From 3299be6bdb0a604b3730481004d2e0e33d0e83c7 Mon Sep 17 00:00:00 2001
From: Teknium <127238744+teknium1@users.noreply.github.com>
Date: Fri, 8 May 2026 14:42:46 -0700
Subject: [PATCH] docs(windows): add native Windows guide + install one-liner
on landing page (#22089)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
New page: website/docs/user-guide/windows-native.md β comprehensive
Windows-native deep dive covering:
- Quick install (irm | iex) and parameterized form
- What the installer does end-to-end (uv, Python 3.11, Node 22,
PortableGit, messaging SDK bootstrap)
- Feature matrix: native Windows vs WSL2 (dashboard /chat is WSL-only)
- How Hermes runs shell commands on Windows (Git Bash resolution,
HERMES_GIT_BASH_PATH override, MinGit layout pitfall)
- UTF-8 console shim (configure_windows_stdio, opt-out via
HERMES_DISABLE_WINDOWS_UTF8)
- Editor handling (notepad default, VSCode/Notepad++/nvim overrides,
why Ctrl-X Ctrl-E used to silently do nothing)
- Ctrl+Enter for newline in the CLI
- Gateway as a Scheduled Task (schtasks + Startup-folder fallback,
pythonw.exe detached spawn, why not a Windows Service)
- Data layout (%LOCALAPPDATA%\hermes vs %USERPROFILE%\.hermes split)
- PATH after install, environment variables, uninstall
- Process management internals (bpo-14484 os.kill(pid, 0) footgun,
_pid_exists primitive, check-windows-footguns.py CI gate)
- 10+ concrete pitfalls with fixes
Also:
- docs/index.md: add inline 'Install' section with both Linux/macOS
curl and Windows irm|iex one-liners right under the hero CTAs.
Updates the quick-links row to include 'native Windows'.
- sidebars.ts: add Windows (Native) entry above Windows (WSL2).
- windows-wsl-quickstart.md: point native-install cross-link at the
new dedicated page (was going to installation.md#windows-native).
- reference/environment-variables.md: document HERMES_GIT_BASH_PATH
and HERMES_DISABLE_WINDOWS_UTF8 (previously undocumented).
---
website/docs/index.md | 20 +-
.../docs/reference/environment-variables.md | 2 +
website/docs/user-guide/windows-native.md | 297 ++++++++++++++++++
.../docs/user-guide/windows-wsl-quickstart.md | 2 +-
website/sidebars.ts | 1 +
5 files changed, 320 insertions(+), 2 deletions(-)
create mode 100644 website/docs/user-guide/windows-native.md
diff --git a/website/docs/index.md b/website/docs/index.md
index db7106d955..a4f9878c38 100644
--- a/website/docs/index.md
+++ b/website/docs/index.md
@@ -16,6 +16,24 @@ The self-improving AI agent built by [Nous Research](https://nousresearch.com).
View on GitHub
+## Install
+
+**Linux / macOS / WSL2**
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash
+```
+
+**Windows (native, PowerShell)**
+
+```powershell
+irm https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.ps1 | iex
+```
+
+**Android (Termux)** β same curl one-liner as Linux; the installer auto-detects Termux.
+
+See the full **[Installation Guide](/docs/getting-started/installation)** for what the installer does, the per-user vs root layout, and Windows-specific notes.
+
## What is Hermes Agent?
It's not a coding copilot tethered to an IDE or a chatbot wrapper around a single API. It's an **autonomous agent** that gets more capable the longer it runs. It lives wherever you put it β a $5 VPS, a GPU cluster, or serverless infrastructure (Daytona, Modal) that costs nearly nothing when idle. Talk to it from Telegram while it works on a cloud VM you never SSH into yourself. It's not tied to your laptop.
@@ -24,7 +42,7 @@ It's not a coding copilot tethered to an IDE or a chatbot wrapper around a singl
| | |
|---|---|
-| π **[Installation](/docs/getting-started/installation)** | Install in 60 seconds on Linux, macOS, or WSL2 |
+| π **[Installation](/docs/getting-started/installation)** | Install in 60 seconds on Linux, macOS, WSL2, or native Windows |
| π **[Quickstart Tutorial](/docs/getting-started/quickstart)** | Your first conversation and key features to try |
| πΊοΈ **[Learning Path](/docs/getting-started/learning-path)** | Find the right docs for your experience level |
| βοΈ **[Configuration](/docs/user-guide/configuration)** | Config file, providers, models, and options |
diff --git a/website/docs/reference/environment-variables.md b/website/docs/reference/environment-variables.md
index ff4ad11a2e..b82b385f50 100644
--- a/website/docs/reference/environment-variables.md
+++ b/website/docs/reference/environment-variables.md
@@ -92,6 +92,8 @@ All variables go in `~/.hermes/.env`. You can also set them with `hermes config
| `HERMES_LOCAL_STT_COMMAND` | Optional local speech-to-text command template. Supports `{input_path}`, `{output_dir}`, `{language}`, and `{model}` placeholders |
| `HERMES_LOCAL_STT_LANGUAGE` | Default language passed to `HERMES_LOCAL_STT_COMMAND` or auto-detected local `whisper` CLI fallback (default: `en`) |
| `HERMES_HOME` | Override Hermes config directory (default: `~/.hermes`). Also scopes the gateway PID file and systemd service name, so multiple installations can run concurrently |
+| `HERMES_GIT_BASH_PATH` | **Windows only.** Override `bash.exe` discovery for the terminal tool. Points at any bash β full Git-for-Windows install, WSL bash via symlink, MSYS2, Cygwin. The installer sets this automatically to the PortableGit it provisioned. See the [Windows (Native) Guide](../user-guide/windows-native.md#how-hermes-runs-shell-commands-on-windows) |
+| `HERMES_DISABLE_WINDOWS_UTF8` | **Windows only.** Set to `1` to disable the UTF-8 stdio shim (`configure_windows_stdio()`) and fall back to the console's locale code page. Useful for bisecting encoding bugs; rarely the right setting in normal operation |
| `HERMES_KANBAN_HOME` | Override the shared Hermes root that anchors the kanban board (db + workspaces + worker logs). Falls back to `get_default_hermes_root()` (the parent of any active profile). Useful for tests and unusual deployments |
| `HERMES_KANBAN_BOARD` | Pin the active kanban board for this process. Takes precedence over `~/.hermes/kanban/current`; the dispatcher injects this into worker subprocess env so workers physically cannot see tasks on other boards. Defaults to `default`. Slug validation: lowercase alphanumerics + hyphens + underscores, 1-64 chars |
| `HERMES_KANBAN_DB` | Pin the kanban database file path directly (highest precedence; beats `HERMES_KANBAN_BOARD` and `HERMES_KANBAN_HOME`). The dispatcher injects this into worker subprocess env so profile workers converge on the dispatcher's board |
diff --git a/website/docs/user-guide/windows-native.md b/website/docs/user-guide/windows-native.md
new file mode 100644
index 0000000000..5425d46acc
--- /dev/null
+++ b/website/docs/user-guide/windows-native.md
@@ -0,0 +1,297 @@
+---
+title: "Windows (Native) Guide"
+description: "Run Hermes Agent natively on Windows 10 / 11 β install, feature matrix, UTF-8 console, Git Bash, gateway as a Scheduled Task, editor handling, PATH, uninstall, and common pitfalls"
+sidebar_label: "Windows (Native)"
+sidebar_position: 3
+---
+
+# Windows (Native) Guide
+
+Hermes runs natively on Windows 10 and Windows 11 β no WSL, no Cygwin, no Docker. This page is the deep dive: what works natively, what's WSL-only, what the installer actually does, and the Windows-specific knobs you might need to touch.
+
+If you just want to install, the one-liner on the [landing page](/) or [Installation page](../getting-started/installation#windows-native-powershell) is all you need. Come back here when something surprises you.
+
+:::tip Want WSL instead?
+If you prefer a real POSIX environment (for the dashboard's embedded terminal, `fork` semantics, Linux-style file watchers, etc.), see the **[Windows (WSL2) Guide](./windows-wsl-quickstart.md)**. Both coexist cleanly: native data lives under `%LOCALAPPDATA%\hermes`, WSL data lives under `~/.hermes`.
+:::
+
+## Quick install
+
+Open **PowerShell** (or Windows Terminal) and run:
+
+```powershell
+irm https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.ps1 | iex
+```
+
+No admin rights required. The installer goes to `%LOCALAPPDATA%\hermes\` and adds `hermes` to your **User PATH** β open a new terminal after it finishes.
+
+**Installer options** (requires the scriptblock form to pass parameters):
+
+```powershell
+& ([scriptblock]::Create((irm https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.ps1))) -NoVenv -SkipSetup -Branch main
+```
+
+| Parameter | Default | Purpose |
+|---|---|---|
+| `-Branch` | `main` | Clone a specific branch (useful for testing PRs) |
+| `-NoVenv` | off | Skip venv creation (advanced β you manage Python yourself) |
+| `-SkipSetup` | off | Skip the post-install `hermes setup` wizard |
+| `-HermesHome` | `%LOCALAPPDATA%\hermes` | Override data directory |
+| `-InstallDir` | `%LOCALAPPDATA%\hermes\hermes-agent` | Override code location |
+
+## What the installer actually does
+
+Top-to-bottom, in order:
+
+1. **Bootstraps `uv`** β Astral's fast Python manager. Installed to `%USERPROFILE%\.local\bin`.
+2. **Installs Python 3.11** via `uv`. No existing Python needed.
+3. **Installs Node.js 22** (winget if available, else a portable Node tarball unpacked under `%LOCALAPPDATA%\hermes\node`). Used for the browser tool and the WhatsApp bridge.
+4. **Installs portable Git** β if `git` is already on PATH the installer uses it; otherwise it downloads a trimmed, self-contained **PortableGit** (~45 MB, from the official `git-for-windows` release) to `%LOCALAPPDATA%\hermes\git`. No admin, no Windows installer registry, no interference with anything else on the box.
+5. **Clones the repo** to `%LOCALAPPDATA%\hermes\hermes-agent` and creates a virtualenv inside it.
+6. **Tiered `uv pip install`** β tries `.[all]` first, falls back to progressively smaller sets (`[messaging,dashboard,ext]` β `[messaging]` β `.`) if a `git+https` dep flakes on rate-limited GitHub. Prevents "single flake drops you to a bare install" failure mode.
+7. **Auto-installs messaging SDKs** keyed off `.env` β if `TELEGRAM_BOT_TOKEN` / `DISCORD_BOT_TOKEN` / `SLACK_BOT_TOKEN` / `SLACK_APP_TOKEN` / `WHATSAPP_ENABLED` are present, runs `python -m ensurepip --upgrade` and targeted `pip install` calls so each platform's SDK is actually importable.
+8. **Sets `HERMES_GIT_BASH_PATH`** to the resolved `bash.exe` so Hermes finds it deterministically in fresh shells.
+9. **Adds `%LOCALAPPDATA%\hermes\bin` to User PATH** β exposes the `hermes` command after you open a new terminal.
+10. **Runs `hermes setup`** β the normal first-run wizard (model, provider, toolsets). Skip with `-SkipSetup`.
+
+## Feature matrix
+
+Everything except the dashboard's embedded terminal pane runs natively on Windows.
+
+| Feature | Native Windows | WSL2 |
+|---|---|---|
+| CLI (`hermes chat`, `hermes setup`, `hermes gateway`, β¦) | β | β |
+| Interactive TUI (`hermes --tui`) | β | β |
+| Messaging gateway (Telegram, Discord, Slack, WhatsApp, 15+ platforms) | β | β |
+| Cron scheduler | β | β |
+| Browser tool (Chromium via Node) | β | β |
+| MCP servers (stdio and HTTP) | β | β |
+| Local Ollama / LM Studio / llama-server | β | β (via WSL networking) |
+| Web dashboard (sessions, jobs, metrics, config) | β | β |
+| Dashboard `/chat` embedded terminal pane | β (needs POSIX PTY) | β |
+| Auto-start at login | β (schtasks) | β (systemd) |
+
+The dashboard's `/chat` tab embeds a real terminal via a POSIX PTY (`ptyprocess`). Native Windows has no equivalent primitive; Python's `pywinpty` / Windows ConPTY would work but is a separate implementation β treat as future work. **The rest of the dashboard works natively** β only that one tab shows a "use WSL2 for this" banner.
+
+## How Hermes runs shell commands on Windows
+
+Hermes's terminal tool runs commands through **Git Bash**, same strategy Claude Code uses. This sidesteps the POSIX-vs-Windows gap without rewriting every tool.
+
+Resolution order for `bash.exe`:
+
+1. `HERMES_GIT_BASH_PATH` environment variable if set.
+2. `%LOCALAPPDATA%\hermes\git\usr\bin\bash.exe` (installer-managed PortableGit).
+3. `%LOCALAPPDATA%\hermes\git\bin\bash.exe` (older Git-for-Windows layout).
+4. System Git-for-Windows install (`%ProgramFiles%\Git\bin\bash.exe`, etc.).
+5. MSYS2, Cygwin, or any `bash.exe` on PATH as a last resort.
+
+The installer sets `HERMES_GIT_BASH_PATH` explicitly so fresh PowerShell sessions don't have to re-discover. Override it if you want Hermes to use a specific bash β for example, your system Git Bash or a WSL-hosted bash via a symlink.
+
+**Pitfall:** MinGit's layout is different from the full Git-for-Windows installer β bash lives under `usr\bin\bash.exe`, not `bin\bash.exe`. Hermes checks both. If you're manually unpacking a MinGit zip, make sure you pick the **non-busybox** variant (`MinGit-*-64-bit.zip`, not `MinGit-*-busybox*.zip`) β busybox builds ship `ash` instead of `bash` and most coreutils are missing.
+
+## UTF-8 console on Windows
+
+Python's default stdio on Windows uses the console's active code page (usually cp1252 or cp437). Hermes's banner, slash-command list, tool feed, Rich panels, and skill descriptions all contain Unicode. Without intervention, any of that crashes with `UnicodeEncodeError: 'charmap' codec can't encode characterβ¦`.
+
+The fix is in `hermes_cli/stdio.py::configure_windows_stdio()`, called early in every entry point (`cli.py::main`, `hermes_cli/main.py::main`, `gateway/run.py::main`). It:
+
+1. Flips the console code page to CP_UTF8 (65001) via `kernel32.SetConsoleCP` / `SetConsoleOutputCP`.
+2. Reconfigures `sys.stdout` / `sys.stderr` / `sys.stdin` to UTF-8 with `errors='replace'`.
+3. Sets `PYTHONIOENCODING=utf-8` and `PYTHONUTF8=1` (via `setdefault`, so explicit user values win) so child Python subprocesses inherit UTF-8.
+4. Sets `EDITOR=notepad` if neither `EDITOR` nor `VISUAL` is set (see the Editor section below).
+
+Idempotent. No-op on non-Windows.
+
+**Opt out:** `HERMES_DISABLE_WINDOWS_UTF8=1` in the environment falls back to the legacy cp1252 stdio path. Useful for bisecting an encoding bug; unlikely to be the right setting in normal operation.
+
+## The editor (`Ctrl-X Ctrl-E`, `/edit`)
+
+Pre-#21561, pressing `Ctrl-X Ctrl-E` or typing `/edit` silently did nothing on Windows. prompt_toolkit has a hardcoded POSIX-absolute fallback list (`/usr/bin/nano`, `/usr/bin/pico`, `/usr/bin/vi`, β¦) that never resolves on Windows β even with full Git for Windows installed.
+
+Hermes's Windows stdio shim now sets `EDITOR=notepad` as a default. Notepad ships with every Windows install and works as a blocking editor β `subprocess.call(["notepad", file])` blocks until the window closes.
+
+**User overrides still win** (they're checked before the setdefault):
+
+| Editor | PowerShell command |
+|---|---|
+| VS Code | `$env:EDITOR = "code --wait"` |
+| Notepad++ | `$env:EDITOR = "'C:\Program Files\Notepad++\notepad++.exe' -multiInst -nosession"` |
+| Neovim | `$env:EDITOR = "nvim"` |
+| Helix | `$env:EDITOR = "hx"` |
+
+The `--wait` flag on VS Code is critical β without it the editor returns immediately and Hermes gets a blank buffer back.
+
+Set it permanently in your PowerShell profile:
+
+```powershell
+# In $PROFILE
+$env:EDITOR = "code --wait"
+```
+
+Or as a User environment variable in System Settings so every new shell picks it up.
+
+## `Ctrl+Enter` for newline in the CLI
+
+Windows Terminal passes `Ctrl+Enter` through as a dedicated key sequence. Hermes binds it to "insert newline" so you can compose multi-line prompts in the CLI without falling back to `Esc`-then-`Enter`. Works in Windows Terminal, VS Code integrated terminal, and any modern Windows console host that honors VT escape sequences.
+
+On legacy `cmd.exe` consoles `Ctrl+Enter` collapses to plain `Enter` β use `Esc Enter` instead, or upgrade to Windows Terminal (it's free and installed by default on Windows 11).
+
+## Running the gateway at Windows login
+
+`hermes gateway install` on Windows uses **Scheduled Tasks** with a Startup-folder fallback β no admin required.
+
+### Install
+
+```powershell
+hermes gateway install
+```
+
+What happens under the hood:
+
+1. `schtasks /Create /SC ONLOGON /RL LIMITED /TN HermesGateway` β registers a task that runs at your login with standard (non-elevated) permissions. No UAC prompt.
+2. If schtasks is blocked by group policy, falls back to writing a `start /min cmd.exe /d /c ` shortcut into `%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup`. Same effect, slightly cruder.
+3. Spawns the gateway **detached via `pythonw.exe`** β not `python.exe`. `pythonw.exe` has no console attached, which immunizes it against `CTRL_C_EVENT` broadcasts from sibling processes (a real issue that used to kill the gateway when you Ctrl+C'd anything in the same process group).
+
+Flags used when spawning: `DETACHED_PROCESS | CREATE_NEW_PROCESS_GROUP | CREATE_NO_WINDOW | CREATE_BREAKAWAY_FROM_JOB`.
+
+### Manage
+
+```powershell
+hermes gateway status # Merged view: schtasks + Startup folder + running PID
+hermes gateway start # Starts the scheduled task now
+hermes gateway stop # Graceful SIGTERM equivalent (TerminateProcess via psutil)
+hermes gateway restart
+hermes gateway uninstall # Removes schtasks entry, Startup shortcut, pid file
+```
+
+`hermes gateway status` is idempotent β call it a thousand times in a row and it will never accidentally kill the gateway. (Pre-PR #21561 it silently did, via `os.kill(pid, 0)` colliding with `CTRL_C_EVENT` at the C level β see "process management internals" below if you care about the story.)
+
+### Why not a Windows Service?
+
+Services require admin rights to install and tie the gateway's lifecycle to machine boot, not user login. The typical Hermes user wants: log in β gateway available, log out β gateway gone. Scheduled Tasks do exactly that without elevation. If you genuinely want a service, use `nssm` or `sc create` manually β but you probably don't.
+
+## Data layout
+
+| Path | Contents |
+|---|---|
+| `%LOCALAPPDATA%\hermes\hermes-agent\` | Git checkout + venv. Safe to `Remove-Item -Recurse` and reinstall. |
+| `%LOCALAPPDATA%\hermes\git\` | PortableGit (only if the installer provisioned it). |
+| `%LOCALAPPDATA%\hermes\node\` | Portable Node.js (only if the installer provisioned it). |
+| `%LOCALAPPDATA%\hermes\bin\` | `hermes.cmd` shim, added to User PATH. |
+| `%USERPROFILE%\.hermes\` | Your config, auth, skills, sessions, logs. **Survives reinstalls.** |
+
+The split is deliberate: `%LOCALAPPDATA%\hermes` is disposable infrastructure (you can blow it away and the one-liner restores it). `%USERPROFILE%\.hermes` is your data β config, memory, skills, session history β and is identical in shape to a Linux install. Mirror it between machines and your Hermes moves with you.
+
+**Override `HERMES_HOME`:** set the environment variable to point at a different data dir. Works the same as on Linux.
+
+## Browser tool
+
+The browser tool uses `agent-browser` (a Node helper) to drive Chromium. On Windows:
+
+- The installer puts `agent-browser` on PATH via npm.
+- `shutil.which("agent-browser", path=...)` picks up the `.cmd` shim automatically β `CreateProcessW` can't execute an extensionless shebang, so Hermes always resolves to the `.CMD` wrapper. Don't manually invoke the shebang script; always go through the `.cmd`.
+- Playwright Chromium is auto-installed on first run (`npx playwright install chromium`). If installation fails, `hermes doctor` surfaces it with a fix-it hint.
+
+## Running Hermes on Windows β practical notes
+
+### PATH after install
+
+The installer adds `%LOCALAPPDATA%\hermes\bin` to your **User PATH** via `[Environment]::SetEnvironmentVariable`. Existing terminals don't pick this up β open a new PowerShell window (or Windows Terminal tab) after installation. Close-and-reopen, don't `$env:PATH += β¦` by hand unless you know what you're doing.
+
+Verify:
+
+```powershell
+Get-Command hermes # should print C:\Users\\AppData\Local\hermes\bin\hermes.cmd
+hermes --version
+```
+
+### Environment variables
+
+Hermes honors both `$env:X` (process-scope) and User environment variables (permanent, set in System Properties β Environment Variables). Setting API keys in `%USERPROFILE%\.hermes\.env` is the normal path β same as Linux:
+
+```
+OPENROUTER_API_KEY=sk-or-...
+TELEGRAM_BOT_TOKEN=...
+```
+
+Don't put secrets in User environment variables unless you specifically want every Windows process to see them (it isn't what you want).
+
+### Windows-specific env vars
+
+These only affect native Windows installs:
+
+| Variable | Effect |
+|---|---|
+| `HERMES_GIT_BASH_PATH` | Override bash.exe discovery. Point at any bash β full Git-for-Windows, WSL bash via symlink, MSYS2, Cygwin. The installer sets this automatically. |
+| `HERMES_DISABLE_WINDOWS_UTF8` | Set to `1` to disable the UTF-8 stdio shim and fall back to the locale code page. Useful for bisecting an encoding bug. |
+| `EDITOR` / `VISUAL` | Your editor for `/edit` and `Ctrl-X Ctrl-E`. Hermes defaults to `notepad` if both are unset. |
+
+## Uninstall
+
+From PowerShell:
+
+```powershell
+hermes uninstall
+```
+
+That's the clean path β removes the schtasks entry, Startup folder shortcut, `hermes.cmd` shim, deletes `%LOCALAPPDATA%\hermes\hermes-agent\`, and trims the User PATH. It leaves `%USERPROFILE%\.hermes\` alone (your config, auth, skills, sessions, logs) in case you're reinstalling.
+
+To nuke everything:
+
+```powershell
+hermes uninstall
+Remove-Item -Recurse -Force "$env:USERPROFILE\.hermes"
+Remove-Item -Recurse -Force "$env:LOCALAPPDATA\hermes"
+```
+
+The `hermes uninstall` CLI subcommand also handles the case where the schtasks entry was registered under a different task name (older installs) β it searches by install path rather than by hardcoded task name.
+
+## Process management internals
+
+This is background material β skip unless you're debugging an "it's killing itself" weirdness.
+
+On Linux and macOS, the POSIX idiom `os.kill(pid, 0)` is a no-op permission check: "is this PID alive and can I signal it?" On Windows, Python's `os.kill` maps `sig=0` to `CTRL_C_EVENT` β they collide at integer value 0 β and routes it through `GenerateConsoleCtrlEvent(0, pid)`, which broadcasts Ctrl+C to the **entire console process group** containing the target PID. That's [bpo-14484](https://bugs.python.org/issue14484), open since 2012. It won't be fixed because changing it would break scripts that depend on the current behavior.
+
+Consequence: any codepath that said "check if this PID is alive" via `os.kill(pid, 0)` on Windows was silently killing the target. Hermes migrated every such site (14 across 11 files) to `gateway.status._pid_exists()`, which uses `psutil.pid_exists()` (which in turn uses `OpenProcess + GetExitCodeProcess` on Windows β no signals). If you're writing a plugin or patch, use `psutil.pid_exists()` directly or `gateway.status._pid_exists()` β never `os.kill(pid, 0)`.
+
+`scripts/check-windows-footguns.py` enforces this in CI: any new `os.kill(pid, 0)` call fails the `Windows footguns (blocking)` check unless the line carries a `# windows-footgun: ok β ` marker.
+
+## Common pitfalls
+
+**`hermes: command not found` right after install.**
+Open a new PowerShell window. The installer added `%LOCALAPPDATA%\hermes\bin` to User PATH, but existing shells need to be restarted to pick it up. In the meantime you can run `& "$env:LOCALAPPDATA\hermes\bin\hermes.cmd"`.
+
+**`WinError 193: %1 is not a valid Win32 application` when running a tool.**
+You hit a shebang-script invocation that bypassed the `.cmd` shim. Hermes resolves commands through `shutil.which(cmd, path=local_bin)` so PATHEXT picks up `.CMD` β if you're invoking the tool via a hardcoded path instead, switch to the `.cmd` variant (e.g., `npx.cmd`, not `npx`).
+
+**`[scriptblock]::Create(...)` fails with `The assignment expression is not valid`.**
+Your download of `install.ps1` picked up a UTF-8 BOM. The `irm | iex` form strips BOMs automatically; `[scriptblock]::Create((irm ...))` does not. Re-run with the simple `irm | iex` form, or download the script manually and save it without a BOM via `[IO.File]::WriteAllText($path, $text, (New-Object Text.UTF8Encoding $false))`.
+
+**Gateway won't stay running after restart.**
+Check `hermes gateway status` β it merges the schtasks entry, the Startup-folder shortcut (if used), and the live PID. If schtasks is registered but not running, group policy may be blocking `ONLOGON` triggers. Run `schtasks /Query /TN HermesGateway /V /FO LIST` to see the task's failure reason, or fall back to the Startup-folder path by uninstalling and reinstalling with `HERMES_GATEWAY_FORCE_STARTUP=1`.
+
+**`/edit` still does nothing after setting `$env:EDITOR`.**
+You set it in the current process only; close and reopen the shell, or set it at User scope in System Properties β Environment Variables. Verify with `echo $env:EDITOR` in a new PowerShell window.
+
+**Browser tool launches but tools time out.**
+Chromium is auto-installed on first run. If the install failed (rate-limited GitHub, Playwright CDN hiccup), run `hermes doctor` β it will surface the missing Chromium and print the exact `npx playwright install chromium` command to fix it.
+
+**`agent-browser` fails with a weird Node version error.**
+The installer provisions Node 22 at `%LOCALAPPDATA%\hermes\node` but your PATH may have an older system Node 18 first. Either move Hermes's node dir earlier on PATH, or delete the system install if you don't use Node elsewhere.
+
+**Chinese / Japanese / Arabic characters show as `?` in the CLI.**
+The UTF-8 stdio shim didn't activate. Check that `HERMES_DISABLE_WINDOWS_UTF8` is NOT set (`Get-ChildItem env:HERMES_DISABLE_WINDOWS_UTF8`). If it's empty and you still see `?`, the console host (very old `cmd.exe`) may not support UTF-8 at all β switch to Windows Terminal.
+
+**Gateway can't send Telegram photos β "`BadRequest: payload contains invalid characters`".**
+This is unrelated to Windows but sometimes surfaces first there. Usually it means your file path contains unescaped backslashes in a JSON body. Telegram should be receiving paths Hermes normalizes, not raw Windows paths β if you're seeing this inside a custom plugin, make sure you're passing the Hermes-provided path, not `str(Path(...))` from user input.
+
+**"Works on my other machine" encoding weirdness after `git pull`.**
+If you edited Hermes config or a skill on Windows using a non-UTF-8 editor (Notepad on older Windows versions, some Chinese IMEs), the file may have been saved with a BOM. Hermes tolerates `utf-8-sig` on most config reads, but a BOM inside a folded YAML scalar (`description: >`) silently breaks YAML parsing. Re-save the file as plain UTF-8 without BOM.
+
+## Where to go next
+
+- **[Installation](../getting-started/installation.md)** β the full install page, including Linux/macOS/WSL2/Termux.
+- **[Windows (WSL2) Guide](./windows-wsl-quickstart.md)** β if you want POSIX semantics or the dashboard terminal pane.
+- **[CLI Reference](../reference/cli-commands.md)** β every `hermes` subcommand.
+- **[FAQ](../reference/faq.md)** β common non-Windows-specific questions.
+- **[Messaging Gateway](./messaging/index.md)** β running Telegram/Discord/Slack on Windows.
diff --git a/website/docs/user-guide/windows-wsl-quickstart.md b/website/docs/user-guide/windows-wsl-quickstart.md
index 59f6f4391a..98024ab862 100644
--- a/website/docs/user-guide/windows-wsl-quickstart.md
+++ b/website/docs/user-guide/windows-wsl-quickstart.md
@@ -7,7 +7,7 @@ sidebar_position: 2
# Windows (WSL2) Guide
-Hermes Agent now supports **both** native Windows and WSL2. This page covers the WSL2 path; for the native PowerShell install see [Installation](../getting-started/installation.md#windows-native-powershell).
+Hermes Agent now supports **both** native Windows and WSL2. This page covers the WSL2 path; for the native PowerShell install see the dedicated **[Windows (Native) Guide](./windows-native.md)**.
**When to pick WSL2 over native:**
- You want to use the dashboard's embedded terminal (`/chat` tab) β that pane requires a POSIX PTY and is WSL2-only.
diff --git a/website/sidebars.ts b/website/sidebars.ts
index bdc66d9cfa..938eb9c067 100644
--- a/website/sidebars.ts
+++ b/website/sidebars.ts
@@ -23,6 +23,7 @@ const sidebars: SidebarsConfig = {
items: [
'user-guide/cli',
'user-guide/tui',
+ 'user-guide/windows-native',
'user-guide/windows-wsl-quickstart',
'user-guide/configuration',
'user-guide/configuring-models',