thinkpool-pair 0.7.364 → 0.7.366

package/hermes-policy.mjs

@@ -1,92 +1 @@
-// Bridge-owned Hermes ACP schema policy. This is intentionally a small, pure
-// contract: Python receives only this JSON and fails closed for anything else.
-import { PEER_MCP_TOOLS, PEER_READ_MCP_TOOLS } from './cross-terminal.mjs'
-
-export const HERMES_POLICY_VERSION = 1
-export const HERMES_QUESTION_MCP_TOOL = 'request_user_input'
-export const MCP_FLIGHT_RECORDER_TOOL = 'read_mcp_flight_recorder'
-
-export const CODING_TOOLS = Object.freeze([
-  'web_search', 'web_extract', 'terminal', 'process', 'read_file', 'write_file',
-  'patch', 'search_files', 'vision_analyze', 'skills_list', 'skill_view',
-  'skill_manage', 'browser_navigate', 'browser_snapshot', 'browser_click',
-  'browser_type', 'browser_scroll', 'browser_back', 'browser_press',
-  'browser_get_images', 'browser_vision', 'browser_console', 'browser_cdp',
-  'browser_dialog', 'todo', 'memory', 'execute_code',
-])
-
-const READ_ONLY_TOOLS = Object.freeze(['read_file', 'search_files'])
-// Hermes providers advertise capabilities conditionally (for example browser
-// CDP/dialog support depends on the installed browser integration).  These are
-// the only builtins an ordinary or builder lane must have to do useful coding
-// work; the complete coding allowlist above remains permitted when available.
-export const ESSENTIAL_CODING_TOOLS = Object.freeze([
-  'terminal', 'process', 'read_file', 'write_file', 'patch', 'search_files',
-])
-const ROLE_REQUIRED = Object.freeze({
-  ordinary: [...PEER_MCP_TOOLS, HERMES_QUESTION_MCP_TOOL, MCP_FLIGHT_RECORDER_TOOL, 'spawn_terminal', 'close_terminal'],
-  plan: [],
-  conductor: ['submit_flow_plan'],
-  builder: ['mark_flow_done'],
-  reviewer: ['submit_flow_review', 'run_review_check', 'read_review_file'],
-  'manual-review': ['run_review_check', 'read_review_file'],
-})
-
-export function hermesRoleFor({ flowRole, sliceType } = {}) {
-  if (flowRole === 'conductor') return 'conductor'
-  if (flowRole === 'reviewer') return 'reviewer'
-  if (sliceType === 'review') return 'manual-review'
-  if (flowRole === 'builder') return 'builder'
-  return 'ordinary'
-}
-
-export function hermesPolicyForRole(role, { mcpTools } = {}) {
-  if (!Object.hasOwn(ROLE_REQUIRED, role)) throw new Error(`Unknown Hermes role policy: ${role}`)
-  const supplied = Array.isArray(mcpTools) ? mcpTools.map(String).filter(Boolean) : ROLE_REQUIRED[role]
-  const required = ROLE_REQUIRED[role]
-  // Ordinary worker leaves deliberately lack spawn/close. Main-lane proof is
-  // enforced by requiredMcpTools at dispatch; keep this schema usable for a
-  // non-delegating ordinary child without widening it.
-  const minimum = role === 'ordinary' ? [...PEER_MCP_TOOLS, HERMES_QUESTION_MCP_TOOL, MCP_FLIGHT_RECORDER_TOOL] : required
-  for (const tool of minimum) if (!supplied.includes(tool)) throw new Error(`Hermes ${role} policy is missing required ThinkPool tool ${tool}`)
-  const restricted = role === 'plan' || role === 'conductor' || role === 'reviewer' || role === 'manual-review'
-  const builtinTools = restricted ? READ_ONLY_TOOLS : CODING_TOOLS
-  const requiredBuiltinTools = restricted ? READ_ONLY_TOOLS : ESSENTIAL_CODING_TOOLS
-  return Object.freeze({
-    version: HERMES_POLICY_VERSION,
-    role,
-    // `builtinTools` is the role's complete approved surface, not a promise
-    // that an availability-gated upstream provider implements every tool.
-    builtinTools,
-    requiredBuiltinTools,
-    mcpServer: 'thinkpool',
-    mcpTools: [...new Set(supplied)].sort(),
-  })
-}
-
-export function hermesRequiredMcpTools(role, { canSpawnWorkers = false } = {}) {
-  if (role === 'ordinary') return [...PEER_MCP_TOOLS, HERMES_QUESTION_MCP_TOOL, MCP_FLIGHT_RECORDER_TOOL, ...(canSpawnWorkers ? ['spawn_terminal', 'close_terminal'] : [])]
-  return [...ROLE_REQUIRED[role]]
-}
-
-export const HERMES_PLAN_SAFE_MCP_TOOLS = PEER_READ_MCP_TOOLS
-
-// Keep the bridge's local /tools proof on the same canonical inventory as the
-// process-local Python bootstrap.  `allBuiltinTools` lets that proof reject a
-// known built-in which is not part of this role, rather than merely looking
-// for a couple of required MCP names.
-export function hermesExactInventory(role, options = {}) {
-  const policy = hermesPolicyForRole(role, options)
-  return Object.freeze({
-    builtinTools: [...policy.builtinTools].sort(),
-    requiredBuiltinTools: [...policy.requiredBuiltinTools].sort(),
-    mcpTools: [...policy.mcpTools].sort(),
-    // The two excluded upstream capabilities must be checked as forbidden too;
-    // they are intentionally absent from CODING_TOOLS, not unknown to policy.
-    allBuiltinTools: [...CODING_TOOLS, 'delegate_task', 'session_search'].sort(),
-  })
-}
-
-export function hermesPolicyEnv(role, options = {}) {
-  return JSON.stringify(hermesPolicyForRole(role, options))
-}
+import{PEER_MCP_TOOLS as e,PEER_READ_MCP_TOOLS as r}from"./cross-terminal.mjs";export const HERMES_POLICY_VERSION=1;export const HERMES_QUESTION_MCP_TOOL="request_user_input";export const MCP_FLIGHT_RECORDER_TOOL="read_mcp_flight_recorder";export const CODING_TOOLS=Object.freeze(["web_search","web_extract","terminal","process","read_file","write_file","patch","search_files","vision_analyze","skills_list","skill_view","skill_manage","browser_navigate","browser_snapshot","browser_click","browser_type","browser_scroll","browser_back","browser_press","browser_get_images","browser_vision","browser_console","browser_cdp","browser_dialog","todo","memory","execute_code"]);const o=Object.freeze(["read_file","search_files"]);export const ESSENTIAL_CODING_TOOLS=Object.freeze(["terminal","process","read_file","write_file","patch","search_files"]);const s=Object.freeze({ordinary:[...e,"request_user_input",MCP_FLIGHT_RECORDER_TOOL,"spawn_terminal","close_terminal"],plan:[],conductor:["submit_flow_plan"],builder:["mark_flow_done"],reviewer:["submit_flow_review","run_review_check","read_review_file"],"manual-review":["run_review_check","read_review_file"]});export function hermesRoleFor({flowRole:e,sliceType:r}={}){return"conductor"===e?"conductor":"reviewer"===e?"reviewer":"review"===r?"manual-review":"builder"===e?"builder":"ordinary"}export function hermesPolicyForRole(r,{mcpTools:i}={}){if(!Object.hasOwn(s,r))throw new Error(`Unknown Hermes role policy: ${r}`);const t=Array.isArray(i)?i.map(String).filter(Boolean):s[r],n=s[r],l="ordinary"===r?[...e,"request_user_input",MCP_FLIGHT_RECORDER_TOOL]:n;for(const e of l)if(!t.includes(e))throw new Error(`Hermes ${r} policy is missing required ThinkPool tool ${e}`);const _="plan"===r||"conductor"===r||"reviewer"===r||"manual-review"===r,c=_?o:CODING_TOOLS,a=_?o:ESSENTIAL_CODING_TOOLS;return Object.freeze({version:1,role:r,builtinTools:c,requiredBuiltinTools:a,mcpServer:"thinkpool",mcpTools:[...new Set(t)].sort()})}export function hermesRequiredMcpTools(r,{canSpawnWorkers:o=!1}={}){return"ordinary"===r?[...e,"request_user_input",MCP_FLIGHT_RECORDER_TOOL,...o?["spawn_terminal","close_terminal"]:[]]:[...s[r]]}export const HERMES_PLAN_SAFE_MCP_TOOLS=r;export function hermesExactInventory(e,r={}){const o=hermesPolicyForRole(e,r);return Object.freeze({builtinTools:[...o.builtinTools].sort(),requiredBuiltinTools:[...o.requiredBuiltinTools].sort(),mcpTools:[...o.mcpTools].sort(),allBuiltinTools:[...CODING_TOOLS,"delegate_task","session_search"].sort()})}export function hermesPolicyEnv(e,r={}){return JSON.stringify(hermesPolicyForRole(e,r))}

package/hermes-probe.mjs

@@ -1,57 +1 @@
-import { execFileSync } from 'node:child_process'
-import fs from 'node:fs'
-import path from 'node:path'
-
-const clean = (value) => String(value || '').replace(/[\r\n]+/g, ' ').trim()
-
-const INSTALL = /Install directory:\s*(.+?)(?:\r?\n|$)/i
-const PROFILE = /Config:\s*(.+?)(?:\r?\n|$)/i
-const NOUS_PROVIDER = /Model:\s*\{[^\r\n]*['"]provider['"]\s*:\s*['"]nous['"][^\r\n]*\}/i
-
-// Resolve the installed venv and isolated profile once, then launch ACP through
-// bridge-owned code. `thinkpool` is only queried for inventory; it is never the
-// executable that serves an ACP lane.
-export function resolveHermesAcpRuntime({ command = 'thinkpool', execFile = execFileSync, exists = fs.existsSync, bootstrap = new URL('./hermes-acp-bootstrap.py', import.meta.url) } = {}) {
-  try {
-    const versionOutput = execFile(command, ['--version'], { encoding: 'utf8', timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    const install = clean(String(versionOutput).match(INSTALL)?.[1])
-    if (!install || !path.isAbsolute(install)) throw new Error('Hermes did not report an absolute install directory')
-    const python = path.join(install, 'venv', 'bin', 'python')
-    const bootstrapPath = bootstrap instanceof URL ? bootstrap.pathname : String(bootstrap)
-    if (!exists(python) || !exists(bootstrapPath)) throw new Error('Hermes venv Python or ThinkPool ACP bootstrap is missing')
-    // `thinkpool` is the dedicated profile wrapper on supported installs. Its
-    // config output is evidence, not the ACP launch path.
-    const configOutput = execFile(command, ['config', 'show'], { encoding: 'utf8', timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    if (!NOUS_PROVIDER.test(String(configOutput))) throw new Error('ThinkPool Hermes profile is not pinned to Nous Portal')
-    const config = clean(String(configOutput).match(PROFILE)?.[1])
-    const profile = config ? path.dirname(config) : ''
-    if (!profile || !path.isAbsolute(profile) || path.basename(profile) !== 'thinkpool') throw new Error('Hermes did not report the isolated thinkpool profile')
-    return { python, bootstrap: bootstrapPath, profile, install }
-  } catch (error) {
-    return { error: clean(error?.stderr || error?.message || error) || 'could not resolve Hermes ACP runtime' }
-  }
-}
-
-export function probeHermesRuntime({ command = 'thinkpool', prefixArgs = [], execFile = execFileSync, env = process.env, strictBootstrap = false, exists = fs.existsSync } = {}) {
-  try {
-    const versionOutput = execFile(command, [...prefixArgs, '--version'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    const version = clean(versionOutput).match(/Hermes Agent v([^\s]+)/i)?.[1] || null
-    const configOutput = execFile(command, [...prefixArgs, 'config', 'show'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    if (!NOUS_PROVIDER.test(String(configOutput))) return { available: false, version, reason: 'ThinkPool Hermes profile is not pinned to Nous Portal' }
-    execFile(command, [...prefixArgs, 'acp', '--check'], { encoding: 'utf8', env, timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    const hooksOutput = execFile(command, [...prefixArgs, 'hooks', 'list'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    const doctorOutput = execFile(command, [...prefixArgs, 'hooks', 'doctor'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    const guardOutput = execFile(command, [...prefixArgs, 'hooks', 'test', 'pre_tool_call', '--for-tool', 'delegate_task'], { encoding: 'utf8', env, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'] })
-    const doctorHealthy = /All shell hooks look healthy/i.test(doctorOutput)
-      && !/(?:issue\(s\) found|modified since approval|⚠)/i.test(doctorOutput)
-    const delegationBlocked = /(?:action|decision)["']?\s*[:=]\s*["']block/i.test(guardOutput)
-      && /ThinkPool blocks hidden Hermes delegation/i.test(guardOutput)
-      && /pre_tool_call[\s\S]*delegate_task[\s\S]*(?:✓ allowed|allowed)/i.test(hooksOutput)
-    if (!doctorHealthy || !delegationBlocked) return { available: false, version, reason: 'delegate_task guard is not healthy, unchanged, allowlisted, and structurally blocking in the dedicated Hermes profile' }
-    const runtime = strictBootstrap ? resolveHermesAcpRuntime({ command, execFile, exists }) : null
-    if (runtime?.error) return { available: false, version, reason: `Hermes ACP bootstrap unavailable: ${runtime.error}` }
-    return { available: true, version, acpProtocol: 1, delegationBlocked: true, ...(runtime || {}) }
-  } catch (error) {
-    return { available: false, version: null, reason: clean(error?.stderr || error?.message || error) }
-  }
-}
+import{execFileSync as e}from"node:child_process";import o from"node:fs";import t from"node:path";const i=e=>String(e||"").replace(/[\r\n]+/g," ").trim(),n=/Install directory:\s*(.+?)(?:\r?\n|$)/i,r=/Config:\s*(.+?)(?:\r?\n|$)/i,s=/Model:\s*\{[^\r\n]*['"]provider['"]\s*:\s*['"]nous['"][^\r\n]*\}/i;export function resolveHermesAcpRuntime({command:l="thinkpool",execFile:a=e,exists:p=o.existsSync,bootstrap:c=new URL("./hermes-acp-bootstrap.py",import.meta.url)}={}){try{const e=a(l,["--version"],{encoding:"utf8",timeout:1e4,stdio:["ignore","pipe","pipe"]}),o=i(String(e).match(n)?.[1]);if(!o||!t.isAbsolute(o))throw new Error("Hermes did not report an absolute install directory");const d=t.join(o,"venv","bin","python"),m=c instanceof URL?c.pathname:String(c);if(!p(d)||!p(m))throw new Error("Hermes venv Python or ThinkPool ACP bootstrap is missing");const u=a(l,["config","show"],{encoding:"utf8",timeout:1e4,stdio:["ignore","pipe","pipe"]});if(!s.test(String(u)))throw new Error("ThinkPool Hermes profile is not pinned to Nous Portal");const h=i(String(u).match(r)?.[1]),g=h?t.dirname(h):"";if(!g||!t.isAbsolute(g)||"thinkpool"!==t.basename(g))throw new Error("Hermes did not report the isolated thinkpool profile");return{python:d,bootstrap:m,profile:g,install:o}}catch(e){return{error:i(e?.stderr||e?.message||e)||"could not resolve Hermes ACP runtime"}}}export function probeHermesRuntime({command:t="thinkpool",prefixArgs:n=[],execFile:r=e,env:l=process.env,strictBootstrap:a=!1,exists:p=o.existsSync}={}){try{const e=r(t,[...n,"--version"],{encoding:"utf8",env:l,timeout:1e4,stdio:["ignore","pipe","pipe"]}),o=i(e).match(/Hermes Agent v([^\s]+)/i)?.[1]||null,c=r(t,[...n,"config","show"],{encoding:"utf8",env:l,timeout:1e4,stdio:["ignore","pipe","pipe"]});if(!s.test(String(c)))return{available:!1,version:o,reason:"ThinkPool Hermes profile is not pinned to Nous Portal"};r(t,[...n,"acp","--check"],{encoding:"utf8",env:l,timeout:15e3,stdio:["ignore","pipe","pipe"]});const d=r(t,[...n,"hooks","list"],{encoding:"utf8",env:l,timeout:1e4,stdio:["ignore","pipe","pipe"]}),m=r(t,[...n,"hooks","doctor"],{encoding:"utf8",env:l,timeout:1e4,stdio:["ignore","pipe","pipe"]}),u=r(t,[...n,"hooks","test","pre_tool_call","--for-tool","delegate_task"],{encoding:"utf8",env:l,timeout:1e4,stdio:["ignore","pipe","pipe"]}),h=/All shell hooks look healthy/i.test(m)&&!/(?:issue\(s\) found|modified since approval|⚠)/i.test(m),g=/(?:action|decision)["']?\s*[:=]\s*["']block/i.test(u)&&/ThinkPool blocks hidden Hermes delegation/i.test(u)&&/pre_tool_call[\s\S]*delegate_task[\s\S]*(?:✓ allowed|allowed)/i.test(d);if(!h||!g)return{available:!1,version:o,reason:"delegate_task guard is not healthy, unchanged, allowlisted, and structurally blocking in the dedicated Hermes profile"};const f=a?resolveHermesAcpRuntime({command:t,execFile:r,exists:p}):null;return f?.error?{available:!1,version:o,reason:`Hermes ACP bootstrap unavailable: ${f.error}`}:{available:!0,version:o,acpProtocol:1,delegationBlocked:!0,...f||{}}}catch(e){return{available:!1,version:null,reason:i(e?.stderr||e?.message||e)}}}