Complete Blueprint + Fix Sequence

# Re-auth xAI PKCE flow — restores 4 profiles at once
hermes auth xai

# Verify token is active
python3 -c "
import json
d = json.load(open('/home/hermes/.hermes/auth.json'))
for t in d['credential_pool'].get('xai-oauth', []):
    print(t.get('label'), '|', t.get('last_status'), '|', t.get('last_error_code'))
"

# Test a profile session
hermes run -p hermes-admin "ping — respond with your current model and provider"

# Confirm gbrain binary location
which gbrain || ls -la /home/hermes/.bun/bin/gbrain

# Fix Option A — symlink to /usr/local/bin (cleanest)
sudo ln -sf /home/hermes/.bun/bin/gbrain /usr/local/bin/gbrain
gbrain --version  # verify

# Fix Option B — add PATH prefix in the script
# Add to top of discord_ingest_to_gbrain.py:
import os
os.environ["PATH"] = f"/home/hermes/.bun/bin:{os.environ.get('PATH', '')}"

# After fix — test manually
python3 /home/hermes/.hermes/scripts/discord_ingest_to_gbrain.py

# Verify GBrain received the pages
gbrain list --tag discord-logs | tail -10

# Install in the Hermes venv
/home/hermes/.hermes/hermes-agent/venv/bin/pip install python-frontmatter

# Verify
/home/hermes/.hermes/hermes-agent/venv/bin/python -c "import frontmatter; print('ok')"

# Test vault-daily manually
python3 /home/hermes/.hermes/scripts/vault-daily.py

# Check vault automation lint directly
python3 /home/hermes/vault/automation/lint.py 2>&1 | tail -10

#!/bin/bash
# apply-skill-whitelists.sh — patches all profiles at once
P=/home/hermes/.hermes/profiles

patch() {
  local name=$1; shift
  local cfg="$P/$name/config.yaml"
  if grep -q "^skills:" "$cfg" 2>/dev/null; then
    echo "SKIP $name (already has skills block)"
    return
  fi
  { echo ""; echo "skills:"; echo "  include:"; for s in "$@"; do echo "    - $s"; done; } >> "$cfg"
  echo "PATCHED $name"
}

patch hermes-admin \
  "devops/kanban-orchestrator" "devops/kanban-worker" \
  "autonomous-ai-agents/hermes-agent" \
  "software-development/plan" "software-development/spike" \
  "software-development/debugging-hermes-tui-commands"

patch coder \
  "devops/kanban-worker" "autonomous-ai-agents/codex" \
  "autonomous-ai-agents/hermes-agent" \
  "github/github-pr-workflow" "github/github-issues" \
  "github/codebase-inspection" \
  "software-development/systematic-debugging" \
  "software-development/test-driven-development" \
  "software-development/plan" "software-development/subagent-driven-development" \
  "software-development/hermes-agent-skill-authoring"

patch server-ops \
  "devops/kanban-worker" "devops/exposing-local-demos" \
  "software-development/hermes-s6-container-supervision" \
  "software-development/debugging-hermes-tui-commands" \
  "software-development/systematic-debugging" \
  "mcp/native-mcp" "autonomous-ai-agents/hermes-agent"

patch researcher \
  "devops/kanban-worker" "research/arxiv" "research/blogwatcher" \
  "research/llm-wiki" "notebooklm" \
  "youtube-channel-research" "youtube-story-method-research" \
  "social-media/xurl"

patch vault \
  "devops/kanban-worker" "mcp/gbrain" "mcp/native-mcp" \
  "note-taking/obsidian" "productivity/notion" \
  "media/youtube-content" "autonomous-ai-agents/hermes-agent"

patch content \
  "devops/kanban-worker" "dark-story-video-prompts" \
  "youtube-story-method-research" "youtube-channel-research" \
  "notebooklm" "creative/creative-ideation" \
  "creative/ascii-video" "creative/manim-video" "media/youtube-content"

patch comms-gemini \
  "devops/kanban-worker" "email/himalaya" \
  "productivity/google-workspace" "research/blogwatcher" \
  "social-media/xurl" "note-taking/obsidian"

echo ""
echo "All patched. Restart gateway:"
echo "hermes gateway restart"

# Check current package name (Composio renamed their npm package)
npm search composio mcp 2>/dev/null | head -10

# Try the new package name
npm install -g @composio/mcp 2>/dev/null
# or:
npm install -g composio-mcp 2>/dev/null

# If no npm package works, switch config to HTTP transport
# The URL https://connect.composio.dev/mcp already works as HTTP MCP
# Check Hermes docs for http mcp_server type vs npm type

# After fix — verify in mcp logs
tail -50 /home/hermes/.hermes/profiles/hermes-admin/logs/mcp-stderr.log

# Binary is already at ~/.hermes/bin/tirith
ls -la /home/hermes/.hermes/bin/tirith

# Symlink to system PATH
sudo ln -sf /home/hermes/.hermes/bin/tirith /usr/local/bin/tirith
tirith --version

# OR update root config.yaml security section:
# security:
#   tirith_enabled: true
#   tirith_path: /home/hermes/.hermes/bin/tirith

# Must export PATH first in all shells/crons
export PATH="/home/hermes/.bun/bin:$PATH"

gbrain list                    # list all pages
gbrain get [slug]              # get a page
gbrain stats                   # page/link/timeline counts
gbrain doctor                  # health check
gbrain graph --depth 1         # link graph
gbrain timeline [slug]         # timeline entries for a page

# For writes — prefer MCP tools when available
# mcp_gbrain_put_page > gbrain CLI for put operations
# CLI put sometimes hangs — MCP is reliable

# Backfill missing Discord logs
export PATH="/home/hermes/.bun/bin:$PATH"
python3 /home/hermes/.hermes/scripts/discord_ingest_to_gbrain.py