emozilla f413c2ee9a fix(secrets): delete old secret-store copies instead of moving them ...

The agent can write cache/ and runtime/, so a file there may be a link or a
forged record. Hermes now deletes a Bitwarden or 1Password cache in cache/, or
a Photon sidecar record in runtime/, on first use without reading it, and
reads and writes only the copy at the top of the profile home. All four stores
are regenerated on use.

- Remove utils.adopt_legacy_file and the paths built on it.
- home_data_layout: split SECRET_CACHE_STORES into SECRET_CACHE_FILES and
  LEGACY_SECRET_CACHE_PATHS.
- Backups leave out the four top-level names; the old slashed entries never
  matched a root entry.
- The dashboard Files API takes its hidden names from the shared list.

2026-10-30 13:46:07 -04:00

..

__init__.py

…

_cache.py

fix(secrets): delete old secret-store copies instead of moving them

2026-10-30 13:46:07 -04:00

base.py

ci: fix PLW1509, PLW1510, PLW2101 linter errors

2026-10-10 15:20:13 +02:00

bitwarden.py

fix(secrets): delete old secret-store copies instead of moving them

2026-10-30 13:46:07 -04:00

command.py

chore(process): mark the agent/plugin detached spawns that are not owned children, with the reason

2026-10-29 16:58:09 +05:30

onepassword.py

fix(secrets): move secret caches and the Photon token to the profile home root

2026-10-29 22:21:46 -04:00

registry.py

…