atbash-hermes-plugin 0.4.15.dev0__tar.gz → 0.4.17.dev1__tar.gz

{atbash_hermes_plugin-0.4.15.dev0/atbash_hermes_plugin.egg-info → atbash_hermes_plugin-0.4.17.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.4.15.dev0
+Version: 0.4.17.dev1
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -10,7 +10,7 @@ Keywords: atbash,hermes,hermes-agent,agent-safety,ai-safety,tool-guard,judge,pol
 Requires-Python: <3.13,>=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: atbash-sdk==0.9.0.dev0
+Requires-Dist: atbash-sdk==0.9.3.dev0
 Requires-Dist: httpx<1,>=0.27
 Requires-Dist: opentelemetry-exporter-otlp-proto-http<2,>=1.29
 Requires-Dist: opentelemetry-sdk<2,>=1.29

{atbash_hermes_plugin-0.4.15.dev0 → atbash_hermes_plugin-0.4.17.dev1}/atbash_hermes_plugin/__init__.py

@@ -614,6 +614,19 @@ def _infer_action_class(tool_name: str) -> str:
     return "unknown"
 
 
+def _parse_timeout(value: Optional[str]) -> Optional[float]:
+    if not value or not value.strip():
+        return None
+    try:
+        t = float(value.strip())
+        if t <= 0:
+            raise ValueError
+        return t
+    except ValueError:
+        logger.warning("ATBASH_JUDGE_TIMEOUT_S=%r is not a positive number; using SDK default", value)
+        return None
+
+
 def _as_bool(value: Optional[str], default: bool) -> bool:
     """Parse a boolean env var, refusing to guess.
 
@@ -792,6 +805,7 @@ class AtbashHermesGuard:
         self.key_path = os.getenv("ATBASH_KEY_PATH")
         self.privkey = os.getenv("ATBASH_AGENT_PRIVKEY")
         self.org_name = os.getenv("ATBASH_ORG_NAME")
+        self.judge_timeout: Optional[float] = _parse_timeout(os.getenv("ATBASH_JUDGE_TIMEOUT_S"))
         self.provider = os.getenv("HERMES_PROVIDER")
         self.model = os.getenv("HERMES_MODEL")
         self.tool_map_path = Path(
@@ -834,7 +848,7 @@ class AtbashHermesGuard:
                 from atbash import Atbash  # type: ignore
                 from atbash.types import ToolCallInput  # type: ignore
             except Exception:
-                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.9.0.dev0") from e
+                raise RuntimeError("atbash-sdk is required. Install with: pip install atbash-sdk==0.9.3.dev0") from e
 
         self.ToolCallInput = ToolCallInput
         judge_cfg = self._judge_config()
@@ -847,6 +861,7 @@ class AtbashHermesGuard:
                     judge=judge_cfg,
                     org_name=self.org_name,
                     fail_closed=self.fail_closed,
+                    **({} if self.judge_timeout is None else {"timeout": self.judge_timeout}),
                 )
             except TypeError:
                 kwargs: Dict[str, Any] = {
@@ -857,6 +872,8 @@ class AtbashHermesGuard:
                     kwargs["endpoint"] = self.endpoint
                 if self.judge_verify_pubkey:
                     kwargs["verify_pubkey"] = self.judge_verify_pubkey
+                if self.judge_timeout is not None:
+                    kwargs["timeout"] = self.judge_timeout
                 return Atbash(self.privkey, **kwargs)
 
         # Use SDK-native config loader for key file/env/config.
@@ -865,6 +882,7 @@ class AtbashHermesGuard:
             judge=judge_cfg,
             org_name=self.org_name,
             fail_closed=self.fail_closed,
+            **({} if self.judge_timeout is None else {"timeout": self.judge_timeout}),
         )
 
     def _judge_config(self) -> Optional[Dict[str, str]]:

{atbash_hermes_plugin-0.4.15.dev0 → atbash_hermes_plugin-0.4.17.dev1/atbash_hermes_plugin.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atbash-hermes-plugin
-Version: 0.4.15.dev0
+Version: 0.4.17.dev1
 Summary: Atbash safety plugin for Hermes Agent
 Author: atbash
 License-Expression: LicenseRef-Atbash-Proprietary
@@ -10,7 +10,7 @@ Keywords: atbash,hermes,hermes-agent,agent-safety,ai-safety,tool-guard,judge,pol
 Requires-Python: <3.13,>=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: atbash-sdk==0.9.0.dev0
+Requires-Dist: atbash-sdk==0.9.3.dev0
 Requires-Dist: httpx<1,>=0.27
 Requires-Dist: opentelemetry-exporter-otlp-proto-http<2,>=1.29
 Requires-Dist: opentelemetry-sdk<2,>=1.29

{atbash_hermes_plugin-0.4.15.dev0 → atbash_hermes_plugin-0.4.17.dev1}/atbash_hermes_plugin.egg-info/requires.txt

@@ -1,4 +1,4 @@
-atbash-sdk==0.9.0.dev0
+atbash-sdk==0.9.3.dev0
 httpx<1,>=0.27
 opentelemetry-exporter-otlp-proto-http<2,>=1.29
 opentelemetry-sdk<2,>=1.29

{atbash_hermes_plugin-0.4.15.dev0 → atbash_hermes_plugin-0.4.17.dev1}/plugin.yaml

@@ -1,5 +1,5 @@
 name: atbash-hermes-plugin
-version: 0.4.15.dev0
+version: 0.4.17.dev1
 description: Atbash guardrail plugin for Hermes Agent (pre-tool-call policy enforcement)
 author: Chromia
 entry: atbash_hermes_plugin

{atbash_hermes_plugin-0.4.15.dev0 → atbash_hermes_plugin-0.4.17.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "atbash-hermes-plugin"
-version = "0.4.15.dev0"
+version = "0.4.17.dev1"
 description = "Atbash safety plugin for Hermes Agent"
 readme = "README.md"
 requires-python = ">=3.9,<3.13"
@@ -24,7 +24,7 @@ keywords = [
   "policy"
 ]
 dependencies = [
-  "atbash-sdk==0.9.0.dev0",
+  "atbash-sdk==0.9.3.dev0",
   "httpx>=0.27,<1",
   "opentelemetry-exporter-otlp-proto-http>=1.29,<2",
   "opentelemetry-sdk>=1.29,<2",

{atbash_hermes_plugin-0.4.15.dev0 → atbash_hermes_plugin-0.4.17.dev1}/tests/test_release_contract.py

@@ -96,9 +96,13 @@ def test_staging_changes_both_manifests_only_in_the_copy(tmp_path: Path) -> None
 
 def test_publish_workflow_fails_closed_outside_main() -> None:
     workflow = (ROOT / ".github/workflows/publish.yml").read_text(encoding="utf-8")
-    guard = 'run: test "$GITHUB_REF" = refs/heads/main'
-    assert guard in workflow
-    assert workflow.index(guard) < workflow.index("actions/checkout@")
+    # latest channel must still be locked to main
+    assert 'test "$GITHUB_REF" = refs/heads/main' in workflow
+    # dev channel additionally allows the dev branch
+    assert 'test "$GITHUB_REF" = refs/heads/dev' in workflow
+    # the branch guard must appear before checkout
+    guard_pos = workflow.index('test "$GITHUB_REF" = refs/heads/main')
+    assert guard_pos < workflow.index("actions/checkout@")
 
 
 def _metadata(name: str, version: str) -> bytes: