thinkpool-pair 0.7.304 → 0.7.306

package/flow-models.mjs

@@ -12,6 +12,9 @@ const CLAUDE_TIERS = {
 const CODEX_SCAFFOLD = ['gpt-5.6-luna', 'gpt-5.4-mini', 'gpt-5.3-codex-spark']
 const CODEX_BALANCED = ['gpt-5.6-terra', 'gpt-5.4']
 const HERMES_REVIEW = ['nous:anthropic/claude-sonnet-4.6', 'nous:anthropic/claude-sonnet-4.5', 'nous:anthropic/claude-sonnet-4']
+const HERMES_MODEL_ALIASES = Object.freeze({
+  fable: 'nous:anthropic/claude-fable-5',
+})
 
 export function normalizeFlowRuntime(runtime, fallback = null) {
   if (runtime === 'claude' || runtime === 'codex' || runtime === 'hermes') return runtime
@@ -25,8 +28,11 @@ export function modelCatalogValues(catalog = []) {
 }
 
 const exactHermesModelId = (value) => /^[A-Za-z0-9._-]+:[A-Za-z0-9._-]+\/[A-Za-z0-9._:/-]+$/.test(value)
+const exactNousModelId = (value) => /^nous:/i.test(value) && exactHermesModelId(value)
 
 const expandHermesModelAlias = (value) => {
+  const named = HERMES_MODEL_ALIASES[value.toLowerCase()]
+  if (named) return named
   if (/^glm[-_.]/i.test(value)) return `nous:z-ai/${value.toLowerCase()}`
   const shorthand = value.match(/^([^:/]+):([^/]+)$/)
   if (!shorthand) return value
@@ -44,15 +50,15 @@ export function resolveHermesOpenModel(model, catalog = [], { strictCatalog = fa
   const requested = String(model || '').trim()
   if (!requested) return { ok: true, model: undefined, validatedBy: 'default' }
   const values = [...modelCatalogValues(catalog)]
-  if (values.includes(requested)) return { ok: true, model: requested, validatedBy: 'catalog' }
+  if (values.includes(requested) && exactNousModelId(requested)) return { ok: true, model: requested, validatedBy: 'catalog' }
 
   const expanded = expandHermesModelAlias(requested)
   const normalized = (value) => String(value).toLowerCase().replace(/[^a-z0-9]+/g, '')
   const requestedKey = normalized(expanded).replace(/^nous/, '')
   const aliases = values.filter((value) => normalized(value).replace(/^nous/, '') === requestedKey)
-  if (aliases.length === 1) return { ok: true, model: aliases[0], validatedBy: 'catalog' }
+  if (aliases.length === 1 && exactNousModelId(aliases[0])) return { ok: true, model: aliases[0], validatedBy: 'catalog' }
   if (strictCatalog && values.length) return { ok: false, error: `Could not open a Hermes terminal on ${JSON.stringify(requested)} — that model is not in this session's ACP catalog.` }
-  if (!exactHermesModelId(expanded)) return { ok: false, error: `Could not resolve Hermes model ${JSON.stringify(requested)}. Use a full ACP model ID such as "nous:z-ai/glm-5.2".` }
+  if (!exactNousModelId(expanded)) return { ok: false, error: `Could not resolve Hermes model ${JSON.stringify(requested)}. ThinkPool Hermes only routes through Nous Portal; use a full ACP model ID such as "nous:z-ai/glm-5.2".` }
   return { ok: true, model: expanded, validatedBy: 'child-runtime' }
 }
 

package/hermes-acp-bootstrap.py

@@ -148,6 +148,21 @@ acp_adapter.session._expand_acp_enabled_toolsets = constrained_expand
 
 import acp_adapter.server
 
+# ThinkPool Hermes is a Nous Portal runtime, never a generic provider shell.
+# The profile probe owns the first boundary; this process-local guard is the
+# final defense against profile drift or a future ACP reconstruction bypass.
+_build_model_state = acp_adapter.server.HermesACPAgent._build_model_state
+def nous_only_model_state(self, state):
+    provider = str(getattr(getattr(state, "agent", None), "provider", "") or "").strip().lower()
+    if provider != "nous":
+        raise RuntimeError("ThinkPool Hermes requires the Nous Portal provider")
+    result = _build_model_state(self, state)
+    for item in list(getattr(result, "available_models", None) or []):
+        if not str(getattr(item, "model_id", "") or "").lower().startswith("nous:"):
+            raise RuntimeError("ThinkPool Hermes received a non-Nous ACP model")
+    return result
+acp_adapter.server.HermesACPAgent._build_model_state = nous_only_model_state
+
 # ThinkPool-only commands live in this process patch rather than in Hermes'
 # profile.  They are intentionally narrow: no identity, shared configuration,
 # account tokens, or lifecycle/admin controls enter the room surface.
@@ -413,6 +428,9 @@ acp_adapter.server.HermesACPAgent._register_session_mcp_servers = constrained_re
 # the replacement has re-registered and passed the same exact policy check.
 _set_model = acp_adapter.server.HermesACPAgent.set_session_model
 async def constrained_set_model(self, model_id, session_id, **kwargs):
+    rendered_model_id = str(model_id or "").strip().lower()
+    if ":" in rendered_model_id and not rendered_model_id.startswith("nous:"):
+        raise RuntimeError("ThinkPool Hermes only switches models through Nous Portal")
     state = self.session_manager.get_session(session_id)
     if state is None:
         return await _set_model(self, model_id, session_id, **kwargs)

package/hermes-probe.mjs

@@ -6,6 +6,7 @@ const clean = (value) => String(value || '').replace(/[\r\n]+/g, ' ').trim()
 
 const INSTALL = /Install directory:\s*(.+?)(?:\r?\n|$)/i
 const PROFILE = /Config:\s*(.+?)(?:\r?\n|$)/i
+const NOUS_PROVIDER = /Model:\s*\{[^\r\n]*['"]provider['"]\s*:\s*['"]nous['"][^\r\n]*\}/i
 
 // Resolve the installed venv and isolated profile once, then launch ACP through
 // bridge-owned code. `thinkpool` is only queried for inventory; it is never the
@@ -21,6 +22,7 @@ export function resolveHermesAcpRuntime({ command = 'thinkpool', execFile = exec
     // `thinkpool` is the dedicated profile wrapper on supported installs. Its
     // config output is evidence, not the ACP launch path.
     const configOutput = execFile(command, ['config', 'show'], { encoding: 'utf8', timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
+    if (!NOUS_PROVIDER.test(String(configOutput))) throw new Error('ThinkPool Hermes profile is not pinned to Nous Portal')
     const config = clean(String(configOutput).match(PROFILE)?.[1])
     const profile = config ? path.dirname(config) : ''
     if (!profile || !path.isAbsolute(profile) || path.basename(profile) !== 'thinkpool') throw new Error('Hermes did not report the isolated thinkpool profile')
@@ -34,6 +36,8 @@ export function probeHermesRuntime({ command = 'thinkpool', prefixArgs = [], exe
   try {
     const versionOutput = execFile(command, [...prefixArgs, '--version'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
     const version = clean(versionOutput).match(/Hermes Agent v([^\s]+)/i)?.[1] || null
+    const configOutput = execFile(command, [...prefixArgs, 'config', 'show'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
+    if (!NOUS_PROVIDER.test(String(configOutput))) return { available: false, version, reason: 'ThinkPool Hermes profile is not pinned to Nous Portal' }
     execFile(command, [...prefixArgs, 'acp', '--check'], { encoding: 'utf8', env, timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'] })
     const hooksOutput = execFile(command, [...prefixArgs, 'hooks', 'list'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
     const doctorOutput = execFile(command, [...prefixArgs, 'hooks', 'doctor'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })

package/hermes-setup.mjs

@@ -6,6 +6,8 @@ import YAML from 'yaml'
 import { probeHermesRuntime } from './hermes-probe.mjs'
 
 export const HERMES_PROFILE = 'thinkpool'
+export const HERMES_PROVIDER = 'nous'
+export const HERMES_DEFAULT_MODEL = 'openai/gpt-5.6-luna'
 export const HERMES_GUARD_FILENAME = 'hermes-delegation-guard.mjs'
 
 const clean = (value) => String(value || '').replace(/[\r\n]+/g, ' ').trim()
@@ -112,6 +114,14 @@ export function setupHermesRuntime({
     config = parsed || {}
   }
   if (config.hooks != null && !isObject(config.hooks)) throw new Error('Hermes thinkpool hooks config is not a mapping; refusing to overwrite it')
+  if (config.model != null && !isObject(config.model)) throw new Error('Hermes thinkpool model config is not a mapping; refusing to overwrite it')
+  const model = config.model ||= {}
+  model.provider = HERMES_PROVIDER
+  model.default = HERMES_DEFAULT_MODEL
+  // Provider-specific transport overrides from a cloned profile must never
+  // survive into ThinkPool's Nous-only runtime.
+  delete model.base_url
+  delete model.api_mode
   const hooks = config.hooks ||= {}
   if (hooks.pre_tool_call != null && !Array.isArray(hooks.pre_tool_call)) throw new Error('Hermes pre_tool_call hooks are not a list; refusing to overwrite them')
   const prior = hooks.pre_tool_call || []

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.304",
+  "version": "0.7.306",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {