@indexnetwork/protocol 11.1.0-rc.457.1 → 11.2.1-rc.459.1

package/CHANGELOG.md

@@ -20,6 +20,30 @@ went 6.7.1 → 8.0.2 with no 7.x in between because the whole 7.x line shipped a
 prereleases between the two promotions. To track every change, read `rc`; to
 pin a supported release, use `latest`.
 
+## 11.2.1 - 2026-08-11
+
+### Added
+
+- Added the guarded historical-quality runtime for single-configuration,
+  dual-trigger shared-pool evaluation.
+
+### Fixed
+
+- Hardened historical-quality readiness with attested database credentials,
+  frozen embedding requests, and fail-closed protected-base refresh gating.
+
+## 10.2.0 - 2026-08-10
+
+### Changed
+
+- Refined the canonical V2 historical-quality artifact contract so execution
+  completeness is independent of verdict availability: complete filtered
+  case/trigger selections are valid descriptive evidence with
+  `completeness.complete: true` and
+  `measurement.qualityVerdictAvailable: false`; only complete full-corpus,
+  full-trigger selections may publish a quality verdict. Legacy and canonical
+  parser selection remain unchanged.
+
 ## 10.1.0 - 2026-08-07
 
 ### Added
@@ -28,6 +52,12 @@ pin a supported release, use `latest`.
 
 ## [Unreleased]
 
+### Added
+- Full standalone Hermes capability policy (11.2.0): the `hermes-agent` principal has an explicit six-action MCP/REST policy while the existing `hermes-negotiator` principal remains restricted to its four scheduled negotiation handlers. Both policies default deny and preserve one-shot, generation-fenced negotiation authority.
+
+### Security
+- The Hermes policy never exposes owner credentials, account-security, credential/permission/agent administration, billing, or unclassified tools; connector and owner-native callers receive only nonsecret response projections.
+
 ### Removed
 - Remove six unsupported shared interface/schema forwarding shims after migrating repository consumers to capability-owned domain and port modules; stable package-root exports remain unchanged.
 - Remove six unsupported tool-port forwarding shims and the deprecated unused discovery-question mapper; stable package-root exports remain unchanged.
@@ -75,12 +105,19 @@ pin a supported release, use `latest`.
 - Remove unsupported deprecated source/deep forwarding shims after migrating repository consumers to canonical modules; stable package-root exports are unchanged.
 - Add a fail-closed isolated provider-free test gate (10.1.1). Tooling-only
   safety foundation; no runtime or public API behavior changes.
+- For the planned 10.2.0 release, refine the canonical V2 historical-quality
+  artifact contract so execution completeness is independent of verdict
+  availability: complete filtered case/trigger selections are valid descriptive
+  evidence with `completeness.complete: true` and
+  `measurement.qualityVerdictAvailable: false`; only complete full-corpus,
+  full-trigger selections may publish a quality verdict. Legacy and canonical
+  parser selection remain unchanged.
 - Share capability classification metadata between the existing architecture
   boundary gate and the protocol atlas generator; allowed dependency directions
   are unchanged.
 
 ### Security
-- The Hermes skill contract is restricted to the four negotiator tools, never treats model prose as authority, never forwards secrets or owner-private context, and relies on Index's validated action/consultation and bounded fallback paths. **This branch targets dev/private testing only. Production distribution remains blocked until the Mac owner credential is migrated to Keychain and the plaintext file/directory is removed, hardened runtime and App Sandbox are restored, the app is signed/notarized, and the credential TTL/revocation checklist is verified.**
+- The Hermes skill contract is restricted to the four negotiator tools, never treats model prose as authority, never forwards secrets or owner-private context, and relies on Index's validated action/consultation and bounded fallback paths. **This branch targets dev/private testing only. Production distribution remains blocked until the Mac owner credential is migrated to Keychain and the plaintext file/directory is removed, Developer ID hardened-runtime signing and notarization are complete, and the credential TTL/revocation checklist is verified.**
 
 ### Fixed
 - Add an independent complete-payload golden digest and stronger audit/report leak

package/dist/mcp/mcp.authorization-policy.d.ts

@@ -25,6 +25,12 @@ export type McpToolPermissionMap = ReadonlyMap<string, McpToolPermissionRequirem
  * Runtime-validates a capability-owned tool-to-permission mapping.
  */
 export declare function defineMcpToolPermissionMap(mapping: Readonly<Record<string, McpToolPermissionRequirement>>): McpToolPermissionMap;
+/**
+ * Exact full-standalone Hermes MCP surface. Every admitted tool maps to one
+ * canonical action; absence is denial, including human-only, deletion,
+ * permission-management, agent-administration, and retired aliases.
+ */
+export declare const HERMES_AGENT_MCP_TOOL_PERMISSIONS: McpToolPermissionMap;
 export declare const McpToolAccessRuleSchema: z.ZodEffects<z.ZodObject<{
     access: z.ZodEnum<["permission", "authenticated", "human_only", "agent_admin", "informational", "delivery_only", "removed"]>;
     actions: z.ZodOptional<z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">>;
@@ -113,10 +119,10 @@ export declare const McpPolicyAgentSnapshotSchema: z.ZodObject<{
     }[];
 }>;
 export type McpPolicyAgentSnapshot = z.infer<typeof McpPolicyAgentSnapshotSchema>;
-export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "delivery_agent", "invalid_agent"]>;
+export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
 export type McpPrincipalProfile = z.infer<typeof McpPrincipalProfileSchema>;
 export declare const McpCapabilitySubjectSchema: z.ZodObject<{
-    profile: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "delivery_agent", "invalid_agent"]>;
+    profile: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
     userId: z.ZodString;
     agentId: z.ZodOptional<z.ZodString>;
     agentType: z.ZodOptional<z.ZodEnum<["personal", "external", "system"]>>;
@@ -125,7 +131,7 @@ export declare const McpCapabilitySubjectSchema: z.ZodObject<{
     permissions: z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">;
 }, "strict", z.ZodTypeAny, {
     userId: string;
-    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "delivery_agent" | "invalid_agent";
+    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
     permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
     networkScopeId: string | null;
     isOnboarding: boolean;
@@ -133,7 +139,7 @@ export declare const McpCapabilitySubjectSchema: z.ZodObject<{
     agentType?: "system" | "personal" | "external" | undefined;
 }, {
     userId: string;
-    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "delivery_agent" | "invalid_agent";
+    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
     permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
     networkScopeId: string | null;
     isOnboarding: boolean;

package/dist/mcp/mcp.authorization-policy.js

@@ -26,6 +26,44 @@ export function defineMcpToolPermissionMap(mapping) {
     const parsed = McpToolPermissionMapSchema.parse(mapping);
     return new Map(Object.entries(parsed));
 }
+/**
+ * Exact full-standalone Hermes MCP surface. Every admitted tool maps to one
+ * canonical action; absence is denial, including human-only, deletion,
+ * permission-management, agent-administration, and retired aliases.
+ */
+export const HERMES_AGENT_MCP_TOOL_PERMISSIONS = defineMcpToolPermissionMap({
+    read_user_contexts: { action: 'manage:identity', reach: 'principal' },
+    preview_user_context: { action: 'manage:identity', reach: 'principal' },
+    confirm_user_context: { action: 'manage:identity', reach: 'principal' },
+    create_user_context: { action: 'manage:identity', reach: 'principal' },
+    update_user_context: { action: 'manage:identity', reach: 'principal' },
+    get_enrichment_run: { action: 'manage:identity', reach: 'principal' },
+    cancel_enrichment_run: { action: 'manage:identity', reach: 'principal' },
+    read_intents: { action: 'manage:intents', reach: 'network' },
+    search_intents: { action: 'manage:intents', reach: 'network' },
+    create_intent: { action: 'manage:intents', reach: 'network' },
+    update_intent: { action: 'manage:intents', reach: 'network' },
+    read_intent_indexes: { action: 'manage:intents', reach: 'network' },
+    create_intent_index: { action: 'manage:intents', reach: 'network' },
+    list_negotiations: { action: 'manage:negotiations', reach: 'network' },
+    get_negotiation: { action: 'manage:negotiations', reach: 'network' },
+    respond_to_negotiation: { action: 'manage:negotiations', reach: 'network' },
+    read_networks: { action: 'manage:networks', reach: 'network' },
+    read_network_memberships: { action: 'manage:networks', reach: 'network' },
+    create_network: { action: 'manage:networks', reach: 'network' },
+    update_network: { action: 'manage:networks', reach: 'network' },
+    create_network_membership: { action: 'manage:networks', reach: 'network' },
+    list_opportunities: { action: 'manage:opportunities', reach: 'network' },
+    update_opportunity: { action: 'manage:opportunities', reach: 'network' },
+    confirm_opportunity_delivery: { action: 'manage:opportunities', reach: 'network' },
+    read_premises: { action: 'manage:premises', reach: 'principal' },
+    create_premise: { action: 'manage:premises', reach: 'principal' },
+    update_premise: { action: 'manage:premises', reach: 'principal' },
+    retract_premise: { action: 'manage:premises', reach: 'principal' },
+    read_pending_questions: { action: 'manage:identity', reach: 'principal' },
+    read_activity_summary: { action: 'manage:identity', reach: 'principal' },
+    read_docs: { action: 'manage:identity', reach: 'principal' },
+});
 export const McpToolAccessRuleSchema = z.object({
     access: z.enum([
         'permission',
@@ -216,6 +254,7 @@ export const McpPrincipalProfileSchema = z.enum([
     'unregistered_key',
     'registered_global_agent',
     'registered_network_agent',
+    'hermes_agent',
     'delivery_agent',
     'invalid_agent',
 ]);
@@ -331,11 +370,13 @@ export function resolveMcpCapabilitySubject(input) {
         });
     }
     const agent = parsedAgent.data;
-    const profile = identity.isDeliveryAgent === true
-        ? 'delivery_agent'
-        : identity.networkScopeId
-            ? 'registered_network_agent'
-            : 'registered_global_agent';
+    const profile = identity.isHermesAgent === true
+        ? 'hermes_agent'
+        : identity.isDeliveryAgent === true
+            ? 'delivery_agent'
+            : identity.networkScopeId
+                ? 'registered_network_agent'
+                : 'registered_global_agent';
     return McpCapabilitySubjectSchema.parse({
         profile,
         userId: identity.userId,
@@ -437,6 +478,24 @@ export class McpCapabilityPolicy {
         if (subject.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {
             return { allowed: false, reason: 'onboarding_required', reach: rule.reach };
         }
+        if (subject.profile === 'hermes_agent') {
+            const requirement = HERMES_AGENT_MCP_TOOL_PERMISSIONS.get(toolName);
+            if (!requirement)
+                return { allowed: false, reason: 'tool_unclassified' };
+            return subject.permissions.includes(requirement.action)
+                ? {
+                    allowed: true,
+                    reason: 'permission_granted',
+                    reach: requirement.reach,
+                    requiredPermissions: [requirement.action],
+                }
+                : {
+                    allowed: false,
+                    reason: 'permission_missing',
+                    reach: requirement.reach,
+                    requiredPermissions: [requirement.action],
+                };
+        }
         if (rule.access === 'delivery_only') {
             return subject.profile === 'delivery_agent'
                 ? { allowed: true, reason: 'delivery', reach: rule.reach }

package/dist/shared/agent/model.config.d.ts

@@ -31,8 +31,8 @@ export interface ModelConfig {
     /** Override the chat reasoning effort. Falls back to CHAT_REASONING_EFFORT env var. */
     chatReasoningEffort?: 'minimal' | 'low' | 'medium' | 'high' | 'xhigh';
 }
-/** Per-agent model settings before any eval-only override is applied. */
-declare function getBaseModelConfig(config?: ModelConfig): {
+/** Per-agent model settings before canonical assignments are applied. */
+declare function getBaseModelConfig(config?: ModelConfig): { [Agent in "intentInferrer" | "intentIndexer" | "intentVerifier" | "intentReconciler" | "intentClarifier" | "profileGenerator" | "hydeGenerator" | "hydeValidator" | "lensInferrer" | "opportunityEvaluator" | "opportunityPresenter" | "negotiator" | "negotiationScreener" | "negotiationReflector" | "homeCategorizer" | "suggestionGenerator" | "chatTitleGenerator" | "negotiationInsights" | "chatContextSummarizer" | "questioner" | "signalIntakePack" | "negotiationSummarizer" | "poolDiscriminatorMiner" | "poolDiscriminatorAssigner" | "negotiationEvidenceMiner" | "inviteGenerator" | "premiseAnalyzer" | "premiseDecomposer" | "premiseIndexer" | "userContextGenerator" | "networkRecommender" | "interruptClassifier" | "chat"]: Omit<{
     readonly intentInferrer: {
         readonly model: "google/gemini-2.5-flash";
     };
@@ -164,14 +164,16 @@ declare function getBaseModelConfig(config?: ModelConfig): {
         readonly maxTokens: 16;
     };
     readonly chat: {
-        readonly model: string;
+        readonly model: "google/gemini-3-pro-preview";
         readonly maxTokens: 8192;
         readonly reasoning: {
             readonly effort: NonNullable<ModelSettings["reasoning"]>["effort"];
             readonly exclude: true;
         };
     };
-};
+}[Agent], "model"> & {
+    model: string;
+}; };
 /** Key identifying one of the per-agent model configurations. */
 export type ModelAgent = keyof ReturnType<typeof getBaseModelConfig>;
 /**

package/dist/shared/agent/model.config.js

@@ -1,50 +1,8 @@
 import { ChatOpenAI } from "@langchain/openai";
-/**
- * Eval-only per-agent model overrides, e.g.
- * `EVAL_MODEL_OVERRIDES={"opportunityEvaluator":"anthropic/claude-sonnet-4"}`.
- *
- * Read on every call (no caching) to match the surrounding env convention, and
- * ignored entirely in production so a deployed process can never be repointed at
- * another model by an environment variable. A malformed value or an unknown agent
- * key throws: a typo must not silently produce a run that measured the default.
- */
-function readModelOverrides(agentKeys) {
-    if (process.env.NODE_ENV === "production")
-        return {};
-    const raw = process.env.EVAL_MODEL_OVERRIDES?.trim();
-    if (!raw)
-        return {};
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        // `new Error(msg, { cause })` needs lib ES2022; this package targets ES2020,
-        // so the cause is attached after construction (same pattern as elsewhere in src).
-        const wrapped = new Error(`EVAL_MODEL_OVERRIDES is not valid JSON: ${raw}`);
-        wrapped.cause = err;
-        throw wrapped;
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new Error("EVAL_MODEL_OVERRIDES must be a JSON object of agent -> model id");
-    }
-    const overrides = {};
-    for (const [agent, model] of Object.entries(parsed)) {
-        if (!agentKeys.includes(agent)) {
-            throw new Error(`EVAL_MODEL_OVERRIDES names an unknown agent "${agent}". Known agents: ${agentKeys.join(", ")}`);
-        }
-        if (typeof model !== "string" || model.trim() === "") {
-            throw new Error(`EVAL_MODEL_OVERRIDES value for "${agent}" must be a non-empty model id string`);
-        }
-        // Store trimmed: surrounding whitespace in the JSON value would otherwise be
-        // sent verbatim to OpenRouter as part of the model id.
-        overrides[agent] = model.trim();
-    }
-    return overrides;
-}
-/** Per-agent model settings before any eval-only override is applied. */
+import { resolveCanonicalAllAgentModels } from "./model.resolver.js";
+/** Per-agent model settings before canonical assignments are applied. */
 function getBaseModelConfig(config) {
-    return {
+    const settings = {
         intentInferrer: { model: "google/gemini-2.5-flash" },
         intentIndexer: { model: "google/gemini-2.5-flash" },
         intentVerifier: { model: "google/gemini-2.5-flash" },
@@ -78,7 +36,7 @@ function getBaseModelConfig(config) {
         networkRecommender: { model: "google/gemini-2.5-flash", temperature: 0.2, maxTokens: 512 },
         interruptClassifier: { model: "google/gemini-2.5-flash", temperature: 0.0, maxTokens: 16 },
         chat: {
-            model: config?.chatModel ?? process.env.CHAT_MODEL ?? "google/gemini-3-pro-preview",
+            model: "google/gemini-3-pro-preview",
             maxTokens: 8192,
             reasoning: {
                 effort: (config?.chatReasoningEffort ?? process.env.CHAT_REASONING_EFFORT ?? "low"),
@@ -86,22 +44,15 @@ function getBaseModelConfig(config) {
             },
         },
     };
+    const assignments = resolveCanonicalAllAgentModels({
+        CHAT_MODEL: config?.chatModel ?? process.env.CHAT_MODEL,
+        EVAL_MODEL_OVERRIDES: process.env.EVAL_MODEL_OVERRIDES,
+    }, { applyEvalOverrides: process.env.NODE_ENV !== "production" });
+    return Object.fromEntries(Object.entries(settings).map(([agent, value]) => [agent, { ...value, model: assignments[agent] }]));
 }
-/**
- * Per-agent model settings, with `EVAL_MODEL_OVERRIDES` applied when present.
- * Only the model id is overridable: temperature, token limits and reasoning
- * effort stay fixed so an eval measures a model swap and nothing else.
- */
+/** Canonical assignments preserve sampling, token, and reasoning settings. */
 function getModelConfig(config) {
-    const base = getBaseModelConfig(config);
-    const overrides = readModelOverrides(Object.keys(base));
-    if (Object.keys(overrides).length === 0)
-        return base;
-    const merged = Object.fromEntries(Object.entries(base).map(([agent, settings]) => {
-        const model = overrides[agent];
-        return [agent, model ? { ...settings, model } : settings];
-    }));
-    return merged;
+    return getBaseModelConfig(config);
 }
 /**
  * Returns the model name string for the given agent key.

package/dist/shared/agent/model.resolver.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Canonical model-assignment authority for every protocol agent.
+ *
+ * The resolver is pure: callers provide the complete environment projection it
+ * may read. Historical eval planning uses the returned all-agent map so an
+ * unmentioned agent cannot drift behind an implicit runtime default.
+ */
+export declare const CANONICAL_AGENT_MODEL_DEFAULTS: Readonly<{
+    readonly intentInferrer: "google/gemini-2.5-flash";
+    readonly intentIndexer: "google/gemini-2.5-flash";
+    readonly intentVerifier: "google/gemini-2.5-flash";
+    readonly intentReconciler: "google/gemini-2.5-flash";
+    readonly intentClarifier: "google/gemini-2.5-flash";
+    readonly profileGenerator: "google/gemini-2.5-flash";
+    readonly hydeGenerator: "google/gemini-2.5-flash";
+    readonly hydeValidator: "google/gemini-2.5-flash";
+    readonly lensInferrer: "google/gemini-2.5-flash";
+    readonly opportunityEvaluator: "google/gemini-2.5-flash";
+    readonly opportunityPresenter: "google/gemini-2.5-flash";
+    readonly negotiator: "google/gemini-2.5-flash";
+    readonly negotiationScreener: "google/gemini-2.5-flash";
+    readonly negotiationReflector: "google/gemini-2.5-flash";
+    readonly homeCategorizer: "google/gemini-2.5-flash";
+    readonly suggestionGenerator: "google/gemini-2.5-flash";
+    readonly chatTitleGenerator: "google/gemini-2.5-flash";
+    readonly negotiationInsights: "google/gemini-2.5-flash";
+    readonly chatContextSummarizer: "google/gemini-2.5-flash";
+    readonly questioner: "google/gemini-2.5-flash";
+    readonly signalIntakePack: "google/gemini-2.5-flash";
+    readonly negotiationSummarizer: "google/gemini-2.5-flash";
+    readonly poolDiscriminatorMiner: "google/gemini-2.5-flash";
+    readonly poolDiscriminatorAssigner: "google/gemini-2.5-flash";
+    readonly negotiationEvidenceMiner: "google/gemini-2.5-flash";
+    readonly inviteGenerator: "google/gemini-2.5-flash";
+    readonly premiseAnalyzer: "google/gemini-2.5-flash";
+    readonly premiseDecomposer: "google/gemini-2.5-flash";
+    readonly premiseIndexer: "google/gemini-2.5-flash";
+    readonly userContextGenerator: "google/gemini-2.5-flash";
+    readonly networkRecommender: "google/gemini-2.5-flash";
+    readonly interruptClassifier: "google/gemini-2.5-flash";
+    readonly chat: "google/gemini-3-pro-preview";
+}>;
+export type CanonicalModelAgent = keyof typeof CANONICAL_AGENT_MODEL_DEFAULTS;
+export type CanonicalAllAgentModels = Readonly<Record<CanonicalModelAgent, string>>;
+export declare const CANONICAL_MODEL_AGENTS: readonly ("intentInferrer" | "intentIndexer" | "intentVerifier" | "intentReconciler" | "intentClarifier" | "profileGenerator" | "hydeGenerator" | "hydeValidator" | "lensInferrer" | "opportunityEvaluator" | "opportunityPresenter" | "negotiator" | "negotiationScreener" | "negotiationReflector" | "homeCategorizer" | "suggestionGenerator" | "chatTitleGenerator" | "negotiationInsights" | "chatContextSummarizer" | "questioner" | "signalIntakePack" | "negotiationSummarizer" | "poolDiscriminatorMiner" | "poolDiscriminatorAssigner" | "negotiationEvidenceMiner" | "inviteGenerator" | "premiseAnalyzer" | "premiseDecomposer" | "premiseIndexer" | "userContextGenerator" | "networkRecommender" | "interruptClassifier" | "chat")[];
+export declare function resolveCanonicalAllAgentModels(environment: Readonly<Record<string, string | undefined>>, options?: {
+    applyEvalOverrides?: boolean;
+}): CanonicalAllAgentModels;

package/dist/shared/agent/model.resolver.js

@@ -0,0 +1,78 @@
+/**
+ * Canonical model-assignment authority for every protocol agent.
+ *
+ * The resolver is pure: callers provide the complete environment projection it
+ * may read. Historical eval planning uses the returned all-agent map so an
+ * unmentioned agent cannot drift behind an implicit runtime default.
+ */
+export const CANONICAL_AGENT_MODEL_DEFAULTS = Object.freeze({
+    intentInferrer: "google/gemini-2.5-flash",
+    intentIndexer: "google/gemini-2.5-flash",
+    intentVerifier: "google/gemini-2.5-flash",
+    intentReconciler: "google/gemini-2.5-flash",
+    intentClarifier: "google/gemini-2.5-flash",
+    profileGenerator: "google/gemini-2.5-flash",
+    hydeGenerator: "google/gemini-2.5-flash",
+    hydeValidator: "google/gemini-2.5-flash",
+    lensInferrer: "google/gemini-2.5-flash",
+    opportunityEvaluator: "google/gemini-2.5-flash",
+    opportunityPresenter: "google/gemini-2.5-flash",
+    negotiator: "google/gemini-2.5-flash",
+    negotiationScreener: "google/gemini-2.5-flash",
+    negotiationReflector: "google/gemini-2.5-flash",
+    homeCategorizer: "google/gemini-2.5-flash",
+    suggestionGenerator: "google/gemini-2.5-flash",
+    chatTitleGenerator: "google/gemini-2.5-flash",
+    negotiationInsights: "google/gemini-2.5-flash",
+    chatContextSummarizer: "google/gemini-2.5-flash",
+    questioner: "google/gemini-2.5-flash",
+    signalIntakePack: "google/gemini-2.5-flash",
+    negotiationSummarizer: "google/gemini-2.5-flash",
+    poolDiscriminatorMiner: "google/gemini-2.5-flash",
+    poolDiscriminatorAssigner: "google/gemini-2.5-flash",
+    negotiationEvidenceMiner: "google/gemini-2.5-flash",
+    inviteGenerator: "google/gemini-2.5-flash",
+    premiseAnalyzer: "google/gemini-2.5-flash",
+    premiseDecomposer: "google/gemini-2.5-flash",
+    premiseIndexer: "google/gemini-2.5-flash",
+    userContextGenerator: "google/gemini-2.5-flash",
+    networkRecommender: "google/gemini-2.5-flash",
+    interruptClassifier: "google/gemini-2.5-flash",
+    chat: "google/gemini-3-pro-preview",
+});
+export const CANONICAL_MODEL_AGENTS = Object.freeze(Object.keys(CANONICAL_AGENT_MODEL_DEFAULTS));
+function parseOverrides(raw) {
+    if (raw?.trim() === undefined || raw.trim() === "")
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("EVAL_MODEL_OVERRIDES is not valid JSON");
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error("EVAL_MODEL_OVERRIDES must be a JSON object of agent -> model id");
+    }
+    const overrides = {};
+    for (const [agent, model] of Object.entries(parsed)) {
+        if (!CANONICAL_MODEL_AGENTS.includes(agent)) {
+            throw new Error(`EVAL_MODEL_OVERRIDES names an unknown agent "${agent}". Known agents: ${CANONICAL_MODEL_AGENTS.join(", ")}`);
+        }
+        if (typeof model !== "string" || model.trim() === "") {
+            throw new Error(`EVAL_MODEL_OVERRIDES value for "${agent}" must be a non-empty model id string`);
+        }
+        overrides[agent] = model.trim();
+    }
+    return overrides;
+}
+export function resolveCanonicalAllAgentModels(environment, options = {}) {
+    const models = { ...CANONICAL_AGENT_MODEL_DEFAULTS };
+    const chatModel = environment.CHAT_MODEL?.trim();
+    if (chatModel)
+        models.chat = chatModel;
+    if (options.applyEvalOverrides !== false) {
+        Object.assign(models, parseOverrides(environment.EVAL_MODEL_OVERRIDES));
+    }
+    return Object.freeze(models);
+}

package/dist/shared/schemas/mcp-auth.schema.d.ts

@@ -48,6 +48,8 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     isSessionAuth: z.ZodOptional<z.ZodBoolean>;
     enrollmentCapable: z.ZodOptional<z.ZodBoolean>;
     isDeliveryAgent: z.ZodOptional<z.ZodBoolean>;
+    /** Host-authenticated marker for the dedicated full standalone Hermes audience. */
+    isHermesAgent: z.ZodOptional<z.ZodBoolean>;
     networkScopeId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strict", z.ZodTypeAny, {
     userId: string;
@@ -56,6 +58,7 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }, {
     userId: string;
     agentId?: string | undefined;
@@ -63,6 +66,7 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }>, {
     userId: string;
     agentId?: string | undefined;
@@ -70,6 +74,7 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }, {
     userId: string;
     agentId?: string | undefined;
@@ -77,5 +82,6 @@ export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
     enrollmentCapable?: boolean | undefined;
     isDeliveryAgent?: boolean | undefined;
     isSessionAuth?: boolean | undefined;
+    isHermesAgent?: boolean | undefined;
 }>;
 export type McpResolvedIdentity = z.infer<typeof McpResolvedIdentitySchema>;

package/dist/shared/schemas/mcp-auth.schema.js

@@ -28,6 +28,8 @@ export const McpResolvedIdentitySchema = z.object({
     isSessionAuth: z.boolean().optional(),
     enrollmentCapable: z.boolean().optional(),
     isDeliveryAgent: z.boolean().optional(),
+    /** Host-authenticated marker for the dedicated full standalone Hermes audience. */
+    isHermesAgent: z.boolean().optional(),
     networkScopeId: z.string().min(1).nullable().optional(),
 }).strict().superRefine((identity, ctx) => {
     if (identity.isSessionAuth === true && identity.agentId) {
@@ -44,4 +46,11 @@ export const McpResolvedIdentitySchema = z.object({
             message: 'Delivery-agent designation requires an agent ID.',
         });
     }
+    if (identity.isHermesAgent === true && !identity.agentId) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['isHermesAgent'],
+            message: 'Hermes-agent designation requires an agent ID.',
+        });
+    }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indexnetwork/protocol",
-  "version": "11.1.0-rc.457.1",
+  "version": "11.2.1-rc.459.1",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",