Problem

_find_hermes_pids() in hermes_cli/gateway.py scans /proc/ to find running Hermes processes. For each PID, it opens /proc/{pid}/cmdline but never closes the file handle:

cmdline = open(f"/proc/{pid}/cmdline", "rb").read().decode("utf-8", errors="replace")

On a system with hundreds of processes, this leaks hundreds of file descriptors in a single call.

Fix

Use a with statement (context manager) to ensure each handle is closed immediately after reading:

with open(f"/proc/{pid}/cmdline", "rb") as fh:
    cmdline = fh.read().decode("utf-8", errors="replace")

Impact

• Eliminates fd leak in a hot loop (called on every gateway startup and status check)
• No behavioral change on the happy path