fix(cli): the six residual pasteable-hint sites must survive a real shell

[Kyzcreig]

fix(cli): the six residual pasteable-hint sites must survive a real shell

Residual of the #889/#891 unreachable-remedy class. Eight sites across six
subsystems interpolated a HERMES_HOME-derived path -- or an interpreter or
executable path resolved under one -- bare into a backticked span the operator
is told to paste. For a home holding a space (Google Drive's "My Drive", or
the Windows C:/Users/ default where a space is the NORM) the
printed remedy does something other than what the message says.

Measured before the fix, each through its REAL printer under a real spaced
HERMES_HOME, with the printed span handed to a REAL /bin/bash:

self_repo_guard git clone --shared '' /t_123
-> ['git','clone','--shared','',
'/tmp/.../My','Drive/hermes/scratch/t_123']
#889 fixed {root} and left {scratch} bare in the SAME span.

whatsapp adapter cd && install
-> bash rc=127: /tmp/.../My: No such file or directory
(refuses outright; the remedy cannot even start)

runtime-parity git -C log --oneline HEAD...fork/main
-> ['git','-C','/tmp/.../My','Drive/.../hermes-agent', ...]

doctor / run.py <sys.executable> -m pip install ...
-> ['/tmp/.../My','Drive/venv/bin/python','-m','pip', ...]

run.py skills hermes skills install official/My Category/demo-skill
-> [...,'official/My','Category/demo-skill']

plugins_cmd x2 hermes plugins install --force --ref
-> [...,'file:///tmp/.../My','Drive/.../demo-plugin', ...]

Routed each through hermes_cli.cli_hint.hint_value, the choke point #889
established. Import direction was checked per file; five import hermes_cli
directly. staging/scripts/runtime-parity-check.py cannot: it deploys STANDALONE
to ~/.hermes/scripts/ and runs under /usr/bin/python3, where hermes_cli is not
importable (verified), so it carries a verbatim local copy with a test pinning
it to the shared implementation over six token shapes.

TESTS drive the REAL print path and judge with a REAL shell; no assertion is on
the string's shape, and the paste is never simulated with shlex (the tautology
the grandparent card was blocked for). The whatsapp span is a COMPOUND command
(cd X && Y install), not a word list, so printf would execute rather than lex
it -- that oracle instead RUNS the span and has the callee report the argv and
cwd bash actually handed it.

Verified:
tests/test_residual_cli_hint_pasteable.py 12 passed
mutation: 10 mutants, 10 KILLED -- each of the 8 sites reverted individually
reds its OWN assertion; M10 (always-quote) reds the three readable-form
guards, proving the over-fix control bites
adjacency: 468 passed across test_self_repo_guard, test_terminal_task_cwd,
test_plugins_cmd, test_plugin_install_ref, test_doctor, test_voice_command,
test_cli_hint, test_whatsapp_send_message_media
staging/tests/test_pending_restart_redrive.py green under /usr/bin/python3,
confirming the standalone shim does not break the real deploy path
ruff 0.15.20 clean; git diff --check clean

#889 has MERGED (fb52b05); this is rebased onto fork/main and stands alone.

Card: t_e587758d

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[Kyzcreig]

🤖 merged-by: apollo · lane: landing-stack · gate: BYPASS: FleetReview DISABLED by operator (Ace 09:30 PT, 'Fleet reviews currently paused'); landing on kanban approval + green CI per Ace 19:30 PT 'handle all of these yourself until landed and merged'. · why: t_e587758d APPROVED r2 EXECUTION (Argus): 6 measured remedy groups / 8 sites routed through cli_hint.hint_value; round-2 closed the ungated whatsapp/adapter.py:626 site. CI 38/0 CLEAN on 1e1f0a3, verified via check-runs API.