feat(detector): detect Grok Build, Kimi Code, Muse Code, Hermes Agent, Oh My Pi - #205
Open
raysubham wants to merge 3 commits into
Open
feat(detector): detect Grok Build, Kimi Code, Muse Code, Hermes Agent, Oh My Pi#205raysubham wants to merge 3 commits into
raysubham wants to merge 3 commits into
Conversation
4 tasks
…, Oh My Pi Add five AI agent CLIs to the ladder-backed detector. Each shares its binary name with an unrelated tool, so identity is proven per install channel (npm manifest, vendor install dir, Homebrew keg or cask, winget, pacman, mise, uv/pipx venv) before a row is reported. Versions come only from on-disk evidence: package manifests, versioned filenames, dist-info directory names, the Muse .muse-version sidecar, or Homebrew and mise path segments. Nothing is executed and no agent config, auth, session, or log file is read. Register the matching skills roots and project marker directories, and export versionmeta.IsVersionLike for the filename and dist-info checks.
raysubham
force-pushed
the
feature/ai-agent-detection
branch
from
September 5, 2026 18:44
ad8a8f9 to
81561e2
Compare
…nd muse-bin identity The Muse .muse-version sidecar and the Hermes installer venv are fixed paths derived beside an accepted candidate. They were read or globbed without first following symlinks through the TCC guard, so a link into a protected folder could be touched. Resolve them with the same guard resolveVerified applies to the candidate and reject when the target is protected. Oh My Pi accepted any path under the mise install root, including a directory that is not a version, reporting version unknown. Require a version-shaped segment. Muse accepted a single muse-bin-* sibling with any suffix as identity evidence; count only siblings carrying a Muse release version.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds five AI agent CLIs to the ladder-backed AI-CLI detector:
grok-build(xAI),kimi-code(Moonshot),muse-code(Meta),hermes-agent(Nous Research),oh-my-pi(Stencil). All five share their binary name with an unrelated tool, so each follows the PR #182 pattern:resolveVerifiedwalks candidates and an accept closure proves identity per install channel before a row is reported.~/.grok,~/.kimi-code,~/.omp), Homebrew keg or cask, winget, pacman manifest, mise install tree, uv/pipx venv (Kimi legacy, Hermes).dist-infodirectory names, the Muse.muse-versionsidecar (64-byte cap), Homebrew and mise path segments.StaticVersionOnlyon all five; winget channels reportunknown.config.toml,.env,auth.json,settings.json, sessions, credentials, or logs. Every path goes through the TCC candidate guard.~/.grok/skills,~/.kimi-code/skills,~/.config/muse/skills,~/.hermes/skillsor%LOCALAPPDATA%\hermes\skills,~/.omp/agent/skills,~/.omp/agent/managed-skills), project roots and marker dirs (.grok,.kimi-code,.hermes,.omp). Hermes nested<category>/<skill>/SKILL.mdlayout yields a two-levelroot_rel_path.versionmeta.isVersionLikeexported asIsVersionLike; no other versionmeta change.Test plan
go build ./...,go vet ./...,gofmt -l internal/cleango test ./internal/detector/... ./internal/versionmeta/...(per-agent accept/reject cases, Windows cases, TCC guard decoys, glob budget, skills census rows, nested Hermes fixture)muse-code/hermes-agenton linux, mac keeps them via Homebrew;~/Documents/bin/grokdecoy skipped with no TCC access; 58hermes_userskills%LOCALAPPDATA%venv) — pendingRelease gate
agent-api
agentSkillSourceToAgententries for the ten new skill sources must deploy before this ships.