+ WjefNa0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIH t H t ^RI H t ^RI HtHtHtHt^RIt^RIHt]P,!]4tRTtRUtRtRVtRWtRtR tRXt ]PB!R 4t"]PB!R 4t#RYt$R t%R Rlt&]PB!R4t'] !RR44t(] !RR44t)] !RR44t*RRlt+RRlt,RRlt-RRlt.RRlt/RZR R!llt0RZR"R#llt1RZR$R%llt2R&R'lt3R(R)lt4]PB!R*4t5R+R,lt6RZR-R.llt7R/R0lt8R1R2lt9R3R4lt:R5R6lt;R7R8ltRR?llt?R[s@R@]ARA&RBRCltBRDREltCRFRGltDRHRIltERJRKltFR\tGRLRMltHRNROltIRPRQltJRRRSltKR#)]unPlugin catalog — curated, Nous-approved Hermes plugins shipped with the repo. Mirrors the ``optional-mcps/`` MCP-catalog pattern: one YAML file per entry under the in-tree ``plugin-catalog/`` directory, pinned to an exact 40-character commit SHA. Presence in the directory IS the human-merged approval gate; SHA bumps are new, re-reviewed PRs; ``removed.yaml`` is the kill list (installs of a removed name/repo are refused with the recorded reason). Full policy: ``plugin-catalog/README.md``. Live refresh: the docs build publishes the same data as ONE JSON document (``website/scripts/extract-plugins.py`` → ``/docs/api/plugin-catalog.json``, like the skills index), so an installed Hermes sees new entries and removals without updating. A fetch failure reuses the last valid cached copy regardless of age, then falls back to the in-tree copy when no valid cache exists. ) annotationsN) dataclassfield)Path)AnyDictListOptional)UTCzBhttps://hermes-agent.nousresearch.com/docs/api/plugin-catalog.jsongN@g@z^[0-9a-f]{40}$z"^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$z.githubusercontent.comc V^8dQhRRRR/#)urlstrreturnbool)formats"MC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\plugin_catalog.py __annotate__r3sppcpdpc^RIHpV!V4pVP;'gRP4pVPR8H;'d:\ V4;'d'V\ 9;'gVP\4#)urlsplithttps) urllib.parserhostnamelowerschemer IMAGE_HOSTSendswithIMAGE_HOST_SUFFIX)r rpartshosts& ris_allowed_image_urlr%3sb% SME NN b ' ' )D <<7 " o otDz o ot{7J7n7ndmm\mNnorz^[a-z0-9_-]{1,64}$cL]tRt^;t$R]R&RtR]R&RtR]R&RtR]R&RtR#) RemovedEntryrnamerreporeasondaterN) __name__ __module__ __qualname____firstlineno____annotations__r)r*r+__static_attributes__rrrr'r';s# ID#NFCD#Nrr'c]tRt^Ct$]!]R7tR]R&]!]R7tR]R&]!]R7t R]R&]!]R7t R]R&Rt R#) CatalogCapabilitiesdefault_factory list[str]provides_toolsprovides_hooksprovides_middleware requires_envrN) r,r-r.r/rlistr7r0r8r9r:r1rrrr3r3Cs? %d ;NI; %d ;NI;%*4%@@#D9L)9rr3ch]tRt^Kt$R]R&R]R&R]R&R]R&R]R&RtR]R&R tR]R &R tR]R &R tR]R &R t R]R&R t R]R&R t R]R&] !] R7tR]R&RtR]R&] !] R7tR]R&R tR]R&RtR]R&] !]R7tR]R&] !] R7tR]R&]RRl4tRR ltR!tR"#)#PluginCatalogEntryrr(r)sha description maintainer communitytierdesktopcategoryrrequires_hermessubdirdocs_urlversionimager4r6 screenshotsFrreadme platformstitle onboardingr3 capabilities known_issuescV^8dQhRR/#)r rrr)rs"rrPluginCatalogEntry.__annotate__bsJJCJrc tVP'dVP RVP 2#VP#)zK``_install_plugin_core`` identifier (``repo#subdir`` for monorepo entries).#)rFr))selfs&rinstall_identifier%PluginCatalogEntry.install_identifieras.04{{{$))Adkk]+I IrcV^8dQhRR/#)r rdict[str, Any]r)rs"rrrRfs   rc  VPp/RVPbRVPbRVPbRVPbRVP bRVP bRVPbRVPbRVPbR VPbR VPbR VPbR \VP4bR VPbR\VP 4bRVP"bRVP$bRR\VP&4R\VP(4R\VP*4R\VP,4/R\VP.4/C#)r(r)r>r?r@rBrDrErFrGrHrIrJrKrLrMrNrOr7r8r9r:rP)rOr(r)r>r?r@rBrDrErFrGrHrIr;rJrKrLrMrNr7r8r9r:rP)rUcapss& rto_dictPluginCatalogEntry.to_dictfs    DII  %tyy  27  CPRVRbRb  $//  +1499  >H$--   t33   dkk  $.t}}  ?H  X_`d`j`j  4 0 01  4Q(RL%R#D9L)9 JJ  rr=cV^8dQhRR/#r rrr)rs"rrrwsEEErcr\\4P4PPR, #)z=The ``plugin-catalog/`` directory shipped with this checkout.plugin-catalog)r__file__resolveparentrrrget_catalog_dirrfws' > ! ! # * * 1 14D DDrc V^8dQhRRRR/#)r rawrrr6r)rs"rrr~sff3f9frc \V\4'd?VUu.uF1p\V\\\34'gK&\V4NK3 up#.#uupiN) isinstancer;rintfloat)rhxs& r _str_listro~sDHRSVX\H]H]C DCq:a#sE1B#CFCFC Decee Ds #AAc$V^8dQhRRRRRR/#)r datarlabelrrOptional[PluginCatalogEntry]r)rs"rrrs"00S001M0rc \V\4'g\PRV4R#\ VP R4;'gR4p\ VP R4;'gR4p\ VP R4;'gR4P 4P4p\ VP R4;'gR4p\ VP R 4;'gR 4p\PV4'gR V: R 2MVPR 4'gRV: R2M\PV4'gRVP R4: R2MQV\9dRRP\4 RV: R2M)V\9dRRP\4 RV: R2MRpV'd\PRW4R#VP R4p\V\4'dTM/p \ VP R4;'gR4P 4p V 'd4\PV 4'g\PRW4Rp \ VP R4;'gR4P 4p V 'd*\!V 4'g\PRW4Rp \#VP R44U u.uFp \!V 4'gKV NK p p \%V 4\%\#VP R4448wd\PRV4\'R./RVbRVbRVbR\ VP R4;'gR4P 4bR\ VP R4;'gR4P 4bRVbR VbR\ VP R4;'gR4P 4bR \ VP R 4;'gR4P 4bR!\ VP R!4;'gR4P 4bRV bRV bRV bR"VP R"4R#JbR$\#VP R$44bR%\ VP R%4;'gR4P 4bR&VP R&4R'JbR(\#VP R(44bR\)\#V P R)44\#V P R*44\#V P R+44\#V P R,44R-7b#uup i)/z_Validate one entry mapping (YAML file or live-JSON element); ``None`` + warning on any failure.z+Plugin catalog: %s: entry must be a mappingNr(rr)r>rBrArDrCz invalid name z (must match [a-z0-9_-]{1,64})zhttps://z"repo must be an https:// URL (got )z4sha must be a full 40-character hex commit SHA (got ztier must be one of /z (got zcategory must be one of zPlugin catalog: %s: %srOrHzIPlugin catalog: %s: ignoring version %r (max 32 chars of [A-Za-z0-9._+-])rIzFPlugin catalog: %s: ignoring image %r (must be https on a GitHub host)rJz9Plugin catalog: %s: ignoring screenshots off GitHub hostsr?r@rErFrGrKFrLrMrNTrPr7r8r9r:)r7r8r9r:r)rkdictloggerwarningrgetstripr_NAME_REmatch startswith_SHA_RE CATALOG_TIERSjoinCATALOG_CATEGORIES _VERSION_REr%rolenr=r3)rqrrr(r)r>rBrDproblemcaps_rawr[rHrIsrJs&& rentry_from_mappingrs dD ! !DeL txx%%2 &D txx%%2 &D dhhuo## $ * * , 2 2 4C txx..; /D488J'4495HHPW[H\H\-x?@CG??S]C^C^1$ ;`g`m`mnq`r`rCDHHUOCVVW XPT\iPi#CHH]$;# txx -334::< DH S[ DHH%67==2>DDF   488H%++,224   @C488JCWC]C][]?^?d?d?f      %   3>   GKhhxFX`eFe  DHH[12 $((7#))r*002 @Dxx ?UY]?] txx78 )$TXX.>%?@QZ[_[c[cdt[uQv )$((3H*I J"488N#;<> ]s 9VVc V^8dQhRRRR/#)r pathrrrr)rs"rrrsTcrc\P!VPRR74;'g/# \d"p\P RY4Rp?R#Rp?ii;i) utf-8-sigencodingz%Plugin catalog: failed to read %s: %sN)yaml safe_load read_text Exceptionrxry)rexcs& r _read_yamlrsK~~dnnknBCIIrI >Js,22 AAAc V^8dQhRRRR/#)r raw_listrrlist[RemovedEntry]r)rs"rrrsDDD);Drc \V\4'g.#VUu.uFp\V\4'gKVPR4'gK4\ \ VR,4\ VPR4;'gR4\ VPR4;'gR4\ VPR4;'gR4R7NK up#uupi)r(r)rr*r+)r(r)r*r+)rkr;rwrzr'r)rrs& r_removed_from_listrs h % %  DAZ40 456UU6] 4 #ai.s155=3F3FB/GPSTUTYTYZbTcTiTigiPjaeeFm11r2 4 DD DsCCAC)"C Cc V^8dQhRRRR/#)r catalog_dirOptional[Path]rlist[PluginCatalogEntry]r)rs"rrrsn8PrcDT;'g \4pVP4'g.#.p\VPR44FSpVPR8XdK\ V4pVe\ V\V44MRpVfKBVPV4KU V#)uEvery valid ``*.yaml`` entry in the catalog dir (``removed.yaml`` excluded), sorted by file name. Malformed entries are skipped with a warning — never raises.z*.yaml removed.yamlN) rfis_dirsortedglobr(rrrappend)rrootentriesrrqentrys& r load_catalogrs  + +/+D ;;== Gtyy*+ 99 & $7;7G"4T3T   NN5 ! , Nrc V^8dQhRRRR/#)r rrrrr)rs"rrrsUU>U=OUrcT;'g \4R, pVP4'd \V4MRp\V\4'd\ VP R44#.#)uB``removed.yaml``'s ``removed:`` list; missing/malformed → empty.rNremoved)rfis_filerrkrwrrz)rrrqs& rload_removed_listrsT  , ,?, >D#||~~:d 4D6@t6L6L dhhy1 2TRTTrc$V^8dQhRRRRRR/#)r r(rrrrrsr)rs"rrrs'PPCPnPHdPrcBa\V3Rl\V44R4#)c3L<"TFqPS8XgKVxK R#5irjr(.0er(s& r $get_catalog_entry..sH5q45$ $N)nextr)r(rsf&rget_catalog_entryrs HL5H$ OOrc$V^8dQhRRRRRR/#)r rrqueryrrr)rs"rrrs(ee4eSeE]ercaT;'gRP4P4oS'gV#VUu.uFp\;QJdKV3RlVPVP.VP P O4F 'gK RM@ RM.sc+ba1 >+bs #TF)r{ranyr(r?rOr7)rrrrs&& @rfilter_entriesrs "##%A  ew!scAFFAMM+bANNDaDa+bcssscAFFAMM+bANNDaDa+bcc Aw ee esC AC  AC C c V^8dQhRRRR/#)r rrrrr)rs"rrrs11#1":1rc*\\4V4#rj)rr)rs&rsearch_catalogrs ,.% 00rz%^(?:[^@/\s]+@)?([^:/\s]+):(?!//)(.+)$c V^8dQhRRRR/#)r r rrr)rs"rrrs....rc^RIHpVP4p\P V4pV'd#VP ^4VP ^4rTM4RV9d+V!V4pVP ;'gRVPrTMRTrTVP4PR4pVPR4PR4PR4P4pV'dV RV 2#T#)uCanonical ``host/path`` for a repo URL: scheme, user, ``www.``, ``.git`` and trailing slashes are spelling, not identity — the kill list must match ``git@github.com:Evil/Bad.git`` when it names ``https://github.com/evil/bad``.rz://rzwww.rv.git) rrr{ _SCP_URL_REr}grouprrr removeprefix removesuffixrstrip)r rtextscpr$rr#s& r_normalize_repors& 99;D   D !C YYq\399Q >>rc V^8dQhRRRR/#)r homerrNoner)rs"rrr<s ^ ^ ^$ ^rc\V4R, R, PRR7R# \d"p\P RY4Rp?R#Rp?ii;i)uhBest-effort removal of the cached live catalog under *home* (any profile's home). ``hermes update`` drops it for every profile after the checkout changes: a snapshot fetched before the bump would otherwise out-vote the newer in-tree catalog (pins the update just changed, entries it just added) for the rest of :data:`LIVE_CATALOG_TTL_SECONDS` (#119340). The next :func:`fetch_live_catalog` re-fetches the published doc, or falls back to the in-tree catalog while the network is down — both newer than what was deleted. Safe when the cache is absent (first run, other profiles that never opened the plugins hub). rrT) missing_okz:Plugin catalog: could not drop the live cache under %s: %sN)runlinkrrxdebug)rrs& rinvalidate_live_cache_for_homer<sM^ dg  5 5===N ^ QSW]]^s)- AAAgc V^8dQhRRRR/#)r rrrOptional[dict[str, Any]]r)rs"rrrRs  T &> rc2VP4'gR#\P!VPRR74p\P!4VP 4P , \8d /VCR./CpV# \dR#i;i)uLA previously fetched copy still beats the in-tree one when the network is down — for :data:`LIVE_CATALOG_MAX_STALE_SECONDS`. Past that its pins may trail the checkout's own catalog (a 90-day-old cache outranked a freshly updated in-tree pin), so the entries are dropped and the caller falls back to in-tree; the removals are kept.Nrrr) rjsonloadsrtimestatst_mtimeLIVE_CATALOG_MAX_STALE_SECONDSr)rrqs& rrrRsv }}zz%//;/?@ 99;.. .1O O*d*Ir*D sBA,B BBforceFc V^8dQhRRRR/#)r rrrrr)rs"rrrbs#(#(#(2J#(rc\4pV'gzVP4'dd\P!4VP4P, \ 8d'\ P!VPRR74#T'g*\P!4\8d \T4#^RIp^RIHp^RIHpTP'\(\*RR7pTP-4\/TP04\28d \5R 4hTP 4p\7T\84'd&\7TP'R 4\:4'g \5R 4hT!TP<4T!T\ P>!T4TP@ R 2R 7T# \d"p\PRY4Rp?ELTRp?ii;i \dLp\PRT4\P!4\B,s \T4uRp?#Rp?ii;i)uThe published ``plugin-catalog.json`` (``{"entries": [...], "removed": [...]}``), cached under ``HERMES_HOME/cache`` for :data:`LIVE_CATALOG_TTL_SECONDS`. ``None`` on ANY failure — callers fall back to the in-tree catalog. A failed network attempt is remembered for :data:`LIVE_CATALOG_FAILURE_TTL_SECONDS` so a dead host costs one timeout per TTL window, not one per call (``force`` bypasses both caches).rrz,Plugin catalog: unreadable live cache %s: %sN)mkdir_under_hermes_home)atomic_write_textT)timeoutfollow_redirectszlive catalog payload too largerzunexpected live catalog payloadz.tmp-) tmp_prefixz%Plugin catalog: live fetch failed: %s)"rrrrrLIVE_CATALOG_TTL_SECONDSrrrrrxr_live_fetch_failed_untilrhttpxrrutilsrrzLIVE_CATALOG_URL_REQUEST_TIMEOUTraise_for_statusrcontent_MAX_LIVE_BYTES ValueErrorrkrwr;redumpsr( LIVE_CATALOG_FAILURE_TTL_SECONDS)rrrrrrresprqs$ rfetch_live_catalogrbs  EQTYY[5::<;P;P-PSk-k::eoo{oCD D TYY[#;; ''(<+yy)3CVZy[  t||  .=> >yy{$%%Z8KT-R-R>? ? - %D!1 E>RS ) Q CUPPQ* (  "C c3  s/'', ---RRTTV^^3^-GRRTT s*BB.#B B! B!c(V^8dQhRRRRRRRR/#)r treer=live tree_is_newerzOptional[bool]rrr)rs"rrrs, 2:L]kptrcVPVP8XdR#VeV#VP'd?VP'd-^RIHpV!VP4V!VP48#R# \dR#i;i)aSFor one entry present in both sources with a different pin: the newer catalog wins. Newer is decided by the checkout's catalog commit time vs the doc's ``generated_at`` when both resolve; otherwise by the entries' ``version`` labels when both parse; otherwise the live doc wins (a release install's in-tree copy is frozen at release time).F)Version)r>rHpackaging.versionr;r)r7r8r9r;s&&& r_prefer_in_tree_entryr=sr  xx488  |||   14<<(74<<+@@ @   s *A66 BBcV^8dQhRR/#)r rrr)rs"rrrs3rc V\4pVf \4#\VR,4UUu.uF"wr\V\ RV 24;pfK VNK$ pppV'g \4#\4Uu/uFq3P VbK pp\ V4\4rvVe VeWv8MRpVR,Uu/uF6p\V\4'gK\VPR44VbK8 p pVUu.uFpVP V9d5\WSP ,W84'dWSP ,MG\Y5PVP 4V PVP 4;'g/4NK up#uuppiuupiuupiuupi)u(Entries from the live (or cached) catalog, else the in-tree catalog. When both name an entry at different pins the NEWER source supplies it — right after ``hermes update`` bumps an in-tree pin, a cache fetched before the bump must not re-install the old one (see :func:`_prefer_in_tree_entry`).NrrTr()rr enumeraterr r(r5r"rkrwrrzr=_with_curated_fields) rqirhrrin_treelive_ttree_tr9 raw_by_names rload_catalog_liverGsv  D |~(i9Y9VQ*33C2DAaS0IJJ1q9GY ~"..1.Qvvqy.G1)$/1E1GF*0*<ASV_Z^M8U>[>[Y[\ ] Y2b s*FF7F;F!F!=B F& F&c(V^8dQhRRRRRRRR/#)r r8r=r7rsrhrYrr)rs"rrrs2EE1E9UE\jE0ErcVeVPVP8wdV#\Uu/uFq3V9gK V\W4bK ppV'd\P!V3/VB#T#uupirj)r>_CURATED_FIELDSgetattr dataclassesr2)r8r7rhkeymissings&&& rrArAsd |txx488+ 2AT/3PS^&sGD&&/GT3:;  t /w /DDUs A*A*cV^8dQhRR/#rr)rs"rrrsCC-Crc^\4pV'd\VPR44#.#)r)rrrz)rqs rrrs&  D6: dhhy1 2BBrc V^8dQhRRRR/#)r r(rrrsr)rs"rrrsJJJ)EJrc@a\V3Rl\44R4#)c3L<"TFqPS8XgKVxK R#5irjrrs& rr)get_live_catalog_entry..sB/q66T>/rN)rrGrsfrget_live_catalog_entryrUs B-/BD IIrc V^8dQhRRRR/#)r rr=rrr)rs"rrrs$63rc VPpRVP3RVP3RVP3RVP33UUu.uF%wr#V'gKV RRP V4 2NK' pppVP RVP RVP R 2.pVP'dVPVP4TPR V'dR P V4MR R 24VP'd/VPRRP VP4 R 24VP'd VPRVP R 24VP'd/VPRR P VP4 R 24RP V4#uuppi)zIOne paragraph shown at install/enable prompts: what the user is granting.zregisters tool(s):zhook(s):z middleware:zrequires env var(s): z, z (z, maintained by ruz This plugin z; z1declares no tools, hooks, middleware, or env vars.z Platforms: zRequires Hermes zKnown issues: )rOr7r8r9r:rr(rBr@r?rrLrErP)rr[rritemsr#bitss& rentry_capability_summaryr\s   D t223j$BUBU5V 0014JDL]L]3^@` j@`|uch+wa %() *@`E jzzl"UZZL(89I9I8J! L MD  E%%&KK,5tyy/>qrrstu  k$))EOO"! js  F;F;)officialverifiedrA) rCmemoryplatformwebtoolsvoice automationmodelsgenerali`TiQi )zraw.githubusercontent.comz github.comrjr)rNrM)L__conditional_annotations____doc__ __future__rrLrloggingrerrrpathlibrtypingrrrr hermes_yamlrr.r getLoggerr,rxrrr rrrr rcompilerrr r"r%r|r'r3r=rfrorrrrrrrrrrrrrrrrrrrrr0r"rr5r=rGrJrArrUr\)rgs@rrqs #  (,,   8 $5 sW&!-#' ! **& 'jj>? : ,p ::+ ,   :: : ( (  ( VEf0fD"UPe1 jjAB .& 05K $? ^&  #(#(L*.- F) $.*EC J r