{
  "sources": [
    {
      "url": "https://gist.githubusercontent.com/gtmcknight/594c47336546c8763e641b46cf9af4ec/raw/field.json",
      "quote": "{\"pr\":153809,\"name\":\"living-spaces\",\"repo\":\"https://github.com/akinduroifedayo/living-spaces\",\"sha\":\"e6145ccbd028edf55417822020426f4830343eb6\",\"subdir\":\"src/living-spaces\"}"
    },
    {
      "url": "https://gist.githubusercontent.com/gtmcknight/594c47336546c8763e641b46cf9af4ec/raw/RUN.md",
      "quote": "the model is Nous's own scripted test stand-in, `tests/fakes/fake_llm_provider.py` in the Hermes source, which answers with the tool calls you plan and records everything Hermes sends.\n\n## 1. Hermes, once\n\n    git clone --depth 1 https://github.com/NousResearch/hermes-agent test/scratch/hermes\n    cd test/scratch/hermes && uv sync --locked --python 3.14 && cd -\n    test/scratch/hermes/.venv/bin/hermes plugins --help\n"
    },
    {
      "url": "https://raw.githubusercontent.com/NousResearch/hermes-agent/fdde27e7dae174cb4ba842589e92508852b7dd9f/plugin-catalog/README.md",
      "quote": "12. **Approvals and unattended runs are respected.** A plugin never routes around\n   Hermes's approval system: no auto-approving, no disabling guards, and no\n   spawning Hermes or shell children that inherit YOLO or non-interactive mode\n   to run commands nobody approved. Anything that waits for a person (a prompt,\n   an OAuth browser flow) fails cleanly or times out under cron, the messaging"
    },
    {
      "url": "https://raw.githubusercontent.com/akinduroifedayo/living-spaces/e6145ccbd028edf55417822020426f4830343eb6/src/living-spaces/README.md",
      "quote": "The bot is the trusted author. Living Spaces hosts its canvas and supplies local records, project files, revisions, and diagnostics. Chat and the canvas share the same records. Refresh preserves user-owned notes and choices. Code restore creates a new revision without rewinding saved records. The sandbox separates generated code from Desktop and other Spaces.\n\n## Proven in Desktop\n"
    },
    {
      "url": "https://raw.githubusercontent.com/itsflownium/hermes-crystallize/fc34138782796e94bca9131dd12c71f2dd843031/README.md",
      "quote": "Start with **Clean**, which compacts redundant formatting without a model call.\nOptional summaries are checked for structured numeric values, recognizable IDs,\ndates, amounts and URLs. Failed or incomplete results stay exact. A summary that\nfails those checks is rejected, while its attempt cost remains in the receipt.\nThese checks cannot prove factual correctness or semantic equivalence.\n"
    },
    {
      "url": "https://raw.githubusercontent.com/kawsthingz/hermes-dress-rehearsal/392fc16e7b7057e71f8dfd42b90eefc9cb1b3b28/README.md",
      "quote": "**What you approve is what runs.** `/rehearse go` replays the recorded calls in order with no model in the loop. Nothing is regenerated, and the script hash on screen is the hash of what runs.\n- **Stale approvals are refused.** Each file write records the file's SHA-256 at rehearsal time. If the file changed before you press go, replay stops at that step."
    },
    {
      "url": "https://raw.githubusercontent.com/opeblow/kata/cc59b08f1bbeeb02524c060faac04edb34de0564/README.md",
      "quote": "**Ask.** Shows you exactly what would run, why it was detected, what it may touch, and its side effects. Nothing is\n   registered until you approve it.\n5. **Run.** The approved routine becomes a real Hermes tool the agent calls once. Same calls, same order, same\n   arguments. Stops at the first failure with a full trace.\n\n## Before and after\n"
    },
    {
      "url": "https://raw.githubusercontent.com/Tarekkharsa/hermes-lahja/a7a43b1389a1ae169ff5c7401e9ec2ec9a53b51d/README.md",
      "quote": "* **Subprocesses:** `ffmpeg` (allowed to read local files only: `-protocol_whitelist file,pipe`) and\n  `whisper-cli`, with a fixed argument list (no shell), one overall deadline per note, at most\n  `max_parallel` running at once, and a minimal environment (`PATH`, `LANG`, `LC_ALL`, `TMPDIR`,\n  `LD_LIBRARY_PATH`) — never Hermes' environment, so no API key can reach them."
    },
    {
      "url": "https://raw.githubusercontent.com/cipoklean/hermes-xray/21ca5f6fb5e46fb6d1a0ec2e179d055b96c69f52/README.md",
      "quote": "- **Not an OS sandbox.** The child runs as you. Spawn and egress blocking is done by Python audit\n  hooks, so it's a tripwire that native code can bypass. Running the child under bubblewrap or\n  `sandbox-exec` is on the roadmap. See Disclosure above.\n- **Code files.** Reads of `.py`/`.pyc`/`.so` files, the interpreter and Hermes' own source tree\n  aren't flagged, because that's how Python imports code."
    },
    {
      "url": "https://raw.githubusercontent.com/kawsthingz/hermes-dress-rehearsal/392fc16e7b7057e71f8dfd42b90eefc9cb1b3b28/rehearsal.py",
      "quote": "prog = os.path.basename(words[0])\n        if prog == \"cd\":\n            continue\n        if prog == \"git\":\n            rest = words[1:]\n            if any(w.split(\"=\")[0] in GIT_CONFIG_OPTS or (w.startswith(\"-c\") and len(w) > 2) for w in rest):\n                return False\n            sub = next((w for w in rest if not w.startswith(\"-\")), \"\")"
    },
    {
      "url": "https://raw.githubusercontent.com/opeblow/kata/cc59b08f1bbeeb02524c060faac04edb34de0564/kata/effects.py",
      "quote": "if prog in _READ_COMMANDS:\n        if _WRITE_FLAGS.get(prog, set()) & set(argv[1:]):\n            return Effect.UNKNOWN, f\"`{prog}` with a flag that writes or runs programs\"\n        return Effect.READ, f\"`{prog}` only reads\"\n    if prog == \"gh\":\n        verb = rest[0] if rest else \"\"\n        if (sub, verb) in _GH_READ:"
    },
    {
      "url": "https://raw.githubusercontent.com/opeblow/kata/cc59b08f1bbeeb02524c060faac04edb34de0564/kata/executor.py",
      "quote": "# Never block on a hung tool; the thread finishes on its own.\n            pool.shutdown(wait=False)\n\n    def run(self, spec: KataSpec, version: int, inputs: dict) -> RunResult:"
    },
    {
      "url": "https://raw.githubusercontent.com/itsflownium/hermes-crystallize/fc34138782796e94bca9131dd12c71f2dd843031/dispatch_support.py",
      "quote": "\"public_contract_verified\": False,\n        \"guarded_dispatch_available\": False,\n        \"automatic_nested_tools\": False,\n        \"text_helpers_available\": has_helper,\n        \"owned_placeholders_available\": True,\n        \"input_files_mode\": \"normal_host_tool_plan\",\n        \"save_to_mode\": \"normal_host_tool_plan\",\n        \"fallback\": \"normal_host_tool_plan\","
    },
    {
      "url": "https://raw.githubusercontent.com/itsflownium/hermes-crystallize/fc34138782796e94bca9131dd12c71f2dd843031/chat_savings.py",
      "quote": "def read_full(result_id: str, offset: int = 0, session_id: str = \"\") -> str:\n    \"\"\"The original result behind a condensed one.\"\"\"\n    if not _ID.fullmatch(result_id or \"\"):\n        return json.dumps({\"error\": \"That isn't a valid result id.\"})\n    if not session_id:\n        return json.dumps({\"error\": \"Open the chat that owns this result first.\"})\n    text = _load_full(result_id, session_id)\n    if text is None:"
    },
    {
      "url": "https://raw.githubusercontent.com/akinduroifedayo/living-spaces/e6145ccbd028edf55417822020426f4830343eb6/src/living-spaces/README.md",
      "quote": "Upkeep uses the private `cron.jobs` and `cron.executions` modules. Desktop session cleanup uses the raw `window.hermesDesktop` bridge to retain the original backend target. These integrations carry compatibility risk and catalog-review warnings. This is not an all-public-SDK or catalog-approved package.\n"
    },
    {
      "url": "https://raw.githubusercontent.com/akinduroifedayo/living-spaces/e6145ccbd028edf55417822020426f4830343eb6/src/living-spaces/__init__.py",
      "quote": "ctx.register_tool(name=schema[\"name\"], toolset=TOOLSET, schema=schema, handler=_handler(fn),\n                          description=schema[\"description\"], emoji=EMOJI)\n    ctx.register_skill(\"build-space\", SKILL_PATH,\n                       description=\"How to build, change, query and keep current a Living Space (multi-view app in \""
    },
    {
      "url": "https://raw.githubusercontent.com/Tarekkharsa/hermes-lahja/a7a43b1389a1ae169ff5c7401e9ec2ec9a53b51d/lahja/engine.py",
      "quote": "def _env() -> dict[str, str]:\n    env = {\"PATH\": _SEARCH_PATH, \"LANG\": \"en_US.UTF-8\", \"LC_ALL\": \"en_US.UTF-8\"}\n    for key in (\"TMPDIR\", \"LD_LIBRARY_PATH\"):  # temp dir; shared libs of a custom (e.g. CUDA) whisper.cpp build\n        val = os.environ.get(key)\n        if val:\n            env[key] = val\n    return env\n\n"
    },
    {
      "url": "https://raw.githubusercontent.com/Tarekkharsa/hermes-lahja/a7a43b1389a1ae169ff5c7401e9ec2ec9a53b51d/lahja/models.py",
      "quote": "def download(data_dir: Path, m: ModelFile, progress: Optional[Callable[[int, int], None]] = None) -> Path:\n    \"\"\"Download ``m`` (https only), verify SHA-256, then atomically move it into place.\"\"\"\n    if not m.url.startswith(\"https://\"):\n        raise ValueError(f\"refusing non-https model URL: {m.url}\")\n    d = models_dir(data_dir)\n    dest = d / m.filename\n    if dest.is_file() and sha256_of(dest) == m.sha256:\n        return dest"
    },
    {
      "url": "https://raw.githubusercontent.com/cipoklean/hermes-xray/21ca5f6fb5e46fb6d1a0ec2e179d055b96c69f52/xray/chamber/__init__.py",
      "quote": "def _child_env(world: dict, events: Path, warp: int, allow_exec: bool) -> dict:\n    env = {k: os.environ[k] for k in _PASS_ENV if k in os.environ}\n    env.update(world[\"env\"])  # bait credentials, not real ones\n    env.update({\n        \"HOME\": world[\"home\"], \"USERPROFILE\": world[\"home\"], \"HERMES_HOME\": world[\"hermes_home\"],\n        \"PYTHONPATH\": str(CHILD_DIR), \"PYTHONDONTWRITEBYTECODE\": \"1\", \"PYTHONNOUSERSITE\": \"1\","
    },
    {
      "url": "https://raw.githubusercontent.com/cipoklean/hermes-xray/21ca5f6fb5e46fb6d1a0ec2e179d055b96c69f52/xray/tracer.py",
      "quote": "class RuntimeTracer:\n    def __init__(self, needles: List[str], decoy_paths: Dict[str, str],\n                 on_alert: Callable[[dict], None]):\n        self._needles = [n for n in needles if n]\n        self._needles_lc = [n.lower() for n in self._needles]\n        self._decoys = {_n(p): kind for p, kind in decoy_paths.items()}"
    }
  ]
}