hermes/svrnty-hermes-webui-plugin
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
0b19fdd7d0
svrnty-hermes-webui-plugin/CONNECTION-MAP.md
Svrnty 0b19fdd7d0
Some checks failed
plugin-tests / test (push) Failing after 5s
Details
feat(plugin): Adwright + BTE Command Center panels (v0.4.0) 
Two new tool panels surfaced inside hermes-webui via inject_script/
inject_stylesheet. Both vanilla JS + CSS, no frameworks, WebUI CSS-vars
only (no hardcoded colors), light/dark inherits free.

## Adwright panel (static/adwright.{js,css} + routes/adwright.py)

5 tabs: Overview · Cycles · Audience · Targeting · Connections.
Layout: 60/40 panel/chat split via CSS :has() selector.
Always-visible, soft-disabled when active profile isn't `cmo*`.

Action wiring (READ path — agent-mediated per governance):
1. Panel button → fires custom event
2. Handler synthesizes /adwright <cmd> chat message
3. Posts via existing btnSend pathway → message visible in chat
4. CMO sees + calls mcp_adwright_<tool>
5. Panel polls /api/adwright/last-panel-update for structured payload
6. Mock payload returned v1; real session-DB reader plugs in when
   adwright-mcp gains writer

Connections WRITE path (governance exception, NO secrets in chat):
- POST /api/adwright/provision-creds with form fields
- Plugin invokes credctl set <key> via stdin (value never on argv)
- Allowlist enforced (defense-in-depth on key names)
- Auth-gated by WebUI session cookie

Skin: .svrnty-aw-* class prefix, window.SvrntyAdwright JS namespace,
guard against double-load, scoped MutationObserver.

## BTE Command Center panel (static/bte.{js,css} + routes/bte_proxy.py)

Content-mode pills (Polished/UGC/Photorealistic/Artistic) × media toggle
(Image/Video — Video disabled v1 pending Phase 4e) × recipe family picker
(Hero Shot/Lifestyle Shot/Photoshoot/Recipe Sheet/Montage Catalog) per
canonical PLANB-RECIPE-TAXONOMY. SKU picker, variant stepper 1-12,
single/batch toggle, [Generate] button.

Asset grid with streaming thumbnails, asset detail (full-res + rate +
comment + "Use in Adwright cycle" deep link). Embedded CMO chat right rail
for re-orienting generations ("make next batch warmer / less white space").

BTE proxy route (/api/bte/proxy) with whitelisted paths
(requestPhotoshoot, assetGrid, recipeStats, assets/{id}/thumb, etc.)
prevents browser-side CORS to BTE :6001.

Skin: .svrnty-bte-* class prefix, window.SvrntyBTE JS namespace.

## Wiring

manifest_version: 0.2.0 → 0.4.0
assets registered:
- /plugins/svrnty/adwright.{js,css} + static/adwright/
- /plugins/svrnty/bte.{js,css} + static/bte/
routes registered:
- GET /api/adwright/last-panel-update (panel update channel)
- POST /api/adwright/provision-creds (governance-exception write)
- GET/POST /api/bte/proxy (BTE REST proxy with allowlist)

Karpathy 4 rules: agents reported every deviation with rationale (Python
venv interp for hermes mcp add, missing aggregate connections-status RPC
composed from two verifies, mock panel-update v1 with locked frontend
protocol so real session-DB reader is a drop-in swap), verified asset
serving + plugin route registration before claiming complete, surfaced
open questions instead of silently choosing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-24 12:12:27 -04:00

3.0 KiB
Raw Blame History

CONNECTION MAP — svrnty-hermes-webui-plugin → nesquena/hermes-webui

Upstream version: v0.51.118
Plugin version: 0.4.0
Total dependencies: 24 (19 public API · 0 forced internal · 5 frontend)

Auto-generated by scripts/ast-connection-map.py. Do not hand-edit. To change a justification, edit the # CONNECTION: comment above the relevant import and re-run the script.

Public API dependencies (via loader-provided api)

Plugin location Upstream symbol Snippet
plugin.py:29 api.logger log = api.logger("svrnty.plugin")
plugin.py:34 api.register_static api.register_static(STATIC_PREFIX, str(STATIC_DIR))
plugin.py:35 api.inject_stylesheet api.inject_stylesheet(f"/plugins/{STATIC_PREFIX}/app.css")
plugin.py:36 api.inject_script api.inject_script(f"/plugins/{STATIC_PREFIX}/app.js")
plugin.py:40 api.inject_stylesheet api.inject_stylesheet(f"/plugins/{STATIC_PREFIX}/adwright.css")
plugin.py:41 api.inject_script api.inject_script(f"/plugins/{STATIC_PREFIX}/adwright.js")
plugin.py:46 api.inject_stylesheet api.inject_stylesheet(f"/plugins/{STATIC_PREFIX}/bte.css")
plugin.py:47 api.inject_script api.inject_script(f"/plugins/{STATIC_PREFIX}/bte.js")
routes/adwright.py:43 api.logger log = api.logger("svrnty.routes.adwright")
routes/adwright.py:44 api.register_route api.register_route(
routes/adwright.py:46 api.register_route api.register_route(
routes/bte_proxy.py:40 api.logger log = api.logger("svrnty.routes.bte_proxy")
routes/bte_proxy.py:41 api.register_route api.register_route("/api/bte/proxy", "GET", _handle_proxy)
routes/bte_proxy.py:42 api.register_route api.register_route("/api/bte/proxy", "POST", _handle_proxy)
routes/transcribe.py:37 api.logger log = api.logger("svrnty.routes.transcribe")
routes/transcribe.py:38 api.register_route api.register_route("/api/transcribe", "POST", _handle_transcribe)
routes/transcribe.py:39 api.register_audio_attachment_processor api.register_audio_attachment_processor(_transcribe_audio_attachments)
routes/vault_status.py:19 api.logger log = api.logger("svrnty.routes.vault_status")
routes/vault_status.py:20 api.register_route api.register_route("/api/vault/status", "GET", _handle_vault_status)

Forced internal dependencies (Rule 2 escape hatch)

Each row requires a # CONNECTION: <reason> comment in source.

None. Plugin uses only the public API. ✓

Frontend dependencies (static/.js → /api/ URLs)

File Line URL
static/bte.js 330 /api/command/requestPhotoshoot
static/bte.js 369 /api/query/assetGrid
static/bte.js 483 /api/command/rateAsset
static/adwright.js 478 /api/adwright/provision-creds
static/app.js 165 /api/vault/status