Bug: Gateway mode checkpoints not working despite checkpoints.enabled: true in config

Description

When running Hermes in gateway mode, the /rollback command shows "Checkpoints are not enabled" even though checkpoints.enabled: true is set in config.yaml.

Even after enabling checkpoints in config, the /rollback command lists no checkpoints and cannot restore any filesystem state, making the feature useless in gateway mode.

Reproduction Steps

1. Set in config.yaml:

   checkpoints:
     enabled: true
     max_snapshots: 50

2. Start Hermes in gateway mode
3. Perform file operations (e.g., write_file, patch)
4. Run /rollback command
5. Observe: "No checkpoints found for /root"

Root Cause

In gateway/run.py, when creating the main AIAgent instance (line ~12276), the checkpoints_enabled and checkpoint_max_snapshots parameters are NOT passed to the AIAgent constructor:

# gateway/run.py - line ~12276 (current code)
agent = AIAgent(
    model=turn_route["model"],
    **turn_route["runtime"],
    max_iterations=max_iterations,
    # ... other params ...
    fallback_model=self._fallback_model,
    # ❌ MISSING: checkpoints_enabled and checkpoint_max_snapshots
)

Compare with cli.py (lines 3609-3610) which correctly passes these parameters:

# cli.py - correct implementation
agent = AIAgent(
    # ...
    checkpoints_enabled=self.checkpoints_enabled,
    checkpoint_max_snapshots=self.checkpoint_max_snapshots,
)

As a result:

• The AIAgent instance in gateway mode always uses default values (checkpoints_enabled=False)
• CheckpointManager.ensure_checkpoint() is never called before file operations
• Shadow repos (.hermes-shadow) are never created
• /rollback has nothing to restore

Expected Behavior

When checkpoints.enabled: true is set in config.yaml, the gateway-mode agent should:

1. Initialize CheckpointManager with correct enabled=True
2. Call ensure_checkpoint() before file-mutating tool calls
3. Create shadow repos and save checkpoints
4. Allow /rollback to list and restore checkpoints

Suggested Fix

In gateway/run.py, update the AIAgent instantiation (~line 12276) to pass checkpoint config:

# Read checkpoint config
cp_cfg = {}
try:
    import yaml as _y
    _cfg_path = _hermes_home / "config.yaml"
    if _cfg_path.exists():
        with open(_cfg_path, encoding="utf-8") as _f:
            _data = _y.safe_load(_f) or {}
        cp_cfg = _data.get("checkpoints", {})
        if isinstance(cp_cfg, bool):
            cp_cfg = {"enabled": cp_cfg}
except Exception:
    pass

# Then in AIAgent creation:
agent = AIAgent(
    model=turn_route["model"],
    **turn_route["runtime"],
    # ... existing params ...
    checkpoints_enabled=cp_cfg.get("enabled", False),
    checkpoint_max_snapshots=cp_cfg.get("max_snapshots", 50),
)

Environment

• Hermes version: (check with hermes --version)
• Python version: 3.11
• OS: WSL2 (Ubuntu)
• Gateway mode: yes
• Config: checkpoints.enabled: true

Additional Context

• CLI mode works correctly (cli.py passes the parameters)
• The /rollback command code itself is correct - it properly initializes CheckpointManager when invoked
• The bug is that the agent never creates checkpoints during execution
• Related: The CheckpointManager design doc says it should be called by AIAgent, but gateway mode doesn't wire it up