@100xprompt/brain 0.0.0-stage → 0.1.1

package/src/gateway/connectors/hermes.ts

@@ -0,0 +1,230 @@
+// Gateway connector for Hermes Agent (Nous Research): a named provider "brain-gateway" (OpenAI Chat Completions) in
+// ~/.hermes/config.yaml, made the default, with the key in ~/.hermes/.env.
+//
+// Checked against hermes-agent 0.18.2 (pyproject.toml; git caf557be, 2026-07-10), the installed copy under
+// ~/.hermes/hermes-agent (read only), and its docs (website/docs/integrations/providers.md, "Named Custom Providers"):
+//   - config.yaml `providers:` is the keyed (v12+) schema for named endpoints: {name, base_url | api | url, api_key,
+//     key_env, api_mode | transport, default_model, extra_headers, ...} (hermes_cli/config.py
+//     _normalize_custom_provider_entry). The older `custom_providers:` list still works; `providers:` is a mapping, so one
+//     entry can be added and removed by its name without touching the person's others.
+//   - `model.provider: custom:<name>` selects it (hermes_cli/runtime_provider.py _get_named_custom_provider; the same
+//     value `hermes model` writes, hermes_cli/model_setup_flows.py), and `model.default` is the model id sent (it wins
+//     over `model.model` / `model.name`, config.py _normalize_root_model_keys). An explicit base URL or key only comes
+//     from `hermes --base-url/--api-key`, so the person's own model.base_url / model.api_key do not reach this provider.
+//   - The key: `key_env` names an environment variable (runtime_provider.py _resolve_named_custom_runtime), and
+//     ~/.hermes/.env is loaded into the environment at start, over the shell's own values (hermes_cli/env_loader.py
+//     load_hermes_dotenv). Hermes has no key-file or key-command option (its only external secret sources are Bitwarden
+//     and 1Password), so the key is copied into .env (BRAIN_GATEWAY_API_KEY, made 0600), the file Hermes keeps keys in;
+//     config.yaml holds no secret.
+//   - `extra_headers` on the provider entry is sent with every request on the OpenAI wire (runtime_provider.py
+//     _lift_extra_headers), so the context-edit header can go.
+//   - The gateway's /v1/models answers 403; Hermes then takes the context window from its catalog ("gemini" → 1M,
+//     agent/model_metadata.py), so nothing else needs setting.
+//   - $HERMES_HOME replaces ~/.hermes when set (a Hermes profile is its own HERMES_HOME).
+//   - Checked for real (scripts/gateway-real/hermes.ts): `hermes chat -q` sends its request to <route>/v1/chat/completions
+//     with Authorization: Bearer <key from .env>, the context-edit header and the gateway's model, even with the person's
+//     own model.base_url still pointing at OpenRouter.
+// config.yaml is YAML with comments; the codec below edits `<section>/<entry>` lines in place and leaves every other line
+// as it was.
+import { join } from "node:path"
+import { type Codec, type Connector, dirFromEnv, EDIT_HEADER, type Env, type Json, readKey, routeUrl, yamlTopLevel } from "../common.ts"
+
+export const HERMES_PROVIDER = "brain-gateway"
+export const HERMES_KEY_VAR = "BRAIN_GATEWAY_API_KEY"
+
+// ---- YAML: one entry inside a top-level mapping -------------------------------------------------------------------------
+
+const blank = (l: string) => l.trim() === "" || /^\s*#/.test(l)
+const indentOf = (l: string) => /^[ \t]*/.exec(l)![0]
+const esc = (k: string) => k.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")
+const keyLine = (indent: string, k: string) => new RegExp(`^${esc(indent)}(?:${esc(k)}|"${esc(k)}"|'${esc(k)}')\\s*:(?:\\s|$)`)
+
+/** YAML 1.1 (PyYAML, which Hermes uses) reads these plain words as booleans or null. */
+const YAML11 = /^(?:y|Y|yes|Yes|YES|n|N|no|No|NO|true|True|TRUE|false|False|FALSE|on|On|ON|off|Off|OFF|null|Null|NULL|~)$/
+const plainOk = (s: string) => /^[A-Za-z_][A-Za-z0-9_./:+-]*$/.test(s) && !YAML11.test(s) && !s.endsWith(":")
+const yamlKey = (k: string) => (/^[A-Za-z_][A-Za-z0-9_-]*$/.test(k) && !YAML11.test(k) ? k : JSON.stringify(k))
+
+/** A scalar written in `style` (the quoting the line had before), so a restored value comes back byte for byte. */
+function scalar(v: unknown, style: string): string {
+  if (typeof v !== "string") return v === null ? "null" : typeof v === "object" ? JSON.stringify(v) : String(v)
+  if (style === "'" && !/[\n\\]/.test(v)) return `'${v.replace(/'/g, "''")}'`
+  if (style === '"' || !plainOk(v)) return JSON.stringify(v)
+  return v
+}
+
+/** The ` # comment` after a one-line `key: value`, with its leading spaces ("" when there is none). */
+function comment(line: string): string {
+  let quote: string | undefined
+  for (let i = line.indexOf(":") + 1; i > 0 && i < line.length; i++) {
+    const c = line[i]!
+    if (quote) {
+      if (c === "\\" && quote === '"') i++
+      else if (c === quote) quote = undefined
+    } else if (c === '"' || c === "'") quote = c
+    else if (c === "#" && /[ \t]/.test(line[i - 1]!)) {
+      let j = i
+      while (j > 0 && /[ \t]/.test(line[j - 1]!)) j--
+      return line.slice(j).trimEnd()
+    }
+  }
+  return ""
+}
+
+/** What follows `key:` on its line, without the comment. */
+const inlineValue = (line: string) => line.slice(line.indexOf(":") + 1, line.length - comment(line).length).trim()
+
+/** Lines for `key: value` at `indent`: a mapping as an indented block, anything else on one line. */
+function entryLines(indent: string, k: string, v: unknown, style = ""): string[] {
+  if (v && typeof v === "object" && !Array.isArray(v) && Object.keys(v).length)
+    return [`${indent}${yamlKey(k)}:`, ...Object.entries(v as Json).flatMap(([ck, cv]) => entryLines(`${indent}  `, ck, cv))]
+  return [`${indent}${yamlKey(k)}: ${scalar(v, style)}`]
+}
+
+/** The end (exclusive) of the block that starts at line `at`: its more-indented lines, not counting trailing blanks/comments. */
+function blockEnd(lines: string[], at: number): number {
+  const base = indentOf(lines[at]!).length
+  let end = at + 1
+  while (end < lines.length && (blank(lines[end]!) || indentOf(lines[end]!).length > base || (base === 0 && /^-\s/.test(lines[end]!)))) end++
+  while (end > at + 1 && blank(lines[end - 1]!)) end--
+  return end
+}
+
+interface Section {
+  at: number
+  end: number
+  /** The children's indentation ("" when it has none yet). */
+  indent: string
+  children: Array<{ key: string; at: number; end: number }>
+}
+
+/** The top-level mapping `name` as lines (undefined when absent). Throws when it is not a block mapping (or empty). */
+function section(lines: string[], name: string): Section | undefined {
+  const at = lines.findIndex((l) => keyLine("", name).test(l))
+  if (at < 0) return undefined
+  const inline = inlineValue(lines[at]!)
+  if (inline && !/^(?:\{\s*\}|null|~)$/.test(inline)) throw new Error(`${name}: is written on one line (${inline.slice(0, 40)}), not as a section`)
+  const end = blockEnd(lines, at)
+  const first = lines.slice(at + 1, end).find((l) => !blank(l))
+  const indent = first ? indentOf(first) : ""
+  const children: Section["children"] = []
+  if (inline && first) throw new Error(`${name}: has both a value and a block`)
+  for (let i = at + 1; i < end; i++) {
+    const l = lines[i]!
+    if (blank(l) || indentOf(l) !== indent) continue
+    if (/^[ \t]*-(?:\s|$)/.test(l)) throw new Error(`${name}: is a list, not a section`)
+    const m = /^[ \t]*(?:"((?:[^"\\]|\\.)*)"|'((?:[^']|'')*)'|([^\s#'"][^:#]*?))\s*:(?:\s|$)/.exec(l)
+    if (!m) throw new Error(`${name}: holds something other than key: value entries`)
+    const key = m[1] !== undefined ? JSON.parse(`"${m[1]}"`) : m[2] !== undefined ? m[2].replace(/''/g, "'") : m[3]!
+    children.push({ key, at: i, end: blockEnd(lines, i) })
+  }
+  return { at, end, indent, children }
+}
+
+/**
+ * Keys are `<section>/<entry>` (model/provider, providers/brain-gateway): one entry inside a top-level mapping, set on one
+ * line (a mapping value as an indented block) and removed with its block. A section the removal leaves with nothing in it
+ * goes too, so connect-then-disconnect gives back the exact bytes (a `providers: {}` that only ever held this entry comes
+ * back as no `providers` at all, which Hermes reads the same way). Everything else, comments included, stays as it was.
+ */
+export const hermesConfig: Codec = {
+  check(text) {
+    const why = yamlTopLevel.check!(text)
+    if (why) return why
+    if (!text.trim()) return undefined
+    const lines = text.replace(/\n$/, "").split("\n")
+    const parsed = (Bun.YAML.parse(text) as Json | null) ?? {}
+    for (const name of ["model", "providers"]) {
+      const v = parsed[name]
+      if (v !== undefined && v !== null && (typeof v !== "object" || Array.isArray(v))) return `${name}: is not a section of key: value entries; left as it is`
+      try {
+        section(lines, name)
+      } catch (e) {
+        return `${(e as Error).message}; left as it is`
+      }
+    }
+    return undefined
+  },
+  get(text, key) {
+    if (!text.trim()) return undefined
+    const [name, child] = key.split("/") as [string, string]
+    const v = (Bun.YAML.parse(text) as Json | null)?.[name]
+    return v && typeof v === "object" && !Array.isArray(v) ? (v as Json)[child] : undefined
+  },
+  set(text, key, value) {
+    const [name, child] = key.split("/") as [string, string]
+    const nl = text === "" || text.endsWith("\n")
+    const lines = text ? text.replace(/\n$/, "").split("\n") : []
+    const out = () => (lines.length ? lines.join("\n") + (nl ? "\n" : "") : "")
+    const sec = section(lines, name)
+    if (!sec) {
+      if (value === undefined) return text
+      lines.push(`${yamlKey(name)}:`, ...entryLines("  ", child, value))
+      return out()
+    }
+    const found = sec.children.find((c) => c.key === child)
+    if (value === undefined) {
+      if (!found) return text
+      lines.splice(found.at, found.end - found.at)
+      // A section left with nothing under it (as when connect added it) goes with its last entry; one that still holds
+      // indented lines (a comment) stays.
+      const next = lines[sec.at + 1]
+      if (!inlineValue(lines[sec.at]!) && (next === undefined || !/^[ \t]+\S/.test(next))) lines.splice(sec.at, 1)
+      return out()
+    }
+    if (found) {
+      const old = lines[found.at]!
+      const style = inlineValue(old)[0] ?? ""
+      const next = entryLines(sec.indent, child, value, style === '"' || style === "'" ? style : "")
+      // A one-line entry keeps its trailing comment.
+      if (found.end === found.at + 1 && next.length === 1) next[0] += comment(old)
+      lines.splice(found.at, found.end - found.at, ...next)
+      return out()
+    }
+    // A new entry goes after the section's last one; an empty `name: {}` (or null) becomes a block holding it.
+    if (inlineValue(lines[sec.at]!)) lines[sec.at] = `${yamlKey(name)}:${comment(lines[sec.at]!)}`
+    lines.splice(sec.end, 0, ...entryLines(sec.indent || "  ", child, value))
+    return out()
+  },
+}
+
+const hermesDir = (home: string, env: Env) => dirFromEnv(env, "HERMES_HOME", join(home, ".hermes"))
+
+export const connectors: Connector[] = [
+  {
+    id: "hermes",
+    label: "Hermes Agent",
+    file: (home, env) => join(hermesDir(home, env), "config.yaml"),
+    probe: [".hermes"],
+    authHeader: "authorization",
+    edits: (home, s, env) => [
+      {
+        path: join(hermesDir(home, env), "config.yaml"),
+        format: "custom",
+        codec: hermesConfig,
+        values: {
+          [`providers/${HERMES_PROVIDER}`]: {
+            name: "100xprompt gateway",
+            base_url: `${routeUrl(s)}/v1`,
+            key_env: HERMES_KEY_VAR,
+            api_mode: "chat_completions",
+            default_model: s.model,
+            ...(s.contextEdit ? { extra_headers: { [EDIT_HEADER]: "on" } } : {}),
+          },
+          "model/provider": `custom:${HERMES_PROVIDER}`,
+          "model/default": s.model,
+        },
+      },
+      {
+        path: join(hermesDir(home, env), ".env"),
+        format: "dotenv",
+        holdsKey: true,
+        secretKeys: [HERMES_KEY_VAR],
+        values: { [HERMES_KEY_VAR]: readKey(home) },
+      },
+    ],
+    notes: [
+      "Hermes now starts on the gateway's model (the provider \"100xprompt gateway\" in ~/.hermes/config.yaml, made the default); your own providers stay in its /model picker.",
+      `Hermes has no way to read a key from a file, so the key is kept in ~/.hermes/.env (${HERMES_KEY_VAR}), which is now readable by you only (0600).`,
+    ],
+  },
+]

package/src/gateway/connectors/iflow-cli.ts

@@ -0,0 +1,50 @@
+// Gateway connector for iFlow CLI (`iflow`).
+//
+// Checked against iFlow CLI 0.5.19 as installed (~/.cache/brain-wire/iflow-cli, @iflow-ai/iflow-cli, bundle/iflow.js;
+// minified, so places are named by line and function) and its docs (https://platform.iflow.cn/en/cli/configuration/settings):
+//   - User settings are ~/.iflow/settings.json under os.homedir(), whatever IFLOW_HOME says (iflow.js:5165, `eJ`, loaded by
+//     `hu`), read through strip-json-comments then JSON.parse (comments fine, no trailing commas), with $VAR / ${VAR}
+//     replaced from the environment. When iFlow CLI saves a setting itself it rewrites the whole file as plain JSON
+//     (iflow.js:5165 `BMi`: writeFileSync(JSON.stringify(settings, null, 2)); comments go, the mode stays).
+//   - A custom OpenAI-compatible endpoint is four top-level keys: selectedAuthType "openai-compatible" (the enum's
+//     OPENAI_COMPATIBLE, iflow.js:974), apiKey, baseUrl (requests go to `${baseUrl}/chat/completions`, iflow.js:956) and
+//     modelName (any name is accepted for openai-compatible, `validateModel`). The settings win over IFLOW_* variables only
+//     when those are unset: IFLOW_apiKey / IFLOW_API_KEY / iflow_apiKey ... and the same for baseUrl, modelName and
+//     selectedAuthType override the file (iflow.js:974 `CT`, `zOt`), and a project's .iflow/settings.json overrides the
+//     user file key by key.
+//   - The key: only `apiKey` in a settings file or an IFLOW_apiKey variable; there is no key-file or command option. The one
+//     .env file iFlow CLI loads is the first found walking up from the working folder (iflow.js:5165 `nnu`), so ~/.iflow/.env
+//     is skipped in any project that has its own .env: the key is copied into settings.json, which is then 0600.
+//   - Headers: fixed in the OpenAI client (Authorization: Bearer, user-agent, session ids, iflow.js:956); there is no
+//     custom-header setting, so `x-100x-context-edit` cannot be sent.
+//   - Display: iFlow CLI shows modelName as it is (no display-name setting for openai-compatible models).
+// The person's own values of the four keys are recorded and put back by disconnect; nothing else in the file changes, and
+// comments are kept (the shared JSON-with-comments codec in qwen-code.ts).
+import { join } from "node:path"
+import { type Connector, readKey, routeUrl } from "../common.ts"
+import { jsonc } from "./qwen-code.ts"
+
+export const connectors: Connector[] = [
+  {
+    id: "iflow-cli",
+    label: "iFlow CLI",
+    file: (home) => join(home, ".iflow", "settings.json"),
+    probe: [".iflow"],
+    authHeader: "authorization",
+    edits: (home, s) => [
+      {
+        path: join(home, ".iflow", "settings.json"),
+        format: "custom",
+        codec: jsonc(),
+        holdsKey: true,
+        secretKeys: ["apiKey"],
+        values: { selectedAuthType: "openai-compatible", baseUrl: `${routeUrl(s)}/v1`, modelName: s.model, apiKey: readKey(home) },
+      },
+    ],
+    notes: [
+      "iFlow CLI keeps the key in ~/.iflow/settings.json (apiKey; it has no key-file option), so that file is now readable by you only (0600). Its sign-in is set to OpenAI-compatible.",
+      "iFlow CLI cannot send extra headers: context editing applies only when the gateway turns it on for everyone. It has no display name for the model, so it shows the gateway's model id.",
+      "IFLOW_apiKey, IFLOW_baseUrl or IFLOW_modelName (or IFLOW_API_KEY ...) set in your shell, or a project's .iflow/settings.json, take precedence over these settings.",
+    ],
+  },
+]

package/src/gateway/connectors/index.ts

@@ -0,0 +1,86 @@
+// Every gateway connector besides the four in connect.ts: one file per tool, each exporting `connectors` (empty when the
+// tool cannot be pointed at the gateway; its file says why).
+import type { Connector } from "../common.ts"
+import { connectors as c_continue } from "./continue.ts"
+import { connectors as c_pearai } from "./pearai.ts"
+import { connectors as c_aider } from "./aider.ts"
+import { connectors as c_goose } from "./goose.ts"
+import { connectors as c_crush } from "./crush.ts"
+import { connectors as c_kimi_code } from "./kimi-code.ts"
+import { connectors as c_qwen_code } from "./qwen-code.ts"
+import { connectors as c_iflow_cli } from "./iflow-cli.ts"
+import { connectors as c_mistral_vibe } from "./mistral-vibe.ts"
+import { connectors as c_grok_cli } from "./grok-cli.ts"
+import { connectors as c_openhands } from "./openhands.ts"
+import { connectors as c_letta_code } from "./letta-code.ts"
+import { connectors as c_factory_droid } from "./factory-droid.ts"
+import { connectors as c_hermes } from "./hermes.ts"
+import { connectors as c_pi } from "./pi.ts"
+import { connectors as c_omp } from "./omp.ts"
+import { connectors as c_mastracode } from "./mastracode.ts"
+import { connectors as c_muse } from "./muse.ts"
+import { connectors as c_roo } from "./roo.ts"
+import { connectors as c_kilo_code } from "./kilo-code.ts"
+import { connectors as c_kilo_cli } from "./kilo-cli.ts"
+import { connectors as c_zed } from "./zed.ts"
+import { connectors as c_vscode_copilot } from "./vscode-copilot.ts"
+import { connectors as c_cline } from "./cline.ts"
+import { connectors as c_cline_sdk } from "./cline-sdk.ts"
+import { connectors as c_cursor } from "./cursor.ts"
+import { connectors as c_cursor_cli } from "./cursor-cli.ts"
+import { connectors as c_copilot_cli } from "./copilot-cli.ts"
+import { connectors as c_windsurf } from "./windsurf.ts"
+import { connectors as c_antigravity } from "./antigravity.ts"
+import { connectors as c_amazon_q_cli } from "./amazon-q-cli.ts"
+import { connectors as c_amazon_q_ide } from "./amazon-q-ide.ts"
+import { connectors as c_kiro_cli } from "./kiro-cli.ts"
+import { connectors as c_kiro_ide } from "./kiro-ide.ts"
+import { connectors as c_auggie } from "./auggie.ts"
+import { connectors as c_codebuff } from "./codebuff.ts"
+import { connectors as c_tabnine_cli } from "./tabnine-cli.ts"
+import { connectors as c_devin } from "./devin.ts"
+import { connectors as c_qoder_cli } from "./qoder-cli.ts"
+import { connectors as c_void } from "./void.ts"
+
+export const EXTRA_CONNECTORS: Connector[] = [
+  ...c_continue,
+  ...c_pearai,
+  ...c_aider,
+  ...c_goose,
+  ...c_crush,
+  ...c_kimi_code,
+  ...c_qwen_code,
+  ...c_iflow_cli,
+  ...c_mistral_vibe,
+  ...c_grok_cli,
+  ...c_openhands,
+  ...c_letta_code,
+  ...c_factory_droid,
+  ...c_hermes,
+  ...c_pi,
+  ...c_omp,
+  ...c_mastracode,
+  ...c_muse,
+  ...c_roo,
+  ...c_kilo_code,
+  ...c_kilo_cli,
+  ...c_zed,
+  ...c_vscode_copilot,
+  ...c_cline,
+  ...c_cline_sdk,
+  ...c_cursor,
+  ...c_cursor_cli,
+  ...c_copilot_cli,
+  ...c_windsurf,
+  ...c_antigravity,
+  ...c_amazon_q_cli,
+  ...c_amazon_q_ide,
+  ...c_kiro_cli,
+  ...c_kiro_ide,
+  ...c_auggie,
+  ...c_codebuff,
+  ...c_tabnine_cli,
+  ...c_devin,
+  ...c_qoder_cli,
+  ...c_void,
+]