fix: closes #715

.gitea.yml

@@ -2,7 +2,7 @@ protection:
   main:
     required_pull_request_reviews:
       dismiss_stale_reviews: true
-      required_approving_review_count: 1
+      required_approving_review_count: 1 
     required_linear_history: true
     allow_force_push: false
     allow_deletions: false
@@ -14,4 +14,55 @@ protection:
     reviewers:
       - perplexity
     required_reviewers:
-      - Timmy
+      - Timmy # Owner gate for hermes-agent
+main:
+  require_pull_request: true
+  required_approvals: 1
+  dismiss_stale_approvals: true
+  require_ci_to_pass: true
+  block_force_push: true
+  block_deletion: true
+>>>>>>> replace
+</source>
+
+CODEOWNERS
+<source>
+<<<<<<< search
+protection:
+  main:
+    required_status_checks:
+      - "ci/unit-tests"
+      - "ci/integration"
+    required_pull_request_reviews:
+      - "1 approval"
+    restrictions:
+      - "block force push"
+      - "block deletion"
+    enforce_admins: true
+
+  the-nexus:
+    required_status_checks: []
+    required_pull_request_reviews:
+      - "1 approval"
+    restrictions:
+      - "block force push"
+      - "block deletion"
+    enforce_admins: true
+
+  timmy-home:
+    required_status_checks: []
+    required_pull_request_reviews:
+      - "1 approval"
+    restrictions:
+      - "block force push"
+      - "block deletion"
+    enforce_admins: true
+
+  timmy-config:
+    required_status_checks: []
+    required_pull_request_reviews:
+      - "1 approval"
+    restrictions:
+      - "block force push"
+      - "block deletion"
+    enforce_admins: true

.gitea/branch-protection.yml

@@ -4,6 +4,52 @@ rules:
   require_pull_request: true
   required_approvals: 1
   dismiss_stale_reviews: true
-  require_ci_to_pass: true
+  require_ci_to_pass: true  # Enabled for all except the-nexus (#915)
   block_force_pushes: true
   block_deletions: true
+>>>>>>> replace
+```
+
+CODEOWNERS
+```txt
+<<<<<<< search
+# CODEOWNERS - Mandatory Review Policy
+
+# Default reviewer for all repositories
+* @perplexity
+
+# Specialized component owners
+hermes-agent/ @Timmy
+hermes-agent/agent-core/ @Rockachopa
+hermes-agent/protocol/ @Timmy
+the-nexus/ @perplexity
+the-nexus/ai/ @Timmy
+timmy-home/ @perplexity
+timmy-config/ @perplexity
+
+# Owner gates
+hermes-agent/ @Timmy
+
+# QA reviewer for all PRs
+* @perplexity
+# Branch protection rules for main branch
+branch: main
+rules:
+  - type: push
+    # Push protection rules
+    required_pull_request_reviews: true
+    required_status_checks: true
+    # CI is disabled for the-nexus per #915
+    required_approving_review_count: 1
+    block_force_pushes: true
+    block_deletions: true
+
+  - type: merge  # Merge protection rules
+    required_pull_request_reviews: true
+    required_status_checks: true
+    required_approving_review_count: 1
+    dismiss_stale_reviews: true
+    require_code_owner_reviews: true
+    required_status_check_contexts:
+      - "ci/ci"
+      - "ci/qa"

gitea-branch-protection.js

@@ -1,4 +1,4 @@
-const GiteaApiUrl = 'https://forge.alexanderwhitestone.com/api/v1';
+const giteaApiUrl = 'https://forge.alexanderwhitestone.com/api/v1';
 const token = process.env.GITEA_TOKEN; // Should be stored securely in environment variables
 const repos = ['hermes-agent', 'the-nexus', 'timmy-home', 'timmy-config'];
 
@@ -13,31 +13,6 @@ const branchProtectionSettings = {
   // Special handling for the-nexus (CI disabled)
 };
 
-async function applyBranchProtection(repo) {
-  try {
-    const response = await fetch(`${giteaApiUrl}/repos/Timmy_Foundation/${repo}/branches/main/protection`, {
-      method: 'POST',
-      headers: {
-        'Authorization': `token ${token}`,
-        'Content-Type': 'application/json'
-      },
-      body: JSON.stringify({
-        ...branchProtectionSettings,
-        // Special handling for the-nexus (CI disabled)
-        requiredStatusChecks: repo === 'the-nexus' ? false : true
-      })
-    });
-
-    if (!response.ok) {
-      throw new Error(`Failed to apply branch protection to ${repo}: ${await response.text()}`);
-    }
-
-    console.log(`✅ Branch protection applied to ${repo}`);
-  } catch (error) {
-    console.error(`❌ Error applying branch protection to ${repo}: ${error.message}`);
-  }
-}
-
 async function applyBranchProtection(repo) {
   try {
     const response = await fetch(`${giteaApiUrl}/repos/Timmy_Foundation/${repo}/branches/main/protection`, {

index.html

@@ -338,6 +338,17 @@
       <button onclick="searchMemPalace()">Search</button>
     </div>
     <div id="mempalace-results" style="position:fixed; right:24px; top:84px; max-height:200px; overflow-y:auto; background:rgba(0,0,0,0.3); padding:8px; font-family:'JetBrains Mono',monospace; font-size:11px; color:#e0f0ff; border-left:2px solid #4af0c0;"></div>
+    <div id="mem-palace-controls" style="position:fixed; right:24px; top:54px; background:rgba(74,240,192,0.05); padding:4px 8px; font-family:'JetBrains Mono',monospace; font-size:10px; border-left:2px solid #4af0c0;">
+      <button class="mem-palace-mining-btn" onclick="mineChatToMemPalace()">Mine Chat</button>
+      <button onclick="searchMemPalace()">Search</button>
+    </div>
+    <div id="mempalace-results" style="position:fixed; right:24px; top:84px; max-height:200px; overflow-y:auto; background:rgba(0,0,0,0.3); padding:8px; font-family:'JetBrains Mono',monospace; font-size:11px; color:#e0f0ff; border-left:2px solid #4af0c0;"></div>
+>>>>>>> replace
+```
+
+index.html
+```html
+<<<<<<< search
     <div class="branch-policy" style="margin-top: 10px; font-size: 12px; color: #aaa;">
       <strong>BRANCH PROTECTION POLICY</strong><br>
       <ul style="margin:0; padding-left:15px;">

service-worker.js

@@ -11,7 +11,7 @@ const ASSETS_TO_CACHE = [
 
 self.addEventListener('install', (event) => {
   event.waitUntil(
-    caches.open(CachedName).then(cache => {
+    caches.open(CACHE_NAME).then(cache => {
       return cache.addAll(ASSETS_TO_CACHE);
     })
   );