release: v0.1.4

Author: abundantbeing

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## v0.1.4 — 2026-06-26
+
+- Added editable Hermes session titles, including first-message auto-naming for new Browser sessions.
+- Reworked connection state so the side panel uses live gateway reachability instead of treating a saved API key as connected.
+- Added commit-aware update checks for unpacked builds, including same-version "unpulled commits" guidance.
+- Expanded agent discovery to trusted remote hosts while keeping bearer tokens off non-Hermes probe targets.
+- Refined the default Nous palette toward the ink-blue/soft-white Desktop look.
+
 ## v0.1.1 — 2026-06-24
 
 - Added drag/drop attachments directly into the composer, including PDFs and files.

extension/lib/agent-discovery.mjs

@@ -1,28 +1,73 @@
 // agent-discovery.mjs
-// Discover local Hermes API gateways by probing /health across a configurable
-// localhost port range. This backs the "Connected agent" picker in the side
-// panel settings and is extracted from sidepanel.js for testability.
+// Discover Hermes API gateways by probing /health across a configurable trusted
+// host + port range. This backs the "Connected agent" picker in the side panel
+// settings and is extracted from sidepanel.js for testability.
 
 import { normalizeGatewayUrl } from './common.mjs';
 
 export const DEFAULT_AGENT_PORTS = Object.freeze([8642, 8643, 8644, 8645, 8646]);
 const PROBE_TIMEOUT_MS = 1500;
 
+export function normalizeAgentDiscoveryScheme(value = 'http') {
+  return String(value || '').trim().toLowerCase() === 'https' ? 'https' : 'http';
+}
+
+export function normalizeAgentDiscoveryHost(value = '127.0.0.1') {
+  const raw = String(value || '').trim();
+  if (!raw) return '127.0.0.1';
+  const candidate = /^[a-z][a-z0-9+.-]*:\/\//i.test(raw) ? raw : `http://${raw}`;
+  let parsed;
+  try {
+    parsed = new URL(candidate);
+  } catch {
+    throw new Error('Invalid agent discovery host. Enter a hostname or IP address only.');
+  }
+  if (parsed.username || parsed.password) throw new Error('Agent discovery host must not include userinfo.');
+  const path = parsed.pathname || '/';
+  if (path !== '/' || parsed.search || parsed.hash) throw new Error('Agent discovery host must not include a path, query, or fragment.');
+  if (parsed.port) throw new Error('Agent discovery host must not include a port. Use Agent ports instead.');
+  const host = parsed.hostname || '';
+  if (!host) throw new Error('Agent discovery host is missing.');
+  if (host.includes(':')) return `[${host.replace(/^\[|\]$/g, '')}]`;
+  if (!/^[a-z0-9.-]+$/i.test(host)) throw new Error('Agent discovery host contains unsupported characters.');
+  return host;
+}
+
+async function probeGatewayModelName(baseUrl, { apiKey = '', signal } = {}) {
+  try {
+    const headers = apiKey ? { Authorization: `Bearer ${apiKey}` } : {};
+    const response = await fetch(`${baseUrl}/v1/models`, { headers, signal });
+    if (!response.ok) return '';
+    const payload = await response.json().catch(() => ({}));
+    const first = Array.isArray(payload?.data) ? payload.data[0] : null;
+    return String(first?.id || '').trim();
+  } catch (_error) {
+    return '';
+  }
+}
+
 export async function probeGatewayHealth(baseUrl, { apiKey = '', timeoutMs = PROBE_TIMEOUT_MS } = {}) {
   if (!baseUrl) return { ok: false, error: 'no-url' };
-  const url = `${normalizeGatewayUrl(baseUrl)}/health`;
+  const normalized = normalizeGatewayUrl(baseUrl);
+  const url = `${normalized}/health`;
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   try {
-    const headers = apiKey ? { Authorization: `Bearer ${apiKey}` } : {};
-    const response = await fetch(url, { headers, signal: controller.signal });
+    // First probe is intentionally unauthenticated. Only send the user's bearer
+    // token after the endpoint identifies itself as Hermes. This prevents a typo
+    // or non-Hermes service on a trusted host from receiving the token.
+    const response = await fetch(url, { signal: controller.signal });
     const body = await response.json().catch(() => ({}));
+    const hermes = response.ok && body.platform === 'hermes-agent';
+    let model = body.model || '';
+    if (hermes && !model) model = await probeGatewayModelName(normalized, { apiKey, signal: controller.signal });
     return {
-      ok: response.ok,
+      ok: hermes,
       status: response.status,
       version: body.version || '',
       platform: body.platform || '',
-      model: body.model || '',
+      model,
+      error: hermes ? '' : (response.ok ? 'not-hermes' : ''),
     };
   } catch (error) {
     return { ok: false, error: error?.name === 'AbortError' ? 'timeout' : (error?.message || 'error') };
@@ -34,9 +79,7 @@ export async function probeGatewayHealth(baseUrl, { apiKey = '', timeoutMs = PRO
 export function deriveAgentName(port, probe) {
   if (!probe || !probe.ok) return null;
   if (probe.platform !== 'hermes-agent') return null;
-  // Future: gateway could expose its profile name in /health/detailed.
-  // For now, port-derived name is the only reliable label.
-  return `agent-${port}`;
+  return probe.model || `agent-${port}`;
 }
 
 export async function discoverLocalAgents({
@@ -46,8 +89,10 @@ export async function discoverLocalAgents({
   scheme = 'http',
 } = {}) {
   if (!Array.isArray(ports) || !ports.length) return [];
+  const safeHost = normalizeAgentDiscoveryHost(host);
+  const safeScheme = normalizeAgentDiscoveryScheme(scheme);
   const candidates = ports.map((port) => ({
-    url: `${scheme}://${host}:${port}`,
+    url: `${safeScheme}://${safeHost}:${port}`,
     port,
   }));
   const results = await Promise.all(

extension/lib/common.mjs

@@ -46,6 +46,9 @@ export const DEFAULT_SETTINGS = Object.freeze({
   includePageText: true,
   includeSelectedText: true,
   transcriptProvider: 'default',
+  agentDiscoveryHost: '127.0.0.1',
+  agentDiscoveryScheme: 'http',
+  autoNameSessions: true,
   colorMode: 'dark',
   appearanceTheme: 'nous',
   maxTabs: 12,
@@ -300,6 +303,67 @@ export function isNewerVersion(candidate = '0.0.0', current = '0.0.0') {
   return compareVersionStrings(candidate, current) > 0;
 }
 
+export function formatUpdateStatus({ latestVersion = '0.0.0', currentVersion = '0.0.0', commitsBehind = 0 } = {}) {
+  const latest = String(latestVersion || '').trim().replace(/^v/i, '') || '0.0.0';
+  const current = String(currentVersion || '').trim().replace(/^v/i, '') || '0.0.0';
+  const behind = Math.max(0, Number.parseInt(commitsBehind, 10) || 0);
+  const versionComparison = compareVersionStrings(latest, current);
+  const updateInstructions = 'Pull latest, run npm run build, then reload the unpacked dist/ folder.';
+  if (versionComparison > 0) {
+    const behindNote = behind ? ` ${behind} commit${behind === 1 ? '' : 's'} behind.` : '';
+    return `Update available: v${latest}.${behindNote} ${updateInstructions}`.replace(/\s+/g, ' ').trim();
+  }
+  if (versionComparison < 0) {
+    return `This build is ahead of main: v${current} installed, v${latest} on GitHub.`;
+  }
+  if (behind > 0) {
+    return `v${current} installed, v${latest} latest — but ${behind} unpulled commit${behind === 1 ? '' : 's'}. ${updateInstructions}`;
+  }
+  return `You're up to date on v${current}.`;
+}
+
+export function connectionStateForGateway({
+  gatewayMode = DEFAULT_SETTINGS.gatewayMode,
+  gatewayUrl = DEFAULT_SETTINGS.gatewayUrl,
+  apiKey = '',
+  probeStatus = 'unreachable',
+  remoteWsReadyState = -1,
+} = {}) {
+  const mode = normalizeGatewayMode(gatewayMode);
+  const configured = mode === 'remote-dashboard'
+    ? isUsableRemoteGatewayUrl(gatewayUrl)
+    : Boolean(apiKey) && (mode === 'local-api' || isUsableRemoteGatewayUrl(gatewayUrl));
+  if (!configured) return { state: 'unconfigured', connected: false, pillClass: 'warn' };
+  if (mode === 'remote-dashboard') {
+    if (remoteWsReadyState === 1) return { state: 'connected', connected: true, pillClass: 'ok' };
+    if (remoteWsReadyState === 0 || probeStatus === 'connecting') return { state: 'connecting', connected: false, pillClass: 'warn' };
+    return { state: 'unreachable', connected: false, pillClass: 'error' };
+  }
+  if (probeStatus === 'connected') return { state: 'connected', connected: true, pillClass: 'ok' };
+  if (probeStatus === 'connecting') return { state: 'connecting', connected: false, pillClass: 'warn' };
+  return { state: 'unreachable', connected: false, pillClass: 'error' };
+}
+
+export function isDefaultBrowserSessionTitle(title = '', defaultTitle = DEFAULT_SETTINGS.sessionTitle) {
+  const value = String(title || '').trim();
+  const base = String(defaultTitle || DEFAULT_SETTINGS.sessionTitle).trim();
+  return value === base || value.startsWith(`${base} ·`);
+}
+
+export function autoSessionTitleFromText(value = '', { maxChars = 58 } = {}) {
+  const clean = String(value || '')
+    .replace(/https?:\/\/\S+/gi, ' ')
+    .replace(/\s+/g, ' ')
+    .trim()
+    .replace(/^["'`“”‘’\s]+|["'`“”‘’\s]+$/g, '')
+    .replace(/[?.!,;:]+$/g, '');
+  if (!clean) return '';
+  const lowered = clean.replace(/^(can you|could you|please|pls|hey hermes|hermes)\s+/i, '');
+  const sentence = lowered.split(/(?<=[.!?])\s+/)[0].replace(/[?.!,;:]+$/g, '').trim();
+  const clipped = sentence.length > maxChars ? `${sentence.slice(0, maxChars - 1).trimEnd()}…` : sentence;
+  return clipped ? `${clipped.charAt(0).toUpperCase()}${clipped.slice(1)}` : '';
+}
+
 const MODEL_CONTEXT_FALLBACKS = Object.freeze([
   ['claude-fable', 1_000_000],
   ['claude-opus-4.8', 1_000_000],

extension/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "Hermes Browser Extension",
   "short_name": "Hermes Ext",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Browser-native side panel for Hermes Agent — connect web context to your local or remote Hermes runtime.",
   "minimum_chrome_version": "114",
   "icons": {

extension/sidepanel.css

@@ -60,18 +60,18 @@
 
 :root {
   color-scheme: light dark;
-  --hermes-blue: #0000f2;
-  --hermes-blue-deep: #0000c8;
-  --hermes-paper: #ffffff;
-  --hermes-fg: #f5f5f5;
-  --hermes-ink: #0000f2;
-  --hermes-accent: #edff45;
-  --hermes-bg-rgb: 0, 0, 242;
-  --hermes-panel-rgb: 0, 0, 242;
-  --hermes-paper-rgb: 255, 255, 255;
-  --hermes-fg-rgb: 245, 245, 245;
-  --hermes-ink-rgb: 0, 0, 242;
-  --hermes-accent-rgb: 237, 255, 69;
+  --hermes-blue: #0505e8;
+  --hermes-blue-deep: #03038f;
+  --hermes-paper: #fbfcff;
+  --hermes-fg: #f8faff;
+  --hermes-ink: #0505e8;
+  --hermes-accent: #f8faff;
+  --hermes-bg-rgb: 5, 5, 232;
+  --hermes-panel-rgb: 5, 5, 232;
+  --hermes-paper-rgb: 251, 252, 255;
+  --hermes-fg-rgb: 248, 250, 255;
+  --hermes-ink-rgb: 5, 5, 232;
+  --hermes-accent-rgb: 248, 250, 255;
   --hermes-shadow-rgb: 0, 0, 0;
   --hermes-menu-bg: #102d5f;
   --hermes-line: rgba(var(--hermes-ink-rgb), 0.28);
@@ -110,35 +110,35 @@
 }
 
 html[data-hermes-theme="nous"][data-hermes-mode="dark"] {
-  --hermes-blue: #0000f2;
-  --hermes-blue-deep: #0000c8;
-  --hermes-paper: #ffffff;
-  --hermes-fg: #f5f5f5;
-  --hermes-ink: #0000f2;
-  --hermes-accent: #edff45;
-  --hermes-bg-rgb: 0, 0, 242;
-  --hermes-panel-rgb: 0, 0, 242;
-  --hermes-paper-rgb: 255, 255, 255;
-  --hermes-fg-rgb: 245, 245, 245;
-  --hermes-ink-rgb: 0, 0, 242;
-  --hermes-accent-rgb: 237, 255, 69;
-  --hermes-menu-bg: #102d5f;
+  --hermes-blue: #0505e8;
+  --hermes-blue-deep: #03038f;
+  --hermes-paper: #fbfcff;
+  --hermes-fg: #f8faff;
+  --hermes-ink: #0505e8;
+  --hermes-accent: #f8faff;
+  --hermes-bg-rgb: 5, 5, 232;
+  --hermes-panel-rgb: 5, 5, 232;
+  --hermes-paper-rgb: 251, 252, 255;
+  --hermes-fg-rgb: 248, 250, 255;
+  --hermes-ink-rgb: 5, 5, 232;
+  --hermes-accent-rgb: 248, 250, 255;
+  --hermes-menu-bg: #06115f;
 }
 
 html[data-hermes-theme="nous"][data-hermes-mode="light"] {
-  --hermes-blue: #edf3ff;
-  --hermes-blue-deep: #dbe8ff;
+  --hermes-blue: #f4f7ff;
+  --hermes-blue-deep: #e3ebff;
   --hermes-paper: #ffffff;
-  --hermes-fg: #0000f2;
-  --hermes-ink: #0000f2;
-  --hermes-accent: #b9d2ff;
-  --hermes-bg-rgb: 237, 243, 255;
+  --hermes-fg: #03038f;
+  --hermes-ink: #0505e8;
+  --hermes-accent: #dbe6ff;
+  --hermes-bg-rgb: 244, 247, 255;
   --hermes-panel-rgb: 255, 255, 255;
   --hermes-paper-rgb: 255, 255, 255;
-  --hermes-fg-rgb: 0, 0, 242;
-  --hermes-ink-rgb: 0, 0, 242;
-  --hermes-accent-rgb: 185, 210, 255;
-  --hermes-menu-bg: #f7faff;
+  --hermes-fg-rgb: 3, 3, 143;
+  --hermes-ink-rgb: 5, 5, 232;
+  --hermes-accent-rgb: 219, 230, 255;
+  --hermes-menu-bg: #f9fbff;
 }
 
 html[data-hermes-theme="midnight"][data-hermes-mode="dark"] {

extension/sidepanel.html

@@ -206,14 +206,24 @@ <h3>Active profile</h3>
           <section class="settings-section">
             <h3>Connected agent</h3>
             <p class="hint">
-              Scans localhost for running Hermes API gateways. Each agent can run
-              as a separate gateway process on its own port. Use this to switch
-              between trusted local agents that share the same browser token.
+              Scans a trusted Hermes API host for running gateways. Use localhost for
+              same-machine agents, or a Tailscale host/IP for private remote agents.
             </p>
             <div id="agentList" class="agent-list" role="list" aria-label="Discovered Hermes agents"></div>
             <div class="settings-row">
-              <button id="refreshAgentsButton" class="secondary" type="button">↻ Scan local agents</button>
+              <button id="refreshAgentsButton" class="secondary" type="button">↻ Scan agents</button>
             </div>
+            <label>
+              Agent host
+              <input id="agentHostInput" type="text" autocomplete="off" placeholder="127.0.0.1 or macbook.tailnet.ts.net" />
+            </label>
+            <label>
+              Agent scheme
+              <select id="agentSchemeInput">
+                <option value="http">http</option>
+                <option value="https">https</option>
+              </select>
+            </label>
             <label>
               Agent ports (comma-separated, default 8642-8646)
               <input id="agentPortsInput" type="text" inputmode="numeric" placeholder="8642,8643,8644,8645,8646" />
@@ -294,6 +304,10 @@ <h3 id="connectionTitle">Gateway Connection</h3>
           <input id="sessionTitleInput" name="sessionTitle" type="text" placeholder="Hermes Browser Extension" />
         </label>
 
+        <label class="checkbox-row">
+          <input id="autoNameSessionsInput" type="checkbox" /> Auto-name new browser sessions from the first message
+        </label>
+
         <label>
           Page context depth
           <select id="contextDepthInput" name="contextDepth">