@agentproto/adapter-hermes 0.3.4 → 0.4.0

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
 export { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
+import { CapabilityStrategy } from '@agentproto/provider-kit';
 
 /**
  * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.
@@ -21,6 +22,17 @@ export { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
 
 declare const hermes: AgentCliHandle;
 declare function hermesRuntime(): AgentCliRuntime;
+/**
+ * Best-effort capability discovery for hermes: parses hermes' OWN native
+ * stores (`~/.hermes/auth.json`, `~/.hermes/provider_models_cache.json`)
+ * rather than the manifest's generic `models.env` slots, so it reflects
+ * what's ACTUALLY configured on this host, not just what the adapter
+ * declares it's capable of. Never throws — `discoverCapabilities` also
+ * catches, but every read here is independently defensive so a single
+ * malformed file doesn't blank out the providers a good file already
+ * yielded.
+ */
+declare const hermesCapabilities: CapabilityStrategy;
 /** Best-effort read of a hermes session's cost/token usage from its state.db.
  *
  *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn
@@ -34,4 +46,4 @@ declare function readHermesUsage(sessionId: string): Promise<{
     tokensOut?: number;
 } | null>;
 
-export { hermes, hermesRuntime, readHermesUsage };
+export { hermes, hermesCapabilities, hermesRuntime, readHermesUsage };

package/dist/index.mjs

@@ -1,6 +1,6 @@
+import { join } from 'path';
 import { defineAgentCli, createAgentCliRuntime } from '@agentproto/driver-agent-cli';
 import { homedir } from 'os';
-import { join } from 'path';
 
 /**
  * @agentproto/adapter-hermes v0.1.0-alpha
@@ -38,6 +38,11 @@ var hermes = defineAgentCli({
   // ("openrouter") = OPENROUTER_API_KEY, derived from the catalog. No
   // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.
   provider: "openrouter",
+  // The endpoint falls out of the model id's vendor prefix — `openai/*` is
+  // routed through OpenAI, everything else through OpenRouter (see the
+  // `model` option) — so there is nothing independent to choose: picking the
+  // model already fixes the route → derived-from-model.
+  routeSelection: "derived-from-model",
   sandbox: "./SANDBOX.md",
   protocol: "acp",
   acp: "./hermes-acp.ACP.md",
@@ -60,12 +65,20 @@ var hermes = defineAgentCli({
     // are the go-to cheap coders. `allowed` is only the curated menu: the
     // `model` option is free-form, so any OpenRouter id (kimi, qwen, …) can
     // still be passed even when it isn't listed here.
-    default: "z-ai/glm-5.2",
+    default: "z-ai/glm-5.2@openrouter",
     allowed: [
-      "z-ai/glm-5.2",
-      "deepseek/deepseek-v4-pro",
-      "meta-llama/llama-3.3-70b",
-      "openai/gpt-4"
+      "z-ai/glm-5.2@openrouter",
+      "deepseek/deepseek-v4-pro@openrouter",
+      "meta-llama/llama-3.3-70b-instruct@openrouter",
+      "openai/gpt-4",
+      "x-ai/grok-4.5@openrouter",
+      "x-ai/grok-4.20@openrouter",
+      "x-ai/grok-4.3@openrouter",
+      "google/gemini-3.1-pro-preview@openrouter",
+      "google/gemini-3.5-flash@openrouter",
+      "google/gemini-2.5-flash@openrouter",
+      "google/gemini-2.5-pro@openrouter",
+      "moonshotai/kimi-k2.7-code@openrouter"
     ],
     // Anthropic models are reserved for the dedicated claude-code adapter —
     // hermes must NEVER route to them, even if a caller passes the id
@@ -88,7 +101,12 @@ var hermes = defineAgentCli({
     file_io: true,
     multimodal: true,
     resumable: false,
-    bidirectional: true
+    bidirectional: true,
+    // Hermes has a verified native TUI resume path:
+    // `hermes --resume <SESSION> --tui`. This lets the daemon offer
+    // provider-native terminal restart for Hermes sessions, distinct from
+    // its ACP-level `resumable: false` honesty.
+    nativeTerminalResume: true
   },
   modes: [
     {
@@ -118,7 +136,7 @@ var hermes = defineAgentCli({
       // config, not from its own CLI args. Anthropic ids are denied
       // (models.deny) — those are reserved for the claude-code adapter.
       type: "string",
-      description: "Model ID routed through OpenRouter/OpenAI (e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2', 'moonshotai/kimi-k2'). Anthropic models are not permitted on hermes \u2014 use the claude-code adapter for those. Applied via a `/model <id>` control turn after the session is created (hermes ignores the ACP session model config). Omit to use the hermes default."
+      description: "Model ID routed through OpenRouter/OpenAI (e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2@openrouter', 'moonshotai/kimi-k2@openrouter'). Anthropic models are not permitted on hermes \u2014 use the claude-code adapter for those. Applied via a `/model <id>` control turn after the session is created (hermes ignores the ACP session model config). Omit to use the hermes default."
     },
     {
       id: "effort",
@@ -140,6 +158,78 @@ var hermes = defineAgentCli({
 function hermesRuntime() {
   return createAgentCliRuntime(hermes);
 }
+var hermesCapabilities = async (def, ctx) => {
+  const authPath = join(ctx.homeDir, ".hermes", "auth.json");
+  const modelsCachePath = join(ctx.homeDir, ".hermes", "provider_models_cache.json");
+  const authStores = [
+    { kind: "file", path: "~/.hermes/auth.json", format: "json", providerKeyed: true }
+  ];
+  const providers = [];
+  const authRaw = await ctx.readFile(authPath);
+  if (authRaw !== null) {
+    try {
+      const parsed = JSON.parse(authRaw);
+      const pool = Array.isArray(parsed.credential_pool) ? parsed.credential_pool : [];
+      for (const entry of pool) {
+        if (typeof entry !== "object" || entry === null) continue;
+        const id = typeof entry.provider === "string" ? entry.provider : void 0;
+        if (!id) continue;
+        const keyEnv = typeof entry.key_env === "string" ? entry.key_env : void 0;
+        const fingerprint = typeof entry.fingerprint === "string" ? entry.fingerprint : void 0;
+        const baseUrl = typeof entry.base_url === "string" ? entry.base_url : typeof entry.baseUrl === "string" ? entry.baseUrl : void 0;
+        const source = keyEnv ? { kind: "env", var: keyEnv } : { kind: "file", path: "~/.hermes/auth.json", pointer: `credential_pool[provider=${id}]` };
+        providers.push({
+          id,
+          billingEndpoint: id,
+          cred: {
+            present: true,
+            source,
+            ...fingerprint ? { fingerprint } : {}
+          },
+          ...baseUrl ? { baseUrl } : {}
+        });
+      }
+    } catch (err) {
+      ctx.warn(
+        `hermes capability discovery: could not parse ~/.hermes/auth.json: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  let ids;
+  let stale = true;
+  const cacheRaw = await ctx.readFile(modelsCachePath);
+  if (cacheRaw !== null) {
+    try {
+      const parsedCache = JSON.parse(cacheRaw);
+      ids = Array.isArray(parsedCache.models) ? parsedCache.models.filter((m) => typeof m === "string") : void 0;
+      stale = false;
+    } catch (err) {
+      ctx.warn(
+        `hermes capability discovery: could not parse ~/.hermes/provider_models_cache.json: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  const modelApply = def.models?.apply;
+  return {
+    adapter: def.id,
+    source: "discovered",
+    discoverable: "live",
+    authStores,
+    providers,
+    models: {
+      mechanism: "file-cache",
+      ref: "hermes model --refresh",
+      ...ids ? { ids } : {},
+      stale
+    },
+    endpointCompat: {},
+    application: {
+      modelApply: modelApply === "command" || modelApply === "arg" ? modelApply : "config",
+      postureApply: "none",
+      coupled: false
+    }
+  };
+};
 async function readHermesUsage(sessionId) {
   try {
     const sqliteSpecifier = ["node", "sqlite"].join(":");
@@ -166,6 +256,6 @@ async function readHermesUsage(sessionId) {
   }
 }
 
-export { hermes, hermesRuntime, readHermesUsage };
+export { hermes, hermesCapabilities, hermesRuntime, readHermesUsage };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;AAyBO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA;AAAA;AAAA;AAAA,IAIL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,gBAAgB,CAAA;AAAE,GACzD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,EAAU,YAAA;AAAA,EACV,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQnB,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,MAAA,EAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMN,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,cAAA;AAAA,MACA,0BAAA;AAAA,MACA,0BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,IAAA,EAAM,CAAC,aAAA,EAAe,UAAU,CAAA;AAAA,IAChC,GAAA,EAAK;AAAA,MACH,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA,KACV;AAAA;AAAA;AAAA;AAAA,IAIA,KAAA,EAAO;AAAA,GACT;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe;AAAA,GACjB;AAAA,EACA,KAAA,EAAO;AAAA,IACL;AAAA,MACE,EAAA,EAAI,SAAA;AAAA,MACJ,WAAA,EACE;AAAA,KAEJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,MAAA;AAAA,MACJ,WAAA,EACE,0TAAA;AAAA,MAIF,gBAAA,EAAkB,CAAC,sBAAsB,CAAA;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,WAAA,EACE;AAAA;AAIJ,GACF;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,kMAAA;AAAA,MAGF,gBAAA,EAAkB,CAAC,UAAA,EAAY,SAAS;AAAA,KAC1C;AAAA,IACA;AAAA,MACE,EAAA,EAAI,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAOJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA;AAEJ,GACF;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe,CAAA;AAAA,EAC/C,QAAA,EAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMR,MAAA,EAAQ,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAK,kBAAA;AAAmB;AAE1D,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC;AAYA,eAAsB,gBACpB,SAAA,EAC6E;AAC7E,EAAA,IAAI;AAKF,IAAA,MAAM,kBAAkB,CAAC,MAAA,EAAQ,QAAQ,CAAA,CAAE,KAAK,GAAG,CAAA;AACnD,IAAA,MAAM,EAAE,YAAA,EAAa,GAAK,MAAM,OAAO,eAAA,CAAA;AAMvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,CAAA;AACjB,IAAA,MAAM,QAAA,GAAW,GAAA;AACjB,IAAA,IAAI,IAAA,GAA2E,IAAA;AAC/E,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,KAAK,IAAI,YAAA,CAAa,QAAQ,EAAE,QAAA,EAAU,MAAM,CAAA;AACtD,MAAA,MAAM,MAAM,EAAA,CAAG,OAAA;AAAA,QACb;AAAA,OACF,CAAE,IAAI,SAAS,CAAA;AACf,MAAA,EAAA,CAAG,KAAA,EAAM;AACT,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAA,GAAO,EAAE,SAAS,GAAA,CAAI,IAAA,EAAM,UAAU,GAAA,CAAI,EAAA,EAAI,SAAA,EAAW,GAAA,CAAI,GAAA,EAAI;AAGjE,QAAA,IAAI,IAAI,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,IAAA,KAAS,QAAW,OAAO,IAAA;AAAA,MAC1D;AACA,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,IAAI,QAAQ,CAAA,CAAA,KAAK,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    // No ANTHROPIC_API_KEY — hermes is the budget arm and deliberately does\n    // not route to Anthropic (see models.deny). Anthropic stays exclusive to\n    // the claude-code adapter.\n    state: { env: [\"OPENROUTER_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  // Billing-auth (opt-in — no authEnforce, so unconfigured spawns stay\n  // ambient). Single-provider adapter: api-key mode SETS providerEnvVar\n  // (\"openrouter\") = OPENROUTER_API_KEY, derived from the catalog. No\n  // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.\n  provider: \"openrouter\",\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n    // hermes's own ACP server has been observed to hit its internal\n    // max-tool-iterations cap, produce a final answer, and then never\n    // send the `prompt` JSON-RPC response — hanging the daemon's turn\n    // drain loop forever with no other adapter-side signal available.\n    // 5 minutes of true silence (reset on any ACP traffic, so a long\n    // legitimate tool-call chain doesn't false-positive) is generous\n    // enough to not trip during normal use.\n    turn_idle_timeout_ms: 300_000,\n  },\n  models: {\n    // Cheap OpenRouter models by default — hermes is the budget delegation\n    // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek\n    // are the go-to cheap coders. `allowed` is only the curated menu: the\n    // `model` option is free-form, so any OpenRouter id (kimi, qwen, …) can\n    // still be passed even when it isn't listed here.\n    default: \"z-ai/glm-5.2\",\n    allowed: [\n      \"z-ai/glm-5.2\",\n      \"deepseek/deepseek-v4-pro\",\n      \"meta-llama/llama-3.3-70b\",\n      \"openai/gpt-4\",\n    ],\n    // Anthropic models are reserved for the dedicated claude-code adapter —\n    // hermes must NEVER route to them, even if a caller passes the id\n    // explicitly. Enforced at compose time (RuntimeConfigError), so the\n    // budget arm can't silently burn premium Anthropic spend.\n    deny: [\"anthropic/*\", \"claude-*\"],\n    env: {\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n    // hermes keeps its own configured default when given a model via the\n    // ACP session config — selection must go through a `/model <id>`\n    // control turn instead. See AgentCliModels.apply.\n    apply: \"command\",\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n  },\n  modes: [\n    {\n      id: \"default\",\n      description:\n        \"Standard interactive mode — loads ~/.hermes/config.yaml and auto-injects \" +\n        \"rules/memory/preloaded skills as usual.\",\n    },\n    {\n      id: \"lean\",\n      description:\n        \"Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding hermes \" +\n        \"would otherwise preload into context. Composed as `hermes --ignore-user-config \" +\n        \"acp` — the global flag MUST precede the `acp` subcommand baked into `bin_args`, \" +\n        \"which is why this needs bin_args_prepend rather than bin_args_append.\",\n      bin_args_prepend: [\"--ignore-user-config\"],\n      status: \"noop\",\n      status_note:\n        \"Measured no-op: --ignore-user-config skips ~/.hermes/config.yaml, but hermes \" +\n        \"skills live in a separate skills dir (not config), so prompt-size is \" +\n        \"byte-identical. The real lean lever is narrowing the mounted toolset, not \" +\n        \"this flag.\",\n    },\n  ],\n  options: [\n    {\n      id: \"skills\",\n      type: \"string\" as const,\n      description:\n        \"Preload one or more agentskills.io-compatible skills for the session \" +\n        \"(comma-separate for multiple), via hermes' `--skills` global flag. Same \" +\n        \"prepend-before-`acp` constraint as the `lean` mode.\",\n      bin_args_prepend: [\"--skills\", \"{value}\"],\n    },\n    {\n      id: \"model\",\n      // string (not enum) so any valid OpenRouter/OpenAI model ID is accepted\n      // without a code change to expand the list. Applied via ACP\n      // newSession(model:...) — hermes reads the model from the ACP session\n      // config, not from its own CLI args. Anthropic ids are denied\n      // (models.deny) — those are reserved for the claude-code adapter.\n      type: \"string\" as const,\n      description:\n        \"Model ID routed through OpenRouter/OpenAI \" +\n        \"(e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2', 'moonshotai/kimi-k2'). \" +\n        \"Anthropic models are not permitted on hermes — use the claude-code \" +\n        \"adapter for those. \" +\n        \"Applied via a `/model <id>` control turn after the session is created \" +\n        \"(hermes ignores the ACP session model config). \" +\n        \"Omit to use the hermes default.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\" as const,\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort level passed to hermes via ACP newSession. \" +\n        \"Omit to use the hermes default.\",\n    },\n  ],\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n  metadata: {\n    // Opts hermes into `agentproto install skill/<slug>` fan-out (no\n    // --target given): skills get copied one subdir per skill into\n    // hermes's own skills directory, alongside whatever it ships\n    // natively. See packages/cli/src/commands/skill-install/types.ts\n    // `AdapterSkillsTarget` for the shape + guard.\n    skills: { format: \"flat-dir\", dir: \"~/.hermes/skills\" },\n  },\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\nimport { homedir } from \"node:os\"\nimport { join } from \"node:path\"\n\n/** Best-effort read of a hermes session's cost/token usage from its state.db.\n *\n *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn\n *  ends, so a single read right at turn-end usually finds the cost column\n *  still null. We poll a few times with a short backoff until the cost lands\n *  (or give up — best-effort, never throws). Bounded so a missing write can't\n *  hang the caller (the turn-end path awaits this). */\nexport async function readHermesUsage(\n  sessionId: string,\n): Promise<{ costUsd?: number; tokensIn?: number; tokensOut?: number } | null> {\n  try {\n    // node:sqlite is a Node 22+ builtin. Build the specifier at runtime so the\n    // bundler (esbuild/tsup) can't statically rewrite it — it strips the\n    // `node:` prefix off this not-yet-recognised builtin, turning the import\n    // into a missing `sqlite` package that throws and silently yields null.\n    const sqliteSpecifier = [\"node\", \"sqlite\"].join(\":\")\n    const { DatabaseSync } = (await import(sqliteSpecifier)) as unknown as {\n      DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => {\n        prepare(sql: string): { get(...a: unknown[]): unknown }\n        close(): void\n      }\n    }\n    const dbPath = join(homedir(), \".hermes\", \"state.db\")\n    const ATTEMPTS = 6\n    const DELAY_MS = 130\n    let last: { costUsd?: number; tokensIn?: number; tokensOut?: number } | null = null\n    for (let i = 0; i < ATTEMPTS; i++) {\n      const db = new DatabaseSync(dbPath, { readOnly: true })\n      const row = db.prepare(\n        \"select estimated_cost_usd as cost, input_tokens as ti, output_tokens as to_ from sessions where id = ?\",\n      ).get(sessionId) as { cost?: number; ti?: number; to_?: number } | undefined\n      db.close()\n      if (row) {\n        last = { costUsd: row.cost, tokensIn: row.ti, tokensOut: row.to_ }\n        // Cost has landed (non-null) → done. Otherwise keep polling: the row\n        // exists but hermes hasn't written the cost for this turn yet.\n        if (row.cost !== null && row.cost !== undefined) return last\n      }\n      if (i < ATTEMPTS - 1) await new Promise(r => setTimeout(r, DELAY_MS))\n    }\n    return last\n  } catch {\n    return null\n  }\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;AAgCO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA;AAAA;AAAA;AAAA,IAIL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,gBAAgB,CAAA;AAAE,GACzD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,EAAU,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKV,cAAA,EAAgB,oBAAA;AAAA,EAChB,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQnB,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,MAAA,EAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMN,OAAA,EAAS,yBAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,yBAAA;AAAA,MACA,qCAAA;AAAA,MACA,8CAAA;AAAA,MACA,cAAA;AAAA,MACA,0BAAA;AAAA,MACA,2BAAA;AAAA,MACA,0BAAA;AAAA,MACA,0CAAA;AAAA,MACA,oCAAA;AAAA,MACA,oCAAA;AAAA,MACA,kCAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,IAAA,EAAM,CAAC,aAAA,EAAe,UAAU,CAAA;AAAA,IAChC,GAAA,EAAK;AAAA,MACH,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA,KACV;AAAA;AAAA;AAAA;AAAA,IAIA,KAAA,EAAO;AAAA,GACT;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKf,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,KAAA,EAAO;AAAA,IACL;AAAA,MACE,EAAA,EAAI,SAAA;AAAA,MACJ,WAAA,EACE;AAAA,KAEJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,MAAA;AAAA,MACJ,WAAA,EACE,0TAAA;AAAA,MAIF,gBAAA,EAAkB,CAAC,sBAAsB,CAAA;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,WAAA,EACE;AAAA;AAIJ,GACF;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,kMAAA;AAAA,MAGF,gBAAA,EAAkB,CAAC,UAAA,EAAY,SAAS;AAAA,KAC1C;AAAA,IACA;AAAA,MACE,EAAA,EAAI,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAOJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA;AAEJ,GACF;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe,CAAA;AAAA,EAC/C,QAAA,EAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMR,MAAA,EAAQ,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAK,kBAAA;AAAmB;AAE1D,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC;AAiCO,IAAM,kBAAA,GAAyC,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,WAAW,WAAW,CAAA;AACzD,EAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,WAAW,4BAA4B,CAAA;AAEjF,EAAA,MAAM,UAAA,GAA0B;AAAA,IAC9B,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,uBAAuB,MAAA,EAAQ,MAAA,EAAQ,eAAe,IAAA;AAAK,GACnF;AAEA,EAAA,MAAM,YAAkC,EAAC;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,QAAA,CAAS,QAAQ,CAAA;AAC3C,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA,GAAI,MAAA,CAAO,kBAAkB,EAAC;AAC/E,MAAA,KAAA,MAAW,SAAS,IAAA,EAAqC;AACvD,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AACjD,QAAA,MAAM,KAAK,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GAAW,MAAM,QAAA,GAAW,KAAA,CAAA;AACjE,QAAA,IAAI,CAAC,EAAA,EAAI;AACT,QAAA,MAAM,SAAS,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,GAAW,MAAM,OAAA,GAAU,KAAA,CAAA;AACnE,QAAA,MAAM,cAAc,OAAO,KAAA,CAAM,WAAA,KAAgB,QAAA,GAAW,MAAM,WAAA,GAAc,KAAA,CAAA;AAChF,QAAA,MAAM,OAAA,GACJ,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GACtB,KAAA,CAAM,QAAA,GACN,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,GACvB,KAAA,CAAM,OAAA,GACN,KAAA,CAAA;AAIR,QAAA,MAAM,SAAqB,MAAA,GACvB,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAO,GAC3B,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,qBAAA,EAAuB,OAAA,EAAS,CAAA,yBAAA,EAA4B,EAAE,CAAA,CAAA,CAAA,EAAI;AAC5F,QAAA,SAAA,CAAU,IAAA,CAAK;AAAA,UACb,EAAA;AAAA,UACA,eAAA,EAAiB,EAAA;AAAA,UACjB,IAAA,EAAM;AAAA,YACJ,OAAA,EAAS,IAAA;AAAA,YACT,MAAA;AAAA,YACA,GAAI,WAAA,GAAc,EAAE,WAAA,KAAgB;AAAC,WACvC;AAAA,UACA,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,SAC9B,CAAA;AAAA,MACH;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,qEACK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OACvD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,KAAA,GAAQ,IAAA;AACZ,EAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,QAAA,CAAS,eAAe,CAAA;AACnD,EAAA,IAAI,aAAa,IAAA,EAAM;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA;AACvC,MAAA,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,WAAA,CAAY,MAAM,CAAA,GAClC,WAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GACnE,KAAA,CAAA;AACJ,MAAA,KAAA,GAAQ,KAAA;AAAA,IACV,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,sFAC2C,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OAC7F;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,MAAA,EAAQ,KAAA;AAC/B,EAAA,OAAO;AAAA,IACL,SAAS,GAAA,CAAI,EAAA;AAAA,IACb,MAAA,EAAQ,YAAA;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,UAAA;AAAA,IACA,SAAA;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,SAAA,EAAW,YAAA;AAAA,MACX,GAAA,EAAK,wBAAA;AAAA,MACL,GAAI,GAAA,GAAM,EAAE,GAAA,KAAQ,EAAC;AAAA,MACrB;AAAA,KACF;AAAA,IACA,gBAAgB,EAAC;AAAA,IACjB,WAAA,EAAa;AAAA,MACX,UAAA,EAAY,UAAA,KAAe,SAAA,IAAa,UAAA,KAAe,QAAQ,UAAA,GAAa,QAAA;AAAA,MAC5E,YAAA,EAAc,MAAA;AAAA,MACd,OAAA,EAAS;AAAA;AACX,GACF;AACF;AAWA,eAAsB,gBACpB,SAAA,EAC6E;AAC7E,EAAA,IAAI;AAKF,IAAA,MAAM,kBAAkB,CAAC,MAAA,EAAQ,QAAQ,CAAA,CAAE,KAAK,GAAG,CAAA;AACnD,IAAA,MAAM,EAAE,YAAA,EAAa,GAAK,MAAM,OAAO,eAAA,CAAA;AAMvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,CAAA;AACjB,IAAA,MAAM,QAAA,GAAW,GAAA;AACjB,IAAA,IAAI,IAAA,GAA2E,IAAA;AAC/E,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,KAAK,IAAI,YAAA,CAAa,QAAQ,EAAE,QAAA,EAAU,MAAM,CAAA;AACtD,MAAA,MAAM,MAAM,EAAA,CAAG,OAAA;AAAA,QACb;AAAA,OACF,CAAE,IAAI,SAAS,CAAA;AACf,MAAA,EAAA,CAAG,KAAA,EAAM;AACT,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAA,GAAO,EAAE,SAAS,GAAA,CAAI,IAAA,EAAM,UAAU,GAAA,CAAI,EAAA,EAAI,SAAA,EAAW,GAAA,CAAI,GAAA,EAAI;AAGjE,QAAA,IAAI,IAAI,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,IAAA,KAAS,QAAW,OAAO,IAAA;AAAA,MAC1D;AACA,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,IAAI,QAAQ,CAAA,CAAA,KAAK,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport { join } from \"node:path\"\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\nimport type {\n  AuthStore,\n  CapabilityStrategy,\n  CredSource,\n  ProviderCapability,\n} from \"@agentproto/provider-kit\"\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    // No ANTHROPIC_API_KEY — hermes is the budget arm and deliberately does\n    // not route to Anthropic (see models.deny). Anthropic stays exclusive to\n    // the claude-code adapter.\n    state: { env: [\"OPENROUTER_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  // Billing-auth (opt-in — no authEnforce, so unconfigured spawns stay\n  // ambient). Single-provider adapter: api-key mode SETS providerEnvVar\n  // (\"openrouter\") = OPENROUTER_API_KEY, derived from the catalog. No\n  // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.\n  provider: \"openrouter\",\n  // The endpoint falls out of the model id's vendor prefix — `openai/*` is\n  // routed through OpenAI, everything else through OpenRouter (see the\n  // `model` option) — so there is nothing independent to choose: picking the\n  // model already fixes the route → derived-from-model.\n  routeSelection: \"derived-from-model\",\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n    // hermes's own ACP server has been observed to hit its internal\n    // max-tool-iterations cap, produce a final answer, and then never\n    // send the `prompt` JSON-RPC response — hanging the daemon's turn\n    // drain loop forever with no other adapter-side signal available.\n    // 5 minutes of true silence (reset on any ACP traffic, so a long\n    // legitimate tool-call chain doesn't false-positive) is generous\n    // enough to not trip during normal use.\n    turn_idle_timeout_ms: 300_000,\n  },\n  models: {\n    // Cheap OpenRouter models by default — hermes is the budget delegation\n    // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek\n    // are the go-to cheap coders. `allowed` is only the curated menu: the\n    // `model` option is free-form, so any OpenRouter id (kimi, qwen, …) can\n    // still be passed even when it isn't listed here.\n    default: \"z-ai/glm-5.2@openrouter\",\n    allowed: [\n      \"z-ai/glm-5.2@openrouter\",\n      \"deepseek/deepseek-v4-pro@openrouter\",\n      \"meta-llama/llama-3.3-70b-instruct@openrouter\",\n      \"openai/gpt-4\",\n      \"x-ai/grok-4.5@openrouter\",\n      \"x-ai/grok-4.20@openrouter\",\n      \"x-ai/grok-4.3@openrouter\",\n      \"google/gemini-3.1-pro-preview@openrouter\",\n      \"google/gemini-3.5-flash@openrouter\",\n      \"google/gemini-2.5-flash@openrouter\",\n      \"google/gemini-2.5-pro@openrouter\",\n      \"moonshotai/kimi-k2.7-code@openrouter\",\n    ],\n    // Anthropic models are reserved for the dedicated claude-code adapter —\n    // hermes must NEVER route to them, even if a caller passes the id\n    // explicitly. Enforced at compose time (RuntimeConfigError), so the\n    // budget arm can't silently burn premium Anthropic spend.\n    deny: [\"anthropic/*\", \"claude-*\"],\n    env: {\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n    // hermes keeps its own configured default when given a model via the\n    // ACP session config — selection must go through a `/model <id>`\n    // control turn instead. See AgentCliModels.apply.\n    apply: \"command\",\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n    // Hermes has a verified native TUI resume path:\n    // `hermes --resume <SESSION> --tui`. This lets the daemon offer\n    // provider-native terminal restart for Hermes sessions, distinct from\n    // its ACP-level `resumable: false` honesty.\n    nativeTerminalResume: true,\n  },\n  modes: [\n    {\n      id: \"default\",\n      description:\n        \"Standard interactive mode — loads ~/.hermes/config.yaml and auto-injects \" +\n        \"rules/memory/preloaded skills as usual.\",\n    },\n    {\n      id: \"lean\",\n      description:\n        \"Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding hermes \" +\n        \"would otherwise preload into context. Composed as `hermes --ignore-user-config \" +\n        \"acp` — the global flag MUST precede the `acp` subcommand baked into `bin_args`, \" +\n        \"which is why this needs bin_args_prepend rather than bin_args_append.\",\n      bin_args_prepend: [\"--ignore-user-config\"],\n      status: \"noop\",\n      status_note:\n        \"Measured no-op: --ignore-user-config skips ~/.hermes/config.yaml, but hermes \" +\n        \"skills live in a separate skills dir (not config), so prompt-size is \" +\n        \"byte-identical. The real lean lever is narrowing the mounted toolset, not \" +\n        \"this flag.\",\n    },\n  ],\n  options: [\n    {\n      id: \"skills\",\n      type: \"string\" as const,\n      description:\n        \"Preload one or more agentskills.io-compatible skills for the session \" +\n        \"(comma-separate for multiple), via hermes' `--skills` global flag. Same \" +\n        \"prepend-before-`acp` constraint as the `lean` mode.\",\n      bin_args_prepend: [\"--skills\", \"{value}\"],\n    },\n    {\n      id: \"model\",\n      // string (not enum) so any valid OpenRouter/OpenAI model ID is accepted\n      // without a code change to expand the list. Applied via ACP\n      // newSession(model:...) — hermes reads the model from the ACP session\n      // config, not from its own CLI args. Anthropic ids are denied\n      // (models.deny) — those are reserved for the claude-code adapter.\n      type: \"string\" as const,\n      description:\n        \"Model ID routed through OpenRouter/OpenAI \" +\n        \"(e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2@openrouter', 'moonshotai/kimi-k2@openrouter'). \" +\n        \"Anthropic models are not permitted on hermes — use the claude-code \" +\n        \"adapter for those. \" +\n        \"Applied via a `/model <id>` control turn after the session is created \" +\n        \"(hermes ignores the ACP session model config). \" +\n        \"Omit to use the hermes default.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\" as const,\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort level passed to hermes via ACP newSession. \" +\n        \"Omit to use the hermes default.\",\n    },\n  ],\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n  metadata: {\n    // Opts hermes into `agentproto install skill/<slug>` fan-out (no\n    // --target given): skills get copied one subdir per skill into\n    // hermes's own skills directory, alongside whatever it ships\n    // natively. See packages/cli/src/commands/skill-install/types.ts\n    // `AdapterSkillsTarget` for the shape + guard.\n    skills: { format: \"flat-dir\", dir: \"~/.hermes/skills\" },\n  },\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\n/** Shape of one `~/.hermes/auth.json` `credential_pool` entry this strategy\n *  reads. Only non-secret fields — never the credential value itself. The\n *  pool's own `key_env` (when present) is preserved verbatim: hermes' native\n *  kimi/moonshot slot is `KIMI_API_KEY`, NOT `MOONSHOT_API_KEY`, so this must\n *  never derive/normalize an env var name from the provider id. */\ninterface HermesCredentialPoolEntry {\n  provider?: unknown\n  key_env?: unknown\n  fingerprint?: unknown\n  base_url?: unknown\n  baseUrl?: unknown\n}\n\ninterface HermesAuthFile {\n  credential_pool?: unknown\n}\n\ninterface HermesModelsCacheFile {\n  models?: unknown\n}\n\n/**\n * Best-effort capability discovery for hermes: parses hermes' OWN native\n * stores (`~/.hermes/auth.json`, `~/.hermes/provider_models_cache.json`)\n * rather than the manifest's generic `models.env` slots, so it reflects\n * what's ACTUALLY configured on this host, not just what the adapter\n * declares it's capable of. Never throws — `discoverCapabilities` also\n * catches, but every read here is independently defensive so a single\n * malformed file doesn't blank out the providers a good file already\n * yielded.\n */\nexport const hermesCapabilities: CapabilityStrategy = async (def, ctx) => {\n  const authPath = join(ctx.homeDir, \".hermes\", \"auth.json\")\n  const modelsCachePath = join(ctx.homeDir, \".hermes\", \"provider_models_cache.json\")\n\n  const authStores: AuthStore[] = [\n    { kind: \"file\", path: \"~/.hermes/auth.json\", format: \"json\", providerKeyed: true },\n  ]\n\n  const providers: ProviderCapability[] = []\n  const authRaw = await ctx.readFile(authPath)\n  if (authRaw !== null) {\n    try {\n      const parsed = JSON.parse(authRaw) as HermesAuthFile\n      const pool = Array.isArray(parsed.credential_pool) ? parsed.credential_pool : []\n      for (const entry of pool as HermesCredentialPoolEntry[]) {\n        if (typeof entry !== \"object\" || entry === null) continue\n        const id = typeof entry.provider === \"string\" ? entry.provider : undefined\n        if (!id) continue\n        const keyEnv = typeof entry.key_env === \"string\" ? entry.key_env : undefined\n        const fingerprint = typeof entry.fingerprint === \"string\" ? entry.fingerprint : undefined\n        const baseUrl =\n          typeof entry.base_url === \"string\"\n            ? entry.base_url\n            : typeof entry.baseUrl === \"string\"\n              ? entry.baseUrl\n              : undefined\n        // Never guess an env var from the provider id (that's exactly the\n        // KIMI_API_KEY vs MOONSHOT_API_KEY trap) — only trust an explicit\n        // key_env; otherwise the credential's origin is the pool file itself.\n        const source: CredSource = keyEnv\n          ? { kind: \"env\", var: keyEnv }\n          : { kind: \"file\", path: \"~/.hermes/auth.json\", pointer: `credential_pool[provider=${id}]` }\n        providers.push({\n          id,\n          billingEndpoint: id,\n          cred: {\n            present: true,\n            source,\n            ...(fingerprint ? { fingerprint } : {}),\n          },\n          ...(baseUrl ? { baseUrl } : {}),\n        })\n      }\n    } catch (err) {\n      ctx.warn(\n        `hermes capability discovery: could not parse ~/.hermes/auth.json: ` +\n          `${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n  }\n\n  let ids: string[] | undefined\n  let stale = true\n  const cacheRaw = await ctx.readFile(modelsCachePath)\n  if (cacheRaw !== null) {\n    try {\n      const parsedCache = JSON.parse(cacheRaw) as HermesModelsCacheFile\n      ids = Array.isArray(parsedCache.models)\n        ? parsedCache.models.filter((m): m is string => typeof m === \"string\")\n        : undefined\n      stale = false\n    } catch (err) {\n      ctx.warn(\n        `hermes capability discovery: could not parse ` +\n          `~/.hermes/provider_models_cache.json: ${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n  }\n\n  const modelApply = def.models?.apply\n  return {\n    adapter: def.id,\n    source: \"discovered\",\n    discoverable: \"live\",\n    authStores,\n    providers,\n    models: {\n      mechanism: \"file-cache\",\n      ref: \"hermes model --refresh\",\n      ...(ids ? { ids } : {}),\n      stale,\n    },\n    endpointCompat: {},\n    application: {\n      modelApply: modelApply === \"command\" || modelApply === \"arg\" ? modelApply : \"config\",\n      postureApply: \"none\",\n      coupled: false,\n    },\n  }\n}\n\nimport { homedir } from \"node:os\"\n\n/** Best-effort read of a hermes session's cost/token usage from its state.db.\n *\n *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn\n *  ends, so a single read right at turn-end usually finds the cost column\n *  still null. We poll a few times with a short backoff until the cost lands\n *  (or give up — best-effort, never throws). Bounded so a missing write can't\n *  hang the caller (the turn-end path awaits this). */\nexport async function readHermesUsage(\n  sessionId: string,\n): Promise<{ costUsd?: number; tokensIn?: number; tokensOut?: number } | null> {\n  try {\n    // node:sqlite is a Node 22+ builtin. Build the specifier at runtime so the\n    // bundler (esbuild/tsup) can't statically rewrite it — it strips the\n    // `node:` prefix off this not-yet-recognised builtin, turning the import\n    // into a missing `sqlite` package that throws and silently yields null.\n    const sqliteSpecifier = [\"node\", \"sqlite\"].join(\":\")\n    const { DatabaseSync } = (await import(sqliteSpecifier)) as unknown as {\n      DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => {\n        prepare(sql: string): { get(...a: unknown[]): unknown }\n        close(): void\n      }\n    }\n    const dbPath = join(homedir(), \".hermes\", \"state.db\")\n    const ATTEMPTS = 6\n    const DELAY_MS = 130\n    let last: { costUsd?: number; tokensIn?: number; tokensOut?: number } | null = null\n    for (let i = 0; i < ATTEMPTS; i++) {\n      const db = new DatabaseSync(dbPath, { readOnly: true })\n      const row = db.prepare(\n        \"select estimated_cost_usd as cost, input_tokens as ti, output_tokens as to_ from sessions where id = ?\",\n      ).get(sessionId) as { cost?: number; ti?: number; to_?: number } | undefined\n      db.close()\n      if (row) {\n        last = { costUsd: row.cost, tokensIn: row.ti, tokensOut: row.to_ }\n        // Cost has landed (non-null) → done. Otherwise keep polling: the row\n        // exists but hermes hasn't written the cost for this turn yet.\n        if (row.cost !== null && row.cost !== undefined) return last\n      }\n      if (i < ATTEMPTS - 1) await new Promise(r => setTimeout(r, DELAY_MS))\n    }\n    return last\n  } catch {\n    return null\n  }\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/adapter-hermes",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "description": "@agentproto/adapter-hermes — AIP-45 AGENT-CLI adapter for Nous Research's Hermes Agent. Spawns `hermes acp` and drives it as an agentproto agent CLI via the ACP protocol arm of @agentproto/driver-agent-cli.",
   "keywords": [
     "agentproto",
@@ -43,7 +43,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentproto/driver-agent-cli": "2.0.1"
+    "@agentproto/driver-agent-cli": "2.1.0",
+    "@agentproto/provider-kit": "0.4.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",