debugging-hermes-tui-commands — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited debugging-hermes-tui-commands (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Hermes slash commands span three layers — Python command registry, tui_gateway JSON-RPC bridge, and the Ink/TypeScript frontend. When a command misbehaves (missing from autocomplete, works in CLI but not TUI, config persists but UI doesn't update), the bug is almost always one layer being out of sync with another.
Use this skill when you encounter issues with slash commands in the Hermes TUI, particularly when commands aren't showing in autocomplete, aren't working properly in the TUI, or need to be added/updated.
Python backend (hermes_cli/commands.py) <- canonical COMMAND_REGISTRY
│
▼
TUI gateway (tui_gateway/server.py) <- slash.exec / command.dispatch
│
▼
TUI frontend (ui-tui/src/app/slash/) <- local handlers + fallthroughCommand definitions must be registered consistently across Python and TypeScript to work properly. The Python COMMAND_REGISTRY is the source of truth for: CLI dispatch, gateway help, Telegram BotCommand menu, Slack subcommand map, and autocomplete data shipped to Ink.
search_files --pattern "/commandname" --file_glob "*.ts" --path ui-tui/
search_files --pattern "/commandname" --file_glob "*.tsx" --path ui-tui/ read_file ui-tui/src/app/slash/commands/core.ts
# If not there:
search_files --pattern "commandname" --path ui-tui/src/app/slash/commands --target files search_files --pattern "CommandDef" --file_glob "*.py" --path hermes_cli/
search_files --pattern "commandname" --path hermes_cli/commands.py --context 3 search_files --pattern "complete.slash|slash.exec" --path tui_gateway/If a command exists in the TUI but doesn't show in autocomplete:
CommandDef entry to COMMAND_REGISTRY in hermes_cli/commands.py: CommandDef("commandname", "Description of the command", "Session",
cli_only=True, aliases=("alias",),
args_hint="[arg1|arg2|arg3]",
subcommands=("arg1", "arg2", "arg3")),cli_only vs gateway availability carefully:cli_only=True — only in the interactive CLI/TUIgateway_only=True — only in messaging platformsgateway_config_gate="display.foo" — config-gated availability in the gatewaysubcommands matches the expected tab-completion options shown by the TUI.HermesCLI.process_command() in cli.py: elif canonical == "commandname":
self._handle_commandname(cmd_original)gateway/run.py: if canonical == "commandname":
return await self._handle_commandname(event)COMMAND_REGISTRY in hermes_cli/commands.py. Autocomplete data ships from Python.tui_gateway/server.py and the frontend handler in ui-tui/src/app/createSlashHandler.ts. If the command is local-only in Ink, it must be handled in app.tsx built-in branch; otherwise it falls through to slash.exec and must have a Python handler.cli.py::process_command and the TUI's local handler. Local TUI handlers take precedence over gateway dispatch.config.set is not enough. Also patch the relevant nanostore state immediately (usually patchUiState(...)) and pass any new state through rendering components. Example: /details collapsed must update live detail visibility, not just save details_mode; in-session global /details <mode> may need a separate command-override flag so live commands can override built-in section defaults while startup/config sync preserves default-expanded thinking/tools behavior.GATEWAY_KNOWN_COMMANDS (derived from COMMAND_REGISTRY automatically) includes the canonical name. If the command is cli_only with a gateway_config_gate, verify the gated config value is truthy.When surface-level inspection doesn't reveal the bug:
python-debugpy skill to break inside _SlashWorker.exec or the command handler. remote-pdb set at the handler entry is the fastest path.node-inspect-debugger skill to break in app.tsx's slash dispatch or the local command branch. sb('dist/app.js', <line>) after npm run build.COMMAND_REGISTRY entry against the TUI's local command list side-by-side.CommandDef (e.g., "Session", "Configuration", "Tools & Skills", "Info", "Exit")aliases tuple — no other file changes are needed, everything downstream (Telegram menu, Slack mapping, autocomplete, help) derives from itsubcommands tuple in CommandDef matches what's in the TUI codecli_only=True commands won't work in gateway/messaging platforms — unless you add a gateway_config_gate and the gate is truthyStreamingAssistant/ToolTrail and transcript/pending MessageLine rows. A /clean pass should explicitly check both.npm --prefix ui-tui run build) before testing — tsx watch mode may lag on first launchAfter fixing:
cd /home/bb/hermes-agent && npm --prefix ui-tui run build hermes --tui/ and verify the command appears in autocomplete suggestions with the expected description and args hint.read_file ~/.hermes/config.yaml)scripts/run_tests.sh tests/gateway/).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.