\n
\n- {boot.error}\n+ {sshFailureMessage(connectionConfig, boot.error, t.settings.gateway)}\n
\n \n
"]},{"file":"apps/desktop/src/components/boot-failure-reauth.test.ts","hunks":["@@ -7,7 +7,8 @@ import {\n isRemoteConfig,\n isRemoteReauthError,\n isRemoteReauthFailure,\n- signInLabel\n+ signInLabel,\n+ sshFailureMessage\n } from './boot-failure-reauth'\n \n function config(overrides: Partial = {}): DesktopConnectionConfig {","@@ -21,6 +22,11 @@ function config(overrides: Partial = {}): DesktopConnec\n remoteTokenSet: [redacted:secret-assignment]\n remoteUrl: 'https://box:9119',\n cloudOrg: '',\n+ sshHost: '',\n+ sshUser: '',\n+ sshPort: null,\n+ sshKeyPath: '',\n+ sshRemoteHermesPath: '',\n ...overrides\n }\n }","@@ -31,8 +37,20 @@ describe('isRemoteConfig', () => {\n expect(isRemoteConfig(config({ mode: 'cloud', remoteOauthConnected: true }))).toBe(true)\n })\n \n- it('false for local, for a remote with no URL, and for nullish', () => {\n+ it('recognizes SSH as remote recovery without treating it as OAuth reauth', () => {\n+ const ssh = config({ mode: 'ssh' as never, remoteUrl: '', remoteAuthMode: 'token' }) as DesktopConnectionConfig & {\n+ sshHost: string\n+ }\n+\n+ ssh.sshHost = 'remote-box'\n+\n+ expect(isRemoteConfig(ssh)).toBe(true)\n+ expect(isRemoteReauthFailure(ssh, 'SSH authentication failed.')).toBe(false)\n+ })\n+\n+ it('false for local, incomplete SSH, a remote with no URL, and nullish', () => {\n expect(isRemoteConfig(config({ mode: 'local' }))).toBe(false)\n+ expect(isRemoteConfig(config({ mode: 'ssh' as never, remoteUrl: '' }))).toBe(false)\n expect(isRemoteConfig(config({ remoteUrl: '' }))).toBe(false)\n expect(isRemoteConfig(null)).toBe(false)\n })","@@ -93,6 +111,16 @@ describe('isRemoteReauthError', () => {\n })\n })\n \n+describe('sshFailureMessage', () => {\n+ it('localizes SSH failures without changing non-SSH errors', () => {\n+ const copy = { sshErrAuth: 'localized auth', sshErrUnknown: 'localized unknown' }\n+ const ssh = config({ mode: 'ssh', sshHost: 'box', remoteUrl: '' })\n+ expect(sshFailureMessage(ssh, 'SSH authentication failed', copy)).toBe('localized auth')\n+ expect(sshFailureMessage(ssh, 'unexpected failure', copy)).toBe('localized unknown')\n+ expect(sshFailureMessage(config(), 'raw remote error', copy)).toBe('raw remote error')\n+ })\n+})\n+\n describe('deriveProviderShape', () => {\n it('generic copy when there are no providers', () => {\n expect(deriveProviderShape([])).toEqual({ isPassword: [redacted:secret-assignment] providerLabel: 'your identity provider' })"]},{"file":"apps/desktop/src/components/boot-failure-reauth.ts","hunks":["@@ -31,7 +31,16 @@ const DEFAULT_SIGN_IN_COPY: SignInCopy = {\n // Gateway (edit URL / token / sign in) — the local Retry/Repair buttons target\n // the bundled backend and can't help. Drives the escape-hatch emphasis.\n export function isRemoteConfig(config: DesktopConnectionConfig | null | undefined): boolean {\n- return Boolean(config && (config.mode === 'remote' || config.mode === 'cloud') && config.remoteUrl)\n+ if (!config) {\n+ return false\n+ }\n+\n+ const ssh = config as DesktopConnectionConfig & { sshHost?: string }\n+\n+ return (\n+ ((config.mode === 'remote' || config.mode === 'cloud') && Boolean(config.remoteUrl)) ||\n+ ((config.mode as string) === 'ssh' && Boolean(ssh.sshHost))\n+ )\n }\n \n // True when a boot error is auth-shaped — the refresh token was rejected or the","@@ -55,6 +64,59 @@ export function isRemoteReauthError(error: string | null | undefined): boolean {\n // — see isRemoteReauthError). Only re-establishing the remote session fixes it;\n // the local Retry/Repair buttons can't. 'cloud' counts as remote (it resolves to\n // a remote oauth backend), so a lapsed cloud session is the same failure.\n+export function sshFailureMessage(\n+ config: DesktopConnectionConfig | null | undefined,\n+ error: string | null | undefined,\n+ copy: {\n+ sshErrAuth?: string\n+ sshErrHostKey?: string\n+ sshErrNotInstalled?: string\n+ sshErrPlatform?: string\n+ sshErrTimeout?: string\n+ sshErrUpdateRequired?: string\n+ sshErrUnreachable?: string\n+ sshErrUnknown?: string\n+ }\n+): string {\n+ const raw = String(error || '')\n+\n+ if (config?.mode !== 'ssh') {\n+ return raw\n+ }\n+\n+ const text = raw.toLowerCase()\n+\n+ if (text.includes('host key')) {\n+ return copy.sshErrHostKey || raw\n+ }\n+\n+ if (text.includes('auth')) {\n+ return copy.sshErrAuth || raw\n+ }\n+\n+ if (text.includes('not installed') || text.includes('not found')) {\n+ return copy.sshErrNotInstalled || raw\n+ }\n+\n+ if (text.includes('unsupported')) {\n+ return copy.sshErrPlatform || raw\n+ }\n+\n+ if (text.includes('timed out') || text.includes('timeout')) {\n+ return copy.sshErrTimeout || raw\n+ }\n+\n+ if (text.includes('update')) {\n+ return copy.sshErrUpdateRequired || raw\n+ }\n+\n+ if (text.includes('unreachable') || text.includes('could not reach')) {\n+ return copy.sshErrUnreachable || raw\n+ }\n+\n+ return copy.sshErrUnknown || raw\n+}\n+\n export function isRemoteReauthFailure(\n config: DesktopConnectionConfig | null | undefined,\n error?: string | null"]},{"file":"apps/desktop/src/global.d.ts","hunks":["@@ -60,6 +60,8 @@ declare global {\n saveConnectionConfig: (payload: DesktopConnectionConfigInput) => Promise\n applyConnectionConfig: (payload: DesktopConnectionConfigInput) => Promise\n testConnectionConfig: (payload: DesktopConnectionConfigInput) => Promise\n+ sshConfigHosts: () => Promise\n+ sshResolveHost: (host: string) => Promise\n probeConnectionConfig: (remoteUrl: string) => Promise\n oauthLoginConnectionConfig: (remoteUrl: string) => Promise\n oauthLogoutConnectionConfig: (remoteUrl?: string) => Promise","@@ -395,6 +397,10 @@ export interface HermesConnection {\n // (cloud-auto-discovery Q3/Q6), so this never carries 'cloud'.\n mode?: 'local' | 'remote'\n authMode?: 'oauth' | 'token'\n+ remoteHost?: string\n+ remoteIdentity?: string\n+ remoteKind?: 'cloud' | 'ssh' | 'url'\n+ remoteHermesVersion?: string\n nativeOverlayWidth: number\n source?: 'env' | 'local' | 'settings'\n token: string","@@ -430,7 +436,7 @@ export interface DesktopConnectionConfig {\n // remoteAuthMode 'oauth') but is remembered as cloud so settings reopens into\n // the cloud picker. Resolution treats cloud exactly as remote\n // (cloud-auto-discovery Q3/Q6).\n- mode: 'local' | 'remote' | 'cloud'\n+ mode: 'local' | 'remote' | 'cloud' | 'ssh'\n // The profile this config describes, or null for the global/default\n // connection. Per-profile entries let a profile point at its own backend.\n profile: null | string","@@ -443,10 +449,15 @@ export interface DesktopConnectionConfig {\n // connected instance was discovered under, so Settings → Gateway can reopen\n // into that org. Empty string for remote/local.\n cloudOrg: string\n+ sshHost: string\n+ sshUser: string\n+ sshPort: number | null\n+ sshKeyPath: string\n+ sshRemoteHermesPath: string\n }\n \n export interface DesktopConnectionConfigInput {\n- mode: 'local' | 'remote' | 'cloud'\n+ mode: 'local' | 'remote' | 'cloud' | 'ssh'\n // When set, the save/apply/test targets this profile's per-profile remote\n // override instead of the global connection.\n profile?: null | string","@@ -456,12 +467,44 @@ export interface DesktopConnectionConfigInput {\n // For a 'cloud' connection: the selected Hermes Cloud org (slug or id) to\n // persist so Settings can reopen into it. Ignored for remote/local modes.\n cloudOrg?: string\n+ sshHost?: string\n+ sshUser?: string\n+ sshPort?: number | null\n+ sshKeyPath?: string\n+ sshRemoteHermesPath?: string\n }\n \n export interface DesktopConnectionTestResult {\n- baseUrl: string\n- ok: boolean\n- version: string | null\n+ baseUrl?: string\n+ ok?: boolean\n+ version?: string | null\n+ reachable?: boolean\n+ sshError?:\n+ | 'auth-failed'\n+ | 'hermes-not-found'\n+ | 'host-key-changed'\n+ | 'timeout'\n+ | 'unreachable'\n+ | 'unsupported-platform'\n+ | 'update-required'\n+ | 'unknown'\n+ | null\n+ error?: string | null\n+ host?: string\n+ remoteHermesPath?: string\n+ remoteHermesVersion?: string\n+ remotePlatform?: string\n+}\n+\n+export interface DesktopSshResolveResult {\n+ hostname: string | null\n+ identityFile: string | null\n+ port: number | null\n+ user: string | null\n+}\n+\n+export interface DesktopSshHostsResult {\n+ hosts: string[]\n }\n \n export interface DesktopAuthProvider {"]},{"file":"apps/desktop/src/i18n/en.ts","hunks":["@@ -645,7 +645,44 @@ export const en: Translations = {\n signOutFailed: 'Sign-out failed',\n testFailed: 'Remote gateway test failed',\n applyFailed: 'Could not apply gateway settings',\n- saveFailed: 'Could not save gateway settings'\n+ saveFailed: 'Could not save gateway settings',\n+ sshTitle: 'Connect via SSH',\n+ sshDesc:\n+ 'Hermes is launched on the remote over SSH and tunneled to this app — nothing to start or expose yourself. Requires working key-based SSH access to the host.',\n+ sshTrustHint: 'The first presented host key is trusted and pinned; later changes fail closed.',\n+ sshHostTitle: 'Host',\n+ sshHostDesc: 'user@host, or a Host alias from ~/.ssh/config.',\n+ sshHostPick: 'Select a host…',\n+ sshHostPickTitle: 'Host',\n+ sshHostPickDesc: 'A Host alias from ~/.ssh/config, or Custom to type one.',\n+ sshHostCustom: 'Custom (enter manually)…',\n+ sshUserTitle: 'User',\n+ sshUserDesc: 'Blank = ~/.ssh/config or your current user.',\n+ sshUserPlaceholder: 'from ~/.ssh/config',\n+ sshPortTitle: 'Port',\n+ sshPortDesc: 'Blank = 22 or the ~/.ssh/config port.',\n+ sshKeyTitle: 'Identity file',\n+ sshKeyDesc: 'Private key path. Blank = ssh-agent or ~/.ssh/config.',\n+ sshHermesPathTitle: 'Hermes path (optional)',\n+ sshHermesPathDesc: 'Full path to the remote hermes binary. Blank = auto-detect.',\n+ sshHermesPathPlaceholder: 'auto-detect',\n+ sshTestConnection: 'Test SSH',\n+ sshConnect: 'Connect',\n+ sshButtonsHint: 'Save applies on the next launch. Connect reconnects now.',\n+ sshReachable: (host, platform) => `Reachable: ${host} (${platform}) — Hermes found`,\n+ sshIncompleteHost: 'Enter an SSH host before connecting.',\n+ sshErrUnreachable: 'Could not reach that host over SSH. Check the host, port, and your network.',\n+ sshErrAuth:\n+ 'SSH authentication failed. Load your key into the ssh-agent (ssh-add) or set an IdentityFile in ~/.ssh/config — Hermes runs ssh non-interactively.',\n+ sshErrHostKey:\n+ 'The host key has CHANGED since you last connected. Verify this is expected, then run ssh-keygen -R and reconnect.',\n+ sshErrNotInstalled:\n+ 'Hermes is not installed on the remote host. Install it there (curl -fsSL https://hermes-agent.nousresearch.com/install.sh | sh) or set the Hermes path.',\n+ sshErrPlatform:\n+ 'Unsupported remote platform. Hermes Desktop SSH mode supports Linux, macOS, and Windows remote hosts.',\n+ sshErrTimeout: 'SSH connection timed out. The host may be unreachable or asleep.',\n+ sshErrUpdateRequired: 'Update Hermes on the remote host before connecting with Desktop SSH.',\n+ sshErrUnknown: 'SSH connection failed.'\n },\n keys: {\n loading: 'Loading API keys and credentials...',","@@ -2169,6 +2206,12 @@ export const en: Translations = {\n desktopVersion: version => `Hermes Desktop v${version}`,\n backendVersion: version => `Backend v${version}`,\n clientLabel: version => `client v${version}`,\n+ connectionSsh: host => `SSH: ${host}`,\n+ connectionRemote: host => `Remote: ${host}`,\n+ connectionCloud: host => `Cloud: ${host}`,\n+ connectionCloudTooltip: host => `Connected to Hermes Cloud at ${host} · click to manage`,\n+ connectionSshTooltip: host => `Connected over SSH to ${host} · click to manage`,\n+ connectionRemoteTooltip: host => `Connected to remote backend ${host} · click to manage`,\n backendLabel: version => `backend v${version}`,\n commit: sha => `commit ${sha}`,\n branch: branch => `branch ${branch}`,"]},{"file":"apps/desktop/src/i18n/ja.ts","hunks":["@@ -717,7 +717,44 @@ export const ja = defineLocale({\n signOutFailed: 'サインアウトに失敗しました',\n testFailed: 'リモートゲートウェイのテストに失敗しました',\n applyFailed: 'ゲートウェイ設定を適用できませんでした',\n- saveFailed: 'ゲートウェイ設定を保存できませんでした'\n+ saveFailed: 'ゲートウェイ設定を保存できませんでした',\n+ sshTitle: 'SSH で接続',\n+ sshDesc:\n+ 'Hermes は SSH 経由でリモート上に起動され、このアプリにトンネルされます。リモート側で何かを起動・公開する必要はありません。ホストへの鍵ベースの SSH アクセスが前提です。',\n+ sshTrustHint: '初回に提示されたホスト鍵を信頼して固定し、以後の変更は拒否します。',\n+ sshHostTitle: 'ホスト',\n+ sshHostDesc: 'user@host、または ~/.ssh/config の Host エイリアス。',\n+ sshHostPick: 'ホストを選択…',\n+ sshHostPickTitle: 'ホスト',\n+ sshHostPickDesc: '~/.ssh/config の Host エイリアス、または「カスタム」で手入力。',\n+ sshHostCustom: 'カスタム（手入力）…',\n+ sshUserTitle: 'ユーザー',\n+ sshUserDesc: '空欄 = ~/.ssh/config または現在のユーザー。',\n+ sshUserPlaceholder: '~/.ssh/config から',\n+ sshPortTitle: 'ポート',\n+ sshPortDesc: '空欄 = 22 または ~/.ssh/config のポート。',\n+ sshKeyTitle: '鍵ファイル',\n+ sshKeyDesc: '秘密鍵のパス。空欄 = ssh-agent または ~/.ssh/config。',\n+ sshHermesPathTitle: 'Hermes パス（任意）',\n+ sshHermesPathDesc: 'リモートの hermes バイナリへのフルパス。空欄 = 自動検出。',\n+ sshHermesPathPlaceholder: '自動検出',\n+ sshTestConnection: 'SSH をテスト',\n+ sshConnect: '接続',\n+ sshButtonsHint: '「保存」は次回起動時に適用され、「接続」は今すぐ再接続します。',\n+ sshReachable: (host, platform) => `接続可能: ${host}（${platform}）— Hermes を検出`,\n+ sshIncompleteHost: '接続する前に SSH ホストを入力してください。',\n+ sshErrUnreachable: 'SSH でそのホストに到達できませんでした。ホスト、ポート、ネットワークを確認してください。',\n+ sshErrAuth:\n+ 'SSH 認証に失敗しました。鍵を ssh-agent に読み込む（ssh-add）か、~/.ssh/config に IdentityFile を設定してください。Hermes は非対話的に ssh を実行します。',\n+ sshErrHostKey:\n+ '前回の接続以降、ホスト鍵が変更されています。想定どおりか確認し、ssh-keygen -R を実行してから再接続してください。',\n+ sshErrNotInstalled:\n+ 'リモートホストに Hermes がインストールされていません。リモートでインストールする（curl -fsSL https://hermes-agent.nousresearch.com/install.sh | sh）か、Hermes パスを設定してください。',\n+ sshErrPlatform:\n+ 'サポートされていないリモートプラットフォームです。Hermes Desktop の SSH モードは Linux、macOS、Windows のリモートホストに対応しています。',\n+ sshErrTimeout: 'SSH 接続がタイムアウトしました。ホストが到達不能、またはスリープ中の可能性があります。',\n+ sshErrUpdateRequired: 'Desktop SSH で接続する前に、リモートホストの Hermes を更新してください。',\n+ sshErrUnknown: 'SSH 接続に失敗しました。'\n },\n keys: {\n loading: 'API キーと認証情報を読み込み中...',","@@ -2095,6 +2132,12 @@ export const ja = defineLocale({\n desktopVersion: version => `Hermes Desktop v${version}`,\n backendVersion: version => `バックエンド v${version}`,\n clientLabel: version => `クライアント v${version}`,\n+ connectionSsh: host => `SSH: ${host}`,\n+ connectionRemote: host => `リモート: ${host}`,\n+ connectionCloud: host => `クラウド: ${host}`,\n+ connectionCloudTooltip: host => `Hermes Cloud ${host} に接続中 · クリックして管理`,\n+ connectionSshTooltip: host => `SSH 経由で ${host} に接続中 · クリックして管理`,\n+ connectionRemoteTooltip: host => `リモートバックエンド ${host} に接続中 · クリックして管理`,\n backendLabel: version => `バックエンド v${version}`,\n commit: sha => `コミット ${sha}`,\n branch: branch => `ブランチ ${branch}`,"]},{"file":"apps/desktop/src/i18n/types.ts","hunks":["@@ -549,6 +549,38 @@ export interface Translations {\n testFailed: string\n applyFailed: string\n saveFailed: string\n+ sshTitle: string\n+ sshDesc: string\n+ sshTrustHint: string\n+ sshHostTitle: string\n+ sshHostDesc: string\n+ sshHostPick: string\n+ sshHostPickTitle: string\n+ sshHostPickDesc: string\n+ sshHostCustom: string\n+ sshUserTitle: string\n+ sshUserDesc: string\n+ sshUserPlaceholder: string\n+ sshPortTitle: string\n+ sshPortDesc: string\n+ sshKeyTitle: string\n+ sshKeyDesc: string\n+ sshHermesPathTitle: string\n+ sshHermesPathDesc: string\n+ sshHermesPathPlaceholder: string\n+ sshTestConnection: string\n+ sshConnect: string\n+ sshButtonsHint: string\n+ sshReachable: (host: string, platform: string) => string\n+ sshIncompleteHost: string\n+ sshErrUnreachable: string\n+ sshErrAuth: string\n+ sshErrHostKey: string\n+ sshErrNotInstalled: string\n+ sshErrPlatform: string\n+ sshErrTimeout: string\n+ sshErrUpdateRequired: string\n+ sshErrUnknown: string\n }\n keys: {\n loading: string","@@ -1797,6 +1829,12 @@ export interface Translations {\n desktopVersion: (version: string) => string\n backendVersion: (version: string) => string\n clientLabel: (version: string) => string\n+ connectionSsh: (host: string) => string\n+ connectionRemote: (host: string) => string\n+ connectionCloud: (host: string) => string\n+ connectionCloudTooltip: (host: string) => string\n+ connectionSshTooltip: (host: string) => string\n+ connectionRemoteTooltip: (host: string) => string\n backendLabel: (version: string) => string\n commit: (sha: string) => string\n branch: (branch: string) => string"]},{"file":"apps/desktop/src/i18n/zh-hant.ts","hunks":["@@ -696,7 +696,42 @@ export const zhHant = defineLocale({\n signOutFailed: '登出失敗',\n testFailed: '遠端閘道測試失敗',\n applyFailed: '無法套用閘道設定',\n- saveFailed: '無法儲存閘道設定'\n+ saveFailed: '無法儲存閘道設定',\n+ sshTitle: '透過 SSH 連線',\n+ sshDesc:\n+ 'Hermes 會透過 SSH 在遠端啟動並以通道連線到本應用程式——無需自行啟動或公開任何服務。前提：已具備到該主機的金鑰 SSH 存取。',\n+ sshTrustHint: '首次提供的主機金鑰會被信任並固定；後續變更將被拒絕。',\n+ sshHostTitle: '主機',\n+ sshHostDesc: 'user@host，或 ~/.ssh/config 中的 Host 別名。',\n+ sshHostPick: '選擇主機…',\n+ sshHostPickTitle: '主機',\n+ sshHostPickDesc: '~/.ssh/config 中的 Host 別名，或選擇「自訂」手動輸入。',\n+ sshHostCustom: '自訂（手動輸入）…',\n+ sshUserTitle: '使用者',\n+ sshUserDesc: '留空 = ~/.ssh/config 或目前使用者。',\n+ sshUserPlaceholder: '來自 ~/.ssh/config',\n+ sshPortTitle: '連接埠',\n+ sshPortDesc: '留空 = 22 或 ~/.ssh/config 中的連接埠。',\n+ sshKeyTitle: '金鑰檔案',\n+ sshKeyDesc: '私密金鑰路徑。留空 = ssh-agent 或 ~/.ssh/config。',\n+ sshHermesPathTitle: 'Hermes 路徑（選用）',\n+ sshHermesPathDesc: '遠端 hermes 執行檔的完整路徑。留空 = 自動偵測。',\n+ sshHermesPathPlaceholder: '自動偵測',\n+ sshTestConnection: '測試 SSH',\n+ sshConnect: '連線',\n+ sshButtonsHint: '「儲存」會在下次啟動時生效，「連線」則立即重新連線。',\n+ sshReachable: (host, platform) => `可連線：${host}（${platform}）——已找到 Hermes`,\n+ sshIncompleteHost: '連線前請輸入 SSH 主機。',\n+ sshErrUnreachable: '無法透過 SSH 連線到該主機。請檢查主機、連接埠和網路。',\n+ sshErrAuth:\n+ 'SSH 驗證失敗。請將金鑰載入 ssh-agent（ssh-add），或在 ~/.ssh/config 中設定 IdentityFile——Hermes 以非互動方式執行 ssh。',\n+ sshErrHostKey: '自上次連線以來主機金鑰已變更。請確認這是預期的，然後執行 ssh-keygen -R 並重新連線。',\n+ sshErrNotInstalled:\n+ '遠端主機上未安裝 Hermes。請在遠端安裝（curl -fsSL https://hermes-agent.nousresearch.com/install.sh | sh）或設定 Hermes 路徑。',\n+ sshErrPlatform: '不支援的遠端平台。Hermes Desktop 的 SSH 模式支援 Linux、macOS 和 Windows 遠端主機。',\n+ sshErrTimeout: 'SSH 連線逾時。主機可能無法存取或處於睡眠狀態。',\n+ sshErrUpdateRequired: '使用 Desktop SSH 連線前，請更新遠端主機上的 Hermes。',\n+ sshErrUnknown: 'SSH 連線失敗。'\n },\n keys: {\n loading: '正在載入 API 金鑰和憑證...',","@@ -2028,6 +2063,12 @@ export const zhHant = defineLocale({\n desktopVersion: version => `Hermes Desktop v${version}`,\n backendVersion: version => `後端 v${version}`,\n clientLabel: version => `用戶端 v${version}`,\n+ connectionSsh: host => `SSH: ${host}`,\n+ connectionRemote: host => `遠端: ${host}`,\n+ connectionCloud: host => `雲端: ${host}`,\n+ connectionCloudTooltip: host => `已連線到 Hermes Cloud ${host} · 點擊管理`,\n+ connectionSshTooltip: host => `已透過 SSH 連線到 ${host} · 點擊管理`,\n+ connectionRemoteTooltip: host => `已連線到遠端後端 ${host} · 點擊管理`,\n backendLabel: version => `後端 v${version}`,\n commit: sha => `提交 ${sha}`,\n branch: branch => `分支 ${branch}`,"]},{"file":"apps/desktop/src/i18n/zh.ts","hunks":["@@ -839,7 +839,42 @@ export const zh: Translations = {\n signOutFailed: '退出登录失败',\n testFailed: '远程网关测试失败',\n applyFailed: '无法应用网关设置',\n- saveFailed: '无法保存网关设置'\n+ saveFailed: '无法保存网关设置',\n+ sshTitle: '通过 SSH 连接',\n+ sshDesc:\n+ 'Hermes 会通过 SSH 在远程启动并以隧道连接到本应用——无需自行启动或暴露任何服务。前提：已具备到该主机的密钥 SSH 访问。',\n+ sshTrustHint: '首次提供的主机密钥会被信任并固定；后续变更将被拒绝。',\n+ sshHostTitle: '主机',\n+ sshHostDesc: 'user@host，或 ~/.ssh/config 中的 Host 别名。',\n+ sshHostPick: '选择主机…',\n+ sshHostPickTitle: '主机',\n+ sshHostPickDesc: '~/.ssh/config 中的 Host 别名，或选择\"自定义\"手动输入。',\n+ sshHostCustom: '自定义（手动输入）…',\n+ sshUserTitle: '用户',\n+ sshUserDesc: '留空 = ~/.ssh/config 或当前用户。',\n+ sshUserPlaceholder: '来自 ~/.ssh/config',\n+ sshPortTitle: '端口',\n+ sshPortDesc: '留空 = 22 或 ~/.ssh/config 中的端口。',\n+ sshKeyTitle: '密钥文件',\n+ sshKeyDesc: '私钥路径。留空 = ssh-agent 或 ~/.ssh/config。',\n+ sshHermesPathTitle: 'Hermes 路径（可选）',\n+ sshHermesPathDesc: '远程 hermes 可执行文件的完整路径。留空 = 自动检测。',\n+ sshHermesPathPlaceholder: '自动检测',\n+ sshTestConnection: '测试 SSH',\n+ sshConnect: '连接',\n+ sshButtonsHint: '“保存”将在下次启动时生效，“连接”则立即重新连接。',\n+ sshReachable: (host, platform) => `可连接：${host}（${platform}）——已找到 Hermes`,\n+ sshIncompleteHost: '连接前请输入 SSH 主机。',\n+ sshErrUnreachable: '无法通过 SSH 连接到该主机。请检查主机、端口和网络。',\n+ sshErrAuth:\n+ 'SSH 认证失败。请将密钥加载到 ssh-agent（ssh-add），或在 ~/.ssh/config 中设置 IdentityFile——Hermes 以非交互方式运行 ssh。',\n+ sshErrHostKey: '自上次连接以来主机密钥已更改。请确认这是预期的，然后运行 ssh-keygen -R 并重新连接。',\n+ sshErrNotInstalled:\n+ '远程主机上未安装 Hermes。请在远程安装（curl -fsSL https://hermes-agent.nousresearch.com/install.sh | sh）或设置 Hermes 路径。',\n+ sshErrPlatform: '不支持的远程平台。Hermes Desktop 的 SSH 模式支持 Linux、macOS 和 Windows 远程主机。',\n+ sshErrTimeout: 'SSH 连接超时。主机可能无法访问或处于休眠状态。',\n+ sshErrUpdateRequired: '使用 Desktop SSH 连接前，请更新远程主机上的 Hermes。',\n+ sshErrUnknown: 'SSH 连接失败。'\n },\n keys: {\n loading: '正在加载 API 密钥和凭据...',","@@ -2339,6 +2374,12 @@ export const zh: Translations = {\n desktopVersion: version => `Hermes Desktop v${version}`,\n backendVersion: version => `后端 v${version}`,\n clientLabel: version => `客户端 v${version}`,\n+ connectionSsh: host => `SSH: ${host}`,\n+ connectionRemote: host => `远程: ${host}`,\n+ connectionCloud: host => `云端: ${host}`,\n+ connectionCloudTooltip: host => `已连接到 Hermes Cloud ${host} · 点击管理`,\n+ connectionSshTooltip: host => `已通过 SSH 连接到 ${host} · 点击管理`,\n+ connectionRemoteTooltip: host => `已连接到远程后端 ${host} · 点击管理`,\n backendLabel: version => `后端 v${version}`,\n commit: sha => `提交 ${sha}`,\n branch: branch => `分支 ${branch}`,"]},{"file":"apps/desktop/src/lib/desktop-fs.test.ts","hunks":["@@ -5,6 +5,7 @@ import { $connection } from '@/store/session'\n import {\n desktopDefaultCwd,\n desktopFileDiff,\n+ desktopFsCacheKey,\n desktopGitRoot,\n readDesktopDir,\n readDesktopFileDataUrl,","@@ -122,6 +123,56 @@ describe('desktop filesystem facade', () => {\n expect(api).toHaveBeenCalledWith({ path: '/api/fs/default-cwd', profile: 'remote-docker' })\n })\n \n+ it('keys SSH filesystem caches by stable host identity instead of the forwarded port', () => {\n+ $connection.set({\n+ mode: 'remote',\n+ remoteKind: 'ssh',\n+ remoteHost: 'operator@remote-box',\n+ baseUrl: 'http://127.0.0.1:41001'\n+ } as never)\n+ const first = desktopFsCacheKey()\n+\n+ $connection.set({\n+ mode: 'remote',\n+ remoteKind: 'ssh',\n+ remoteHost: 'operator@remote-box',\n+ baseUrl: 'http://127.0.0.1:52002'\n+ } as never)\n+\n+ expect(desktopFsCacheKey()).toBe(first)\n+ expect(first).toContain('operator@remote-box')\n+ expect(first).not.toContain('41001')\n+ })\n+\n+ it('separates SSH filesystem caches by ownership and profile', () => {\n+ $connection.set({\n+ mode: 'remote',\n+ remoteKind: 'ssh',\n+ remoteHost: 'host-a',\n+ remoteIdentity: 'owner-a',\n+ profile: 'one'\n+ } as never)\n+ const first = desktopFsCacheKey()\n+ $connection.set({\n+ mode: 'remote',\n+ remoteKind: 'ssh',\n+ remoteHost: 'host-a',\n+ remoteIdentity: 'owner-b',\n+ profile: 'one'\n+ } as never)\n+ const otherOwner = desktopFsCacheKey()\n+ $connection.set({\n+ mode: 'remote',\n+ remoteKind: 'ssh',\n+ remoteHost: 'host-a',\n+ remoteIdentity: 'owner-a',\n+ profile: 'two'\n+ } as never)\n+\n+ expect(otherOwner).not.toBe(first)\n+ expect(desktopFsCacheKey()).not.toBe(first)\n+ })\n+\n it('routes file diffs through backend git in remote mode', async () => {\n $connection.set({ mode: 'remote' } as never)\n "]},{"file":"apps/desktop/src/lib/desktop-fs.ts","hunks":["@@ -21,7 +21,12 @@ function connectionCacheKey(connection: HermesConnection | null) {\n return 'local:'\n }\n \n- return `${connection.mode || 'local'}:${connection.profile || ''}:${connection.baseUrl || ''}`\n+ const target =\n+ connection.remoteKind === 'ssh'\n+ ? connection.remoteIdentity || connection.remoteHost || ''\n+ : connection.baseUrl || ''\n+\n+ return `${connection.mode || 'local'}:${connection.remoteKind || ''}:${connection.profile || ''}:${target}`\n }\n \n export function desktopFsCacheKey() {"]},{"file":"hermes_cli/main.py","hunks":["@@ -391,6 +391,7 @@ def _try_termux_ultrafast_version() -> bool:\n import argparse\n import hashlib\n import json\n+import re\n import shlex\n import shutil\n import stat","@@ -12500,8 +12501,97 @@ def _maybe_setup_dashboard_auth_interactively(args) -> None:\n print()\n \n \n+def _read_ssh_session_token_file(path: str) -> str:\n+ \"\"\"Read and unlink a Desktop SSH token from its private runtime directory.\"\"\"\n+ if sys.platform == \"win32\":\n+ from hermes_cli.windows_ssh_runtime import read_token\n+ return read_token(path)\n+\n+ import stat as _stat\n+ from pathlib import Path as _Path\n+ from hermes_constants import get_hermes_home as _get_hermes_home\n+\n+ if not os.path.isabs(path):\n+ raise SystemExit(\"--ssh-session-token-file must be absolute\")\n+\n+ token_path = [redacted:secret-assignment]\n+ token_root = [redacted:secret-assignment] / \"desktop-ssh\"\n+ try:\n+ relative = token_path.relative_to(token_root)\n+ except ValueError as exc:\n+ raise SystemExit(\"--ssh-session-token-file must be under the desktop-ssh directory\") from exc\n+ if len(relative.parts) != 2 or not re.fullmatch(r\"[0-9a-f]{32}\", relative.parts[0]):\n+ raise SystemExit(\"--ssh-session-token-file has an invalid runtime path\")\n+ if not re.fullmatch(r\"[0-9a-f]{16}\\.token\", relative.parts[1]):\n+ raise SystemExit(\"--ssh-session-token-file has an invalid filename\")\n+\n+ directory_flags = os.O_RDONLY | getattr(os, \"O_DIRECTORY\", 0) | getattr(os, \"O_NOFOLLOW\", 0)\n+ file_flags = os.O_RDONLY | getattr(os, \"O_NOFOLLOW\", 0)\n+ root_fd = -1\n+ directory_fd = -1\n+ file_fd = -1\n+ try:\n+ try:\n+ root_fd = os.open(token_root, directory_flags)\n+ root_stat = os.fstat(root_fd)\n+ if not _stat.S_ISDIR(root_stat.st_mode):\n+ raise SystemExit(\"--ssh-session-token-file has an unsafe runtime root\")\n+ if hasattr(os, \"getuid\") and root_stat.st_uid != os.getuid():\n+ raise SystemExit(\"--ssh-session-token-file runtime root has the wrong owner\")\n+ directory_fd = os.open(relative.parts[0], directory_flags, dir_fd=root_fd)\n+ directory_stat = os.fstat(directory_fd)\n+ if not _stat.S_ISDIR(directory_stat.st_mode):\n+ raise SystemExit(\"--ssh-session-token-file has an unsafe parent directory\")\n+ if hasattr(os, \"getuid\") and directory_stat.st_uid != os.getuid():\n+ raise SystemExit(\"--ssh-session-token-file parent has the wrong owner\")\n+ if (directory_stat.st_mode & 0o777) != 0o700:\n+ raise SystemExit(\"--ssh-session-token-file parent has unsafe permissions\")\n+ file_fd = os.open(relative.parts[1], file_flags, dir_fd=directory_fd)\n+ except SystemExit:\n+ raise\n+ except OSError as exc:\n+ if exc.errno == getattr(__import__(\"errno\"), \"ELOOP\", -1):\n+ raise SystemExit(\"--ssh-session-token-file is a symlink\") from exc\n+ raise SystemExit(\"--ssh-session-token-file is not accessible\") from exc\n+\n+ file_stat = os.fstat(file_fd)\n+ if not _stat.S_ISREG(file_stat.st_mode):\n+ raise SystemExit(\"--ssh-session-token-file is not a regular file\")\n+ if file_stat.st_size != 64:\n+ raise SystemExit(\"--ssh-session-token-file contains an invalid token\")\n+ if hasattr(os, \"getuid\") and file_stat.st_uid != os.getuid():\n+ raise SystemExit(\"--ssh-session-token-file has the wrong owner\")\n+ if hasattr(os, \"getuid\") and (file_stat.st_mode & 0o777) & ~0o600:\n+ raise SystemExit(\"--ssh-session-token-file has unsafe permissions\")\n+\n+ with os.fdopen(file_fd, \"r\") as token_stream:\n+ file_fd = -1\n+ token = [redacted:secret-assignment]\n+\n+ if not re.fullmatch(r\"[0-9a-f]{64}\", token):\n+ raise SystemExit(\"--ssh-session-token-file contains an invalid token\")\n+ return token\n+ finally:\n+ if file_fd >= 0:\n+ os.close(file_fd)\n+ if directory_fd >= 0:\n+ try:\n+ os.unlink(relative.parts[1], dir_fd=directory_fd)\n+ except OSError:\n+ pass\n+ os.close(directory_fd)\n+ if root_fd >= 0:\n+ os.close(root_fd)\n+\n+\n def cmd_dashboard(args):\n \"\"\"Start the web UI server, or (with --stop/--status) manage running ones.\"\"\"\n+ _token_file = [redacted:secret-assignment] \"ssh_session_token_file\", None)\n+ if _token_file and (\n+ getattr(args, \"status\", False) or getattr(args, \"stop\", False)\n+ ):\n+ raise SystemExit(\"--ssh-session-token-file cannot be used with --status or --stop\")\n+\n # --status: report running dashboards and exit, no deps needed.\n if getattr(args, \"status\", False):\n count = _report_dashboard_status()","@@ -12524,6 +12614,12 @@ def cmd_dashboard(args):\n # ready sentinel. Resolved once and threaded through the re-exec, the\n # build gate, and start_server.\n _headless_backend = getattr(args, \"headless_backend\", False)\n+ _ssh_owner_nonce = getattr(args, \"ssh_owner_nonce\", None)\n+ if _ssh_owner_nonce and not re.fullmatch(r\"[0-9a-f]{16}\", _ssh_owner_nonce):\n+ raise SystemExit(\"--ssh-owner-nonce must be 16 lowercase hex characters\")\n+ _ssh_session_token = None\n+ if _token_file and not _headless_backend:\n+ raise SystemExit(\"--ssh-session-token-file is only valid with hermes serve\")\n \n # ── Unified profile launch routing ────────────────────────────────\n # The dashboard is a MACHINE management surface: it can read/write any","@@ -12577,6 +12673,10 @@ def cmd_dashboard(args):\n \"--host\", args.host,\n \"--open-profile\", _launch_profile,\n ]\n+ if _ssh_owner_nonce:\n+ reexec_argv.extend([\"--ssh-owner-nonce\", _ssh_owner_nonce])\n+ if _token_file:\n+ reexec_argv.extend([\"--ssh-session-token-file\", _token_file])\n if args.no_open:\n reexec_argv.append(\"--no-open\")\n if getattr(args, \"insecure\", False):","@@ -12613,6 +12713,9 @@ def cmd_dashboard(args):\n else:\n os.execvpe(sys.executable, reexec_argv, env)\n \n+ if _token_file:\n+ _ssh_session_token = [redacted:secret-assignment]\n+\n # Attach gui.log early so dashboard startup/build failures are captured in\n # the same logs directory as every other Hermes surface.\n try:","@@ -12753,6 +12856,8 @@ def cmd_dashboard(args):\n allow_public=getattr(args, \"insecure\", False),\n initial_profile=getattr(args, \"open_profile\", \"\") or \"\",\n headless=_headless_backend,\n+ ssh_session_token=[redacted:secret-assignment]\n+ ssh_owner_nonce=_ssh_owner_nonce,\n )\n \n "]},{"file":"hermes_cli/subcommands/dashboard.py","hunks":["@@ -149,6 +149,20 @@ def build_dashboard_parser(\n serve_parser.add_argument(\n \"--no-open\", action=\"store_true\", help=argparse.SUPPRESS\n )\n+ serve_parser.add_argument(\n+ \"--ssh-session-token-file\",\n+ dest=\"ssh_session_token_file\",\n+ metavar=\"PATH\",\n+ default=None,\n+ help=\"Read a one-shot Desktop SSH session token from PATH\",\n+ )\n+ serve_parser.add_argument(\n+ \"--ssh-owner-nonce\",\n+ dest=\"ssh_owner_nonce\",\n+ metavar=\"NONCE\",\n+ default=None,\n+ help=\"Identify a Desktop-owned SSH backend process\",\n+ )\n # `headless_backend` marks the lean path: desktop/remote clients speak pure\n # JSON-RPC/WS, so `serve` skips the web UI build AND never serves the SPA\n # (cmd_dashboard exports HERMES_SERVE_HEADLESS=1). `dashboard` leaves it"]},{"file":"hermes_cli/web_server.py","hunks":["@@ -280,6 +280,18 @@ def _get_pty_active_session_files(app: \"FastAPI\") -> dict[str, Path]:\n # ---------------------------------------------------------------------------\n _SESSION_TOKEN = [redacted:secret-assignment]\"HERMES_DASHBOARD_SESSION_TOKEN\") or secrets.token_urlsafe(32)\n _SESSION_HEADER_NAME = \"X-Hermes-Session-Token\"\n+_SSH_OWNER_NONCE: Optional[str] = None\n+\n+\n+def _apply_ssh_session_token(token: str) -> None:\n+ global _SESSION_TOKEN\n+ if token:\n+ _SESSION_TOKEN = token\n+\n+\n+def _apply_ssh_owner_nonce(nonce: Optional[str]) -> None:\n+ global _SSH_OWNER_NONCE\n+ _SSH_OWNER_NONCE = nonce\n \n # In-browser Chat tab (/chat, /api/pty, /api/ws, …). Always enabled: the\n # desktop app and the dashboard's own Chat tab both drive the agent over the","@@ -2774,6 +2786,14 @@ def _collect_profile_gateway_topology() -> Dict[str, Any]:\n return {\"profiles\": profile_names, \"gateway_mode\": mode, \"gateways\": gateways}\n \n \n[redacted:email](\"/api/ssh/ownership\")\n+async def get_ssh_ownership(request: Request):\n+ _require_token(request)\n+ if not _SSH_OWNER_NONCE:\n+ raise HTTPException(status_code=404, detail=\"SSH ownership is not active\")\n+ return {\"ok\": True, \"sshOwnerNonce\": _SSH_OWNER_NONCE, \"protocolVersion\": 1}\n+\n+\n @app.get(\"/api/status\")\n async def get_status(profile: Optional[str] = None):\n status_scope = None","@@ -19145,6 +19165,8 @@ def start_server(\n allow_public: bool = False,\n initial_profile: str = \"\",\n headless: bool = False,\n+ ssh_session_token: [redacted:secret-assignment] = None,\n+ ssh_owner_nonce: Optional[str] = None,\n ):\n \"\"\"Start the web UI server.\n ","@@ -19156,7 +19178,13 @@ def start_server(\n ``headless`` is the ``serve`` path: the JSON-RPC/WS backend with no UI\n build and no SPA mount (mount_spa() honours ``HERMES_SERVE_HEADLESS``), so\n the banner announces the bind rather than a browser URL.\n+\n+ ``ssh_session_token`` and ``ssh_owner_nonce`` are process-local Desktop SSH\n+ bootstrap state. Neither is persisted or exported to child processes.\n \"\"\"\n+ _apply_ssh_session_token(ssh_session_token or \"\")\n+ _apply_ssh_owner_nonce(ssh_owner_nonce)\n+\n import uvicorn\n \n try:"]},{"file":"hermes_cli/windows_ssh_runtime.py","hunks":["@@ -0,0 +1,505 @@\n+\"\"\"Native Windows trust boundary for Desktop SSH backend lifecycle.\"\"\"\n+\n+from __future__ import annotations\n+\n+import argparse\n+import json\n+import os\n+import re\n+import subprocess\n+import sys\n+from pathlib import Path\n+from typing import Any\n+\n+from hermes_constants import get_hermes_home\n+\n+_HEX32 = re.compile(r\"[0-9a-f]{32}\\Z\")\n+_HEX16 = re.compile(r\"[0-9a-f]{16}\\Z\")\n+_HEX64 = re.compile(r\"[0-9a-f]{64}\\Z\")\n+_MAX_JSON = 1024 * 1024\n+_MAX_LOG = 512 * 1024\n+_OPEN_REPARSE_POINT = 0x00200000\n+_DELETE_ON_CLOSE = 0x04000000\n+_MOVE_REPLACE_EXISTING = 0x00000001\n+_MOVE_WRITE_THROUGH = 0x00000008\n+\n+\n+def _win32() -> tuple[Any, ...]:\n+ if sys.platform != \"win32\":\n+ raise RuntimeError(\"Windows SSH runtime is only available on Windows\")\n+ import ntsecuritycon\n+ import pywintypes\n+ import win32api\n+ import win32con\n+ import win32file\n+ import win32process\n+ import win32security\n+ return ntsecuritycon, pywintypes, win32api, win32con, win32file, win32process, win32security\n+\n+\n+def _ownership(value: str) -> str:\n+ if not _HEX32.fullmatch(value or \"\"):\n+ raise ValueError(\"invalid ownership ID\")\n+ return value\n+\n+\n+def _nonce(value: str) -> str:\n+ if not _HEX16.fullmatch(value or \"\"):\n+ raise ValueError(\"invalid spawn nonce\")\n+ return value\n+\n+\n+def _root() -> Path:\n+ return get_hermes_home() / \"desktop-ssh\"\n+\n+\n+def _directory(ownership_id: str) -> Path:\n+ return _root() / _ownership(ownership_id)\n+\n+\n+def _token_path(ownership_id: str, spawn_nonce: str) -> Path:\n+ return _directory(ownership_id) / f\"{_nonce(spawn_nonce)}.token\"\n+\n+\n+def _log_path(ownership_id: str, spawn_nonce: str) -> Path:\n+ return _directory(ownership_id) / f\"{_nonce(spawn_nonce)}.log\"\n+\n+\n+def _lock_path(ownership_id: str) -> Path:\n+ return _directory(ownership_id) / \"backend.lock.json\"\n+\n+\n+def _current_sid():\n+ _, _, win32api, win32con, _, _, win32security = _win32()\n+ token = [redacted:secret-assignment] win32con.TOKEN_QUERY)\n+ return win32security.GetTokenInformation(token, win32security.TokenUser)[0]\n+\n+\n+def _system_sid():\n+ return _win32()[6].ConvertStringSidToSid(\"S-1-5-18\")\n+\n+\n+def _security_attributes():\n+ ntsecuritycon, _, _, _, _, _, win32security = _win32()\n+ owner = _current_sid()\n+ acl = win32security.ACL()\n+ for sid in (owner, _system_sid()):\n+ acl.AddAccessAllowedAceEx(win32security.ACL_REVISION, 0, ntsecuritycon.FILE_ALL_ACCESS, sid)\n+ descriptor = win32security.SECURITY_DESCRIPTOR()\n+ descriptor.SetSecurityDescriptorOwner(owner, False)\n+ descriptor.SetSecurityDescriptorDacl(True, acl, False)\n+ # Protect the DACL so inheritable parent ACEs (%LOCALAPPDATA% grants) are not merged in.\n+ descriptor.SetSecurityDescriptorControl(win32security.SE_DACL_PROTECTED, win32security.SE_DACL_PROTECTED)\n+ attributes = win32security.SECURITY_ATTRIBUTES()\n+ attributes.SECURITY_DESCRIPTOR = descriptor\n+ return attributes\n+\n+\n+def _allowed_sids():\n+ win32security = _win32()[6]\n+ return {win32security.ConvertSidToStringSid(_current_sid()),\n+ win32security.ConvertSidToStringSid(_system_sid())}\n+\n+\n+def _verify_security(handle) -> None:\n+ _, _, _, _, _, _, win32security = _win32()\n+ info = win32security.OWNER_SECURITY_INFORMATION | win32security.DACL_SECURITY_INFORMATION\n+ descriptor = win32security.GetSecurityInfo(handle, win32security.SE_FILE_OBJECT, info)\n+ owner = descriptor.GetSecurityDescriptorOwner()\n+ owner_value = win32security.ConvertSidToStringSid(owner)\n+ if owner_value not in _allowed_sids():\n+ raise OSError(\"Windows SSH runtime object has the wrong owner\")\n+ dacl = descriptor.GetSecurityDescriptorDacl()\n+ if dacl is None:\n+ raise OSError(\"Windows SSH runtime object has a null DACL\")\n+ allowed = _allowed_sids()\n+ allow_types = {\n+ win32security.ACCESS_ALLOWED_ACE_TYPE,\n+ win32security.ACCESS_ALLOWED_OBJECT_ACE_TYPE,\n+ getattr(win32security, \"ACCESS_ALLOWED_CALLBACK_ACE_TYPE\", 9),\n+ getattr(win32security, \"ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE\", 11),\n+ }\n+ for index in range(dacl.GetAceCount()):\n+ ace = dacl.GetAce(index)\n+ ace_type = ace[0][0]\n+ mask = ace[1]\n+ sid = ace[-1]\n+ if ace_type in allow_types and mask:\n+ if win32security.ConvertSidToStringSid(sid) not in allowed:\n+ raise OSError(\"Windows SSH runtime object has a permissive DACL\")\n+\n+\n+def _open(path: Path, access: int, creation: int, flags: int, share: int = 0):\n+ _, _, _, _, win32file, _, _ = _win32()\n+ handle = win32file.CreateFile(str(path), access, share, _security_attributes(), creation, flags, None)\n+ try:\n+ actual = win32file.GetFinalPathNameByHandle(handle, 0)\n+ if actual.startswith(\"\\\\\\\\?\\\\\"):\n+ actual = actual[4:]\n+ expected = os.path.abspath(str(path))\n+ if os.path.normcase(actual) != os.path.normcase(expected):\n+ raise OSError(\"Windows SSH runtime handle escaped its expected path\")\n+ attributes = win32file.GetFileInformationByHandle(handle)[0]\n+ if attributes & 0x400:\n+ raise OSError(\"Windows SSH runtime path contains a reparse point\")\n+ _verify_security(handle)\n+ return handle\n+ except BaseException:\n+ win32file.CloseHandle(handle)\n+ raise\n+\n+\n+def _ensure_directory(path: Path) -> None:\n+ _, pywintypes, _, win32con, win32file, _, _ = _win32()\n+ if path.parent != path:\n+ _ensure_directory(path.parent) if path.parent not in (Path(path.anchor), path) and not path.parent.exists() else None\n+ if not path.exists():\n+ try:\n+ win32file.CreateDirectory(str(path), _security_attributes())\n+ except pywintypes.error as exc:\n+ if exc.winerror != 183:\n+ raise\n+ handle = _open(path, win32con.GENERIC_READ | win32con.READ_CONTROL, win32con.OPEN_EXISTING,\n+ win32con.FILE_FLAG_BACKUP_SEMANTICS | _OPEN_REPARSE_POINT,\n+ win32con.FILE_SHARE_READ | win32con.FILE_SHARE_WRITE | win32con.FILE_SHARE_DELETE)\n+ win32file.CloseHandle(handle)\n+\n+\n+def _ensure_scope(ownership_id: str) -> Path:\n+ root = _root()\n+ _ensure_directory(root)\n+ directory = _directory(ownership_id)\n+ _ensure_directory(directory)\n+ return directory\n+\n+\n+def upload_token(ownership_id: str, spawn_nonce: str, token: [redacted:secret-assignment] -> dict[str, Any]:\n+ _, _, _, win32con, win32file, _, _ = _win32()\n+ if len(token) != 64 or not _HEX64.fullmatch(token.decode(\"ascii\", errors=\"ignore\")):\n+ raise ValueError(\"invalid session token\")\n+ _ensure_scope(ownership_id)\n+ path = _token_path(ownership_id, spawn_nonce)\n+ try:\n+ handle = _open(path, win32con.GENERIC_WRITE | win32con.READ_CONTROL, win32con.CREATE_NEW,\n+ win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT)\n+ try:\n+ win32file.WriteFile(handle, token)\n+ win32file.FlushFileBuffers(handle)\n+ finally:\n+ win32file.CloseHandle(handle)\n+ except BaseException:\n+ path.unlink(missing_ok=True)\n+ raise\n+ return {\"path\": str(path)}\n+\n+\n+def read_token(path_value: str) -> str:\n+ _, _, _, win32con, win32file, _, _ = _win32()\n+ path = Path(path_value)\n+ root = _root()\n+ try:\n+ relative = path.relative_to(root)\n+ except ValueError as exc:\n+ raise SystemExit(\"--ssh-session-token-file must be under the desktop-ssh directory\") from exc\n+ if len(relative.parts) != 2 or not _HEX32.fullmatch(relative.parts[0]) or not re.fullmatch(r\"[0-9a-f]{16}\\.token\", relative.parts[1]):\n+ raise SystemExit(\"--ssh-session-token-file has an invalid runtime path\")\n+ flags = win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT | _DELETE_ON_CLOSE\n+ try:\n+ handle = _open(path, win32con.GENERIC_READ | win32con.READ_CONTROL | win32con.DELETE,\n+ win32con.OPEN_EXISTING, flags)\n+ except Exception as exc:\n+ raise SystemExit(\"--ssh-session-token-file is not accessible\") from exc\n+ try:\n+ _, data = win32file.ReadFile(handle, 65)\n+ finally:\n+ win32file.CloseHandle(handle)\n+ token = [redacted:secret-assignment]\"ascii\", errors=\"ignore\")\n+ if len(token) != 64 or not _HEX64.fullmatch(token):\n+ raise SystemExit(\"--ssh-session-token-file contains an invalid token\")\n+ return token\n+\n+\n+def _read_json_stdin() -> dict[str, Any]:\n+ raw = sys.stdin.buffer.read(_MAX_JSON + 1)\n+ if len(raw) > _MAX_JSON:\n+ raise ValueError(\"runtime payload is too large\")\n+ parsed = json.loads(raw)\n+ if not isinstance(parsed, dict):\n+ raise ValueError(\"runtime payload must be an object\")\n+ return parsed\n+\n+\n+def read_lock(ownership_id: str) -> dict[str, Any] | None:\n+ _, pywintypes, _, win32con, win32file, _, _ = _win32()\n+ _ensure_scope(ownership_id)\n+ path = _lock_path(ownership_id)\n+ try:\n+ handle = _open(path, win32con.GENERIC_READ | win32con.READ_CONTROL, win32con.OPEN_EXISTING,\n+ win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT,\n+ win32con.FILE_SHARE_READ)\n+ except pywintypes.error as exc:\n+ if exc.winerror in (2, 3):\n+ return None\n+ raise\n+ try:\n+ _, data = win32file.ReadFile(handle, _MAX_JSON + 1)\n+ finally:\n+ win32file.CloseHandle(handle)\n+ if len(data) > _MAX_JSON:\n+ return None\n+ try:\n+ parsed = json.loads(data)\n+ except (UnicodeDecodeError, json.JSONDecodeError):\n+ return None\n+ return parsed if isinstance(parsed, dict) else None\n+\n+\n+def write_lock(ownership_id: str, payload: dict[str, Any]) -> None:\n+ _, _, _, win32con, win32file, _, _ = _win32()\n+ directory = _ensure_scope(ownership_id)\n+ data = json.dumps(payload, separators=(\",\", \":\")).encode()\n+ if len(data) > _MAX_JSON:\n+ raise ValueError(\"lock payload is too large\")\n+ temporary = directory / f\".{os.urandom(8).hex()}.lock.tmp\"\n+ handle = _open(temporary, win32con.GENERIC_WRITE | win32con.READ_CONTROL, win32con.CREATE_NEW,\n+ win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT)\n+ try:\n+ win32file.WriteFile(handle, data)\n+ win32file.FlushFileBuffers(handle)\n+ finally:\n+ win32file.CloseHandle(handle)\n+ win32file.MoveFileEx(str(temporary), str(_lock_path(ownership_id)),\n+ _MOVE_REPLACE_EXISTING | _MOVE_WRITE_THROUGH)\n+\n+\n+def remove_artifact(path: Path) -> bool:\n+ _, pywintypes, _, win32con, win32file, _, _ = _win32()\n+ try:\n+ handle = _open(path, win32con.DELETE | win32con.READ_CONTROL, win32con.OPEN_EXISTING,\n+ win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT | _DELETE_ON_CLOSE)\n+ except pywintypes.error as exc:\n+ if exc.winerror in (2, 3):\n+ return False\n+ raise\n+ win32file.CloseHandle(handle)\n+ return True\n+\n+\n+def process_state(pid: int, creation_time_ns: int, hermes_path: str, spawn_nonce: str) -> dict[str, Any]:\n+ import psutil\n+ _nonce(spawn_nonce)\n+ try:\n+ process = psutil.Process(pid)\n+ except psutil.NoSuchProcess as exc:\n+ return {\"alive\": False, \"owned\": False, \"indeterminate\": False, \"reason\": type(exc).__name__}\n+ try:\n+ actual_creation = int(process.create_time() * 1_000_000_000)\n+ argv = process.cmdline()\n+ except psutil.NoSuchProcess as exc:\n+ return {\"alive\": False, \"owned\": False, \"indeterminate\": False, \"reason\": type(exc).__name__}\n+ except psutil.AccessDenied as exc:\n+ return {\"alive\": True, \"owned\": False, \"indeterminate\": True, \"reason\": type(exc).__name__}\n+ if actual_creation != creation_time_ns:\n+ return {\"alive\": False, \"owned\": False, \"indeterminate\": False, \"reason\": \"creation-time\",\n+ \"actualCreationTimeNs\": str(actual_creation), \"expectedCreationTimeNs\": str(creation_time_ns)}\n+ if not argv:\n+ return {\"alive\": True, \"owned\": False, \"indeterminate\": True, \"reason\": \"argv-unavailable\"}\n+ expected = os.path.normcase(os.path.abspath(hermes_path))\n+ arg0 = os.path.normcase(os.path.abspath(argv[0]))\n+ # argv[0] is either the hermes exe directly, or (normal case) the base Python\n+ # interpreter -- its exact path varies by venv/uv layout, so match on \"a python\n+ # running our module\". We launch via `-c` bootstrap, so it shows as\n+ # `-c `; also accept a plain `-m` launch.\n+ # Identity is anchored by the unforgeable creation-time + secret owner-nonce below.\n+ is_python = os.path.basename(arg0).startswith(\"python\")\n+ launches_module = (\n+ argv[1:3] == [\"-m\", \"hermes_cli.main\"]\n+ or (len(argv) > 2 and argv[1] == \"-c\" and \"hermes_cli.main\" in argv[2])\n+ )\n+ executable_match = arg0 == expected or (is_python and launches_module)\n+ try:\n+ serve = argv.index(\"serve\")\n+ owner = argv.index(\"--ssh-owner-nonce\", serve + 1)\n+ owned = executable_match and \"--isolated\" in argv[serve + 1:] and argv[owner + 1] == spawn_nonce\n+ except (ValueError, IndexError):\n+ owned = False\n+ return {\"alive\": process.is_running(), \"owned\": owned, \"indeterminate\": False,\n+ \"creationTimeNs\": str(actual_creation), \"reason\": \"owned\" if owned else \"argv\",\n+ \"argv\": argv[:20], \"expectedExecutable\": expected}\n+\n+\n+def terminate_owned(pid: int, creation_time_ns: int, hermes_path: str, spawn_nonce: str) -> bool:\n+ state = process_state(pid, creation_time_ns, hermes_path, spawn_nonce)\n+ if not state[\"alive\"] or not state[\"owned\"]:\n+ return False\n+ import psutil\n+ process = psutil.Process(pid)\n+ if int(process.create_time() * 1_000_000_000) != creation_time_ns:\n+ return False\n+ process.terminate()\n+ try:\n+ process.wait(5)\n+ except psutil.TimeoutExpired:\n+ process.kill()\n+ process.wait(5)\n+ return True\n+\n+\n+def _resolve_direct_interpreter(python_entry: str) -> tuple[str, list[str]]:\n+ \"\"\"Resolve the venv launcher to the base interpreter it would exec, plus the\n+ sys.path to reproduce. On Windows a venv Scripts\\\\python.exe is a launcher stub\n+ that spawns the real interpreter as a CHILD (two PIDs); spawning the base\n+ interpreter directly with the launcher's sys.path injected yields ONE process\n+ that both owns the port and is the process we lock.\n+\n+ Also resolves hermes_cli's own location and prepends its parent, because the\n+ launcher finds the module via cwd / an editable-install path hook that a bare\n+ PYTHONPATH does not reproduce.\"\"\"\n+ query = (\n+ \"import sys,json,os,importlib.util as u;\"\n+ \"s=u.find_spec('hermes_cli');\"\n+ \"root=os.path.dirname(os.path.dirname(s.origin)) if s and s.origin else '';\"\n+ \"print(json.dumps({'base':getattr(sys,'_base_executable','') or sys.executable,\"\n+ \"'path':[p for p in sys.path if p],'root':root}))\"\n+ )\n+ out = subprocess.run([python_entry, \"-c\", query], capture_output=True, text=True, timeout=30)\n+ if out.returncode != 0:\n+ raise ValueError(\"could not resolve the base Python interpreter\")\n+ info = json.loads(out.stdout.strip().splitlines()[-1])\n+ base = info[\"base\"]\n+ if not base or not os.path.isfile(base):\n+ raise ValueError(\"base Python interpreter was not found\")\n+ # drop editable-install finder markers ('__editable__.*.finder.__path_hook__')\n+ # that PYTHONPATH cannot reproduce; keep only real filesystem entries.\n+ py_path = [p for p in info.get(\"path\", []) if os.path.exists(p)]\n+ # the hermes_cli package parent must be explicit -- the launcher resolves it via\n+ # cwd or an editable path hook, neither of which survives a bare PYTHONPATH spawn.\n+ root = info.get(\"root\") or \"\"\n+ if root and os.path.isdir(root) and root not in py_path:\n+ py_path.insert(0, root)\n+ if not root or not os.path.isdir(root):\n+ raise ValueError(\"could not locate the hermes_cli package\")\n+ return base, py_path\n+\n+\n+def spawn_backend(payload: dict[str, Any]) -> dict[str, Any]:\n+ ownership_id = _ownership(str(payload[\"ownershipId\"]))\n+ spawn_nonce = _nonce(str(payload[\"spawnNonce\"]))\n+ configured_path = str(payload[\"hermesPath\"])\n+ if not os.path.isabs(configured_path):\n+ raise ValueError(\"Hermes path must be absolute\")\n+ hermes_path = os.path.abspath(configured_path)\n+ token_path = [redacted:secret-assignment] spawn_nonce))\n+ log_path = _log_path(ownership_id, spawn_nonce)\n+ profile = str(payload.get(\"profile\") or \"\")\n+ if len(profile) > 256 or any(ch in profile for ch in \"\\x00\\r\\n\"):\n+ raise ValueError(\"invalid profile\")\n+ venv_dir = os.path.dirname(hermes_path)\n+ python_entry = os.path.join(venv_dir, \"python.exe\")\n+ if not os.path.isfile(python_entry):\n+ raise ValueError(\"Hermes Python runtime was not found\")\n+ base_python, sys_path = _resolve_direct_interpreter(python_entry)\n+ # Seed sys.path IN-PROCESS via a -c bootstrap rather than exporting PYTHONPATH:\n+ # PYTHONPATH would be inherited by every subprocess the running backend spawns\n+ # (terminal tool, user scripts), shadowing their imports. This keeps the path\n+ # scoped to the backend process alone.\n+ bootstrap = (\n+ \"import sys,runpy;\"\n+ f\"sys.path[:0]={sys_path!r};\"\n+ \"runpy.run_module('hermes_cli.main',run_name='__main__',alter_sys=True)\"\n+ )\n+ args = [base_python, \"-c\", bootstrap]\n+ if profile:\n+ args.extend([\"--profile\", profile])\n+ args.extend([\"serve\", \"--isolated\", \"--host\", \"127.0.0.1\", \"--port\", \"0\",\n+ \"--ssh-session-token-file\", token_path, \"--ssh-owner-nonce\", spawn_nonce])\n+ # VIRTUAL_ENV preserves venv identity; PYTHONPATH is deliberately NOT set (see above).\n+ env = dict(os.environ)\n+ env[\"VIRTUAL_ENV\"] = os.path.dirname(venv_dir)\n+ env.pop(\"PYTHONPATH\", None)\n+ _ensure_scope(ownership_id)\n+ creationflags = 0x00000008 | 0x00000200 | 0x01000000\n+ _, _, _, win32con, win32file, _, _ = _win32()\n+ log_handle = _open(log_path, win32con.GENERIC_WRITE | win32con.READ_CONTROL,\n+ win32con.CREATE_NEW, win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT,\n+ win32con.FILE_SHARE_READ | win32con.FILE_SHARE_WRITE)\n+ import msvcrt\n+ log_fd = msvcrt.open_osfhandle(int(log_handle), os.O_WRONLY)\n+ with os.fdopen(log_fd, \"wb\", buffering=0) as log_stream:\n+ process = subprocess.Popen(args, stdin=subprocess.DEVNULL, stdout=log_stream, stderr=log_stream,\n+ close_fds=True, creationflags=creationflags, env=env)\n+ creation_time_ns = int(__import__(\"psutil\").Process(process.pid).create_time() * 1_000_000_000)\n+ return {\"pid\": process.pid, \"creationTimeNs\": str(creation_time_ns),\n+ \"logPath\": str(log_path), \"tokenPath\": token_path}\n+\n+\n+def inspect_hermes(hermes_path: str) -> dict[str, Any]:\n+ path = os.path.abspath(hermes_path)\n+ if not os.path.isabs(hermes_path) or not os.path.isfile(path):\n+ raise ValueError(\"Hermes path is not an executable file\")\n+ version = subprocess.run([path, \"--version\"], capture_output=True, text=True, timeout=20)\n+ help_result = subprocess.run([path, \"serve\", \"--help\"], capture_output=True, text=True, timeout=20)\n+ help_text = help_result.stdout + help_result.stderr\n+ return {\n+ \"path\": path,\n+ \"version\": (version.stdout + version.stderr).splitlines()[0] if version.returncode == 0 else \"\",\n+ \"supported\": \"--ssh-session-token-file\" in help_text and \"--ssh-owner-nonce\" in help_text,\n+ }\n+\n+\n+def dispatch(argv: list[str]) -> Any:\n+ if not argv:\n+ raise ValueError(\"missing operation\")\n+ operation = argv[0]\n+ if operation == \"probe\":\n+ import platform\n+ return {\"os\": \"Windows\", \"arch\": platform.machine(), \"hermesHome\": str(get_hermes_home()), \"python\": sys.executable}\n+ if operation == \"upload-token\" and len(argv) == 3:\n+ return upload_token(argv[1], argv[2], sys.stdin.buffer.read(65))\n+ if operation == \"read-lock\" and len(argv) == 2:\n+ return read_lock(argv[1])\n+ if operation == \"write-lock\" and len(argv) == 2:\n+ write_lock(argv[1], _read_json_stdin()); return {\"ok\": True}\n+ if operation == \"remove-lock\" and len(argv) == 2:\n+ return {\"removed\": remove_artifact(_lock_path(argv[1]))}\n+ if operation == \"remove-token\" and len(argv) == 3:\n+ return {\"removed\": remove_artifact(_token_path(argv[1], argv[2]))}\n+ if operation == \"read-log\" and len(argv) == 3:\n+ path = _log_path(argv[1], argv[2])\n+ _, pywintypes, _, win32con, win32file, _, _ = _win32()\n+ try:\n+ handle = _open(path, win32con.GENERIC_READ | win32con.READ_CONTROL,\n+ win32con.OPEN_EXISTING, win32con.FILE_ATTRIBUTE_NORMAL | _OPEN_REPARSE_POINT,\n+ win32con.FILE_SHARE_READ | win32con.FILE_SHARE_WRITE)\n+ except pywintypes.error as exc:\n+ if exc.winerror in (2, 3):\n+ return {\"content\": \"\"}\n+ raise\n+ try:\n+ _, data = win32file.ReadFile(handle, _MAX_LOG)\n+ finally:\n+ win32file.CloseHandle(handle)\n+ return {\"content\": data.decode(errors=\"replace\")}\n+ if operation == \"remove-log\" and len(argv) == 3:\n+ return {\"removed\": remove_artifact(_log_path(argv[1], argv[2]))}\n+ if operation == \"spawn\":\n+ return spawn_backend(_read_json_stdin())\n+ if operation == \"inspect\" and len(argv) == 2:\n+ return inspect_hermes(argv[1])\n+ if operation == \"process-state\" and len(argv) == 5:\n+ return process_state(int(argv[1]), int(argv[2]), argv[3], argv[4])\n+ if operation == \"terminate\" and len(argv) == 5:\n+ return {\"terminated\": terminate_owned(int(argv[1]), int(argv[2]), argv[3], argv[4])}\n+ raise ValueError(\"invalid operation\")\n+\n+\n+def main() -> None:\n+ try:\n+ print(json.dumps(dispatch(sys.argv[1:]), separators=(\",\", \":\")))\n+ except Exception as exc:\n+ print(json.dumps({\"error\": str(exc)}, separators=(\",\", \":\")), file=sys.stderr)\n+ raise SystemExit(1)\n+\n+\n+if __name__ == \"__main__\":\n+ main()"]},{"file":"pyproject.toml","hunks":["@@ -116,6 +116,10 @@ dependencies = [\n \"python-multipart>=0.0.9,<1\",\n \"ptyprocess>=0.7.0,<1; sys_platform != 'win32'\",\n \"pywinpty>=2.0.0,<3; sys_platform == 'win32'\",\n+ # Desktop SSH's Windows remote runtime (hermes_cli/windows_ssh_runtime.py)\n+ # imports win32security/win32file/etc. directly — declare pywin32 rather than\n+ # relying on the concurrent-log-handler → portalocker transitive chain.\n+ \"pywin32>=306,<312; sys_platform == 'win32'\",\n # Image resize recovery for the vision tools. Pillow shrinks oversized images\n # (>5 MB or >8000px) at embed time; without it the byte AND pixel-dimension\n # shrink paths no-op, so an oversized image bakes into immutable history and"]},{"file":"tests/hermes_cli/test_ssh_ownership_endpoint.py","hunks":["@@ -0,0 +1,38 @@\n+from fastapi.testclient import TestClient\n+\n+from hermes_cli import web_server\n+\n+\n+def test_ssh_ownership_endpoint_requires_token_and_returns_exact_nonce(monkeypatch):\n+ token = \"t\" * 64\n+ nonce = \"0123456789abcdef\"\n+ monkeypatch.setattr(web_server, \"_SESSION_TOKEN\", token)\n+ monkeypatch.setattr(web_server, \"_SSH_OWNER_NONCE\", nonce)\n+ web_server.app.state.auth_required = False\n+ client = TestClient(web_server.app)\n+\n+ assert client.get(\"/api/ssh/ownership\").status_code == 401\n+ response = client.get(\n+ \"/api/ssh/ownership\",\n+ headers={\"X-Hermes-Session-Token\": token},\n+ )\n+ assert response.status_code == 200\n+ assert response.json() == {\n+ \"ok\": True,\n+ \"sshOwnerNonce\": nonce,\n+ \"protocolVersion\": 1,\n+ }\n+\n+\n+def test_ssh_ownership_endpoint_is_absent_without_owner_nonce(monkeypatch):\n+ token = \"t\" * 64\n+ monkeypatch.setattr(web_server, \"_SESSION_TOKEN\", token)\n+ monkeypatch.setattr(web_server, \"_SSH_OWNER_NONCE\", None)\n+ web_server.app.state.auth_required = False\n+ client = TestClient(web_server.app)\n+\n+ response = client.get(\n+ \"/api/ssh/ownership\",\n+ headers={\"X-Hermes-Session-Token\": token},\n+ )\n+ assert response.status_code == 404"]},{"file":"tests/hermes_cli/test_ssh_session_token_parser.py","hunks":["@@ -0,0 +1,94 @@\n+import argparse\n+import os\n+\n+import pytest\n+from hermes_constants import set_hermes_home_override, reset_hermes_home_override\n+\n+from hermes_cli.main import _read_ssh_session_token_file, cmd_dashboard\n+from hermes_cli.subcommands.dashboard import build_dashboard_parser\n+\n+\n+def dashboard_parser():\n+ parser = argparse.ArgumentParser()\n+ subparsers = parser.add_subparsers(dest=\"command\")\n+ build_dashboard_parser(\n+ subparsers,\n+ cmd_dashboard=lambda _args: None,\n+ cmd_dashboard_register=lambda _args: None,\n+ )\n+ return parser\n+\n+\n+def test_serve_help_advertises_secure_ssh_bootstrap_flags(capsys):\n+ with pytest.raises(SystemExit) as exit_info:\n+ dashboard_parser().parse_args([\"serve\", \"--help\"])\n+ assert exit_info.value.code == 0\n+ output = capsys.readouterr().out\n+ assert \"--ssh-session-token-file PATH\" in output\n+ assert \"--ssh-owner-nonce NONCE\" in output\n+\n+\n+def test_serve_accepts_owner_nonce():\n+ args = dashboard_parser().parse_args([\"serve\", \"--ssh-owner-nonce\", \"0123456789abcdef\"])\n+ assert args.ssh_owner_nonce == \"0123456789abcdef\"\n+\n+\n[redacted:email](\"operation\", [\"--status\", \"--stop\"])\n+def test_one_shot_token_file_rejects_non_starting_operations(operation):\n+ args = dashboard_parser().parse_args([\n+ \"serve\", operation, \"--ssh-session-token-file\", \"/tmp/token\",\n+ ])\n+ with pytest.raises(SystemExit, match=\"cannot be used\"):\n+ cmd_dashboard(args)\n+\n+\n+def test_token_file_is_read_and_unlinked_through_private_directory(tmp_path, monkeypatch):\n+ home = tmp_path / \"home\"\n+ hermes_home = home / \".hermes\"\n+ token_dir = [redacted:secret-assignment] / \"desktop-ssh\" / (\"a\" * 32)\n+ token_dir.mkdir(parents=True, mode=0o700)\n+ token_path = [redacted:secret-assignment] / \"0123456789abcdef.token\"\n+ token_path.write_text(\"b\" * 64)\n+ token_path.chmod(0o600)\n+ override = set_hermes_home_override(hermes_home)\n+ try:\n+ assert _read_ssh_session_token_file(str(token_path)) == \"b\" * 64\n+ assert not token_path.exists()\n+ finally:\n+ reset_hermes_home_override(override)\n+\n+\n[redacted:email](os.name == \"nt\", reason=\"POSIX symlink contract\")\n+def test_token_file_rejects_symlink(tmp_path, monkeypatch):\n+ home = tmp_path / \"home\"\n+ token_dir = home / \".hermes\" / \"desktop-ssh\" / (\"a\" * 32)\n+ token_dir.mkdir(parents=True, mode=0o700)\n+ target = tmp_path / \"token\"\n+ target.write_text(\"b\" * 64)\n+ target.chmod(0o600)\n+ token_path = [redacted:secret-assignment] / \"0123456789abcdef.token\"\n+ token_path.symlink_to(target)\n+ override = set_hermes_home_override(home / \".hermes\")\n+ try:\n+ with pytest.raises(SystemExit, match=\"symlink|not accessible\"):\n+ _read_ssh_session_token_file(str(token_path))\n+ assert not token_path.exists()\n+ assert target.read_text() == \"b\" * 64\n+ finally:\n+ reset_hermes_home_override(override)\n+\n+\n+def test_token_file_rejects_parent_escape(tmp_path, monkeypatch):\n+ home = tmp_path / \"home\"\n+ token_root = home / \".hermes\" / \"desktop-ssh\"\n+ token_root.mkdir(parents=True, mode=0o700)\n+ escaped = token_root.parent / \"0123456789abcdef.token\"\n+ escaped.write_text(\"b\" * 64)\n+ escaped.chmod(0o600)\n+ override = set_hermes_home_override(home / \".hermes\")\n+ try:\n+ with pytest.raises(SystemExit, match=\"invalid runtime path\"):\n+ _read_ssh_session_token_file(str(token_root / \"..\" / escaped.name))\n+ assert escaped.exists()\n+ finally:\n+ reset_hermes_home_override(override)"]},{"file":"tests/test_web_server.py","hunks":["@@ -69,6 +69,22 @@ async def shutdown(self, sockets=None):\n return captured\n \n \n+def test_start_server_applies_process_local_ssh_bootstrap_state(monkeypatch):\n+ captured = _stub_uvicorn(monkeypatch)\n+\n+ web_server.start_server(\n+ host=\"127.0.0.1\",\n+ port=0,\n+ open_browser=False,\n+ ssh_session_token=\"s\" * 64,\n+ ssh_owner_nonce=\"0123456789abcdef\",\n+ )\n+\n+ assert web_server._SESSION_TOKEN == \"s\" * 64\n+ assert web_server._SSH_OWNER_NONCE == \"0123456789abcdef\"\n+ assert captured[\"port\"] == 0\n+\n+\n def test_start_server_disables_ws_ping_on_loopback(monkeypatch):\n \"\"\"Loopback binds (the Desktop case) MUST disable uvicorn's protocol-level\n keepalive ping so an event-loop stall can never trigger a false disconnect."]},{"file":"uv.lock","hunks":["@@ -1539,6 +1539,7 @@ dependencies = [\n { name = \"pyjwt\", extra = [\"crypto\"] },\n { name = \"python-dotenv\" },\n { name = \"python-multipart\" },\n+ { name = \"pywin32\", marker = \"sys_platform == 'win32'\" },\n { name = \"pywinpty\", marker = \"sys_platform == 'win32'\" },\n { name = \"pyyaml\" },\n { name = \"requests\" },","@@ -1823,6 +1824,7 @@ requires-dist = [\n { name = \"python-multipart\", marker = \"extra == 'web'\", specifier = \"==0.0.27\" },\n { name = \"python-telegram-bot\", extras = [\"webhooks\"], marker = \"extra == 'messaging'\", specifier = \"==22.6\" },\n { name = \"python-telegram-bot\", extras = [\"webhooks\"], marker = \"extra == 'termux'\", specifier = \"==22.6\" },\n+ { name = \"pywin32\", marker = \"sys_platform == 'win32'\", specifier = \">=306,<312\" },\n { name = \"pywinpty\", marker = \"sys_platform == 'win32'\", specifier = \">=2.0.0,<3\" },\n { name = \"pyyaml\", specifier = \"==6.0.3\" },\n { name = \"qrcode\", marker = \"extra == 'dingtalk'\", specifier = \"==7.4.2\" },\n"]}]},{"kind":"pr","number":68276,"title":"fix(desktop): load disk plugins from local Hermes home","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"eaecca4a71","number":0},{"kind":"pr","value":"#73926","number":73926},{"kind":"pr","value":"#66911","number":66911},{"kind":"pr","value":"#66152","number":66152}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":73926,"title":"fix(desktop): resolve local plugin root independent of remote backend (#66899)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["apps/desktop/electron/main.ts","apps/desktop/electron/preload.ts","apps/desktop/src/app/settings/plugins-settings.tsx","apps/desktop/src/contrib/runtime-loader.test.ts","apps/desktop/src/contrib/runtime-loader.ts","apps/desktop/src/global.d.ts"]}],"trust":{"default_tier":"verified","includes_suggested":false}}