mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-11-06 05:17:15 +00:00
Teknium
4ea8d23cc9
- No side_question_token for cron runs (platform="cron") or delegated subagent turns (_delegate_depth > 0): nobody reads the answer, so it is pure unattended spend. - A lease is bound to the profile home it was issued in; a plugin context of another profile gets None and leaves the lease for its owner. - Usage bills to the session the token was issued for (capture.session_id), not the parent's id at release time, which can rotate between issue and redeem. - Plugin side questions report as aux_task="plugin_side_question" with the asking plugin_id in pre/post_auxiliary_call, and record usage as plugin_side_question:<plugin_id>; /btw keeps side_question. - Drop the new legacy key llm.allow_side_question: the capability is declare + consent only. - The timeout starts before the fork build, so runtime resolution counts against it.
57 lines
3.0 KiB
Python
57 lines
3.0 KiB
Python
"""Capability-gated ``PluginContext`` surface: ``has_capability`` probing and
|
|
``side_question`` (ask the session's own agent after a turn, ``llm.side_question``)."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
from typing import Optional
|
|
|
|
from hermes_cli.plugin_capabilities import plugin_capability_granted
|
|
from hermes_cli.plugins_loader import _plugin_home_scope
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class PluginCapabilityCtxMixin:
|
|
"""Mixed into :class:`hermes_cli.plugins.PluginContext` (``manifest``, ``_manager``, ``plugin_id``)."""
|
|
|
|
# -- capability probing (#64228) -----------------------------------------
|
|
def has_capability(self, capability: str) -> bool:
|
|
"""True when *capability* is live for this plugin (probe, then degrade gracefully). Bundled
|
|
plugins are trusted for ``tools.override``; otherwise granted_capabilities or the legacy
|
|
``allow_*`` key decides. Unknown ids / unreadable consent -> False (fail closed)."""
|
|
if self.manifest.source == "bundled" and capability == "tools.override":
|
|
return True
|
|
return plugin_capability_granted(self.plugin_id, capability)
|
|
|
|
def side_question(self, token: str, prompt: str, *, timeout: float = 15.0) -> Optional[str]:
|
|
"""Ask the session's own agent ``prompt`` about the turn that just ended; text or None.
|
|
|
|
``token`` is ``post_llm_call``'s ``side_question_token``: one attempt per turn, shared by
|
|
every plugin of the session's profile, valid for 60 s and only until the next turn starts
|
|
(cron runs and subagent turns get no token). Same model, the whole
|
|
session (memory included) and its warm prompt cache; tools never run and nothing is
|
|
written to the transcript. Needs the ``llm.side_question`` capability; without it this
|
|
returns None and leaves the attempt to a consented plugin."""
|
|
from agent.side_question_lease import SIDE_QUESTION_CAPABILITY, redeem_side_question
|
|
|
|
if not self._side_question_granted(SIDE_QUESTION_CAPABILITY):
|
|
if not getattr(self, "_side_question_denial_logged", False):
|
|
self._side_question_denial_logged = True
|
|
logger.info("Plugin %s called ctx.side_question without the %s capability; returning None",
|
|
self.plugin_id, SIDE_QUESTION_CAPABILITY)
|
|
return None
|
|
return redeem_side_question(
|
|
token, prompt, plugin_id=self.plugin_id, home=self._manager.home_path, timeout=timeout)
|
|
|
|
def _side_question_granted(self, capability: str) -> bool:
|
|
"""Consent read from THIS manager's profile home: plugins call from their own threads,
|
|
where the active profile may be the launch profile's."""
|
|
try:
|
|
from hermes_cli.config import load_config
|
|
with _plugin_home_scope(self._manager.home_path):
|
|
cfg = load_config() or {}
|
|
except Exception: # health: allow BLE001 -- fail closed: unreadable consent state never grants
|
|
return False
|
|
return plugin_capability_granted(self.plugin_id, capability, config=cfg)
|