@inline-chat/hermes-agent-adapter 0.0.18-alpha.0 → 0.0.18

package/README.md

@@ -157,7 +157,7 @@ uv run ./hermes plugins list --plain --no-bundled
 Expected local output includes:
 
 ```text
-enabled      user     0.0.18-alpha.0   inline-platform
+enabled      user     0.0.18   inline-platform
 ```
 
 ## Update Or Reinstall
@@ -179,13 +179,17 @@ mismatch, rerun the same command after rebuilding or upgrading the package.
 ## Compatibility
 
 - Hermes Agent: requires the external user plugin registry and native platform
-  plugin loader available in Hermes Agent `>=0.17.0`. This package was validated
-  against Hermes Agent `0.21.0` from source commit `29112bef` (tag
-  `v2026.8.31`).
+  plugin loader available in Hermes Agent `>=0.21.4`. This package was validated
+  against Hermes Agent `0.21.5` from source commit `f97608f178d1ffeca59860195ab7da295f7c8e5f` (tag
+  `v2026.9.24`).
+- CI checks the minimum supported Hermes release, newest stable source, and upstream
+  `main`. A six-hour scheduled check also tests the published npm `latest` adapter.
+  `inline-hermes doctor` requires successful host loading and compatibility validation;
+  unavailable Hermes diagnostics no longer count as healthy.
 - Node.js: `>=20` is required for the bundled sidecar. Hermes-managed Node 22,
   system Node, or an explicit `INLINE_NODE_BIN` path all work.
 - Inbound recovery retries without waiting for another message or reconnect. Independent chats are consumed concurrently; same-chat order and delivery acknowledgements are preserved. Sender provenance lookups start with a short timeout and expand up to the existing SDK ceiling after timeouts; deferred inputs stay recoverable. Stream replacement wakes pending backpressure writes.
-- Inline transport: the sidecar uses `@inline-chat/realtime-sdk@0.0.19-alpha.0` and is
+- Inline transport: the sidecar uses `@inline-chat/realtime-sdk@0.0.18` and is
   bundled into the npm package, so Hermes startup does not run `npm install`.
 - Live sends require a valid Inline user or bot token in `INLINE_TOKEN`,
   `INLINE_BOT_TOKEN`, `platforms.inline.token`, or `inline.token`.

package/dist/install.js

@@ -7174,6 +7174,12 @@ async function inspectInstall(params) {
   if (!node.ok) {
     issues.push(node.error || `${node.source} is not usable: ${node.path}`);
   }
+  if (params.opts.command === "doctor" && !activation.hermesCompatibilityVerified) {
+    issues.push("Hermes could not validate the installed plugin compatibility; check `hermes inline status --json --check-compatibility` and update or repair the plugin");
+  }
+  if (params.opts.command === "doctor" && !activation.hermesCredentialStoreChecked) {
+    issues.push("Hermes credential verification is unavailable; doctor cannot confirm runtime readiness");
+  }
   if (params.opts.command === "doctor" && !activation.pluginEnabled) {
     issues.push(`Hermes plugin '${pluginEnableKey}' is not enabled. Run: hermes plugins enable ${pluginEnableKey}`);
   }
@@ -7579,7 +7585,7 @@ async function inspectActivation(hermesHome, target, probeCredential) {
   }
   const tokenPresent = Boolean(process.env.INLINE_TOKEN || process.env.INLINE_BOT_TOKEN);
   const configTokenConfigured = configTokenIsConfigured(config, ["platforms", defaultPluginId, "token"]) || configTokenIsConfigured(config, [defaultPluginId, "token"]);
-  const machineCredential = inspectHermesCredential(hermesHome, probeCredential);
+  const machineCredential = inspectHermesCredential(hermesHome, probeCredential, target);
   const fallbackConfigured = tokenPresent || configTokenConfigured;
   const credentialState = (machineCredential.state === "unknown" || machineCredential.state === "not_configured") && fallbackConfigured ? "configured_unverified" : machineCredential.state;
   const installOwnershipAligned = await inspectInstallOwnership(hermesHome, target);
@@ -7589,6 +7595,7 @@ async function inspectActivation(hermesHome, target, probeCredential) {
     pluginEnabled: readConfigList(config, ["plugins", "enabled"]).includes(pluginEnableKey),
     platformConfigured: readConfigBoolean(config, ["platforms", defaultPluginId, "enabled"]) || readConfigBoolean(config, [defaultPluginId, "enabled"]),
     configTokenConfigured,
+    hermesCompatibilityVerified: machineCredential.compatible === true,
     hermesCredentialStoreChecked: machineCredential.checked,
     hermesCredentialStoreTokenConfigured: machineCredential.configured === true,
     credentialState,
@@ -7649,9 +7656,9 @@ async function chownTree(target, uid, gid) {
   }
   await chown(target, uid, gid);
 }
-function inspectHermesCredential(hermesHome, probe) {
+function inspectHermesCredential(hermesHome, probe, target) {
   const executable = normalizeToken(process.env.INLINE_HERMES_BIN) || "hermes";
-  const args = ["inline", "status", "--json", ...probe ? ["--probe"] : []];
+  const args = ["inline", "status", "--json", ...probe ? ["--probe", "--check-compatibility"] : []];
   const result = spawnSync(executable, args, {
     encoding: "utf8",
     timeout: hermesMachineTimeoutMs,
@@ -7675,11 +7682,13 @@ function inspectHermesCredential(hermesHome, probe) {
   if (record.action !== "inline.status" || typeof record.setupProtocolVersion !== "number" || record.setupProtocolVersion < 1 || typeof record.configured !== "boolean") {
     return { checked: false, configured: null, state: "unknown" };
   }
+  const compatibility = record.compatibility;
+  const compatible = result.status === 0 && compatibility?.ok === true && compatibility.pluginPath === safeRealpathSync(target);
   if (!record.configured) {
-    return { checked: true, configured: false, state: "not_configured" };
+    return { compatible, checked: true, configured: false, state: "not_configured" };
   }
   if (!probe) {
-    return { checked: true, configured: true, state: "configured_unverified" };
+    return { compatible, checked: true, configured: true, state: "configured_unverified" };
   }
   const probeResult = record.probe && typeof record.probe === "object" && !Array.isArray(record.probe) ? record.probe : null;
   if (probeResult?.ok === true) {
@@ -7688,6 +7697,7 @@ function inspectHermesCredential(hermesHome, probe) {
       return { checked: false, configured: true, state: "unknown" };
     const botUsername = typeof probeResult.botUsername === "string" && probeResult.botUsername.trim() ? probeResult.botUsername.trim() : undefined;
     return {
+      compatible,
       checked: true,
       configured: true,
       state: "verified",
@@ -7696,9 +7706,16 @@ function inspectHermesCredential(hermesHome, probe) {
     };
   }
   if (probeResult?.errorKind === "invalid_credential") {
-    return { checked: true, configured: true, state: "invalid" };
+    return { compatible, checked: true, configured: true, state: "invalid" };
+  }
+  return { compatible, checked: true, configured: true, state: "unknown" };
+}
+function safeRealpathSync(target) {
+  try {
+    return realpathSync(target);
+  } catch {
+    return null;
   }
-  return { checked: true, configured: true, state: "unknown" };
 }
 function readConfigList(config, pathParts) {
   const value = readConfigValue(config, pathParts);
@@ -8118,6 +8135,7 @@ Options:
     console.log(`Usage: inline-hermes ${topic} [options]
 
 ${topic === "doctor" ? "Diagnose" : "Inspect"} the installed Inline plugin, sidecar integrity, and Node runtime.
+${topic === "doctor" ? "Doctor also requires a successful Hermes loader compatibility check and credential probe." : ""}
 
 Options:
   --hermes-home <path>  Hermes home directory. Defaults to HERMES_HOME or ~/.hermes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inline-chat/hermes-agent-adapter",
-  "version": "0.0.18-alpha.0",
+  "version": "0.0.18",
   "description": "Hermes Agent platform adapter for Inline, with a native Python plugin and bundled Inline realtime sidecar.",
   "license": "Apache-2.0",
   "type": "module",
@@ -62,7 +62,7 @@
     "check": "bun run typecheck && bun run lint && bun run test"
   },
   "dependencies": {
-    "@inline-chat/realtime-sdk": "0.0.19-alpha.0",
+    "@inline-chat/realtime-sdk": "0.0.18",
     "yaml": "2.9.0"
   },
   "devDependencies": {
@@ -81,8 +81,8 @@
       "npmSpec": "@inline-chat/hermes-agent-adapter"
     },
     "machineSetupProtocol": 1,
-    "minHermesVersion": "0.17.0",
-    "testedHermesVersion": "0.21.0",
-    "testedHermesCommit": "29112bef"
+    "minHermesVersion": "0.21.4",
+    "testedHermesVersion": "0.21.5",
+    "testedHermesCommit": "f97608f178d1ffeca59860195ab7da295f7c8e5f"
   }
 }

package/plugin/inline/adapter.py

@@ -45,6 +45,7 @@ from gateway.platforms.base import (
     SendResult,
     cache_audio_from_url,
     cache_image_from_url,
+    safe_url_for_log,
 )
 from gateway.platforms.helpers import strip_markdown
 
@@ -575,7 +576,7 @@ def _normalize_inline_command_description(raw: str) -> str:
 
 
 def _inline_menu_commands(max_commands: int = _INLINE_COMMAND_LIMIT) -> tuple[List[Dict[str, Any]], int]:
-    from hermes_cli.commands import telegram_menu_commands
+    from hermes_cli.commands_platforms import telegram_menu_commands
 
     command_specs = _inline_command_specs()
     local_commands = [
@@ -1209,7 +1210,7 @@ class InlineAdapter(BasePlatformAdapter):
 
         try:
             from gateway.run import _load_gateway_config
-            from hermes_cli.model_switch import list_picker_providers
+            from hermes_cli.model_switch_providers import list_picker_providers
 
             cfg = _load_gateway_config() or {}
             model_cfg = cfg.get("model") if isinstance(cfg, dict) else {}
@@ -3001,16 +3002,15 @@ class InlineAdapter(BasePlatformAdapter):
                 return await cache_audio_from_url(url, ext=_extension_for_media(mime, file_name, ".ogg"))
             return await self._download_inline_media_url(url, mime=mime, file_name=file_name)
         except Exception as exc:
-            logger.warning("[inline] failed to cache %s attachment: %s", kind, exc)
-            return url
+            logger.warning("[inline] failed to cache %s attachment (%s)", kind, type(exc).__name__)
+            # Never pass an unvalidated URL on to Hermes for another fetch.
+            return None
 
     async def _download_inline_media_url(self, url: str, *, mime: str, file_name: Optional[str]) -> str:
-        try:
-            from tools.url_safety import is_safe_url, safe_url_for_log
-            if not is_safe_url(url):
-                raise ValueError(f"blocked unsafe media URL: {safe_url_for_log(url)}")
-        except ImportError:
-            pass
+        # A missing host safety helper must stop the download, never bypass it.
+        from tools.url_safety import is_safe_url
+        if not is_safe_url(url):
+            raise ValueError(f"blocked unsafe media URL: {safe_url_for_log(url)}")
         _MEDIA_CACHE_DIR.mkdir(parents=True, exist_ok=True)
         name = _safe_media_file_name(url=url, mime=mime, file_name=file_name)
         path = _MEDIA_CACHE_DIR / name
@@ -4230,7 +4230,7 @@ class InlineAdapter(BasePlatformAdapter):
         label = group_id
         member_slugs: list[str] = []
         try:
-            from hermes_cli.models import PROVIDER_GROUPS
+            from hermes_cli.models_catalog_static import PROVIDER_GROUPS
             label, _desc, members = PROVIDER_GROUPS.get(group_id, (group_id, "", []))
             member_slugs = [str(member) for member in members]
         except Exception:
@@ -4686,7 +4686,6 @@ class InlineAdapter(BasePlatformAdapter):
 
     async def send_image(self, chat_id: str, image_url: str, caption: Optional[str] = None, reply_to: Optional[str] = None, metadata: Optional[Dict[str, Any]] = None) -> SendResult:
         try:
-            from gateway.platforms.base import cache_image_from_url
             local_path = await cache_image_from_url(image_url)
             return await self.send_image_file(chat_id, local_path, caption, reply_to, metadata)
         except Exception:
@@ -4694,7 +4693,6 @@ class InlineAdapter(BasePlatformAdapter):
 
     async def send_animation(self, chat_id: str, animation_url: str, caption: Optional[str] = None, reply_to: Optional[str] = None, metadata: Optional[Dict[str, Any]] = None) -> SendResult:
         try:
-            from gateway.platforms.base import cache_image_from_url
             local_path = await cache_image_from_url(animation_url, ext=".gif")
             return await self.send_document(chat_id, local_path, caption, file_name=Path(local_path).name, reply_to=reply_to, metadata=metadata)
         except Exception:
@@ -4982,7 +4980,7 @@ class InlineAdapter(BasePlatformAdapter):
         }
         actions: list[Dict[str, str]] = []
         try:
-            from hermes_cli.models import group_providers
+            from hermes_cli.models_catalog_static import group_providers
             grouped = group_providers(list(by_slug.keys()))
         except Exception:
             grouped = [{"kind": "single", "slug": slug} for slug in by_slug.keys()]

package/plugin/inline/cli.py

@@ -27,7 +27,7 @@ _CLI_INSTALL_URL = "https://inline.chat/cli/install.sh"
 _MAX_TOKEN_BYTES = 16 * 1024
 _MAX_PROBE_RESPONSE_BYTES = 64 * 1024
 _MACHINE_SETUP_PROTOCOL_VERSION = 1
-_PROBE_USER_AGENT = "inline-hermes-agent-adapter/0.0.18-alpha.0"
+_PROBE_USER_AGENT = "inline-hermes-agent-adapter/0.0.18"
 _ENV_REFERENCE_RE = re.compile(r"^\$\{([A-Za-z_][A-Za-z0-9_]*)\}$")
 
 
@@ -362,6 +362,7 @@ def register_cli(parser: argparse.ArgumentParser) -> None:
     setup.add_argument("--json", action="store_true", help="Print compact machine-readable setup output.")
     status = subs.add_parser("status", help="Show Inline adapter status", description="Check Inline configuration, sidecar, Node runtime, and optional credential identity.")
     status.add_argument("--json", action="store_true", help="Print compact machine-readable status output.")
+    status.add_argument("--check-compatibility", action="store_true", help="Validate the installed plugin with the Hermes loader.")
     status.add_argument("--probe", action="store_true", help="Verify the configured Inline credential and bot identity.")
     parser.set_defaults(func=dispatch)
 
@@ -453,7 +454,9 @@ def _status(args) -> int:
         and sidecar["size"] > 0
     )
     runtime_usable = bool(sidecar["ok"] and node["ok"])
-    ready = runtime_usable and configured and (not probe_requested or bool(probe and probe.get("ok")))
+    compatibility = _compatibility_status() if getattr(args, "check_compatibility", False) else None
+    compatible = compatibility is None or compatibility["ok"]
+    ready = compatible and runtime_usable and configured and (not probe_requested or bool(probe and probe.get("ok")))
     result = {
         "ok": ready,
         "ready": ready,
@@ -467,11 +470,14 @@ def _status(args) -> int:
         "node": node,
         "probeRequested": probe_requested,
         "gateway": _gateway_status(),
+        **({"compatibility": compatibility} if compatibility is not None else {}),
         **({"probe": probe} if probe is not None else {}),
     }
     if getattr(args, "json", False):
         print(json.dumps(result, separators=(",", ":")))
     else:
+        if compatibility is not None:
+            print(f"Hermes plugin compatible: {'yes' if compatibility['ok'] else 'no'} ({compatibility['reason']})")
         print(f"Inline configured: {'yes' if configured else 'no'}")
         print(f"Inline sidecar usable: {'yes' if sidecar['ok'] else 'no'}")
         print(f"Node available: {_node_status_text(node)}")
@@ -481,7 +487,46 @@ def _status(args) -> int:
         elif probe_requested:
             print(f"Inline credential probe: {'ready' if ready else 'failed'}")
         print("Advanced diagnostics: inline-hermes doctor --json")
-    return 0 if runtime_usable and (not probe_requested or ready) else 1
+    return 0 if compatible and runtime_usable and (not probe_requested or ready) else 1
+
+
+def _compatibility_status() -> dict:
+    """Attest only a successful host load of this exact installed plugin.
+
+    Never return host exception text: configuration or import errors may contain
+    credentials. A missing diagnostic API is an inconclusive check, not success.
+    """
+    unavailable = {"ok": False, "reason": "loader_unavailable"}
+    try:
+        from hermes_cli.plugins import get_plugin_manager
+
+        manager = get_plugin_manager()
+        manager.discover_and_load()
+        plugin_dir = Path(__file__).resolve().parent
+        loaded = next((
+            item for item in manager._plugins.values()
+            if item.manifest.name == "inline-platform"
+            and Path(item.manifest.path).resolve() == plugin_dir
+        ), None)
+        if loaded is None:
+            return {"ok": False, "reason": "plugin_not_loaded"}
+        if not loaded.enabled or loaded.error or loaded.module is None:
+            return {"ok": False, "reason": "plugin_load_failed"}
+        if "inline" not in loaded.tools_registered:
+            return {"ok": False, "reason": "tool_not_registered"}
+        # Older supported Hermes releases predate the moved-import scanner.
+        # Their loader still checks real imports and plugin registration above.
+        try:
+            from hermes_cli.plugin_compat import plugin_hits
+        except ModuleNotFoundError as error:
+            if error.name != "hermes_cli.plugin_compat":
+                raise
+        else:
+            if plugin_hits(loaded.manifest):
+                return {"ok": False, "reason": "deprecated_imports"}
+        return {"ok": True, "reason": "loaded", "pluginPath": str(plugin_dir)}
+    except Exception:
+        return unavailable
 
 
 def _gateway_status() -> dict:

package/plugin/inline/plugin.yaml

@@ -1,7 +1,10 @@
 name: inline-platform
 label: Inline
 kind: platform
-version: 0.0.18-alpha.0
+provides_tools:
+  - inline
+version: 0.0.18
+requires_hermes: ">=0.21.4"
 description: >
   Inline platform adapter for Hermes Agent. The adapter runs as a native
   Hermes Python platform plugin and supervises a local Node sidecar that uses