PaginationItem>
-              <PaginationNext
-                disabled={page >= pageCount}
-                onClick={() => onPageChange(Math.min(pageCount, page + 1))}
-              />
-            </PaginationItem>
-          </PaginationContent>
-        </Pagination>
-      )}
-    </div>
-  )
-}
-
-function FilterButton({
-  active,
-  icon: Icon,
-  label,
-  onClick
-}: {
-  active: boolean
-  icon: typeof Layers3
-  label: string
-  onClick: () => void
-}) {
-  return (
-    <Button
-      className={cn(
-        'h-8 gap-1.5 rounded-md px-2.5 text-xs',
-        active ? 'bg-accent text-foreground' : 'text-muted-foreground hover:text-foreground'
-      )}
-      onClick={onClick}
-      size="sm"
-      type="button"
-      variant="ghost"
-    >
-      <Icon className="size-3.5" />
-      {label}
-    </Button>
-  )
-}
-
-interface ArtifactImageCardProps {
-  artifact: ArtifactRecord
-  failedImage: boolean
-  onImageError: (id: string) => void
-  onOpenChat: (sessionId: string) => void
-}
-
-function ArtifactImageCard({ artifact, failedImage, onImageError, onOpenChat }: ArtifactImageCardProps) {
-  return (
-    <article
-      className={cn(
-        'group/artifact overflow-hidden rounded-lg border border-border/50 bg-background/70 shadow-[0_0.125rem_0.5rem_color-mix(in_srgb,black_3%,transparent)]',
-        'bg-muted/20'
-      )}
-    >
-      <div
-        className={cn(
-          'relative flex h-44 w-full items-center justify-center overflow-hidden border-b border-border/50 bg-[color-mix(in_srgb,var(--dt-muted)_58%,var(--dt-background))] p-1.5',
-          failedImage && 'cursor-default'
-        )}
-      >
-        {!failedImage && (
-          <ZoomableImage
-            alt={artifact.label}
-            className="max-h-40 max-w-full cursor-zoom-in rounded-md object-contain shadow-sm"
-            containerClassName="max-h-full"
-            decoding="async"
-            loading="lazy"
-            onError={() => onImageError(artifact.id)}
-            slot="artifact-media"
-            src={artifact.href}
-          />
-        )}
-      </div>
-
-      <div className="space-y-1.5 p-2">
-        <div className="min-w-0">
-          <div className="mb-0.5 flex items-center gap-1 text-[0.62rem] uppercase tracking-[0.08em] text-muted-foreground">
-            <FileImage className="size-3" />
-            {artifact.kind}
-          </div>
-          <div className="truncate text-xs font-medium">{artifact.label}</div>
-          <div className="mt-0.5 truncate text-[0.62rem] text-muted-foreground">{artifact.value}</div>
-        </div>
-
-        <div className="truncate text-[0.62rem] text-muted-foreground">
-          {artifact.sessionTitle} · {formatArtifactTime(artifact.timestamp)}
-        </div>
-
-        <div className="flex flex-wrap gap-1.5">
-          <Button onClick={() => onOpenChat(artifact.sessionId)} size="xs" type="button" variant="outline">
-            <FolderOpen className="size-3" />
-            Chat
-          </Button>
-        </div>
-      </div>
-    </article>
-  )
-}
-
-// Single click target for any row cell. External URLs render as <ExternalLink>;
-// local actions render as <button>. Padding lives here, NOT on the <td>, so
-// the entire cell area is hoverable and clickable in both branches.
-function ArtifactCellAction({
-  children,
-  href,
-  onClick,
-  title
-}: {
-  children: React.ReactNode
-  href?: string
-  onClick?: () => void
-  title?: string
-}) {
-  if (href) {
-    return (
-      <ExternalLink
-        className="flex h-full w-full min-w-0 items-center gap-2 px-2.5 py-1.5 text-left text-sm leading-snug font-medium text-foreground/90 no-underline transition-colors hover:text-foreground hover:underline"
-        href={href}
-        showExternalIcon={false}
-        title={title}
-      >
-        {children}
-      </ExternalLink>
-    )
-  }
-
-  return (
-    <button
-      className={cn(
-        'flex h-full w-full min-w-0 items-center gap-2 px-2.5 py-1.5 text-left text-sm leading-snug font-medium text-foreground/90 no-underline transition-colors hover:text-foreground hover:underline',
-        'cursor-pointer'
-      )}
-      onClick={onClick}
-      title={title}
-      type="button"
-    >
-      {children}
-    </button>
-  )
-}
-
-function PrimaryCell({ artifact, ctx }: { artifact: ArtifactRecord; ctx: CellCtx }) {
-  const isLink = artifact.kind === 'link'
-  const Icon = isLink ? Link2 : FileText
-  const fetchedTitle = useLinkTitle(isLink ? artifact.href : null)
-  const label = isLink ? fetchedTitle || urlSlugTitleLabel(artifact.href) : artifact.label
-
-  return (
-    <ArtifactCellAction
-      href={isLink ? artifact.href : undefined}
-      onClick={isLink ? undefined : () => void ctx.onOpen(artifact.href)}
-      title={label}
-    >
-      <span className="grid size-7 shrink-0 place-items-center rounded-md bg-muted text-muted-foreground">
-        <Icon className="size-3.5" />
-      </span>
-      <span className={cn('min-w-0 flex-1', isLink ? 'wrap-anywhere' : 'truncate')}>
-        {label}
-        {isLink && <ExternalLinkIcon />}
-      </span>
-    </ArtifactCellAction>
-  )
-}
-
-function LocationCell({ artifact }: { artifact: ArtifactRecord; ctx: CellCtx }) {
-  const isLink = artifact.kind === 'link'
-  const value = isLink ? hostPathLabel(artifact.value) : artifact.value
-  const copyLabel = isLink ? 'Copy URL' : 'Copy path'
-
-  return (
-    <div className="group/location flex min-w-0 items-center gap-1.5">
-      <div
-        className={cn('min-w-0 flex-1 truncate text-xs text-muted-foreground/85', isLink ? 'font-medium' : 'font-mono')}
-        title={artifact.value}
-      >
-        {value}
-      </div>
-      <CopyButton
-        appearance="icon"
-        buttonSize="icon-xs"
-        className="shrink-0 text-muted-foreground opacity-0 transition-opacity hover:text-foreground focus-visible:opacity-100 group-hover/location:opacity-100"
-        iconClassName="size-3.5"
-        label={copyLabel}
-        text={artifact.value}
-        title={copyLabel}
-      />
-    </div>
-  )
-}
-
-function SessionCell({ artifact, ctx }: { artifact: ArtifactRecord; ctx: CellCtx }) {
-  return (
-    <ArtifactCellAction onClick={() => ctx.onOpenChat(artifact.sessionId)} title={artifact.sessionTitle}>
-      <span className="flex min-w-0 flex-col">
-        <span className="truncate">{artifact.sessionTitle}</span>
-        <span className="truncate text-xs font-normal text-muted-foreground/75">
-          {formatArtifactTime(artifact.timestamp)}
-        </span>
-      </span>
-    </ArtifactCellAction>
-  )
-}
-
-const ARTIFACT_COLUMNS: readonly ArtifactColumn[] = [
-  {
-    Cell: PrimaryCell,
-    bodyClassName: 'p-0',
-    header: filter => (filter === 'link' ? 'Link title' : filter === 'file' ? 'Name' : 'Title / name'),
-    id: 'primary',
-    width: filter => (filter === 'link' ? 'w-[50%]' : 'w-[35%]')
-  },
-  {
-    Cell: LocationCell,
-    bodyClassName: 'px-2.5 py-1.5',
-    header: filter => (filter === 'link' ? 'URL' : filter === 'file' ? 'Path' : 'Location'),
-    id: 'location',
-    width: filter => (filter === 'link' ? 'w-[30%]' : 'w-[41%]')
-  },
-  {
-    Cell: SessionCell,
-    bodyClassName: 'p-0',
-    header: () => 'Session',
-    id: 'session',
-    width: filter => (filter === 'link' ? 'w-[20%]' : 'w-[24%]')
-  }
-]
-
-function ArtifactTable({
-  artifacts,
-  ctx,
-  filter
-}: {
-  artifacts: readonly ArtifactRecord[]
-  ctx: CellCtx
-  filter: ArtifactFilter
-}) {
-  return (
-    <table className="w-full min-w-176 table-fixed text-left text-xs">
-      <thead className="border-b border-border/50 bg-muted/35 text-[0.62rem] uppercase tracking-[0.08em] text-muted-foreground">
-        <tr>
-          {ARTIFACT_COLUMNS.map(col => (
-            <th className={cn(col.width(filter), 'px-2.5 py-1.5 font-medium')} key={col.id}>
-              {col.header(filter)}
-            </th>
-          ))}
-        </tr>
-      </thead>
-      <tbody className="divide-y divide-border/45">
-        {artifacts.map(artifact => (
-          <tr className="group/artifact transition-colors hover:bg-muted/30" key={artifact.id}>
-            {ARTIFACT_COLUMNS.map(col => {
-              const Cell = col.Cell
-
-              return (
-                <td className={cn('align-middle', col.bodyClassName)} key={col.id}>
-                  <Cell artifact={artifact} ctx={ctx} />
-                </td>
-              )
-            })}
-          </tr>
-        ))}
-      </tbody>
-    </table>
-  )
-}
@@ -1,109 +0,0 @@
-import { useStore } from '@nanostores/react'
-
-import { FileText, FolderOpen, ImageIcon, Link, X } from '@/lib/icons'
-import { normalizeOrLocalPreviewTarget } from '@/lib/local-preview'
-import type { ComposerAttachment } from '@/store/composer'
-import { notifyError } from '@/store/notifications'
-import { setCurrentSessionPreviewTarget } from '@/store/preview'
-import { $currentCwd } from '@/store/session'
-
-export function AttachmentList({
-  attachments,
-  onRemove
-}: {
-  attachments: ComposerAttachment[]
-  onRemove?: (id: string) => void
-}) {
-  return (
-    <div className="flex max-w-full flex-wrap gap-1.5 px-1 pt-1" data-slot="composer-attachments">
-      {attachments.map(a => (
-        <AttachmentPill attachment={a} key={a.id} onRemove={onRemove} />
-      ))}
-    </div>
-  )
-}
-
-function AttachmentPill({ attachment, onRemove }: { attachment: ComposerAttachment; onRemove?: (id: string) => void }) {
-  const Icon = { folder: FolderOpen, url: Link, image: ImageIcon, file: FileText }[attachment.kind]
-  const cwd = useStore($currentCwd)
-  const canPreview = attachment.kind !== 'folder'
-  const detail = attachment.detail && attachment.detail !== attachment.label ? attachment.detail : undefined
-
-  async function openPreview() {
-    if (!canPreview) {
-      return
-    }
-
-    const rawTarget =
-      attachment.path ||
-      attachment.detail ||
-      attachment.refText?.replace(/^@(file|image|url):/, '') ||
-      attachment.label ||
-      ''
-
-    const target = rawTarget.replace(/^`|`$/g, '')
-
-    if (!target) {
-      return
-    }
-
-    try {
-      const preview = await normalizeOrLocalPreviewTarget(target, cwd || undefined)
-
-      if (!preview) {
-        throw new Error(`Could not preview ${attachment.label}`)
-      }
-
-      setCurrentSessionPreviewTarget(preview, 'manual', target)
-    } catch (error) {
-      notifyError(error, 'Preview unavailable')
-    }
-  }
-
-  return (
-    <div
-      className="group/attachment relative min-w-0 shrink-0"
-      title={attachment.path || attachment.detail || attachment.label}
-    >
-      <button
-        aria-label={canPreview ? `Preview ${attachment.label}` : attachment.label}
-        className="flex max-w-56 items-center gap-2 border border-border/60 bg-background/50 px-2 py-1.5 text-left shadow-[inset_0_1px_0_rgba(255,255,255,0.25)] transition-colors hover:border-primary/35 hover:bg-accent/45 disabled:cursor-default"
-        disabled={!canPreview}
-        onClick={() => void openPreview()}
-        title={canPreview ? `Preview ${attachment.label}` : attachment.label}
-        type="button"
-      >
-        {attachment.previewUrl && attachment.kind === 'image' ? (
-          <img
-            alt={attachment.label}
-            className="size-8 shrink-0 border border-border/70 object-cover"
-            draggable={false}
-            src={attachment.previewUrl}
-          />
-        ) : (
-          <span className="grid size-8 shrink-0 place-items-center border border-border/55 bg-muted/35 text-muted-foreground">
-            <Icon className="size-3.5" />
-          </span>
-        )}
-        <span className="min-w-0">
-          <span className="block truncate text-[0.72rem] font-medium leading-4 text-foreground/90">
-            {attachment.label}
-          </span>
-          {detail && (
-            <span className="block truncate font-mono text-[0.6rem] leading-3 text-muted-foreground/65">{detail}</span>
-          )}
-        </span>
-      </button>
-      {onRemove && (
-        <button
-          aria-label={`Remove ${attachment.label}`}
-          className="absolute -right-1 -top-1 grid size-3.5 place-items-center rounded-full border border-border/70 bg-background text-muted-foreground opacity-0 shadow-xs transition hover:bg-accent hover:text-foreground group-hover/attachment:opacity-100 focus-visible:opacity-100"
-          onClick={() => onRemove(attachment.id)}
-          type="button"
-        >
-          <X className="size-2.5" />
-        </button>
-      )}
-    </div>
-  )
-}
@@ -1,56 +0,0 @@
-import type { Unstable_TriggerAdapter } from '@assistant-ui/core'
-import { ComposerPrimitive } from '@assistant-ui/react'
-import type { ReactNode } from 'react'
-
-export const COMPLETION_DRAWER_CLASS = [
-  'absolute inset-x-0 bottom-[calc(100%-0.5rem)] z-50',
-  'max-h-[min(23rem,calc(100vh-8rem))] overflow-y-auto overscroll-contain',
-  'border border-b-0',
-  'border-[color-mix(in_srgb,var(--dt-ring)_45%,transparent)]',
-  'bg-[color-mix(in_srgb,var(--dt-popover)_96%,transparent)]',
-  'px-1.5 pb-3 pt-1.5 text-popover-foreground',
-  'backdrop-blur-[0.75rem] backdrop-saturate-[1.1]',
-  '[-webkit-backdrop-filter:blur(0.75rem)_saturate(1.1)]',
-  'data-[state=open]:-mb-2',
-  'data-[state=open]:shadow-[0_-0.0625rem_0_0.0625rem_color-mix(in_srgb,var(--dt-ring)_35%,transparent),0_-1rem_2.25rem_-1.75rem_color-mix(in_srgb,var(--dt-foreground)_34%,transparent),0_-0.3125rem_0.875rem_-0.6875rem_color-mix(in_srgb,var(--dt-foreground)_22%,transparent)]'
-].join(' ')
-
-export const COMPLETION_DRAWER_ROW_CLASS = [
-  'flex w-full min-w-0 items-baseline gap-2 rounded-md px-2.5 py-1',
-  'text-left text-xs transition-colors',
-  'hover:bg-[color-mix(in_srgb,var(--dt-accent)_70%,transparent)]',
-  'data-[highlighted]:bg-[color-mix(in_srgb,var(--dt-accent)_70%,transparent)]'
-].join(' ')
-
-export function ComposerCompletionDrawer({
-  adapter,
-  ariaLabel,
-  char,
-  children
-}: {
-  adapter: Unstable_TriggerAdapter
-  ariaLabel: string
-  char: string
-  children: ReactNode
-}) {
-  return (
-    <ComposerPrimitive.Unstable_TriggerPopover
-      adapter={adapter}
-      aria-label={ariaLabel}
-      char={char}
-      className={COMPLETION_DRAWER_CLASS}
-      data-slot="composer-completion-drawer"
-    >
-      {children}
-    </ComposerPrimitive.Unstable_TriggerPopover>
-  )
-}
-
-export function CompletionDrawerEmpty({ children, title }: { children?: ReactNode; title: string }) {
-  return (
-    <div className="px-3 py-3 text-sm text-muted-foreground">
-      <p>{title}</p>
-      {children && <p className="mt-1 text-xs text-muted-foreground/80">{children}</p>}
-    </div>
-  )
-}
@@ -1,119 +0,0 @@
-import { Button } from '@/components/ui/button'
-import {
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuLabel,
-  DropdownMenuSeparator,
-  DropdownMenuSub,
-  DropdownMenuSubContent,
-  DropdownMenuSubTrigger,
-  DropdownMenuTrigger
-} from '@/components/ui/dropdown-menu'
-import { Clipboard, FileText, FolderOpen, ImageIcon, Link, type LucideIcon, MessageSquareText, Plus } from '@/lib/icons'
-import { cn } from '@/lib/utils'
-
-import { GHOST_ICON_BTN } from './controls'
-import type { ChatBarState } from './types'
-
-export function ContextMenu({
-  state,
-  onInsertText,
-  onOpenUrlDialog,
-  onPasteClipboardImage,
-  onPickFiles,
-  onPickFolders,
-  onPickImages
-}: {
-  state: ChatBarState
-  onInsertText: (text: string) => void
-  onOpenUrlDialog: () => void
-  onPasteClipboardImage?: () => void
-  onPickFiles?: () => void
-  onPickFolders?: () => void
-  onPickImages?: () => void
-}) {
-  return (
-    <DropdownMenu>
-      <DropdownMenuTrigger asChild>
-        <Button
-          aria-label={state.tools.label}
-          className={cn(GHOST_ICON_BTN, 'data-[state=open]:bg-accent data-[state=open]:text-foreground')}
-          disabled={!state.tools.enabled}
-          size="icon"
-          title={state.tools.label}
-          type="button"
-          variant="ghost"
-        >
-          <Plus size={18} />
-        </Button>
-      </DropdownMenuTrigger>
-      <DropdownMenuContent align="start" className="w-60" side="top" sideOffset={10}>
-        <DropdownMenuLabel className="text-[0.7rem] font-medium uppercase tracking-wide text-muted-foreground/85">
-          Attach
-        </DropdownMenuLabel>
-        <ContextMenuItem disabled={!onPickFiles} icon={FileText} onSelect={onPickFiles}>
-          Files…
-        </ContextMenuItem>
-        <ContextMenuItem disabled={!onPickFolders} icon={FolderOpen} onSelect={onPickFolders}>
-          Folder…
-        </ContextMenuItem>
-        <ContextMenuItem disabled={!onPickImages} icon={ImageIcon} onSelect={onPickImages}>
-          Images…
-        </ContextMenuItem>
-        <ContextMenuItem disabled={!onPasteClipboardImage} icon={Clipboard} onSelect={onPasteClipboardImage}>
-          Paste image
-        </ContextMenuItem>
-        <ContextMenuItem icon={Link} onSelect={onOpenUrlDialog}>
-          URL…
-        </ContextMenuItem>
-
-        <DropdownMenuSeparator />
-
-        <DropdownMenuSub>
-          <DropdownMenuSubTrigger>
-            <MessageSquareText />
-            <span>Prompt snippets</span>
-          </DropdownMenuSubTrigger>
-          <DropdownMenuSubContent className="w-72">
-            {[
-              { label: 'Code review', text: 'Please review this for bugs, regressions, and missing tests.' },
-              { label: 'Implementation plan', text: 'Please make a concise implementation plan before changing code.' },
-              { label: 'Explain this', text: 'Please explain how this works and point me to the key files.' }
-            ].map(snippet => (
-              <ContextMenuItem icon={MessageSquareText} key={snippet.label} onSelect={() => onInsertText(snippet.text)}>
-                {snippet.label}
-              </ContextMenuItem>
-            ))}
-          </DropdownMenuSubContent>
-        </DropdownMenuSub>
-
-        <DropdownMenuSeparator />
-
-        <div className="px-2 py-1 text-[0.7rem] text-muted-foreground/80">
-          Tip: type <kbd className="rounded bg-muted/70 px-1 py-px font-mono text-[0.65rem]">@</kbd> to reference files
-          inline.
-        </div>
-      </DropdownMenuContent>
-    </DropdownMenu>
-  )
-}
-
-export function ContextMenuItem({
-  children,
-  disabled,
-  icon: Icon,
-  onSelect
-}: {
-  children: string
-  disabled?: boolean
-  icon: LucideIcon
-  onSelect?: () => void
-}) {
-  return (
-    <DropdownMenuItem disabled={disabled} onSelect={onSelect}>
-      <Icon />
-      <span>{children}</span>
-    </DropdownMenuItem>
-  )
-}
@@ -1,253 +0,0 @@
-import { Button } from '@/components/ui/button'
-import { triggerHaptic } from '@/lib/haptics'
-import { ArrowUp, AudioLines, Layers3, Loader2, Mic, MicOff, Square } from '@/lib/icons'
-import { cn } from '@/lib/utils'
-
-import type { ConversationStatus } from './hooks/use-voice-conversation'
-import type { ChatBarState, VoiceStatus } from './types'
-
-export const ICON_BTN = 'size-(--composer-control-size) shrink-0 rounded-full'
-export const GHOST_ICON_BTN = cn(ICON_BTN, 'text-muted-foreground hover:bg-accent hover:text-foreground')
-// Send/voice-conversation primary: solid foreground-on-background circle
-// (reads as black-on-white in light mode, white-on-black in dark mode) to
-// match the reference composer's high-contrast CTA. Keeps the pill itself
-// neutral and lets the action visually dominate the row.
-export const PRIMARY_ICON_BTN = cn(
-  'size-(--composer-control-primary-size,var(--composer-control-size)) shrink-0 rounded-full p-0',
-  'bg-foreground text-background hover:bg-foreground/90',
-  'disabled:bg-foreground/30 disabled:text-background disabled:opacity-100'
-)
-
-interface ConversationProps {
-  active: boolean
-  level: number
-  muted: boolean
-  status: ConversationStatus
-  onEnd: () => void
-  onStart: () => void
-  onStopTurn: () => void
-  onToggleMute: () => void
-}
-
-export function ComposerControls({
-  busy,
-  busyAction,
-  canSubmit,
-  conversation,
-  disabled,
-  hasComposerPayload,
-  state,
-  voiceStatus,
-  onDictate
-}: {
-  busy: boolean
-  busyAction: 'queue' | 'stop'
-  canSubmit: boolean
-  conversation: ConversationProps
-  disabled: boolean
-  hasComposerPayload: boolean
-  state: ChatBarState
-  voiceStatus: VoiceStatus
-  onDictate: () => void
-}) {
-  if (conversation.active) {
-    return <ConversationPill {...conversation} disabled={disabled} />
-  }
-
-  const showVoicePrimary = !busy && !hasComposerPayload
-
-  return (
-    <div className="ml-auto flex shrink-0 items-center gap-(--composer-control-gap)">
-      <DictationButton disabled={disabled} onToggle={onDictate} state={state.voice} status={voiceStatus} />
-      {showVoicePrimary ? (
-        <Button
-          aria-label="Start voice conversation"
-          className={PRIMARY_ICON_BTN}
-          disabled={disabled}
-          onClick={() => {
-            triggerHaptic('open')
-            conversation.onStart()
-          }}
-          size="icon"
-          title="Start voice conversation"
-          type="button"
-        >
-          <AudioLines size={17} />
-        </Button>
-      ) : (
-        <Button
-          aria-label={busy ? (busyAction === 'queue' ? 'Queue message' : 'Stop') : 'Send'}
-          className={PRIMARY_ICON_BTN}
-          disabled={disabled || !canSubmit}
-          title={busy ? (busyAction === 'queue' ? 'Queue message' : 'Stop') : 'Send'}
-          type="submit"
-        >
-          {busy ? (
-            busyAction === 'queue' ? (
-              <Layers3 size={16} />
-            ) : (
-              <span className="block size-3 rounded-[0.1875rem] bg-current" />
-            )
-          ) : (
-            <ArrowUp size={18} />
-          )}
-        </Button>
-      )}
-    </div>
-  )
-}
-
-function ConversationPill({
-  disabled,
-  level,
-  muted,
-  onEnd,
-  onStopTurn,
-  onToggleMute,
-  status
-}: ConversationProps & { disabled: boolean }) {
-  const speaking = status === 'speaking'
-  const listening = status === 'listening' && !muted
-
-  const label =
-    status === 'speaking'
-      ? 'Speaking'
-      : status === 'transcribing'
-        ? 'Transcribing'
-        : status === 'thinking'
-          ? 'Thinking'
-          : muted
-            ? 'Muted'
-            : 'Listening'
-
-  return (
-    <div className="ml-auto flex shrink-0 items-center gap-(--composer-control-gap)">
-      <Button
-        aria-label={muted ? 'Unmute microphone' : 'Mute microphone'}
-        aria-pressed={muted}
-        className={cn(GHOST_ICON_BTN, 'p-0', muted && 'bg-muted text-muted-foreground')}
-        disabled={disabled}
-        onClick={() => {
-          triggerHaptic('selection')
-          onToggleMute()
-        }}
-        size="icon"
-        title={muted ? 'Unmute microphone' : 'Mute microphone'}
-        type="button"
-        variant="ghost"
-      >
-        {muted ? <MicOff size={16} /> : <Mic size={16} />}
-      </Button>
-      {listening && (
-        <Button
-          aria-label="Stop listening and send"
-          className="h-(--composer-control-size) shrink-0 gap-1.5 rounded-full px-2.5 text-xs text-muted-foreground hover:bg-accent hover:text-foreground"
-          disabled={disabled}
-          onClick={() => {
-            triggerHaptic('submit')
-            onStopTurn()
-          }}
-          title="Stop listening and send"
-          type="button"
-          variant="ghost"
-        >
-          <Square className="fill-current" size={11} />
-          <span>Stop</span>
-        </Button>
-      )}
-      <Button
-        aria-label="End voice conversation"
-        className="h-(--composer-control-size) gap-1.5 rounded-full bg-primary px-3 text-xs font-medium text-primary-foreground hover:bg-primary/90"
-        disabled={disabled}
-        onClick={() => {
-          triggerHaptic('close')
-          onEnd()
-        }}
-        title="End voice conversation"
-        type="button"
-      >
-        <ConversationIndicator level={level} listening={listening} speaking={speaking} />
-        <span>End</span>
-      </Button>
-      <span className="sr-only" role="status">
-        {label}
-      </span>
-    </div>
-  )
-}
-
-function ConversationIndicator({
-  level,
-  listening,
-  speaking
-}: {
-  level: number
-  listening: boolean
-  speaking: boolean
-}) {
-  if (speaking) {
-    return <Loader2 className="animate-spin" size={12} />
-  }
-
-  const bars = [0.55, 0.85, 1, 0.85, 0.55]
-  const normalized = Math.max(0, Math.min(level, 1))
-
-  return (
-    <span aria-hidden="true" className="flex h-3 items-center gap-0.5">
-      {bars.map((weight, index) => {
-        const height = listening ? 0.3 + Math.min(0.7, normalized * weight) : 0.3
-
-        return <span className="w-0.5 rounded-full bg-current" key={index} style={{ height: `${height * 100}%` }} />
-      })}
-    </span>
-  )
-}
-
-function DictationButton({
-  disabled,
-  state,
-  status,
-  onToggle
-}: {
-  disabled: boolean
-  state: ChatBarState['voice']
-  status: VoiceStatus
-  onToggle: () => void
-}) {
-  const active = state.active || status !== 'idle'
-
-  const aria =
-    status === 'recording' ? 'Stop dictation' : status === 'transcribing' ? 'Transcribing dictation' : 'Voice dictation'
-
-  return (
-    <Button
-      aria-label={aria}
-      aria-pressed={active}
-      className={cn(
-        GHOST_ICON_BTN,
-        'p-0',
-        'data-[active=true]:bg-accent data-[active=true]:text-foreground',
-        status === 'recording' && 'bg-primary/10 text-primary hover:bg-primary/15 hover:text-primary',
-        status === 'transcribing' && 'bg-primary/10 text-primary'
-      )}
-      data-active={active}
-      disabled={disabled || !state.enabled || status === 'transcribing'}
-      onClick={() => {
-        triggerHaptic(active ? 'close' : 'open')
-        onToggle()
-      }}
-      size="icon"
-      title={aria}
-      type="button"
-      variant="ghost"
-    >
-      {status === 'recording' ? (
-        <Square className="fill-current" size={12} />
-      ) : status === 'transcribing' ? (
-        <Loader2 className="animate-spin" size={16} />
-      ) : (
-        <Mic size={16} />
-      )}
-    </Button>
-  )
-}
@@ -1,71 +0,0 @@
-import type { ReactNode } from 'react'
-
-import { COMPLETION_DRAWER_CLASS } from './completion-drawer'
-
-const COMMON_COMMANDS: [string, string][] = [
-  ['/help', 'full list of commands + hotkeys'],
-  ['/clear', 'start a new session'],
-  ['/resume', 'resume a prior session'],
-  ['/details', 'control transcript detail level'],
-  ['/copy', 'copy selection or last assistant message'],
-  ['/quit', 'exit hermes']
-]
-
-const HOTKEYS: [string, string][] = [
-  ['@', 'reference files, folders, urls, git'],
-  ['/', 'slash command palette'],
-  ['?', 'this quick help (delete to dismiss)'],
-  ['Enter', 'send · Shift+Enter for newline'],
-  ['Cmd/Ctrl+K', 'send next queued turn'],
-  ['Cmd/Ctrl+L', 'redraw'],
-  ['Esc', 'close popover · cancel run'],
-  ['↑ / ↓', 'cycle popover / history']
-]
-
-export function HelpHint() {
-  return (
-    <div className={COMPLETION_DRAWER_CLASS} data-slot="composer-completion-drawer" data-state="open" role="dialog">
-      <Section title="Common commands">
-        {COMMON_COMMANDS.map(([key, desc]) => (
-          <Row description={desc} key={key} keyLabel={key} mono />
-        ))}
-      </Section>
-
-      <Section title="Hotkeys">
-        {HOTKEYS.map(([key, desc]) => (
-          <Row description={desc} key={key} keyLabel={key} />
-        ))}
-      </Section>
-
-      <p className="px-2.5 py-1 text-xs text-muted-foreground/80">
-        <span className="font-mono text-foreground/80">/help</span> opens the full panel · backspace dismisses
-      </p>
-    </div>
-  )
-}
-
-function Section({ children, title }: { children: ReactNode; title: string }) {
-  return (
-    <div className="grid gap-0.5 pt-0.5">
-      <p className="px-2.5 pb-0.5 pt-1 text-[0.65rem] font-medium uppercase tracking-wide text-muted-foreground/75">
-        {title}
-      </p>
-      {children}
-    </div>
-  )
-}
-
-function Row({ description, keyLabel, mono = false }: { description: string; keyLabel: string; mono?: boolean }) {
-  return (
-    <div className="flex min-w-0 items-baseline gap-2 rounded-md px-2.5 py-1 text-xs">
-      <span
-        className={
-          mono ? 'shrink-0 truncate font-mono font-medium text-foreground/85' : 'shrink-0 truncate text-foreground/85'
-        }
-      >
-        {keyLabel}
-      </span>
-      <span className="min-w-0 truncate text-muted-foreground/80">{description}</span>
-    </div>
-  )
-}
@@ -1,141 +0,0 @@
-import type { Unstable_TriggerAdapter, Unstable_TriggerItem } from '@assistant-ui/core'
-import { useCallback } from 'react'
-
-import type { HermesGateway } from '@/hermes'
-
-import type { CompletionEntry, CompletionPayload } from './use-live-completion-adapter'
-import { useLiveCompletionAdapter } from './use-live-completion-adapter'
-
-const KIND_RE = /^@(file|folder|url|image|tool|git):(.*)$/
-const REF_STARTERS = new Set(['file', 'folder', 'url', 'image', 'tool', 'git'])
-
-const STARTER_META: Record<string, string> = {
-  file: 'Attach a file reference',
-  folder: 'Attach a folder reference',
-  url: 'Attach a URL reference',
-  image: 'Attach an image reference',
-  tool: 'Attach a tool reference',
-  git: 'Attach git context'
-}
-
-function starterEntries(query: string): CompletionEntry[] {
-  const q = query.trim().toLowerCase()
-  const kinds = Array.from(REF_STARTERS)
-  const filtered = q ? kinds.filter(kind => kind.startsWith(q)) : kinds
-
-  return filtered.map(kind => ({
-    text: `@${kind}:`,
-    display: `@${kind}:`,
-    meta: STARTER_META[kind] || ''
-  }))
-}
-
-interface AtItemMetadata extends Record<string, string> {
-  icon: string
-  display: string
-  meta: string
-  /** Raw `text` field from the gateway, e.g. `@file:src/main.tsx` or `@diff`. */
-  rawText: string
-  /** Just the value portion (after `@kind:`), or empty for simple refs. */
-  insertId: string
-}
-
-function textValue(value: unknown, fallback = ''): string {
-  return typeof value === 'string' ? value : fallback
-}
-
-/** Parse the gateway's `text` field (`@file:src/foo.ts`, `@diff`, `@folder:`) into popover-ready data. */
-function classify(entry: CompletionEntry): {
-  type: string
-  insertId: string
-  display: string
-  meta: string
-} {
-  const match = KIND_RE.exec(entry.text)
-
-  if (match) {
-    const [, kind, rest] = match
-
-    return {
-      type: kind,
-      insertId: rest,
-      display: textValue(entry.display, rest || `@${kind}:`),
-      meta: textValue(entry.meta)
-    }
-  }
-
-  return {
-    type: 'simple',
-    insertId: entry.text,
-    display: textValue(entry.display, entry.text),
-    meta: textValue(entry.meta)
-  }
-}
-
-/** Live `@` completions backed by the gateway's `complete.path` RPC. */
-export function useAtCompletions(options: {
-  gateway: HermesGateway | null
-  sessionId: string | null
-  cwd: string | null
-}): { adapter: Unstable_TriggerAdapter; loading: boolean } {
-  const { gateway, sessionId, cwd } = options
-  const enabled = Boolean(gateway)
-
-  const fetcher = useCallback(
-    async (query: string): Promise<CompletionPayload> => {
-      const starters = starterEntries(query)
-
-      if (!gateway) {
-        return { items: starters, query }
-      }
-
-      const word = REF_STARTERS.has(query) ? `@${query}:` : `@${query}`
-      const params: Record<string, unknown> = { word }
-
-      if (sessionId) {
-        params.session_id = sessionId
-      }
-
-      if (cwd) {
-        params.cwd = cwd
-      }
-
-      try {
-        const result = await gateway.request<{ items?: CompletionEntry[] }>('complete.path', params)
-        const items = result.items ?? []
-
-        return { items: items.length > 0 ? items : starters, query }
-      } catch {
-        return { items: starters, query }
-      }
-    },
-    [gateway, sessionId, cwd]
-  )
-
-  const toItem = useCallback((entry: CompletionEntry, index: number): Unstable_TriggerItem => {
-    const classified = classify(entry)
-
-    const metadata: AtItemMetadata = {
-      icon: classified.type,
-      display: classified.display,
-      meta: classified.meta,
-      rawText: entry.text,
-      insertId: classified.insertId
-    }
-
-    return {
-      // Unique id keyed on the gateway's full `text` so two entries that share
-      // a basename (e.g. multiple `index.ts`) don't collide in keyboard nav.
-      id: `${entry.text}|${index}`,
-      type: classified.type,
-      label: classified.display,
-      ...(classified.meta ? { description: classified.meta } : {}),
-      metadata
-    }
-  }, [])
-
-  return useLiveCompletionAdapter({ enabled, fetcher, toItem })
-}
-
-/** Re-export `classify` for use by the formatter (insertion side). */
-export { classify }
@@ -1,119 +0,0 @@
-import type { Unstable_TriggerAdapter, Unstable_TriggerItem } from '@assistant-ui/core'
-import { useCallback, useEffect, useMemo, useRef, useState } from 'react'
-
-export interface CompletionEntry {
-  text: string
-  display?: unknown
-  meta?: unknown
-}
-
-export interface CompletionPayload {
-  items: CompletionEntry[]
-  query: string
-}
-
-const EMPTY_QUERY = '\u0000'
-
-export function useLiveCompletionAdapter(options: {
-  enabled: boolean
-  debounceMs?: number
-  fetcher: (query: string) => Promise<CompletionPayload>
-  toItem: (entry: CompletionEntry, index: number) => Unstable_TriggerItem
-}): { adapter: Unstable_TriggerAdapter; loading: boolean } {
-  const { enabled, debounceMs = 60, fetcher, toItem } = options
-
-  const [state, setState] = useState<{ query: string; items: Unstable_TriggerItem[] }>({
-    query: EMPTY_QUERY,
-    items: []
-  })
-
-  const [loading, setLoading] = useState(false)
-
-  const tokenRef = useRef(0)
-  const timerRef = useRef<number | null>(null)
-  const pendingQueryRef = useRef<string | null>(null)
-
-  const cancelTimer = useCallback(() => {
-    if (timerRef.current !== null) {
-      window.clearTimeout(timerRef.current)
-      timerRef.current = null
-    }
-  }, [])
-
-  useEffect(() => () => cancelTimer(), [cancelTimer])
-
-  useEffect(() => {
-    if (enabled) {
-      return
-    }
-
-    cancelTimer()
-    pendingQueryRef.current = null
-    tokenRef.current += 1
-    setLoading(false)
-    setState({ query: EMPTY_QUERY, items: [] })
-  }, [cancelTimer, enabled])
-
-  const scheduleFetch = useCallback(
-    (query: string) => {
-      if (!enabled) {
-        return
-      }
-
-      if (pendingQueryRef.current === query) {
-        return
-      }
-
-      pendingQueryRef.current = query
-      cancelTimer()
-      const token = ++tokenRef.current
-      setLoading(true)
-
-      timerRef.current = window.setTimeout(() => {
-        timerRef.current = null
-
-        fetcher(query)
-          .then(payload => {
-            if (token !== tokenRef.current) {
-              return
-            }
-
-            setState({
-              query: payload.query,
-              items: payload.items.map((entry, index) => toItem(entry, index))
-            })
-          })
-          .catch(() => {
-            if (token !== tokenRef.current) {
-              return
-            }
-
-            setState({ query, items: [] })
-          })
-          .finally(() => {
-            if (token === tokenRef.current) {
-              setLoading(false)
-            }
-          })
-      }, debounceMs)
-    },
-    [cancelTimer, debounceMs, enabled, fetcher, toItem]
-  )
-
-  const adapter = useMemo<Unstable_TriggerAdapter>(
-    () => ({
-      categories: () => [],
-      categoryItems: () => [],
-      search: (query: string) => {
-        if (query !== state.query) {
-          scheduleFetch(query)
-        }
-
-        return state.items
-      }
-    }),
-    [scheduleFetch, state]
-  )
-
-  return { adapter, loading }
-}
@@ -1,281 +0,0 @@
-import { useEffect, useRef, useState } from 'react'
-
-type BrowserAudioContext = typeof AudioContext
-
-export interface MicRecorderOptions {
-  onLevel?: (level: number) => void
-  onError?: (error: Error) => void
-  onSilence?: () => void
-  silenceLevel?: number
-  silenceMs?: number
-  idleSilenceMs?: number
-}
-
-export interface MicRecording {
-  audio: Blob
-  durationMs: number
-  heardSpeech: boolean
-}
-
-interface MicRecorderHandle {
-  start: (options?: MicRecorderOptions) => Promise<void>
-  stop: () => Promise<MicRecording | null>
-  cancel: () => void
-}
-
-function micError(error: unknown): Error {
-  const name = error instanceof DOMException ? error.name : ''
-
-  if (name === 'NotAllowedError' || name === 'SecurityError') {
-    return new Error('Microphone permission was denied.')
-  }
-
-  if (name === 'NotFoundError' || name === 'DevicesNotFoundError') {
-    return new Error('No microphone was found.')
-  }
-
-  if (name === 'NotReadableError' || name === 'TrackStartError') {
-    return new Error('Microphone is already in use by another app.')
-  }
-
-  if (name === 'OverconstrainedError') {
-    return new Error('Microphone constraints are not supported by this device.')
-  }
-
-  if (error instanceof Error) {
-    return error
-  }
-
-  return new Error('Could not start microphone recording.')
-}
-
-export function useMicRecorder(): { handle: MicRecorderHandle; level: number; recording: boolean } {
-  const [level, setLevel] = useState(0)
-  const [recording, setRecording] = useState(false)
-
-  const recorderRef = useRef<MediaRecorder | null>(null)
-  const streamRef = useRef<MediaStream | null>(null)
-  const chunksRef = useRef<Blob[]>([])
-  const audioContextRef = useRef<AudioContext | null>(null)
-  const animationRef = useRef<number | null>(null)
-  const startedAtRef = useRef(0)
-  const heardSpeechRef = useRef(false)
-  const silenceTriggeredRef = useRef(false)
-  const silenceStartedAtRef = useRef<number | null>(null)
-  const stopResolverRef = useRef<((recording: MicRecording | null) => void) | null>(null)
-
-  const cleanup = () => {
-    if (animationRef.current) {
-      window.cancelAnimationFrame(animationRef.current)
-      animationRef.current = null
-    }
-
-    void audioContextRef.current?.close()
-    audioContextRef.current = null
-    streamRef.current?.getTracks().forEach(track => track.stop())
-    streamRef.current = null
-    recorderRef.current = null
-    setLevel(0)
-    setRecording(false)
-    silenceTriggeredRef.current = false
-  }
-
-  useEffect(() => () => cleanup(), [])
-
-  const startMeter = (stream: MediaStream, options: MicRecorderOptions) => {
-    const audioWindow = window as Window & { webkitAudioContext?: BrowserAudioContext }
-    const AudioContextCtor = window.AudioContext || audioWindow.webkitAudioContext
-
-    if (!AudioContextCtor) {
-      return
-    }
-
-    try {
-      const audioContext = new AudioContextCtor()
-      const analyser = audioContext.createAnalyser()
-      const source = audioContext.createMediaStreamSource(stream)
-
-      analyser.fftSize = 256
-      const data = new Uint8Array(analyser.fftSize)
-
-      source.connect(analyser)
-      audioContextRef.current = audioContext
-
-      const tick = () => {
-        analyser.getByteTimeDomainData(data)
-
-        let sum = 0
-
-        for (const value of data) {
-          const centered = value - 128
-          sum += centered * centered
-        }
-
-        const rms = Math.sqrt(sum / data.length)
-        const normalized = Math.min(1, rms / 42)
-        const now = Date.now()
-
-        setLevel(normalized)
-        options.onLevel?.(normalized)
-
-        const speechThreshold = options.silenceLevel ?? 0
-        const silenceMs = options.silenceMs ?? 0
-        const idleSilenceMs = options.idleSilenceMs ?? 0
-
-        if (speechThreshold > 0 && options.onSilence && !silenceTriggeredRef.current) {
-          if (normalized >= speechThreshold) {
-            heardSpeechRef.current = true
-            silenceStartedAtRef.current = null
-          } else if (heardSpeechRef.current && silenceMs > 0) {
-            silenceStartedAtRef.current ??= now
-
-            if (now - silenceStartedAtRef.current >= silenceMs) {
-              silenceTriggeredRef.current = true
-              options.onSilence()
-
-              return
-            }
-          } else if (!heardSpeechRef.current && idleSilenceMs > 0 && now - startedAtRef.current >= idleSilenceMs) {
-            silenceTriggeredRef.current = true
-            options.onSilence()
-
-            return
-          }
-        }
-
-        animationRef.current = window.requestAnimationFrame(tick)
-      }
-
-      tick()
-    } catch {
-      setLevel(0)
-    }
-  }
-
-  const start: MicRecorderHandle['start'] = async (options = {}) => {
-    if (recorderRef.current) {
-      return
-    }
-
-    if (!navigator.mediaDevices?.getUserMedia || typeof MediaRecorder === 'undefined') {
-      throw new Error('This runtime does not support microphone recording.')
-    }
-
-    const permitted = await window.hermesDesktop?.requestMicrophoneAccess?.()
-
-    if (permitted === false) {
-      throw new Error('Microphone access denied.')
-    }
-
-    let stream: MediaStream
-
-    try {
-      stream = await navigator.mediaDevices.getUserMedia({
-        audio: { echoCancellation: true, noiseSuppression: true }
-      })
-    } catch (error) {
-      throw micError(error)
-    }
-
-    const mimeType =
-      ['audio/webm;codecs=opus', 'audio/webm', 'audio/mp4', 'audio/ogg;codecs=opus', 'audio/ogg', 'audio/wav'].find(
-        type => MediaRecorder.isTypeSupported(type)
-      ) ?? ''
-
-    let recorder: MediaRecorder
-
-    try {
-      recorder = new MediaRecorder(stream, mimeType ? { mimeType } : undefined)
-    } catch (error) {
-      stream.getTracks().forEach(track => track.stop())
-      throw micError(error)
-    }
-
-    chunksRef.current = []
-    streamRef.current = stream
-    recorderRef.current = recorder
-    heardSpeechRef.current = false
-    silenceTriggeredRef.current = false
-    silenceStartedAtRef.current = null
-    startedAtRef.current = Date.now()
-
-    recorder.ondataavailable = event => {
-      if (event.data.size > 0) {
-        chunksRef.current.push(event.data)
-      }
-    }
-
-    recorder.onstop = () => {
-      const chunks = chunksRef.current
-      const recordingType = recorder.mimeType || mimeType || 'audio/webm'
-      const durationMs = Date.now() - startedAtRef.current
-      const heardSpeech = heardSpeechRef.current
-
-      chunksRef.current = []
-      cleanup()
-
-      const resolver = stopResolverRef.current
-      stopResolverRef.current = null
-
-      if (!chunks.length) {
-        resolver?.(null)
-
-        return
-      }
-
-      resolver?.({
-        audio: new Blob(chunks, { type: recordingType }),
-        durationMs,
-        heardSpeech
-      })
-    }
-
-    recorder.onerror = event => {
-      const error = micError((event as Event & { error?: unknown }).error)
-      const resolver = stopResolverRef.current
-      stopResolverRef.current = null
-      cleanup()
-      options.onError?.(error)
-      resolver?.(null)
-    }
-
-    recorder.start()
-    setRecording(true)
-    startMeter(stream, options)
-  }
-
-  const stop: MicRecorderHandle['stop'] = () =>
-    new Promise<MicRecording | null>(resolve => {
-      const recorder = recorderRef.current
-
-      if (!recorder || recorder.state === 'inactive') {
-        cleanup()
-        resolve(null)
-
-        return
-      }
-
-      stopResolverRef.current = resolve
-      recorder.stop()
-    })
-
-  const cancel: MicRecorderHandle['cancel'] = () => {
-    const recorder = recorderRef.current
-    const resolver = stopResolverRef.current
-    stopResolverRef.current = null
-
-    if (recorder && recorder.state !== 'inactive') {
-      recorder.ondataavailable = null
-      recorder.onerror = null
-      recorder.onstop = null
-      recorder.stop()
-    }
-
-    cleanup()
-    resolver?.(null)
-  }
-
-  const handle: MicRecorderHandle = { start, stop, cancel }
-
-  return { handle, level, recording }
-}
@@ -1,107 +0,0 @@
-import type { Unstable_TriggerAdapter, Unstable_TriggerItem } from '@assistant-ui/core'
-import { useCallback } from 'react'
-
-import type { HermesGateway } from '@/hermes'
-import {
-  type CommandsCatalogLike,
-  desktopSlashDescription,
-  filterDesktopCommandsCatalog,
-  isDesktopSlashSuggestion
-} from '@/lib/desktop-slash-commands'
-
-import type { CompletionEntry, CompletionPayload } from './use-live-completion-adapter'
-import { useLiveCompletionAdapter } from './use-live-completion-adapter'
-
-interface SlashItemMetadata extends Record<string, string> {
-  command: string
-  display: string
-  meta: string
-}
-
-function textValue(value: unknown, fallback = ''): string {
-  if (typeof value === 'string') {
-    return value
-  }
-
-  if (Array.isArray(value)) {
-    return value
-      .map(part => (Array.isArray(part) ? String(part[1] ?? '') : typeof part === 'string' ? part : ''))
-      .join('')
-      .trim()
-  }
-
-  return fallback
-}
-
-function commandText(value: string): string {
-  return value.startsWith('/') ? value : `/${value}`
-}
-
-/** Live `/` completions backed by the gateway's `complete.slash` RPC. */
-export function useSlashCompletions(options: { gateway: HermesGateway | null }): {
-  adapter: Unstable_TriggerAdapter
-  loading: boolean
-} {
-  const { gateway } = options
-  const enabled = Boolean(gateway)
-
-  const fetcher = useCallback(
-    async (query: string): Promise<CompletionPayload> => {
-      if (!gateway) {
-        return { items: [], query }
-      }
-
-      const text = `/${query}`
-
-      try {
-        if (!query) {
-          const catalog = filterDesktopCommandsCatalog(await gateway.request<CommandsCatalogLike>('commands.catalog'))
-
-          const items = (catalog.pairs ?? []).map(([command, meta]) => ({
-            text: command,
-            display: command,
-            meta
-          }))
-
-          return { items, query }
-        }
-
-        const result = await gateway.request<{ items?: CompletionEntry[] }>('complete.slash', { text })
-
-        const items = (result.items ?? [])
-          .filter(item => isDesktopSlashSuggestion(item.text))
-          .map(item => ({
-            ...item,
-            meta: desktopSlashDescription(item.text, textValue(item.meta))
-          }))
-
-        return { items, query }
-      } catch {
-        return { items: [], query }
-      }
-    },
-    [gateway]
-  )
-
-  const toItem = useCallback((entry: CompletionEntry, index: number): Unstable_TriggerItem => {
-    const command = commandText(entry.text)
-    const display = textValue(entry.display, commandText(entry.text))
-    const meta = textValue(entry.meta)
-
-    const metadata: SlashItemMetadata = {
-      command,
-      display,
-      meta
-    }
-
-    return {
-      id: `${entry.text}|${index}`,
-      type: 'slash',
-      label: display.startsWith('/') ? display.slice(1) : display,
-      ...(meta ? { description: meta } : {}),
-      metadata
-    }
-  }, [])
-
-  return useLiveCompletionAdapter({ enabled, fetcher, toItem })
-}
@@ -1,387 +0,0 @@
-import { useCallback, useEffect, useRef, useState } from 'react'
-
-import { playSpeechText, stopVoicePlayback } from '@/lib/voice-playback'
-import { notify, notifyError } from '@/store/notifications'
-
-import { useMicRecorder } from './use-mic-recorder'
-
-export type ConversationStatus = 'idle' | 'listening' | 'transcribing' | 'thinking' | 'speaking'
-
-interface PendingVoiceResponse {
-  id: string
-  pending: boolean
-  text: string
-}
-
-interface VoiceConversationOptions {
-  busy: boolean
-  enabled: boolean
-  onFatalError?: () => void
-  onSubmit: (text: string) => Promise<void> | void
-  onTranscribeAudio?: (audio: Blob) => Promise<string>
-  pendingResponse: () => PendingVoiceResponse | null
-  consumePendingResponse: () => void
-}
-
-export function useVoiceConversation({
-  busy,
-  enabled,
-  onFatalError,
-  onSubmit,
-  onTranscribeAudio,
-  pendingResponse,
-  consumePendingResponse
-}: VoiceConversationOptions) {
-  const { handle, level } = useMicRecorder()
-  const [status, setStatus] = useState<ConversationStatus>('idle')
-  const [muted, setMuted] = useState(false)
-  const turnTimeoutRef = useRef<number | null>(null)
-  const pendingStartRef = useRef(false)
-  const turnClosingRef = useRef(false)
-  const awaitingSpokenResponseRef = useRef(false)
-  const responseIdRef = useRef<string | null>(null)
-  const spokenSourceLengthRef = useRef(0)
-  const speechBufferRef = useRef('')
-  const enabledRef = useRef(enabled)
-  const mutedRef = useRef(muted)
-  const busyRef = useRef(busy)
-  const statusRef = useRef<ConversationStatus>('idle')
-  const wasEnabledRef = useRef(enabled)
-
-  useEffect(() => {
-    enabledRef.current = enabled
-  }, [enabled])
-
-  useEffect(() => {
-    mutedRef.current = muted
-  }, [muted])
-
-  useEffect(() => {
-    busyRef.current = busy
-  }, [busy])
-
-  useEffect(() => {
-    statusRef.current = status
-  }, [status])
-
-  const clearTurnTimeout = () => {
-    if (turnTimeoutRef.current) {
-      window.clearTimeout(turnTimeoutRef.current)
-      turnTimeoutRef.current = null
-    }
-  }
-
-  const resetSpeechBuffer = () => {
-    responseIdRef.current = null
-    spokenSourceLengthRef.current = 0
-    speechBufferRef.current = ''
-  }
-
-  const appendSpeechText = (text: string) => {
-    if (!text) {
-      return
-    }
-
-    speechBufferRef.current = `${speechBufferRef.current}${text}`
-  }
-
-  const takeSpeechChunk = (force = false): string | null => {
-    const buffer = speechBufferRef.current.replace(/\s+/g, ' ').trim()
-
-    if (!buffer) {
-      speechBufferRef.current = ''
-
-      return null
-    }
-
-    const sentence = buffer.match(/^(.+?[.!?。！？])(?:\s+|$)/)
-
-    if (sentence?.[1] && (sentence[1].length >= 8 || force)) {
-      const chunk = sentence[1].trim()
-      speechBufferRef.current = buffer.slice(sentence[1].length).trim()
-
-      return chunk
-    }
-
-    if (!force && buffer.length > 220) {
-      const softBoundary = Math.max(
-        buffer.lastIndexOf(', ', 180),
-        buffer.lastIndexOf('; ', 180),
-        buffer.lastIndexOf(': ', 180)
-      )
-
-      if (softBoundary > 80) {
-        const chunk = buffer.slice(0, softBoundary + 1).trim()
-        speechBufferRef.current = buffer.slice(softBoundary + 1).trim()
-
-        return chunk
-      }
-    }
-
-    if (!force) {
-      return null
-    }
-
-    speechBufferRef.current = ''
-
-    return buffer
-  }
-
-  const handleTurn = useCallback(
-    async (forceTranscribe = false) => {
-      if (turnClosingRef.current) {
-        return
-      }
-
-      turnClosingRef.current = true
-      clearTurnTimeout()
-      setStatus('transcribing')
-
-      try {
-        const result = await handle.stop()
-
-        if (!result || (!result.heardSpeech && !forceTranscribe) || !onTranscribeAudio) {
-          if (enabledRef.current && !mutedRef.current && !busyRef.current && statusRef.current !== 'speaking') {
-            pendingStartRef.current = true
-          }
-
-          setStatus('idle')
-
-          return
-        }
-
-        try {
-          const transcript = (await onTranscribeAudio(result.audio)).trim()
-
-          if (!transcript) {
-            if (enabledRef.current) {
-              pendingStartRef.current = true
-            }
-
-            setStatus('idle')
-
-            return
-          }
-
-          awaitingSpokenResponseRef.current = true
-          resetSpeechBuffer()
-          await onSubmit(transcript)
-          setStatus('thinking')
-        } catch (error) {
-          notifyError(error, 'Voice transcription failed')
-
-          if (enabledRef.current && !mutedRef.current && !busyRef.current) {
-            pendingStartRef.current = true
-          }
-
-          setStatus('idle')
-        }
-      } finally {
-        turnClosingRef.current = false
-      }
-    },
-    [handle, onSubmit, onTranscribeAudio]
-  )
-
-  const startListening = useCallback(async () => {
-    pendingStartRef.current = false
-
-    if (!enabledRef.current || mutedRef.current || busyRef.current) {
-      return
-    }
-
-    if (statusRef.current !== 'idle') {
-      return
-    }
-
-    try {
-      // VAD tuning mirrors `tools.voice_mode` defaults so the browser loop matches the CLI.
-      await handle.start({
-        silenceLevel: 0.075,
-        silenceMs: 1_250,
-        idleSilenceMs: 12_000,
-        onError: error => {
-          notifyError(error, 'Microphone failed')
-          pendingStartRef.current = false
-          onFatalError?.()
-        },
-        onSilence: () => void handleTurn()
-      })
-      setStatus('listening')
-      turnTimeoutRef.current = window.setTimeout(() => void handleTurn(), 60_000)
-    } catch (error) {
-      notifyError(error, 'Could not start voice session')
-      pendingStartRef.current = false
-      setStatus('idle')
-      onFatalError?.()
-    }
-  }, [handle, handleTurn, onFatalError])
-
-  const speak = useCallback(async (text: string) => {
-    setStatus('speaking')
-
-    try {
-      await playSpeechText(text, { source: 'voice-conversation' })
-    } catch (error) {
-      notifyError(error, 'Voice playback failed')
-    } finally {
-      if (enabledRef.current) {
-        pendingStartRef.current = true
-        setStatus('idle')
-      } else {
-        setStatus('idle')
-      }
-    }
-  }, [])
-
-  const start = useCallback(async () => {
-    if (!onTranscribeAudio) {
-      notify({
-        kind: 'warning',
-        title: 'Voice unavailable',
-        message: 'Configure speech-to-text to use voice mode.'
-      })
-      onFatalError?.()
-
-      return
-    }
-
-    setMuted(false)
-    awaitingSpokenResponseRef.current = false
-    resetSpeechBuffer()
-    consumePendingResponse()
-    pendingStartRef.current = true
-    await startListening()
-  }, [consumePendingResponse, onFatalError, onTranscribeAudio, startListening])
-
-  const end = useCallback(async () => {
-    pendingStartRef.current = false
-    clearTurnTimeout()
-    stopVoicePlayback()
-    handle.cancel()
-    turnClosingRef.current = false
-    awaitingSpokenResponseRef.current = false
-    resetSpeechBuffer()
-    consumePendingResponse()
-    setMuted(false)
-    setStatus('idle')
-  }, [consumePendingResponse, handle])
-
-  const stopTurn = useCallback(() => {
-    if (statusRef.current === 'listening') {
-      void handleTurn(true)
-    }
-  }, [handleTurn])
-
-  const toggleMute = useCallback(() => {
-    setMuted(value => {
-      const next = !value
-
-      if (next) {
-        clearTurnTimeout()
-        handle.cancel()
-        setStatus('idle')
-      } else if (enabledRef.current && !busyRef.current && statusRef.current === 'idle') {
-        pendingStartRef.current = true
-      }
-
-      return next
-    })
-  }, [handle])
-
-  useEffect(() => {
-    if (!enabled) {
-      return
-    }
-
-    const onKeyDown = (event: KeyboardEvent) => {
-      if (event.code !== 'Space' || event.repeat || event.metaKey || event.ctrlKey || event.altKey) {
-        return
-      }
-
-      if (statusRef.current !== 'listening') {
-        return
-      }
-
-      event.preventDefault()
-      stopTurn()
-    }
-
-    window.addEventListener('keydown', onKeyDown, { capture: true })
-
-    return () => window.removeEventListener('keydown', onKeyDown, { capture: true })
-  }, [enabled, stopTurn])
-
-  // Drive the loop: after a voice-submitted turn, speak stable chunks as the
-  // assistant stream grows. Otherwise start listening when idle between turns.
-  useEffect(() => {
-    if (!enabled || muted) {
-      return
-    }
-
-    if (awaitingSpokenResponseRef.current && status !== 'speaking') {
-      const response = pendingResponse()
-
-      if (response) {
-        if (response.id !== responseIdRef.current) {
-          resetSpeechBuffer()
-          responseIdRef.current = response.id
-        }
-
-        if (response.text.length > spokenSourceLengthRef.current) {
-          appendSpeechText(response.text.slice(spokenSourceLengthRef.current))
-          spokenSourceLengthRef.current = response.text.length
-        }
-
-        const chunk = takeSpeechChunk(!response.pending && !busy)
-
-        if (chunk) {
-          void speak(chunk)
-
-          return
-        }
-
-        if (!response.pending && !busy) {
-          awaitingSpokenResponseRef.current = false
-          consumePendingResponse()
-          resetSpeechBuffer()
-          pendingStartRef.current = true
-          setStatus('idle')
-
-          return
-        }
-      }
-
-      if (!busy && status === 'thinking') {
-        awaitingSpokenResponseRef.current = false
-        resetSpeechBuffer()
-        pendingStartRef.current = true
-        setStatus('idle')
-
-        return
-      }
-    }
-
-    if (busy || status !== 'idle') {
-      return
-    }
-
-    if (pendingStartRef.current) {
-      void startListening()
-    }
-  }, [busy, consumePendingResponse, enabled, muted, pendingResponse, speak, startListening, status])
-
-  useEffect(() => {
-    if (enabled && !wasEnabledRef.current) {
-      void start()
-    }
-
-    if (!enabled && wasEnabledRef.current) {
-      void end()
-    }
-
-    wasEnabledRef.current = enabled
-  }, [enabled, end, start])
-
-  return { end, level, muted, start, status, stopTurn, toggleMute }
-}
@@ -1,113 +0,0 @@
-import { useEffect, useRef, useState } from 'react'
-
-import { notify, notifyError } from '@/store/notifications'
-
-import type { VoiceActivityState, VoiceStatus } from '../types'
-
-import { useMicRecorder } from './use-mic-recorder'
-
-interface VoiceRecorderOptions {
-  maxRecordingSeconds: number
-  onTranscribeAudio?: (audio: Blob) => Promise<string>
-  focusInput: () => void
-  onTranscript: (text: string) => void
-}
-
-export function useVoiceRecorder({
-  maxRecordingSeconds,
-  onTranscribeAudio,
-  focusInput,
-  onTranscript
-}: VoiceRecorderOptions) {
-  const { handle, level, recording } = useMicRecorder()
-  const [voiceStatus, setVoiceStatus] = useState<VoiceStatus>('idle')
-  const [elapsedSeconds, setElapsedSeconds] = useState(0)
-  const startedAtRef = useRef(0)
-  const intervalRef = useRef<number | null>(null)
-  const timeoutRef = useRef<number | null>(null)
-
-  const clearTimers = () => {
-    if (intervalRef.current) {
-      window.clearInterval(intervalRef.current)
-      intervalRef.current = null
-    }
-
-    if (timeoutRef.current) {
-      window.clearTimeout(timeoutRef.current)
-      timeoutRef.current = null
-    }
-  }
-
-  useEffect(() => () => clearTimers(), [])
-
-  const stop = async () => {
-    clearTimers()
-    const result = await handle.stop()
-
-    if (!result) {
-      setVoiceStatus('idle')
-
-      return
-    }
-
-    if (!onTranscribeAudio) {
-      setVoiceStatus('idle')
-
-      return
-    }
-
-    setVoiceStatus('transcribing')
-
-    try {
-      const transcript = (await onTranscribeAudio(result.audio)).trim()
-
-      if (!transcript) {
-        notify({ kind: 'warning', title: 'No speech detected', message: 'Try recording again.' })
-      } else {
-        onTranscript(transcript)
-      }
-    } catch (error) {
-      notifyError(error, 'Voice transcription failed')
-    } finally {
-      setVoiceStatus('idle')
-      focusInput()
-    }
-  }
-
-  const start = async () => {
-    if (!onTranscribeAudio) {
-      notify({ kind: 'warning', title: 'Voice unavailable', message: 'Voice transcription is not available yet.' })
-
-      return
-    }
-
-    try {
-      await handle.start({ onError: error => notifyError(error, 'Voice recording failed') })
-      startedAtRef.current = Date.now()
-      setElapsedSeconds(0)
-      setVoiceStatus('recording')
-      intervalRef.current = window.setInterval(() => setElapsedSeconds((Date.now() - startedAtRef.current) / 1000), 250)
-      const cap = Math.max(1, Math.min(Math.trunc(maxRecordingSeconds), 600))
-      timeoutRef.current = window.setTimeout(() => void stop(), cap * 1000)
-    } catch (error) {
-      setVoiceStatus('idle')
-      notifyError(error, 'Voice recording failed')
-    }
-  }
-
-  const dictate = () => {
-    if (recording) {
-      void stop()
-    } else if (voiceStatus === 'idle') {
-      void start()
-    }
-  }
-
-  const voiceActivityState: VoiceActivityState = {
-    elapsedSeconds,
-    level,
-    status: voiceStatus
-  }
-
-  return { dictate, voiceActivityState, voiceStatus }
-}
@@ -1,123 +0,0 @@
-import { useState } from 'react'
-
-import { Button } from '@/components/ui/button'
-import { ArrowUp, ChevronDown, Pencil, Trash2 } from '@/lib/icons'
-import { cn } from '@/lib/utils'
-import type { QueuedPromptEntry } from '@/store/composer-queue'
-
-interface QueuePanelProps {
-  busy: boolean
-  editingId: null | string
-  entries: QueuedPromptEntry[]
-  onDelete: (id: string) => void
-  onEdit: (entry: QueuedPromptEntry) => void
-  onSendNow: (id: string) => void
-}
-
-const entryPreview = (entry: QueuedPromptEntry) =>
-  entry.text.trim() || (entry.attachments.length > 0 ? 'Attachment-only turn' : 'Empty turn')
-
-export function QueuePanel({ busy, editingId, entries, onDelete, onEdit, onSendNow }: QueuePanelProps) {
-  const [collapsed, setCollapsed] = useState(false)
-
-  if (entries.length === 0) return null
-
-  return (
-    <div className="rounded-2xl border border-border/65 bg-[color-mix(in_srgb,var(--dt-card)_70%,transparent)] py-0.5 shadow-[0_0_0_1px_color-mix(in_srgb,var(--dt-card)_30%,transparent)_inset]">
-      <button
-        className="flex w-full items-center gap-1.5 px-2.5 py-1 text-left text-[0.72rem] font-medium text-muted-foreground/92 transition-colors hover:text-foreground/90"
-        onClick={() => setCollapsed(open => !open)}
-        type="button"
-      >
-        <ChevronDown className={cn('shrink-0 transition-transform', collapsed && '-rotate-90')} size={14} />
-        <span className="truncate">{entries.length} Queued</span>
-      </button>
-
-      {!collapsed && (
-        <div className="space-y-0.5 px-1.5 pb-0.5">
-          {entries.map(entry => {
-            const isEditing = editingId === entry.id
-            const attachmentsCount = entry.attachments.length
-
-            return (
-              <div
-                className={cn(
-                  'group/queue-row flex items-center gap-1.5 rounded-lg border border-transparent px-1.5 py-1',
-                  'transition-colors duration-300 ease-out hover:bg-(--chrome-action-hover) hover:transition-none',
-                  isEditing && 'border-[color-mix(in_srgb,var(--dt-composer-ring)_40%,transparent)] bg-accent/25'
-                )}
-                key={entry.id}
-              >
-                <span
-                  aria-hidden
-                  className="h-3.5 w-3.5 shrink-0 rounded-full border border-foreground/35 bg-transparent"
-                />
-                <div className="min-w-0 flex-1">
-                  <p className="truncate text-[0.73rem] leading-4 text-foreground/92">{entryPreview(entry)}</p>
-                  {(attachmentsCount > 0 || isEditing) && (
-                    <div className="mt-0.5 flex items-center gap-1.5 text-[0.64rem] text-muted-foreground/75">
-                      {attachmentsCount > 0 && (
-                        <span>
-                          {attachmentsCount} attachment{attachmentsCount === 1 ? '' : 's'}
-                        </span>
-                      )}
-                      {isEditing && (
-                        <span className="text-[color-mix(in_srgb,var(--dt-composer-ring)_78%,var(--muted-foreground))]">
-                          Editing in composer
-                        </span>
-                      )}
-                    </div>
-                  )}
-                </div>
-                <div
-                  className={cn(
-                    'flex shrink-0 items-center gap-0 transition-opacity',
-                    isEditing
-                      ? 'opacity-100'
-                      : 'opacity-0 group-hover/queue-row:opacity-100 group-focus-within/queue-row:opacity-100'
-                  )}
-                >
-                  <Button
-                    aria-label="Edit queued turn"
-                    className="h-5 w-5 rounded-md"
-                    disabled={Boolean(editingId) && !isEditing}
-                    onClick={() => onEdit(entry)}
-                    size="icon-xs"
-                    title="Edit queued turn"
-                    type="button"
-                    variant="ghost"
-                  >
-                    <Pencil size={11} />
-                  </Button>
-                  <Button
-                    aria-label="Send queued turn now"
-                    className="h-5 w-5 rounded-md"
-                    disabled={busy || isEditing}
-                    onClick={() => onSendNow(entry.id)}
-                    size="icon-xs"
-                    title="Send queued turn now"
-                    type="button"
-                    variant="ghost"
-                  >
-                    <ArrowUp size={11} />
-                  </Button>
-                  <Button
-                    aria-label="Delete queued turn"
-                    className="h-5 w-5 rounded-md"
-                    onClick={() => onDelete(entry.id)}
-                    size="icon-xs"
-                    title="Delete queued turn"
-                    type="button"
-                    variant="ghost"
-                  >
-                    <Trash2 size={11} />
-                  </Button>
-                </div>
-              </div>
-            )
-          })}
-        </div>
-      )}
-    </div>
-  )
-}
@@ -1,18 +0,0 @@
-import { describe, expect, it } from 'vitest'
-
-import { composerPlainText, renderComposerContents, RICH_INPUT_SLOT } from './rich-editor'
-
-describe('renderComposerContents', () => {
-  it('renders refs and raw text without interpreting user text as HTML', () => {
-    const editor = document.createElement('div')
-    editor.dataset.slot = RICH_INPUT_SLOT
-
-    renderComposerContents(editor, '@file:`<img src=x onerror=alert(1)>` <b>raw</b>')
-
-    expect(editor.querySelector('img')).toBeNull()
-    expect(editor.querySelector('b')).toBeNull()
-    expect(editor.textContent).toContain('<img src=x onerror=alert(1)>')
-    expect(editor.textContent).toContain('<b>raw</b>')
-    expect(composerPlainText(editor)).toBe('@file:`<img src=x onerror=alert(1)>` <b>raw</b>')
-  })
-})
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Brooklyn Nicholson	b431ae73ef	fix(cli): address Copilot review #1 (4 threads) Thread 1 (cli.py:1488): Fix broken skin hook — class is SkinConfig not Skin. The previous code silently no-op'd via the broad except, so SkinConfig.get_color() calls weren't actually remapped. Verified the hook fires now: in light mode, banner_text returns #1A1A1A instead of #FFF8DC. Thread 2 (cli.py:1328): Align comment with actual timeout. The OSC 11 read deadline is 100ms (time.monotonic() + 0.1), not 50ms. Fixed the docstring. Thread 3 (cli.py:13389): Remove unused imports of Point and Screen in the _output_screen_diff monkey-patch block. Leftover from earlier experiments — the wrapper only needs previous_screen mutation. Thread 4 (cli.py:11422): Skip light-mode remap entirely when a pt style string already specifies its own bg (e.g. 'bg:#1a1a2e #FFF8DC' for status-bar / completion-menu). Those colors were tuned for that specific dark bg; remapping the FG to #1A1A1A would produce dark-on-dark (invisible). Now we detect the explicit 'bg:' token and leave the whole value untouched. Also dropped the stale comment block at the resize-handler that described the old 'force \x1b[2J\x1b[H clear-screen on resize' recovery — replaced with the actual current strategy (monkey-patch _output_screen_diff).	2026-05-15 00:21:19 -05:00
Brooklyn Nicholson	1d109f5be3	feat(cli): light-mode color remap covers all skin reads (Rich Panel borders, etc) Three changes that together make the response Panel readable in light Terminal.app mode: 1. Hook Skin.get_color() at module load so EVERY skin color read goes through _maybe_remap_for_light_mode(). Previously only _hex_to_ansi() and pt's style strings were remapped — Rich Panel borders and body text bypassed the remap and stayed as #FFF8DC (cornsilk on cream). 2. Prime the light-mode detection cache at import time when stdin is a tty. Ensures OSC 11 query happens before any banner/Panel render. 3. Drop status-bar fg colors (#C0C0C0 silver, #888888, #555555, #8B8682) from the remap table — those are paired with a dark navy bg, so remapping them to dark gray would make them invisible the OTHER direction (dark on dark).	2026-05-15 00:01:16 -05:00
Brooklyn Nicholson	97b407cedd	fix(cli): prime light-mode detection at run() start, before pt grabs tty OSC 11 background query needs raw tty access; running it from inside pt's render path could race with pt's own tty handling. Call _detect_light_mode() once in HermesCLI.run() at startup so the result is cached before pt's Application starts.	2026-05-14 23:41:13 -05:00
Brooklyn Nicholson	61e63cbaa8	feat(cli): light/dark terminal mode detection + automatic color remap Mirrors ui-tui/src/theme.ts detectLightMode() in Python so the base hermes CLI also adapts to light Terminal.app backgrounds. Detection priority (first match wins): 1. HERMES_LIGHT / HERMES_TUI_LIGHT env (true/false) 2. HERMES_TUI_THEME=light\|dark 3. HERMES_TUI_BACKGROUND=#RRGGBB 4. COLORFGBG env (xterm/Konsole/urxvt) 5. OSC 11 query (\x1b]11;?\x1b\\) — asks the terminal directly with a 100ms timeout 6. Default: dark When light mode is detected, dark-mode-tuned skin colors are remapped to higher-contrast equivalents: #FFF8DC (cornsilk) -> #1A1A1A (near-black) #FFD700 (gold) -> #9A6B00 (dark goldenrod) #B8860B (dim) -> #5C4500 (deeper brown) ... etc Hooked at two points: - _hex_to_ansi() — auto-remaps any color emitted via the ANSI helper - _build_tui_style_dict() — rewrites pt style strings (chrome bg/fg) Set HERMES_TUI_THEME=light to force light-mode behavior; otherwise the OSC 11 query at startup auto-detects in most modern terminals.	2026-05-14 23:39:12 -05:00
Brooklyn Nicholson	07d4a172cc	fix(cli): use ANSI dim+italic for [thinking] text (light/dark mode) The _DIM ANSI escape was a SkinAwareAnsi bound to banner_dim (#B8860B dark goldenrod). On light cream Terminal.app backgrounds this rendered the [thinking] reasoning preview essentially invisible (dark goldenrod on cream is very low contrast). Replace _DIM with a fixed ANSI dim+italic escape (\x1b[2;3m) so dim text inherits the terminal's default foreground color and stays readable in both light and dark Terminal.app modes. Updated the /skin command to no longer call _DIM.reset() since _DIM is now a plain str.	2026-05-14 23:24:30 -05:00
Brooklyn Nicholson	8033b9cf0d	fix(skin): always use terminal default for typed input (light/dark mode) Skin engine was setting 'input-area' style to the skin's 'prompt' color (near-white #FFF8DC for default and most other skins). On light-mode Terminal.app this made typed text invisible (white-on-white). Decouple the prompt symbol color (still skin-controlled) from the typed input color (now always inherits terminal default fg). The user's typed text is now readable in both light and dark Terminal.app modes regardless of which skin is active.	2026-05-14 23:10:51 -05:00
Brooklyn Nicholson	dabe459617	fix(cli): default input/prompt color to terminal foreground (light mode visibility) Hardcoded #FFF8DC (cornsilk) for the input area and prompt made typed text invisible on light-mode Terminal.app (white-on-white). Default to empty style string '' so the input/prompt inherit the terminal's default foreground color. Skins can still opt into a colored prompt by setting the 'prompt' color explicitly in their YAML. banner_text default kept at #FFF8DC since the banner has its own background and the legacy default was working there.	2026-05-14 22:56:24 -05:00
Brooklyn Nicholson	4a1303d7e4	fix(cli): tighten _output_screen_diff patch to preserve ANSI styles Previous version (`ba3822a64`) replaced None previous_screen with a fresh Screen() before passing to pt's renderer. That changed the behavior of pt's `if not previous_screen` guard at L178-185, which fires reset_attributes() + erase_down() on first-paint and after width changes. With that reset suppressed, ANSI styles can leak between renders and chat text loses its color/bold/italic styling. Fix: only mutate previous_screen.height when previous_screen is already non-None AND its current height is genuinely smaller than the new screen's height. Don't touch the None case at all — let pt's own first-paint reset path run as designed. The reserve-vertical-space scroll suppression (the actual bug fix) still works because that branch only matters when previous_screen exists with a height that's less than current_height — which is exactly the case we now handle. # Verified empirically - Before/after resize: colors preserved (status bar yellow, rules orange, "26 commits behind" warning yellow caution) - After widen back: colors still correct - 10-resize stress test: ZERO scrollback delta, full content preserved	2026-05-14 22:48:19 -05:00
Brooklyn Nicholson	ba3822a643	fix(cli): monkey-patch pt's _output_screen_diff to skip reserve-vertical-scroll # What changed Replaced DECSTBM scroll region + chrome-row erase approach with a direct monkey-patch of prompt_toolkit's module-level `_output_screen_diff` function. The DECSTBM approach had two killer bugs: 1. Scroll region leaked into the user's shell after hermes quit (atexit firing semantics + the region persists across processes in macOS Terminal.app) 2. Chrome-row erase wiped chat content / streaming responses if user resized mid-stream # Root cause (re-verified by reading pt/renderer.py) `_output_screen_diff` (renderer.py L232-242) deliberately moves the cursor to the bottom of the canvas after painting: ```python # Correctly reserve vertical space as required by the layout. # When this is a new screen (drawn for the first time), or for some # reason higher than the previous one. Move the cursor once to the # bottom of the output. That way, we're sure that the terminal # scrolls up, even when the lower lines of the canvas just contain # whitespace. if current_height > previous_screen.height: current_pos = move_cursor(Point(x=0, y=current_height - 1)) ``` In non-fullscreen mode this scrolls chrome content into terminal scrollback EVERY render — not just on resize. The `move_cursor` walks down via `\r\n` which scrolls when at the bottom row. # Fix Wrap `_output_screen_diff` and inflate `previous_screen.height` to match `screen.height` before passing through. This makes the `if current_height > previous_screen.height` guard fall through and skip the bottom-cursor-move entirely. Without that move, pt's render only writes within the layout's actual rows. `\r\n` between rows inside the layout body never reaches the bottom of the viewport (because `move_cursor(0,0)` walks UP first to layout-top, then `\r\n*N` walks DOWN only as far as the layout actually spans). # Verified empirically in real Terminal.app 10-resize stress test (mixed shrink+widen) during streaming: ✅ ZERO scrollback delta (0 status bars added) ✅ Full streaming response preserved ✅ User input preserved ✅ Banner preserved in scrollback ✅ Status bar correctly anchored at bottom ✅ No visible duplicates anywhere ✅ No shell breakage after quit (no scroll region to leak) # Reverted - DECSTBM scroll region (shell-leak risk gone) - atexit handler for scroll region restore (no longer needed) - Chrome-row erase (\x1b[2K walking) — no longer needed - _hermes_resize_clear function — back to vanilla _schedule_resize_recovery	2026-05-14 22:27:55 -05:00
Brooklyn Nicholson	eac40204c2	fix(cli): erase only chrome rows on resize, preserve chat output Previous version (`fef97aee5`) used `\x1b[J` (erase from cursor to end of screen) which WIPED the entire viewport — losing the user's just-typed message and any streaming agent response if they resized mid-stream. Fix: erase ONLY the bottom chrome rows (`CHROME_ROWS = 8`, generous slack for status bar + 2 rules + input + reflow extras). Walk up from the bottom; for each row emit `\x1b[<row>;1H\x1b[2K` (move to row, erase line). `\x1b[2K` does NOT push to scrollback. Chat content above the chrome band stays untouched. # Verified empirically in real Terminal.app Test sequence: 1. Start hermes (170 cols) 2. Send message "Tell me a 4 sentence story about a cat" 3. While agent is streaming, shrink to 98 cols 4. Widen back to 170 cols Result after this fix: ✅ User's message still visible ✅ "Initializing agent..." still visible ✅ Full agent response still visible (the cat story) ✅ Status bar at bottom, no duplicates ✅ Banner preserved in scrollback above ✅ Zero scrollback pollution (delta = 0 across 2 resizes)	2026-05-14 22:06:59 -05:00
Brooklyn Nicholson	fef97aee59	fix(cli): DECSTBM scroll region + \x1b[J erase for clean resize # Verified empirically in real Terminal.app with real shell scrollback above After 6 column shrinks: ✅ ZERO status bars accumulated in scrollback (delta = 0) ✅ Status bar correctly anchored at bottom of viewport ✅ No visible duplicate chrome ✅ Chat responses display correctly after fix ✅ Layout matches normal hermes UX # Root cause (verified by reading prompt_toolkit/renderer.py source) pt's `_output_screen_diff` (renderer.py:106) emits `write("\r\n" * N)` to advance the cursor between rows during paint. At the bottom row of the terminal, each `\r\n` SCROLLS the viewport, pushing content into terminal scrollback. pt does this deliberately — see line 232-242 comment: "Move the cursor once to the bottom of the output. That way, we're sure that the terminal scrolls up". This is the actual mechanism behind pt issues #29 (open since 2014), #1675, #1933. aider/xonsh/ipython all hit this wall and gave up; nobody on GitHub has shipped a fix. # The fix DECSTBM `\x1b[<top>;<bottom>r` sets a SCROLL REGION on the terminal. When pt's `\r\n` scrolls within the region, rows that fall off the top of the region are DISCARDED instead of being pushed to terminal scrollback. Region top must be > 1 — when region starts at row 1, the terminal treats it semantically as "no region" and scrolled content still goes to scrollback. Above row 2 it gets discarded. Same trick used by vim's status line, tmux, weechat, htop. Three more critical details: 1. DECSTBM resets cursor to (1,1). We follow it with an explicit `\x1b[<rows>;1H` to move the cursor back to the bottom row, so pt's render anchors the chrome at the bottom of the viewport. 2. `\x1b[J` (erase from cursor to end of screen) does NOT push to scrollback. `\x1b[2J` does. So on resize we use `\x1b[J` to wipe the old reflowed chrome WITHOUT polluting history. 3. Skip `_schedule_resize_recovery` — its `_status_bar_suppressed _after_resize=True` flag hides the chrome until next user input, which makes resize feel broken with this fix in place. Call pt's native `_on_resize` directly instead. # Reverts - transcript widget (alt-screen-only path, was an earlier attempt) - alt-screen mode (broke chat output rendering) - HERMES_DEBUG_RESIZE / HERMES_RESIZE_STRATEGY env-var paths	2026-05-14 21:57:39 -05:00