@tunnelbox/hermes 0.1.0

package/README.md

@@ -0,0 +1,82 @@
+# @tunnelbox/hermes
+
+tunnelbox 的 **Hermes Agent 适配器**（B 类，独立进程，Python 框架/CLI 桥接）：手机远程驱动电脑上的 Hermes Agent（会话/流式/中止/删除），复用 `@tunnelbox/core`（RelayClient/状态/二维码）。
+
+```
+手机 PWA ──WSS──► relay ──WSS──► 本适配器（电脑上常驻 Node 进程）
+                                      └─ hermes chat -q "<text>"（每消息一次子进程）
+```
+
+## 前置条件
+
+- Node.js ≥ 22；
+- 本机已安装 **Hermes Agent**（NousResearch/hermes-agent）并完成登录/模型配置：
+  `curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash`（或各平台安装方式），
+  `hermes setup` / `hermes portal` 可用，`hermes chat -q "hi"` 能正常应答。
+- CLI 非交互单轮模式：`hermes chat -q "…"`（`--model/--provider/--toolsets/--query-file`）。
+
+## 构建与运行
+
+```bash
+cd plugin && npm install            # workspaces 根（含 hermes）
+cd hermes && npm run build
+node dist/index.mjs                 # 或 npm start
+```
+
+## 配置
+
+| 环境变量 | 默认 | 说明 |
+|---|---|---|
+| `TUNNELBOX_RELAY_URL` | state 保存地址 | 中继地址 |
+| `TUNNELBOX_CWD` | `process.cwd()` | 默认工作区 |
+| `TUNNELBOX_HERMES_MODEL` | hermes 默认 | `--model` |
+| `TUNNELBOX_HERMES_PROVIDER` | hermes 默认 | `--provider`（如 nous/openrouter） |
+| `TUNNELBOX_HERMES_TOOLSETS` | hermes 默认 | `--toolsets`（逗号分隔） |
+| `TUNNELBOX_HERMES_VERBOSE` | 关 | `--verbose` |
+| `TUNNELBOX_HERMES_BIN` | `hermes` | hermes 可执行名/绝对路径 |
+
+```bash
+TUNNELBOX_RELAY_URL=wss://chat.example.com TUNNELBOX_HERMES_MODEL="anthropic/claude-sonnet-4" node dist/index.mjs
+```
+
+## 能力位
+
+| 能力 | 值 | 说明 |
+|---|---|---|
+| streaming | true | `hermes chat -q` stdout 增量剥离 ANSI 后按到达转发 delta |
+| thinking | false | `-q` 无结构化推理部件 |
+| permission | **false** | 无审批回调；工具集/授权由 hermes 自身安全策略决定 |
+| commands | true | `/new` `/help` |
+| abort | true | kill 子进程（SIGTERM → SIGKILL） |
+
+## 会话模型
+
+- 会话 = 本地镜像（`~/.config/opencode/hermes-sessions/<uuid>/`）：每个流式部件/用户消息即时落一行，供列表/历史/删除。
+- 续聊：尽力从输出解析 hermes session id（形如 `20260225_143052_a1b2c3`，`meta.resumeId`）→ 后续消息用 `--resume <id>`；解析不到则该会话每次为独立问答（连续上下文受限）。
+- 状态文件：`~/.config/opencode/remote-state.hermes.json`。
+
+## 官方 Hermes 插件（native-plugin）
+
+本包同时提供符合 Hermes 官方插件体系的 **Native 插件**（`native-plugin/`，Python，`plugin.yaml` + `register(ctx)`），
+在本机 Hermes 会话内使用（工具 `tunnelbox_pair`/`tunnelbox_status`、`/tunnelbox` 命令、打包技能 + 实验性回合级手机桥）——
+功能主体仍由本 headless 桥承担。安装/配置/局限见 [`native-plugin/README.md`](./native-plugin/README.md)。
+
+## 目录结构
+
+```
+plugin/hermes/
+├── package.json / tsconfig.json
+├── scripts/build.mjs / smoke.mjs
+├── native-plugin/  # ★ Hermes 官方 Native 插件（Python，本机会话内配对/状态 + 回合级桥实验）
+└── src/
+    ├── index.ts       # env 解析 + 连接中继
+    ├── bridge.ts      # relay/配对/消息路由/回合/镜像写入
+    ├── runner.ts      # hermes chat -q 子进程（stdout 增量 + ANSI 剥离 + session id 采集 + kill）
+    ├── mirror.ts      # 会话镜像存储（列表/历史/删除/meta）
+    └── globals.d.ts
+```
+
+## 备注
+
+- 未验证项（需装有 hermes 实测校正）：`hermes chat -q` 在 stdout 的确切输出（是否 ANSI/分批/进度行）、`chat -q` 下 `--resume` 参数位置与语义、session id 是否出现在 `-q` 输出中、`--toolsets/--provider` 参数名。解析集中在 `runner.ts`。
+- 安全：hermes 工具执行/命令授权由其自身策略（config/安全文档）管理，本适配器不自动放行；请勿在不受信目录运行时不受限工具集。

package/dist/index.mjs

@@ -0,0 +1,794 @@
+// tunnelbox hermes adapter — built by scripts/build.mjs
+
+// src/index.ts
+import { resolve as resolve2 } from "node:path";
+import { fileURLToPath } from "node:url";
+
+// src/bridge.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync as existsSync3, statSync as statSync2 } from "node:fs";
+import { hostname } from "node:os";
+import { resolve } from "node:path";
+
+// ../core/src/types.ts
+function envelope(type, payload, id) {
+  return { id, type, payload, ts: Date.now() };
+}
+
+// ../core/src/relay.ts
+var BASE_DELAY = 1e3;
+var MAX_DELAY = 15e3;
+var RelayClient = class {
+  ws = null;
+  url = "";
+  headers = {};
+  handlers = null;
+  timer = null;
+  retry = 0;
+  stopped = false;
+  connected = false;
+  get isConnected() {
+    return this.connected;
+  }
+  connect(url, headers, handlers) {
+    this.url = url;
+    this.headers = headers;
+    this.handlers = handlers;
+    this.stopped = false;
+    this.retry = 0;
+    this.open();
+  }
+  send(env) {
+    if (this.ws && this.connected) {
+      try {
+        this.ws.send(JSON.stringify(env));
+        return true;
+      } catch {
+        return false;
+      }
+    }
+    return false;
+  }
+  close() {
+    this.stopped = true;
+    if (this.timer) clearTimeout(this.timer);
+    this.timer = null;
+    if (this.ws) {
+      try {
+        this.ws.close();
+      } catch {
+      }
+    }
+    this.ws = null;
+    this.connected = false;
+  }
+  open() {
+    if (this.stopped) return;
+    try {
+      const ws = new WebSocket(this.url, { headers: this.headers });
+      this.ws = ws;
+      ws.onopen = () => {
+        this.connected = true;
+        this.retry = 0;
+        this.handlers?.onOpen();
+      };
+      ws.onmessage = (ev) => {
+        try {
+          const msg = JSON.parse(String(ev.data));
+          this.handlers?.onMessage(msg);
+        } catch {
+        }
+      };
+      ws.onerror = (e) => this.handlers?.onError(e);
+      ws.onclose = () => {
+        this.connected = false;
+        this.ws = null;
+        this.handlers?.onClose();
+        this.scheduleReconnect();
+      };
+    } catch (e) {
+      this.handlers?.onError(e);
+      this.scheduleReconnect();
+    }
+  }
+  scheduleReconnect() {
+    if (this.stopped) return;
+    const delay = Math.min(BASE_DELAY * 2 ** this.retry, MAX_DELAY);
+    this.retry++;
+    this.timer = setTimeout(() => this.open(), delay);
+  }
+};
+
+// ../core/src/state.ts
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+var DEFAULT_RELAY_URL = process.env.TUNNELBOX_RELAY_URL || (process.env.NODE_ENV === "production" ? "wss://chat.wxngrok.com" : "ws://127.0.0.1:8080");
+function baseName() {
+  return join(homedir(), ".config", "opencode");
+}
+function suffix(type) {
+  return type ? `.${type}` : "";
+}
+function statePath(type) {
+  return join(baseName(), `remote-state${suffix(type)}.json`);
+}
+function saveState(st, type) {
+  try {
+    const p = statePath(type);
+    mkdirSync(dirname(p), { recursive: true });
+    writeFileSync(p, JSON.stringify(st, null, 2), "utf8");
+  } catch (e) {
+    console.error("[tunnelbox] \u4FDD\u5B58\u72B6\u6001\u5931\u8D25", e);
+  }
+}
+function loadState(type) {
+  const fallback = {
+    agentId: randomBytes(16).toString("hex"),
+    relayUrl: DEFAULT_RELAY_URL
+  };
+  try {
+    if (!existsSync(statePath(type))) {
+      saveState(fallback, type);
+      return fallback;
+    }
+    const parsed = JSON.parse(readFileSync(statePath(type), "utf8"));
+    if (parsed.agentId && parsed.agentId.length >= 16) {
+      return {
+        agentId: parsed.agentId,
+        relayUrl: parsed.relayUrl || DEFAULT_RELAY_URL,
+        claimed: parsed.claimed === true
+      };
+    }
+    saveState(fallback, type);
+    return fallback;
+  } catch {
+    saveState(fallback, type);
+    return fallback;
+  }
+}
+function writePairingFile(link, code, type) {
+  const p = join(baseName(), `remote-pairing${suffix(type)}.txt`);
+  try {
+    mkdirSync(dirname(p), { recursive: true });
+    writeFileSync(p, `\u914D\u5BF9\u7801: ${code}
+\u914D\u5BF9\u94FE\u63A5: ${link}
+`, "utf8");
+  } catch {
+  }
+  return p;
+}
+function writePairingJson(info, type) {
+  const p = join(baseName(), `remote-pairing${suffix(type)}.json`);
+  try {
+    mkdirSync(dirname(p), { recursive: true });
+    writeFileSync(p, JSON.stringify(info, null, 2), "utf8");
+  } catch {
+  }
+  return p;
+}
+
+// ../core/src/qr.ts
+async function printPairing(relayHttpBase, code, type, name) {
+  const p = new URLSearchParams({ code });
+  if (type) p.set("type", type);
+  if (name) p.set("name", name);
+  const link = `${relayHttpBase}/app/#/pages/index/index?${p.toString()}`;
+  const file = writePairingFile(link, code, type);
+  const tag = type ? ` ${type}` : "";
+  console.log("");
+  console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+  console.log(`\u2502                tunnelbox${tag} \u624B\u673A\u914D\u5BF9               \u2502`);
+  console.log("\u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524");
+  console.log(`\u2502  \u914D\u5BF9\u7801: ${code.padEnd(42)} \u2502`);
+  console.log(`\u2502  \u94FE\u63A5  : ${link.padEnd(42)} \u2502`);
+  console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+  console.log("  \u624B\u673A\u6D4F\u89C8\u5668\u6253\u5F00\u94FE\u63A5\uFF0C\u6216\u6253\u5F00 App \u540E\u624B\u52A8\u8F93\u5165\u914D\u5BF9\u7801\u3002");
+  try {
+    const mod = await import("qrcode");
+    const render = mod.default ?? mod;
+    const toString = render.toString;
+    if (toString) {
+      const qr = await toString(link, { type: "terminal", small: true });
+      if (qr) console.log(qr);
+    }
+  } catch {
+    console.log("  \uFF08\u672A\u5B89\u88C5 qrcode\uFF0C\u8BF7\u4F7F\u7528\u4E0A\u65B9\u94FE\u63A5\u6216\u914D\u5BF9\u7801\uFF09");
+  }
+  console.log(`  \u914D\u5BF9\u4FE1\u606F\u5DF2\u5199\u5165: ${file}`);
+  console.log("");
+}
+
+// src/runner.ts
+import { spawn } from "node:child_process";
+var HermesProcess = class {
+  constructor(displaySessionID, hooks) {
+    this.displaySessionID = displaySessionID;
+    this.hooks = hooks;
+  }
+  child = null;
+  killed = false;
+  seq = 0;
+  msgId = null;
+  emitCount = 0;
+  capturedId = null;
+  get resumeId() {
+    return this.capturedId;
+  }
+  get produced() {
+    return this.emitCount > 0;
+  }
+  start(opts, text, resumeId) {
+    return new Promise((resolve3, reject) => {
+      let stderrBuf = "";
+      let settled = false;
+      const done = (err) => {
+        if (settled) return;
+        settled = true;
+        if (err) reject(err);
+        else resolve3();
+      };
+      const bin = opts.bin || "hermes";
+      const args = ["chat", "-q"];
+      if (resumeId) args.push("--resume", resumeId);
+      if (opts.provider) args.push("--provider", opts.provider);
+      if (opts.model) args.push("--model", opts.model);
+      if (opts.toolsets) args.push("--toolsets", opts.toolsets);
+      if (opts.verbose) args.push("--verbose");
+      args.push(text);
+      let child;
+      try {
+        child = spawn(bin, args, { cwd: opts.cwd, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+      } catch (e) {
+        done(new Error(`\u65E0\u6CD5\u542F\u52A8 Hermes\uFF08hermes\uFF09\uFF1A\u8BF7\u786E\u8BA4\u5DF2\u5B89\u88C5\uFF08${e.message}\uFF09`));
+        return;
+      }
+      this.child = child;
+      child.stdout?.setEncoding("utf8");
+      child.stdout?.on("data", (chunk) => this.onStdout(chunk));
+      child.stderr?.setEncoding("utf8");
+      child.stderr?.on("data", (chunk) => {
+        stderrBuf += chunk;
+        for (const l of chunk.split("\n")) {
+          const s = stripAnsi(l).trim();
+          if (s && /error|login|auth|key|not (found|installed)|denied|failed/i.test(s)) {
+            this.hooks.log(`hermes: ${s.slice(0, 300)}`);
+          }
+        }
+      });
+      child.on("error", (e) => {
+        if (!this.killed) done(new Error(`Hermes \u542F\u52A8\u5931\u8D25: ${e.message}`));
+      });
+      child.on("close", (code, signal) => {
+        if (this.killed || signal) {
+          done();
+          return;
+        }
+        if (code !== 0) {
+          const err = stderrBuf.trim().split("\n").pop() || `hermes \u9000\u51FA\u7801 ${code}`;
+          this.error(`hermes \u9000\u51FA(${code}): ${stripAnsi(err).slice(0, 500)}`);
+        }
+        done();
+      });
+    });
+  }
+  kill() {
+    this.killed = true;
+    if (this.child && this.child.exitCode === null) {
+      try {
+        this.child.kill("SIGTERM");
+      } catch {
+      }
+      setTimeout(() => {
+        try {
+          if (this.child && this.child.exitCode === null) this.child.kill("SIGKILL");
+        } catch {
+        }
+      }, 1500);
+    }
+  }
+  error(text) {
+    this.hooks.emit(this.displaySessionID, `m-err-${Date.now()}`, {
+      id: "err",
+      type: "text",
+      text: `[hermes] ${text}`,
+      complete: true
+    });
+    this.hooks.status(this.displaySessionID, "error");
+  }
+  onStdout(chunk) {
+    const clean = stripAnsi(chunk);
+    if (!clean) return;
+    if (!this.capturedId) {
+      const m = clean.match(/(?:--resume\s+)?\b(\d{8}_\d{6}_[0-9a-fA-F]{3,})\b/);
+      if (m) {
+        this.capturedId = m[1];
+        this.hooks.onResumeId?.(m[1]);
+      }
+    }
+    const meaningful = clean.replace(/^\s*[\n\r]+/, "").replace(/[\n\r]+$/, "");
+    if (!meaningful) return;
+    if (!this.msgId) this.msgId = `m-${Date.now()}-${++this.seq}`;
+    this.emitCount++;
+    this.hooks.emit(this.displaySessionID, this.msgId, { id: "t", type: "text", delta: meaningful, complete: false });
+  }
+};
+var ANSI = /\u001B\[[0-9;?]*[ -\/]*[@-~]/g;
+function stripAnsi(s) {
+  return s.replace(ANSI, "");
+}
+
+// src/mirror.ts
+import {
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  readFileSync as readFileSync2,
+  readdirSync,
+  rmSync,
+  statSync,
+  writeFileSync as writeFileSync2
+} from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join2 } from "node:path";
+function root() {
+  return join2(homedir2(), ".config", "opencode", "hermes-sessions");
+}
+function dirOf(sessionID) {
+  return join2(root(), sessionID);
+}
+var FILE = "session.jsonl";
+var META = "meta.json";
+function readMeta(sessionID) {
+  try {
+    const p = join2(dirOf(sessionID), META);
+    if (existsSync2(p)) return JSON.parse(readFileSync2(p, "utf8"));
+  } catch {
+  }
+  return null;
+}
+function getMeta(sessionID) {
+  return readMeta(sessionID);
+}
+function writeMeta(sessionID, meta) {
+  try {
+    mkdirSync2(dirOf(sessionID), { recursive: true });
+    writeFileSync2(join2(dirOf(sessionID), META), JSON.stringify(meta, null, 2), "utf8");
+  } catch {
+  }
+}
+function newSessionId() {
+  if (typeof globalThis.crypto?.randomUUID === "function") return globalThis.crypto.randomUUID();
+  return `s-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+function saveMeta(sessionID, patch) {
+  const prev = readMeta(sessionID) || { title: "\u65B0\u4F1A\u8BDD", created: Date.now(), updated: Date.now() };
+  const meta = { ...prev, ...patch, updated: Date.now() };
+  writeMeta(sessionID, meta);
+  return meta;
+}
+function appendPart(sessionID, msgId, role, part, created = Date.now()) {
+  try {
+    const d = dirOf(sessionID);
+    mkdirSync2(d, { recursive: true });
+    const line = JSON.stringify({ id: msgId, role, parts: [part], created });
+    writeFileSync2(join2(d, FILE), line + "\n", { encoding: "utf8", flag: "a" });
+    if (role === "user" && part.type === "text" && part.text) {
+      const meta = readMeta(sessionID);
+      if (!meta || meta.title === "\u65B0\u4F1A\u8BDD") {
+        const t = part.text.trim();
+        saveMeta(sessionID, { title: t.length > 30 ? `${t.slice(0, 30)}\u2026` : t });
+      }
+    }
+    saveMeta(sessionID, {});
+  } catch {
+  }
+}
+function exists(sessionID) {
+  return existsSync2(join2(dirOf(sessionID), FILE));
+}
+function walkDirs() {
+  try {
+    return readdirSync(root()).filter((n) => existsSync2(join2(root(), n, FILE)));
+  } catch {
+    return [];
+  }
+}
+async function listSessions() {
+  const out = [];
+  for (const id of walkDirs()) {
+    const meta = readMeta(id);
+    if (!meta) continue;
+    out.push({ id, title: meta.title, created: meta.created, updated: meta.updated, status: "idle", workspace: meta.cwd });
+  }
+  return out.sort((a, b) => b.updated - a.updated);
+}
+async function readHistory(sessionID) {
+  let lines;
+  try {
+    lines = readFileSync2(join2(dirOf(sessionID), FILE), "utf8").split("\n");
+  } catch {
+    return [];
+  }
+  const byId = /* @__PURE__ */ new Map();
+  const order = [];
+  for (const line of lines) {
+    const s = line.trim();
+    if (!s) continue;
+    try {
+      const o = JSON.parse(s);
+      if (!o.id || !Array.isArray(o.parts)) continue;
+      const hit = byId.get(o.id);
+      if (hit) {
+        hit.parts.push(...o.parts);
+      } else {
+        order.push(o.id);
+        byId.set(o.id, { id: o.id, role: o.role, parts: [...o.parts], created: o.created ?? Date.now() });
+      }
+    } catch {
+    }
+  }
+  return order.map((id) => byId.get(id)).filter((m) => m.parts.length);
+}
+async function removeSession(sessionID) {
+  try {
+    rmSync(dirOf(sessionID), { recursive: true, force: true });
+  } catch {
+  }
+}
+
+// src/bridge.ts
+var VERSION = "0.1.0";
+var AGENT_TYPE = "hermes";
+var ADAPTER_COMMANDS = [
+  { name: "new", description: "\u65B0\u5EFA\u4F1A\u8BDD" },
+  { name: "help", description: "\u663E\u793A\u5E2E\u52A9" }
+];
+var HermesBridge = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+    this.currentWorkspace = resolve(cfg.cwd || process.cwd());
+  }
+  ws = new RelayClient();
+  state = loadState(AGENT_TYPE);
+  claimed = !!this.state.claimed;
+  everConnected = false;
+  relayBase = "";
+  currentWorkspace;
+  pendingWorkspaces = /* @__PURE__ */ new Map();
+  sessionCwd = /* @__PURE__ */ new Map();
+  activeRuns = /* @__PURE__ */ new Map();
+  get relayHttpBase() {
+    return this.relayBase.replace(/^ws/, "http").replace(/\/+$/, "");
+  }
+  async start() {
+    const url = (this.cfg.relayUrl || this.state.relayUrl || "").replace(/\/+$/, "");
+    this.relayBase = url;
+    this.connect(url);
+  }
+  dispose() {
+    this.ws.close();
+    for (const p of this.activeRuns.values()) p.kill();
+    this.activeRuns.clear();
+  }
+  log(msg) {
+    console.log(`[tunnelbox:hermes] ${msg}`);
+  }
+  send(e) {
+    return this.ws.send(e);
+  }
+  reply(src, type, payload) {
+    const msg = envelope(type, payload, src.id);
+    msg.clientID = src.clientID;
+    this.send(msg);
+  }
+  pairingLink(code) {
+    const p = new URLSearchParams({ code, type: AGENT_TYPE, name: hostname() });
+    return `${this.relayHttpBase}/app/#/pages/index/index?${p.toString()}`;
+  }
+  connect(url) {
+    const agentID = this.state.agentId;
+    const wsUrl = `${url}/ws/agent?token=${encodeURIComponent(agentID)}`;
+    this.ws.connect(
+      wsUrl,
+      { Authorization: `Bearer ${agentID}` },
+      {
+        onOpen: () => {
+          this.everConnected = true;
+          this.log("\u5DF2\u8FDE\u63A5\u4E2D\u7EE7 " + url);
+          this.announce();
+        },
+        onMessage: (env) => {
+          void this.onMessage(env).catch((e) => this.log(`\u6D88\u606F\u5904\u7406\u672A\u6355\u83B7\u5F02\u5E38: ${e.message}`));
+        },
+        onClose: () => {
+          if (this.everConnected) {
+            this.everConnected = false;
+            this.log("\u4E0E\u4E2D\u7EE7\u65AD\u5F00\uFF0C\u6B63\u5728\u81EA\u52A8\u91CD\u8FDE\u2026");
+          }
+        },
+        onError: () => {
+        }
+      }
+    );
+  }
+  announce() {
+    const info = {
+      name: hostname(),
+      version: VERSION,
+      type: AGENT_TYPE,
+      capabilities: {
+        streaming: true,
+        // stdout 增量转发
+        thinking: false,
+        // hermes -q 无结构化推理部件
+        permission: false,
+        // 无审批回调：权限由 hermes 安全策略/工具集决定
+        commands: true,
+        abort: true
+        // kill 子进程
+      },
+      platform: process.platform,
+      directory: this.currentWorkspace,
+      timezone: localTimezone()
+    };
+    this.send(envelope("agent.info", info));
+    if (!this.claimed) this.send(envelope("pair.create", {}));
+  }
+  async onMessage(env) {
+    try {
+      switch (env.type) {
+        case "pair.created": {
+          const code = env.payload.code;
+          const link = this.pairingLink(code);
+          writePairingJson({ code, link, relayUrl: this.relayBase, at: Date.now() }, AGENT_TYPE);
+          this.log("\u751F\u6210\u914D\u5BF9\u7801: " + code);
+          void printPairing(this.relayHttpBase, code, AGENT_TYPE, hostname());
+          return;
+        }
+        case "agent.claimed":
+          this.claimed = true;
+          this.state.claimed = true;
+          saveState(this.state, AGENT_TYPE);
+          this.log("\u5DF2\u7ED1\u5B9A\u5230\u624B\u673A\u8D26\u53F7\uFF0C\u4E4B\u540E\u624B\u673A\u4ECE\u300C\u6211\u7684\u7535\u8111\u300D\u76F4\u63A5\u8FDE\u63A5");
+          return;
+        case "agent.revoked":
+          this.resetIdentity();
+          return;
+        case "session.list":
+          return this.sessionList(env);
+        case "session.create":
+          return this.sessionCreate(env);
+        case "session.messages":
+          return this.sessionMessages(env);
+        case "session.prompt":
+          return this.sessionPrompt(env);
+        case "session.abort":
+          return this.sessionAbort(env);
+        case "session.delete":
+          return this.sessionDelete(env);
+        case "command.list":
+          return this.commandList(env);
+        case "workspace.list":
+          return this.workspaceList(env);
+        case "workspace.set":
+          return this.workspaceSet(env);
+        case "error":
+          return;
+        default:
+          this.log("\u672A\u5904\u7406\u7684\u6D88\u606F\u7C7B\u578B: " + env.type);
+      }
+    } catch (e) {
+      this.log(`\u5904\u7406 ${env.type} \u5931\u8D25: ${e.message}`);
+      this.reply(env, "error", { code: "HANDLER_ERROR", message: e.message, id: env.id });
+    }
+  }
+  async sessionList(env) {
+    const sessions = (await listSessions()).map((s) => ({
+      ...s,
+      status: this.activeRuns.has(s.id) ? "running" : s.status
+    }));
+    this.reply(env, "sessions", { sessions });
+  }
+  async sessionCreate(env) {
+    const payload = env.payload;
+    const workspace = payload?.workspace || this.currentWorkspace;
+    const id = newSessionId();
+    const now = Date.now();
+    saveMeta(id, { title: "\u65B0\u4F1A\u8BDD", cwd: workspace, created: now, updated: now });
+    this.pendingWorkspaces.set(id, workspace);
+    this.reply(env, "session.created", {
+      session: { id, title: "\u65B0\u4F1A\u8BDD", created: now, updated: now, status: "idle", workspace }
+    });
+  }
+  async sessionMessages(env) {
+    const { sessionID } = env.payload;
+    const messages = exists(sessionID) ? await readHistory(sessionID) : [];
+    this.reply(env, "messages", { sessionID, messages });
+  }
+  async sessionPrompt(env) {
+    const payload = env.payload;
+    const text = (payload.text || "").trim();
+    if (!text) return;
+    if (text.startsWith("/new")) return this.sessionCreate(env);
+    if (text.startsWith("/help")) {
+      this.reply(env, "message.part", {
+        sessionID: payload.sessionID,
+        messageID: `m-${Date.now()}`,
+        part: { id: "t", type: "text", text: "\u652F\u6301\u7684\u547D\u4EE4\uFF1A\n- /new \u65B0\u5EFA\u4F1A\u8BDD\n- /help \u663E\u793A\u5E2E\u52A9", complete: true }
+      });
+      return;
+    }
+    if (this.activeRuns.has(payload.sessionID)) {
+      this.reply(env, "error", { code: "BUSY", message: "\u8BE5\u4F1A\u8BDD\u6B63\u5728\u751F\u6210\u4E2D\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u6216\u5148\u505C\u6B62", id: env.id });
+      return;
+    }
+    try {
+      await this.runTurn(payload.sessionID, text);
+    } catch (e) {
+      const msg = e.message || String(e);
+      this.log(`session.prompt \u5931\u8D25: ${msg}`);
+      this.reply(env, "error", { code: "PROMPT_ERROR", message: msg, id: env.id });
+    }
+  }
+  async sessionAbort(env) {
+    const { sessionID } = env.payload;
+    const p = this.activeRuns.get(sessionID);
+    if (p) {
+      p.kill();
+      this.log(`\u5DF2\u53D1\u9001\u4E2D\u6B62 (session=${sessionID})`);
+    }
+    this.send(envelope("session.status", { sessionID, status: "idle" }));
+  }
+  async sessionDelete(env) {
+    const { sessionID } = env.payload;
+    const p = this.activeRuns.get(sessionID);
+    if (p) p.kill();
+    this.activeRuns.delete(sessionID);
+    this.pendingWorkspaces.delete(sessionID);
+    this.sessionCwd.delete(sessionID);
+    await removeSession(sessionID);
+    this.reply(env, "session.deleted", { sessionID });
+  }
+  async commandList(env) {
+    this.reply(env, "commands", { commands: ADAPTER_COMMANDS });
+  }
+  async workspaceList(env) {
+    this.reply(env, "workspaces", {
+      workspaces: [{ path: this.currentWorkspace, name: this.currentWorkspace.split(/[\\/]/).pop() || this.currentWorkspace, sessionCount: 0, updated: 0 }],
+      current: this.currentWorkspace
+    });
+  }
+  async workspaceSet(env) {
+    const raw = (env.payload?.path || "").trim();
+    const path = raw ? resolve(raw) : "";
+    if (!path || !existsSync3(path) || !statSync2(path).isDirectory()) {
+      this.reply(env, "error", { code: "BAD_WORKSPACE", message: "\u8BE5\u76EE\u5F55\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u7528", id: env.id });
+      return;
+    }
+    this.currentWorkspace = path;
+    this.log("\u5207\u6362\u5DE5\u4F5C\u533A: " + path);
+    this.announce();
+    await this.workspaceList(env);
+  }
+  async runTurn(sessionID, text) {
+    const dir = this.pendingWorkspaces.get(sessionID) || this.sessionCwd.get(sessionID) || this.currentWorkspace;
+    if (!existsSync3(dir) || !statSync2(dir).isDirectory()) {
+      throw new Error(`\u5DE5\u4F5C\u533A\u4E0D\u5B58\u5728: ${dir}`);
+    }
+    this.pendingWorkspaces.delete(sessionID);
+    const now = Date.now();
+    appendPart(sessionID, `u-${now}`, "user", { id: "u", type: "text", text, complete: true }, now);
+    this.send(envelope("session.status", { sessionID, status: "running" }));
+    const resumeId = getMeta(sessionID)?.resumeId;
+    const proc = new HermesProcess(sessionID, {
+      emit: (s, messageID, part) => {
+        this.send(envelope("message.part", { sessionID: s, messageID, part }));
+        appendPart(sessionID, messageID, "assistant", part);
+      },
+      status: (s, status) => this.send(envelope("session.status", { sessionID: s, status })),
+      log: (m) => this.log(m),
+      onResumeId: (id) => saveMeta(sessionID, { resumeId: id, cwd: dir })
+    });
+    this.activeRuns.set(sessionID, proc);
+    try {
+      await proc.start(
+        {
+          cwd: dir,
+          model: this.cfg.model,
+          provider: this.cfg.provider,
+          toolsets: this.cfg.toolsets,
+          verbose: this.cfg.verbose,
+          bin: this.cfg.bin
+        },
+        text,
+        resumeId
+      );
+      this.sessionCwd.set(sessionID, dir);
+      if (!getMeta(sessionID)) saveMeta(sessionID, { title: "Hermes \u4F1A\u8BDD", cwd: dir });
+    } catch (e) {
+      const msg = e.message || String(e);
+      this.log(`\u56DE\u5408\u51FA\u9519 (session=${sessionID}): ${msg}`);
+      const id = `m-err-${Date.now()}`;
+      const part = { id: "err", type: "text", text: `[hermes] ${msg}`, complete: true };
+      this.send(envelope("message.part", { sessionID, messageID: id, part }));
+      appendPart(sessionID, id, "assistant", part);
+    } finally {
+      this.activeRuns.delete(sessionID);
+      this.send(envelope("session.status", { sessionID, status: "idle" }));
+      void this.broadcastSessionUpdate(sessionID);
+    }
+  }
+  async broadcastSessionUpdate(sessionID) {
+    try {
+      if (!this.ws.isConnected) return;
+      const list = await listSessions().catch(() => []);
+      const found = list.find((s) => s.id === sessionID);
+      if (found) this.send(envelope("session.updated", { session: found }));
+    } catch {
+    }
+  }
+  resetIdentity() {
+    this.log("\u88AB\u8D26\u53F7\u89E3\u7ED1\uFF0C\u6B63\u5728\u91CD\u7F6E\u8EAB\u4EFD\u5E76\u91CD\u65B0\u751F\u6210\u914D\u5BF9\u7801\u2026");
+    this.claimed = false;
+    this.state.agentId = randomBytes2(16).toString("hex");
+    this.state.claimed = false;
+    saveState(this.state, AGENT_TYPE);
+    this.ws.close();
+    this.connect(this.relayBase);
+  }
+};
+function localTimezone() {
+  try {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    if (tz) return tz;
+  } catch {
+  }
+  return "";
+}
+
+// src/index.ts
+function start(opts = {}) {
+  const envOn = (name) => /^(1|true|yes|on)$/i.test(process.env[name] || "");
+  const cfg = {
+    relayUrl: (process.env.TUNNELBOX_RELAY_URL || opts.relayUrl || "").trim(),
+    cwd: process.env.TUNNELBOX_CWD || opts.cwd || process.cwd(),
+    model: process.env.TUNNELBOX_HERMES_MODEL?.trim() || opts.model || void 0,
+    provider: process.env.TUNNELBOX_HERMES_PROVIDER?.trim() || opts.provider || void 0,
+    toolsets: process.env.TUNNELBOX_HERMES_TOOLSETS?.trim() || opts.toolsets || void 0,
+    verbose: envOn("TUNNELBOX_HERMES_VERBOSE") || !!opts.verbose,
+    bin: process.env.TUNNELBOX_HERMES_BIN?.trim() || opts.bin || "hermes"
+  };
+  const bridge = new HermesBridge(cfg);
+  void bridge.start().catch((e) => {
+    console.error("[tunnelbox:hermes] \u542F\u52A8\u5931\u8D25:", e);
+  });
+  let stopped = false;
+  return {
+    stop() {
+      if (stopped) return;
+      stopped = true;
+      bridge.dispose();
+    }
+  };
+}
+var isEntry = (() => {
+  try {
+    return !!process.argv[1] && resolve2(process.argv[1]) === fileURLToPath(import.meta.url);
+  } catch {
+    return false;
+  }
+})();
+if (isEntry) {
+  const { stop } = start();
+  const onSignal = () => {
+    stop();
+    process.exit(0);
+  };
+  process.once("SIGINT", onSignal);
+  process.once("SIGTERM", onSignal);
+  console.log("[tunnelbox:hermes] Hermes \u9002\u914D\u5668\u5DF2\u542F\u52A8\uFF08Ctrl+C \u9000\u51FA\uFF09");
+}
+export {
+  start
+};

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@tunnelbox/hermes",
+  "version": "0.1.0",
+  "description": "tunnelbox 的 Hermes 适配器（B 类，Python 框架/CLI 桥接）：手机远程驱动本机 Hermes Agent（hermes chat -q，会话/流式/中止/删除）",
+  "type": "module",
+  "main": "./dist/index.mjs",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "type-check": "tsc --noEmit",
+    "build": "node scripts/build.mjs",
+    "start": "node dist/index.mjs",
+    "smoke": "node scripts/smoke.mjs"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "qrcode": "^1.5.3"
+  },
+  "devDependencies": {
+    "@tunnelbox/core": "0.1.0",
+    "@types/node": "^22.0.0",
+    "@types/qrcode": "^1.5.5",
+    "esbuild": "^0.24.0",
+    "typescript": "^5.4.5"
+  }
+}