a7madgamal

GitHub profile1 plugin in the catalog

Plugins by a7madgamal

1 plugins by a7madgamal in the catalog, most-starred first.

a7madgamalstmpUse a phone as the trust boundary: Gmail, Calendar, Drive, contacts, notifications, a credential vault and SSH over STMP — every gated call waits for a human on the device, and no credential is ever stored on the host. Disclosure — needs the STMP Android app (public repository, Apache-2.0, APK on its releases page) reachable from the Hermes host over LAN or tailnet, so it does nothing without a paired phone; acts on that phone's signed-in Google account (sends mail, writes calendar events, uploads and downloads Drive files — a download writes only inside the configured download_dir and an upload reads only inside upload_dir or outside the credential stores, since the model names those paths and the settings bound them) and runs SSH commands through private keys stored on the device, which never leave it; stores nothing at rest beyond the connected instance's capability snapshot (contract version, plugin and route counts, SSH connection names) in Hermes's own plugin state, rewritten only on change; two routes are gate-exempt by design and say so in their tool descriptions — POST /tts and POST /audio/{cue} play sound only; every other route goes through the phone's approval gate, whose per-route mode (WHITELIST, PARANOID or DONT_DISTURB) is the device owner's policy, not the plugin's; declares and reads no credential (requires_env is empty, no oauth block), no telemetry, no self-updater, and talks to exactly one address: the configured base_url.Communitytools