Repository navigation

feat: rewrite core and daemon in Rust - #1927

Open

NicholaiVogel wants to merge 612 commits into

mainfrom

hermes/hermes-8629112f

Open

feat: rewrite core and daemon in Rust#1927
NicholaiVogel wants to merge 612 commits into
mainfrom
hermes/hermes-8629112f

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 23, 2026
- repair native consumer packaging contracts
  NicholaiVogel
  committed
  05b9efe
- repair fresh Rust knowledge navigation schema
  NicholaiVogel
  committed
  e97ff04
- Implement current-schema knowledge navigation core
  NicholaiVogel
  committed
  fd13cbe
- chore(native): clean knowledge navigation formatting
  NicholaiVogel
  committed
  bb9992b
- Implement current schema knowledge tree
  NicholaiVogel
  committed
  75e26b9
- Extend owner knowledge tree limits and claims
  NicholaiVogel
  committed
  516d5e4
- fix(knowledge): wire tree navigation bounds
  NicholaiVogel
  committed
  d64d05c
- test(knowledge): update tree operation fixture
  NicholaiVogel
  committed
  1e205a1
- test: add native knowledge navigation process contract
  NicholaiVogel
  committed
  b4b2f82
- fix(knowledge): remove duplicate tree route
  NicholaiVogel
  committed
  b5ae7b6
- Fix owner knowledge writes for current schema
  NicholaiVogel
  committed
  c652a4d
- fix native knowledge navigation parity
  NicholaiVogel
  committed
  c87d80c
- Repair KnowledgeTree aspect counts
  NicholaiVogel
  committed
  0f7c7bd
- test(knowledge): harden native navigation contract
  NicholaiVogel
  committed
  911143b
- fix rust navigation spaced key matching
  NicholaiVogel
  committed
  d0d226d
- test(knowledge): cover canonical navigation paths
  NicholaiVogel
  committed
  616ae63
- fix rust knowledge tree literal wildcard resolution
  NicholaiVogel
  committed
  352a00d
- Fix canonical knowledge navigation grouping
  NicholaiVogel
  committed
  be5305b
- fix rust knowledge attribute metadata
  NicholaiVogel
  committed
  82b761b
- fix native knowledge tree bounds and traversal status
  NicholaiVogel
  committed
  4b3a5df
- test: cover native traversal status contract
  NicholaiVogel
  committed
  fa901a5
- feat(native): add entity pinning parity slice
  NicholaiVogel
  committed
  6fef077
- fix(rust-daemon): authorize knowledge pin mutations
  NicholaiVogel
  committed
  a9bea4f
- test: cover readonly pin authority
  NicholaiVogel
  committed
  8b8552e
- fix native pin missing-entity HTTP contract
  NicholaiVogel
  committed
  e5e0d2f
- feat(native): expand scoped session summaries
  NicholaiVogel
  committed
  c544720
- fix(native): harden session expansion authorization and safety
  NicholaiVogel
  committed
  68c4d6a
- Harden session expansion safety filtering
  NicholaiVogel
  committed
  8290775
- test: add native session expansion HTTP contract
  NicholaiVogel
  committed
  c188549
- fix native session expansion safety
  NicholaiVogel
  committed
  188e0b7
- test: repair native session expansion contract
  NicholaiVogel
  committed
  7a17eee
- test: preserve session expansion limit ordering
  NicholaiVogel
  committed
  6ae8ae8
- fix core session expansion safety semantics
  NicholaiVogel
  committed
  917a396
- test: isolate native session expansion fixture
  NicholaiVogel
  committed
  76707ef
- fix rust core positional safety context
  NicholaiVogel
  committed
  f9bdc8e
- fix session expansion LIKE escape
  NicholaiVogel
  committed
  ee93173
- test(native): issue scoped session recall token
  NicholaiVogel
  committed
  3a28bb5
- fix(rust-daemon): preserve auth token permissions
  NicholaiVogel
  committed
  d9e69e2
- test(rust-daemon): assert scoped wrong-workspace rejection
  NicholaiVogel
  committed
  3501dc0
- fix rust auth api key boundaries
  NicholaiVogel
  committed
  13bf886
- chore(rust): integrate session expansion dependencies
  NicholaiVogel
  committed
  e5d9cdb
- fix rust memory content safety detection
  NicholaiVogel
  committed
  1c407da
- feat(native): add secret execution endpoints
  NicholaiVogel
  committed
  fe7ac97
- fix(native): repair secret execution contract
  NicholaiVogel
  committed
  19b026f
- repair native secret execution contract
  NicholaiVogel
  committed
  8076c83
- repair rust secret exec jobs
  NicholaiVogel
  committed
  611ebd3
- test: strengthen native secrets exec contract
  NicholaiVogel
  committed
  e33ac91
- fix native secrets exec body errors
  NicholaiVogel
  committed
  520e0a5
- test: preserve secret exec stdout newline
  NicholaiVogel
  committed
  d30e266
- style(rust): format secret lookup operation
  NicholaiVogel
  committed
  66116a4
- fix(daemon): harden scoped secret execution
  NicholaiVogel
  committed
  a82e9fa
- test: use valid missing secret fixture name
  NicholaiVogel
  committed
  3203c98
- test: cover secret execution scope and redaction boundaries
  NicholaiVogel
  committed
  a0a3c51
- chore: remove secret exec warning
  NicholaiVogel
  committed
  028050d
- fix native secret exec cleanup and local refs
  NicholaiVogel
  committed
  5f8d50d
- Implement native connector registration parity slice
  NicholaiVogel
  committed
  abe6b88
- style: format connector owner operations
  NicholaiVogel
  committed
  b05cf5f
- fix native connector compatibility
  NicholaiVogel
  committed
  75624df
- fix: require admin permission for connector registration
  NicholaiVogel
  committed
  e04cb58
- feat(native): list ontology proposal conflicts
  NicholaiVogel
  committed
  07ca435
- fix(native): group ontology proposal conflicts
  NicholaiVogel
  committed
  cfe1af0
- test(native): cover ontology proposal conflicts
  NicholaiVogel
  committed
  e3bd036
- fix rust ontology proposal conflicts
  NicholaiVogel
  committed
  96868fc
- fix native ontology conflict workspace resolution
  NicholaiVogel
  committed
  d7da3d2
- feat(native): add reflection answer and generation routes
  NicholaiVogel
  committed
  d62da71
- fix(native): harden reflection answer route
  NicholaiVogel
  committed
  76c1d56
- fix native reflection answer conflict contract
  NicholaiVogel
  committed
  5478d14
- test: strengthen native reflection answer contract
  NicholaiVogel
  committed
  f7f0f30
- Implement native reflection generation
  NicholaiVogel
  committed
  c898417
- Complete native reflection provider contract
  NicholaiVogel
  committed
  255d0dd
- feat: generate reflections through native provider
  NicholaiVogel
  committed
  322999f
- test: add native reflection generation contract
  NicholaiVogel
  committed
  bfe6dc3
- fix rust reflection schema compatibility and provenance
  NicholaiVogel
  committed
  45b0f5a
- fix rust reflection route parity
  NicholaiVogel
  committed
  c7dcdc7
- test: align native reflection generation contract
  NicholaiVogel
  committed
  9368769
- test: authenticate native reflection list contract
  NicholaiVogel
  committed
  485eb79
- fix rust reflection defaults and timezone dates
  NicholaiVogel
  committed
  26ef894
- test: fix native reflection answer contract setup
  NicholaiVogel
  committed
  4233c45
- fix rust reflection local timezone default
  NicholaiVogel
  committed
  ae5cf50
- fix rust reflection read authorization
  NicholaiVogel
  committed
  a410adf
- fix reflection workspace-scoped recall authorization
  NicholaiVogel
  committed
  5f180ec
- fix reflection agent-only workspace auth
  NicholaiVogel
  committed
  e404694
- fix shared corpus entrypoint accounting
  NicholaiVogel
  committed
  2d67a14
- test: stream shared corpus adapter output safely
  NicholaiVogel
  committed
  580f846
- test: exclude non-test corpus utility from execution
  NicholaiVogel
  committed
  8208939
- test: batch Rust corpus execution and recover real cases
  NicholaiVogel
  committed
  34b1f63
- Connect unchanged corpus to fresh Rust
  NicholaiVogel
  committed
  4ed8329
- Forward reporting flags to hermetic tests
  NicholaiVogel
  committed
  322fa20
- Recover real TS cases after runner crashes
  NicholaiVogel
  committed
  7201cfa
- Normalize captured test output
  NicholaiVogel
  committed
  f5166ce
- Fix corpus failure accounting
  NicholaiVogel
  committed
  166daa8
- Reject incomplete testcase file coverage
  NicholaiVogel
  committed
  3ae80a9
- Harden shared corpus report admission
  NicholaiVogel
  committed
  95f3a69
- Separate native evidence from pure tests
  NicholaiVogel
  committed
  48f920c
- Bind daemon evidence to adapter nonce
  NicholaiVogel
  committed
  9bc51bb
- Fail closed on unverified corpus reports
  NicholaiVogel
  committed
  531884e
- Reject duplicate testcase identities
  NicholaiVogel
  committed
  50f192f
- Harden nested JUnit report accounting
  NicholaiVogel
  committed
  9be19b7
- Validate corpus manifests at Rust adapter boundary
  NicholaiVogel
  committed
  5c63247
- Bind baseline lane to package and testcase identities
  NicholaiVogel
  committed
  67ddd9b
- Reject duplicate and modified corpus selections
  NicholaiVogel
  committed
  5317b38
- ci: verify fresh Rust artifact provenance
  NicholaiVogel
  committed
  8568a2c
- fix native ontology proposal authorization
  NicholaiVogel
  committed
  ec3f748
- implement durable session candidate parity
  NicholaiVogel
  committed
  e6d8bf5
- fix recall lifecycle filtering for superseded memories
  NicholaiVogel
  committed
  894f274
- fix rust ontology authorization coverage
  NicholaiVogel
  committed
  ef38c54
- harden staged Rust artifact provenance
  NicholaiVogel
  committed
  22aafc3
- native session candidate schema compatibility
  NicholaiVogel
  committed
  f04bdce
- native: filter lifecycle-invalid memory search rows
  NicholaiVogel
  committed
  b4817d5
- fix: filter invalid session candidates by lifecycle
  NicholaiVogel
  committed
  554b0ad
- fix: preserve rust corpus report on child failure
  NicholaiVogel
  committed
  6a4176d
- fix: fail closed on newer migration history
  NicholaiVogel
  committed
  771033f
- fix: preserve reflection limit defaults
  NicholaiVogel
  committed
  769e780
- fix: harden session candidate lifecycle boundaries
  NicholaiVogel
  committed
  c3ecfc6
- fix: preserve typed migration errors
  NicholaiVogel
  committed
  2cf5ba1
- fix: match reflection parseInt limit semantics
  NicholaiVogel
  committed
  7bf47fd
- fix: preserve owner startup migration errors
  NicholaiVogel
  committed
  02addd8
- fix: match ecmascript reflection whitespace
  NicholaiVogel
  committed
  cd9ba60
- fix: preserve native build opt-out contract
  NicholaiVogel
  committed
  8928788
- fix: clean up failed owner startup
  NicholaiVogel
  committed
  d088729
- fix: validate cargo after path detection
  NicholaiVogel
  committed
  26e2886
- fix: preserve live owner markers on contention
  NicholaiVogel
  committed
  d4fe76a
- fix: distinguish broken cargo toolchains
  NicholaiVogel
  committed
  f5ae34d
- fix: bind owner markers to process identity
  NicholaiVogel
  committed
  12a0654
- fix(rust-daemon): make update route build on Windows
  NicholaiVogel
  committed
  89d659c
- fix: fail closed on unreadable owner process identity
  NicholaiVogel
  committed
  a9ef78f
- fix: replace existing update config on Windows
  NicholaiVogel
  committed
  da97801
- fix: bound owner marker parsing
  NicholaiVogel
  committed
  fef9c6a
- Harden memory search against malformed metadata
  NicholaiVogel
  committed
  5f7178d
- Honor canonical memory lifecycle in native search
  NicholaiVogel
  committed
  3c9215e
- Test canonical memory lifecycle filtering
  NicholaiVogel
  committed
  76ff678
- feat(native): reconcile schema migrations 154 and 155
  NicholaiVogel
  committed
  9085dd1
- fix(native): honor canonical memory deletion flag
  NicholaiVogel
  committed
  877c62a
- fix(native): account for skipped FTS integrity objects
  NicholaiVogel
  committed
  2a5e367
- fix(native): verify integrity schema frontier safely
  NicholaiVogel
  committed
  fd5e2ae
- fix(native): detect only actual fts5 virtual tables
  NicholaiVogel
  committed
  276169c
- test(rust-core): strengthen integrity checkpoint coverage
  NicholaiVogel
  committed
  2cc69f7
- test(rust-core): cover integrity checkpoint edge cases
  NicholaiVogel
  committed
  86dbdcd
- test(rust-core): harden integrity checkpoint assertions
  NicholaiVogel
  committed
  279f43d
- Use native Rust Docker healthcheck
  NicholaiVogel
  committed
  6eb6232
- fix(runner): admit provenance-bound staged daemon
  NicholaiVogel
  committed
  1a9975c
- fix(native): validate healthcheck status and artifact metadata
  NicholaiVogel
  committed
  972959b
- fix(runner): normalize cwd archive guard
  NicholaiVogel
  committed
  3c8b066
- fix(docker): package all Bun workspaces in build stage
  NicholaiVogel
  committed
  9b722f8
- fix(docker): build Bun CLI workspace dependencies
  NicholaiVogel
  committed
  03012d4
- fix(docker): launch native daemon entrypoint
  NicholaiVogel
  committed
  e3a1549
- fix(docker): dispatch native daemon through compiled CLI
  NicholaiVogel
  committed
  edd0acf
- fix(cli): forward native daemon termination
  NicholaiVogel
  committed
  5bbc8d4
- fix(cli): isolate native daemon entrypoint
  NicholaiVogel
  committed
  5b804d0
- test(ci): align production graph assertions with native gates
  NicholaiVogel
  committed
  135221a
- Preserve shared corpus JUnit accounting
  NicholaiVogel
  committed
  91683c6
- Fail closed on missing corpus testcase identities
  NicholaiVogel
  committed
  3b71dee
- Preserve nested JUnit suite failures
  NicholaiVogel
  committed
  910c652
- Preserve native cutover compatibility test surfaces
  NicholaiVogel
  committed
  815a3ed
- fix(pi): avoid polynomial transcript normalization
  NicholaiVogel
  committed
  466cdd0
- fix native daemon launch and desktop runtime probes
  NicholaiVogel
  committed
  3f1ca35
- Harden desktop runtime distribution staging
  NicholaiVogel
  committed
  f977ca0
- fix desktop runtime asset staging resolution
  NicholaiVogel
  committed
  7dadf7b
- fix desktop runtime target validation
  NicholaiVogel
  committed
  6e73af9
- fix desktop Bun runtime identity validation
  NicholaiVogel
  committed
  3073ff7
- test: resolve Node executable independently of runner
  NicholaiVogel
  committed
  8b2a670
- fix(cli): preserve helper runtime compatibility
  NicholaiVogel
  committed
  a87ad00
- fix rust core recall wildcard escaping
  NicholaiVogel
  committed
  898cc9a
- test rust operation recall wildcard escaping
  NicholaiVogel
  committed
  60f2f05
- fix rust operation recall wildcard escaping
  NicholaiVogel
  committed
  06ff59f
- perf: fail fast on forged corpus manifests
  NicholaiVogel
  committed
  f598053
- fix: require native evidence for selected Rust lanes
  NicholaiVogel
  committed
  17d0e3a
- feat: preserve ontology lineage schema in Rust owner
  NicholaiVogel
  committed
  a85ef84
- fix: complete ontology lineage schema compatibility
  NicholaiVogel
  committed
  46d4916
- fix: reconcile legacy ontology workspace scope
  NicholaiVogel
  committed
  7b665b4
- fix: preserve transcript agent scope during migration
  NicholaiVogel
  committed
  25ab947
- test: cover legacy entity workspace defaults
  NicholaiVogel
  committed
  1c00f59
- fix(rust-core): reconcile owner schema columns
  NicholaiVogel
  committed
  8feac9b
- fix(rust-core): reconcile semantic memory compatibility columns
  NicholaiVogel
  committed
  c8ab55c
- feat: add native ontology claim trace operation
  NicholaiVogel
  committed
  c44d5e7
- feat: wire native ontology claim trace route
  NicholaiVogel
  committed
  604328d
- feat: add ontology claim versions route
  NicholaiVogel
  committed
  4130d54
- feat: add ontology claim version route
  NicholaiVogel
  committed
  0d1f1ef
- Harden native shared-corpus execution evidence
  NicholaiVogel
  committed
  2a2868e
- feat(rust-core): add memory content safety scanner
  NicholaiVogel
  committed
  fdaa588
- Fix Rust safety scanner reporting context
  NicholaiVogel
  committed
  b411d79
- Match Rust safety windows to JavaScript units
  NicholaiVogel
  committed
  de45c29
- Add Rust memory safety ledger helpers
  NicholaiVogel
  committed
  7a956fc
- Add Rust core proposal evidence operation
  NicholaiVogel
  committed
  b51f06d
- Harden proposal evidence schema compatibility
  NicholaiVogel
  committed
  6fa03b4
- Wire proposal evidence through Rust daemon
  NicholaiVogel
  committed
  c2d2ffc
- Fail closed before TypeScript corpus launch
  NicholaiVogel
  committed
  f15906b
- chore: align rebased workspace package versions
  NicholaiVogel
  committed
  3380d4a
- test: restore pinned protected corpus after rebase
  NicholaiVogel
  committed
  2858ec0
- fix: harden native packaging provenance and staging
  NicholaiVogel
  committed
  3d9f34f
- fix: package real sqlite vector extension
  NicholaiVogel
  committed
  ef6603d
- fix: separate Docker native build step
  NicholaiVogel
  committed
  ba672cb
- fix: preserve native wrapper package resolution
  NicholaiVogel
  committed
  3dc0121
- fix: retain Docker native build ordering
  NicholaiVogel
  committed
  0c17e6f
- feat: expose scoped telemetry stats and export
  NicholaiVogel
  committed
  6e0eff1
- repair native boundaries and shared corpus execution
  NicholaiVogel
  committed
  4b127ca
- isolate native corpus entrypoints
  NicholaiVogel
  committed
  6dcd526
- normalize observed native corpus JUnit totals
  NicholaiVogel
  committed
  b489d59
- centralize explicit local ontology auth
  NicholaiVogel
  committed
  429702a
- format ontology routes
  NicholaiVogel
  committed
  75072d6
- chore: release 0.226.18
  
  github-actions[bot]
  authored and
  NicholaiVogel
  committed
  fae524a
- preserve native package surfaces on release bump
  NicholaiVogel
  committed
  819b970
- test: scope native proof evidence by selected lane
  NicholaiVogel
  committed
  2b0f9ab
- fix: package assets in native CLI build
  NicholaiVogel
  committed
  bbe0438
- feat: serve ontology claim evidence through Rust owner
  NicholaiVogel
  committed
  13ed2d4
- fix: preserve auth mode and clean corpus runner output
  NicholaiVogel
  committed
  aad15a0
- fix: route compiled keyring through child mode
  NicholaiVogel
  committed
  ccd9045
- fix: reject malformed runtime auth configuration
  NicholaiVogel
  committed
  195da4b
- fix: preserve native build and corpus runner cleanup
  NicholaiVogel
  committed
  c26629b
- fix: watch the active runtime config file
  NicholaiVogel
  committed
  9987b42
- test: cover runtime config fallback selection
  NicholaiVogel
  committed
  b296ccd
- test: cover runtime config precedence and fallback
  NicholaiVogel
  committed
  3a619a5
- fix: reconcile link evidence dependency schema
  NicholaiVogel
  committed
  7ca5168
- fix: reconcile ontology link schema and evidence
  NicholaiVogel
  committed
  504a578
- fix: reconcile incomplete migration 050 artifacts
  NicholaiVogel
  committed
  aadbb59
- fix: package native CLI with Rust daemon
  NicholaiVogel
  committed
  c28192e
Commits on Sep 24, 2026
- fix: make packaged MCP stdio launch reliable
  NicholaiVogel
  committed
  5999ad8
- fix: preserve transcript audit compatibility
  NicholaiVogel
  committed
  4fa1be6
- fix: scope optional MCP tokenizer fallback
  NicholaiVogel
  committed
  87dc5e5
- fix: preserve complete Rust corpus accounting
  NicholaiVogel
  committed
  e794b77
- test: require native MCP in Rust corpus lane
  NicholaiVogel
  committed
  986a1fe
- feat: serve ontology contradiction reads from fresh Rust
  NicholaiVogel
  committed
  f8b071f
- feat: read durable document chunks natively
  NicholaiVogel
  committed
  629e62e
- test: cover durable native document chunks
  NicholaiVogel
  committed
  5de655a
- fix: return all durable document chunks
  NicholaiVogel
  committed
  2b9f51c
- test: expose staged daemon to Rust lane services
  NicholaiVogel
  committed
  1d4c04a
- fix Rust memory history compatibility
  NicholaiVogel
  committed
  031d6d4
- test(corpus): map nested JUnit identities
  NicholaiVogel
  committed
  7e681f6
- fix(corpus): fail closed on ambiguous report identities
  NicholaiVogel
  committed
  46b34a7
- fix(corpus): fail closed on report drift
  NicholaiVogel
  committed
  31c75fc
- fix(rust-core): require agent for source deletion
  NicholaiVogel
  committed
  b5a4ac6
- test(rust-core): cover source delete workspace scope
  NicholaiVogel
  committed
  dec56e0
- feat(rust): read stored session transcripts
  NicholaiVogel
  committed
  1fee626
- fix(rust): resolve stored session transcript routes
  NicholaiVogel
  committed
  ff879ea
- fix(rust): preserve scoped session transcript reads
  NicholaiVogel
  committed
  11bcbda
Commits on Sep 25, 2026
- chore: sync rewrite packages to current main
  NicholaiVogel
  committed
  0c7344c
- fix(corpus): require per-case Rust attribution
  NicholaiVogel
  committed
  e4a6008
- fix(cancellation): persist queued cancel outcome
  NicholaiVogel
  committed
  7793205
- fix(rust-daemon): bound owner startup handshake
  NicholaiVogel
  committed
  8aa3700
- fix(rust-daemon): bound owner response waits
  NicholaiVogel
  committed
  74948eb
- fix(rust-daemon): retire failed owner sessions
  NicholaiVogel
  committed
  6384eab
- fix(rust-daemon): bound owner shutdown wait
  NicholaiVogel
  committed
  ee4de9b
- fix(plugins): anchor registry paths
  NicholaiVogel
  committed
  223a134
- fix(rust-daemon): anchor config file access
  NicholaiVogel
  committed
  e75bcca
- fix(plugins): reject hard-linked state
  NicholaiVogel
  committed
  16fdcf7
- fix(plugins): serialize registry updates
  NicholaiVogel
  committed
  e9d3a34
- test(rust): prove per-case corpus execution
  NicholaiVogel
  committed
  7a46e82
Commits on Sep 28, 2026
- fix(rust-core): reconcile legacy migration history
  NicholaiVogel
  committed
  b6d2a13
- fix(rust-core): refresh v79 audit timestamp
  NicholaiVogel
  committed
  2ba33aa
Commits on Sep 29, 2026
- fix(db): repair TS v152-v153 migrations
  NicholaiVogel
  committed
  3d927fa

Commits

Commits on Sep 23, 2026