fix(desktop/windows): stop the uv-launched gateway before recreating the venv

[Cossackx]

Problem

On Windows, install.ps1 aborts at the venv stage with a locked-file error when a Hermes gateway is running:

Cannot remove item ...\venv\Lib\site-packages\pywin32_system32\pywintypes311.dll: Access to the path '...' is denied

The venv-recreate guard already tries to stop running processes first, but it only matches:

• taskkill /IM hermes.exe — the gateway runs as python/pythonw, not hermes.exe; and
• processes whose ExecutablePath starts with venv\Scripts\.

uv venv installs trampoline launchers: running venv\Scripts\pythonw.exe re-execs into the uv-managed base interpreter under %APPDATA%\uv\python\…, so the live gateway's ExecutablePath is that base interpreter — not under the venv. Both filters miss it, the gateway keeps the venv's .pyd/.dll files mapped, and the venv delete fails → the whole install/update aborts (and, when triggered from the desktop bootstrap, manifests as a recurring "INSTALL DIDN'T FINISH" loop).

Fix

Before deleting the venv, also stop the gateway two robust ways:

1. the pid it records in gateway_state.json, and
2. any python/pythonw whose command line runs the gateway module (hermes_cli[.main] … gateway), tree-killed.

Both require the gateway to share the installer's session, so this pairs naturally with autostart tasks registered LogonType=Interactive rather than S4U/Session-0 (a Session-0 gateway is invisible to an un-elevated installer's Get-CimInstance command-line read).

Verification

• Reproduced: with the gateway up, the existing sweep leaves it running and the venv delete fails on a locked pywintypes311.dll.
• With the patch, the command-line filter matches the live gateway — both the venv\Scripts\pythonw.exe trampoline parent and the uv-base-python.exe child (each carrying -m hermes_cli.main gateway run); the gateway_state.json pid matches the child. Tree-killing both releases the venv and the recreate succeeds.
• scripts/install.ps1 parses clean under the Windows PowerShell 5.1 AST parser.

🤖 Generated with Claude Code

[teknium1]

Thanks for the detailed Windows reproduction. This is already addressed on current main by a broader installer recovery path, so this automated hermes-sweeper review is closing it as implemented.

• b14d75f8afdb624be03cbefd19494ccc850bf367 added gateway-task disarming, repeated process sweeping, and rename-then-delete venv replacement for locked DLL scenarios; it shipped in v2026.7.7.
• Current scripts/install.ps1:1712–1730 renames the old venv before cleanup, allowing uv venv to recreate a fresh environment even if a trampoline-launched process still maps a native extension.
• Current hermes_cli/main.py:8982–8991 also recognizes uv/base-interpreter trampoline holders by command line or install-root context, with scoped matching.