chore(catalog): review disclosure for hermes-talk

This commit is contained in:
Teknium committed 2026-10-28 22:24:40 -07:00
1 parent 79a11254b2
commit 8c8dbbabd6
1 file changed
+1 -15
+1 -15
View File
@@ -1,21 +1,7 @@
name: hermes-talk
repo: https://github.com/TheSmokeDev/hermes-talk
sha: 790f6d283d4720302eda21f9086d4fc01be3ec0a
description: >-
Realtime voice for Hermes through terminal, Discord, dashboard and Desktop.
Disclosure - Realtime on the ChatGPT subscription uses the profile's Codex sign-in only
through Hermes's credentialed_provider_request (requires_auth: openai-codex); the plugin
never reads, refreshes or holds a token. GPT-Live on the subscription (TALK_VOICE_MODE=live,
TALK_LIVE_AUTH=subscription) starts one local `codex app-server` child per call on the Codex
CLI's own login (API-key variables removed from its environment); that call uses the
undocumented chatgpt.com Codex realtime endpoint, which is outside the vendor's published API
terms and may change or stop working without notice. The app-server's Codex thread is
ephemeral and fenced (no environment, read-only sandbox, approvals declined, apps, shell,
web search, plugins, sub-agents and each configured MCP server disabled, replies only
"skip"); Talk reads only the MCP server names to disable them, and each voice request costs
one small Codex turn of subscription quota. Voice audio and conversation context go to the
selected provider (OpenAI, xAI, Google, optionally ElevenLabs); spoken requests are handed
to the user's Hermes agent, whose tools run under Hermes approvals. No telemetry.
description: "Realtime voice for Hermes through terminal, Discord, dashboard and Desktop. Disclosure — Realtime on the ChatGPT subscription uses the profile's Codex sign-in only through Hermes's credentialed_provider_request (requires_auth: openai-codex); the plugin never reads, refreshes or holds a token. GPT-Live on the subscription (TALK_VOICE_MODE=live, TALK_LIVE_AUTH=subscription) starts one local `codex app-server` child per call on the Codex CLI's own login (API-key variables removed from its environment); that call uses the undocumented chatgpt.com Codex realtime endpoint, which is outside the vendor's published API terms and may change or stop working without notice. The app-server's Codex thread is ephemeral and fenced (no environment, read-only sandbox, approvals declined, apps, shell, web search, plugins, sub-agents and each configured MCP server disabled, replies only \"skip\"); Talk reads only the MCP server names to disable them, and each voice request costs one small Codex turn of subscription quota. Voice audio and conversation context go to the selected provider (OpenAI, xAI, Google, optionally ElevenLabs); on Desktop the voice model can list the profile's sessions, read their titles and recent messages, create sessions and queue or steer prompts into them without a per-action confirmation; spoken requests are handed to the user's Hermes agent, whose tools run under Hermes approvals. No telemetry."
maintainer: TheSmokeDev
tier: community
category: voice