@inline-chat/hermes-agent-adapter 0.0.8 → 0.0.10

package/README.md

@@ -10,7 +10,7 @@ Implemented Hermes-native surfaces:
 
 - realtime inbound messages, replies, and action callbacks
 - outbound text, markdown, opt-in edit-message streaming, deletes, typing, media uploads, and reply threads
-- Discord-style native Hermes `inline` tool for bounded chat/message/history/search/thread, reaction, and pin actions
+- Discord-style native Hermes `inline` tool for bounded chat/message/history/search/thread, reaction, pin, and agent-authored button-message actions
 - clarify prompts, command approvals, slash confirmations, and model picker buttons
 - Hermes slash commands synced into Inline's native `/` bot command menu
 - DM/group access policy controls compatible with Hermes gateway allowlists
@@ -27,12 +27,13 @@ Supported:
 - Realtime inbound messages, catch-up, replies to bot messages, and action callbacks.
 - Outbound text, Markdown parsing, opt-in edit-message streaming, long-message splitting, edits, deletes, typing, and presence.
 - Inline reply-thread routing, explicit-request auto mode, `/threads` controls, explicit `/follow` and `/unfollow` dialog relevance controls, parent chat metadata, parent/thread prompt fallback, and thread-specific skill bindings.
-- Native Hermes `inline` tool for current-chat/thread reads, bounded history and search, exact message lookup, editing/deleting bot-owned messages, reactions, pin/unpin/list pins, reply-thread creation, top-level thread/chat creation outside the current conversation, and avatar presence/status.
+- Native Hermes `inline` tool for current-chat/thread reads, bounded history and search, exact message lookup, button-message sends, editing/deleting bot-owned messages, reactions, pin/unpin/list pins, reply-thread creation, top-level thread/chat creation outside the current conversation, and avatar presence/status.
 - Cached, privacy-safe sender names/usernames plus chat/thread IDs, selective reply/thread/observed context, and parent-thread context, with first-name/username Markdown mention guidance and current chat/thread links.
 - OpenClaw-style entity summaries for live turns and tool-fetched history, including mentions, text links, thread links, thread-title links, code/pre blocks, bot commands, and group mentions as untrusted Hermes context.
 - DM and group policies, user allowlists, group sender allowlists, mention requirements, strict mention mode, allowed chats, and free-response chats.
 - Native Inline `/` command-menu sync for Hermes slash commands, including `/threads`, `/follow`, `/unfollow`, `/inline_update`, and `/update`; typed slash commands continue to work even if menu sync is disabled or rejected.
 - Inline-native buttons for clarify prompts, command approvals, slash confirmations, and model selection.
+- Agent-created `send_message`/`edit_message` button rows with opaque callback data. A callback is acknowledged immediately and becomes a normal Hermes turn naming the source message and exact action fields. The normal response edits that source message and clears omitted buttons; the agent can instead call `edit_message` with replacement buttons and finish with `NO_REPLY` so the explicit edit remains authoritative.
 - Outbound local photo, video, voice, and document uploads with configurable size caps.
 - Inbound photo, video, voice, and document summaries, with URL-backed media cached locally for Hermes when available.
 - Reactions on bot messages, plus opt-in lifecycle/system events as synthetic Hermes messages.
@@ -43,7 +44,7 @@ Unsupported or intentionally limited:
 
 - Multiple Inline accounts in one Hermes process. Run separate Hermes instances for separate tokens.
 - Inline member, space, and admin tools beyond bounded current-chat/thread message access.
-- Full Inline rich-text span conversion. Outbound formatting uses Inline Markdown parsing; rich entities are summarized for the agent instead of converted into Hermes-specific spans.
+- Full Inline rich-text span conversion. Outbound formatting uses [Inline's bounded Markdown surface](../docs/markdown.md); rich entities are summarized for the agent instead of converted into Hermes-specific spans. Parsing is enabled by default, while disabling it preserves the supplied syntax literally.
 - Native animated draft streaming. Inline can stream by sending one preview message and editing it, but this edit-based streaming path is off by default like Discord and Slack.
 - Ephemeral in-channel private replies. Private notices are sent as DMs when a user id is available.
 - Live voice sessions or calls. Voice file messages are supported, but realtime audio is not.
@@ -146,7 +147,7 @@ uv run ./hermes plugins list --plain --no-bundled
 Expected local output includes:
 
 ```text
-enabled      user     0.0.8    inline-platform
+enabled      user     0.0.10   inline-platform
 ```
 
 ## Update Or Reinstall
@@ -169,10 +170,10 @@ mismatch, rerun the same command after rebuilding or upgrading the package.
 
 - Hermes Agent: requires the external user plugin registry and native platform
   plugin loader available in Hermes Agent `0.17.x`. This package was validated
-  against Hermes Agent `0.20.0` from source commit `3c27eb6`.
+  against Hermes Agent `0.20.6` from source commit `31e41eed`.
 - Node.js: `>=20` is required for the bundled sidecar. Hermes-managed Node 22,
   system Node, or an explicit `INLINE_NODE_BIN` path all work.
-- Inline transport: the sidecar uses `@inline-chat/realtime-sdk@0.0.15` and is
+- Inline transport: the sidecar uses `@inline-chat/realtime-sdk@0.0.16` and is
   bundled into the npm package, so Hermes startup does not run `npm install`.
 - Live sends require a valid Inline user or bot token in `INLINE_TOKEN`,
   `INLINE_BOT_TOKEN`, `platforms.inline.token`, or `inline.token`.
@@ -293,7 +294,7 @@ Access control follows Hermes' native platform model:
 | `INLINE_SETTINGS_PATH` | JSON settings file for per-chat `/threads` overrides. `/threads` shows native Auto/On/Off buttons; `reset` clears the chat override back to the global default. Defaults next to `INLINE_STATE_PATH`; `.env`-like paths are refused. |
 | `INLINE_SYSTEM_EVENTS` | Delivers Inline lifecycle events such as edits, deletes, and participant changes as synthetic messages. Defaults to `false`. Reactions on bot messages are always delivered. |
 | `INLINE_MENTION_PATTERNS` | JSON list, comma-separated, or newline-separated regex patterns for group wake words. |
-| `INLINE_PARSE_MARKDOWN` | Controls whether outbound Hermes Markdown is parsed by Inline. Defaults to `true`. |
+| `INLINE_PARSE_MARKDOWN` | Controls whether supported outbound Inline Markdown is parsed. Defaults to `true`; `false` preserves the supplied syntax literally. |
 | `INLINE_SYNC_COMMANDS` | Syncs Hermes slash commands into Inline's native `/` bot command menu on gateway connect. Defaults to `true`. |
 | `INLINE_COMMAND_LIMIT` | Caps native Inline bot command sync. Must be `1` through `100`; defaults to `100`. |
 | `INLINE_MEDIA_MAX_MB` | Maximum inbound media download size for URL-backed Inline attachments. Defaults to `25`. |
@@ -342,6 +343,11 @@ the clicking actor to pass an explicit Inline or global Hermes allowlist, or
 `INLINE_ALLOW_ALL_USERS=true` / `GATEWAY_ALLOW_ALL_USERS=true`. This includes
 model-picker callbacks. The stricter callback gate prevents group-visible
 buttons from becoming a bypass when message intake is otherwise `open`.
+Adapter-owned controls use `system:` action IDs and stay in these deterministic
+handlers. Agent-authored callbacks use `agent:` IDs and follow the ordinary
+message intake policy because they are conversational input, not approval or
+gateway-control input. Callback data is always presented to the model as
+untrusted data and cannot become a Hermes slash command.
 
 On gateway startup, the adapter derives the Inline `/` menu from Hermes'
 declarative local command registry plus Hermes' central slash-command registry,

package/dist/install.js

@@ -7009,6 +7009,10 @@ var sensitiveUrlParams = new Set([
   "key",
   "token"
 ]);
+var botSettingsEventKinds = new Set([
+  "bot.chatSettings.request",
+  "bot.chatSettings.item.invoke"
+]);
 function redactText(value, secrets) {
   let text = value instanceof Error ? value.message : String(value);
   for (const secret of secrets) {
@@ -7044,6 +7048,8 @@ function redactUrl(value) {
 var defaultPluginId = "inline";
 var pluginEnableKey = "inline-platform";
 var minNodeMajor = 20;
+var hermesMachineTimeoutMs = 15000;
+var hermesMachineMaxBytes = 256 * 1024;
 async function main(argv = process.argv.slice(2)) {
   const opts = parseArgs(argv);
   if (opts.command === "help") {
@@ -7147,7 +7153,7 @@ async function inspectInstall(params) {
   const sourceSidecar = await inspectSidecar(params.source);
   const targetSidecar = targetExists ? await inspectSidecar(params.target) : null;
   const node = await inspectNode();
-  const activation = await inspectActivation(params.opts.hermesHome, params.target);
+  const activation = await inspectActivation(params.opts.hermesHome, params.target, params.opts.command === "doctor");
   const issues = [];
   const warnings = [];
   const sidecarMatches = Boolean(targetSidecar?.exists && sourceSidecar.sha256 && targetSidecar.sha256 && sourceSidecar.sha256 === targetSidecar.sha256);
@@ -7171,11 +7177,33 @@ async function inspectInstall(params) {
   if (params.opts.command === "doctor" && !activation.pluginEnabled) {
     issues.push(`Hermes plugin '${pluginEnableKey}' is not enabled. Run: hermes plugins enable ${pluginEnableKey}`);
   }
-  if (targetExists && activation.pluginEnabled && !activation.platformConfigured && !activation.tokenConfigured) {
-    warnings.push("Inline platform config is not enabled. Add platforms.inline.enabled: true and set INLINE_TOKEN/INLINE_BOT_TOKEN in the gateway environment, or set platforms.inline.token/inline.token in Hermes config");
+  if (targetExists && activation.pluginEnabled && !activation.platformConfigured && activation.credentialState === "not_configured") {
+    const message = "Inline platform config is not enabled. Add platforms.inline.enabled: true and set INLINE_TOKEN/INLINE_BOT_TOKEN in the gateway environment, or set platforms.inline.token/inline.token in Hermes config";
+    if (params.opts.command === "doctor")
+      issues.push(message);
+    else
+      warnings.push(message);
+  }
+  if (targetExists && activation.pluginEnabled && activation.credentialState === "not_configured") {
+    const message = "Hermes reports that no Inline credential is configured; run `hermes inline setup`";
+    if (params.opts.command === "doctor")
+      issues.push(message);
+    else
+      warnings.push(message);
+  }
+  if (targetExists && activation.pluginEnabled && activation.credentialState === "invalid") {
+    const message = "Hermes found the Inline credential, but Inline rejected it; reconfigure the credential";
+    if (params.opts.command === "doctor")
+      issues.push(message);
+    else
+      warnings.push(message);
   }
-  if (targetExists && activation.pluginEnabled && !activation.tokenConfigured) {
-    warnings.push("No Inline token was detected in INLINE_TOKEN, INLINE_BOT_TOKEN, the Hermes credential store, or Hermes Inline config; live Inline realtime checks will not connect");
+  if (targetExists && activation.pluginEnabled && activation.credentialState === "unknown" && activation.hermesCredentialStoreChecked) {
+    const message = "Hermes found the Inline credential, but the requested verification was inconclusive";
+    if (params.opts.command === "doctor")
+      issues.push(message);
+    else
+      warnings.push(message);
   }
   if (targetExists && !activation.installOwnershipAligned) {
     warnings.push("Installed plugin ownership differs from the Hermes home owner; internal /inline_update may fail until inline-hermes install --force repairs it");
@@ -7474,6 +7502,7 @@ async function hasPluginFiles(dir) {
     "plugin.yaml",
     "__init__.py",
     "adapter.py",
+    "message_actions.py",
     path.join("sidecar", "index.mjs")
   ];
   const checks = files.map((file) => exists(path.join(dir, file)));
@@ -7538,7 +7567,7 @@ async function inspectNode() {
     error
   };
 }
-async function inspectActivation(hermesHome, target) {
+async function inspectActivation(hermesHome, target, probeCredential) {
   const configPath = path.join(hermesHome, "config.yaml");
   let config = null;
   let configExists = false;
@@ -7550,7 +7579,9 @@ async function inspectActivation(hermesHome, target) {
   }
   const tokenPresent = Boolean(process.env.INLINE_TOKEN || process.env.INLINE_BOT_TOKEN);
   const configTokenConfigured = configTokenIsConfigured(config, ["platforms", defaultPluginId, "token"]) || configTokenIsConfigured(config, [defaultPluginId, "token"]);
-  const hermesCredentialStore = inspectHermesCredentialStore();
+  const machineCredential = inspectHermesCredential(hermesHome, probeCredential);
+  const fallbackConfigured = tokenPresent || configTokenConfigured;
+  const credentialState = (machineCredential.state === "unknown" || machineCredential.state === "not_configured") && fallbackConfigured ? "configured_unverified" : machineCredential.state;
   const installOwnershipAligned = await inspectInstallOwnership(hermesHome, target);
   return {
     configPath,
@@ -7558,10 +7589,13 @@ async function inspectActivation(hermesHome, target) {
     pluginEnabled: readConfigList(config, ["plugins", "enabled"]).includes(pluginEnableKey),
     platformConfigured: readConfigBoolean(config, ["platforms", defaultPluginId, "enabled"]) || readConfigBoolean(config, [defaultPluginId, "enabled"]),
     configTokenConfigured,
-    hermesCredentialStoreChecked: hermesCredentialStore.checked,
-    hermesCredentialStoreTokenConfigured: hermesCredentialStore.tokenConfigured,
+    hermesCredentialStoreChecked: machineCredential.checked,
+    hermesCredentialStoreTokenConfigured: machineCredential.configured === true,
+    credentialState,
+    ...machineCredential.botUserId ? { credentialBotUserId: machineCredential.botUserId } : {},
+    ...machineCredential.botUsername ? { credentialBotUsername: machineCredential.botUsername } : {},
     tokenPresent,
-    tokenConfigured: tokenPresent || configTokenConfigured || hermesCredentialStore.tokenConfigured,
+    tokenConfigured: machineCredential.configured === false ? fallbackConfigured : machineCredential.configured ?? fallbackConfigured,
     installOwnershipAligned
   };
 }
@@ -7615,40 +7649,56 @@ async function chownTree(target, uid, gid) {
   }
   await chown(target, uid, gid);
 }
-function inspectHermesCredentialStore() {
-  const configuredPython = normalizeToken(process.env.INLINE_HERMES_PYTHON_BIN);
-  const candidates = configuredPython ? [configuredPython] : hermesPythonCandidates();
-  const probe = [
-    "from hermes_cli import gateway",
-    "configured = bool(gateway.get_env_value('INLINE_TOKEN') or gateway.get_env_value('INLINE_BOT_TOKEN'))",
-    "print('__INLINE_HERMES_TOKEN_CONFIGURED__=' + ('1' if configured else '0'))"
-  ].join("; ");
-  for (const candidate of candidates) {
-    const result = spawnSync(candidate, ["-c", probe], {
-      encoding: "utf8",
-      timeout: 2000,
-      maxBuffer: 64 * 1024
-    });
-    if (result.status !== 0)
-      continue;
-    const match = /^__INLINE_HERMES_TOKEN_CONFIGURED__=([01])$/m.exec(result.stdout || "");
-    if (match)
-      return { checked: true, tokenConfigured: match[1] === "1" };
+function inspectHermesCredential(hermesHome, probe) {
+  const executable = normalizeToken(process.env.INLINE_HERMES_BIN) || "hermes";
+  const args = ["inline", "status", "--json", ...probe ? ["--probe"] : []];
+  const result = spawnSync(executable, args, {
+    encoding: "utf8",
+    timeout: hermesMachineTimeoutMs,
+    maxBuffer: hermesMachineMaxBytes,
+    env: { ...process.env, HERMES_HOME: hermesHome }
+  });
+  const raw = typeof result.stdout === "string" ? result.stdout.trim() : "";
+  if (!raw || Buffer.byteLength(raw) > hermesMachineMaxBytes) {
+    return { checked: false, configured: null, state: "unknown" };
   }
-  return { checked: false, tokenConfigured: false };
-}
-function hermesPythonCandidates() {
-  const candidates = ["/opt/hermes/.venv/bin/python"];
-  const hermesCommand = spawnSync("which", ["hermes"], { encoding: "utf8", timeout: 1000 });
-  const hermesPath = normalizeToken(hermesCommand.stdout);
-  if (hermesCommand.status === 0 && hermesPath) {
-    try {
-      const binDir = path.dirname(realpathSync(hermesPath));
-      candidates.push(path.join(binDir, "python"), path.join(binDir, "python3"));
-    } catch {}
+  let payload;
+  try {
+    payload = JSON.parse(raw);
+  } catch {
+    return { checked: false, configured: null, state: "unknown" };
+  }
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    return { checked: false, configured: null, state: "unknown" };
+  }
+  const record = payload;
+  if (record.action !== "inline.status" || typeof record.setupProtocolVersion !== "number" || record.setupProtocolVersion < 1 || typeof record.configured !== "boolean") {
+    return { checked: false, configured: null, state: "unknown" };
+  }
+  if (!record.configured) {
+    return { checked: true, configured: false, state: "not_configured" };
+  }
+  if (!probe) {
+    return { checked: true, configured: true, state: "configured_unverified" };
+  }
+  const probeResult = record.probe && typeof record.probe === "object" && !Array.isArray(record.probe) ? record.probe : null;
+  if (probeResult?.ok === true) {
+    const botUserId = typeof probeResult.botUserId === "string" && /^[1-9]\d*$/.test(probeResult.botUserId) ? probeResult.botUserId : undefined;
+    if (!botUserId)
+      return { checked: false, configured: true, state: "unknown" };
+    const botUsername = typeof probeResult.botUsername === "string" && probeResult.botUsername.trim() ? probeResult.botUsername.trim() : undefined;
+    return {
+      checked: true,
+      configured: true,
+      state: "verified",
+      botUserId,
+      ...botUsername ? { botUsername } : {}
+    };
+  }
+  if (probeResult?.errorKind === "invalid_credential") {
+    return { checked: true, configured: true, state: "invalid" };
   }
-  candidates.push("python3", "python");
-  return [...new Set(candidates)];
+  return { checked: true, configured: true, state: "unknown" };
 }
 function readConfigList(config, pathParts) {
   const value = readConfigValue(config, pathParts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inline-chat/hermes-agent-adapter",
-  "version": "0.0.8",
+  "version": "0.0.10",
   "description": "Hermes Agent platform adapter for Inline, with a native Python plugin and bundled Inline realtime sidecar.",
   "license": "Apache-2.0",
   "type": "module",
@@ -31,6 +31,7 @@
     "plugin/inline/__init__.py",
     "plugin/inline/adapter.py",
     "plugin/inline/cli.py",
+    "plugin/inline/message_actions.py",
     "plugin/inline/plugin.yaml",
     "plugin/inline/tools.py",
     "plugin/inline/sidecar/index.mjs"
@@ -60,7 +61,7 @@
     "check": "bun run typecheck && bun run lint && bun run test"
   },
   "dependencies": {
-    "@inline-chat/realtime-sdk": "0.0.15",
+    "@inline-chat/realtime-sdk": "0.0.16",
     "yaml": "2.9.0"
   },
   "devDependencies": {
@@ -80,7 +81,7 @@
     },
     "machineSetupProtocol": 1,
     "minHermesVersion": "0.17.0",
-    "testedHermesVersion": "0.20.0",
-    "testedHermesCommit": "3c27eb6"
+    "testedHermesVersion": "0.20.6",
+    "testedHermesCommit": "31e41eed"
   }
 }