feat(phase-30): Hermes Agent bridge — auto-discover providers from ~/.hermes/

.github/workflows/ci.yml

@@ -55,6 +55,12 @@ jobs:
             echo "  [typecheck] packages/$pkg"
             (cd packages/$pkg && bun run typecheck) || exit 1
           done
+      - name: Typecheck plugins
+        run: |
+          for plugin in agent-workbench-hermes; do
+            echo "  [typecheck] plugins/$plugin"
+            (cd plugins/$plugin && bun run typecheck) || exit 1
+          done
       - name: Typecheck apps
         run: |
           for app in server tui cli mobile-web dashboard; do

docs/27_PROJECT_ROADMAP.md

@@ -1,6 +1,6 @@
 # 27 — Project Roadmap
 
-Status: Phase 27 complete — Phase 29 (model experimentation & eval) in progress
+Status: Phase 29 complete — Phase 30 (enterprise readiness) next
 Document type: Roadmap for Phases 19–30
 Supersedes: incremental updates in docs/04_IMPLEMENTATION_PHASE_CHECKLIST.md
 
@@ -21,8 +21,8 @@ Phase 25 ✅ complete ███████████████████
 Phase 26 ✅ complete ██████████████████████  plugin system & extensibility
 Phase 27 ✅ complete ██████████████████████  remote access & collaboration
 Phase 28 ⏸️        ░░░░░░░░░░░░░░░░░░░░  ⏸️  desktop application (deferred)
-Phase 29 ▌         ░░░░░░░░░░░░░░░░░░░░  model experimentation & eval
-Phase 30 ░░░░░░░░░░░░░░░░░░░░░░░░░  enterprise readiness & compliance
+Phase 29 ✅ complete ██████████████████████  model experimentation & eval
+Phase 30 ▌         ░░░░░░░░░░░░░░░░░░░░  enterprise readiness & compliance
 ```
 
 ### Timeline
@@ -284,7 +284,7 @@ These bridges connect agent-workbench with existing developer tooling:
 [ ] GDPR: right to access, right to delete endpoints
 [ ] Supply chain: SBOM generation, dependency vulnerability scanning
 [ ] FIPS 140-2 compliance for cryptographic operations
-[ ] Hermes Agent bridge auto-discovers provider config from ~/.hermes/
+[x] Hermes Agent bridge auto-discovers provider config from ~/.hermes/
 [ ] OpenCode bridge syncs provider registry bidirectionally
 ```
 
@@ -360,5 +360,5 @@ Dependencies: Phase N
 
 ---
 
-*Last updated: 2026-07-03 (Phase 29 in progress — prompt library, playground, ModelComparer committed)*
-*Next review: After Phase 29 completion*
+*Last updated: 2026-07-03 (Phase 29 complete, Phase 30 started — Hermes bridge)*
+*Next review: After Phase 30 completion*

package.json

@@ -7,7 +7,8 @@
   "workspaces": [
     "apps/*",
     "packages/*",
-    "tests"
+    "tests",
+    "plugins/*"
   ],
   "scripts": {
     "phase": "echo Phase 1 workspace scaffold only",

plugins/agent-workbench-hermes/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@agent-workbench/hermes-bridge",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "description": "Hermes Agent Bridge — auto-discovers Hermes providers and maps them to agent-workbench",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@agent-workbench/plugin-sdk": "*"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.3.14",
+    "@types/node": "^26.1.0"
+  }
+}

plugins/agent-workbench-hermes/src/copilot-adapter.ts

@@ -41,7 +41,7 @@ export class CopilotAdapter {
   async call(
     messages: PluginModelMessage[],
     tools?: PluginToolDefinition[],
-    signal?: AbortSignal,
+    signal?: AbortSignal | null,
   ): Promise<PluginModelResponse> {
     const body = this.buildBody(messages, tools, false);
     const headers = this.buildHeaders();
@@ -50,7 +50,7 @@ export class CopilotAdapter {
       method: "POST",
       headers,
       body: JSON.stringify(body),
-      signal,
+      signal: signal ?? null,
     });
 
     if (!response.ok) {
@@ -70,19 +70,21 @@ export class CopilotAdapter {
 
     return {
       content,
-      usage: usage
+      ...(usage
         ? {
-            inputTokens: (usage.prompt_tokens as number) ?? 0,
-            outputTokens: (usage.completion_tokens as number) ?? 0,
+            usage: {
+              inputTokens: (usage.prompt_tokens as number) ?? 0,
+              outputTokens: (usage.completion_tokens as number) ?? 0,
+            },
           }
-        : undefined,
+        : {}),
     };
   }
 
   async *stream(
     messages: PluginModelMessage[],
     tools?: PluginToolDefinition[],
-    signal?: AbortSignal,
+    signal?: AbortSignal | null,
   ): AsyncGenerator<PluginStreamChunk> {
     const body = this.buildBody(messages, tools, true);
     const headers = this.buildHeaders();
@@ -91,7 +93,7 @@ export class CopilotAdapter {
       method: "POST",
       headers,
       body: JSON.stringify(body),
-      signal,
+      signal: signal ?? null,
     });
 
     if (!response.ok) {

plugins/agent-workbench-hermes/src/hermes-config.ts

@@ -18,9 +18,9 @@ export interface HermesProviderEntry {
   /** Model name (e.g. "deepseek-v4-flash", "kimi-k2.7-code"). */
   readonly model: string;
   /** Base URL from credentials (if available). */
-  readonly baseUrl?: string;
+  readonly baseUrl?: string | undefined;
   /** API key from credentials. */
-  readonly apiKey?: string;
+  readonly apiKey?: string | undefined;
   /** Whether this is the primary (default) provider. */
   readonly isPrimary: boolean;
 }
@@ -135,8 +135,8 @@ function parseConfig(raw: string, auth: AuthFile | null): HermesConfig {
         // Look backwards for the default model
         for (let j = i - 1; j >= 0 && j > i - 10; j--) {
           const prev = lines[j]?.trim();
-          if (prev.startsWith("default:")) {
-            const model = prev.slice("default:".length).trim();
+          if (prev?.startsWith("default:")) {
+            const model = prev!.slice("default:".length).trim();
             if (model) {
               addEntry(entries, provider, model, true, auth);
             }
@@ -169,7 +169,7 @@ function addEntry(
   entries.push({
     provider,
     model,
-    baseUrl: cred?.base_url,
+    ...(cred?.base_url ? { baseUrl: cred.base_url } : {}),
     apiKey: resolveApiKey(cred),
     isPrimary,
   });

plugins/agent-workbench-hermes/src/openai-adapter.ts

@@ -40,7 +40,7 @@ export class OpenAIAdapter {
   async call(
     messages: PluginModelMessage[],
     _tools?: PluginToolDefinition[],
-    signal?: AbortSignal,
+    signal?: AbortSignal | null,
   ): Promise<PluginModelResponse> {
     const body = this.buildBody(messages, _tools, false);
 
@@ -51,7 +51,7 @@ export class OpenAIAdapter {
         Authorization: `Bearer ${this.apiKey}`,
       },
       body: JSON.stringify(body),
-      signal,
+      signal: signal ?? null,
     });
 
     if (!response.ok) {
@@ -76,27 +76,33 @@ export class OpenAIAdapter {
 
     return {
       content,
-      toolCalls: toolCallsRaw?.map((tc) => ({
-        id: tc.id as string,
-        name: (tc.function as Record<string, unknown>)?.name as string,
-        arguments: JSON.parse(
-          ((tc.function as Record<string, unknown>)?.arguments as string) ??
-            "{}",
-        ) as Record<string, unknown>,
-      })),
-      usage: usage
+      ...(toolCallsRaw
+        ? {
+            toolCalls: toolCallsRaw.map((tc) => ({
+              id: tc.id as string,
+              name: (tc.function as Record<string, unknown>)?.name as string,
+              arguments: JSON.parse(
+                ((tc.function as Record<string, unknown>)
+                  ?.arguments as string) ?? "{}",
+              ) as Record<string, unknown>,
+            })),
+          }
+        : {}),
+      ...(usage
         ? {
-            inputTokens: (usage.prompt_tokens as number) ?? 0,
-            outputTokens: (usage.completion_tokens as number) ?? 0,
+            usage: {
+              inputTokens: (usage.prompt_tokens as number) ?? 0,
+              outputTokens: (usage.completion_tokens as number) ?? 0,
+            },
           }
-        : undefined,
+        : {}),
     };
   }
 
   async *stream(
     messages: PluginModelMessage[],
     _tools?: PluginToolDefinition[],
-    signal?: AbortSignal,
+    signal?: AbortSignal | null,
   ): AsyncGenerator<PluginStreamChunk> {
     const body = this.buildBody(messages, _tools, true);
 
@@ -107,7 +113,7 @@ export class OpenAIAdapter {
         Authorization: `Bearer ${this.apiKey}`,
       },
       body: JSON.stringify(body),
-      signal,
+      signal: signal ?? null,
     });
 
     if (!response.ok) {

plugins/agent-workbench-hermes/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "types": ["bun"]
+  },
+  "include": ["src/**/*.ts"]
+}

scripts/build-all.sh

@@ -18,6 +18,10 @@ for pkg in events sdk shell permissions cache planner collab eval; do
   (cd "$ROOT/packages/$pkg" && bun run build 2>&1) || exit 1
 done
 
+# Plugins
+echo "  [build] plugins/agent-workbench-hermes"
+(cd "$ROOT/plugins/agent-workbench-hermes" && bun run build 2>&1) || exit 1
+
 # Level 2: depends on cache, diff, protocol, shell, storage
 echo "  [build] packages/tools"
 (cd "$ROOT/packages/tools" && bun run build 2>&1) || exit 1