@creezio/electron-shell 0.22.0 → 0.23.0

package/dist-cjs/host/hermes/launcher.js

@@ -1,981 +0,0 @@
-"use strict";
-/**
- * Sidecar Hermes Agent + WebUI — factory brand-agnostic.
- * SoT extrait de TempoFlow hermes-launcher.ts (R3.3) — chemins gold intacts.
- */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.serverWebuiPassword = serverWebuiPassword;
-exports.clearGeneratedWebuiPassword = clearGeneratedWebuiPassword;
-exports.clearTempoflowGeneratedWebuiPassword = clearTempoflowGeneratedWebuiPassword;
-exports.createHermesHost = createHermesHost;
-const node_child_process_1 = require("node:child_process");
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_http_1 = __importDefault(require("node:http"));
-const node_path_1 = __importDefault(require("node:path"));
-const platform_core_1 = require("@creezio/platform-core");
-const context_js_1 = require("../context.js");
-const embed_sandbox_js_1 = require("../sandbox/embed-sandbox.js");
-const server_env_js_1 = require("../server-env.js");
-const node_runtime_js_1 = require("../node-runtime.js");
-const runtime_bootstrap_js_1 = require("./runtime-bootstrap.js");
-/**
- * Password WebUI en mode serveur : `HERMES_WEBUI_PASSWORD` explicite, sinon
- * superadmin flotte (`CREEZIO_SUPERADMIN_PASSWORD`). null = desktop loopback
- * (auth off, contrat gold sans prompt).
- */
-function serverWebuiPassword() {
-    const explicit = (process.env.HERMES_WEBUI_PASSWORD || "").trim();
-    if (explicit)
-        return explicit;
-    const superadmin = (process.env.CREEZIO_SUPERADMIN_PASSWORD || "").trim();
-    return superadmin.length >= 12 ? superadmin : null;
-}
-/** Clear legacy generated WebUI password (gold: no login prompt on loopback). */
-function clearGeneratedWebuiPassword(home, stateDir, secretPrefix) {
-    clearGeneratedWebuiPasswordImpl(home, stateDir, secretPrefix);
-}
-/** @deprecated gold marker alias */
-function clearTempoflowGeneratedWebuiPassword(home, stateDir, secretPrefix) {
-    clearGeneratedWebuiPasswordImpl(home, stateDir, secretPrefix);
-}
-function clearGeneratedWebuiPasswordImpl(home, stateDir, secretPrefix) {
-    const files = [
-        node_path_1.default.join(home, ".tempoflow-webui-password"),
-        node_path_1.default.join(home, ".desktop-hermes-webui-password"),
-        node_path_1.default.join(home, ".certivan-webui-password"),
-        node_path_1.default.join(home, ".fidu-webui-password"),
-    ];
-    if (secretPrefix) {
-        files.push(node_path_1.default.join(home, `.${secretPrefix}-webui-password`));
-    }
-    for (const f of files) {
-        try {
-            if (node_fs_1.default.existsSync(f))
-                node_fs_1.default.unlinkSync(f);
-        }
-        catch {
-            /* ignore */
-        }
-    }
-    const envPath = node_path_1.default.join(home, ".env");
-    try {
-        if (node_fs_1.default.existsSync(envPath)) {
-            const body = node_fs_1.default.readFileSync(envPath, "utf8");
-            const next = body
-                .split(/\r?\n/)
-                .filter((line) => !/^\s*HERMES_WEBUI_PASSWORD\s*=/.test(line))
-                .join("\n");
-            if (next !== body)
-                node_fs_1.default.writeFileSync(envPath, next, { mode: 0o600 });
-        }
-    }
-    catch {
-        /* ignore */
-    }
-    const settingsPath = node_path_1.default.join(stateDir, "settings.json");
-    try {
-        if (node_fs_1.default.existsSync(settingsPath)) {
-            const raw = JSON.parse(node_fs_1.default.readFileSync(settingsPath, "utf8"));
-            if (raw && typeof raw === "object" && "password_hash" in raw) {
-                delete raw.password_hash;
-                node_fs_1.default.writeFileSync(settingsPath, JSON.stringify(raw, null, 2) + "\n", {
-                    mode: 0o600,
-                });
-            }
-        }
-    }
-    catch {
-        /* ignore */
-    }
-}
-function createHermesHost(opts) {
-    const { ctx, store } = opts;
-    const homeDir = () => node_path_1.default.join(ctx.userDataDir, "hermes-home");
-    const product = () => (0, context_js_1.hostProductName)(ctx);
-    const state = {
-        running: null,
-        starting: false,
-        lastError: null,
-        version: null,
-        logs: [],
-        binaryPath: null,
-        webuiStatus: "stopped",
-        webuiError: null,
-        installing: false,
-        lastStartPath: null,
-    };
-    /** "bootstrap" = runtime installé pendant ce boot ; "reuse" = déjà présent. */
-    function getHermesLastStartPath() {
-        return state.lastStartPath;
-    }
-    const LOG_MAX = 200;
-    let startInFlight = null;
-    function pushLog(line) {
-        const ts = new Date().toISOString().slice(11, 19);
-        state.logs.push("[" + ts + "] " + line);
-        if (state.logs.length > LOG_MAX)
-            state.logs.shift();
-        (0, context_js_1.hostLog)(ctx, "hermes", line);
-    }
-    /**
-     * Dossiers d'outils LÉGITIMES pour le PATH confiné des process Hermes :
-     * venv Hermes, Node TempoFlow, MinGit embarqué. Rien du PC hôte.
-     */
-    function hermesToolPathDirs(primaryDir) {
-        const dirs = [primaryDir];
-        try {
-            const node = (0, node_runtime_js_1.resolveDesktopNodeBinary)(ctx);
-            if (node && node_path_1.default.isAbsolute(node))
-                dirs.push(node_path_1.default.dirname(node));
-        }
-        catch {
-            /* app pas prête */
-        }
-        try {
-            const git = ctx.getGitBinary?.() || null;
-            if (git)
-                dirs.push(node_path_1.default.dirname(git));
-        }
-        catch {
-            /* absent */
-        }
-        return dirs;
-    }
-    function findHermesBinary() {
-        // Même racine que le bootstrap (space-safe si userData a des espaces).
-        const runtime = (0, runtime_bootstrap_js_1.hermesRuntimeCacheDir)(ctx);
-        const profile = node_path_1.default.join(runtime, "os-profile");
-        const localApp = node_path_1.default.join(runtime, "bin");
-        const vendorBin = node_path_1.default.join((0, runtime_bootstrap_js_1.hermesVendorDir)(ctx), "bin");
-        // Sandbox TempoFlow d’abord — pas le profil Windows Admin.
-        const sandLocalBin = node_path_1.default.join(profile, "AppData", "Local", "hermes", "bin");
-        const sandHermesBin = node_path_1.default.join(profile, ".hermes", "bin");
-        const sandAgentScripts = process.platform === "win32"
-            ? node_path_1.default.join(profile, "AppData", "Local", "hermes", "hermes-agent", "venv", "Scripts")
-            : node_path_1.default.join(profile, ".hermes", "hermes-agent", "venv", "bin");
-        // Legacy (userData à espaces) — migration / installs antérieures.
-        const legacyRuntime = node_path_1.default.join(ctx.userDataDir, "hermes-runtime");
-        const legacyProfile = node_path_1.default.join(legacyRuntime, "os-profile");
-        const resolved = (0, platform_core_1.resolveHermesBinary)({
-            platform: process.platform,
-            env: process.env,
-            searchDirs: [
-                localApp,
-                vendorBin,
-                sandLocalBin,
-                sandHermesBin,
-                sandAgentScripts,
-                node_path_1.default.join(legacyRuntime, "bin"),
-                node_path_1.default.join(legacyProfile, ".hermes", "bin"),
-                node_path_1.default.join(legacyProfile, ".hermes", "hermes-agent", "venv", "bin"),
-                // Containers root Linux : installs FHS antérieures au verrou
-                // HERMES_INSTALL_DIR (/usr/local) — jamais consulté sur desktop.
-                ...(0, runtime_bootstrap_js_1.hermesFhsFallbackDirs)(process.platform, typeof process.getuid === "function" ? process.getuid() : null),
-            ].filter(Boolean),
-            // OS TempoFlow : jamais de `which`/`where` — sandbox uniquement.
-            // Overrides env autorisés seulement hors build packagé (dev/tests).
-            allowEnvOverride: !ctx.isPackaged,
-            envPrefix: ctx.manifest.envPrefix,
-            existsSync: (p) => {
-                try {
-                    return node_fs_1.default.existsSync(p);
-                }
-                catch {
-                    return false;
-                }
-            },
-        });
-        state.binaryPath = resolved;
-        return resolved;
-    }
-    function ensureApiKey(home) {
-        node_fs_1.default.mkdirSync(home, { recursive: true });
-        const prefix = ctx.secretFilePrefix || ctx.manifest.brandId || "desktop";
-        /** Canon marque : `.certivan-api-server-key` / `.tempoflow-api-server-key`. */
-        const keyFile = node_path_1.default.join(home, `.${prefix}-api-server-key`);
-        const desktop = node_path_1.default.join(home, ".desktop-hermes-api-key");
-        const tempoflow = node_path_1.default.join(home, ".tempoflow-api-server-key");
-        for (const f of [keyFile, desktop, tempoflow]) {
-            try {
-                const existing = node_fs_1.default.readFileSync(f, "utf8").trim();
-                if (existing.length >= 16) {
-                    if (f !== keyFile)
-                        node_fs_1.default.writeFileSync(keyFile, existing, { mode: 0o600 });
-                    return existing;
-                }
-            }
-            catch {
-                /* */
-            }
-        }
-        const key = node_crypto_1.default.randomBytes(24).toString("base64url");
-        node_fs_1.default.writeFileSync(keyFile, key, { mode: 0o600 });
-        return key;
-    }
-    async function writeHermesHome(opts) {
-        const paths = (0, embed_sandbox_js_1.hermesSandboxPaths)(opts.home);
-        node_fs_1.default.mkdirSync(paths.home, { recursive: true });
-        node_fs_1.default.mkdirSync(paths.profileHome, { recursive: true });
-        node_fs_1.default.mkdirSync(paths.workspace, { recursive: true });
-        // README pour l’utilisateur / support — le workspace OS est ICI, pas ~/workspace.
-        const readme = node_path_1.default.join(paths.workspace, "README-WORKSPACE.txt");
-        if (!node_fs_1.default.existsSync(readme)) {
-            node_fs_1.default.writeFileSync(readme, [
-                product() + " — workspace Hermes",
-                "",
-                "Workspace pour le Work général (brouillons, scripts, analyses).",
-                "Il vit dans le profil desktop (userData), pas dans C:\\Users\\…\\workspace.",
-                "",
-                "Plugins : NE PAS installer ici.",
-                "Utiliser PLUGINS_API_URL (control plane) → userData/plugins/.",
-                "",
-            ].join("\n"), "utf8");
-        }
-        const llm = store.getLlmKeys();
-        const bridgeEnv = ctx.getHermesBridgeEnv?.(opts.crmPort != null ? { crmPort: opts.crmPort } : undefined) || {};
-        const envBody = (0, platform_core_1.buildHermesHomeEnvFile)({
-            apiKey: opts.apiKey,
-            apiPort: opts.apiPort,
-            openaiKey: llm.openai,
-            anthropicKey: llm.anthropic,
-            userEnv: store.getEmbedUserEnv("hermes"),
-            bridgeEnv,
-            // Pas de password WebUI : loopback + auth optionnelle (voir PLAN-HERMES).
-        });
-        node_fs_1.default.writeFileSync(node_path_1.default.join(opts.home, ".env"), envBody, { mode: 0o600 });
-        if (ctx.seedHermesSkills) {
-            try {
-                await Promise.resolve(ctx.seedHermesSkills(opts.home));
-            }
-            catch (e) {
-                pushLog("skills seed: " + (e instanceof Error ? e.message : e));
-            }
-        }
-        const cfgPath = node_path_1.default.join(opts.home, "config.yaml");
-        let existing = "";
-        try {
-            existing = node_fs_1.default.readFileSync(cfgPath, "utf8");
-        }
-        catch {
-            existing = "";
-        }
-        // H1 — bloc mcp_servers (façade MCP CRM, Bearer clé Hermes) upserté après
-        // le bloc sandbox, idempotent, sans toucher la config utilisateur.
-        const mcpConfig = ctx.getHermesMcpServerConfig?.(opts.crmPort != null ? { crmPort: opts.crmPort } : undefined) || null;
-        node_fs_1.default.writeFileSync(cfgPath, (0, embed_sandbox_js_1.upsertHermesMcpConfig)((0, embed_sandbox_js_1.upsertHermesSandboxConfig)(existing, paths.workspace), mcpConfig), "utf8");
-        if (mcpConfig) {
-            pushLog(`config: mcp_servers.${mcpConfig.serverName} → ${mcpConfig.url}`);
-        }
-        return { profileHome: paths.profileHome, workspace: paths.workspace };
-    }
-    function waitForHttpOk(url, opts = {}) {
-        const deadline = Date.now() + (opts.timeoutMs ?? 90000);
-        return new Promise((resolve) => {
-            const tryOnce = () => {
-                const req = node_http_1.default.get(url, { timeout: 2000, headers: opts.headers || {} }, (res) => {
-                    const chunks = [];
-                    res.on("data", (c) => chunks.push(c));
-                    res.on("end", () => {
-                        const body = Buffer.concat(chunks).toString("utf8");
-                        if (res.statusCode && res.statusCode >= 200 && res.statusCode < 500) {
-                            resolve({ ok: res.statusCode < 400, body, status: res.statusCode });
-                            return;
-                        }
-                        next();
-                    });
-                });
-                req.on("error", () => next());
-                req.on("timeout", () => {
-                    req.destroy();
-                    next();
-                });
-            };
-            const next = () => {
-                if (Date.now() > deadline) {
-                    resolve({ ok: false, body: "", status: null });
-                }
-                else {
-                    setTimeout(tryOnce, 500);
-                }
-            };
-            tryOnce();
-        });
-    }
-    function waitForHermesHealth(apiUrl, apiKey, timeoutMs = 90000) {
-        return waitForHttpOk(`${apiUrl}/health`, {
-            timeoutMs,
-            headers: { Authorization: `Bearer ${apiKey}` },
-        }).then((r) => {
-            if (!r.ok)
-                return { ok: false, version: null, detail: "health timeout" };
-            let version = null;
-            try {
-                const j = JSON.parse(r.body);
-                version = j.version || null;
-            }
-            catch {
-                /* ignore */
-            }
-            return { ok: true, version, detail: "ok" };
-        });
-    }
-    async function spawnWebui(opts) {
-        const agentDir = (0, runtime_bootstrap_js_1.resolveHermesAgentDir)(ctx);
-        const python = (0, runtime_bootstrap_js_1.resolveHermesPython)(agentDir);
-        const webuiDir = (0, runtime_bootstrap_js_1.hermesWebuiInstallDir)(ctx);
-        const serverPy = node_path_1.default.join(webuiDir, "server.py");
-        if (!python || !node_fs_1.default.existsSync(serverPy)) {
-            state.webuiStatus = "missing";
-            state.webuiError = "WebUI ou Python Hermes absent";
-            opts.log(state.webuiError);
-            return null;
-        }
-        const webuiPort = await (0, server_env_js_1.findFreePort)(platform_core_1.HERMES_DESKTOP_WEBUI_PORT);
-        const webuiUrl = `http://127.0.0.1:${webuiPort}`;
-        const stateDir = node_path_1.default.join(ctx.userDataDir, "hermes-webui-state");
-        node_fs_1.default.mkdirSync(stateDir, { recursive: true });
-        // Mode serveur/flotte : le WebUI est exposé publiquement via le tunnel
-        // (hermes.{slug}.{domaine}) → protection par le mécanisme natif Hermes
-        // (HERMES_WEBUI_PASSWORD = superadmin flotte). Desktop loopback : auth off
-        // (gold — pas de prompt).
-        const webuiPassword = serverWebuiPassword();
-        if (!webuiPassword) {
-            clearGeneratedWebuiPassword(opts.home, stateDir, ctx.secretFilePrefix || ctx.manifest.brandId); // clearTempoflowGeneratedWebuiPassword gold
-        }
-        opts.log(`spawn WebUI ${serverPy} → ${webuiUrl} (${webuiPassword ? "auth superadmin flotte ACTIVE" : "auth loopback désactivée"})`);
-        const sand = (0, embed_sandbox_js_1.hermesSandboxPaths)(opts.home);
-        // Chat WebUI = runtime in-process (pas la gateway) → BYOK obligatoire ici aussi.
-        const llm = store.getLlmKeys();
-        const childEnv = (0, embed_sandbox_js_1.applyOsSandboxEnv)({
-            env: {
-                ...process.env,
-                HERMES_HOME: opts.home,
-                HERMES_WEBUI_HOST: "127.0.0.1",
-                HERMES_WEBUI_PORT: String(webuiPort),
-                HERMES_WEBUI_GATEWAY_BASE_URL: opts.apiUrl,
-                HERMES_WEBUI_GATEWAY_API_KEY: opts.apiKey,
-                HERMES_WEBUI_STATE_DIR: stateDir,
-                HERMES_WEBUI_AGENT_DIR: agentDir || "",
-                HERMES_WEBUI_DISABLE_SELF_UPDATE: "1",
-                PYTHONUNBUFFERED: "1",
-                TERMINAL_CWD: sand.workspace,
-            },
-            profileHome: sand.profileHome,
-            userData: ctx.userDataDir,
-            // PATH confiné : venv Python Hermes + System32 — pas le PATH utilisateur.
-            toolDirs: hermesToolPathDirs(node_path_1.default.dirname(python)),
-        });
-        // Ne jamais propager un password hérité du process parent / anciens builds —
-        // sauf protection serveur explicite (superadmin flotte).
-        delete childEnv.HERMES_WEBUI_PASSWORD;
-        if (webuiPassword)
-            childEnv.HERMES_WEBUI_PASSWORD = webuiPassword;
-        delete childEnv.OPENAI_API_KEY;
-        delete childEnv.ANTHROPIC_API_KEY;
-        if (llm.openai)
-            childEnv.OPENAI_API_KEY = llm.openai;
-        if (llm.anthropic)
-            childEnv.ANTHROPIC_API_KEY = llm.anthropic;
-        const child = (0, node_child_process_1.spawn)(python, [serverPy], {
-            cwd: webuiDir,
-            env: childEnv,
-            stdio: ["ignore", "pipe", "pipe"],
-            windowsHide: true,
-        });
-        child.stdout?.on("data", (d) => d
-            .toString()
-            .split("\n")
-            .filter(Boolean)
-            .forEach((l) => opts.log(`webui: ${l}`)));
-        child.stderr?.on("data", (d) => d
-            .toString()
-            .split("\n")
-            .filter(Boolean)
-            .forEach((l) => opts.log(`webui stderr: ${l}`)));
-        child.on("exit", (code, signal) => {
-            opts.log(`webui exit code=${code} signal=${signal}`);
-            if (state.running?.webuiChild === child) {
-                state.running.webuiChild = null;
-                state.running.webuiUrl = null;
-                state.webuiStatus = "stopped";
-            }
-        });
-        // Login endpoint répond 401/400 sans cookie — prouve que le serveur écoute.
-        const probe = await waitForHttpOk(`${webuiUrl}/api/auth/login`, {
-            timeoutMs: 60000,
-        });
-        // POST would be needed for real login; GET often 405 — any TCP response = up
-        const up = await waitForHttpOk(`${webuiUrl}/`, { timeoutMs: 30000 });
-        if (!up.ok && !probe.status) {
-            try {
-                child.kill();
-            }
-            catch {
-                /* ignore */
-            }
-            state.webuiStatus = "error";
-            state.webuiError = "WebUI health timeout";
-            opts.log(state.webuiError);
-            return null;
-        }
-        state.webuiStatus = "running";
-        state.webuiError = null;
-        opts.log(`WebUI ready ${webuiUrl}`);
-        return { child, webuiUrl };
-    }
-    /**
-     * Démarre Hermes si applicable. Retourne null sans throw si skip / missing / erreur.
-     */
-    async function startHermesImpl(opts) {
-        const hermesConfig = (0, platform_core_1.sanitizeHermesEmbedConfig)(opts.hermesConfig ?? store.getHermesEmbedConfig());
-        if (!(0, platform_core_1.shouldSpawnEmbeddedHermes)({
-            connectionMode: opts.connectionMode,
-            hermes: hermesConfig,
-        })) {
-            pushLog(opts.connectionMode === "remote"
-                ? "skip spawn (client distant)"
-                : `skip spawn (mode=${hermesConfig.mode})`);
-            state.webuiStatus = "skipped";
-            return null;
-        }
-        if (hermesConfig.mode === "remote") {
-            pushLog(`mode remote → ${hermesConfig.remoteApiUrl || "(url manquante)"}`);
-            state.webuiStatus = "skipped";
-            return null;
-        }
-        const log = (line) => {
-            pushLog(line);
-            opts.onLog?.(line);
-        };
-        let bin = findHermesBinary();
-        // Honnêteté splash + télémétrie : distinguer installation réelle vs runtime
-        // déjà présent réutilisé (ex. userData non purgé par une désinstallation).
-        state.lastStartPath = bin ? "reuse" : "bootstrap";
-        if (!bin && opts.autoBootstrap !== false) {
-            state.installing = true;
-            log("runtime manquant — bootstrap automatique…");
-            try {
-                const boot = await (0, runtime_bootstrap_js_1.ensureHermesRuntime)(ctx, { onLog: log });
-                log(boot.detail);
-                bin = boot.binary || findHermesBinary();
-                if (!boot.ok && !bin) {
-                    state.lastError = boot.detail;
-                    state.installing = false;
-                    return null;
-                }
-            }
-            finally {
-                state.installing = false;
-            }
-        }
-        else if (bin && opts.autoBootstrap !== false) {
-            // CLI déjà là : assurer quand même WebUI (léger si pin présent)
-            const agentDir = (0, runtime_bootstrap_js_1.resolveHermesAgentDir)(ctx);
-            const python = (0, runtime_bootstrap_js_1.resolveHermesPython)(agentDir);
-            if (python) {
-                state.installing = true;
-                try {
-                    const w = await (0, runtime_bootstrap_js_1.ensureHermesWebuiTree)(ctx, { onLog: log });
-                    if (!w.ok)
-                        log(`WebUI bootstrap: ${w.detail}`);
-                }
-                finally {
-                    state.installing = false;
-                }
-            }
-        }
-        if (!bin) {
-            state.lastError = "CLI Hermes introuvable (sandbox userData / bootstrap)";
-            log(state.lastError);
-            state.webuiStatus = "missing";
-            return null;
-        }
-        try {
-            const home = homeDir();
-            const apiPort = await (0, server_env_js_1.findFreePort)(platform_core_1.HERMES_DESKTOP_API_PORT);
-            // Clé API gateway générée/silencieuse (Bearer Work) — jamais de prompt UI.
-            const apiKey = ensureApiKey(home);
-            clearGeneratedWebuiPassword(home, node_path_1.default.join(ctx.userDataDir, "hermes-webui-state"), ctx.secretFilePrefix || ctx.manifest.brandId);
-            const sand = await writeHermesHome({
-                home,
-                apiKey,
-                apiPort,
-                crmPort: opts.crmPort,
-            });
-            const apiUrl = `http://127.0.0.1:${apiPort}`;
-            log(`spawn ${bin} gateway run (home=${home}, workspace=${sand.workspace}, api=${apiUrl})`);
-            const bridgeEnv = (ctx.getHermesBridgeEnv?.(opts.crmPort != null ? { crmPort: opts.crmPort } : undefined) || {});
-            // BYOK TempoFlow → process Hermes (en plus du .env écrit par writeHermesHome).
-            const llm = store.getLlmKeys();
-            const productEnv = {
-                HERMES_HOME: home,
-                API_SERVER_ENABLED: "true",
-                API_SERVER_KEY: apiKey,
-                API_SERVER_PORT: String(apiPort),
-                API_SERVER_HOST: "127.0.0.1",
-                TERMINAL_CWD: sand.workspace,
-                PYTHONUNBUFFERED: "1",
-                ...bridgeEnv,
-            };
-            if (llm.openai)
-                productEnv.OPENAI_API_KEY = llm.openai;
-            if (llm.anthropic)
-                productEnv.ANTHROPIC_API_KEY = llm.anthropic;
-            const mergedUser = (0, platform_core_1.mergeEmbedUserEnv)({
-                service: "hermes",
-                systemEnv: productEnv,
-                userOverlay: store.getEmbedUserEnv("hermes"),
-            });
-            const gatewayEnv = (0, embed_sandbox_js_1.applyOsSandboxEnv)({
-                env: {
-                    ...process.env,
-                    ...mergedUser,
-                    ...productEnv,
-                },
-                profileHome: sand.profileHome,
-                userData: ctx.userDataDir,
-                // PATH confiné : CLI Hermes (venv) + Node/git TempoFlow + System32.
-                // Le terminal de l'agent ne résout AUCUN outil du PC hôte.
-                toolDirs: hermesToolPathDirs(node_path_1.default.dirname(bin)),
-            });
-            delete gatewayEnv.HERMES_WEBUI_PASSWORD;
-            // Ne jamais laisser une clé vide / héritée écraser le BYOK TempoFlow.
-            delete gatewayEnv.OPENAI_API_KEY;
-            delete gatewayEnv.ANTHROPIC_API_KEY;
-            if (llm.openai)
-                gatewayEnv.OPENAI_API_KEY = llm.openai;
-            if (llm.anthropic)
-                gatewayEnv.ANTHROPIC_API_KEY = llm.anthropic;
-            const child = (0, node_child_process_1.spawn)(bin, ["gateway", "run", "--accept-hooks"], {
-                cwd: sand.workspace,
-                env: gatewayEnv,
-                stdio: ["ignore", "pipe", "pipe"],
-                windowsHide: true,
-            });
-            const errTail = [];
-            child.stdout?.on("data", (d) => d
-                .toString()
-                .split("\n")
-                .filter(Boolean)
-                .forEach((l) => log(l)));
-            child.stderr?.on("data", (d) => d
-                .toString()
-                .split("\n")
-                .filter(Boolean)
-                .forEach((l) => {
-                errTail.push(l);
-                if (errTail.length > 30)
-                    errTail.shift();
-                log(`stderr: ${l}`);
-            }));
-            const spawnErr = { current: null };
-            child.on("error", (e) => {
-                spawnErr.current = e;
-                log(`spawn error: ${e.message}`);
-            });
-            child.on("exit", (code, signal) => {
-                log(`exit code=${code} signal=${signal}`);
-                if (state.running?.child === child) {
-                    state.running = null;
-                }
-            });
-            const health = await waitForHermesHealth(apiUrl, apiKey);
-            if (!health.ok) {
-                try {
-                    child.kill();
-                }
-                catch {
-                    /* ignore */
-                }
-                state.lastError =
-                    spawnErr.current?.message ||
-                        health.detail ||
-                        (errTail.length ? errTail.slice(-5).join(" | ") : "démarrage Hermes échoué");
-                log(`échec health: ${state.lastError}`);
-                return null;
-            }
-            let webuiChild = null;
-            let webuiUrl = hermesConfig.remoteWebuiUrl || null;
-            const webui = await spawnWebui({
-                apiUrl,
-                apiKey,
-                home,
-                log,
-            });
-            if (webui) {
-                webuiChild = webui.child;
-                webuiUrl = webui.webuiUrl;
-            }
-            state.version = health.version;
-            state.lastError = null;
-            const running = {
-                apiUrl,
-                apiKey,
-                webuiUrl,
-                // Embedded loopback : pas de password WebUI (auth off) — évite le prompt.
-                webuiPassword: null,
-                homeDir: home,
-                child,
-                webuiChild,
-                stop: () => {
-                    if (webuiChild) {
-                        try {
-                            webuiChild.kill();
-                        }
-                        catch {
-                            /* already dead */
-                        }
-                    }
-                    try {
-                        child.kill();
-                    }
-                    catch {
-                        /* already dead */
-                    }
-                },
-            };
-            state.running = running;
-            log(`ready v${health.version || "?"} ${apiUrl}${webuiUrl ? ` webui=${webuiUrl}` : ""}`);
-            return running;
-        }
-        catch (e) {
-            state.lastError = e instanceof Error ? e.message : String(e);
-            log(`exception: ${state.lastError}`);
-            return null;
-        }
-    }
-    /**
-     * Démarrage sérialisé : un clic UI ou une propagation de configuration ne
-     * peuvent plus lancer deux gateways/WebUI en parallèle.
-     */
-    function startHermes(opts) {
-        if (state.running)
-            return Promise.resolve(state.running);
-        if (startInFlight)
-            return startInFlight;
-        state.starting = true;
-        state.lastError = null;
-        state.webuiError = null;
-        const pending = startHermesImpl(opts).finally(() => {
-            state.starting = false;
-            if (startInFlight === pending)
-                startInFlight = null;
-        });
-        startInFlight = pending;
-        return pending;
-    }
-    function stopHermes() {
-        if (state.running) {
-            pushLog("stop");
-            state.running.stop();
-            state.running = null;
-        }
-        state.webuiStatus = state.webuiStatus === "skipped" ? "skipped" : "stopped";
-    }
-    function waitForChildExit(child, timeoutMs) {
-        if (child.exitCode !== null || child.signalCode !== null)
-            return Promise.resolve();
-        return new Promise((resolve) => {
-            let settled = false;
-            const done = () => {
-                if (settled)
-                    return;
-                settled = true;
-                clearTimeout(timer);
-                child.removeListener("exit", done);
-                child.removeListener("close", done);
-                resolve();
-            };
-            const timer = setTimeout(done, timeoutMs);
-            child.once("exit", done);
-            child.once("close", done);
-        });
-    }
-    /**
-     * Arrêt utilisé avant un respawn. Attendre la libération des ports évite que
-     * le second boot choisisse un autre port pendant que l'ancien process sort.
-     */
-    async function stopHermesAndWait(timeoutMs = 5000) {
-        const running = state.running;
-        if (!running)
-            return;
-        const children = [running.webuiChild, running.child].filter((child) => Boolean(child));
-        stopHermes();
-        await Promise.all(children.map((child) => waitForChildExit(child, timeoutMs)));
-    }
-    /**
-     * Propage les clés BYOK TempoFlow → Hermes (.env + process).
-     * Appelé après Configuration → Clés IA (sinon seul Next redémarrait).
-     */
-    async function reapplyHermesLlmKeys(opts) {
-        const log = (line) => {
-            pushLog(line);
-            opts.onLog?.(line);
-        };
-        if (opts.connectionMode !== "local") {
-            return { restarted: false, detail: "client distant — pas de Hermes local" };
-        }
-        if (!state.running) {
-            return {
-                restarted: false,
-                detail: "Hermes non démarré — clés prises au prochain boot",
-            };
-        }
-        const llm = store.getLlmKeys();
-        log(`BYOK → redémarrage Hermes (openai=${llm.openai ? "oui" : "non"}, anthropic=${llm.anthropic ? "oui" : "non"})`);
-        await stopHermesAndWait();
-        const started = await startHermes({
-            connectionMode: opts.connectionMode,
-            autoBootstrap: false,
-            crmPort: opts.crmPort,
-            onLog: opts.onLog,
-        });
-        return {
-            restarted: Boolean(started),
-            detail: started
-                ? "Hermes redémarré avec clés BYOK TempoFlow"
-                : "échec restart Hermes après BYOK",
-        };
-    }
-    /**
-     * Réinjecte bridge n8n (+ CRM si crmPort) dans Hermes si manquant dans .env.
-     * Warm boot / déjà injecté → no-op.
-     */
-    async function reapplyHermesBridge(opts) {
-        const log = (line) => {
-            pushLog(line);
-            opts.onLog?.(line);
-        };
-        const bridge = (ctx.getHermesBridgeEnv?.(opts.crmPort != null ? { crmPort: opts.crmPort } : undefined) || {});
-        if (!state.running) {
-            return { restarted: false, detail: "Hermes non démarré" };
-        }
-        const envPath = node_path_1.default.join(homeDir(), ".env");
-        let envBody = "";
-        try {
-            envBody = node_fs_1.default.readFileSync(envPath, "utf8");
-        }
-        catch {
-            envBody = "";
-        }
-        const missing = [];
-        if (bridge.N8N_API_KEY && !envBody.includes(`N8N_API_KEY=${bridge.N8N_API_KEY}`)) {
-            missing.push("N8N_API_KEY");
-        }
-        if (bridge.TEMPOFLOW_API_KEY &&
-            !envBody.includes(`TEMPOFLOW_API_KEY=${bridge.TEMPOFLOW_API_KEY}`)) {
-            missing.push("TEMPOFLOW_API_KEY");
-        }
-        if (bridge.TEMPOFLOW_API_URL &&
-            !envBody.includes(`TEMPOFLOW_API_URL=${bridge.TEMPOFLOW_API_URL}`)) {
-            missing.push("TEMPOFLOW_API_URL");
-        }
-        if (bridge.PLUGINS_API_URL &&
-            !envBody.includes(`PLUGINS_API_URL=${bridge.PLUGINS_API_URL}`)) {
-            missing.push("PLUGINS_API_URL");
-        }
-        if (bridge.TEMPOFLOW_PLUGINS_API_TOKEN &&
-            !envBody.includes(`TEMPOFLOW_PLUGINS_API_TOKEN=${bridge.TEMPOFLOW_PLUGINS_API_TOKEN}`)) {
-            missing.push("TEMPOFLOW_PLUGINS_API_TOKEN");
-        }
-        if (bridge.TEMPOFLOW_PLUGINS_DIR &&
-            !envBody.includes(`TEMPOFLOW_PLUGINS_DIR=${bridge.TEMPOFLOW_PLUGINS_DIR}`)) {
-            missing.push("TEMPOFLOW_PLUGINS_DIR");
-        }
-        // H1 — bloc mcp_servers attendu dans config.yaml (façade MCP CRM) : s'il
-        // manque ou pointe ailleurs, un restart réécrit le home (writeHermesHome).
-        const mcpCfg = ctx.getHermesMcpServerConfig?.(opts.crmPort != null ? { crmPort: opts.crmPort } : undefined) || null;
-        if (mcpCfg) {
-            let cfgBody = "";
-            try {
-                cfgBody = node_fs_1.default.readFileSync(node_path_1.default.join(homeDir(), "config.yaml"), "utf8");
-            }
-            catch {
-                cfgBody = "";
-            }
-            if (!cfgBody.includes("mcp_servers") ||
-                !cfgBody.includes(mcpCfg.url) ||
-                !cfgBody.includes(mcpCfg.bearerToken)) {
-                missing.push("MCP_SERVERS");
-            }
-        }
-        if (!missing.length && !opts.forceRestart) {
-            return { restarted: false, detail: "bridge déjà injecté" };
-        }
-        const why = opts.forceRestart
-            ? opts.forceReason || "force"
-            : missing.join(", ");
-        log(`bridge → redémarrage Hermes (${why})`);
-        await stopHermesAndWait();
-        const started = await startHermes({
-            connectionMode: opts.connectionMode,
-            autoBootstrap: false,
-            crmPort: opts.crmPort,
-            onLog: opts.onLog,
-        });
-        return {
-            restarted: Boolean(started),
-            detail: started
-                ? `Hermes redémarré (${why})`
-                : "échec restart Hermes après bridge",
-        };
-    }
-    function getRunningHermes() {
-        return state.running;
-    }
-    /**
-     * Env à fusionner dans startNextServer / restart.
-     * Couvre embedded running + mode remote avancé (URL stockée).
-     */
-    function getHermesNextEnv(connectionMode) {
-        if (connectionMode !== "local")
-            return {};
-        const config = (0, platform_core_1.sanitizeHermesEmbedConfig)(store.getHermesEmbedConfig());
-        const running = state.running;
-        if (running) {
-            return (0, platform_core_1.buildNextHermesEnv)({
-                apiUrl: running.apiUrl,
-                apiKey: running.apiKey,
-                webuiUrl: running.webuiUrl,
-                webuiPassword: running.webuiPassword,
-            });
-        }
-        if (config.mode === "remote" && config.remoteApiUrl) {
-            const key = (process.env.HERMES_API_SERVER_KEY ||
-                process.env.TF2_HERMES_REMOTE_KEY ||
-                "").trim();
-            if (!key)
-                return {};
-            return (0, platform_core_1.buildNextHermesEnv)({
-                apiUrl: config.remoteApiUrl,
-                apiKey: key,
-                webuiUrl: config.remoteWebuiUrl,
-                webuiPassword: (process.env.HERMES_WEBUI_PASSWORD || "").trim() || null,
-            });
-        }
-        return {
-            HERMES_API_URL: `http://127.0.0.1:${platform_core_1.HERMES_DESKTOP_API_PORT}`,
-            HERMES_GATEWAY_URL: `http://127.0.0.1:${platform_core_1.HERMES_DESKTOP_API_PORT}`,
-            HERMES_WEBUI_URL: `http://127.0.0.1:${platform_core_1.HERMES_DESKTOP_WEBUI_PORT}`,
-            HERMES_KANBAN_URL: `http://127.0.0.1:${platform_core_1.HERMES_DESKTOP_WEBUI_PORT}`,
-        };
-    }
-    function getHermesStatusPayload(connectionMode, opts) {
-        const config = (0, platform_core_1.sanitizeHermesEmbedConfig)(store.getHermesEmbedConfig());
-        const binary = state.binaryPath || findHermesBinary();
-        let pub = (0, platform_core_1.hermesPublicStatus)({
-            connectionMode,
-            config,
-            binaryFound: Boolean(binary),
-            running: Boolean(state.running),
-            apiUrl: state.running?.apiUrl || config.remoteApiUrl || null,
-            lastError: state.lastError,
-            version: state.version,
-            remoteCrmOrigin: opts?.remoteCrmOrigin,
-            tunnelRootDomain: ctx.manifest.tunnelRootDomain,
-            tunnelHostMode: (() => {
-                const env = String(process.env.CREEZIO_TUNNEL_FLAT_HOSTS || "").trim();
-                if (env === "1" || /^true$/i.test(env))
-                    return "flat";
-                if (env === "0" || /^false$/i.test(env))
-                    return "nested";
-                return ctx.manifest.tunnelHostMode;
-            })(),
-            productName: product(),
-        });
-        if (state.installing && pub.status === "missing") {
-            pub = {
-                ...pub,
-                status: "installing",
-                detail: `Installation runtime en cours (${(0, runtime_bootstrap_js_1.getBootstrapPhase)()})…`,
-            };
-        }
-        if (state.starting && pub.status !== "running") {
-            pub = {
-                ...pub,
-                status: "starting",
-                detail: "Démarrage du gateway et de la WebUI Hermes…",
-            };
-        }
-        const webuiUrl = connectionMode === "remote"
-            ? pub.webuiUrl
-            : state.running?.webuiUrl || config.remoteWebuiUrl || null;
-        return {
-            ...pub,
-            webuiUrl,
-            webuiStatus: connectionMode === "remote"
-                ? webuiUrl
-                    ? "running"
-                    : "skipped"
-                : config.mode === "remote" || config.mode === "off"
-                    ? "skipped"
-                    : state.webuiStatus,
-            binaryPath: binary,
-            homeDir: state.running?.homeDir || null,
-            bootstrapPhase: (0, runtime_bootstrap_js_1.getBootstrapPhase)(),
-            bootstrapError: (0, runtime_bootstrap_js_1.getBootstrapError)() || state.webuiError,
-            installing: state.installing,
-            logs: state.logs.slice(-80),
-        };
-    }
-    function getHermesLogs() {
-        return state.logs.slice(-80);
-    }
-    /** Déclenché depuis l’UI Configuration (hôte local uniquement). */
-    async function ensureHermesRuntimeFromUi(opts) {
-        state.installing = true;
-        const log = (line) => {
-            pushLog(line);
-            opts?.onLog?.(line);
-        };
-        try {
-            const r = await (0, runtime_bootstrap_js_1.ensureHermesRuntime)(ctx, { onLog: log });
-            return {
-                ok: r.ok,
-                detail: r.detail,
-                binaryPath: r.binary,
-                webuiDir: r.webuiDir,
-            };
-        }
-        finally {
-            state.installing = false;
-        }
-    }
-    /** Exposé pour tests. */
-    function __resetHermesStateForTests() {
-        state.running = null;
-        state.starting = false;
-        state.lastError = null;
-        state.version = null;
-        state.logs = [];
-        state.binaryPath = null;
-        state.webuiStatus = "stopped";
-        state.webuiError = null;
-        state.installing = false;
-        startInFlight = null;
-    }
-    // --- end inlined ---
-    return {
-        startHermes,
-        stopHermes,
-        stopHermesAndWait,
-        getRunningHermes,
-        getHermesStatusPayload,
-        getHermesNextEnv,
-        getHermesLogs,
-        ensureHermesRuntimeFromUi: async (uiOpts) => {
-            const r = await ensureHermesRuntimeFromUi(uiOpts);
-            return { ...r, phase: (0, runtime_bootstrap_js_1.getBootstrapPhase)() };
-        },
-        findHermesBinary,
-        getHermesLastStartPath,
-        reapplyHermesLlmKeys,
-        reapplyHermesBridge,
-        __resetForTests: __resetHermesStateForTests,
-    };
-}
-//# sourceMappingURL=launcher.js.map