molecule-ai/hermes-platform-molecule-a2a

Hongming Wang 8c4f2b7569 Initial: hermes-platform-molecule-a2a v0.1.0

Hermes-agent platform adapter that delivers Molecule A2A peer-agent
messages to a running hermes daemon over HTTP, and POSTs agent replies
back to the molecule-runtime callback URL.

Closes the MCP-style push parity gap for hermes workspaces:
- Single long-lived adapter session (no subprocess per message)
- MessageEvent(internal=True) bypasses per-platform user allowlist
  for trusted A2A peer messages
- Optional shared-secret HMAC enforcement
- Per-chat callback URL learned from inbound payload

Requires hermes-agent ≥ the upstream PR
NousResearch/hermes-agent#18775 (PluginContext.register_platform_adapter
+ GatewayConfig plugin_platforms wiring + PluginPlatformIdentifier
helper + resolve_platform_id deserialization).

2026-05-02 03:06:56 -07:00

3.5 KiB

Raw Permalink Blame History

hermes-platform-molecule-a2a

A hermes-agent platform adapter that delivers Molecule A2A peer-agent messages to a running hermes daemon over HTTP, and POSTs agent replies back to the molecule-runtime callback URL.

Why this exists

Every Molecule workspace runtime needs MCP-style "push" parity: a single long-lived agent session that receives new peer messages mid-thread instead of cold-starting one process per message.

claude-code: native MCP notifications/claude/channel
codex: persistent codex app-server JSON-RPC stdio
hermes: this plugin (HTTP listener inside the hermes gateway)

Without this, hermes workspaces lose conversation continuity (every A2A message hits stateless /v1/chat/completions) and pay subprocess startup cost on every peer message.

Requires

This plugin depends on three small additions to hermes-agent that are not yet upstream:

PluginContext.register_platform_adapter(name, adapter_class, requirements_check=None)
GatewayConfig.plugin_platforms: Dict[str, PlatformConfig], populated by from_dict for any platform name claimed by a discovered plugin.
GatewayRunner._create_plugin_adapter(name, config) boot path.

Until they land, install the plugin against a hermes fork carrying feat/platform-adapter-plugins. See docs/integrations/hermes-platform-plugins-upstream-pr.md in molecule-core for the upstream proposal.

Install

pip install hermes-platform-molecule-a2a

The plugin auto-registers via the hermes_agent.plugins entry point. No imports or wiring on the hermes side are needed beyond enabling the platform in config.

Configure

In your hermes config.yaml:

platforms:
  molecule-a2a:
    enabled: true
    extra:
      host: "127.0.0.1"             # default
      port: 8645                     # default
      callback_url: "http://runtime:9999/a2a/reply"
      shared_secret: "..."           # required in production; empty
                                     # = open mode for localhost only

When the molecule-runtime POSTs an inbound A2A message and includes its own callback_url in the payload, that overrides the default for that chat — letting the runtime route different peer threads to different callback endpoints.

Wire shape

Inbound (runtime → hermes)

POST /a2a/inbound
X-Molecule-A2A-Secret: <shared_secret>
Content-Type: application/json

{
  "chat_id": "peer-uuid",
  "peer_id": "peer-uuid",
  "peer_name": "ops-agent",
  "peer_role": "sre",
  "content": "the message text",
  "message_id": "uuid-or-monotonic",
  "callback_url": "http://runtime:9999/a2a/reply",
  "thread_id": "optional"
}

→ 200 {"ok": true, "queued": true}

The handler returns immediately; hermes processes the message in a background task and delivers the reply through send().

Outbound (hermes → runtime)

POST <callback_url>
X-Molecule-A2A-Secret: <shared_secret>
Content-Type: application/json

{
  "chat_id": "peer-uuid",
  "content": "agent reply text",
  "reply_to": "msg-id-of-inbound",
  "metadata": {...}
}

Validate

Unit tests (no hermes runtime required):

pip install -e '.[test]'
pytest tests/ -q

End-to-end against a hermes-agent install with the patch:

HERMES_REPO=/path/to/hermes-agent python scripts/e2e_validate.py

The E2E script confirms the entry-points discovery → platform registry → GatewayConfig routing → adapter boot → HTTP roundtrip pipeline.

License

MIT

3.5 KiB Raw Permalink Blame History