@jinn-network/client 0.1.5 → 0.1.6-canary.107ea271

package/dist/harnesses/impls/hermes-agent/bootstrap.js

@@ -0,0 +1,231 @@
+// client/src/harnesses/impls/hermes-agent/bootstrap.ts
+import { cpSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parse as yamlParse, stringify as yamlStringify } from 'yaml';
+import { hermesConfigFromSolverPlugins, } from './config-builder.js';
+/**
+ * Toolset allowlist for Jinn-run Hermes sessions.
+ *
+ * Hermes's default-ON toolset surface is broader than Claude Code's built-ins
+ * and includes footguns under unattended automation (`messaging` can send
+ * messages; `cronjob` can schedule things; `computer_use`, `browser`,
+ * `tts`/`vision`/`image_gen` are out of scope for text code-issue tasks). We
+ * pin an explicit allowlist for `hermes-cli` (the platform Jinn spawns Hermes
+ * as); operators who want to expand it for a Jinn task can request a daemon
+ * config option later — they can NOT widen the allowlist by editing their
+ * `~/.hermes/config.yaml`'s `platform_toolsets.hermes-cli` because Jinn
+ * deliberately replaces that key (other `platform_toolsets.*` entries — e.g.
+ * for `hermes-telegram` — pass through unchanged).
+ */
+const TOOLSET_ALLOWLIST = [
+    'terminal',
+    'file',
+    'web',
+    'skills',
+    'memory',
+    'session_search',
+    'todo',
+    'code_execution',
+];
+/**
+ * Files copied verbatim from the operator's real Hermes home into the per-Task
+ * `$HERMES_HOME`. Hermes resolves OAuth creds from `$HERMES_HOME/auth/...` and
+ * pooled creds from `$HERMES_HOME/auth.json` with NO real-home fallback, so a
+ * fresh per-Task home (which the freeze contract requires) would otherwise
+ * have no credentials and Hermes would fail with "No … credentials found."
+ *
+ * `bin/` carries Hermes-managed binaries — most importantly `bin/tirith`, the
+ * shell-command security scanner Hermes runs before every `terminal_tool`
+ * invocation. Hermes resolves it from `$HERMES_HOME/bin/tirith` and falls back
+ * to an auto-download from `github.com/sheeki03/tirith/releases/latest` on
+ * first use. Without seeding, every per-Task run pays the multi-MB download
+ * cost on its first shell command — long enough to blow the harness budget.
+ *
+ * Hermes may refresh OAuth access tokens mid-task. The HermesHarness excludes
+ * these runtime-only files from the daemon state digest while still fencing the
+ * learning surface (memories/, skills/, sessions/, and ordinary files). The
+ * binary exception is intentionally limited to Hermes's managed `bin/tirith`
+ * security scanner instead of the whole `bin/` tree.
+ */
+const OPERATOR_STATE_TO_SEED = ['auth', 'auth.json', 'bin'];
+function seedOperatorState(hermesHome, seedFrom) {
+    if (seedFrom === hermesHome || !existsSync(seedFrom))
+        return;
+    for (const name of OPERATOR_STATE_TO_SEED) {
+        const src = join(seedFrom, name);
+        const dst = join(hermesHome, name);
+        if (existsSync(src) && !existsSync(dst)) {
+            cpSync(src, dst, { recursive: true });
+        }
+    }
+}
+// ────────────────────────────────────────────────────────────────────────────
+// Operator config.yaml inheritance — the merge contract.
+// ────────────────────────────────────────────────────────────────────────────
+//
+// Goal: anything the operator set in `~/.hermes/config.yaml` flows into the
+// per-Task config, EXCEPT for the small set of keys Jinn must own per Task.
+// This is the comprehensive form of operator-config inheritance — it replaces
+// the prior "fresh per-Task config with hand-written Jinn fields only" path,
+// which was a whack-a-mole source (auth/, then .env, then max_tokens; each
+// real-binary run surfaced another orphaned setting). With the merge, ANY
+// operator setting (model.max_tokens, model.context_length, model.base_url,
+// provider_routing, openrouter.response_cache, agent.iteration_budget,
+// compression.threshold, auxiliary.*, display.*, voice.*, security.*,
+// approvals.*, delegation.*, web.*, custom providers: overrides, etc.) just
+// flows through.
+//
+// Jinn-managed keys (per-Task authoritative; Jinn writes these every Task):
+//   - model.default        — if a daemon/SolverNet override was provided
+//   - model.provider       — if a daemon/SolverNet override was provided
+//   - terminal.backend     — forced to `local` (the per-Task workingDir is a
+//                            host filesystem path; remote backends would need
+//                            additional setup Jinn doesn't yet do)
+//   - terminal.cwd         — the per-Task workingDir
+//   - platform_toolsets['hermes-cli']   — the Jinn allowlist (replaces any
+//                            operator value; other platforms pass through)
+//   - mcp_servers.<name>   — operator's MCP servers preserved; Jinn adds its
+//                            SolverPlugin MCP servers; Jinn wins on collision
+//   - skills.external_dirs — operator's dirs preserved; Jinn appends the
+//                            SolverPlugin skill dirs
+//
+// Everything else from the operator's config.yaml passes through unchanged.
+//
+// Operator-set keys that DO inherit and matter for budget-capped providers:
+//   - model.max_tokens     — OpenRouter pre-bills on max_tokens; operators
+//                            with low monthly caps must lower this to fit.
+//   - model.context_length — total context window cap.
+//   - provider_routing     — OpenRouter routing knobs (sort by price, etc.).
+//   - providers.<name>     — per-provider timeout / model-specific overrides.
+function isObj(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function readOperatorConfigYaml(seedFrom) {
+    const path = join(seedFrom, 'config.yaml');
+    if (!existsSync(path))
+        return {};
+    try {
+        const text = readFileSync(path, 'utf8');
+        const parsed = yamlParse(text);
+        return isObj(parsed) ? parsed : {};
+    }
+    catch {
+        // Operator config is unparseable — proceed with Jinn-only. Hermes would
+        // also fail to read it, so this isn't hiding any real signal.
+        return {};
+    }
+}
+function mergePerTaskConfig(operator, jinn, opts) {
+    const out = { ...operator };
+    // model: deep-merge — operator's max_tokens/context_length/base_url/
+    // provider_routing/etc. preserved; Jinn overrides default+provider only if
+    // specified by daemon/SolverNet config.
+    if (opts.model || opts.provider || isObj(out.model)) {
+        const opModel = isObj(out.model) ? out.model : {};
+        const jinnModel = {};
+        if (opts.model)
+            jinnModel.default = opts.model;
+        if (opts.provider)
+            jinnModel.provider = opts.provider;
+        out.model = { ...opModel, ...jinnModel };
+    }
+    // terminal: Jinn forces backend + cwd; operator's timeout / lifetime /
+    // sudo_password / docker_* fields preserved (the docker_* fields are inert
+    // under `backend: local`, which is fine).
+    const opTerminal = isObj(out.terminal) ? out.terminal : {};
+    out.terminal = {
+        ...opTerminal,
+        backend: 'local',
+        cwd: opts.workingDir,
+    };
+    // platform_toolsets: Jinn enforces its allowlist for the `hermes-cli`
+    // platform (the platform Jinn spawns Hermes as); other platforms
+    // (hermes-telegram, etc.) pass through unchanged.
+    const opPlatformToolsets = isObj(out.platform_toolsets) ? out.platform_toolsets : {};
+    out.platform_toolsets = {
+        ...opPlatformToolsets,
+        'hermes-cli': [...TOOLSET_ALLOWLIST],
+    };
+    // mcp_servers: operator's MCP servers preserved; Jinn adds its SolverPlugin
+    // MCP servers via key-merge (Jinn wins on name collision — the SolverPlugin
+    // MCP definition is the authority on what `jinn-client` etc. mean).
+    if (jinn.mcp_servers && Object.keys(jinn.mcp_servers).length > 0) {
+        const opMcp = isObj(out.mcp_servers) ? out.mcp_servers : {};
+        out.mcp_servers = { ...opMcp, ...jinn.mcp_servers };
+    }
+    // skills.external_dirs: operator's dirs preserved; Jinn appends SolverPlugin
+    // skill dirs. Duplicates de-duped (preserves order — operator first).
+    if (jinn.skills?.external_dirs && jinn.skills.external_dirs.length > 0) {
+        const opSkills = isObj(out.skills) ? out.skills : {};
+        const opDirs = Array.isArray(opSkills.external_dirs)
+            ? opSkills.external_dirs.filter((d) => typeof d === 'string')
+            : [];
+        const merged = [...opDirs];
+        for (const d of jinn.skills.external_dirs) {
+            if (!merged.includes(d))
+                merged.push(d);
+        }
+        out.skills = { ...opSkills, external_dirs: merged };
+    }
+    return out;
+}
+function snippetToEnvFile(env) {
+    const lines = [];
+    lines.push(`DAEMON_API_URL=${env.daemonApiUrl}`);
+    lines.push(`DAEMON_API_TOKEN=${env.daemonApiToken}`);
+    if (env.storePath)
+        lines.push(`STORE_PATH=${env.storePath}`);
+    if (env.corpusEnv.subgraphUrl)
+        lines.push(`JINN_CORPUS_SUBGRAPH_URL=${env.corpusEnv.subgraphUrl}`);
+    if (env.corpusEnv.ipfsGatewayUrl)
+        lines.push(`JINN_CORPUS_IPFS_GATEWAY_URL=${env.corpusEnv.ipfsGatewayUrl}`);
+    if (env.corpusEnv.rpcUrl)
+        lines.push(`JINN_CORPUS_RPC_URL=${env.corpusEnv.rpcUrl}`);
+    if (env.corpusEnv.chainId != null)
+        lines.push(`JINN_CORPUS_CHAIN_ID=${env.corpusEnv.chainId}`);
+    if (env.corpusEnv.identityRegistryAddress)
+        lines.push(`JINN_CORPUS_IDENTITY_REGISTRY_ADDRESS=${env.corpusEnv.identityRegistryAddress}`);
+    if (env.corpusEnv.fromBlock != null)
+        lines.push(`JINN_CORPUS_FROM_BLOCK=${env.corpusEnv.fromBlock}`);
+    return lines.join('\n') + '\n';
+}
+export function writePerTaskHermesConfig(inputs) {
+    mkdirSync(inputs.hermesHome, { recursive: true });
+    if (inputs.seedFrom) {
+        seedOperatorState(inputs.hermesHome, inputs.seedFrom);
+    }
+    const operator = inputs.seedFrom ? readOperatorConfigYaml(inputs.seedFrom) : {};
+    const snippet = hermesConfigFromSolverPlugins(inputs.solverPluginRoots, inputs.env);
+    const merged = mergePerTaskConfig(operator, snippet, {
+        model: inputs.model,
+        provider: inputs.provider,
+        workingDir: inputs.workingDir,
+    });
+    writeFileSync(join(inputs.hermesHome, 'config.yaml'), yamlStringify(merged, { lineWidth: 0 }), 'utf8');
+    // Per-Task .env = operator's .env (provider API keys, debug toggles, etc.)
+    // + Jinn-runtime keys. Jinn keys go LAST so they win on duplicate names
+    // (most dotenv loaders use last-wins; Hermes uses python-dotenv). Without
+    // the operator's keys, Jinn-run Hermes can't authenticate to any provider
+    // except google-gemini-cli (whose OAuth creds are seeded via auth/), so
+    // Hermes-as-default with OpenRouter / Anthropic / etc. requires this merge.
+    const operatorEnv = inputs.seedFrom ? readOperatorEnvFile(inputs.seedFrom) : '';
+    const trailingNewline = operatorEnv.endsWith('\n') ? '' : '\n';
+    const header = operatorEnv
+        ? `${operatorEnv}${trailingNewline}# --- Jinn-runtime keys (per-Task, override any operator entries above) ---\n`
+        : '';
+    const envFile = header + snippetToEnvFile(inputs.env);
+    writeFileSync(join(inputs.hermesHome, '.env'), envFile, 'utf8');
+}
+function readOperatorEnvFile(seedFrom) {
+    const path = join(seedFrom, '.env');
+    if (!existsSync(path))
+        return '';
+    try {
+        return readFileSync(path, 'utf8');
+    }
+    catch {
+        // Permissions / race — better to proceed with just Jinn keys than crash.
+        return '';
+    }
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/harnesses/impls/hermes-agent/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../../src/harnesses/impls/hermes-agent/bootstrap.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EACL,6BAA6B,GAG9B,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG;IACxB,UAAU;IACV,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,gBAAgB;IAChB,MAAM;IACN,gBAAgB;CACR,CAAC;AAEX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAU,CAAC;AAmBrE,SAAS,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;IAC7D,IAAI,QAAQ,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC7D,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,yDAAyD;AACzD,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,sEAAsE;AACtE,4EAA4E;AAC5E,iBAAiB;AACjB,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,mEAAmE;AACnE,qDAAqD;AACrD,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,qDAAqD;AACrD,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,uDAAuD;AACvD,6EAA6E;AAC7E,8EAA8E;AAE9E,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,8DAA8D;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAiC,EACjC,IAAyB,EACzB,IAA+D;IAE/D,MAAM,GAAG,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;IAErD,qEAAqE;IACrE,2EAA2E;IAC3E,wCAAwC;IACxC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QAC/C,IAAI,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtD,GAAG,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAC3C,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,GAAG,CAAC,QAAQ,GAAG;QACb,GAAG,UAAU;QACb,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,IAAI,CAAC,UAAU;KACrB,CAAC;IAEF,sEAAsE;IACtE,iEAAiE;IACjE,kDAAkD;IAClD,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,GAAG,CAAC,iBAAiB,GAAG;QACtB,GAAG,kBAAkB;QACrB,YAAY,EAAE,CAAC,GAAG,iBAAiB,CAAC;KACrC,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAClD,CAAC,CAAE,QAAQ,CAAC,aAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACzF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAa,CAAC,GAAG,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAqB;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,SAAS,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,4BAA4B,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IACnG,IAAI,GAAG,CAAC,SAAS,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAC7G,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,IAAI,GAAG,CAAC,SAAS,CAAC,uBAAuB;QAAE,KAAK,CAAC,IAAI,CAAC,yCAAyC,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC,CAAC;IACxI,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAgC;IACvE,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,6BAA6B,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE;QACnD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,aAAa,CACX,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,EACtC,aAAa,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EACvC,MAAM,CACP,CAAC;IAEF,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,WAAW;QACxB,CAAC,CAAC,GAAG,WAAW,GAAG,eAAe,+EAA+E;QACjH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/harnesses/impls/hermes-agent/config-builder.d.ts

@@ -0,0 +1,49 @@
+export interface McpStdioServer {
+    command: string;
+    args: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+}
+export interface McpHttpServer {
+    url: string;
+    headers?: Record<string, string>;
+}
+export type McpServer = McpStdioServer | McpHttpServer;
+export interface HermesConfigSnippet {
+    mcp_servers?: Record<string, McpServer>;
+    skills?: {
+        external_dirs?: string[];
+    };
+}
+export interface ConfigBuilderEnv {
+    storePath?: string;
+    daemonApiUrl: string;
+    daemonApiToken: string;
+    corpusEnv: {
+        subgraphUrl?: string;
+        ipfsGatewayUrl?: string;
+        rpcUrl?: string;
+        chainId?: number;
+        identityRegistryAddress?: string;
+        fromBlock?: number;
+    };
+    /**
+     * Active-task identifiers injected into MCP server env so jinn-client tools
+     * (get_task, submit_typed_payload, …) know which Task they are operating on.
+     * Mirrors what claude-code and codex-code adapters thread through in
+     * `buildSubprocessEnv`. When unset (e.g. unit tests), the MCP server returns
+     * a default empty task — fine for tests, broken for live runs.
+     */
+    task?: {
+        id?: string;
+        description?: string;
+        /** Already-stringified JSON of `taskBody.context`; empty string when absent. */
+        contextJson?: string;
+        role?: string;
+        solverType?: string;
+        restorationRequestId?: string;
+        requestId?: string;
+        workingDir?: string;
+    };
+}
+export declare function hermesConfigFromSolverPlugins(roots: readonly string[], env: ConfigBuilderEnv): HermesConfigSnippet;

package/dist/harnesses/impls/hermes-agent/config-builder.js

@@ -0,0 +1,132 @@
+// client/src/harnesses/impls/hermes-agent/config-builder.ts
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Resolves the client install root (`<client>/`, containing `dist/` and
+ * `plugins/`) by walking up from this module's compiled location.
+ *
+ * This file lives at:
+ *   - `<client>/dist/harnesses/impls/hermes-agent/config-builder.js` (built)
+ *   - `<client>/src/harnesses/impls/hermes-agent/config-builder.ts` (source)
+ *
+ * Either way, four directory hops up from the file's directory lands at
+ * `<client>/`, which the `network-tools` plugin's MCP launcher
+ * (`client/plugins/network-tools/mcp/jinn-client-server.mjs`) expects when
+ * reading `JINN_NETWORK_TOOLS_CLIENT_ROOT`.
+ *
+ * v0.1.6 patch — gh #294. The proper fix (audit *why* SolverPlugins are
+ * copied per-task into `$HOME/.jinn-client/solver-plugins/`, which is why
+ * the launcher's own `<pluginRoot>/../..` walk fails) is tracked in #296.
+ */
+function resolveClientRoot() {
+    const here = fileURLToPath(import.meta.url);
+    return resolve(dirname(here), '..', '..', '..', '..');
+}
+function buildJinnRuntimeEnv(env) {
+    const out = {
+        DAEMON_API_URL: env.daemonApiUrl,
+        DAEMON_API_TOKEN: env.daemonApiToken,
+        // gh #294: tell the network-tools MCP launcher where to find the
+        // daemon's `dist/mcp/server.js`. The launcher's own resolution walks
+        // `<pluginRoot>/../..`, which lands at `$HOME/.jinn-client/` (no
+        // `dist/`) when the plugin tree has been copied per-task — see #296
+        // for the layout-audit investigation.
+        JINN_NETWORK_TOOLS_CLIENT_ROOT: resolveClientRoot(),
+    };
+    if (env.storePath)
+        out.STORE_PATH = env.storePath;
+    if (env.corpusEnv.subgraphUrl)
+        out.JINN_CORPUS_SUBGRAPH_URL = env.corpusEnv.subgraphUrl;
+    if (env.corpusEnv.ipfsGatewayUrl)
+        out.JINN_CORPUS_IPFS_GATEWAY_URL = env.corpusEnv.ipfsGatewayUrl;
+    if (env.corpusEnv.rpcUrl)
+        out.JINN_CORPUS_RPC_URL = env.corpusEnv.rpcUrl;
+    if (env.corpusEnv.chainId != null)
+        out.JINN_CORPUS_CHAIN_ID = String(env.corpusEnv.chainId);
+    if (env.corpusEnv.identityRegistryAddress) {
+        out.JINN_CORPUS_IDENTITY_REGISTRY_ADDRESS = env.corpusEnv.identityRegistryAddress;
+    }
+    if (env.corpusEnv.fromBlock != null)
+        out.JINN_CORPUS_FROM_BLOCK = String(env.corpusEnv.fromBlock);
+    // Active-task env — read by the jinn-client MCP server in
+    // `client/src/mcp/server.ts` to populate the `task` runtime context. Without
+    // these, submit_typed_payload errors with `missing_solver_type` and get_task
+    // returns an empty record.
+    if (env.task) {
+        if (env.task.id)
+            out.DESIRED_STATE_ID = env.task.id;
+        if (env.task.description)
+            out.DESIRED_STATE_DESCRIPTION = env.task.description;
+        if (env.task.contextJson)
+            out.DESIRED_STATE_CONTEXT = env.task.contextJson;
+        if (env.task.role)
+            out.DESIRED_STATE_ROLE = env.task.role;
+        if (env.task.solverType)
+            out.DESIRED_STATE_SOLVER_TYPE = env.task.solverType;
+        if (env.task.restorationRequestId)
+            out.RESTORATION_REQUEST_ID = env.task.restorationRequestId;
+        if (env.task.requestId)
+            out.REQUEST_ID = env.task.requestId;
+        if (env.task.workingDir)
+            out.JINN_WORKING_DIR = env.task.workingDir;
+    }
+    return out;
+}
+function resolvePathTemplate(value, pluginRoot) {
+    // Resolve ${CLAUDE_PLUGIN_ROOT} / ${CODEX_PLUGIN_ROOT} → pluginRoot,
+    // then resolve relative paths against pluginRoot.
+    const substituted = value
+        .replaceAll('${CLAUDE_PLUGIN_ROOT}', pluginRoot)
+        .replaceAll('${CODEX_PLUGIN_ROOT}', pluginRoot);
+    if (isAbsolute(substituted))
+        return substituted;
+    return resolve(pluginRoot, substituted);
+}
+function translateMcpFromFile(pluginRoot, jinnEnv) {
+    const mcpFile = join(pluginRoot, '.mcp.json');
+    if (!existsSync(mcpFile))
+        return {};
+    const raw = JSON.parse(readFileSync(mcpFile, 'utf8'));
+    const servers = raw.mcpServers ?? {};
+    const out = {};
+    for (const [name, server] of Object.entries(servers)) {
+        if ('url' in server) {
+            // HTTP MCP — pass through unchanged (no path resolution needed)
+            out[name] = { url: server.url, ...(server.headers ? { headers: server.headers } : {}) };
+            continue;
+        }
+        // Stdio MCP — resolve paths and merge env
+        const resolvedArgs = server.args.map((a) => resolvePathTemplate(a, pluginRoot));
+        const resolvedCwd = server.cwd ? resolvePathTemplate(server.cwd, pluginRoot) : pluginRoot;
+        out[name] = {
+            command: server.command,
+            args: resolvedArgs,
+            cwd: resolvedCwd,
+            env: { ...jinnEnv, ...(server.env ?? {}) },
+        };
+    }
+    return out;
+}
+function translateSkillsDir(pluginRoot) {
+    const skillsDir = join(pluginRoot, 'skills');
+    return existsSync(skillsDir) ? skillsDir : null;
+}
+export function hermesConfigFromSolverPlugins(roots, env) {
+    const jinnEnv = buildJinnRuntimeEnv(env);
+    const mcpServers = {};
+    const externalDirs = [];
+    for (const root of roots) {
+        Object.assign(mcpServers, translateMcpFromFile(root, jinnEnv));
+        const skills = translateSkillsDir(root);
+        if (skills)
+            externalDirs.push(skills);
+    }
+    const snippet = {};
+    if (Object.keys(mcpServers).length > 0)
+        snippet.mcp_servers = mcpServers;
+    if (externalDirs.length > 0)
+        snippet.skills = { external_dirs: externalDirs };
+    return snippet;
+}
+//# sourceMappingURL=config-builder.js.map

package/dist/harnesses/impls/hermes-agent/config-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-builder.js","sourceRoot":"","sources":["../../../../src/harnesses/impls/hermes-agent/config-builder.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAqDzC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,iBAAiB;IACxB,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAqB;IAChD,MAAM,GAAG,GAA2B;QAClC,cAAc,EAAE,GAAG,CAAC,YAAY;QAChC,gBAAgB,EAAE,GAAG,CAAC,cAAc;QACpC,iEAAiE;QACjE,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,sCAAsC;QACtC,8BAA8B,EAAE,iBAAiB,EAAE;KACpD,CAAC;IACF,IAAI,GAAG,CAAC,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;IAClD,IAAI,GAAG,CAAC,SAAS,CAAC,WAAW;QAAE,GAAG,CAAC,wBAAwB,GAAG,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC;IACxF,IAAI,GAAG,CAAC,SAAS,CAAC,cAAc;QAAE,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;IAClG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM;QAAE,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;IACzE,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI;QAAE,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC;QAC1C,GAAG,CAAC,qCAAqC,GAAG,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC;IACpF,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,IAAI;QAAE,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAClG,0DAA0D;IAC1D,6EAA6E;IAC7E,6EAA6E;IAC7E,2BAA2B;IAC3B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE;YAAE,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW;YAAE,GAAG,CAAC,yBAAyB,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAC/E,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW;YAAE,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3E,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1D,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU;YAAE,GAAG,CAAC,yBAAyB,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7E,IAAI,GAAG,CAAC,IAAI,CAAC,oBAAoB;YAAE,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAC9F,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5D,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU;YAAE,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,UAAkB;IAC5D,qEAAqE;IACrE,kDAAkD;IAClD,MAAM,WAAW,GAAG,KAAK;SACtB,UAAU,CAAC,uBAAuB,EAAE,UAAU,CAAC;SAC/C,UAAU,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAChD,OAAO,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,OAA+B;IAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAEnD,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IACrC,MAAM,GAAG,GAA8B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACpB,gEAAgE;YAChE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACxF,SAAS;QACX,CAAC;QACD,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC1F,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;SAC3C,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAwB,EACxB,GAAqB;IAErB,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC;IACzE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,MAAM,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9E,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/harnesses/impls/hermes-agent/harness.d.ts

@@ -0,0 +1,58 @@
+import type { Harness, HarnessContext, ReadyStatus, Solution } from '../../types.js';
+import type { HermesHarnessAdapter } from './adapter.js';
+export interface HermesHarnessConfig {
+    adapter: HermesHarnessAdapter;
+    version?: string;
+    /** Hermes binary path used by `isReady()`. Defaults to `hermes` (PATH lookup). */
+    hermesPath?: string;
+    /** Timeout for the `hermes doctor` probe. Defaults to 30s. */
+    hermesDoctorTimeoutMs?: number;
+}
+/**
+ * Hermes Agent harness.
+ *
+ * Generic restoration harness backed by the Hermes agent runner. Built-in
+ * learning loop owned by Hermes (skill self-improvement, memory curation, FTS5
+ * session search); Jinn-side learner plugin is NOT loaded. SolverPlugins are
+ * mounted via Hermes's mcp_servers + skills config.yaml surface (see
+ * config-builder.ts).
+ *
+ * Scoped to SWE-rebench v2 while the Hermes task prompt, SolverPlugin bundle,
+ * and output harvesting are specific to `swe-rebench-v2.v1`.
+ */
+export declare class HermesHarness implements Harness {
+    readonly name = "hermes-agent";
+    readonly version: string;
+    readonly freezeStateHashIgnore: readonly ["auth", "auth.json", "bin/tirith", ".env", "config.yaml"];
+    private readonly adapter;
+    private readonly hermesPath;
+    private readonly hermesDoctorTimeoutMs;
+    constructor(config: HermesHarnessConfig);
+    /**
+     * Readiness probe — shells out to `hermes doctor` via the shared
+     * `probeHermesDoctor` helper (same logic the SPA precheck endpoint
+     * uses). Reports:
+     *   - `installed: false` → binary not on PATH → ready=false with install
+     *     nextStep so the operator sees an actionable message instead of
+     *     N/N failed claims (#330).
+     *   - `exitCode !== 0` → binary exists but `hermes doctor` reports a
+     *     configuration problem (e.g. provider not signed in) → ready=false
+     *     with a nextStep that points at the SPA precheck panel.
+     *   - OpenRouter not authenticated → ready=false. `hermes doctor` exits 0
+     *     even when every provider is logged out (it treats missing providers
+     *     as warnings), so this third gate probes `hermes auth status
+     *     openrouter` directly. Hermes is OpenRouter-only, so a logged-out
+     *     OpenRouter means Hermes has no usable model provider and every
+     *     claim would burn (#332/#330/#348).
+     *   - all three gates pass → ready=true.
+     */
+    isReady(_ctx?: {
+        solverType: string;
+        role?: 'restoration' | 'evaluation';
+    }): Promise<ReadyStatus>;
+    supports(spec: {
+        solverType: string;
+        role?: 'restoration' | 'evaluation';
+    }): boolean;
+    run(ctx: HarnessContext): Promise<Solution>;
+}

package/dist/harnesses/impls/hermes-agent/harness.js

@@ -0,0 +1,118 @@
+import { HERMES_AGENT_HARNESS } from '../../names.js';
+import { harvestOutput } from '../learner/harvest.js';
+import { probeHermesDoctor, probeHermesAuthStatus } from '../../../api/hermes-doctor-endpoint.js';
+/**
+ * Hermes Agent harness.
+ *
+ * Generic restoration harness backed by the Hermes agent runner. Built-in
+ * learning loop owned by Hermes (skill self-improvement, memory curation, FTS5
+ * session search); Jinn-side learner plugin is NOT loaded. SolverPlugins are
+ * mounted via Hermes's mcp_servers + skills config.yaml surface (see
+ * config-builder.ts).
+ *
+ * Scoped to SWE-rebench v2 while the Hermes task prompt, SolverPlugin bundle,
+ * and output harvesting are specific to `swe-rebench-v2.v1`.
+ */
+export class HermesHarness {
+    name = HERMES_AGENT_HARNESS;
+    version;
+    freezeStateHashIgnore = ['auth', 'auth.json', 'bin/tirith', '.env', 'config.yaml'];
+    adapter;
+    hermesPath;
+    hermesDoctorTimeoutMs;
+    constructor(config) {
+        this.adapter = config.adapter;
+        this.version = config.version ?? '0.1.0';
+        this.hermesPath = config.hermesPath;
+        this.hermesDoctorTimeoutMs = config.hermesDoctorTimeoutMs;
+    }
+    /**
+     * Readiness probe — shells out to `hermes doctor` via the shared
+     * `probeHermesDoctor` helper (same logic the SPA precheck endpoint
+     * uses). Reports:
+     *   - `installed: false` → binary not on PATH → ready=false with install
+     *     nextStep so the operator sees an actionable message instead of
+     *     N/N failed claims (#330).
+     *   - `exitCode !== 0` → binary exists but `hermes doctor` reports a
+     *     configuration problem (e.g. provider not signed in) → ready=false
+     *     with a nextStep that points at the SPA precheck panel.
+     *   - OpenRouter not authenticated → ready=false. `hermes doctor` exits 0
+     *     even when every provider is logged out (it treats missing providers
+     *     as warnings), so this third gate probes `hermes auth status
+     *     openrouter` directly. Hermes is OpenRouter-only, so a logged-out
+     *     OpenRouter means Hermes has no usable model provider and every
+     *     claim would burn (#332/#330/#348).
+     *   - all three gates pass → ready=true.
+     */
+    async isReady(_ctx) {
+        const config = {};
+        if (this.hermesPath !== undefined)
+            config.hermesPath = this.hermesPath;
+        if (this.hermesDoctorTimeoutMs !== undefined)
+            config.hermesDoctorTimeoutMs = this.hermesDoctorTimeoutMs;
+        const result = probeHermesDoctor(config);
+        if (!result.installed) {
+            return {
+                ready: false,
+                reason: 'hermes binary not installed',
+                nextStep: {
+                    description: 'Install the Hermes agent runner — see the Hermes precheck panel in the operator dashboard for the install command.',
+                },
+            };
+        }
+        if (result.exitCode !== 0) {
+            const stderr = result.stderr.trim();
+            const stdout = result.stdout.trim();
+            const detail = stderr.length > 0 ? stderr : stdout;
+            return {
+                ready: false,
+                reason: `hermes doctor exit ${result.exitCode}${detail ? `: ${detail}` : ''}`,
+                nextStep: {
+                    description: 'Run `hermes doctor` locally to surface the configuration problem, or open the Hermes precheck panel in the operator dashboard to sign in / select a provider.',
+                },
+            };
+        }
+        // Third gate: `hermes doctor` exits 0 even when every model provider is
+        // logged out. Hermes is OpenRouter-only, so probe OpenRouter auth
+        // directly — a logged-out OpenRouter means Hermes cannot run a task.
+        const auth = probeHermesAuthStatus('openrouter', config);
+        if (!auth.authed) {
+            return {
+                ready: false,
+                reason: 'OpenRouter not connected — Hermes has no usable model provider',
+                nextStep: {
+                    description: 'Connect OpenRouter — sign in via the Hermes precheck panel in the operator dashboard, or run `hermes login` locally.',
+                },
+            };
+        }
+        return { ready: true };
+    }
+    supports(spec) {
+        // Hermes currently ships a SWE-rebench v2 task prompt and runtime plugin.
+        // Evaluation is not supported: Hermes has no evaluator-side plugins
+        // (verdict signing, checker contracts).
+        return spec.role !== 'evaluation' && spec.solverType === 'swe-rebench-v2.v1';
+    }
+    async run(ctx) {
+        const window = ctx.task.window ?? { startTs: 0, endTs: 0 };
+        await this.adapter.runTask({
+            taskId: ctx.task.id,
+            requestId: ctx.requestId,
+            taskCid: ctx.taskCid,
+            solverType: ctx.task.solverType,
+            model: ctx.solverNet?.model,
+            taskBody: ctx.task,
+            implStateDir: ctx.implStateDir,
+            workingDir: ctx.workingDir,
+            pluginRoots: [...(ctx.solverPluginRoots ?? [])],
+            windowStartTs: window.startTs,
+            windowEndTs: window.endTs,
+            msUntilEndTs: ctx.msUntilEndTs(),
+            abort: ctx.abort,
+            mode: ctx.mode,
+        });
+        const solution = await harvestOutput(ctx.workingDir, undefined, ctx.task);
+        return { ...solution, venueRef: { ...solution.venueRef, name: this.name } };
+    }
+}
+//# sourceMappingURL=harness.js.map

package/dist/harnesses/impls/hermes-agent/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../../../src/harnesses/impls/hermes-agent/harness.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAWlG;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IACf,IAAI,GAAG,oBAAoB,CAAC;IAC5B,OAAO,CAAS;IAChB,qBAAqB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,CAAU,CAAC;IACpF,OAAO,CAAuB;IAC9B,UAAU,CAAqB;IAC/B,qBAAqB,CAAqB;IAE3D,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,OAAO,CAAC,IAAkE;QAC9E,MAAM,MAAM,GAA4D,EAAE,CAAC;QAC3E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACvE,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS;YAAE,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC;QACxG,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,6BAA6B;gBACrC,QAAQ,EAAE;oBACR,WAAW,EACT,oHAAoH;iBACvH;aACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACnD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,sBAAsB,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7E,QAAQ,EAAE;oBACR,WAAW,EACT,+JAA+J;iBAClK;aACF,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,kEAAkE;QAClE,qEAAqE;QACrE,MAAM,IAAI,GAAG,qBAAqB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,gEAAgE;gBACxE,QAAQ,EAAE;oBACR,WAAW,EACT,sHAAsH;iBACzH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,QAAQ,CAAC,IAAiE;QACxE,0EAA0E;QAC1E,oEAAoE;QACpE,wCAAwC;QACxC,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,KAAK,mBAAmB,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAmB;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;YAC/B,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK;YAC3B,QAAQ,EAAE,GAAG,CAAC,IAAW;YACzB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YAC/C,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;YAChC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC9E,CAAC;CACF"}

package/dist/harnesses/impls/hermes-agent/index.d.ts

@@ -0,0 +1,5 @@
+export { HermesHarness } from './harness.js';
+export { HermesHarnessAdapter } from './adapter.js';
+export { hermesConfigFromSolverPlugins, type HermesConfigSnippet, type ConfigBuilderEnv, type McpServer, } from './config-builder.js';
+export { buildInitialPrompt } from './prompt.js';
+export { writePerTaskHermesConfig } from './bootstrap.js';

package/dist/harnesses/impls/hermes-agent/index.js

@@ -0,0 +1,7 @@
+// client/src/harnesses/impls/hermes-agent/index.ts
+export { HermesHarness } from './harness.js';
+export { HermesHarnessAdapter } from './adapter.js';
+export { hermesConfigFromSolverPlugins, } from './config-builder.js';
+export { buildInitialPrompt } from './prompt.js';
+export { writePerTaskHermesConfig } from './bootstrap.js';
+//# sourceMappingURL=index.js.map

package/dist/harnesses/impls/hermes-agent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/harnesses/impls/hermes-agent/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,6BAA6B,GAI9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC"}