feat: Hermes prompt callback endpoint + API key management

- Add /api/prompt/<rid> callback endpoint with dual auth:
  per-request signed URL token + Bearer API key.
- Add HERMES_API_KEY config and runtime key helpers in app.py.
- Update admin request page to copy request details + callback URL.
- Add API key management to admin settings: regenerate, mask, show-once.
- Update .env.example, docker-compose.yml, README, REVIEW docs.
This commit is contained in:
Troll (Hermes Agent) 2026-08-03 17:16:56 +00:00
parent e46893e0b4
commit 6a60aa686c
8 changed files with 242 additions and 35 deletions

View file

@ -17,6 +17,7 @@
# PRICE_PER_VERSION - shown on the receipt page (default 10.00)
# CURRENCY - currency label (default CAD)
# MAX_REVISIONS - default customer revision limit (default 2)
# HERMES_API_KEY - API key Hermes uses to POST prompts back (can be generated from /admin/settings)
# DATABASE - SQLite database path inside the container (default /app/data/booth.db)
# UPLOAD_FOLDER - directory for uploaded MP3s inside the container (default /app/uploads)
# SMTP_HOST - outgoing mail server (default mailroot8.namespro.ca)
@ -39,5 +40,6 @@ HOST_PORT=127.0.0.1:8000
PRICE_PER_VERSION=10.00
CURRENCY=CAD
MAX_REVISIONS=2
HERMES_API_KEY=
DATABASE=/app/data/booth.db
UPLOAD_FOLDER=/app/uploads