@gmickel/gno 1.11.0 → 1.12.1

package/assets/skill/cli-reference.md

@@ -739,11 +739,11 @@ Install GNO skill for AI coding assistants.
 gno skill install [options]
 ```
 
-| Option         | Default | Description                                              |
-| -------------- | ------- | -------------------------------------------------------- |
-| `-t, --target` | claude  | Target: `claude`, `codex`, `opencode`, `openclaw`, `all` |
-| `-s, --scope`  | project | Scope: `project`, `user`                                 |
-| `-f, --force`  | false   | Overwrite existing                                       |
+| Option         | Default | Description                                                        |
+| -------------- | ------- | ------------------------------------------------------------------ |
+| `-t, --target` | claude  | Target: `claude`, `codex`, `opencode`, `openclaw`, `hermes`, `all` |
+| `-s, --scope`  | project | Scope: `project`, `user`                                           |
+| `-f, --force`  | false   | Overwrite existing                                                 |
 
 Examples:
 
@@ -751,6 +751,7 @@ Examples:
 gno skill install --target claude --scope project
 gno skill install --target codex --scope user
 gno skill install --target openclaw --scope user
+gno skill install --target hermes --scope user
 gno skill install --target all --force   # Install to all targets
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gmickel/gno",
-  "version": "1.11.0",
+  "version": "1.12.1",
   "description": "Local semantic search for your documents. Index Markdown, PDF, and Office files with hybrid BM25 + vector search.",
   "keywords": [
     "embeddings",

package/src/cli/commands/skill/install.ts

@@ -1,5 +1,5 @@
 /**
- * Install GNO agent skill to Claude Code or Codex.
+ * Install GNO agent skill to supported agent targets.
  * Atomic install via temp directory + rename.
  *
  * @module src/cli/commands/skill/install
@@ -149,7 +149,11 @@ export async function installSkillToTarget(
 
     // Remove existing if present (with safety check)
     if (destExists) {
-      const validationError = validatePathForDeletion(paths.gnoDir, paths.base);
+      const validationError = validatePathForDeletion(
+        paths.gnoDir,
+        paths.base,
+        paths.gnoDir
+      );
       if (validationError) {
         throw new CliError(
           "RUNTIME",

package/src/cli/commands/skill/paths.ts

@@ -1,6 +1,6 @@
 /**
  * Path resolution for skill installation.
- * Supports Claude Code, Codex, OpenCode, and OpenClaw targets with project/user scopes.
+ * Supports Claude Code, Codex, OpenCode, OpenClaw, and Hermes targets with project/user scopes.
  *
  * @module src/cli/commands/skill/paths
  */
@@ -30,18 +30,27 @@ export const ENV_OPENCODE_SKILLS_DIR = "OPENCODE_SKILLS_DIR";
 /** Override OpenClaw skills directory */
 export const ENV_OPENCLAW_SKILLS_DIR = "OPENCLAW_SKILLS_DIR";
 
+/** Override Hermes skills directory */
+export const ENV_HERMES_SKILLS_DIR = "HERMES_SKILLS_DIR";
+
 // ─────────────────────────────────────────────────────────────────────────────
 // Types
 // ─────────────────────────────────────────────────────────────────────────────
 
 export type SkillScope = "project" | "user";
-export type SkillTarget = "claude" | "codex" | "opencode" | "openclaw";
+export type SkillTarget =
+  | "claude"
+  | "codex"
+  | "opencode"
+  | "openclaw"
+  | "hermes";
 
 export const SKILL_TARGETS: SkillTarget[] = [
   "claude",
   "codex",
   "opencode",
   "openclaw",
+  "hermes",
 ];
 
 export interface SkillPathOptions {
@@ -102,6 +111,12 @@ const TARGET_CONFIGS: Record<SkillTarget, TargetPathConfig> = {
     skillsSubdir: "skills",
     envVar: ENV_OPENCLAW_SKILLS_DIR,
   },
+  hermes: {
+    projectBase: ".hermes",
+    userBase: ".hermes",
+    skillsSubdir: "skills",
+    envVar: ENV_HERMES_SKILLS_DIR,
+  },
 };
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -201,17 +216,21 @@ function getExpectedSuffixes(): string[] {
  */
 export function validatePathForDeletion(
   destDir: string,
-  base: string
+  base: string,
+  expectedDir?: string
 ): string | null {
   const normalized = normalize(destDir);
   const normalizedBase = normalize(base);
+  const normalizedExpected = expectedDir ? normalize(expectedDir) : undefined;
   const expectedSuffixes = getExpectedSuffixes();
 
-  // Must end with /skills/gno or /skill/gno (platform-aware)
+  // Must be the resolved target directory, or end with a known skill suffix.
+  // The exact resolved path covers absolute skills-dir env overrides.
+  const matchesExpectedDir = normalizedExpected === normalized;
   const hasValidSuffix = expectedSuffixes.some((suffix) =>
     normalized.endsWith(suffix)
   );
-  if (!hasValidSuffix) {
+  if (!(matchesExpectedDir || hasValidSuffix)) {
     return `Path does not end with expected suffix (${expectedSuffixes.join(" or ")})`;
   }
 

package/src/cli/commands/skill/uninstall.ts

@@ -1,5 +1,5 @@
 /**
- * Uninstall GNO agent skill from Claude Code or Codex.
+ * Uninstall GNO agent skill from supported agent targets.
  * Includes safety checks before deletion.
  *
  * @module src/cli/commands/skill/uninstall
@@ -58,7 +58,11 @@ async function uninstallFromTarget(
   }
 
   // Safety validation
-  const validationError = validatePathForDeletion(paths.gnoDir, paths.base);
+  const validationError = validatePathForDeletion(
+    paths.gnoDir,
+    paths.base,
+    paths.gnoDir
+  );
   if (validationError) {
     throw new CliError(
       "RUNTIME",

package/src/cli/program.ts

@@ -1939,7 +1939,7 @@ function wireSkillCommands(program: Command): void {
 
   skillCmd
     .command("install")
-    .description("Install GNO skill to Claude Code or Codex")
+    .description("Install GNO skill to supported agents")
     .option(
       "-s, --scope <scope>",
       "installation scope (project, user)",
@@ -1947,7 +1947,7 @@ function wireSkillCommands(program: Command): void {
     )
     .option(
       "-t, --target <target>",
-      "target agent (claude, codex, opencode, openclaw, all)",
+      "target agent (claude, codex, opencode, openclaw, hermes, all)",
       "claude"
     )
     .option("-f, --force", "overwrite existing installation")
@@ -1965,18 +1965,26 @@ function wireSkillCommands(program: Command): void {
       }
       // Validate target
       if (
-        !["claude", "codex", "opencode", "openclaw", "all"].includes(target)
+        !["claude", "codex", "opencode", "openclaw", "hermes", "all"].includes(
+          target
+        )
       ) {
         throw new CliError(
           "VALIDATION",
-          `Invalid target: ${target}. Must be 'claude', 'codex', 'opencode', 'openclaw', or 'all'.`
+          `Invalid target: ${target}. Must be 'claude', 'codex', 'opencode', 'openclaw', 'hermes', or 'all'.`
         );
       }
 
       const { installSkill } = await import("./commands/skill/install.js");
       await installSkill({
         scope: scope as "project" | "user",
-        target: target as "claude" | "codex" | "opencode" | "openclaw" | "all",
+        target: target as
+          | "claude"
+          | "codex"
+          | "opencode"
+          | "openclaw"
+          | "hermes"
+          | "all",
         force: Boolean(cmdOpts.force),
         json: Boolean(cmdOpts.json),
       });
@@ -1992,7 +2000,7 @@ function wireSkillCommands(program: Command): void {
     )
     .option(
       "-t, --target <target>",
-      "target agent (claude, codex, opencode, openclaw, all)",
+      "target agent (claude, codex, opencode, openclaw, hermes, all)",
       "claude"
     )
     .option("--json", "JSON output")
@@ -2009,18 +2017,26 @@ function wireSkillCommands(program: Command): void {
       }
       // Validate target
       if (
-        !["claude", "codex", "opencode", "openclaw", "all"].includes(target)
+        !["claude", "codex", "opencode", "openclaw", "hermes", "all"].includes(
+          target
+        )
       ) {
         throw new CliError(
           "VALIDATION",
-          `Invalid target: ${target}. Must be 'claude', 'codex', 'opencode', 'openclaw', or 'all'.`
+          `Invalid target: ${target}. Must be 'claude', 'codex', 'opencode', 'openclaw', 'hermes', or 'all'.`
         );
       }
 
       const { uninstallSkill } = await import("./commands/skill/uninstall.js");
       await uninstallSkill({
         scope: scope as "project" | "user",
-        target: target as "claude" | "codex" | "opencode" | "openclaw" | "all",
+        target: target as
+          | "claude"
+          | "codex"
+          | "opencode"
+          | "openclaw"
+          | "hermes"
+          | "all",
         json: Boolean(cmdOpts.json),
       });
     });
@@ -2048,7 +2064,7 @@ function wireSkillCommands(program: Command): void {
     )
     .option(
       "-t, --target <target>",
-      "filter by target (claude, codex, opencode, openclaw, all)",
+      "filter by target (claude, codex, opencode, openclaw, hermes, all)",
       "all"
     )
     .option("--json", "JSON output")
@@ -2065,18 +2081,26 @@ function wireSkillCommands(program: Command): void {
       }
       // Validate target
       if (
-        !["claude", "codex", "opencode", "openclaw", "all"].includes(target)
+        !["claude", "codex", "opencode", "openclaw", "hermes", "all"].includes(
+          target
+        )
       ) {
         throw new CliError(
           "VALIDATION",
-          `Invalid target: ${target}. Must be 'claude', 'codex', 'opencode', 'openclaw', or 'all'.`
+          `Invalid target: ${target}. Must be 'claude', 'codex', 'opencode', 'openclaw', 'hermes', or 'all'.`
         );
       }
 
       const { showPaths } = await import("./commands/skill/paths-cmd.js");
       await showPaths({
         scope: scope as "project" | "user" | "all",
-        target: target as "claude" | "codex" | "opencode" | "openclaw" | "all",
+        target: target as
+          | "claude"
+          | "codex"
+          | "opencode"
+          | "openclaw"
+          | "hermes"
+          | "all",
         json: Boolean(cmdOpts.json),
       });
     });

package/src/converters/adapters/markitdownTs/adapter.ts

@@ -40,6 +40,7 @@ const CFB_SIGNATURE = new Uint8Array([
 ]);
 const ENCRYPTION_INFO = utf16le("EncryptionInfo");
 const ENCRYPTED_PACKAGE = utf16le("EncryptedPackage");
+const PDF_TRAILER_SCAN_BYTES = 2048;
 const MAX_MESSAGE_LENGTH = 200;
 const PASSWORD_ERROR_REGEX = /password(?:-protected)?|no password given/i;
 
@@ -100,6 +101,19 @@ function isPasswordProtectedPdf(bytes: Uint8Array): boolean {
   return /\/Encrypt\b/.test(tail);
 }
 
+function hasCompletePdfTrailer(bytes: Uint8Array): boolean {
+  if (!hasPrefix(bytes, PDF_SIGNATURE)) {
+    return false;
+  }
+
+  const tailStart = Math.max(0, bytes.length - PDF_TRAILER_SCAN_BYTES);
+  const tail = Buffer.from(bytes.subarray(tailStart)).toString("latin1");
+  const eofIndex = tail.lastIndexOf("%%EOF");
+  const startXrefIndex = tail.lastIndexOf("startxref");
+
+  return startXrefIndex >= 0 && eofIndex > startXrefIndex;
+}
+
 function isPasswordProtectedXlsx(bytes: Uint8Array): boolean {
   return (
     hasPrefix(bytes, CFB_SIGNATURE) &&
@@ -162,7 +176,20 @@ export const markitdownAdapter: Converter = {
       return { ok: false, error: tooLargeError(input, CONVERTER_ID) };
     }
 
-    // 1b. Detect password-protected documents before calling markitdown-ts.
+    // 1b. Reject obviously truncated PDFs before markitdown-ts logs a parser
+    // stack trace. ISO 32000 requires the final %%EOF marker near the file end.
+    if (input.ext === ".pdf" && !hasCompletePdfTrailer(input.bytes)) {
+      return {
+        ok: false,
+        error: corruptError(
+          input,
+          CONVERTER_ID,
+          "Invalid or incomplete PDF structure"
+        ),
+      };
+    }
+
+    // 1c. Detect password-protected documents before calling markitdown-ts.
     // markitdown-ts logs dependency stack traces to stderr for these files.
     if (isPasswordProtected(input)) {
       return {

package/src/ingestion/sync.ts

@@ -75,6 +75,12 @@ const MAX_CONCURRENCY = 16;
 export const INGEST_VERSION = 6;
 const EMPTY_CONTENT_TYPE_RULES_FINGERPRINT = fingerprintContentTypeRules([]);
 const RELATION_EDGE_TYPE_PATTERN = /^[a-z][a-z0-9_]*$/;
+const NON_RETRYABLE_CONVERSION_ERROR_CODES = new Set([
+  "CORRUPT",
+  "PERMISSION",
+  "TOO_LARGE",
+  "UNSUPPORTED",
+]);
 
 type RelationMap = Record<string, string[]>;
 
@@ -219,6 +225,20 @@ function decideAction(
 
   // Source unchanged, but check for repair cases:
 
+  // Preserve non-retryable conversion failures until the source or ingest
+  // version changes. Re-running an unchanged corrupt/protected file on every
+  // sync only repeats expensive work and noisy diagnostics.
+  if (
+    existing.lastErrorCode &&
+    NON_RETRYABLE_CONVERSION_ERROR_CODES.has(existing.lastErrorCode) &&
+    existing.ingestVersion === INGEST_VERSION
+  ) {
+    return {
+      kind: "skip",
+      reason: "unchanged non-retryable conversion failure",
+    };
+  }
+
   // 1. Previous conversion failed (mirrorHash is null)
   if (!existing.mirrorHash) {
     return { kind: "repair", reason: "previous conversion failed" };
@@ -738,6 +758,8 @@ export class SyncService {
           sourceCtime,
           lastErrorCode: convertResult.error.code,
           lastErrorMessage: convertResult.error.message,
+          ingestVersion: INGEST_VERSION,
+          contentTypeRulesFingerprint,
           // mirrorHash intentionally omitted (will be null)
         });
 

package/src/serve/connectors.ts

@@ -118,6 +118,18 @@ const CONNECTOR_DEFINITIONS: ConnectorDefinition[] = [
         "Recommended default for local agent access without manual file edits.",
     },
   },
+  {
+    id: "hermes-skill",
+    appName: "Hermes Agent",
+    installKind: "skill",
+    target: "hermes",
+    scope: "user",
+    mode: {
+      label: "Read/search via skill",
+      detail:
+        "Recommended default for Hermes Agent. Uses the standard ~/.hermes/skills path.",
+    },
+  },
 ] as const;
 
 export async function getConnectorStatuses(overrides?: {