fix(web): hide intermediate cmd.exe when opening profile terminal

[stantheman0128]

What does this PR do?

Hide the intermediate cmd.exe console flash when the portal opens a profile setup terminal on Windows. start still opens a visible terminal for the user.

Credit: Stan Shih (stantheman0128)

Related Issue

Unfiled Windows footgun found while auditing open-terminal against windows_hide_flags() coverage.

Type of Change

• Bug fix (non-breaking change that fixes an issue)

Changes Made

• hermes_cli/web_server.py: pass creationflags=windows_hide_flags() to the Windows open-terminal Popen
• tests/hermes_cli/test_web_server.py: assert creationflags on the Windows path

How to Test

1. python -m pytest tests/hermes_cli/test_web_server.py::TestNewEndpoints::test_profile_open_terminal_uses_windows_cmd -q
2. Live: CREATE_NO_WINDOW Popen of cmd.exe /c start /b ... returns exit 0

Checklist

Code

• I've read the Contributing Guide
• Conventional Commits
• Searched existing PRs (no open PR for this open-terminal site)
• PR contains only related changes
• Targeted pytest passed (2/2 open-terminal tests)
• Added/updated tests
• Tested on Windows 11

Documentation & Housekeeping

• N/A docs
• N/A config
• Cross-platform: POSIX paths unchanged; Windows-only creationflags

AI assistance

Prepared with Cursor (Grok). Human reviewed.

Evidence

python -m pytest ...test_profile_open_terminal_uses_windows_cmd ...macos... -q
..  2 passed in 6.21s

[tonydwb]

Code Review Summary

Verdict: Approved with Comment

PR #66612 — fix(web): hide intermediate cmd.exe when opening profile terminal

• Hides intermediate cmd.exe window when opening profile terminal on Windows.
• 20 additions, 4 deletions — targeted Windows UX fix.
• No security concerns.

---

Reviewed by Hermes Agent

[teknium1]

Closing after the class-level fix in PR #70205 (commit 0dbf639): Windows console flashes were caused by Hermes daemons running console-less (pythonw / DETACHED_PROCESS parents), forcing every console-subsystem child to allocate its own visible window. Main now launches every daemon (gateway, Scheduled Task, UAC handoff, dashboard, desktop backend) with a hidden console that all descendants inherit — so the spawn sites this PR flags no longer have a reachable flash under any shipped launch path (interactive terminals never flashed; children inherit the visible console there).

The sites you patched were genuinely unflagged, and the diagnosis was sound against the old launch topology — the ground just moved under it. Rather than keep growing per-site flags across an unbounded set of leaf spawns, we're standardizing on the parent-console fix. If a flash reappears on current main under a shipped launch path, that's a new bug — please file it with the flashing process name.

Thanks for the contribution and the Windows attention; sorry this one got mooted at the root.