Hermes: update migrates to a linked plugin; no bundled Jev checks; shadow mode is observe - #868

Merged

NiveditJain merged 26 commits into

mainfrom

feat/pre-1.0.8

Sep 29, 2026

Commits on Sep 29, 2026

feat(hermes): link the native plugin into each profile instead of copying it

chhhee10
and
claude
committed
6d9da74
fix(update): migrate Hermes profiles to the linked plugin and fail when it cannot

chhhee10
and
claude
committed
5a34c87
docs(hermes): linked plugin, update migration, and the cron gap

chhhee10
and
claude
committed
53fc126
collector: read Jev's jevMode "observe" and ship one value

chhhee10
and
claude
committed
ff95959
jev: rename the "shadow" mode to "observe", reading "shadow" as an alias

chhhee10
and
claude
committed
f7a58b6
docs: Jev's log-only mode is "observe"

chhhee10
and
claude
committed
c4ee567
fp: show Jev machines per mode in guardrails summary, as observe

chhhee10
and
claude
committed
02ea9f1
Merge pre108/t3-hermes-update: update migrates Hermes to the linked plugin

chhhee10
and
claude
committed
ecb62e6
Merge pre108/t2-observe: Jev shadow mode renamed observe
chhhee10
committed
a8f44a6
feat(jev): ship no Jev checks; ask only what installed packs declare

chhhee10
and
claude
committed
ca375f4
test(jev): a Jev-configured machine with no Jev pack is the unconfigured machine

chhhee10
and
claude
committed
24877c0
docs(jev): Jev's checks come from FailproofAI/jev-policies, not the package

chhhee10
and
claude
committed
75bd5d5
Merge pre108/t1-unbundle-jev: no pack, no Jev checks
chhhee10
committed
c14f6df
fix(packs): a Jev-only pack does not retire the regex migration shim

chhhee10
and
claude
committed
c360f18
refactor(jev): drop the `shadow` mode alias; observe is the only name

chhhee10
and
claude
committed
9205643
test: mock hasInstalledRegexPacks, and stop testing a compiled-in Jev check

chhhee10
and
claude
committed
af9e856
fix: address review on #868 — survey shim check, unknown-mode clears, plugin path

chhhee10
and
claude
committed
8aaa98a
test(harness): extra paths survive the config.json writes `config` and `update` make

chhhee10
and
claude
committed
ddee8b8
fix: write agent configs crash-safely; never rewrite one that does not parse

chhhee10
and
claude
committed
dda3d0d
Merge origin/main into feat/pre-1.0.8

chhhee10
and
claude
committed
e3f2abf
chore: bump version to 1.0.9-beta.1

chhhee10
and
claude
committed
3794e46
fix(hermes): a plugin listed in plugins.disabled is not enabled (SEC-001)

chhhee10
and
claude
committed
42d23c5
chore: bump version to 1.0.9-beta.2

chhhee10
and
claude
committed
6e4e2d5
fix(update): skip the daemon reinstall when it already runs this version

chhhee10
and
claude
committed
af95edb
fix: close Hermes review F8–F11 (backup symlink, dangling config link, plugin ownership, per-profile isolation)

chhhee10
and
claude
committed
86232f2
docs(changelog): cut the 1.0.9 stable section

chhhee10
and
claude
committed
689b585

Navigation Menu

Hermes: update migrates to a linked plugin; no bundled Jev checks; shadow mode is observe - #868

Hermes: update migrates to a linked plugin; no bundled Jev checks; shadow mode is observe#868
NiveditJain merged 26 commits into
mainfrom
feat/pre-1.0.8

Commits on Sep 29, 2026

feat(hermes): link the native plugin into each profile instead of copying it

fix(update): migrate Hermes profiles to the linked plugin and fail when it cannot

docs(hermes): linked plugin, update migration, and the cron gap

collector: read Jev's jevMode "observe" and ship one value

jev: rename the "shadow" mode to "observe", reading "shadow" as an alias

docs: Jev's log-only mode is "observe"

fp: show Jev machines per mode in guardrails summary, as observe

Merge pre108/t3-hermes-update: update migrates Hermes to the linked plugin

Merge pre108/t2-observe: Jev shadow mode renamed observe

feat(jev): ship no Jev checks; ask only what installed packs declare

test(jev): a Jev-configured machine with no Jev pack is the unconfigured machine

docs(jev): Jev's checks come from FailproofAI/jev-policies, not the package

Merge pre108/t1-unbundle-jev: no pack, no Jev checks

fix(packs): a Jev-only pack does not retire the regex migration shim

refactor(jev): drop the `shadow` mode alias; observe is the only name

test: mock hasInstalledRegexPacks, and stop testing a compiled-in Jev check

fix: address review on #868 — survey shim check, unknown-mode clears, plugin path

test(harness): extra paths survive the config.json writes `config` and `update` make

fix: write agent configs crash-safely; never rewrite one that does not parse

Merge origin/main into feat/pre-1.0.8

chore: bump version to 1.0.9-beta.1

fix(hermes): a plugin listed in plugins.disabled is not enabled (SEC-001)

chore: bump version to 1.0.9-beta.2

fix(update): skip the daemon reinstall when it already runs this version

fix: close Hermes review F8–F11 (backup symlink, dangling config link, plugin ownership, per-profile isolation)

docs(changelog): cut the 1.0.9 stable section