fix: resolve 7 identified issues [automated]

Dockerfile

@@ -57,11 +57,12 @@ RUN chmod -R a+rX /opt/hermes
 
 # ---------- Python virtualenv ----------
 RUN uv venv && \
-    uv pip install --no-cache-dir -e ".[all]"
+    uv pip install --no-cache-dir -e ".[all]" && \
+    chown -R hermes:hermes /opt/hermes/.venv
 
 # ---------- Runtime ----------
 ENV HERMES_WEB_DIST=/opt/hermes/hermes_cli/web_dist
 ENV HERMES_HOME=/opt/data
-ENV PATH="/opt/data/.local/bin:${PATH}"
+ENV PATH="/opt/hermes/.venv/bin:/opt/data/.local/bin:${PATH}"
 VOLUME [ "/opt/data" ]
 ENTRYPOINT [ "/usr/bin/tini", "-g", "--", "/opt/hermes/docker/entrypoint.sh" ]

acp_adapter/session.py

@@ -570,6 +570,7 @@ def _make_agent(
             "quiet_mode": True,
             "session_id": session_id,
             "model": model or default_model,
+            "fallback_model": config.get("fallback_providers") or config.get("fallback_model") or None,
         }
 
         try:
@@ -587,6 +588,17 @@ def _make_agent(
         except Exception:
             logger.debug("ACP session falling back to default provider resolution", exc_info=True)
 
+        # Keep ACP behavior aligned with CLI/gateway: honor configured fallback
+        # chains so editor integrations can fail over on transient provider errors.
+        try:
+            fb = config.get("fallback_providers") or config.get("fallback_model") or []
+            if isinstance(fb, dict):
+                fb = [fb] if fb.get("provider") and fb.get("model") else []
+            if fb:
+                kwargs["fallback_model"] = fb
+        except Exception:
+            logger.debug("Could not load fallback_providers for ACP agent", exc_info=True)
+
         _register_task_cwd(session_id, cwd)
         agent = AIAgent(**kwargs)
         # ACP stdio transport requires stdout to remain protocol-only JSON-RPC.