`gj|`dZddlmZddlZddlZddlmZmZddlm Z ddl m Z m Z ejeZdZdZeGd d Zhd Zd hZ dd ZddZddZ d d!dZd"dZd#dZd$dZd#dZ d% d&dZd'dZd(dZdddddd d)dZ y)*uMigrate Hermes' MCP server config and Codex's installed curated plugins to the format Codex expects in ~/.codex/config.toml. When the user enables the codex_app_server runtime, the codex subprocess runs its own MCP client and its own plugin runtime (Linear, Atlassian, Asana, plus per-account ChatGPT apps via app/list). For both of those to be useful, the user's choices need to be visible to codex too. This module: 1. Reads Hermes' YAML and writes equivalent [mcp_servers.] entries to ~/.codex/config.toml. 2. Queries codex's `plugin/list` for the openai-curated marketplace and writes [plugins."@"] entries for any plugin the user has installed=true on their codex CLI. (This is what OpenClaw calls "migrate native codex plugins" — the YouTube-video- worthy bit Pash highlighted: Canva, GitHub, Calendar, Gmail pre-configured.) 3. Writes a [permissions] default profile so users on this runtime don't get an approval prompt on every write attempt. What translates (MCP servers): Hermes mcp_servers..command/args/env → codex stdio transport Hermes mcp_servers..url/headers → codex streamable_http transport Hermes mcp_servers..timeout → codex tool_timeout_sec Hermes mcp_servers..connect_timeout → codex startup_timeout_sec What does NOT translate (warned + skipped): Hermes-specific keys (sampling, etc.) — codex's MCP client has no equivalent. Listed in the per-server skipped[] field of the report. What's NOT migrated (intentional): AGENTS.md — codex respects this file natively in its cwd. Hermes' own AGENTS.md (project-level) is already in the worktree, so codex picks it up without translation. No code needed. ) annotationsN) dataclassfield)Path)AnyOptionaluU# managed by hermes-agent — `hermes codex-runtime migrate` regenerates this sectionz"# end hermes-agent managed sectionceZdZUdZdZded<eeZded<ee Z ded <eeZ ded <dZ d ed <dZ d ed <eeZded<dZded<dZded<ddZy)MigrationReportzOutcome of a migration pass.NOptional[Path] target_path)default_factoryz list[str]migratedzdict[str, list[str]]skipped_keys_per_servermigrated_plugins Optional[str]plugin_query_errorwrote_permissions_defaulterrorsFboolwrittendry_runcg}|jr|jd|jn*|jr|jd|j|jr|jdt |jd|jD]M}|j j|g}|rddj|dnd}|jd ||On|jd |jrN|jdt |jd |jD]}|jd |n*|jr|jd |j|jr|jd |j|jD]}|jd|dj|S)Nz(dry run) Would write zWrote z Migrated z MCP server(s):z (skipped: , )z - z&No MCP servers found in Hermes config.z native Codex plugin(s):z Codex plugin discovery skipped: zWrote default_permissions = u⚠  ) rappendr rrlenrgetjoinrrrr)selflinesnameskippednoteerrs \/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/codex_runtime_plugin_migration.pysummaryzMigrationReport.summaryHs << LL1$2B2B1CD E \\ LL6$"2"2!34 5 == LL9S%7$8H I  266::4D;Bk$))G"4!5Q7 tD6$01  2 LLA B  LLC 5 5677OP -- , tD6]+ ,  $ $ LL;D cwdenvurlargscommandenabledheaderstimeout transport descriptionconnect_timeoutsamplingc t|tsdgfSg}i}t|jd}t|jd}|r|r|j dd}|rt |d|d<|jdxsg}|r|Dcgc] }t |c}|d<|jdxsi}|r9|j D cic]\} } t | t | c} } |d<|jd} | rt | |d<n|rt |d|d<|jd xsi} | r9| j D cic]\} } t | t | c} } |d <|jd d k(r|j d nddgfSd|vr t|d|d<d|vr t|d|d<|jddurd|d<|D]<} | tvr|j | d | tvs)|j | d>||fScc}wcc} } wcc} } w#ttf$r|j dYwxYw#ttf$r|j dYwxYw)aTranslate one Hermes MCP server config to the codex inline-table dict representation. Returns (codex_entry, skipped_keys). codex_entry is a dict ready for TOML serialization, or None when the server can't be translated (e.g. neither command nor url present).Nr8r6z0url (both command and url set; preferring stdio)Fr7r5r4r: http_headersr<ssez%transport=sse (codex auto-negotiates)zno command or url fieldr;tool_timeout_secztimeout (not numeric)r>startup_timeout_seczconnect_timeout (not numeric)r9z (no codex equivalent)z (unknown Hermes key)) isinstancer2rrrr+itemsfloat TypeError ValueError_KEYS_DROPPED_WITH_WARNING_KNOWN_HERMES_KEYS)r# hermes_cfgr$out has_commandhas_urlr7ar5kvr4r:keys r'_translate_one_serverrTs j$ 'RxGCz~~i01K:>>%()GwIJZ 23I~~f%+ +/0a3q60CKnnU#)r 58YY[ATQ#a&#a&.ACJnnU# SCJ E*+E ..+1r >Emmo"Nda3q63q6>"NC  >>+ &% / NNB C/000J 4&+Jy,A&BC" #J& <).z:K/L)MC% & ~~i E)I: , , NNcU"89 : * * NNcU"78 9 : <W1B#O:& 4 NN2 3 4 :& < NN: ; /II* I'&I'* J  J ct|tr|rdSdSt|ttfr t |St|t rx|j ddj ddj ddj d d j d d j d dj dd}d|dSt|trdjd|D}d|dSt|tr2djd|jD}|rd|zdzSdStdt|j)uMinimal TOML value formatter for the value types we emit. We only emit strings, numbers, booleans, and tables of those — no nested arrays of tables. This covers everything codex's MCP schema accepts.truefalse\\\"\"z\b z\trz\n z\f z\rrc32K|]}t|ywN)_format_toml_value).0rRs r' z%_format_toml_value..s?A,Q/?s[]c3TK|] \}}t|dt|"yw) = N) _quote_keyrb)rcrQrRs r'rdz%_format_toml_value..s/ =AQz!}oS!3A!6 7 8 s&(z{ z }z{}zUnsupported TOML value type: )rErintrGreprr+replacer1r r2rFrItyper,)valueescapedrFs r'rbrbs8 %v+G+%#u&E{%  WT6 " WS% WT5 ! WT5 ! WT5 ! WT5 ! WT5 ! 7)1~% ???5'|%  EJ[[]  ',te|d"55 4T%[5I5I4JK LLr)c~td|Dr|r|S|jddjdd}d|dS)zEReturn key bare-or-quoted depending on whether it's a valid bare key.c3HK|]}|jxs|dvyw)z-_N)isalnum)rccs r'rdz_quote_key..s" 1199; #!t) # 1s "rXrYrZr[)allrl)rSros r'ririsB 1S 11c kk$'//U;G wiq>r)c tg}|s>|s<|s:|jd|jtdj|dzS|rF|j dr|nd|}|jd|jdt ||rt |jD]v}||}|jd|jdt|d|jD]-\}}|jt|dt |/x|rt |d D]} | jd xsd}| jd xsd } t| jdd} |d| } |jd|jdt| d|jdt | |jd|jtdj|dzS)uRender the managed [mcp_servers.] / [plugins.] / [permissions] block for ~/.codex/config.toml. Args: servers: dict of MCP server name → translated codex inline-table plugins: optional list of {name, marketplace, enabled} for native Codex plugins to enable. (E.g. the Linear / Atlassian / Asana curated plugins, or per-account ChatGPT apps.) default_permission_profile: when set, write `[permissions] default` so the user doesn't get an approval prompt on every write attempt. Common values: "workspace-write", "read-only", "full-access". z@# (no MCP servers, plugins, or permissions configured by Hermes)r:rzdefault_permissions = z [mcp_servers.rfrhcP|jddd|jddS)Nr#r@ marketplace)r)ps r'z+render_codex_toml_section..%s+quuVB7G6H!%%P]^`JaIb4cr))rSr#ryopenai-curatedr9Trx [plugins.z enabled = ) MIGRATION_MARKERrMIGRATION_END_MARKERr startswithrbsortedkeysrirFrr) serverspluginsdefault_permission_profilerM normalizedr#cfgrQrRpluginryr9 qualifieds r'render_codex_toml_sectionrs$  C 7+E UV '(yy~$$!*44S9 '/01  2 +,>z,J+KLM7<<>* ID$-C JJrN JJz$'7&8: ;  I1 jm_C0B10E/FGH I  IW*cd CF::f%+D **]3G7GK6::i67G&+/I JJrN JJ:i#8"9; < JJ$6w$?#@A B CJJrNJJ#$ 99S>D  r)c|js|S|jd}d}t|D]*\}}|j}|j ds(|}n||j d}|r|d|S|Sdj |d|j d}dj ||djd}|r |d|d|S|d|S)aInsert Hermes' managed Codex TOML block while keeping root keys root-scoped. TOML has no syntax to return to the document root after a table header. Therefore appending a root key like `default_permissions = ...` after a user table such as `[features]` actually creates `features.default_permissions`, which Codex rejects. Insert the managed block before the first table header so its root keys remain top-level, while preserving user content verbatim. TkeependsNrerz r)strip splitlines enumeratelstriprrstripr ) user_text managed_blockr"first_table_idxidxlinestrippedprefixsuffixs r'"_insert_managed_block_at_top_levelr3s ??   $ /E%)Ou% T;;=   s #!O   !!$'17&m_-J]J WWU+O, - 4 4T :F WWU?+, - 4 4T :F m_Bvh77_Bvh ''r)c|jd}g}d}|D]E}|j}t|r|jd}|r2|r5|j |Gdj |S)uRemove ``[plugins."@"]`` tables that live OUTSIDE the managed block. Codex itself writes these tables when the user runs ``codex plugins enable`` directly (i.e. before Hermes' migrate has ever touched the file). When we later run migrate, ``_query_codex_plugins()`` reports the same plugins via the live ``plugin/list`` RPC and we re-emit them inside the managed block. The result without this strip is duplicate ``[plugins."X@Y"]`` table headers — codex's strict TOML parser then refuses to load the file. We own the ``[plugins.*]`` namespace once migrate has run, so dropping any pre-existing ``[plugins.*]`` tables is safe: ``plugin/list`` is the source of truth for what's actually installed. The caller is expected to only invoke this strip when ``plugin/list`` succeeded — otherwise we'd lose plugins the user installed via ``codex`` without a way to re-emit them. Behavior: * Lines beginning with ``[plugins.`` start a swallow region that ends at the next non-``[plugins.`` table header or end-of-file. * Content inside the managed block is untouched (callers should run ``_strip_existing_managed_block`` first so the managed block has already been removed when this runs). TrFr}r)rr_looks_like_table_headerrrr ) toml_textr"rMin_plugin_tablerrs r'_strip_unmanaged_plugin_tablesrRs}0  $ /ECO;;= $H -&11+>O   4 773<r)c|jdsy|jdddj}|jdsy|j d}d|d|dzvS) aReturn True if ``stripped_line`` is a TOML table header. A header has the shape ``[name]`` or ``[[name]]`` (array-of-tables), optionally followed by a comment. The closing ``]`` (or ``]]``) must appear on the same line, and no key-assignment ``=`` can precede it. This distinguishes real headers from multi-line array continuation lines that also start with ``[`` after ``lstrip()``. reF#rrf=N)rsplitrendswithindex) stripped_linehead bracket_idxs r'rrsh  # #C (   sA &q ) 0 0 2D == **S/K d,[1_- --r)c|jd}g}d}d}|D]}|jd}|tk(rd}d}"|r|tk(rd}d}2|j }|si|j drX|j dsG|j ds6|j ds%|j d sd}|j ||j |d j|S) aRemove any prior managed section so re-runs idempotently replace it. The managed section is everything between MIGRATION_MARKER (start) and MIGRATION_END_MARKER (end), inclusive of both markers. User-edited sections above or below are preserved verbatim. Backward compatibility: if the start marker is found but no end marker follows, we fall back to the heuristic that swallows lines until we hit a section that's not [mcp_servers.*]/[plugins.*]/[permissions]/ a `default_permissions =` key. This matches what older versions of this code wrote so re-runs don't break configs from prior Hermes versions.TrFrrez [mcp_serversz[pluginsz [permissions]z [permissions.r)rrr~rrrrr )rr"rM in_managedsaw_end_markerrline_stripped_nlrs r'_strip_existing_managed_blockrs  $ /ECJN;;t, / /J"N  #77" !%{{}H!h&9&9#&>##N3&&z2&&7&&7#  4   434 773<r)c J ddlm} ||r t|nd5}|j d|j di| }dddg}t }jd xsg}t|tsgd fS|D]Q} t| tst| jd xsd} | jdxsg} t| tsY| D]} t| tst| jdd} | s2t| jdxsdj}|r,|dk7r'tjd| jd |t| jd xsd}|s|| f}||vr|j||j!|| t| jdddT|dfS#t$r}gd|fcYd}~Sd}~wwxYw#1swYxYw#t$r}gd |fcYd}~Sd}~wwxYw)uQuery codex's `plugin/list` for installed curated plugins. Spawns `codex app-server` briefly, sends initialize + plugin/list, extracts plugins where installed=true. Returns (plugins, error). Plugins is a list of {name, marketplace, enabled} dicts ready for render_codex_toml_section(). On any failure (codex not installed, RPC error, timeout) returns ([], error_message). Migration treats this as non-fatal — MCP servers and permissions still write through. r)CodexAppServerClientztransport unavailable: N codex_homezhermes-migration) client_namez plugin/list)r;zplugin/list query failed: marketplacesz+plugin/list response missing 'marketplaces'r#r|r installedF availabilityr AVAILABLEz#skipping plugin %s: availability=%sr9T)r#ryr9)!agent.transports.codex_app_serverr Exceptionr+ initializerequestsetrrEr1r2rupperloggerdebugaddr)rr;rexcclientresprMseenrry market_namerrrrr#rSs r'_query_codex_pluginsrs73J6 !*4s:$  F    *<  =>>-W>ED  FC!$D88N+1rL lD )@@@#+ +t, +//&1E5EF //),2'4( $ Ffd+VZZ U;/pytest-/`` (created via ``tmp_path`` / ``tmp_path_factory``) and are reaped between sessions. macOS routes ``/tmp`` through ``/private/var/folders/<…>/T`` which is what pytest's tempdir factory uses by default. If a HERMES_HOME pointing at one of those paths is burned into ``~/.codex/config.toml``, every codex-routed hermes-tools call fails silently once the directory is GC'd. We err on the side of refusing — losing a (very unlikely) real ``~/.hermes`` symlink that happens to live under ``/private/var/folders`` is much less harmful than silently bricking codex's tool surface. F)z pytest-of-z/pytest-z /tmp/pytestz/private/var/folders/c3&K|]}|v ywrar3)rcneedlers r'rdz+_looks_like_test_tempdir..*s:v#:s)lowerany)pathneedlesrs @r'_looks_like_test_tempdirrs0 G J :': ::r)cHddl}i}tjjdxsd}|r t |rd}|r||d<tjjd}|r||d<d|d<|jdd |d<|j d d gd }|r||d <d|d<d|d<|S)aBuild the codex stdio-transport entry that launches Hermes' own tool surface as an MCP server. Codex's subprocess will call back into this for browser/web/delegate_task/vision/memory/skills tools. The command runs the worktree's Python via the current sys.executable so a hermes installed under /opt/, /usr/local/, or a venv all work. HERMES_HOME and PYTHONPATH are passed through so the spawned process sees the same config + module layout the user is running.rN HERMES_HOMEr PYTHONPATH1 HERMES_QUIETHERMES_REDACT_SECRETSrVz-mz(agent.transports.hermes_tools_mcp_server)r8r7r5g>@rDg@rC)sysosenvironrr executable)rr5 hermes_home pythonpathrMs r'_build_hermes_tools_mcp_entryr-sC**../52K/ < (M -J&LC#&77+BF#KC >>ABC E "&C#C Jr)FTz :workspace)rrdiscover_pluginsrexpose_hermes_toolsc t|}|xstjdz }|dz }||_|xsij dxsi}t |t s|jjd|Si} |jD]\} } tt| | xsi\} } | 5|jjd| dd j| xsd Y| | t| <| r| |jt| <|jjt| g}d }|rJ|sHt| \}}|r||_nd }|D](}|j"j|dd|d*|r||_|r6t'| d<d|jvr|jjdt)| ||}|j+r8 |j-d}t1|}|r t3|}t5||}n|}|r|S |j7d d ddl}|j;dt|\}}t|} t=j>|dd5}|jA|ddd|jC|d |_#|S#t.$r-}|jjd|d||cYd}~Sd}~wwxYw#1swY\xYw#t.$r2 |j+r|jE#t.$rYwxYwwxYw#t.$r,}|jjd|d|Yd}~|Sd}~wwxYw)aTranslate Hermes mcp_servers config + Codex curated plugins into ~/.codex/config.toml. Args: hermes_config: full ~/.hermes/config.yaml dict codex_home: override CODEX_HOME (defaults to ~/.codex) dry_run: skip the actual write; report what would happen discover_plugins: when True (default), query `plugin/list` against the live codex CLI to migrate any installed curated plugins into [plugins."@"] entries. Set False to skip the subprocess spawn (for tests or restricted environments). default_permission_profile: when set (default ":workspace"), write top-level `default_permissions = ""` so users on this runtime don't get an approval prompt on every write attempt. Built-in codex profile names are ":workspace", ":read-only", ":danger-no-sandbox" (note the leading ":"). Also accepts a user-defined profile name (no leading ":") that the user has configured in their own [permissions.] table. Set None to leave permissions unset and let codex use its compiled-in default (which is read-only). expose_hermes_tools: when True (default), register Hermes' own tool surface (web_search, browser_*, delegate_task, vision, memory, skills, etc.) as an MCP server in ~/.codex/config.toml so the codex subprocess can call back into Hermes for tools codex doesn't have built in. Set False to opt out. )rz.codexz config.toml mcp_serversz;mcp_servers in Hermes config is not a dict; cannot migrate.Nzserver z skipped: rzno transport configuredFrTr#rxryz hermes-tools)rrzutf-8)encodingzcould not read z: )parentsexist_okrz .config.toml.)rdirwzcould not write )$r rhomer rrEr2rrrFrTr+r rrrrrrrrexists read_textrrrrmkdirtempfilemkstemprfdopenwriterlunlinkr) hermes_configrrrrrreporttargethermes_servers translatedr#rrMr$rplugin_query_succeeded plugin_errrzrexistingrwithout_managednew_textrtmp_fd tmp_path_strtmp_pathfhs r'migraterasFW -F5tyy{X5J - 'FF#)r..}=CN nd +  I  "$J#))+ * c,SY rB W ; MM $DIIg,>,[B[+\]   # 3t9 8?F * *3t9 5s4y) *G"2jI (2F % &* " NA  # # * *ai[!M:J9K+L M N "+E(%B%D >"  0 OO " "> 2.G#=M}} '''9H8A "<_MO5o}U  A5 '//"J 0   % 639 #R" #   V $ M[  MM ?6("SE!B CM > # #  ??$OO%       A /xr#?@@ MAs#J/!AL2#K4;K( K4&L2/ K%8"K K% K%(K1-K44 L/> LL/ L+(L/*L++L//L22 M';!M""M')r#r+rLr2r*z tuple[Optional[dict], list[str]])rnrr*r+)rSr+r*r+)NN)rzdict[str, dict]rzOptional[list[dict]]rrr*r+)rr+rr+r*r+)rr+r*r+)rr+r*r)Ng @)rr r;rGr*z tuple[list[dict], Optional[str]])rr+r*r)r*r2)rr2rr rrrrrrrrr*r )!r/ __future__rloggingr dataclassesrrpathlibrtypingrr getLoggerr,rr~rr rKrJrTrbrirrrrrrrrrr3r)r'rs"H# (   8 $ \)  , ,  , d  E EE%EP%MP%)04:! :! !:!!.:! :!z(>+\.(+^"&NN N&Nb;41n"&!0< $TTT T  T !. TTTr)