hermes-agent/tests/plugins
kshitij 8b243dff62 fix: security + efficiency review fixes for salvaged PR #74379
1. Use open_credentialed_url() instead of bare urlopen() in
   templates.py apply_template() and probe_existing_customization().
   Both send Authorization: Bearer headers; bare urlopen forwards
   credentials on cross-origin redirects. The codebase has
   open_credentialed_url() in hermes_cli/urllib_security.py that
   strips credentials on cross-origin redirects — used by 4 other
   modules.

2. Guard unavailable_reason() with the dedup set check before
   calling it. The gateway builds a fresh AIAgent per message, so
   without this guard unavailable_reason() (which calls _load_config()
   → stat + file read + JSON parse, and _check_local_runtime() →
   importlib probes) runs on every gateway turn for an unavailable
   provider, even though the warning is deduped after the first.

3. Move INDICATOR_GLYPH from Hindsight's eye emoji to a generic
   brain (🧠) in core (agent/memory_provider.py). Hindsight overrides
   with its own _HINDSIGHT_GLYPH (👁️) in recall_status() and
   _emit_saving_indicator(). Other memory providers no longer inherit
   Hindsight's brand mark as the default glyph.
2026-08-13 23:15:25 +05:30
..
browser feat(browser): integrate Browser Use CLI 3.0 2026-08-10 10:45:44 -07:00
dashboard_auth
…
image_gen feat(media): default-on upscaling for sub-2MP image models (FAL + Krea) 2026-08-08 14:49:28 -07:00
memory fix: security + efficiency review fixes for salvaged PR #74379 2026-08-13 23:15:25 +05:30
model_providers fix: map Hermes reasoning efforts onto K3's low/high/max vocabulary 2026-08-13 01:05:49 +05:30
platforms
…
transcription
…
tts
…
video_gen fix(video): bind managed SeedVR to source request 2026-08-08 17:01:59 -07:00
web
…
__init__.py
…
test_a2a_phase23.py
…
test_a2a_plugin.py
…
test_achievements_plugin.py
…
test_chronos_cron.py
…
test_chronos_verify.py
…
test_discord_runtime_failure.py
…
test_disk_cleanup_plugin.py
…
test_google_meet_audio.py
…
test_google_meet_node.py
…
test_google_meet_plugin.py
…
test_google_meet_realtime.py
…
test_hindsight_health_grace_timeout.py
…
test_hindsight_root_guard.py
…
test_holographic_vector_storage.py
…
test_kanban_attachments.py
…
test_kanban_board_project_api.py
…
test_kanban_dashboard_plugin.py fix(kanban): isolate review handoff ownership 2026-08-10 12:43:46 -07:00
test_kanban_dashboard_task_updated_hook.py chore: trim observer test suites to core coverage and condense hooks docs 2026-08-13 09:35:52 -07:00
test_kanban_estimate.py
…
test_kanban_model_override.py
…
test_kanban_worker_runs.py
…
test_langfuse_plugin.py fix: reuse redact_sensitive_text, fix leaky abstraction, fix test data 2026-08-13 23:10:16 +05:30
test_nemo_relay_mark_turn_parenting.py fix(observability): parent marks to the live turn scope, not the session 2026-08-12 19:20:03 -07:00
test_nemo_relay_plugin.py
…
test_plugin_dashboard_auth_contract.py
…
test_raft_check_fn_silent.py
…
test_retaindb_plugin.py
…
test_security_guidance_plugin.py
…
test_teams_pipeline_plugin.py
…