aquaman-proxy 0.12.1 → 0.13.0

package/dist/hermes/config-writer.js

@@ -0,0 +1,112 @@
+/**
+ * Environment configuration generator for Hermes integration (v0.13.0+)
+ *
+ * Hermes is a Python agent host that builds its own HTTP client
+ * internally and exposes no transport/socket hook — so the aquaman UDS proxy
+ * can't be injected the way it is for OpenClaw. Instead the proxy runs an
+ * opt-in loopback TCP listener and Hermes is pointed at it via the SAME
+ * provider env vars it already understands (`ANTHROPIC_BASE_URL`,
+ * `OPENAI_BASE_URL`) plus a placeholder api_key that equals the loopback token.
+ *
+ * Hermes path conventions (verified against hermes_cli/runtime_provider.py and
+ * agent/anthropic_adapter.py):
+ *   - Anthropic: base_url must end with `/anthropic`. Hermes special-cases that
+ *     suffix into `anthropic_messages` api_mode; the Anthropic SDK then appends
+ *     `/v1/messages`, yielding `/anthropic/v1/messages` at the proxy.
+ *   - OpenAI: base_url ends with `/openai/v1`; the OpenAI SDK appends
+ *     `/chat/completions`, yielding `/openai/v1/chat/completions`. The proxy's
+ *     `openai` upstream is `https://api.openai.com` (no `/v1`), so there's no
+ *     double-`/v1`.
+ *
+ * First cut covers LLM-provider isolation only (anthropic, openai). Channels /
+ * "platforms" are deferred — they have no base_url lever and hit the same
+ * can't-intercept-a-foreign-client wall.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+/** Matches the SAFE_SERVICE_NAME pattern from daemon.ts. */
+const SAFE_SERVICE_NAME = /^[a-z0-9][a-z0-9._-]*$/;
+/** Providers Hermes can be pointed at the loopback listener today. */
+export const HERMES_SUPPORTED_SERVICES = ['anthropic', 'openai'];
+/**
+ * Generate the env vars that point Hermes at the aquaman loopback listener.
+ * For each supported provider in `services`, emits both the base URL and a
+ * placeholder api_key set to the loopback token. The proxy strips the
+ * placeholder and injects the real vault-stored credential.
+ */
+export function generateHermesEnv(config) {
+    const host = config.host || '127.0.0.1';
+    const base = `http://${host}:${config.port}`;
+    const env = {};
+    for (const service of config.services) {
+        if (!SAFE_SERVICE_NAME.test(service))
+            continue;
+        switch (service) {
+            case 'anthropic':
+                env['ANTHROPIC_BASE_URL'] = `${base}/anthropic`;
+                env['ANTHROPIC_API_KEY'] = config.token;
+                break;
+            case 'openai':
+                env['OPENAI_BASE_URL'] = `${base}/openai/v1`;
+                env['OPENAI_API_KEY'] = config.token;
+                break;
+            default:
+                // Unsupported for Hermes today (channels/other providers). Skip
+                // silently — the caller surfaces which services were wired.
+                break;
+        }
+    }
+    return env;
+}
+/** Services in the input list that this integration knows how to wire for Hermes. */
+export function hermesWiredServices(services) {
+    return services.filter(s => HERMES_SUPPORTED_SERVICES.includes(s));
+}
+/**
+ * Default path to the Hermes dotenv file (`~/.hermes/.env`). Honors the
+ * `HERMES_HOME` override — the same var the Hermes CLI itself uses to relocate
+ * its config dir (verified against `hermes config env-path`) — else falls back
+ * to `~/.hermes`.
+ */
+export function getHermesEnvPath(homeDir) {
+    const stateDir = process.env['HERMES_HOME'] || path.join(homeDir, '.hermes');
+    return path.join(stateDir, '.env');
+}
+/**
+ * Write/merge the aquaman-managed block into `~/.hermes/.env`. Existing
+ * non-aquaman lines are preserved; the managed block is delimited by markers
+ * and rewritten in place on re-run (idempotent). File mode 0o600.
+ */
+export function writeHermesEnv(env, filePath) {
+    const marker = '# >>> aquaman managed >>>';
+    const endMarker = '# <<< aquaman managed <<<';
+    let content = '';
+    if (fs.existsSync(filePath)) {
+        content = fs.readFileSync(filePath, 'utf-8');
+    }
+    // Strip any prior aquaman block.
+    const start = content.indexOf(marker);
+    const end = content.indexOf(endMarker);
+    if (start !== -1 && end !== -1 && end > start) {
+        content = content.slice(0, start).replace(/\n+$/, '') + content.slice(end + endMarker.length);
+    }
+    const body = Object.entries(env)
+        .map(([k, v]) => `${k}=${v}`)
+        .join('\n');
+    const block = `${marker}\n${body}\n${endMarker}\n`;
+    const merged = content.trim().length > 0
+        ? content.replace(/\n+$/, '') + '\n\n' + block
+        : block;
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    fs.writeFileSync(filePath, merged, { mode: 0o600 });
+}
+/** Format env vars for display (dry-run / export output). */
+export function formatHermesEnvForDisplay(env) {
+    return Object.entries(env)
+        .map(([k, v]) => `  ${k}=${v}`)
+        .join('\n');
+}
+//# sourceMappingURL=config-writer.js.map

package/dist/hermes/config-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-writer.js","sourceRoot":"","sources":["../../src/hermes/config-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,sEAAsE;AACtE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAU,CAAC;AAa1E;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IACxC,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAE/C,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,WAAW;gBACd,GAAG,CAAC,oBAAoB,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC;gBAChD,GAAG,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;gBACxC,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,CAAC,iBAAiB,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC7C,GAAG,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;gBACrC,MAAM;YACR;gBACE,gEAAgE;gBAChE,4DAA4D;gBAC5D,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAE,yBAA+C,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAA2B,EAAE,QAAgB;IAC1E,MAAM,MAAM,GAAG,2BAA2B,CAAC;IAC3C,MAAM,SAAS,GAAG,2BAA2B,CAAC;IAE9C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,iCAAiC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,GAAG,MAAM,KAAK,IAAI,KAAK,SAAS,IAAI,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,KAAK;QAC9C,CAAC,CAAC,KAAK,CAAC;IAEV,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,yBAAyB,CAAC,GAA2B;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/hermes/integration.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Hermes integration (v0.13.0+)
+ *
+ * Detects a local Hermes install and wires it to the aquaman
+ * loopback listener by writing provider base-URL + placeholder-key env vars
+ * into `~/.hermes/.env`. Unlike the OpenClaw path there is no in-process
+ * plugin doing fetch interception — Hermes is a foreign (Python) host, so the
+ * contract is purely: loopback listener on the proxy side + native env vars on
+ * the Hermes side. See config-writer.ts for the path/auth rationale.
+ */
+import type { HermesConfig } from '../core/index.js';
+export interface HermesInfo {
+    installed: boolean;
+    version?: string;
+    path?: string;
+}
+export interface HermesIntegrationOptions {
+    /** Loopback listener port the env vars should point at. */
+    port: number;
+    /** Loopback token used as the placeholder api_key. */
+    token: string;
+    /** Loopback host. Defaults to 127.0.0.1. */
+    host?: string;
+    /** Services to wire (only anthropic/openai are emitted today). */
+    services: string[];
+    /** Hermes integration config (configMethod, binaryPath). */
+    config?: HermesConfig;
+}
+/**
+ * Detect whether the Hermes CLI is installed and parse its version.
+ * Parses lines like "Hermes Agent v0.16.0 (2026.6.5)".
+ */
+export declare function detectHermes(binaryPath?: string): Promise<HermesInfo>;
+export declare class HermesIntegration {
+    private options;
+    constructor(options: HermesIntegrationOptions);
+    /** Build the env vars that point Hermes at the loopback listener. */
+    configureHermes(): Record<string, string>;
+    /** Which of the requested services actually get wired (anthropic/openai today). */
+    wiredServices(): string[];
+    /** Path to the Hermes dotenv file this integration writes. */
+    envPath(): string;
+    /**
+     * Write the configuration. `dotenv` merges into ~/.hermes/.env; `env`
+     * returns a display string for manual export. Returns the destination path
+     * (dotenv) or the formatted block (env).
+     */
+    writeConfiguration(env: Record<string, string>): string;
+    getEnvForDisplay(): string;
+    detect(): Promise<HermesInfo>;
+}
+export declare function createHermesIntegration(options: HermesIntegrationOptions): HermesIntegration;
+//# sourceMappingURL=integration.d.ts.map

package/dist/hermes/integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../src/hermes/integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,UAAU,SAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAoB7E;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAA2B;gBAE9B,OAAO,EAAE,wBAAwB;IAI7C,qEAAqE;IACrE,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IASzC,mFAAmF;IACnF,aAAa,IAAI,MAAM,EAAE;IAIzB,8DAA8D;IAC9D,OAAO,IAAI,MAAM;IAIjB;;;;OAIG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;IAUvD,gBAAgB,IAAI,MAAM;IAIpB,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;CAGpC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAE5F"}

package/dist/hermes/integration.js

@@ -0,0 +1,85 @@
+/**
+ * Hermes integration (v0.13.0+)
+ *
+ * Detects a local Hermes install and wires it to the aquaman
+ * loopback listener by writing provider base-URL + placeholder-key env vars
+ * into `~/.hermes/.env`. Unlike the OpenClaw path there is no in-process
+ * plugin doing fetch interception — Hermes is a foreign (Python) host, so the
+ * contract is purely: loopback listener on the proxy side + native env vars on
+ * the Hermes side. See config-writer.ts for the path/auth rationale.
+ */
+import * as os from 'node:os';
+import { spawn } from 'node:child_process';
+import { generateHermesEnv, writeHermesEnv, formatHermesEnvForDisplay, getHermesEnvPath, hermesWiredServices, } from './config-writer.js';
+/**
+ * Detect whether the Hermes CLI is installed and parse its version.
+ * Parses lines like "Hermes Agent v0.16.0 (2026.6.5)".
+ */
+export async function detectHermes(binaryPath = 'hermes') {
+    return new Promise((resolve) => {
+        const proc = spawn(binaryPath, ['--version'], { stdio: ['ignore', 'pipe', 'pipe'] });
+        let stdout = '';
+        proc.stdout?.on('data', (d) => { stdout += d.toString(); });
+        proc.on('error', () => resolve({ installed: false }));
+        proc.on('close', (code) => {
+            if (code === 0 && stdout) {
+                const match = stdout.match(/Hermes(?:\s+Agent)?\s+v?(\d+\.\d+\.\d+)/i);
+                resolve({
+                    installed: true,
+                    version: match ? match[1] : stdout.trim().split('\n')[0],
+                    path: binaryPath,
+                });
+            }
+            else {
+                resolve({ installed: false });
+            }
+        });
+    });
+}
+export class HermesIntegration {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    /** Build the env vars that point Hermes at the loopback listener. */
+    configureHermes() {
+        return generateHermesEnv({
+            port: this.options.port,
+            token: this.options.token,
+            host: this.options.host,
+            services: this.options.services,
+        });
+    }
+    /** Which of the requested services actually get wired (anthropic/openai today). */
+    wiredServices() {
+        return hermesWiredServices(this.options.services);
+    }
+    /** Path to the Hermes dotenv file this integration writes. */
+    envPath() {
+        return getHermesEnvPath(os.homedir());
+    }
+    /**
+     * Write the configuration. `dotenv` merges into ~/.hermes/.env; `env`
+     * returns a display string for manual export. Returns the destination path
+     * (dotenv) or the formatted block (env).
+     */
+    writeConfiguration(env) {
+        const method = this.options.config?.configMethod ?? 'dotenv';
+        if (method === 'dotenv') {
+            const dest = this.envPath();
+            writeHermesEnv(env, dest);
+            return dest;
+        }
+        return formatHermesEnvForDisplay(env);
+    }
+    getEnvForDisplay() {
+        return formatHermesEnvForDisplay(this.configureHermes());
+    }
+    async detect() {
+        return detectHermes(this.options.config?.binaryPath || 'hermes');
+    }
+}
+export function createHermesIntegration(options) {
+    return new HermesIntegration(options);
+}
+//# sourceMappingURL=integration.js.map

package/dist/hermes/integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.js","sourceRoot":"","sources":["../../src/hermes/integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAsB5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAU,GAAG,QAAQ;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACrF,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBACvE,OAAO,CAAC;oBACN,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,EAAE,UAAU;iBACjB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,iBAAiB;IACpB,OAAO,CAA2B;IAE1C,YAAY,OAAiC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,qEAAqE;IACrE,eAAe;QACb,OAAO,iBAAiB,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;SAChC,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,aAAa;QACX,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,8DAA8D;IAC9D,OAAO;QACL,OAAO,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,GAA2B;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,QAAQ,CAAC;QAC7D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,gBAAgB;QACd,OAAO,yBAAyB,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC,CAAC;IACnE,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC"}

package/dist/index.d.ts

@@ -12,6 +12,8 @@ export { type AuthMode, type OAuthConfig, type ServiceRegistryOptions, ServiceRe
 export { OAuthTokenCache, createOAuthTokenCache } from './oauth-token-cache.js';
 export { type EnvConfig, generateOpenClawEnv, writeEnvFile, appendToShellRc, formatEnvForDisplay } from './openclaw/env-writer.js';
 export { type OpenClawInfo, type LaunchOptions, OpenClawIntegration, createOpenClawIntegration, parseCalendarVersion, authProfilesAreSqliteOnly } from './openclaw/integration.js';
+export { type HermesEnvConfig, HERMES_SUPPORTED_SERVICES, generateHermesEnv, hermesWiredServices, getHermesEnvPath, writeHermesEnv, formatHermesEnvForDisplay } from './hermes/config-writer.js';
+export { type HermesInfo, type HermesIntegrationOptions, HermesIntegration, createHermesIntegration, detectHermes } from './hermes/integration.js';
 export { type PolicyRule, type ServicePolicy, type PolicyConfig, matchPathPattern, matchPolicy, loadPolicyFromConfig, validatePolicyConfig, getDefaultPolicyPresets } from './request-policy.js';
 export * from './core/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,eAAe,EACf,qBAAqB,EACrB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,eAAe,EACf,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,eAAe,EACf,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,KAAK,SAAS,EACd,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAG7B,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,eAAe,EACf,qBAAqB,EACrB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,eAAe,EACf,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,eAAe,EACf,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,KAAK,SAAS,EACd,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,KAAK,eAAe,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,wBAAwB,EAC7B,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACb,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAG7B,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -16,6 +16,9 @@ export { OAuthTokenCache, createOAuthTokenCache } from './oauth-token-cache.js';
 // OpenClaw Integration
 export { generateOpenClawEnv, writeEnvFile, appendToShellRc, formatEnvForDisplay } from './openclaw/env-writer.js';
 export { OpenClawIntegration, createOpenClawIntegration, parseCalendarVersion, authProfilesAreSqliteOnly } from './openclaw/integration.js';
+// Hermes Integration (v0.13.0+)
+export { HERMES_SUPPORTED_SERVICES, generateHermesEnv, hermesWiredServices, getHermesEnvPath, writeHermesEnv, formatHermesEnvForDisplay } from './hermes/config-writer.js';
+export { HermesIntegration, createHermesIntegration, detectHermes } from './hermes/integration.js';
 // Request Policy
 export { matchPathPattern, matchPolicy, loadPolicyFromConfig, validatePolicyConfig, getDefaultPolicyPresets } from './request-policy.js';
 // Core (merged from aquaman-core)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,SAAS;AACT,OAAO,EAGL,eAAe,EACf,qBAAqB,EAEtB,MAAM,aAAa,CAAC;AAErB,mBAAmB;AACnB,OAAO,EAIL,eAAe,EACf,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAE/B,oBAAoB;AACpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,uBAAuB;AACvB,OAAO,EAEL,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAGL,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,iBAAiB;AACjB,OAAO,EAIL,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,kCAAkC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,SAAS;AACT,OAAO,EAGL,eAAe,EACf,qBAAqB,EAEtB,MAAM,aAAa,CAAC;AAErB,mBAAmB;AACnB,OAAO,EAIL,eAAe,EACf,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAE/B,oBAAoB;AACpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,uBAAuB;AACvB,OAAO,EAEL,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAGL,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,gCAAgC;AAChC,OAAO,EAEL,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAGL,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACb,MAAM,yBAAyB,CAAC;AAEjC,iBAAiB;AACjB,OAAO,EAIL,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,kCAAkC;AAClC,cAAc,iBAAiB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aquaman-proxy",
-  "version": "0.12.1",
-  "description": "API key protection for OpenClaw. Credentials stay in your vault, never in the agent's memory",
+  "version": "0.13.0",
+  "description": "🔱 API key protection for AI agents. Bring your own vault. Credentials stay where you already keep them, never in the agent's memory.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",