atbash-hermes-plugin 0.1.3.dev0__tar.gz → 0.1.3.dev2__tar.gz

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.1.3.dev0
+Version: 0.1.3.dev2
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -10,7 +10,7 @@ Keywords: atbash,hermes,hermes-agent,agent-safety,ai-safety,tool-guard,judge,pol
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: atbash-sdk==0.1.3.dev0
+Requires-Dist: atbash-sdk==0.1.3.dev2
 Dynamic: license-file
 
 # Atbash Hermes Plugin
@@ -35,13 +35,13 @@ stopped before execution.
 Install the plugin into the same Python environment that runs Hermes:
 
 ```bash
-pip install atbash-hermes-plugin
+pip install atbash-hermes-plugin==0.1.3.dev2
 ```
 
 If Hermes is installed in a virtual environment, use that environment's Python:
 
 ```bash
-/path/to/hermes/venv/bin/python -m pip install atbash-hermes-plugin
+/path/to/hermes/venv/bin/python -m pip install atbash-hermes-plugin==0.1.3.dev2
 ```
 
 ## Configure Atbash
@@ -77,6 +77,7 @@ Add:
 ATBASH_KEY_PATH=$HOME/.config/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Restart Hermes after changing `.env`.
@@ -97,12 +98,21 @@ hermes
 # Override the Atbash API endpoint.
 ATBASH_ENDPOINT=https://api.atbash.io
 
+# Set to self-hosted when using your own judge endpoint. Self-hosted judges
+# require ATBASH_JUDGE_VERIFY_PUBKEY so the SDK can verify signed responses.
+ATBASH_JUDGE_ENDPOINT_POLICY=default
+ATBASH_JUDGE_VERIFY_PUBKEY=
+
 # Fail closed when Atbash cannot be reached. Default: true.
 ATBASH_ENFORCE_DECISION=true
 
 # Emit verbose plugin logs. Default: false.
 ATBASH_DEBUG=false
 
+# Resolve the Atbash organization subscription/network. This lets the SDK
+# choose the public or private chain for that org.
+ATBASH_ORG_NAME=your-org-name
+
 # Override where learned Hermes tool classifications are saved.
 ATBASH_TOOL_MAP_PATH=$HOME/.config/atbash/hermes-tool-map.json
 ```
@@ -166,6 +176,7 @@ Example `~/.hermes/.env` for Docker:
 ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Run Hermes:
@@ -184,6 +195,7 @@ docker run --rm -it \
   -e ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key \
   -e ATBASH_ENFORCE_DECISION=true \
   -e ATBASH_DEBUG=false \
+  -e ATBASH_ORG_NAME=your-org-name \
   nousresearch/hermes-agent
 ```
 
@@ -211,6 +223,18 @@ Hermes sessions.
   - `ATBASH_ENFORCE_DECISION=true`: fail closed and block.
   - `ATBASH_ENFORCE_DECISION=false`: fail open and allow.
 
+For `HOLD`, the user-facing block message is:
+
+```text
+Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: <original reason from judge>
+Judgment ID: <held judgment id, when provided by the SDK>
+```
+
+After dashboard approval or rejection, the SDK can query held-action status with
+the judgment ID. The Hermes plugin blocks the original tool call and asks the
+user to retry after review, rather than automatically re-running the action.
+
 ## Troubleshooting
 
 If Hermes does not show the plugin:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev2}/README.md

@@ -20,13 +20,13 @@ stopped before execution.
 Install the plugin into the same Python environment that runs Hermes:
 
 ```bash
-pip install atbash-hermes-plugin
+pip install atbash-hermes-plugin==0.1.3.dev2
 ```
 
 If Hermes is installed in a virtual environment, use that environment's Python:
 
 ```bash
-/path/to/hermes/venv/bin/python -m pip install atbash-hermes-plugin
+/path/to/hermes/venv/bin/python -m pip install atbash-hermes-plugin==0.1.3.dev2
 ```
 
 ## Configure Atbash
@@ -62,6 +62,7 @@ Add:
 ATBASH_KEY_PATH=$HOME/.config/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Restart Hermes after changing `.env`.
@@ -82,12 +83,21 @@ hermes
 # Override the Atbash API endpoint.
 ATBASH_ENDPOINT=https://api.atbash.io
 
+# Set to self-hosted when using your own judge endpoint. Self-hosted judges
+# require ATBASH_JUDGE_VERIFY_PUBKEY so the SDK can verify signed responses.
+ATBASH_JUDGE_ENDPOINT_POLICY=default
+ATBASH_JUDGE_VERIFY_PUBKEY=
+
 # Fail closed when Atbash cannot be reached. Default: true.
 ATBASH_ENFORCE_DECISION=true
 
 # Emit verbose plugin logs. Default: false.
 ATBASH_DEBUG=false
 
+# Resolve the Atbash organization subscription/network. This lets the SDK
+# choose the public or private chain for that org.
+ATBASH_ORG_NAME=your-org-name
+
 # Override where learned Hermes tool classifications are saved.
 ATBASH_TOOL_MAP_PATH=$HOME/.config/atbash/hermes-tool-map.json
 ```
@@ -151,6 +161,7 @@ Example `~/.hermes/.env` for Docker:
 ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Run Hermes:
@@ -169,6 +180,7 @@ docker run --rm -it \
   -e ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key \
   -e ATBASH_ENFORCE_DECISION=true \
   -e ATBASH_DEBUG=false \
+  -e ATBASH_ORG_NAME=your-org-name \
   nousresearch/hermes-agent
 ```
 
@@ -196,6 +208,18 @@ Hermes sessions.
   - `ATBASH_ENFORCE_DECISION=true`: fail closed and block.
   - `ATBASH_ENFORCE_DECISION=false`: fail open and allow.
 
+For `HOLD`, the user-facing block message is:
+
+```text
+Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: <original reason from judge>
+Judgment ID: <held judgment id, when provided by the SDK>
+```
+
+After dashboard approval or rejection, the SDK can query held-action status with
+the judgment ID. The Hermes plugin blocks the original tool call and asks the
+user to retry after review, rather than automatically re-running the action.
+
 ## Troubleshooting
 
 If Hermes does not show the plugin:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev2}/atbash_hermes_plugin/__init__.py

@@ -8,6 +8,12 @@ from typing import Any, Dict, Optional
 
 logger = logging.getLogger("atbash-hermes-plugin")
 
+HOLD_MESSAGE = (
+    "Action held for operator review. The agent will not be jailed — please approve "
+    "or reject this request from the Atbash dashboard, then ask the agent to try "
+    "again.\nReason: {reason}"
+)
+
 DEFAULT_TOOL_CLASS_MAP = {
     "browser_click": "browser_interaction",
     "browser_navigate": "network",
@@ -136,6 +142,27 @@ def _extract_reason(raw: Any) -> str:
     return str(raw)
 
 
+def _extract_judgment_id(raw: Any) -> str:
+    for attr in ("tool_call_id", "judgment_id", "id"):
+        value = getattr(raw, attr, None)
+        if isinstance(value, str) and value.strip():
+            return value.strip()
+
+    if isinstance(raw, dict):
+        for key in ("tool_call_id", "judgment_id", "id"):
+            value = raw.get(key)
+            if isinstance(value, str) and value.strip():
+                return value.strip()
+    return ""
+
+
+def _format_hold_message(reason: str, judgment_id: str = "") -> str:
+    message = HOLD_MESSAGE.format(reason=reason)
+    if judgment_id:
+        message += f"\nJudgment ID: {judgment_id}"
+    return message
+
+
 def _safe_json_value(value: Any) -> Any:
     if value is None or isinstance(value, (str, int, float, bool)):
         return value
@@ -155,8 +182,11 @@ class AtbashHermesGuard:
         self.debug = _as_bool(os.getenv("ATBASH_DEBUG"), False)
         self.fail_closed = _as_bool(os.getenv("ATBASH_ENFORCE_DECISION"), True)
         self.endpoint = os.getenv("ATBASH_ENDPOINT")
+        self.judge_endpoint_policy = os.getenv("ATBASH_JUDGE_ENDPOINT_POLICY")
+        self.judge_verify_pubkey = os.getenv("ATBASH_JUDGE_VERIFY_PUBKEY")
         self.key_path = os.getenv("ATBASH_KEY_PATH")
         self.privkey = os.getenv("ATBASH_AGENT_PRIVKEY")
+        self.org_name = os.getenv("ATBASH_ORG_NAME")
         self.provider = os.getenv("HERMES_PROVIDER")
         self.model = os.getenv("HERMES_MODEL")
         self.tool_map_path = Path(
@@ -190,25 +220,53 @@ class AtbashHermesGuard:
                 from atbash import Atbash  # type: ignore
                 from atbash.types import ToolCallInput  # type: ignore
             except Exception:
-                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.1.3") from e
+                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.1.3.dev2") from e
 
         self.ToolCallInput = ToolCallInput
-        judge_cfg = {"endpoint": self.endpoint} if self.endpoint else None
+        judge_cfg = self._judge_config()
 
         # Prefer explicit key material if provided.
         if self.privkey:
             try:
-                return Atbash(self.privkey, endpoint=self.endpoint or "https://atbash.ai")
+                return Atbash.from_config(
+                    agent_key=self.privkey,
+                    judge=judge_cfg,
+                    org_name=self.org_name,
+                    fail_closed=self.fail_closed,
+                )
             except TypeError:
-                return Atbash(self.privkey)
+                kwargs: Dict[str, Any] = {
+                    "org_name": self.org_name,
+                    "fail_closed": self.fail_closed,
+                }
+                if self.endpoint:
+                    kwargs["endpoint"] = self.endpoint
+                if self.judge_verify_pubkey:
+                    kwargs["verify_pubkey"] = self.judge_verify_pubkey
+                return Atbash(self.privkey, **kwargs)
 
         # Use SDK-native config loader for key file/env/config.
         return Atbash.from_config(
             key_path=self.key_path,
             judge=judge_cfg,
+            org_name=self.org_name,
             fail_closed=self.fail_closed,
         )
 
+    def _judge_config(self) -> Optional[Dict[str, str]]:
+        if not self.endpoint:
+            return None
+        if self.judge_endpoint_policy == "self-hosted":
+            return {
+                "policy": "self-hosted",
+                "endpoint": self.endpoint,
+                "verify_pubkey": self.judge_verify_pubkey or "",
+            }
+        return {
+            "policy": "default",
+            "endpoint": self.endpoint,
+        }
+
     def _judge(
         self,
         tool_name: str,
@@ -288,12 +346,22 @@ class AtbashHermesGuard:
             reason = _extract_reason(verdict_raw)
 
             if self.debug:
-                logger.info("Atbash verdict tool=%s verdict=%s reason=%s", tool_name, verdict, reason)
+                logger.info(
+                    "Atbash verdict tool=%s verdict=%s reason=%s judgment_id=%s",
+                    tool_name,
+                    verdict,
+                    reason,
+                    _extract_judgment_id(verdict_raw),
+                )
 
             if verdict == "HOLD":
+                hold_message = _format_hold_message(
+                    reason,
+                    _extract_judgment_id(verdict_raw),
+                )
                 return {
                     "action": "block",
-                    "message": f"Held by Atbash for operator review: {reason}",
+                    "message": hold_message,
                 }
 
             if verdict in {"BLOCK", "DENY", "REJECT", "DISALLOW"}:

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev2}/atbash_hermes_plugin.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.1.3.dev0
+Version: 0.1.3.dev2
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -10,7 +10,7 @@ Keywords: atbash,hermes,hermes-agent,agent-safety,ai-safety,tool-guard,judge,pol
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: atbash-sdk==0.1.3.dev0
+Requires-Dist: atbash-sdk==0.1.3.dev2
 Dynamic: license-file
 
 # Atbash Hermes Plugin
@@ -35,13 +35,13 @@ stopped before execution.
 Install the plugin into the same Python environment that runs Hermes:
 
 ```bash
-pip install atbash-hermes-plugin
+pip install atbash-hermes-plugin==0.1.3.dev2
 ```
 
 If Hermes is installed in a virtual environment, use that environment's Python:
 
 ```bash
-/path/to/hermes/venv/bin/python -m pip install atbash-hermes-plugin
+/path/to/hermes/venv/bin/python -m pip install atbash-hermes-plugin==0.1.3.dev2
 ```
 
 ## Configure Atbash
@@ -77,6 +77,7 @@ Add:
 ATBASH_KEY_PATH=$HOME/.config/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Restart Hermes after changing `.env`.
@@ -97,12 +98,21 @@ hermes
 # Override the Atbash API endpoint.
 ATBASH_ENDPOINT=https://api.atbash.io
 
+# Set to self-hosted when using your own judge endpoint. Self-hosted judges
+# require ATBASH_JUDGE_VERIFY_PUBKEY so the SDK can verify signed responses.
+ATBASH_JUDGE_ENDPOINT_POLICY=default
+ATBASH_JUDGE_VERIFY_PUBKEY=
+
 # Fail closed when Atbash cannot be reached. Default: true.
 ATBASH_ENFORCE_DECISION=true
 
 # Emit verbose plugin logs. Default: false.
 ATBASH_DEBUG=false
 
+# Resolve the Atbash organization subscription/network. This lets the SDK
+# choose the public or private chain for that org.
+ATBASH_ORG_NAME=your-org-name
+
 # Override where learned Hermes tool classifications are saved.
 ATBASH_TOOL_MAP_PATH=$HOME/.config/atbash/hermes-tool-map.json
 ```
@@ -166,6 +176,7 @@ Example `~/.hermes/.env` for Docker:
 ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key
 ATBASH_ENFORCE_DECISION=true
 ATBASH_DEBUG=false
+ATBASH_ORG_NAME=your-org-name
 ```
 
 Run Hermes:
@@ -184,6 +195,7 @@ docker run --rm -it \
   -e ATBASH_KEY_PATH=/opt/data/atbash/guard-client-key \
   -e ATBASH_ENFORCE_DECISION=true \
   -e ATBASH_DEBUG=false \
+  -e ATBASH_ORG_NAME=your-org-name \
   nousresearch/hermes-agent
 ```
 
@@ -211,6 +223,18 @@ Hermes sessions.
   - `ATBASH_ENFORCE_DECISION=true`: fail closed and block.
   - `ATBASH_ENFORCE_DECISION=false`: fail open and allow.
 
+For `HOLD`, the user-facing block message is:
+
+```text
+Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: <original reason from judge>
+Judgment ID: <held judgment id, when provided by the SDK>
+```
+
+After dashboard approval or rejection, the SDK can query held-action status with
+the judgment ID. The Hermes plugin blocks the original tool call and asks the
+user to retry after review, rather than automatically re-running the action.
+
 ## Troubleshooting
 
 If Hermes does not show the plugin:

atbash_hermes_plugin-0.1.3.dev2/atbash_hermes_plugin.egg-info/requires.txt

@@ -0,0 +1 @@
+atbash-sdk==0.1.3.dev2

{atbash_hermes_plugin-0.1.3.dev0 → atbash_hermes_plugin-0.1.3.dev2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "atbash-hermes-plugin"
-version = "0.1.3.dev0"
+version = "0.1.3.dev2"
 description = "Atbash safety plugin for Hermes Agent"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -24,7 +24,7 @@ keywords = [
   "policy"
 ]
 dependencies = [
-  "atbash-sdk==0.1.3.dev0"
+  "atbash-sdk==0.1.3.dev2"
 ]
 
 [project.urls]

atbash_hermes_plugin-0.1.3.dev0/atbash_hermes_plugin.egg-info/requires.txt

@@ -1 +0,0 @@
-atbash-sdk==0.1.3.dev0