fix(hermes): replay Discord facade connection fixes

[ericksoa]

Replays the resolved diff from #3238 onto a maintainer-owned branch so maintainers can edit it and run the normal validation gates.

Original PR/author: #3238 by Ben Barclay / NousResearch.

Changes:

• Runs the Hermes Discord decode proxy and facade under /opt/hermes/.venv/bin/python.
• Preserves the target branch's hardened recovery log setup and exact port readiness checks.
• Adds the preload, policy, and test coverage needed by the Discord facade path.

Local validation:

• npm run build:cli
• npx vitest run src/lib/agent/runtime.test.ts test/sandbox-init.test.ts test/sandbox-provisioning.test.ts test/policies.test.ts
• git diff --check --cached && git diff --check

Signed-off-by: Aaron Erickson aerickson@nvidia.com

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: a4c4373c-7cd5-4166-84db-a7cc78ff39b3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch aerickson/pr-3238-discord-facade-replay

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[ericksoa]

Closing this wrong-base replay as superseded by #3293, which replays the Discord facade stack onto main and adds the maintainer finish commit there.