Skip to content

Hermes CLI agent + autonomous Gmail/SMS responder - #1

Draft
hatcheric950 wants to merge 9 commits into
mainfrom
claude/setup-hermes-agent-emVQB
Draft

Hermes CLI agent + autonomous Gmail/SMS responder#1
hatcheric950 wants to merge 9 commits into
mainfrom
claude/setup-hermes-agent-emVQB

Conversation

@hatcheric950

@hatcheric950 hatcheric950 commented May 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Summary

Two layers on this branch:

1. Original Hermes CLI agent — multi-provider (Anthropic, OpenRouter, Nous), session-backed (-c/-r), MCP toolsets, skills, optional git worktree. Entry: hermes chat.

2. Autonomous read-and-reply daemon (hermes watch) — new in src/hermes/watcher/. Listens for inbound Gmail via IMAP IDLE and Twilio SMS via signed webhook, runs each message through a policy gate → classifier → the existing Agent, then sends a reply via SMTP / Twilio REST. Ships in shadow mode by default: full pipeline runs and drafts are logged, but no replies are sent until HERMES_MODE=live.

Safety rails (all wired in, not optional)

  • Allowlist-only: only senders in /etc/hermes/allowlist.yaml (emails — incl. *@domain globs — and E.164 phones) get replies.
  • Denylist patterns: noreply@*, mailer-daemon@*, short-code numbers, etc. are always dropped.
  • Rate caps: 20 replies/hour total and 5 replies/sender/24h, both configurable.
  • SMS cost cap: $2/day default; exhaustion auto-drops further SMS.
  • Dedup: SQLite-backed seen(message_id) — never reply twice to the same Gmail Message-ID or Twilio MessageSid.
  • Kill switch: touch /etc/hermes/PAUSE blocks all sends instantly.
  • Twilio signature verification on the webhook; un-signed POSTs return 403.

Layout

  • src/hermes/watcher/{settings,state,policy,classifier,responder,pipeline,gmail,smtp,twilio_webhook,twilio_sender,types,__main__}.py
  • src/hermes/cli.py — adds watch subcommand
  • deploy/bootstrap.sh — one-shot installer for the VPS (apt deps, venv, systemd unit, cloudflared, dir scaffold)
  • deploy/hermes-watcher.service, deploy/traefik/hermes-watcher.yml, deploy/allowlist.example.yaml, deploy/env.example
  • tests/test_policy.py, tests/test_pipeline_shadow.py, tests/test_twilio_verify.py — 21 tests, all green

Deploy

Ubuntu 24.04 VPS, SSH'd in as root:

curl -fsSL https://raw.githubusercontent.com/hatcheric950/T/claude/setup-hermes-agent-emVQB/deploy/bootstrap.sh | bash

The installer prints the post-install checklist (fill /etc/hermes/env, cloudflared tunnel login, point Twilio webhook, run for 24h in shadow, flip to live). Cloudflare Tunnel terminates TLS — no Let's Encrypt or A-record juggling required.

Test plan

  • pytest — 21 tests pass (policy gating, shadow-mode no-send, Twilio signature verify, dedup)
  • On VPS: hermes watch starts under systemd; curl https://<host>/healthz returns {"status":"ok","mode":"shadow"}
  • Send mail from non-allowlisted address → journalctl shows drop_not_allowlisted, no send
  • Add to allowlist, resend → shadow_would_send with drafted body in audit log, still no send
  • Send SMS to Twilio number → signature verified, decision logged, no outbound SMS billed
  • touch /etc/hermes/PAUSE → next inbound is drop_paused
  • After 24h shadow review, flip to HERMES_MODE=live, restart, confirm one real reply

https://claude.ai/code/session_01KDyqQtRNmWt1JfGAWLyNLW

Generated by Claude Code

claude added 6 commits May 11, 2026 03:46
@claude
Scaffold hermes CLI agent
db29dfb 
Multi-provider chat CLI (Anthropic / OpenRouter / Nous) with
interactive and single-query modes, session persistence with
continue/resume, skill preloading, and git worktree isolation.

https://claude.ai/code/session_01KDyqQtRNmWt1JfGAWLyNLW
@claude
Wire MCP servers as hermes toolsets
a15e736 
Loads server definitions from ~/.hermes/mcp.json (or repo-local
./.hermes/mcp.json), spawns each enabled server over stdio, and exposes
its tools to the Anthropic provider via a tool_use loop. ${input:id}
placeholders resolve via HERMES_INPUT_<ID> env vars or an interactive
prompt, enabling drop-in use of configs like hostinger-api-mcp.

https://claude.ai/code/session_01KDyqQtRNmWt1JfGAWLyNLW
@claude
Set up hermes: SessionStart hook + packaging
6c5c2e6 
Add .claude SessionStart hook that installs the project (editable +
dev extras) and reports readiness, written to never fail a session.
Add dev extra and pytest config to pyproject, a minimal offline test
suite (session round-trip, provider routing, mcp.json parsing), and
document the full install/test flow in the README.

https://claude.ai/code/session_01KDyqQtRNmWt1JfGAWLyNLW
@claude
Add PyPI release workflow
a6cc802 
Publish hermes to PyPI on v* tags via a GitHub Actions workflow using
trusted publishing (OIDC, no stored token). Build and publish run as
separate jobs so the id-token scope stays off the build step. The
package version is now single-sourced from hermes.__version__ via
setuptools dynamic metadata, and the workflow fails fast if the pushed
tag disagrees with it.

https://claude.ai/code/session_01KDyqQtRNmWt1JfGAWLyNLW
@claude
Add autonomous Gmail + Twilio SMS responder (hermes watch)
c6c06f0 
Introduces a long-running daemon under `hermes watch` that listens for
inbound Gmail (IMAP IDLE) and Twilio SMS (signed webhook) and uses the
existing Hermes Agent to draft and send personalised replies. Hardened
by an allowlist, denylist patterns, hourly/per-sender rate caps, daily
SMS budget, dedup, and a kill-switch file. Ships in shadow mode by
default — the pipeline drafts replies but does not send until
HERMES_MODE=live is set.

Includes systemd unit + Traefik route + env.example for the Hostinger
VPS deploy, plus tests for policy gating, shadow-mode behavior, and
Twilio signature verification.
@claude
Add one-shot bootstrap.sh installer for the VPS deploy
b19fed0
@hatcheric950 hatcheric950 changed the title Scaffold hermes CLI agent Hermes CLI agent + autonomous Gmail/SMS responder Jun 9, 2026
claude added 3 commits June 11, 2026 03:37
@claude
Add hermes audit subcommand + watcher docs
6bb07e8 
- hermes audit reads /var/lib/hermes/state.db and prints decisions,
  senders, sent/cost, and (with --show-drafts) the LLM's drafted reply.
  Filters: --since-hours, --decision, --sender.
- README: new 'Autonomous responder' section covering safety rails,
  the one-shot deploy command, and the shadow-review workflow.
@claude
Add hermes watch --check preflight + CI workflow
0437ce0 
- 'hermes watch --check' validates /etc/hermes/env and allowlist.yaml
  before starting listeners, with a per-field PASS/WARN/FAIL report.
  Catches missing/malformed secrets, empty allowlist, present PAUSE
  file, etc. — the first thing to run after editing env on the VPS.
- .github/workflows/tests.yml runs pytest on PRs and main pushes.
@claude
Use claude-haiku-4-5 alias (no date suffix)
c38bb28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hatcheric950 @claude