@signetai/connector-hermes-agent 0.226.23 → 0.226.25

package/dist/index.d.ts

@@ -43,6 +43,7 @@ export declare class HermesAgentConnector extends BaseConnector {
 export declare function diagnoseHermesIntegration(opts?: {
     readonly hermesHome?: string;
     readonly hermesRepo?: string | null;
+    readonly targetRoot?: string;
     readonly daemonUrl?: string;
 }): Promise<HermesDoctorReport>;
 export declare function createConnector(): HermesAgentConnector;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAqCtH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAwsBD,qBAAa,oBAAqB,SAAQ,aAAa;IACtD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,kBAAkB;IAEpC,YAAY,IAAI,MAAM;IAItB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB;gBAEpC,MAAM,CAAC,EAAE,qBAAqB;IAK1C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAKrB,aAAa,IAAI,MAAM;IAIjB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,aAAa,CAAC;IA6LvF,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IA2D3C,WAAW,IAAI,OAAO;IAQhB,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAS7C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuG9B;AAED,wBAAgB,eAAe,IAAI,oBAAoB,CAEtD;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAqCtH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAmqCD,qBAAa,oBAAqB,SAAQ,aAAa;IACtD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,kBAAkB;IAEpC,YAAY,IAAI,MAAM;IAItB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB;gBAEpC,MAAM,CAAC,EAAE,qBAAqB;IAK1C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAKrB,aAAa,IAAI,MAAM;IAKjB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,aAAa,CAAC;IAyLvF,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IA4D3C,WAAW,IAAI,OAAO;IAShB,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAU7C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwG9B;AAED,wBAAgB,eAAe,IAAI,oBAAoB,CAEtD;AAED,eAAe,oBAAoB,CAAC"}

package/dist/index.js

@@ -17412,9 +17412,22 @@ var home = homedir8();
 
 // src/index.ts
 import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, realpathSync as realpathSync3, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import {
+  closeSync,
+  constants,
+  existsSync as existsSync2,
+  fstatSync,
+  ftruncateSync,
+  lstatSync as lstatSync2,
+  mkdirSync,
+  openSync,
+  readFileSync as readFileSync2,
+  readdirSync,
+  realpathSync as realpathSync3,
+  writeSync
+} from "node:fs";
 import { homedir } from "node:os";
-import { dirname as dirname8, isAbsolute as isAbsolute2, join as join6, relative as relative2 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute2, join as join6, relative as relative2, resolve as resolvePath, sep as sep2 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // ../../../libs/connector-base/dist/index.js
@@ -34998,9 +35011,270 @@ var REQUIRED_TOOL_NAMES = [
   "recall",
   "remember"
 ];
+var DESCRIPTOR_ROOT = process.platform === "linux" ? "/proc/self/fd" : process.platform === "darwin" ? "/dev/fd" : null;
+var DESCRIPTOR_WRITES_SUPPORTED = DESCRIPTOR_ROOT !== null && typeof constants.O_DIRECTORY === "number" && typeof constants.O_NOFOLLOW === "number";
+var DESCRIPTOR_WRITE_UNAVAILABLE_ERROR = "Targeted Hermes profile writes require descriptor-backed no-follow filesystem support";
+function pathEntryExists(path) {
+  try {
+    lstatSync2(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function descriptorPath(fd) {
+  if (DESCRIPTOR_ROOT === null)
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  return join6(DESCRIPTOR_ROOT, String(fd));
+}
+function isPathWithin(root, candidate) {
+  const rel = relative2(root, candidate);
+  return !rel.startsWith("..") && !isAbsolute2(rel);
+}
+function openDirectoryNoFollow(path) {
+  if (!DESCRIPTOR_WRITES_SUPPORTED)
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  return openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+}
+function closeDirectory(fd) {
+  try {
+    closeSync(fd);
+  } catch {}
+}
+var SECURE_REMOVAL_CHANGED_STATUS = 75;
+var SECURE_REMOVAL_SCRIPT = [
+  "import os, sys",
+  "expected_dev = int(sys.argv[1])",
+  "expected_ino = int(sys.argv[2])",
+  "operation = sys.argv[3]",
+  "name = sys.argv[4]",
+  "expected_parent = sys.argv[5]",
+  "descriptor_root = sys.argv[6]",
+  "if os.path.realpath(os.path.join(descriptor_root, '3')) != expected_parent:",
+  "    raise SystemExit(75)",
+  "try:",
+  "    current = os.stat(name, dir_fd=3, follow_symlinks=False)",
+  "except FileNotFoundError:",
+  "    raise SystemExit(75)",
+  "if current.st_dev != expected_dev or current.st_ino != expected_ino:",
+  "    raise SystemExit(75)",
+  "try:",
+  "    if operation == 'directory':",
+  "        os.rmdir(name, dir_fd=3)",
+  "    elif operation == 'file':",
+  "        os.unlink(name, dir_fd=3)",
+  "    elif operation != 'verify':",
+  "        raise SystemExit(76)",
+  "except FileNotFoundError:",
+  "    raise SystemExit(75)"
+].join(`
+`);
+function getPythonCandidates() {
+  const configuredPython = process.env.PYTHON?.trim();
+  if (configuredPython)
+    return [{ command: configuredPython, args: [] }];
+  return process.platform === "win32" ? [
+    { command: "py", args: ["-3"] },
+    { command: "python", args: [] }
+  ] : [
+    { command: "python3", args: [] },
+    { command: "python", args: [] }
+  ];
+}
+function runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expectedIno, operation) {
+  if (DESCRIPTOR_ROOT === null)
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  const errors = [];
+  for (const candidate of getPythonCandidates()) {
+    const result = spawnSyncHidden(candidate.command, [
+      ...candidate.args,
+      "-c",
+      SECURE_REMOVAL_SCRIPT,
+      String(expectedDev),
+      String(expectedIno),
+      operation,
+      name,
+      parentPath,
+      DESCRIPTOR_ROOT
+    ], {
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "pipe", parentFd],
+      timeout: 5000
+    });
+    if (result.error) {
+      errors.push(`${candidate.command}: ${result.error.message}`);
+      continue;
+    }
+    if (result.status === 0)
+      return;
+    if (result.status === SECURE_REMOVAL_CHANGED_STATUS) {
+      throw new Error(`Hermes directory entry changed during secure removal: ${name}`);
+    }
+    errors.push(`${candidate.command}: exited ${result.status ?? "without a status"}`);
+  }
+  throw new Error(`${DESCRIPTOR_WRITE_UNAVAILABLE_ERROR}: ${errors.join("; ") || "No Python interpreter found"}`);
+}
+function assertEntryIdentityNoFollow(parentFd, parentPath, name, expectedDev, expectedIno) {
+  runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expectedIno, "verify");
+}
+function removeEntryNoFollow(parentFd, parentPath, name, expectedDev, expectedIno, directory) {
+  runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expectedIno, directory ? "directory" : "file");
+}
+function sameStatIdentity(left, right) {
+  return left.dev === right.dev && left.ino === right.ino;
+}
+function ensureContainedDirectory(directory, targetRoot) {
+  const safeDirectory = resolveContainedWritePath(directory, targetRoot);
+  if (!DESCRIPTOR_WRITES_SUPPORTED) {
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  }
+  const absoluteDirectory = resolvePath(directory);
+  const rootPath = resolvePath(targetRoot);
+  if (!isPathWithin(rootPath, safeDirectory)) {
+    throw new Error(`Hermes target directory escapes validated root: ${directory}`);
+  }
+  let existing = absoluteDirectory;
+  const missing = [];
+  while (!pathEntryExists(existing)) {
+    const parent = dirname8(existing);
+    if (parent === existing)
+      throw new Error(`Hermes target directory has no existing ancestor: ${directory}`);
+    missing.unshift(existing.slice(parent.length + 1));
+    existing = parent;
+  }
+  const existingReal = realpathSync3(existing);
+  if (existingReal !== existing) {
+    throw new Error(`Hermes target directory is symlinked and cannot be used for writes: ${directory}`);
+  }
+  let fd = openDirectoryNoFollow(existing);
+  let expected = existingReal;
+  try {
+    for (const component of missing) {
+      const childPath = join6(descriptorPath(fd), component);
+      try {
+        mkdirSync(childPath);
+      } catch (error) {
+        const code = error && typeof error === "object" && "code" in error ? error.code : undefined;
+        if (code !== "EEXIST")
+          throw error;
+      }
+      const childFd = openDirectoryNoFollow(childPath);
+      try {
+        expected = join6(expected, component);
+        if (realpathSync3(descriptorPath(childFd)) !== expected) {
+          throw new Error(`Hermes target directory changed during secure creation: ${directory}`);
+        }
+      } catch (error) {
+        closeDirectory(childFd);
+        throw error;
+      }
+      closeDirectory(fd);
+      fd = childFd;
+    }
+  } finally {
+    closeDirectory(fd);
+  }
+}
+function writeContainedFile(targetPath, content, targetRoot) {
+  const safePath = resolveContainedWritePath(targetPath, targetRoot);
+  if (!DESCRIPTOR_WRITES_SUPPORTED) {
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  }
+  const rootPath = resolvePath(targetRoot);
+  ensureContainedDirectory(dirname8(safePath), targetRoot);
+  const relativePath = relative2(rootPath, safePath);
+  if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath)) {
+    throw new Error(`Hermes target file escapes validated root: ${targetPath}`);
+  }
+  const components = relativePath.split(sep2);
+  const fileName = components.pop();
+  if (!fileName || components.some((component) => component === "" || component === "." || component === "..")) {
+    throw new Error(`Hermes target file has an invalid relative path: ${targetPath}`);
+  }
+  let parentFd = openDirectoryNoFollow(rootPath);
+  try {
+    if (realpathSync3(descriptorPath(parentFd)) !== rootPath) {
+      throw new Error(`Hermes target root changed during secure write: ${targetRoot}`);
+    }
+    let expected = rootPath;
+    for (const component of components) {
+      const childFd = openDirectoryNoFollow(join6(descriptorPath(parentFd), component));
+      try {
+        expected = join6(expected, component);
+        if (realpathSync3(descriptorPath(childFd)) !== expected) {
+          throw new Error(`Hermes target directory changed during secure write: ${targetPath}`);
+        }
+      } catch (error) {
+        closeDirectory(childFd);
+        throw error;
+      }
+      closeDirectory(parentFd);
+      parentFd = childFd;
+    }
+    const filePath = join6(descriptorPath(parentFd), fileName);
+    let existingFileIdentity;
+    try {
+      const existing = lstatSync2(filePath);
+      if (existing.isSymbolicLink()) {
+        throw new Error(`Hermes target file is symlinked and cannot be used for writes: ${targetPath}`);
+      }
+      existingFileIdentity = { dev: existing.dev, ino: existing.ino };
+    } catch (error) {
+      const code = error && typeof error === "object" && "code" in error ? error.code : undefined;
+      if (code !== "ENOENT")
+        throw error;
+    }
+    const fileFd = openSync(filePath, constants.O_WRONLY | constants.O_NOFOLLOW | (existingFileIdentity === undefined ? constants.O_CREAT | constants.O_EXCL : 0), 438);
+    try {
+      const expectedFile = join6(expected, fileName);
+      if (existingFileIdentity !== undefined && !sameStatIdentity(existingFileIdentity, fstatSync(fileFd))) {
+        throw new Error(`Hermes target file changed during secure write: ${targetPath}`);
+      }
+      if (realpathSync3(descriptorPath(fileFd)) !== expectedFile) {
+        throw new Error(`Hermes target file changed during secure write: ${targetPath}`);
+      }
+      ftruncateSync(fileFd, 0);
+      const bytes = typeof content === "string" ? Buffer.from(content) : Buffer.from(content);
+      let offset = 0;
+      while (offset < bytes.length) {
+        const written = writeSync(fileFd, bytes, offset, bytes.length - offset);
+        if (written <= 0)
+          throw new Error(`Hermes target file write made no progress: ${targetPath}`);
+        offset += written;
+      }
+    } finally {
+      closeDirectory(fileFd);
+    }
+  } finally {
+    closeDirectory(parentFd);
+  }
+}
+function ensureTargetDirectory(directory, targetRoot) {
+  ensureContainedDirectory(directory, targetRoot);
+}
+function writeTargetFile(path, content, targetRoot) {
+  writeContainedFile(path, content, targetRoot);
+}
+function rejectSymlinkedPathComponents(path, root, targetPath) {
+  if (!isPathWithin(root, path)) {
+    throw new Error(`Hermes target path escapes validated root: ${targetPath}`);
+  }
+  let current = path;
+  while (true) {
+    if (lstatSync2(current).isSymbolicLink()) {
+      throw new Error(`Hermes target path is symlinked and cannot be used for writes: ${targetPath}`);
+    }
+    if (current === root)
+      return;
+    const parent = dirname8(current);
+    if (parent === current)
+      throw new Error(`Hermes target path escapes validated root: ${targetPath}`);
+    current = parent;
+  }
+}
 function resolveContainedWritePath(targetPath, targetRoot) {
-  let rootPath = targetRoot;
-  while (!existsSync2(rootPath)) {
+  let rootPath = resolvePath(targetRoot);
+  while (!pathEntryExists(rootPath)) {
     const parent = dirname8(rootPath);
     if (parent === rootPath)
       throw new Error(`Hermes target root does not exist: ${targetRoot}`);
@@ -35010,22 +35284,139 @@ function resolveContainedWritePath(targetPath, targetRoot) {
     throw new Error(`Hermes target root is symlinked and cannot be used for writes: ${targetRoot}`);
   }
   const root = realpathSync3(rootPath);
-  let existing = targetPath;
+  let existing = resolvePath(targetPath);
   const missing = [];
-  while (!existsSync2(existing)) {
+  while (!pathEntryExists(existing)) {
     const parent = dirname8(existing);
     if (parent === existing)
       throw new Error(`Hermes target path does not have an existing ancestor: ${targetPath}`);
     missing.unshift(existing.slice(parent.length + 1));
     existing = parent;
   }
-  const candidate = join6(realpathSync3(existing), ...missing);
+  rejectSymlinkedPathComponents(existing, rootPath, targetPath);
+  const candidate = join6(existing, ...missing);
   const rel = relative2(root, candidate);
   if (rel.startsWith("..") || isAbsolute2(rel)) {
     throw new Error(`Hermes target path escapes validated root: ${targetPath}`);
   }
   return candidate;
 }
+function removeDirectoryContentsNoFollow(directoryFd, expectedDirectoryPath) {
+  if (realpathSync3(descriptorPath(directoryFd)) !== expectedDirectoryPath) {
+    throw new Error(`Hermes target directory changed during secure removal: ${expectedDirectoryPath}`);
+  }
+  for (const entry of readdirSync(descriptorPath(directoryFd), { withFileTypes: true })) {
+    const childPath = join6(descriptorPath(directoryFd), entry.name);
+    const expectedChildPath = join6(expectedDirectoryPath, entry.name);
+    if (entry.isDirectory() && !entry.isSymbolicLink()) {
+      const childFd = openDirectoryNoFollow(childPath);
+      try {
+        const childIdentity2 = fstatSync(childFd);
+        if (realpathSync3(descriptorPath(childFd)) !== expectedChildPath) {
+          throw new Error(`Hermes target directory changed during secure removal: ${expectedChildPath}`);
+        }
+        assertEntryIdentityNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity2.dev, childIdentity2.ino);
+        removeDirectoryContentsNoFollow(childFd, expectedChildPath);
+        removeEntryNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity2.dev, childIdentity2.ino, true);
+      } finally {
+        closeDirectory(childFd);
+      }
+      continue;
+    }
+    const childIdentity = lstatSync2(childPath);
+    removeEntryNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity.dev, childIdentity.ino, false);
+  }
+}
+function removeContainedDirectory(targetPath, targetRoot, targetKind) {
+  if (!DESCRIPTOR_WRITES_SUPPORTED)
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  const safeTargetDir = resolveContainedWritePath(targetPath, targetRoot);
+  const rootPath = resolvePath(targetRoot);
+  const relativePath = relative2(rootPath, safeTargetDir);
+  if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath)) {
+    throw new Error(`Hermes target directory escapes validated root: ${targetPath}`);
+  }
+  const components = relativePath.split(sep2);
+  const targetName = components.pop();
+  if (!targetName || components.some((component) => component === "" || component === "." || component === "..")) {
+    throw new Error(`Hermes target directory has an invalid relative path: ${targetPath}`);
+  }
+  let parentFd = openDirectoryNoFollow(rootPath);
+  try {
+    let expected = rootPath;
+    for (const component of components) {
+      const childFd = openDirectoryNoFollow(join6(descriptorPath(parentFd), component));
+      try {
+        expected = join6(expected, component);
+        if (realpathSync3(descriptorPath(childFd)) !== expected) {
+          throw new Error(`Hermes target directory changed during secure removal: ${targetPath}`);
+        }
+      } catch (error) {
+        closeDirectory(childFd);
+        throw error;
+      }
+      closeDirectory(parentFd);
+      parentFd = childFd;
+    }
+    const targetEntryPath = join6(descriptorPath(parentFd), targetName);
+    const targetFd = openDirectoryNoFollow(targetEntryPath);
+    try {
+      const targetIdentity = fstatSync(targetFd);
+      const expectedTarget = join6(expected, targetName);
+      if (realpathSync3(descriptorPath(targetFd)) !== expectedTarget) {
+        throw new Error(`Hermes target directory changed during secure removal: ${targetPath}`);
+      }
+      const marker = readInstallMarkerFromDirectory(targetFd);
+      if (marker === null || marker.targetKind !== targetKind) {
+        throw new Error(`Refusing to uninstall unowned Hermes plugin path: ${targetPath} (missing or invalid ${INSTALL_MARKER_FILE})`);
+      }
+      assertEntryIdentityNoFollow(parentFd, expected, targetName, targetIdentity.dev, targetIdentity.ino);
+      removeDirectoryContentsNoFollow(targetFd, expectedTarget);
+      removeEntryNoFollow(parentFd, expected, targetName, targetIdentity.dev, targetIdentity.ino, true);
+    } finally {
+      closeDirectory(targetFd);
+    }
+  } finally {
+    closeDirectory(parentFd);
+  }
+}
+function removeContainedFile(targetPath, targetRoot) {
+  if (!DESCRIPTOR_WRITES_SUPPORTED)
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  const safeTargetPath = resolveContainedWritePath(targetPath, targetRoot);
+  const rootPath = resolvePath(targetRoot);
+  const relativePath = relative2(rootPath, safeTargetPath);
+  if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath)) {
+    throw new Error(`Hermes target file escapes validated root: ${targetPath}`);
+  }
+  const components = relativePath.split(sep2);
+  const fileName = components.pop();
+  if (!fileName || components.some((component) => component === "" || component === "." || component === "..")) {
+    throw new Error(`Hermes target file has an invalid relative path: ${targetPath}`);
+  }
+  let parentFd = openDirectoryNoFollow(rootPath);
+  try {
+    let expected = rootPath;
+    for (const component of components) {
+      const childFd = openDirectoryNoFollow(join6(descriptorPath(parentFd), component));
+      try {
+        expected = join6(expected, component);
+        if (realpathSync3(descriptorPath(childFd)) !== expected) {
+          throw new Error(`Hermes target file changed during secure removal: ${targetPath}`);
+        }
+      } catch (error) {
+        closeDirectory(childFd);
+        throw error;
+      }
+      closeDirectory(parentFd);
+      parentFd = childFd;
+    }
+    const targetFile = lstatSync2(join6(descriptorPath(parentFd), fileName));
+    removeEntryNoFollow(parentFd, expected, fileName, targetFile.dev, targetFile.ino, false);
+  } finally {
+    closeDirectory(parentFd);
+  }
+}
 function getRepoPluginTargetDir(hermesRepo) {
   return join6(hermesRepo, "plugins", "memory", "signet");
 }
@@ -35036,29 +35427,25 @@ function getProviderBackupPath(hermesHome) {
   return join6(hermesHome, PROVIDER_BACKUP_FILE);
 }
 function installPlugin(targetDir, targetKind, targetRoot) {
-  const writeDir = targetRoot ? resolveContainedWritePath(targetDir, targetRoot) : targetDir;
+  const writeDir = resolveContainedWritePath(targetDir, targetRoot);
   const sourceDir = getPluginSourceDir();
-  mkdirSync(writeDir, { recursive: true });
+  ensureTargetDirectory(writeDir, targetRoot);
   const written = [];
   for (const file of PLUGIN_FILES) {
     const src = join6(sourceDir, file);
-    const dst = targetRoot ? resolveContainedWritePath(join6(writeDir, file), targetRoot) : join6(writeDir, file);
+    const dst = resolveContainedWritePath(join6(writeDir, file), targetRoot);
     if (existsSync2(src)) {
-      writeFileSync2(dst, readFileSync2(src));
+      writeTargetFile(dst, readFileSync2(src), targetRoot);
       written.push(dst);
     }
   }
-  written.push(writeInstallMarker(writeDir, targetKind));
+  written.push(writeInstallMarker(writeDir, targetKind, targetRoot));
   return written;
 }
-function uninstallPlugin(targetDir, targetRoot) {
-  if (!existsSync2(targetDir))
+function uninstallPlugin(targetDir, targetKind, targetRoot) {
+  if (!pathEntryExists(targetDir))
     return [];
-  const safeTargetDir = targetRoot ? resolveContainedWritePath(targetDir, targetRoot) : targetDir;
-  if (!readInstallMarker(safeTargetDir)) {
-    throw new Error(`Refusing to uninstall unowned Hermes plugin path: ${targetDir} (missing or invalid ${INSTALL_MARKER_FILE})`);
-  }
-  rmSync(safeTargetDir, { recursive: true, force: true });
+  removeContainedDirectory(targetDir, targetRoot, targetKind);
   return [targetDir];
 }
 function getConfigCandidates(hermesHome, targetRoot) {
@@ -35180,11 +35567,11 @@ function parseDottedProviderLine(line) {
 function setDottedProviderLine(lines, line, value) {
   lines[line] = `memory.provider: ${value}`;
 }
-function writeProviderBackup(hermesHome, configPath, providerKind, previousProvider) {
+function writeProviderBackup(hermesHome, configPath, providerKind, previousProvider, targetRoot) {
   if (previousProvider === "signet")
     return null;
-  const backupPath = getProviderBackupPath(hermesHome);
-  if (existsSync2(backupPath))
+  const backupPath = resolveContainedWritePath(getProviderBackupPath(hermesHome), targetRoot);
+  if (pathEntryExists(backupPath))
     return null;
   const backup = {
     schemaVersion: 1,
@@ -35193,13 +35580,13 @@ function writeProviderBackup(hermesHome, configPath, providerKind, previousProvi
     previousProvider,
     createdAt: new Date().toISOString()
   };
-  mkdirSync(dirname8(backupPath), { recursive: true });
-  writeFileSync2(backupPath, `${JSON.stringify(backup, null, 2)}
-`);
+  ensureTargetDirectory(dirname8(backupPath), targetRoot);
+  writeTargetFile(backupPath, `${JSON.stringify(backup, null, 2)}
+`, targetRoot);
   return backupPath;
 }
-function readProviderBackup(hermesHome) {
-  const backupPath = getProviderBackupPath(hermesHome);
+function readProviderBackup(hermesHome, targetRoot) {
+  const backupPath = targetRoot ? resolveContainedWritePath(getProviderBackupPath(hermesHome), targetRoot) : getProviderBackupPath(hermesHome);
   if (!existsSync2(backupPath))
     return null;
   try {
@@ -35213,10 +35600,17 @@ function readProviderBackup(hermesHome) {
   }
 }
 function removeProviderBackup(hermesHome, targetRoot) {
-  const backupPath = targetRoot ? resolveContainedWritePath(getProviderBackupPath(hermesHome), targetRoot) : getProviderBackupPath(hermesHome);
-  if (!existsSync2(backupPath))
+  const backupPath = resolveContainedWritePath(getProviderBackupPath(hermesHome), targetRoot);
+  if (!pathEntryExists(backupPath))
     return null;
-  rmSync(backupPath, { force: true });
+  try {
+    removeContainedFile(backupPath, targetRoot);
+  } catch (error) {
+    const code = error && typeof error === "object" && "code" in error ? error.code : undefined;
+    if (code !== "ENOENT")
+      throw error;
+    return null;
+  }
   return backupPath;
 }
 function trimTrailingSlashes(value) {
@@ -35226,8 +35620,8 @@ function trimTrailingSlashes(value) {
   }
   return value.slice(0, end);
 }
-function isProviderConfigured(hermesHome) {
-  const config = readConfigYaml(hermesHome);
+function isProviderConfigured(hermesHome, targetRoot) {
+  const config = readConfigYaml(hermesHome, targetRoot);
   if (!config)
     return false;
   const lines = config.content.split(/\r?\n/);
@@ -35262,13 +35656,13 @@ function configureProvider(hermesHome, warnings, targetRoot) {
     let changed = false;
     const dottedWasSignet = dottedProviderLineIsSignet(lines[dottedProvider] ?? "");
     if (!dottedWasSignet) {
-      backupPath = writeProviderBackup(hermesHome, configPath, "dotted", parseDottedProviderLine(lines[dottedProvider] ?? "") ?? "");
+      backupPath = writeProviderBackup(hermesHome, configPath, "dotted", parseDottedProviderLine(lines[dottedProvider] ?? "") ?? "", targetRoot);
       setDottedProviderLine(lines, dottedProvider, "signet");
       changed = true;
     }
     if (block !== null && typeof block === "object" && block.provider !== null && block.provider !== undefined) {
       if (dottedWasSignet) {
-        const nestedBackupPath = writeProviderBackup(hermesHome, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "");
+        const nestedBackupPath = writeProviderBackup(hermesHome, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "", targetRoot);
         backupPath = nestedBackupPath ?? backupPath;
       }
       lines.splice(block.provider, 1);
@@ -35276,10 +35670,10 @@ function configureProvider(hermesHome, warnings, targetRoot) {
     }
     if (!changed)
       return { configPath: null, backupPath: null };
-    mkdirSync(dirname8(configPath), { recursive: true });
-    writeFileSync2(configPath, `${lines.join(`
+    ensureTargetDirectory(dirname8(configPath), targetRoot);
+    writeTargetFile(configPath, `${lines.join(`
 `).replace(/\n+$/g, "")}
-`);
+`, targetRoot);
     return { configPath, backupPath };
   }
   if (content && block === null) {
@@ -35289,7 +35683,7 @@ function configureProvider(hermesHome, warnings, targetRoot) {
   if (block !== null && typeof block === "object" && block.provider !== null && block.provider !== undefined) {
     if (providerLineIsSignet(lines[block.provider] ?? ""))
       return { configPath: null, backupPath: null };
-    backupPath = writeProviderBackup(hermesHome, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "");
+    backupPath = writeProviderBackup(hermesHome, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "", targetRoot);
     lines[block.provider] = `${(lines[block.provider] ?? "").match(/^\s*/)?.[0] ?? "  "}provider: signet`;
   } else if (block !== null && typeof block === "object") {
     lines.splice(block.start + 1, 0, `${" ".repeat(block.indent)}provider: signet`);
@@ -35298,25 +35692,23 @@ function configureProvider(hermesHome, warnings, targetRoot) {
       lines.push("");
     lines.push("memory:", "  provider: signet");
   }
-  mkdirSync(dirname8(configPath), { recursive: true });
-  writeFileSync2(configPath, `${lines.join(`
+  ensureTargetDirectory(dirname8(configPath), targetRoot);
+  writeTargetFile(configPath, `${lines.join(`
 `).replace(/\n+$/g, "")}
-`);
+`, targetRoot);
   return { configPath, backupPath };
 }
 function restoreOrClearProvider(hermesHome, targetRoot) {
-  const safeConfigPath = targetRoot ? resolveContainedWritePath(resolveConfigPath(hermesHome), targetRoot) : resolveConfigPath(hermesHome);
-  const config = readConfigYaml(hermesHome);
+  const safeConfigPath = resolveContainedWritePath(resolveConfigPath(hermesHome), targetRoot);
+  const config = readConfigYaml(hermesHome, targetRoot);
   if (!config)
     return { configPath: null, backupPath: removeProviderBackup(hermesHome, targetRoot) };
-  if (targetRoot)
-    resolveContainedWritePath(config.path, targetRoot);
   const lines = config.content.replace(/\r\n/g, `
 `).split(`
 `);
   const block = findMemoryBlock(lines);
   const dottedProvider = findDottedProvider(lines);
-  const backup = readProviderBackup(hermesHome);
+  const backup = readProviderBackup(hermesHome, targetRoot);
   let configChanged = false;
   if (dottedProvider !== null && dottedProviderLineIsSignet(lines[dottedProvider] ?? "")) {
     setDottedProviderLine(lines, dottedProvider, backup?.providerKind === "dotted" ? backup.previousProvider : "''");
@@ -35335,9 +35727,9 @@ function restoreOrClearProvider(hermesHome, targetRoot) {
     configChanged = true;
   }
   if (configChanged) {
-    writeFileSync2(safeConfigPath, `${lines.join(`
+    writeTargetFile(safeConfigPath, `${lines.join(`
 `).replace(/\n+$/g, "")}
-`);
+`, targetRoot);
   }
   return {
     configPath: configChanged ? safeConfigPath : null,
@@ -35386,8 +35778,8 @@ function computePluginSourceHash() {
   }
   return hash.digest("hex");
 }
-function writeInstallMarker(targetDir, targetKind) {
-  const markerPath = join6(targetDir, INSTALL_MARKER_FILE);
+function writeInstallMarker(targetDir, targetKind, targetRoot) {
+  const markerPath = resolveContainedWritePath(join6(targetDir, INSTALL_MARKER_FILE), targetRoot);
   const marker = {
     connector: "@signetai/connector-hermes-agent",
     schemaVersion: 1,
@@ -35396,30 +35788,55 @@ function writeInstallMarker(targetDir, targetKind) {
     targetKind,
     installedAt: new Date().toISOString()
   };
-  writeFileSync2(markerPath, `${JSON.stringify(marker, null, 2)}
-`);
+  writeTargetFile(markerPath, `${JSON.stringify(marker, null, 2)}
+`, targetRoot);
   return markerPath;
 }
+function parseInstallMarker(content) {
+  try {
+    const parsed = JSON.parse(content);
+    if (parsed.connector === "@signetai/connector-hermes-agent" && parsed.schemaVersion === 1 && typeof parsed.connectorVersion === "string" && typeof parsed.sourceHash === "string" && (parsed.targetKind === "user" || parsed.targetKind === "repo") && typeof parsed.installedAt === "string") {
+      return parsed;
+    }
+  } catch {}
+  return null;
+}
 function readInstallMarker(targetDir) {
   const markerPath = join6(targetDir, INSTALL_MARKER_FILE);
   if (!existsSync2(markerPath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync2(markerPath, "utf-8"));
-    if (parsed.connector === "@signetai/connector-hermes-agent" && parsed.schemaVersion === 1 && typeof parsed.connectorVersion === "string" && typeof parsed.sourceHash === "string" && (parsed.targetKind === "user" || parsed.targetKind === "repo") && typeof parsed.installedAt === "string") {
-      return parsed;
-    }
+    return parseInstallMarker(readFileSync2(markerPath, "utf-8"));
+  } catch {
     return null;
+  }
+}
+function readInstallMarkerFromDirectory(directoryFd) {
+  let markerFd;
+  try {
+    markerFd = openSync(join6(descriptorPath(directoryFd), INSTALL_MARKER_FILE), constants.O_RDONLY | constants.O_NOFOLLOW);
+    return parseInstallMarker(readFileSync2(markerFd, "utf-8"));
   } catch {
     return null;
+  } finally {
+    if (markerFd !== undefined)
+      closeDirectory(markerFd);
   }
 }
 function pluginMarkerIsFresh(targetDir) {
   const marker = readInstallMarker(targetDir);
   return marker !== null && marker.sourceHash === computePluginSourceHash();
 }
-function pluginLooksCurrent(targetDir) {
-  return pluginHasStaticToolSchemas(join6(targetDir, "__init__.py")) && pluginMarkerIsFresh(targetDir);
+function pluginLooksCurrent(targetDir, targetRoot) {
+  let safeTargetDir = targetDir;
+  if (targetRoot) {
+    try {
+      safeTargetDir = resolveContainedWritePath(targetDir, targetRoot);
+    } catch {
+      return false;
+    }
+  }
+  return pluginHasStaticToolSchemas(join6(safeTargetDir, "__init__.py")) && pluginMarkerIsFresh(safeTargetDir);
 }
 function probeHermesProvider(hermesRepo) {
   if (!existsSync2(hermesRepo)) {
@@ -35605,9 +36022,9 @@ class HermesAgentConnector extends BaseConnector {
       if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(this.target.profile)) {
         throw new Error("Invalid Hermes profile name; use 1-64 letters, numbers, '.', '_' or '-'.");
       }
-      const userHome2 = process.env.HOME?.trim() || homedir();
-      const profileHome = join6(userHome2, ".hermes", "profiles", this.target.profile);
-      return resolveContainedWritePath(profileHome, join6(userHome2, ".hermes", "profiles"));
+      const hermesHome = resolveHermesHomePath();
+      const profileHome = join6(hermesHome, "profiles", this.target.profile);
+      return resolveContainedWritePath(profileHome, join6(hermesHome, "profiles"));
     }
     return resolveHermesHomePath();
   }
@@ -35617,7 +36034,8 @@ class HermesAgentConnector extends BaseConnector {
     return resolveHermesRepoPath();
   }
   getConfigPath() {
-    return resolveConfigPath(this.getHermesHome());
+    const hermesHome = this.getHermesHome();
+    return resolveConfigPath(hermesHome, this.target?.profile ? hermesHome : undefined);
   }
   async install(basePath, options = {}) {
     const filesWritten = [];
@@ -35630,10 +36048,11 @@ class HermesAgentConnector extends BaseConnector {
     }
     const hermesHome = this.getHermesHome();
     const hermesRepo = this.getHermesRepo();
+    const targetRoot = hermesHome;
     let userPluginInstalled = false;
     let repoPluginInstalled = false;
     try {
-      const pluginFiles = installPlugin(getUserPluginTargetDir(hermesHome), "user", options.profile ? hermesHome : undefined);
+      const pluginFiles = installPlugin(getUserPluginTargetDir(hermesHome), "user", targetRoot);
       filesWritten.push(...pluginFiles);
       userPluginInstalled = true;
     } catch (e) {
@@ -35642,7 +36061,7 @@ class HermesAgentConnector extends BaseConnector {
     }
     if (hermesRepo) {
       try {
-        const pluginFiles = installPlugin(getRepoPluginTargetDir(hermesRepo), "repo");
+        const pluginFiles = installPlugin(getRepoPluginTargetDir(hermesRepo), "repo", hermesRepo);
         filesWritten.push(...pluginFiles);
         repoPluginInstalled = true;
       } catch (e) {
@@ -35660,7 +36079,7 @@ class HermesAgentConnector extends BaseConnector {
         warnings
       };
     }
-    const envPath = options.profile ? resolveContainedWritePath(join6(hermesHome, ".env"), hermesHome) : join6(hermesHome, ".env");
+    const envPath = resolveContainedWritePath(join6(hermesHome, ".env"), targetRoot);
     let configuredSignetAgentId = "default";
     const configuredDaemonUrl = (process.env.SIGNET_DAEMON_URL?.trim() || "http://127.0.0.1:3850").replace(/[\r\n]+/g, "");
     try {
@@ -35722,8 +36141,8 @@ ${key}=${value}
         changed = true;
       }
       if (changed) {
-        mkdirSync(hermesHome, { recursive: true });
-        writeFileSync2(envPath, envContent);
+        ensureTargetDirectory(hermesHome, targetRoot);
+        writeTargetFile(envPath, envContent, targetRoot);
         configsPatched.push(envPath);
       }
     } catch (e) {
@@ -35734,14 +36153,14 @@ ${key}=${value}
     if (registrationError) {
       return { success: false, message: registrationError, filesWritten, configsPatched, warnings };
     }
-    const providerConfig = configureProvider(hermesHome, warnings, options.profile ? hermesHome : undefined);
+    const providerConfig = configureProvider(hermesHome, warnings, targetRoot);
     if (providerConfig.configPath) {
       configsPatched.push(providerConfig.configPath);
     }
     if (providerConfig.backupPath) {
       filesWritten.push(providerConfig.backupPath);
     }
-    if (!isProviderConfigured(hermesHome)) {
+    if (!isProviderConfigured(hermesHome, targetRoot)) {
       return {
         success: false,
         message: "Hermes Agent integration incomplete — Signet provider was deployed but not activated in Hermes config",
@@ -35772,24 +36191,27 @@ ${key}=${value}
     const configsPatched = [];
     const hermesRepo = this.getHermesRepo();
     if (hermesRepo) {
-      const removed = uninstallPlugin(getRepoPluginTargetDir(hermesRepo));
+      const removed = uninstallPlugin(getRepoPluginTargetDir(hermesRepo), "repo", hermesRepo);
       filesRemoved.push(...removed);
     }
     const hermesHome = this.getHermesHome();
     const userPluginTarget = getUserPluginTargetDir(hermesHome);
-    if (this.target?.profile && (!existsSync2(userPluginTarget) || readInstallMarker(userPluginTarget) === null)) {
+    const targetRoot = hermesHome;
+    const safeUserPluginTarget = resolveContainedWritePath(userPluginTarget, targetRoot);
+    const marker = readInstallMarker(safeUserPluginTarget);
+    if (!pathEntryExists(safeUserPluginTarget) || marker === null || marker.targetKind !== "user") {
       return { filesRemoved, configsPatched };
     }
-    const userPluginRemoved = uninstallPlugin(userPluginTarget, this.target?.profile ? hermesHome : undefined);
+    const userPluginRemoved = uninstallPlugin(userPluginTarget, "user", targetRoot);
     filesRemoved.push(...userPluginRemoved);
-    const providerConfig = restoreOrClearProvider(hermesHome, this.target?.profile ? hermesHome : undefined);
+    const providerConfig = restoreOrClearProvider(hermesHome, targetRoot);
     if (providerConfig.configPath) {
       configsPatched.push(providerConfig.configPath);
     }
     if (providerConfig.backupPath) {
       filesRemoved.push(providerConfig.backupPath);
     }
-    const envPath = this.target?.profile ? resolveContainedWritePath(join6(hermesHome, ".env"), hermesHome) : join6(hermesHome, ".env");
+    const envPath = resolveContainedWritePath(join6(hermesHome, ".env"), targetRoot);
     if (existsSync2(envPath)) {
       try {
         let envContent = readFileSync2(envPath, "utf-8");
@@ -35810,10 +36232,10 @@ ${key}=${value}
           }
         }
         if (changed) {
-          writeFileSync2(envPath, `${envContent.replace(/\n{3,}/g, `
+          writeTargetFile(envPath, `${envContent.replace(/\n{3,}/g, `
 
 `).trimEnd()}
-`);
+`, targetRoot);
           configsPatched.push(envPath);
         }
       } catch (e) {
@@ -35825,11 +36247,12 @@ ${key}=${value}
   isInstalled() {
     const hermesHome = this.getHermesHome();
     const hermesRepo = this.getHermesRepo();
-    if (!isProviderConfigured(hermesHome))
+    const targetRoot = this.target?.profile ? hermesHome : undefined;
+    if (!isProviderConfigured(hermesHome, targetRoot))
       return false;
     if (hermesRepo)
       return pluginLooksCurrent(getRepoPluginTargetDir(hermesRepo));
-    return pluginLooksCurrent(getUserPluginTargetDir(hermesHome));
+    return pluginLooksCurrent(getUserPluginTargetDir(hermesHome), targetRoot);
   }
   async diagnose() {
     const hermesHome = this.getHermesHome();
@@ -35837,6 +36260,7 @@ ${key}=${value}
     return diagnoseHermesIntegration({
       hermesHome,
       hermesRepo,
+      targetRoot: this.target?.profile ? hermesHome : undefined,
       daemonUrl: (process.env.SIGNET_DAEMON_URL?.trim() || "http://127.0.0.1:3850").replace(/[\r\n]+/g, "")
     });
   }
@@ -35844,8 +36268,9 @@ ${key}=${value}
 async function diagnoseHermesIntegration(opts) {
   const hermesHome = opts?.hermesHome ?? resolveHermesHomePath();
   const hermesRepo = opts && "hermesRepo" in opts ? opts.hermesRepo ?? null : resolveHermesRepoPath();
+  const targetRoot = opts?.targetRoot;
   const daemonUrl = opts?.daemonUrl ?? (process.env.SIGNET_DAEMON_URL?.trim() || "http://127.0.0.1:3850");
-  const configPath = resolveConfigPath(hermesHome);
+  const configPath = resolveConfigPath(hermesHome, targetRoot);
   const userPluginDir = getUserPluginTargetDir(hermesHome);
   const repoPluginDir = hermesRepo ? getRepoPluginTargetDir(hermesRepo) : null;
   const checks = [];
@@ -35857,7 +36282,7 @@ async function diagnoseHermesIntegration(opts) {
   } catch (error) {
     pluginSourceError = error instanceof Error ? error.message : String(error);
   }
-  const userPluginCurrent = pluginSourceDir !== null && pluginLooksCurrent(userPluginDir);
+  const userPluginCurrent = pluginSourceDir !== null && pluginLooksCurrent(userPluginDir, targetRoot);
   const repoPluginCurrent = pluginSourceDir !== null && repoPluginDir ? pluginLooksCurrent(repoPluginDir) : false;
   const probe = hermesRepo ? probeHermesProvider(hermesRepo) : userPluginCurrent ? { ok: true, toolNames: REQUIRED_TOOL_NAMES, error: null } : { ok: false, toolNames: [], error: "Hermes repo not found and user plugin is missing or stale" };
   const daemon = await checkDaemon(daemonUrl);
@@ -35878,9 +36303,9 @@ async function diagnoseHermesIntegration(opts) {
   checks.push({
     id: "provider-config",
     label: "Hermes memory provider",
-    ok: isProviderConfigured(hermesHome),
-    detail: existsSync2(configPath) ? `${configPath} ${isProviderConfigured(hermesHome) ? "sets" : "does not set"} memory.provider=signet` : `${configPath} does not exist`,
-    fix: isProviderConfigured(hermesHome) ? undefined : "Run `signet setup --harness hermes-agent`."
+    ok: isProviderConfigured(hermesHome, targetRoot),
+    detail: existsSync2(configPath) ? `${configPath} ${isProviderConfigured(hermesHome, targetRoot) ? "sets" : "does not set"} memory.provider=signet` : `${configPath} does not exist`,
+    fix: isProviderConfigured(hermesHome, targetRoot) ? undefined : "Run `signet setup --harness hermes-agent`."
   });
   checks.push({
     id: "user-plugin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signetai/connector-hermes-agent",
-  "version": "0.226.23",
+  "version": "0.226.25",
   "description": "Signet connector for Hermes Agent — installs Signet as a pluggable memory provider",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,8 +25,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@signetai/connector-base": "0.226.23",
-    "@signetai/core": "0.226.23"
+    "@signetai/connector-base": "0.226.25",
+    "@signetai/core": "0.226.25"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",