mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-11-06 13:26:40 +00:00
kshitijk4poor
8ffcd7488f
Phase 2 review follow-ups: - OpenViking overlaid the bound profile's whole .env after the scrub, so that profile's bot, dashboard and relay tokens reached the server again. The overlaid env is now scrubbed a second time for Tier 1. Provider keys still pass, and they still come from the bound profile. - The strict per-home manifest read raised on any unreadable entry under <home>/plugins, which failed every child spawn for that profile. It is now strict only where the manifest is known to be a platform's: bundled or plugins/platforms/. Dunder and dot directories, unsearchable plugin directories and unreadable flat plugins/* manifests are skipped with a warning, because they can't load as plugins either. - The per-home cache is keyed on hermes_home_key(), so a symlinked alias no longer gets a second entry. - The modal snapshot test swapped hermes_cli.config for a stub, which the policy import can no longer use. HERMES_HOME already points the real module at the test home, so the stub is gone. - The env_passthrough docstring now describes declared names rather than the dropped prefix rule.