openhermes 2.8.0 → 4.0.0

package/harness/rules/verification.md

@@ -1,88 +0,0 @@
-# Verification — Skeptical Evidence Protocol
-
-Constitutional parent: principle 11 (`openhermes\codex\CONSTITUTION.md`).
-Trust nothing without evidence. Every claim, instruction, document, and behavioral assertion must be confirmed by personal observation or a cached verification receipt before it may be treated as ground truth.
-
-Verification receipts prove that an artifact was observed in a particular state. They do not, by themselves, prove a live runtime claim unless the receipt captures a live-session artifact or log.
-
-## Core Stance
-
-- **User claims** — Input, not truth. Verify against evidence before acting.
-- **Document claims** — Documents rot. Cross-reference against current filesystem/code state.
-- **Code/script claims** — Past success does not guarantee present function. Run and check.
-- **Dependency claims** — Package manifests can be stale. Check the filesystem directly.
-
-## Verification Cache (Memory-Backed)
-
-Successful verifications are stored via `ohc_save` so repeated checks of unchanged artifacts are skipped.
-
-### Cache Key
-
-Each verification receipt is keyed by:
-- **Artifact identity**: normalized file path, or logical identity (e.g., `state:dcp-installed`)
-- **Artifact fingerprint**: file `mtime` + `size` (files), or structured state hash (logical)
-
-### Cache Lifecycle
-
-1. **Before trusting a claim**: search memory (`ohc_get` or `ohc_list`) for matching receipt.
-2. **Receipt found + fingerprint matches**: artifact unchanged. Trust cached result. Skip re-verify.
-3. **Receipt found + fingerprint differs**: artifact changed. Re-verify. Stale receipt is invalid.
-4. **No receipt found**: verify fresh. Store receipt on success.
-
-### Receipt Storage
-
-Use `ohc_save` with class `verification_receipt` — a dedicated memory class (schema: `schemas\verification_receipt.schema.json`). Receipts are stored as file-per-object in `memory\verification_receipts\<id>.json`.
-
-Required fields:
-- **artifact**: path or logical identity of the verified artifact
-- **fingerprint**: { path, mtime, size, sha256? } — determines cache validity
-- **environment**: { cwd, os, shell, provider, model } — reproducibility context
-- **method**: "command" | "read" | "test" | "schema-validate" | "manual-inspection" | "bash" | "grep"
-- **result**: "pass" | "fail" | "unknown"
-- **result_detail**: free-text description of what passed/failed, including output excerpts for command-based methods
-- **expires_at**: ISO-8601 — hard expiry regardless of fingerprint match (default: 30 days)
-- **supersedes / superseded_by**: receipt chains for audit trail
-
-Receipt quality gates:
-1. Every receipt must have: `artifact`, `method`, `result`, `result_detail`, `fingerprint`, `environment`, `provenance.session_id`, `created_at`.
-2. Command-based receipts (`method: command | bash | test`) must include output excerpt or exit code in `result_detail`.
-3. Config-based receipts (`method: manual-inspection | schema-validate | grep`) must reference the specific file paths inspected.
-4. No receipt may exceed 30 lines. If more detail is needed, link to a file.
-5. Receipts that supersede older ones must set `supersedes` to the prior receipt ID. The older receipt gets `superseded_by`.
-6. Receipts without `fingerprint` are non-cacheable — they must be re-verified every time.
-
-Receipts stored under `decision` with `v:` prefix are deprecated. Migrate to `verification_receipt` class on next touch.
-
-## Verification Methods by Artifact
-
-| Artifact | Method | Evidence |
-|---|---|---|
-| File content | `read` + grep for expected text | Exact match |
-| Code behavior | `bash` with test command | Exit 0 + expected output |
-| Directory structure | `read` (dir) or `glob` | Entry list matches |
-| Installation state | `bash (cmd --version)` | Non-error + expected version |
-| Document truth | Cross-ref code/filesystem | Primary source confirms doc |
-| User claim | Execute/read referenced thing | Primary evidence matches claim |
-
-## Contradiction Protocol
-
-When verification reveals evidence contradicts a document or user claim:
-
-1. **Pause** — do not proceed on either source.
-2. **Log** — `ohc_save` as `constraint` or `backlog` with both claim and contradictory evidence.
-3. **Flag** — ask user about the discrepancy. Present both sides.
-4. **Resolve** — let user decide which source is authoritative. Update document if needed.
-
-## When to Skip Verification
-
-Allowed ONLY when:
-- Cached receipt with matching fingerprint exists in memory, AND
-- Artifact is confirmed unchanged (same mtime/hash)
-
-Never skip based on "should work" or "user says it works."
-
-## Integration
-
-- **Precedence** (`rules/precedence.md`): verified claim outranks unverified claim at same level. A verification receipt raises the effective priority of the claim it supports.
-- **Memory Retrieval** (`rules/retrieval.md`): verification receipts are queried before substantive work (Gate 2) and before task close (Gate 3).
-- **Self-Edit** (`AGENTS.md` Self-Edit Authority): adding verification receipts is unconditionally allowed.

package/harness/scripts/sync-commands.mjs

@@ -1,259 +0,0 @@
-#!/usr/bin/env node
-import fs from "node:fs"
-import path from "node:path"
-import { fileURLToPath } from "node:url"
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const REPO_ROOT = path.resolve(__dirname, "..", "..")
-const COMMANDS_DIR = path.join(REPO_ROOT, "harness", "commands")
-const BOOTSTRAP_FILE = path.join(REPO_ROOT, "bootstrap.mjs")
-const README_FILE = path.join(REPO_ROOT, "README.md")
-
-const COMMANDS_START = "<!-- COMMANDS:START -->"
-const COMMANDS_END = "<!-- COMMANDS:END -->"
-
-const HOOK_ONLY = new Set(["update-me"])
-
-function parseRegistry(src) {
-  const commands = {}
-  const blockMatch = src.match(/config\.command\s*=\s*\{([\s\S]*?)\n\s*\}/)
-  if (!blockMatch) return commands
-
-  let rest = blockMatch[1]
-  const entryRe = /^\s*"([^"]+)"\s*:\s*\{([\s\S]*?)\},?\s*$/gm
-  let m
-  while ((m = entryRe.exec(rest)) !== null) {
-    const name = m[1]
-    const body = m[2]
-    const agent = body.match(/agent:\s*"([^"]+)"/)?.[1] ?? ""
-    const description = body.match(/description:\s*"([^"]+)"/)?.[1] ?? ""
-    const template = body.match(/template:\s*ct\("([^"]+)"\)/) ? m[0].match(/template:\s*(ct\("[^"]+"\)|""|'')/)?.[1] : ""
-    const hasFile = template.includes("ct(")
-    commands[name] = { name, agent, description, hasFile }
-  }
-  return commands
-}
-
-function parseCommandFile(filePath) {
-  const src = fs.readFileSync(filePath, "utf8")
-  const name = path.basename(filePath, ".md")
-  const description = src.match(/^description:\s*(.+)$/m)?.[1] ?? ""
-  const agent = src.match(/^agent:\s*(.+)$/m)?.[1] ?? ""
-  return { name, description, agent }
-}
-
-function scanCommandFiles() {
-  const files = fs.readdirSync(COMMANDS_DIR).filter(f => f.endsWith(".md"))
-  const map = {}
-  for (const f of files) {
-    const parsed = parseCommandFile(path.join(COMMANDS_DIR, f))
-    map[parsed.name] = parsed
-  }
-  return map
-}
-
-function getHookCommands() {
-  return [...HOOK_ONLY].map(name => ({ name, agent: "", description: "Hook-handled (see plugin source)" }))
-}
-
-function printReport(registry, filesOnDisk, hookCommands, cmdNames) {
-  console.log("")
-  console.log("  COMMAND SYNC REPORT")
-  console.log("  " + "=".repeat(50))
-  const registered = new Set(Object.keys(registry))
-  const onDisk = new Set(Object.keys(filesOnDisk))
-  const allHooks = new Set(hookCommands.map(h => h.name))
-  const hookNoReg = [...allHooks].filter(n => !registered.has(n) && !onDisk.has(n))
-
-  console.log(`  Registered in bootstrap.mjs:  ${registered.size}`)
-  console.log(`  Files in harness/commands/:    ${onDisk.size}`)
-  console.log(`  Hook-only (no registry):        ${hookNoReg.length}`)
-  console.log(`  Total real commands:           ${cmdNames.length}`)
-  console.log("")
-
-  const registeredNoFile = [...registered].filter(n => !onDisk.has(n))
-  const fileNotRegistered = [...onDisk].filter(n => !registered.has(n) && !allHooks.has(n))
-
-  if (registeredNoFile.length) {
-    console.log("  ⚠ REGISTERED, NO FILE:")
-    for (const n of registeredNoFile) {
-      const e = registry[n]
-      console.log(`    /${n}  —  ${e.description}`)
-    }
-    console.log("")
-  }
-
-  if (fileNotRegistered.length) {
-    console.log("  ⚠ FILE EXISTS, NOT REGISTERED:")
-    for (const n of fileNotRegistered) {
-      console.log(`    /${n}`)
-    }
-    console.log("")
-  }
-
-  if (hookNoReg.length) {
-    console.log("  ℹ HOOK-ONLY (no registry, no file):")
-    for (const n of hookNoReg) {
-      console.log(`    /${n}`)
-    }
-    console.log("")
-  }
-
-  if (!registeredNoFile.length && !fileNotRegistered.length) {
-    console.log("  ✓ Everything in sync — no gaps.")
-    console.log("")
-  }
-}
-
-function generateMissingFiles(registry, filesOnDisk) {
-  let count = 0
-  for (const [name, entry] of Object.entries(registry)) {
-    if (filesOnDisk[name]) continue
-
-    const templateFile = `${name}.md`
-    const agent = entry.agent || "OpenHermes"
-    const desc = entry.description
-
-    let md = `---
-description: ${desc}
-agent: ${agent}
-subtask: true
----
-
-# ${name.charAt(0).toUpperCase() + name.slice(1)} Command
-
-`
-
-    if (name === "ohc") {
-      md += `OHC context management — hook-handled.\n\nRun \`/ohc status\` to check context usage, \`/ohc compress [targetTokens] [focus]\` to free space.\n\n$ARGUMENTS\n`
-    } else {
-      md += `${desc}: $ARGUMENTS\n`
-    }
-
-    fs.writeFileSync(path.join(COMMANDS_DIR, templateFile), md, "utf8")
-    console.log(`  ✓ Created harness/commands/${templateFile}`)
-    count++
-  }
-
-  if (count === 0) console.log("  No missing files to generate.")
-  return count
-}
-
-function getCommandNames(registry, hookCommands) {
-  const registered = new Set(Object.keys(registry))
-  const hookOnly = hookCommands.filter(h => !registered.has(h.name)).map(h => h.name)
-  const names = [...registered, ...hookOnly]
-  names.sort()
-  return names
-}
-
-function formatCommandRow(names) {
-  const count = names.length
-  const list = names.map(n => `\`/${n}\``).join(", ")
-  return `| **${count} slash commands** | ${list} |`
-}
-
-function formatBacktickList(names) {
-  return ` ${names.map(n => `\\\`/${n}\\\``).join(", ")}`
-}
-
-function syncBootstrap(registry, hookCommands) {
-  let src = fs.readFileSync(BOOTSTRAP_FILE, "utf8")
-  const cmdNames = getCommandNames(registry, hookCommands)
-  const row = formatCommandRow(cmdNames)
-
-  const startIdx = src.indexOf(COMMANDS_START)
-  const endIdx = src.indexOf(COMMANDS_END)
-
-  if (startIdx === -1 || endIdx === -1) {
-    console.log("  ✗ Markers not found in bootstrap.mjs. Inserting markers.")
-    const plugRowRe = /(\|\s+\*\*Plugins\s*\*\*.*\|)/
-    const match = src.match(plugRowRe)
-    if (!match) {
-      console.log("  ✗ Could not find Plugins row to anchor insertion.")
-      return false
-    }
-    const insertAfter = match.index + match[0].length
-    const newRow = `\n| **Slash commands** | ${COMMANDS_START} ${COMMANDS_END} |`
-    src = src.slice(0, insertAfter) + newRow + src.slice(insertAfter)
-    // Re-find markers for content replacement below
-    const newStart = src.indexOf(COMMANDS_START)
-    const newEnd = src.indexOf(COMMANDS_END)
-    if (newStart !== -1 && newEnd !== -1 && newEnd > newStart) {
-      const content = formatBacktickList(cmdNames)
-      src = src.slice(0, newStart + COMMANDS_START.length) + content + src.slice(newEnd)
-    }
-    fs.writeFileSync(BOOTSTRAP_FILE, src, "utf8")
-    console.log("  ✓ Inserted Slash commands row in bootstrap.mjs")
-    return true
-  }
-
-  if (endIdx <= startIdx) {
-    console.log("  ✗ Markers out of order in bootstrap.mjs")
-    return false
-  }
-
-  const content = formatBacktickList(cmdNames)
-  src = src.slice(0, startIdx + COMMANDS_START.length) + content + src.slice(endIdx)
-  fs.writeFileSync(BOOTSTRAP_FILE, src, "utf8")
-  console.log("  ✓ Updated Slash commands row in bootstrap.mjs")
-  return true
-}
-
-function syncReadme(registry, hookCommands) {
-  let src = fs.readFileSync(README_FILE, "utf8")
-  const cmdNames = getCommandNames(registry, hookCommands)
-  const row = formatCommandRow(cmdNames)
-
-  const tableRowRe = /^\|\s*\*\*(\d+)\s*slash commands\s*\*\*.*\|$/m
-  const match = src.match(tableRowRe)
-  if (!match) {
-    console.log("  ✗ Could not find slash commands row in README.md")
-    return false
-  }
-
-  src = src.replace(tableRowRe, row)
-  fs.writeFileSync(README_FILE, src, "utf8")
-  console.log(`  ✓ Updated README.md: ${cmdNames.length} commands`)
-  return true
-}
-
-// Main
-const args = process.argv.slice(2)
-const doAudit = args.includes("--audit") || args.length === 0
-const doGenerate = args.includes("--generate") || args.length === 0
-const doSyncBootstrap = args.includes("--sync-bootstrap") || args.includes("--sync") || args.length === 0
-const doSyncReadme = args.includes("--sync-readme") || args.includes("--sync") || args.length === 0
-
-console.log("  ▸ syncing command definitions...")
-console.log("")
-
-const bootstrapSrc = fs.readFileSync(BOOTSTRAP_FILE, "utf8")
-const registry = parseRegistry(bootstrapSrc)
-const filesOnDisk = scanCommandFiles()
-const hookCommands = getHookCommands()
-const cmdNames = getCommandNames(registry, hookCommands)
-
-if (doAudit) printReport(registry, filesOnDisk, hookCommands, cmdNames)
-
-if (doGenerate) {
-  console.log("  [generate]")
-  generateMissingFiles(registry, filesOnDisk)
-  console.log("")
-}
-
-if (doSyncBootstrap) {
-  console.log("  [sync-bootstrap]")
-  const ok = syncBootstrap(registry, hookCommands)
-  if (!ok) process.exitCode = 1
-  console.log("")
-}
-
-if (doSyncReadme) {
-  console.log("  [sync-readme]")
-  const ok = syncReadme(registry, hookCommands)
-  if (!ok) process.exitCode = 1
-  console.log("")
-}
-
-console.log("  done.")

package/harness/skills/.bundled_manifest

@@ -1,17 +0,0 @@
-{
-  "version": 1,
-  "description": "Bundled skills shipped with openhermes. These are never subject to curator mutation, archive, or deletion.",
-  "skills": [
-    { "name": "api-design", "bundled": true, "created_by": "openhermes" },
-    { "name": "backend-patterns", "bundled": true, "created_by": "openhermes" },
-    { "name": "coding-standards", "bundled": true, "created_by": "openhermes" },
-    { "name": "e2e-testing", "bundled": true, "created_by": "openhermes" },
-    { "name": "frontend-patterns", "bundled": true, "created_by": "openhermes" },
-    { "name": "frontend-slides", "bundled": true, "created_by": "openhermes" },
-    { "name": "security-review", "bundled": true, "created_by": "openhermes" },
-    { "name": "strategic-compact", "bundled": true, "created_by": "openhermes" },
-    { "name": "tdd-workflow", "bundled": true, "created_by": "openhermes" },
-    { "name": "verification-loop", "bundled": true, "created_by": "openhermes" }
-  ],
-  "updated_at": "2026-05-08T00:00:00Z"
-}

package/harness/skills/.usage.json

@@ -1,6 +0,0 @@
-{
-  "version": 1,
-  "description": "Skill usage telemetry. Bundled skills are excluded from curator mutation but tracked for load/use counts.",
-  "skills": {},
-  "updated_at": "2026-05-08T00:00:00Z"
-}