feat: web UI dashboard for managing Hermes Agent

[teknium1]

Summary

Salvage of PR #1813 by @austinpickett onto current main.

Adds an embedded web UI dashboard accessible via hermes web:

• Status page: agent version, active sessions, gateway status, connected platforms
• Config editor: schema-driven form with tabbed categories, import/export, reset to defaults
• API Keys page: set, clear, and view redacted values with category grouping

Backend

• hermes_cli/web_server.py — FastAPI server with REST endpoints (/api/status, /api/sessions, /api/config, /api/env)
• hermes_cli/config.py — Added delete_env_value() and reload_env() utilities
• hermes_cli/main.py — Added hermes web subcommand (--port, --host, --no-open)
• cli.py / commands.py — Added /reload slash command for hot-reloading .env
• pyproject.toml — Added [web] optional dependency extra (fastapi + uvicorn)
• Both update paths (git + zip) now build the web frontend automatically when npm is available

Frontend

• Vite + React + TypeScript + Tailwind v4 SPA in web/
• shadcn/ui-style components (Card, Badge, Button, Input, Tabs, etc.)
• Auto-refresh status page, toast notifications, masked password inputs

Fixes applied during salvage (vs original PR #1813)

• CONFIG_SCHEMA: replaced hardcoded static schema with dynamic generation from DEFAULT_CONFIG (auto-discovers all 157 config fields, applies manual overrides for select dropdowns)
• CORS: restricted from allow_origins=['*'] to localhost-only origins
• Dropped _maybe_reload_env from model_tools.py — the original added os.path.getmtime() I/O on every tool call, and hardcoded ~/.hermes/.env (breaks profiles). The /reload command is the right UX for this.
• Dropped .python-version file (3.11 pin doesn't belong in repo)
• Skipped all stale-branch reverts — original PR was 897 commits behind main and would have reverted coerce_tool_args, plugin hooks, honcho plugin migration, pyproject.toml deps, etc.

Test plan

• python -m pytest tests/hermes_cli/test_config.py tests/hermes_cli/test_commands.py -n0 -q → 144 passed
• E2E: delete_env_value(), reload_env(), redact_key() all verified with isolated HERMES_HOME
• E2E: Schema generation produces 157 fields with correct types and override application
• Pre-existing test failures (7 in test_auth_provider_gate + test_env_loader from test ordering pollution) confirmed on clean main

[github-actions]

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/setup.py

---

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

[kshitijk4poor]

PR Review — #7621: feat: web UI dashboard for managing Hermes Agent

Tests: 144 passed, 0 failed (test_config.py + test_commands.py)
Live test: imports ✓, CONFIG_SCHEMA generates 157 fields ✓, utility functions work ✓

Solid feature — clean React frontend, good schema-driven config editor, sensible defaults (localhost-only binding). A few issues to address before merge:

Critical

• hermes_cli/web_server.py:367-370 — Path traversal in serve_spa. The catch-all route does file_path = WEB_DIST / full_path without validating the resolved path stays inside WEB_DIST. URL-encoded sequences like %2e%2e/ bypass HTTP-level normalization and reach Path.__truediv__ unmodified, allowing reads of arbitrary files (e.g. ~/.hermes/.env). Fix: add if not file_path.resolve().is_relative_to(WEB_DIST.resolve()): return FileResponse(WEB_DIST / "index.html").

• hermes_cli/config.py:2500 — delete_env_value() duplicates the existing remove_env_value() (line 2425) but omits input validation (_ENV_VAR_NAME_RE), managed-mode check (is_managed()), and line sanitization (_sanitize_env_lines()). Should be deleted entirely — use remove_env_value() in web_server.py instead.

Warnings

• hermes_cli/web_server.py:384 — CORS origin list mutation is a no-op. _LOCALHOST_ORIGINS.append(server_origin) runs in start_server(), but CORSMiddleware copies allow_origins at __init__ time (line 67). Custom --port values won't be allowed. Fix: create middleware lazily, or use allow_origin_regex=r"^https?://(localhost|127\.0\.0\.1)(:\d+)?$".

• hermes_cli/config.py:2535 — reload_env() loads updated vars from .env into os.environ but doesn't remove vars that were deleted from .env. After delete_env_value() + /reload, the deleted key persists in the process environment.

• hermes_cli/web_server.py:242-251 — SessionDB() instantiated on every request but never closed. With StatusPage polling every 5s, this leaks SQLite handles. Use a context manager or explicit close().

• hermes_cli/main.py:2894-2908, 3657-3671, 4216-4236 — Web UI build block (npm install + npm run build) copy-pasted 3 times across _update_via_zip(), cmd_update(), and cmd_web(). Extract into a helper.

• hermes_cli/web_server.py:305-309, 337, 350 — Multiple endpoints return str(e) in HTTP 500 responses. If the exception message includes file paths or partial values, those leak to the client. Log server-side, return generic error.

Suggestions

• web/src/pages/ConfigPage.tsx:100 — File input accepts .json,.yaml,.yml but handleImport() only parses JSON. YAML uploads will show "Invalid JSON file". Either remove .yaml/.yml from accept, or add a YAML parser.
• hermes_cli/web_server.py:303-309 — PUT /api/config writes body.config to disk via save_config() without schema validation. Any arbitrary keys or invalid value types are persisted. Consider validating against CONFIG_SCHEMA before saving.
• The PR adds ~600 lines of backend Python with zero tests. delete_env_value(), reload_env(), schema generation, and the API endpoints should all have tests — the repo's test infrastructure is mature and the patterns are well-established.
• Consider adding a Host header check middleware to mitigate DNS rebinding (CORS alone doesn't fully protect localhost services).
• package-lock.json — add a .gitattributes entry (web/package-lock.json linguist-generated=true) so it collapses in GitHub diffs.

Looks Good

• CORS restricted to localhost — good security posture vs the original PR's allow_origins=["*"].
• Dynamic config schema generated from DEFAULT_CONFIG with manual overrides — auto-discovers all 157 fields.
• /reload command properly registered in COMMAND_REGISTRY with correct category.
• pyproject.toml changes are clean: [web] optional dep group, web_dist package-data, all extra.
• Vite build output correctly targets ../hermes_cli/web_dist/ for bundling.
• Frontend is well-structured: typed API client, proper TypeScript, clean component separation.
• Env vars are properly redacted — actual values never sent to the frontend.
• Atomic file write pattern in new config functions matches existing codebase style.
• Good decision to drop _maybe_reload_env from the original PR (per-tool-call I/O overhead).

[teknium1]

Closing during PR triage — not pursuing this approach.