hermes-action-bridge 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -4,6 +4,41 @@ All notable changes to this project are documented here. The format is based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.5.0] - 2026-07-25
+
+### Added
+
+- Complete Codex and Claude Code installation: `install all` now installs the
+  managed skills and registers a verified global MCP server through each
+  agent's native CLI using the absolute bridge launcher.
+- `doctor` now detects missing/conflicting MCP registrations and performs a
+  token-free MCP initialize/list-tools handshake.
+- Configuration-backed `hermes_capabilities`, concurrency-limited
+  asynchronous jobs (`submit`, `status`, `result`, `cancel`), and one-shot
+  two-phase actions (`prepare`, `approve`, `reject`).
+- Privacy-preserving owner-only JSONL audit metadata for job and approval
+  transitions.
+- Opt-in Streamable HTTP transport with loopback defaults and an authenticated,
+  Tailscale-only direct-listen mode.
+
+### Changed
+
+- Native skills now prefer discoverable `hermes_*` MCP tools and clearly
+  separate Hermes-owned integrations from ordinary local coding work.
+- The Codex plugin manifest now uses the supported `mcpServers` shape, ships in
+  the npm tarball, and shares the package version.
+- Refreshed patched `fast-uri` and `postcss` releases in the lockfile and
+  documented why the remaining transitive Hono advisory is not reachable in
+  the bridge HTTP architecture.
+
+### Documentation
+
+- Added a "Trusted presets (direct execution)" README section: how to define a `require_approval_for: []`
+  preset in user config to run `execute` actions without the approval gate, plus the safety trade-offs
+  (keep it in user scope, never allowlist `hermes-action run`).
+
 ## [0.4.0] - 2026-07-03
 
 Deterministic security model, per-call MCP overrides, and installer hardening.

package/README.md

@@ -30,7 +30,9 @@ If an agent needs to do something outside its local coding session — research,
 - Automatic large-context delivery: an oversized prompt is handed to Hermes through a secure temp file instead of overflowing the command line.
 - Per-run timeouts (configurable, with per-mode defaults) that always reap the Hermes child process.
 - Dry-run mode for debugging the exact Hermes command, prompt, and computed prompt size.
-- Minimal MCP server exposing delegation tools: `hermes_run`, `hermes_plan`, `hermes_presets`, and `hermes_status`.
+- Complete Codex and Claude Code installer: managed skill plus verified global MCP registration.
+- MCP capability discovery, cancellable asynchronous jobs, and one-shot two-phase approvals with a privacy-preserving local audit log.
+- Local stdio transport plus an opt-in, authenticated Streamable HTTP transport for Tailscale-restricted hosts.
 - No project-specific assumptions. All behavior is configured through YAML and CLI flags.
 
 ## Requirements
@@ -52,13 +54,20 @@ Install from npm:
 npm install -g hermes-action-bridge
 ```
 
-Then check it works:
+Install the skill and MCP registration for Codex and Claude Code, then verify
+the complete setup:
 
 ```bash
 hermes-action --version
+hermes-action install all
 hermes-action doctor
 ```
 
+Global installation is all-or-nothing for the requested agents. If Codex or
+Claude Code is unavailable, conflicting, or cannot verify its user-scoped
+stdio MCP entry, the command exits non-zero without installing the requested
+skills. Use `--project` for an explicit skill-only setup.
+
 <details>
 <summary>From source (for development)</summary>
 
@@ -103,10 +112,12 @@ hermes-action run --dry-run --json "Summarize this project."
 
 ## Execution modes
 
-- `plan`: Hermes returns a plan only. No side effects.
+- `plan`: Hermes is instructed to return a plan only. Treat it as open-world because configured tools remain available.
 - `draft`: Hermes produces an artifact only. No external side effects.
 - `execute`: Hermes may execute allowed actions, while still following Hermes' own safety rules.
-- `request-approval`: Hermes prepares the action and asks the human for approval before irreversible external effects.
+- `request-approval`: Hermes prepares an action without executing it. MCP
+  callers should use `hermes_prepare` and then call `hermes_approve` only after
+  explicit human approval.
 
 The guard is deterministic and language-agnostic: in `execute` mode the bridge switches to `request-approval` by default — regardless of the prompt's wording or language — unless the preset is explicitly trusted (empty `require_approval_for`) or `--yolo` is set. It does not try to infer risk from keywords. See [Security model](#security-model) for why the real barrier is your coding agent's own approval prompt.
 
@@ -132,6 +143,30 @@ YOLO only bypasses the bridge policy. It does not remove Hermes Agent's own safe
 
 Use it only when the caller and environment are trusted.
 
+## Trusted presets (direct execution)
+
+By default every `execute` is downgraded to `request-approval` — the right default when an agent might act unattended. When *you* are the one asking for an action and want it to run without that extra gate, define a **trusted preset**: one whose `require_approval_for` is an empty list. Put it in your **user** config so it is yours alone and available in every project:
+
+```yaml
+# ~/.config/hermes-action/config.yaml   (user scope, merged before any project config)
+presets:
+  act:
+    description: Direct execution of an action I explicitly asked for (trusted).
+    require_approval_for: []
+```
+
+Run actions through it — `execute` stays `execute`, with no downgrade and no `--yolo` needed:
+
+```bash
+hermes-action run --preset act --mode execute "post the release note to #general"
+```
+
+**Keep it safe:**
+
+- A trusted preset relaxes only the bridge's own gate. The real barrier stays your coding agent's approval prompt, so **do not allowlist `hermes-action run` (`execute`/`yolo`)** (see [Security model](#security-model)).
+- Keep it in your **user** config; it never ships in the public package, and the distributed `SKILL.md` stays cautious for everyone else.
+- Reserve trusted presets for actions a human explicitly asks for. Leave the conservative default for anything an agent could trigger on its own.
+
 ## Configuration
 
 `hermes-action` loads config in this order:
@@ -222,6 +257,7 @@ hermes-action run [options] "request"
 hermes-action presets [--json]
 hermes-action status [--json]
 hermes-action mcp
+hermes-action serve [--listen 127.0.0.1] [--port 8765]
 hermes-action install <claude-code|codex|all|mcp> [options]
 hermes-action uninstall <claude-code|codex|all|mcp> [options]
 hermes-action doctor [--json] [--probe]
@@ -246,17 +282,24 @@ Common `run` options:
 
 ## Native agent skills
 
-Instead of pasting instructions by hand, install a native skill so Claude Code and Codex know when to delegate to Hermes. The skill is the same open-standard `SKILL.md` for both agents; the CLI stays the deterministic execution layer.
+Instead of pasting instructions and MCP snippets by hand, run the complete
+installer. It installs the open-standard skill and registers the local stdio
+MCP server through each agent's own CLI:
 
 ```bash
-hermes-action doctor                 # check Node, Hermes, agents, and installed skills
-hermes-action install all            # ~/.claude/skills and ~/.codex/skills
+hermes-action install all            # skills + global MCP for both agents
+hermes-action doctor                 # verifies skills, registrations, and MCP handshake
 hermes-action install claude-code --print     # preview, write nothing
 hermes-action install codex --project-hint     # also add a marker block to AGENTS.md
 hermes-action uninstall all
 ```
 
-Install behavior is safe by default: it never modifies `CLAUDE.md` / `AGENTS.md` unless you pass `--project-hint`, refuses to overwrite a file it did not generate, and is idempotent. Use `--project` for a project-local skill and `--dry-run` to preview operations.
+Install behavior is safe by default: it uses a stable absolute bridge path,
+does not depend on an interactive `PATH`, never modifies `CLAUDE.md` /
+`AGENTS.md` unless you pass `--project-hint`, and refuses to overwrite either a
+foreign skill or a customized MCP entry. Re-running it is idempotent. Use
+`--project` for a project-local skill only and `--dry-run` to preview
+operations.
 
 The generated skill is shown in [`examples/claude-code/SKILL.md`](examples/claude-code/SKILL.md). Project-hint usage is documented in [`examples/claude-code/CLAUDE.md`](examples/claude-code/CLAUDE.md) and [`examples/codex/AGENTS.md`](examples/codex/AGENTS.md).
 
@@ -271,17 +314,20 @@ codex plugin add hermes-action@hermes-action-bridge
 
 This registers the `hermes-action` MCP server and the Hermes delegation skill in Codex. Hermes Agent must be installed locally — the plugin runs `npx -y hermes-action-bridge mcp`.
 
-> **Faster MCP startup:** `npx` re-resolves the package on every server start (~200 ms overhead, more on a cold cache). If you install the package globally (`npm install -g hermes-action-bridge`), point the MCP config at the binary — `command: "hermes-action"`, `args: ["mcp"]` — which is what `hermes-action install mcp` generates.
+> **Faster MCP startup:** `npx` re-resolves the package on every server start.
+> The native installer registers the absolute global launcher instead.
 
 ## MCP configuration
 
-Print the config snippet for your client (Claude Code / Cursor / VS Code use JSON; Codex uses TOML):
+Register the global MCP server for Codex and Claude Code without reinstalling
+their skills:
 
 ```bash
 hermes-action install mcp
 ```
 
-For Claude Code, write or merge the project `.mcp.json` directly (preserving other servers):
+For other JSON MCP clients, or a Claude Code project-scoped configuration,
+write or merge `.mcp.json` directly while preserving other servers:
 
 ```bash
 hermes-action install mcp --write
@@ -325,10 +371,54 @@ Exposed tools:
 
 - `hermes_run`: delegate a request to Hermes. Optional overrides: `mode`, `preset`, `contextFiles`, `yolo`, `dryRun`, and — to trade cost for speed on simple tasks — `model`, `provider`, `maxTurns`, `timeoutSeconds`.
 - `hermes_plan`: shortcut for `hermes_run` with `mode=plan`.
+- `hermes_capabilities`: report configured presets, skills, toolsets, runtime, and policy without inventing live integrations.
 - `hermes_presets`: list configured presets.
 - `hermes_status`: check the configured Hermes runtime command.
+- `hermes_submit`, `hermes_job_status`, `hermes_result`, `hermes_cancel`:
+  manage bounded, process-local asynchronous jobs.
+- `hermes_prepare`, `hermes_approve`, `hermes_reject`: create and consume a
+  short-lived one-shot approval before execution.
+
+The MCP surface delegates to Hermes instead of mirroring every Hermes tool.
+Jobs and approvals are intentionally process-local: restarting the MCP server
+clears them. Audit events are written as owner-only JSONL metadata under
+`$XDG_STATE_HOME/hermes-action/audit.jsonl` (or
+`~/.local/state/hermes-action/audit.jsonl`) without prompt, context, token, or
+full result content.
+
+## Remote MCP over Tailscale
+
+The HTTP transport is opt-in and loopback-only by default:
+
+```bash
+hermes-action serve --listen 127.0.0.1 --port 8765
+```
+
+Prefer placing Tailscale Serve in front of that loopback endpoint. Forwarded
+`*.ts.net` requests still require a bearer token, so start the loopback server
+with `--token-env`:
+
+```bash
+export HERMES_ACTION_HTTP_TOKEN="<at-least-32-random-bytes>"
+hermes-action serve \
+  --listen 127.0.0.1 \
+  --port 8765 \
+  --token-env HERMES_ACTION_HTTP_TOKEN
+```
+
+For direct tailnet listening, the bridge accepts only an explicit Tailscale
+IPv4 address and requires the same bearer-token setup:
+
+```bash
+hermes-action serve \
+  --listen 100.64.0.10 \
+  --port 8765 \
+  --allow-tailnet \
+  --token-env HERMES_ACTION_HTTP_TOKEN
+```
 
-The MCP surface is intentionally small. The bridge delegates to Hermes instead of exposing every Hermes tool one by one.
+The token is never accepted as a CLI value or stored in bridge configuration.
+Public/wildcard and non-Tailscale addresses are refused.
 
 ## Development
 
@@ -351,11 +441,18 @@ Functional tests use a fake Hermes binary to verify command construction, prompt
 
 ## Security model
 
-The bridge assumes a **supervised host agent**: Claude Code / Codex ask you to approve each `hermes-action` command (or `hermes_run` tool call) before it runs. That host approval — not the keyword detection — is the real, deterministic, language-agnostic barrier, and it is what makes a French, German, or paraphrased request as safe as an English one.
+Direct CLI and `hermes_run` usage assumes a **supervised host agent**: Claude
+Code / Codex ask you to approve the command or tool call. For MCP side effects,
+prefer the bridge's additional, testable two-phase flow:
+`hermes_prepare` returns a local no-tool summary and opaque approval ID, and
+`hermes_approve` consumes the unchanged request exactly once after the human
+approves it.
 
 The bridge's own guard is a secondary net: `execute` is downgraded to `request-approval` by default unless a preset is trusted (empty `require_approval_for`) or `--yolo` is set. The bridge never injects `--yolo` or a bypass flag on its own.
 
-- **Do not allowlist / auto-approve `hermes-action run` (especially `--mode execute` or `--yolo`)** in your coding agent. A command-pattern allowlist cannot tell `run --mode plan` (safe) from `run --mode execute` (side effects); at most, `status`, `presets`, and `--dry-run` are safe to auto-approve.
+- **Do not allowlist / auto-approve `hermes-action run`, `hermes_run`, or
+  `hermes_approve`**. A command-pattern allowlist cannot distinguish a safe
+  plan from an execution with side effects.
 - Do not put secrets in `.hermes-action.yaml`. Keep provider credentials in Hermes Agent, your OS keychain, or the platform's secure store.
 - Treat `--yolo` as a trusted-local escape hatch, not a default.
 

package/dist/adapters/hermes-cli.d.ts

@@ -1,3 +1,17 @@
 import type { AdapterResult, BridgeConfig, EffectiveRun } from "../types.js";
 export declare function buildHermesCliArgs(run: EffectiveRun, prompt?: string, extraToolsets?: string[]): string[];
+/** A started Hermes process. `cancel` is idempotent and asks the child to stop gracefully before forcing it. */
+export interface HermesCliExecution {
+    result: Promise<AdapterResult>;
+    cancel: () => boolean;
+}
+export interface HermesCliStartOptions {
+    maxOutputBytes?: number | undefined;
+}
+/**
+ * Start a Hermes CLI invocation without awaiting it. Consumers that need asynchronous work can retain
+ * the cancellation handle; `runHermesCli` below remains the backward-compatible awaitable wrapper.
+ */
+export declare function startHermesCli(config: BridgeConfig, run: EffectiveRun, dryRun: boolean, options?: HermesCliStartOptions): HermesCliExecution;
+/** Backward-compatible synchronous facade for CLI callers. */
 export declare function runHermesCli(config: BridgeConfig, run: EffectiveRun, dryRun: boolean): Promise<AdapterResult>;

package/dist/adapters/hermes-cli.js

@@ -38,7 +38,15 @@ function filePointerPrompt(path) {
         "Never reveal secrets.",
     ].join("\n");
 }
-export async function runHermesCli(config, run, dryRun) {
+/**
+ * Start a Hermes CLI invocation without awaiting it. Consumers that need asynchronous work can retain
+ * the cancellation handle; `runHermesCli` below remains the backward-compatible awaitable wrapper.
+ */
+export function startHermesCli(config, run, dryRun, options = {}) {
+    const maxOutputBytes = options.maxOutputBytes;
+    if (maxOutputBytes !== undefined && (!Number.isSafeInteger(maxOutputBytes) || maxOutputBytes <= 0)) {
+        throw new Error("maxOutputBytes must be a positive safe integer");
+    }
     const prompt = buildHermesPrompt(run);
     const promptBytes = Buffer.byteLength(prompt, "utf8");
     const isLarge = promptBytes > largePromptThresholdBytes;
@@ -46,7 +54,20 @@ export async function runHermesCli(config, run, dryRun) {
         const args = isLarge ? buildHermesCliArgs(run, filePointerPrompt("<temp-file>"), ["file"]) : buildHermesCliArgs(run, prompt);
         const command = [config.runtime.command, ...args];
         const stdout = JSON.stringify({ command, prompt, promptBytes, promptChars: prompt.length, delivery: isLarge ? "temp-file" : "argv" }, null, 2);
-        return { ok: true, exitCode: 0, stdout, stderr: "", command, prompt, dryRun: true };
+        const captured = captureChunk(stdout, 0, maxOutputBytes);
+        return {
+            result: Promise.resolve({
+                ok: true,
+                exitCode: 0,
+                stdout: captured.value,
+                stderr: "",
+                command,
+                prompt,
+                dryRun: true,
+                outputTruncated: captured.truncated,
+            }),
+            cancel: () => false,
+        };
     }
     // Large envelopes can't ride argv (E2BIG); write them to a secure temp file the child reads itself.
     // tmpDir is set only after a successful write so a failed write cleans up and never leaks an empty dir.
@@ -69,22 +90,27 @@ export async function runHermesCli(config, run, dryRun) {
         }
     })();
     const command = [config.runtime.command, ...args];
-    return new Promise((resolve) => {
-        const child = spawn(config.runtime.command, args, { stdio: ["ignore", "pipe", "pipe"] });
+    let cancelRequested = false;
+    let settled = false;
+    let killTimer;
+    let child;
+    const result = new Promise((resolve) => {
+        const spawned = spawn(config.runtime.command, args, { stdio: ["ignore", "pipe", "pipe"] });
+        child = spawned;
         let stdout = "";
         let stderr = "";
+        let capturedBytes = 0;
+        let outputTruncated = false;
         let timedOut = false;
-        let killTimer;
         const timeoutMs = Math.min(run.timeoutSeconds * 1000, maxTimeoutMs);
         const timer = setTimeout(() => {
             timedOut = true;
-            child.kill("SIGTERM");
-            killTimer = setTimeout(() => child.kill("SIGKILL"), killGraceMs);
+            child?.kill("SIGTERM");
+            killTimer = setTimeout(() => child?.kill("SIGKILL"), killGraceMs);
         }, timeoutMs);
         // 'error' and 'close' can both fire (e.g. spawn ENOENT); guard so cleanup and resolve run exactly once.
         // The temp file is removed here on every settle path. Only an uncatchable SIGKILL of the bridge itself
         // would leave it behind; mkdtemp + 0600 + the OS temp reaper bound that residual risk.
-        let settled = false;
         const settle = (result) => {
             if (settled)
                 return;
@@ -102,26 +128,61 @@ export async function runHermesCli(config, run, dryRun) {
             }
             resolve(result);
         };
-        child.stdout.setEncoding("utf8");
-        child.stderr.setEncoding("utf8");
-        child.stdout.on("data", (chunk) => {
-            stdout += chunk;
+        spawned.stdout.setEncoding("utf8");
+        spawned.stderr.setEncoding("utf8");
+        spawned.stdout.on("data", (chunk) => {
+            const captured = captureChunk(chunk, capturedBytes, maxOutputBytes);
+            stdout += captured.value;
+            capturedBytes += captured.bytes;
+            outputTruncated ||= captured.truncated;
         });
-        child.stderr.on("data", (chunk) => {
-            stderr += chunk;
+        spawned.stderr.on("data", (chunk) => {
+            const captured = captureChunk(chunk, capturedBytes, maxOutputBytes);
+            stderr += captured.value;
+            capturedBytes += captured.bytes;
+            outputTruncated ||= captured.truncated;
         });
-        child.on("error", (error) => {
-            settle({ ok: false, exitCode: 127, stdout, stderr: `${stderr}${error.message}`, command, prompt, dryRun: false });
+        spawned.on("error", (error) => {
+            settle({ ok: false, exitCode: 127, stdout, stderr: `${stderr}${error.message}`, command, prompt, dryRun: false, outputTruncated });
         });
-        child.on("close", (code) => {
+        spawned.on("close", (code) => {
             if (timedOut) {
                 const message = `Hermes timed out after ${run.timeoutSeconds}s and was terminated.`;
-                settle({ ok: false, exitCode: code ?? 124, stdout, stderr: stderr ? `${stderr}\n${message}` : message, command, prompt, dryRun: false, timedOut: true });
+                settle({ ok: false, exitCode: code ?? 124, stdout, stderr: stderr ? `${stderr}\n${message}` : message, command, prompt, dryRun: false, outputTruncated, timedOut: true });
                 return;
             }
             const exitCode = code ?? 1;
-            settle({ ok: exitCode === 0, exitCode, stdout, stderr, command, prompt, dryRun: false });
+            settle({ ok: exitCode === 0, exitCode, stdout, stderr, command, prompt, dryRun: false, outputTruncated });
         });
     });
+    const cancel = () => {
+        if (settled || cancelRequested || !child)
+            return false;
+        if (!child.kill("SIGTERM"))
+            return false;
+        cancelRequested = true;
+        killTimer = setTimeout(() => child?.kill("SIGKILL"), killGraceMs);
+        return true;
+    };
+    return { result, cancel };
+}
+/** Backward-compatible synchronous facade for CLI callers. */
+export async function runHermesCli(config, run, dryRun) {
+    return startHermesCli(config, run, dryRun).result;
+}
+function captureChunk(chunk, capturedBytes, maxOutputBytes) {
+    if (maxOutputBytes === undefined)
+        return { value: chunk, bytes: Buffer.byteLength(chunk, "utf8"), truncated: false };
+    const remaining = Math.max(0, maxOutputBytes - capturedBytes);
+    if (remaining === 0)
+        return { value: "", bytes: 0, truncated: chunk.length > 0 };
+    const buffer = Buffer.from(chunk, "utf8");
+    if (buffer.length <= remaining)
+        return { value: chunk, bytes: buffer.length, truncated: false };
+    let end = remaining;
+    while (end > 0 && (buffer[end] ?? 0) >= 0x80 && (buffer[end] ?? 0) < 0xc0)
+        end -= 1;
+    const value = buffer.subarray(0, end).toString("utf8");
+    return { value, bytes: Buffer.byteLength(value, "utf8"), truncated: true };
 }
 //# sourceMappingURL=hermes-cli.js.map

package/dist/adapters/hermes-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"hermes-cli.js","sourceRoot":"","sources":["../../src/adapters/hermes-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,0IAA0I;AAC1I,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAChC,GAAiB,EACjB,SAAiB,iBAAiB,CAAC,GAAG,CAAC,EACvC,gBAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO;QACL,+EAA+E;QAC/E,IAAI;QACJ,uGAAuG;QACvG,uBAAuB;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,GAAiB,EAAE,MAAe;IACzF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,GAAG,yBAAyB,CAAC;IAExD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/I,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtF,CAAC;IAED,oGAAoG;IACpG,wGAAwG;IACxG,IAAI,MAA0B,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC1C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,wGAAwG;YACxG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAElD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAoD,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QACnE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,wGAAwG;QACxG,uGAAuG;QACvG,uFAAuF;QACvF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,0BAA0B,GAAG,CAAC,cAAc,uBAAuB,CAAC;gBACpF,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzJ,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"hermes-cli.js","sourceRoot":"","sources":["../../src/adapters/hermes-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,0IAA0I;AAC1I,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAChC,GAAiB,EACjB,SAAiB,iBAAiB,CAAC,GAAG,CAAC,EACvC,gBAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO;QACL,+EAA+E;QAC/E,IAAI;QACJ,uGAAuG;QACvG,uBAAuB;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,GAAiB,EACjB,MAAe,EACf,UAAiC,EAAE;IAEnC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9C,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,GAAG,yBAAyB,CAAC;IAExD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/I,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;gBACtB,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,QAAQ,CAAC,KAAK;gBACtB,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,MAAM;gBACN,MAAM,EAAE,IAAI;gBACZ,eAAe,EAAE,QAAQ,CAAC,SAAS;aACpC,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;SACpB,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,wGAAwG;IACxG,IAAI,MAA0B,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC1C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,wGAAwG;YACxG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAElD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAoD,CAAC;IACzD,IAAI,KAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,GAAG,OAAO,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,wGAAwG;QACxG,uGAAuG;QACvG,uFAAuF;QACvF,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YACpE,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC;YACzB,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC;YAChC,eAAe,KAAK,QAAQ,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YACpE,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC;YACzB,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC;YAChC,eAAe,KAAK,QAAQ,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACrI,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,0BAA0B,GAAG,CAAC,cAAc,uBAAuB,CAAC;gBACpF,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1K,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAY,EAAE;QAC3B,IAAI,OAAO,IAAI,eAAe,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,eAAe,GAAG,IAAI,CAAC;QACvB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,GAAiB,EAAE,MAAe;IACzF,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,aAAqB,EACrB,cAAkC;IAElC,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChG,IAAI,GAAG,GAAG,SAAS,CAAC;IACpB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7E,CAAC"}

package/dist/approvals.d.ts

@@ -0,0 +1,35 @@
+import type { EffectiveRun } from "./types.js";
+export type ApprovalStatus = "awaiting_approval" | "approved" | "rejected" | "expired";
+export interface ApprovalRequest {
+    id: string;
+    status: ApprovalStatus;
+    createdAt: string;
+    expiresAt: string;
+    requestedMode: EffectiveRun["requestedMode"];
+    effectiveMode: EffectiveRun["mode"];
+    presetName: string;
+    detectedRisks: EffectiveRun["detectedRisks"];
+}
+export interface ConsumedApproval {
+    approval: ApprovalRequest;
+    run: EffectiveRun;
+}
+export interface ApprovalStoreOptions {
+    ttlMs?: number | undefined;
+    maxPending?: number | undefined;
+    now?: () => Date;
+    createId?: () => string;
+    onExpired?: ((approval: ApprovalRequest) => void) | undefined;
+}
+export interface ApprovalStore {
+    prepare(run: EffectiveRun): ApprovalRequest;
+    get(approvalId: string): ApprovalRequest | undefined;
+    approve(approvalId: string): ConsumedApproval | undefined;
+    reject(approvalId: string): ApprovalRequest | undefined;
+    cleanup(): number;
+}
+/**
+ * One-shot, in-process approvals. A stored run is returned exactly once by `approve`; callers must
+ * execute that unchanged run rather than accepting new execution options at approval time.
+ */
+export declare function createApprovalStore(options?: ApprovalStoreOptions): ApprovalStore;

package/dist/approvals.js

@@ -0,0 +1,96 @@
+import { randomUUID } from "node:crypto";
+import { positiveInteger } from "./validation.js";
+const defaultTtlMs = 15 * 60 * 1000;
+const defaultMaxPending = 32;
+/**
+ * One-shot, in-process approvals. A stored run is returned exactly once by `approve`; callers must
+ * execute that unchanged run rather than accepting new execution options at approval time.
+ */
+export function createApprovalStore(options = {}) {
+    const ttlMs = positiveInteger(options.ttlMs, defaultTtlMs, "ttlMs");
+    const maxPending = positiveInteger(options.maxPending, defaultMaxPending, "maxPending");
+    const now = options.now ?? (() => new Date());
+    const createId = options.createId ?? randomUUID;
+    const onExpired = options.onExpired;
+    const entries = new Map();
+    const expire = (entry, current) => {
+        if (entry.approval.status === "awaiting_approval" && Date.parse(entry.approval.expiresAt) <= current.getTime()) {
+            entry.approval.status = "expired";
+        }
+    };
+    const cleanupExpired = () => {
+        const current = now();
+        let removed = 0;
+        for (const [id, entry] of entries) {
+            expire(entry, current);
+            if (Date.parse(entry.approval.expiresAt) > current.getTime())
+                continue;
+            if (entry.approval.status === "expired") {
+                try {
+                    onExpired?.(structuredClone(entry.approval));
+                }
+                catch {
+                    // Expiration cleanup must not crash a long-lived bridge when best-effort telemetry fails.
+                }
+            }
+            entries.delete(id);
+            removed += 1;
+        }
+        return removed;
+    };
+    return {
+        prepare(run) {
+            cleanupExpired();
+            if (entries.size >= maxPending)
+                throw new Error(`Hermes approval store is full (${maxPending} pending)`);
+            const created = now();
+            const id = createId();
+            if (entries.has(id))
+                throw new Error("Approval ID collision");
+            const approval = {
+                id,
+                status: "awaiting_approval",
+                createdAt: created.toISOString(),
+                expiresAt: new Date(created.getTime() + ttlMs).toISOString(),
+                requestedMode: run.requestedMode,
+                effectiveMode: run.mode,
+                presetName: run.presetName,
+                detectedRisks: [...run.detectedRisks],
+            };
+            entries.set(id, { approval, run: structuredClone(run) });
+            return structuredClone(approval);
+        },
+        get(approvalId) {
+            const entry = entries.get(approvalId);
+            if (!entry)
+                return undefined;
+            expire(entry, now());
+            return structuredClone(entry.approval);
+        },
+        approve(approvalId) {
+            const entry = entries.get(approvalId);
+            if (!entry)
+                return undefined;
+            expire(entry, now());
+            if (entry.approval.status !== "awaiting_approval")
+                return undefined;
+            entry.approval.status = "approved";
+            const consumed = { approval: structuredClone(entry.approval), run: structuredClone(entry.run) };
+            entries.delete(approvalId);
+            return consumed;
+        },
+        reject(approvalId) {
+            const entry = entries.get(approvalId);
+            if (!entry)
+                return undefined;
+            expire(entry, now());
+            if (entry.approval.status === "awaiting_approval")
+                entry.approval.status = "rejected";
+            const rejected = structuredClone(entry.approval);
+            entries.delete(approvalId);
+            return rejected;
+        },
+        cleanup: cleanupExpired,
+    };
+}
+//# sourceMappingURL=approvals.js.map

package/dist/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAoClD,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAO7B;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,MAAM,MAAM,GAAG,CAAC,KAAqB,EAAE,OAAa,EAAQ,EAAE;QAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/G,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,GAAW,EAAE;QAClC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE;gBAAE,SAAS;YACvE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,SAAS,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACP,0FAA0F;gBAC5F,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,OAAO,CAAC,GAAG;YACT,cAAc,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,IAAI,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,WAAW,CAAC,CAAC;YACzG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAoB;gBAChC,EAAE;gBACF,MAAM,EAAE,mBAAmB;gBAC3B,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBAC5D,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,aAAa,EAAE,GAAG,CAAC,IAAI;gBACvB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC;aACtC,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,GAAG,CAAC,UAAU;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrB,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,UAAU;YAChB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,mBAAmB;gBAAE,OAAO,SAAS,CAAC;YACpE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YACnC,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAChG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,UAAU;YACf,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,mBAAmB;gBAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YACtF,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,cAAc;KACxB,CAAC;AACJ,CAAC"}

package/dist/audit-log.d.ts

@@ -0,0 +1,21 @@
+import type { BridgeMode, RiskCategory } from "./types.js";
+export type AuditPhase = "prepared" | "approved" | "rejected" | "submitted" | "completed" | "cancelled" | "expired";
+/** Deliberately narrow: prompts, context, tool output, credentials and bearer tokens are not representable. */
+export interface AuditEvent {
+    timestamp: string;
+    phase: AuditPhase;
+    requestId: string;
+    principalId: string;
+    transport: "stdio" | "http";
+    requestedMode: BridgeMode;
+    effectiveMode: BridgeMode;
+    presetName: string;
+    detectedRisks: RiskCategory[];
+    promptFingerprint: string;
+    exitCode?: number | undefined;
+    outcome?: "succeeded" | "failed" | "cancelled" | "timed_out" | undefined;
+}
+/** SHA-256 lets related events be correlated without retaining the private handoff. */
+export declare function fingerprintPrompt(prompt: string): string;
+/** Append a restricted audit record as a single JSONL line. The directory and file are owner-only. */
+export declare function appendAuditEvent(file: string, event: AuditEvent): void;

package/dist/audit-log.js

@@ -0,0 +1,31 @@
+import { createHash } from "node:crypto";
+import { appendFileSync, chmodSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+/** SHA-256 lets related events be correlated without retaining the private handoff. */
+export function fingerprintPrompt(prompt) {
+    return createHash("sha256").update(prompt, "utf8").digest("hex");
+}
+/** Append a restricted audit record as a single JSONL line. The directory and file are owner-only. */
+export function appendAuditEvent(file, event) {
+    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+    const line = `${JSON.stringify(sanitizeEvent(event))}\n`;
+    appendFileSync(file, line, { encoding: "utf8", mode: 0o600 });
+    chmodSync(file, 0o600);
+}
+function sanitizeEvent(event) {
+    return {
+        timestamp: event.timestamp,
+        phase: event.phase,
+        requestId: event.requestId,
+        principalId: event.principalId,
+        transport: event.transport,
+        requestedMode: event.requestedMode,
+        effectiveMode: event.effectiveMode,
+        presetName: event.presetName,
+        detectedRisks: [...event.detectedRisks],
+        promptFingerprint: event.promptFingerprint,
+        ...(event.exitCode === undefined ? {} : { exitCode: event.exitCode }),
+        ...(event.outcome === undefined ? {} : { outcome: event.outcome }),
+    };
+}
+//# sourceMappingURL=audit-log.js.map