@agentproto/adapter-hermes 0.4.4 → 0.4.6

package/dist/index.mjs

@@ -120,7 +120,13 @@ var hermes = defineAgentCli({
     // `hermes --resume <SESSION> --tui`. This lets the daemon offer
     // provider-native terminal restart for Hermes sessions, distinct from
     // its ACP-level `resumable: false` honesty.
-    nativeTerminalResume: true
+    // Gated on Node ≥22.5: hermes TUI uses node:sqlite which is
+    // unavailable on older runtimes — attempting pty-native restart on
+    // Node <22.5 errors at startup, not at resume.
+    nativeTerminalResume: (() => {
+      const [major, minor] = process.versions.node.split(".").map(Number);
+      return (major ?? 0) > 22 || (major ?? 0) === 22 && (minor ?? 0) >= 5;
+    })()
   },
   modes: [
     {

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;AA8CA,SAAS,oBAAA,GAAgE;AACvE,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,EAAE,QAAA,EAAU,YAAA,EAAc,MAAA,EAAQ,YAAA,EAAa;AAAA,IAC/C,EAAE,QAAA,EAAU,QAAA,EAAU,MAAA,EAAQ,QAAA;AAAS,GACzC;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAA+C,EAAC;AAEtD,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,MAAA,EAAO,IAAK,SAAA,EAAW;AAC5C,IAAA,KAAA,MAAW,SAAS,UAAA,CAAW,EAAE,MAAM,KAAA,EAAO,QAAA,EAAU,CAAA,EAAG;AACzD,MAAA,MAAM,SAAS,KAAA,CAAM,EAAA;AAIrB,MAAA,IAAI,qBAAA,CAAsB,IAAA,CAAK,MAAM,CAAA,EAAG;AACxC,MAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,GAAG,IAAI,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AACvE,MAAA,MAAM,EAAA,GAAK,QAAA,KAAa,YAAA,GAAe,CAAA,EAAG,MAAM,CAAA,WAAA,CAAA,GAAgB,WAAA;AAChE,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,IAAI,EAAE,CAAA;AACX,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,EAAA,EAAI,QAAA,EAAU,CAAA;AAAA,IAC3B;AAAA,EACF;AAEA,EAAA,OAAO,GAAA,CAAI,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM;AACxB,IAAA,IAAI,CAAA,CAAE,aAAa,CAAA,CAAE,QAAA,SAAiB,CAAA,CAAE,QAAA,CAAS,aAAA,CAAc,CAAA,CAAE,QAAQ,CAAA;AACzE,IAAA,OAAO,CAAA,CAAE,EAAA,CAAG,aAAA,CAAc,CAAA,CAAE,EAAE,CAAA;AAAA,EAChC,CAAC,CAAA;AACH;AAEO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA;AAAA;AAAA;AAAA,IAIL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,gBAAgB,CAAA;AAAE,GACzD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,EAAU,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKV,cAAA,EAAgB,oBAAA;AAAA,EAChB,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQnB,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,MAAA,EAAQ;AAAA;AAAA;AAAA;AAAA,IAIN,OAAA,EAAS,yBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMT,SAAS,oBAAA,EAAqB;AAAA;AAAA;AAAA;AAAA;AAAA,IAK9B,IAAA,EAAM,CAAC,aAAA,EAAe,UAAU,CAAA;AAAA,IAChC,GAAA,EAAK;AAAA,MACH,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA,KACV;AAAA;AAAA;AAAA;AAAA,IAIA,KAAA,EAAO;AAAA,GACT;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKf,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,KAAA,EAAO;AAAA,IACL;AAAA,MACE,EAAA,EAAI,SAAA;AAAA,MACJ,WAAA,EACE;AAAA,KAEJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,MAAA;AAAA,MACJ,WAAA,EACE,0TAAA;AAAA,MAIF,gBAAA,EAAkB,CAAC,sBAAsB,CAAA;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,WAAA,EACE;AAAA;AAIJ,GACF;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,kMAAA;AAAA,MAGF,gBAAA,EAAkB,CAAC,UAAA,EAAY,SAAS;AAAA,KAC1C;AAAA,IACA;AAAA,MACE,EAAA,EAAI,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAOJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA;AAEJ,GACF;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe,CAAA;AAAA,EAC/C,QAAA,EAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMR,MAAA,EAAQ,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAK,kBAAA;AAAmB;AAE1D,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC;AAiCO,IAAM,kBAAA,GAAyC,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,WAAW,WAAW,CAAA;AACzD,EAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,WAAW,4BAA4B,CAAA;AAEjF,EAAA,MAAM,UAAA,GAA0B;AAAA,IAC9B,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,uBAAuB,MAAA,EAAQ,MAAA,EAAQ,eAAe,IAAA;AAAK,GACnF;AAEA,EAAA,MAAM,YAAkC,EAAC;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,QAAA,CAAS,QAAQ,CAAA;AAC3C,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA,GAAI,MAAA,CAAO,kBAAkB,EAAC;AAC/E,MAAA,KAAA,MAAW,SAAS,IAAA,EAAqC;AACvD,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AACjD,QAAA,MAAM,KAAK,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GAAW,MAAM,QAAA,GAAW,KAAA,CAAA;AACjE,QAAA,IAAI,CAAC,EAAA,EAAI;AACT,QAAA,MAAM,SAAS,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,GAAW,MAAM,OAAA,GAAU,KAAA,CAAA;AACnE,QAAA,MAAM,cAAc,OAAO,KAAA,CAAM,WAAA,KAAgB,QAAA,GAAW,MAAM,WAAA,GAAc,KAAA,CAAA;AAChF,QAAA,MAAM,OAAA,GACJ,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GACtB,KAAA,CAAM,QAAA,GACN,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,GACvB,KAAA,CAAM,OAAA,GACN,KAAA,CAAA;AAIR,QAAA,MAAM,SAAqB,MAAA,GACvB,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAO,GAC3B,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,qBAAA,EAAuB,OAAA,EAAS,CAAA,yBAAA,EAA4B,EAAE,CAAA,CAAA,CAAA,EAAI;AAC5F,QAAA,SAAA,CAAU,IAAA,CAAK;AAAA,UACb,EAAA;AAAA,UACA,eAAA,EAAiB,EAAA;AAAA,UACjB,IAAA,EAAM;AAAA,YACJ,OAAA,EAAS,IAAA;AAAA,YACT,MAAA;AAAA,YACA,GAAI,WAAA,GAAc,EAAE,WAAA,KAAgB;AAAC,WACvC;AAAA,UACA,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,SAC9B,CAAA;AAAA,MACH;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,qEACK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OACvD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,KAAA,GAAQ,IAAA;AACZ,EAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,QAAA,CAAS,eAAe,CAAA;AACnD,EAAA,IAAI,aAAa,IAAA,EAAM;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA;AACvC,MAAA,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,WAAA,CAAY,MAAM,CAAA,GAClC,WAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GACnE,KAAA,CAAA;AACJ,MAAA,KAAA,GAAQ,KAAA;AAAA,IACV,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,sFAC2C,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OAC7F;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,MAAA,EAAQ,KAAA;AAC/B,EAAA,OAAO;AAAA,IACL,SAAS,GAAA,CAAI,EAAA;AAAA,IACb,MAAA,EAAQ,YAAA;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,UAAA;AAAA,IACA,SAAA;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,SAAA,EAAW,YAAA;AAAA,MACX,GAAA,EAAK,wBAAA;AAAA,MACL,GAAI,GAAA,GAAM,EAAE,GAAA,KAAQ,EAAC;AAAA,MACrB;AAAA,KACF;AAAA,IACA,gBAAgB,EAAC;AAAA,IACjB,WAAA,EAAa;AAAA,MACX,UAAA,EAAY,UAAA,KAAe,SAAA,IAAa,UAAA,KAAe,QAAQ,UAAA,GAAa,QAAA;AAAA,MAC5E,YAAA,EAAc,MAAA;AAAA,MACd,OAAA,EAAS;AAAA;AACX,GACF;AACF;AAWA,eAAsB,gBACpB,SAAA,EAC6E;AAC7E,EAAA,IAAI;AAKF,IAAA,MAAM,kBAAkB,CAAC,MAAA,EAAQ,QAAQ,CAAA,CAAE,KAAK,GAAG,CAAA;AACnD,IAAA,MAAM,EAAE,YAAA,EAAa,GAAK,MAAM,OAAO,eAAA,CAAA;AAMvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,CAAA;AACjB,IAAA,MAAM,QAAA,GAAW,GAAA;AACjB,IAAA,IAAI,IAAA,GAA2E,IAAA;AAC/E,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,KAAK,IAAI,YAAA,CAAa,QAAQ,EAAE,QAAA,EAAU,MAAM,CAAA;AACtD,MAAA,MAAM,MAAM,EAAA,CAAG,OAAA;AAAA,QACb;AAAA,OACF,CAAE,IAAI,SAAS,CAAA;AACf,MAAA,EAAA,CAAG,KAAA,EAAM;AACT,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAA,GAAO,EAAE,SAAS,GAAA,CAAI,IAAA,EAAM,UAAU,GAAA,CAAI,EAAA,EAAI,SAAA,EAAW,GAAA,CAAI,GAAA,EAAI;AAGjE,QAAA,IAAI,IAAI,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,IAAA,KAAS,QAAW,OAAO,IAAA;AAAA,MAC1D;AACA,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,IAAI,QAAQ,CAAA,CAAA,KAAK,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport { join } from \"node:path\"\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\nimport { listModels } from \"@agentproto/model-catalog\"\nimport type {\n  AuthStore,\n  CapabilityStrategy,\n  CredSource,\n  ProviderCapability,\n} from \"@agentproto/provider-kit\"\n\n/**\n * Build hermes's model menu from the shared provider catalog instead of a\n * hand-maintained allowlist. Hermes routes by the model id's own vendor\n * prefix (routeSelection: \"derived-from-model\"), so every entry carries\n * the billing provider the runtime's eligibility projection needs.\n *\n * Only providers hermes genuinely supports today are included:\n *   - OpenRouter (`openrouter/<vendor>/<id>` router prefix)\n *   - OpenAI (direct `openai/<id>` vendor prefix)\n *\n * Anthropic models are excluded — hermes is the budget arm and those are\n * reserved for the claude-code adapter (enforced by models.deny).\n */\nfunction buildHermesModelMenu(): Array<{ id: string; provider: string }> {\n  const supported = [\n    { provider: \"openrouter\", prefix: \"openrouter\" },\n    { provider: \"openai\", prefix: \"openai\" },\n  ] as const\n\n  const seen = new Set<string>()\n  const out: Array<{ id: string; provider: string }> = []\n\n  for (const { provider, prefix } of supported) {\n    for (const model of listModels({ kind: \"llm\", provider })) {\n      const bareId = model.id\n      // Skip anthropic models (reserved for claude-code adapter) and\n      // tilde-prefixed OpenRouter provider aliases (~deepseek, ~google, …)\n      // which aren't real vendor names and break the route-identity parser.\n      if (/anthropic|claude|^~/.test(bareId)) continue\n      const canonicalId = bareId.includes(\"/\") ? bareId : `${prefix}/${bareId}`\n      const id = provider === \"openrouter\" ? `${bareId}@openrouter` : canonicalId\n      if (seen.has(id)) continue\n      seen.add(id)\n      out.push({ id, provider })\n    }\n  }\n\n  return out.sort((a, b) => {\n    if (a.provider !== b.provider) return a.provider.localeCompare(b.provider)\n    return a.id.localeCompare(b.id)\n  })\n}\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    // No ANTHROPIC_API_KEY — hermes is the budget arm and deliberately does\n    // not route to Anthropic (see models.deny). Anthropic stays exclusive to\n    // the claude-code adapter.\n    state: { env: [\"OPENROUTER_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  // Billing-auth (opt-in — no authEnforce, so unconfigured spawns stay\n  // ambient). Single-provider adapter: api-key mode SETS providerEnvVar\n  // (\"openrouter\") = OPENROUTER_API_KEY, derived from the catalog. No\n  // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.\n  provider: \"openrouter\",\n  // The endpoint falls out of the model id's vendor prefix — `openai/*` is\n  // routed through OpenAI, everything else through OpenRouter (see the\n  // `model` option) — so there is nothing independent to choose: picking the\n  // model already fixes the route → derived-from-model.\n  routeSelection: \"derived-from-model\",\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n    // hermes's own ACP server has been observed to hit its internal\n    // max-tool-iterations cap, produce a final answer, and then never\n    // send the `prompt` JSON-RPC response — hanging the daemon's turn\n    // drain loop forever with no other adapter-side signal available.\n    // 5 minutes of true silence (reset on any ACP traffic, so a long\n    // legitimate tool-call chain doesn't false-positive) is generous\n    // enough to not trip during normal use.\n    turn_idle_timeout_ms: 300_000,\n  },\n  models: {\n    // Cheap OpenRouter models by default — hermes is the budget delegation\n    // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek\n    // are the go-to cheap coders.\n    default: \"z-ai/glm-5.2@openrouter\",\n    // Generated from the shared provider catalog so the Configuration Lab /\n    // harness picker shows genuinely reachable OpenRouter + OpenAI models\n    // instead of a hand-maintained static list. Anthropic models are filtered\n    // out at generation time (and enforced by deny below). The free-form\n    // `model` option still accepts any valid OpenRouter/OpenAI id.\n    allowed: buildHermesModelMenu(),\n    // Anthropic models are reserved for the dedicated claude-code adapter —\n    // hermes must NEVER route to them, even if a caller passes the id\n    // explicitly. Enforced at compose time (RuntimeConfigError), so the\n    // budget arm can't silently burn premium Anthropic spend.\n    deny: [\"anthropic/*\", \"claude-*\"],\n    env: {\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n    // hermes keeps its own configured default when given a model via the\n    // ACP session config — selection must go through a `/model <id>`\n    // control turn instead. See AgentCliModels.apply.\n    apply: \"command\",\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n    // Hermes has a verified native TUI resume path:\n    // `hermes --resume <SESSION> --tui`. This lets the daemon offer\n    // provider-native terminal restart for Hermes sessions, distinct from\n    // its ACP-level `resumable: false` honesty.\n    nativeTerminalResume: true,\n  },\n  modes: [\n    {\n      id: \"default\",\n      description:\n        \"Standard interactive mode — loads ~/.hermes/config.yaml and auto-injects \" +\n        \"rules/memory/preloaded skills as usual.\",\n    },\n    {\n      id: \"lean\",\n      description:\n        \"Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding hermes \" +\n        \"would otherwise preload into context. Composed as `hermes --ignore-user-config \" +\n        \"acp` — the global flag MUST precede the `acp` subcommand baked into `bin_args`, \" +\n        \"which is why this needs bin_args_prepend rather than bin_args_append.\",\n      bin_args_prepend: [\"--ignore-user-config\"],\n      status: \"noop\",\n      status_note:\n        \"Measured no-op: --ignore-user-config skips ~/.hermes/config.yaml, but hermes \" +\n        \"skills live in a separate skills dir (not config), so prompt-size is \" +\n        \"byte-identical. The real lean lever is narrowing the mounted toolset, not \" +\n        \"this flag.\",\n    },\n  ],\n  options: [\n    {\n      id: \"skills\",\n      type: \"string\" as const,\n      description:\n        \"Preload one or more agentskills.io-compatible skills for the session \" +\n        \"(comma-separate for multiple), via hermes' `--skills` global flag. Same \" +\n        \"prepend-before-`acp` constraint as the `lean` mode.\",\n      bin_args_prepend: [\"--skills\", \"{value}\"],\n    },\n    {\n      id: \"model\",\n      // string (not enum) so any valid OpenRouter/OpenAI model ID is accepted\n      // without a code change to expand the list. Applied via ACP\n      // newSession(model:...) — hermes reads the model from the ACP session\n      // config, not from its own CLI args. Anthropic ids are denied\n      // (models.deny) — those are reserved for the claude-code adapter.\n      type: \"string\" as const,\n      description:\n        \"Model ID routed through OpenRouter/OpenAI \" +\n        \"(e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2@openrouter', 'moonshotai/kimi-k2@openrouter'). \" +\n        \"Anthropic models are not permitted on hermes — use the claude-code \" +\n        \"adapter for those. \" +\n        \"Applied via a `/model <id>` control turn after the session is created \" +\n        \"(hermes ignores the ACP session model config). \" +\n        \"Omit to use the hermes default.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\" as const,\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort level passed to hermes via ACP newSession. \" +\n        \"Omit to use the hermes default.\",\n    },\n  ],\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n  metadata: {\n    // Opts hermes into `agentproto install skill/<slug>` fan-out (no\n    // --target given): skills get copied one subdir per skill into\n    // hermes's own skills directory, alongside whatever it ships\n    // natively. See packages/cli/src/commands/skill-install/types.ts\n    // `AdapterSkillsTarget` for the shape + guard.\n    skills: { format: \"flat-dir\", dir: \"~/.hermes/skills\" },\n  },\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\n/** Shape of one `~/.hermes/auth.json` `credential_pool` entry this strategy\n *  reads. Only non-secret fields — never the credential value itself. The\n *  pool's own `key_env` (when present) is preserved verbatim: hermes' native\n *  kimi/moonshot slot is `KIMI_API_KEY`, NOT `MOONSHOT_API_KEY`, so this must\n *  never derive/normalize an env var name from the provider id. */\ninterface HermesCredentialPoolEntry {\n  provider?: unknown\n  key_env?: unknown\n  fingerprint?: unknown\n  base_url?: unknown\n  baseUrl?: unknown\n}\n\ninterface HermesAuthFile {\n  credential_pool?: unknown\n}\n\ninterface HermesModelsCacheFile {\n  models?: unknown\n}\n\n/**\n * Best-effort capability discovery for hermes: parses hermes' OWN native\n * stores (`~/.hermes/auth.json`, `~/.hermes/provider_models_cache.json`)\n * rather than the manifest's generic `models.env` slots, so it reflects\n * what's ACTUALLY configured on this host, not just what the adapter\n * declares it's capable of. Never throws — `discoverCapabilities` also\n * catches, but every read here is independently defensive so a single\n * malformed file doesn't blank out the providers a good file already\n * yielded.\n */\nexport const hermesCapabilities: CapabilityStrategy = async (def, ctx) => {\n  const authPath = join(ctx.homeDir, \".hermes\", \"auth.json\")\n  const modelsCachePath = join(ctx.homeDir, \".hermes\", \"provider_models_cache.json\")\n\n  const authStores: AuthStore[] = [\n    { kind: \"file\", path: \"~/.hermes/auth.json\", format: \"json\", providerKeyed: true },\n  ]\n\n  const providers: ProviderCapability[] = []\n  const authRaw = await ctx.readFile(authPath)\n  if (authRaw !== null) {\n    try {\n      const parsed = JSON.parse(authRaw) as HermesAuthFile\n      const pool = Array.isArray(parsed.credential_pool) ? parsed.credential_pool : []\n      for (const entry of pool as HermesCredentialPoolEntry[]) {\n        if (typeof entry !== \"object\" || entry === null) continue\n        const id = typeof entry.provider === \"string\" ? entry.provider : undefined\n        if (!id) continue\n        const keyEnv = typeof entry.key_env === \"string\" ? entry.key_env : undefined\n        const fingerprint = typeof entry.fingerprint === \"string\" ? entry.fingerprint : undefined\n        const baseUrl =\n          typeof entry.base_url === \"string\"\n            ? entry.base_url\n            : typeof entry.baseUrl === \"string\"\n              ? entry.baseUrl\n              : undefined\n        // Never guess an env var from the provider id (that's exactly the\n        // KIMI_API_KEY vs MOONSHOT_API_KEY trap) — only trust an explicit\n        // key_env; otherwise the credential's origin is the pool file itself.\n        const source: CredSource = keyEnv\n          ? { kind: \"env\", var: keyEnv }\n          : { kind: \"file\", path: \"~/.hermes/auth.json\", pointer: `credential_pool[provider=${id}]` }\n        providers.push({\n          id,\n          billingEndpoint: id,\n          cred: {\n            present: true,\n            source,\n            ...(fingerprint ? { fingerprint } : {}),\n          },\n          ...(baseUrl ? { baseUrl } : {}),\n        })\n      }\n    } catch (err) {\n      ctx.warn(\n        `hermes capability discovery: could not parse ~/.hermes/auth.json: ` +\n          `${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n  }\n\n  let ids: string[] | undefined\n  let stale = true\n  const cacheRaw = await ctx.readFile(modelsCachePath)\n  if (cacheRaw !== null) {\n    try {\n      const parsedCache = JSON.parse(cacheRaw) as HermesModelsCacheFile\n      ids = Array.isArray(parsedCache.models)\n        ? parsedCache.models.filter((m): m is string => typeof m === \"string\")\n        : undefined\n      stale = false\n    } catch (err) {\n      ctx.warn(\n        `hermes capability discovery: could not parse ` +\n          `~/.hermes/provider_models_cache.json: ${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n  }\n\n  const modelApply = def.models?.apply\n  return {\n    adapter: def.id,\n    source: \"discovered\",\n    discoverable: \"live\",\n    authStores,\n    providers,\n    models: {\n      mechanism: \"file-cache\",\n      ref: \"hermes model --refresh\",\n      ...(ids ? { ids } : {}),\n      stale,\n    },\n    endpointCompat: {},\n    application: {\n      modelApply: modelApply === \"command\" || modelApply === \"arg\" ? modelApply : \"config\",\n      postureApply: \"none\",\n      coupled: false,\n    },\n  }\n}\n\nimport { homedir } from \"node:os\"\n\n/** Best-effort read of a hermes session's cost/token usage from its state.db.\n *\n *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn\n *  ends, so a single read right at turn-end usually finds the cost column\n *  still null. We poll a few times with a short backoff until the cost lands\n *  (or give up — best-effort, never throws). Bounded so a missing write can't\n *  hang the caller (the turn-end path awaits this). */\nexport async function readHermesUsage(\n  sessionId: string,\n): Promise<{ costUsd?: number; tokensIn?: number; tokensOut?: number } | null> {\n  try {\n    // node:sqlite is a Node 22+ builtin. Build the specifier at runtime so the\n    // bundler (esbuild/tsup) can't statically rewrite it — it strips the\n    // `node:` prefix off this not-yet-recognised builtin, turning the import\n    // into a missing `sqlite` package that throws and silently yields null.\n    const sqliteSpecifier = [\"node\", \"sqlite\"].join(\":\")\n    const { DatabaseSync } = (await import(sqliteSpecifier)) as unknown as {\n      DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => {\n        prepare(sql: string): { get(...a: unknown[]): unknown }\n        close(): void\n      }\n    }\n    const dbPath = join(homedir(), \".hermes\", \"state.db\")\n    const ATTEMPTS = 6\n    const DELAY_MS = 130\n    let last: { costUsd?: number; tokensIn?: number; tokensOut?: number } | null = null\n    for (let i = 0; i < ATTEMPTS; i++) {\n      const db = new DatabaseSync(dbPath, { readOnly: true })\n      const row = db.prepare(\n        \"select estimated_cost_usd as cost, input_tokens as ti, output_tokens as to_ from sessions where id = ?\",\n      ).get(sessionId) as { cost?: number; ti?: number; to_?: number } | undefined\n      db.close()\n      if (row) {\n        last = { costUsd: row.cost, tokensIn: row.ti, tokensOut: row.to_ }\n        // Cost has landed (non-null) → done. Otherwise keep polling: the row\n        // exists but hermes hasn't written the cost for this turn yet.\n        if (row.cost !== null && row.cost !== undefined) return last\n      }\n      if (i < ATTEMPTS - 1) await new Promise(r => setTimeout(r, DELAY_MS))\n    }\n    return last\n  } catch {\n    return null\n  }\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;AA8CA,SAAS,oBAAA,GAAgE;AACvE,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,EAAE,QAAA,EAAU,YAAA,EAAc,MAAA,EAAQ,YAAA,EAAa;AAAA,IAC/C,EAAE,QAAA,EAAU,QAAA,EAAU,MAAA,EAAQ,QAAA;AAAS,GACzC;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAA+C,EAAC;AAEtD,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,MAAA,EAAO,IAAK,SAAA,EAAW;AAC5C,IAAA,KAAA,MAAW,SAAS,UAAA,CAAW,EAAE,MAAM,KAAA,EAAO,QAAA,EAAU,CAAA,EAAG;AACzD,MAAA,MAAM,SAAS,KAAA,CAAM,EAAA;AAIrB,MAAA,IAAI,qBAAA,CAAsB,IAAA,CAAK,MAAM,CAAA,EAAG;AACxC,MAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,GAAG,IAAI,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AACvE,MAAA,MAAM,EAAA,GAAK,QAAA,KAAa,YAAA,GAAe,CAAA,EAAG,MAAM,CAAA,WAAA,CAAA,GAAgB,WAAA;AAChE,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,IAAI,EAAE,CAAA;AACX,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,EAAA,EAAI,QAAA,EAAU,CAAA;AAAA,IAC3B;AAAA,EACF;AAEA,EAAA,OAAO,GAAA,CAAI,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM;AACxB,IAAA,IAAI,CAAA,CAAE,aAAa,CAAA,CAAE,QAAA,SAAiB,CAAA,CAAE,QAAA,CAAS,aAAA,CAAc,CAAA,CAAE,QAAQ,CAAA;AACzE,IAAA,OAAO,CAAA,CAAE,EAAA,CAAG,aAAA,CAAc,CAAA,CAAE,EAAE,CAAA;AAAA,EAChC,CAAC,CAAA;AACH;AAEO,IAAM,SAAyB,cAAA,CAAe;AAAA,EACnD,IAAA,EAAM,QAAA;AAAA,EACN,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EACE,qLAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,QAAA;AAAA,EACL,QAAA,EAAU,CAAC,KAAK,CAAA;AAAA,EAChB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,GAAA,EAAK;AAAA;AACP,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,GAAA,EAAK,kBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA;AAAA;AAAA;AAAA,IAIL,OAAO,EAAE,GAAA,EAAK,CAAC,oBAAA,EAAsB,gBAAgB,CAAA;AAAE,GACzD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,EAAU,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKV,cAAA,EAAgB,oBAAA;AAAA,EAChB,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,qBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQnB,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,MAAA,EAAQ;AAAA;AAAA;AAAA;AAAA,IAIN,OAAA,EAAS,yBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMT,SAAS,oBAAA,EAAqB;AAAA;AAAA;AAAA;AAAA;AAAA,IAK9B,IAAA,EAAM,CAAC,aAAA,EAAe,UAAU,CAAA;AAAA,IAChC,GAAA,EAAK;AAAA,MACH,UAAA,EAAY,oBAAA;AAAA,MACZ,MAAA,EAAQ;AAAA,KACV;AAAA;AAAA;AAAA;AAAA,IAIA,KAAA,EAAO;AAAA,GACT;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA,IACT,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,aAAA,EAAe,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQf,uBAAuB,MAAM;AAC3B,MAAA,MAAM,CAAC,KAAA,EAAO,KAAK,CAAA,GAAI,OAAA,CAAQ,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AAClE,MAAA,OAAA,CAAQ,SAAS,CAAA,IAAK,EAAA,IAAA,CAAQ,SAAS,CAAA,MAAO,EAAA,IAAA,CAAO,SAAS,CAAA,KAAM,CAAA;AAAA,IACtE,CAAA;AAAG,GACL;AAAA,EACA,KAAA,EAAO;AAAA,IACL;AAAA,MACE,EAAA,EAAI,SAAA;AAAA,MACJ,WAAA,EACE;AAAA,KAEJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,MAAA;AAAA,MACJ,WAAA,EACE,0TAAA;AAAA,MAIF,gBAAA,EAAkB,CAAC,sBAAsB,CAAA;AAAA,MACzC,MAAA,EAAQ,MAAA;AAAA,MACR,WAAA,EACE;AAAA;AAIJ,GACF;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,kMAAA;AAAA,MAGF,gBAAA,EAAkB,CAAC,UAAA,EAAY,SAAS;AAAA,KAC1C;AAAA,IACA;AAAA,MACE,EAAA,EAAI,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAOJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA;AAEJ,GACF;AAAA,EACA,IAAA,EAAM,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,eAAe,CAAA;AAAA,EAC/C,QAAA,EAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMR,MAAA,EAAQ,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAK,kBAAA;AAAmB;AAE1D,CAAC;AAEM,SAAS,aAAA,GAAiC;AAC/C,EAAA,OAAO,sBAAsB,MAAM,CAAA;AACrC;AAiCO,IAAM,kBAAA,GAAyC,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,WAAW,WAAW,CAAA;AACzD,EAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,WAAW,4BAA4B,CAAA;AAEjF,EAAA,MAAM,UAAA,GAA0B;AAAA,IAC9B,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,uBAAuB,MAAA,EAAQ,MAAA,EAAQ,eAAe,IAAA;AAAK,GACnF;AAEA,EAAA,MAAM,YAAkC,EAAC;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,QAAA,CAAS,QAAQ,CAAA;AAC3C,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA,GAAI,MAAA,CAAO,kBAAkB,EAAC;AAC/E,MAAA,KAAA,MAAW,SAAS,IAAA,EAAqC;AACvD,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AACjD,QAAA,MAAM,KAAK,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GAAW,MAAM,QAAA,GAAW,KAAA,CAAA;AACjE,QAAA,IAAI,CAAC,EAAA,EAAI;AACT,QAAA,MAAM,SAAS,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,GAAW,MAAM,OAAA,GAAU,KAAA,CAAA;AACnE,QAAA,MAAM,cAAc,OAAO,KAAA,CAAM,WAAA,KAAgB,QAAA,GAAW,MAAM,WAAA,GAAc,KAAA,CAAA;AAChF,QAAA,MAAM,OAAA,GACJ,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GACtB,KAAA,CAAM,QAAA,GACN,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,GACvB,KAAA,CAAM,OAAA,GACN,KAAA,CAAA;AAIR,QAAA,MAAM,SAAqB,MAAA,GACvB,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAO,GAC3B,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,qBAAA,EAAuB,OAAA,EAAS,CAAA,yBAAA,EAA4B,EAAE,CAAA,CAAA,CAAA,EAAI;AAC5F,QAAA,SAAA,CAAU,IAAA,CAAK;AAAA,UACb,EAAA;AAAA,UACA,eAAA,EAAiB,EAAA;AAAA,UACjB,IAAA,EAAM;AAAA,YACJ,OAAA,EAAS,IAAA;AAAA,YACT,MAAA;AAAA,YACA,GAAI,WAAA,GAAc,EAAE,WAAA,KAAgB;AAAC,WACvC;AAAA,UACA,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,SAC9B,CAAA;AAAA,MACH;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,qEACK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OACvD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,KAAA,GAAQ,IAAA;AACZ,EAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,QAAA,CAAS,eAAe,CAAA;AACnD,EAAA,IAAI,aAAa,IAAA,EAAM;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA;AACvC,MAAA,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,WAAA,CAAY,MAAM,CAAA,GAClC,WAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GACnE,KAAA,CAAA;AACJ,MAAA,KAAA,GAAQ,KAAA;AAAA,IACV,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,sFAC2C,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OAC7F;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,MAAA,EAAQ,KAAA;AAC/B,EAAA,OAAO;AAAA,IACL,SAAS,GAAA,CAAI,EAAA;AAAA,IACb,MAAA,EAAQ,YAAA;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,UAAA;AAAA,IACA,SAAA;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,SAAA,EAAW,YAAA;AAAA,MACX,GAAA,EAAK,wBAAA;AAAA,MACL,GAAI,GAAA,GAAM,EAAE,GAAA,KAAQ,EAAC;AAAA,MACrB;AAAA,KACF;AAAA,IACA,gBAAgB,EAAC;AAAA,IACjB,WAAA,EAAa;AAAA,MACX,UAAA,EAAY,UAAA,KAAe,SAAA,IAAa,UAAA,KAAe,QAAQ,UAAA,GAAa,QAAA;AAAA,MAC5E,YAAA,EAAc,MAAA;AAAA,MACd,OAAA,EAAS;AAAA;AACX,GACF;AACF;AAWA,eAAsB,gBACpB,SAAA,EAC6E;AAC7E,EAAA,IAAI;AAKF,IAAA,MAAM,kBAAkB,CAAC,MAAA,EAAQ,QAAQ,CAAA,CAAE,KAAK,GAAG,CAAA;AACnD,IAAA,MAAM,EAAE,YAAA,EAAa,GAAK,MAAM,OAAO,eAAA,CAAA;AAMvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,CAAA;AACjB,IAAA,MAAM,QAAA,GAAW,GAAA;AACjB,IAAA,IAAI,IAAA,GAA2E,IAAA;AAC/E,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,KAAK,IAAI,YAAA,CAAa,QAAQ,EAAE,QAAA,EAAU,MAAM,CAAA;AACtD,MAAA,MAAM,MAAM,EAAA,CAAG,OAAA;AAAA,QACb;AAAA,OACF,CAAE,IAAI,SAAS,CAAA;AACf,MAAA,EAAA,CAAG,KAAA,EAAM;AACT,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAA,GAAO,EAAE,SAAS,GAAA,CAAI,IAAA,EAAM,UAAU,GAAA,CAAI,EAAA,EAAI,SAAA,EAAW,GAAA,CAAI,GAAA,EAAI;AAGjE,QAAA,IAAI,IAAI,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,IAAA,KAAS,QAAW,OAAO,IAAA;AAAA,MAC1D;AACA,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,IAAI,QAAQ,CAAA,CAAA,KAAK,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-hermes — AIP-45 adapter for Nous Research's Hermes Agent.\n *\n * Re-exports a `defineAgentCli` instance plus the runtime factory so\n * a host can boot Hermes with one import:\n *\n *   import { hermes, hermesRuntime } from \"@agentproto/adapter-hermes\"\n *   const session = await hermesRuntime().start({ env: { OPENROUTER_API_KEY } })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n *\n * The companion HERMES.md / SECRETS.md / hermes-acp.ACP.md files in\n * this package describe the manifest, secret slots, and ACP wire\n * profile.\n */\n\nimport { join } from \"node:path\"\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\nimport { listModels } from \"@agentproto/model-catalog\"\nimport type {\n  AuthStore,\n  CapabilityStrategy,\n  CredSource,\n  ProviderCapability,\n} from \"@agentproto/provider-kit\"\n\n/**\n * Build hermes's model menu from the shared provider catalog instead of a\n * hand-maintained allowlist. Hermes routes by the model id's own vendor\n * prefix (routeSelection: \"derived-from-model\"), so every entry carries\n * the billing provider the runtime's eligibility projection needs.\n *\n * Only providers hermes genuinely supports today are included:\n *   - OpenRouter (`openrouter/<vendor>/<id>` router prefix)\n *   - OpenAI (direct `openai/<id>` vendor prefix)\n *\n * Anthropic models are excluded — hermes is the budget arm and those are\n * reserved for the claude-code adapter (enforced by models.deny).\n */\nfunction buildHermesModelMenu(): Array<{ id: string; provider: string }> {\n  const supported = [\n    { provider: \"openrouter\", prefix: \"openrouter\" },\n    { provider: \"openai\", prefix: \"openai\" },\n  ] as const\n\n  const seen = new Set<string>()\n  const out: Array<{ id: string; provider: string }> = []\n\n  for (const { provider, prefix } of supported) {\n    for (const model of listModels({ kind: \"llm\", provider })) {\n      const bareId = model.id\n      // Skip anthropic models (reserved for claude-code adapter) and\n      // tilde-prefixed OpenRouter provider aliases (~deepseek, ~google, …)\n      // which aren't real vendor names and break the route-identity parser.\n      if (/anthropic|claude|^~/.test(bareId)) continue\n      const canonicalId = bareId.includes(\"/\") ? bareId : `${prefix}/${bareId}`\n      const id = provider === \"openrouter\" ? `${bareId}@openrouter` : canonicalId\n      if (seen.has(id)) continue\n      seen.add(id)\n      out.push({ id, provider })\n    }\n  }\n\n  return out.sort((a, b) => {\n    if (a.provider !== b.provider) return a.provider.localeCompare(b.provider)\n    return a.id.localeCompare(b.id)\n  })\n}\n\nexport const hermes: AgentCliHandle = defineAgentCli({\n  name: \"hermes\",\n  id: \"hermes\",\n  description:\n    \"Nous Research's Hermes Agent — autonomous CLI agent with skills, sandboxes, memory plugins, and a built-in ACP server. Spawned as `hermes acp` and driven over stdio JSON-RPC.\",\n  version: \"0.1.0\",\n  bin: \"hermes\",\n  bin_args: [\"acp\"],\n  install: [\n    {\n      method: \"curl\",\n      url: \"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh\",\n    },\n  ],\n  version_check: {\n    cmd: \"hermes --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.13.0 <1.0.0\",\n    timeout_ms: 5000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    // No ANTHROPIC_API_KEY — hermes is the budget arm and deliberately does\n    // not route to Anthropic (see models.deny). Anthropic stays exclusive to\n    // the claude-code adapter.\n    state: { env: [\"OPENROUTER_API_KEY\", \"OPENAI_API_KEY\"] },\n  },\n  // Billing-auth (opt-in — no authEnforce, so unconfigured spawns stay\n  // ambient). Single-provider adapter: api-key mode SETS providerEnvVar\n  // (\"openrouter\") = OPENROUTER_API_KEY, derived from the catalog. No\n  // authSubscription ⇒ `subscription` fails loud with `unsupported_auth_mode`.\n  provider: \"openrouter\",\n  // The endpoint falls out of the model id's vendor prefix — `openai/*` is\n  // routed through OpenAI, everything else through OpenRouter (see the\n  // `model` option) — so there is nothing independent to choose: picking the\n  // model already fixes the route → derived-from-model.\n  routeSelection: \"derived-from-model\",\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./hermes-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n    // hermes's own ACP server has been observed to hit its internal\n    // max-tool-iterations cap, produce a final answer, and then never\n    // send the `prompt` JSON-RPC response — hanging the daemon's turn\n    // drain loop forever with no other adapter-side signal available.\n    // 5 minutes of true silence (reset on any ACP traffic, so a long\n    // legitimate tool-call chain doesn't false-positive) is generous\n    // enough to not trip during normal use.\n    turn_idle_timeout_ms: 300_000,\n  },\n  models: {\n    // Cheap OpenRouter models by default — hermes is the budget delegation\n    // arm (a Sonnet default would defeat the purpose). glm-5.2 + deepseek\n    // are the go-to cheap coders.\n    default: \"z-ai/glm-5.2@openrouter\",\n    // Generated from the shared provider catalog so the Configuration Lab /\n    // harness picker shows genuinely reachable OpenRouter + OpenAI models\n    // instead of a hand-maintained static list. Anthropic models are filtered\n    // out at generation time (and enforced by deny below). The free-form\n    // `model` option still accepts any valid OpenRouter/OpenAI id.\n    allowed: buildHermesModelMenu(),\n    // Anthropic models are reserved for the dedicated claude-code adapter —\n    // hermes must NEVER route to them, even if a caller passes the id\n    // explicitly. Enforced at compose time (RuntimeConfigError), so the\n    // budget arm can't silently burn premium Anthropic spend.\n    deny: [\"anthropic/*\", \"claude-*\"],\n    env: {\n      openrouter: \"OPENROUTER_API_KEY\",\n      openai: \"OPENAI_API_KEY\",\n    },\n    // hermes keeps its own configured default when given a model via the\n    // ACP session config — selection must go through a `/model <id>`\n    // control turn instead. See AgentCliModels.apply.\n    apply: \"command\",\n  },\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    sub_agents: true,\n    file_io: true,\n    multimodal: true,\n    resumable: false,\n    bidirectional: true,\n    // Hermes has a verified native TUI resume path:\n    // `hermes --resume <SESSION> --tui`. This lets the daemon offer\n    // provider-native terminal restart for Hermes sessions, distinct from\n    // its ACP-level `resumable: false` honesty.\n    // Gated on Node ≥22.5: hermes TUI uses node:sqlite which is\n    // unavailable on older runtimes — attempting pty-native restart on\n    // Node <22.5 errors at startup, not at resume.\n    nativeTerminalResume: (() => {\n      const [major, minor] = process.versions.node.split(\".\").map(Number)\n      return (major ?? 0) > 22 || ((major ?? 0) === 22 && (minor ?? 0) >= 5)\n    })(),\n  },\n  modes: [\n    {\n      id: \"default\",\n      description:\n        \"Standard interactive mode — loads ~/.hermes/config.yaml and auto-injects \" +\n        \"rules/memory/preloaded skills as usual.\",\n    },\n    {\n      id: \"lean\",\n      description:\n        \"Skip ~/.hermes/config.yaml, cutting the skills/rules/memory scaffolding hermes \" +\n        \"would otherwise preload into context. Composed as `hermes --ignore-user-config \" +\n        \"acp` — the global flag MUST precede the `acp` subcommand baked into `bin_args`, \" +\n        \"which is why this needs bin_args_prepend rather than bin_args_append.\",\n      bin_args_prepend: [\"--ignore-user-config\"],\n      status: \"noop\",\n      status_note:\n        \"Measured no-op: --ignore-user-config skips ~/.hermes/config.yaml, but hermes \" +\n        \"skills live in a separate skills dir (not config), so prompt-size is \" +\n        \"byte-identical. The real lean lever is narrowing the mounted toolset, not \" +\n        \"this flag.\",\n    },\n  ],\n  options: [\n    {\n      id: \"skills\",\n      type: \"string\" as const,\n      description:\n        \"Preload one or more agentskills.io-compatible skills for the session \" +\n        \"(comma-separate for multiple), via hermes' `--skills` global flag. Same \" +\n        \"prepend-before-`acp` constraint as the `lean` mode.\",\n      bin_args_prepend: [\"--skills\", \"{value}\"],\n    },\n    {\n      id: \"model\",\n      // string (not enum) so any valid OpenRouter/OpenAI model ID is accepted\n      // without a code change to expand the list. Applied via ACP\n      // newSession(model:...) — hermes reads the model from the ACP session\n      // config, not from its own CLI args. Anthropic ids are denied\n      // (models.deny) — those are reserved for the claude-code adapter.\n      type: \"string\" as const,\n      description:\n        \"Model ID routed through OpenRouter/OpenAI \" +\n        \"(e.g. 'deepseek/deepseek-v4-pro', 'z-ai/glm-5.2@openrouter', 'moonshotai/kimi-k2@openrouter'). \" +\n        \"Anthropic models are not permitted on hermes — use the claude-code \" +\n        \"adapter for those. \" +\n        \"Applied via a `/model <id>` control turn after the session is created \" +\n        \"(hermes ignores the ACP session model config). \" +\n        \"Omit to use the hermes default.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\" as const,\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort level passed to hermes via ACP newSession. \" +\n        \"Omit to use the hermes default.\",\n    },\n  ],\n  tags: [\"hermes\", \"nous\", \"acp\", \"agent-runtime\"],\n  metadata: {\n    // Opts hermes into `agentproto install skill/<slug>` fan-out (no\n    // --target given): skills get copied one subdir per skill into\n    // hermes's own skills directory, alongside whatever it ships\n    // natively. See packages/cli/src/commands/skill-install/types.ts\n    // `AdapterSkillsTarget` for the shape + guard.\n    skills: { format: \"flat-dir\", dir: \"~/.hermes/skills\" },\n  },\n})\n\nexport function hermesRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(hermes)\n}\n\n/** Shape of one `~/.hermes/auth.json` `credential_pool` entry this strategy\n *  reads. Only non-secret fields — never the credential value itself. The\n *  pool's own `key_env` (when present) is preserved verbatim: hermes' native\n *  kimi/moonshot slot is `KIMI_API_KEY`, NOT `MOONSHOT_API_KEY`, so this must\n *  never derive/normalize an env var name from the provider id. */\ninterface HermesCredentialPoolEntry {\n  provider?: unknown\n  key_env?: unknown\n  fingerprint?: unknown\n  base_url?: unknown\n  baseUrl?: unknown\n}\n\ninterface HermesAuthFile {\n  credential_pool?: unknown\n}\n\ninterface HermesModelsCacheFile {\n  models?: unknown\n}\n\n/**\n * Best-effort capability discovery for hermes: parses hermes' OWN native\n * stores (`~/.hermes/auth.json`, `~/.hermes/provider_models_cache.json`)\n * rather than the manifest's generic `models.env` slots, so it reflects\n * what's ACTUALLY configured on this host, not just what the adapter\n * declares it's capable of. Never throws — `discoverCapabilities` also\n * catches, but every read here is independently defensive so a single\n * malformed file doesn't blank out the providers a good file already\n * yielded.\n */\nexport const hermesCapabilities: CapabilityStrategy = async (def, ctx) => {\n  const authPath = join(ctx.homeDir, \".hermes\", \"auth.json\")\n  const modelsCachePath = join(ctx.homeDir, \".hermes\", \"provider_models_cache.json\")\n\n  const authStores: AuthStore[] = [\n    { kind: \"file\", path: \"~/.hermes/auth.json\", format: \"json\", providerKeyed: true },\n  ]\n\n  const providers: ProviderCapability[] = []\n  const authRaw = await ctx.readFile(authPath)\n  if (authRaw !== null) {\n    try {\n      const parsed = JSON.parse(authRaw) as HermesAuthFile\n      const pool = Array.isArray(parsed.credential_pool) ? parsed.credential_pool : []\n      for (const entry of pool as HermesCredentialPoolEntry[]) {\n        if (typeof entry !== \"object\" || entry === null) continue\n        const id = typeof entry.provider === \"string\" ? entry.provider : undefined\n        if (!id) continue\n        const keyEnv = typeof entry.key_env === \"string\" ? entry.key_env : undefined\n        const fingerprint = typeof entry.fingerprint === \"string\" ? entry.fingerprint : undefined\n        const baseUrl =\n          typeof entry.base_url === \"string\"\n            ? entry.base_url\n            : typeof entry.baseUrl === \"string\"\n              ? entry.baseUrl\n              : undefined\n        // Never guess an env var from the provider id (that's exactly the\n        // KIMI_API_KEY vs MOONSHOT_API_KEY trap) — only trust an explicit\n        // key_env; otherwise the credential's origin is the pool file itself.\n        const source: CredSource = keyEnv\n          ? { kind: \"env\", var: keyEnv }\n          : { kind: \"file\", path: \"~/.hermes/auth.json\", pointer: `credential_pool[provider=${id}]` }\n        providers.push({\n          id,\n          billingEndpoint: id,\n          cred: {\n            present: true,\n            source,\n            ...(fingerprint ? { fingerprint } : {}),\n          },\n          ...(baseUrl ? { baseUrl } : {}),\n        })\n      }\n    } catch (err) {\n      ctx.warn(\n        `hermes capability discovery: could not parse ~/.hermes/auth.json: ` +\n          `${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n  }\n\n  let ids: string[] | undefined\n  let stale = true\n  const cacheRaw = await ctx.readFile(modelsCachePath)\n  if (cacheRaw !== null) {\n    try {\n      const parsedCache = JSON.parse(cacheRaw) as HermesModelsCacheFile\n      ids = Array.isArray(parsedCache.models)\n        ? parsedCache.models.filter((m): m is string => typeof m === \"string\")\n        : undefined\n      stale = false\n    } catch (err) {\n      ctx.warn(\n        `hermes capability discovery: could not parse ` +\n          `~/.hermes/provider_models_cache.json: ${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n  }\n\n  const modelApply = def.models?.apply\n  return {\n    adapter: def.id,\n    source: \"discovered\",\n    discoverable: \"live\",\n    authStores,\n    providers,\n    models: {\n      mechanism: \"file-cache\",\n      ref: \"hermes model --refresh\",\n      ...(ids ? { ids } : {}),\n      stale,\n    },\n    endpointCompat: {},\n    application: {\n      modelApply: modelApply === \"command\" || modelApply === \"arg\" ? modelApply : \"config\",\n      postureApply: \"none\",\n      coupled: false,\n    },\n  }\n}\n\nimport { homedir } from \"node:os\"\n\n/** Best-effort read of a hermes session's cost/token usage from its state.db.\n *\n *  hermes writes the per-turn cost to state.db slightly AFTER the ACP turn\n *  ends, so a single read right at turn-end usually finds the cost column\n *  still null. We poll a few times with a short backoff until the cost lands\n *  (or give up — best-effort, never throws). Bounded so a missing write can't\n *  hang the caller (the turn-end path awaits this). */\nexport async function readHermesUsage(\n  sessionId: string,\n): Promise<{ costUsd?: number; tokensIn?: number; tokensOut?: number } | null> {\n  try {\n    // node:sqlite is a Node 22+ builtin. Build the specifier at runtime so the\n    // bundler (esbuild/tsup) can't statically rewrite it — it strips the\n    // `node:` prefix off this not-yet-recognised builtin, turning the import\n    // into a missing `sqlite` package that throws and silently yields null.\n    const sqliteSpecifier = [\"node\", \"sqlite\"].join(\":\")\n    const { DatabaseSync } = (await import(sqliteSpecifier)) as unknown as {\n      DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => {\n        prepare(sql: string): { get(...a: unknown[]): unknown }\n        close(): void\n      }\n    }\n    const dbPath = join(homedir(), \".hermes\", \"state.db\")\n    const ATTEMPTS = 6\n    const DELAY_MS = 130\n    let last: { costUsd?: number; tokensIn?: number; tokensOut?: number } | null = null\n    for (let i = 0; i < ATTEMPTS; i++) {\n      const db = new DatabaseSync(dbPath, { readOnly: true })\n      const row = db.prepare(\n        \"select estimated_cost_usd as cost, input_tokens as ti, output_tokens as to_ from sessions where id = ?\",\n      ).get(sessionId) as { cost?: number; ti?: number; to_?: number } | undefined\n      db.close()\n      if (row) {\n        last = { costUsd: row.cost, tokensIn: row.ti, tokensOut: row.to_ }\n        // Cost has landed (non-null) → done. Otherwise keep polling: the row\n        // exists but hermes hasn't written the cost for this turn yet.\n        if (row.cost !== null && row.cost !== undefined) return last\n      }\n      if (i < ATTEMPTS - 1) await new Promise(r => setTimeout(r, DELAY_MS))\n    }\n    return last\n  } catch {\n    return null\n  }\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/adapter-hermes",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "@agentproto/adapter-hermes — AIP-45 AGENT-CLI adapter for Nous Research's Hermes Agent. Spawns `hermes acp` and drives it as an agentproto agent CLI via the ACP protocol arm of @agentproto/driver-agent-cli.",
   "keywords": [
     "agentproto",
@@ -43,8 +43,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentproto/driver-agent-cli": "2.2.1",
-    "@agentproto/model-catalog": "0.8.2",
+    "@agentproto/driver-agent-cli": "2.3.0",
+    "@agentproto/model-catalog": "0.8.3",
     "@agentproto/provider-kit": "0.4.1"
   },
   "devDependencies": {