System State + Fix Sequence

# Re-auth xAI PKCE flow
hermes auth xai

# Verify after auth
hermes auth status

# Confirm token is active in pool
python3 -c "import json; d=json.load(open('$HOME/.hermes/auth.json')); [print(t.get('label'), t.get('last_status')) for t in d['credential_pool'].get('xai-oauth',[])]"

# 1. Go to https://aistudio.google.com/apikey
# 2. Enable billing on your GCP project
# 3. Generate new key under billing-enabled project
# 4. Update .env on Hermes machine

nano /home/hermes/.hermes/.env
# Find: GOOGLE_API_KEY=AIzaSyB_Xpx...
# Replace with new key

# 5. Verify
hermes run -p comms-gemini "test"

# Option A: Try the current package name (may have been renamed)
npm list -g @composio/mcp 2>/dev/null
npm install -g @composio/mcp 2>/dev/null

# Option B: Switch to HTTP transport directly (no npm needed)
# Edit ~/.hermes/config.yaml mcp_servers.composio section:
# The URL https://connect.composio.dev/mcp already works as HTTP MCP
# Change transport from npm to http if hermes supports it

# Option C: Check Composio docs for current install method
# https://docs.composio.dev/mcp

# After fix, verify in mcp-stderr.log
tail -50 /home/hermes/.hermes/profiles/hermes-admin/logs/mcp-stderr.log

# The binary exists here:
ls -la /home/hermes/.hermes/profiles/content/bin/tirith

# Option A: Symlink to system PATH
sudo ln -s /home/hermes/.hermes/profiles/content/bin/tirith /usr/local/bin/tirith

# Option B: Set absolute path in root config.yaml
# Find the security section and update tirith_path:
# security:
#   tirith_enabled: true
#   tirith_path: /home/hermes/.hermes/profiles/content/bin/tirith

# Verify
tirith --version

# Create missing memories directory
mkdir -p /home/hermes/.hermes/profiles/hermes-admin/memories
touch /home/hermes/.hermes/profiles/hermes-admin/memories/MEMORY.md
touch /home/hermes/.hermes/profiles/hermes-admin/memories/USER.md

# Create references directory for operational docs
mkdir -p /home/hermes/.hermes/profiles/hermes-admin/references

# Copy MEMORY.md content from another profile as baseline
cp /home/hermes/.hermes/profiles/vault/memories/MEMORY.md \
   /home/hermes/.hermes/profiles/hermes-admin/memories/MEMORY.md

# Add channel routing rules to SOUL.md (append to existing)
cat >> /home/hermes/.hermes/profiles/hermes-admin/SOUL.md << 'EOF'

## Channel Routing

| Discord Channel | Routes To | Task Type |
|----------------|-----------|-----------|
| #ops | hermes-admin | routing, daily brief, health |
| #research | researcher | competitor intel, sources |
| #vault | vault | memory, GBrain queries |
| #story | content | scripts, 6-beat arcs |
| #server | server-ops | infra alerts, cron |
| #code | coder | code changes, scripts |
| #review | hermes-admin | Approve/Tweak/Decline |

Override: prefix any message with @[profile-name] to bypass channel default.

## Kanban Rules

- hermes-admin is the sole entity that moves tasks from backlog to ready
- Every worker ends sessions with kanban_complete or kanban_block
- Only content outputs enter the review lane
- Tasks in review expire after 24h
EOF

# researcher/config.yaml — change model section to:
model:
  default: gemini-2.5-pro
  provider: gemini
  base_url: https://generativelanguage.googleapis.com/v1beta
  providers: {}
  fallback_providers:
    - provider: gemini
      model: gemini-2.5-flash

# vault/config.yaml — change model section to:
model:
  default: gemini-2.5-flash
  provider: gemini
  base_url: https://generativelanguage.googleapis.com/v1beta
  providers: {}
  fallback_providers:
    - provider: gemini
      model: gemini-2.5-flash-lite

# comms-gemini/config.yaml — upgrade model:
model:
  default: gemini-2.5-flash
  provider: gemini

# 1. Copy content profile to content-visual
cp -r /home/hermes/.hermes/profiles/content \
      /home/hermes/.hermes/profiles/content-visual

# 2. Rename original content to content-story
mv /home/hermes/.hermes/profiles/content \
   /home/hermes/.hermes/profiles/content-story

# 3. Update content-story SOUL.md — scope to scripts/story only
# 4. Write content-visual SOUL.md — scope to stickman/thumbnails/scene prompts
# 5. Apply separate skills.include to each (story gets notebooklm; visual does not)
# 6. Test one full 6-beat story generation cycle before retiring old content profile

#!/bin/bash
# Run as: bash apply-skill-whitelists.sh
# Appends skills.include to each profile config.yaml
# Safe to run multiple times (checks before appending)

PROFILES=/home/hermes/.hermes/profiles

patch_skills() {
  local profile=$1
  local config="$PROFILES/$profile/config.yaml"
  shift
  local skills=("$@")

  if grep -q "^skills:" "$config" 2>/dev/null; then
    echo "SKIP $profile — skills block already exists"
    return
  fi

  echo "" >> "$config"
  echo "skills:" >> "$config"
  echo "  include:" >> "$config"
  for skill in "${skills[@]}"; do
    echo "    - $skill" >> "$config"
  done
  echo "PATCHED $profile"
}

patch_skills hermes-admin \
  "devops/kanban-orchestrator" \
  "devops/kanban-worker" \
  "autonomous-ai-agents/hermes-agent" \
  "software-development/plan" \
  "software-development/spike"

patch_skills coder \
  "devops/kanban-worker" \
  "autonomous-ai-agents/codex" \
  "autonomous-ai-agents/hermes-agent" \
  "github/github-pr-workflow" \
  "github/github-issues" \
  "github/codebase-inspection" \
  "software-development/systematic-debugging" \
  "software-development/test-driven-development" \
  "software-development/plan" \
  "software-development/spike" \
  "software-development/subagent-driven-development" \
  "software-development/hermes-agent-skill-authoring"

patch_skills server-ops \
  "devops/kanban-worker" \
  "devops/exposing-local-demos" \
  "software-development/hermes-s6-container-supervision" \
  "software-development/debugging-hermes-tui-commands" \
  "software-development/systematic-debugging" \
  "mcp/native-mcp" \
  "autonomous-ai-agents/hermes-agent"

patch_skills researcher \
  "devops/kanban-worker" \
  "research/arxiv" \
  "research/blogwatcher" \
  "research/llm-wiki" \
  "notebooklm" \
  "youtube-channel-research" \
  "youtube-story-method-research" \
  "social-media/xurl"

patch_skills vault \
  "devops/kanban-worker" \
  "note-taking/obsidian" \
  "productivity/notion" \
  "productivity/nano-pdf" \
  "media/youtube-content" \
  "autonomous-ai-agents/hermes-agent"

patch_skills content \
  "devops/kanban-worker" \
  "dark-story-video-prompts" \
  "youtube-story-method-research" \
  "youtube-channel-research" \
  "notebooklm" \
  "creative/creative-ideation" \
  "creative/ascii-video" \
  "media/youtube-content" \
  "creative/manim-video"

patch_skills comms-gemini \
  "devops/kanban-worker" \
  "email/himalaya" \
  "productivity/google-workspace" \
  "research/blogwatcher" \
  "social-media/xurl" \
  "note-taking/obsidian"

echo ""
echo "Done. Restart Hermes gateway for changes to take effect."
echo "hermes gateway restart"