feat: Add login with nexus

[hcastc00]

No description provided.

[tropibot]

Dappnode bot has built and pinned the built packages to an IPFS node, for commit: 209d536

This is a development version and should only be installed for testing purposes.

1. Package hermes-agent.dnp.dappnode.eth

Install link

Hash: /ipfs/QmeAxG1SEP6HqHYxGj37LCZriVe5KyEYhoAHB4yny7MWqn

(by dappnodebot/build-action)

[tropibot]

✅ Package harness passed

Baseline and candidate containers became stably running

Package	Verdict	Reason	Duration	Cleanup
hermes-agent.dnp.dappnode.eth	✅ Passed	Candidate containers stable (candidate_containers_stable)	26m 3s	✅ Passed

Run overview

Context	Value
Pull request	dappnode/DAppNodePackage-Hermes-agent#34
Tested commit	209d53667be0
Candidate artifact	Install on DAppNode · /ipfs/QmeAxG1SEP6HqHYxGj37LCZriVe5KyEYhoAHB4yny7MWqn
Baseline request	automatic
Worker	worker-03
Run ID	gh-pr-34-209d53667be0-5f8ec8df9ba837a9
Execution	2026-07-30T11:42:23.102491643+00:00 → 2026-07-30T12:08:26.816275533+00:00 (✅ Completed)

Baseline vs candidate

Check	Baseline	Candidate
Version	0.1.7	0.1.7
Install	✅ Passed · 1m 32s	✅ Passed · 23m 24s
Hard check	✅ Passed · 3 stable samples	✅ Passed · 3 stable samples
Containers	1 observed	1 observed
Stabilization	11s	11s
Log collection	✅ Passed · 1 container	✅ Passed · 1 container

Container comparison

• Added: none
• Removed: none
• Baseline inventory: DAppNodePackage-hermes-agent.hermes-agent.dnp.dappnode.eth
• Candidate inventory: DAppNodePackage-hermes-agent.hermes-agent.dnp.dappnode.eth
• Baseline non-running states: none
• Candidate non-running states: none
• Deterministic regressions: ✅ none

Container inventory

Baseline

Container	Service	State	Image	Created
DAppNodePackage-hermes-agent.hermes-agent.dnp.dappnode.eth	hermes-agent	✅ Running	hermes-agent.hermes-agent.dnp.dappnode.eth:0.1.7	1785411837

Candidate

Container	Service	State	Image	Created
DAppNodePackage-hermes-agent.hermes-agent.dnp.dappnode.eth	hermes-agent	✅ Running	hermes-agent.hermes-agent.dnp.dappnode.eth:0.1.7	1785413250

Runtime analysis _advisory

⚠️ Suspicious — Heuristic and Nexus analysis: Candidate resolves critical baseline errors (gateway exit, API server refusal, dashboard rejection) but introduces potential security risks: API server runs with unsandboxed local terminal on 0.0.0.0, and dashboard credentials are saved to disk.

Analyzer	Status	Summary
Composite	⚠️ Suspicious	Heuristic and Nexus analysis: Candidate resolves critical baseline errors (gateway exit, API server refusal, dashboard rejection) but introduces potential security risks: API server runs with unsandboxed local terminal on 0.0.0.0, and dashboard credentials are saved to disk.
Heuristic	✅ Clean	No configured candidate-only suspicious signature was found
Nexus	⚠️ Suspicious	Candidate resolves critical baseline errors (gateway exit, API server refusal, dashboard rejection) but introduces potential security risks: API server runs with unsandboxed local terminal on 0.0.0.0, and dashboard credentials are saved to disk.
Baseline evidence	✅ Clean	No configured suspicious signature was found
Candidate evidence	✅ Clean	No configured suspicious signature was found

Severity	Container	Finding	Evidence
⚠️ Warning	hermes-agent	In baseline, API server refused to start due to placeholder key, so no exposure. Candidate starts it but with unsandboxed local terminal, increasing risk of command injection if the API is reached by untrusted networks.	WARNING gateway.platforms.api_server: [Api_Server] API server is network-accessible (0.0.0.0) AND the terminal backend is 'local' (unsandboxed). Agent work dispatched through this endpoint runs as the host user with full terminal/file access. Strongly consider a sandboxed backend (terminal.backend: docker) and firewalling this port to trusted networks only.
⚠️ Warning	hermes-agent	Dashboard credentials are written to a file on disk, which could be read by other processes or leaked, representing a security regression compared to baseline where dashboard credentials were not recorded (dashboard failed to start).	Patched config.yaml for DAppNode (api_port=3000, dashboard_auth=basic, whatsapp_bridge_port=3010); dashboard credentials saved to /opt/data/dashboard-login.txt

Cleanup and diagnostics

Check	Result
Cleanup	✅ Passed
Leftover packages	none
Cleanup error	none

✅ No run errors were recorded.

---

_{Deterministic checks decide the verdict. Runtime log analysis is advisory. TropiBot publishes bounded summaries and never posts raw logs.}

[3alpha]

/package-harness retry

[tropibot]

🔁 Package-harness test queued by @3alpha for hermes-agent.dnp.dappnode.eth.

[3alpha]

/package-harness retry

[tropibot]

🔁 Package-harness test queued by @3alpha for hermes-agent.dnp.dappnode.eth.