himanusia

GitHub and GitHub Enterprise tools with bot-first attribution and approval-gated issue/PR writes. Disclosure — authenticates as a GitHub App from GITHUB_APP_ID, GITHUB_APP_INSTALLATION_ID and a private key in GITHUB_APP_PRIVATE_KEY or GITHUB_APP_PRIVATE_KEY_PATH/_FILE (read from the profile env or HERMES_HOME/.env, held in memory only, never written or logged), falling back to GITHUB_TOKEN/GH_TOKEN or `gh auth token` when no App variables are set, and reports which identity acted in every result. Talks only to https://api.github.com or the operator-configured GITHUB_API_URL / settings.api_url (HTTPS, no redirects; no tool argument can change the host). Issue/comment/review/merge writes stay disabled until settings.allow_write_actions is true and each one additionally goes through Hermes's human-approval prompt via its pre_tool_call hook (an 'always' answer does not persist).

Native Hermes Agent plugin that runs the local Atoll notch monitor for Hermes session and turn status on macOS. Disclosure — macOS only. Starts a detached Node daemon on every Hermes session that reads state.db read-only and sends session titles, model/profile/token stats and a ≤96-char redacted preview of your latest request to the third-party Atoll notch app over localhost. hermes notch setup clones and builds the author's Atoll fork (github.com/himanusia/Atoll at a pinned commit, not reviewed here) with Xcode and installs an unnotarized app to ~/Applications. Node deps install via Hermes's npm ci prompt. Run hermes notch stop before removing.