atbash-hermes-plugin 0.12.0.dev0__py3-none-any.whl → 0.15.1.dev0__py3-none-any.whl

atbash_hermes_plugin/__init__.py

@@ -18,16 +18,9 @@ from typing import Any, Dict, Iterable, Optional
 logger = logging.getLogger("atbash-hermes-plugin")
 _TELEMETRY_SHUTDOWN_REGISTERED = False
 
-try:
-    from atbash_core import redact_secrets as _redact_secrets  # type: ignore
-    _REDACT_AVAILABLE = True
-except Exception:
-    _redact_secrets = None  # type: ignore
-    _REDACT_AVAILABLE = False
-
 HOLD_MESSAGE = (
-    "Action held for operator review. The agent will not be jailed — please approve "
-    "or reject this request from the Atbash dashboard, then ask the agent to try "
+    "Action flagged as a policy gap. The agent will not be jailed — please adjust "
+    "your policy in the Atbash dashboard, then ask the agent to try "
     "again.\nReason: {reason}"
 )
 
@@ -2343,20 +2336,13 @@ class AtbashHermesGuard:
             # Redact embedded secrets before sending to the judge — mirrors SDK's
             # scanMemory → redactSecrets → judgeAction path to prevent secrets inside
             # memory content from being signed and posted to chain.
-            if not _REDACT_AVAILABLE:
-                # N-8: unredacted memory content must never be signed and
-                # posted — a broken/partial SDK is a block, not a silent send.
-                logger.warning("Atbash memory write redaction unavailable")
-                if self.fail_closed:
-                    return {
-                        "action": "block",
-                        "message": "Memory write blocked (secret redaction unavailable).",
-                    }
-                return None
             try:
-                formatted = _redact_secrets(formatted).redacted  # type: ignore
+                from atbash_core import redact_secrets  # type: ignore
+                formatted = redact_secrets(formatted).redacted
             except Exception as _re:
-                logger.warning("Atbash memory write redaction failed err=%s", _re)
+                # N-8: unredacted memory content must never be signed and
+                # posted — a broken/partial SDK is a block, not a silent send.
+                logger.warning("Atbash memory write redaction unavailable err=%s", _re)
                 if self.fail_closed:
                     return {
                         "action": "block",

{atbash_hermes_plugin-0.12.0.dev0.dist-info → atbash_hermes_plugin-0.15.1.dev0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.12.0.dev0
+Version: 0.15.1.dev0
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: Apache-2.0
@@ -11,7 +11,7 @@ Requires-Python: <3.13,>=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
-Requires-Dist: atbash-sdk<1.0.0,>=0.12.0.dev0
+Requires-Dist: atbash-sdk<1.0.0,>=0.15.0.dev0
 Requires-Dist: httpx<1,>=0.27
 Requires-Dist: opentelemetry-exporter-otlp-proto-http<2,>=1.29
 Requires-Dist: opentelemetry-sdk<2,>=1.29
@@ -294,14 +294,14 @@ repo.
 For `HOLD`, the user-facing block message is:
 
 ```text
-Action held for operator review. The agent will not be jailed — please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Action flagged as a policy gap. The agent will not be jailed — please adjust your policy in the Atbash dashboard, then ask the agent to try again.
 Reason: <original reason from judge>
 Tool Call ID: <held judgment id, when provided by the SDK>
 ```
 
-After dashboard approval or rejection, the SDK can query held-action status with
+After the policy is adjusted in the dashboard, the SDK can query held-action status with
 the judgment ID. The Hermes plugin blocks the original tool call and asks the
-user to retry after review, rather than automatically re-running the action.
+user to retry after the policy is updated, rather than automatically re-running the action.
 
 ## Guard Self-Protection And Memory Baselines
 

atbash_hermes_plugin-0.15.1.dev0.dist-info/RECORD

@@ -0,0 +1,9 @@
+atbash_hermes_plugin/__init__.py,sha256=TnYWV0XBbD76Ccqdxtfcf3UT-dkyamhXJKCz1KsIH3k,126630
+atbash_hermes_plugin/__main__.py,sha256=DHc8CpxgfbDvoZNArLVtiWv-swwD5NcEQIFjf8DfrG4,1584
+atbash_hermes_plugin-0.15.1.dev0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+atbash_hermes_plugin-0.15.1.dev0.dist-info/licenses/NOTICE,sha256=E-pZ_WNikGxHgyE4P4-GNFFmaEM6A7_WjkyfNN4V6ss,238
+atbash_hermes_plugin-0.15.1.dev0.dist-info/METADATA,sha256=YatTOfm_whKxzCFPNBQDWK_h2c-XPrvNQQfg2LqXPdw,13751
+atbash_hermes_plugin-0.15.1.dev0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+atbash_hermes_plugin-0.15.1.dev0.dist-info/entry_points.txt,sha256=YezkmasjRBXrSlXpqhSJdFhDCdBbENp-_THYtkcRTBo,67
+atbash_hermes_plugin-0.15.1.dev0.dist-info/top_level.txt,sha256=0nT35m8jNxzbQB3CerGf5kgH7hm_pc6GLadlf69w_JM,21
+atbash_hermes_plugin-0.15.1.dev0.dist-info/RECORD,,

atbash_hermes_plugin-0.12.0.dev0.dist-info/RECORD

@@ -1,9 +0,0 @@
-atbash_hermes_plugin/__init__.py,sha256=MyzMJfKvBHuW_V5LsdIp7hvNWnZR1kUf9ddwBhoLDI4,127154
-atbash_hermes_plugin/__main__.py,sha256=DHc8CpxgfbDvoZNArLVtiWv-swwD5NcEQIFjf8DfrG4,1584
-atbash_hermes_plugin-0.12.0.dev0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-atbash_hermes_plugin-0.12.0.dev0.dist-info/licenses/NOTICE,sha256=E-pZ_WNikGxHgyE4P4-GNFFmaEM6A7_WjkyfNN4V6ss,238
-atbash_hermes_plugin-0.12.0.dev0.dist-info/METADATA,sha256=552PlV3CjiyppRzUA9YxAJklFUBe_LMQhzRo-RvnzBU,13743
-atbash_hermes_plugin-0.12.0.dev0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-atbash_hermes_plugin-0.12.0.dev0.dist-info/entry_points.txt,sha256=YezkmasjRBXrSlXpqhSJdFhDCdBbENp-_THYtkcRTBo,67
-atbash_hermes_plugin-0.12.0.dev0.dist-info/top_level.txt,sha256=0nT35m8jNxzbQB3CerGf5kgH7hm_pc6GLadlf69w_JM,21
-atbash_hermes_plugin-0.12.0.dev0.dist-info/RECORD,,