Secure Env Ingress

Platform-independent, profile-scoped HTTPS forms for adding missing dotenv variables from Hermes messaging gateways. /senv name KEY1,KEY2 defines a form; /senv name reopens it; /senv status, /senv cancel, and /senv setup provide readiness, invalidation and installation assistance. Never put values in chat. Form values travel browser → HTTPS → add-only target, not through the agent.

This is the runtime-only catalog distribution, without privileged certificate installers. Python 3.11+, Linux/POSIX and trusted IP-address TLS material are required. Registration uses the normalized pre_gateway_dispatch hook plus the generic plugin slash command; no Telegram-specific handler is installed. Set allowed_owners: {discord: ["exact-opaque-user-id"]} for platform-specific owners, or keep legacy allowed_telegram_user_ids: [123456789] for Telegram. Chat allowlists alone do not grant ownership. Ordinary browser forms need no Telegram token; Telegram Mini App launch is unavailable through this generic command path.

Bearer-link warning: the one-use HTTPS URL is returned to the originating chat. Anyone who reads the link can use it. Send /senv only in private or operator-trusted groups/threads, never in public or untrusted rooms. Never forward or log links. If the agent is busy, the host may queue, steer, interrupt or interpret the command; wait for completion or use /stop first, then send a fresh /senv. Do not assume busy commands avoid the model. A missing plugin cannot protect values already pasted into chat.

/senv setup sends a fixed installation-only request using the host's existing injection permission, or supplies copyable ordinary-message text when injection is denied. Privileged changes need separate approval. No listener starts on import; TLS, target binding and owner authorization are checked before issuing a capability. Existing keys are never overwritten.

See the full setup, security boundaries and test instructions. Administrative helpers are separately reviewed operator tools, not catalog contents. Never run privileged helpers from a runtime-user-writable checkout.