Cyprian Kowalczyk 011034dc71 feat: optional HTTPS/TLS support via cert and key env vars (#199) ... Add optional HTTPS support controlled by two env vars: HERMES_WEBUI_TLS_CERT=/path/to/cert.pem HERMES_WEBUI_TLS_KEY=/path/to/key.pem - Wraps server socket with ssl.SSLContext (min TLSv1.2) - Dynamic scheme detection for startup messages (http:// vs https://) - Graceful fallback to HTTP if cert loading fails — server never crashes due to bad TLS config, just prints a warning and continues - Auth cookie Secure flag already set when HTTPS is detected via getpeercert - 6 end-to-end tests: config flags, HTTPS handshake, HTTP still works, fallback on bad paths Addresses #191 (HTTPS support issue).		2026-04-09 18:08:29 -07:00
..
__init__.py	Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish	2026-03-31 07:02:47 +00:00
auth.py	fix(auth): prune expired sessions on every verify to prevent memory leak (#196)	2026-04-09 18:05:23 -07:00
config.py	feat: optional HTTPS/TLS support via cert and key env vars (#199)	2026-04-09 18:08:29 -07:00
helpers.py	fix: add Content-Security-Policy and Permissions-Policy headers (#197)	2026-04-09 18:07:07 -07:00
models.py	release: v0.39.0 — security hardening, 12 fixes (#171)	2026-04-07 22:26:03 -07:00
profiles.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00
routes.py	fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)	2026-04-08 20:16:22 -07:00
state_sync.py	fix: sync message_count to state.db for /insights (#163) (#164)	2026-04-06 22:56:27 -07:00
streaming.py	fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)	2026-04-08 20:16:22 -07:00
updates.py	fix: apply_update concurrency lock, boot.js settings-fail guard, dead workspace code, test_updates URL param	2026-04-05 16:20:12 +00:00
upload.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00
workspace.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00