chore(plugin-catalog): review disclosure for orbit-desktop
This commit is contained in:
@@ -2,7 +2,35 @@ name: orbit-desktop
|
||||
repo: https://github.com/mojomast/orbitdesktop
|
||||
sha: 98b9a5ee13cb1841e819d7a9c873d7de427ba347
|
||||
subdir: hermes-plugin
|
||||
description: "Your workspace, shaped by your agent: a bundled browser desktop powered by Hermes. Describe the workflow you need; the agent can rearrange windows and panes, customize appearance, build versioned sandboxed web apps, and refine your workspace with scoped control, previews and checkpoints. Illustrated examples show a project-specific COCS 3D asset viewer and OmniVoice experiment bench; these example apps and their backends are not bundled. Includes permission-controlled desktop agent-reply notifications (generic alerts while Orbit remains open; browser/OS restrictions apply) and 100,000-character chat messages, guidance and drafts. Includes Devplan Studio for guided interviews, specifications, phased devplans and circular-development handoff exports. Optional conversational interviews require explicit service setup and a working Hermes provider login, and send project context to that provider. Includes 14 distinctive interface presets including Nous Atelier, with local wallpapers, themed icons and taskbar treatments. Agent chats include inline expandable tool activity, running/completed/failed summaries, an activity strip, a workspace agent overview and responsive toolbar controls. Missing tool-call IDs are explicitly uncorrelated. Embedded apps retain their own styling. Includes a reviewed GitHub app catalog with immutable source pins and a portable Live Telemetry package. Catalog sync (operator-run scripts/orbit_catalog.py, never triggered by the Hermes tool or at register) reads the entry list from the upstream repo's main branch at sync time and downloads third-party static app bundles at their per-entry commit pins; installed UI runs in a sandboxed iframe and never executes backend code. Optional telemetry backend staging downloads pinned Python; execution requires explicit host-code trust and separate private authenticated HTTPS setup. Backend code runs with owner privileges, not a sandbox. Disclosure — adapter talks only to the configured local Orbit server (loopback, Bearer capability from runtime_dir); mutations off by default. Optional orbit.py setup runs npm ci / node. Bundled VNC/Xpra launchers use the Orbit page's hostname and scheme; optional Linux apps require separate provisioning. Optional api.typesafe.ai requests require explicit consent and a user-supplied key."
|
||||
description: >-
|
||||
Your workspace, shaped by your agent: a bundled browser desktop powered by Hermes. Describe the
|
||||
workflow you need; the agent can rearrange windows and panes, customize appearance, build versioned
|
||||
sandboxed web apps, and refine your workspace with scoped control, previews and checkpoints.
|
||||
Illustrated examples show a project-specific COCS 3D asset viewer and OmniVoice experiment bench;
|
||||
these example apps and their backends are not bundled. Includes permission-controlled desktop
|
||||
agent-reply notifications (generic alerts while Orbit remains open; browser/OS restrictions apply)
|
||||
and 100,000-character chat messages, guidance and drafts. Includes Devplan Studio for guided
|
||||
interviews, specifications, phased devplans and circular-development handoff exports. Optional
|
||||
conversational interviews require explicit service setup and a working Hermes provider login, and
|
||||
send project context to that provider. Includes 14 distinctive interface presets including Nous
|
||||
Atelier, with local wallpapers, themed icons and taskbar treatments. Agent chats include inline
|
||||
expandable tool activity, running/completed/failed summaries, an activity strip, a workspace agent
|
||||
overview and responsive toolbar controls. Missing tool-call IDs are explicitly uncorrelated.
|
||||
Embedded apps retain their own styling. Includes a reviewed GitHub app catalog with immutable source
|
||||
pins and a portable Live Telemetry package. Catalog sync (operator-run scripts/orbit_catalog.py,
|
||||
never triggered by the Hermes tool or at register) reads the entry list from the upstream repo's
|
||||
main branch at sync time and downloads third-party static app bundles at their per-entry commit
|
||||
pins; installed UI runs in a sandboxed iframe and never executes backend code. Optional telemetry
|
||||
backend staging downloads pinned Python; execution requires explicit host-code trust and separate
|
||||
private authenticated HTTPS setup. Backend code runs with owner privileges, not a sandbox.
|
||||
Disclosure — adapter talks only to the configured local Orbit server (loopback, Bearer capability
|
||||
from runtime_dir); mutations off by default. Optional orbit.py setup runs npm ci / node. Bundled
|
||||
VNC/Xpra launchers use the Orbit page's hostname and scheme; optional Linux apps require separate
|
||||
provisioning. Optional api.typesafe.ai requests require explicit consent and a user-supplied key.
|
||||
The 0.2.7 web app's opt-in Show tools panel displays tool call arguments and results for the current
|
||||
Hermes conversation, fetched from the local Orbit server and local Hermes session API and kept in
|
||||
the browser only. The Nous Atelier theme contains Nous Research logo artwork and is unofficial;
|
||||
Orbit is not affiliated with Nous Research.
|
||||
maintainer: mojomast
|
||||
tier: community
|
||||
category: desktop
|
||||
|
||||
Reference in New Issue
Block a user