Commit Graph
2 Commits
Author SHA1 Message Date
M57andhy4ri 26b104b2bb [feature] issue #634: HTTPS + reverse-proxy server endpoint support (#638)
* [feature] issue #634: HTTPS + reverse-proxy server endpoint support

- Add ServerEndpoint model (scheme-aware base URL, resolve/webSocketUrl/relativeRequestPath, cleartext policy)
- AuthManager: baseUrl is canonical; setHost/setPort derive from endpoint; endpointForBuild() for scheme-aware URLs
- ApiClient/CookieManager/HermesWsClient: route through ServerEndpoint (no hardcoded http://)
- Data migration: ServerUrlMigration converts legacy host/port to baseUrl
- UI: Connect/AuthLogin/Settings now use a single Server URL field with transport warning
- Build: ALLOW_CLEARTEXT buildConfigField + manifest placeholder for dev
- Tests: ServerEndpointTest + ServerUrlMigrationTest; adapt existing suite to baseUrl API

Co-Authored-By: M57 <Hy4ri@users.noreply.github.com>

* fix(authlogin): basic-auth derives token automatically, no manual entry

connectBasicAuth() built a fresh OkHttpClient for the password-login call and
a different one for the ws-ticket call, so the Set-Cookie from
/auth/password-login (the session token lives in the cookie, not the JSON body)
never reached /api/auth/ws-ticket. That 401'd the ticket request, returned null,
and the UI fell back to asking the user to paste a token.

Both calls now use the shared OkHttpProvider.probe client (same CookieManager
jar), so the session cookie flows through and the WS ticket mints automatically —
matching the dashboard contract (routes.py: password-login sets Set-Cookie,
ws-ticket requires it).

Add AuthLoginBasicAuthFlowTest proving the cookie propagates on the shared
client (and that ws-ticket 401s without it).

Fixes the basic-auth token prompt reported against issue #634.

* chore: remove TASK-634-TESTS.md (stray task-tracking doc, not part of feature)

* ci: broaden .gitguardian.yml test-file ignores (unit + instrumented + variant dirs)

* feat(authlogin): smart auth-mode detection from /api/status + drop pairing-string login

- Replace 302-sniff probe with authoritative GET /api/status read
  (auth_required + auth_providers) to derive DashboardAuthMode.
- Add OAUTH mode (stubbed, 'coming soon' UI, TODO tracks issue #639).
- Render login UI by detected mode: token (loopback), username+password
  (basic/gated), or OAuth notice.
- Remove legacy pairing-string box + onPairingString/applyLegacyPairing.
- Extract internal deriveAuthMode() + add 5 unit tests.

Closes nothing; OAuth tracked in #639.

* fix(chat): don't block WS connect on empty token in gated (ticket) mode

connectWebSocket() gated on getToken() != null, correct for loopback
(token) mode but wrong for gated (ticket) mode: the ticket is minted
fresh by HermesWsClient.refreshWsTicketIfNeeded() from the persisted
session cookie, so getToken() is expected empty at connect time. The
early return left the WS unopened -> DISCONNECTED -> chat showed
'reconnect' immediately after basic-auth login.

Only require a non-blank token in non-gated mode.

Fixes #640.

* test: remove onPairingString test cases for deleted pairing-login path

The pairing-string login (onPairingString/applyLegacyPairing) was removed
from ConnectViewModel, so the 5 tests that exercised it (3 in
ConnectViewModelTest, 2 in E2eIntegrationTest) no longer compile. Remove
them. Also drop the now-orphaned connect_pairing_string from values-ko.

Fixes the Unit & Integration Tests CI failure on PR #638.

---------

Co-authored-by: hy4ri <hy4ri@users.noreply.github.com>
2026-07-20 17:26:10 +03:00
846a9380e2 feat(#434): System tab 1:1 parity with dashboard (#461)
* feat(#434): add system tab model files

* feat(#434): add system API endpoints

* feat(#434): rewrite SystemViewModel with full parity

* feat(#434): add system screen UI and string resources

* feat(#434): update tests for new SystemStatsResponse & ViewModel

* fix(#434): fix compile errors — nullable Boolean, SmallFilledTonalButton -> FilledTonalButton

* fix(#434): fix old SystemStatsResponse refs in ChatViewModel, wrap sections in item{} blocks

* fix(#434): rename sections to lowercase, fix LazyListScope extensions

* fix(#434): wrap hook dialog in item{}, pass spacing param to actionLogSection

* fix(#434): update HermesApiServiceTest for new typed SystemStatsResponse

* fix(#434): fix E2E test coroutine timing, remove outdated Gson edge-case test

* fix(#434): fix JUnit 4 assertNotNull argument order

* fix(#434): simplify HermesApiServiceTest, restore all mocks in E2e test

* fix(#434): remove Gson-edge-case test, fix E2E test dispatcher wiring

- Removed testGetSystemStats_nonNumericPercent_returnsNull: tests Gson
  type-coercion behavior, not app logic — throws JsonSyntaxException
- Fixed E2eIntegrationTest dispatcher: mock Dispatchers.IO with answers {}
  that returns the current Dispatchers.Main dynamically, so runTest's
  per-test dispatcher override is honored by both viewModelScope.launch
  and async(Dispatchers.IO) blocks → advanceUntilIdle() advances all work
- Removed Dispatchers.Main static mock so runTest can override it

* fix(#434): fix E2E test dispatcher for SystemViewModel

- Removed Dispatchers.setMain + testDispatcher field from setUp
- runTest handles Dispatchers.Main automatically — don't override it
- Mock Dispatchers.IO with answers { Dispatchers.Main } so it
  dynamically resolves to whatever Main is at call time (runTest's
  TestScope dispatcher)
- This ensures viewModelScope.launch and async(Dispatchers.IO) both
  run on the same TestScope dispatcher, making advanceUntilIdle()
  effective for all work

* fix(#434): use runTest(testDispatcher) for SystemViewModel test

The SystemViewModel.loadAll() uses async(Dispatchers.IO) inside
coroutineScope { }. With the mocked Dispatchers setup, both Main and
IO return testDispatcher, but runTest()'s default TestScope uses a
different dispatcher instance whose advanceUntilIdle() can't advance
testDispatcher's scheduler.

Fix: pass testDispatcher to runTest() so the TestScope's scheduler
matches testDispatcher's scheduler, making advanceUntilIdle()
effective for all async work.

* fix(#434): align test assertion with toast message change

The SystemViewModel.triggerBackup() toast message was changed from
'Backup triggered successfully' to 'Backup triggered', but the
E2eIntegrationTest assertion wasn't updated, causing a
ComparisonFailure on the unit-tests CI job.

* fix(#434): address review issues

- Fix #1: Change triggerBackup() return type from Unit to ActionResponse
  so backupArchive is captured, enabling the download button
- Fix #2: Replace deprecated LocalClipboardManager with LocalClipboard
  suspend API (removes CI deprecation warning)
- Fix #3: Consolidate redundant 'Hermes version' InfoRow in gateway
  section (sessions + PID shown in one row)
- Remove orphaned system_gateway_state_pid string resource
- Fix import ordering for ktlint compliance

* fix(#434): revert LocalClipboard change, use @Suppress('DEPRECATION') instead

LocalClipboard.setText is not available in the Compose version used
by the project. Reverting to LocalClipboardManager with a suppress
annotation to keep the deprecation warning clean without breaking
compilation.

---------

Co-authored-by: M57 <hy4ri@users.noreply.github.com>
Co-authored-by: Hermes Agent <hermes@agent.local>
2026-07-03 21:27:20 +03:00