1
 2
 3
 4
 5
 6
 7
 8
 9
10

hooks:
  pre_tool_call:                    # AI执行工具前触发
    - matcher: "terminal"           # 正则匹配工具名
      command: "~/.hermes/agent-hooks/block-dangerous.sh"
      timeout: 5                    # 超时秒数，默认60，最大300
  post_tool_call:                   # AI执行工具后触发
    - matcher: "write_file|patch"   # 写文件后自动格式化
      command: "~/.hermes/agent-hooks/auto-format.sh"
  pre_llm_call:                     # AI每次思考前注入上下文
    - command: "~/.hermes/agent-hooks/inject-git-status.sh"

1

mkdir -p ~/.hermes/agent-hooks

1
2
3
4
5
6
7
8

#!/usr/bin/env bash
payload="$(cat -)"
cmd=$(echo "$payload" | jq -r '.tool_input.command // empty')
if echo "$cmd" | grep -qE 'rm[[:space:]]+-rf?[[:space:]]+/'; then
  printf '{"decision": "block", "reason": "blocked: rm -rf / is not permitted"}\n'
else
  printf '{}\n'
fi

1
2
3
4
5

#!/usr/bin/env bash
payload="$(cat -)"
path=$(echo "$payload" | jq -r '.tool_input.path // empty')
[[ "$path" == *.py ]] && command -v black >/dev/null && black "$path" 2>/dev/null
printf '{}\n'

1
2
3
4
5
6
7
8

#!/usr/bin/env bash
cat - >/dev/null   # 丢弃stdin
if status=$(git status --porcelain 2>/dev/null) && [[ -n "$status" ]]; then
  jq --null-input --arg s "$status" \
     '{context: ("Uncommitted changes:\n" + $s)}'
else
  printf '{}\n'
fi

1

chmod +x ~/.hermes/agent-hooks/*.sh

1
2
3
4
5
6
7

{
  "hook_event_name": "pre_tool_call",
  "tool_name": "terminal",
  "tool_input": {"command": "rm -rf /"},
  "session_id": "sess_abc123",
  "cwd": "/home/user/project"
}

1

{"decision": "block", "reason": "blocked: rm -rf / is not permitted"}

1

hooks_auto_accept: true    # 自动信任新脚本

1
2
3

hermes hooks list          # 查看所有已配置的hooks
hermes hooks doctor        # 健康检查（权限、状态、执行时间）
hermes hooks test pre_tool_call --for-tool terminal   # 测试某个hook

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

quick_commands:
  gpu:
    type: exec
    command: "nvidia-smi --query-gpu=name,utilization.gpu,memory.used --format=csv,noheader"
  ip:
    type: exec
    command: "curl -s ifconfig.me"
  status:
    type: exec
    command: "echo \"CPU: $(top -bn1 | grep '%Cpu' | awk '{printf \"%.0f\", 100-$8}')%\" && echo \"MEM: $(free -h | awk '/^Mem:/{print $3 \"/\" $2}')\" && echo \"DISK: $(df -h / | awk 'NR==2{print $5}')\""
  dn:
    type: exec
    command: "cat ~/notes/$(date +%Y-%m-%d).md"

1
2
3
4
5
6
7

quick_commands:
  sc:
    type: alias
    target: "/model sonnet --provider openrouter"
  local:
    type: alias
    target: "/model qwen3.5 --provider custom"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

model_aliases:
  opus:
    model: claude-opus-4-6
    provider: anthropic
  sonnet:
    model: claude-sonnet-4-20250514
    provider: anthropic
  ds:
    model: deepseek-chat
    provider: deepseek
  glm:
    model: glm-5.1
    provider: zai
    base_url: "https://open.bigmodel.cn/api/coding/paas/v4"
  local:
    model: qwen3.5:397b
    provider: custom
    base_url: "http://localhost:11434/v1"

1
2
3
4

model:
  aliases:
    ds-flash: deepseek/deepseek-v4-flash
    local-qwen: qwen3.5:397b

1
2
3

/model opus          # 切到Claude Opus（仅当前会话）
/model sonnet        # 切到Claude Sonnet
/model --global glm  # 全局切换到GLM（所有会话生效）

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

# 添加API Key类型的凭据
hermes auth add openrouter                    # 交互式输入API Key
hermes auth add anthropic --type api_key      # 指定类型
hermes auth add openrouter --label "主号"     # 加标签方便管理

# 查看已有凭据
hermes auth list
hermes auth list openrouter                   # 查看某个provider的凭据

# 移除凭据
hermes auth remove openrouter 0               # 按序号移除
hermes auth remove openrouter my-label        # 按标签移除

# 重置限流状态（Key被标记为exhausted后手动恢复）
hermes auth reset openrouter

1
2
3
4
5

credential_pool_strategies:
  anthropic: round_robin      # 轮询：挨个用，雨露均沾
  openrouter: random          # 随机：随便挑一个
  openai-codex: least_used    # 最少使用：挑调用次数最少的
  # 不配 = fill_first（默认）

1
2
3
4
5
6

credential_pool_strategies:
  anthropic: round_robin
  openrouter: random

# 凭据存在 ~/.hermes/auth.json，不要手动编辑
# 用 hermes auth 命令管理

1
2
3
4
5
6
7
8

# 添加3个OpenRouter Key
hermes auth add openrouter --label "OR-主号"
hermes auth add openrouter --label "OR-备用1"
hermes auth add openrouter --label "OR-备用2"

# 添加2个Anthropic Key
hermes auth add anthropic --type api_key --label "AN-主号"
hermes auth add anthropic --type api_key --label "AN-备用"

1
2
3
4
5
6
7
8

OpenRouter:
  [0] OR-主号    (ok)       requests: 847
  [1] OR-备用1   (ok)       requests: 823
  [2] OR-备用2   (exhausted, resets in 23min)  requests: 891

Anthropic:
  [0] AN-主号    (ok)       requests: 156
  [1] AN-备用    (ok)       requests: 148