Files
timmy-config/hermes-sovereign/devkit/README.md
Alexander Whitestone 95d65a1155 feat: extract sovereign work from hermes-agent fork into sidecar
Extracted 52 files from Timmy_Foundation/hermes-agent (gitea/main) into
hermes-sovereign/ directory to restore clean upstream tracking.

Layout:
  docs/             19 files — deploy guides, performance reports, security docs, research
  security/          5 files — audit workflows, PR checklists, validation scripts
  wizard-bootstrap/  7 files — wizard environment, dependency checking, auditing
  notebooks/         2 files — Jupyter health monitoring notebooks
  scripts/           5 files — forge health, smoke tests, syntax guard, deploy validation
  ci/                2 files — Gitea CI workflow definitions
  githooks/          3 files — pre-commit hooks and config
  devkit/            8 files — developer toolkit (Gitea client, health, notebook runner)
  README.md          1 file  — directory overview

Addresses: #337, #338
2026-04-07 10:11:20 -04:00

1.9 KiB

Bezalel's Devkit — Shared Tools for the Wizard Fleet

This directory contains reusable CLI tools and Python modules for CI, testing, deployment, observability, and Gitea automation. Any wizard can invoke them via python -m devkit.<tool>.

Tools

gitea_client — Gitea API Client

List issues/PRs, post comments, create PRs, update issues.

python -m devkit.gitea_client issues --state open --limit 20
python -m devkit.gitea_client create-comment --number 142 --body "Update from Bezalel"
python -m devkit.gitea_client prs --state open

health — Fleet Health Monitor

Checks system load, disk, memory, running processes, and key package versions.

python -m devkit.health --threshold-load 1.0 --threshold-disk 90.0 --fail-on-critical

notebook_runner — Notebook Execution Wrapper

Parameterizes and executes Jupyter notebooks via Papermill with structured JSON reporting.

python -m devkit.notebook_runner task.ipynb output.ipynb -p threshold=1.0 -p hostname=forge

smoke_test — Fast Smoke Test Runner

Runs core import checks, CLI entrypoint tests, and one bare green-path E2E.

python -m devkit.smoke_test --verbose

secret_scan — Secret Leak Scanner

Scans the repo for API keys, tokens, and private keys.

python -m devkit.secret_scan --path . --fail-on-find

wizard_env — Environment Validator

Checks that a wizard environment has all required binaries, env vars, Python packages, and Hermes config.

python -m devkit.wizard_env --json --fail-on-incomplete

Philosophy

  • CLI-first — Every tool is runnable as python -m devkit.<tool>
  • JSON output — Easy to parse from other agents and CI pipelines
  • Zero dependencies beyond stdlib where possible; optional heavy deps are runtime-checked
  • Fail-fast — Exit codes are meaningful for CI gating