Add Hermes dashboard improvement backlog

dashboard/web/src/components/hermes-ops-panel.tsx

@@ -2,7 +2,7 @@
 
 import { useEffect, useMemo, useState } from 'react';
 import Link from 'next/link';
-import { AlertTriangle, CheckCircle2, Cloud, DatabaseBackup, ExternalLink, Gauge, HardDrive, RefreshCw, ShieldCheck, Timer, Wifi, Activity, CalendarClock, Link2 } from 'lucide-react';
+import { AlertTriangle, CheckCircle2, Cloud, Copy, DatabaseBackup, ExternalLink, Gauge, HardDrive, RefreshCw, ShieldCheck, Timer, Wifi, Activity, CalendarClock, Link2 } from 'lucide-react';
 import { Badge, Button } from '@/components/ui/Primitives';
 import { SectionCard } from '@/components/hermes-shell';
 import { api, type HermesOpsInstance, type HermesOpsSnapshot } from '@/lib/api';
@@ -94,6 +94,10 @@ function InstanceCard({ instance }: { instance: HermesOpsInstance }) {
             Open dashboard <ExternalLink className="ml-2 h-4 w-4" />
           </a>
         </Button>
+        <Button variant="ghost" size="sm" onClick={() => void navigator.clipboard.writeText(instance.dashboard.url)}>
+          <Copy className="mr-2 h-4 w-4" />
+          Copy URL
+        </Button>
       </div>
     </article>
   );
@@ -123,6 +127,17 @@ export function HermesOpsPanel() {
   }, []);
 
   const allHealthy = useMemo(() => snapshot ? snapshot.warnings.length === 0 : false, [snapshot]);
+  const healthyInstances = snapshot
+    ? snapshot.instances.filter((instance) =>
+      instance.gateway.active &&
+      instance.dashboard.active &&
+      instance.backup.timer.active &&
+      instance.backup.repo.clean &&
+      instance.google.workspaceToken
+    ).length
+    : 0;
+  const activeDashboards = snapshot ? snapshot.instances.filter((instance) => instance.dashboard.active).length : 0;
+  const activeBackupTimers = snapshot ? snapshot.instances.filter((instance) => instance.backup.timer.active).length : 0;
 
   return (
     <SectionCard
@@ -146,6 +161,37 @@ export function HermesOpsPanel() {
 
       {snapshot ? (
         <div className="space-y-5">
+          <div className="grid gap-3 md:grid-cols-4">
+            <div className="rounded-2xl border border-[var(--bl-border)] bg-[var(--bl-surface-muted)] p-4">
+              <div className="flex items-center gap-2 text-sm text-[var(--bl-text-secondary)]">
+                <ShieldCheck className="h-4 w-4" />
+                Healthy instances
+              </div>
+              <p className="mt-2 text-2xl font-semibold text-[var(--bl-text-primary)]">{healthyInstances}/2</p>
+            </div>
+            <div className="rounded-2xl border border-[var(--bl-border)] bg-[var(--bl-surface-muted)] p-4">
+              <div className="flex items-center gap-2 text-sm text-[var(--bl-text-secondary)]">
+                <Activity className="h-4 w-4" />
+                Active dashboards
+              </div>
+              <p className="mt-2 text-2xl font-semibold text-[var(--bl-text-primary)]">{activeDashboards}/2</p>
+            </div>
+            <div className="rounded-2xl border border-[var(--bl-border)] bg-[var(--bl-surface-muted)] p-4">
+              <div className="flex items-center gap-2 text-sm text-[var(--bl-text-secondary)]">
+                <CalendarClock className="h-4 w-4" />
+                Active backup timers
+              </div>
+              <p className="mt-2 text-2xl font-semibold text-[var(--bl-text-primary)]">{activeBackupTimers}/2</p>
+            </div>
+            <div className="rounded-2xl border border-[var(--bl-border)] bg-[var(--bl-surface-muted)] p-4">
+              <div className="flex items-center gap-2 text-sm text-[var(--bl-text-secondary)]">
+                <AlertTriangle className="h-4 w-4" />
+                Open warnings
+              </div>
+              <p className="mt-2 text-2xl font-semibold text-[var(--bl-text-primary)]">{snapshot.warnings.length}</p>
+            </div>
+          </div>
+
           <div className="grid gap-3 md:grid-cols-4">
             <div className="rounded-2xl border border-[var(--bl-border)] bg-[var(--bl-surface-muted)] p-4">
               <div className="flex items-center gap-2 text-sm text-[var(--bl-text-secondary)]">

docs/hermes-setup-upgrade-roadmap.md

@@ -21,6 +21,16 @@
 - **Needs manual UX validation:** dashboard feature-by-feature checks, Telegram approval prompt flow, and Telegram media/file delivery.
 - **Needs future workflow adoption:** practicing `delegate_task`, spawned/tmux sessions, worktrees, and Kanban on real tasks before checking them as completed.
 
+## Next To-Dos
+
+The remaining work is now mostly hardening rather than feature delivery:
+
+- finish the GitHub/Gitea least-privilege audit for the root-managed push path
+- decide whether `security.redact_secrets` should be enabled by default
+- document the gateway-session `privacy.redact_pii` policy
+- rotate any credentials that were migrated or exposed during the setup work
+- tighten least-privilege token scopes for GitHub/Gitea, web APIs, and provider keys
+
 ## Purpose
 
 Turn the Hermes setup ideas from the referenced video into a practical ByteLyst upgrade checklist for this VM-backed, Telegram-driven Hermes installation.

docs/hermes_dashboard_roadmap.md

@@ -665,6 +665,19 @@ Known roadmap assumptions to handle safely during implementation:
 
 ---
 
+## Next Dashboard Improvements
+
+Potential follow-up work for Hermes Mission Control:
+
+- snapshot diff view that shows what changed since the last refresh
+- per-instance action row with copy-link and open-dashboard shortcuts
+- warning severity filters for the live ops panel
+- compact trend cards for recent alert volume and backup freshness
+- task-ledger deep links from the ops panel into the most recent Hermes work
+- optional dark/light theme toggle if the broader dashboard shell eventually supports it
+
+---
+
 # Git workflow
 
 Commit incrementally: