@agentproto/adapter-hermes 0.1.0-alpha.0

package/HERMES.md

@@ -0,0 +1,95 @@
+---
+name: hermes
+id: hermes
+description: Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC; per-turn streaming via ACP session/update notifications. Use when an operator wants the Hermes runtime as its execution surface (multimodal, multi-provider, agentskills.io-compatible).
+version: 0.1.0
+bin: hermes
+bin_args: [acp]
+install:
+  - method: curl
+    url: https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh
+  - method: brew
+    package: hermes-agent
+    experimental: true
+version_check:
+  cmd: hermes --version
+  parse: "(\\d+\\.\\d+\\.\\d+)"
+  range: ">=0.13.0 <1.0.0"
+  timeout_ms: 5000
+auth:
+  ref: ./SECRETS.md
+  state:
+    env: [OPENROUTER_API_KEY, ANTHROPIC_API_KEY, OPENAI_API_KEY]
+sandbox: ./SANDBOX.md
+protocol: acp
+acp: ./hermes-acp.ACP.md
+session:
+  mode: persistent
+  idle_timeout_ms: 1800000
+  context_carryover: true
+models:
+  default: anthropic/claude-sonnet-4-6
+  allowed:
+    - anthropic/claude-sonnet-4-6
+    - anthropic/claude-opus-4-7
+    - openai/gpt-4
+    - meta-llama/llama-3.3-70b
+  env:
+    anthropic: ANTHROPIC_API_KEY
+    openrouter: OPENROUTER_API_KEY
+    openai: OPENAI_API_KEY
+capabilities:
+  streaming: true
+  tool_calls: true
+  sub_agents: true
+  file_io: true
+  multimodal: true
+  resumable: false
+  bidirectional: true
+tags: [hermes, nous, acp, agent-runtime]
+---
+
+# Hermes Agent
+
+Nous Research's open-source autonomous agent CLI. Implements the
+Agent Client Protocol server-side, exposing its agent loop —
+skills (agentskills.io-compatible), tools, sandboxed subagents,
+plugin-based memory (Honcho, mem0, supermemory, …), and
+multi-provider model routing — over stdio JSON-RPC.
+
+## When to use this manifest
+
+Bind an AIP-9 operator to Hermes when the operator should run inside
+Hermes' agent loop instead of in-process. Common cases: surfacing
+the Guilde / Katchy operator inside an IDE Shell view (M5), running
+a power-user-style agent CLI under operator governance, or letting
+the operator delegate to Hermes-native skills the host doesn't ship.
+
+## Auth
+
+Hermes consumes per-provider API keys via environment variables.
+[`./SECRETS.md`](./SECRETS.md) inventories the slots; values are
+resolved from the operator's secret store and passed via
+`sandbox.env.set` (never argv). At minimum one of
+`OPENROUTER_API_KEY`, `ANTHROPIC_API_KEY`, or `OPENAI_API_KEY` MUST
+be present at boot.
+
+## Protocol
+
+`protocol: acp` — Hermes ships an ACP server in
+[`acp_adapter/`](https://github.com/NousResearch/hermes-agent/tree/main/acp_adapter).
+The `[hermes-acp.ACP.md](./hermes-acp.ACP.md)` sidecar (AIP-44)
+declares the wire profile this manifest binds to.
+
+## Sandbox
+
+[`./SANDBOX.md`](./SANDBOX.md) declares a `local` provider for dev.
+Production deployments swap to `mastra-modal` / `mastra-daytona` for
+process isolation; the runner change is one field, no driver edits.
+
+## Versioning
+
+Hermes pre-1.0 versions API surface frequently. The
+`version_check.range` pin is conservative (`>=0.13.0 <1.0.0`). Bump
+the manifest's `version` whenever Hermes ships a behaviour or
+protocol change that affects this binding.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 agentproto contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/SECRETS.md

@@ -0,0 +1,59 @@
+---
+name: hermes-secrets
+id: hermes-secrets
+description: Secret slots Hermes Agent reads at boot. At minimum one model-provider key MUST be present; additional integrations (search, voice, vision providers) optionally widen the operator's tool surface.
+version: 0.1.0
+slots:
+  - name: ANTHROPIC_API_KEY
+    description: Anthropic API key — enables claude-* models.
+    required: false
+    sensitivity: high
+  - name: OPENROUTER_API_KEY
+    description: OpenRouter API key — enables 200+ models behind one provider.
+    required: false
+    sensitivity: high
+  - name: OPENAI_API_KEY
+    description: OpenAI API key — enables gpt-* models.
+    required: false
+    sensitivity: high
+  - name: GEMINI_API_KEY
+    description: Google Gemini API key.
+    required: false
+    sensitivity: high
+  - name: GROQ_API_KEY
+    description: Groq inference API key.
+    required: false
+    sensitivity: high
+constraints:
+  - kind: at-least-one-of
+    of:
+      - ANTHROPIC_API_KEY
+      - OPENROUTER_API_KEY
+      - OPENAI_API_KEY
+      - GEMINI_API_KEY
+      - GROQ_API_KEY
+tags: [hermes, secrets, model-providers]
+---
+
+# Hermes Agent — secrets inventory
+
+Hermes routes turns to whichever model the operator selects (or its
+own default) and reads provider keys from the environment. The
+`at-least-one-of` constraint enforces that at least one provider is
+configured before spawn; the runner refuses to start otherwise.
+
+## Threat surface
+
+- Provider keys leak via misconfigured logging or a tool call that
+  shells out with `env | grep API_KEY`. Hosts MUST scrub provider
+  env from any user-visible diagnostic output.
+- Hermes' own plugin layer (memory, image-gen) may read additional
+  env vars not enumerated here. The host SHOULD pass only the slots
+  declared in this manifest, no broader passthrough.
+
+## Operator binding
+
+The operator's secret store resolves these slots and the runner
+injects them via `sandbox.env.set`. Tools the operator does not have
+permission to use (per AIP-7 governance) MUST NOT receive the
+matching key.

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+import { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
+export { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
+
+/**
+ * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.
+ *
+ * Re-exports a `defineAgentCli` instance plus the runtime factory so
+ * a host can boot Hermes with one import:
+ *
+ *   import { hermes, hermesRuntime } from "@agentproto/adapter-hermes"
+ *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })
+ *   for await (const evt of session.send({ role: "user", content: "..." })) {
+ *     console.log(evt)
+ *   }
+ *   await session.close()
+ *
+ * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in
+ * this package describe the manifest, secret slots, and ACP wire
+ * profile.
+ */
+
+declare const hermes: AgentCliHandle;
+declare function hermesRuntime(): AgentCliRuntime;
+
+export { hermes, hermesRuntime };

package/dist/index.mjs

@@ -0,0 +1,70 @@
+import { defineAgentCli, createAgentCliRuntime } from '@agentproto/driver-agent-cli';
+
+/**
+ * @agentproto/adapter-hermes v0.1.0-alpha
+ * AIP-45 adapter for Nous Research's Hermes Agent.
+ */
+
+var hermes = defineAgentCli({
+  name: "hermes",
+  id: "hermes",
+  description: "Nous Research's Hermes Agent \u2014 autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.",
+  version: "0.1.0",
+  bin: "hermes",
+  bin_args: ["acp"],
+  install: [
+    {
+      method: "curl",
+      url: "https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh"
+    }
+  ],
+  version_check: {
+    cmd: "hermes --version",
+    parse: "(\\d+\\.\\d+\\.\\d+)",
+    range: ">=0.13.0 <1.0.0",
+    timeout_ms: 5e3
+  },
+  auth: {
+    ref: "./SECRETS.md",
+    state: { env: ["OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "OPENAI_API_KEY"] }
+  },
+  sandbox: "./SANDBOX.md",
+  protocol: "acp",
+  acp: "./hermes-acp.ACP.md",
+  session: {
+    mode: "persistent",
+    idle_timeout_ms: 18e5,
+    context_carryover: true
+  },
+  models: {
+    default: "anthropic/claude-sonnet-4-6",
+    allowed: [
+      "anthropic/claude-sonnet-4-6",
+      "anthropic/claude-opus-4-7",
+      "openai/gpt-4",
+      "meta-llama/llama-3.3-70b"
+    ],
+    env: {
+      anthropic: "ANTHROPIC_API_KEY",
+      openrouter: "OPENROUTER_API_KEY",
+      openai: "OPENAI_API_KEY"
+    }
+  },
+  capabilities: {
+    streaming: true,
+    tool_calls: true,
+    sub_agents: true,
+    file_io: true,
+    multimodal: true,
+    resumable: false,
+    bidirectional: true
+  },
+  tags: ["hermes", "nous", "acp", "agent-runtime"]
+});
+function hermesRuntime() {
+  return createAgentCliRuntime(hermes);
+}
+
+export { hermes, hermesRuntime };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;AAyBO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA,IACL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,mBAAA,EAAqB,gBAAgB,CAAA;AAAE,GAC9E;AAAA,EACA,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,OAAA,EAAS,6BAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,6BAAA;AAAA,MACA,2BAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,GAAA,EAAK;AAAA,MACH,SAAA,EAAW,mBAAA;AAAA,MACX,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe;AAAA,GACjB;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe;AACjD,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    state: { env: [\"OPENROUTER_API_KEY\", \"ANTHROPIC_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n  },\n  models: {\n    default: \"anthropic/claude-sonnet-4-6\",\n    allowed: [\n      \"anthropic/claude-sonnet-4-6\",\n      \"anthropic/claude-opus-4-7\",\n      \"openai/gpt-4\",\n      \"meta-llama/llama-3.3-70b\",\n    ],\n    env: {\n      anthropic: \"ANTHROPIC_API_KEY\",\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n  },\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@agentproto/adapter-hermes",
+  "version": "0.1.0-alpha.0",
+  "description": "@agentproto/adapter-hermes — AIP-45 AGENT-CLI adapter for Nous Research's Hermes Agent. Spawns `hermes acp` and drives it as an agentproto agent CLI via the ACP protocol arm of @agentproto/driver-agent-cli.",
+  "keywords": [
+    "agentproto",
+    "aip-45",
+    "hermes",
+    "nous",
+    "acp",
+    "agent-cli",
+    "adapter"
+  ],
+  "homepage": "https://agentproto.sh/docs/aip-45",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "adapters/hermes"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./HERMES.md": "./HERMES.md",
+    "./SECRETS.md": "./SECRETS.md",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "HERMES.md",
+    "SECRETS.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@agentproto/driver-agent-cli": "0.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  }
+}