justrunme

GitHub profile1 plugin in the catalog

Plugins by justrunme

1 plugins by justrunme in the catalog, most-starred first.

justrunmeairlock-sandboxTerminal backend that routes Hermes command execution through an operator-chosen Airlock HTTPS API and disposable sandbox, then surfaces receipts (RFC 8785 JCS, SHA-256, Ed25519) as BLOCKED / ALLOWED / VERIFIED (`hermes config set terminal.backend airlock_sandbox`). Requires an explicit HTTPS origin `base_url` (no built-in default host). When `verify_receipts` is true (default), requires a locally configured `public_key_hex` obtained out-of-band — the verifying key is never fetched from the Airlock API at verify time. VERIFIED binds signed decision + execution digests/exit_code only; it does not prove command text and does not verify full receipt-chain linkage (`prev_hash` is informational). Disclosure — HTTPS calls to the configured origin only (`/healthz`, `/api/arena`, `/api/receipt/{id}`); optional secret `AIRLOCK_API_TOKEN` via Hermes secret scope; no host shell of its own (commands run only inside Airlock when policy allows). Hermes dangerous-command approvals are not bypassed. File-tool stdin pipes and non-default cwd are refused (Airlock arena has neither process-stdin nor cwd).Communitytools