@signetai/connector-hermes-agent 0.231.2 → 0.232.1

package/dist/index.js

@@ -13,15 +13,14 @@ import { promisify } from "node:util";
 import { createHash } from "node:crypto";
 import { homedir as homedir2 } from "node:os";
 import { join as join2, resolve as resolve2 } from "node:path";
-import { constants as fsConstants, fstatSync, statfsSync as statfsSync2 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname6, join as join14, resolve as resolve8 } from "node:path";
+import { dirname as dirname6, join as join15, resolve as resolve7 } from "node:path";
 import { homedir as homedir6, platform as platform2 } from "node:os";
-import { basename, dirname as dirname7, resolve as resolve9 } from "node:path";
+import { basename, dirname as dirname7, resolve as resolve8 } from "node:path";
 import { existsSync as existsSync16, readFileSync as readFileSync13, realpathSync, statSync as statSync8 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { dirname as dirname8, join as join16 } from "node:path";
+import { dirname as dirname8, join as join17 } from "node:path";
 import { homedir as homedir8 } from "node:os";
 var __defProp = Object.defineProperty;
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
@@ -17368,6 +17367,8 @@ function expandHome(p, home = homedir2()) {
     return join2(home, p.slice(2));
   return p;
 }
+var PRIVATE_SEGMENTS = new Set([".daemon", ".secrets", "memory"]);
+var PRIVATE_ROOT_DIRS = new Set(["runtime", "data", "transcripts", "cache"]);
 var SIGNET_SOURCE_CHECKOUT_DIRNAME = "signetai";
 var SIGNET_GIT_ALLOWED_DIRECTORIES = ["skills", "tools", "dreaming"];
 var SIGNET_GIT_PROTECTED_PATHS = [
@@ -17379,6 +17380,7 @@ var SIGNET_GIT_PROTECTED_PATHS = [
   "files",
   "runtime",
   "workspace-layout.json",
+  ".workspace-layout-upgrade.json",
   "node_modules",
   ":(glob)**/node_modules/**",
   `${SIGNET_SOURCE_CHECKOUT_DIRNAME}`,
@@ -17419,11 +17421,12 @@ var SIGNET_GITIGNORE_PROTECTED_PATTERNS = [
   ".daemon/",
   ".secrets/",
   ".shadow/",
-  "cache/",
-  "data/",
-  "files/",
-  "runtime/",
+  "/cache/",
+  "/data/",
+  "/files/",
+  "/runtime/",
   "workspace-layout.json",
+  ".workspace-layout-upgrade.json",
   "node_modules/",
   `${SIGNET_SOURCE_CHECKOUT_DIRNAME}/`,
   "memory/memories.db*",
@@ -17443,10 +17446,6 @@ var SIGNET_GITIGNORE_PROTECTED_PATTERNS = [
   "*.sqlite",
   "*.sqlite3"
 ];
-var DESCRIPTOR_ROOT = process.platform === "linux" ? "/proc/self/fd" : process.platform === "darwin" ? "/dev/fd" : undefined;
-var DIRECTORY_FLAGS = fsConstants.O_RDONLY | (fsConstants.O_DIRECTORY ?? 0) | (fsConstants.O_NOFOLLOW ?? 0);
-var FILE_FLAGS = fsConstants.O_RDONLY | (fsConstants.O_NOFOLLOW ?? 0) | (fsConstants.O_NONBLOCK ?? 0);
-var NOFOLLOW = fsConstants.O_NOFOLLOW ?? 0;
 var PROTECTION_COMPONENT_IDS = [
   "root-authored",
   "skills",
@@ -17496,18 +17495,18 @@ try {
   const esmRequire = createRequire2(import.meta.url);
   native = esmRequire("@signet/native");
 } catch {}
-var GRAPHIQ_DEFAULT_INSTALL_DIR = join14(homedir5(), ".local", "bin");
+var GRAPHIQ_DEFAULT_INSTALL_DIR = join15(homedir5(), ".local", "bin");
 var DEFAULT_DISCORD_DESKTOP_CACHE_PATH = defaultDiscordDesktopCachePath();
 var DEFAULT_GITHUB_RESOURCE_TYPES = ["issues", "pulls", "discussions", "docs"];
 var VALID_GITHUB_RESOURCE_TYPES = new Set(DEFAULT_GITHUB_RESOURCE_TYPES);
 function defaultDiscordDesktopCachePath() {
   switch (platform2()) {
     case "darwin":
-      return resolve9(homedir6(), "Library", "Application Support", "discord");
+      return resolve8(homedir6(), "Library", "Application Support", "discord");
     case "win32":
-      return resolve9(process.env.APPDATA || resolve9(homedir6(), "AppData", "Roaming"), "discord");
+      return resolve8(process.env.APPDATA || resolve8(homedir6(), "AppData", "Roaming"), "discord");
     default:
-      return resolve9(process.env.XDG_CONFIG_HOME || resolve9(homedir6(), ".config"), "discord");
+      return resolve8(process.env.XDG_CONFIG_HOME || resolve8(homedir6(), ".config"), "discord");
   }
 }
 var IDENTITY_FILES = {
@@ -17570,27 +17569,27 @@ function userHome() {
 }
 function resolveHermesHomePath() {
   const hermesHome = process.env.HERMES_HOME?.trim();
-  return hermesHome || join16(userHome(), ".hermes");
+  return hermesHome || join17(userHome(), ".hermes");
 }
 function hermesAgentCandidateDirs() {
   const home = userHome();
   const hermesHome = resolveHermesHomePath();
   return [
     hermesHome,
-    join16(hermesHome, "hermes-agent"),
-    join16(home, "hermes-agent"),
-    join16(home, ".local", "share", "hermes-agent"),
-    join16(home, "src", "hermes-agent"),
+    join17(hermesHome, "hermes-agent"),
+    join17(home, "hermes-agent"),
+    join17(home, ".local", "share", "hermes-agent"),
+    join17(home, "src", "hermes-agent"),
     "/opt/hermes-agent"
   ];
 }
 function resolveHermesRepoPath() {
   const hermesRepo = process.env.HERMES_REPO?.trim();
-  if (hermesRepo && existsSync16(join16(hermesRepo, "plugins", "memory"))) {
+  if (hermesRepo && existsSync16(join17(hermesRepo, "plugins", "memory"))) {
     return hermesRepo;
   }
   for (const base of hermesAgentCandidateDirs()) {
-    if (existsSync16(join16(base, "plugins", "memory")))
+    if (existsSync16(join17(base, "plugins", "memory")))
       return base;
   }
   try {
@@ -17601,7 +17600,7 @@ function resolveHermesRepoPath() {
     }).trim();
     if (hermesPath) {
       const repoDir = dirname8(realpathSync(hermesPath));
-      if (existsSync16(join16(repoDir, "plugins", "memory")))
+      if (existsSync16(join17(repoDir, "plugins", "memory")))
         return repoDir;
     }
   } catch {}
@@ -17615,7 +17614,7 @@ import {
   closeSync,
   constants,
   existsSync as existsSync2,
-  fstatSync as fstatSync3,
+  fstatSync,
   ftruncateSync,
   lstatSync,
   mkdirSync,
@@ -17645,15 +17644,14 @@ import {
 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 import { createHash as createHash2 } from "node:crypto";
-import { constants as fsConstants2, fstatSync as fstatSync2, statfsSync as statfsSync22 } from "node:fs";
 import { createRequire as createRequire22 } from "node:module";
 import { homedir as homedir52 } from "node:os";
-import { dirname as dirname62, join as join142, resolve as resolve82 } from "node:path";
+import { dirname as dirname62, join as join152, resolve as resolve72 } from "node:path";
 import { homedir as homedir62, platform as platform22 } from "node:os";
-import { basename as basename3, dirname as dirname72, resolve as resolve92 } from "node:path";
+import { basename as basename3, dirname as dirname72, resolve as resolve82 } from "node:path";
 import { homedir as homedir82 } from "node:os";
 import { existsSync as existsSync18, lstatSync as lstatSync3, mkdirSync as mkdirSync10, readdirSync as readdirSync9, symlinkSync as symlinkSync2, unlinkSync as unlinkSync2 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 var __defProp2 = Object.defineProperty;
 var __commonJS2 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __esm2 = (fn, res, err) => () => {
@@ -34977,6 +34975,8 @@ var $parseDocument2 = publicApi2.parseDocument;
 var $stringify2 = publicApi2.stringify;
 var $visit2 = visit2.visit;
 var $visitAsync2 = visit2.visitAsync;
+var PRIVATE_SEGMENTS2 = new Set([".daemon", ".secrets", "memory"]);
+var PRIVATE_ROOT_DIRS2 = new Set(["runtime", "data", "transcripts", "cache"]);
 var SIGNET_SOURCE_CHECKOUT_DIRNAME2 = "signetai";
 var SIGNET_GIT_ALLOWED_DIRECTORIES2 = ["skills", "tools", "dreaming"];
 var SIGNET_GIT_PROTECTED_PATHS2 = [
@@ -34988,6 +34988,7 @@ var SIGNET_GIT_PROTECTED_PATHS2 = [
   "files",
   "runtime",
   "workspace-layout.json",
+  ".workspace-layout-upgrade.json",
   "node_modules",
   ":(glob)**/node_modules/**",
   `${SIGNET_SOURCE_CHECKOUT_DIRNAME2}`,
@@ -35028,11 +35029,12 @@ var SIGNET_GITIGNORE_PROTECTED_PATTERNS2 = [
   ".daemon/",
   ".secrets/",
   ".shadow/",
-  "cache/",
-  "data/",
-  "files/",
-  "runtime/",
+  "/cache/",
+  "/data/",
+  "/files/",
+  "/runtime/",
   "workspace-layout.json",
+  ".workspace-layout-upgrade.json",
   "node_modules/",
   `${SIGNET_SOURCE_CHECKOUT_DIRNAME2}/`,
   "memory/memories.db*",
@@ -35052,10 +35054,6 @@ var SIGNET_GITIGNORE_PROTECTED_PATTERNS2 = [
   "*.sqlite",
   "*.sqlite3"
 ];
-var DESCRIPTOR_ROOT2 = process.platform === "linux" ? "/proc/self/fd" : process.platform === "darwin" ? "/dev/fd" : undefined;
-var DIRECTORY_FLAGS2 = fsConstants2.O_RDONLY | (fsConstants2.O_DIRECTORY ?? 0) | (fsConstants2.O_NOFOLLOW ?? 0);
-var FILE_FLAGS2 = fsConstants2.O_RDONLY | (fsConstants2.O_NOFOLLOW ?? 0) | (fsConstants2.O_NONBLOCK ?? 0);
-var NOFOLLOW2 = fsConstants2.O_NOFOLLOW ?? 0;
 var PROTECTION_COMPONENT_IDS2 = [
   "root-authored",
   "skills",
@@ -35105,18 +35103,18 @@ try {
   const esmRequire = createRequire22(import.meta.url);
   native2 = esmRequire("@signet/native");
 } catch {}
-var GRAPHIQ_DEFAULT_INSTALL_DIR2 = join142(homedir52(), ".local", "bin");
+var GRAPHIQ_DEFAULT_INSTALL_DIR2 = join152(homedir52(), ".local", "bin");
 var DEFAULT_DISCORD_DESKTOP_CACHE_PATH2 = defaultDiscordDesktopCachePath2();
 var DEFAULT_GITHUB_RESOURCE_TYPES2 = ["issues", "pulls", "discussions", "docs"];
 var VALID_GITHUB_RESOURCE_TYPES2 = new Set(DEFAULT_GITHUB_RESOURCE_TYPES2);
 function defaultDiscordDesktopCachePath2() {
   switch (platform22()) {
     case "darwin":
-      return resolve92(homedir62(), "Library", "Application Support", "discord");
+      return resolve82(homedir62(), "Library", "Application Support", "discord");
     case "win32":
-      return resolve92(process.env.APPDATA || resolve92(homedir62(), "AppData", "Roaming"), "discord");
+      return resolve82(process.env.APPDATA || resolve82(homedir62(), "AppData", "Roaming"), "discord");
     default:
-      return resolve92(process.env.XDG_CONFIG_HOME || resolve92(homedir62(), ".config"), "discord");
+      return resolve82(process.env.XDG_CONFIG_HOME || resolve82(homedir62(), ".config"), "discord");
   }
 }
 var IDENTITY_FILES2 = {
@@ -35187,7 +35185,7 @@ function symlinkSkills(sourceDir, targetDir, options = {}) {
   if (!existsSync18(sourceDir)) {
     return result;
   }
-  const targetParent = join18(targetDir, "..");
+  const targetParent = join19(targetDir, "..");
   if (!existsSync18(targetParent)) {
     mkdirSync10(targetParent, { recursive: true });
   }
@@ -35205,8 +35203,8 @@ function symlinkSkills(sourceDir, targetDir, options = {}) {
     return result;
   }
   for (const entry of entries) {
-    const srcPath = join18(sourceDir, entry);
-    const destPath = join18(targetDir, entry);
+    const srcPath = join19(sourceDir, entry);
+    const destPath = join19(targetDir, entry);
     try {
       const src = lstatSync3(srcPath);
       if (src.isSymbolicLink() || !src.isDirectory()) {
@@ -35412,8 +35410,8 @@ var REQUIRED_TOOL_NAMES = [
   "recall",
   "remember"
 ];
-var DESCRIPTOR_ROOT3 = process.platform === "linux" ? "/proc/self/fd" : process.platform === "darwin" ? "/dev/fd" : null;
-var DESCRIPTOR_WRITES_SUPPORTED = DESCRIPTOR_ROOT3 !== null && typeof constants.O_DIRECTORY === "number" && typeof constants.O_NOFOLLOW === "number";
+var DESCRIPTOR_ROOT = process.platform === "linux" ? "/proc/self/fd" : process.platform === "darwin" ? "/dev/fd" : null;
+var DESCRIPTOR_WRITES_SUPPORTED = DESCRIPTOR_ROOT !== null && typeof constants.O_DIRECTORY === "number" && typeof constants.O_NOFOLLOW === "number";
 var DESCRIPTOR_WRITE_UNAVAILABLE_ERROR = "Targeted Hermes profile writes require descriptor-backed no-follow filesystem support";
 function pathEntryExists(path) {
   try {
@@ -35424,9 +35422,9 @@ function pathEntryExists(path) {
   }
 }
 function descriptorPath(fd) {
-  if (DESCRIPTOR_ROOT3 === null)
+  if (DESCRIPTOR_ROOT === null)
     throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
-  return join5(DESCRIPTOR_ROOT3, String(fd));
+  return join5(DESCRIPTOR_ROOT, String(fd));
 }
 function isPathWithin(root, candidate) {
   const rel = relative2(root, candidate);
@@ -35657,7 +35655,7 @@ function getPythonCandidates() {
   ];
 }
 function runSecureFilesystemOperation(fd, rootPath, script, args, input) {
-  if (DESCRIPTOR_ROOT3 === null)
+  if (DESCRIPTOR_ROOT === null)
     throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
   const errors = [];
   for (const candidate of getPythonCandidates()) {
@@ -35681,7 +35679,7 @@ function runSecureFilesystemOperation(fd, rootPath, script, args, input) {
   throw new Error(`${DESCRIPTOR_WRITE_UNAVAILABLE_ERROR}: ${errors.join("; ") || "No Python interpreter found"}`);
 }
 function runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expectedIno, operation) {
-  if (DESCRIPTOR_ROOT3 === null)
+  if (DESCRIPTOR_ROOT === null)
     throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
   const errors = [];
   for (const candidate of getPythonCandidates()) {
@@ -35725,7 +35723,7 @@ function sameStatIdentity(left, right) {
 }
 function assertDescriptorPathIdentity(fd, path, message) {
   const pathStat = lstatSync(path);
-  if (realpathSync3(path) !== path || pathStat.isSymbolicLink() || !sameStatIdentity(fstatSync3(fd), pathStat)) {
+  if (realpathSync3(path) !== path || pathStat.isSymbolicLink() || !sameStatIdentity(fstatSync(fd), pathStat)) {
     throw new Error(message);
   }
 }
@@ -35860,7 +35858,7 @@ function writeContainedFile(targetPath, content, targetRoot) {
     const fileFd = openSync(filePath, constants.O_WRONLY | constants.O_NOFOLLOW | (existingFileIdentity === undefined ? constants.O_CREAT | constants.O_EXCL : 0), 438);
     try {
       const expectedFile = join5(expected, fileName);
-      if (existingFileIdentity !== undefined && !sameStatIdentity(existingFileIdentity, fstatSync3(fileFd))) {
+      if (existingFileIdentity !== undefined && !sameStatIdentity(existingFileIdentity, fstatSync(fileFd))) {
         throw new Error(`Hermes target file changed during secure write: ${targetPath}`);
       }
       if (realpathSync3(descriptorPath(fileFd)) !== expectedFile) {
@@ -35955,7 +35953,7 @@ function removeDirectoryContentsNoFollow(directoryFd, expectedDirectoryPath) {
     if (entry.isDirectory() && !entry.isSymbolicLink()) {
       const childFd = openDirectoryNoFollow(childPath);
       try {
-        const childIdentity = fstatSync3(childFd);
+        const childIdentity = fstatSync(childFd);
         assertDescriptorPathIdentity(childFd, expectedChildPath, `Hermes target directory changed during secure removal: ${expectedChildPath}`);
         assertEntryIdentityNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity.dev, childIdentity.ino);
         removeDirectoryContentsNoFollow(childFd, expectedChildPath);
@@ -36003,7 +36001,7 @@ function removeContainedDirectory(targetPath, targetRoot, targetKind, unownedTar
     const targetEntryPath = process.platform === "darwin" ? expectedTarget : join5(descriptorPath(parentFd), targetName);
     const targetFd = openDirectoryNoFollow(targetEntryPath);
     try {
-      const targetIdentity = fstatSync3(targetFd);
+      const targetIdentity = fstatSync(targetFd);
       assertDescriptorPathIdentity(targetFd, expectedTarget, `Hermes target directory changed during secure removal: ${targetPath}`);
       const marker = readInstallMarkerFromDirectory(targetFd, expectedTarget);
       if (marker === null || marker.targetKind !== targetKind) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signetai/connector-hermes-agent",
-  "version": "0.231.2",
+  "version": "0.232.1",
   "description": "Signet connector for Hermes Agent — installs Signet as a pluggable memory provider",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,8 +25,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@signetai/connector-base": "0.231.2",
-    "@signetai/core": "0.231.2"
+    "@signetai/connector-base": "0.232.1",
+    "@signetai/core": "0.232.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",