@exulu/backend 1.66.0 → 1.67.0

package/ee/python/.hermes/.env.example

@@ -1,8 +0,0 @@
-# EXAMPLE ONLY — Exulu generates the real .env per profile at runtime (mode 0600).
-# Profile-local secrets referenced by ${VAR} in config.yaml.
-#
-# Runtime API-server params (API_SERVER_ENABLED / HOST / PORT / KEY) are NOT
-# stored here — the supervisor injects them via the child process environment so
-# port and key allocation stay owned by Exulu and a profile dir is portable.
-
-LITELLM_MASTER_KEY=replace-with-your-litellm-master-key

package/ee/python/.hermes/README.md

@@ -1,44 +0,0 @@
-# Hermes Agent profiles (advanced agent mode)
-
-This directory documents the per-profile files Exulu generates for the
-[Hermes Agent](https://hermes-agent.nousresearch.com) harness when an Exulu
-agent has **advanced mode** enabled. You do **not** edit anything here — Exulu's
-provisioner writes the real files at runtime under `${HERMES_HOME}/profiles/<id>/`.
-
-## How it fits together
-
-- One Hermes **profile** per Exulu agent (`<agentId>`), or per agent/user
-  (`<agentId>/<userId>`) when the agent's
-  `advanced_agent_profile_scope` is `private`.
-- Each in-use profile runs its own `hermes gateway` process on its own port,
-  supervised by `src/exulu/hermes/supervisor.ts` (lazy start + idle eviction).
-- Every model call still flows through the LiteLLM proxy — Hermes' `model`
-  block points `base_url` at LiteLLM.
-
-## Enabling
-
-1. `ENABLE_HERMES_AGENT=true` (gates install + the whole code path).
-2. Run `npm run python:setup` — installs the `hermes` binary when the flag is on.
-3. Toggle **advanced mode** on an individual agent in the agent form.
-
-## Env vars
-
-| Var | Default | Purpose |
-| --- | --- | --- |
-| `ENABLE_HERMES_AGENT` | (unset) | Global gate for advanced mode. |
-| `HERMES_HOME` | `~/.hermes` | Root for profile directories. |
-| `HERMES_BIN` | (auto) | Override path to the `hermes` binary. |
-| `HERMES_PORT_RANGE` | `8642-8700` | Gateway port pool. |
-| `HERMES_MAX_GATEWAYS` | `20` | LRU cap on concurrent gateways. |
-| `HERMES_IDLE_TIMEOUT_MS` | `900000` | Idle eviction threshold (15 min). |
-| `HERMES_APPROVALS_MODE` | `smart` | Tool-approval policy written to config.yaml. |
-| `HERMES_TERMINAL_BACKEND` | `docker` | Backend that runs native shell/file tools (`docker` isolates without host user namespaces; `local`/`ssh`/`modal`/`daytona`/`singularity` also selectable). Docker must be available to the host process. |
-| `HERMES_DOCKER_IMAGE` | `nikolaik/python-nodejs:python3.11-nodejs20` | Image for the docker backend (needs python + node). |
-| `BACKEND` | `http://127.0.0.1:<PORT>` | URL a gateway uses to reach Exulu's `/mcp/:agentId` (set this if the host app's port isn't `PORT`/`EXULU_PORT`). |
-| `EXULU_MCP_KEY` | `LITELLM_MASTER_KEY` | Bearer token guarding the ExuluTools MCP endpoint. |
-
-ExuluTools reach the agent over HTTP MCP at `/mcp/<agentId>` and **add to** Hermes'
-native tools (bash, filesystem, …) rather than replacing them.
-
-See `config.yaml.example`, `.env.example`, and `SOUL.md.example` in this folder
-for the shape of the generated files.

package/ee/python/.hermes/SOUL.md.example

@@ -1,8 +0,0 @@
-<!-- EXAMPLE ONLY — Exulu generates the real SOUL.md per profile from the agent's
-     `instructions`. SOUL.md is slot #1 of the Hermes system prompt and defines
-     who the agent is. Exulu owns this file and rewrites it whenever the agent's
-     instructions change (Hermes never overwrites an existing SOUL.md). -->
-
-You are Acme Corp's research assistant. You are precise, cite your sources, and
-prefer primary documents over summaries. When unsure, you say so rather than
-guessing.

package/ee/python/.hermes/config.yaml.example

@@ -1,55 +0,0 @@
-# EXAMPLE ONLY — Exulu generates the real config.yaml per profile at runtime.
-# Documentation: https://hermes-agent.nousresearch.com/docs/user-guide/configuration
-#
-# The model block points Hermes at the LiteLLM proxy so every model call still
-# flows through the single model gateway. NOTE: the model-name key is `default`,
-# not `model`. When base_url is set, Hermes calls it directly using api_key.
-
-model:
-  default: "claude-haiku"            # a LiteLLM model_name from config.litellm.yaml
-  provider: custom
-  base_url: "http://127.0.0.1:4000/v1"
-  api_key: "${LITELLM_MASTER_KEY}"  # resolved from the profile .env / process env
-  api_mode: chat_completions
-
-# Tool-approval policy: `smart` auto-approves low-risk actions and emits an
-# approval event (requiring a decision) before destructive ones.
-approvals:
-  mode: smart
-
-# Native shell/file tools run via this backend. Default is `docker`: a hardened,
-# Hermes-managed container (cap-drop ALL, no-new-privileges) that isolates the
-# tools from the host WITHOUT needing user namespaces — so it behaves the same
-# on macOS (Docker Desktop) and Linux. Volumes are bind-mounted host->same path
-# so the absolute cwd / skills.external_dirs resolve inside the container;
-# secrets are not mounted. Set HERMES_TERMINAL_BACKEND=local to disable.
-terminal:
-  backend: docker
-  # No bind mount: the Files panel talks to the container's /root directly via
-  # docker exec/cp. We stamp a deterministic label so Exulu can find the
-  # container (docker ps --filter label=exulu-profile=<profileId>), and keep it
-  # persistent so files survive between runs.
-  docker_image: "nikolaik/python-nodejs:python3.11-nodejs20"
-  container_persistent: true
-  lifetime_seconds: 86400
-  # Run as root (home /root) so the agent's working dir is a predictable /root
-  # the Files panel reads — NOT the host user's home (e.g. /Users/<you>), which
-  # is what docker_run_as_host_user (default) would replicate.
-  docker_run_as_host_user: false
-  docker_mount_cwd_to_workspace: false
-  docker_extra_args: ["--label", "exulu-profile=<profileId>"]
-    - "/abs/.../profiles/<profileId>/exulu-skills:/abs/.../profiles/<profileId>/exulu-skills:ro"
-
-# Added in Phase 3 — ExuluTools exposed over HTTP MCP at /mcp/<agentId>:
-# mcp_servers:
-#   exulu:
-#     url: "http://127.0.0.1:<exulu-port>/mcp/<agentId>"
-#     headers:
-#       Authorization: "Bearer ${EXULU_MCP_KEY}"
-
-# Enabled Exulu skills, synced from S3 into the profile (Anthropic Agent Skills
-# format). ADDS to Hermes' own skills home (learned/bundled skills); only
-# written when the agent has skills enabled.
-# skills:
-#   external_dirs:
-#     - "/abs/path/to/${HERMES_HOME}/profiles/<profileId>/exulu-skills"