atbash-hermes-plugin 0.1.7.dev0__tar.gz → 0.1.8.dev0__tar.gz

{atbash_hermes_plugin-0.1.7.dev0 → atbash_hermes_plugin-0.1.8.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.1.7.dev0
+Version: 0.1.8.dev0
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -10,7 +10,7 @@ Keywords: atbash,hermes,hermes-agent,agent-safety,ai-safety,tool-guard,judge,pol
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: atbash-sdk==0.1.7.dev0
+Requires-Dist: atbash-sdk==0.1.8.dev0
 Requires-Dist: httpx<1,>=0.27
 Requires-Dist: opentelemetry-exporter-otlp-proto-http<2,>=1.29
 Requires-Dist: opentelemetry-sdk<2,>=1.29
@@ -38,13 +38,13 @@ stopped before execution.
 Install the plugin into the same Python environment that runs Hermes:
 
 ```bash
-pip install --pre atbash-hermes-plugin==0.1.7.dev0
+pip install --pre atbash-hermes-plugin==0.1.8.dev0
 ```
 
 If Hermes is installed in a virtual environment, use that environment's Python:
 
 ```bash
-/path/to/hermes/venv/bin/python -m pip install --pre atbash-hermes-plugin==0.1.7.dev0
+/path/to/hermes/venv/bin/python -m pip install --pre atbash-hermes-plugin==0.1.8.dev0
 ```
 
 ## Configure Atbash

{atbash_hermes_plugin-0.1.7.dev0 → atbash_hermes_plugin-0.1.8.dev0}/README.md

@@ -20,13 +20,13 @@ stopped before execution.
 Install the plugin into the same Python environment that runs Hermes:
 
 ```bash
-pip install --pre atbash-hermes-plugin==0.1.7.dev0
+pip install --pre atbash-hermes-plugin==0.1.8.dev0
 ```
 
 If Hermes is installed in a virtual environment, use that environment's Python:
 
 ```bash
-/path/to/hermes/venv/bin/python -m pip install --pre atbash-hermes-plugin==0.1.7.dev0
+/path/to/hermes/venv/bin/python -m pip install --pre atbash-hermes-plugin==0.1.8.dev0
 ```
 
 ## Configure Atbash

{atbash_hermes_plugin-0.1.7.dev0 → atbash_hermes_plugin-0.1.8.dev0}/atbash_hermes_plugin/__init__.py

@@ -4,6 +4,7 @@ import atexit
 import json
 import logging
 import os
+import re
 from pathlib import Path
 from typing import Any, Dict, Optional
 
@@ -65,6 +66,98 @@ def _save_tool_map(path: Path, tool_map: Dict[str, str]) -> None:
 
 
 
+_ERC20_RE = re.compile(r"\b(0x[0-9a-fA-F]{40})\b")
+_ERC20_ADDR_RE = re.compile(r"(0x[0-9a-fA-F]{40})")
+_FINANCIAL_OP_RE = re.compile(r"\b(transfer|send|swap|approve|erc20)\b", re.IGNORECASE)
+
+_ASSET_BY_CONTRACT: Dict[str, str] = {
+    "0xdac17f958d2ee523a2206206994597c13d831ec7": "USDT",
+    "0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48": "USDC",
+    "0x6b175474e89094c44da98b954eedeac495271d0f": "DAI",
+    "0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2": "WETH",
+    "0x2260fac5e5542a773aa44fbcfedf7c193bc2c599": "WBTC",
+    "0x1f9840a85d5af5bf1d1762f925bdaddc4201f984": "UNI",
+    "0x514910771af9ca656af840dff83e8264ecf986ca": "LINK",
+    "0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9": "AAVE",
+    "0xb0df6379ba1692841965a0745ac1bd3046d79ba3": "ATBASH",
+    "0xe9c094187219d9a29382c1a36fc43619c9257777": "ATBASH",
+    "0xf8b071428558c657a7a9aa1c43e152e75dd77777": "ATBASH",
+}
+
+
+def _load_recipient_allowlist() -> set:
+    try:
+        p = Path("~/.config/atbash/recipient-allowlist.json").expanduser()
+        data = json.loads(p.read_text(encoding="utf-8"))
+        return {str(a).lower() for a in data} if isinstance(data, list) else set()
+    except Exception:
+        return set()
+
+
+def _resolve_asset(token: str) -> str:
+    if not token:
+        return "ETH"
+    t = token.lower()
+    m = _ERC20_ADDR_RE.search(t)
+    if m:
+        return _ASSET_BY_CONTRACT.get(m.group(1).lower(), "other")
+    if t in ("c60", "eth"):
+        return "ETH"
+    if t == "atbash":
+        return "ATBASH"
+    if t in ("usdt", "tether"):
+        return "USDT"
+    if t == "usdc":
+        return "USDC"
+    return "other"
+
+
+def _canonicalize_financial(command: str, recipient_allowlist: set) -> Optional[Dict[str, Any]]:
+    if not command:
+        return None
+    has_financial = bool(_FINANCIAL_OP_RE.search(command))
+    has_address = bool(_ERC20_RE.search(command))
+    if not has_financial and not has_address:
+        return None
+
+    def _flag(name: str) -> Optional[str]:
+        m = re.search(rf"--{name}[= ]+(\S+)", command)
+        return m.group(1).strip("'\"") if m else None
+
+    token = _flag("token")
+    if not token:
+        m = _ERC20_RE.search(command)
+        if m:
+            token = m.group(1)
+
+    to = _flag("to") or _flag("recipient")
+    amount = _flag("amount")
+    max_usd = _flag("max-usd")
+    asset = _resolve_asset(token or "")
+
+    on_allow = bool(to) and to.lower() in recipient_allowlist
+    if asset == "USDT":
+        recipient_status = "allowlisted" if on_allow else ("external-not-allowlisted" if to else "unspecified")
+    else:
+        recipient_status = "external" if to else "unspecified"
+
+    op = (
+        "swap" if re.search(r"\bswap\b", command, re.IGNORECASE)
+        else "approve" if re.search(r"\b(approve|erc20)\b", command, re.IGNORECASE)
+        else "transfer"
+    )
+
+    return {
+        "operation": op,
+        "asset": asset,
+        "amount": amount,
+        "max_usd": max_usd,
+        "recipient_status": recipient_status,
+        "allowlist_scope": "USDT transfers/approvals only; never lifts ETH or ATBASH rules",
+        "note": "canonicalized pre-judge; raw 0x addresses omitted (redacted upstream)",
+    }
+
+
 def _extract_command(tool_name: str, tool_args: Dict[str, Any]) -> str:
     if not isinstance(tool_args, dict):
         return ""
@@ -213,6 +306,7 @@ class AtbashHermesGuard:
             os.getenv("ATBASH_TOOL_MAP_PATH", str(_default_tool_map_path()))
         ).expanduser()
         self.tool_map = {**DEFAULT_TOOL_CLASS_MAP, **_load_tool_map(self.tool_map_path)}
+        self.recipient_allowlist = _load_recipient_allowlist()
 
         self.client = self._build_client()
 
@@ -240,7 +334,7 @@ class AtbashHermesGuard:
                 from atbash import Atbash  # type: ignore
                 from atbash.types import ToolCallInput  # type: ignore
             except Exception:
-                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.1.7.dev0") from e
+                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.1.8.dev0") from e
 
         self.ToolCallInput = ToolCallInput
         judge_cfg = self._judge_config()
@@ -326,13 +420,14 @@ class AtbashHermesGuard:
             "args": tool_args or {},
         }
 
-        return self.client.audit_tool_call(
-            self.ToolCallInput(
-                tool_name=tool_name or "unknown",
-                args=action_payload,
-                context=context,
-            )
+        resolved = _canonicalize_financial(command, self.recipient_allowlist)
+        tci = self.ToolCallInput(
+            tool_name=tool_name or "unknown",
+            args=action_payload,
+            context=context,
+            resolved=resolved,
         )
+        return self.client.audit_tool_call(tci)
 
     def pre_tool_call(
         self,

{atbash_hermes_plugin-0.1.7.dev0 → atbash_hermes_plugin-0.1.8.dev0}/atbash_hermes_plugin.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.1.7.dev0
+Version: 0.1.8.dev0
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -10,7 +10,7 @@ Keywords: atbash,hermes,hermes-agent,agent-safety,ai-safety,tool-guard,judge,pol
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: atbash-sdk==0.1.7.dev0
+Requires-Dist: atbash-sdk==0.1.8.dev0
 Requires-Dist: httpx<1,>=0.27
 Requires-Dist: opentelemetry-exporter-otlp-proto-http<2,>=1.29
 Requires-Dist: opentelemetry-sdk<2,>=1.29
@@ -38,13 +38,13 @@ stopped before execution.
 Install the plugin into the same Python environment that runs Hermes:
 
 ```bash
-pip install --pre atbash-hermes-plugin==0.1.7.dev0
+pip install --pre atbash-hermes-plugin==0.1.8.dev0
 ```
 
 If Hermes is installed in a virtual environment, use that environment's Python:
 
 ```bash
-/path/to/hermes/venv/bin/python -m pip install --pre atbash-hermes-plugin==0.1.7.dev0
+/path/to/hermes/venv/bin/python -m pip install --pre atbash-hermes-plugin==0.1.8.dev0
 ```
 
 ## Configure Atbash

{atbash_hermes_plugin-0.1.7.dev0 → atbash_hermes_plugin-0.1.8.dev0}/atbash_hermes_plugin.egg-info/requires.txt

@@ -1,4 +1,4 @@
-atbash-sdk==0.1.7.dev0
+atbash-sdk==0.1.8.dev0
 httpx<1,>=0.27
 opentelemetry-exporter-otlp-proto-http<2,>=1.29
 opentelemetry-sdk<2,>=1.29

{atbash_hermes_plugin-0.1.7.dev0 → atbash_hermes_plugin-0.1.8.dev0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "atbash-hermes-plugin"
-version = "0.1.7.dev0"
+version = "0.1.8.dev0"
 description = "Atbash safety plugin for Hermes Agent"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -24,7 +24,7 @@ keywords = [
   "policy"
 ]
 dependencies = [
-  "atbash-sdk==0.1.7.dev0",
+  "atbash-sdk==0.1.8.dev0",
   "httpx>=0.27,<1",
   "opentelemetry-exporter-otlp-proto-http>=1.29,<2",
   "opentelemetry-sdk>=1.29,<2",