# NousResearch/hermes-agent · Gateway blocks invalid workspace paths in systemd units

## Open now

- 1 issue, 1 PR open on GitHub.
- #131164: \`hermes gateway restart\` run from a dependency-generation venv script rewrites the systemd unit to a workspace launcher → crash loop "no dependency environment is committed"
- PR #133030: fix(gateway): bind persisted supervisor commands to the install root

These items address a scenario where a dependency-generation or PM-generation workspace context incorrectly influences gateway configuration, causing bad systemd unit writes. The fixes add refusals in the gateway to reject such paths or service-definition writes originating from those workspace types.

## TL;DR

- 4 member(s): 1 open issue(s), 0 closed issue(s), 1 open PR(s), 0 merged PR(s), 2 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.50`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #131164: \`hermes gateway restart\` run from a dependency-generation venv script rewrites the systemd unit to a workspace launcher → crash loop "no dependency environment is committed"

## Prior & competing PRs

- **#131173: fix(gateway): refuse service-definition writes from a PM generation workspace**. closed without merge
  - maintainer direction: category `superseded_by_pr`; implication `superseded`; refs `#133030`
- **#131192: fix(gateway): refuse workspace venv paths in systemd unit generation**. closed without merge
  - maintainer direction: category `silent_close`; implication `active`
- **#133030: fix(gateway): bind persisted supervisor commands to the install root**. open
  - maintainer direction: category `implemented_elsewhere`; implication `superseded`; refs `7eb649ad0d`
  - files: `hermes_bootstrap.py`, `hermes_cli/gateway.py`, `hermes_cli/gateway_generation_guards.py`, `hermes_cli/gateway_launchd.py`, `pm/cli.py`, `pm/environments.py`, `tests/hermes_cli/test_gateway_generation_guards.py`, `website/docs/developer-guide/cli-internals.md`

## Fix status

- No merged fix on record.
- Subsystem: `gateway`