JezzaHehn 54f32af4a7 fix(security): require explicit consent before uploading debug logs ... `hermes debug share` printed a privacy notice and then uploaded the report to a public paste service in the same breath — the user never got to say yes or no. Add a consent gate: an interactive [y/N] prompt, a --yes/-y flag to skip it, and a hard refusal (exit 1) in non-interactive contexts (no TTY on stdin) so debug data can't be exposed silently in scripts/CI. - New _confirm_upload() helper gates the actual upload after the notice. - Applied to BOTH upload paths: the public paste.rs path and the --nous Nous-S3 path (the latter is a sibling site the original PR missed). - The /debug slash command passes yes=True (typing /debug is itself the consent action, and input() would hang inside prompt_toolkit). - Rewrote the privacy notice for accuracy: secrets (API keys/tokens/ passwords) ARE force-redacted before upload; PII (display name, platform user ID, verbatim message content, filesystem paths) is NOT, and that URL is public. Fixes #22016. Co-authored-by: liuhao1024 <liuhao1024@users.noreply.github.com>		2026-07-01 00:38:17 -07:00
..
__init__.py
_shared.py
acp.py
auth.py
backup.py
claw.py
config.py
cron.py
dashboard.py	test(cli): pin the hermes serve decoupling contract	2026-06-28 22:11:48 -05:00
debug.py	fix(security): require explicit consent before uploading debug logs	2026-07-01 00:38:17 -07:00
doctor.py
dump.py
gateway.py	fix(gateway): honor --start-now/--start-on-login flags and support non-TTY headless installs	2026-06-28 04:09:54 -07:00
gui.py
hooks.py
import_cmd.py
insights.py
login.py
logout.py
logs.py
mcp.py	fix(mcp): auto-recover from invalid_client on stale OAuth client registration	2026-06-26 00:35:27 -07:00
memory.py
model.py
pairing.py
plugins.py	feat(plugins): enable-time consent prompt for tool_override grant	2026-06-30 04:00:42 -07:00
postinstall.py
profile.py
prompt_size.py
security.py
setup.py
skills.py	fix(skills-hub): surface per-tap providers (NVIDIA/OpenAI/...) in runtime search (#53191)	2026-06-26 11:04:41 -07:00
slack.py
status.py
tools.py
uninstall.py
update.py	fix(update): default pre-update backup to off (#52729)	2026-06-25 16:01:09 -07:00
version.py
webhook.py
whatsapp.py