fix(gateway): include user-local bin paths in launchd plist PATH

Port PR #3527's systemd fix to launchd (macOS): generate_launchd_plist()
now calls _build_user_local_paths() so ~/.local/bin, ~/.cargo/bin,
~/go/bin, and ~/.npm-global/bin are always reachable, not just whatever
happened to be in the captured shell PATH at install time. Fixes uv/uvx
MCP servers being unreachable under the launchd-managed gateway.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jhuchler-iamds

hermes_cli/gateway.py

@@ -3333,6 +3333,11 @@ def generate_launchd_plist() -> str:
         resolved_node_dir = str(Path(resolved_node).resolve().parent)
         if resolved_node_dir not in priority_dirs:
             priority_dirs.append(resolved_node_dir)
+    # Explicitly ensure user-local bin dirs (uv/uvx, pipx, cargo, go, npm
+    # global) are reachable even if the captured shell PATH below happens to
+    # lack them (e.g. plist generated from a non-interactive/minimal
+    # environment). Mirrors the same safety net used for systemd units.
+    priority_dirs.extend(_build_user_local_paths(Path.home(), priority_dirs))
     sane_path = ":".join(
         dict.fromkeys(
             priority_dirs + [p for p in os.environ.get("PATH", "").split(":") if p]

tests/hermes_cli/test_gateway_service.py

@@ -1729,6 +1729,27 @@ def test_system_unit_includes_local_bin_in_path(self, monkeypatch):
         assert "/.local/bin" in unit
 
 
+class TestGeneratedLaunchdPlistIncludesLocalBin:
+    """~/.local/bin must be in the launchd plist PATH so uvx/pipx MCP tools
+    are discoverable, even when it's absent from the captured shell PATH."""
+
+    def test_launchd_plist_includes_local_bin_in_path(self, monkeypatch):
+        home = Path.home()
+        local_bin = str(home / ".local" / "bin")
+        # Simulate a minimal environment where the captured shell PATH does
+        # NOT contain ~/.local/bin.
+        monkeypatch.setenv("PATH", "/usr/bin:/bin")
+        monkeypatch.setattr(
+            gateway_cli,
+            "_build_user_local_paths",
+            lambda home_path, existing: [local_bin],
+        )
+
+        plist = gateway_cli.generate_launchd_plist()
+
+        assert local_bin in plist
+
+
 class TestSystemServiceIdentityRootHandling:
     """Root user handling in _system_service_identity()."""