chore(plugin-catalog): review disclosure for orbit-desktop

This commit is contained in:
teknium1
2026-09-26 11:22:48 -07:00
committed by Teknium
parent 2dd2ebfef4
commit 2a05208012

View File

@@ -2,7 +2,35 @@ name: orbit-desktop
repo: https://github.com/mojomast/orbitdesktop
sha: 98b9a5ee13cb1841e819d7a9c873d7de427ba347
subdir: hermes-plugin
description: "Your workspace, shaped by your agent: a bundled browser desktop powered by Hermes. Describe the workflow you need; the agent can rearrange windows and panes, customize appearance, build versioned sandboxed web apps, and refine your workspace with scoped control, previews and checkpoints. Illustrated examples show a project-specific COCS 3D asset viewer and OmniVoice experiment bench; these example apps and their backends are not bundled. Includes permission-controlled desktop agent-reply notifications (generic alerts while Orbit remains open; browser/OS restrictions apply) and 100,000-character chat messages, guidance and drafts. Includes Devplan Studio for guided interviews, specifications, phased devplans and circular-development handoff exports. Optional conversational interviews require explicit service setup and a working Hermes provider login, and send project context to that provider. Includes 14 distinctive interface presets including Nous Atelier, with local wallpapers, themed icons and taskbar treatments. Agent chats include inline expandable tool activity, running/completed/failed summaries, an activity strip, a workspace agent overview and responsive toolbar controls. Missing tool-call IDs are explicitly uncorrelated. Embedded apps retain their own styling. Includes a reviewed GitHub app catalog with immutable source pins and a portable Live Telemetry package. Catalog sync (operator-run scripts/orbit_catalog.py, never triggered by the Hermes tool or at register) reads the entry list from the upstream repo's main branch at sync time and downloads third-party static app bundles at their per-entry commit pins; installed UI runs in a sandboxed iframe and never executes backend code. Optional telemetry backend staging downloads pinned Python; execution requires explicit host-code trust and separate private authenticated HTTPS setup. Backend code runs with owner privileges, not a sandbox. Disclosure — adapter talks only to the configured local Orbit server (loopback, Bearer capability from runtime_dir); mutations off by default. Optional orbit.py setup runs npm ci / node. Bundled VNC/Xpra launchers use the Orbit page's hostname and scheme; optional Linux apps require separate provisioning. Optional api.typesafe.ai requests require explicit consent and a user-supplied key."
description: >-
Your workspace, shaped by your agent: a bundled browser desktop powered by Hermes. Describe the
workflow you need; the agent can rearrange windows and panes, customize appearance, build versioned
sandboxed web apps, and refine your workspace with scoped control, previews and checkpoints.
Illustrated examples show a project-specific COCS 3D asset viewer and OmniVoice experiment bench;
these example apps and their backends are not bundled. Includes permission-controlled desktop
agent-reply notifications (generic alerts while Orbit remains open; browser/OS restrictions apply)
and 100,000-character chat messages, guidance and drafts. Includes Devplan Studio for guided
interviews, specifications, phased devplans and circular-development handoff exports. Optional
conversational interviews require explicit service setup and a working Hermes provider login, and
send project context to that provider. Includes 14 distinctive interface presets including Nous
Atelier, with local wallpapers, themed icons and taskbar treatments. Agent chats include inline
expandable tool activity, running/completed/failed summaries, an activity strip, a workspace agent
overview and responsive toolbar controls. Missing tool-call IDs are explicitly uncorrelated.
Embedded apps retain their own styling. Includes a reviewed GitHub app catalog with immutable source
pins and a portable Live Telemetry package. Catalog sync (operator-run scripts/orbit_catalog.py,
never triggered by the Hermes tool or at register) reads the entry list from the upstream repo's
main branch at sync time and downloads third-party static app bundles at their per-entry commit
pins; installed UI runs in a sandboxed iframe and never executes backend code. Optional telemetry
backend staging downloads pinned Python; execution requires explicit host-code trust and separate
private authenticated HTTPS setup. Backend code runs with owner privileges, not a sandbox.
Disclosure — adapter talks only to the configured local Orbit server (loopback, Bearer capability
from runtime_dir); mutations off by default. Optional orbit.py setup runs npm ci / node. Bundled
VNC/Xpra launchers use the Orbit page's hostname and scheme; optional Linux apps require separate
provisioning. Optional api.typesafe.ai requests require explicit consent and a user-supplied key.
The 0.2.7 web app's opt-in Show tools panel displays tool call arguments and results for the current
Hermes conversation, fetched from the local Orbit server and local Hermes session API and kept in
the browser only. The Nous Atelier theme contains Nous Research logo artwork and is unofficial;
Orbit is not affiliated with Nous Research.
maintainer: mojomast
tier: community
category: desktop