Agent Oasis 3.0.0 - Hermes Fleet
Hermes goes from a 221-line aggregate-only sync button buried in Agents to a first-class dashboard.
Hermes Fleet
- Live kanban shape and its oldest blockers, read via
hermes kanban stats/list --json. - The open decision queue, grouped by authority level with ack-deadline urgency, read via the standalone
decide.py list --jsontool. - Roster and gateway process liveness, read via
hermes profile list/hermes gateway list. - Fleet structural integrity from
fleet_integrity.py's state file. - Per-agent session/message/token telemetry, carried over from the prior release.
- Works against any Hermes install, not just Shadowfetch's own - every remote path (profiles, tools, state, gateway unit pattern) is configurable and validated against the same injection-resistant charset already used for the SSH host.
- No fleet-wide "duty success rate" is invented: no such aggregate exists on a real Hermes install, and a locked-in test fails the build if a field shaped like one is ever added.
Redaction, by construction
Kanban card bodies and decision context/recommendation/options text - which on a real install contain internal strategic content - are never decoded into the app. The Swift models simply have no property for that data, so JSONDecoder drops it before a value exists. Two new tests re-encode a parsed model built from a real sensitive-looking payload and assert the sensitive text is verifiably absent.
Docs
New docs/HERMES-FLEET.md: the exact commands run, exact fields kept versus dropped, and the full threat model for the expanded SSH surface.
Verification
79 tests (was 70), all green. Signed with a Developer ID Application certificate, notarized, and stapled - spctl -a -vvv -t open accepts the DMG.
Verify
shasum -a 256 -c SHA256SUMS
spctl -a -vvv -t open Agent-Oasis-3.0.0.dmg