@signetai/connector-hermes-agent 0.207.2 → 0.208.1

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { BaseConnector, type InstallResult, type UninstallResult } from "@signetai/connector-base";
+import { type HermesTarget } from "@signetai/core";
 export interface HermesDiagnosticCheck {
     readonly id: string;
     readonly label: string;
@@ -17,9 +18,36 @@ export interface HermesDoctorReport {
     readonly checks: readonly HermesDiagnosticCheck[];
     readonly warnings: readonly string[];
 }
+type AgentReadPolicy = "isolated" | "shared" | "group";
+export interface AgentRegistrationOptions {
+    readonly agentId: string;
+    readonly readPolicy?: AgentReadPolicy;
+    readonly policyGroup?: string | null;
+    /** Requested profile provisioning must fail closed instead of warning. */
+    readonly strict?: boolean;
+}
+export type AgentRegistrationResult = {
+    readonly ok: true;
+    readonly created: boolean;
+    readonly agentId: string;
+} | {
+    readonly ok: false;
+    readonly agentId: string;
+    readonly error: string;
+};
+export declare function ensureNamedAgentRegistered(daemonUrl: string, agentIdOrOptions: string | AgentRegistrationOptions, warnings: string[]): Promise<AgentRegistrationResult>;
+export interface HermesConnectorOptions {
+    readonly target?: HermesTarget;
+    readonly agentId?: string;
+    readonly readPolicy?: AgentReadPolicy;
+    readonly policyGroup?: string | null;
+}
 export declare class HermesAgentConnector extends BaseConnector {
     readonly name = "Hermes Agent";
     readonly harnessId = "hermes-agent";
+    private readonly target?;
+    private readonly registration?;
+    constructor(options?: HermesTarget | HermesConnectorOptions);
     private getHermesHome;
     private getHermesRepo;
     getConfigPath(): string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAoDtH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAsrBD,qBAAa,oBAAqB,SAAQ,aAAa;IACtD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,kBAAkB;IAEpC,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAIrB,aAAa,IAAI,MAAM;IAIjB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAgMjD,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAuD3C,WAAW,IAAI,OAAO;IAQhB,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAS7C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuG9B;AAED,wBAAgB,eAAe,IAAI,oBAAoB,CAEtD;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AACtH,OAAO,EAA4D,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAmD3G,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AA6nBD,KAAK,eAAe,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AA2C5E,wBAAsB,0BAA0B,CAC/C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GAAG,wBAAwB,EACnD,QAAQ,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,uBAAuB,CAAC,CAoFlC;AAMD,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,qBAAa,oBAAqB,SAAQ,aAAa;IACtD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,kBAAkB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAA2B;gBAE7C,OAAO,CAAC,EAAE,YAAY,GAAG,sBAAsB;IAkB3D,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAKrB,aAAa,IAAI,MAAM;IAIjB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAoNjD,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IA2D3C,WAAW,IAAI,OAAO;IAQhB,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAS7C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuG9B;AAED,wBAAgB,eAAe,IAAI,oBAAoB,CAEtD;AAED,eAAe,oBAAoB,CAAC"}

package/dist/index.js

@@ -1,14 +1,14 @@
 // src/index.ts
 import { spawnSync } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, realpathSync as realpathSync3, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir } from "node:os";
-import { dirname as dirname6, join as join4 } from "node:path";
+import { dirname as dirname6, isAbsolute as isAbsolute2, join as join4, relative as relative2 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // ../../../libs/connector-base/dist/index.js
 import { randomBytes } from "node:crypto";
-import { existsSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join3, relative, sep } from "node:path";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
@@ -15707,6 +15707,34 @@ function up135(db) {
 			ON memory_head_publications(agent_id, status, revision DESC);
 	`);
 }
+function up136(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(memory_head_revisions)").all().map((r2) => r2.name));
+  for (const [name, type] of [
+    ["entry_id", "TEXT"],
+    ["entry_text", "TEXT"],
+    ["operation", "TEXT"],
+    ["source_refs_json", "TEXT"],
+    ["supporting_quotes_json", "TEXT"]
+  ]) {
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE memory_head_revisions ADD COLUMN ${name} ${type}`);
+  }
+  db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_memory_head_revisions_entry ON memory_head_revisions(agent_id, revision, entry_id)");
+}
+function up137(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(dreaming_passes)").all().map((r2) => r2.name));
+  for (const [name, type] of [
+    ["head_revision", "INTEGER"],
+    ["head_hash", "TEXT"],
+    ["head_added", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_updated", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_removed", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_deferred", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_no_op", "INTEGER NOT NULL DEFAULT 0"]
+  ])
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE dreaming_passes ADD COLUMN ${name} ${type}`);
+}
 var MIGRATIONS = [
   {
     version: 1,
@@ -16779,6 +16807,23 @@ var MIGRATIONS = [
     name: "memory-head-publication",
     up: up135,
     artifacts: { tables: ["memory_head_publications"] }
+  },
+  {
+    version: 136,
+    name: "memory-head-revisions",
+    up: up136,
+    artifacts: { tables: ["memory_head_revisions"] }
+  },
+  {
+    version: 137,
+    name: "dreaming-head-manifest",
+    up: up137,
+    artifacts: {
+      columns: [
+        { table: "dreaming_passes", column: "head_revision" },
+        { table: "dreaming_passes", column: "head_hash" }
+      ]
+    }
   }
 ];
 var LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1]?.version ?? 0;
@@ -17174,6 +17219,12 @@ class BaseConnector {
     const cleaned = stripSignetBlock(raw);
     if (cleaned === raw)
       return null;
+    const root = realpathSync(basePath);
+    const parent = realpathSync(dirname2(agentsPath));
+    const rel = relative(root, join3(parent, "AGENTS.md"));
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+      throw new Error(`Target path escapes validated root: ${agentsPath}`);
+    }
     const tmp = join3(basePath, `.${randomBytes(6).toString("hex")}.tmp`);
     try {
       writeFileSync(tmp, cleaned, "utf-8");
@@ -17253,7 +17304,7 @@ import { dirname as dirname42, join as join82, resolve as resolve22 } from "node
 import { homedir as homedir62, platform as platform22 } from "node:os";
 import { basename as basename2, dirname as dirname52, resolve as resolve42 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync10, readdirSync as readdirSync5, realpathSync, statSync as statSync7 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync10, readdirSync as readdirSync5, realpathSync as realpathSync2, statSync as statSync7 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
 import { dirname as dirname8, join as join13 } from "node:path";
 import { homedir as homedir102 } from "node:os";
@@ -28614,7 +28665,7 @@ function memoriesFtsNeedsTokenizerRepair2(sql) {
     return true;
   return !normalized.includes(`tokenize='${MEMORIES_FTS_TOKENIZER2}'`);
 }
-function up136(db) {
+function up138(db) {
   db.exec(`
 		CREATE TABLE IF NOT EXISTS schema_migrations (
 			version INTEGER PRIMARY KEY,
@@ -29098,7 +29149,7 @@ function addColumnIfMissing52(db, table, column, definition) {
     db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
   }
 }
-function up137(db) {
+function up139(db) {
   db.exec(`
 		CREATE TABLE IF NOT EXISTS ingestion_jobs (
 			id TEXT PRIMARY KEY,
@@ -32939,11 +32990,39 @@ function up1352(db) {
 			ON memory_head_publications(agent_id, status, revision DESC);
 	`);
 }
+function up1362(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(memory_head_revisions)").all().map((r3) => r3.name));
+  for (const [name, type] of [
+    ["entry_id", "TEXT"],
+    ["entry_text", "TEXT"],
+    ["operation", "TEXT"],
+    ["source_refs_json", "TEXT"],
+    ["supporting_quotes_json", "TEXT"]
+  ]) {
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE memory_head_revisions ADD COLUMN ${name} ${type}`);
+  }
+  db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_memory_head_revisions_entry ON memory_head_revisions(agent_id, revision, entry_id)");
+}
+function up1372(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(dreaming_passes)").all().map((r3) => r3.name));
+  for (const [name, type] of [
+    ["head_revision", "INTEGER"],
+    ["head_hash", "TEXT"],
+    ["head_added", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_updated", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_removed", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_deferred", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_no_op", "INTEGER NOT NULL DEFAULT 0"]
+  ])
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE dreaming_passes ADD COLUMN ${name} ${type}`);
+}
 var MIGRATIONS2 = [
   {
     version: 1,
     name: "baseline",
-    up: up136,
+    up: up138,
     artifacts: { tables: ["memories", "conversations", "embeddings"] }
   },
   {
@@ -33021,7 +33100,7 @@ var MIGRATIONS2 = [
   {
     version: 13,
     name: "ingestion-tracking",
-    up: up137,
+    up: up139,
     artifacts: {
       columns: [
         { table: "memories", column: "source_path" },
@@ -34011,6 +34090,23 @@ var MIGRATIONS2 = [
     name: "memory-head-publication",
     up: up1352,
     artifacts: { tables: ["memory_head_publications"] }
+  },
+  {
+    version: 136,
+    name: "memory-head-revisions",
+    up: up1362,
+    artifacts: { tables: ["memory_head_revisions"] }
+  },
+  {
+    version: 137,
+    name: "dreaming-head-manifest",
+    up: up1372,
+    artifacts: {
+      columns: [
+        { table: "dreaming_passes", column: "head_revision" },
+        { table: "dreaming_passes", column: "head_hash" }
+      ]
+    }
   }
 ];
 var LATEST_SCHEMA_VERSION2 = MIGRATIONS2[MIGRATIONS2.length - 1]?.version ?? 0;
@@ -34352,7 +34448,7 @@ function resolveHermesRepoPath() {
       timeout: 3000
     }).trim();
     if (hermesPath) {
-      const repoDir = dirname8(realpathSync(hermesPath));
+      const repoDir = dirname8(realpathSync2(hermesPath));
       if (existsSync12(join13(repoDir, "plugins", "memory")))
         return repoDir;
     }
@@ -34398,6 +34494,44 @@ var REQUIRED_TOOL_NAMES = [
   "recall",
   "remember"
 ];
+function resolveContainedWritePath(targetPath, targetRoot) {
+  let rootPath = targetRoot;
+  while (!existsSync2(rootPath)) {
+    const parent = dirname6(rootPath);
+    if (parent === rootPath)
+      throw new Error(`Hermes target root does not exist: ${targetRoot}`);
+    rootPath = parent;
+  }
+  if (realpathSync3(rootPath) !== rootPath) {
+    throw new Error(`Hermes target root is symlinked and cannot be used for writes: ${targetRoot}`);
+  }
+  rootPath = targetRoot;
+  while (!existsSync2(rootPath)) {
+    const parent = dirname6(rootPath);
+    if (parent === rootPath)
+      throw new Error(`Hermes target root does not exist: ${targetRoot}`);
+    rootPath = parent;
+  }
+  const root = realpathSync3(rootPath);
+  let existing = targetPath;
+  const missing = [];
+  while (!existsSync2(existing)) {
+    const parent = dirname6(existing);
+    if (parent === existing)
+      throw new Error(`Hermes target path does not have an existing ancestor: ${targetPath}`);
+    missing.unshift(existing.slice(parent.length + 1));
+    existing = parent;
+  }
+  const candidate = join4(realpathSync3(existing), ...missing);
+  const rel = relative2(root, candidate);
+  if (rel.startsWith("..") || isAbsolute2(rel)) {
+    throw new Error(`Hermes target path escapes validated root: ${targetPath}`);
+  }
+  return candidate;
+}
+function assertContainedTargetPath(targetPath, targetRoot) {
+  resolveContainedWritePath(targetPath, targetRoot);
+}
 function getRepoPluginTargetDir(hermesRepo) {
   return join4(hermesRepo, "plugins", "memory", "signet");
 }
@@ -34407,28 +34541,31 @@ function getUserPluginTargetDir(hermesHome) {
 function getProviderBackupPath(hermesHome) {
   return join4(hermesHome, PROVIDER_BACKUP_FILE);
 }
-function installPlugin(targetDir, targetKind) {
+function installPlugin(targetDir, targetKind, targetRoot) {
+  const writeDir = targetRoot ? resolveContainedWritePath(targetDir, targetRoot) : targetDir;
   const sourceDir = getPluginSourceDir();
-  mkdirSync(targetDir, { recursive: true });
+  mkdirSync(writeDir, { recursive: true });
   const written = [];
   for (const file of PLUGIN_FILES) {
     const src = join4(sourceDir, file);
-    const dst = join4(targetDir, file);
+    const dst = join4(writeDir, file);
     if (existsSync2(src)) {
       writeFileSync2(dst, readFileSync2(src));
       written.push(dst);
     }
   }
-  written.push(writeInstallMarker(targetDir, targetKind));
+  written.push(writeInstallMarker(writeDir, targetKind));
   return written;
 }
-function uninstallPlugin(targetDir) {
-  const removed = [];
-  if (existsSync2(targetDir)) {
-    rmSync(targetDir, { recursive: true, force: true });
-    removed.push(targetDir);
+function uninstallPlugin(targetDir, targetRoot) {
+  if (!existsSync2(targetDir))
+    return [];
+  const safeTargetDir = targetRoot ? resolveContainedWritePath(targetDir, targetRoot) : targetDir;
+  if (!readInstallMarker(safeTargetDir)) {
+    throw new Error(`Refusing to uninstall unowned Hermes plugin path: ${targetDir} (missing or invalid ${INSTALL_MARKER_FILE})`);
   }
-  return removed;
+  rmSync(safeTargetDir, { recursive: true, force: true });
+  return [targetDir];
 }
 function getConfigCandidates(hermesHome) {
   return [join4(hermesHome, "config.yaml"), join4(hermesHome, "cli-config.yaml")];
@@ -34547,10 +34684,10 @@ function parseDottedProviderLine(line) {
 function setDottedProviderLine(lines, line, value) {
   lines[line] = `memory.provider: ${value}`;
 }
-function writeProviderBackup(hermesHome, configPath, providerKind, previousProvider) {
+function writeProviderBackup(hermesHome, targetRoot, configPath, providerKind, previousProvider) {
   if (previousProvider === "signet")
     return null;
-  const backupPath = getProviderBackupPath(hermesHome);
+  const backupPath = resolveContainedWritePath(getProviderBackupPath(hermesHome), targetRoot);
   if (existsSync2(backupPath))
     return null;
   const backup = {
@@ -34579,8 +34716,8 @@ function readProviderBackup(hermesHome) {
     return null;
   }
 }
-function removeProviderBackup(hermesHome) {
-  const backupPath = getProviderBackupPath(hermesHome);
+function removeProviderBackup(hermesHome, targetRoot) {
+  const backupPath = targetRoot ? resolveContainedWritePath(getProviderBackupPath(hermesHome), targetRoot) : getProviderBackupPath(hermesHome);
   if (!existsSync2(backupPath))
     return null;
   rmSync(backupPath, { force: true });
@@ -34607,8 +34744,8 @@ function isProviderConfigured(hermesHome) {
   }
   return false;
 }
-function configureProvider(hermesHome, warnings) {
-  const configPath = resolveConfigPath(hermesHome);
+function configureProvider(hermesHome, warnings, targetRoot = hermesHome) {
+  const configPath = resolveContainedWritePath(resolveConfigPath(hermesHome), targetRoot);
   let content = "";
   if (existsSync2(configPath)) {
     try {
@@ -34629,13 +34766,13 @@ function configureProvider(hermesHome, warnings) {
     let changed = false;
     const dottedWasSignet = dottedProviderLineIsSignet(lines[dottedProvider] ?? "");
     if (!dottedWasSignet) {
-      backupPath = writeProviderBackup(hermesHome, configPath, "dotted", parseDottedProviderLine(lines[dottedProvider] ?? "") ?? "");
+      backupPath = writeProviderBackup(hermesHome, targetRoot, configPath, "dotted", parseDottedProviderLine(lines[dottedProvider] ?? "") ?? "");
       setDottedProviderLine(lines, dottedProvider, "signet");
       changed = true;
     }
     if (block !== null && typeof block === "object" && block.provider !== null && block.provider !== undefined) {
       if (dottedWasSignet) {
-        const nestedBackupPath = writeProviderBackup(hermesHome, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "");
+        const nestedBackupPath = writeProviderBackup(hermesHome, targetRoot, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "");
         backupPath = nestedBackupPath ?? backupPath;
       }
       lines.splice(block.provider, 1);
@@ -34656,7 +34793,7 @@ function configureProvider(hermesHome, warnings) {
   if (block !== null && typeof block === "object" && block.provider !== null && block.provider !== undefined) {
     if (providerLineIsSignet(lines[block.provider] ?? ""))
       return { configPath: null, backupPath: null };
-    backupPath = writeProviderBackup(hermesHome, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "");
+    backupPath = writeProviderBackup(hermesHome, targetRoot, configPath, "nested", parseProviderLine(lines[block.provider] ?? "") ?? "");
     lines[block.provider] = `${(lines[block.provider] ?? "").match(/^\s*/)?.[0] ?? "  "}provider: signet`;
   } else if (block !== null && typeof block === "object") {
     lines.splice(block.start + 1, 0, `${" ".repeat(block.indent)}provider: signet`);
@@ -34671,10 +34808,12 @@ function configureProvider(hermesHome, warnings) {
 `);
   return { configPath, backupPath };
 }
-function restoreOrClearProvider(hermesHome) {
+function restoreOrClearProvider(hermesHome, targetRoot) {
+  const safeConfigPath = targetRoot ? resolveContainedWritePath(resolveConfigPath(hermesHome), targetRoot) : resolveConfigPath(hermesHome);
   const config = readConfigYaml(hermesHome);
   if (!config)
-    return { configPath: null, backupPath: removeProviderBackup(hermesHome) };
+    return { configPath: null, backupPath: removeProviderBackup(hermesHome, targetRoot) };
+  resolveContainedWritePath(config.path, targetRoot ?? hermesHome);
   const lines = config.content.replace(/\r\n/g, `
 `).split(`
 `);
@@ -34699,13 +34838,13 @@ function restoreOrClearProvider(hermesHome) {
     configChanged = true;
   }
   if (configChanged) {
-    writeFileSync2(config.path, `${lines.join(`
+    writeFileSync2(safeConfigPath, `${lines.join(`
 `).replace(/\n+$/g, "")}
 `);
   }
   return {
-    configPath: configChanged ? config.path : null,
-    backupPath: removeProviderBackup(hermesHome)
+    configPath: configChanged ? safeConfigPath : null,
+    backupPath: removeProviderBackup(hermesHome, targetRoot)
   };
 }
 function pluginHasStaticToolSchemas(pluginFile) {
@@ -34868,13 +35007,16 @@ function trustedOriginForDaemonUrl(daemonUrl) {
     return null;
   }
 }
-function configuredAgentReadPolicy(warnings) {
+function configuredAgentReadPolicy(warnings, strict = false) {
   const raw = sanitizedEnv("SIGNET_AGENT_READ_POLICY") || sanitizedEnv("SIGNET_AGENT_MEMORY_POLICY");
   if (!raw)
     return "shared";
   if (raw === "isolated" || raw === "shared" || raw === "group")
     return raw;
-  warnings.push(`Ignoring unsupported SIGNET_AGENT_READ_POLICY '${raw}'. Expected one of: isolated, shared, group.`);
+  const error = `Unsupported SIGNET_AGENT_READ_POLICY '${raw}'. Expected one of: isolated, shared, group.`;
+  if (strict)
+    return null;
+  warnings.push(`Ignoring ${error}`);
   return "shared";
 }
 async function resolveDaemonAgentId(daemonUrl) {
@@ -34898,11 +35040,20 @@ async function resolveDaemonAgentId(daemonUrl) {
     return null;
   }
 }
-async function ensureNamedAgentRegistered(daemonUrl, agentId, warnings) {
-  if (!agentId || agentId === "default" || agentId === "hermes-agent")
-    return;
+async function ensureNamedAgentRegistered(daemonUrl, agentIdOrOptions, warnings) {
+  const options = typeof agentIdOrOptions === "string" ? { agentId: agentIdOrOptions } : agentIdOrOptions;
+  const { agentId } = options;
+  const strict = options.strict === true;
+  const fail = (error) => {
+    if (!strict)
+      warnings.push(error);
+    return { ok: false, agentId, error };
+  };
+  if (!agentId || agentId === "default" || agentId === "hermes-agent") {
+    return { ok: true, created: false, agentId };
+  }
   if (process.env.SIGNET_SKIP_AGENT_REGISTER === "1")
-    return;
+    return { ok: true, created: false, agentId };
   const baseUrl = trimTrailingSlashes(daemonUrl);
   const token = sanitizedAuthTokenEnv();
   const headers = {};
@@ -34915,16 +35066,24 @@ async function ensureNamedAgentRegistered(daemonUrl, agentId, warnings) {
       signal: AbortSignal.timeout(1000)
     });
     if (getResp.ok)
-      return;
+      return { ok: true, created: false, agentId };
     if (getResp.status !== 404) {
       const body = await getResp.text();
-      warnings.push(`Could not check Signet agent '${agentId}' before registration: HTTP ${getResp.status} ${body.slice(0, 200)}`);
-      return;
+      return fail(`Could not check Signet agent '${agentId}' before registration: HTTP ${getResp.status} ${body.slice(0, 200)}`);
     }
-  } catch {}
-  const readPolicy = configuredAgentReadPolicy(warnings);
-  const policyGroup = readPolicy === "group" ? sanitizedEnv("SIGNET_AGENT_POLICY_GROUP") || null : null;
+  } catch (e) {
+    if (strict) {
+      const msg = e instanceof Error ? e.message : String(e);
+      return fail(`Could not check Signet agent '${agentId}' because the daemon was unreachable. (${msg})`);
+    }
+  }
+  const readPolicy = options.readPolicy ?? configuredAgentReadPolicy(warnings, strict);
+  if (readPolicy === null)
+    return fail(`Could not register Signet agent '${agentId}' because its read policy is invalid.`);
+  const policyGroup = options.policyGroup !== undefined ? options.policyGroup : readPolicy === "group" ? sanitizedEnv("SIGNET_AGENT_POLICY_GROUP") || null : null;
   if (readPolicy === "group" && !policyGroup) {
+    if (strict)
+      return fail(`Agent '${agentId}' requested group policy but no policy group was provided.`);
     warnings.push(`SIGNET_AGENT_READ_POLICY=group requires SIGNET_AGENT_POLICY_GROUP. Registering '${agentId}' with isolated memory instead.`);
   }
   const effectiveReadPolicy = readPolicy === "group" && !policyGroup ? "isolated" : readPolicy;
@@ -34942,21 +35101,41 @@ async function ensureNamedAgentRegistered(daemonUrl, agentId, warnings) {
     });
     if (!resp.ok) {
       const body = await resp.text();
-      warnings.push(`Could not register Signet agent '${agentId}' with ${effectiveReadPolicy} memory policy: ${body.slice(0, 200)}. ${policyHint}`);
+      return fail(`Could not register Signet agent '${agentId}' with ${effectiveReadPolicy} memory policy: ${body.slice(0, 200)}. ${policyHint}`);
     }
+    return { ok: true, created: true, agentId };
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
-    warnings.push(`Could not register Signet agent '${agentId}' because the daemon was unreachable. ` + `${policyHint} (${msg})`);
+    return fail(`Could not register Signet agent '${agentId}' because the daemon was unreachable. ${policyHint} (${msg})`);
   }
 }
 
 class HermesAgentConnector extends BaseConnector {
   name = "Hermes Agent";
   harnessId = "hermes-agent";
+  target;
+  registration;
+  constructor(options) {
+    super();
+    if (options && "home" in options) {
+      this.target = options;
+      this.registration = { agentId: "", strict: options.kind === "profile" };
+    } else {
+      this.target = options?.target;
+      this.registration = options ? {
+        agentId: options.agentId ?? "",
+        readPolicy: options.readPolicy,
+        policyGroup: options.policyGroup,
+        strict: options.target?.kind === "profile"
+      } : undefined;
+    }
+  }
   getHermesHome() {
-    return resolveHermesHomePath();
+    return this.target?.home ?? resolveHermesHomePath();
   }
   getHermesRepo() {
+    if (this.target?.kind === "profile")
+      return null;
     return resolveHermesRepoPath();
   }
   getConfigPath() {
@@ -34967,16 +35146,19 @@ class HermesAgentConnector extends BaseConnector {
     const configsPatched = [];
     const warnings = [];
     const expandedBasePath = expandHome(basePath || join4(homedir(), ".agents"));
-    const strippedAgentsPath = this.stripLegacySignetBlock(expandedBasePath);
+    const hermesHome = this.getHermesHome();
+    const legacyAgentsBasePath = this.target?.kind === "profile" ? hermesHome : expandedBasePath;
+    const strippedAgentsPath = this.stripLegacySignetBlock(legacyAgentsBasePath);
     if (strippedAgentsPath !== null) {
       filesWritten.push(strippedAgentsPath);
     }
-    const hermesHome = this.getHermesHome();
+    if (this.target?.kind === "profile")
+      assertContainedTargetPath(hermesHome, this.target.home);
     const hermesRepo = this.getHermesRepo();
     let userPluginInstalled = false;
     let repoPluginInstalled = false;
     try {
-      const pluginFiles = installPlugin(getUserPluginTargetDir(hermesHome), "user");
+      const pluginFiles = installPlugin(getUserPluginTargetDir(hermesHome), "user", hermesHome);
       filesWritten.push(...pluginFiles);
       userPluginInstalled = true;
     } catch (e) {
@@ -34985,7 +35167,7 @@ class HermesAgentConnector extends BaseConnector {
     }
     if (hermesRepo) {
       try {
-        const pluginFiles = installPlugin(getRepoPluginTargetDir(hermesRepo), "repo");
+        const pluginFiles = installPlugin(getRepoPluginTargetDir(hermesRepo), "repo", hermesRepo);
         filesWritten.push(...pluginFiles);
         repoPluginInstalled = true;
       } catch (e) {
@@ -35003,7 +35185,7 @@ class HermesAgentConnector extends BaseConnector {
         warnings
       };
     }
-    const envPath = join4(hermesHome, ".env");
+    const envPath = this.target?.kind === "profile" ? resolveContainedWritePath(join4(hermesHome, ".env"), this.target.home) : join4(hermesHome, ".env");
     let configuredSignetAgentId = "default";
     const configuredDaemonUrl = (process.env.SIGNET_DAEMON_URL?.trim() || "http://127.0.0.1:3850").replace(/[\r\n]+/g, "");
     try {
@@ -35018,7 +35200,7 @@ class HermesAgentConnector extends BaseConnector {
       if (process.env.SIGNET_TRUSTED_DAEMON_ORIGINS) {
         signetVars.SIGNET_TRUSTED_DAEMON_ORIGINS = sanitizedEnv("SIGNET_TRUSTED_DAEMON_ORIGINS");
       }
-      let signetAgentId = sanitizedEnv("SIGNET_AGENT_ID");
+      let signetAgentId = this.registration?.agentId || sanitizedEnv("SIGNET_AGENT_ID");
       if (signetAgentId === "hermes-agent") {
         warnings.push("SIGNET_AGENT_ID='hermes-agent' is the harness name, not an agent scope. Re-resolving from the daemon.");
         signetAgentId = "";
@@ -35073,8 +35255,18 @@ ${key}=${value}
       const msg = e instanceof Error ? e.message : String(e);
       warnings.push(`Failed to update .env: ${msg}`);
     }
-    await ensureNamedAgentRegistered(configuredDaemonUrl, configuredSignetAgentId, warnings);
-    const providerConfig = configureProvider(hermesHome, warnings);
+    const registration = this.registration ? { ...this.registration, agentId: this.registration.agentId || configuredSignetAgentId } : configuredSignetAgentId;
+    const registrationResult = await ensureNamedAgentRegistered(configuredDaemonUrl, registration, warnings);
+    if (!registrationResult.ok && this.target?.kind === "profile") {
+      return {
+        success: false,
+        message: registrationResult.error,
+        filesWritten,
+        configsPatched,
+        warnings
+      };
+    }
+    const providerConfig = configureProvider(hermesHome, warnings, this.target?.kind === "profile" ? this.target.home : hermesHome);
     if (providerConfig.configPath) {
       configsPatched.push(providerConfig.configPath);
     }
@@ -35112,20 +35304,23 @@ ${key}=${value}
     const configsPatched = [];
     const hermesRepo = this.getHermesRepo();
     if (hermesRepo) {
-      const removed = uninstallPlugin(getRepoPluginTargetDir(hermesRepo));
+      const removed = uninstallPlugin(getRepoPluginTargetDir(hermesRepo), hermesRepo);
       filesRemoved.push(...removed);
     }
     const hermesHome = this.getHermesHome();
-    const userPluginRemoved = uninstallPlugin(getUserPluginTargetDir(hermesHome));
+    const targetRoot = this.target?.kind === "profile" ? this.target.home : undefined;
+    if (targetRoot)
+      assertContainedTargetPath(hermesHome, targetRoot);
+    const userPluginRemoved = uninstallPlugin(getUserPluginTargetDir(hermesHome), targetRoot);
     filesRemoved.push(...userPluginRemoved);
-    const providerConfig = restoreOrClearProvider(hermesHome);
+    const providerConfig = restoreOrClearProvider(hermesHome, targetRoot);
     if (providerConfig.configPath) {
       configsPatched.push(providerConfig.configPath);
     }
     if (providerConfig.backupPath) {
       filesRemoved.push(providerConfig.backupPath);
     }
-    const envPath = join4(hermesHome, ".env");
+    const envPath = targetRoot ? resolveContainedWritePath(join4(hermesHome, ".env"), targetRoot) : join4(hermesHome, ".env");
     if (existsSync2(envPath)) {
       try {
         let envContent = readFileSync2(envPath, "utf-8");
@@ -35259,6 +35454,7 @@ function createConnector() {
 }
 var src_default = HermesAgentConnector;
 export {
+  ensureNamedAgentRegistered,
   diagnoseHermesIntegration,
   src_default as default,
   createConnector,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signetai/connector-hermes-agent",
-  "version": "0.207.2",
+  "version": "0.208.1",
   "description": "Signet connector for Hermes Agent — installs Signet as a pluggable memory provider",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,8 +25,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@signetai/connector-base": "0.207.2",
-    "@signetai/core": "0.207.2"
+    "@signetai/connector-base": "0.208.1",
+    "@signetai/core": "0.208.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",