main

.claude/settings.local.json

@@ -0,0 +1,14 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(python -c \":*)",
+      "Bash(find /c/Users/downl/Desktop/hermes-agent-main/hermes-agent-main -path */.hermes/* -o -name config.yaml -o -name default_config.yaml)",
+      "Bash(dir C:UsersdownlDesktopclawdbot-main3clawdbot-main)",
+      "Bash(mkdir -p \"$USERPROFILE/.hermes/memories\")",
+      "Bash(cp \"C:\\\\Users\\\\downl\\\\Desktop\\\\clawdbot-main3\\\\clawdbot-main\\\\identity\\\\SOUL.md\" \"$USERPROFILE/.hermes/SOUL.md\")",
+      "Bash(cp \"C:\\\\Users\\\\downl\\\\Desktop\\\\clawdbot-main3\\\\clawdbot-main\\\\MEMORY.md\" \"$USERPROFILE/.hermes/memories/MEMORY.md\")",
+      "Read(//c/Users/downl/Desktop/hermes-agent-main/hermes-agent-main/$USERPROFILE/**)",
+      "Read(//c/Users/downl/Desktop/hermes-agent-main/hermes-agent-main/$USERPROFILE/.hermes/**)"
+    ]
+  }
+}

.cursorindexingignore

@@ -0,0 +1,3 @@
+
+# Don't index SpecStory auto-save files, but allow explicit context inclusion via @ references
+.specstory/**

.env.example

@@ -458,39 +458,35 @@ IMAGE_TOOLS_DEBUG=false
 # STT_OPENAI_BASE_URL=https://api.openai.com/v1
 # ELEVENLABS_STT_BASE_URL=https://api.elevenlabs.io/v1
 
+
 # =============================================================================
-# MICROSOFT TEAMS INTEGRATION
+# VRCHAT OSC (zapabob fork — VRChat integration via python-osc)
 # =============================================================================
-# Register a Bot in Azure: https://dev.botframework.com/ → "Register a bot"
-# Or use Azure Portal: Azure Active Directory → App registrations → New registration
-# Then add the bot to Teams via the Bot Framework or App Studio.
-#
-# TEAMS_CLIENT_ID=                     # Azure AD App (client) ID
-# TEAMS_CLIENT_SECRET=                 # Azure AD client secret value
-# TEAMS_TENANT_ID=                     # Azure AD tenant ID (or "common" for multi-tenant)
-# TEAMS_ALLOWED_USERS=                 # Comma-separated AAD object IDs or UPNs
-# TEAMS_ALLOW_ALL_USERS=false          # Set true to skip the allowlist
-# TEAMS_HOME_CHANNEL=                  # Default channel/chat ID for cron delivery
-# TEAMS_HOME_CHANNEL_NAME=             # Display name for the home channel
-# TEAMS_PORT=3978                      # Webhook listen port (Bot Framework default)
-
-# =============================================================================
-# GOOGLE CHAT INTEGRATION
-# =============================================================================
-# Connects via Cloud Pub/Sub pull subscription (no public URL required).
-# Setup walkthrough: website/docs/user-guide/messaging/google_chat.md.
-# 1. Create a GCP project, enable the Google Chat API and Cloud Pub/Sub.
-# 2. Create a Service Account with roles/pubsub.subscriber on the
-#    subscription (NOT project-wide); download the JSON key.
-# 3. Configure your Chat app at console.cloud.google.com/apis/credentials
-#    → Google Chat API → Configuration → Cloud Pub/Sub topic.
-# 4. (Optional, for native attachment delivery) Each user runs
-#    `/setup-files` once in their own DM after Pub/Sub is wired up.
+# Requires: uv pip install "hermes-agent[vrchat]"
+# VRChat must have OSC enabled: Action Menu → OSC → Enabled
 #
-# GOOGLE_CHAT_PROJECT_ID=                       # GCP project hosting the topic (or set GOOGLE_CLOUD_PROJECT)
-# GOOGLE_CHAT_SUBSCRIPTION_NAME=                # Full path: projects/<id>/subscriptions/<name>
-# GOOGLE_CHAT_SERVICE_ACCOUNT_JSON=             # Path to SA JSON (or set GOOGLE_APPLICATION_CREDENTIALS)
-# GOOGLE_CHAT_ALLOWED_USERS=                    # Comma-separated emails allowed to talk to the bot
-# GOOGLE_CHAT_ALLOW_ALL_USERS=false             # Set true to skip the allowlist
-# GOOGLE_CHAT_HOME_CHANNEL=                     # Default space (spaces/XXXX) for cron delivery
-# GOOGLE_CHAT_HOME_CHANNEL_NAME=                # Display name for the home channel
+VRCHAT_OSC_ENABLED=true
+VRCHAT_OSC_HOST=127.0.0.1
+VRCHAT_OSC_SEND_PORT=9000
+VRCHAT_OSC_RECV_PORT=9001
+
+# =============================================================================
+# VOICEVOX TTS (zapabob fork — local Japanese TTS)
+# =============================================================================
+# Requires VOICEVOX Engine running locally: https://voicevox.hiroshiba.jp/
+# VOICEVOX_URL=http://127.0.0.1:50021
+# VOICEVOX_SPEAKER=8               # Speaker ID (8 = default, see VOICEVOX app for IDs)
+# VOICEVOX_TIMEOUT=30
+# VOICEVOX_SPEED=1.0
+
+# Irodori TTS (local Japanese TTS plugin)
+# Requires the Irodori server and Hermes Windows script harness.
+# IRODORI_TTS_BASE_URL=http://127.0.0.1:8088
+# IRODORI_TTS_VOICE=none
+# IRODORI_TTS_MODEL=irodori-tts
+# IRODORI_TTS_TIMEOUT=900
+
+# =============================================================================
+# TELEGRAM HOME CHANNEL (migrated from OpenClaw TELEGRAM_CHAT_ID)
+# =============================================================================
+TELEGRAM_HOME_CHANNEL=7201110294

.github/dependabot.yml

@@ -23,6 +23,24 @@
 
 version: 2
 updates:
+  # Keep Python dependency graphing scoped to the real uv project at the
+  # repository root.  GitHub's Dependabot graph job can otherwise infer
+  # setup.py/requirements.txt-only helper directories as uv manifests and fail
+  # because they intentionally do not have pyproject.toml/uv.lock files.
+  #
+  # Version-bump PRs for source dependencies remain disabled by policy; security
+  # updates are still handled by the repository's Dependabot security setting.
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 0
+    exclude-paths:
+      - "hermes_cli/**"
+      - "optional-skills/finance/dcf-model/**"
+      - "skills/productivity/google-workspace/scripts/**"
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

.github/workflows/aituber-onair-plugin.yml

@@ -0,0 +1,68 @@
+name: AITuber OnAir Plugin
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+    paths:
+      - "plugins/aituber_onair/**"
+      - "tests/plugins/test_aituber_onair_plugin.py"
+      - ".github/workflows/aituber-onair-plugin.yml"
+  pull_request:
+    branches: [main]
+    paths:
+      - "plugins/aituber_onair/**"
+      - "tests/plugins/test_aituber_onair_plugin.py"
+      - ".github/workflows/aituber-onair-plugin.yml"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: aituber-onair-plugin-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  plugin-contract:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
+        with:
+          enable-cache: true
+          cache-dependency-glob: |
+            pyproject.toml
+            uv.lock
+
+      - name: Set up Python 3.11
+        run: uv python install 3.11
+
+      - name: Install dependencies
+        run: uv sync --locked --python 3.11 --extra dev
+
+      - name: Lint and typecheck plugin
+        run: |
+          source .venv/bin/activate
+          ruff check \
+            plugins/aituber_onair \
+            tests/plugins/test_aituber_onair_plugin.py
+          ty check \
+            plugins/aituber_onair \
+            tests/plugins/test_aituber_onair_plugin.py
+
+      - name: Compile plugin
+        run: |
+          source .venv/bin/activate
+          python -m py_compile \
+            plugins/aituber_onair/__init__.py \
+            plugins/aituber_onair/core.py \
+            plugins/aituber_onair/cli.py
+
+      - name: Run plugin tests
+        run: |
+          source .venv/bin/activate
+          python -m pytest -q tests/plugins/test_aituber_onair_plugin.py -o addopts=

.github/workflows/tests.yml

@@ -26,6 +26,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0  # merge-tool regression tests read historical blobs via git show
 
       - name: Restore duration cache
         uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
@@ -143,19 +145,20 @@ jobs:
         with:
           pattern: test-durations-slice-*
           path: durations
-          merge-multiple: true
+          merge-multiple: false
 
       - name: Merge into single durations file
         run: |
           python3 -c "
-          import json, glob, os
+          import json, glob
           merged = {}
-          for f in glob.glob('durations/*test_durations.json'):
+          files = glob.glob('durations/**/test_durations.json', recursive=True)
+          for f in files:
             with open(f) as fh:
               merged.update(json.load(fh))
           with open('test_durations.json', 'w') as fh:
             json.dump(merged, fh, indent=2, sort_keys=True)
-          print(f'Merged {len(merged)} file durations')
+          print(f'Merged {len(merged)} file durations from {len(files)} slice artifact(s)')
           "
 
       - name: Save merged duration cache
@@ -170,6 +173,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0  # merge-tool regression tests read historical blobs via git show
 
       - name: Install ripgrep (prebuilt binary)
         run: |

.gitignore

@@ -9,6 +9,7 @@ act/
 .venv/
 .venv
 .vscode/
+.cursor/
 .env
 .op.env
 .env.local
@@ -17,14 +18,22 @@ act/
 .env.production.local
 .env.development
 .env.test
+.envrc
+.envrc.*
 .hermes-docker/
+.hermes/
+**/.hermes/
+.hermes-bootstrap-complete
 .notebooklm-home/
 .notebooklm-cli-venv/
 .notebooklm-playwright/
 .pip-cache/
 .uv-cache/
 compose.hermes.local.yml
 export*
+!scripts/windows/export-hermes-host-migration.ps1
+!scripts/export_training_corpus.py
+!scripts/export_gguf.ps1
 __pycache__/model_tools.cpython-310.pyc
 __pycache__/web_tools.cpython-310.pyc
 logs/
@@ -33,6 +42,7 @@ data/
 test_durations.json
 .pytest-cache/
 tmp/
+/_tmp_*.txt
 temp_vision_images/
 hermes-*/*
 examples/
@@ -50,7 +60,33 @@ agent-browser/
 # Private keys
 *.ppk
 *.pem
+*.key
+*.key.json
+*.p12
+*.pfx
+id_rsa
+id_rsa.*
+id_ed25519
+id_ed25519.*
+.ssh/
 privvy*
+*.secret
+*.secret.*
+*.secrets
+*.secrets.*
+*.private
+*.private.*
+*credentials*.json
+*token*.json
+*password*.json
+local.settings.json
+settings.local.json
+config.local.yaml
+config.local.yml
+secrets/
+.secrets/
+credentials/
+.credentials/
 images/
 __pycache__/
 hermes_agent.egg-info/
@@ -101,26 +137,24 @@ mini-swe-agent/
 .direnv/
 .nix-stamps/
 result
-website/static/api/skills-index.json
-# skills.json + skills-meta.json are build artifacts emitted by
-# website/scripts/extract-skills.py during prebuild — keep them out of
-# git for the same reason as skills-index.json (large, generated, change
-# every build).
-website/static/api/skills.json
-website/static/api/skills-meta.json
-# automation-blueprints-index.json is a build artifact emitted by
-# website/scripts/extract-automation-blueprints.py during prebuild.
-website/static/api/automation-blueprints-index.json
-models-dev-upstream/
-
-# Local editor / agent tooling (machine-specific; keep in global config, not the repo)
-.codex/
-.cursor/
-.gemini/
-.zed/
-.mcp.json
-opencode.json
-config/mcporter.json
+vendor/openclaw-mirror/AI-Scientist
+
+# Sovereign Identity (Hakua)
+SOUL.md
+AGENT.md
+IDENTITY.md
+identity/
+_docs/
+.synapse/
+.openclaw/
+.openclaw-desktop/
+.python/
+.python
+_artifacts/
+*.lnk
+*.log
+vendor/openclaw-mirror/AI-Scientist
+vendor/openclaw-mirror/ShinkaEvolve
 
 hermes_cli/tui_dist/*
 hermes_cli/scripts/
@@ -164,3 +198,43 @@ apps/desktop/demo/
 # PR body is the archive. See the hermes-agent-dev skill's
 # pr-infographic-workflow reference (storage rule + lapse #8 / #COMMIT-1).
 infographic/
+
+# Go memory-graph static server binary (built by scripts/windows/build-memory-graph-server.ps1)
+bin/memory-graph-server.exe
+
+# Keep navigation docs for ignored local-workspace folders while ignoring all
+# generated contents below them.
+!output/
+output/*
+!output/media/
+output/media/*
+!output/media/AGENTS.md
+!output/media/README.md
+!output/reports/
+output/reports/*
+!output/reports/AGENTS.md
+!output/reports/README.md
+!output/logs/
+output/logs/*
+!output/logs/AGENTS.md
+!output/logs/README.md
+!tmp/
+tmp/*
+!tmp/probes/
+tmp/probes/*
+!tmp/probes/AGENTS.md
+!tmp/probes/README.md
+!tmp/snapshots/
+tmp/snapshots/*
+!tmp/snapshots/AGENTS.md
+!tmp/snapshots/README.md
+!tmp/snapshots/secrets/
+tmp/snapshots/secrets/*
+!tmp/snapshots/secrets/AGENTS.md
+!tmp/snapshots/secrets/README.md
+
+# Go Desktop/backend watchdog binary (built by Build-HermesGoWatchdog.ps1)
+scripts/windows/watchdog-go/dist/
+
+# Go build artifacts
+*.exe