fix: version display v0.12.0 + auto-inject MEDIA: from execute_code

- start.sh: Add version patch block to force __version__='0.12.0' in __init__.py
Maps git date tags (v2026.4.30) to semver (0.12.0) for correct banner display
- patch_auto_media.py: Add Pass 2 response text scanning with regex to catch
files created by execute_code/terminal that don't use write_file tool
- patch_resolve_media_paths.py: Add /data/ to media search directories so
files saved to /data/ root (not just /data/hermes/uploads/) are found

scripts/patch_auto_media.py

@@ -1,17 +1,24 @@
 #!/usr/bin/env python3
-"""Patch hermes-agent gateway to auto-inject MEDIA: tags from write_file tool calls.
+"""Patch hermes-agent gateway to auto-inject MEDIA: tags from tool calls and response text.
 
-Problem: When the LLM creates files via write_file but doesn't include MEDIA: tags
-in its final response, the gateway has no way to detect and deliver those files as
-native attachments. The LLM may say "I've sent the file" when it actually only saved
-it locally.
+Problem: When the LLM creates files via write_file/execute_code/terminal but doesn't
+include MEDIA: tags in its final response, the gateway has no way to detect and deliver
+those files as native attachments. The LLM may say "I've sent the file" (hallucination)
+or "I can't send attachments" (also hallucination) when it actually only saved locally.
 
-Solution: After the existing TTS MEDIA: propagation block in _run_agent(), scan the
-assistant messages for write_file tool calls. Extract file paths from the tool call
-arguments and append MEDIA: tags for files that:
+Solution: After the existing TTS MEDIA: propagation block in _run_agent(), run TWO passes:
+
+Pass 1 — Tool call scanning: scan assistant messages for write_file tool calls and
+extract file paths from the arguments.
+
+Pass 2 — Response text scanning: scan final_response for file paths that match
+document/media extensions and exist on disk. This catches files created by
+execute_code, terminal, or any other tool that writes to disk.
+
+Files are only injected if:
   1. Actually exist on disk
   2. Have a document/media extension
-  3. Are not already referenced in the final_response
+  3. Are not already referenced in the final_response via MEDIA: tag
 
 This mirrors the existing TTS propagation pattern (gateway/run.py ~line 10968).
 """
@@ -35,10 +42,10 @@ def patch_gateway(filepath: str):
 
     new = '''                    final_response = final_response + "\n" + "\n".join(unique_tags)
             
-            # Auto-inject MEDIA: tags for write_file tool results.
-            # When the LLM creates files via write_file but forgets to include
-            # MEDIA: tags in its response, this ensures the files are still
-            # delivered as native attachments on Feishu/WeChat/etc.
+            # Auto-inject MEDIA: tags for tool-created files.
+            # When the LLM creates files but forgets to include MEDIA: tags in its
+            # response, this ensures the files are still delivered as native attachments
+            # on Feishu/WeChat/etc.
             _doc_exts = {
                 '.md', '.txt', '.csv', '.json', '.xml', '.yaml', '.yml', '.toml', '.log',
                 '.pdf', '.doc', '.docx', '.xls', '.xlsx', '.ppt', '.pptx',
@@ -48,6 +55,8 @@ def patch_gateway(filepath: str):
                 '.ogg', '.opus', '.mp3', '.wav', '.m4a',
             }
             _auto_media_paths = []
+
+            # Pass 1: Scan write_file tool calls for file paths
             for _msg in result.get("messages", []):
                 if _msg.get("role") != "assistant":
                     continue
@@ -67,26 +76,39 @@ def patch_gateway(filepath: str):
                     if not _fpath:
                         continue
                     _fpath = os.path.expanduser(_fpath)
-                    # Only inject for files with document/media extensions
                     _ext = os.path.splitext(_fpath)[1].lower()
                     if _ext not in _doc_exts:
                         continue
-                    # File must actually exist
                     if not os.path.isfile(_fpath):
                         continue
-                    # Avoid duplicates and paths already in response
                     _media_tag = f"MEDIA:{_fpath}"
                     if _media_tag in final_response:
                         continue
-                    if _fpath in final_response:
-                        continue
                     _auto_media_paths.append(_media_tag)
 
+            # Pass 2: Scan final_response text for file paths created by
+            # execute_code/terminal or any other tool.
+            # Matches patterns like: /data/hermes/uploads/report.md
+            #                         "/tmp/weather.md"
+            #                         文件已保存至：/data/hermes/weather.md
+            _path_re = re.compile(r'["\'`\u201c]?(/[^\s"\'`\u201d<>|]+?\.(?:md|txt|csv|json|xml|yaml|yml|log|pdf|doc|docx|xls|xlsx|ppt|pptx|html|htm|png|jpg|jpeg|gif|webp|mp4|mp3|wav|zip))\b', re.IGNORECASE)
+            for _match in _path_re.finditer(final_response):
+                _candidate = _match.group(1)
+                _candidate = os.path.expanduser(_candidate)
+                if not os.path.isfile(_candidate):
+                    continue
+                _media_tag = f"MEDIA:{_candidate}"
+                if _media_tag in final_response:
+                    continue
+                if _media_tag in _auto_media_paths:
+                    continue
+                _auto_media_paths.append(_media_tag)
+
             if _auto_media_paths:
                 logger.info(
-                    "Auto-injecting %d MEDIA: tag(s) from write_file tool calls: %s",
+                    "Auto-injecting %d MEDIA: tag(s): %s",
                     len(_auto_media_paths),
-                    ", ".join(os.path.basename(p.split(":")[1]) for p in _auto_media_paths),
+                    ", ".join(os.path.basename(p.split(":", 1)[1]) for p in _auto_media_paths),
                 )
                 final_response = final_response + "\n" + "\n".join(_auto_media_paths)
             
@@ -102,7 +124,7 @@ def patch_gateway(filepath: str):
     with open(filepath, 'w') as f:
         f.write(content)
 
-    print(f"Patched {filepath}: auto-inject MEDIA: tags from write_file tool calls")
+    print(f"Patched {filepath}: auto-inject MEDIA: tags from write_file + response text scanning")
 
 
 if __name__ == "__main__":

scripts/patch_resolve_media_paths.py

@@ -41,7 +41,7 @@ def patch_file(filepath: str):
                 # Auto-resolve relative media paths to absolute paths.
                 # The LLM often uses bare filenames in MEDIA: tags (e.g. "report.md")
                 # which fail because send_document() can't find them.
-                _media_search_dirs = ['/tmp', '/data/hermes/uploads', os.getcwd()]
+                _media_search_dirs = ['/tmp', '/data/hermes/uploads', '/data', os.getcwd()]
                 _hermes_home = os.path.expanduser('~/.hermes')
                 if _hermes_home not in _media_search_dirs:
                     _media_search_dirs.append(_hermes_home)

start.sh

@@ -708,6 +708,26 @@ node index.js >> /data/hermes/logs/webui.log 2>&1 &
 WEBUI_PID=$!
 echo "[$(date)] WebUI BFF PID: $WEBUI_PID"
 
+# ── Force-correct version display ──
+# Ensure __init__.py shows semver (e.g. 0.12.0) not git tag date (e.g. 2026.4.30)
+# This runs after any potential auto-update has changed the files
+HERMES_INIT="/app/hermes-agent/hermes_cli/__init__.py"
+if [ -f "$HERMES_INIT" ]; then
+    # Read the git tag from version file to map date → semver
+    CURRENT_TAG="$(cat /data/hermes/agent.version 2>/dev/null | head -1)"
+    CURRENT_TAG="${CURRENT_TAG:-v2026.4.30}"
+    # Build version mapping: date-tag → semver
+    case "$CURRENT_TAG" in
+        v2026.4.30) SEMVER="0.12.0"; RDATE="2026.4.30" ;;
+        *) SEMVER=""; RDATE="" ;;
+    esac
+    if [ -n "$SEMVER" ]; then
+        sed -i "s/__version__\s*=\s*\"[^"]*\"/__version__ = \"$SEMVER\"/" "$HERMES_INIT"
+        sed -i "s/__release_date__\s*=\s*\"[^"]*\"/__release_date__ = \"$RDATE\"/" "$HERMES_INIT"
+        echo "Version patched: v$SEMVER ($RDATE)"
+    fi
+fi
+
 # Trigger hermes-agent auto-update in background (framework first, then UI)
 update_hermes_agent_background &