Cairn
NousResearch/hermes-agent

Remote backend WebSocket connection origin fix

Cluster 130535. Data as of

Nothing open on GitHub. Fix merged in #130852 on 1 Oct 2026. Check it covers your case.

The short answer

0open issues
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #130852. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
Nothing open on GitHub.

A bug where the desktop app could not connect to remote/non-loopback backends due to WebSocket upgrade requests being refused with a 403, along with related fixes and a revert addressing loopback origin handling.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #130852 revert: Desktop connects to remote backends and keeps its settings again (reverts #127201, #130015, #128552)

    merged to main

    files: apps/desktop/electron/embed-referer.test.ts, apps/desktop/electron/embed-referer.ts, apps/desktop/electron/main.ts, apps/desktop/electron/remote-ws-headers.ts, apps/desktop/electron/renderer-server.test.ts, apps/desktop/electron/renderer-server.ts, apps/desktop/electron/renderer-url.test.ts, apps/desktop/electron/renderer-url.ts, apps/desktop/src/app/chat/close-tab.test.ts, apps/desktop/src/app/chat/preview-tile.test.ts, apps/desktop/src/app/chat/preview-tile.tsx, apps/desktop/src/app/model-picker-overlay.test.tsx, apps/desktop/src/app/session/hooks/use-session-actions/index.ts, apps/desktop/src/app/shell/hooks/use-statusbar-items.test.tsx, apps/desktop/src/components/assistant-ui/embeds/embed-consent.tsx, apps/desktop/src/components/assistant-ui/embeds/providers/detect.test.ts, apps/desktop/src/components/assistant-ui/embeds/providers/types.ts, apps/desktop/src/components/assistant-ui/embeds/providers/youtube.ts, apps/desktop/src/components/assistant-ui/embeds/url-embed.tsx, apps/desktop/src/components/assistant-ui/embeds/youtube-embed.test.ts (+19 more)

1 PR closed without merging

From the close comments: done elsewhere 1

  • #130546 fix(cli): admit loopback web origins on the WS upgrade and log pre-accept refusals · done elsewhere → 03477e9, #130852, #127201
Closed issues · 1
  • Closed#130535[Bug]: desktop app cannot connect to a remote (non-loopback) gateway — WS upgrade refused with a silent 403 (loopback renderer origin)
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs
#130852
Closed issues
1
Attempts
1 PR closed without merging
Fix link checked
1 Oct 2026

For your agent

The same facts, typed.

cluster/130535.json
cluster/130535.md