@indexnetwork/protocol 11.1.0-rc.457.1 → 11.2.0-rc.458.1

package/CHANGELOG.md

@@ -28,6 +28,12 @@ pin a supported release, use `latest`.
 
 ## [Unreleased]
 
+### Added
+- Full standalone Hermes capability policy (11.2.0): the `hermes-agent` principal has an explicit six-action MCP/REST policy while the existing `hermes-negotiator` principal remains restricted to its four scheduled negotiation handlers. Both policies default deny and preserve one-shot, generation-fenced negotiation authority.
+
+### Security
+- The Hermes policy never exposes owner credentials, account-security, credential/permission/agent administration, billing, or unclassified tools; connector and owner-native callers receive only nonsecret response projections.
+
 ### Removed
 - Remove six unsupported shared interface/schema forwarding shims after migrating repository consumers to capability-owned domain and port modules; stable package-root exports remain unchanged.
 - Remove six unsupported tool-port forwarding shims and the deprecated unused discovery-question mapper; stable package-root exports remain unchanged.
@@ -80,7 +86,7 @@ pin a supported release, use `latest`.
   are unchanged.
 
 ### Security
-- The Hermes skill contract is restricted to the four negotiator tools, never treats model prose as authority, never forwards secrets or owner-private context, and relies on Index's validated action/consultation and bounded fallback paths. **This branch targets dev/private testing only. Production distribution remains blocked until the Mac owner credential is migrated to Keychain and the plaintext file/directory is removed, hardened runtime and App Sandbox are restored, the app is signed/notarized, and the credential TTL/revocation checklist is verified.**
+- The Hermes skill contract is restricted to the four negotiator tools, never treats model prose as authority, never forwards secrets or owner-private context, and relies on Index's validated action/consultation and bounded fallback paths. **This branch targets dev/private testing only. Production distribution remains blocked until the Mac owner credential is migrated to Keychain and the plaintext file/directory is removed, Developer ID hardened-runtime signing and notarization are complete, and the credential TTL/revocation checklist is verified.**
 
 ### Fixed
 - Add an independent complete-payload golden digest and stronger audit/report leak

package/dist/mcp/mcp.authorization-policy.d.ts

@@ -25,6 +25,12 @@ export type McpToolPermissionMap = ReadonlyMap<string, McpToolPermissionRequirem
  * Runtime-validates a capability-owned tool-to-permission mapping.
  */
 export declare function defineMcpToolPermissionMap(mapping: Readonly<Record<string, McpToolPermissionRequirement>>): McpToolPermissionMap;
+/**
+ * Exact full-standalone Hermes MCP surface. Every admitted tool maps to one
+ * canonical action; absence is denial, including human-only, deletion,
+ * permission-management, agent-administration, and retired aliases.
+ */
+export declare const HERMES_AGENT_MCP_TOOL_PERMISSIONS: McpToolPermissionMap;
 export declare const McpToolAccessRuleSchema: z.ZodEffects<z.ZodObject<{
     access: z.ZodEnum<["permission", "authenticated", "human_only", "agent_admin", "informational", "delivery_only", "removed"]>;
     actions: z.ZodOptional<z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">>;
@@ -113,10 +119,10 @@ export declare const McpPolicyAgentSnapshotSchema: z.ZodObject<{
     }[];
 }>;
 export type McpPolicyAgentSnapshot = z.infer<typeof McpPolicyAgentSnapshotSchema>;
-export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "delivery_agent", "invalid_agent"]>;
+export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
 export type McpPrincipalProfile = z.infer<typeof McpPrincipalProfileSchema>;
 export declare const McpCapabilitySubjectSchema: z.ZodObject<{
-    profile: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "delivery_agent", "invalid_agent"]>;
+    profile: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
     userId: z.ZodString;
     agentId: z.ZodOptional<z.ZodString>;
     agentType: z.ZodOptional<z.ZodEnum<["personal", "external", "system"]>>;
@@ -125,7 +131,7 @@ export declare const McpCapabilitySubjectSchema: z.ZodObject<{
     permissions: z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">;
 }, "strict", z.ZodTypeAny, {
     userId: string;
-    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "delivery_agent" | "invalid_agent";
+    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
     permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
     networkScopeId: string | null;
     isOnboarding: boolean;
@@ -133,7 +139,7 @@ export declare const McpCapabilitySubjectSchema: z.ZodObject<{
     agentType?: "system" | "personal" | "external" | undefined;
 }, {
     userId: string;
-    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "delivery_agent" | "invalid_agent";
+    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
     permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
     networkScopeId: string | null;
     isOnboarding: boolean;

package/dist/mcp/mcp.authorization-policy.js

@@ -26,6 +26,44 @@ export function defineMcpToolPermissionMap(mapping) {
     const parsed = McpToolPermissionMapSchema.parse(mapping);
     return new Map(Object.entries(parsed));
 }
+/**
+ * Exact full-standalone Hermes MCP surface. Every admitted tool maps to one
+ * canonical action; absence is denial, including human-only, deletion,
+ * permission-management, agent-administration, and retired aliases.
+ */
+export const HERMES_AGENT_MCP_TOOL_PERMISSIONS = defineMcpToolPermissionMap({
+    read_user_contexts: { action: 'manage:identity', reach: 'principal' },
+    preview_user_context: { action: 'manage:identity', reach: 'principal' },
+    confirm_user_context: { action: 'manage:identity', reach: 'principal' },
+    create_user_context: { action: 'manage:identity', reach: 'principal' },
+    update_user_context: { action: 'manage:identity', reach: 'principal' },
+    get_enrichment_run: { action: 'manage:identity', reach: 'principal' },
+    cancel_enrichment_run: { action: 'manage:identity', reach: 'principal' },
+    read_intents: { action: 'manage:intents', reach: 'network' },
+    search_intents: { action: 'manage:intents', reach: 'network' },
+    create_intent: { action: 'manage:intents', reach: 'network' },
+    update_intent: { action: 'manage:intents', reach: 'network' },
+    read_intent_indexes: { action: 'manage:intents', reach: 'network' },
+    create_intent_index: { action: 'manage:intents', reach: 'network' },
+    list_negotiations: { action: 'manage:negotiations', reach: 'network' },
+    get_negotiation: { action: 'manage:negotiations', reach: 'network' },
+    respond_to_negotiation: { action: 'manage:negotiations', reach: 'network' },
+    read_networks: { action: 'manage:networks', reach: 'network' },
+    read_network_memberships: { action: 'manage:networks', reach: 'network' },
+    create_network: { action: 'manage:networks', reach: 'network' },
+    update_network: { action: 'manage:networks', reach: 'network' },
+    create_network_membership: { action: 'manage:networks', reach: 'network' },
+    list_opportunities: { action: 'manage:opportunities', reach: 'network' },
+    update_opportunity: { action: 'manage:opportunities', reach: 'network' },
+    confirm_opportunity_delivery: { action: 'manage:opportunities', reach: 'network' },
+    read_premises: { action: 'manage:premises', reach: 'principal' },
+    create_premise: { action: 'manage:premises', reach: 'principal' },
+    update_premise: { action: 'manage:premises', reach: 'principal' },
+    retract_premise: { action: 'manage:premises', reach: 'principal' },
+    read_pending_questions: { action: 'manage:identity', reach: 'principal' },
+    read_activity_summary: { action: 'manage:identity', reach: 'principal' },
+    read_docs: { action: 'manage:identity', reach: 'principal' },
+});
 export const McpToolAccessRuleSchema = z.object({
     access: z.enum([
         'permission',
@@ -216,6 +254,7 @@ export const McpPrincipalProfileSchema = z.enum([
     'unregistered_key',
     'registered_global_agent',
     'registered_network_agent',
+    'hermes_agent',
     'delivery_agent',
     'invalid_agent',
 ]);
@@ -331,11 +370,13 @@ export function resolveMcpCapabilitySubject(input) {
         });
     }
     const agent = parsedAgent.data;
-    const profile = identity.isDeliveryAgent === true
-        ? 'delivery_agent'
-        : identity.networkScopeId
-            ? 'registered_network_agent'
-            : 'registered_global_agent';
+    const profile = identity.isHermesAgent === true
+        ? 'hermes_agent'
+        : identity.isDeliveryAgent === true
+            ? 'delivery_agent'
+            : identity.networkScopeId
+                ? 'registered_network_agent'
+                : 'registered_global_agent';
     return McpCapabilitySubjectSchema.parse({
         profile,
         userId: identity.userId,
@@ -437,6 +478,24 @@ export class McpCapabilityPolicy {
         if (subject.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {
             return { allowed: false, reason: 'onboarding_required', reach: rule.reach };
         }
+        if (subject.profile === 'hermes_agent') {
+            const requirement = HERMES_AGENT_MCP_TOOL_PERMISSIONS.get(toolName);
+            if (!requirement)
+                return { allowed: false, reason: 'tool_unclassified' };
+            return subject.permissions.includes(requirement.action)
+                ? {
+                    allowed: true,
+                    reason: 'permission_granted',
+                    reach: requirement.reach,
+                    requiredPermissions: [requirement.action],
+                }
+                : {
+                    allowed: false,
+                    reason: 'permission_missing',
+                    reach: requirement.reach,
+                    requiredPermissions: [requirement.action],
+                };
+        }
         if (rule.access === 'delivery_only') {
             return subject.profile === 'delivery_agent'
                 ? { allowed: true, reason: 'delivery', reach: rule.reach }

package/dist/shared/schemas/mcp-auth.schema.d.ts

@@ -48,6 +48,8 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     isSessionAuth: z.ZodOptional<z.ZodBoolean>;
     enrollmentCapable: z.ZodOptional<z.ZodBoolean>;
     isDeliveryAgent: z.ZodOptional<z.ZodBoolean>;
+    /** Host-authenticated marker for the dedicated full standalone Hermes audience. */
+    isHermesAgent: z.ZodOptional<z.ZodBoolean>;
     networkScopeId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strict", z.ZodTypeAny, {
     userId: string;
@@ -56,6 +58,7 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }, {
     userId: string;
     agentId?: string | undefined;
@@ -63,6 +66,7 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }>, {
     userId: string;
     agentId?: string | undefined;
@@ -70,6 +74,7 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }, {
     userId: string;
     agentId?: string | undefined;
@@ -77,5 +82,6 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }>;
 export type McpResolvedIdentity = z.infer<typeof McpResolvedIdentitySchema>;

package/dist/shared/schemas/mcp-auth.schema.js

@@ -28,6 +28,8 @@ export const McpResolvedIdentitySchema = z.object({
     isSessionAuth: z.boolean().optional(),
     enrollmentCapable: z.boolean().optional(),
     isDeliveryAgent: z.boolean().optional(),
+    /** Host-authenticated marker for the dedicated full standalone Hermes audience. */
+    isHermesAgent: z.boolean().optional(),
     networkScopeId: z.string().min(1).nullable().optional(),
 }).strict().superRefine((identity, ctx) => {
     if (identity.isSessionAuth === true && identity.agentId) {
@@ -44,4 +46,11 @@ export const McpResolvedIdentitySchema = z.object({
             message: 'Delivery-agent designation requires an agent ID.',
         });
     }
+    if (identity.isHermesAgent === true && !identity.agentId) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['isHermesAgent'],
+            message: 'Hermes-agent designation requires an agent ID.',
+        });
+    }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indexnetwork/protocol",
-  "version": "11.1.0-rc.457.1",
+  "version": "11.2.0-rc.458.1",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",