{"packages":[{"id":"personal_assistant_basic","name":"Personal Assistant Basic","audience":"Consumers and solo operators","summary":"A consumer-safe always-on Hermes lane for Telegram, briefings, reminders, and research — terminal disabled.","toolsets":["web","browser","cronjob","session_search","memory"],"skills":["hermes-agent","obsidian","blogwatcher"],"automations":["Daily briefing","Reminder digest","Topic watcher","Weekly memory review"],"requiredSecrets":[{"name":"OPENROUTER_API_KEY"},{"name":"TELEGRAM_BOT_TOKEN"}],"security":{"terminal":"disabled","dockerSocket":false,"approvals":"smart","egress":"standard","audit":"basic"}},{"id":"devops_operator_basic","name":"DevOps Operator Basic","audience":"Technical founders and infrastructure teams","summary":"A sandboxed DevOps Hermes runtime with SSH allowlists, Docker CLI visibility, health checks, and update/backup workflows.","toolsets":["terminal","file","web","browser","cronjob","session_search","skills"],"skills":["hermes-agent","systematic-debugging","github-pr-workflow","local-docker-app-troubleshooting"],"automations":["Service health report","Disk and memory watchdog","SSL expiry monitor","Backup verification","Failed deploy triage"],"requiredSecrets":[{"name":"OPENROUTER_API_KEY"},{"name":"GITHUB_TOKEN"}],"security":{"terminal":"sandboxed","dockerSocket":false,"approvals":"manual","egress":"devops_allowlist","audit":"full"}}]}