mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-05-01 00:11:39 +08:00
5a1d4f6804
Adds Vercel Sandbox as a supported Hermes terminal backend alongside existing providers (Local, Docker, Modal, SSH, Daytona, Singularity). Uses the Vercel Python SDK to create/manage cloud microVMs, supports snapshot-based filesystem persistence keyed by task_id, and integrates with the existing BaseEnvironment shell contract and FileSyncManager for credential/skill syncing. Based on #17127 by @scotttrinh, cherry-picked onto current main.
71 lines
2.3 KiB
Python
71 lines
2.3 KiB
Python
"""Helpers for reporting Vercel Sandbox authentication state."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
from dataclasses import dataclass
|
|
|
|
|
|
_TOKEN_TUPLE_VARS = ("VERCEL_TOKEN", "VERCEL_PROJECT_ID", "VERCEL_TEAM_ID")
|
|
|
|
|
|
@dataclass(frozen=True)
|
|
class VercelAuthStatus:
|
|
ok: bool
|
|
label: str
|
|
detail_lines: tuple[str, ...]
|
|
|
|
|
|
def _present(name: str) -> bool:
|
|
return bool(os.getenv(name))
|
|
|
|
|
|
def describe_vercel_auth() -> VercelAuthStatus:
|
|
"""Return Vercel auth status without exposing secret values."""
|
|
|
|
has_oidc = _present("VERCEL_OIDC_TOKEN")
|
|
token_states = {name: _present(name) for name in _TOKEN_TUPLE_VARS}
|
|
present_token_vars = tuple(name for name, present in token_states.items() if present)
|
|
missing_token_vars = tuple(name for name, present in token_states.items() if not present)
|
|
|
|
if has_oidc:
|
|
details = [
|
|
"mode: OIDC",
|
|
"active env: VERCEL_OIDC_TOKEN",
|
|
"note: OIDC tokens are development-only; use access-token auth for deployments and long-running processes",
|
|
]
|
|
if present_token_vars:
|
|
details.append(f"also present: {', '.join(present_token_vars)}")
|
|
return VercelAuthStatus(True, "OIDC token via VERCEL_OIDC_TOKEN", tuple(details))
|
|
|
|
if not missing_token_vars:
|
|
return VercelAuthStatus(
|
|
True,
|
|
"access token + project/team via VERCEL_TOKEN, VERCEL_PROJECT_ID, VERCEL_TEAM_ID",
|
|
(
|
|
"mode: access token",
|
|
"active env: VERCEL_TOKEN, VERCEL_PROJECT_ID, VERCEL_TEAM_ID",
|
|
),
|
|
)
|
|
|
|
if present_token_vars:
|
|
return VercelAuthStatus(
|
|
False,
|
|
f"partial access-token auth (missing {', '.join(missing_token_vars)})",
|
|
(
|
|
"mode: incomplete access token",
|
|
f"present env: {', '.join(present_token_vars)}",
|
|
f"missing env: {', '.join(missing_token_vars)}",
|
|
"recommended: set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID together",
|
|
),
|
|
)
|
|
|
|
return VercelAuthStatus(
|
|
False,
|
|
"not configured",
|
|
(
|
|
"recommended: set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID",
|
|
"development-only alternative: set VERCEL_OIDC_TOKEN",
|
|
),
|
|
)
|