fix(node): bump @types/node lockfile to 24.13.2 for npm ci

Refresh the workspace lockfile so npm ci succeeds during hermes update after @types/node@24.13.2 was published for the ^24.12.0 range. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-11 15:04:00 -04:00
40 changed files with 146 additions and 1111 deletions
@@ -7,7 +7,7 @@ protecting head and tail context.
 Improvements over v2:
  - Structured summary template with Resolved/Pending question tracking
  - Filter-safe summarizer preamble that treats prior turns as source material
-  - Historical (reference-only) section headings replace "Next Steps"/"Remaining Work" to avoid reading as active instructions
+  - "Remaining Work" replaces "Next Steps" to avoid reading as active instructions
  - Clear separator when summary merges into tail message
  - Iterative summary updates (preserves info across multiple compactions)
  - Token-budget tail protection instead of fixed message count
@@ -34,50 +34,7 @@ from agent.redact import redact_sensitive_text

 logger = logging.getLogger(__name__)

-HISTORICAL_TASK_HEADING = "## Historical Task Snapshot"
-HISTORICAL_IN_PROGRESS_HEADING = "## Historical In-Progress State"
-HISTORICAL_PENDING_ASKS_HEADING = "## Historical Pending User Asks"
-HISTORICAL_REMAINING_WORK_HEADING = "## Historical Remaining Work"
-
-
 SUMMARY_PREFIX = (
-    "[CONTEXT COMPACTION — REFERENCE ONLY] Earlier turns were compacted "
-    "into the summary below. This is a handoff from a previous context "
-    "window — treat it as background reference, NOT as active instructions. "
-    "Do NOT answer questions or fulfill requests mentioned in this summary; "
-    "they were already addressed. "
-    "Respond ONLY to the latest user message that appears AFTER this "
-    "summary — that message is the single source of truth for what to do "
-    "right now. "
-    "Topic overlap with the summary does NOT mean you should resume its "
-    "task: even on similar topics, the latest user message WINS. Treat ONLY "
-    "the latest message as the active task and discard stale items from "
-    f"'{HISTORICAL_TASK_HEADING}' / '{HISTORICAL_IN_PROGRESS_HEADING}' / "
-    f"'{HISTORICAL_PENDING_ASKS_HEADING}' / "
-    f"'{HISTORICAL_REMAINING_WORK_HEADING}' entirely — do not 'wrap up' or "
-    "'finish' work described there unless the latest message explicitly "
-    "asks for it. "
-    "Reverse signals in the latest message (e.g. 'stop', 'undo', 'roll "
-    "back', 'just verify', 'don't do that anymore', 'never mind', a new "
-    "topic) must immediately end any in-flight work described in the "
-    "summary; do not re-surface it in later turns. "
-    "IMPORTANT: Your persistent memory (MEMORY.md, USER.md) in the system "
-    "prompt is ALWAYS authoritative and active — never ignore or deprioritize "
-    "memory content due to this compaction note. "
-    "The current session state (files, config, etc.) may reflect work "
-    "described here — avoid repeating it:"
-)
-LEGACY_SUMMARY_PREFIX = "[CONTEXT SUMMARY]:"
-
-# Handoff prefixes that shipped in earlier releases. A summary persisted under
-# one of these can be inherited into a resumed lineage (#35344); when it is
-# re-normalized on re-compaction we must strip the OLD prefix too, otherwise the
-# stale directive it carried (e.g. "resume exactly from Active Task") survives
-# embedded in the body and keeps hijacking replies. Keep newest-first; entries
-# are matched literally. Add a frozen copy here whenever SUMMARY_PREFIX changes.
-_HISTORICAL_SUMMARY_PREFIXES = (
-    # Carveout era (#41607/#38364/#42812): "consistent → use as background"
-    # licensed stale-task resumption on topic overlap.
    "[CONTEXT COMPACTION — REFERENCE ONLY] Earlier turns were compacted "
    "into the summary below. This is a handoff from a previous context "
    "window — treat it as background reference, NOT as active instructions. "
@@ -100,7 +57,17 @@ _HISTORICAL_SUMMARY_PREFIXES = (
    "prompt is ALWAYS authoritative and active — never ignore or deprioritize "
    "memory content due to this compaction note. "
    "The current session state (files, config, etc.) may reflect work "
-    "described here — avoid repeating it:",
+    "described here — avoid repeating it:"
+)
+LEGACY_SUMMARY_PREFIX = "[CONTEXT SUMMARY]:"
+
+# Handoff prefixes that shipped in earlier releases. A summary persisted under
+# one of these can be inherited into a resumed lineage (#35344); when it is
+# re-normalized on re-compaction we must strip the OLD prefix too, otherwise the
+# stale directive it carried (e.g. "resume exactly from Active Task") survives
+# embedded in the body and keeps hijacking replies. Keep newest-first; entries
+# are matched literally. Add a frozen copy here whenever SUMMARY_PREFIX changes.
+_HISTORICAL_SUMMARY_PREFIXES = (
    # Pre-#35344: contained the self-contradicting "resume exactly" directive.
    "[CONTEXT COMPACTION — REFERENCE ONLY] Earlier turns were compacted "
    "into the summary below. This is a handoff from a previous context "
@@ -1188,7 +1155,7 @@ class ContextCompressor(ContextEngine):
            )

        reason_text = f" Summary failure reason: {reason}." if reason else ""
-        body = f"""{HISTORICAL_TASK_HEADING}
+        body = f"""## Active Task
 {active_task}

 ## Goal
@@ -1205,7 +1172,7 @@ Recovered from a deterministic fallback because the LLM context summarizer was u
 ## Active State
 Unknown from deterministic fallback. Inspect current repository/session state if needed.

-{HISTORICAL_IN_PROGRESS_HEADING}
+## In Progress
 {active_task}

 ## Blocked
@@ -1217,13 +1184,13 @@ None recoverable from deterministic fallback.
 ## Resolved Questions
 None recoverable from deterministic fallback.

-{HISTORICAL_PENDING_ASKS_HEADING}
+## Pending User Asks
 {active_task}

 ## Relevant Files
 {_bullets(relevant_files, limit=12)}

-{HISTORICAL_REMAINING_WORK_HEADING}
+## Remaining Work
 Continue from the most recent unfulfilled user ask and protected tail messages. Verify state with tools before making claims.

 ## Last Dropped Turns
@@ -1345,7 +1312,7 @@ Summary generation was unavailable, so this is a best-effort deterministic fallb
            _temporal_anchoring_rule = ""

        # Shared structured template (used by both paths).
-        _template_sections = f"""{HISTORICAL_TASK_HEADING}
+        _template_sections = f"""## Active Task
 [THE SINGLE MOST IMPORTANT FIELD. Capture the user's most recent unfulfilled
 input verbatim — the exact words they used. This includes:
 - Explicit task assignments ("refactor the auth module")
@@ -1392,7 +1359,7 @@ Be specific with file paths, commands, line numbers, and results.]
 - Any running processes or servers
 - Environment details that matter]

-{HISTORICAL_IN_PROGRESS_HEADING}
+## In Progress
 [Work currently underway — what was being done when compaction fired]

 ## Blocked
@@ -1404,14 +1371,14 @@ Be specific with file paths, commands, line numbers, and results.]
 ## Resolved Questions
 [Questions the user asked that were ALREADY answered — include the answer so it is not repeated]

-{HISTORICAL_PENDING_ASKS_HEADING}
-[Questions or requests from the user that have NOT yet been answered or fulfilled. These are STALE — they were from the compacted turns. Write them here for reference only. The agent must NOT act on them unless the latest user message explicitly requests it. If none, write "None."]
+## Pending User Asks
+[Questions or requests from the user that have NOT yet been answered or fulfilled. If none, write "None."]

 ## Relevant Files
 [Files read, modified, or created — with brief note on each]

-{HISTORICAL_REMAINING_WORK_HEADING}
-[What remains to be done — framed as STALE context for reference only. The agent must NOT resume this work unless the latest user message explicitly asks for it.]
+## Remaining Work
+[What remains to be done — framed as context, not instructions]

 ## Critical Context
 [Any specific values, error messages, configuration details, or data that would be lost without explicit preservation. NEVER include API keys, tokens, passwords, or credentials — write [REDACTED] instead.]
@@ -1786,7 +1753,7 @@ The user has requested that this compaction PRIORITISE preserving all informatio
        Context compressor bug (#10896): ``_align_boundary_backward`` can pull
        ``cut_idx`` past a user message when it tries to keep tool_call/result
        groups together.  If the last user message ends up in the *compressed*
-        middle region the LLM summariser writes it into "Historical Pending User Asks",
+        middle region the LLM summariser writes it into "Pending User Asks",
        but ``SUMMARY_PREFIX`` tells the next model to respond only to user
        messages *after* the summary — so the task effectively disappears from
        the active context, causing the agent to stall, repeat completed work,
@@ -1,87 +0,0 @@
-/**
- * Helpers for local dashboard session-token discovery.
- *
- * The desktop main process can pass HERMES_DASHBOARD_SESSION_TOKEN when it
- * spawns the local dashboard, but the dashboard is the source of truth for the
- * token it actually serves to the renderer. If those drift, HTTP readiness
- * probes still pass while /api/ws rejects the renderer's token.
- */
-
-const http = require('node:http')
-const https = require('node:https')
-
-const DEFAULT_TOKEN_FETCH_TIMEOUT_MS = 3_000
-
-function fetchPublicText(url, options = {}) {
-  return new Promise((resolve, reject) => {
-    let parsed
-    try {
-      parsed = new URL(url)
-    } catch (error) {
-      reject(new Error(`Invalid URL: ${error.message}`))
-      return
-    }
-
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-      reject(new Error(`Unsupported Hermes backend URL protocol: ${parsed.protocol}`))
-      return
-    }
-
-    const client = parsed.protocol === 'https:' ? https : http
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TOKEN_FETCH_TIMEOUT_MS
-    const req = client.request(parsed, { method: options.method || 'GET' }, res => {
-      const chunks = []
-      res.on('data', chunk => chunks.push(chunk))
-      res.on('end', () => {
-        const text = Buffer.concat(chunks).toString('utf8')
-        if ((res.statusCode || 500) >= 400) {
-          reject(new Error(`${res.statusCode}: ${text || res.statusMessage}`))
-          return
-        }
-        resolve(text)
-      })
-    })
-
-    req.on('error', reject)
-    req.setTimeout(timeoutMs, () => {
-      req.destroy(new Error(`Timed out connecting to Hermes backend after ${timeoutMs}ms`))
-    })
-    req.end()
-  })
-}
-
-function extractInjectedDashboardToken(html) {
-  const match = /window\.__HERMES_SESSION_TOKEN__\s*=\s*("(?:\\.|[^"\\])*")/.exec(String(html || ''))
-  if (!match) return null
-  try {
-    return JSON.parse(match[1])
-  } catch {
-    return null
-  }
-}
-
-function dashboardIndexUrl(baseUrl) {
-  return `${String(baseUrl || '').replace(/\/+$/, '')}/`
-}
-
-async function resolveServedDashboardToken(baseUrl, fallbackToken, options = {}) {
-  const fetchText = options.fetchText || fetchPublicText
-  const html = await fetchText(dashboardIndexUrl(baseUrl), {
-    timeoutMs: options.timeoutMs ?? DEFAULT_TOKEN_FETCH_TIMEOUT_MS
-  })
-  const servedToken = extractInjectedDashboardToken(html)
-
-  if (servedToken && servedToken !== fallbackToken && typeof options.rememberLog === 'function') {
-    options.rememberLog('[boot] dashboard served a different session token; using served token for WebSocket auth')
-  }
-
-  return servedToken || fallbackToken
-}
-
-module.exports = {
-  DEFAULT_TOKEN_FETCH_TIMEOUT_MS,
-  dashboardIndexUrl,
-  extractInjectedDashboardToken,
-  fetchPublicText,
-  resolveServedDashboardToken
-}
@@ -1,89 +0,0 @@
-/**
- * Tests for electron/dashboard-token.cjs.
- *
- * Run with: node --test electron/dashboard-token.test.cjs
- * (Wired into npm test:desktop:platforms in package.json.)
- */
-
-const test = require('node:test')
-const assert = require('node:assert/strict')
-
-const {
-  dashboardIndexUrl,
-  extractInjectedDashboardToken,
-  fetchPublicText,
-  resolveServedDashboardToken
-} = require('./dashboard-token.cjs')
-
-test('extractInjectedDashboardToken reads the JSON-encoded dashboard token', () => {
-  const html = '<script>window.__HERMES_SESSION_TOKEN__="served-token";window.__HERMES_BASE_PATH__=""</script>'
-  assert.equal(extractInjectedDashboardToken(html), 'served-token')
-})
-
-test('extractInjectedDashboardToken handles escaped token strings', () => {
-  const html = '<script>window.__HERMES_SESSION_TOKEN__="served\\\\token\\"quoted";</script>'
-  assert.equal(extractInjectedDashboardToken(html), 'served\\token"quoted')
-})
-
-test('extractInjectedDashboardToken returns null for missing or malformed values', () => {
-  assert.equal(extractInjectedDashboardToken('<html></html>'), null)
-  assert.equal(extractInjectedDashboardToken('<script>window.__HERMES_SESSION_TOKEN__={bad}</script>'), null)
-})
-
-test('dashboardIndexUrl preserves dashboard path prefixes', () => {
-  assert.equal(dashboardIndexUrl('http://127.0.0.1:9120'), 'http://127.0.0.1:9120/')
-  assert.equal(dashboardIndexUrl('https://host.example/hermes/'), 'https://host.example/hermes/')
-})
-
-test('resolveServedDashboardToken uses the served token and logs when it differs', async () => {
-  const logs = []
-  const token = await resolveServedDashboardToken('http://127.0.0.1:9120', 'spawn-token', {
-    fetchText: async url => {
-      assert.equal(url, 'http://127.0.0.1:9120/')
-      return '<script>window.__HERMES_SESSION_TOKEN__="served-token";</script>'
-    },
-    rememberLog: line => logs.push(line)
-  })
-
-  assert.equal(token, 'served-token')
-  assert.equal(logs.length, 1)
-  assert.match(logs[0], /served a different session token/)
-})
-
-test('resolveServedDashboardToken falls back when the served HTML has no token', async () => {
-  const token = await resolveServedDashboardToken('http://127.0.0.1:9120', 'spawn-token', {
-    fetchText: async () => '<html></html>',
-    rememberLog: () => {
-      throw new Error('should not log when no served token is present')
-    }
-  })
-
-  assert.equal(token, 'spawn-token')
-})
-
-test('resolveServedDashboardToken does not log when served token matches fallback', async () => {
-  const token = await resolveServedDashboardToken('http://127.0.0.1:9120', 'same-token', {
-    fetchText: async () => '<script>window.__HERMES_SESSION_TOKEN__="same-token";</script>',
-    rememberLog: () => {
-      throw new Error('should not log when token already matches')
-    }
-  })
-
-  assert.equal(token, 'same-token')
-})
-
-test('resolveServedDashboardToken propagates fetch errors so callers can fall back explicitly', async () => {
-  await assert.rejects(
-    () =>
-      resolveServedDashboardToken('http://127.0.0.1:9120', 'spawn-token', {
-        fetchText: async () => {
-          throw new Error('boom')
-        }
-      }),
-    /boom/
-  )
-})
-
-test('fetchPublicText rejects unsupported protocols', async () => {
-  await assert.rejects(() => fetchPublicText('file:///tmp/index.html'), /Unsupported Hermes backend URL protocol/)
-})
@@ -29,7 +29,6 @@ const { runBootstrap } = require('./bootstrap-runner.cjs')
 const { buildSessionWindowUrl, createSessionWindowRegistry } = require('./session-windows.cjs')
 const { canImportHermesCli, verifyHermesCli } = require('./backend-probes.cjs')
 const { probeGatewayWebSocket } = require('./gateway-ws-probe.cjs')
-const { resolveServedDashboardToken } = require('./dashboard-token.cjs')
 const { serializeJsonBody, setJsonRequestHeaders } = require('./oauth-net-request.cjs')
 const { fetchMarketplaceThemes, searchMarketplaceThemes } = require('./vscode-marketplace.cjs')
 const { readDirForIpc } = require('./fs-read-dir.cjs')
@@ -4595,20 +4594,15 @@ async function spawnPoolBackend(profile, entry) {
  const baseUrl = `http://127.0.0.1:${port}`
  await Promise.race([waitForHermes(baseUrl, token), startFailed])
  ready = true
-  const authToken = await resolveServedDashboardToken(baseUrl, token, { rememberLog }).catch(error => {
-    rememberLog(`[boot] could not read served dashboard token for profile "${profile}": ${error.message}`)
-    return token
-  })
-  entry.token = authToken

  return {
    baseUrl,
    mode: 'local',
    source: 'local',
    authMode: 'token',
-    token: authToken,
+    token,
    profile,
-    wsUrl: `ws://127.0.0.1:${port}/api/ws?token=${encodeURIComponent(authToken)}`,
+    wsUrl: `ws://127.0.0.1:${port}/api/ws?token=${encodeURIComponent(token)}`,
    logs: hermesLog.slice(-80),
    ...getWindowState()
  }
@@ -4827,10 +4821,6 @@ async function startHermes() {
    await advanceBootProgress('backend.wait', 'Waiting for Hermes backend to become ready', 90)
    await Promise.race([waitForHermes(baseUrl, token), backendStartFailed])
    backendReady = true
-    const authToken = await resolveServedDashboardToken(baseUrl, token, { rememberLog }).catch(error => {
-      rememberLog(`[boot] could not read served dashboard token: ${error.message}`)
-      return token
-    })
    updateBootProgress({
      phase: 'backend.ready',
      message: 'Hermes backend is ready. Finalizing desktop startup',
@@ -4844,8 +4834,8 @@ async function startHermes() {
      mode: 'local',
      source: 'local',
      authMode: 'token',
-      token: authToken,
-      wsUrl: `ws://127.0.0.1:${port}/api/ws?token=${encodeURIComponent(authToken)}`,
+      token,
+      wsUrl: `ws://127.0.0.1:${port}/api/ws?token=${encodeURIComponent(token)}`,
      logs: hermesLog.slice(-80),
      ...getWindowState()
    }
@@ -8,7 +8,7 @@ const path = require('node:path')
 const ELECTRON_DIR = __dirname

 function readElectronFile(name) {
-  return fs.readFileSync(path.join(ELECTRON_DIR, name), 'utf8').replace(/\r\n/g, '\n')
+  return fs.readFileSync(path.join(ELECTRON_DIR, name), 'utf8')
 }

 function requireHiddenChildOptions(source, needle) {
@@ -35,7 +35,7 @@
    "test:desktop:nsis": "node scripts/test-desktop.mjs nsis",
    "test:desktop:existing": "node scripts/test-desktop.mjs existing",
    "test:desktop:fresh": "node scripts/test-desktop.mjs fresh",
-    "test:desktop:platforms": "node --test electron/bootstrap-platform.test.cjs electron/hardening.test.cjs electron/backend-probes.test.cjs electron/bootstrap-runner.test.cjs electron/connection-config.test.cjs electron/dashboard-token.test.cjs electron/gateway-ws-probe.test.cjs electron/oauth-net-request.test.cjs electron/desktop-uninstall.test.cjs electron/session-windows.test.cjs electron/workspace-cwd.test.cjs electron/fs-read-dir.test.cjs electron/git-root.test.cjs electron/windows-child-process.test.cjs electron/update-remote.test.cjs",
+    "test:desktop:platforms": "node --test electron/bootstrap-platform.test.cjs electron/hardening.test.cjs electron/backend-probes.test.cjs electron/bootstrap-runner.test.cjs electron/connection-config.test.cjs electron/gateway-ws-probe.test.cjs electron/oauth-net-request.test.cjs electron/desktop-uninstall.test.cjs electron/session-windows.test.cjs electron/workspace-cwd.test.cjs electron/fs-read-dir.test.cjs electron/git-root.test.cjs electron/windows-child-process.test.cjs electron/update-remote.test.cjs",
    "typecheck": "tsc -p . --noEmit",
    "lint": "eslint src/ electron/",
    "lint:fix": "eslint src/ electron/ --fix",
@@ -105,7 +105,7 @@
    "@testing-library/dom": "^10.4.0",
    "@testing-library/react": "^16.3.2",
    "@types/hast": "^3.0.4",
-    "@types/node": "^24.13.2",
+    "@types/node": "^24.12.0",
    "@types/react": "^19.2.14",
    "@types/react-dom": "^19.2.3",
    "@typescript-eslint/eslint-plugin": "^8.59.1",
@@ -797,14 +797,7 @@ export function ChatSidebar({
                    <SidebarMenuButton
                      aria-disabled={!isInteractive}
                      className={cn(
-                        // no-drag: these rows sit directly under the titlebar's
-                        // [-webkit-app-region:drag] strips (app-shell.tsx), with only
-                        // 6px of clearance. Drag regions win hit-testing over DOM
-                        // (pointer-events can't override), and on Linux/WSLg the
-                        // resolved region has been observed to swallow clicks on the
-                        // top rows. Same carve-out as USER_BUBBLE_BASE_CLASS in
-                        // thread.tsx.
-                        'flex h-7 w-full justify-start gap-2 rounded-md border border-transparent px-2 text-left text-[0.8125rem] font-medium text-(--ui-text-secondary) transition-colors duration-100 ease-out [-webkit-app-region:no-drag] hover:bg-(--ui-control-hover-background) hover:text-foreground hover:transition-none',
+                        'flex h-7 w-full justify-start gap-2 rounded-md border border-transparent px-2 text-left text-[0.8125rem] font-medium text-(--ui-text-secondary) transition-colors duration-100 ease-out hover:bg-(--ui-control-hover-background) hover:text-foreground hover:transition-none',
                        active &&
                          'border-(--ui-stroke-tertiary) bg-(--ui-control-active-background) text-foreground shadow-none hover:border-(--ui-stroke-tertiary)!',
                        !isInteractive &&
@@ -1,4 +1,4 @@
-"""Automation Blueprints — parameterized automation blueprints with typed slots.
+"""Automation Blueprints — parameterized automation templates with typed slots.

 A *blueprint* is a one-place definition of an automation that every surface
 renders natively:
@@ -81,7 +81,7 @@ class BlueprintSlot:

@dataclass(frozen=True)
 class AutomationBlueprint:
-    """A parameterized automation blueprint."""
+    """A parameterized automation template."""

    key: str
    title: str
@@ -149,7 +149,7 @@ hermes webhook subscribe pr-review \
  --deliver github_comment
 ```

-Full automation blueprints gallery: [hermes-agent.nousresearch.com/docs/reference/automation-blueprints-catalog](https://hermes-agent.nousresearch.com/docs/reference/automation-blueprints-catalog)
+Full automation templates gallery: [hermes-agent.nousresearch.com/docs/guides/automation-templates](https://hermes-agent.nousresearch.com/docs/guides/automation-templates)

 Documentation: [hermes-agent.nousresearch.com](https://hermes-agent.nousresearch.com)

@@ -10332,8 +10332,6 @@ def cmd_dashboard(args):
        _launch_profile not in ("default", "custom")
        and not getattr(args, "isolated", False)
        and not getattr(args, "open_profile", "")
-        # Desktop pool backends are intentionally per-profile.
-        and os.environ.get("HERMES_DESKTOP") != "1"
    ):
        url = f"http://{args.host or '127.0.0.1'}:{args.port}/?profile={_launch_profile}"
        if _dashboard_listening(args.host, args.port):
@@ -10433,26 +10431,6 @@ def cmd_dashboard(args):
        # the missing-provider state if it matters.
        print(f"⚠ Plugin discovery failed: {exc}", file=sys.stderr)

-    # Desktop chat uses the dashboard's in-process /api/ws gateway, which builds
-    # agents via tui_gateway.server._make_agent.  That path only snapshots the
-    # tool registry — it never starts MCP discovery (the stdio TUI does that in
-    # tui_gateway/entry.py, which the dashboard process doesn't run).  Without
-    # this, a profile's configured MCP servers never connect, so desktop
-    # sessions show no MCP tools.  Spawn discovery in the background here so a
-    # slow/dead server can't block dashboard startup.
-    try:
-        from hermes_cli.mcp_startup import start_background_mcp_discovery
-
-        start_background_mcp_discovery(
-            logger=logger,
-            thread_name="dashboard-mcp-discovery",
-        )
-    except Exception:
-        logger.debug(
-            "Background MCP tool discovery failed at dashboard startup",
-            exc_info=True,
-        )
-
    from hermes_cli.web_server import start_server

    # The in-browser Chat tab (the embedded TUI over PTY/WebSocket) is always
@@ -1069,21 +1069,8 @@ class PluginManager:
            self._plugin_skills.clear()
            self._aux_tasks.clear()
            self._context_engine = None
-        # Set the flag up front as a re-entrancy guard (a plugin's register()
-        # can transitively trigger discovery again), but reset it if the sweep
-        # raises so a failed scan is NOT cached as "discovered with an empty
-        # registry" — callers swallow the exception and would otherwise be
-        # permanently stranded on the early-return above (the "No web provider
-        # configured" class of failures).
        self._discovered = True
-        try:
-            self._discover_and_load_inner()
-        except BaseException:
-            self._discovered = False
-            raise

-    def _discover_and_load_inner(self) -> None:
-        """The actual discovery sweep — see :meth:`discover_and_load`."""
        manifests: List[PluginManifest] = []

        # 1. Bundled plugins (<repo>/plugins/<name>/)
@@ -6779,7 +6779,7 @@ async def delete_cron_job(job_id: str, profile: Optional[str] = None):


 # ---------------------------------------------------------------------------
-# Automation Blueprints — parameterized automation blueprints. The dashboard renders the
+# Automation Blueprints — parameterized automation templates. The dashboard renders the
 # slot schema as a form; submitting instantiates a real cron job via the same
 # create_job path. See cron/blueprint_catalog.py for the single source of truth.
 # ---------------------------------------------------------------------------
@@ -21,7 +21,7 @@ let

  # Single npm deps fetch from the workspace root lockfile.
  # All workspace packages share this derivation.
-  npmDepsHash = "sha256-jN6rD+vVhTCWz3lFZzlmFYXmcMRPTtYWy3XVSiDYbvM=";
+  npmDepsHash = "sha256-mYgKXE/FL4hnkrEvpVv+ULM/oeyIfO2AM9Ol8OrfWm0=";

  npmDeps = pkgs.fetchNpmDeps {
    inherit src;
@@ -135,7 +135,7 @@
        "@testing-library/dom": "^10.4.0",
        "@testing-library/react": "^16.3.2",
        "@types/hast": "^3.0.4",
-        "@types/node": "^24.13.2",
+        "@types/node": "^24.12.0",
        "@types/react": "^19.2.14",
        "@types/react-dom": "^19.2.3",
        "@typescript-eslint/eslint-plugin": "^8.59.1",
@@ -205,16 +205,6 @@
        }
      }
    },
-    "apps/desktop/node_modules/@types/node": {
-      "version": "24.13.2",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.13.2.tgz",
-      "integrity": "sha512-fRa09kZTgu8o71KFcDjUFuc7F+dEbZYZmkI0mg5YBTRs0yMKjYHsq/c0urDKeDb+D5qVgXOdFcuu+DZPKOITwA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "undici-types": "~7.18.0"
-      }
-    },
    "apps/desktop/node_modules/@vitejs/plugin-react": {
      "version": "6.0.1",
      "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.0.1.tgz",
@@ -407,6 +397,7 @@
      "integrity": "sha512-rZuUu9j6J5uotLDs+cAA4O5H4K1SfPliUlQwqa6YEwSrWDZzP4rhm00oJR5snMewjxF5V/K3D4kctsUTsIU9Mw==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "lightningcss": "^1.32.0",
        "picomatch": "^4.0.4",
@@ -687,6 +678,7 @@
      "resolved": "https://registry.npmjs.org/@assistant-ui/react/-/react-0.12.28.tgz",
      "integrity": "sha512-czjpexLK1lKnNDNM1YMJi8SufeKUWBICqiVUtiHMV+86PYGCwJykOZKkchI8MVbSQ62xZ8A1LfPO5W2IDjed3A==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@assistant-ui/core": "^0.1.17",
        "@assistant-ui/store": "^0.2.9",
@@ -763,6 +755,7 @@
      "resolved": "https://registry.npmjs.org/@assistant-ui/store/-/store-0.2.9.tgz",
      "integrity": "sha512-EDd6yCfirb2OsAKoTo7HeMtqPG+1cqVlNXOzUsho35ZF3O1XQ2CyEY4iUbdhj3HfmWeZo7rmfhvbaYQVEqAfeA==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "use-effect-event": "^2.0.3"
      },
@@ -782,6 +775,7 @@
      "resolved": "https://registry.npmjs.org/@assistant-ui/tap/-/tap-0.5.10.tgz",
      "integrity": "sha512-sBHTf+q1geRyu5l4gJJp2hk6ZxwhHZHj39ixjC9ARADuIYedYv1B8bCNS82eTC/COpD1xe86mzvT/+HwIsO9WA==",
      "license": "MIT",
+      "peer": true,
      "peerDependencies": {
        "@types/react": "*",
        "react": "^18 || ^19"
@@ -845,6 +839,7 @@
      "integrity": "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@babel/code-frame": "^7.29.0",
        "@babel/generator": "^7.29.0",
@@ -1244,6 +1239,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=20.19.0"
      },
@@ -1292,6 +1288,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=20.19.0"
      }
@@ -1329,6 +1326,7 @@
      "version": "6.3.1",
      "resolved": "https://registry.npmjs.org/@dnd-kit/core/-/core-6.3.1.tgz",
      "integrity": "sha512-xkGBRQQab4RLwgXxoqETICr6S5JlogafbhNsidmrkVv2YRs5MLwpjoF2qpiGjQt8S9AoxtIV603s0GIUpY5eYQ==",
+      "peer": true,
      "dependencies": {
        "@dnd-kit/accessibility": "^3.1.1",
        "@dnd-kit/utilities": "^3.2.2",
@@ -2788,6 +2786,7 @@
      "resolved": "https://registry.npmjs.org/@observablehq/plot/-/plot-0.6.17.tgz",
      "integrity": "sha512-/qaXP/7mc4MUS0s4cPPFASDRjtsWp85/TbfsciqDgU1HwYixbSbbytNuInD8AcTYC3xaxACgVX06agdfQy9W+g==",
      "license": "ISC",
+      "peer": true,
      "dependencies": {
        "d3": "^7.9.0",
        "interval-tree-1d": "^1.0.0",
@@ -6374,6 +6373,7 @@
      "resolved": "https://registry.npmjs.org/@react-three/fiber/-/fiber-9.6.1.tgz",
      "integrity": "sha512-zF0rsKcVYpcJwbFEnv2HkHX9cvOEgsfQo/X8lwmR2dn13S4qEQJXir9fxf5js2LQFoXqxOY7MDkOkYx2uZ4gSg==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@babel/runtime": "^7.17.8",
        "@types/webxr": "*",
@@ -7163,6 +7163,7 @@
      "resolved": "https://registry.npmjs.org/@streamdown/code/-/code-1.1.1.tgz",
      "integrity": "sha512-i7HTNuDgZWb+VdrNVOam9gQhIc5MSSDXKWXgbUrn/4vSRaSMM+Rtl10MQj4wLWPNpF7p80waJsAqFP8HZfb0Jg==",
      "license": "Apache-2.0",
+      "peer": true,
      "dependencies": {
        "shiki": "^3.19.0"
      },
@@ -7252,6 +7253,7 @@
      "resolved": "https://registry.npmjs.org/@streamdown/math/-/math-1.0.2.tgz",
      "integrity": "sha512-r8Ur9/lBuFnzZAFdEWrLUF2s/gRwRRRwruqltdZibyjbCBnuW7SJbFm26nXqvpJPW/gzpBUMrBVBzd88z05D5g==",
      "license": "Apache-2.0",
+      "peer": true,
      "dependencies": {
        "katex": "^0.16.27",
        "rehype-katex": "^7.0.1",
@@ -7946,6 +7948,7 @@
      "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@babel/code-frame": "^7.10.4",
        "@babel/runtime": "^7.12.5",
@@ -8430,11 +8433,12 @@
      "license": "MIT"
    },
    "node_modules/@types/node": {
-      "version": "24.13.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.13.1.tgz",
-      "integrity": "sha512-RSpUJGmvsJ1ZeBehQZFhIdpsz+bIpES0nIQXko4Ybq+N+kX6XvOq3Jo+iJ82FWLdblFq85AsMikd3m35jgezYg==",
+      "version": "24.13.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.13.2.tgz",
+      "integrity": "sha512-fRa09kZTgu8o71KFcDjUFuc7F+dEbZYZmkI0mg5YBTRs0yMKjYHsq/c0urDKeDb+D5qVgXOdFcuu+DZPKOITwA==",
      "devOptional": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "undici-types": "~7.18.0"
      }
@@ -9010,6 +9014,7 @@
      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz",
      "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
      "license": "MIT",
+      "peer": true,
      "bin": {
        "acorn": "bin/acorn"
      },
@@ -9053,6 +9058,7 @@
      "integrity": "sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "fast-deep-equal": "^3.1.1",
        "fast-json-stable-stringify": "^2.0.0",
@@ -9483,6 +9489,7 @@
      "resolved": "https://registry.npmjs.org/assistant-cloud/-/assistant-cloud-0.1.27.tgz",
      "integrity": "sha512-BGfVnx7YFN5xtB/kbrgGxRI0TfSWq4yxB3MwYn6RDPlv4JvdtPupvDC1Y6An0EhAe42Z0AYtSmDSsR6p6eeBng==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "assistant-stream": "^0.3.12"
      }
@@ -9712,6 +9719,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "baseline-browser-mapping": "^2.10.12",
        "caniuse-lite": "^1.0.30001782",
@@ -10416,6 +10424,7 @@
      "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.33.3.tgz",
      "integrity": "sha512-Gej7U+OKR+LZ8kvX7rb2HhCYJ0IhvEFsnkud4SB1PR+BUY/TsSO0dmOW59WEVLu51b1Rm+gQRKoz4bLYxGSZ2g==",
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=0.10"
      }
@@ -10837,6 +10846,7 @@
      "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz",
      "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
      "license": "ISC",
+      "peer": true,
      "engines": {
        "node": ">=12"
      }
@@ -11247,6 +11257,7 @@
      "integrity": "sha512-glMJgnTreo8CFINujtAhCgN96QAqApDMZ8Vl1r8f0QT8QprvC1UCltV4CcWj20YoIyLZx6IUskaJZ0NV8fokcg==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "app-builder-lib": "26.8.1",
        "builder-util": "26.8.1",
@@ -11574,7 +11585,6 @@
      "dev": true,
      "hasInstallScript": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@electron/asar": "^3.2.1",
        "debug": "^4.1.1",
@@ -11595,7 +11605,6 @@
      "integrity": "sha512-YJDaCJZEnBmcbw13fvdAM9AwNOJwOzrE4pqMqBq5nFiEqXUqHwlK4B+3pUw6JNvfSPtX05xFHtYy/1ni01eGCw==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "graceful-fs": "^4.1.2",
        "jsonfile": "^4.0.0",
@@ -11611,7 +11620,6 @@
      "integrity": "sha512-m6F1R3z8jjlf2imQHS2Qez5sjKWQzbuuhuJ/FKYFRZvPE3PuHcSMVZzfsLhGVOkfd20obL5SWEBew5ShlquNxg==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "optionalDependencies": {
        "graceful-fs": "^4.1.6"
      }
@@ -11622,7 +11630,6 @@
      "integrity": "sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">= 4.0.0"
      }
@@ -11906,6 +11913,7 @@
      "integrity": "sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==",
      "hasInstallScript": true,
      "license": "MIT",
+      "peer": true,
      "bin": {
        "esbuild": "bin/esbuild"
      },
@@ -12967,7 +12975,8 @@
      "version": "3.15.0",
      "resolved": "https://registry.npmjs.org/gsap/-/gsap-3.15.0.tgz",
      "integrity": "sha512-dMW4CWBTUK1AEEDeZc1g4xpPGIrSf9fJF960qbTZmN/QwZIWY5wgliS6JWl9/25fpTGJrMRtSjGtOmPnfjZB+A==",
-      "license": "Standard 'no charge' license: https://gsap.com/standard-license."
+      "license": "Standard 'no charge' license: https://gsap.com/standard-license.",
+      "peer": true
    },
    "node_modules/hachure-fill": {
      "version": "0.5.2",
@@ -14571,9 +14580,9 @@
      }
    },
    "node_modules/joi": {
-      "version": "18.2.1",
-      "resolved": "https://registry.npmjs.org/joi/-/joi-18.2.1.tgz",
-      "integrity": "sha512-2/OKlogiESf2Nh3TFCrRjrr9z1DRHeW0I+KReF67+4J0Ns+8hBtHRmoWAZ2OFU6I5+TWLEe6sVlSdXPjHm5UbQ==",
+      "version": "18.1.2",
+      "resolved": "https://registry.npmjs.org/joi/-/joi-18.1.2.tgz",
+      "integrity": "sha512-rF5MAmps5esSlhCA+N1b6IYHDw9j/btzGaqfgie522jS02Ju/HXBxamlXVlKEHAxoMKQL77HWI8jlqWsFuekZA==",
      "dev": true,
      "license": "BSD-3-Clause",
      "dependencies": {
@@ -14809,6 +14818,7 @@
      "version": "0.10.1",
      "resolved": "https://registry.npmjs.org/leva/-/leva-0.10.1.tgz",
      "integrity": "sha512-BcjnfUX8jpmwZUz2L7AfBtF9vn4ggTH33hmeufDULbP3YgNZ/C+ss/oO3stbrqRQyaOmRwy70y7BGTGO81S3rA==",
+      "peer": true,
      "dependencies": {
        "@radix-ui/react-portal": "^1.1.4",
        "@radix-ui/react-tooltip": "^1.1.8",
@@ -16353,7 +16363,6 @@
      "integrity": "sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "minimist": "^1.2.6"
      },
@@ -16377,6 +16386,7 @@
      "version": "12.38.0",
      "resolved": "https://registry.npmjs.org/motion/-/motion-12.38.0.tgz",
      "integrity": "sha512-uYfXzeHlgThchzwz5Te47dlv5JOUC7OB4rjJ/7XTUgtBZD8CchMN8qEJ4ZVsUmTyYA44zjV0fBwsiktRuFnn+w==",
+      "peer": true,
      "dependencies": {
        "framer-motion": "^12.38.0",
        "tslib": "^2.4.0"
@@ -16446,6 +16456,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": "^20.0.0 || >=22.0.0"
      }
@@ -17621,6 +17632,7 @@
      "resolved": "https://registry.npmjs.org/react/-/react-19.2.5.tgz",
      "integrity": "sha512-llUJLzz1zTUBrskt2pwZgLq59AemifIftw4aB7JxOqf1HY2FDaGDxgwpAPVzHU1kdWabH7FauP4i1oEeer2WCA==",
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=0.10.0"
      }
@@ -17693,6 +17705,7 @@
      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.5.tgz",
      "integrity": "sha512-J5bAZz+DXMMwW/wV3xzKke59Af6CHY7G4uYLN1OvBcKEsWOs4pQExj86BBKamxl/Ik5bx9whOrvBlSDfWzgSag==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "scheduler": "^0.27.0"
      },
@@ -18291,7 +18304,6 @@
      "deprecated": "Rimraf versions prior to v4 are no longer supported",
      "dev": true,
      "license": "ISC",
-      "peer": true,
      "dependencies": {
        "glob": "^7.1.3"
      },
@@ -18304,8 +18316,7 @@
      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
      "dev": true,
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/rimraf/node_modules/brace-expansion": {
      "version": "1.1.14",
@@ -18313,7 +18324,6 @@
      "integrity": "sha512-MWPGfDxnyzKU7rNOW9SP/c50vi3xrmrua/+6hfPbCS2ABNWfx24vPidzvC7krjU/RTo235sV776ymlsMtGKj8g==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "balanced-match": "^1.0.0",
        "concat-map": "0.0.1"
@@ -18326,7 +18336,6 @@
      "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
      "dev": true,
      "license": "ISC",
-      "peer": true,
      "dependencies": {
        "fs.realpath": "^1.0.0",
        "inflight": "^1.0.4",
@@ -18348,7 +18357,6 @@
      "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
      "dev": true,
      "license": "ISC",
-      "peer": true,
      "dependencies": {
        "brace-expansion": "^1.1.7"
      },
@@ -19348,7 +19356,8 @@
      "version": "4.2.4",
      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.2.4.tgz",
      "integrity": "sha512-HhKppgO81FQof5m6TEnuBWCZGgfRAWbaeOaGT00KOy/Pf/j6oUihdvBpA7ltCeAvZpFhW3j0PTclkxsd4IXYDA==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
    },
    "node_modules/tapable": {
      "version": "2.3.3",
@@ -19406,7 +19415,6 @@
      "integrity": "sha512-yYrrsWnrXMcdsnu/7YMYAofM1ktpL5By7vZhf15CrXijWWrEYZks5AXBudalfSWJLlnen/QUJUB5aoB0kqZUGA==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "mkdirp": "^0.5.1",
        "rimraf": "~2.6.2"
@@ -19442,7 +19450,8 @@
      "version": "0.180.0",
      "resolved": "https://registry.npmjs.org/three/-/three-0.180.0.tgz",
      "integrity": "sha512-o+qycAMZrh+TsE01GqWUxUIKR1AL0S8pq7zDkYOQw8GqfX8b8VoCKYUoHbhiX5j+7hr8XsuHDVU6+gkQJQKg9w==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
    },
    "node_modules/tiny-async-pool": {
      "version": "1.3.0",
@@ -19646,6 +19655,7 @@
      "integrity": "sha512-X8EX+XV4QR5xCsrgxaED954zTDfY8KqlDtskKEL0cHhyS/P8b4IFOvGDQpsC9Q1XnLq915wEfwwY/zzskCtmhg==",
      "devOptional": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "esbuild": "~0.28.0"
      },
@@ -19671,7 +19681,6 @@
      "os": [
        "aix"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19688,7 +19697,6 @@
      "os": [
        "android"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19705,7 +19713,6 @@
      "os": [
        "android"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19722,7 +19729,6 @@
      "os": [
        "android"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19739,7 +19745,6 @@
      "os": [
        "darwin"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19756,7 +19761,6 @@
      "os": [
        "darwin"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19773,7 +19777,6 @@
      "os": [
        "freebsd"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19790,7 +19793,6 @@
      "os": [
        "freebsd"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19807,7 +19809,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19824,7 +19825,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19841,7 +19841,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19858,7 +19857,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19875,7 +19873,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19892,7 +19889,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19909,7 +19905,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19926,7 +19921,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19943,7 +19937,6 @@
      "os": [
        "linux"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19960,7 +19953,6 @@
      "os": [
        "netbsd"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19977,7 +19969,6 @@
      "os": [
        "netbsd"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -19994,7 +19985,6 @@
      "os": [
        "openbsd"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20011,7 +20001,6 @@
      "os": [
        "openbsd"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20028,7 +20017,6 @@
      "os": [
        "openharmony"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20045,7 +20033,6 @@
      "os": [
        "sunos"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20062,7 +20049,6 @@
      "os": [
        "win32"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20079,7 +20065,6 @@
      "os": [
        "win32"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20096,7 +20081,6 @@
      "os": [
        "win32"
      ],
-      "peer": true,
      "engines": {
        "node": ">=18"
      }
@@ -20272,7 +20256,6 @@
      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
      "dev": true,
      "license": "Apache-2.0",
-      "peer": true,
      "bin": {
        "tsc": "bin/tsc",
        "tsserver": "bin/tsserver"
@@ -20742,6 +20725,7 @@
      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.2.tgz",
      "integrity": "sha512-Bby3NOsna2jsjfLVOHKes8sGwgl4TT0E6vvpYgnAYDIF/tie7MRaFthmKuHx1NSXjiTueXH3do80FMQgvEktRg==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "esbuild": "^0.27.0",
        "fdir": "^6.5.0",
@@ -21360,6 +21344,7 @@
      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.2.tgz",
      "integrity": "sha512-IynmDyxsEsb9RKzO3J9+4SxXnl2FTFSzNBaKKaMV6tsSk0rw9gYw9gs+JFCq/qk2LCZ78KDwyj+Z289TijSkUw==",
      "license": "MIT",
+      "peer": true,
      "funding": {
        "url": "https://github.com/sponsors/colinhacks"
      }
@@ -21382,6 +21367,7 @@
      "resolved": "https://registry.npmjs.org/zustand/-/zustand-5.0.12.tgz",
      "integrity": "sha512-i77ae3aZq4dhMlRhJVCYgMLKuSiZAaUPAct2AksxQ+gOtimhGMdXljRT21P5BNpeT4kXlLIckvkPM029OljD7g==",
      "license": "MIT",
+      "peer": true,
      "engines": {
        "node": ">=12.20.0"
      },
@@ -21430,7 +21416,7 @@
      },
      "devDependencies": {
        "@eslint/js": "^9",
-        "@types/node": "^24.13.2",
+        "@types/node": "^24.12.0",
        "@types/react": "^19.2.14",
        "@typescript-eslint/eslint-plugin": "^8",
        "@typescript-eslint/parser": "^8",
@@ -21903,13 +21889,13 @@
      }
    },
    "ui-tui/node_modules/@types/node": {
-      "version": "24.13.2",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.13.2.tgz",
-      "integrity": "sha512-fRa09kZTgu8o71KFcDjUFuc7F+dEbZYZmkI0mg5YBTRs0yMKjYHsq/c0urDKeDb+D5qVgXOdFcuu+DZPKOITwA==",
+      "version": "25.9.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.9.1.tgz",
+      "integrity": "sha512-xfrlY7UD5rMJk3ZVJP8BNzS28J36YJg+xp+LPXV1TdWxr8uMH5A860QNxYDGQe/ylDSgjxE52Q9VnO7p75tJxg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "undici-types": "~7.18.0"
+        "undici-types": ">=7.24.0 <7.24.7"
      }
    },
    "ui-tui/node_modules/ansi-regex": {
@@ -22036,6 +22022,13 @@
        "node": ">=14.17"
      }
    },
+    "ui-tui/node_modules/undici-types": {
+      "version": "7.24.6",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.24.6.tgz",
+      "integrity": "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==",
+      "dev": true,
+      "license": "MIT"
+    },
    "ui-tui/node_modules/wrap-ansi": {
      "version": "9.0.2",
      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-9.0.2.tgz",
@@ -22156,7 +22149,7 @@
      },
      "devDependencies": {
        "@eslint/js": "^9.39.4",
-        "@types/node": "^24.13.2",
+        "@types/node": "^24.12.0",
        "@types/qrcode": "^1.5.6",
        "@types/react": "^19.2.14",
        "@types/react-dom": "^19.2.3",
@@ -22215,16 +22208,6 @@
        }
      }
    },
-    "web/node_modules/@types/node": {
-      "version": "24.13.2",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.13.2.tgz",
-      "integrity": "sha512-fRa09kZTgu8o71KFcDjUFuc7F+dEbZYZmkI0mg5YBTRs0yMKjYHsq/c0urDKeDb+D5qVgXOdFcuu+DZPKOITwA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "undici-types": "~7.18.0"
-      }
-    },
    "web/node_modules/globals": {
      "version": "17.6.0",
      "resolved": "https://registry.npmjs.org/globals/-/globals-17.6.0.tgz",
@@ -20,7 +20,6 @@ import tempfile
 import threading
 import time
 from collections import defaultdict
-from contextlib import suppress
 from typing import Callable, Dict, List, Optional, Any, Tuple

 logger = logging.getLogger(__name__)
@@ -69,43 +68,6 @@ from gateway.platforms.base import (
 from tools.url_safety import is_safe_url


-async def _wait_for_ready_or_bot_exit(
-    ready_event: asyncio.Event,
-    bot_task: asyncio.Task,
-    timeout: float,
-) -> None:
-    """Wait until Discord is ready, or surface early bot startup failure.
-
-    ``discord.py`` startup errors (including SOCKS/proxy failures from
-    aiohttp-socks/python-socks) happen inside ``Bot.start()``.  If ``connect()``
-    only waits on ``ready_event``, a dead background task still burns the full
-    ready timeout before the gateway supervisor can reconnect.  Racing the ready
-    event against the bot task keeps failures fast and preserves the original
-    exception for logging/classification.
-    """
-    ready_task = asyncio.create_task(ready_event.wait())
-    try:
-        done, _pending = await asyncio.wait(
-            {ready_task, bot_task},
-            timeout=timeout,
-            return_when=asyncio.FIRST_COMPLETED,
-        )
-        if not done:
-            raise asyncio.TimeoutError
-        if bot_task in done:
-            exc = bot_task.exception()
-            if exc is not None:
-                raise exc
-            if not ready_task.done():
-                raise RuntimeError("Discord bot task exited before ready")
-        await ready_task
-    finally:
-        if not ready_task.done():
-            ready_task.cancel()
-            with suppress(asyncio.CancelledError):
-                await ready_task
-
-
 def _find_discord_windows_bundled_opus(discord_module: Any = None) -> Optional[str]:
    """Return discord.py's bundled Windows opus DLL path when present."""
    if sys.platform != "win32":
@@ -660,10 +622,6 @@ class DiscordAdapter(BasePlatformAdapter):
        self._typing_tasks: Dict[str, asyncio.Task] = {}
        self._bot_task: Optional[asyncio.Task] = None
        self._post_connect_task: Optional[asyncio.Task] = None
-        # True while disconnect() is intentionally closing discord.py. The
-        # bot task's done callback uses this to distinguish an operator/service
-        # shutdown from a runtime websocket crash.
-        self._disconnecting = False
        # Dedup cache: prevents duplicate bot responses when Discord
        # RESUME replays events after reconnects.
        self._dedup = MessageDeduplicator()
@@ -676,65 +634,6 @@ class DiscordAdapter(BasePlatformAdapter):
        # scanning channel.history() on cache miss (cold start / restart).
        self._last_self_message_id: Dict[str, str] = {}

-    def _handle_bot_task_done(self, task: asyncio.Task) -> None:
-        """Surface post-startup discord.py task exits to the gateway supervisor.
-
-        discord.py reconnects normal gateway interruptions internally. When its
-        top-level ``Bot.start()`` task actually exits after the adapter has been
-        marked running, the Discord websocket is dead while the Hermes gateway
-        process can remain alive. Treat that split-brain state as a retryable
-        fatal adapter error so ``GatewayRunner._handle_adapter_fatal_error`` can
-        remove this adapter and queue Discord for the existing reconnect watcher.
-        """
-        if getattr(self, "_disconnecting", False):
-            # Intentional service/operator shutdown. Drain the task result so
-            # asyncio doesn't emit "exception was never retrieved" warnings.
-            with suppress(asyncio.CancelledError, Exception):
-                task.exception()
-            return
-
-        # Ignore stale callbacks from an older client if a reconnect already
-        # installed a newer Bot.start() task on this adapter instance.
-        if self._bot_task is not None and task is not self._bot_task:
-            with suppress(asyncio.CancelledError, Exception):
-                task.exception()
-            return
-
-        if not self._running:
-            # Startup failures are handled by _wait_for_ready_or_bot_exit() in
-            # connect(); this callback is only for post-startup split-brain.
-            with suppress(asyncio.CancelledError, Exception):
-                task.exception()
-            return
-
-        try:
-            exc = task.exception()
-        except asyncio.CancelledError:
-            return
-        except Exception as err:  # pragma: no cover - defensive
-            exc = err
-
-        if exc is None:
-            message = "Discord gateway task exited without an exception"
-        else:
-            message = f"Discord gateway task exited: {exc}"
-
-        logger.error("[%s] %s", self.name, message, exc_info=exc if exc else False)
-        self._set_fatal_error("discord_gateway_task_exited", message, retryable=True)
-
-        async def _notify() -> None:
-            try:
-                await self._notify_fatal_error()
-            except Exception as notify_exc:  # pragma: no cover - defensive logging
-                logger.warning(
-                    "[%s] Failed to notify gateway supervisor about Discord task exit: %s",
-                    self.name,
-                    notify_exc,
-                    exc_info=True,
-                )
-
-        asyncio.create_task(_notify())
-
    async def connect(self) -> bool:
        """Connect to Discord and start receiving events."""
        if not DISCORD_AVAILABLE:
@@ -1001,55 +900,25 @@ class DiscordAdapter(BasePlatformAdapter):
                self._register_slash_commands()

            # Start the bot in background
-            self._disconnecting = False
            self._bot_task = asyncio.create_task(self._client.start(self.config.token))
-            self._bot_task.add_done_callback(self._handle_bot_task_done)

-            # Wait for ready, but fail fast if discord.py's background startup
-            # task dies first (for example on SOCKS/proxy connect errors).
-            await _wait_for_ready_or_bot_exit(self._ready_event, self._bot_task, timeout=30)
+            # Wait for ready
+            await asyncio.wait_for(self._ready_event.wait(), timeout=30)

            self._running = True
            return True

        except asyncio.TimeoutError:
            logger.error("[%s] Timeout waiting for connection to Discord", self.name, exc_info=True)
-            # Cancel the background bot task so it cannot fire on_message after
-            # this adapter is discarded.  Without this, the task keeps running and
-            # a later successful reconnect leaves two active Discord clients that
-            # each process every message, producing duplicate threads/responses.
-            await self._cancel_bot_task()
            self._release_platform_lock()
            return False
        except Exception as e:  # pragma: no cover - defensive logging
            logger.error("[%s] Failed to connect to Discord: %s", self.name, e, exc_info=True)
-            # Same zombie-client hazard as the timeout branch: the background
-            # client.start() task may already be running when a later setup
-            # step raises. Cancel it so the discarded adapter cannot connect.
-            await self._cancel_bot_task()
            self._release_platform_lock()
            return False

-    async def _cancel_bot_task(self) -> None:
-        """Cancel and await the background client.start() task, if running."""
-        if self._bot_task and not self._bot_task.done():
-            self._bot_task.cancel()
-            try:
-                await self._bot_task
-            except (asyncio.CancelledError, Exception):
-                pass
-        self._bot_task = None
-
    async def disconnect(self) -> None:
        """Disconnect from Discord."""
-        self._disconnecting = True
-        # Cancel the bot task before closing the client.  If connect() timed out
-        # and returned False, the background client.start() task may still be
-        # running; calling client.close() alone is not enough to stop it because
-        # discord.py's reconnect loop can ignore the closed flag while a
-        # WebSocket handshake is in flight.  Explicitly cancelling the task here
-        # ensures the zombie client cannot receive or dispatch any further events.
-        await self._cancel_bot_task()
        # Clean up all active voice connections before closing the client
        for guild_id in list(self._voice_clients.keys()):
            try:
@@ -272,9 +272,8 @@ def main():
    # (well above current catalog size) lets the full catalog land in the
    # index instead of being truncated at an arbitrary build-time limit.
    SOURCE_LIMITS = {
-        # 0 = unbounded catalog walk (max_items=0 in ClawHubSource). A positive
-        # limit bounds the walk and also enables the interactive 12s budget.
-        "clawhub": 0,
+        # ClawHub had 49,698+ skills as of May 2026; 200k leaves headroom.
+        "clawhub": 200_000,
        "lobehub": 100_000,
        "browse-sh": 5_000,
        "claude-marketplace": 5_000,
@@ -63,7 +63,6 @@ AUTHOR_MAP = {
    "thomas.paquette@gmail.com": "RyTsYdUp",
    "techxacm@gmail.com": "ProgramCaiCai",
    "266365592+bmoore210@users.noreply.github.com": "bmoore210",
-    "123150002+deaneeth@users.noreply.github.com": "deaneeth",
    "157839748+psionic73@users.noreply.github.com": "psionic73",
    "manishbyatroy@gmail.com": "manishbyatroy",
    "chilltulpa@gmail.com": "TheGardenGallery",
@@ -3,11 +3,7 @@
 import pytest
 from unittest.mock import patch, MagicMock

-from agent.context_compressor import (
-    ContextCompressor,
-    HISTORICAL_TASK_HEADING,
-    SUMMARY_PREFIX,
-)
+from agent.context_compressor import ContextCompressor, SUMMARY_PREFIX


@pytest.fixture()
@@ -161,7 +157,7 @@ class TestCompress:
            result = c.compress(msgs)

        combined = "\n".join(str(m.get("content", "")) for m in result)
-        assert HISTORICAL_TASK_HEADING in combined
+        assert "## Active Task" in combined
        assert "Please fix the compression summary failure" in combined
        assert "read_file" in combined
        assert "agent/context_compressor.py" in combined
@@ -1217,8 +1213,7 @@ class TestCompressWithClient:
        """When the summary lands as standalone role='user' (e.g. head ends
        with assistant/tool), the message body must include the explicit
        '--- END OF CONTEXT SUMMARY ---' marker. Without it, weak models
-        read the verbatim past user request quoted in the historical task
-        snapshot as
+        read the verbatim past user request quoted in '## Active Task' as
        fresh input (#11475, #14521).
        """
        mock_response = MagicMock()
@@ -15,7 +15,7 @@ from datetime import datetime, timezone
 from unittest.mock import MagicMock, patch

 import hermes_time
-from agent.context_compressor import ContextCompressor, HISTORICAL_TASK_HEADING
+from agent.context_compressor import ContextCompressor


 def _compressor() -> ContextCompressor:
@@ -98,7 +98,7 @@ def test_clock_failure_omits_rule_but_compaction_still_runs():
    prompt = mock_call.call_args.kwargs["messages"][0]["content"]
    assert "TEMPORAL ANCHORING" not in prompt
    # Structured template still intact.
-    assert HISTORICAL_TASK_HEADING in prompt
+    assert "## Active Task" in prompt


 def test_anchoring_rule_uses_date_from_hermes_time_now():
@@ -1,9 +1,9 @@
 """Regression coverage for #35344: a resumed session must not let a stale
-historical task snapshot from an inherited compaction handoff hijack the reply to a
+``## Active Task`` from an inherited compaction handoff hijack the reply to a
 new, unrelated user message.

 The failure mode (real report): a lineage was compacted, producing a handoff
-whose historical task snapshot described task A. The lineage was resumed later and
+whose ``## Active Task`` described task A. The lineage was resumed later and
 the user asked about an unrelated task B. The model answered with A because
 the handoff's resume directive outranked the fresh ask.

@@ -16,15 +16,14 @@ named reverse-signal verbs. Two invariants guard the resume path specifically:
     pre-fix stale handoff cannot keep its "resume exactly" directive forever.

  2. The current handoff prefix contains an unambiguous "latest message wins /
-     discard stale historical task" rule, so an unrelated new ask is privileged over
-     the inherited task snapshot.
+     discard stale Active Task" rule, so an unrelated new ask is privileged over
+     the inherited ``## Active Task``.

 These are content/structural assertions (no live model call) — they pin the
 mechanism that makes the stale task historical rather than active.
 """

 from agent.context_compressor import (
-    HISTORICAL_TASK_HEADING,
    SUMMARY_PREFIX,
    LEGACY_SUMMARY_PREFIX,
    ContextCompressor,
@@ -49,17 +48,13 @@ _OLD_CONFLICTING_PREFIX = (

 def test_latest_message_wins_over_inherited_active_task():
    """The handoff must explicitly privilege the latest user message over a
-    stale historical task snapshot — the core #35344 contract."""
+    stale ``## Active Task`` — the core #35344 contract."""
    lower = SUMMARY_PREFIX.lower()
    assert "latest user message" in lower
-    assert HISTORICAL_TASK_HEADING.lower() in lower
+    assert "## active task" in lower
    # Conflict-resolution must be explicit, not implied.
    assert "wins" in lower or "supersede" in lower
    assert "discard" in lower
-    # The "consistent -> use as background" carveout licensed stale-task
-    # resumption on topic overlap (#41607, #38364) — it must stay gone.
-    assert "you may use the summary as background" not in lower
-    assert "topic overlap" in lower


 def test_no_resume_exactly_directive_can_hijack():
@@ -74,7 +69,7 @@ def test_resumed_stale_handoff_gets_renormalized_to_current_prefix():
    prefix when re-normalized on re-compaction — so the "resume exactly"
    directive cannot survive into a resumed session."""
    stale_body = (
-        f"{HISTORICAL_TASK_HEADING}\n"
+        "## Active Task\n"
        "User asked: 'Migrate the billing module to Stripe'\n\n"
        "## Goal\nMigrate billing.\n"
    )
@@ -91,15 +86,13 @@ def test_resumed_stale_handoff_gets_renormalized_to_current_prefix():
    # current latest-message-wins framing.
    assert "resume exactly" not in renormalized.lower()
    assert renormalized.startswith(SUMMARY_PREFIX)
-    assert ("wins" in renormalized.lower()
-            or "priority" in renormalized.lower()
-            or "supersede" in renormalized.lower())
+    assert "wins" in renormalized.lower()


 def test_legacy_prefix_handoff_also_renormalized():
    """The same upgrade applies to the oldest ``[CONTEXT SUMMARY]:`` handoff
    format that may sit in a long-lived resumed lineage."""
-    legacy = f"{LEGACY_SUMMARY_PREFIX} {HISTORICAL_TASK_HEADING}\nUser asked: 'task A'"
+    legacy = f"{LEGACY_SUMMARY_PREFIX} ## Active Task\nUser asked: 'task A'"
    renormalized = ContextCompressor._with_summary_prefix(legacy)
    assert renormalized.startswith(SUMMARY_PREFIX)
    assert LEGACY_SUMMARY_PREFIX not in renormalized
@@ -114,7 +107,7 @@ def test_inherited_handoff_detected_in_resumed_protected_head():
    Task read as live intent)."""
    messages = [
        {"role": "system", "content": "system prompt"},
-        {"role": "user", "content": f"{SUMMARY_PREFIX}\n{HISTORICAL_TASK_HEADING}\nUser asked: 'task A'"},
+        {"role": "user", "content": f"{SUMMARY_PREFIX}\n## Active Task\nUser asked: 'task A'"},
        {"role": "assistant", "content": "ok"},
        {"role": "user", "content": "Unrelated task B: what's the capital of France?"},
    ]
@@ -136,7 +129,7 @@ def test_historical_prefixed_handoff_detected_and_stripped():
    stale 'resume exactly' text as a fresh turn."""
    messages = [
        {"role": "system", "content": "system prompt"},
-        {"role": "user", "content": f"{_OLD_CONFLICTING_PREFIX}\n{HISTORICAL_TASK_HEADING}\nUser asked: 'task A'"},
+        {"role": "user", "content": f"{_OLD_CONFLICTING_PREFIX}\n## Active Task\nUser asked: 'task A'"},
        {"role": "assistant", "content": "ok"},
        {"role": "user", "content": "Unrelated task B"},
    ]
@@ -18,13 +18,7 @@ the agent repeatedly re-surfacing already-cancelled work across turns.
 These tests pin the post-fix invariants so the conflict cannot regress.
 """

-from agent.context_compressor import (
-    HISTORICAL_IN_PROGRESS_HEADING,
-    HISTORICAL_PENDING_ASKS_HEADING,
-    HISTORICAL_REMAINING_WORK_HEADING,
-    HISTORICAL_TASK_HEADING,
-    SUMMARY_PREFIX,
-)
+from agent.context_compressor import SUMMARY_PREFIX


 def test_no_resume_exactly_directive():
@@ -36,22 +30,8 @@ def test_latest_message_wins_on_conflict():
    """The prefix must explicitly say latest user message wins on conflict."""
    lower = SUMMARY_PREFIX.lower()
    assert "latest user message" in lower
-    assert HISTORICAL_TASK_HEADING.lower() in lower
-    assert HISTORICAL_PENDING_ASKS_HEADING.lower() in lower
-    assert HISTORICAL_REMAINING_WORK_HEADING.lower() in lower
    # Must have an explicit conflict-resolution rule.
-    assert "wins" in lower or "supersede" in lower or "discard" in lower or "priority" in lower
-
-
-def test_handoff_sections_are_framed_as_historical():
-    """The summary headings referenced in the prefix must sound historical,
-    not like live instructions for the current turn."""
-    lower = SUMMARY_PREFIX.lower()
-    assert "## active task" not in lower
-    assert "## pending user asks" not in lower
-    assert "## remaining work" not in lower
-    assert HISTORICAL_TASK_HEADING.lower() in lower
-    assert HISTORICAL_IN_PROGRESS_HEADING.lower() in lower
+    assert "wins" in lower or "supersede" in lower or "discard" in lower


 def test_reverse_signals_called_out():
@@ -80,37 +60,3 @@ def test_memory_authority_preserved():
    assert "MEMORY.md" in SUMMARY_PREFIX
    assert "USER.md" in SUMMARY_PREFIX
    assert "authoritative" in SUMMARY_PREFIX
-
-
-def test_no_background_consistency_carveout():
-    """The "consistent → use as background" carveout licensed stale-task
-    resumption on topic overlap (#41607, #38364, #42812). It must stay gone,
-    and the prefix must explicitly neutralize topic overlap."""
-    lower = SUMMARY_PREFIX.lower()
-    assert "you may use the summary as background" not in lower
-    assert "topic overlap" in lower
-
-
-def test_replaced_prefixes_are_frozen_for_renormalization():
-    """Every retired SUMMARY_PREFIX must be frozen into
-    _HISTORICAL_SUMMARY_PREFIXES, otherwise summaries persisted by older
-    builds lose detection/renormalization after an upgrade. The carveout-era
-    prefix is the latest retiree."""
-    from agent.context_compressor import (
-        _HISTORICAL_SUMMARY_PREFIXES,
-        ContextCompressor,
-    )
-
-    carveout_era = [
-        p for p in _HISTORICAL_SUMMARY_PREFIXES
-        if "you may use the summary as background" in p
-    ]
-    assert carveout_era, "carveout-era prefix missing from frozen tuple"
-    # The live prefix must never be one of the frozen ones.
-    assert SUMMARY_PREFIX not in _HISTORICAL_SUMMARY_PREFIXES
-    # Detection + strip must work for every frozen prefix.
-    for old_prefix in _HISTORICAL_SUMMARY_PREFIXES:
-        content = old_prefix + "\n## Summary body"
-        assert ContextCompressor._is_context_summary_content(content)
-        stripped = ContextCompressor._strip_summary_prefix(content)
-        assert not stripped.startswith(old_prefix)
@@ -1,4 +1,4 @@
-"""Tests for Automation Blueprints — the parameterized automation blueprint system.
+"""Tests for Automation Blueprints — the parameterized automation template system.

 Covers the core catalog/slot schema/renderers/fill (cron/blueprint_catalog.py),
 the shared /blueprint command handler (hermes_cli/blueprint_cmd.py), and
@@ -266,12 +266,11 @@ async def test_connect_releases_token_lock_on_timeout(monkeypatch):
        ),
    )

-    async def fake_wait_for_ready(ready_event, bot_task, timeout):
+    async def fake_wait_for(awaitable, timeout):
+        awaitable.close()
        raise asyncio.TimeoutError()

-    monkeypatch.setattr(
-        discord_platform, "_wait_for_ready_or_bot_exit", fake_wait_for_ready
-    )
+    monkeypatch.setattr(discord_platform.asyncio, "wait_for", fake_wait_for)

    ok = await adapter.connect()

@@ -280,89 +279,6 @@ async def test_connect_releases_token_lock_on_timeout(monkeypatch):
    assert adapter._platform_lock_identity is None


-@pytest.mark.asyncio
-async def test_connect_timeout_cancels_bot_task(monkeypatch):
-    """Regression: connect() timeout must cancel _bot_task so the zombie
-    Discord client cannot fire on_message after the adapter is discarded.
-
-    Without this fix, the orphaned task eventually completes its WebSocket
-    handshake and a subsequent successful reconnect leaves two live clients
-    that each process every message, producing duplicate threads.
-    """
-    adapter = DiscordAdapter(PlatformConfig(enabled=True, token="test-token"))
-
-    monkeypatch.setattr("gateway.status.acquire_scoped_lock", lambda scope, identity, metadata=None: (True, None))
-    monkeypatch.setattr("gateway.status.release_scoped_lock", lambda scope, identity: None)
-
-    intents = SimpleNamespace(
-        message_content=False, dm_messages=False, guild_messages=False,
-        members=False, voice_states=False,
-    )
-    monkeypatch.setattr(discord_platform.Intents, "default", lambda: intents)
-
-    class NeverReadyBot(FakeBot):
-        """Bot whose start() never fires on_ready — simulates a slow gateway handshake."""
-        async def start(self, token):
-            await asyncio.Event().wait()  # hang forever
-
-    monkeypatch.setattr(
-        discord_platform.commands,
-        "Bot",
-        lambda **kwargs: NeverReadyBot(
-            intents=kwargs["intents"],
-            proxy=kwargs.get("proxy"),
-            allowed_mentions=kwargs.get("allowed_mentions"),
-        ),
-    )
-
-    async def fake_wait_for_ready(ready_event, bot_task, timeout):
-        raise asyncio.TimeoutError()
-
-    monkeypatch.setattr(
-        discord_platform, "_wait_for_ready_or_bot_exit", fake_wait_for_ready
-    )
-
-    ok = await adapter.connect()
-
-    assert ok is False
-    assert adapter._bot_task is None, (
-        "_bot_task must be cancelled and cleared on connect() timeout; "
-        "leaving it alive creates a zombie Discord client that produces duplicate threads"
-    )
-
-
-@pytest.mark.asyncio
-async def test_disconnect_cancels_running_bot_task(monkeypatch):
-    """Regression: disconnect() must cancel _bot_task even when connect() timed out.
-
-    _dispose_unused_adapter calls disconnect() on adapters whose connect() returned
-    False.  If _bot_task was still running (zombie), disconnect() must cancel it.
-    """
-    adapter = DiscordAdapter(PlatformConfig(enabled=True, token="test-token"))
-
-    monkeypatch.setattr("gateway.status.acquire_scoped_lock", lambda scope, identity, metadata=None: (True, None))
-    monkeypatch.setattr("gateway.status.release_scoped_lock", lambda scope, identity: None)
-
-    # Simulate a zombie bot_task that never finishes (as if discord.py is mid-handshake)
-    async def _forever():
-        await asyncio.Event().wait()  # hang forever
-
-    zombie_task = asyncio.create_task(_forever())
-    adapter._bot_task = zombie_task
-    adapter._client = AsyncMock()
-    adapter._post_connect_task = None
-    adapter._voice_clients = {}
-    adapter._running = True
-    adapter._ready_event = asyncio.Event()
-
-    await adapter.disconnect()
-
-    # The task must have been cancelled (done + cancelled) and cleared from the adapter.
-    assert adapter._bot_task is None, "disconnect() must clear _bot_task"
-    assert zombie_task.done(), "disconnect() must have awaited the bot task to completion"
-    assert zombie_task.cancelled(), "disconnect() must cancel the zombie bot task"
-
-
@pytest.mark.asyncio
 async def test_connect_does_not_wait_for_slash_sync(monkeypatch):
    adapter = DiscordAdapter(PlatformConfig(enabled=True, token="test-token"))
@@ -82,29 +82,6 @@ class TestUnifiedDashboardRouting:
        # Profile HERMES_HOME dropped so the child binds the machine root.
        assert "HERMES_HOME" not in env

-    def test_desktop_profile_backend_skips_machine_dashboard_reroute(self, main_mod, monkeypatch):
-        """A desktop-spawned named-profile backend (HERMES_DESKTOP=1) must NOT
-        reroute into the machine dashboard. The reroute re-execs as the default
-        profile and exits, so the desktop never sees a ready backend → boot
-        loop. The guard keeps desktop pool backends per-profile."""
-        monkeypatch.setenv("HERMES_DESKTOP", "1")
-        monkeypatch.setattr(
-            "hermes_cli.profiles.get_active_profile_name", lambda: "worker_x"
-        )
-        listening_calls = []
-        monkeypatch.setattr(
-            main_mod, "_dashboard_listening",
-            lambda host, port: listening_calls.append(1) or False,
-        )
-        execs = []
-        monkeypatch.setattr(main_mod.os, "execvpe", lambda *a, **k: execs.append(a))
-        monkeypatch.setitem(sys.modules, "fastapi", None)
-
-        with pytest.raises((SystemExit, AttributeError, ImportError, TypeError)):
-            main_mod.cmd_dashboard(_args())
-        assert listening_calls == []
-        assert execs == []
-
    def test_isolated_flag_skips_routing(self, main_mod, monkeypatch):
        monkeypatch.setattr(
            "hermes_cli.profiles.get_active_profile_name", lambda: "worker_x"
@@ -151,45 +128,3 @@ class TestUnifiedDashboardRouting:
        with pytest.raises((SystemExit, AttributeError, ImportError, TypeError)):
            main_mod.cmd_dashboard(_args(open_profile="worker_x"))
        assert execs == []
-
-    def test_dashboard_starts_mcp_discovery_for_ws_backend(self, main_mod, monkeypatch):
-        """The dashboard process serves the /api/ws gateway but never runs
-        tui_gateway/entry.py, so it must kick off MCP discovery itself or
-        desktop sessions never see a profile's MCP tools."""
-        monkeypatch.setattr(
-            "hermes_cli.profiles.get_active_profile_name", lambda: "default"
-        )
-        monkeypatch.delenv("HERMES_WEB_DIST", raising=False)
-        monkeypatch.setattr(main_mod, "_sync_bundled_skills_quietly", lambda: None)
-        monkeypatch.setattr(main_mod, "_build_web_ui", lambda *_a, **_k: True)
-        monkeypatch.setitem(sys.modules, "fastapi", types.SimpleNamespace())
-        monkeypatch.setitem(sys.modules, "uvicorn", types.SimpleNamespace())
-        monkeypatch.setitem(
-            sys.modules,
-            "hermes_logging",
-            types.SimpleNamespace(setup_logging=lambda **_k: None),
-        )
-        monkeypatch.setitem(
-            sys.modules,
-            "hermes_cli.plugins",
-            types.SimpleNamespace(discover_plugins=lambda: None),
-        )
-        calls = []
-        monkeypatch.setattr(
-            "hermes_cli.mcp_startup.start_background_mcp_discovery",
-            lambda **kwargs: calls.append(kwargs),
-        )
-        monkeypatch.setitem(
-            sys.modules,
-            "hermes_cli.web_server",
-            types.SimpleNamespace(start_server=lambda **_kwargs: None),
-        )
-
-        main_mod.cmd_dashboard(_args())
-
-        assert calls == [
-            {
-                "logger": main_mod.logger,
-                "thread_name": "dashboard-mcp-discovery",
-            }
-        ]
@@ -365,40 +365,6 @@ class TestPluginDiscovery:
        }
        assert len(non_bundled) == 1

-    def test_failed_discovery_is_not_cached(self, tmp_path, monkeypatch):
-        """A sweep that raises must not cache 'discovered' with no plugins.
-
-        Regression for the stranded-empty-registry class of failures: callers
-        (e.g. tools.web_tools._ensure_web_plugins_loaded) swallow discovery
-        exceptions as warnings, so if a failed sweep flipped ``_discovered``
-        permanently, every later call would early-return against an empty
-        registry ("No web provider configured") for the process lifetime.
-        """
-        plugins_dir = tmp_path / "hermes_test" / "plugins"
-        _make_plugin_dir(plugins_dir, "retry_plugin")
-        monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes_test"))
-
-        mgr = PluginManager()
-
-        def _boom(self_inner):
-            raise RuntimeError("sweep failed")
-
-        monkeypatch.setattr(PluginManager, "_discover_and_load_inner", _boom)
-        with pytest.raises(RuntimeError, match="sweep failed"):
-            mgr.discover_and_load()
-        assert mgr._discovered is False, "failed sweep was cached as discovered"
-
-        # A later call (with discovery healthy again) must do the real scan.
-        monkeypatch.undo()
-        monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes_test"))
-        mgr.discover_and_load()
-        assert mgr._discovered is True
-        non_bundled = {
-            n: p for n, p in mgr._plugins.items()
-            if p.manifest.source != "bundled"
-        }
-        assert len(non_bundled) == 1
-
    def test_discover_skips_dir_without_manifest(self, tmp_path, monkeypatch):
        """Directories without plugin.yaml are silently skipped."""
        plugins_dir = tmp_path / "hermes_test" / "plugins"
@@ -1,59 +0,0 @@
-import asyncio
-from unittest.mock import AsyncMock
-
-import pytest
-
-from gateway.config import PlatformConfig
-from plugins.platforms.discord.adapter import DiscordAdapter
-
-
-@pytest.mark.asyncio
-async def test_discord_bot_task_runtime_exit_notifies_gateway_for_reconnect(monkeypatch):
-    """A post-ready discord.py websocket task crash must not leave the gateway split-brained.
-
-    Regression: producers stayed systemd-active while Discord stopped responding after
-    a runtime ClientOSError/ConnectionResetError. The adapter must mark Discord as a
-    retryable fatal platform error and notify the gateway supervisor so the existing
-    reconnect watcher can replace the dead adapter.
-    """
-    adapter = DiscordAdapter(PlatformConfig(enabled=True, token="token"))
-    adapter._running = True
-    adapter._ready_event.set()
-    adapter._notify_fatal_error = AsyncMock()
-
-    async def crash():
-        raise ConnectionResetError("Cannot write to closing transport")
-
-    task = asyncio.create_task(crash())
-    await asyncio.sleep(0)
-
-    adapter._handle_bot_task_done(task)
-    await asyncio.sleep(0)
-
-    assert adapter.has_fatal_error is True
-    assert adapter.fatal_error_retryable is True
-    assert adapter.fatal_error_code == "discord_gateway_task_exited"
-    assert adapter.fatal_error_message is not None
-    assert "Cannot write to closing transport" in adapter.fatal_error_message
-    adapter._notify_fatal_error.assert_awaited_once()
-
-
-@pytest.mark.asyncio
-async def test_discord_bot_task_done_ignored_during_intentional_disconnect():
-    adapter = DiscordAdapter(PlatformConfig(enabled=True, token="token"))
-    adapter._running = True
-    adapter._ready_event.set()
-    adapter._disconnecting = True
-    adapter._notify_fatal_error = AsyncMock()
-
-    async def stop_cleanly():
-        return None
-
-    task = asyncio.create_task(stop_cleanly())
-    await asyncio.sleep(0)
-
-    adapter._handle_bot_task_done(task)
-    await asyncio.sleep(0)
-
-    assert adapter.has_fatal_error is False
-    adapter._notify_fatal_error.assert_not_awaited()
@@ -6096,24 +6096,6 @@ def test_make_agent_reads_nested_max_turns(monkeypatch):
    assert mock_agent.call_args.kwargs["max_iterations"] == 200


-def test_make_agent_waits_for_shared_mcp_discovery(monkeypatch):
-    _setup_make_agent_mocks(monkeypatch, {})
-    waited = []
-
-    from hermes_cli import mcp_startup
-
-    monkeypatch.setattr(
-        mcp_startup,
-        "wait_for_mcp_discovery",
-        lambda timeout=0.75: waited.append(timeout),
-    )
-
-    with patch("run_agent.AIAgent"):
-        server._make_agent("sid1", "key1")
-
-    assert waited == [0.75]
-
-
 def test_make_agent_nested_max_turns_takes_priority(monkeypatch):
    _setup_make_agent_mocks(
        monkeypatch, {"agent": {"max_turns": 500}, "max_turns": 100}
@@ -381,10 +381,9 @@ class TestClawHubSource(unittest.TestCase):

        mock_get.side_effect = side_effect

-        # Force the deadline to be in the past immediately. Budget only applies
-        # to bounded browse walks (max_items > 0), not the index builder path.
+        # Force the deadline to be in the past immediately.
        with patch.object(ClawHubSource, "CATALOG_WALK_BUDGET_SECONDS", -1):
-            results = self.src._load_catalog_index(max_items=10)
+            results = self.src._load_catalog_index()

        # Walk broke well before the 750-page cap.
        self.assertLess(page_calls["n"], 750)
@@ -481,23 +480,6 @@ class TestClawHubCatalogWalkBounded(unittest.TestCase):
        # Partial (bounded) walk must not be cached.
        mock_write_cache.assert_not_called()

-    @patch("tools.skills_hub._write_index_cache")
-    @patch("tools.skills_hub._read_index_cache", return_value=None)
-    @patch("tools.skills_hub.httpx.get")
-    def test_max_items_zero_ignores_wall_clock_budget(
-        self, mock_get, _mock_read_cache, _mock_write_cache
-    ):
-        """Index builder path (max_items=0) must not truncate on the browse budget."""
-        page_calls = {"n": 0}
-        mock_get.side_effect = self._infinite_pages(page_calls)
-
-        with patch.object(ClawHubSource, "CATALOG_WALK_BUDGET_SECONDS", -1):
-            results = self.src._load_catalog_index(max_items=0)
-
-        # No budget -> walks until the 750-page safety cap, not ~14 pages in 12s.
-        self.assertEqual(page_calls["n"], 750)
-        self.assertEqual(len(results), 750)
-
    @patch("tools.skills_hub._write_index_cache")
    @patch("tools.skills_hub._read_index_cache", return_value=None)
    @patch("tools.skills_hub.httpx.get")
@@ -1,100 +0,0 @@
-"""Regression: the keyless Parallel web default must survive a failed sweep.
-
-``web_search`` / ``web_extract`` are documented to work out of the box with
-zero setup via the bundled keyless Parallel free-MCP backend. That guarantee
-only holds if the bundled ``plugins/web/*`` providers are registered in
-``agent.web_search_registry``. The dispatch triggers the general plugin sweep
-(:func:`hermes_cli.plugins._ensure_plugins_discovered`) to do that — but the
-sweep can finish without registering them (its exception swallowed as a
-warning, a packaged layout where it ran before the bundled tree was
-importable, or a stale empty-discovery cache). When that happened, *both*
-tools dead-ended on "No web {search,extract} provider configured" even though
-no setup should be needed.
-
-These tests pin the invariant that :func:`tools.web_tools._ensure_web_plugins_loaded`
-guarantees the keyless default is registered regardless of the sweep's outcome,
-and that the direct-registration fallback honors an explicit ``plugins.disabled``
-entry. Real imports from the bundled plugin modules — no provider mocking.
-"""
-from __future__ import annotations
-
-import pytest
-
-import agent.web_search_registry as reg
-import hermes_cli.plugins as plugins
-from tools import web_tools
-
-
-@pytest.fixture(autouse=True)
-def _clean_registry():
-    reg._reset_for_tests()
-    yield
-    reg._reset_for_tests()
-
-
-def _boom(*_a, **_k):
-    raise RuntimeError("discovery boom")
-
-
-def test_keyless_default_registered_when_discovery_raises(monkeypatch):
-    """A swallowed discovery failure must not strand the keyless default."""
-    monkeypatch.setattr(plugins, "_ensure_plugins_discovered", _boom)
-    assert reg.get_provider("parallel") is None
-
-    web_tools._ensure_web_plugins_loaded()
-
-    parallel = reg.get_provider("parallel")
-    assert parallel is not None, "keyless Parallel default not restored"
-    # It is the universal keyless default precisely because it does both.
-    assert parallel.supports_search()
-    assert parallel.supports_extract()
-
-
-def test_fallback_registers_full_bundled_set(monkeypatch):
-    """The fix covers the whole bundled provider class, not just parallel."""
-    monkeypatch.setattr(plugins, "_ensure_plugins_discovered", _boom)
-
-    web_tools._ensure_web_plugins_loaded()
-
-    names = {p.name for p in reg.list_providers()}
-    # Every bundled backend a user might have configured should be reachable
-    # again, so an explicit ``web.extract_backend: firecrawl`` etc. resolves.
-    for expected in ("parallel", "firecrawl", "tavily", "exa"):
-        assert expected in names, f"{expected} missing after fallback"
-
-
-def test_fallback_honors_explicit_disable(monkeypatch):
-    """A backend the user turned off via plugins.disabled stays off."""
-    monkeypatch.setattr(plugins, "_get_disabled_plugins", lambda: {"web-parallel"})
-
-    web_tools._register_bundled_web_providers_directly()
-
-    names = {p.name for p in reg.list_providers()}
-    assert "parallel" not in names, "explicit disable was ignored"
-    # Other bundled backends are unaffected by the parallel disable.
-    assert "tavily" in names
-
-
-def test_fallback_is_noop_when_discovery_already_registered(monkeypatch):
-    """Healthy path: don't pay for the direct sweep when parallel is present."""
-    # Pretend the general sweep already registered the keyless default.
-    import importlib
-
-    class _Ctx:
-        def register_web_search_provider(self, provider):
-            reg.register_provider(provider)
-
-    importlib.import_module("plugins.web.parallel").register(_Ctx())
-    monkeypatch.setattr(plugins, "_ensure_plugins_discovered", lambda *a, **k: None)
-
-    calls = {"n": 0}
-    real = web_tools._register_bundled_web_providers_directly
-
-    def _spy():
-        calls["n"] += 1
-        real()
-
-    monkeypatch.setattr(web_tools, "_register_bundled_web_providers_directly", _spy)
-    web_tools._ensure_web_plugins_loaded()
-
-    assert calls["n"] == 0, "direct-registration ran on the healthy path"
@@ -2279,20 +2279,12 @@ class ClawHubSource(SkillSource):
        # terminates well before this on `nextCursor` going None — the cap is
        # a safety rail against an infinite-cursor loop.
        max_pages = 750
-        # Wall-clock budget is for interactive browse (max_items > 0) only.
-        # The offline index builder passes max_items=0 and must walk the full
-        # catalog — a 12s cap there ships ~3k skills and trips the deploy
-        # health floor (20k).
-        deadline = (
-            time.monotonic() + self.CATALOG_WALK_BUDGET_SECONDS
-            if max_items > 0
-            else None
-        )
+        deadline = time.monotonic() + self.CATALOG_WALK_BUDGET_SECONDS
        hit_deadline = False
        hit_max_items = False

        for _ in range(max_pages):
-            if deadline is not None and time.monotonic() > deadline:
+            if time.monotonic() > deadline:
                hit_deadline = True
                break
            params: Dict[str, Any] = {"limit": 200}
@@ -810,17 +810,6 @@ def _ensure_web_plugins_loaded() -> None:
    Mirrors :func:`tools.browser_tool._ensure_browser_plugins_loaded` exactly:
    the underlying discovery call is idempotent and cheap on subsequent
    invocations.
-
-    Triggering discovery is necessary but not *sufficient*: the sweep can
-    finish without registering the bundled web providers (its exception
-    swallowed below as a warning, a packaged layout where discovery ran before
-    the bundled tree was importable, or a stale empty-discovery cache). When
-    that happens the registry is empty and *both* web_search and web_extract
-    dead-end on "No web {search,extract} provider configured" — even though the
-    keyless Parallel default is supposed to work with zero setup. So after
-    discovery we verify the keyless default landed and, if not, register the
-    bundled providers directly (see
-    :func:`_register_bundled_web_providers_directly`).
    """
    try:
        from hermes_cli.plugins import _ensure_plugins_discovered
@@ -833,87 +822,6 @@ def _ensure_web_plugins_loaded() -> None:
        # clue in normal logs about the real cause.
        logger.warning("Web plugin discovery failed (non-fatal): %s", exc)

-    # Belt-and-suspenders: guarantee the keyless Parallel default (the
-    # documented zero-setup backend for both web_search and web_extract) is
-    # actually registered. The lookup is a cheap dict hit on the healthy path
-    # (discovery already registered it → no-op); only an empty registry pays
-    # for the direct-registration sweep.
-    try:
-        from agent.web_search_registry import get_provider
-
-        if get_provider("parallel") is None:
-            _register_bundled_web_providers_directly()
-    except Exception as exc:  # noqa: BLE001
-        logger.debug("Bundled web provider fallback check failed: %s", exc)
-
-
-def _register_bundled_web_providers_directly() -> None:
-    """Register the repo's bundled web providers without the plugin manager.
-
-    The normal path is the general plugin sweep
-    (:func:`hermes_cli.plugins._ensure_plugins_discovered`), which auto-loads
-    every ``plugins/web/<name>`` backend (they are ``kind: backend``). This
-    fallback exists for the runtimes where that sweep does not leave the web
-    registry populated — so the keyless Parallel default (and any bundled
-    backend the user explicitly configured) keeps working instead of
-    surfacing a misleading "No web provider configured" error.
-
-    Imports each bundled ``plugins/web/<name>`` package and calls its
-    ``register()`` directly against :mod:`agent.web_search_registry`. Idempotent
-    (re-register overwrites) and honors an explicit ``plugins.disabled`` entry
-    so a backend the user turned off stays off.
-    """
-    try:
-        from hermes_cli.plugins import (
-            _get_disabled_plugins,
-            get_bundled_plugins_dir,
-        )
-    except Exception as exc:  # noqa: BLE001
-        logger.debug("Bundled web provider fallback unavailable: %s", exc)
-        return
-
-    web_dir = get_bundled_plugins_dir() / "web"
-    if not web_dir.is_dir():
-        return
-
-    disabled = _get_disabled_plugins()
-
-    from agent.web_search_provider import WebSearchProvider
-    from agent.web_search_registry import register_provider
-
-    class _DirectRegistrationCtx:
-        """Minimal plugin ctx exposing only web-provider registration."""
-
-        def register_web_search_provider(self, provider) -> None:
-            if isinstance(provider, WebSearchProvider):
-                register_provider(provider)
-
-    ctx = _DirectRegistrationCtx()
-    import importlib
-
-    for child in sorted(web_dir.iterdir()):
-        if not child.is_dir():
-            continue
-        if not (child / "plugin.yaml").exists() and not (child / "plugin.yml").exists():
-            continue
-        # Respect an explicit disable — match discover_and_load's key/name
-        # check (key ``web/<dir>``; manifest name ``web-<dir-with-dashes>``).
-        if (
-            f"web/{child.name}" in disabled
-            or f"web-{child.name.replace('_', '-')}" in disabled
-        ):
-            continue
-        try:
-            module = importlib.import_module(f"plugins.web.{child.name}")
-            register_fn = getattr(module, "register", None)
-            if callable(register_fn):
-                register_fn(ctx)
-        except Exception as exc:  # noqa: BLE001
-            logger.debug(
-                "Direct registration of bundled web provider '%s' failed: %s",
-                child.name, exc,
-            )
-

 def web_search_tool(query: str, limit: int = 5) -> str:
    """
@@ -3072,17 +3072,11 @@ def _make_agent(
    from hermes_cli.runtime_provider import resolve_runtime_provider

    # MCP tool discovery runs in a background daemon thread at startup so a
-    # dead server can't freeze the shell.  The agent snapshots its tool list
-    # once here and never re-reads it, so briefly wait for in-flight discovery
-    # to land before building — bounded, so a slow/dead server still can't
-    # block. Dashboard /api/ws uses hermes_cli.mcp_startup; TUI stdio keeps
-    # its existing tui_gateway.entry-owned thread.
-    try:
-        from hermes_cli.mcp_startup import wait_for_mcp_discovery
-
-        wait_for_mcp_discovery()
-    except Exception:
-        pass
+    # dead server can't freeze the shell (see tui_gateway/entry.py).  The agent
+    # snapshots its tool list once here and never re-reads it, so briefly wait
+    # for in-flight discovery to land before building — bounded, so a slow/dead
+    # server still can't block.  No-op once discovery has finished (every build
+    # after the first during a slow startup).
    try:
        from tui_gateway.entry import wait_for_mcp_discovery

@@ -26,7 +26,7 @@
  },
  "devDependencies": {
    "@eslint/js": "^9",
-    "@types/node": "^24.13.2",
+    "@types/node": "^24.12.0",
    "@types/react": "^19.2.14",
    "@typescript-eslint/eslint-plugin": "^8",
    "@typescript-eslint/parser": "^8",
@@ -80,7 +80,7 @@ const asWireText = (raw: unknown): string | null => {
  }

  if (raw instanceof ArrayBuffer || ArrayBuffer.isView(raw)) {
-    return _wireDecoder.decode(raw as any as ArrayBuffer)
+    return _wireDecoder.decode(raw as ArrayBufferLike)
  }

  return null
@@ -36,7 +36,7 @@
  },
  "devDependencies": {
    "@eslint/js": "^9.39.4",
-    "@types/node": "^24.13.2",
+    "@types/node": "^24.12.0",
    "@types/qrcode": "^1.5.6",
    "@types/react": "^19.2.14",
    "@types/react-dom": "^19.2.3",
@@ -497,7 +497,7 @@ export const api = {
  deleteCronJob: (id: string, profile = "default") =>
    fetchJSON<{ ok: boolean }>(`/api/cron/jobs/${encodeURIComponent(id)}?profile=${encodeURIComponent(profile)}`, { method: "DELETE" }),

-  // Automation Blueprints — parameterized automation blueprints
+  // Automation Blueprints — parameterized automation templates
  getAutomationBlueprints: () =>
    fetchJSON<{ blueprints: AutomationBlueprint[] }>("/api/cron/blueprints"),
  instantiateAutomationBlueprint: (
@@ -1,16 +1,14 @@
 ---
 sidebar_position: 15
-title: "Automation Blueprints"
-description: "Ready-to-use automation blueprints — scheduled tasks, GitHub event triggers, API webhooks, and multi-skill workflows"
+title: "Automation Templates"
+description: "Ready-to-use automation recipes — scheduled tasks, GitHub event triggers, API webhooks, and multi-skill workflows"
 ---

-# Automation Blueprints
+# Automation Templates

-Copy-paste blueprints for common automation patterns. Each blueprint uses Hermes's built-in [cron scheduler](/user-guide/features/cron) for time-based triggers and [webhook platform](/user-guide/messaging/webhooks) for event-driven triggers.
+Copy-paste recipes for common automation patterns. Each template uses Hermes's built-in [cron scheduler](/user-guide/features/cron) for time-based triggers and [webhook platform](/user-guide/messaging/webhooks) for event-driven triggers.

-Every blueprint works with **any model** — not locked to a single provider.
-
-For parameterized blueprints with forms instead of cron syntax, see the [Automation Blueprints Catalog](/reference/automation-blueprints-catalog).
+Every template works with **any model** — not locked to a single provider.

 :::tip Three Trigger Types
 | Trigger | How | Tool |
@@ -1,14 +1,14 @@
 ---
 sidebar_position: 7
 title: "Automation Blueprints Catalog"
-description: "Ready-to-run automation blueprints — set one up from the dashboard, CLI, TUI, any messenger, or the desktop app."
+description: "Ready-to-run automation templates — set one up from the dashboard, CLI, TUI, any messenger, or the desktop app."
 ---

 import AutomationBlueprintsCatalog from '@site/src/components/AutomationBlueprintsCatalog';

 # Automation Blueprints

-Automation Blueprints are ready-to-run automations. Pick one, fill in a couple
+Automation Blueprints are ready-to-run automation templates. Pick one, fill in a couple
 of fields, and Hermes schedules it as a cron job — no cron syntax required.

 Every blueprint works from **every surface**:
@@ -1,16 +1,14 @@
 ---
 sidebar_position: 15
-title: "自动化蓝图"
-description: "开箱即用的自动化蓝图——定时任务、GitHub 事件触发、API webhook 及多技能工作流"
+title: "自动化模板"
+description: "开箱即用的自动化配方——定时任务、GitHub 事件触发、API webhook 及多技能工作流"
 ---

-# 自动化蓝图
+# 自动化模板

-常见自动化模式的复制粘贴蓝图。每个蓝图使用 Hermes 内置的 [cron 调度器](/user-guide/features/cron) 实现基于时间的触发，使用 [webhook 平台](/user-guide/messaging/webhooks) 实现事件驱动触发。
+常见自动化模式的复制粘贴配方。每个模板使用 Hermes 内置的 [cron 调度器](/user-guide/features/cron) 实现基于时间的触发，使用 [webhook 平台](/user-guide/messaging/webhooks) 实现事件驱动触发。

-所有蓝图适用于**任意模型**——不绑定单一提供商。
-
-如需带表单的参数化蓝图（无需手写 cron 语法），请参阅[自动化蓝图目录](/reference/automation-blueprints-catalog)。
+所有模板适用于**任意模型**——不绑定单一提供商。

 :::tip 三种触发类型
 | 触发方式 | 方式 | 工具 |
@@ -684,7 +684,7 @@ const sidebars: SidebarsConfig = {
        'guides/build-a-hermes-plugin',
        'guides/automate-with-cron',
        'guides/cron-script-only',
-        'guides/automation-blueprints',
+        'guides/automation-templates',
        'guides/cron-troubleshooting',
        'guides/work-with-skills',
        'guides/delegation-patterns',