atbash-hermes-plugin 0.1.3.dev0__tar.gz → 0.1.3.dev1__tar.gz

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.1.3.dev0
+Version: 0.1.3.dev1
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -77,6 +77,7 @@ Add:
 ATBASH_KEY_PATH=$HOME/.config/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Restart Hermes after changing `.env`.
@@ -97,12 +98,21 @@ hermes
 # Override the Atbash API endpoint.
 ATBASH_ENDPOINT=https://api.atbash.io
 
+# Set to self-hosted when using your own judge endpoint. Self-hosted judges
+# require ATBASH_JUDGE_VERIFY_PUBKEY so the SDK can verify signed responses.
+ATBASH_JUDGE_ENDPOINT_POLICY=default
+ATBASH_JUDGE_VERIFY_PUBKEY=
+
 # Fail closed when Atbash cannot be reached. Default: true.
 ATBASH_ENFORCE_DECISION=true
 
 # Emit verbose plugin logs. Default: false.
 ATBASH_DEBUG=false
 
+# Resolve the Atbash organization subscription/network. This lets the SDK
+# choose the public or private chain for that org.
+ATBASH_ORG_NAME=your-org-name
+
 # Override where learned Hermes tool classifications are saved.
 ATBASH_TOOL_MAP_PATH=$HOME/.config/atbash/hermes-tool-map.json
 ```
@@ -166,6 +176,7 @@ Example `~/.hermes/.env` for Docker:
 ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Run Hermes:
@@ -184,6 +195,7 @@ docker run --rm -it \
   -e ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key \
   -e ATBASH_ENFORCE_DECISION=true \
   -e ATBASH_DEBUG=false \
+  -e ATBASH_ORG_NAME=your-org-name \
   nousresearch/hermes-agent
 ```
 
@@ -211,6 +223,13 @@ Hermes sessions.
   - `ATBASH_ENFORCE_DECISION=true`: fail closed and block.
   - `ATBASH_ENFORCE_DECISION=false`: fail open and allow.
 
+For `HOLD`, the user-facing block message is:
+
+```text
+Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: <original reason from judge>
+```
+
 ## Troubleshooting
 
 If Hermes does not show the plugin:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev1}/README.md

@@ -62,6 +62,7 @@ Add:
 ATBASH_KEY_PATH=$HOME/.config/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Restart Hermes after changing `.env`.
@@ -82,12 +83,21 @@ hermes
 # Override the Atbash API endpoint.
 ATBASH_ENDPOINT=https://api.atbash.io
 
+# Set to self-hosted when using your own judge endpoint. Self-hosted judges
+# require ATBASH_JUDGE_VERIFY_PUBKEY so the SDK can verify signed responses.
+ATBASH_JUDGE_ENDPOINT_POLICY=default
+ATBASH_JUDGE_VERIFY_PUBKEY=
+
 # Fail closed when Atbash cannot be reached. Default: true.
 ATBASH_ENFORCE_DECISION=true
 
 # Emit verbose plugin logs. Default: false.
 ATBASH_DEBUG=false
 
+# Resolve the Atbash organization subscription/network. This lets the SDK
+# choose the public or private chain for that org.
+ATBASH_ORG_NAME=your-org-name
+
 # Override where learned Hermes tool classifications are saved.
 ATBASH_TOOL_MAP_PATH=$HOME/.config/atbash/hermes-tool-map.json
 ```
@@ -151,6 +161,7 @@ Example `~/.hermes/.env` for Docker:
 ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Run Hermes:
@@ -169,6 +180,7 @@ docker run --rm -it \
   -e ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key \
   -e ATBASH_ENFORCE_DECISION=true \
   -e ATBASH_DEBUG=false \
+  -e ATBASH_ORG_NAME=your-org-name \
   nousresearch/hermes-agent
 ```
 
@@ -196,6 +208,13 @@ Hermes sessions.
   - `ATBASH_ENFORCE_DECISION=true`: fail closed and block.
   - `ATBASH_ENFORCE_DECISION=false`: fail open and allow.
 
+For `HOLD`, the user-facing block message is:
+
+```text
+Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: <original reason from judge>
+```
+
 ## Troubleshooting
 
 If Hermes does not show the plugin:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev1}/atbash_hermes_plugin/__init__.py

@@ -8,6 +8,12 @@ from typing import Any, Dict, Optional
 
 logger = logging.getLogger("atbash-hermes-plugin")
 
+HOLD_MESSAGE = (
+    "Action held for operator review. The agent will not be jailed — please approve "
+    "or reject this request from the Atbash dashboard, then ask the agent to try "
+    "again.\nReason: {reason}"
+)
+
 DEFAULT_TOOL_CLASS_MAP = {
     "browser_click": "browser_interaction",
     "browser_navigate": "network",
@@ -155,8 +161,11 @@ class AtbashHermesGuard:
         self.debug = _as_bool(os.getenv("ATBASH_DEBUG"), False)
         self.fail_closed = _as_bool(os.getenv("ATBASH_ENFORCE_DECISION"), True)
         self.endpoint = os.getenv("ATBASH_ENDPOINT")
+        self.judge_endpoint_policy = os.getenv("ATBASH_JUDGE_ENDPOINT_POLICY")
+        self.judge_verify_pubkey = os.getenv("ATBASH_JUDGE_VERIFY_PUBKEY")
         self.key_path = os.getenv("ATBASH_KEY_PATH")
         self.privkey = os.getenv("ATBASH_AGENT_PRIVKEY")
+        self.org_name = os.getenv("ATBASH_ORG_NAME")
         self.provider = os.getenv("HERMES_PROVIDER")
         self.model = os.getenv("HERMES_MODEL")
         self.tool_map_path = Path(
@@ -190,25 +199,53 @@ class AtbashHermesGuard:
                 from atbash import Atbash  # type: ignore
                 from atbash.types import ToolCallInput  # type: ignore
             except Exception:
-                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.1.3") from e
+                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.1.3.dev0") from e
 
         self.ToolCallInput = ToolCallInput
-        judge_cfg = {"endpoint": self.endpoint} if self.endpoint else None
+        judge_cfg = self._judge_config()
 
         # Prefer explicit key material if provided.
         if self.privkey:
             try:
-                return Atbash(self.privkey, endpoint=self.endpoint or "https://atbash.ai")
+                return Atbash.from_config(
+                    agent_key=self.privkey,
+                    judge=judge_cfg,
+                    org_name=self.org_name,
+                    fail_closed=self.fail_closed,
+                )
             except TypeError:
-                return Atbash(self.privkey)
+                kwargs: Dict[str, Any] = {
+                    "org_name": self.org_name,
+                    "fail_closed": self.fail_closed,
+                }
+                if self.endpoint:
+                    kwargs["endpoint"] = self.endpoint
+                if self.judge_verify_pubkey:
+                    kwargs["verify_pubkey"] = self.judge_verify_pubkey
+                return Atbash(self.privkey, **kwargs)
 
         # Use SDK-native config loader for key file/env/config.
         return Atbash.from_config(
             key_path=self.key_path,
             judge=judge_cfg,
+            org_name=self.org_name,
             fail_closed=self.fail_closed,
         )
 
+    def _judge_config(self) -> Optional[Dict[str, str]]:
+        if not self.endpoint:
+            return None
+        if self.judge_endpoint_policy == "self-hosted":
+            return {
+                "policy": "self-hosted",
+                "endpoint": self.endpoint,
+                "verify_pubkey": self.judge_verify_pubkey or "",
+            }
+        return {
+            "policy": "default",
+            "endpoint": self.endpoint,
+        }
+
     def _judge(
         self,
         tool_name: str,
@@ -291,9 +328,10 @@ class AtbashHermesGuard:
                 logger.info("Atbash verdict tool=%s verdict=%s reason=%s", tool_name, verdict, reason)
 
             if verdict == "HOLD":
+                hold_message = HOLD_MESSAGE.format(reason=reason)
                 return {
                     "action": "block",
-                    "message": f"Held by Atbash for operator review: {reason}",
+                    "message": hold_message,
                 }
 
             if verdict in {"BLOCK", "DENY", "REJECT", "DISALLOW"}:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev1}/atbash_hermes_plugin.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.1.3.dev0
+Version: 0.1.3.dev1
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -77,6 +77,7 @@ Add:
 ATBASH_KEY_PATH=$HOME/.config/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Restart Hermes after changing `.env`.
@@ -97,12 +98,21 @@ hermes
 # Override the Atbash API endpoint.
 ATBASH_ENDPOINT=https://api.atbash.io
 
+# Set to self-hosted when using your own judge endpoint. Self-hosted judges
+# require ATBASH_JUDGE_VERIFY_PUBKEY so the SDK can verify signed responses.
+ATBASH_JUDGE_ENDPOINT_POLICY=default
+ATBASH_JUDGE_VERIFY_PUBKEY=
+
 # Fail closed when Atbash cannot be reached. Default: true.
 ATBASH_ENFORCE_DECISION=true
 
 # Emit verbose plugin logs. Default: false.
 ATBASH_DEBUG=false
 
+# Resolve the Atbash organization subscription/network. This lets the SDK
+# choose the public or private chain for that org.
+ATBASH_ORG_NAME=your-org-name
+
 # Override where learned Hermes tool classifications are saved.
 ATBASH_TOOL_MAP_PATH=$HOME/.config/atbash/hermes-tool-map.json
 ```
@@ -166,6 +176,7 @@ Example `~/.hermes/.env` for Docker:
 ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Run Hermes:
@@ -184,6 +195,7 @@ docker run --rm -it \
   -e ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key \
   -e ATBASH_ENFORCE_DECISION=true \
   -e ATBASH_DEBUG=false \
+  -e ATBASH_ORG_NAME=your-org-name \
   nousresearch/hermes-agent
 ```
 
@@ -211,6 +223,13 @@ Hermes sessions.
   - `ATBASH_ENFORCE_DECISION=true`: fail closed and block.
   - `ATBASH_ENFORCE_DECISION=false`: fail open and allow.
 
+For `HOLD`, the user-facing block message is:
+
+```text
+Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: <original reason from judge>
+```
+
 ## Troubleshooting
 
 If Hermes does not show the plugin:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "atbash-hermes-plugin"
-version = "0.1.3.dev0"
+version = "0.1.3.dev1"
 description = "Atbash safety plugin for Hermes Agent"
 readme = "README.md"
 requires-python = ">=3.10"