EXTENSIONS

Manage Hermes agent environment variables via SSH or locally from inside the container. Supports setEnv, removeEnv, listKeys, restartGateway, and rotateSwampKey (updates all four key locations + full container recreation).

Manage Hermes AI agent model configuration — set the main model, configure auxiliary task overrides, and restart the gateway. Safe edit protocol: backup → edit → validate → restart.

Comprehensive libvirt/virsh management — VMs, networks, storage pools,

TV show keep-score engine — fuses Sonarr + Seerr + Tautulli + Plex into a per-series keep score with an endedUnwatched penalty for never-played completed series.

Movie keep-score engine — fuses Radarr + Seerr + Tautulli + Plex inputs into a per-movie keep score with reason breakdown; emits drop_candidates for downstream pruning.

TLS-certificate expiry tracker — fetch NPM-managed cert inventory and probe public-facing hosts via openssl s_client, classified by days-until-expiry.

DNS policy compiler — merge manual vhosts + auto-discovered proxy hosts + static rewrites into a deduped desired list for an internal-DNS reconciler (e.g. AdGuard Home), plus a separate hostname list for public exposure.

Opinionated weekly Discord report — composes embeds + CSV attachments from the @lint curator and ops models, posts via webhook.

Home Assistant REST-API wrapper — automation lifecycle CRUD plus a generic service-call actuator for any HA domain.

Overseerr / Jellyseerr wrapper — paginated request inventory ready for the media curator, plus approve / decline mutations against the request API.

Cross-instance Radarr storage scanner — compares default (1080p) + 4K inventories for duplicates, missing files, and oversized titles.

TV series deletion executor — consumes tv-curator drop_candidates, honors keep-forever tags, deletes via Sonarr API with cooling-period gate.

Portainer API wrapper — snapshot endpoints/containers/stacks across every docker host, and drive container actions (start/stop/restart/kill/pause/unpause) plus image pulls from swamp workflows.

Movie deletion executor — consumes media-curator drop_candidates, honors the keep-forever tag, deletes via Radarr API with cooling-period gate.

Sonarr v3 wrapper — snapshot series/root folders/tags (with statistics flattened for ended-but-incomplete queries), and delete series via the official API (files + import-list exclusion).

Radarr v3 wrapper — snapshot movies/root folders/tags (with on-disk IMDb parsing for drift detection), and delete movies via the official API (files + import-list exclusion).

Auto-applier for docker image updates — pulls + restarts compose stacks with deny lists, cooling periods, and a per-run cap.

Docker image update tracker — compares local image digests against the registry to surface available updates per container.

Docker container discovery across a Proxmox cluster — SSHes to each PVE node, runs `pct exec <vmid> docker ps` on every docker-tagged LXC.

Free-space monitor — SSHes to a target host, runs df, classifies mounts as ok/warn/crit against configurable thresholds.

Proxmox Backup Server check — classify guests as fresh / stale / missing against a PBS datastore using API token auth.

Tautulli watch-history wrapper — snapshot per-movie and per-series play counts plus last-played timestamps from a Plex Tautulli instance; the signal feeds keep/drop curation.

Plex Media Server control-API wrapper — trigger library refreshes on demand and capture per-section outcomes.

AdGuard Home control-API wrapper — snapshot status/stats/clients/rewrites and reconcile DNS rewrites to a desired set.