@agentproto/adapter-hermes 0.1.1 → 0.3.0

package/HERMES.md

@@ -28,16 +28,25 @@ session:
   idle_timeout_ms: 1800000
   context_carryover: true
 models:
-  default: anthropic/claude-sonnet-4-6
+  default: z-ai/glm-5.2
   allowed:
-    - anthropic/claude-sonnet-4-6
-    - anthropic/claude-opus-4-7
-    - openai/gpt-4
+    - z-ai/glm-5.2
+    - deepseek/deepseek-v4-pro
     - meta-llama/llama-3.3-70b
+    - openai/gpt-4
+  # Anthropic models are reserved for the dedicated claude-code adapter —
+  # hermes must NEVER route to them, even if a caller passes the id
+  # explicitly. Enforced at compose time (RuntimeConfigError).
+  deny:
+    - anthropic/*
+    - claude-*
   env:
-    anthropic: ANTHROPIC_API_KEY
     openrouter: OPENROUTER_API_KEY
     openai: OPENAI_API_KEY
+  # hermes keeps its own configured default when given a model via the ACP
+  # session config — selection must go through a `/model <id>` control turn
+  # instead. See the "Model selection" section below.
+  apply: command
 capabilities:
   streaming: true
   tool_calls: true
@@ -46,6 +55,41 @@ capabilities:
   multimodal: true
   resumable: false
   bidirectional: true
+modes:
+  - id: default
+    description: Standard interactive mode — loads ~/.hermes/config.yaml and auto-injects rules/memory/preloaded skills as usual.
+  - id: lean
+    description: >-
+      Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding
+      hermes would otherwise preload into context. Composed as
+      `hermes --ignore-user-config acp` — the global flag MUST precede the
+      `acp` subcommand baked into `bin_args`, which is why this needs
+      `bin_args_prepend` rather than `bin_args_append`.
+    bin_args_prepend: ["--ignore-user-config"]
+options:
+  - id: skills
+    type: string
+    description: >-
+      Preload one or more agentskills.io-compatible skills for the session
+      (comma-separate for multiple), via hermes' `--skills` global flag.
+      Same prepend-before-`acp` constraint as the `lean` mode.
+    bin_args_prepend: ["--skills", "{value}"]
+  - id: model
+    type: string
+    description: >-
+      Model ID routed through OpenRouter/OpenAI (e.g.
+      'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2', 'moonshotai/kimi-k2').
+      Free-form: any valid OpenRouter/OpenAI id is accepted even when not
+      in `allowed`. Anthropic models are denied (see `models.deny`) — use
+      the claude-code adapter for those. Applied via a `/model <id>`
+      control turn after the session is created (hermes ignores the ACP
+      session model config). Omit to use the hermes default.
+  - id: effort
+    type: enum
+    enum: [low, medium, high, xhigh, max]
+    description: >-
+      Reasoning effort level passed to hermes via ACP newSession. Omit to
+      use the hermes default.
 tags: [hermes, nous, acp, agent-runtime]
 ---
 
@@ -74,6 +118,34 @@ resolved from the operator's secret store and passed via
 `OPENROUTER_API_KEY`, `ANTHROPIC_API_KEY`, or `OPENAI_API_KEY` MUST
 be present at boot.
 
+## Model selection
+
+Hermes does **not** read the model from its ACP session config — it keeps
+whatever its own `~/.hermes/config.yaml` resolves as default. So unlike the
+claude-code / claude-sdk adapters (which pin the model at spawn via a CLI
+flag), the `model` option here is applied as a **`/model <id>` control turn
+sent after the session is created** (`models.apply: command`).
+
+Two consequences an operator should know:
+
+- **Provider is whatever hermes resolves at session start.** The `/model`
+  turn only switches the model id; it does not re-resolve the provider. If
+  `~/.hermes/config.yaml`'s default provider is `moa` (Mixture of Agents),
+  a `/model moonshotai/kimi-k2` turn targets a model moa can't serve and
+  fails. Point hermes at the right provider (e.g. set
+  `model.default.provider: openrouter`, or a direct `moonshot` provider
+  block) before relying on the `model` option. The interactive CLI
+  `hermes --model <id>` resolves the provider at launch and does not have
+  this constraint.
+- **No `provider` option is exposed.** Agentproto can only set the model
+  id, not force OpenRouter/Moonshot routing. To run Kimi through a
+  provider-pinned path, prefer the `claude-sdk` adapter with
+  `mode: moonshot` (or `mode: openrouter` + a model slug).
+
+`models.deny` (`anthropic/*`, `claude-*`) is enforced at compose time — a
+RuntimeConfigError — so the budget arm can never silently burn premium
+Anthropic spend.
+
 ## Protocol
 
 `protocol: acp` — Hermes ships an ACP server in

package/LICENSE

@@ -1,21 +1,202 @@
-MIT License
-
-Copyright (c) 2026 agentproto contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/index.mjs

@@ -28,8 +28,16 @@ var hermes = defineAgentCli({
   },
   auth: {
     ref: "./SECRETS.md",
-    state: { env: ["OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "OPENAI_API_KEY"] }
+    // No ANTHROPIC_API_KEY — hermes is the budget arm and deliberately does
+    // not route to Anthropic (see models.deny). Anthropic stays exclusive to
+    // the claude-code adapter.
+    state: { env: ["OPENROUTER_API_KEY", "OPENAI_API_KEY"] }
   },
+  // Billing-auth (opt-in — no authEnforce, so unconfigured spawns stay
+  // ambient). Single-provider adapter: api-key mode SETS providerEnvVar
+  // ("openrouter") = OPENROUTER_API_KEY, derived from the catalog. No
+  // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.
+  provider: "openrouter",
   sandbox: "./SANDBOX.md",
   protocol: "acp",
   acp: "./hermes-acp.ACP.md",
@@ -49,18 +57,22 @@ var hermes = defineAgentCli({
   models: {
     // Cheap OpenRouter models by default — hermes is the budget delegation
     // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek
-    // are the go-to cheap coders; the bigger models stay available.
+    // are the go-to cheap coders. `allowed` is only the curated menu: the
+    // `model` option is free-form, so any OpenRouter id (kimi, qwen, …) can
+    // still be passed even when it isn't listed here.
     default: "z-ai/glm-5.2",
     allowed: [
       "z-ai/glm-5.2",
       "deepseek/deepseek-v4-pro",
       "meta-llama/llama-3.3-70b",
-      "anthropic/claude-sonnet-4-6",
-      "anthropic/claude-opus-4-7",
       "openai/gpt-4"
     ],
+    // Anthropic models are reserved for the dedicated claude-code adapter —
+    // hermes must NEVER route to them, even if a caller passes the id
+    // explicitly. Enforced at compose time (RuntimeConfigError), so the
+    // budget arm can't silently burn premium Anthropic spend.
+    deny: ["anthropic/*", "claude-*"],
     env: {
-      anthropic: "ANTHROPIC_API_KEY",
       openrouter: "OPENROUTER_API_KEY",
       openai: "OPENAI_API_KEY"
     },
@@ -78,15 +90,35 @@ var hermes = defineAgentCli({
     resumable: false,
     bidirectional: true
   },
+  modes: [
+    {
+      id: "default",
+      description: "Standard interactive mode \u2014 loads ~/.hermes/config.yaml and auto-injects rules/memory/preloaded skills as usual."
+    },
+    {
+      id: "lean",
+      description: "Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding hermes would otherwise preload into context. Composed as `hermes --ignore-user-config acp` \u2014 the global flag MUST precede the `acp` subcommand baked into `bin_args`, which is why this needs bin_args_prepend rather than bin_args_append.",
+      bin_args_prepend: ["--ignore-user-config"],
+      status: "noop",
+      status_note: "Measured no-op: --ignore-user-config skips ~/.hermes/config.yaml, but hermes skills live in a separate skills dir (not config), so prompt-size is byte-identical. The real lean lever is narrowing the mounted toolset, not this flag."
+    }
+  ],
   options: [
+    {
+      id: "skills",
+      type: "string",
+      description: "Preload one or more agentskills.io-compatible skills for the session (comma-separate for multiple), via hermes' `--skills` global flag. Same prepend-before-`acp` constraint as the `lean` mode.",
+      bin_args_prepend: ["--skills", "{value}"]
+    },
     {
       id: "model",
-      // string (not enum) so any valid OpenRouter/Anthropic/OpenAI model ID is
-      // accepted without requiring a code change to expand the list. Applied via
-      // ACP newSession(model:...) — hermes reads the model from the ACP session
-      // config, not from its own CLI args.
+      // string (not enum) so any valid OpenRouter/OpenAI model ID is accepted
+      // without a code change to expand the list. Applied via ACP
+      // newSession(model:...) — hermes reads the model from the ACP session
+      // config, not from its own CLI args. Anthropic ids are denied
+      // (models.deny) — those are reserved for the claude-code adapter.
       type: "string",
-      description: "Model ID routed through OpenRouter/Anthropic/OpenAI (e.g. 'anthropic/claude-sonnet-4-6', 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2'). Applied via a `/model <id>` control turn after the session is created (hermes ignores the ACP session model config). Omit to use the hermes default."
+      description: "Model ID routed through OpenRouter/OpenAI (e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2', 'moonshotai/kimi-k2'). Anthropic models are not permitted on hermes \u2014 use the claude-code adapter for those. Applied via a `/model <id>` control turn after the session is created (hermes ignores the ACP session model config). Omit to use the hermes default."
     },
     {
       id: "effort",
@@ -95,7 +127,15 @@ var hermes = defineAgentCli({
       description: "Reasoning effort level passed to hermes via ACP newSession. Omit to use the hermes default."
     }
   ],
-  tags: ["hermes", "nous", "acp", "agent-runtime"]
+  tags: ["hermes", "nous", "acp", "agent-runtime"],
+  metadata: {
+    // Opts hermes into `agentproto install skill/<slug>` fan-out (no
+    // --target given): skills get copied one subdir per skill into
+    // hermes's own skills directory, alongside whatever it ships
+    // natively. See packages/cli/src/commands/skill-install/types.ts
+    // `AdapterSkillsTarget` for the shape + guard.
+    skills: { format: "flat-dir", dir: "~/.hermes/skills" }
+  }
 });
 function hermesRuntime() {
   return createAgentCliRuntime(hermes);

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;AAyBO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA,IACL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,mBAAA,EAAqB,gBAAgB,CAAA;AAAE,GAC9E;AAAA,EACA,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQnB,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,MAAA,EAAQ;AAAA;AAAA;AAAA;AAAA,IAIN,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,cAAA;AAAA,MACA,0BAAA;AAAA,MACA,0BAAA;AAAA,MACA,6BAAA;AAAA,MACA,2BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,GAAA,EAAK;AAAA,MACH,SAAA,EAAW,mBAAA;AAAA,MACX,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA,KACV;AAAA;AAAA;AAAA;AAAA,IAIA,KAAA,EAAO;AAAA,GACT;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe;AAAA,GACjB;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAKJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAKJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA;AAEJ,GACF;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe;AACjD,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC;AAYA,eAAsB,gBACpB,SAAA,EAC6E;AAC7E,EAAA,IAAI;AAKF,IAAA,MAAM,kBAAkB,CAAC,MAAA,EAAQ,QAAQ,CAAA,CAAE,KAAK,GAAG,CAAA;AACnD,IAAA,MAAM,EAAE,YAAA,EAAa,GAAK,MAAM,OAAO,eAAA,CAAA;AAMvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,CAAA;AACjB,IAAA,MAAM,QAAA,GAAW,GAAA;AACjB,IAAA,IAAI,IAAA,GAA2E,IAAA;AAC/E,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,KAAK,IAAI,YAAA,CAAa,QAAQ,EAAE,QAAA,EAAU,MAAM,CAAA;AACtD,MAAA,MAAM,MAAM,EAAA,CAAG,OAAA;AAAA,QACb;AAAA,OACF,CAAE,IAAI,SAAS,CAAA;AACf,MAAA,EAAA,CAAG,KAAA,EAAM;AACT,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAA,GAAO,EAAE,SAAS,GAAA,CAAI,IAAA,EAAM,UAAU,GAAA,CAAI,EAAA,EAAI,SAAA,EAAW,GAAA,CAAI,GAAA,EAAI;AAGjE,QAAA,IAAI,IAAI,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,IAAA,KAAS,QAAW,OAAO,IAAA;AAAA,MAC1D;AACA,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,IAAI,QAAQ,CAAA,CAAA,KAAK,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    state: { env: [\"OPENROUTER_API_KEY\", \"ANTHROPIC_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n    // hermes's own ACP server has been observed to hit its internal\n    // max-tool-iterations cap, produce a final answer, and then never\n    // send the `prompt` JSON-RPC response — hanging the daemon's turn\n    // drain loop forever with no other adapter-side signal available.\n    // 5 minutes of true silence (reset on any ACP traffic, so a long\n    // legitimate tool-call chain doesn't false-positive) is generous\n    // enough to not trip during normal use.\n    turn_idle_timeout_ms: 300_000,\n  },\n  models: {\n    // Cheap OpenRouter models by default — hermes is the budget delegation\n    // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek\n    // are the go-to cheap coders; the bigger models stay available.\n    default: \"z-ai/glm-5.2\",\n    allowed: [\n      \"z-ai/glm-5.2\",\n      \"deepseek/deepseek-v4-pro\",\n      \"meta-llama/llama-3.3-70b\",\n      \"anthropic/claude-sonnet-4-6\",\n      \"anthropic/claude-opus-4-7\",\n      \"openai/gpt-4\",\n    ],\n    env: {\n      anthropic: \"ANTHROPIC_API_KEY\",\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n    // hermes keeps its own configured default when given a model via the\n    // ACP session config — selection must go through a `/model <id>`\n    // control turn instead. See AgentCliModels.apply.\n    apply: \"command\",\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n  },\n  options: [\n    {\n      id: \"model\",\n      // string (not enum) so any valid OpenRouter/Anthropic/OpenAI model ID is\n      // accepted without requiring a code change to expand the list. Applied via\n      // ACP newSession(model:...) — hermes reads the model from the ACP session\n      // config, not from its own CLI args.\n      type: \"string\" as const,\n      description:\n        \"Model ID routed through OpenRouter/Anthropic/OpenAI \" +\n        \"(e.g. 'anthropic/claude-sonnet-4-6', 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2'). \" +\n        \"Applied via a `/model <id>` control turn after the session is created \" +\n        \"(hermes ignores the ACP session model config). \" +\n        \"Omit to use the hermes default.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\" as const,\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort level passed to hermes via ACP newSession. \" +\n        \"Omit to use the hermes default.\",\n    },\n  ],\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\nimport { homedir } from \"node:os\"\nimport { join } from \"node:path\"\n\n/** Best-effort read of a hermes session's cost/token usage from its state.db.\n *\n *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn\n *  ends, so a single read right at turn-end usually finds the cost column\n *  still null. We poll a few times with a short backoff until the cost lands\n *  (or give up — best-effort, never throws). Bounded so a missing write can't\n *  hang the caller (the turn-end path awaits this). */\nexport async function readHermesUsage(\n  sessionId: string,\n): Promise<{ costUsd?: number; tokensIn?: number; tokensOut?: number } | null> {\n  try {\n    // node:sqlite is a Node 22+ builtin. Build the specifier at runtime so the\n    // bundler (esbuild/tsup) can't statically rewrite it — it strips the\n    // `node:` prefix off this not-yet-recognised builtin, turning the import\n    // into a missing `sqlite` package that throws and silently yields null.\n    const sqliteSpecifier = [\"node\", \"sqlite\"].join(\":\")\n    const { DatabaseSync } = (await import(sqliteSpecifier)) as unknown as {\n      DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => {\n        prepare(sql: string): { get(...a: unknown[]): unknown }\n        close(): void\n      }\n    }\n    const dbPath = join(homedir(), \".hermes\", \"state.db\")\n    const ATTEMPTS = 6\n    const DELAY_MS = 130\n    let last: { costUsd?: number; tokensIn?: number; tokensOut?: number } | null = null\n    for (let i = 0; i < ATTEMPTS; i++) {\n      const db = new DatabaseSync(dbPath, { readOnly: true })\n      const row = db.prepare(\n        \"select estimated_cost_usd as cost, input_tokens as ti, output_tokens as to_ from sessions where id = ?\",\n      ).get(sessionId) as { cost?: number; ti?: number; to_?: number } | undefined\n      db.close()\n      if (row) {\n        last = { costUsd: row.cost, tokensIn: row.ti, tokensOut: row.to_ }\n        // Cost has landed (non-null) → done. Otherwise keep polling: the row\n        // exists but hermes hasn't written the cost for this turn yet.\n        if (row.cost !== null && row.cost !== undefined) return last\n      }\n      if (i < ATTEMPTS - 1) await new Promise(r => setTimeout(r, DELAY_MS))\n    }\n    return last\n  } catch {\n    return null\n  }\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;AAyBO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA;AAAA;AAAA;AAAA,IAIL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,gBAAgB,CAAA;AAAE,GACzD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,EAAU,YAAA;AAAA,EACV,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQnB,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,MAAA,EAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMN,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,cAAA;AAAA,MACA,0BAAA;AAAA,MACA,0BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,IAAA,EAAM,CAAC,aAAA,EAAe,UAAU,CAAA;AAAA,IAChC,GAAA,EAAK;AAAA,MACH,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA,KACV;AAAA;AAAA;AAAA;AAAA,IAIA,KAAA,EAAO;AAAA,GACT;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe;AAAA,GACjB;AAAA,EACA,KAAA,EAAO;AAAA,IACL;AAAA,MACE,EAAA,EAAI,SAAA;AAAA,MACJ,WAAA,EACE;AAAA,KAEJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,MAAA;AAAA,MACJ,WAAA,EACE,0TAAA;AAAA,MAIF,gBAAA,EAAkB,CAAC,sBAAsB,CAAA;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,WAAA,EACE;AAAA;AAIJ,GACF;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,kMAAA;AAAA,MAGF,gBAAA,EAAkB,CAAC,UAAA,EAAY,SAAS;AAAA,KAC1C;AAAA,IACA;AAAA,MACE,EAAA,EAAI,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAOJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA;AAEJ,GACF;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe,CAAA;AAAA,EAC/C,QAAA,EAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMR,MAAA,EAAQ,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAK,kBAAA;AAAmB;AAE1D,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC;AAYA,eAAsB,gBACpB,SAAA,EAC6E;AAC7E,EAAA,IAAI;AAKF,IAAA,MAAM,kBAAkB,CAAC,MAAA,EAAQ,QAAQ,CAAA,CAAE,KAAK,GAAG,CAAA;AACnD,IAAA,MAAM,EAAE,YAAA,EAAa,GAAK,MAAM,OAAO,eAAA,CAAA;AAMvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,CAAA;AACjB,IAAA,MAAM,QAAA,GAAW,GAAA;AACjB,IAAA,IAAI,IAAA,GAA2E,IAAA;AAC/E,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,KAAK,IAAI,YAAA,CAAa,QAAQ,EAAE,QAAA,EAAU,MAAM,CAAA;AACtD,MAAA,MAAM,MAAM,EAAA,CAAG,OAAA;AAAA,QACb;AAAA,OACF,CAAE,IAAI,SAAS,CAAA;AACf,MAAA,EAAA,CAAG,KAAA,EAAM;AACT,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAA,GAAO,EAAE,SAAS,GAAA,CAAI,IAAA,EAAM,UAAU,GAAA,CAAI,EAAA,EAAI,SAAA,EAAW,GAAA,CAAI,GAAA,EAAI;AAGjE,QAAA,IAAI,IAAI,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,IAAA,KAAS,QAAW,OAAO,IAAA;AAAA,MAC1D;AACA,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,IAAI,QAAQ,CAAA,CAAA,KAAK,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    // No ANTHROPIC_API_KEY — hermes is the budget arm and deliberately does\n    // not route to Anthropic (see models.deny). Anthropic stays exclusive to\n    // the claude-code adapter.\n    state: { env: [\"OPENROUTER_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  // Billing-auth (opt-in — no authEnforce, so unconfigured spawns stay\n  // ambient). Single-provider adapter: api-key mode SETS providerEnvVar\n  // (\"openrouter\") = OPENROUTER_API_KEY, derived from the catalog. No\n  // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.\n  provider: \"openrouter\",\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n    // hermes's own ACP server has been observed to hit its internal\n    // max-tool-iterations cap, produce a final answer, and then never\n    // send the `prompt` JSON-RPC response — hanging the daemon's turn\n    // drain loop forever with no other adapter-side signal available.\n    // 5 minutes of true silence (reset on any ACP traffic, so a long\n    // legitimate tool-call chain doesn't false-positive) is generous\n    // enough to not trip during normal use.\n    turn_idle_timeout_ms: 300_000,\n  },\n  models: {\n    // Cheap OpenRouter models by default — hermes is the budget delegation\n    // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek\n    // are the go-to cheap coders. `allowed` is only the curated menu: the\n    // `model` option is free-form, so any OpenRouter id (kimi, qwen, …) can\n    // still be passed even when it isn't listed here.\n    default: \"z-ai/glm-5.2\",\n    allowed: [\n      \"z-ai/glm-5.2\",\n      \"deepseek/deepseek-v4-pro\",\n      \"meta-llama/llama-3.3-70b\",\n      \"openai/gpt-4\",\n    ],\n    // Anthropic models are reserved for the dedicated claude-code adapter —\n    // hermes must NEVER route to them, even if a caller passes the id\n    // explicitly. Enforced at compose time (RuntimeConfigError), so the\n    // budget arm can't silently burn premium Anthropic spend.\n    deny: [\"anthropic/*\", \"claude-*\"],\n    env: {\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n    // hermes keeps its own configured default when given a model via the\n    // ACP session config — selection must go through a `/model <id>`\n    // control turn instead. See AgentCliModels.apply.\n    apply: \"command\",\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n  },\n  modes: [\n    {\n      id: \"default\",\n      description:\n        \"Standard interactive mode — loads ~/.hermes/config.yaml and auto-injects \" +\n        \"rules/memory/preloaded skills as usual.\",\n    },\n    {\n      id: \"lean\",\n      description:\n        \"Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding hermes \" +\n        \"would otherwise preload into context. Composed as `hermes --ignore-user-config \" +\n        \"acp` — the global flag MUST precede the `acp` subcommand baked into `bin_args`, \" +\n        \"which is why this needs bin_args_prepend rather than bin_args_append.\",\n      bin_args_prepend: [\"--ignore-user-config\"],\n      status: \"noop\",\n      status_note:\n        \"Measured no-op: --ignore-user-config skips ~/.hermes/config.yaml, but hermes \" +\n        \"skills live in a separate skills dir (not config), so prompt-size is \" +\n        \"byte-identical. The real lean lever is narrowing the mounted toolset, not \" +\n        \"this flag.\",\n    },\n  ],\n  options: [\n    {\n      id: \"skills\",\n      type: \"string\" as const,\n      description:\n        \"Preload one or more agentskills.io-compatible skills for the session \" +\n        \"(comma-separate for multiple), via hermes' `--skills` global flag. Same \" +\n        \"prepend-before-`acp` constraint as the `lean` mode.\",\n      bin_args_prepend: [\"--skills\", \"{value}\"],\n    },\n    {\n      id: \"model\",\n      // string (not enum) so any valid OpenRouter/OpenAI model ID is accepted\n      // without a code change to expand the list. Applied via ACP\n      // newSession(model:...) — hermes reads the model from the ACP session\n      // config, not from its own CLI args. Anthropic ids are denied\n      // (models.deny) — those are reserved for the claude-code adapter.\n      type: \"string\" as const,\n      description:\n        \"Model ID routed through OpenRouter/OpenAI \" +\n        \"(e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2', 'moonshotai/kimi-k2'). \" +\n        \"Anthropic models are not permitted on hermes — use the claude-code \" +\n        \"adapter for those. \" +\n        \"Applied via a `/model <id>` control turn after the session is created \" +\n        \"(hermes ignores the ACP session model config). \" +\n        \"Omit to use the hermes default.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\" as const,\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort level passed to hermes via ACP newSession. \" +\n        \"Omit to use the hermes default.\",\n    },\n  ],\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n  metadata: {\n    // Opts hermes into `agentproto install skill/<slug>` fan-out (no\n    // --target given): skills get copied one subdir per skill into\n    // hermes's own skills directory, alongside whatever it ships\n    // natively. See packages/cli/src/commands/skill-install/types.ts\n    // `AdapterSkillsTarget` for the shape + guard.\n    skills: { format: \"flat-dir\", dir: \"~/.hermes/skills\" },\n  },\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\nimport { homedir } from \"node:os\"\nimport { join } from \"node:path\"\n\n/** Best-effort read of a hermes session's cost/token usage from its state.db.\n *\n *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn\n *  ends, so a single read right at turn-end usually finds the cost column\n *  still null. We poll a few times with a short backoff until the cost lands\n *  (or give up — best-effort, never throws). Bounded so a missing write can't\n *  hang the caller (the turn-end path awaits this). */\nexport async function readHermesUsage(\n  sessionId: string,\n): Promise<{ costUsd?: number; tokensIn?: number; tokensOut?: number } | null> {\n  try {\n    // node:sqlite is a Node 22+ builtin. Build the specifier at runtime so the\n    // bundler (esbuild/tsup) can't statically rewrite it — it strips the\n    // `node:` prefix off this not-yet-recognised builtin, turning the import\n    // into a missing `sqlite` package that throws and silently yields null.\n    const sqliteSpecifier = [\"node\", \"sqlite\"].join(\":\")\n    const { DatabaseSync } = (await import(sqliteSpecifier)) as unknown as {\n      DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => {\n        prepare(sql: string): { get(...a: unknown[]): unknown }\n        close(): void\n      }\n    }\n    const dbPath = join(homedir(), \".hermes\", \"state.db\")\n    const ATTEMPTS = 6\n    const DELAY_MS = 130\n    let last: { costUsd?: number; tokensIn?: number; tokensOut?: number } | null = null\n    for (let i = 0; i < ATTEMPTS; i++) {\n      const db = new DatabaseSync(dbPath, { readOnly: true })\n      const row = db.prepare(\n        \"select estimated_cost_usd as cost, input_tokens as ti, output_tokens as to_ from sessions where id = ?\",\n      ).get(sessionId) as { cost?: number; ti?: number; to_?: number } | undefined\n      db.close()\n      if (row) {\n        last = { costUsd: row.cost, tokensIn: row.ti, tokensOut: row.to_ }\n        // Cost has landed (non-null) → done. Otherwise keep polling: the row\n        // exists but hermes hasn't written the cost for this turn yet.\n        if (row.cost !== null && row.cost !== undefined) return last\n      }\n      if (i < ATTEMPTS - 1) await new Promise(r => setTimeout(r, DELAY_MS))\n    }\n    return last\n  } catch {\n    return null\n  }\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/adapter-hermes",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "@agentproto/adapter-hermes — AIP-45 AGENT-CLI adapter for Nous Research's Hermes Agent. Spawns `hermes acp` and drives it as an agentproto agent CLI via the ACP protocol arm of @agentproto/driver-agent-cli.",
   "keywords": [
     "agentproto",
@@ -17,7 +17,7 @@
     "url": "https://github.com/agentproto/ts",
     "directory": "adapters/hermes"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
@@ -43,7 +43,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentproto/driver-agent-cli": "0.3.0"
+    "@agentproto/driver-agent-cli": "1.0.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",