Update README.md

docs: rewrite README + add suspension disclaimer

revert: remove Android app /api/sessions route + Origin strip

fix(webui): only route /api/sessions to gateway for Bearer-auth requests

fix(gateway): strip Origin header for gateway proxy — CORS 403

feat: route /api/sessions to gateway for Android app compat

fix(restore): exempt .db files from size cap — state.db was 52MB > 50MB limit

chore: trigger HF Space rebuild (db-wal fix not yet built)

fix(restore): stop excluding state.db-wal and state.db-shm from backup

fix(desktop-app): derive session token from GATEWAY_TOKEN (deterministic)

fix(desktop-app): allow Electron file:// + localhost:port WS origins

feat: add ollama/ prefix + opt-in WRITE_SECRETS_TO_ENV

feat: persist OAuth tokens + all ~/.hermes state across restarts

feat: stable dashboard session token for desktop app persistence

fix(regression): back up config.yaml again, redact api_key on upload

hotfix: revert setsid bash -c, use subshells + pkill -P for shutdown

hotfix: cd to known-good dir before setsid subshells

hotfix: export WEBUI_REPO so setsid subshell can expand it

quality: dead code, dedup, constants, docs (audit Group E)

bugfix: error handlers, timeouts, global guards (audit Group D)

perf: probes, keep-alive agent, sync hot path, CF idempotency (audit Group C)

robustness: crash recovery, signal handling, atomicity (audit Group B)

security: close auth bypasses + secret leaks (audit Group A)

perf(restore): skip excluded files at HF Hub + parallelize downloads

fix(config): strip deprecated TERMINAL_CWD from .env on boot

fix(gateway): cd to known-good dir before launch to fix getcwd() loop

fix(gateway): use 'hermes gateway' foreground mode for v0.17.0+

fix(pty): set dashboard cwd to /workspace for desktop file browser

fix(debug): inline Python probe instead of COPY-dependent script file

feat(debug): add Python traceback probe for /api/model/options 500

fix(debug): auto-extract session token for /hm/debug/model-options probe

feat(debug): add /hm/debug/model-options to diagnose 500 error

feat(logs): add /hm/logs endpoint to view service logs without HF Pro

fix(proxy): rewrite Origin header for all proxied requests to dashboard

fix(ws): rewrite Host and Origin headers in WebSocket upgrade to dashboard

fix(proxy): buffer request bodies to avoid chunked Transfer-Encoding, add HERMES_WEBUI_TRUST_FORWARDED_HOST=1

fix(docker): restore proper Dockerfile and add venv chown for hermes user

fix(docker): properly encode Dockerfile and add venv chown for hermes user

fix(permissions): chown /opt/hermes/.venv to hermes so auto-updates work

Update Dockerfile

docs(sync): tighten Xet flag comment - we don't double-set the legacy var

chore(sync): replace deprecated HF_HUB_ENABLE_HF_TRANSFER with HF_XET_HIGH_PERFORMANCE

feat(sync): warn when keys live in ephemeral .env on a Space

fix(router): explicit 404 for legacy /api/sessions/<id>/chat/stream

feat(router): add /hmd passthrough for off-Space dashboard access

perf(hermes-sync): change-driven backups (poll/debounce, 60s ceiling)

Update README.md

Update README.md

Add files via upload

Update README.md