feat: Hermes Admin Panel + Swarm Phase 1 + OpenSandbox lifecycle

[jyf2100]

Summary

• Hermes Admin Panel: Full-featured K8s management console (React 19 + FastAPI) — agent CRUD, config editing, log streaming, health monitoring, WeChat integration, template management, neon cyberpunk UI theme
• Swarm Phase 1: Redis message bus, core runtime (messaging, circuit breaker, resilient client, exactly-once), admin panel integration (REST + SSE, Zustand, SwarmGuard), agent auto-registration
• OpenSandbox lifecycle: K8s sandbox management, Open WebUI deployment, ingress configuration
• Tests: 38 Playwright E2E + 47 swarm unit tests (all passing)

Test plan

• Python: 47/47 swarm unit tests
• E2E: 38/38 Playwright tests
• K8s: 4 gateways + admin + Redis verified
• Agent registration: auto-register in hermes:registry
• Admin API: /swarm/agents and /swarm/metrics working
• Pre-existing test_model_tools failures (same on main)

[github-actions]

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: base64 encoding/decoding detected

Base64 has legitimate uses (images, JWT, etc.) but is also commonly used to obfuscate malicious payloads. Verify the usage is appropriate.

Matches (first 20):

1250:+                return base64.b64decode(secret.data["api_key"]).decode("utf-8")
4156:+    b64 = base64.b64encode(buf.getvalue()).decode()
40612:+        b64 = base64.b64encode(raw).decode("ascii")
41127:+        computed = base64.b64encode(mac.digest()).decode("utf-8")
42049:+        self.key = base64.b64decode(encoding_aes_key + "=")
42061:+            cipher_text = base64.b64decode(encrypt)
42103:+            return base64.b64encode(encrypted).decode("utf-8")
42653:+        aes_key_for_api = base64.b64encode(aes_key.hex().encode("ascii")).decode("ascii")
74852:+    return base64.b64encode(mac.digest()).decode("utf-8")
76883:+        expected_aes = base64.b64encode(fake_hex_key.encode("ascii")).decode("ascii")
90580:+        tar_data = base64.b64decode(payload)
90749:+        tar_data = base64.b64decode(payload)
92560:+            audio_data=base64.b64encode(audio_content).decode()
92585:+            audio_data=base64.b64encode(b"data").decode()
92601:+            audio_data=base64.b64encode(b"data").decode()
92617:+            audio_data=base64.b64encode(b"data").decode()
92632:+            audio_data=base64.b64encode(b"data").decode()
92658:+            audio_data=base64.b64encode(b"data").decode()
92673:+            audio_data=base64.b64encode(b"data").decode()
92693:+            audio_data=base64.b64encode(b"audio").decode()

⚠️ WARNING: exec() or eval() usage

Dynamic code execution can hide malicious behavior, especially when combined with base64 or network fetches.

Matches (first 20):

40069:+            proc = await asyncio.create_subprocess_exec(
55312:+    "Quick commands support two types: exec (run shell command directly) and alias (redirect to another command).",
90504:+def _wire_async_exec(env, exec_calls=None):
90608:+        exec_calls, _, _ = _wire_async_exec(env)
90625:+        exec_calls, _, _ = _wire_async_exec(env)
90669:+        _, run_kwargs, _ = _wire_async_exec(env)
94546:+            self._sandbox.process.exec(quoted_mkdir_command(parents))
94977:+            parent_check = self._exec(
94981:+                ls_result = self._exec(
95027:+        result = self._exec(cmd_sorted, timeout=60)
95037:+            result = self._exec(cmd_plain, timeout=60)
102807:+  while ((match = pattern.exec(text)) !== null) {
107771:+  while ((match = regex.exec(snippet)) !== null) {

⚠️ WARNING: Outbound network calls (POST/PUT)

Outbound POST/PUT requests in new code could be data exfiltration. Verify the destination URLs are legitimate.

Matches (first 10):

20917:+            with urllib.request.urlopen(req, timeout=5) as resp:
49954:+    with urllib.request.urlopen(req, timeout=30) as resp:
49990:+    with urllib.request.urlopen(req, timeout=30) as resp:
56769:+        with urllib.request.urlopen(req, timeout=20) as resp:
59578:+        with urllib.request.urlopen(req, timeout=15) as r:
60364:+        with urllib.request.urlopen(req, timeout=15) as r:
60424:+        with urllib.request.urlopen(url, timeout=10) as r:
80298:+            "hermes_cli.debug.urllib.request.urlopen",

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/memory_setup.py
hermes_cli/setup.py
tests/hermes_cli/test_setup.py

---

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

[github-actions]

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: base64 encoding/decoding detected

Base64 has legitimate uses (images, JWT, etc.) but is also commonly used to obfuscate malicious payloads. Verify the usage is appropriate.

Matches (first 20):

1406:+                return base64.b64decode(secret.data["api_key"]).decode("utf-8")
4612:+    b64 = base64.b64encode(buf.getvalue()).decode()
48101:+        b64 = base64.b64encode(raw).decode("ascii")
48616:+        computed = base64.b64encode(mac.digest()).decode("utf-8")
49538:+        self.key = base64.b64decode(encoding_aes_key + "=")
49550:+            cipher_text = base64.b64decode(encrypt)
49592:+            return base64.b64encode(encrypted).decode("utf-8")
50142:+        aes_key_for_api = base64.b64encode(aes_key.hex().encode("ascii")).decode("ascii")
83214:+    return base64.b64encode(mac.digest()).decode("utf-8")
85245:+        expected_aes = base64.b64encode(fake_hex_key.encode("ascii")).decode("ascii")
99608:+        tar_data = base64.b64decode(payload)
99777:+        tar_data = base64.b64decode(payload)
101588:+            audio_data=base64.b64encode(audio_content).decode()
101613:+            audio_data=base64.b64encode(b"data").decode()
101629:+            audio_data=base64.b64encode(b"data").decode()
101645:+            audio_data=base64.b64encode(b"data").decode()
101660:+            audio_data=base64.b64encode(b"data").decode()
101686:+            audio_data=base64.b64encode(b"data").decode()
101701:+            audio_data=base64.b64encode(b"data").decode()
101721:+            audio_data=base64.b64encode(b"audio").decode()

⚠️ WARNING: exec() or eval() usage

Dynamic code execution can hide malicious behavior, especially when combined with base64 or network fetches.

Matches (first 20):

47558:+            proc = await asyncio.create_subprocess_exec(
62801:+    "Quick commands support two types: exec (run shell command directly) and alias (redirect to another command).",
99532:+def _wire_async_exec(env, exec_calls=None):
99636:+        exec_calls, _, _ = _wire_async_exec(env)
99653:+        exec_calls, _, _ = _wire_async_exec(env)
99697:+        _, run_kwargs, _ = _wire_async_exec(env)
103574:+            self._sandbox.process.exec(quoted_mkdir_command(parents))
104005:+            parent_check = self._exec(
104009:+                ls_result = self._exec(
104055:+        result = self._exec(cmd_sorted, timeout=60)
104065:+            result = self._exec(cmd_plain, timeout=60)
112001:+  while ((match = pattern.exec(text)) !== null) {
116965:+  while ((match = regex.exec(snippet)) !== null) {

⚠️ WARNING: Outbound network calls (POST/PUT)

Outbound POST/PUT requests in new code could be data exfiltration. Verify the destination URLs are legitimate.

Matches (first 10):

23427:+            with urllib.request.urlopen(req, timeout=5) as resp:
57443:+    with urllib.request.urlopen(req, timeout=30) as resp:
57479:+    with urllib.request.urlopen(req, timeout=30) as resp:
64258:+        with urllib.request.urlopen(req, timeout=20) as resp:
67300:+        with urllib.request.urlopen(req, timeout=15) as r:
68086:+        with urllib.request.urlopen(req, timeout=15) as r:
68146:+        with urllib.request.urlopen(url, timeout=10) as r:
88660:+            "hermes_cli.debug.urllib.request.urlopen",

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/memory_setup.py
hermes_cli/setup.py
tests/hermes_cli/test_setup.py

---

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

[github-actions]

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: base64 encoding/decoding detected

Base64 has legitimate uses (images, JWT, etc.) but is also commonly used to obfuscate malicious payloads. Verify the usage is appropriate.

Matches (first 20):

1415:+                return base64.b64decode(secret.data["api_key"]).decode("utf-8")
4643:+    b64 = base64.b64encode(buf.getvalue()).decode()
48140:+        b64 = base64.b64encode(raw).decode("ascii")
48655:+        computed = base64.b64encode(mac.digest()).decode("utf-8")
49577:+        self.key = base64.b64decode(encoding_aes_key + "=")
49589:+            cipher_text = base64.b64decode(encrypt)
49631:+            return base64.b64encode(encrypted).decode("utf-8")
50181:+        aes_key_for_api = base64.b64encode(aes_key.hex().encode("ascii")).decode("ascii")
83358:+    return base64.b64encode(mac.digest()).decode("utf-8")
85389:+        expected_aes = base64.b64encode(fake_hex_key.encode("ascii")).decode("ascii")
99752:+        tar_data = base64.b64decode(payload)
99921:+        tar_data = base64.b64decode(payload)
101732:+            audio_data=base64.b64encode(audio_content).decode()
101757:+            audio_data=base64.b64encode(b"data").decode()
101773:+            audio_data=base64.b64encode(b"data").decode()
101789:+            audio_data=base64.b64encode(b"data").decode()
101804:+            audio_data=base64.b64encode(b"data").decode()
101830:+            audio_data=base64.b64encode(b"data").decode()
101845:+            audio_data=base64.b64encode(b"data").decode()
101865:+            audio_data=base64.b64encode(b"audio").decode()

⚠️ WARNING: exec() or eval() usage

Dynamic code execution can hide malicious behavior, especially when combined with base64 or network fetches.

Matches (first 20):

47597:+            proc = await asyncio.create_subprocess_exec(
62850:+    "Quick commands support two types: exec (run shell command directly) and alias (redirect to another command).",
99676:+def _wire_async_exec(env, exec_calls=None):
99780:+        exec_calls, _, _ = _wire_async_exec(env)
99797:+        exec_calls, _, _ = _wire_async_exec(env)
99841:+        _, run_kwargs, _ = _wire_async_exec(env)
103718:+            self._sandbox.process.exec(quoted_mkdir_command(parents))
104149:+            parent_check = self._exec(
104153:+                ls_result = self._exec(
104199:+        result = self._exec(cmd_sorted, timeout=60)
104209:+            result = self._exec(cmd_plain, timeout=60)
112145:+  while ((match = pattern.exec(text)) !== null) {
117109:+  while ((match = regex.exec(snippet)) !== null) {

⚠️ WARNING: Outbound network calls (POST/PUT)

Outbound POST/PUT requests in new code could be data exfiltration. Verify the destination URLs are legitimate.

Matches (first 10):

23466:+            with urllib.request.urlopen(req, timeout=5) as resp:
57492:+    with urllib.request.urlopen(req, timeout=30) as resp:
57528:+    with urllib.request.urlopen(req, timeout=30) as resp:
64307:+        with urllib.request.urlopen(req, timeout=20) as resp:
67361:+        with urllib.request.urlopen(req, timeout=15) as r:
68147:+        with urllib.request.urlopen(req, timeout=15) as r:
68207:+        with urllib.request.urlopen(url, timeout=10) as r:
88804:+            "hermes_cli.debug.urllib.request.urlopen",

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/memory_setup.py
hermes_cli/setup.py
tests/hermes_cli/test_setup.py

---

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

[github-actions]

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: base64 encoding/decoding detected

Base64 has legitimate uses (images, JWT, etc.) but is also commonly used to obfuscate malicious payloads. Verify the usage is appropriate.

Matches (first 20):

1415:+                return base64.b64decode(secret.data["api_key"]).decode("utf-8")
4664:+    b64 = base64.b64encode(buf.getvalue()).decode()
48162:+        b64 = base64.b64encode(raw).decode("ascii")
48677:+        computed = base64.b64encode(mac.digest()).decode("utf-8")
49599:+        self.key = base64.b64decode(encoding_aes_key + "=")
49611:+            cipher_text = base64.b64decode(encrypt)
49653:+            return base64.b64encode(encrypted).decode("utf-8")
50203:+        aes_key_for_api = base64.b64encode(aes_key.hex().encode("ascii")).decode("ascii")
83387:+    return base64.b64encode(mac.digest()).decode("utf-8")
85418:+        expected_aes = base64.b64encode(fake_hex_key.encode("ascii")).decode("ascii")
99794:+        tar_data = base64.b64decode(payload)
99963:+        tar_data = base64.b64decode(payload)
101774:+            audio_data=base64.b64encode(audio_content).decode()
101799:+            audio_data=base64.b64encode(b"data").decode()
101815:+            audio_data=base64.b64encode(b"data").decode()
101831:+            audio_data=base64.b64encode(b"data").decode()
101846:+            audio_data=base64.b64encode(b"data").decode()
101872:+            audio_data=base64.b64encode(b"data").decode()
101887:+            audio_data=base64.b64encode(b"data").decode()
101907:+            audio_data=base64.b64encode(b"audio").decode()

⚠️ WARNING: exec() or eval() usage

Dynamic code execution can hide malicious behavior, especially when combined with base64 or network fetches.

Matches (first 20):

47619:+            proc = await asyncio.create_subprocess_exec(
62872:+    "Quick commands support two types: exec (run shell command directly) and alias (redirect to another command).",
99718:+def _wire_async_exec(env, exec_calls=None):
99822:+        exec_calls, _, _ = _wire_async_exec(env)
99839:+        exec_calls, _, _ = _wire_async_exec(env)
99883:+        _, run_kwargs, _ = _wire_async_exec(env)
103760:+            self._sandbox.process.exec(quoted_mkdir_command(parents))
104191:+            parent_check = self._exec(
104195:+                ls_result = self._exec(
104241:+        result = self._exec(cmd_sorted, timeout=60)
104251:+            result = self._exec(cmd_plain, timeout=60)
112187:+  while ((match = pattern.exec(text)) !== null) {
117151:+  while ((match = regex.exec(snippet)) !== null) {

⚠️ WARNING: Outbound network calls (POST/PUT)

Outbound POST/PUT requests in new code could be data exfiltration. Verify the destination URLs are legitimate.

Matches (first 10):

23488:+            with urllib.request.urlopen(req, timeout=5) as resp:
57514:+    with urllib.request.urlopen(req, timeout=30) as resp:
57550:+    with urllib.request.urlopen(req, timeout=30) as resp:
64329:+        with urllib.request.urlopen(req, timeout=20) as resp:
67383:+        with urllib.request.urlopen(req, timeout=15) as r:
68169:+        with urllib.request.urlopen(req, timeout=15) as r:
68229:+        with urllib.request.urlopen(url, timeout=10) as r:
88833:+            "hermes_cli.debug.urllib.request.urlopen",

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/memory_setup.py
hermes_cli/setup.py
tests/hermes_cli/test_setup.py

---

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.